@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/notifications/subscribers/deliver-notification.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/notifications/subscribers/deliver-notification.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { Notification } from '../data/entities'\nimport { NOTIFICATION_EVENTS } from '../lib/events'\nimport { DEFAULT_NOTIFICATION_DELIVERY_CONFIG, resolveNotificationDeliveryConfig, resolveNotificationPanelUrl } from '../lib/deliveryConfig'\nimport { getNotificationDeliveryStrategies } from '../lib/deliveryStrategies'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport NotificationEmail from '../emails/NotificationEmail'\nimport { loadDictionary } from '@open-mercato/shared/lib/i18n/server'\nimport { createFallbackTranslator } from '@open-mercato/shared/lib/i18n/translate'\nimport { defaultLocale } from '@open-mercato/shared/lib/i18n/config'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../auth/data/entities'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('notifications').child({ component: 'deliver' })\n\nexport const metadata = {\n  event: NOTIFICATION_EVENTS.CREATED,\n  persistent: true,\n  id: 'notifications:deliver',\n}\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\ntype NotificationCreatedPayload = {\n  notificationId: string\n  recipientUserId: string\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nconst buildPanelLink = (panelUrl: string, notificationId: string) => {\n  if (panelUrl.startsWith('http://') || panelUrl.startsWith('https://')) {\n    const url = new URL(panelUrl)\n    url.searchParams.set('notificationId', notificationId)\n    return url.toString()\n  }\n  const separator = panelUrl.includes('?') ? '&' : '?'\n  return `${panelUrl}${separator}notificationId=${encodeURIComponent(notificationId)}`\n}\n\nconst resolveNotificationCopy = async (\n  notification: Notification\n) => {\n  const dict = await loadDictionary(defaultLocale)\n  const t = createFallbackTranslator(dict)\n\n  const title = notification.titleKey\n    ? t(notification.titleKey, notification.title ?? notification.titleKey, notification.titleVariables ?? undefined)\n    : notification.title\n\n  const body = notification.bodyKey\n    ? t(notification.bodyKey, notification.body ?? notification.bodyKey ?? '', notification.bodyVariables ?? undefined)\n    : notification.body ?? null\n\n  return { title, body, t }\n}\n\nconst resolveRecipient = async (\n  em: EntityManager,\n  notification: Notification,\n  encryptionService?: TenantDataEncryptionService | null,\n) => {\n  const where: Partial<User> & { deletedAt?: null } = {\n    id: notification.recipientUserId,\n    tenantId: notification.tenantId,\n    deletedAt: null,\n  }\n  if (notification.organizationId) {\n    where.organizationId = notification.organizationId\n  }\n  const record = await findOneWithDecryption(\n    em,\n    User,\n    where,\n    undefined,\n    {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      encryptionService: encryptionService ?? null,\n    },\n  )\n  if (!record) return null\n  return {\n    email: typeof record.email === 'string' ? record.email : null,\n    name: typeof record.name === 'string' ? record.name : null,\n  }\n}\n\n\nexport default async function handle(payload: NotificationCreatedPayload, ctx: ResolverContext) {\n  debug('deliver notification event', payload)\n  const deliveryConfig = await resolveNotificationDeliveryConfig(ctx, { defaultValue: DEFAULT_NOTIFICATION_DELIVERY_CONFIG })\n  if (!deliveryConfig.strategies.email.enabled) {\n    debug('email delivery disabled')\n  }\n\n  const em = ctx.resolve('em') as EntityManager\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: payload.notificationId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    },\n    undefined,\n    {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n      encryptionService: null,\n    },\n  )\n  if (!notification) {\n    debug('notification not found', payload.notificationId)\n    return\n  }\n\n  let encryptionService: TenantDataEncryptionService | null = null\n  try {\n    encryptionService = ctx.resolve<TenantDataEncryptionService>('tenantEncryptionService')\n  } catch {\n    encryptionService = null\n  }\n\n  try {\n    const recipient = (await resolveRecipient(em, notification, encryptionService)) ?? { email: null, name: null }\n    if (!recipient?.email) {\n      debug('recipient has no email', notification.recipientUserId)\n    }\n    const { title, body, t } = await resolveNotificationCopy(notification)\n    const panelUrl = resolveNotificationPanelUrl(deliveryConfig)\n    if (!panelUrl) {\n      debug('missing panelUrl; check appUrl/panelPath settings')\n    }\n\n    const panelLink = panelUrl ? buildPanelLink(panelUrl, notification.id) : null\n    const baseOrigin = panelUrl ? new URL(panelUrl).origin : null\n    const actionLinks = (notification.actionData?.actions ?? [])\n      .map((action) => {\n        let href = action.href\n        if (href && notification.sourceEntityId) {\n          href = href.replace('{sourceEntityId}', notification.sourceEntityId)\n        }\n        const fullHref = (href && baseOrigin) ? `${baseOrigin}${href}` : panelLink\n        if (!fullHref) return null\n        return {\n          id: action.id,\n          label: action.labelKey ? t(action.labelKey, action.label) : action.label,\n          href: fullHref,\n        }\n      })\n      .filter((action): action is NonNullable<typeof action> => action !== null)\n\n    if (deliveryConfig.strategies.email.enabled && recipient?.email && panelLink) {\n      const subjectPrefix = deliveryConfig.strategies.email.subjectPrefix?.trim()\n      const subject = subjectPrefix ? `${subjectPrefix} ${title}` : title\n      const copy = {\n        preview: t('notifications.delivery.email.preview', 'New notification'),\n        heading: t('notifications.delivery.email.heading', 'You have a new notification'),\n        bodyIntro: t('notifications.delivery.email.bodyIntro', 'Review the notification details and take any required actions.'),\n        actionNotice: t('notifications.delivery.email.actionNotice', 'Actions are available in Open Mercato and are read-only in this email.'),\n        openCta: t('notifications.delivery.email.openCta', 'Open notification center'),\n        footer: t('notifications.delivery.email.footer', 'Open Mercato notifications'),\n      }\n\n      try {\n        debug('sending email', { recipientUserId: notification.recipientUserId })\n        await sendEmail({\n          to: recipient.email,\n          subject,\n          from: deliveryConfig.strategies.email.from,\n          replyTo: deliveryConfig.strategies.email.replyTo,\n          react: NotificationEmail({\n            title,\n            body,\n            actions: actionLinks,\n            panelUrl: panelLink,\n            copy,\n          }),\n        })\n      } catch (error) {\n        logger.error('Email delivery failed', { err: error })\n      }\n    }\n\n    const strategyConfigs = deliveryConfig.strategies.custom ?? {}\n    const strategies = getNotificationDeliveryStrategies()\n    for (const strategy of strategies) {\n      const strategyConfig = strategyConfigs[strategy.id]\n      const enabled = strategyConfig?.enabled ?? strategy.defaultEnabled ?? false\n      if (!enabled) {\n        debug('custom delivery disabled', strategy.id)\n        continue\n      }\n      try {\n        await strategy.deliver({\n          notification,\n          recipient,\n          title,\n          body,\n          panelUrl,\n          panelLink,\n          actionLinks,\n          deliveryConfig,\n          config: strategyConfig ?? {},\n          resolve: ctx.resolve,\n          t,\n        })\n      } catch (error) {\n        logger.error('Delivery strategy failed', { strategyId: strategy.id, err: error })\n      }\n    }\n  } catch (err) {\n    logger.error('Failed to deliver notification', { notificationId: payload.notificationId, recipientUserId: notification.recipientUserId, err })\n    throw err\n  }\n\n  return\n}\n"],
-  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,sCAAsC,mCAAmC,mCAAmC;AACrH,SAAS,yCAAyC;AAClD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,gCAAgC;AACzC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,OAAO,oBAAoB;AAAA,EAC3B,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAaA,MAAM,iBAAiB,CAAC,UAAkB,mBAA2B;AACnE,MAAI,SAAS,WAAW,SAAS,KAAK,SAAS,WAAW,UAAU,GAAG;AACrE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,aAAa,IAAI,kBAAkB,cAAc;AACrD,WAAO,IAAI,SAAS;AAAA,EACtB;AACA,QAAM,YAAY,SAAS,SAAS,GAAG,IAAI,MAAM;AACjD,SAAO,GAAG,QAAQ,GAAG,SAAS,kBAAkB,mBAAmB,cAAc,CAAC;AACpF;AAEA,MAAM,0BAA0B,OAC9B,iBACG;AACH,QAAM,OAAO,MAAM,eAAe,aAAa;AAC/C,QAAM,IAAI,yBAAyB,IAAI;AAEvC,QAAM,QAAQ,aAAa,WACvB,EAAE,aAAa,UAAU,aAAa,SAAS,aAAa,UAAU,aAAa,kBAAkB,MAAS,IAC9G,aAAa;AAEjB,QAAM,OAAO,aAAa,UACtB,EAAE,aAAa,SAAS,aAAa,QAAQ,aAAa,WAAW,IAAI,aAAa,iBAAiB,MAAS,IAChH,aAAa,QAAQ;AAEzB,SAAO,EAAE,OAAO,MAAM,EAAE;AAC1B;AAEA,MAAM,mBAAmB,OACvB,IACA,cACA,sBACG;AACH,QAAM,QAA8C;AAAA,IAClD,IAAI,aAAa;AAAA,IACjB,UAAU,aAAa;AAAA,IACvB,WAAW;AAAA,EACb;AACA,MAAI,aAAa,gBAAgB;AAC/B,UAAM,iBAAiB,aAAa;AAAA,EACtC;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,mBAAmB,qBAAqB;AAAA,IAC1C;AAAA,EACF;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO;AAAA,IACL,OAAO,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;AAAA,IACzD,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,EACxD;AACF;AAGA,eAAO,OAA8B,SAAqC,KAAsB;AAC9F,QAAM,8BAA8B,OAAO;AAC3C,QAAM,iBAAiB,MAAM,kCAAkC,KAAK,EAAE,cAAc,qCAAqC,CAAC;AAC1H,MAAI,CAAC,eAAe,WAAW,MAAM,SAAS;AAC5C,UAAM,yBAAyB;AAAA,EACjC;AAEA,QAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,mBAAmB;AAAA,IACrB;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,0BAA0B,QAAQ,cAAc;AACtD;AAAA,EACF;AAEA,MAAI,oBAAwD;AAC5D,MAAI;AACF,wBAAoB,IAAI,QAAqC,yBAAyB;AAAA,EACxF,QAAQ;AACN,wBAAoB;AAAA,EACtB;AAEA,MAAI;AACF,UAAM,YAAa,MAAM,iBAAiB,IAAI,cAAc,iBAAiB,KAAM,EAAE,OAAO,MAAM,MAAM,KAAK;AAC7G,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,0BAA0B,aAAa,eAAe;AAAA,IAC9D;AACA,UAAM,EAAE,OAAO,MAAM,EAAE,IAAI,MAAM,wBAAwB,YAAY;AACrE,UAAM,WAAW,4BAA4B,cAAc;AAC3D,QAAI,CAAC,UAAU;AACb,YAAM,mDAAmD;AAAA,IAC3D;AAEA,UAAM,YAAY,WAAW,eAAe,UAAU,aAAa,EAAE,IAAI;AACzE,UAAM,aAAa,WAAW,IAAI,IAAI,QAAQ,EAAE,SAAS;AACzD,UAAM,eAAe,aAAa,YAAY,WAAW,CAAC,GACvD,IAAI,CAAC,WAAW;AACf,UAAI,OAAO,OAAO;AAClB,UAAI,QAAQ,aAAa,gBAAgB;AACvC,eAAO,KAAK,QAAQ,oBAAoB,aAAa,cAAc;AAAA,MACrE;AACA,YAAM,WAAY,QAAQ,aAAc,GAAG,UAAU,GAAG,IAAI,KAAK;AACjE,UAAI,CAAC,SAAU,QAAO;AACtB,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,OAAO,OAAO,WAAW,EAAE,OAAO,UAAU,OAAO,KAAK,IAAI,OAAO;AAAA,QACnE,MAAM;AAAA,MACR;AAAA,IACF,CAAC,EACA,OAAO,CAAC,WAAiD,WAAW,IAAI;AAE3E,QAAI,eAAe,WAAW,MAAM,WAAW,WAAW,SAAS,WAAW;AAC5E,YAAM,gBAAgB,eAAe,WAAW,MAAM,eAAe,KAAK;AAC1E,YAAM,UAAU,gBAAgB,GAAG,aAAa,IAAI,KAAK,KAAK;AAC9D,YAAM,OAAO;AAAA,QACX,SAAS,EAAE,wCAAwC,kBAAkB;AAAA,QACrE,SAAS,EAAE,wCAAwC,6BAA6B;AAAA,QAChF,WAAW,EAAE,0CAA0C,gEAAgE;AAAA,QACvH,cAAc,EAAE,6CAA6C,wEAAwE;AAAA,QACrI,SAAS,EAAE,wCAAwC,0BAA0B;AAAA,QAC7E,QAAQ,EAAE,uCAAuC,4BAA4B;AAAA,MAC/E;AAEA,UAAI;AACF,cAAM,iBAAiB,EAAE,iBAAiB,aAAa,gBAAgB,CAAC;AACxE,cAAM,UAAU;AAAA,UACd,IAAI,UAAU;AAAA,UACd;AAAA,UACA,MAAM,eAAe,WAAW,MAAM;AAAA,UACtC,SAAS,eAAe,WAAW,MAAM;AAAA,UACzC,OAAO,kBAAkB;AAAA,YACvB;AAAA,YACA;AAAA,YACA,SAAS;AAAA,YACT,UAAU;AAAA,YACV;AAAA,UACF,CAAC;AAAA,QACH,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,yBAAyB,EAAE,KAAK,MAAM,CAAC;AAAA,MACtD;AAAA,IACF;AAEA,UAAM,kBAAkB,eAAe,WAAW,UAAU,CAAC;AAC7D,UAAM,aAAa,kCAAkC;AACrD,eAAW,YAAY,YAAY;AACjC,YAAM,iBAAiB,gBAAgB,SAAS,EAAE;AAClD,YAAM,UAAU,gBAAgB,WAAW,SAAS,kBAAkB;AACtE,UAAI,CAAC,SAAS;AACZ,cAAM,4BAA4B,SAAS,EAAE;AAC7C;AAAA,MACF;AACA,UAAI;AACF,cAAM,SAAS,QAAQ;AAAA,UACrB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,kBAAkB,CAAC;AAAA,UAC3B,SAAS,IAAI;AAAA,UACb;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,KAAK,MAAM,CAAC;AAAA,MAClF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,kCAAkC,EAAE,gBAAgB,QAAQ,gBAAgB,iBAAiB,aAAa,iBAAiB,IAAI,CAAC;AAC7I,UAAM;AAAA,EACR;AAEA;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { Notification } from '../data/entities'\nimport { NOTIFICATION_EVENTS } from '../lib/events'\nimport { DEFAULT_NOTIFICATION_DELIVERY_CONFIG, resolveNotificationDeliveryConfig, resolveNotificationPanelUrl } from '../lib/deliveryConfig'\nimport { getNotificationDeliveryStrategies, type NotificationDeliveryContext } from '../lib/deliveryStrategies'\nimport { resolveEffectiveChannels } from '../lib/shouldDeliver'\nimport { getNotificationType } from '../lib/notification-type-registry'\nimport { getNotificationTypeOverrides } from '../lib/typeOverrides'\nimport { resolveNotificationPreferenceService } from '../lib/notificationPreferenceService'\nimport { resolveNotificationCopy } from '../lib/notificationCopy'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { User } from '../../auth/data/entities'\nimport type { TenantDataEncryptionService } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('notifications').child({ component: 'deliver' })\n\nexport const metadata = {\n  event: NOTIFICATION_EVENTS.CREATED,\n  persistent: true,\n  id: 'notifications:deliver',\n}\n\nfunction debug(message: string, ...details: unknown[]): void {\n  logger.debug(message, details.length ? { details } : undefined)\n}\n\ntype NotificationCreatedPayload = {\n  notificationId: string\n  recipientUserId: string\n  tenantId: string\n  organizationId?: string | null\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nconst buildPanelLink = (panelUrl: string, notificationId: string) => {\n  if (panelUrl.startsWith('http://') || panelUrl.startsWith('https://')) {\n    const url = new URL(panelUrl)\n    url.searchParams.set('notificationId', notificationId)\n    return url.toString()\n  }\n  const separator = panelUrl.includes('?') ? '&' : '?'\n  return `${panelUrl}${separator}notificationId=${encodeURIComponent(notificationId)}`\n}\n\nconst resolveRecipient = async (\n  em: EntityManager,\n  notification: Notification,\n  encryptionService?: TenantDataEncryptionService | null,\n) => {\n  const where: Partial<User> & { deletedAt?: null } = {\n    id: notification.recipientUserId,\n    tenantId: notification.tenantId,\n    deletedAt: null,\n  }\n  if (notification.organizationId) {\n    where.organizationId = notification.organizationId\n  }\n  const record = await findOneWithDecryption(\n    em,\n    User,\n    where,\n    undefined,\n    {\n      tenantId: notification.tenantId,\n      organizationId: notification.organizationId ?? null,\n      encryptionService: encryptionService ?? null,\n    },\n  )\n  if (!record) return null\n  return {\n    email: typeof record.email === 'string' ? record.email : null,\n    name: typeof record.name === 'string' ? record.name : null,\n  }\n}\n\n/**\n * Dispatches a created notification across every registered delivery channel. This is a pure\n * \"resolve copy \u2192 loop strategies\" loop with NO channel-specific branches: in-app, email, and push\n * are all first-class strategies on the seam. Per-channel opt-out / `nonOptOut` / `silent` /\n * eligibility / per-send targeting were already resolved once at create time into\n * `notification.channels` (see `shouldDeliver`); here we only replay that target set and apply each\n * strategy's technical short-circuits (`supports`, `isConfigured`). `notification.channels === null`\n * means \"all channels\" (legacy rows + pre-Phase-7 behavior).\n */\nexport default async function handle(payload: NotificationCreatedPayload, ctx: ResolverContext) {\n  debug('deliver notification event', payload)\n  const deliveryConfig = await resolveNotificationDeliveryConfig(ctx, { defaultValue: DEFAULT_NOTIFICATION_DELIVERY_CONFIG })\n\n  const em = ctx.resolve('em') as EntityManager\n  const notification = await findOneWithDecryption(\n    em,\n    Notification,\n    {\n      id: payload.notificationId,\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n    },\n    undefined,\n    {\n      tenantId: payload.tenantId,\n      organizationId: payload.organizationId ?? null,\n      encryptionService: null,\n    },\n  )\n  if (!notification) {\n    debug('notification not found', payload.notificationId)\n    return\n  }\n\n  let encryptionService: TenantDataEncryptionService | null = null\n  try {\n    encryptionService = ctx.resolve<TenantDataEncryptionService>('tenantEncryptionService')\n  } catch {\n    encryptionService = null\n  }\n\n  try {\n    const recipient = (await resolveRecipient(em, notification, encryptionService)) ?? { email: null, name: null }\n    if (!recipient?.email) {\n      debug('recipient has no email', notification.recipientUserId)\n    }\n    const { title, body, t } = await resolveNotificationCopy(notification)\n    const panelUrl = resolveNotificationPanelUrl(deliveryConfig)\n    if (!panelUrl) {\n      debug('missing panelUrl; check appUrl/panelPath settings')\n    }\n\n    const panelLink = panelUrl ? buildPanelLink(panelUrl, notification.id) : null\n    const baseOrigin = panelUrl ? new URL(panelUrl).origin : null\n    const actionLinks = (notification.actionData?.actions ?? [])\n      .map((action) => {\n        let href = action.href\n        if (href && notification.sourceEntityId) {\n          href = href.replace('{sourceEntityId}', notification.sourceEntityId)\n        }\n        const fullHref = (href && baseOrigin) ? `${baseOrigin}${href}` : panelLink\n        if (!fullHref) return null\n        return {\n          id: action.id,\n          label: action.labelKey ? t(action.labelKey, action.label) : action.label,\n          href: fullHref,\n        }\n      })\n      .filter((action): action is NonNullable<typeof action> => action !== null)\n\n    const strategyConfigs = deliveryConfig.strategies.custom ?? {}\n    const strategies = getNotificationDeliveryStrategies()\n    // Authoritative per-send target resolved at create time. A null snapshot (legacy pre-Phase-7 row,\n    // or a create that ran before the delivery strategies were registered) would otherwise deliver\n    // every channel with no gate \u2014 so recompute the effective set from current preferences here,\n    // keeping the single `shouldDeliver` gate instead of re-checking opt-out inside each strategy.\n    const persistedChannels = notification.channels\n    const registeredStrategyIds = strategies.map((strategy) => strategy.id)\n    let targetChannels: string[] | null = persistedChannels ?? null\n    // Only recompute for a null-snapshot row when strategies are actually registered \u2014 mirror the\n    // create path (`resolveChannelsFor`: `registeredChannels.length === 0 => null`). With zero\n    // strategies, `resolveEffectiveChannels` returns `[]` (never null); persisting that would HIDE\n    // the row (the visibility layer treats `[]` as \"no channels\"), so leave `channels` null and keep\n    // legacy all-channels back-compat instead.\n    if (persistedChannels == null && registeredStrategyIds.length > 0) {\n      try {\n        const typeOverrides = (\n          await getNotificationTypeOverrides(em as EntityManager, notification.tenantId, [notification.type])\n        ).get(notification.type)\n        targetChannels = await resolveEffectiveChannels({\n          typeId: notification.type,\n          type: getNotificationType(notification.type),\n          scope: { tenantId: notification.tenantId, userId: notification.recipientUserId },\n          targetChannels: null,\n          registeredChannels: registeredStrategyIds,\n          preferences: resolveNotificationPreferenceService({ resolve: ctx.resolve }),\n          channelsOverride: typeOverrides?.channels ?? null,\n          nonOptOutOverride: typeOverrides?.nonOptOut ?? null,\n        })\n      } catch (err) {\n        // Fail CLOSED, not open. Falling back to `null` here means \"deliver EVERY registered channel\"\n        // \u2014 which now includes push and email \u2014 for a type the user may have opted out of, so a\n        // transient overrides/preference-service blip would leak a push/email on opt-out. Re-throw\n        // instead: this subscriber is `persistent` (retried with backoff) and the recompute runs\n        // BEFORE any strategy delivers, so the retry recomputes the correct target set with no\n        // double-send. In-app visibility is unaffected meanwhile \u2014 the row's `channels` stays null,\n        // which the visibility layer already treats as \"visible everywhere\".\n        logger.error('failed to recompute delivery channels; retrying via persistent subscriber', {\n          notificationId: notification.id,\n          type: notification.type,\n          err,\n        })\n        throw err\n      }\n    }\n    // Persist the recomputed set back onto a null-channels row so the in-app\n    // VISIBILITY path (bell/inbox/unread \u2014 see notificationVisibility.ts) reads\n    // the same authoritative target the DELIVERY gate just applied. Without this\n    // the row stays `null` \u21D2 \"visible everywhere\", so a notification suppressed\n    // from in_app by the user's opt-out would still surface in the bell while\n    // delivery correctly skipped it. `targetChannels` is null (skip persist) only\n    // when no strategies are registered or the recompute fell back \u2014 both keep the\n    // row null for legacy all-channels back-compat. `channels` is a plaintext JSONB\n    // column, so a forked nativeUpdate avoids the shared UoW.\n    if (persistedChannels == null && targetChannels != null) {\n      try {\n        await (em as EntityManager)\n          .fork()\n          .nativeUpdate(\n            Notification,\n            { id: notification.id, tenantId: notification.tenantId },\n            { channels: targetChannels },\n          )\n      } catch (err) {\n        debug('failed to persist recomputed channels', err)\n      }\n    }\n    for (const strategy of strategies) {\n      if (targetChannels && !targetChannels.includes(strategy.id)) {\n        debug('channel not targeted', strategy.id)\n        continue\n      }\n      const strategyConfig = strategyConfigs[strategy.id]\n      const enabled = strategyConfig?.enabled ?? strategy.defaultEnabled ?? false\n      if (!enabled) {\n        debug('delivery disabled', strategy.id)\n        continue\n      }\n      if (strategy.supports && !strategy.supports(notification)) {\n        debug('strategy does not support notification', strategy.id)\n        continue\n      }\n      const context: NotificationDeliveryContext = {\n        notification,\n        recipient,\n        title,\n        body,\n        panelUrl,\n        panelLink,\n        actionLinks,\n        deliveryConfig,\n        config: strategyConfig ?? {},\n        resolve: ctx.resolve,\n        t,\n      }\n      try {\n        if (strategy.isConfigured && !(await strategy.isConfigured(context))) {\n          debug('strategy not configured', strategy.id)\n          continue\n        }\n        await strategy.deliver(context)\n      } catch (error) {\n        logger.error('Delivery strategy failed', { strategyId: strategy.id, err: error })\n      }\n    }\n  } catch (err) {\n    logger.error('Failed to deliver notification', { notificationId: payload.notificationId, recipientUserId: notification.recipientUserId, err })\n    throw err\n  }\n\n  return\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,sCAAsC,mCAAmC,mCAAmC;AACrH,SAAS,yCAA2E;AACpF,SAAS,gCAAgC;AACzC,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C,SAAS,4CAA4C;AACrD,SAAS,+BAA+B;AACxC,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,eAAe,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,OAAO,oBAAoB;AAAA,EAC3B,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,SAAS,MAAM,YAAoB,SAA0B;AAC3D,SAAO,MAAM,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI,MAAS;AAChE;AAaA,MAAM,iBAAiB,CAAC,UAAkB,mBAA2B;AACnE,MAAI,SAAS,WAAW,SAAS,KAAK,SAAS,WAAW,UAAU,GAAG;AACrE,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QAAI,aAAa,IAAI,kBAAkB,cAAc;AACrD,WAAO,IAAI,SAAS;AAAA,EACtB;AACA,QAAM,YAAY,SAAS,SAAS,GAAG,IAAI,MAAM;AACjD,SAAO,GAAG,QAAQ,GAAG,SAAS,kBAAkB,mBAAmB,cAAc,CAAC;AACpF;AAEA,MAAM,mBAAmB,OACvB,IACA,cACA,sBACG;AACH,QAAM,QAA8C;AAAA,IAClD,IAAI,aAAa;AAAA,IACjB,UAAU,aAAa;AAAA,IACvB,WAAW;AAAA,EACb;AACA,MAAI,aAAa,gBAAgB;AAC/B,UAAM,iBAAiB,aAAa;AAAA,EACtC;AACA,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,aAAa;AAAA,MACvB,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,mBAAmB,qBAAqB;AAAA,IAC1C;AAAA,EACF;AACA,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO;AAAA,IACL,OAAO,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ;AAAA,IACzD,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,EACxD;AACF;AAWA,eAAO,OAA8B,SAAqC,KAAsB;AAC9F,QAAM,8BAA8B,OAAO;AAC3C,QAAM,iBAAiB,MAAM,kCAAkC,KAAK,EAAE,cAAc,qCAAqC,CAAC;AAE1H,QAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,mBAAmB;AAAA,IACrB;AAAA,EACF;AACA,MAAI,CAAC,cAAc;AACjB,UAAM,0BAA0B,QAAQ,cAAc;AACtD;AAAA,EACF;AAEA,MAAI,oBAAwD;AAC5D,MAAI;AACF,wBAAoB,IAAI,QAAqC,yBAAyB;AAAA,EACxF,QAAQ;AACN,wBAAoB;AAAA,EACtB;AAEA,MAAI;AACF,UAAM,YAAa,MAAM,iBAAiB,IAAI,cAAc,iBAAiB,KAAM,EAAE,OAAO,MAAM,MAAM,KAAK;AAC7G,QAAI,CAAC,WAAW,OAAO;AACrB,YAAM,0BAA0B,aAAa,eAAe;AAAA,IAC9D;AACA,UAAM,EAAE,OAAO,MAAM,EAAE,IAAI,MAAM,wBAAwB,YAAY;AACrE,UAAM,WAAW,4BAA4B,cAAc;AAC3D,QAAI,CAAC,UAAU;AACb,YAAM,mDAAmD;AAAA,IAC3D;AAEA,UAAM,YAAY,WAAW,eAAe,UAAU,aAAa,EAAE,IAAI;AACzE,UAAM,aAAa,WAAW,IAAI,IAAI,QAAQ,EAAE,SAAS;AACzD,UAAM,eAAe,aAAa,YAAY,WAAW,CAAC,GACvD,IAAI,CAAC,WAAW;AACf,UAAI,OAAO,OAAO;AAClB,UAAI,QAAQ,aAAa,gBAAgB;AACvC,eAAO,KAAK,QAAQ,oBAAoB,aAAa,cAAc;AAAA,MACrE;AACA,YAAM,WAAY,QAAQ,aAAc,GAAG,UAAU,GAAG,IAAI,KAAK;AACjE,UAAI,CAAC,SAAU,QAAO;AACtB,aAAO;AAAA,QACL,IAAI,OAAO;AAAA,QACX,OAAO,OAAO,WAAW,EAAE,OAAO,UAAU,OAAO,KAAK,IAAI,OAAO;AAAA,QACnE,MAAM;AAAA,MACR;AAAA,IACF,CAAC,EACA,OAAO,CAAC,WAAiD,WAAW,IAAI;AAE3E,UAAM,kBAAkB,eAAe,WAAW,UAAU,CAAC;AAC7D,UAAM,aAAa,kCAAkC;AAKrD,UAAM,oBAAoB,aAAa;AACvC,UAAM,wBAAwB,WAAW,IAAI,CAAC,aAAa,SAAS,EAAE;AACtE,QAAI,iBAAkC,qBAAqB;AAM3D,QAAI,qBAAqB,QAAQ,sBAAsB,SAAS,GAAG;AACjE,UAAI;AACF,cAAM,iBACJ,MAAM,6BAA6B,IAAqB,aAAa,UAAU,CAAC,aAAa,IAAI,CAAC,GAClG,IAAI,aAAa,IAAI;AACvB,yBAAiB,MAAM,yBAAyB;AAAA,UAC9C,QAAQ,aAAa;AAAA,UACrB,MAAM,oBAAoB,aAAa,IAAI;AAAA,UAC3C,OAAO,EAAE,UAAU,aAAa,UAAU,QAAQ,aAAa,gBAAgB;AAAA,UAC/E,gBAAgB;AAAA,UAChB,oBAAoB;AAAA,UACpB,aAAa,qCAAqC,EAAE,SAAS,IAAI,QAAQ,CAAC;AAAA,UAC1E,kBAAkB,eAAe,YAAY;AAAA,UAC7C,mBAAmB,eAAe,aAAa;AAAA,QACjD,CAAC;AAAA,MACH,SAAS,KAAK;AAQZ,eAAO,MAAM,6EAA6E;AAAA,UACxF,gBAAgB,aAAa;AAAA,UAC7B,MAAM,aAAa;AAAA,UACnB;AAAA,QACF,CAAC;AACD,cAAM;AAAA,MACR;AAAA,IACF;AAUA,QAAI,qBAAqB,QAAQ,kBAAkB,MAAM;AACvD,UAAI;AACF,cAAO,GACJ,KAAK,EACL;AAAA,UACC;AAAA,UACA,EAAE,IAAI,aAAa,IAAI,UAAU,aAAa,SAAS;AAAA,UACvD,EAAE,UAAU,eAAe;AAAA,QAC7B;AAAA,MACJ,SAAS,KAAK;AACZ,cAAM,yCAAyC,GAAG;AAAA,MACpD;AAAA,IACF;AACA,eAAW,YAAY,YAAY;AACjC,UAAI,kBAAkB,CAAC,eAAe,SAAS,SAAS,EAAE,GAAG;AAC3D,cAAM,wBAAwB,SAAS,EAAE;AACzC;AAAA,MACF;AACA,YAAM,iBAAiB,gBAAgB,SAAS,EAAE;AAClD,YAAM,UAAU,gBAAgB,WAAW,SAAS,kBAAkB;AACtE,UAAI,CAAC,SAAS;AACZ,cAAM,qBAAqB,SAAS,EAAE;AACtC;AAAA,MACF;AACA,UAAI,SAAS,YAAY,CAAC,SAAS,SAAS,YAAY,GAAG;AACzD,cAAM,0CAA0C,SAAS,EAAE;AAC3D;AAAA,MACF;AACA,YAAM,UAAuC;AAAA,QAC3C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ,kBAAkB,CAAC;AAAA,QAC3B,SAAS,IAAI;AAAA,QACb;AAAA,MACF;AACA,UAAI;AACF,YAAI,SAAS,gBAAgB,CAAE,MAAM,SAAS,aAAa,OAAO,GAAI;AACpE,gBAAM,2BAA2B,SAAS,EAAE;AAC5C;AAAA,QACF;AACA,cAAM,SAAS,QAAQ,OAAO;AAAA,MAChC,SAAS,OAAO;AACd,eAAO,MAAM,4BAA4B,EAAE,YAAY,SAAS,IAAI,KAAK,MAAM,CAAC;AAAA,MAClF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,kCAAkC,EAAE,gBAAgB,QAAQ,gBAAgB,iBAAiB,aAAa,iBAAiB,IAAI,CAAC;AAC7I,UAAM;AAAA,EACR;AAEA;AACF;",
   "names": []
 }

package/dist/modules/notifications/subscribers/sync-notification-types.js

@@ -0,0 +1,16 @@
+import { TYPE_REGISTRY_SYNC_EVENT } from "../events.js";
+import { syncNotificationTypes } from "../lib/notification-type-registry.js";
+const metadata = {
+  event: TYPE_REGISTRY_SYNC_EVENT,
+  persistent: true,
+  id: "notifications:sync-notification-types"
+};
+async function handler(_payload, ctx) {
+  const em = ctx.resolve("em");
+  await syncNotificationTypes(em, { force: true });
+}
+export {
+  handler as default,
+  metadata
+};
+//# sourceMappingURL=sync-notification-types.js.map

package/dist/modules/notifications/subscribers/sync-notification-types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/notifications/subscribers/sync-notification-types.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { TYPE_REGISTRY_SYNC_EVENT } from '../events'\nimport { syncNotificationTypes } from '../lib/notification-type-registry'\n\nexport const metadata = {\n  event: TYPE_REGISTRY_SYNC_EVENT,\n  persistent: true,\n  id: 'notifications:sync-notification-types',\n}\n\ntype ResolverContext = {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handler(_payload: unknown, ctx: ResolverContext): Promise<void> {\n  const em = ctx.resolve<EntityManager>('em')\n  await syncNotificationTypes(em, { force: true })\n}\n"],
+  "mappings": "AACA,SAAS,gCAAgC;AACzC,SAAS,6BAA6B;AAE/B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAMA,eAAO,QAA+B,UAAmB,KAAqC;AAC5F,QAAM,KAAK,IAAI,QAAuB,IAAI;AAC1C,QAAM,sBAAsB,IAAI,EAAE,OAAO,KAAK,CAAC;AACjD;",
+  "names": []
+}

package/dist/modules/notifications/widgets/injection/profile-preferences-menu/widget.js

@@ -0,0 +1,23 @@
+import { InjectionPosition } from "@open-mercato/shared/modules/widgets/injection-position";
+const widget = {
+  metadata: {
+    id: "notifications.injection.profile-preferences-menu",
+    title: "Notification preferences profile menu item"
+  },
+  menuItems: [
+    {
+      id: "notification-preferences-profile-link",
+      labelKey: "notifications.preferences.pageTitle",
+      label: "Notification Preferences",
+      icon: "Bell",
+      href: "/backend/profile/notification-preferences",
+      features: ["notifications.manage_preferences"],
+      placement: { position: InjectionPosition.After, relativeTo: "change-password" }
+    }
+  ]
+};
+var widget_default = widget;
+export {
+  widget_default as default
+};
+//# sourceMappingURL=widget.js.map

package/dist/modules/notifications/widgets/injection/profile-preferences-menu/widget.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/notifications/widgets/injection/profile-preferences-menu/widget.ts"],
+  "sourcesContent": ["import { InjectionPosition } from '@open-mercato/shared/modules/widgets/injection-position'\nimport type { InjectionMenuItemWidget } from '@open-mercato/shared/modules/widgets/injection'\n\n/**\n * Adds a \"Notification Preferences\" entry to the top-right profile dropdown,\n * next to \"My communication channels\". The per-user preferences page\n * (`/backend/profile/notification-preferences`) is `pageContext: 'profile'`, so\n * it is excluded from the main sidebar and otherwise only reachable via the\n * profile-mode sidebar or a direct URL \u2014 this gives it a discoverable entry.\n * Mirrors `communication_channels.injection.profile-channels-menu`.\n *\n * Feature-gated on `notifications.manage_preferences` (the same guard as the\n * page), so users who cannot edit preferences don't see a dead link. Wildcard\n * grants (`notifications.*`, `*`) are honored by the menu filter's\n * wildcard-aware matcher.\n */\nconst widget: InjectionMenuItemWidget = {\n  metadata: {\n    id: 'notifications.injection.profile-preferences-menu',\n    title: 'Notification preferences profile menu item',\n  },\n  menuItems: [\n    {\n      id: 'notification-preferences-profile-link',\n      labelKey: 'notifications.preferences.pageTitle',\n      label: 'Notification Preferences',\n      icon: 'Bell',\n      href: '/backend/profile/notification-preferences',\n      features: ['notifications.manage_preferences'],\n      placement: { position: InjectionPosition.After, relativeTo: 'change-password' },\n    },\n  ],\n}\n\nexport default widget\n"],
+  "mappings": "AAAA,SAAS,yBAAyB;AAgBlC,MAAM,SAAkC;AAAA,EACtC,UAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,EACT;AAAA,EACA,WAAW;AAAA,IACT;AAAA,MACE,IAAI;AAAA,MACJ,UAAU;AAAA,MACV,OAAO;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN,UAAU,CAAC,kCAAkC;AAAA,MAC7C,WAAW,EAAE,UAAU,kBAAkB,OAAO,YAAY,kBAAkB;AAAA,IAChF;AAAA,EACF;AACF;AAEA,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/notifications/widgets/injection-table.js

@@ -0,0 +1,14 @@
+const injectionTable = {
+  "menu:topbar:profile-dropdown": [
+    {
+      widgetId: "notifications.injection.profile-preferences-menu",
+      priority: 90
+    }
+  ]
+};
+var injection_table_default = injectionTable;
+export {
+  injection_table_default as default,
+  injectionTable
+};
+//# sourceMappingURL=injection-table.js.map

package/dist/modules/notifications/widgets/injection-table.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/notifications/widgets/injection-table.ts"],
+  "sourcesContent": ["import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'\n\n/**\n * Profile dropdown (top-right avatar): a discoverable entry to the per-user\n * notification-preferences page, placed directly under \"Change Password\" \u2014\n * the same pattern `communication_channels` uses for its per-user\n * channel-connect page.\n */\nexport const injectionTable: ModuleInjectionTable = {\n  'menu:topbar:profile-dropdown': [\n    {\n      widgetId: 'notifications.injection.profile-preferences-menu',\n      priority: 90,\n    },\n  ],\n}\n\nexport default injectionTable\n"],
+  "mappings": "AAQO,MAAM,iBAAuC;AAAA,EAClD,gCAAgC;AAAA,IAC9B;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,IAAO,0BAAQ;",
+  "names": []
+}

package/dist/modules/push_notifications/acl.js

@@ -0,0 +1,13 @@
+const features = [
+  // Admin observability over the push delivery log. There are no self-serve push features:
+  // device/token lifecycle lives in the `devices` module, per-user opt-out in `notifications`.
+  { id: "push_notifications.view_deliveries", title: "View push delivery log", module: "push_notifications" },
+  // Admin one-off custom push send (bypasses opt-out via the nonOptOut admin.custom_message type).
+  { id: "push_notifications.send_custom", title: "Send custom push notifications", module: "push_notifications" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/push_notifications/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/push_notifications/acl.ts"],
+  "sourcesContent": ["export const features = [\n  // Admin observability over the push delivery log. There are no self-serve push features:\n  // device/token lifecycle lives in the `devices` module, per-user opt-out in `notifications`.\n  { id: 'push_notifications.view_deliveries', title: 'View push delivery log', module: 'push_notifications' },\n  // Admin one-off custom push send (bypasses opt-out via the nonOptOut admin.custom_message type).\n  { id: 'push_notifications.send_custom', title: 'Send custom push notifications', module: 'push_notifications' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA;AAAA;AAAA,EAGtB,EAAE,IAAI,sCAAsC,OAAO,0BAA0B,QAAQ,qBAAqB;AAAA;AAAA,EAE1G,EAAE,IAAI,kCAAkC,OAAO,kCAAkC,QAAQ,qBAAqB;AAChH;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/push_notifications/api/custom-send/route.js

@@ -0,0 +1,141 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import {
+  bridgeLegacyGuard,
+  runMutationGuards
+} from "@open-mercato/shared/lib/crud/mutation-guard-registry";
+import {
+  customSendSchema,
+  customSendResponseSchema,
+  CUSTOM_SEND_NO_DEVICES_WARNING
+} from "../../data/validators.js";
+const logger = createLogger("push_notifications");
+const RESOURCE_KIND = "push_notifications.push_notification_delivery";
+const errorResponseSchema = z.object({ error: z.string() });
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["push_notifications.send_custom"] }
+};
+function resolveUserFeatures(auth) {
+  const features = auth?.features;
+  if (!Array.isArray(features)) return [];
+  return features.filter((value) => typeof value === "string");
+}
+async function runGuards(container, userFeatures, input) {
+  const legacyGuard = bridgeLegacyGuard(container);
+  if (!legacyGuard) return { ok: true, afterSuccessCallbacks: [] };
+  return runMutationGuards([legacyGuard], input, { userFeatures });
+}
+async function POST(req) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId || !auth.sub) {
+      return NextResponse.json(
+        { error: translate("push_notifications.errors.unauthorized", "Unauthorized") },
+        { status: 401 }
+      );
+    }
+    const body = customSendSchema.parse(await readJsonSafe(req, {}));
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const guardInput = {
+      tenantId: auth.tenantId,
+      organizationId,
+      userId: auth.sub,
+      resourceKind: RESOURCE_KIND,
+      resourceId: body.recipientUserId,
+      operation: "create",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: body
+    };
+    const guardResult = await runGuards(container, resolveUserFeatures(auth), guardInput);
+    if (!guardResult.ok) {
+      return NextResponse.json(
+        guardResult.errorBody ?? { error: translate("push_notifications.errors.send_failed", "Operation blocked") },
+        { status: guardResult.errorStatus ?? 422 }
+      );
+    }
+    const service = container.resolve("pushNotificationService");
+    const result = await service.sendCustomPush({
+      resolve: ((name) => container.resolve(name)),
+      tenantId: auth.tenantId,
+      userId: body.recipientUserId,
+      organizationId,
+      deviceId: body.deviceId,
+      title: body.title,
+      body: body.body ?? null,
+      data: body.data,
+      pushOptions: body.pushOptions,
+      silent: body.silent ?? false
+    });
+    for (const callback of guardResult.afterSuccessCallbacks) {
+      if (!callback.guard.afterSuccess) continue;
+      await callback.guard.afterSuccess({
+        ...guardInput,
+        resourceId: body.recipientUserId,
+        metadata: callback.metadata ?? null
+      });
+    }
+    const responseBody = result.enqueued === 0 ? {
+      enqueued: 0,
+      warning: CUSTOM_SEND_NO_DEVICES_WARNING,
+      message: translate(
+        "push_notifications.warnings.no_matching_devices_in_scope",
+        "No push-capable devices matched this recipient in the selected scope, so nothing was sent."
+      )
+    } : { enqueued: result.enqueued };
+    return NextResponse.json(responseBody, { status: result.enqueued === 0 ? 200 : 201 });
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("push_notifications.errors.invalid_payload", "Invalid request"), details: err.flatten() },
+        { status: 400 }
+      );
+    }
+    logger.error("push_notifications.custom-send.POST failed", { err });
+    return NextResponse.json(
+      { error: translate("push_notifications.errors.send_failed", "Failed to send push notification") },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  POST: {
+    summary: "Send a custom push notification",
+    description: "Admin-only: deliver a one-off, free-text visible push to all of a single user's push-capable devices. No in-app notification or email is created.",
+    tags: ["PushNotifications"],
+    requestBody: { schema: customSendSchema },
+    responses: {
+      200: {
+        description: "Nothing was deliverable in scope: `enqueued` is 0 and a `warning` code plus human `message` explain why (no silent no-op). Returned instead of 201 because nothing was created.",
+        content: { "application/json": { schema: customSendResponseSchema } }
+      },
+      201: {
+        description: "Per-device push jobs enqueued.",
+        content: { "application/json": { schema: customSendResponseSchema } }
+      },
+      400: {
+        description: "Invalid request",
+        content: { "application/json": { schema: errorResponseSchema } }
+      },
+      401: {
+        description: "Unauthorized",
+        content: { "application/json": { schema: errorResponseSchema } }
+      }
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/push_notifications/api/custom-send/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/push_notifications/api/custom-send/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { AwilixContainer } from 'awilix'\nimport {\n  customSendSchema,\n  customSendResponseSchema,\n  CUSTOM_SEND_NO_DEVICES_WARNING,\n} from '../../data/validators'\nimport type { PushNotificationService } from '../../lib/send-custom-push'\n\nconst logger = createLogger('push_notifications')\n\nconst RESOURCE_KIND = 'push_notifications.push_notification_delivery'\n\nconst errorResponseSchema = z.object({ error: z.string() })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['push_notifications.send_custom'] },\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  container: AwilixContainer,\n  userFeatures: string[],\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(container)\n  if (!legacyGuard) return { ok: true, afterSuccessCallbacks: [] }\n  return runMutationGuards([legacyGuard], input, { userFeatures })\n}\n\nexport async function POST(req: Request) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId || !auth.sub) {\n      return NextResponse.json(\n        { error: translate('push_notifications.errors.unauthorized', 'Unauthorized') },\n        { status: 401 },\n      )\n    }\n\n    const body = customSendSchema.parse(await readJsonSafe(req, {}))\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    const organizationId = scope?.selectedId ?? auth.orgId ?? null\n\n    // Custom write route \u2192 wire the mutation-guard registry (AGENTS \u2192 API Routes). The send creates\n    // append-only delivery rows; map it to a `create` on the delivery resource keyed by recipient.\n    const guardInput: MutationGuardInput = {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId: auth.sub,\n      resourceKind: RESOURCE_KIND,\n      resourceId: body.recipientUserId,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: body,\n    }\n    const guardResult = await runGuards(container, resolveUserFeatures(auth), guardInput)\n    if (!guardResult.ok) {\n      return NextResponse.json(\n        guardResult.errorBody ?? { error: translate('push_notifications.errors.send_failed', 'Operation blocked') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const service = container.resolve('pushNotificationService') as PushNotificationService\n    const result = await service.sendCustomPush({\n      resolve: (<T = unknown,>(name: string): T => container.resolve(name) as T),\n      tenantId: auth.tenantId,\n      userId: body.recipientUserId,\n      organizationId,\n      deviceId: body.deviceId,\n      title: body.title,\n      body: body.body ?? null,\n      data: body.data,\n      pushOptions: body.pushOptions,\n      silent: body.silent ?? false,\n    })\n\n    for (const callback of guardResult.afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      await callback.guard.afterSuccess({\n        ...guardInput,\n        resourceId: body.recipientUserId,\n        metadata: callback.metadata ?? null,\n      })\n    }\n\n    // A well-formed request that enqueued nothing (no push channel, no in-scope device, or no device\n    // whose provider matches an active channel) previously returned a bare 201 \u2014 a silent\n    // success-with-no-send that hid, for example, a tenant-level admin targeting org-scoped devices.\n    // Surface an explicit machine-readable warning + human message so the caller can react.\n    const responseBody: z.infer<typeof customSendResponseSchema> =\n      result.enqueued === 0\n        ? {\n            enqueued: 0,\n            warning: CUSTOM_SEND_NO_DEVICES_WARNING,\n            message: translate(\n              'push_notifications.warnings.no_matching_devices_in_scope',\n              'No push-capable devices matched this recipient in the selected scope, so nothing was sent.',\n            ),\n          }\n        : { enqueued: result.enqueued }\n\n    // 201 Created only when jobs were actually enqueued; the no-op branch returns 200 OK so callers\n    // that key off the status code aren't told something was created when nothing was.\n    return NextResponse.json(responseBody, { status: result.enqueued === 0 ? 200 : 201 })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('push_notifications.errors.invalid_payload', 'Invalid request'), details: err.flatten() },\n        { status: 400 },\n      )\n    }\n    logger.error('push_notifications.custom-send.POST failed', { err })\n    return NextResponse.json(\n      { error: translate('push_notifications.errors.send_failed', 'Failed to send push notification') },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi = {\n  POST: {\n    summary: 'Send a custom push notification',\n    description:\n      \"Admin-only: deliver a one-off, free-text visible push to all of a single user's push-capable devices. No in-app notification or email is created.\",\n    tags: ['PushNotifications'],\n    requestBody: { schema: customSendSchema },\n    responses: {\n      200: {\n        description:\n          'Nothing was deliverable in scope: `enqueued` is 0 and a `warning` code plus human `message` explain why (no silent no-op). Returned instead of 201 because nothing was created.',\n        content: { 'application/json': { schema: customSendResponseSchema } },\n      },\n      201: {\n        description: 'Per-device push jobs enqueued.',\n        content: { 'application/json': { schema: customSendResponseSchema } },\n      },\n      400: {\n        description: 'Invalid request',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n      401: {\n        description: 'Unauthorized',\n        content: { 'application/json': { schema: errorResponseSchema } },\n      },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,MAAM,SAAS,aAAa,oBAAoB;AAEhD,MAAM,gBAAgB;AAEtB,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnD,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AACjF;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,WACA,cACA,OAMC;AACD,QAAM,cAAc,kBAAkB,SAAS;AAC/C,MAAI,CAAC,YAAa,QAAO,EAAE,IAAI,MAAM,uBAAuB,CAAC,EAAE;AAC/D,SAAO,kBAAkB,CAAC,WAAW,GAAG,OAAO,EAAE,aAAa,CAAC;AACjE;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,KAAK;AACxC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,0CAA0C,cAAc,EAAE;AAAA,QAC7E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,iBAAiB,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AAC/D,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,UAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAI1D,UAAM,aAAiC;AAAA,MACrC,UAAU,KAAK;AAAA,MACf;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,KAAK;AAAA,MACjB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB;AACA,UAAM,cAAc,MAAM,UAAU,WAAW,oBAAoB,IAAI,GAAG,UAAU;AACpF,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa;AAAA,QAClB,YAAY,aAAa,EAAE,OAAO,UAAU,yCAAyC,mBAAmB,EAAE;AAAA,QAC1G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,UAAU,UAAU,QAAQ,yBAAyB;AAC3D,UAAM,SAAS,MAAM,QAAQ,eAAe;AAAA,MAC1C,UAAU,CAAe,SAAoB,UAAU,QAAQ,IAAI;AAAA,MACnE,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb;AAAA,MACA,UAAU,KAAK;AAAA,MACf,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK,QAAQ;AAAA,MACnB,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK,UAAU;AAAA,IACzB,CAAC;AAED,eAAW,YAAY,YAAY,uBAAuB;AACxD,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,YAAY,KAAK;AAAA,QACjB,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AAMA,UAAM,eACJ,OAAO,aAAa,IAChB;AAAA,MACE,UAAU;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF,IACA,EAAE,UAAU,OAAO,SAAS;AAIlC,WAAO,aAAa,KAAK,cAAc,EAAE,QAAQ,OAAO,aAAa,IAAI,MAAM,IAAI,CAAC;AAAA,EACtF,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,6CAA6C,iBAAiB,GAAG,SAAS,IAAI,QAAQ,EAAE;AAAA,QAC3G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,8CAA8C,EAAE,IAAI,CAAC;AAClE,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,UAAU,yCAAyC,kCAAkC,EAAE;AAAA,MAChG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM;AAAA,IACJ,SAAS;AAAA,IACT,aACE;AAAA,IACF,MAAM,CAAC,mBAAmB;AAAA,IAC1B,aAAa,EAAE,QAAQ,iBAAiB;AAAA,IACxC,WAAW;AAAA,MACT,KAAK;AAAA,QACH,aACE;AAAA,QACF,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE;AAAA,MACtE;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,yBAAyB,EAAE;AAAA,MACtE;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,MACA,KAAK;AAAA,QACH,aAAa;AAAA,QACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,oBAAoB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/push_notifications/api/deliveries/[id]/route.js

@@ -0,0 +1,110 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { logCrudAccess } from "@open-mercato/shared/lib/crud/factory";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isOrganizationReadAccessAllowed } from "@open-mercato/core/modules/directory/utils/organizationScopeGuard";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { PushNotificationDelivery } from "../../../data/entities.js";
+const logger = createLogger("push_notifications");
+import { deliveryDetailItemSchema } from "../../../data/validators.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["push_notifications.view_deliveries"] }
+};
+const paramsSchema = z.object({ id: z.string().uuid() });
+function serializeDelivery(delivery) {
+  return {
+    id: delivery.id,
+    tenant_id: delivery.tenantId,
+    organization_id: delivery.organizationId ?? null,
+    notification_id: delivery.notificationId ?? null,
+    notification_type_id: delivery.notificationTypeId,
+    user_device_id: delivery.userDeviceId,
+    user_id: delivery.userId,
+    provider: delivery.provider,
+    token_snapshot: delivery.tokenSnapshot,
+    status: delivery.status,
+    attempts: delivery.attempts,
+    last_error: delivery.lastError ?? null,
+    payload: delivery.payload ?? null,
+    provider_response: delivery.providerResponse ?? null,
+    created_at: delivery.createdAt ? delivery.createdAt.toISOString() : null,
+    sent_at: delivery.sentAt ? delivery.sentAt.toISOString() : null,
+    next_retry_at: delivery.nextRetryAt ? delivery.nextRetryAt.toISOString() : null,
+    updated_at: delivery.updatedAt ? delivery.updatedAt.toISOString() : null
+  };
+}
+async function GET(req, { params }) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: translate("push_notifications.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const parsedParams = paramsSchema.safeParse({ id: params.id });
+    if (!parsedParams.success) {
+      return NextResponse.json({ error: translate("push_notifications.errors.invalid_id", "Invalid delivery id") }, { status: 400 });
+    }
+    const em = container.resolve("em");
+    const delivery = await em.findOne(PushNotificationDelivery, { id: parsedParams.data.id, tenantId: auth.tenantId });
+    if (!delivery) {
+      return NextResponse.json({ error: translate("push_notifications.errors.not_found", "Delivery not found") }, { status: 404 });
+    }
+    if (!isOrganizationReadAccessAllowed({
+      scope: await resolveOrganizationScopeForRequest({ container, auth, request: req }),
+      auth,
+      organizationId: delivery.organizationId ?? null
+    })) {
+      return NextResponse.json({ error: translate("push_notifications.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    const item = serializeDelivery(delivery);
+    await logCrudAccess({
+      container,
+      auth,
+      request: req,
+      items: [item],
+      idField: "id",
+      resourceKind: "push_notifications.push_notification_delivery",
+      organizationId: delivery.organizationId ?? null,
+      tenantId: auth.tenantId ?? null,
+      accessType: "read:item"
+    });
+    return NextResponse.json({ item });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("push_notifications.deliveries.GET failed", { err });
+    return NextResponse.json({ error: translate("push_notifications.errors.server_error", "Something went wrong") }, { status: 500 });
+  }
+}
+const errorResponseSchema = z.object({ error: z.string() });
+const detailResponseSchema = z.object({ item: deliveryDetailItemSchema });
+const openApi = {
+  tag: "PushNotifications",
+  summary: "Read a single push delivery log row",
+  pathParams: paramsSchema,
+  methods: {
+    GET: {
+      summary: "Get a push delivery",
+      description: "Admin: fetch a single push delivery row (payload + provider response; no full push token).",
+      responses: [{ status: 200, description: "Push delivery", schema: detailResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid id", schema: errorResponseSchema },
+        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
+        { status: 403, description: "Missing push_notifications.view_deliveries", schema: errorResponseSchema },
+        { status: 404, description: "Delivery not found", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/push_notifications/api/deliveries/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/push_notifications/api/deliveries/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isOrganizationReadAccessAllowed } from '@open-mercato/core/modules/directory/utils/organizationScopeGuard'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { PushNotificationDelivery } from '../../../data/entities'\n\nconst logger = createLogger('push_notifications')\nimport { deliveryDetailItemSchema } from '../../../data/validators'\n\n// Read-only detail for a single push delivery row (admin observability).\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['push_notifications.view_deliveries'] },\n}\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\n\nfunction serializeDelivery(delivery: PushNotificationDelivery) {\n  return {\n    id: delivery.id,\n    tenant_id: delivery.tenantId,\n    organization_id: delivery.organizationId ?? null,\n    notification_id: delivery.notificationId ?? null,\n    notification_type_id: delivery.notificationTypeId,\n    user_device_id: delivery.userDeviceId,\n    user_id: delivery.userId,\n    provider: delivery.provider,\n    token_snapshot: delivery.tokenSnapshot,\n    status: delivery.status,\n    attempts: delivery.attempts,\n    last_error: delivery.lastError ?? null,\n    payload: delivery.payload ?? null,\n    provider_response: delivery.providerResponse ?? null,\n    created_at: delivery.createdAt ? delivery.createdAt.toISOString() : null,\n    sent_at: delivery.sentAt ? delivery.sentAt.toISOString() : null,\n    next_retry_at: delivery.nextRetryAt ? delivery.nextRetryAt.toISOString() : null,\n    updated_at: delivery.updatedAt ? delivery.updatedAt.toISOString() : null,\n  }\n}\n\nexport async function GET(req: Request, { params }: { params: { id: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: translate('push_notifications.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n    const parsedParams = paramsSchema.safeParse({ id: params.id })\n    if (!parsedParams.success) {\n      return NextResponse.json({ error: translate('push_notifications.errors.invalid_id', 'Invalid delivery id') }, { status: 400 })\n    }\n    const em = container.resolve('em') as EntityManager\n    const delivery = await em.findOne(PushNotificationDelivery, { id: parsedParams.data.id, tenantId: auth.tenantId })\n    if (!delivery) {\n      return NextResponse.json({ error: translate('push_notifications.errors.not_found', 'Delivery not found') }, { status: 404 })\n    }\n    // Standard org read scoping (matches the list route + devices): an unrestricted admin reads any\n    // row in the tenant, including tenant-level (NULL-org) ones; an org-restricted admin may read only\n    // rows in an allowed org \u2014 a NULL-org target is denied (fail-closed).\n    if (\n      !isOrganizationReadAccessAllowed({\n        scope: await resolveOrganizationScopeForRequest({ container, auth, request: req }),\n        auth,\n        organizationId: delivery.organizationId ?? null,\n      })\n    ) {\n      return NextResponse.json({ error: translate('push_notifications.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n    const item = serializeDelivery(delivery)\n    // Audit the read: this hand-rolled detail route bypasses makeCrudRoute (which logs list reads\n    // for free), and it exposes per-user delivery detail (user/device ids, payload). Mirrors the\n    // other hand-rolled core read routes (directory tenants/orgs, auth roles/users, feature_toggles).\n    await logCrudAccess({\n      container,\n      auth,\n      request: req,\n      items: [item],\n      idField: 'id',\n      resourceKind: 'push_notifications.push_notification_delivery',\n      organizationId: delivery.organizationId ?? null,\n      tenantId: auth.tenantId ?? null,\n      accessType: 'read:item',\n    })\n    return NextResponse.json({ item })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('push_notifications.deliveries.GET failed', { err })\n    return NextResponse.json({ error: translate('push_notifications.errors.server_error', 'Something went wrong') }, { status: 500 })\n  }\n}\n\nconst errorResponseSchema = z.object({ error: z.string() })\nconst detailResponseSchema = z.object({ item: deliveryDetailItemSchema })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'PushNotifications',\n  summary: 'Read a single push delivery log row',\n  pathParams: paramsSchema,\n  methods: {\n    GET: {\n      summary: 'Get a push delivery',\n      description: 'Admin: fetch a single push delivery row (payload + provider response; no full push token).',\n      responses: [{ status: 200, description: 'Push delivery', schema: detailResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid id', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Missing push_notifications.view_deliveries', schema: errorResponseSchema },\n        { status: 404, description: 'Delivery not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,qBAAqB;AAC9B,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uCAAuC;AAChD,SAAS,uBAAuB;AAChC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,oBAAoB;AAChD,SAAS,gCAAgC;AAGlC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oCAAoC,EAAE;AACpF;AAEA,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEvD,SAAS,kBAAkB,UAAoC;AAC7D,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,WAAW,SAAS;AAAA,IACpB,iBAAiB,SAAS,kBAAkB;AAAA,IAC5C,iBAAiB,SAAS,kBAAkB;AAAA,IAC5C,sBAAsB,SAAS;AAAA,IAC/B,gBAAgB,SAAS;AAAA,IACzB,SAAS,SAAS;AAAA,IAClB,UAAU,SAAS;AAAA,IACnB,gBAAgB,SAAS;AAAA,IACzB,QAAQ,SAAS;AAAA,IACjB,UAAU,SAAS;AAAA,IACnB,YAAY,SAAS,aAAa;AAAA,IAClC,SAAS,SAAS,WAAW;AAAA,IAC7B,mBAAmB,SAAS,oBAAoB;AAAA,IAChD,YAAY,SAAS,YAAY,SAAS,UAAU,YAAY,IAAI;AAAA,IACpE,SAAS,SAAS,SAAS,SAAS,OAAO,YAAY,IAAI;AAAA,IAC3D,eAAe,SAAS,cAAc,SAAS,YAAY,YAAY,IAAI;AAAA,IAC3E,YAAY,SAAS,YAAY,SAAS,UAAU,YAAY,IAAI;AAAA,EACtE;AACF;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1H;AACA,UAAM,eAAe,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AAC7D,QAAI,CAAC,aAAa,SAAS;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,wCAAwC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/H;AACA,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,WAAW,MAAM,GAAG,QAAQ,0BAA0B,EAAE,IAAI,aAAa,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC;AACjH,QAAI,CAAC,UAAU;AACb,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,oBAAoB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7H;AAIA,QACE,CAAC,gCAAgC;AAAA,MAC/B,OAAO,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAAA,MACjF;AAAA,MACA,gBAAgB,SAAS,kBAAkB;AAAA,IAC7C,CAAC,GACD;AACA,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,uCAAuC,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACxH;AACA,UAAM,OAAO,kBAAkB,QAAQ;AAIvC,UAAM,cAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,OAAO,CAAC,IAAI;AAAA,MACZ,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB,SAAS,kBAAkB;AAAA,MAC3C,UAAU,KAAK,YAAY;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,KAAK,CAAC;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,4CAA4C,EAAE,IAAI,CAAC;AAChE,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,0CAA0C,sBAAsB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClI;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1D,MAAM,uBAAuB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,qBAAqB,CAAC;AAAA,MACvF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,cAAc,QAAQ,oBAAoB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,oBAAoB;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,oBAAoB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/push_notifications/api/deliveries/route.js

@@ -0,0 +1,56 @@
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { E } from "../../../../generated/entities.ids.generated.js";
+import { PushNotificationDelivery } from "../../data/entities.js";
+import {
+  deliveryListSchema,
+  deliveryListFields,
+  deliveryListSortFieldMap,
+  deliveryListItemSchema
+} from "../../data/validators.js";
+import { createPushNotificationsCrudOpenApi, createPagedListResponseSchema } from "../openapi.js";
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["push_notifications.view_deliveries"] }
+};
+const metadata = routeMetadata;
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: PushNotificationDelivery,
+    idField: "id",
+    // organization_id is nullable; the CRUD factory + query engine apply standard org scoping, exactly
+    // like devices and every other module. Unrestricted admins see every row in the tenant (including
+    // tenant-level NULL-org rows); org-restricted admins see only rows in an allowed org.
+    orgField: "organizationId",
+    tenantField: "tenantId"
+  },
+  indexer: { entityType: E.push_notifications.push_notification_delivery },
+  list: {
+    schema: deliveryListSchema,
+    entityId: E.push_notifications.push_notification_delivery,
+    fields: deliveryListFields,
+    sortFieldMap: deliveryListSortFieldMap,
+    buildFilters: async (query) => {
+      const filters = {};
+      if (query.status) filters.status = { $eq: query.status };
+      if (query.userId) filters.user_id = { $eq: query.userId };
+      const createdAt = {};
+      if (query.from) createdAt.$gte = query.from;
+      if (query.to) createdAt.$lte = query.to;
+      if (Object.keys(createdAt).length > 0) filters.created_at = createdAt;
+      return filters;
+    }
+  }
+});
+const GET = crud.GET;
+const openApi = createPushNotificationsCrudOpenApi({
+  resourceName: "Push delivery",
+  pluralName: "Push deliveries",
+  querySchema: deliveryListSchema,
+  listResponseSchema: createPagedListResponseSchema(deliveryListItemSchema)
+});
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/push_notifications/api/deliveries/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/push_notifications/api/deliveries/route.ts"],
+  "sourcesContent": ["import { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { E } from '#generated/entities.ids.generated'\nimport { PushNotificationDelivery } from '../../data/entities'\nimport {\n  deliveryListSchema,\n  deliveryListFields,\n  deliveryListSortFieldMap,\n  deliveryListItemSchema,\n} from '../../data/validators'\nimport { createPushNotificationsCrudOpenApi, createPagedListResponseSchema } from '../openapi'\n\n// Read-only push delivery log (admin observability). No writes: device/token lifecycle lives in the\n// `devices` module; delivery rows are produced by the `push` strategy + send-push worker.\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['push_notifications.view_deliveries'] },\n}\n\nexport const metadata = routeMetadata\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: PushNotificationDelivery,\n    idField: 'id',\n    // organization_id is nullable; the CRUD factory + query engine apply standard org scoping, exactly\n    // like devices and every other module. Unrestricted admins see every row in the tenant (including\n    // tenant-level NULL-org rows); org-restricted admins see only rows in an allowed org.\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n  },\n  indexer: { entityType: E.push_notifications.push_notification_delivery },\n  list: {\n    schema: deliveryListSchema,\n    entityId: E.push_notifications.push_notification_delivery,\n    fields: deliveryListFields,\n    sortFieldMap: deliveryListSortFieldMap,\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (query.status) filters.status = { $eq: query.status }\n      if (query.userId) filters.user_id = { $eq: query.userId }\n      const createdAt: Record<string, unknown> = {}\n      if (query.from) createdAt.$gte = query.from\n      if (query.to) createdAt.$lte = query.to\n      if (Object.keys(createdAt).length > 0) filters.created_at = createdAt\n      return filters\n    },\n  },\n})\n\nexport const GET = crud.GET\n\nexport const openApi: OpenApiRouteDoc = createPushNotificationsCrudOpenApi({\n  resourceName: 'Push delivery',\n  pluralName: 'Push deliveries',\n  querySchema: deliveryListSchema,\n  listResponseSchema: createPagedListResponseSchema(deliveryListItemSchema),\n})\n"],
+  "mappings": "AAAA,SAAS,qBAAqB;AAE9B,SAAS,SAAS;AAClB,SAAS,gCAAgC;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oCAAoC,qCAAqC;AAIlF,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oCAAoC,EAAE;AACpF;AAEO,MAAM,WAAW;AAExB,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA;AAAA;AAAA;AAAA,IAIT,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,mBAAmB,2BAA2B;AAAA,EACvE,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,mBAAmB;AAAA,IAC/B,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,MAAM,OAAQ,SAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AACvD,UAAI,MAAM,OAAQ,SAAQ,UAAU,EAAE,KAAK,MAAM,OAAO;AACxD,YAAM,YAAqC,CAAC;AAC5C,UAAI,MAAM,KAAM,WAAU,OAAO,MAAM;AACvC,UAAI,MAAM,GAAI,WAAU,OAAO,MAAM;AACrC,UAAI,OAAO,KAAK,SAAS,EAAE,SAAS,EAAG,SAAQ,aAAa;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAA2B,mCAAmC;AAAA,EACzE,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,sBAAsB;AAC1E,CAAC;",
+  "names": []
+}

package/dist/modules/push_notifications/api/openapi.js

@@ -0,0 +1,19 @@
+import {
+  createCrudOpenApiFactory,
+  createPagedListResponseSchema as createSharedPagedListResponseSchema
+} from "@open-mercato/shared/lib/openapi/crud";
+function createPagedListResponseSchema(itemSchema) {
+  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true });
+}
+const buildPushNotificationsCrudOpenApi = createCrudOpenApiFactory({
+  defaultTag: "PushNotifications",
+  makeListDescription: ({ pluralLower }) => `Returns the tenant's push ${pluralLower} (admin observability).`
+});
+function createPushNotificationsCrudOpenApi(options) {
+  return buildPushNotificationsCrudOpenApi(options);
+}
+export {
+  createPagedListResponseSchema,
+  createPushNotificationsCrudOpenApi
+};
+//# sourceMappingURL=openapi.js.map

package/dist/modules/push_notifications/api/openapi.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/push_notifications/api/openapi.ts"],
+  "sourcesContent": ["import { type ZodTypeAny } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  createCrudOpenApiFactory,\n  createPagedListResponseSchema as createSharedPagedListResponseSchema,\n  type CrudOpenApiOptions,\n} from '@open-mercato/shared/lib/openapi/crud'\n\nexport function createPagedListResponseSchema(itemSchema: ZodTypeAny) {\n  return createSharedPagedListResponseSchema(itemSchema, { paginationMetaOptional: true })\n}\n\n// Read-only delivery log: only the list operation is documented, so the factory's shared\n// create/ok response-schema fallbacks are left untouched (no need to pass or re-export them).\nconst buildPushNotificationsCrudOpenApi = createCrudOpenApiFactory({\n  defaultTag: 'PushNotifications',\n  makeListDescription: ({ pluralLower }) => `Returns the tenant's push ${pluralLower} (admin observability).`,\n})\n\nexport function createPushNotificationsCrudOpenApi(options: CrudOpenApiOptions): OpenApiRouteDoc {\n  return buildPushNotificationsCrudOpenApi(options)\n}\n"],
+  "mappings": "AAEA;AAAA,EACE;AAAA,EACA,iCAAiC;AAAA,OAE5B;AAEA,SAAS,8BAA8B,YAAwB;AACpE,SAAO,oCAAoC,YAAY,EAAE,wBAAwB,KAAK,CAAC;AACzF;AAIA,MAAM,oCAAoC,yBAAyB;AAAA,EACjE,YAAY;AAAA,EACZ,qBAAqB,CAAC,EAAE,YAAY,MAAM,6BAA6B,WAAW;AACpF,CAAC;AAEM,SAAS,mCAAmC,SAA8C;AAC/F,SAAO,kCAAkC,OAAO;AAClD;",
+  "names": []
+}