@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/notifications/lib/notificationService.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/lib/notificationService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError, conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport { Notification, type NotificationStatus } from '../data/entities'\nimport type { CreateNotificationInput, CreateBatchNotificationInput, CreateRoleNotificationInput, CreateFeatureNotificationInput, ExecuteActionInput } from '../data/validators'\nimport type { NotificationPollData } from '@open-mercato/shared/modules/notifications/types'\nimport { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from './events'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  buildNotificationEntity,\n  emitNotificationCreated,\n  emitNotificationCreatedBatch,\n  type NotificationContentInput,\n  type NotificationTenantContext,\n} from './notificationFactory'\nimport { toNotificationDto } from './notificationMapper'\nimport { buildNotificationReadScopeWhere } from './notificationScope'\nimport {\n  getRecipientUserIdsForFeature,\n  getRecipientUserIdsForRole,\n  getScopedNotificationRecipientUserIds,\n} from './notificationRecipients'\nimport { assertSafeNotificationHref, sanitizeNotificationActions } from './safeHref'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('notifications').child({ component: 'service' })\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nconst UNIQUE_NOTIFICATION_ACTIVE_STATUSES: NotificationStatus[] = ['unread', 'read', 'actioned']\nconst NOTIFICATION_RESOURCE_KIND = 'notifications.notification'\n\nfunction normalizeOrgScope(organizationId: string | null | undefined): string | null {\n  return organizationId ?? null\n}\n\nasync function invalidateNotificationCache(\n  container: NotificationServiceDeps['container'],\n  ctx: Pick<NotificationServiceContext, 'tenantId' | 'organizationId'>,\n  reason: string,\n  notificationId?: string,\n): Promise<void> {\n  if (!container) return\n  await invalidateCrudCache(\n    container as Parameters<typeof invalidateCrudCache>[0],\n    NOTIFICATION_RESOURCE_KIND,\n    {\n      id: notificationId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n    },\n    ctx.tenantId,\n    reason,\n  )\n}\n\nasync function assertNotificationRecipientsInScope(\n  em: EntityManager,\n  recipientUserIds: string[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  const scopedRecipientUserIds = await getScopedNotificationRecipientUserIds(\n    getDb(em),\n    ctx.tenantId,\n    normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n  )\n\n  if (scopedRecipientUserIds.length !== recipientUserIds.length) {\n    throw new CrudHttpError(404, { error: 'Notification recipient not found' })\n  }\n}\n\nfunction applyNotificationContent(\n  notification: Notification,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n) {\n  const actions = sanitizeNotificationActions(input.actions)\n  const linkHref = assertSafeNotificationHref(input.linkHref)\n\n  notification.recipientUserId = recipientUserId\n  notification.type = input.type\n  notification.titleKey = input.titleKey\n  notification.bodyKey = input.bodyKey\n  notification.titleVariables = input.titleVariables\n  notification.bodyVariables = input.bodyVariables\n  notification.title = input.title || input.titleKey || ''\n  notification.body = input.body\n  notification.icon = input.icon\n  notification.severity = input.severity ?? 'info'\n  notification.actionData = actions\n    ? {\n        actions,\n        primaryActionId: input.primaryActionId,\n      }\n    : null\n  notification.sourceModule = input.sourceModule\n  notification.sourceEntityType = input.sourceEntityType\n  notification.sourceEntityId = input.sourceEntityId\n  notification.linkHref = linkHref\n  notification.groupKey = input.groupKey\n  notification.expiresAt = input.expiresAt ? new Date(input.expiresAt) : null\n  notification.tenantId = ctx.tenantId\n  notification.organizationId = normalizeOrgScope(ctx.organizationId)\n  notification.status = 'unread'\n  notification.readAt = null\n  notification.actionedAt = null\n  notification.dismissedAt = null\n  notification.actionTaken = null\n  notification.actionResult = null\n  notification.createdAt = new Date()\n}\n\nasync function findScopedNotificationOrThrow(\n  em: EntityManager,\n  notificationId: string,\n  ctx: NotificationServiceContext,\n): Promise<Notification> {\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: notificationId,\n      recipientUserId: ctx.userId,\n      tenantId: ctx.tenantId,\n    },\n    undefined,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n    },\n  )\n  if (!notification) {\n    throw new CrudHttpError(404, { error: 'Notification not found' })\n  }\n  return notification\n}\n\nasync function emitNotificationSseEvents(\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> },\n  notifications: Notification[],\n  ctx: NotificationServiceContext,\n  recipientUserIds: string[],\n): Promise<void> {\n  await eventBus.emit(NOTIFICATION_SSE_EVENTS.BATCH_CREATED, {\n    tenantId: ctx.tenantId,\n    organizationId: normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n    count: notifications.length,\n  })\n\n  for (const notification of notifications) {\n    await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      recipientUserId: notification.recipientUserId,\n      notification: toNotificationDto(notification),\n    })\n  }\n}\n\nasync function createOrRefreshNotification(\n  em: EntityManager,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n): Promise<Notification> {\n  if (input.groupKey && input.groupKey.trim().length > 0) {\n    const orgScope = normalizeOrgScope(ctx.organizationId) ?? 'global'\n    const lockKey = `notifications:${ctx.tenantId}:${orgScope}:${recipientUserId}:${input.type}:${input.groupKey}`\n    try {\n      const db = getDb(em)\n      await sql`select pg_advisory_xact_lock(hashtext(${lockKey}))`.execute(db)\n    } catch {\n      // If advisory locks are unavailable, continue with best-effort dedupe.\n    }\n\n    const existing = await em.findOne(Notification, {\n      recipientUserId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n      type: input.type,\n      groupKey: input.groupKey,\n      status: { $in: UNIQUE_NOTIFICATION_ACTIVE_STATUSES },\n    }, {\n      orderBy: { createdAt: 'desc' },\n    })\n\n    if (existing) {\n      applyNotificationContent(existing, input, recipientUserId, ctx)\n      return existing\n    }\n  }\n\n  return buildNotificationEntity(em, input, recipientUserId, ctx)\n}\n\nexport interface NotificationServiceContext {\n  tenantId: string\n  organizationId?: string | null\n  organizationIds?: string[] | null\n  userId?: string | null\n}\n\nexport type CreateFeatureNotificationServiceInput = CreateFeatureNotificationInput & {\n  restrictRecipientsToOrganization?: boolean\n}\n\nexport interface NotificationService {\n  create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>\n  createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForFeature(input: CreateFeatureNotificationServiceInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  markAllAsRead(ctx: NotificationServiceContext): Promise<number>\n  dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  restoreDismissed(\n    notificationId: string,\n    status: 'read' | 'unread' | undefined,\n    ctx: NotificationServiceContext\n  ): Promise<Notification>\n  executeAction(\n    notificationId: string,\n    input: ExecuteActionInput,\n    ctx: NotificationServiceContext\n  ): Promise<{ notification: Notification; result: unknown }>\n  getUnreadCount(ctx: NotificationServiceContext): Promise<number>\n  getPollData(ctx: NotificationServiceContext, since?: string): Promise<NotificationPollData>\n  cleanupExpired(): Promise<number>\n  deleteBySource(\n    sourceEntityType: string,\n    sourceEntityId: string,\n    ctx: NotificationServiceContext\n  ): Promise<number>\n}\n\nexport interface NotificationServiceDeps {\n  em: EntityManager\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> }\n  commandBus?: {\n    execute: (\n      commandId: string,\n      options: { input: unknown; ctx: unknown; metadata?: unknown }\n    ) => Promise<{ result: unknown }>\n  }\n  container?: { resolve: (name: string) => unknown }\n}\n\nexport function createNotificationService(deps: NotificationServiceDeps): NotificationService {\n  const { em: rootEm, eventBus, commandBus, container } = deps\n\n  return {\n    async create(input, ctx) {\n      const { recipientUserId, ...content } = input\n      const writeEm = rootEm.fork()\n      const notification = await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, [recipientUserId], ctx)\n        const entity = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n        await tx.flush()\n        return entity\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreated(eventBus, notification, ctx)\n      await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n        tenantId: notification.tenantId,\n        organizationId: notification.organizationId ?? null,\n        recipientUserId: notification.recipientUserId,\n        notification: toNotificationDto(notification),\n      })\n\n      return notification\n    },\n\n    async createBatch(input, ctx) {\n      const recipientUserIds = Array.from(new Set(input.recipientUserIds))\n      const { recipientUserIds: _recipientUserIds, ...content } = input\n      const notifications: Notification[] = []\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, recipientUserIds, ctx)\n        for (const recipientUserId of recipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, recipientUserIds)\n\n      return notifications\n    },\n\n    async createForRole(input, ctx) {\n      const em = rootEm.fork()\n\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForRole(db, ctx.tenantId, input.roleId)\n      if (recipientUserIds.length === 0) {\n        return []\n      }\n\n      const { roleId: _roleId, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of uniqueRecipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, uniqueRecipientUserIds)\n\n      return notifications\n    },\n\n    async createForFeature(input, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForFeature(db, ctx.tenantId, input.requiredFeature)\n\n      if (recipientUserIds.length === 0) {\n        debug('No users found with feature:', input.requiredFeature, 'in tenant:', ctx.tenantId)\n        return []\n      }\n\n      let authorizedRecipientUserIds = recipientUserIds\n      if (input.restrictRecipientsToOrganization) {\n        const uniqueCandidateUserIds = Array.from(new Set(recipientUserIds))\n        if (!ctx.organizationId) {\n          logger.warn('Organization-restricted feature fan-out skipped because organization scope is missing', {\n            tenantId: ctx.tenantId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        if (uniqueCandidateUserIds.length > 200) {\n          logger.warn('Organization-restricted feature fan-out skipped because the candidate cap was exceeded', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            candidateCount: uniqueCandidateUserIds.length,\n            candidateCap: 200,\n          })\n          return []\n        }\n\n        if (!container) {\n          logger.warn('Organization-restricted feature fan-out skipped because the DI container is unavailable', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        try {\n          const rbacService = container.resolve('rbacService') as {\n            userHasAllFeatures: (\n              userId: string,\n              features: string[],\n              scope: { tenantId: string | null; organizationId: string | null },\n            ) => Promise<boolean>\n          }\n          const allowedRecipientUserIds: string[] = []\n          for (let offset = 0; offset < uniqueCandidateUserIds.length; offset += 10) {\n            const candidates = uniqueCandidateUserIds.slice(offset, offset + 10)\n            const results = await Promise.all(candidates.map(async (recipientUserId) => ({\n              recipientUserId,\n              allowed: await rbacService.userHasAllFeatures(\n                recipientUserId,\n                [input.requiredFeature],\n                { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null },\n              ),\n            })))\n            for (const result of results) {\n              if (result.allowed) allowedRecipientUserIds.push(result.recipientUserId)\n            }\n          }\n          authorizedRecipientUserIds = allowedRecipientUserIds\n        } catch (err) {\n          logger.warn('Organization-restricted feature fan-out skipped because RBAC filtering failed', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            err,\n          })\n          return []\n        }\n\n        if (authorizedRecipientUserIds.length === 0) {\n          debug('No users found with feature in organization:', input.requiredFeature, ctx.organizationId)\n          return []\n        }\n      }\n\n      debug('Creating notifications for', authorizedRecipientUserIds.length, 'user(s) with feature:', input.requiredFeature)\n\n      const {\n        requiredFeature: _requiredFeature,\n        restrictRecipientsToOrganization: _restrictRecipientsToOrganization,\n        ...content\n      } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(authorizedRecipientUserIds))\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const recipientUserId of uniqueRecipientUserIds) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx, uniqueRecipientUserIds)\n\n      return notifications\n    },\n\n    async markAsRead(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status === 'unread') {\n        notification.status = 'read'\n        notification.readAt = new Date()\n        await em.flush()\n\n        await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n      }\n\n      return notification\n    },\n\n    async markAllAsRead(ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const applyScope = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n        let chain = q\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'unread')\n        if (ctx.organizationId) {\n          chain = chain.where('organization_id' as any, '=', ctx.organizationId)\n        }\n        return chain\n      }\n\n      const targetRows = await applyScope(\n        db\n          .selectFrom('notifications' as any)\n          .select([\n            'id' as any,\n            'organization_id' as any,\n            'recipient_user_id' as any,\n          ]),\n      ).execute() as Array<{ id: string }>\n\n      if (!targetRows.length) {\n        return 0\n      }\n\n      const updateResult = await applyScope(\n        db.updateTable('notifications' as any).set({\n          status: 'read',\n          read_at: sql`now()`,\n        } as any) as any,\n      ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n      const result = Number(updateResult?.numUpdatedRows ?? targetRows.length)\n\n      await invalidateNotificationCache(container, ctx, 'updated')\n\n      const notifications = await findWithDecryption(em, Notification, {\n        id: { $in: targetRows.map((row) => row.id) },\n      }, undefined, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      })\n\n      for (const notification of notifications) {\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return result\n    },\n\n    async dismiss(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      notification.status = 'dismissed'\n      notification.dismissedAt = new Date()\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.DISMISSED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return notification\n    },\n\n    async restoreDismissed(notificationId, status, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status !== 'dismissed') {\n        return notification\n      }\n\n      const targetStatus = status ?? 'read'\n      notification.status = targetStatus\n      notification.dismissedAt = null\n\n      if (targetStatus === 'unread') {\n        notification.readAt = null\n      } else if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.RESTORED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: targetStatus,\n      })\n\n      return notification\n    },\n\n    async executeAction(notificationId, input, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      const actionData = notification.actionData\n      const action = actionData?.actions?.find((a) => a.id === input.actionId)\n\n      if (!action) {\n        throw new Error('Action not found')\n      }\n\n      // Reject an already-actioned notification before dispatching the command,\n      // so a retry or double-click cannot re-run the side effect.\n      if (notification.status === 'actioned') {\n        throw conflict('Notification action already executed')\n      }\n\n      const actionedAt = new Date()\n      const previousStatus = notification.status\n      const previousActionedAt = notification.actionedAt ?? null\n      const previousActionTaken = notification.actionTaken ?? null\n\n      // Atomically claim the notification so only one concurrent request can run\n      // the side-effecting command. The conditional UPDATE matches only while the\n      // notification has not been actioned yet; a losing request updates 0 rows.\n      const claimResult = (await getDb(em)\n        .updateTable('notifications' as any)\n        .set({\n          status: 'actioned',\n          actioned_at: actionedAt,\n          action_taken: input.actionId,\n        } as any)\n        .where('id' as any, '=', notification.id)\n        .where('recipient_user_id' as any, '=', ctx.userId as any)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .where('status' as any, '!=', 'actioned')\n        .executeTakeFirst()) as { numUpdatedRows?: bigint | number } | undefined\n\n      if (Number(claimResult?.numUpdatedRows ?? 0) === 0) {\n        throw conflict('Notification action already executed')\n      }\n\n      // The claim is provisional: if the side-effecting command fails, the action\n      // never actually completed, so release the claim to its prior state. This\n      // lets the user retry the action instead of the notification being locked as\n      // `actioned` forever. Only release while we still own the claim\n      // (status = 'actioned'), so a concurrent winner's state is never clobbered.\n      const releaseClaim = async () => {\n        await getDb(em)\n          .updateTable('notifications' as any)\n          .set({\n            status: previousStatus,\n            actioned_at: previousActionedAt,\n            action_taken: previousActionTaken,\n          } as any)\n          .where('id' as any, '=', notification.id)\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'actioned')\n          .executeTakeFirst()\n      }\n\n      let result: unknown = null\n\n      if (action.commandId && commandBus && container) {\n        const commandInput = {\n          id: notification.sourceEntityId,\n          ...input.payload,\n        }\n\n        // Build a CommandRuntimeContext from the notification service context\n        const commandCtx = {\n          container,\n          auth: {\n            sub: ctx.userId,\n            tenantId: ctx.tenantId,\n            orgId: ctx.organizationId,\n          },\n          organizationScope: null,\n          selectedOrganizationId: ctx.organizationId ?? null,\n          organizationIds: ctx.organizationId ? [ctx.organizationId] : null,\n        }\n\n        let commandResult: { result: unknown }\n        try {\n          commandResult = await commandBus.execute(action.commandId, {\n            input: commandInput,\n            ctx: commandCtx,\n            metadata: {\n              tenantId: ctx.tenantId,\n              organizationId: ctx.organizationId,\n              resourceKind: 'notifications',\n            },\n          })\n        } catch (err) {\n          // Never let a rollback failure mask the original command error \u2014 the\n          // caller needs the real failure to decide whether to retry.\n          try {\n            await releaseClaim()\n          } catch (releaseErr) {\n            debug('failed to release notification action claim', releaseErr)\n          }\n          throw err\n        }\n\n        result = commandResult.result\n      }\n\n      notification.status = 'actioned'\n      notification.actionedAt = actionedAt\n      notification.actionTaken = input.actionId\n      notification.actionResult = result as Record<string, unknown>\n\n      if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.ACTIONED, {\n        notificationId: notification.id,\n        actionId: input.actionId,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return { notification, result }\n    },\n\n    async getUnreadCount(ctx) {\n      const em = rootEm.fork()\n      return em.count(Notification, {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: 'unread',\n        ...buildNotificationReadScopeWhere(ctx),\n      })\n    },\n\n    async getPollData(ctx, since) {\n      const em = rootEm.fork()\n      const filters: Record<string, unknown> = {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        ...buildNotificationReadScopeWhere(ctx),\n      }\n\n      if (since) {\n        filters.createdAt = { $gt: new Date(since) }\n      }\n\n      const [notifications, unreadCount] = await Promise.all([\n        em.find(Notification, filters, {\n          orderBy: { createdAt: 'desc' },\n          limit: 50,\n        }),\n        em.count(Notification, {\n          recipientUserId: ctx.userId,\n          tenantId: ctx.tenantId,\n          status: 'unread',\n          ...buildNotificationReadScopeWhere(ctx),\n        }),\n      ])\n\n      const recent = notifications.map(toNotificationDto)\n      const hasNew = since ? recent.length > 0 : false\n\n      return {\n        unreadCount,\n        recent,\n        hasNew,\n        lastId: recent[0]?.id,\n      }\n    },\n\n    async cleanupExpired() {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const affectedScopes = await db\n        .selectFrom('notifications' as any)\n        .select([\n          'tenant_id' as any,\n          'organization_id' as any,\n        ])\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .distinct()\n        .execute() as Array<{ tenant_id: string; organization_id: string | null }>\n\n      if (!affectedScopes.length) return 0\n\n      const updateResult = await db\n        .updateTable('notifications' as any)\n        .set({\n          status: 'dismissed',\n          dismissed_at: sql`now()`,\n        } as any)\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n\n      for (const scope of affectedScopes) {\n        await invalidateNotificationCache(container, {\n          tenantId: scope.tenant_id,\n          organizationId: scope.organization_id,\n        }, 'updated')\n      }\n\n      return Number(updateResult?.numUpdatedRows ?? 0)\n    },\n\n    async deleteBySource(sourceEntityType, sourceEntityId, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const deleteResult = await db\n        .deleteFrom('notifications' as any)\n        .where('source_entity_type' as any, '=', sourceEntityType)\n        .where('source_entity_id' as any, '=', sourceEntityId)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .executeTakeFirst() as { numDeletedRows?: bigint | number } | undefined\n\n      const deletedCount = Number(deleteResult?.numDeletedRows ?? 0)\n      if (deletedCount > 0) {\n        await invalidateNotificationCache(container, ctx, 'deleted')\n      }\n\n      return deletedCount\n    },\n  }\n}\n\n/**\n * Helper to create notification service from a DI container.\n * Use this in API routes and commands to avoid DI resolution issues.\n */\nexport function resolveNotificationService(container: {\n  resolve: (name: string) => unknown\n}): NotificationService {\n  const em = container.resolve('em') as EntityManager\n  const eventBus = container.resolve('eventBus') as { emit: (event: string, payload: unknown) => Promise<void> }\n\n  // commandBus may not be registered in all contexts, so resolve it safely\n  let commandBus: NotificationServiceDeps['commandBus']\n  try {\n    commandBus = container.resolve('commandBus') as typeof commandBus\n  } catch {\n    // commandBus not available - actions with commandId won't work\n    commandBus = undefined\n  }\n\n  return createNotificationService({ em, eventBus, commandBus, container })\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,eAAe,gBAAgB;AACxC,SAAS,2BAA2B;AACpC,SAAS,oBAA6C;AAGtD,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B,mCAAmC;AACxE,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAE3E,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,MAAM,sCAA4D,CAAC,UAAU,QAAQ,UAAU;AAC/F,MAAM,6BAA6B;AAEnC,SAAS,kBAAkB,gBAA0D;AACnF,SAAO,kBAAkB;AAC3B;AAEA,eAAe,4BACb,WACA,KACA,QACA,gBACe;AACf,MAAI,CAAC,UAAW;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACtD;AAAA,IACA,IAAI;AAAA,IACJ;AAAA,EACF;AACF;AAEA,eAAe,oCACb,IACA,kBACA,KACe;AACf,QAAM,yBAAyB,MAAM;AAAA,IACnC,MAAM,EAAE;AAAA,IACR,IAAI;AAAA,IACJ,kBAAkB,IAAI,cAAc;AAAA,IACpC;AAAA,EACF;AAEA,MAAI,uBAAuB,WAAW,iBAAiB,QAAQ;AAC7D,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AACF;AAEA,SAAS,yBACP,cACA,OACA,iBACA,KACA;AACA,QAAM,UAAU,4BAA4B,MAAM,OAAO;AACzD,QAAM,WAAW,2BAA2B,MAAM,QAAQ;AAE1D,eAAa,kBAAkB;AAC/B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM;AAC9B,eAAa,UAAU,MAAM;AAC7B,eAAa,iBAAiB,MAAM;AACpC,eAAa,gBAAgB,MAAM;AACnC,eAAa,QAAQ,MAAM,SAAS,MAAM,YAAY;AACtD,eAAa,OAAO,MAAM;AAC1B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM,YAAY;AAC1C,eAAa,aAAa,UACtB;AAAA,IACE;AAAA,IACA,iBAAiB,MAAM;AAAA,EACzB,IACA;AACJ,eAAa,eAAe,MAAM;AAClC,eAAa,mBAAmB,MAAM;AACtC,eAAa,iBAAiB,MAAM;AACpC,eAAa,WAAW;AACxB,eAAa,WAAW,MAAM;AAC9B,eAAa,YAAY,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI;AACvE,eAAa,WAAW,IAAI;AAC5B,eAAa,iBAAiB,kBAAkB,IAAI,cAAc;AAClE,eAAa,SAAS;AACtB,eAAa,SAAS;AACtB,eAAa,aAAa;AAC1B,eAAa,cAAc;AAC3B,eAAa,cAAc;AAC3B,eAAa,eAAe;AAC5B,eAAa,YAAY,oBAAI,KAAK;AACpC;AAEA,eAAe,8BACb,IACA,gBACA,KACuB;AACvB,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,iBAAiB,IAAI;AAAA,MACrB,UAAU,IAAI;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,IACxC;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,UACA,eACA,KACA,kBACe;AACf,QAAM,SAAS,KAAK,wBAAwB,eAAe;AAAA,IACzD,UAAU,IAAI;AAAA,IACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACpD;AAAA,IACA,OAAO,cAAc;AAAA,EACvB,CAAC;AAED,aAAW,gBAAgB,eAAe;AACxC,UAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,MACnD,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,iBAAiB,aAAa;AAAA,MAC9B,cAAc,kBAAkB,YAAY;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAEA,eAAe,4BACb,IACA,OACA,iBACA,KACuB;AACvB,MAAI,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,SAAS,GAAG;AACtD,UAAM,WAAW,kBAAkB,IAAI,cAAc,KAAK;AAC1D,UAAM,UAAU,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,IAAI,eAAe,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AAC5G,QAAI;AACF,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,4CAA4C,OAAO,KAAK,QAAQ,EAAE;AAAA,IAC1E,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,MACpD,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,KAAK,oCAAoC;AAAA,IACrD,GAAG;AAAA,MACD,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,UAAU;AACZ,+BAAyB,UAAU,OAAO,iBAAiB,GAAG;AAC9D,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,wBAAwB,IAAI,OAAO,iBAAiB,GAAG;AAChE;AAqDO,SAAS,0BAA0B,MAAoD;AAC5F,QAAM,EAAE,IAAI,QAAQ,UAAU,YAAY,UAAU,IAAI;AAExD,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,KAAK;AACvB,YAAM,EAAE,iBAAiB,GAAG,QAAQ,IAAI;AACxC,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,eAAe,MAAM,QAAQ,cAAc,OAAO,OAAO;AAC7D,cAAM,oCAAoC,IAAI,CAAC,eAAe,GAAG,GAAG;AACpE,cAAM,SAAS,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AAClF,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,MACT,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,wBAAwB,UAAU,cAAc,GAAG;AACzD,YAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,QACnD,UAAU,aAAa;AAAA,QACvB,gBAAgB,aAAa,kBAAkB;AAAA,QAC/C,iBAAiB,aAAa;AAAA,QAC9B,cAAc,kBAAkB,YAAY;AAAA,MAC9C,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO,KAAK;AAC5B,YAAM,mBAAmB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC;AACnE,YAAM,EAAE,kBAAkB,mBAAmB,GAAG,QAAQ,IAAI;AAC5D,YAAM,gBAAgC,CAAC;AACvC,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,cAAM,oCAAoC,IAAI,kBAAkB,GAAG;AACnE,mBAAW,mBAAmB,kBAAkB;AAC9C,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,gBAAgB;AAE9E,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK;AAC9B,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,2BAA2B,IAAI,IAAI,UAAU,MAAM,MAAM;AACxF,UAAI,iBAAiB,WAAW,GAAG;AACjC,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,EAAE,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACxC,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,wBAAwB;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,sBAAsB;AAEpF,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,OAAO,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,8BAA8B,IAAI,IAAI,UAAU,MAAM,eAAe;AAEpG,UAAI,iBAAiB,WAAW,GAAG;AACjC,cAAM,gCAAgC,MAAM,iBAAiB,cAAc,IAAI,QAAQ;AACvF,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,6BAA6B;AACjC,UAAI,MAAM,kCAAkC;AAC1C,cAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAI,CAAC,IAAI,gBAAgB;AACvB,iBAAO,KAAK,yFAAyF;AAAA,YACnG,UAAU,IAAI;AAAA,YACd,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,uBAAuB,SAAS,KAAK;AACvC,iBAAO,KAAK,0FAA0F;AAAA,YACpG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,uBAAuB;AAAA,YACvC,cAAc;AAAA,UAChB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,CAAC,WAAW;AACd,iBAAO,KAAK,2FAA2F;AAAA,YACrG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI;AACF,gBAAM,cAAc,UAAU,QAAQ,aAAa;AAOnD,gBAAM,0BAAoC,CAAC;AAC3C,mBAAS,SAAS,GAAG,SAAS,uBAAuB,QAAQ,UAAU,IAAI;AACzE,kBAAM,aAAa,uBAAuB,MAAM,QAAQ,SAAS,EAAE;AACnE,kBAAM,UAAU,MAAM,QAAQ,IAAI,WAAW,IAAI,OAAO,qBAAqB;AAAA,cAC3E;AAAA,cACA,SAAS,MAAM,YAAY;AAAA,gBACzB;AAAA,gBACA,CAAC,MAAM,eAAe;AAAA,gBACtB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AAAA,cACvE;AAAA,YACF,EAAE,CAAC;AACH,uBAAW,UAAU,SAAS;AAC5B,kBAAI,OAAO,QAAS,yBAAwB,KAAK,OAAO,eAAe;AAAA,YACzE;AAAA,UACF;AACA,uCAA6B;AAAA,QAC/B,SAAS,KAAK;AACZ,iBAAO,KAAK,iFAAiF;AAAA,YAC3F,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB;AAAA,UACF,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,2BAA2B,WAAW,GAAG;AAC3C,gBAAM,gDAAgD,MAAM,iBAAiB,IAAI,cAAc;AAC/F,iBAAO,CAAC;AAAA,QACV;AAAA,MACF;AAEA,YAAM,8BAA8B,2BAA2B,QAAQ,yBAAyB,MAAM,eAAe;AAErH,YAAM;AAAA,QACJ,iBAAiB;AAAA,QACjB,kCAAkC;AAAA,QAClC,GAAG;AAAA,MACL,IAAI;AACJ,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,0BAA0B,CAAC;AAC7E,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,mBAAmB,wBAAwB;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,GAAG;AACxF,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,KAAK,sBAAsB;AAEpF,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,gBAAgB,KAAK;AACpC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,UAAU;AACpC,qBAAa,SAAS;AACtB,qBAAa,SAAS,oBAAI,KAAK;AAC/B,cAAM,GAAG,MAAM;AAEf,cAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK;AACvB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,aAAa,CAA+C,MAAc;AAC9E,YAAI,QAAQ,EACT,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,QAAQ;AACvC,YAAI,IAAI,gBAAgB;AACtB,kBAAQ,MAAM,MAAM,mBAA0B,KAAK,IAAI,cAAc;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,GACG,WAAW,eAAsB,EACjC,OAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACL,EAAE,QAAQ;AAEV,UAAI,CAAC,WAAW,QAAQ;AACtB,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,MAAM;AAAA,QACzB,GAAG,YAAY,eAAsB,EAAE,IAAI;AAAA,UACzC,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAQ;AAAA,MACV,EAAE,iBAAiB;AACnB,YAAM,SAAS,OAAO,cAAc,kBAAkB,WAAW,MAAM;AAEvE,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAE3D,YAAM,gBAAgB,MAAM,mBAAmB,IAAI,cAAc;AAAA,QAC/D,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,MAC7C,GAAG,QAAW;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC,CAAC;AAED,iBAAW,gBAAgB,eAAe;AACxC,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAED,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,gBAAgB,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,mBAAa,SAAS;AACtB,mBAAa,cAAc,oBAAI,KAAK;AACpC,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,WAAW;AAAA,QACjD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,gBAAgB,QAAQ,KAAK;AAClD,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,aAAa;AACvC,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,UAAU;AAC/B,mBAAa,SAAS;AACtB,mBAAa,cAAc;AAE3B,UAAI,iBAAiB,UAAU;AAC7B,qBAAa,SAAS;AAAA,MACxB,WAAW,CAAC,aAAa,QAAQ;AAC/B,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,gBAAgB,OAAO,KAAK;AAC9C,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,YAAM,aAAa,aAAa;AAChC,YAAM,SAAS,YAAY,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ;AAEvE,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,kBAAkB;AAAA,MACpC;AAIA,UAAI,aAAa,WAAW,YAAY;AACtC,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAEA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,iBAAiB,aAAa;AACpC,YAAM,qBAAqB,aAAa,cAAc;AACtD,YAAM,sBAAsB,aAAa,eAAe;AAKxD,YAAM,cAAe,MAAM,MAAM,EAAE,EAChC,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,cAAc,MAAM;AAAA,MACtB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,MAAM,UAAU,EACvC,iBAAiB;AAEpB,UAAI,OAAO,aAAa,kBAAkB,CAAC,MAAM,GAAG;AAClD,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAOA,YAAM,eAAe,YAAY;AAC/B,cAAM,MAAM,EAAE,EACX,YAAY,eAAsB,EAClC,IAAI;AAAA,UACH,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,cAAc;AAAA,QAChB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,UAAU,EACtC,iBAAiB;AAAA,MACtB;AAEA,UAAI,SAAkB;AAEtB,UAAI,OAAO,aAAa,cAAc,WAAW;AAC/C,cAAM,eAAe;AAAA,UACnB,IAAI,aAAa;AAAA,UACjB,GAAG,MAAM;AAAA,QACX;AAGA,cAAM,aAAa;AAAA,UACjB;AAAA,UACA,MAAM;AAAA,YACJ,KAAK,IAAI;AAAA,YACT,UAAU,IAAI;AAAA,YACd,OAAO,IAAI;AAAA,UACb;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB,IAAI,kBAAkB;AAAA,UAC9C,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,cAAc,IAAI;AAAA,QAC/D;AAEA,YAAI;AACJ,YAAI;AACF,0BAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,YACzD,OAAO;AAAA,YACP,KAAK;AAAA,YACL,UAAU;AAAA,cACR,UAAU,IAAI;AAAA,cACd,gBAAgB,IAAI;AAAA,cACpB,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AAGZ,cAAI;AACF,kBAAM,aAAa;AAAA,UACrB,SAAS,YAAY;AACnB,kBAAM,+CAA+C,UAAU;AAAA,UACjE;AACA,gBAAM;AAAA,QACR;AAEA,iBAAS,cAAc;AAAA,MACzB;AAEA,mBAAa,SAAS;AACtB,mBAAa,aAAa;AAC1B,mBAAa,cAAc,MAAM;AACjC,mBAAa,eAAe;AAE5B,UAAI,CAAC,aAAa,QAAQ;AACxB,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO,EAAE,cAAc,OAAO;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,KAAK;AACxB,YAAM,KAAK,OAAO,KAAK;AACvB,aAAO,GAAG,MAAM,cAAc;AAAA,QAC5B,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,QACR,GAAG,gCAAgC,GAAG;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,KAAK,OAAO;AAC5B,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,UAAmC;AAAA,QACvC,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,GAAG,gCAAgC,GAAG;AAAA,MACxC;AAEA,UAAI,OAAO;AACT,gBAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,KAAK,EAAE;AAAA,MAC7C;AAEA,YAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrD,GAAG,KAAK,cAAc,SAAS;AAAA,UAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AAAA,QACD,GAAG,MAAM,cAAc;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,UAAU,IAAI;AAAA,UACd,QAAQ;AAAA,UACR,GAAG,gCAAgC,GAAG;AAAA,QACxC,CAAC;AAAA,MACH,CAAC;AAED,YAAM,SAAS,cAAc,IAAI,iBAAiB;AAClD,YAAM,SAAS,QAAQ,OAAO,SAAS,IAAI;AAE3C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,CAAC,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB;AACrB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,iBAAiB,MAAM,GAC1B,WAAW,eAAsB,EACjC,OAAO;AAAA,QACN;AAAA,QACA;AAAA,MACF,CAAC,EACA,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,SAAS,EACT,QAAQ;AAEX,UAAI,CAAC,eAAe,OAAQ,QAAO;AAEnC,YAAM,eAAe,MAAM,GACxB,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,cAAc;AAAA,MAChB,CAAQ,EACP,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,iBAAiB;AAEpB,iBAAW,SAAS,gBAAgB;AAClC,cAAM,4BAA4B,WAAW;AAAA,UAC3C,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB,GAAG,SAAS;AAAA,MACd;AAEA,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,IAEA,MAAM,eAAe,kBAAkB,gBAAgB,KAAK;AAC1D,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,WAAW,eAAsB,EACjC,MAAM,sBAA6B,KAAK,gBAAgB,EACxD,MAAM,oBAA2B,KAAK,cAAc,EACpD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,iBAAiB;AAEpB,YAAM,eAAe,OAAO,cAAc,kBAAkB,CAAC;AAC7D,UAAI,eAAe,GAAG;AACpB,cAAM,4BAA4B,WAAW,KAAK,SAAS;AAAA,MAC7D;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAMO,SAAS,2BAA2B,WAEnB;AACtB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,MAAI;AACJ,MAAI;AACF,iBAAa,UAAU,QAAQ,YAAY;AAAA,EAC7C,QAAQ;AAEN,iBAAa;AAAA,EACf;AAEA,SAAO,0BAA0B,EAAE,IAAI,UAAU,YAAY,UAAU,CAAC;AAC1E;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { CrudHttpError, conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { invalidateCrudCache } from '@open-mercato/shared/lib/crud/cache'\nimport { Notification, type NotificationStatus } from '../data/entities'\nimport type { CreateNotificationInput, CreateBatchNotificationInput, CreateRoleNotificationInput, CreateFeatureNotificationInput, ExecuteActionInput } from '../data/validators'\nimport type { NotificationPollData } from '@open-mercato/shared/modules/notifications/types'\nimport { NOTIFICATION_EVENTS, NOTIFICATION_SSE_EVENTS } from './events'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  buildNotificationEntity,\n  emitNotificationCreated,\n  emitNotificationCreatedBatch,\n  type NotificationContentInput,\n  type NotificationTenantContext,\n} from './notificationFactory'\nimport { toNotificationDto } from './notificationMapper'\nimport { buildNotificationReadScopeWhere } from './notificationScope'\nimport {\n  getRecipientUserIdsForFeature,\n  getRecipientUserIdsForRole,\n  getScopedNotificationRecipientUserIds,\n} from './notificationRecipients'\nimport { assertSafeNotificationHref, sanitizeNotificationActions } from './safeHref'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getNotificationType } from './notification-type-registry'\nimport { getNotificationTypeOverrides, type NotificationTypeOverrides } from './typeOverrides'\nimport { getNotificationDeliveryStrategies } from './deliveryStrategies'\nimport { resolveEffectiveChannels } from './shouldDeliver'\nimport {\n  createNotificationPreferenceService,\n  type NotificationPreferenceService,\n} from './notificationPreferenceService'\nimport { inAppVisibleFilter, inAppVisibleSql, isInAppVisible } from './notificationVisibility'\n\nconst logger = createLogger('notifications').child({ component: 'service' })\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\nfunction getDb(em: EntityManager): Kysely<any> {\n  return em.getKysely<any>()\n}\n\nconst UNIQUE_NOTIFICATION_ACTIVE_STATUSES: NotificationStatus[] = ['unread', 'read', 'actioned']\nconst NOTIFICATION_RESOURCE_KIND = 'notifications.notification'\n\nfunction normalizeOrgScope(organizationId: string | null | undefined): string | null {\n  return organizationId ?? null\n}\n\nasync function invalidateNotificationCache(\n  container: NotificationServiceDeps['container'],\n  ctx: Pick<NotificationServiceContext, 'tenantId' | 'organizationId'>,\n  reason: string,\n  notificationId?: string,\n): Promise<void> {\n  if (!container) return\n  await invalidateCrudCache(\n    container as Parameters<typeof invalidateCrudCache>[0],\n    NOTIFICATION_RESOURCE_KIND,\n    {\n      id: notificationId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n    },\n    ctx.tenantId,\n    reason,\n  )\n}\n\nasync function assertNotificationRecipientsInScope(\n  em: EntityManager,\n  recipientUserIds: string[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  const scopedRecipientUserIds = await getScopedNotificationRecipientUserIds(\n    getDb(em),\n    ctx.tenantId,\n    normalizeOrgScope(ctx.organizationId),\n    recipientUserIds,\n  )\n\n  if (scopedRecipientUserIds.length !== recipientUserIds.length) {\n    throw new CrudHttpError(404, { error: 'Notification recipient not found' })\n  }\n}\n\nfunction applyNotificationContent(\n  notification: Notification,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n  channels: string[] | null,\n) {\n  const actions = sanitizeNotificationActions(input.actions)\n  const linkHref = assertSafeNotificationHref(input.linkHref)\n\n  notification.recipientUserId = recipientUserId\n  notification.type = input.type\n  notification.titleKey = input.titleKey\n  notification.bodyKey = input.bodyKey\n  notification.titleVariables = input.titleVariables\n  notification.bodyVariables = input.bodyVariables\n  notification.title = input.title || input.titleKey || ''\n  notification.body = input.body\n  notification.icon = input.icon\n  notification.severity = input.severity ?? 'info'\n  notification.actionData = actions\n    ? {\n        actions,\n        primaryActionId: input.primaryActionId,\n      }\n    : null\n  notification.sourceModule = input.sourceModule\n  notification.sourceEntityType = input.sourceEntityType\n  notification.sourceEntityId = input.sourceEntityId\n  notification.linkHref = linkHref\n  notification.groupKey = input.groupKey\n  notification.channels = channels\n  notification.expiresAt = input.expiresAt ? new Date(input.expiresAt) : null\n  notification.tenantId = ctx.tenantId\n  notification.organizationId = normalizeOrgScope(ctx.organizationId)\n  notification.status = 'unread'\n  notification.readAt = null\n  notification.actionedAt = null\n  notification.dismissedAt = null\n  notification.actionTaken = null\n  notification.actionResult = null\n  notification.createdAt = new Date()\n}\n\nasync function findScopedNotificationOrThrow(\n  em: EntityManager,\n  notificationId: string,\n  ctx: NotificationServiceContext,\n): Promise<Notification> {\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: notificationId,\n      recipientUserId: ctx.userId,\n      tenantId: ctx.tenantId,\n    },\n    undefined,\n    {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId ?? null,\n    },\n  )\n  if (!notification) {\n    throw new CrudHttpError(404, { error: 'Notification not found' })\n  }\n  return notification\n}\n\nasync function emitNotificationSseEvents(\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> },\n  notifications: Notification[],\n  ctx: NotificationServiceContext,\n): Promise<void> {\n  // Live bell updates only for notifications actually delivered to the in-app channel; the others\n  // exist as records but must not bump anyone's badge/inbox.\n  const visible = notifications.filter((notification) => isInAppVisible(notification.channels))\n  if (visible.length === 0) return\n\n  const visibleRecipientUserIds = Array.from(new Set(visible.map((n) => n.recipientUserId)))\n  await eventBus.emit(NOTIFICATION_SSE_EVENTS.BATCH_CREATED, {\n    tenantId: ctx.tenantId,\n    organizationId: normalizeOrgScope(ctx.organizationId),\n    recipientUserIds: visibleRecipientUserIds,\n    count: visible.length,\n  })\n\n  for (const notification of visible) {\n    await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      recipientUserId: notification.recipientUserId,\n      notification: toNotificationDto(notification),\n    })\n  }\n}\n\nasync function createOrRefreshNotification(\n  em: EntityManager,\n  input: NotificationContentInput,\n  recipientUserId: string,\n  ctx: NotificationTenantContext,\n  channels: string[] | null,\n): Promise<Notification> {\n  if (input.groupKey && input.groupKey.trim().length > 0) {\n    const orgScope = normalizeOrgScope(ctx.organizationId) ?? 'global'\n    const lockKey = `notifications:${ctx.tenantId}:${orgScope}:${recipientUserId}:${input.type}:${input.groupKey}`\n    try {\n      const db = getDb(em)\n      await sql`select pg_advisory_xact_lock(hashtext(${lockKey}))`.execute(db)\n    } catch {\n      // If advisory locks are unavailable, continue with best-effort dedupe.\n    }\n\n    const existing = await em.findOne(Notification, {\n      recipientUserId,\n      tenantId: ctx.tenantId,\n      organizationId: normalizeOrgScope(ctx.organizationId),\n      type: input.type,\n      groupKey: input.groupKey,\n      status: { $in: UNIQUE_NOTIFICATION_ACTIVE_STATUSES },\n    }, {\n      orderBy: { createdAt: 'desc' },\n    })\n\n    if (existing) {\n      applyNotificationContent(existing, input, recipientUserId, ctx, channels)\n      return existing\n    }\n  }\n\n  return buildNotificationEntity(em, input, recipientUserId, ctx, channels)\n}\n\nexport interface NotificationServiceContext {\n  tenantId: string\n  organizationId?: string | null\n  organizationIds?: string[] | null\n  userId?: string | null\n}\n\nexport type CreateFeatureNotificationServiceInput = CreateFeatureNotificationInput & {\n  restrictRecipientsToOrganization?: boolean\n}\n\nexport interface NotificationService {\n  create(input: CreateNotificationInput, ctx: NotificationServiceContext): Promise<Notification>\n  createBatch(input: CreateBatchNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForRole(input: CreateRoleNotificationInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  createForFeature(input: CreateFeatureNotificationServiceInput, ctx: NotificationServiceContext): Promise<Notification[]>\n  markAsRead(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  markAllAsRead(ctx: NotificationServiceContext): Promise<number>\n  dismiss(notificationId: string, ctx: NotificationServiceContext): Promise<Notification>\n  restoreDismissed(\n    notificationId: string,\n    status: 'read' | 'unread' | undefined,\n    ctx: NotificationServiceContext\n  ): Promise<Notification>\n  executeAction(\n    notificationId: string,\n    input: ExecuteActionInput,\n    ctx: NotificationServiceContext\n  ): Promise<{ notification: Notification; result: unknown }>\n  getUnreadCount(ctx: NotificationServiceContext): Promise<number>\n  getPollData(ctx: NotificationServiceContext, since?: string): Promise<NotificationPollData>\n  cleanupExpired(): Promise<number>\n  deleteBySource(\n    sourceEntityType: string,\n    sourceEntityId: string,\n    ctx: NotificationServiceContext\n  ): Promise<number>\n}\n\nexport interface NotificationServiceDeps {\n  em: EntityManager\n  eventBus: { emit: (event: string, payload: unknown) => Promise<void> }\n  commandBus?: {\n    execute: (\n      commandId: string,\n      options: { input: unknown; ctx: unknown; metadata?: unknown }\n    ) => Promise<{ result: unknown }>\n  }\n  container?: { resolve: (name: string) => unknown }\n}\n\nexport function createNotificationService(deps: NotificationServiceDeps): NotificationService {\n  const { em: rootEm, eventBus, commandBus, container } = deps\n\n  /**\n   * Resolves the authoritative delivery-channel set for one recipient at create time \u2014 the single\n   * gate that folds per-send target, per-type eligibility, registered strategies, and the\n   * recipient's per-channel preferences (`nonOptOut` bypasses opt-out). Stored on the row and\n   * replayed by the dispatcher; `in_app` membership also drives bell/inbox visibility.\n   *\n   * Returns `null` (\u21D2 \"all channels\", legacy behavior) when no delivery strategies are registered\n   * (e.g. a minimal bootstrap/test), so notifications never become silently undeliverable/invisible\n   * in an environment that simply hasn't wired the seam.\n   */\n  const resolveChannelsFor = async (\n    content: NotificationContentInput,\n    recipientUserId: string,\n    scopeCtx: NotificationServiceContext,\n    preferences: NotificationPreferenceService = createNotificationPreferenceService({ em: rootEm.fork() }),\n    typeOverrides?: NotificationTypeOverrides | null,\n  ): Promise<string[] | null> => {\n    const registeredChannels = getNotificationDeliveryStrategies().map((strategy) => strategy.id)\n    if (registeredChannels.length === 0) return null\n    // Treat an empty target as \"no restriction\" (all channels) rather than \"no deliverable channel\":\n    // a programmatic caller that computed an empty array should not silently black-hole the\n    // notification. The HTTP layer rejects an empty `channels` outright (see validators.ts).\n    const targetChannels = content.channels && content.channels.length > 0 ? content.channels : null\n    const overrides = typeOverrides === undefined\n      ? (await getNotificationTypeOverrides(rootEm.fork(), scopeCtx.tenantId, [content.type])).get(content.type) ?? null\n      : typeOverrides\n    return resolveEffectiveChannels({\n      typeId: content.type,\n      type: getNotificationType(content.type),\n      scope: { tenantId: scopeCtx.tenantId, userId: recipientUserId },\n      targetChannels,\n      registeredChannels,\n      preferences,\n      channelsOverride: overrides?.channels ?? null,\n      nonOptOutOverride: overrides?.nonOptOut ?? null,\n    })\n  }\n\n  /**\n   * Broadcast counterpart of {@link resolveChannelsFor}: resolves the channel set for every recipient\n   * up front, BEFORE the write transaction opens, reusing a single forked EM / preference service\n   * across the whole set. This keeps the preference reads out of the write transaction (matching\n   * `create`, which resolves before its transaction) and avoids one EM fork per recipient on large\n   * role/feature broadcasts.\n   */\n  const resolveChannelsForRecipients = async (\n    content: NotificationContentInput,\n    recipientUserIds: string[],\n    scopeCtx: NotificationServiceContext,\n  ): Promise<Array<{ recipientUserId: string; channels: string[] | null }>> => {\n    const preferences = createNotificationPreferenceService({ em: rootEm.fork() })\n    // Stored overrides are per-type (not per-recipient) \u2014 read once for the whole broadcast.\n    const typeOverrides =\n      (await getNotificationTypeOverrides(rootEm.fork(), scopeCtx.tenantId, [content.type])).get(content.type) ?? null\n    const resolved: Array<{ recipientUserId: string; channels: string[] | null }> = []\n    for (const recipientUserId of recipientUserIds) {\n      resolved.push({\n        recipientUserId,\n        channels: await resolveChannelsFor(content, recipientUserId, scopeCtx, preferences, typeOverrides),\n      })\n    }\n    return resolved\n  }\n\n  return {\n    async create(input, ctx) {\n      const { recipientUserId, ...content } = input\n      const channels = await resolveChannelsFor(content, recipientUserId, ctx)\n      const writeEm = rootEm.fork()\n      const notification = await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, [recipientUserId], ctx)\n        const entity = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n        await tx.flush()\n        return entity\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      // Always emit the domain event (drives the deliver subscriber \u2192 push/email/\u2026). Only bump the\n      // live in-app bell when this notification is actually visible in-app.\n      await emitNotificationCreated(eventBus, notification, ctx)\n      if (isInAppVisible(notification.channels)) {\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return notification\n    },\n\n    async createBatch(input, ctx) {\n      const recipientUserIds = Array.from(new Set(input.recipientUserIds))\n      const { recipientUserIds: _recipientUserIds, ...content } = input\n      const notifications: Notification[] = []\n      const resolved = await resolveChannelsForRecipients(content, recipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        await assertNotificationRecipientsInScope(tx, recipientUserIds, ctx)\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async createForRole(input, ctx) {\n      const em = rootEm.fork()\n\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForRole(db, ctx.tenantId, input.roleId)\n      if (recipientUserIds.length === 0) {\n        return []\n      }\n\n      const { roleId: _roleId, ...content } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(recipientUserIds))\n      const resolved = await resolveChannelsForRecipients(content, uniqueRecipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async createForFeature(input, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const recipientUserIds = await getRecipientUserIdsForFeature(db, ctx.tenantId, input.requiredFeature)\n\n      if (recipientUserIds.length === 0) {\n        debug('No users found with feature:', input.requiredFeature, 'in tenant:', ctx.tenantId)\n        return []\n      }\n\n      let authorizedRecipientUserIds = recipientUserIds\n      if (input.restrictRecipientsToOrganization) {\n        const uniqueCandidateUserIds = Array.from(new Set(recipientUserIds))\n        if (!ctx.organizationId) {\n          logger.warn('Organization-restricted feature fan-out skipped because organization scope is missing', {\n            tenantId: ctx.tenantId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        if (uniqueCandidateUserIds.length > 200) {\n          logger.warn('Organization-restricted feature fan-out skipped because the candidate cap was exceeded', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            candidateCount: uniqueCandidateUserIds.length,\n            candidateCap: 200,\n          })\n          return []\n        }\n\n        if (!container) {\n          logger.warn('Organization-restricted feature fan-out skipped because the DI container is unavailable', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n          })\n          return []\n        }\n\n        try {\n          const rbacService = container.resolve('rbacService') as {\n            userHasAllFeatures: (\n              userId: string,\n              features: string[],\n              scope: { tenantId: string | null; organizationId: string | null },\n            ) => Promise<boolean>\n          }\n          const allowedRecipientUserIds: string[] = []\n          for (let offset = 0; offset < uniqueCandidateUserIds.length; offset += 10) {\n            const candidates = uniqueCandidateUserIds.slice(offset, offset + 10)\n            const results = await Promise.all(candidates.map(async (recipientUserId) => ({\n              recipientUserId,\n              allowed: await rbacService.userHasAllFeatures(\n                recipientUserId,\n                [input.requiredFeature],\n                { tenantId: ctx.tenantId, organizationId: ctx.organizationId ?? null },\n              ),\n            })))\n            for (const result of results) {\n              if (result.allowed) allowedRecipientUserIds.push(result.recipientUserId)\n            }\n          }\n          authorizedRecipientUserIds = allowedRecipientUserIds\n        } catch (err) {\n          logger.warn('Organization-restricted feature fan-out skipped because RBAC filtering failed', {\n            tenantId: ctx.tenantId,\n            organizationId: ctx.organizationId,\n            requiredFeature: input.requiredFeature,\n            err,\n          })\n          return []\n        }\n\n        if (authorizedRecipientUserIds.length === 0) {\n          debug('No users found with feature in organization:', input.requiredFeature, ctx.organizationId)\n          return []\n        }\n      }\n\n      debug('Creating notifications for', authorizedRecipientUserIds.length, 'user(s) with feature:', input.requiredFeature)\n\n      const {\n        requiredFeature: _requiredFeature,\n        restrictRecipientsToOrganization: _restrictRecipientsToOrganization,\n        ...content\n      } = input\n      const notifications: Notification[] = []\n      const uniqueRecipientUserIds = Array.from(new Set(authorizedRecipientUserIds))\n      const resolved = await resolveChannelsForRecipients(content, uniqueRecipientUserIds, ctx)\n      const writeEm = rootEm.fork()\n\n      await writeEm.transactional(async (tx) => {\n        for (const { recipientUserId, channels } of resolved) {\n          const notification = await createOrRefreshNotification(tx, content, recipientUserId, ctx, channels)\n          notifications.push(notification)\n        }\n        await tx.flush()\n      })\n\n      await invalidateNotificationCache(container, ctx, 'created')\n      await emitNotificationCreatedBatch(eventBus, notifications, ctx)\n      await emitNotificationSseEvents(eventBus, notifications, ctx)\n\n      return notifications\n    },\n\n    async markAsRead(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status === 'unread') {\n        notification.status = 'read'\n        notification.readAt = new Date()\n        await em.flush()\n\n        await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n      }\n\n      return notification\n    },\n\n    async markAllAsRead(ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n      const applyScope = <QB extends { where: (...args: any[]) => QB }>(q: QB): QB => {\n        let chain = q\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'unread')\n          // Only in-app-visible rows count toward the badge (see getUnreadCount),\n          // so \"mark all as read\" must scope to the SAME set \u2014 otherwise it flips\n          // push/email-only rows the user never saw and SSE-broadcasts a read for\n          // notifications that were never in the bell, inflating the returned\n          // count past what the badge showed.\n          .where(inAppVisibleSql() as any)\n        if (ctx.organizationId) {\n          chain = chain.where('organization_id' as any, '=', ctx.organizationId)\n        }\n        return chain\n      }\n\n      const targetRows = await applyScope(\n        db\n          .selectFrom('notifications' as any)\n          .select([\n            'id' as any,\n            'organization_id' as any,\n            'recipient_user_id' as any,\n          ]),\n      ).execute() as Array<{ id: string }>\n\n      if (!targetRows.length) {\n        return 0\n      }\n\n      const updateResult = await applyScope(\n        db.updateTable('notifications' as any).set({\n          status: 'read',\n          read_at: sql`now()`,\n        } as any) as any,\n      ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n      const result = Number(updateResult?.numUpdatedRows ?? targetRows.length)\n\n      await invalidateNotificationCache(container, ctx, 'updated')\n\n      const notifications = await findWithDecryption(em, Notification, {\n        id: { $in: targetRows.map((row) => row.id) },\n      }, undefined, {\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId ?? null,\n      })\n\n      for (const notification of notifications) {\n        await eventBus.emit(NOTIFICATION_EVENTS.READ, {\n          notificationId: notification.id,\n          userId: ctx.userId,\n          tenantId: ctx.tenantId,\n        })\n\n        await eventBus.emit(NOTIFICATION_SSE_EVENTS.CREATED, {\n          tenantId: notification.tenantId,\n          organizationId: notification.organizationId ?? null,\n          recipientUserId: notification.recipientUserId,\n          notification: toNotificationDto(notification),\n        })\n      }\n\n      return result\n    },\n\n    async dismiss(notificationId, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      notification.status = 'dismissed'\n      notification.dismissedAt = new Date()\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.DISMISSED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return notification\n    },\n\n    async restoreDismissed(notificationId, status, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      if (notification.status !== 'dismissed') {\n        return notification\n      }\n\n      const targetStatus = status ?? 'read'\n      notification.status = targetStatus\n      notification.dismissedAt = null\n\n      if (targetStatus === 'unread') {\n        notification.readAt = null\n      } else if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.RESTORED, {\n        notificationId: notification.id,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: targetStatus,\n      })\n\n      return notification\n    },\n\n    async executeAction(notificationId, input, ctx) {\n      const em = rootEm.fork()\n      const notification = await findScopedNotificationOrThrow(em, notificationId, ctx)\n\n      const actionData = notification.actionData\n      const action = actionData?.actions?.find((a) => a.id === input.actionId)\n\n      if (!action) {\n        throw new Error('Action not found')\n      }\n\n      // Reject an already-actioned notification before dispatching the command,\n      // so a retry or double-click cannot re-run the side effect.\n      if (notification.status === 'actioned') {\n        throw conflict('Notification action already executed')\n      }\n\n      const actionedAt = new Date()\n      const previousStatus = notification.status\n      const previousActionedAt = notification.actionedAt ?? null\n      const previousActionTaken = notification.actionTaken ?? null\n\n      // Atomically claim the notification so only one concurrent request can run\n      // the side-effecting command. The conditional UPDATE matches only while the\n      // notification has not been actioned yet; a losing request updates 0 rows.\n      const claimResult = (await getDb(em)\n        .updateTable('notifications' as any)\n        .set({\n          status: 'actioned',\n          actioned_at: actionedAt,\n          action_taken: input.actionId,\n        } as any)\n        .where('id' as any, '=', notification.id)\n        .where('recipient_user_id' as any, '=', ctx.userId as any)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .where('status' as any, '!=', 'actioned')\n        .executeTakeFirst()) as { numUpdatedRows?: bigint | number } | undefined\n\n      if (Number(claimResult?.numUpdatedRows ?? 0) === 0) {\n        throw conflict('Notification action already executed')\n      }\n\n      // The claim is provisional: if the side-effecting command fails, the action\n      // never actually completed, so release the claim to its prior state. This\n      // lets the user retry the action instead of the notification being locked as\n      // `actioned` forever. Only release while we still own the claim\n      // (status = 'actioned'), so a concurrent winner's state is never clobbered.\n      const releaseClaim = async () => {\n        await getDb(em)\n          .updateTable('notifications' as any)\n          .set({\n            status: previousStatus,\n            actioned_at: previousActionedAt,\n            action_taken: previousActionTaken,\n          } as any)\n          .where('id' as any, '=', notification.id)\n          .where('recipient_user_id' as any, '=', ctx.userId as any)\n          .where('tenant_id' as any, '=', ctx.tenantId)\n          .where('status' as any, '=', 'actioned')\n          .executeTakeFirst()\n      }\n\n      let result: unknown = null\n\n      if (action.commandId && commandBus && container) {\n        const commandInput = {\n          id: notification.sourceEntityId,\n          ...input.payload,\n        }\n\n        // Build a CommandRuntimeContext from the notification service context\n        const commandCtx = {\n          container,\n          auth: {\n            sub: ctx.userId,\n            tenantId: ctx.tenantId,\n            orgId: ctx.organizationId,\n          },\n          organizationScope: null,\n          selectedOrganizationId: ctx.organizationId ?? null,\n          organizationIds: ctx.organizationId ? [ctx.organizationId] : null,\n        }\n\n        let commandResult: { result: unknown }\n        try {\n          commandResult = await commandBus.execute(action.commandId, {\n            input: commandInput,\n            ctx: commandCtx,\n            metadata: {\n              tenantId: ctx.tenantId,\n              organizationId: ctx.organizationId,\n              resourceKind: 'notifications',\n            },\n          })\n        } catch (err) {\n          // Never let a rollback failure mask the original command error \u2014 the\n          // caller needs the real failure to decide whether to retry.\n          try {\n            await releaseClaim()\n          } catch (releaseErr) {\n            debug('failed to release notification action claim', releaseErr)\n          }\n          throw err\n        }\n\n        result = commandResult.result\n      }\n\n      notification.status = 'actioned'\n      notification.actionedAt = actionedAt\n      notification.actionTaken = input.actionId\n      notification.actionResult = result as Record<string, unknown>\n\n      if (!notification.readAt) {\n        notification.readAt = new Date()\n      }\n\n      await em.flush()\n\n      await invalidateNotificationCache(container, ctx, 'updated', notification.id)\n      await eventBus.emit(NOTIFICATION_EVENTS.ACTIONED, {\n        notificationId: notification.id,\n        actionId: input.actionId,\n        userId: ctx.userId,\n        tenantId: ctx.tenantId,\n      })\n\n      return { notification, result }\n    },\n\n    async getUnreadCount(ctx) {\n      const em = rootEm.fork()\n      return em.count(Notification, {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        status: 'unread',\n        $and: [\n          buildNotificationReadScopeWhere(ctx),\n          inAppVisibleFilter(),\n        ],\n      })\n    },\n\n    async getPollData(ctx, since) {\n      const em = rootEm.fork()\n      const filters: Record<string, unknown> = {\n        recipientUserId: ctx.userId,\n        tenantId: ctx.tenantId,\n        $and: [\n          buildNotificationReadScopeWhere(ctx),\n          inAppVisibleFilter(),\n        ],\n      }\n\n      if (since) {\n        filters.createdAt = { $gt: new Date(since) }\n      }\n\n      const [notifications, unreadCount] = await Promise.all([\n        em.find(Notification, filters, {\n          orderBy: { createdAt: 'desc' },\n          limit: 50,\n        }),\n        em.count(Notification, {\n          recipientUserId: ctx.userId,\n          tenantId: ctx.tenantId,\n          status: 'unread',\n          $and: [\n            buildNotificationReadScopeWhere(ctx),\n            inAppVisibleFilter(),\n          ],\n        }),\n      ])\n\n      const recent = notifications.map(toNotificationDto)\n      const hasNew = since ? recent.length > 0 : false\n\n      return {\n        unreadCount,\n        recent,\n        hasNew,\n        lastId: recent[0]?.id,\n      }\n    },\n\n    async cleanupExpired() {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const affectedScopes = await db\n        .selectFrom('notifications' as any)\n        .select([\n          'tenant_id' as any,\n          'organization_id' as any,\n        ])\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .distinct()\n        .execute() as Array<{ tenant_id: string; organization_id: string | null }>\n\n      if (!affectedScopes.length) return 0\n\n      const updateResult = await db\n        .updateTable('notifications' as any)\n        .set({\n          status: 'dismissed',\n          dismissed_at: sql`now()`,\n        } as any)\n        .where('expires_at' as any, '<', sql`now()`)\n        .where('status' as any, 'not in', ['actioned', 'dismissed'])\n        .executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n\n      for (const scope of affectedScopes) {\n        await invalidateNotificationCache(container, {\n          tenantId: scope.tenant_id,\n          organizationId: scope.organization_id,\n        }, 'updated')\n      }\n\n      return Number(updateResult?.numUpdatedRows ?? 0)\n    },\n\n    async deleteBySource(sourceEntityType, sourceEntityId, ctx) {\n      const em = rootEm.fork()\n      const db = getDb(em)\n\n      const deleteResult = await db\n        .deleteFrom('notifications' as any)\n        .where('source_entity_type' as any, '=', sourceEntityType)\n        .where('source_entity_id' as any, '=', sourceEntityId)\n        .where('tenant_id' as any, '=', ctx.tenantId)\n        .executeTakeFirst() as { numDeletedRows?: bigint | number } | undefined\n\n      const deletedCount = Number(deleteResult?.numDeletedRows ?? 0)\n      if (deletedCount > 0) {\n        await invalidateNotificationCache(container, ctx, 'deleted')\n      }\n\n      return deletedCount\n    },\n  }\n}\n\n/**\n * Helper to create notification service from a DI container.\n * Use this in API routes and commands to avoid DI resolution issues.\n */\nexport function resolveNotificationService(container: {\n  resolve: (name: string) => unknown\n}): NotificationService {\n  const em = container.resolve('em') as EntityManager\n  const eventBus = container.resolve('eventBus') as { emit: (event: string, payload: unknown) => Promise<void> }\n\n  // commandBus may not be registered in all contexts, so resolve it safely\n  let commandBus: NotificationServiceDeps['commandBus']\n  try {\n    commandBus = container.resolve('commandBus') as typeof commandBus\n  } catch {\n    // commandBus not available - actions with commandId won't work\n    commandBus = undefined\n  }\n\n  return createNotificationService({ em, eventBus, commandBus, container })\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,eAAe,gBAAgB;AACxC,SAAS,2BAA2B;AACpC,SAAS,oBAA6C;AAGtD,SAAS,qBAAqB,+BAA+B;AAC7D,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,yBAAyB;AAClC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B,mCAAmC;AACxE,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoE;AAC7E,SAAS,yCAAyC;AAClD,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB,iBAAiB,sBAAsB;AAEpE,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAE3E,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAEA,SAAS,MAAM,IAAgC;AAC7C,SAAO,GAAG,UAAe;AAC3B;AAEA,MAAM,sCAA4D,CAAC,UAAU,QAAQ,UAAU;AAC/F,MAAM,6BAA6B;AAEnC,SAAS,kBAAkB,gBAA0D;AACnF,SAAO,kBAAkB;AAC3B;AAEA,eAAe,4BACb,WACA,KACA,QACA,gBACe;AACf,MAAI,CAAC,UAAW;AAChB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACtD;AAAA,IACA,IAAI;AAAA,IACJ;AAAA,EACF;AACF;AAEA,eAAe,oCACb,IACA,kBACA,KACe;AACf,QAAM,yBAAyB,MAAM;AAAA,IACnC,MAAM,EAAE;AAAA,IACR,IAAI;AAAA,IACJ,kBAAkB,IAAI,cAAc;AAAA,IACpC;AAAA,EACF;AAEA,MAAI,uBAAuB,WAAW,iBAAiB,QAAQ;AAC7D,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAAA,EAC5E;AACF;AAEA,SAAS,yBACP,cACA,OACA,iBACA,KACA,UACA;AACA,QAAM,UAAU,4BAA4B,MAAM,OAAO;AACzD,QAAM,WAAW,2BAA2B,MAAM,QAAQ;AAE1D,eAAa,kBAAkB;AAC/B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM;AAC9B,eAAa,UAAU,MAAM;AAC7B,eAAa,iBAAiB,MAAM;AACpC,eAAa,gBAAgB,MAAM;AACnC,eAAa,QAAQ,MAAM,SAAS,MAAM,YAAY;AACtD,eAAa,OAAO,MAAM;AAC1B,eAAa,OAAO,MAAM;AAC1B,eAAa,WAAW,MAAM,YAAY;AAC1C,eAAa,aAAa,UACtB;AAAA,IACE;AAAA,IACA,iBAAiB,MAAM;AAAA,EACzB,IACA;AACJ,eAAa,eAAe,MAAM;AAClC,eAAa,mBAAmB,MAAM;AACtC,eAAa,iBAAiB,MAAM;AACpC,eAAa,WAAW;AACxB,eAAa,WAAW,MAAM;AAC9B,eAAa,WAAW;AACxB,eAAa,YAAY,MAAM,YAAY,IAAI,KAAK,MAAM,SAAS,IAAI;AACvE,eAAa,WAAW,IAAI;AAC5B,eAAa,iBAAiB,kBAAkB,IAAI,cAAc;AAClE,eAAa,SAAS;AACtB,eAAa,SAAS;AACtB,eAAa,aAAa;AAC1B,eAAa,cAAc;AAC3B,eAAa,cAAc;AAC3B,eAAa,eAAe;AAC5B,eAAa,YAAY,oBAAI,KAAK;AACpC;AAEA,eAAe,8BACb,IACA,gBACA,KACuB;AACvB,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,iBAAiB,IAAI;AAAA,MACrB,UAAU,IAAI;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI,kBAAkB;AAAA,IACxC;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,EAClE;AACA,SAAO;AACT;AAEA,eAAe,0BACb,UACA,eACA,KACe;AAGf,QAAM,UAAU,cAAc,OAAO,CAAC,iBAAiB,eAAe,aAAa,QAAQ,CAAC;AAC5F,MAAI,QAAQ,WAAW,EAAG;AAE1B,QAAM,0BAA0B,MAAM,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACzF,QAAM,SAAS,KAAK,wBAAwB,eAAe;AAAA,IACzD,UAAU,IAAI;AAAA,IACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,IACpD,kBAAkB;AAAA,IAClB,OAAO,QAAQ;AAAA,EACjB,CAAC;AAED,aAAW,gBAAgB,SAAS;AAClC,UAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,MACnD,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,iBAAiB,aAAa;AAAA,MAC9B,cAAc,kBAAkB,YAAY;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAEA,eAAe,4BACb,IACA,OACA,iBACA,KACA,UACuB;AACvB,MAAI,MAAM,YAAY,MAAM,SAAS,KAAK,EAAE,SAAS,GAAG;AACtD,UAAM,WAAW,kBAAkB,IAAI,cAAc,KAAK;AAC1D,UAAM,UAAU,iBAAiB,IAAI,QAAQ,IAAI,QAAQ,IAAI,eAAe,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AAC5G,QAAI;AACF,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,4CAA4C,OAAO,KAAK,QAAQ,EAAE;AAAA,IAC1E,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,MAC9C;AAAA,MACA,UAAU,IAAI;AAAA,MACd,gBAAgB,kBAAkB,IAAI,cAAc;AAAA,MACpD,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,KAAK,oCAAoC;AAAA,IACrD,GAAG;AAAA,MACD,SAAS,EAAE,WAAW,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,UAAU;AACZ,+BAAyB,UAAU,OAAO,iBAAiB,KAAK,QAAQ;AACxE,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,wBAAwB,IAAI,OAAO,iBAAiB,KAAK,QAAQ;AAC1E;AAqDO,SAAS,0BAA0B,MAAoD;AAC5F,QAAM,EAAE,IAAI,QAAQ,UAAU,YAAY,UAAU,IAAI;AAYxD,QAAM,qBAAqB,OACzB,SACA,iBACA,UACA,cAA6C,oCAAoC,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC,GACtG,kBAC6B;AAC7B,UAAM,qBAAqB,kCAAkC,EAAE,IAAI,CAAC,aAAa,SAAS,EAAE;AAC5F,QAAI,mBAAmB,WAAW,EAAG,QAAO;AAI5C,UAAM,iBAAiB,QAAQ,YAAY,QAAQ,SAAS,SAAS,IAAI,QAAQ,WAAW;AAC5F,UAAM,YAAY,kBAAkB,UAC/B,MAAM,6BAA6B,OAAO,KAAK,GAAG,SAAS,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,KAAK,OAC5G;AACJ,WAAO,yBAAyB;AAAA,MAC9B,QAAQ,QAAQ;AAAA,MAChB,MAAM,oBAAoB,QAAQ,IAAI;AAAA,MACtC,OAAO,EAAE,UAAU,SAAS,UAAU,QAAQ,gBAAgB;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkB,WAAW,YAAY;AAAA,MACzC,mBAAmB,WAAW,aAAa;AAAA,IAC7C,CAAC;AAAA,EACH;AASA,QAAM,+BAA+B,OACnC,SACA,kBACA,aAC2E;AAC3E,UAAM,cAAc,oCAAoC,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC;AAE7E,UAAM,iBACH,MAAM,6BAA6B,OAAO,KAAK,GAAG,SAAS,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,QAAQ,IAAI,KAAK;AAC9G,UAAM,WAA0E,CAAC;AACjF,eAAW,mBAAmB,kBAAkB;AAC9C,eAAS,KAAK;AAAA,QACZ;AAAA,QACA,UAAU,MAAM,mBAAmB,SAAS,iBAAiB,UAAU,aAAa,aAAa;AAAA,MACnG,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,KAAK;AACvB,YAAM,EAAE,iBAAiB,GAAG,QAAQ,IAAI;AACxC,YAAM,WAAW,MAAM,mBAAmB,SAAS,iBAAiB,GAAG;AACvE,YAAM,UAAU,OAAO,KAAK;AAC5B,YAAM,eAAe,MAAM,QAAQ,cAAc,OAAO,OAAO;AAC7D,cAAM,oCAAoC,IAAI,CAAC,eAAe,GAAG,GAAG;AACpE,cAAM,SAAS,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAC5F,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,MACT,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAG3D,YAAM,wBAAwB,UAAU,cAAc,GAAG;AACzD,UAAI,eAAe,aAAa,QAAQ,GAAG;AACzC,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,YAAY,OAAO,KAAK;AAC5B,YAAM,mBAAmB,MAAM,KAAK,IAAI,IAAI,MAAM,gBAAgB,CAAC;AACnE,YAAM,EAAE,kBAAkB,mBAAmB,GAAG,QAAQ,IAAI;AAC5D,YAAM,gBAAgC,CAAC;AACvC,YAAM,WAAW,MAAM,6BAA6B,SAAS,kBAAkB,GAAG;AAClF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,cAAM,oCAAoC,IAAI,kBAAkB,GAAG;AACnE,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,OAAO,KAAK;AAC9B,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,2BAA2B,IAAI,IAAI,UAAU,MAAM,MAAM;AACxF,UAAI,iBAAiB,WAAW,GAAG;AACjC,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,EAAE,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACxC,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAM,WAAW,MAAM,6BAA6B,SAAS,wBAAwB,GAAG;AACxF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,OAAO,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,mBAAmB,MAAM,8BAA8B,IAAI,IAAI,UAAU,MAAM,eAAe;AAEpG,UAAI,iBAAiB,WAAW,GAAG;AACjC,cAAM,gCAAgC,MAAM,iBAAiB,cAAc,IAAI,QAAQ;AACvF,eAAO,CAAC;AAAA,MACV;AAEA,UAAI,6BAA6B;AACjC,UAAI,MAAM,kCAAkC;AAC1C,cAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACnE,YAAI,CAAC,IAAI,gBAAgB;AACvB,iBAAO,KAAK,yFAAyF;AAAA,YACnG,UAAU,IAAI;AAAA,YACd,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,uBAAuB,SAAS,KAAK;AACvC,iBAAO,KAAK,0FAA0F;AAAA,YACpG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB,gBAAgB,uBAAuB;AAAA,YACvC,cAAc;AAAA,UAChB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,CAAC,WAAW;AACd,iBAAO,KAAK,2FAA2F;AAAA,YACrG,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,UACzB,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI;AACF,gBAAM,cAAc,UAAU,QAAQ,aAAa;AAOnD,gBAAM,0BAAoC,CAAC;AAC3C,mBAAS,SAAS,GAAG,SAAS,uBAAuB,QAAQ,UAAU,IAAI;AACzE,kBAAM,aAAa,uBAAuB,MAAM,QAAQ,SAAS,EAAE;AACnE,kBAAM,UAAU,MAAM,QAAQ,IAAI,WAAW,IAAI,OAAO,qBAAqB;AAAA,cAC3E;AAAA,cACA,SAAS,MAAM,YAAY;AAAA,gBACzB;AAAA,gBACA,CAAC,MAAM,eAAe;AAAA,gBACtB,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AAAA,cACvE;AAAA,YACF,EAAE,CAAC;AACH,uBAAW,UAAU,SAAS;AAC5B,kBAAI,OAAO,QAAS,yBAAwB,KAAK,OAAO,eAAe;AAAA,YACzE;AAAA,UACF;AACA,uCAA6B;AAAA,QAC/B,SAAS,KAAK;AACZ,iBAAO,KAAK,iFAAiF;AAAA,YAC3F,UAAU,IAAI;AAAA,YACd,gBAAgB,IAAI;AAAA,YACpB,iBAAiB,MAAM;AAAA,YACvB;AAAA,UACF,CAAC;AACD,iBAAO,CAAC;AAAA,QACV;AAEA,YAAI,2BAA2B,WAAW,GAAG;AAC3C,gBAAM,gDAAgD,MAAM,iBAAiB,IAAI,cAAc;AAC/F,iBAAO,CAAC;AAAA,QACV;AAAA,MACF;AAEA,YAAM,8BAA8B,2BAA2B,QAAQ,yBAAyB,MAAM,eAAe;AAErH,YAAM;AAAA,QACJ,iBAAiB;AAAA,QACjB,kCAAkC;AAAA,QAClC,GAAG;AAAA,MACL,IAAI;AACJ,YAAM,gBAAgC,CAAC;AACvC,YAAM,yBAAyB,MAAM,KAAK,IAAI,IAAI,0BAA0B,CAAC;AAC7E,YAAM,WAAW,MAAM,6BAA6B,SAAS,wBAAwB,GAAG;AACxF,YAAM,UAAU,OAAO,KAAK;AAE5B,YAAM,QAAQ,cAAc,OAAO,OAAO;AACxC,mBAAW,EAAE,iBAAiB,SAAS,KAAK,UAAU;AACpD,gBAAM,eAAe,MAAM,4BAA4B,IAAI,SAAS,iBAAiB,KAAK,QAAQ;AAClG,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,cAAM,GAAG,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAC3D,YAAM,6BAA6B,UAAU,eAAe,GAAG;AAC/D,YAAM,0BAA0B,UAAU,eAAe,GAAG;AAE5D,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,gBAAgB,KAAK;AACpC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,UAAU;AACpC,qBAAa,SAAS;AACtB,qBAAa,SAAS,oBAAI,KAAK;AAC/B,cAAM,GAAG,MAAM;AAEf,cAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,KAAK;AACvB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AACnB,YAAM,aAAa,CAA+C,MAAc;AAC9E,YAAI,QAAQ,EACT,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,QAAQ,EAMpC,MAAM,gBAAgB,CAAQ;AACjC,YAAI,IAAI,gBAAgB;AACtB,kBAAQ,MAAM,MAAM,mBAA0B,KAAK,IAAI,cAAc;AAAA,QACvE;AACA,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM;AAAA,QACvB,GACG,WAAW,eAAsB,EACjC,OAAO;AAAA,UACN;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACL,EAAE,QAAQ;AAEV,UAAI,CAAC,WAAW,QAAQ;AACtB,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,MAAM;AAAA,QACzB,GAAG,YAAY,eAAsB,EAAE,IAAI;AAAA,UACzC,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAQ;AAAA,MACV,EAAE,iBAAiB;AACnB,YAAM,SAAS,OAAO,cAAc,kBAAkB,WAAW,MAAM;AAEvE,YAAM,4BAA4B,WAAW,KAAK,SAAS;AAE3D,YAAM,gBAAgB,MAAM,mBAAmB,IAAI,cAAc;AAAA,QAC/D,IAAI,EAAE,KAAK,WAAW,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;AAAA,MAC7C,GAAG,QAAW;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI,kBAAkB;AAAA,MACxC,CAAC;AAED,iBAAW,gBAAgB,eAAe;AACxC,cAAM,SAAS,KAAK,oBAAoB,MAAM;AAAA,UAC5C,gBAAgB,aAAa;AAAA,UAC7B,QAAQ,IAAI;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB,CAAC;AAED,cAAM,SAAS,KAAK,wBAAwB,SAAS;AAAA,UACnD,UAAU,aAAa;AAAA,UACvB,gBAAgB,aAAa,kBAAkB;AAAA,UAC/C,iBAAiB,aAAa;AAAA,UAC9B,cAAc,kBAAkB,YAAY;AAAA,QAC9C,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,QAAQ,gBAAgB,KAAK;AACjC,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,mBAAa,SAAS;AACtB,mBAAa,cAAc,oBAAI,KAAK;AACpC,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,WAAW;AAAA,QACjD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,gBAAgB,QAAQ,KAAK;AAClD,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,UAAI,aAAa,WAAW,aAAa;AACvC,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,UAAU;AAC/B,mBAAa,SAAS;AACtB,mBAAa,cAAc;AAE3B,UAAI,iBAAiB,UAAU;AAC7B,qBAAa,SAAS;AAAA,MACxB,WAAW,CAAC,aAAa,QAAQ;AAC/B,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,MACV,CAAC;AAED,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAAc,gBAAgB,OAAO,KAAK;AAC9C,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,eAAe,MAAM,8BAA8B,IAAI,gBAAgB,GAAG;AAEhF,YAAM,aAAa,aAAa;AAChC,YAAM,SAAS,YAAY,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,QAAQ;AAEvE,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,MAAM,kBAAkB;AAAA,MACpC;AAIA,UAAI,aAAa,WAAW,YAAY;AACtC,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAEA,YAAM,aAAa,oBAAI,KAAK;AAC5B,YAAM,iBAAiB,aAAa;AACpC,YAAM,qBAAqB,aAAa,cAAc;AACtD,YAAM,sBAAsB,aAAa,eAAe;AAKxD,YAAM,cAAe,MAAM,MAAM,EAAE,EAChC,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,aAAa;AAAA,QACb,cAAc,MAAM;AAAA,MACtB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,MAAM,UAAU,EACvC,iBAAiB;AAEpB,UAAI,OAAO,aAAa,kBAAkB,CAAC,MAAM,GAAG;AAClD,cAAM,SAAS,sCAAsC;AAAA,MACvD;AAOA,YAAM,eAAe,YAAY;AAC/B,cAAM,MAAM,EAAE,EACX,YAAY,eAAsB,EAClC,IAAI;AAAA,UACH,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,cAAc;AAAA,QAChB,CAAQ,EACP,MAAM,MAAa,KAAK,aAAa,EAAE,EACvC,MAAM,qBAA4B,KAAK,IAAI,MAAa,EACxD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,MAAM,UAAiB,KAAK,UAAU,EACtC,iBAAiB;AAAA,MACtB;AAEA,UAAI,SAAkB;AAEtB,UAAI,OAAO,aAAa,cAAc,WAAW;AAC/C,cAAM,eAAe;AAAA,UACnB,IAAI,aAAa;AAAA,UACjB,GAAG,MAAM;AAAA,QACX;AAGA,cAAM,aAAa;AAAA,UACjB;AAAA,UACA,MAAM;AAAA,YACJ,KAAK,IAAI;AAAA,YACT,UAAU,IAAI;AAAA,YACd,OAAO,IAAI;AAAA,UACb;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB,IAAI,kBAAkB;AAAA,UAC9C,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,cAAc,IAAI;AAAA,QAC/D;AAEA,YAAI;AACJ,YAAI;AACF,0BAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,YACzD,OAAO;AAAA,YACP,KAAK;AAAA,YACL,UAAU;AAAA,cACR,UAAU,IAAI;AAAA,cACd,gBAAgB,IAAI;AAAA,cACpB,cAAc;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH,SAAS,KAAK;AAGZ,cAAI;AACF,kBAAM,aAAa;AAAA,UACrB,SAAS,YAAY;AACnB,kBAAM,+CAA+C,UAAU;AAAA,UACjE;AACA,gBAAM;AAAA,QACR;AAEA,iBAAS,cAAc;AAAA,MACzB;AAEA,mBAAa,SAAS;AACtB,mBAAa,aAAa;AAC1B,mBAAa,cAAc,MAAM;AACjC,mBAAa,eAAe;AAE5B,UAAI,CAAC,aAAa,QAAQ;AACxB,qBAAa,SAAS,oBAAI,KAAK;AAAA,MACjC;AAEA,YAAM,GAAG,MAAM;AAEf,YAAM,4BAA4B,WAAW,KAAK,WAAW,aAAa,EAAE;AAC5E,YAAM,SAAS,KAAK,oBAAoB,UAAU;AAAA,QAChD,gBAAgB,aAAa;AAAA,QAC7B,UAAU,MAAM;AAAA,QAChB,QAAQ,IAAI;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAED,aAAO,EAAE,cAAc,OAAO;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,KAAK;AACxB,YAAM,KAAK,OAAO,KAAK;AACvB,aAAO,GAAG,MAAM,cAAc;AAAA,QAC5B,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,gCAAgC,GAAG;AAAA,UACnC,mBAAmB;AAAA,QACrB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAY,KAAK,OAAO;AAC5B,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,UAAmC;AAAA,QACvC,iBAAiB,IAAI;AAAA,QACrB,UAAU,IAAI;AAAA,QACd,MAAM;AAAA,UACJ,gCAAgC,GAAG;AAAA,UACnC,mBAAmB;AAAA,QACrB;AAAA,MACF;AAEA,UAAI,OAAO;AACT,gBAAQ,YAAY,EAAE,KAAK,IAAI,KAAK,KAAK,EAAE;AAAA,MAC7C;AAEA,YAAM,CAAC,eAAe,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrD,GAAG,KAAK,cAAc,SAAS;AAAA,UAC7B,SAAS,EAAE,WAAW,OAAO;AAAA,UAC7B,OAAO;AAAA,QACT,CAAC;AAAA,QACD,GAAG,MAAM,cAAc;AAAA,UACrB,iBAAiB,IAAI;AAAA,UACrB,UAAU,IAAI;AAAA,UACd,QAAQ;AAAA,UACR,MAAM;AAAA,YACJ,gCAAgC,GAAG;AAAA,YACnC,mBAAmB;AAAA,UACrB;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,YAAM,SAAS,cAAc,IAAI,iBAAiB;AAClD,YAAM,SAAS,QAAQ,OAAO,SAAS,IAAI;AAE3C,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,OAAO,CAAC,GAAG;AAAA,MACrB;AAAA,IACF;AAAA,IAEA,MAAM,iBAAiB;AACrB,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,iBAAiB,MAAM,GAC1B,WAAW,eAAsB,EACjC,OAAO;AAAA,QACN;AAAA,QACA;AAAA,MACF,CAAC,EACA,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,SAAS,EACT,QAAQ;AAEX,UAAI,CAAC,eAAe,OAAQ,QAAO;AAEnC,YAAM,eAAe,MAAM,GACxB,YAAY,eAAsB,EAClC,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,cAAc;AAAA,MAChB,CAAQ,EACP,MAAM,cAAqB,KAAK,UAAU,EAC1C,MAAM,UAAiB,UAAU,CAAC,YAAY,WAAW,CAAC,EAC1D,iBAAiB;AAEpB,iBAAW,SAAS,gBAAgB;AAClC,cAAM,4BAA4B,WAAW;AAAA,UAC3C,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB,GAAG,SAAS;AAAA,MACd;AAEA,aAAO,OAAO,cAAc,kBAAkB,CAAC;AAAA,IACjD;AAAA,IAEA,MAAM,eAAe,kBAAkB,gBAAgB,KAAK;AAC1D,YAAM,KAAK,OAAO,KAAK;AACvB,YAAM,KAAK,MAAM,EAAE;AAEnB,YAAM,eAAe,MAAM,GACxB,WAAW,eAAsB,EACjC,MAAM,sBAA6B,KAAK,gBAAgB,EACxD,MAAM,oBAA2B,KAAK,cAAc,EACpD,MAAM,aAAoB,KAAK,IAAI,QAAQ,EAC3C,iBAAiB;AAEpB,YAAM,eAAe,OAAO,cAAc,kBAAkB,CAAC;AAC7D,UAAI,eAAe,GAAG;AACpB,cAAM,4BAA4B,WAAW,KAAK,SAAS;AAAA,MAC7D;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAMO,SAAS,2BAA2B,WAEnB;AACtB,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,WAAW,UAAU,QAAQ,UAAU;AAG7C,MAAI;AACJ,MAAI;AACF,iBAAa,UAAU,QAAQ,YAAY;AAAA,EAC7C,QAAQ;AAEN,iBAAa;AAAA,EACf;AAEA,SAAO,0BAA0B,EAAE,IAAI,UAAU,YAAY,UAAU,CAAC;AAC1E;",
   "names": []
 }

package/dist/modules/notifications/lib/notificationVisibility.js

@@ -0,0 +1,24 @@
+import { sql } from "kysely";
+import { IN_APP_CHANNEL } from "./strategies/in-app-delivery-strategy.js";
+function inAppVisibleFilter() {
+  return {
+    $or: [
+      { channels: null },
+      { channels: { $contains: [IN_APP_CHANNEL] } }
+    ]
+  };
+}
+function isInAppVisible(channels) {
+  return channels == null || channels.includes(IN_APP_CHANNEL);
+}
+function inAppVisibleSql(columnRef = "channels") {
+  return sql`(${sql.ref(columnRef)} is null or ${sql.ref(columnRef)} @> ${sql.val(
+    JSON.stringify([IN_APP_CHANNEL])
+  )}::jsonb)`;
+}
+export {
+  inAppVisibleFilter,
+  inAppVisibleSql,
+  isInAppVisible
+};
+//# sourceMappingURL=notificationVisibility.js.map

package/dist/modules/notifications/lib/notificationVisibility.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/notifications/lib/notificationVisibility.ts"],
+  "sourcesContent": ["import { sql, type RawBuilder } from 'kysely'\nimport { IN_APP_CHANNEL } from './strategies/in-app-delivery-strategy'\n\n/**\n * MikroORM filter fragment selecting notifications that should be VISIBLE in the in-app surfaces\n * (bell, inbox list, unread count, poll). A row is visible when the `in_app` channel survived the\n * create-time delivery gate \u2014 i.e. `in_app \u2208 channels` \u2014 or when `channels` is NULL (legacy rows\n * and any environment without the seam wired, which behave as \"all channels\" for backward\n * compatibility). Rows targeted away from in-app (e.g. a push-only send, or a type/preference that\n * excluded in_app) still exist as durable records but are hidden here.\n *\n * AND-composed with the caller's other conditions when merged into a filter object.\n *\n * `channels` is a JSONB column (`data/entities.ts`); MikroORM's `$contains` maps to the Postgres\n * `@>` containment operator with a JSON-encoded operand \u2014 i.e. `channels @> '[\"in_app\"]'` \u2014 so a row\n * with `[\"in_app\",\"email\"]` matches and one with `[\"push\"]` does not. Same operator MikroORM emits for\n * the JSONB `$contains` filters already in production on `staff.role_ids` and `workflows.metadata`.\n */\nexport function inAppVisibleFilter(): { $or: Array<Record<string, unknown>> } {\n  return {\n    $or: [\n      { channels: null },\n      { channels: { $contains: [IN_APP_CHANNEL] } },\n    ],\n  }\n}\n\n/**\n * In-memory counterpart of {@link inAppVisibleFilter} for a single row's resolved channel set. Used\n * to gate the live bell SSE emit so a notification suppressed from the in-app channel does not push a\n * real-time badge/inbox update. `null`/`undefined` channels \u21D2 visible (legacy / all-channels).\n */\nexport function isInAppVisible(channels: string[] | null | undefined): boolean {\n  return channels == null || channels.includes(IN_APP_CHANNEL)\n}\n\n/**\n * Raw-SQL counterpart of {@link inAppVisibleFilter} for queries built with Kysely\n * (which cannot consume MikroORM's `$contains` fragment). Emits\n * `(<column> IS NULL OR <column> @> '[\"in_app\"]'::jsonb)` \u2014 the exact predicate\n * MikroORM produces \u2014 so raw and ORM paths stay in lock-step. `columnRef` MUST be\n * a trusted, code-controlled column identifier (never user input).\n */\nexport function inAppVisibleSql(columnRef = 'channels'): RawBuilder<boolean> {\n  return sql<boolean>`(${sql.ref(columnRef)} is null or ${sql.ref(columnRef)} @> ${sql.val(\n    JSON.stringify([IN_APP_CHANNEL]),\n  )}::jsonb)`\n}\n"],
+  "mappings": "AAAA,SAAS,WAA4B;AACrC,SAAS,sBAAsB;AAiBxB,SAAS,qBAA8D;AAC5E,SAAO;AAAA,IACL,KAAK;AAAA,MACH,EAAE,UAAU,KAAK;AAAA,MACjB,EAAE,UAAU,EAAE,WAAW,CAAC,cAAc,EAAE,EAAE;AAAA,IAC9C;AAAA,EACF;AACF;AAOO,SAAS,eAAe,UAAgD;AAC7E,SAAO,YAAY,QAAQ,SAAS,SAAS,cAAc;AAC7D;AASO,SAAS,gBAAgB,YAAY,YAAiC;AAC3E,SAAO,OAAgB,IAAI,IAAI,SAAS,CAAC,eAAe,IAAI,IAAI,SAAS,CAAC,OAAO,IAAI;AAAA,IACnF,KAAK,UAAU,CAAC,cAAc,CAAC;AAAA,EACjC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/notifications/lib/routeHelpers.js

@@ -1,12 +1,13 @@
 import { z } from "zod";
 import { resolveRequestContext } from "@open-mercato/shared/lib/api/context";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { runRouteMutationGuards } from "@open-mercato/shared/lib/crud/route-mutation-guard";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveNotificationService } from "./notificationService.js";
 const NOTIFICATION_RESOURCE_KIND = "notifications.notification";
 const NOTIFICATION_SETTINGS_RESOURCE_KIND = "notifications.settings";
+const NOTIFICATION_PREFERENCE_RESOURCE_KIND = "notifications.preference";
 function formatZodIssues(error) {
   return error.issues.map((issue) => {
     const path = issue.path.length ? `${issue.path.join(".")}: ` : "";
@@ -56,6 +57,14 @@ async function resolveNotificationContext(req) {
     service: resolveNotificationService(ctx.container),
     scope: {
       tenantId,
+      // The *creator's* org (the shared resolver already falls back to the caller's own org when
+      // nothing is selected), and the push strategy later scopes the recipient's device lookup to
+      // it. Same-org and self-notify (the common paths) match; a cross-org notify — an admin in
+      // org A notifying a user whose devices live in org B — won't match the recipient's devices,
+      // so push is silently dropped for that case. Same for a deliberate all-organizations
+      // selection, which stays tenant-level (org=null) and so only reaches null-org devices.
+      // In-app delivery is unaffected. If cross-org push is ever required, scope the device
+      // lookup by the recipient's org instead.
       organizationId,
       organizationIds,
       userId: ctx.auth?.sub ?? null
@@ -213,6 +222,7 @@ function createSingleNotificationActionOpenApi(summary, description) {
   };
 }
 export {
+  NOTIFICATION_PREFERENCE_RESOURCE_KIND,
   NOTIFICATION_RESOURCE_KIND,
   NOTIFICATION_SETTINGS_RESOURCE_KIND,
   TENANT_SCOPE_REQUIRED_ERROR_CODE,

package/dist/modules/notifications/lib/routeHelpers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/lib/routeHelpers.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { resolveRequestContext } from '@open-mercato/shared/lib/api/context'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveNotificationService, type NotificationService } from './notificationService'\n\n/**\n * Mutation-guard resource kind for notification rows.\n */\nexport const NOTIFICATION_RESOURCE_KIND = 'notifications.notification'\n\n/**\n * Mutation-guard resource kind for notification delivery settings.\n */\nexport const NOTIFICATION_SETTINGS_RESOURCE_KIND = 'notifications.settings'\n\n/**\n * Notification scope context for service calls\n */\nexport interface NotificationScope {\n  tenantId: string\n  organizationId: string | null\n  organizationIds?: string[] | null\n  userId: string | null\n}\n\n/**\n * Resolved notification context from a request\n */\nexport interface NotificationRequestContext {\n  service: NotificationService\n  scope: NotificationScope\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx']\n}\n\nfunction formatZodIssues(error: z.ZodError): string {\n  return error.issues\n    .map((issue) => {\n      const path = issue.path.length ? `${issue.path.join('.')}: ` : ''\n      return `${path}${issue.message}`\n    })\n    .join('; ')\n}\n\nexport async function notificationValidationErrorResponse(error: z.ZodError): Promise<Response> {\n  const { t } = await resolveTranslations()\n  const prefix = t('api.errors.invalidPayload', 'Invalid request body')\n  const details = formatZodIssues(error)\n  return Response.json(\n    { error: details ? `${prefix}: ${details}` : prefix },\n    { status: 400 },\n  )\n}\n\nexport function notificationCrudErrorResponse(error: unknown): Response | null {\n  if (!isCrudHttpError(error)) return null\n  return Response.json(error.body ?? { error: 'Notification request failed' }, { status: error.status })\n}\n\n/**\n * Machine-readable discriminator for the tenant-scope rejection, mirroring\n * `ORGANIZATION_SCOPE_REQUIRED_ERROR_CODE`. Without it a client cannot tell an unresolved scope\n * apart from an ordinary permission denial, since both are a 403 carrying only a message.\n */\nexport const TENANT_SCOPE_REQUIRED_ERROR_CODE = 'tenant_scope_required'\n\n/**\n * Fail closed when a request cannot be resolved to a tenant.\n *\n * `resolveNotificationContext` falls back to `''` when neither the organization scope nor the auth\n * context yields a tenant \u2014 reachable for a genuinely tenant-less principal such as an unscoped\n * super-admin API key. `notifications.tenant_id` is a NOT NULL uuid, so that `''` makes the driver\n * reject every read and write built from the scope; dropping the tenant predicate instead would\n * leave `recipientUserId` as the only thing keeping a read inside one tenant.\n *\n * Unlike the audit-log read guard there is no `isSuperAdmin` escape hatch: notification rows are\n * per-recipient and per-tenant, so there is no cross-tenant read mode to preserve.\n *\n * Plain truthiness is deliberate \u2014 it matches the `?? ''` sentinel and also rejects a null or\n * omitted tenant reaching this helper from a caller that builds its own scope.\n */\nexport async function requireResolvedNotificationTenantScope(\n  scope: { tenantId?: string | null },\n): Promise<Response | null> {\n  if (scope.tenantId) return null\n  const { t } = await resolveTranslations()\n  return Response.json(\n    {\n      error: t('api.errors.forbidden', 'Forbidden'),\n      code: TENANT_SCOPE_REQUIRED_ERROR_CODE,\n    },\n    { status: 403 },\n  )\n}\n\n/**\n * Resolve notification service and scope from a request.\n * Centralizes the common pattern used across all notification API routes.\n */\nexport async function resolveNotificationContext(req: Request): Promise<NotificationRequestContext> {\n  const { ctx } = await resolveRequestContext(req)\n  const organizationScope = await resolveOrganizationScopeForRequest({\n    container: ctx.container,\n    auth: ctx.auth,\n    request: req,\n    ...(ctx.selectedOrganizationId === undefined\n      ? {}\n      : { selectedId: ctx.selectedOrganizationId }),\n  })\n  const tenantId = organizationScope.tenantId ?? ctx.auth?.tenantId ?? ''\n  const organizationId = organizationScope.selectedId\n  const organizationIds = organizationScope.filterIds\n  ctx.organizationScope = organizationScope\n  ctx.selectedOrganizationId = organizationId\n  ctx.organizationIds = organizationIds\n  return {\n    service: resolveNotificationService(ctx.container),\n    scope: {\n      tenantId,\n      organizationId,\n      organizationIds,\n      userId: ctx.auth?.sub ?? null,\n    },\n    ctx,\n  }\n}\n\nexport type GuardedNotificationContext =\n  | ({ ok: true } & NotificationRequestContext)\n  | { ok: false; response: Response }\n\n/**\n * Resolve the notification context and reject the request when it has no tenant.\n *\n * Writes are structurally safe because every one of them funnels through\n * `runGuardedNotificationWrite`. Reads have no such choke point, so they resolve their context\n * through this wrapper instead: a route that forgets to check cannot compile past the discriminated\n * result, which makes the guard impossible to skip by omission rather than by convention.\n */\nexport async function resolveGuardedNotificationContext(req: Request): Promise<GuardedNotificationContext> {\n  const resolved = await resolveNotificationContext(req)\n  const tenantScopeGuard = await requireResolvedNotificationTenantScope(resolved.scope)\n  if (tenantScopeGuard) return { ok: false, response: tenantScopeGuard }\n  return { ok: true, ...resolved }\n}\n\n/**\n * Mutation-guard options for a notification write.\n */\nexport interface NotificationMutationGuardOptions {\n  resourceKind: string\n  resourceId?: string | null\n  operation: 'create' | 'update' | 'delete' | 'custom'\n  payload?: Record<string, unknown> | null\n}\n\nexport type GuardedNotificationWriteResult<T> =\n  | { ok: true; result: T }\n  | { ok: false; response: Response }\n\n/**\n * Run a notification write through the mutation guard lifecycle.\n * Validates before the mutation, performs the write, then runs after-success\n * hooks only when the write succeeded and the guard requested them. Returns the\n * guard's own block response when validation fails so authorization behavior and\n * conflict shapes are preserved.\n */\nexport async function runGuardedNotificationWrite<T>(\n  container: AwilixContainer,\n  scope: NotificationScope,\n  req: Request,\n  options: NotificationMutationGuardOptions,\n  write: () => Promise<T>,\n): Promise<GuardedNotificationWriteResult<T>> {\n  const tenantScopeGuard = await requireResolvedNotificationTenantScope(scope)\n  if (tenantScopeGuard) {\n    return { ok: false, response: tenantScopeGuard }\n  }\n\n  const guarded = await runRouteMutationGuards({\n    container,\n    req,\n    auth: {\n      userId: scope.userId ?? '',\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    input: {\n      resourceKind: options.resourceKind,\n      resourceId: options.resourceId ?? null,\n      operation: options.operation,\n      mutationPayload: options.payload ?? null,\n    },\n  })\n  if (!guarded.ok) {\n    return { ok: false, response: guarded.response }\n  }\n\n  const result = await write()\n\n  await guarded.runAfterSuccess()\n\n  return { ok: true, result }\n}\n\n/**\n * Create a POST handler for bulk notification creation routes.\n * Used by batch, role, and feature notification endpoints.\n */\nexport function createBulkNotificationRoute<TSchema extends z.ZodTypeAny>(\n  schema: TSchema,\n  serviceMethod: 'createBatch' | 'createForRole' | 'createForFeature'\n) {\n  return async function POST(req: Request) {\n    const { service, scope, ctx } = await resolveNotificationContext(req)\n\n    const body = await req.json().catch(() => ({}))\n    const parsed = schema.safeParse(body)\n    if (!parsed.success) {\n      return notificationValidationErrorResponse(parsed.error)\n    }\n\n    try {\n      const guarded = await runGuardedNotificationWrite(\n        ctx.container,\n        scope,\n        req,\n        {\n          resourceKind: NOTIFICATION_RESOURCE_KIND,\n          operation: 'create',\n          payload: parsed.data as Record<string, unknown>,\n        },\n        () => service[serviceMethod](parsed.data as never, scope),\n      )\n      if (!guarded.ok) return guarded.response\n      const notifications = guarded.result\n\n      return Response.json({\n        ok: true,\n        count: notifications.length,\n        ids: notifications.map((n) => n.id),\n      }, { status: 201 })\n    } catch (error) {\n      const errorResponse = notificationCrudErrorResponse(error)\n      if (errorResponse) return errorResponse\n      throw error\n    }\n  }\n}\n\n/**\n * Create OpenAPI spec for bulk notification creation routes.\n */\nexport function createBulkNotificationOpenApi<TSchema extends z.ZodTypeAny>(\n  schema: TSchema,\n  summary: string,\n  description?: string\n) {\n  return {\n    POST: {\n      summary,\n      description,\n      tags: ['Notifications'],\n      requestBody: {\n        required: true,\n        content: {\n          'application/json': {\n            schema,\n          },\n        },\n      },\n      responses: {\n        201: {\n          description: 'Notifications created',\n          content: {\n            'application/json': {\n              schema: z.object({\n                ok: z.boolean(),\n                count: z.number(),\n                ids: z.array(z.string().uuid()),\n              }),\n            },\n          },\n        },\n      },\n    },\n  }\n}\n\n/**\n * Create a PUT handler for single notification action routes.\n * Used by read and dismiss endpoints.\n */\nexport function createSingleNotificationActionRoute(\n  serviceMethod: 'markAsRead' | 'dismiss'\n) {\n  return async function PUT(req: Request, { params }: { params: Promise<{ id: string }> }) {\n    const { id } = await params\n    const { service, scope, ctx } = await resolveNotificationContext(req)\n\n    try {\n      const guarded = await runGuardedNotificationWrite(\n        ctx.container,\n        scope,\n        req,\n        {\n          resourceKind: NOTIFICATION_RESOURCE_KIND,\n          resourceId: id,\n          operation: 'update',\n        },\n        () => service[serviceMethod](id, scope),\n      )\n      if (!guarded.ok) return guarded.response\n    } catch (error) {\n      const errorResponse = notificationCrudErrorResponse(error)\n      if (errorResponse) return errorResponse\n      throw error\n    }\n\n    return Response.json({ ok: true })\n  }\n}\n\n/**\n * Create OpenAPI spec for single notification action routes.\n */\nexport function createSingleNotificationActionOpenApi(\n  summary: string,\n  description: string\n) {\n  return {\n    PUT: {\n      summary,\n      tags: ['Notifications'],\n      parameters: [\n        {\n          name: 'id',\n          in: 'path',\n          required: true,\n          schema: { type: 'string', format: 'uuid' },\n        },\n      ],\n      responses: {\n        200: {\n          description,\n          content: {\n            'application/json': {\n              schema: z.object({ ok: z.boolean() }),\n            },\n          },\n        },\n      },\n    },\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,0CAA0C;AACnD,SAAS,kCAA4D;AAK9D,MAAM,6BAA6B;AAKnC,MAAM,sCAAsC;AAqBnD,SAAS,gBAAgB,OAA2B;AAClD,SAAO,MAAM,OACV,IAAI,CAAC,UAAU;AACd,UAAM,OAAO,MAAM,KAAK,SAAS,GAAG,MAAM,KAAK,KAAK,GAAG,CAAC,OAAO;AAC/D,WAAO,GAAG,IAAI,GAAG,MAAM,OAAO;AAAA,EAChC,CAAC,EACA,KAAK,IAAI;AACd;AAEA,eAAsB,oCAAoC,OAAsC;AAC9F,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,SAAS,EAAE,6BAA6B,sBAAsB;AACpE,QAAM,UAAU,gBAAgB,KAAK;AACrC,SAAO,SAAS;AAAA,IACd,EAAE,OAAO,UAAU,GAAG,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACpD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,SAAS,8BAA8B,OAAiC;AAC7E,MAAI,CAAC,gBAAgB,KAAK,EAAG,QAAO;AACpC,SAAO,SAAS,KAAK,MAAM,QAAQ,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,MAAM,OAAO,CAAC;AACvG;AAOO,MAAM,mCAAmC;AAiBhD,eAAsB,uCACpB,OAC0B;AAC1B,MAAI,MAAM,SAAU,QAAO;AAC3B,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,SAAO,SAAS;AAAA,IACd;AAAA,MACE,OAAO,EAAE,wBAAwB,WAAW;AAAA,MAC5C,MAAM;AAAA,IACR;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAMA,eAAsB,2BAA2B,KAAmD;AAClG,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,QAAM,oBAAoB,MAAM,mCAAmC;AAAA,IACjE,WAAW,IAAI;AAAA,IACf,MAAM,IAAI;AAAA,IACV,SAAS;AAAA,IACT,GAAI,IAAI,2BAA2B,SAC/B,CAAC,IACD,EAAE,YAAY,IAAI,uBAAuB;AAAA,EAC/C,CAAC;AACD,QAAM,WAAW,kBAAkB,YAAY,IAAI,MAAM,YAAY;AACrE,QAAM,iBAAiB,kBAAkB;AACzC,QAAM,kBAAkB,kBAAkB;AAC1C,MAAI,oBAAoB;AACxB,MAAI,yBAAyB;AAC7B,MAAI,kBAAkB;AACtB,SAAO;AAAA,IACL,SAAS,2BAA2B,IAAI,SAAS;AAAA,IACjD,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,IAAI,MAAM,OAAO;AAAA,IAC3B;AAAA,IACA;AAAA,EACF;AACF;AAcA,eAAsB,kCAAkC,KAAmD;AACzG,QAAM,WAAW,MAAM,2BAA2B,GAAG;AACrD,QAAM,mBAAmB,MAAM,uCAAuC,SAAS,KAAK;AACpF,MAAI,iBAAkB,QAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB;AACrE,SAAO,EAAE,IAAI,MAAM,GAAG,SAAS;AACjC;AAuBA,eAAsB,4BACpB,WACA,OACA,KACA,SACA,OAC4C;AAC5C,QAAM,mBAAmB,MAAM,uCAAuC,KAAK;AAC3E,MAAI,kBAAkB;AACpB,WAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB;AAAA,EACjD;AAEA,QAAM,UAAU,MAAM,uBAAuB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,MAAM,UAAU;AAAA,MACxB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,OAAO;AAAA,MACL,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ,cAAc;AAAA,MAClC,WAAW,QAAQ;AAAA,MACnB,iBAAiB,QAAQ,WAAW;AAAA,IACtC;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,EAAE,IAAI,OAAO,UAAU,QAAQ,SAAS;AAAA,EACjD;AAEA,QAAM,SAAS,MAAM,MAAM;AAE3B,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,EAAE,IAAI,MAAM,OAAO;AAC5B;AAMO,SAAS,4BACd,QACA,eACA;AACA,SAAO,eAAe,KAAK,KAAc;AACvC,UAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,SAAS,OAAO,UAAU,IAAI;AACpC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,oCAAoC,OAAO,KAAK;AAAA,IACzD;AAEA,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,QACpB,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,cAAc;AAAA,UACd,WAAW;AAAA,UACX,SAAS,OAAO;AAAA,QAClB;AAAA,QACA,MAAM,QAAQ,aAAa,EAAE,OAAO,MAAe,KAAK;AAAA,MAC1D;AACA,UAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAChC,YAAM,gBAAgB,QAAQ;AAE9B,aAAO,SAAS,KAAK;AAAA,QACnB,IAAI;AAAA,QACJ,OAAO,cAAc;AAAA,QACrB,KAAK,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,MACpC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB,SAAS,OAAO;AACd,YAAM,gBAAgB,8BAA8B,KAAK;AACzD,UAAI,cAAe,QAAO;AAC1B,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAKO,SAAS,8BACd,QACA,SACA,aACA;AACA,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM,CAAC,eAAe;AAAA,MACtB,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT,KAAK;AAAA,UACH,aAAa;AAAA,UACb,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ,EAAE,OAAO;AAAA,gBACf,IAAI,EAAE,QAAQ;AAAA,gBACd,OAAO,EAAE,OAAO;AAAA,gBAChB,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,cAChC,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAMO,SAAS,oCACd,eACA;AACA,SAAO,eAAe,IAAI,KAAc,EAAE,OAAO,GAAwC;AACvF,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,QACpB,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,QACb;AAAA,QACA,MAAM,QAAQ,aAAa,EAAE,IAAI,KAAK;AAAA,MACxC;AACA,UAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAAA,IAClC,SAAS,OAAO;AACd,YAAM,gBAAgB,8BAA8B,KAAK;AACzD,UAAI,cAAe,QAAO;AAC1B,YAAM;AAAA,IACR;AAEA,WAAO,SAAS,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACnC;AACF;AAKO,SAAS,sCACd,SACA,aACA;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA,MAAM,CAAC,eAAe;AAAA,MACtB,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,QAC3C;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT,KAAK;AAAA,UACH;AAAA,UACA,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAAA,YACtC;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport { resolveRequestContext } from '@open-mercato/shared/lib/api/context'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { runRouteMutationGuards } from '@open-mercato/shared/lib/crud/route-mutation-guard'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveNotificationService, type NotificationService } from './notificationService'\n\n/**\n * Mutation-guard resource kind for notification rows.\n */\nexport const NOTIFICATION_RESOURCE_KIND = 'notifications.notification'\n\n/**\n * Mutation-guard resource kind for notification delivery settings.\n */\nexport const NOTIFICATION_SETTINGS_RESOURCE_KIND = 'notifications.settings'\n\n/**\n * Mutation-guard resource kind for a user's channel preferences.\n */\nexport const NOTIFICATION_PREFERENCE_RESOURCE_KIND = 'notifications.preference'\n\n/**\n * Notification scope context for service calls\n */\nexport interface NotificationScope {\n  tenantId: string\n  organizationId: string | null\n  organizationIds?: string[] | null\n  userId: string | null\n}\n\n/**\n * Resolved notification context from a request\n */\nexport interface NotificationRequestContext {\n  service: NotificationService\n  scope: NotificationScope\n  ctx: Awaited<ReturnType<typeof resolveRequestContext>>['ctx']\n}\n\nfunction formatZodIssues(error: z.ZodError): string {\n  return error.issues\n    .map((issue) => {\n      const path = issue.path.length ? `${issue.path.join('.')}: ` : ''\n      return `${path}${issue.message}`\n    })\n    .join('; ')\n}\n\nexport async function notificationValidationErrorResponse(error: z.ZodError): Promise<Response> {\n  const { t } = await resolveTranslations()\n  const prefix = t('api.errors.invalidPayload', 'Invalid request body')\n  const details = formatZodIssues(error)\n  return Response.json(\n    { error: details ? `${prefix}: ${details}` : prefix },\n    { status: 400 },\n  )\n}\n\nexport function notificationCrudErrorResponse(error: unknown): Response | null {\n  if (!isCrudHttpError(error)) return null\n  return Response.json(error.body ?? { error: 'Notification request failed' }, { status: error.status })\n}\n\n/**\n * Machine-readable discriminator for the tenant-scope rejection, mirroring\n * `ORGANIZATION_SCOPE_REQUIRED_ERROR_CODE`. Without it a client cannot tell an unresolved scope\n * apart from an ordinary permission denial, since both are a 403 carrying only a message.\n */\nexport const TENANT_SCOPE_REQUIRED_ERROR_CODE = 'tenant_scope_required'\n\n/**\n * Fail closed when a request cannot be resolved to a tenant.\n *\n * `resolveNotificationContext` falls back to `''` when neither the organization scope nor the auth\n * context yields a tenant \u2014 reachable for a genuinely tenant-less principal such as an unscoped\n * super-admin API key. `notifications.tenant_id` is a NOT NULL uuid, so that `''` makes the driver\n * reject every read and write built from the scope; dropping the tenant predicate instead would\n * leave `recipientUserId` as the only thing keeping a read inside one tenant.\n *\n * Unlike the audit-log read guard there is no `isSuperAdmin` escape hatch: notification rows are\n * per-recipient and per-tenant, so there is no cross-tenant read mode to preserve.\n *\n * Plain truthiness is deliberate \u2014 it matches the `?? ''` sentinel and also rejects a null or\n * omitted tenant reaching this helper from a caller that builds its own scope.\n */\nexport async function requireResolvedNotificationTenantScope(\n  scope: { tenantId?: string | null },\n): Promise<Response | null> {\n  if (scope.tenantId) return null\n  const { t } = await resolveTranslations()\n  return Response.json(\n    {\n      error: t('api.errors.forbidden', 'Forbidden'),\n      code: TENANT_SCOPE_REQUIRED_ERROR_CODE,\n    },\n    { status: 403 },\n  )\n}\n\n/**\n * Resolve notification service and scope from a request.\n * Centralizes the common pattern used across all notification API routes.\n */\nexport async function resolveNotificationContext(req: Request): Promise<NotificationRequestContext> {\n  const { ctx } = await resolveRequestContext(req)\n  const organizationScope = await resolveOrganizationScopeForRequest({\n    container: ctx.container,\n    auth: ctx.auth,\n    request: req,\n    ...(ctx.selectedOrganizationId === undefined\n      ? {}\n      : { selectedId: ctx.selectedOrganizationId }),\n  })\n  const tenantId = organizationScope.tenantId ?? ctx.auth?.tenantId ?? ''\n  const organizationId = organizationScope.selectedId\n  const organizationIds = organizationScope.filterIds\n  ctx.organizationScope = organizationScope\n  ctx.selectedOrganizationId = organizationId\n  ctx.organizationIds = organizationIds\n  return {\n    service: resolveNotificationService(ctx.container),\n    scope: {\n      tenantId,\n      // The *creator's* org (the shared resolver already falls back to the caller's own org when\n      // nothing is selected), and the push strategy later scopes the recipient's device lookup to\n      // it. Same-org and self-notify (the common paths) match; a cross-org notify \u2014 an admin in\n      // org A notifying a user whose devices live in org B \u2014 won't match the recipient's devices,\n      // so push is silently dropped for that case. Same for a deliberate all-organizations\n      // selection, which stays tenant-level (org=null) and so only reaches null-org devices.\n      // In-app delivery is unaffected. If cross-org push is ever required, scope the device\n      // lookup by the recipient's org instead.\n      organizationId,\n      organizationIds,\n      userId: ctx.auth?.sub ?? null,\n    },\n    ctx,\n  }\n}\n\nexport type GuardedNotificationContext =\n  | ({ ok: true } & NotificationRequestContext)\n  | { ok: false; response: Response }\n\n/**\n * Resolve the notification context and reject the request when it has no tenant.\n *\n * Writes are structurally safe because every one of them funnels through\n * `runGuardedNotificationWrite`. Reads have no such choke point, so they resolve their context\n * through this wrapper instead: a route that forgets to check cannot compile past the discriminated\n * result, which makes the guard impossible to skip by omission rather than by convention.\n */\nexport async function resolveGuardedNotificationContext(req: Request): Promise<GuardedNotificationContext> {\n  const resolved = await resolveNotificationContext(req)\n  const tenantScopeGuard = await requireResolvedNotificationTenantScope(resolved.scope)\n  if (tenantScopeGuard) return { ok: false, response: tenantScopeGuard }\n  return { ok: true, ...resolved }\n}\n\n/**\n * Mutation-guard options for a notification write.\n */\nexport interface NotificationMutationGuardOptions {\n  resourceKind: string\n  resourceId?: string | null\n  operation: 'create' | 'update' | 'delete' | 'custom'\n  payload?: Record<string, unknown> | null\n}\n\nexport type GuardedNotificationWriteResult<T> =\n  | { ok: true; result: T }\n  | { ok: false; response: Response }\n\n/**\n * Run a notification write through the mutation guard lifecycle.\n * Validates before the mutation, performs the write, then runs after-success\n * hooks only when the write succeeded and the guard requested them. Returns the\n * guard's own block response when validation fails so authorization behavior and\n * conflict shapes are preserved.\n */\nexport async function runGuardedNotificationWrite<T>(\n  container: AwilixContainer,\n  scope: NotificationScope,\n  req: Request,\n  options: NotificationMutationGuardOptions,\n  write: () => Promise<T>,\n): Promise<GuardedNotificationWriteResult<T>> {\n  const tenantScopeGuard = await requireResolvedNotificationTenantScope(scope)\n  if (tenantScopeGuard) {\n    return { ok: false, response: tenantScopeGuard }\n  }\n\n  const guarded = await runRouteMutationGuards({\n    container,\n    req,\n    auth: {\n      userId: scope.userId ?? '',\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    input: {\n      resourceKind: options.resourceKind,\n      resourceId: options.resourceId ?? null,\n      operation: options.operation,\n      mutationPayload: options.payload ?? null,\n    },\n  })\n  if (!guarded.ok) {\n    return { ok: false, response: guarded.response }\n  }\n\n  const result = await write()\n\n  await guarded.runAfterSuccess()\n\n  return { ok: true, result }\n}\n\n/**\n * Create a POST handler for bulk notification creation routes.\n * Used by batch, role, and feature notification endpoints.\n */\nexport function createBulkNotificationRoute<TSchema extends z.ZodTypeAny>(\n  schema: TSchema,\n  serviceMethod: 'createBatch' | 'createForRole' | 'createForFeature'\n) {\n  return async function POST(req: Request) {\n    const { service, scope, ctx } = await resolveNotificationContext(req)\n\n    const body = await req.json().catch(() => ({}))\n    const parsed = schema.safeParse(body)\n    if (!parsed.success) {\n      return notificationValidationErrorResponse(parsed.error)\n    }\n\n    try {\n      const guarded = await runGuardedNotificationWrite(\n        ctx.container,\n        scope,\n        req,\n        {\n          resourceKind: NOTIFICATION_RESOURCE_KIND,\n          operation: 'create',\n          payload: parsed.data as Record<string, unknown>,\n        },\n        () => service[serviceMethod](parsed.data as never, scope),\n      )\n      if (!guarded.ok) return guarded.response\n      const notifications = guarded.result\n\n      return Response.json({\n        ok: true,\n        count: notifications.length,\n        ids: notifications.map((n) => n.id),\n      }, { status: 201 })\n    } catch (error) {\n      const errorResponse = notificationCrudErrorResponse(error)\n      if (errorResponse) return errorResponse\n      throw error\n    }\n  }\n}\n\n/**\n * Create OpenAPI spec for bulk notification creation routes.\n */\nexport function createBulkNotificationOpenApi<TSchema extends z.ZodTypeAny>(\n  schema: TSchema,\n  summary: string,\n  description?: string\n) {\n  return {\n    POST: {\n      summary,\n      description,\n      tags: ['Notifications'],\n      requestBody: {\n        required: true,\n        content: {\n          'application/json': {\n            schema,\n          },\n        },\n      },\n      responses: {\n        201: {\n          description: 'Notifications created',\n          content: {\n            'application/json': {\n              schema: z.object({\n                ok: z.boolean(),\n                count: z.number(),\n                ids: z.array(z.string().uuid()),\n              }),\n            },\n          },\n        },\n      },\n    },\n  }\n}\n\n/**\n * Create a PUT handler for single notification action routes.\n * Used by read and dismiss endpoints.\n */\nexport function createSingleNotificationActionRoute(\n  serviceMethod: 'markAsRead' | 'dismiss'\n) {\n  return async function PUT(req: Request, { params }: { params: Promise<{ id: string }> }) {\n    const { id } = await params\n    const { service, scope, ctx } = await resolveNotificationContext(req)\n\n    try {\n      const guarded = await runGuardedNotificationWrite(\n        ctx.container,\n        scope,\n        req,\n        {\n          resourceKind: NOTIFICATION_RESOURCE_KIND,\n          resourceId: id,\n          operation: 'update',\n        },\n        () => service[serviceMethod](id, scope),\n      )\n      if (!guarded.ok) return guarded.response\n    } catch (error) {\n      const errorResponse = notificationCrudErrorResponse(error)\n      if (errorResponse) return errorResponse\n      throw error\n    }\n\n    return Response.json({ ok: true })\n  }\n}\n\n/**\n * Create OpenAPI spec for single notification action routes.\n */\nexport function createSingleNotificationActionOpenApi(\n  summary: string,\n  description: string\n) {\n  return {\n    PUT: {\n      summary,\n      tags: ['Notifications'],\n      parameters: [\n        {\n          name: 'id',\n          in: 'path',\n          required: true,\n          schema: { type: 'string', format: 'uuid' },\n        },\n      ],\n      responses: {\n        200: {\n          description,\n          content: {\n            'application/json': {\n              schema: z.object({ ok: z.boolean() }),\n            },\n          },\n        },\n      },\n    },\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,6BAA6B;AACtC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,kCAA4D;AAK9D,MAAM,6BAA6B;AAKnC,MAAM,sCAAsC;AAK5C,MAAM,wCAAwC;AAqBrD,SAAS,gBAAgB,OAA2B;AAClD,SAAO,MAAM,OACV,IAAI,CAAC,UAAU;AACd,UAAM,OAAO,MAAM,KAAK,SAAS,GAAG,MAAM,KAAK,KAAK,GAAG,CAAC,OAAO;AAC/D,WAAO,GAAG,IAAI,GAAG,MAAM,OAAO;AAAA,EAChC,CAAC,EACA,KAAK,IAAI;AACd;AAEA,eAAsB,oCAAoC,OAAsC;AAC9F,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,QAAM,SAAS,EAAE,6BAA6B,sBAAsB;AACpE,QAAM,UAAU,gBAAgB,KAAK;AACrC,SAAO,SAAS;AAAA,IACd,EAAE,OAAO,UAAU,GAAG,MAAM,KAAK,OAAO,KAAK,OAAO;AAAA,IACpD,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,SAAS,8BAA8B,OAAiC;AAC7E,MAAI,CAAC,gBAAgB,KAAK,EAAG,QAAO;AACpC,SAAO,SAAS,KAAK,MAAM,QAAQ,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,MAAM,OAAO,CAAC;AACvG;AAOO,MAAM,mCAAmC;AAiBhD,eAAsB,uCACpB,OAC0B;AAC1B,MAAI,MAAM,SAAU,QAAO;AAC3B,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AACxC,SAAO,SAAS;AAAA,IACd;AAAA,MACE,OAAO,EAAE,wBAAwB,WAAW;AAAA,MAC5C,MAAM;AAAA,IACR;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAMA,eAAsB,2BAA2B,KAAmD;AAClG,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAsB,GAAG;AAC/C,QAAM,oBAAoB,MAAM,mCAAmC;AAAA,IACjE,WAAW,IAAI;AAAA,IACf,MAAM,IAAI;AAAA,IACV,SAAS;AAAA,IACT,GAAI,IAAI,2BAA2B,SAC/B,CAAC,IACD,EAAE,YAAY,IAAI,uBAAuB;AAAA,EAC/C,CAAC;AACD,QAAM,WAAW,kBAAkB,YAAY,IAAI,MAAM,YAAY;AACrE,QAAM,iBAAiB,kBAAkB;AACzC,QAAM,kBAAkB,kBAAkB;AAC1C,MAAI,oBAAoB;AACxB,MAAI,yBAAyB;AAC7B,MAAI,kBAAkB;AACtB,SAAO;AAAA,IACL,SAAS,2BAA2B,IAAI,SAAS;AAAA,IACjD,OAAO;AAAA,MACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA;AAAA,MACA;AAAA,MACA,QAAQ,IAAI,MAAM,OAAO;AAAA,IAC3B;AAAA,IACA;AAAA,EACF;AACF;AAcA,eAAsB,kCAAkC,KAAmD;AACzG,QAAM,WAAW,MAAM,2BAA2B,GAAG;AACrD,QAAM,mBAAmB,MAAM,uCAAuC,SAAS,KAAK;AACpF,MAAI,iBAAkB,QAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB;AACrE,SAAO,EAAE,IAAI,MAAM,GAAG,SAAS;AACjC;AAuBA,eAAsB,4BACpB,WACA,OACA,KACA,SACA,OAC4C;AAC5C,QAAM,mBAAmB,MAAM,uCAAuC,KAAK;AAC3E,MAAI,kBAAkB;AACpB,WAAO,EAAE,IAAI,OAAO,UAAU,iBAAiB;AAAA,EACjD;AAEA,QAAM,UAAU,MAAM,uBAAuB;AAAA,IAC3C;AAAA,IACA;AAAA,IACA,MAAM;AAAA,MACJ,QAAQ,MAAM,UAAU;AAAA,MACxB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,OAAO;AAAA,MACL,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ,cAAc;AAAA,MAClC,WAAW,QAAQ;AAAA,MACnB,iBAAiB,QAAQ,WAAW;AAAA,IACtC;AAAA,EACF,CAAC;AACD,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,EAAE,IAAI,OAAO,UAAU,QAAQ,SAAS;AAAA,EACjD;AAEA,QAAM,SAAS,MAAM,MAAM;AAE3B,QAAM,QAAQ,gBAAgB;AAE9B,SAAO,EAAE,IAAI,MAAM,OAAO;AAC5B;AAMO,SAAS,4BACd,QACA,eACA;AACA,SAAO,eAAe,KAAK,KAAc;AACvC,UAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,SAAS,OAAO,UAAU,IAAI;AACpC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,oCAAoC,OAAO,KAAK;AAAA,IACzD;AAEA,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,QACpB,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,cAAc;AAAA,UACd,WAAW;AAAA,UACX,SAAS,OAAO;AAAA,QAClB;AAAA,QACA,MAAM,QAAQ,aAAa,EAAE,OAAO,MAAe,KAAK;AAAA,MAC1D;AACA,UAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAChC,YAAM,gBAAgB,QAAQ;AAE9B,aAAO,SAAS,KAAK;AAAA,QACnB,IAAI;AAAA,QACJ,OAAO,cAAc;AAAA,QACrB,KAAK,cAAc,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,MACpC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB,SAAS,OAAO;AACd,YAAM,gBAAgB,8BAA8B,KAAK;AACzD,UAAI,cAAe,QAAO;AAC1B,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAKO,SAAS,8BACd,QACA,SACA,aACA;AACA,SAAO;AAAA,IACL,MAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM,CAAC,eAAe;AAAA,MACtB,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT,KAAK;AAAA,UACH,aAAa;AAAA,UACb,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ,EAAE,OAAO;AAAA,gBACf,IAAI,EAAE,QAAQ;AAAA,gBACd,OAAO,EAAE,OAAO;AAAA,gBAChB,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,cAChC,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAMO,SAAS,oCACd,eACA;AACA,SAAO,eAAe,IAAI,KAAc,EAAE,OAAO,GAAwC;AACvF,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,EAAE,SAAS,OAAO,IAAI,IAAI,MAAM,2BAA2B,GAAG;AAEpE,QAAI;AACF,YAAM,UAAU,MAAM;AAAA,QACpB,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,UACE,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,QACb;AAAA,QACA,MAAM,QAAQ,aAAa,EAAE,IAAI,KAAK;AAAA,MACxC;AACA,UAAI,CAAC,QAAQ,GAAI,QAAO,QAAQ;AAAA,IAClC,SAAS,OAAO;AACd,YAAM,gBAAgB,8BAA8B,KAAK;AACzD,UAAI,cAAe,QAAO;AAC1B,YAAM;AAAA,IACR;AAEA,WAAO,SAAS,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACnC;AACF;AAKO,SAAS,sCACd,SACA,aACA;AACA,SAAO;AAAA,IACL,KAAK;AAAA,MACH;AAAA,MACA,MAAM,CAAC,eAAe;AAAA,MACtB,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,QAC3C;AAAA,MACF;AAAA,MACA,WAAW;AAAA,QACT,KAAK;AAAA,UACH;AAAA,UACA,SAAS;AAAA,YACP,oBAAoB;AAAA,cAClB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAAA,YACtC;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/notifications/lib/shouldDeliver.js

@@ -0,0 +1,46 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("notifications").child({ component: "delivery-gate" });
+const warnedUnregisteredTypes = /* @__PURE__ */ new Set();
+function resolveEligibleChannels(type, channelsOverride) {
+  return channelsOverride ?? type?.channels ?? null;
+}
+async function shouldDeliver(params) {
+  const {
+    typeId,
+    type,
+    channel,
+    scope,
+    targetChannels,
+    registeredChannels,
+    preferences,
+    channelsOverride,
+    nonOptOutOverride
+  } = params;
+  if (!registeredChannels.includes(channel)) return false;
+  const eligible = resolveEligibleChannels(type, channelsOverride);
+  if (eligible && !eligible.includes(channel)) return false;
+  if (targetChannels && !targetChannels.includes(channel)) return false;
+  if ((nonOptOutOverride ?? type?.nonOptOut) === true) return true;
+  if (!type && nonOptOutOverride == null && !warnedUnregisteredTypes.has(typeId)) {
+    warnedUnregisteredTypes.add(typeId);
+    logger.warn(
+      "Delivery gate evaluated an unregistered notification type; its code-declared nonOptOut/eligibility cannot be enforced and it is subject to user opt-out",
+      { typeId }
+    );
+  }
+  return preferences.isChannelEnabled(scope, typeId, channel);
+}
+async function resolveEffectiveChannels(params) {
+  const results = await Promise.all(
+    params.registeredChannels.map(
+      async (channel) => await shouldDeliver({ ...params, channel }) ? channel : null
+    )
+  );
+  return results.filter((channel) => channel !== null);
+}
+export {
+  resolveEffectiveChannels,
+  resolveEligibleChannels,
+  shouldDeliver
+};
+//# sourceMappingURL=shouldDeliver.js.map

package/dist/modules/notifications/lib/shouldDeliver.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/notifications/lib/shouldDeliver.ts"],
+  "sourcesContent": ["import { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\nimport type { NotificationPreferenceScope } from './notificationPreferenceService'\n\nconst logger = createLogger('notifications').child({ component: 'delivery-gate' })\n\n// One warning per unregistered type id per process \u2014 unregistered ids are rare (a renamed/removed type\n// still referenced by an in-flight notification), so the set stays tiny and the log never floods.\nconst warnedUnregisteredTypes = new Set<string>()\n\n/**\n * The single per-channel delivery gate. Every channel (`in_app`, `email`, `push`, custom) is\n * governed by this one function so opt-out / eligibility / targeting enforcement can never be\n * bypassed or re-implemented inconsistently per strategy.\n *\n * A channel is delivered when ALL hold:\n *   1. it is a registered strategy id (`registeredChannels`),\n *   2. the type is eligible for it \u2014 the operator's stored override\n *      (`notification_types.channels`, when set) or the code-declared `type.channels`;\n *      this runs BEFORE the `nonOptOut` bypass and before user preferences, so a channel\n *      outside the effective set is completely off for the type,\n *   3. it is in the per-send target (`targetChannels`, when provided),\n *   4. either the type is effectively `nonOptOut` (operator override ?? code flag), or the\n *      recipient has not disabled it (`isChannelEnabled`).\n *\n * `silent` is intentionally NOT consulted here \u2014 it selects push delivery STYLE, not whether a\n * channel delivers at all. Absent `type.channels` and absent `targetChannels` both mean \"no\n * restriction\", so a fully-default call resolves to every registered channel (pre-Phase-7 behavior).\n */\nexport type ChannelPreferenceReader = {\n  isChannelEnabled(scope: NotificationPreferenceScope, typeId: string, channel: string): Promise<boolean>\n}\n\n/**\n * The effective eligibility set for a type: the operator's stored override replaces the\n * code-declared `type.channels`; `null`/absent on both \u21D2 no restriction (every channel).\n */\nexport function resolveEligibleChannels(\n  type: NotificationTypeDefinition | undefined,\n  channelsOverride: string[] | null | undefined,\n): string[] | null {\n  return channelsOverride ?? type?.channels ?? null\n}\n\nexport type ShouldDeliverParams = {\n  /** The notification's `type` string (used for the preference lookup even when unregistered). */\n  typeId: string\n  /** The registered type definition, when the type id is known. Supplies eligibility + nonOptOut. */\n  type: NotificationTypeDefinition | undefined\n  channel: string\n  scope: NotificationPreferenceScope\n  /** Per-send channel target. `null`/`undefined` \u2192 no target restriction. */\n  targetChannels?: string[] | null\n  /** Ids of the currently registered delivery strategies. */\n  registeredChannels: string[]\n  preferences: ChannelPreferenceReader\n  /**\n   * Operator override of the type's eligibility from `notification_types.channels`.\n   * `undefined`/`null` \u21D2 no override; the code-declared `type.channels` applies.\n   */\n  channelsOverride?: string[] | null\n  /**\n   * Operator override of the type's `nonOptOut` flag from `notification_types.non_opt_out`.\n   * `undefined`/`null` \u21D2 no override; the code-declared flag applies.\n   */\n  nonOptOutOverride?: boolean | null\n}\n\nexport async function shouldDeliver(params: ShouldDeliverParams): Promise<boolean> {\n  const {\n    typeId, type, channel, scope, targetChannels, registeredChannels, preferences,\n    channelsOverride, nonOptOutOverride,\n  } = params\n\n  if (!registeredChannels.includes(channel)) return false\n  const eligible = resolveEligibleChannels(type, channelsOverride)\n  if (eligible && !eligible.includes(channel)) return false\n  if (targetChannels && !targetChannels.includes(channel)) return false\n  if ((nonOptOutOverride ?? type?.nonOptOut) === true) return true\n\n  // The type id resolved to no registered definition (renamed/removed type), so its code-declared\n  // `nonOptOut` and eligibility cannot be enforced here \u2014 a security type that was `nonOptOut` becomes\n  // silently user-suppressible. Surface that once so it is not invisible (there is no operator override\n  // in play either, else the branch above would have returned).\n  if (!type && nonOptOutOverride == null && !warnedUnregisteredTypes.has(typeId)) {\n    warnedUnregisteredTypes.add(typeId)\n    logger.warn(\n      'Delivery gate evaluated an unregistered notification type; its code-declared nonOptOut/eligibility cannot be enforced and it is subject to user opt-out',\n      { typeId },\n    )\n  }\n\n  return preferences.isChannelEnabled(scope, typeId, channel)\n}\n\nexport type ResolveEffectiveChannelsParams = Omit<ShouldDeliverParams, 'channel'>\n\n/**\n * Resolves the authoritative channel set for a notification at create time: every registered\n * channel that passes {@link shouldDeliver}. Stored on `Notification.channels` and looped by the\n * dispatcher; `in_app` membership also gates bell/inbox visibility.\n */\nexport async function resolveEffectiveChannels(\n  params: ResolveEffectiveChannelsParams,\n): Promise<string[]> {\n  const results = await Promise.all(\n    params.registeredChannels.map(async (channel) =>\n      (await shouldDeliver({ ...params, channel })) ? channel : null,\n    ),\n  )\n  return results.filter((channel): channel is string => channel !== null)\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAI7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,gBAAgB,CAAC;AAIjF,MAAM,0BAA0B,oBAAI,IAAY;AA6BzC,SAAS,wBACd,MACA,kBACiB;AACjB,SAAO,oBAAoB,MAAM,YAAY;AAC/C;AA0BA,eAAsB,cAAc,QAA+C;AACjF,QAAM;AAAA,IACJ;AAAA,IAAQ;AAAA,IAAM;AAAA,IAAS;AAAA,IAAO;AAAA,IAAgB;AAAA,IAAoB;AAAA,IAClE;AAAA,IAAkB;AAAA,EACpB,IAAI;AAEJ,MAAI,CAAC,mBAAmB,SAAS,OAAO,EAAG,QAAO;AAClD,QAAM,WAAW,wBAAwB,MAAM,gBAAgB;AAC/D,MAAI,YAAY,CAAC,SAAS,SAAS,OAAO,EAAG,QAAO;AACpD,MAAI,kBAAkB,CAAC,eAAe,SAAS,OAAO,EAAG,QAAO;AAChE,OAAK,qBAAqB,MAAM,eAAe,KAAM,QAAO;AAM5D,MAAI,CAAC,QAAQ,qBAAqB,QAAQ,CAAC,wBAAwB,IAAI,MAAM,GAAG;AAC9E,4BAAwB,IAAI,MAAM;AAClC,WAAO;AAAA,MACL;AAAA,MACA,EAAE,OAAO;AAAA,IACX;AAAA,EACF;AAEA,SAAO,YAAY,iBAAiB,OAAO,QAAQ,OAAO;AAC5D;AASA,eAAsB,yBACpB,QACmB;AACnB,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,OAAO,mBAAmB;AAAA,MAAI,OAAO,YAClC,MAAM,cAAc,EAAE,GAAG,QAAQ,QAAQ,CAAC,IAAK,UAAU;AAAA,IAC5D;AAAA,EACF;AACA,SAAO,QAAQ,OAAO,CAAC,YAA+B,YAAY,IAAI;AACxE;",
+  "names": []
+}

package/dist/modules/notifications/lib/strategies/email-delivery-strategy.js

@@ -0,0 +1,54 @@
+import { sendEmail } from "@open-mercato/shared/lib/email/send";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import NotificationEmail from "../../emails/NotificationEmail.js";
+const EMAIL_CHANNEL = "email";
+const logger = createLogger("notifications");
+const DEBUG = process.env.NOTIFICATIONS_DEBUG === "true";
+function debug(msg, fields) {
+  if (DEBUG) logger.debug(msg, fields);
+}
+const emailDeliveryStrategy = {
+  id: EMAIL_CHANNEL,
+  defaultEnabled: true,
+  isConfigured: (ctx) => ctx.deliveryConfig.strategies.email.enabled === true,
+  async deliver(ctx) {
+    const { recipient, panelLink, title, body, actionLinks, deliveryConfig, t } = ctx;
+    if (!recipient?.email || !panelLink) {
+      debug("email skipped: missing recipient email or panelLink");
+      return;
+    }
+    const subjectPrefix = deliveryConfig.strategies.email.subjectPrefix?.trim();
+    const subject = subjectPrefix ? `${subjectPrefix} ${title}` : title;
+    const copy = {
+      preview: t("notifications.delivery.email.preview", "New notification"),
+      heading: t("notifications.delivery.email.heading", "You have a new notification"),
+      bodyIntro: t("notifications.delivery.email.bodyIntro", "Review the notification details and take any required actions."),
+      actionNotice: t("notifications.delivery.email.actionNotice", "Actions are available in Open Mercato and are read-only in this email."),
+      openCta: t("notifications.delivery.email.openCta", "Open notification center"),
+      footer: t("notifications.delivery.email.footer", "Open Mercato notifications")
+    };
+    try {
+      debug("sending email", { to: recipient.email, from: deliveryConfig.strategies.email.from, subject });
+      await sendEmail({
+        to: recipient.email,
+        subject,
+        from: deliveryConfig.strategies.email.from,
+        replyTo: deliveryConfig.strategies.email.replyTo,
+        react: NotificationEmail({
+          title,
+          body,
+          actions: actionLinks,
+          panelUrl: panelLink,
+          copy
+        })
+      });
+    } catch (error) {
+      logger.error("email delivery failed", { error });
+    }
+  }
+};
+export {
+  EMAIL_CHANNEL,
+  emailDeliveryStrategy
+};
+//# sourceMappingURL=email-delivery-strategy.js.map

package/dist/modules/notifications/lib/strategies/email-delivery-strategy.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/notifications/lib/strategies/email-delivery-strategy.ts"],
+  "sourcesContent": ["import { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport NotificationEmail from '../../emails/NotificationEmail'\nimport type { NotificationDeliveryContext, NotificationDeliveryStrategy } from '../deliveryStrategies'\n\nexport const EMAIL_CHANNEL = 'email'\n\nconst logger = createLogger('notifications')\n\nconst DEBUG = process.env.NOTIFICATIONS_DEBUG === 'true'\n\nfunction debug(msg: string, fields?: Record<string, unknown>): void {\n  if (DEBUG) logger.debug(msg, fields)\n}\n\n/**\n * Email delivery as a first-class strategy on the seam (previously hard-coded inline in the dispatch\n * subscriber). Per-user opt-out and `nonOptOut`/`silent` are enforced upstream at create time via\n * `shouldDeliver`; this strategy only owns technical deliverability: it runs when email is enabled by\n * tenant config (`isConfigured`) and there is both a recipient address and a panel deep link.\n */\nexport const emailDeliveryStrategy: NotificationDeliveryStrategy = {\n  id: EMAIL_CHANNEL,\n  defaultEnabled: true,\n  isConfigured: (ctx: NotificationDeliveryContext) => ctx.deliveryConfig.strategies.email.enabled === true,\n  async deliver(ctx: NotificationDeliveryContext) {\n    const { recipient, panelLink, title, body, actionLinks, deliveryConfig, t } = ctx\n    if (!recipient?.email || !panelLink) {\n      debug('email skipped: missing recipient email or panelLink')\n      return\n    }\n\n    const subjectPrefix = deliveryConfig.strategies.email.subjectPrefix?.trim()\n    const subject = subjectPrefix ? `${subjectPrefix} ${title}` : title\n    const copy = {\n      preview: t('notifications.delivery.email.preview', 'New notification'),\n      heading: t('notifications.delivery.email.heading', 'You have a new notification'),\n      bodyIntro: t('notifications.delivery.email.bodyIntro', 'Review the notification details and take any required actions.'),\n      actionNotice: t('notifications.delivery.email.actionNotice', 'Actions are available in Open Mercato and are read-only in this email.'),\n      openCta: t('notifications.delivery.email.openCta', 'Open notification center'),\n      footer: t('notifications.delivery.email.footer', 'Open Mercato notifications'),\n    }\n\n    try {\n      debug('sending email', { to: recipient.email, from: deliveryConfig.strategies.email.from, subject })\n      await sendEmail({\n        to: recipient.email,\n        subject,\n        from: deliveryConfig.strategies.email.from,\n        replyTo: deliveryConfig.strategies.email.replyTo,\n        react: NotificationEmail({\n          title,\n          body,\n          actions: actionLinks,\n          panelUrl: panelLink,\n          copy,\n        }),\n      })\n    } catch (error) {\n      logger.error('email delivery failed', { error })\n    }\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAC1B,SAAS,oBAAoB;AAC7B,OAAO,uBAAuB;AAGvB,MAAM,gBAAgB;AAE7B,MAAM,SAAS,aAAa,eAAe;AAE3C,MAAM,QAAQ,QAAQ,IAAI,wBAAwB;AAElD,SAAS,MAAM,KAAa,QAAwC;AAClE,MAAI,MAAO,QAAO,MAAM,KAAK,MAAM;AACrC;AAQO,MAAM,wBAAsD;AAAA,EACjE,IAAI;AAAA,EACJ,gBAAgB;AAAA,EAChB,cAAc,CAAC,QAAqC,IAAI,eAAe,WAAW,MAAM,YAAY;AAAA,EACpG,MAAM,QAAQ,KAAkC;AAC9C,UAAM,EAAE,WAAW,WAAW,OAAO,MAAM,aAAa,gBAAgB,EAAE,IAAI;AAC9E,QAAI,CAAC,WAAW,SAAS,CAAC,WAAW;AACnC,YAAM,qDAAqD;AAC3D;AAAA,IACF;AAEA,UAAM,gBAAgB,eAAe,WAAW,MAAM,eAAe,KAAK;AAC1E,UAAM,UAAU,gBAAgB,GAAG,aAAa,IAAI,KAAK,KAAK;AAC9D,UAAM,OAAO;AAAA,MACX,SAAS,EAAE,wCAAwC,kBAAkB;AAAA,MACrE,SAAS,EAAE,wCAAwC,6BAA6B;AAAA,MAChF,WAAW,EAAE,0CAA0C,gEAAgE;AAAA,MACvH,cAAc,EAAE,6CAA6C,wEAAwE;AAAA,MACrI,SAAS,EAAE,wCAAwC,0BAA0B;AAAA,MAC7E,QAAQ,EAAE,uCAAuC,4BAA4B;AAAA,IAC/E;AAEA,QAAI;AACF,YAAM,iBAAiB,EAAE,IAAI,UAAU,OAAO,MAAM,eAAe,WAAW,MAAM,MAAM,QAAQ,CAAC;AACnG,YAAM,UAAU;AAAA,QACd,IAAI,UAAU;AAAA,QACd;AAAA,QACA,MAAM,eAAe,WAAW,MAAM;AAAA,QACtC,SAAS,eAAe,WAAW,MAAM;AAAA,QACzC,OAAO,kBAAkB;AAAA,UACvB;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,UAAU;AAAA,UACV;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC;AAAA,IACjD;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/notifications/lib/strategies/in-app-delivery-strategy.js

@@ -0,0 +1,12 @@
+const IN_APP_CHANNEL = "in_app";
+const inAppDeliveryStrategy = {
+  id: IN_APP_CHANNEL,
+  defaultEnabled: true,
+  deliver: () => {
+  }
+};
+export {
+  IN_APP_CHANNEL,
+  inAppDeliveryStrategy
+};
+//# sourceMappingURL=in-app-delivery-strategy.js.map

package/dist/modules/notifications/lib/strategies/in-app-delivery-strategy.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/notifications/lib/strategies/in-app-delivery-strategy.ts"],
+  "sourcesContent": ["import type { NotificationDeliveryStrategy } from '../deliveryStrategies'\n\nexport const IN_APP_CHANNEL = 'in_app'\n\n/**\n * In-app is a first-class channel of the delivery seam, but its \"delivery\" is the `Notification` row\n * that `notificationService.create()` writes synchronously (the durable record that push/email\n * reference and that the bell renders). There is nothing to send here.\n *\n * Whether the row is *visible* in the bell/inbox is governed by `in_app \u2208 notification.channels`\n * (resolved at create time by `shouldDeliver`) at the read layer \u2014 not by this strategy. Registering\n * it makes in_app appear in the strategy registry so the create-time gate and the dispatcher treat it\n * exactly like every other channel, with no channel-specific branch in the dispatcher.\n */\nexport const inAppDeliveryStrategy: NotificationDeliveryStrategy = {\n  id: IN_APP_CHANNEL,\n  defaultEnabled: true,\n  deliver: () => {\n    /* no-op: the row IS the in-app delivery; visibility is a read-layer concern */\n  },\n}\n"],
+  "mappings": "AAEO,MAAM,iBAAiB;AAYvB,MAAM,wBAAsD;AAAA,EACjE,IAAI;AAAA,EACJ,gBAAgB;AAAA,EAChB,SAAS,MAAM;AAAA,EAEf;AACF;",
+  "names": []
+}