@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/src/modules/communication_channels/lib/push-envelope.ts

@@ -0,0 +1,104 @@
+import type { MessageContent } from './adapter'
+
+/**
+ * Flat, provider-agnostic push customization a caller can attach to a
+ * notification (via `Notification.pushOptions`) or a silent push. Each push
+ * adapter maps the recognized keys onto its own provider message shape (see
+ * {@link readPushOptions}); unknown keys are ignored by the adapters but kept on
+ * the envelope so a provider that understands them can still read them.
+ */
+export interface PushOptions {
+  /** Notification sound (provider default when omitted). */
+  sound?: string
+  /** App icon badge count (iOS / supported Android launchers). */
+  badge?: number
+  /** Rich image URL shown in the expanded notification. */
+  image?: string
+  /** Delivery priority. Maps to FCM `android.priority` / `apns-priority` / Expo `priority`. */
+  priority?: 'high' | 'normal'
+  /** Android notification channel id (FCM `android.notification.channel_id` / Expo `channelId`). */
+  channelId?: string
+  /** Overrides the push body text without changing the in-app notification body. */
+  body?: string
+  [key: string]: unknown
+}
+
+/**
+ * The push payload the `push_notifications` worker packs into
+ * `SendMessageInput.content.raw` before calling a push adapter's `sendMessage`
+ * (see `push_notifications/lib/push-delivery.ts`). Each provider adapter
+ * (fcm/apns/expo) reads it the same way via {@link readPushEnvelope} so the
+ * title/body/data contract stays uniform.
+ */
+export interface PushEnvelope {
+  title: string
+  body: string
+  data: Record<string, string>
+  /** Flat per-provider customization; see {@link PushOptions}. */
+  options: PushOptions
+  /**
+   * When `true`, deliver as a silent / content-available wake-up: no visible
+   * alert (title/body omitted), data-only payload. Adapters branch on this.
+   */
+  silent: boolean
+}
+
+function toStringRecord(value: unknown): Record<string, string> {
+  if (!value || typeof value !== 'object') return {}
+  const out: Record<string, string> = {}
+  for (const [key, raw] of Object.entries(value as Record<string, unknown>)) {
+    if (raw == null) continue
+    out[key] = typeof raw === 'string' ? raw : String(raw)
+  }
+  return out
+}
+
+const KNOWN_PUSH_OPTION_KEYS = new Set(['sound', 'badge', 'image', 'priority', 'channelId', 'body'])
+
+/**
+ * Normalize caller-supplied push options. The recognized keys are coerced to their declared types and a
+ * malformed value is DROPPED rather than passed through: a bad `priority` (e.g. `'urgent'`) would reach
+ * the provider SDK as an invalid enum and fail every delivery retry with a misleading error. Unknown
+ * keys are preserved verbatim so a provider that understands them can still read them (see PushOptions).
+ */
+function toPushOptions(value: unknown): PushOptions {
+  if (!value || typeof value !== 'object') return {}
+  const raw = value as Record<string, unknown>
+  const options: PushOptions = {}
+  for (const [key, entry] of Object.entries(raw)) {
+    if (!KNOWN_PUSH_OPTION_KEYS.has(key)) options[key] = entry
+  }
+  if (typeof raw.sound === 'string') options.sound = raw.sound
+  if (typeof raw.image === 'string') options.image = raw.image
+  if (typeof raw.channelId === 'string') options.channelId = raw.channelId
+  if (typeof raw.body === 'string') options.body = raw.body
+  if (typeof raw.badge === 'number' && Number.isFinite(raw.badge)) options.badge = raw.badge
+  if (raw.priority === 'high' || raw.priority === 'normal') options.priority = raw.priority
+  return options
+}
+
+/** Read the normalized push envelope from a hub `MessageContent`. Defensive against missing fields. */
+export function readPushEnvelope(content: MessageContent | undefined): PushEnvelope {
+  const raw = (content?.raw ?? {}) as {
+    title?: unknown
+    body?: unknown
+    data?: unknown
+    options?: unknown
+    silent?: unknown
+  }
+  const title = typeof raw.title === 'string' ? raw.title : ''
+  const body = typeof raw.body === 'string' ? raw.body : content?.text ?? ''
+  return {
+    title,
+    body,
+    data: toStringRecord(raw.data),
+    options: toPushOptions(raw.options),
+    silent: raw.silent === true,
+  }
+}
+
+/** The push body text after applying a non-empty `pushOptions.body` override, if present. */
+export function resolvePushBody(envelope: PushEnvelope): string {
+  const override = envelope.options.body
+  return typeof override === 'string' && override.length > 0 ? override : envelope.body
+}

package/src/modules/communication_channels/lib/refcounted-client-cache.ts

@@ -0,0 +1,123 @@
+/**
+ * A bounded, LRU client cache whose disposal is fenced on in-flight use.
+ *
+ * Push adapters cache one live provider client (a firebase-admin App carrying a
+ * background OAuth-refresh timer, or a node-apn Provider holding an HTTP/2 socket)
+ * per credential identity, and LRU-evict the least-recently-used one when the cache
+ * grows past `max`. The hazard the previous inline caches had: eviction disposed the
+ * client (`app.delete()` / `provider.shutdown()`) immediately, even while a concurrent
+ * `sendMessage` still held it — closing the socket mid-stream. Above the cap that is a
+ * steady-state error rate, not a rare race.
+ *
+ * This cache reference-counts every borrow and DEFERS disposal of an evicted client
+ * until its last in-flight borrow releases, so a send never loses its client
+ * underneath it. A client that is never evicted is never disposed.
+ */
+export type RefCountedClientCacheOptions<TClient> = {
+  /** Maximum number of live clients kept at once; the least-recently-used is evicted past this. */
+  max: number
+  /**
+   * Release the underlying resource. Called at most once per created client, and only after the client
+   * has been evicted AND every borrow of it has been released. Must not throw synchronously.
+   */
+  dispose: (client: TClient) => void | Promise<void>
+}
+
+export type ClientLease<TClient> = {
+  client: TClient
+  /**
+   * Release this borrow. Idempotent. Once the last borrow of an already-evicted client releases, the
+   * client is disposed. Callers MUST call this exactly once per successful `acquire`, in a `finally`.
+   */
+  release: () => void
+}
+
+type CacheEntry<TClient> = {
+  key: string
+  client: Promise<TClient>
+  refs: number
+  evicted: boolean
+  disposed: boolean
+}
+
+export type RefCountedClientCache<TClient> = {
+  /**
+   * Borrow the client for `key`, creating it via `factory` on a miss. On a hit the entry is promoted to
+   * most-recently-used. A rejected factory result is dropped from the cache (never disposed — nothing was
+   * constructed) so the next borrow re-creates. The returned lease MUST be released by the caller.
+   */
+  acquire: (key: string, factory: () => Promise<TClient>) => Promise<ClientLease<TClient>>
+  /** Number of live (non-evicted) cached entries. Test/introspection only. */
+  size: () => number
+}
+
+export function createRefCountedClientCache<TClient>(
+  options: RefCountedClientCacheOptions<TClient>,
+): RefCountedClientCache<TClient> {
+  const entries = new Map<string, CacheEntry<TClient>>()
+
+  const scheduleDispose = (entry: CacheEntry<TClient>): void => {
+    if (entry.disposed) return
+    entry.disposed = true
+    void entry.client.then((client) => options.dispose(client)).catch(() => {})
+  }
+
+  const releaseEntry = (entry: CacheEntry<TClient>): void => {
+    if (entry.refs <= 0) return
+    entry.refs -= 1
+    if (entry.refs === 0 && entry.evicted) scheduleDispose(entry)
+  }
+
+  const enforceMax = (): void => {
+    while (entries.size > options.max) {
+      const oldest = entries.values().next().value as CacheEntry<TClient> | undefined
+      if (!oldest) break
+      entries.delete(oldest.key)
+      oldest.evicted = true
+      // Defer disposal while borrows remain; releaseEntry disposes when the last one returns.
+      if (oldest.refs === 0) scheduleDispose(oldest)
+    }
+  }
+
+  const obtain = (key: string, factory: () => Promise<TClient>): CacheEntry<TClient> => {
+    const existing = entries.get(key)
+    if (existing) {
+      // Refresh recency: delete + re-insert moves the key to the newest position.
+      entries.delete(key)
+      entries.set(key, existing)
+      existing.refs += 1
+      return existing
+    }
+    const entry: CacheEntry<TClient> = { key, client: factory(), refs: 1, evicted: false, disposed: false }
+    entries.set(key, entry)
+    // Drop a rejected init (e.g. invalid credentials) so the next borrow re-creates instead of forever
+    // returning the cached rejection. Nothing was constructed, so there is nothing to dispose.
+    entry.client.catch(() => {
+      if (entries.get(key) === entry) entries.delete(key)
+    })
+    enforceMax()
+    return entry
+  }
+
+  return {
+    async acquire(key, factory) {
+      const entry = obtain(key, factory)
+      try {
+        const client = await entry.client
+        let released = false
+        return {
+          client,
+          release: () => {
+            if (released) return
+            released = true
+            releaseEntry(entry)
+          },
+        }
+      } catch (err) {
+        releaseEntry(entry)
+        throw err
+      }
+    },
+    size: () => entries.size,
+  }
+}

package/src/modules/communication_channels/migrations/.snapshot-open-mercato.json

@@ -1004,6 +1004,15 @@
           "unique": false,
           "expression": "create unique index \"communication_channels_user_provider_external_uq\" on \"communication_channels\" (\"tenant_id\", \"user_id\", \"provider_key\", \"external_identifier\") where \"deleted_at\" is null and \"user_id\" is not null and \"external_identifier\" is not null"
         },
+        {
+          "columnNames": [],
+          "composite": false,
+          "constraint": false,
+          "keyName": "communication_channels_tenant_push_provider_uq",
+          "primary": false,
+          "unique": false,
+          "expression": "create unique index \"communication_channels_tenant_push_provider_uq\" on \"communication_channels\" (\"tenant_id\", \"provider_key\") where \"channel_type\" = 'push' and \"user_id\" is null and \"deleted_at\" is null"
+        },
         {
           "columnNames": [
             "id"

package/src/modules/communication_channels/migrations/Migration20260703123630_communication_channels.ts

@@ -0,0 +1,20 @@
+import { Migration } from '@mikro-orm/migrations';
+
+export class Migration20260703123630_communication_channels extends Migration {
+
+  override up(): void | Promise<void> {
+    // Enforce one tenant-wide push channel per (tenant, provider). Push providers
+    // (FCM/APNs/Expo) have no external_identifier and user_id IS NULL, so the
+    // mailbox unique index (communication_channels_user_provider_external_uq) does
+    // not cover them. This keeps an admin reconnect healing the single shared row
+    // (createConnectedChannelRow) instead of inserting duplicates the push fan-out
+    // would silently ignore. Only covers user_id IS NULL rows, so existing per-user
+    // channels are unaffected.
+    this.addSql(`create unique index "communication_channels_tenant_push_provider_uq" on "communication_channels" ("tenant_id", "provider_key") where "channel_type" = 'push' and "user_id" is null and "deleted_at" is null;`);
+  }
+
+  override down(): void | Promise<void> {
+    this.addSql(`drop index if exists "communication_channels_tenant_push_provider_uq";`);
+  }
+
+}

package/src/modules/communication_channels/notifications.ts

@@ -3,6 +3,8 @@ import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/no
 export const notificationTypes: NotificationTypeDefinition[] = [
   {
     type: 'communication_channels.message.received',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'communication_channels',
     titleKey: 'communication_channels.notifications.message_received.title',
     bodyKey: 'communication_channels.notifications.message_received.body',
@@ -30,6 +32,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
      * integration spec's reconnect flow.
      */
     type: 'communication_channels.channel.requires_reauth',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'communication_channels',
     titleKey: 'communication_channels.notifications.channel_requires_reauth.title',
     bodyKey: 'communication_channels.notifications.channel_requires_reauth.body',

package/src/modules/communication_channels/setup.ts

@@ -57,6 +57,7 @@ export const setup: ModuleSetupConfig = {
       'communication_channels.react',
       'communication_channels.assign',
       'communication_channels.connect_user_channel',
+      'communication_channels.connect_tenant_channel',
       'communication_channels.admin',
       'communication_channels.channel.import_history',
       'communication_channels.channel.push.manage',
@@ -67,6 +68,7 @@ export const setup: ModuleSetupConfig = {
       'communication_channels.react',
       'communication_channels.assign',
       'communication_channels.connect_user_channel',
+      'communication_channels.connect_tenant_channel',
       'communication_channels.admin',
       'communication_channels.channel.import_history',
       'communication_channels.channel.push.manage',

package/src/modules/configs/i18n/de.json

@@ -193,5 +193,9 @@
   "configs.upgrades.attachmentsOrgReconcile.cta": "Anhang-Organisationen abgleichen",
   "configs.upgrades.attachmentsOrgReconcile.loading": "Anhang-Organisationen werden abgeglichen…",
   "configs.upgrades.attachmentsOrgReconcile.message": "Version {{version}} behebt Anhänge, die unter der falschen Organisation gespeichert wurden. Führen Sie den Abgleich aus, um vorhandene Anhänge in die Organisation des zugehörigen Datensatzes zu verschieben.",
-  "configs.upgrades.attachmentsOrgReconcile.success": "Anhang-Organisationen abgeglichen."
+  "configs.upgrades.attachmentsOrgReconcile.success": "Anhang-Organisationen abgeglichen.",
+  "configs.upgrades.devicesPushTokenEncryption.cta": "Push-Tokens von Geräten verschlüsseln",
+  "configs.upgrades.devicesPushTokenEncryption.loading": "Verschlüsselungszuordnung für Push-Tokens wird angelegt…",
+  "configs.upgrades.devicesPushTokenEncryption.message": "Version {{version}} fügt mobile Push-Benachrichtigungen hinzu und verschlüsselt Geräte-Push-Tokens im Ruhezustand. Bestehende Mandanten haben keine Verschlüsselungszuordnung für die neue Geräte-Entität, sodass nach dem Upgrade registrierte Tokens unverschlüsselt gespeichert würden. Führen Sie dies aus, um die Zuordnung anzulegen, damit Push-Tokens verschlüsselt werden.",
+  "configs.upgrades.devicesPushTokenEncryption.success": "Verschlüsselungszuordnung für Push-Tokens angelegt."
 }

package/src/modules/configs/i18n/en.json

@@ -193,5 +193,9 @@
   "configs.upgrades.attachmentsOrgReconcile.cta": "Reconcile attachment organizations",
   "configs.upgrades.attachmentsOrgReconcile.loading": "Reconciling attachment organizations…",
   "configs.upgrades.attachmentsOrgReconcile.message": "Version {{version}} fixes attachments that were saved under the wrong organization. Run the reconciliation to move existing attachments to the organization of the record they belong to.",
-  "configs.upgrades.attachmentsOrgReconcile.success": "Attachment organizations reconciled."
+  "configs.upgrades.attachmentsOrgReconcile.success": "Attachment organizations reconciled.",
+  "configs.upgrades.devicesPushTokenEncryption.cta": "Encrypt device push tokens",
+  "configs.upgrades.devicesPushTokenEncryption.loading": "Seeding push-token encryption map…",
+  "configs.upgrades.devicesPushTokenEncryption.message": "Version {{version}} adds mobile push and encrypts device push tokens at rest. Existing tenants have no encryption map for the new device entity, so tokens registered after the upgrade would be stored unencrypted. Run this to seed the map so push tokens are encrypted.",
+  "configs.upgrades.devicesPushTokenEncryption.success": "Push-token encryption map seeded."
 }

package/src/modules/configs/i18n/es.json

@@ -193,5 +193,9 @@
   "configs.upgrades.attachmentsOrgReconcile.cta": "Reconciliar organizaciones de adjuntos",
   "configs.upgrades.attachmentsOrgReconcile.loading": "Reconciliando organizaciones de adjuntos…",
   "configs.upgrades.attachmentsOrgReconcile.message": "La versión {{version}} corrige los adjuntos guardados en la organización incorrecta. Ejecuta la reconciliación para mover los adjuntos existentes a la organización del registro al que pertenecen.",
-  "configs.upgrades.attachmentsOrgReconcile.success": "Organizaciones de adjuntos reconciliadas."
+  "configs.upgrades.attachmentsOrgReconcile.success": "Organizaciones de adjuntos reconciliadas.",
+  "configs.upgrades.devicesPushTokenEncryption.cta": "Cifrar tokens push de dispositivos",
+  "configs.upgrades.devicesPushTokenEncryption.loading": "Creando el mapa de cifrado de tokens push…",
+  "configs.upgrades.devicesPushTokenEncryption.message": "La versión {{version}} añade notificaciones push móviles y cifra los tokens push de los dispositivos en reposo. Los inquilinos existentes no tienen un mapa de cifrado para la nueva entidad de dispositivo, por lo que los tokens registrados tras la actualización se guardarían sin cifrar. Ejecuta esto para crear el mapa y que los tokens push queden cifrados.",
+  "configs.upgrades.devicesPushTokenEncryption.success": "Mapa de cifrado de tokens push creado."
 }

package/src/modules/configs/i18n/ko.json

@@ -193,5 +193,9 @@
   "configs.upgrades.attachmentsOrgReconcile.cta": "애착 조직을 조정하세요",
   "configs.upgrades.attachmentsOrgReconcile.loading": "애착단체 화해…",
   "configs.upgrades.attachmentsOrgReconcile.message": "버전 {{version}}는 잘못된 조직에 저장된 첨부 파일을 수정합니다. 조정을 실행하여 기존 첨부 파일을 해당 첨부 파일이 속한 레코드의 조직으로 이동합니다.",
-  "configs.upgrades.attachmentsOrgReconcile.success": "첨부 조직이 조정되었습니다."
+  "configs.upgrades.attachmentsOrgReconcile.success": "첨부 조직이 조정되었습니다.",
+  "configs.upgrades.devicesPushTokenEncryption.cta": "기기 푸시 토큰 암호화",
+  "configs.upgrades.devicesPushTokenEncryption.loading": "푸시 토큰 암호화 맵을 생성하는 중…",
+  "configs.upgrades.devicesPushTokenEncryption.message": "{{version}} 버전에서 모바일 푸시가 추가되며 기기 푸시 토큰이 저장 시 암호화됩니다. 기존 테넌트에는 새 기기 엔티티에 대한 암호화 맵이 없어, 업그레이드 이후 등록되는 토큰이 암호화되지 않은 상태로 저장됩니다. 이 작업을 실행해 맵을 생성하면 푸시 토큰이 암호화됩니다.",
+  "configs.upgrades.devicesPushTokenEncryption.success": "푸시 토큰 암호화 맵이 생성되었습니다."
 }

package/src/modules/configs/i18n/pl.json

@@ -193,5 +193,9 @@
   "configs.upgrades.attachmentsOrgReconcile.cta": "Uzgodnij organizacje załączników",
   "configs.upgrades.attachmentsOrgReconcile.loading": "Uzgadnianie organizacji załączników…",
   "configs.upgrades.attachmentsOrgReconcile.message": "Wersja {{version}} naprawia załączniki zapisane pod niewłaściwą organizacją. Uruchom uzgadnianie, aby przenieść istniejące załączniki do organizacji rekordu, do którego należą.",
-  "configs.upgrades.attachmentsOrgReconcile.success": "Organizacje załączników zostały uzgodnione."
+  "configs.upgrades.attachmentsOrgReconcile.success": "Organizacje załączników zostały uzgodnione.",
+  "configs.upgrades.devicesPushTokenEncryption.cta": "Szyfruj tokeny push urządzeń",
+  "configs.upgrades.devicesPushTokenEncryption.loading": "Tworzenie mapy szyfrowania tokenów push…",
+  "configs.upgrades.devicesPushTokenEncryption.message": "Wersja {{version}} dodaje mobilne powiadomienia push i szyfruje tokeny push urządzeń w spoczynku. Istniejący najemcy nie mają mapy szyfrowania dla nowej encji urządzenia, więc tokeny zarejestrowane po aktualizacji byłyby przechowywane bez szyfrowania. Uruchom to, aby utworzyć mapę i zaszyfrować tokeny push.",
+  "configs.upgrades.devicesPushTokenEncryption.success": "Utworzono mapę szyfrowania tokenów push."
 }

package/src/modules/configs/lib/upgrade-actions.ts

@@ -62,6 +62,27 @@ export const upgradeActions: UpgradeActionDefinition[] = [
       })
     },
   },
+  {
+    id: 'devices.seed-push-token-encryption-map',
+    version: '0.6.6',
+    messageKey: 'configs.upgrades.devicesPushTokenEncryption.message',
+    ctaKey: 'configs.upgrades.devicesPushTokenEncryption.cta',
+    successKey: 'configs.upgrades.devicesPushTokenEncryption.success',
+    loadingKey: 'configs.upgrades.devicesPushTokenEncryption.loading',
+    // Encryption maps are seeded once at tenant creation (`entities seed-encryption`), so a tenant
+    // that predates the devices push-token feature has no `devices:user_device` map row. Without it
+    // `encryptEntityPayload` no-ops and `push_token` is written as PLAINTEXT (the map is a declaration
+    // of which fields to encrypt; the tenant DEK still drives the actual crypto, so seeding it is safe
+    // even when encryption is currently disabled — it only takes effect once encryption is on).
+    // Lazy-imported so configs stays decoupled from devices/entities (mirrors the customers action).
+    run: async ({ em, tenantId, organizationId }) => {
+      const [{ default: devicesEncryptionMaps }, { upsertEncryptionMapSpecs }] = await Promise.all([
+        import('@open-mercato/core/modules/devices/encryption'),
+        import('@open-mercato/core/modules/entities/cli'),
+      ])
+      await upsertEncryptionMapSpecs(em, tenantId, organizationId ?? null, devicesEncryptionMaps)
+    },
+  },
   {
     id: 'customers.seed-interaction-statuses',
     version: '0.6.5',

package/src/modules/customer_accounts/i18n/de.json

@@ -353,5 +353,6 @@
   "customer_accounts.widgets.noAccount": "Kein verknüpftes Konto",
   "customer_accounts.widgets.noUsers": "Keine verknüpften Benutzer",
   "customer_accounts.widgets.portalUsers": "Portalbenutzer",
-  "customer_accounts.widgets.viewAccount": "Konto anzeigen"
+  "customer_accounts.widgets.viewAccount": "Konto anzeigen",
+  "notifications.categories.customer_accounts": "Kundenkonten"
 }

package/src/modules/customer_accounts/i18n/en.json

@@ -353,5 +353,6 @@
   "customer_accounts.widgets.noAccount": "No account linked",
   "customer_accounts.widgets.noUsers": "No users linked",
   "customer_accounts.widgets.portalUsers": "Portal users",
-  "customer_accounts.widgets.viewAccount": "View account"
+  "customer_accounts.widgets.viewAccount": "View account",
+  "notifications.categories.customer_accounts": "Customer accounts"
 }

package/src/modules/customer_accounts/i18n/es.json

@@ -353,5 +353,6 @@
   "customer_accounts.widgets.noAccount": "No hay cuenta vinculada",
   "customer_accounts.widgets.noUsers": "No hay usuarios vinculados",
   "customer_accounts.widgets.portalUsers": "Usuarios del portal",
-  "customer_accounts.widgets.viewAccount": "Ver cuenta"
+  "customer_accounts.widgets.viewAccount": "Ver cuenta",
+  "notifications.categories.customer_accounts": "Cuentas de clientes"
 }

package/src/modules/customer_accounts/i18n/ko.json

@@ -353,5 +353,6 @@
   "customer_accounts.widgets.noAccount": "연결된 계정 없음",
   "customer_accounts.widgets.noUsers": "연결된 사용자 없음",
   "customer_accounts.widgets.portalUsers": "포털 사용자",
-  "customer_accounts.widgets.viewAccount": "계정 보기"
+  "customer_accounts.widgets.viewAccount": "계정 보기",
+  "notifications.categories.customer_accounts": "고객 계정"
 }

package/src/modules/customer_accounts/i18n/pl.json

@@ -353,5 +353,6 @@
   "customer_accounts.widgets.noAccount": "Brak powiązanego konta",
   "customer_accounts.widgets.noUsers": "Brak powiązanych użytkowników",
   "customer_accounts.widgets.portalUsers": "Użytkownicy portalu",
-  "customer_accounts.widgets.viewAccount": "Zobacz konto"
+  "customer_accounts.widgets.viewAccount": "Zobacz konto",
+  "notifications.categories.customer_accounts": "Konta klientów"
 }

package/src/modules/customer_accounts/notifications.ts

@@ -3,6 +3,8 @@ import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/no
 export const notificationTypes: NotificationTypeDefinition[] = [
   {
     type: 'customer_accounts.user.signup',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customer_accounts',
     titleKey: 'customer_accounts.notifications.user.signup.title',
     bodyKey: 'customer_accounts.notifications.user.signup.body',
@@ -22,6 +24,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
   },
   {
     type: 'customer_accounts.user.locked',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customer_accounts',
     titleKey: 'customer_accounts.notifications.user.locked.title',
     bodyKey: 'customer_accounts.notifications.user.locked.body',
@@ -41,6 +45,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
   },
   {
     type: 'customer_accounts.domain_mapping.verified',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customer_accounts',
     titleKey: 'customer_accounts.notifications.domain_mapping.verified.title',
     bodyKey: 'customer_accounts.notifications.domain_mapping.verified.body',
@@ -60,6 +66,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
   },
   {
     type: 'customer_accounts.domain_mapping.activated',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customer_accounts',
     titleKey: 'customer_accounts.notifications.domain_mapping.activated.title',
     bodyKey: 'customer_accounts.notifications.domain_mapping.activated.body',
@@ -79,6 +87,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
   },
   {
     type: 'customer_accounts.domain_mapping.dns_failed',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customer_accounts',
     titleKey: 'customer_accounts.notifications.domain_mapping.dns_failed.title',
     bodyKey: 'customer_accounts.notifications.domain_mapping.dns_failed.body',
@@ -98,6 +108,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
   },
   {
     type: 'customer_accounts.domain_mapping.tls_failed',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customer_accounts',
     titleKey: 'customer_accounts.notifications.domain_mapping.tls_failed.title',
     bodyKey: 'customer_accounts.notifications.domain_mapping.tls_failed.body',

package/src/modules/customers/i18n/de.json

@@ -2851,5 +2851,6 @@
   "customers.workPlan.customerTodos.table.flash.refreshed": "Aufgaben aktualisiert",
   "customers.workPlan.customerTodos.table.state.empty": "Noch keine Kundenaufgaben.",
   "customers.workPlan.customerTodos.table.state.noMatches": "Keine Aufgaben entsprechen den Filtern.",
-  "customers.workPlan.customerTodos.table.title": "Kundenbezogene Aufgaben"
+  "customers.workPlan.customerTodos.table.title": "Kundenbezogene Aufgaben",
+  "notifications.categories.customers": "Kunden"
 }

package/src/modules/customers/i18n/en.json

@@ -2851,5 +2851,6 @@
   "customers.workPlan.customerTodos.table.flash.refreshed": "Tasks refreshed",
   "customers.workPlan.customerTodos.table.state.empty": "No customer tasks yet.",
   "customers.workPlan.customerTodos.table.state.noMatches": "No tasks match your filters.",
-  "customers.workPlan.customerTodos.table.title": "Customer related tasks"
+  "customers.workPlan.customerTodos.table.title": "Customer related tasks",
+  "notifications.categories.customers": "Customers"
 }

package/src/modules/customers/i18n/es.json

@@ -2851,5 +2851,6 @@
   "customers.workPlan.customerTodos.table.flash.refreshed": "Tareas actualizadas",
   "customers.workPlan.customerTodos.table.state.empty": "Aún no hay tareas de clientes.",
   "customers.workPlan.customerTodos.table.state.noMatches": "Ninguna tarea coincide con tus filtros.",
-  "customers.workPlan.customerTodos.table.title": "Tareas relacionadas con clientes"
+  "customers.workPlan.customerTodos.table.title": "Tareas relacionadas con clientes",
+  "notifications.categories.customers": "Clientes"
 }

package/src/modules/customers/i18n/ko.json

@@ -2851,5 +2851,6 @@
   "customers.workPlan.customerTodos.table.flash.refreshed": "작업 목록을 새로고침했습니다",
   "customers.workPlan.customerTodos.table.state.empty": "고객 관련 작업이 아직 없습니다.",
   "customers.workPlan.customerTodos.table.state.noMatches": "필터와 일치하는 작업이 없습니다.",
-  "customers.workPlan.customerTodos.table.title": "고객 관련 작업"
+  "customers.workPlan.customerTodos.table.title": "고객 관련 작업",
+  "notifications.categories.customers": "고객"
 }

package/src/modules/customers/i18n/pl.json

@@ -2851,5 +2851,6 @@
   "customers.workPlan.customerTodos.table.flash.refreshed": "Zadania odświeżone",
   "customers.workPlan.customerTodos.table.state.empty": "Brak zadań klientów.",
   "customers.workPlan.customerTodos.table.state.noMatches": "Brak zadań spełniających filtry.",
-  "customers.workPlan.customerTodos.table.title": "Zadania związane z klientami"
+  "customers.workPlan.customerTodos.table.title": "Zadania związane z klientami",
+  "notifications.categories.customers": "Klienci"
 }

package/src/modules/customers/notifications.ts

@@ -3,6 +3,8 @@ import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/no
 export const notificationTypes: NotificationTypeDefinition[] = [
   {
     type: 'customers.deal.won',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customers',
     titleKey: 'customers.notifications.deal.won.title',
     bodyKey: 'customers.notifications.deal.won.body',
@@ -22,6 +24,8 @@ export const notificationTypes: NotificationTypeDefinition[] = [
   },
   {
     type: 'customers.deal.lost',
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ['in_app', 'email'],
     module: 'customers',
     titleKey: 'customers.notifications.deal.lost.title',
     bodyKey: 'customers.notifications.deal.lost.body',