@open-mercato/core 0.6.8-develop.6984.1.f0cf23f0f6 → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/communication_channels/notifications.js

@@ -1,6 +1,8 @@
 const notificationTypes = [
   {
     type: "communication_channels.message.received",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "communication_channels",
     titleKey: "communication_channels.notifications.message_received.title",
     bodyKey: "communication_channels.notifications.message_received.body",
@@ -29,6 +31,8 @@ const notificationTypes = [
      * integration spec's reconnect flow.
      */
     type: "communication_channels.channel.requires_reauth",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "communication_channels",
     titleKey: "communication_channels.notifications.channel_requires_reauth.title",
     bodyKey: "communication_channels.notifications.channel_requires_reauth.body",

package/dist/modules/communication_channels/notifications.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/communication_channels/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'communication_channels.message.received',\n    module: 'communication_channels',\n    titleKey: 'communication_channels.notifications.message_received.title',\n    bodyKey: 'communication_channels.notifications.message_received.body',\n    icon: 'message-circle',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/messages/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/messages/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * Channel-agnostic notification raised when an adapter loses authorization\n     * (OAuth refresh token revoked, IMAP/SMTP password rotated, WhatsApp token expired).\n     * Persisted by the `channel-requires-reauth-notification` subscriber in\n     * response to the `communication_channels.channel.requires_reauth` event\n     * (emitted by the poll worker and outbound delivery). Consumed by the email\n     * integration spec's reconnect flow.\n     */\n    type: 'communication_channels.channel.requires_reauth',\n    module: 'communication_channels',\n    titleKey: 'communication_channels.notifications.channel_requires_reauth.title',\n    bodyKey: 'communication_channels.notifications.channel_requires_reauth.body',\n    icon: 'alert-triangle',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'reconnect',\n        labelKey: 'communication_channels.notifications.channel_requires_reauth.reconnect',\n        variant: 'outline',\n        href: '/backend/profile/communication-channels?reconnect={sourceEntityId}',\n        icon: 'refresh-cw',\n      },\n    ],\n    linkHref: '/backend/profile/communication-channels?reconnect={sourceEntityId}',\n    expiresAfterHours: 720, // 30 days \u2014 auth issues should be addressed promptly\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'communication_channels.message.received',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'communication_channels',\n    titleKey: 'communication_channels.notifications.message_received.title',\n    bodyKey: 'communication_channels.notifications.message_received.body',\n    icon: 'message-circle',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/messages/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/messages/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * Channel-agnostic notification raised when an adapter loses authorization\n     * (OAuth refresh token revoked, IMAP/SMTP password rotated, WhatsApp token expired).\n     * Persisted by the `channel-requires-reauth-notification` subscriber in\n     * response to the `communication_channels.channel.requires_reauth` event\n     * (emitted by the poll worker and outbound delivery). Consumed by the email\n     * integration spec's reconnect flow.\n     */\n    type: 'communication_channels.channel.requires_reauth',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'communication_channels',\n    titleKey: 'communication_channels.notifications.channel_requires_reauth.title',\n    bodyKey: 'communication_channels.notifications.channel_requires_reauth.body',\n    icon: 'alert-triangle',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'reconnect',\n        labelKey: 'communication_channels.notifications.channel_requires_reauth.reconnect',\n        variant: 'outline',\n        href: '/backend/profile/communication-channels?reconnect={sourceEntityId}',\n        icon: 'refresh-cw',\n      },\n    ],\n    linkHref: '/backend/profile/communication-channels?reconnect={sourceEntityId}',\n    expiresAfterHours: 720, // 30 days \u2014 auth issues should be addressed promptly\n  },\n]\n\nexport default notificationTypes\n"],
+  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/communication_channels/setup.js

@@ -21,6 +21,7 @@ const setup = {
       "communication_channels.react",
       "communication_channels.assign",
       "communication_channels.connect_user_channel",
+      "communication_channels.connect_tenant_channel",
       "communication_channels.admin",
       "communication_channels.channel.import_history",
       "communication_channels.channel.push.manage"
@@ -31,6 +32,7 @@ const setup = {
       "communication_channels.react",
       "communication_channels.assign",
       "communication_channels.connect_user_channel",
+      "communication_channels.connect_tenant_channel",
       "communication_channels.admin",
       "communication_channels.channel.import_history",
       "communication_channels.channel.push.manage"

package/dist/modules/communication_channels/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/communication_channels/setup.ts"],
-  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { COMMUNICATION_CHANNELS_QUEUES } from './lib/queue'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels')\n\ntype SchedulerServiceLike = {\n  register: (registration: {\n    id: string\n    name: string\n    scopeType: 'system' | 'organization' | 'tenant'\n    organizationId?: string\n    tenantId?: string\n    scheduleType: 'cron' | 'interval'\n    scheduleValue: string\n    timezone?: string\n    targetType: 'queue' | 'command'\n    targetQueue?: string\n    targetPayload?: unknown\n    sourceType?: 'user' | 'module'\n    sourceModule?: string\n    isEnabled?: boolean\n    description?: string\n  }) => Promise<void>\n}\n\n/**\n * Tick interval in seconds. Default 60s per email integration spec\n * \u00A7 Hub Deltas \u2192 Delta 6 (scheduler mechanism).\n */\nconst POLL_TICK_INTERVAL_SECONDS = Math.max(\n  10,\n  Number.parseInt(process.env.OM_HUB_POLL_SCHEDULER_TICK_SECONDS ?? '60', 10) || 60,\n)\n\n/**\n * `scheduled_jobs.id` is a uuid column, so a module-owned schedule's stable\n * registration key must be hashed into a uuid rather than used verbatim \u2014 this\n * keeps `schedulerService.register()` an idempotent upsert across re-runs of\n * seedDefaults instead of trying to insert a raw string into the uuid PK.\n */\nfunction stableScheduleUuid(stableKey: string): string {\n  const hex = createHash('sha256').update(stableKey).digest('hex')\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`\n}\n\nfunction stablePollTickScheduleId(organizationId: string): string {\n  return stableScheduleUuid(`communication_channels:poll-tick:${organizationId}`)\n}\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: [\n      'communication_channels.view',\n      'communication_channels.manage',\n      'communication_channels.react',\n      'communication_channels.assign',\n      'communication_channels.connect_user_channel',\n      'communication_channels.admin',\n      'communication_channels.channel.import_history',\n      'communication_channels.channel.push.manage',\n    ],\n    admin: [\n      'communication_channels.view',\n      'communication_channels.manage',\n      'communication_channels.react',\n      'communication_channels.assign',\n      'communication_channels.connect_user_channel',\n      'communication_channels.admin',\n      'communication_channels.channel.import_history',\n      'communication_channels.channel.push.manage',\n    ],\n    manager: [\n      'communication_channels.view',\n      'communication_channels.manage',\n      'communication_channels.react',\n      'communication_channels.assign',\n      'communication_channels.connect_user_channel',\n    ],\n    employee: [\n      'communication_channels.view',\n      'communication_channels.react',\n      'communication_channels.connect_user_channel',\n    ],\n  },\n\n  async seedDefaults({ container, organizationId, tenantId }) {\n    /**\n     * Register the per-channel polling tick with `@open-mercato/scheduler`.\n     *\n     * Per email integration spec \u00A7 Hub Deltas \u2192 Delta 6: every\n     * `POLL_TICK_INTERVAL_SECONDS` (default 60s), enqueue a single\n     * `communication-channels-poll-tick` job that enumerates due channels and\n     * fans out to the `communication-channels-poll` queue.\n     *\n     * The registration is per-organization (one tick row per org/tenant pair)\n     * so multi-tenant deploys schedule independently. Skipped silently when the\n     * scheduler module isn't enabled \u2014 keeps the hub usable in scheduler-less\n     * test harnesses.\n     */\n    const cradle = container as { hasRegistration?: (name: string) => boolean }\n    if (typeof cradle.hasRegistration !== 'function' || !cradle.hasRegistration('schedulerService')) {\n      return\n    }\n    const schedulerService = container.resolve('schedulerService') as SchedulerServiceLike\n    // Best-effort: a scheduler failure must not abort tenant initialization for\n    // every other module (mirrors the ai_assistant setup pattern). The schedule\n    // ids are deterministic uuids so re-runs upsert idempotently.\n    try {\n      await schedulerService.register({\n        id: stablePollTickScheduleId(organizationId),\n        name: 'Communication channels poll tick',\n        description:\n          `Enumerates active polling channels every ${POLL_TICK_INTERVAL_SECONDS}s and enqueues per-channel poll jobs.`,\n        scopeType: 'organization',\n        organizationId,\n        tenantId,\n        scheduleType: 'interval',\n        scheduleValue: `${POLL_TICK_INTERVAL_SECONDS}s`,\n        timezone: 'UTC',\n        targetType: 'queue',\n        targetQueue: COMMUNICATION_CHANNELS_QUEUES.pollTick,\n        targetPayload: {\n          scope: { tenantId, organizationId },\n        },\n        sourceType: 'module',\n        sourceModule: 'communication_channels',\n        isEnabled: true,\n      })\n\n      // Spec C \u00A7 Phase C4 \u2014 Gmail watch renewal cron, per-org so multi-tenant\n      // deploys schedule independently.\n      await schedulerService.register({\n        id: stableScheduleUuid(`communication_channels:gmail-renew-watch:${organizationId}`),\n        name: 'Gmail watch renewal',\n        description:\n          'Daily 04:00 UTC. Re-issues gmail.users.watch for channels within OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS of expiry.',\n        scopeType: 'organization',\n        organizationId,\n        tenantId,\n        scheduleType: 'cron',\n        scheduleValue: '0 4 * * *',\n        timezone: 'UTC',\n        targetType: 'queue',\n        targetQueue: COMMUNICATION_CHANNELS_QUEUES.gmailRenewWatch,\n        targetPayload: { scope: { tenantId, organizationId } },\n        sourceType: 'module',\n        sourceModule: 'communication_channels',\n        isEnabled: true,\n      })\n    } catch (error) {\n      logger.warn('Failed to register module schedules', { err: error })\n    }\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB;AA0BpD,MAAM,6BAA6B,KAAK;AAAA,EACtC;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,sCAAsC,MAAM,EAAE,KAAK;AACjF;AAQA,SAAS,mBAAmB,WAA2B;AACrD,QAAM,MAAM,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAC/D,SAAO,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC;AAC9G;AAEA,SAAS,yBAAyB,gBAAgC;AAChE,SAAO,mBAAmB,oCAAoC,cAAc,EAAE;AAChF;AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,EAAE,WAAW,gBAAgB,SAAS,GAAG;AAc1D,UAAM,SAAS;AACf,QAAI,OAAO,OAAO,oBAAoB,cAAc,CAAC,OAAO,gBAAgB,kBAAkB,GAAG;AAC/F;AAAA,IACF;AACA,UAAM,mBAAmB,UAAU,QAAQ,kBAAkB;AAI7D,QAAI;AACF,YAAM,iBAAiB,SAAS;AAAA,QAC9B,IAAI,yBAAyB,cAAc;AAAA,QAC3C,MAAM;AAAA,QACN,aACE,4CAA4C,0BAA0B;AAAA,QACxE,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,eAAe,GAAG,0BAA0B;AAAA,QAC5C,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,aAAa,8BAA8B;AAAA,QAC3C,eAAe;AAAA,UACb,OAAO,EAAE,UAAU,eAAe;AAAA,QACpC;AAAA,QACA,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,WAAW;AAAA,MACb,CAAC;AAID,YAAM,iBAAiB,SAAS;AAAA,QAC9B,IAAI,mBAAmB,4CAA4C,cAAc,EAAE;AAAA,QACnF,MAAM;AAAA,QACN,aACE;AAAA,QACF,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,eAAe;AAAA,QACf,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,aAAa,8BAA8B;AAAA,QAC3C,eAAe,EAAE,OAAO,EAAE,UAAU,eAAe,EAAE;AAAA,QACrD,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,WAAW;AAAA,MACb,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,KAAK,uCAAuC,EAAE,KAAK,MAAM,CAAC;AAAA,IACnE;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { COMMUNICATION_CHANNELS_QUEUES } from './lib/queue'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('communication_channels')\n\ntype SchedulerServiceLike = {\n  register: (registration: {\n    id: string\n    name: string\n    scopeType: 'system' | 'organization' | 'tenant'\n    organizationId?: string\n    tenantId?: string\n    scheduleType: 'cron' | 'interval'\n    scheduleValue: string\n    timezone?: string\n    targetType: 'queue' | 'command'\n    targetQueue?: string\n    targetPayload?: unknown\n    sourceType?: 'user' | 'module'\n    sourceModule?: string\n    isEnabled?: boolean\n    description?: string\n  }) => Promise<void>\n}\n\n/**\n * Tick interval in seconds. Default 60s per email integration spec\n * \u00A7 Hub Deltas \u2192 Delta 6 (scheduler mechanism).\n */\nconst POLL_TICK_INTERVAL_SECONDS = Math.max(\n  10,\n  Number.parseInt(process.env.OM_HUB_POLL_SCHEDULER_TICK_SECONDS ?? '60', 10) || 60,\n)\n\n/**\n * `scheduled_jobs.id` is a uuid column, so a module-owned schedule's stable\n * registration key must be hashed into a uuid rather than used verbatim \u2014 this\n * keeps `schedulerService.register()` an idempotent upsert across re-runs of\n * seedDefaults instead of trying to insert a raw string into the uuid PK.\n */\nfunction stableScheduleUuid(stableKey: string): string {\n  const hex = createHash('sha256').update(stableKey).digest('hex')\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`\n}\n\nfunction stablePollTickScheduleId(organizationId: string): string {\n  return stableScheduleUuid(`communication_channels:poll-tick:${organizationId}`)\n}\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: [\n      'communication_channels.view',\n      'communication_channels.manage',\n      'communication_channels.react',\n      'communication_channels.assign',\n      'communication_channels.connect_user_channel',\n      'communication_channels.connect_tenant_channel',\n      'communication_channels.admin',\n      'communication_channels.channel.import_history',\n      'communication_channels.channel.push.manage',\n    ],\n    admin: [\n      'communication_channels.view',\n      'communication_channels.manage',\n      'communication_channels.react',\n      'communication_channels.assign',\n      'communication_channels.connect_user_channel',\n      'communication_channels.connect_tenant_channel',\n      'communication_channels.admin',\n      'communication_channels.channel.import_history',\n      'communication_channels.channel.push.manage',\n    ],\n    manager: [\n      'communication_channels.view',\n      'communication_channels.manage',\n      'communication_channels.react',\n      'communication_channels.assign',\n      'communication_channels.connect_user_channel',\n    ],\n    employee: [\n      'communication_channels.view',\n      'communication_channels.react',\n      'communication_channels.connect_user_channel',\n    ],\n  },\n\n  async seedDefaults({ container, organizationId, tenantId }) {\n    /**\n     * Register the per-channel polling tick with `@open-mercato/scheduler`.\n     *\n     * Per email integration spec \u00A7 Hub Deltas \u2192 Delta 6: every\n     * `POLL_TICK_INTERVAL_SECONDS` (default 60s), enqueue a single\n     * `communication-channels-poll-tick` job that enumerates due channels and\n     * fans out to the `communication-channels-poll` queue.\n     *\n     * The registration is per-organization (one tick row per org/tenant pair)\n     * so multi-tenant deploys schedule independently. Skipped silently when the\n     * scheduler module isn't enabled \u2014 keeps the hub usable in scheduler-less\n     * test harnesses.\n     */\n    const cradle = container as { hasRegistration?: (name: string) => boolean }\n    if (typeof cradle.hasRegistration !== 'function' || !cradle.hasRegistration('schedulerService')) {\n      return\n    }\n    const schedulerService = container.resolve('schedulerService') as SchedulerServiceLike\n    // Best-effort: a scheduler failure must not abort tenant initialization for\n    // every other module (mirrors the ai_assistant setup pattern). The schedule\n    // ids are deterministic uuids so re-runs upsert idempotently.\n    try {\n      await schedulerService.register({\n        id: stablePollTickScheduleId(organizationId),\n        name: 'Communication channels poll tick',\n        description:\n          `Enumerates active polling channels every ${POLL_TICK_INTERVAL_SECONDS}s and enqueues per-channel poll jobs.`,\n        scopeType: 'organization',\n        organizationId,\n        tenantId,\n        scheduleType: 'interval',\n        scheduleValue: `${POLL_TICK_INTERVAL_SECONDS}s`,\n        timezone: 'UTC',\n        targetType: 'queue',\n        targetQueue: COMMUNICATION_CHANNELS_QUEUES.pollTick,\n        targetPayload: {\n          scope: { tenantId, organizationId },\n        },\n        sourceType: 'module',\n        sourceModule: 'communication_channels',\n        isEnabled: true,\n      })\n\n      // Spec C \u00A7 Phase C4 \u2014 Gmail watch renewal cron, per-org so multi-tenant\n      // deploys schedule independently.\n      await schedulerService.register({\n        id: stableScheduleUuid(`communication_channels:gmail-renew-watch:${organizationId}`),\n        name: 'Gmail watch renewal',\n        description:\n          'Daily 04:00 UTC. Re-issues gmail.users.watch for channels within OM_PUSH_RENEWAL_GMAIL_LEAD_HOURS of expiry.',\n        scopeType: 'organization',\n        organizationId,\n        tenantId,\n        scheduleType: 'cron',\n        scheduleValue: '0 4 * * *',\n        timezone: 'UTC',\n        targetType: 'queue',\n        targetQueue: COMMUNICATION_CHANNELS_QUEUES.gmailRenewWatch,\n        targetPayload: { scope: { tenantId, organizationId } },\n        sourceType: 'module',\n        sourceModule: 'communication_channels',\n        isEnabled: true,\n      })\n    } catch (error) {\n      logger.warn('Failed to register module schedules', { err: error })\n    }\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,qCAAqC;AAC9C,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,wBAAwB;AA0BpD,MAAM,6BAA6B,KAAK;AAAA,EACtC;AAAA,EACA,OAAO,SAAS,QAAQ,IAAI,sCAAsC,MAAM,EAAE,KAAK;AACjF;AAQA,SAAS,mBAAmB,WAA2B;AACrD,QAAM,MAAM,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAC/D,SAAO,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC;AAC9G;AAEA,SAAS,yBAAyB,gBAAgC;AAChE,SAAO,mBAAmB,oCAAoC,cAAc,EAAE;AAChF;AAEO,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,EAAE,WAAW,gBAAgB,SAAS,GAAG;AAc1D,UAAM,SAAS;AACf,QAAI,OAAO,OAAO,oBAAoB,cAAc,CAAC,OAAO,gBAAgB,kBAAkB,GAAG;AAC/F;AAAA,IACF;AACA,UAAM,mBAAmB,UAAU,QAAQ,kBAAkB;AAI7D,QAAI;AACF,YAAM,iBAAiB,SAAS;AAAA,QAC9B,IAAI,yBAAyB,cAAc;AAAA,QAC3C,MAAM;AAAA,QACN,aACE,4CAA4C,0BAA0B;AAAA,QACxE,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,eAAe,GAAG,0BAA0B;AAAA,QAC5C,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,aAAa,8BAA8B;AAAA,QAC3C,eAAe;AAAA,UACb,OAAO,EAAE,UAAU,eAAe;AAAA,QACpC;AAAA,QACA,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,WAAW;AAAA,MACb,CAAC;AAID,YAAM,iBAAiB,SAAS;AAAA,QAC9B,IAAI,mBAAmB,4CAA4C,cAAc,EAAE;AAAA,QACnF,MAAM;AAAA,QACN,aACE;AAAA,QACF,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd,eAAe;AAAA,QACf,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,aAAa,8BAA8B;AAAA,QAC3C,eAAe,EAAE,OAAO,EAAE,UAAU,eAAe,EAAE;AAAA,QACrD,YAAY;AAAA,QACZ,cAAc;AAAA,QACd,WAAW;AAAA,MACb,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,KAAK,uCAAuC,EAAE,KAAK,MAAM,CAAC;AAAA,IACnE;AAAA,EACF;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/configs/lib/upgrade-actions.js

@@ -33,6 +33,27 @@ const upgradeActions = [
       });
     }
   },
+  {
+    id: "devices.seed-push-token-encryption-map",
+    version: "0.6.6",
+    messageKey: "configs.upgrades.devicesPushTokenEncryption.message",
+    ctaKey: "configs.upgrades.devicesPushTokenEncryption.cta",
+    successKey: "configs.upgrades.devicesPushTokenEncryption.success",
+    loadingKey: "configs.upgrades.devicesPushTokenEncryption.loading",
+    // Encryption maps are seeded once at tenant creation (`entities seed-encryption`), so a tenant
+    // that predates the devices push-token feature has no `devices:user_device` map row. Without it
+    // `encryptEntityPayload` no-ops and `push_token` is written as PLAINTEXT (the map is a declaration
+    // of which fields to encrypt; the tenant DEK still drives the actual crypto, so seeding it is safe
+    // even when encryption is currently disabled — it only takes effect once encryption is on).
+    // Lazy-imported so configs stays decoupled from devices/entities (mirrors the customers action).
+    run: async ({ em, tenantId, organizationId }) => {
+      const [{ default: devicesEncryptionMaps }, { upsertEncryptionMapSpecs }] = await Promise.all([
+        import("@open-mercato/core/modules/devices/encryption"),
+        import("@open-mercato/core/modules/entities/cli")
+      ]);
+      await upsertEncryptionMapSpecs(em, tenantId, organizationId ?? null, devicesEncryptionMaps);
+    }
+  },
   {
     id: "customers.seed-interaction-statuses",
     version: "0.6.5",

package/dist/modules/configs/lib/upgrade-actions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/configs/lib/upgrade-actions.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport * as semver from 'semver'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { reconcileAttachmentOrganizations } from '@open-mercato/core/modules/attachments/lib/reconcileOrganization'\n\nconst logger = createLogger('configs').child({ component: 'upgrade-actions' })\n\nexport type UpgradeActionContext = {\n  tenantId: string\n  organizationId: string\n  container: AppContainer\n  em: EntityManager\n}\n\nexport type UpgradeActionDefinition = {\n  id: string\n  version: string\n  messageKey: string\n  ctaKey: string\n  successKey: string\n  loadingKey?: string\n  run: (ctx: UpgradeActionContext) => Promise<void>\n}\n\n/**\n * Compare two semantic version strings.\n * Uses the semver library for robust version comparison.\n * Returns negative if a < b, positive if a > b, 0 if equal.\n * Throws an error if either version string is invalid.\n */\nexport function compareVersions(a: string, b: string): number {\n  const cleanA = semver.valid(semver.coerce(a))\n  const cleanB = semver.valid(semver.coerce(b))\n  if (!cleanA) {\n    throw new Error(`Invalid version string: \"${a}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  if (!cleanB) {\n    throw new Error(`Invalid version string: \"${b}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  return semver.compare(cleanA, cleanB)\n}\n\nexport const upgradeActions: UpgradeActionDefinition[] = [\n  {\n    id: 'attachments.reconcile-organization',\n    version: '0.6.6',\n    messageKey: 'configs.upgrades.attachmentsOrgReconcile.message',\n    ctaKey: 'configs.upgrades.attachmentsOrgReconcile.cta',\n    successKey: 'configs.upgrades.attachmentsOrgReconcile.success',\n    loadingKey: 'configs.upgrades.attachmentsOrgReconcile.loading',\n    async run({ container, em, tenantId }) {\n      const queryEngine = container.resolve('queryEngine') as QueryEngine\n      const report = await reconcileAttachmentOrganizations({ em, queryEngine, tenantId })\n      logger.info('attachments organization reconcile completed', {\n        tenantId,\n        scanned: report.scanned,\n        updated: report.updated,\n        unresolved: report.unresolved,\n        skippedVirtual: report.skippedVirtual,\n      })\n    },\n  },\n  {\n    id: 'customers.seed-interaction-statuses',\n    version: '0.6.5',\n    messageKey: 'customers.config.upgradeActions.interactionStatuses.message',\n    ctaKey: 'customers.config.upgradeActions.interactionStatuses.cta',\n    successKey: 'customers.config.upgradeActions.interactionStatuses.success',\n    loadingKey: 'customers.config.upgradeActions.interactionStatuses.loading',\n    // Existing tenants predate the `interaction_status` dictionary, so their status\n    // dropdown is empty until seeded. New tenants get it via customers `seedDefaults`.\n    // Lazy-imported so configs stays decoupled from customers (the catalog of actions\n    // lives here, but customers code only loads when the action actually runs).\n    run: async ({ em, tenantId, organizationId }) => {\n      const [{ INTERACTION_STATUS_DEFAULTS }, { ensureDictionaryEntry }] = await Promise.all([\n        import('@open-mercato/core/modules/customers/cli'),\n        import('@open-mercato/core/modules/customers/commands/shared'),\n      ])\n      for (const entry of INTERACTION_STATUS_DEFAULTS) {\n        await ensureDictionaryEntry(em, {\n          tenantId,\n          organizationId,\n          kind: 'interaction_status',\n          value: entry.value,\n          label: entry.label,\n          color: entry.color,\n          icon: entry.icon,\n        })\n      }\n    },\n  },\n  {\n    id: 'payment_gateways.register-session-initialization-prune',\n    version: '0.6.6',\n    messageKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.message',\n    ctaKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.cta',\n    successKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.success',\n    loadingKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.loading',\n    run: async ({ container, tenantId, organizationId }) => {\n      const { registerSessionInitializationPruneSchedule } = await import(\n        '@open-mercato/core/modules/payment_gateways/setup'\n      )\n      await registerSessionInitializationPruneSchedule(container, { tenantId, organizationId })\n    },\n  },\n]\n\nexport function actionsUpToVersion(version: string): UpgradeActionDefinition[] {\n  return upgradeActions // NOSONAR \u2014 upgradeActions is populated at boot time by modules\n    .filter((action) => compareVersions(action.version, version) <= 0)\n    .sort((a, b) => compareVersions(a.version, b.version) || a.id.localeCompare(b.id))\n}\n\nexport function findUpgradeAction(actionId: string, maxVersion: string): UpgradeActionDefinition | undefined {\n  const matches = actionsUpToVersion(maxVersion).filter((action) => action.id === actionId)\n  if (!matches.length) return undefined\n  return matches[matches.length - 1]\n}\n"],
-  "mappings": "AACA,YAAY,YAAY;AAExB,SAAS,oBAAoB;AAE7B,SAAS,wCAAwC;AAEjD,MAAM,SAAS,aAAa,SAAS,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAyBtE,SAAS,gBAAgB,GAAW,GAAmB;AAC5D,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,SAAO,OAAO,QAAQ,QAAQ,MAAM;AACtC;AAEO,MAAM,iBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,SAAS,GAAG;AACrC,YAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,YAAM,SAAS,MAAM,iCAAiC,EAAE,IAAI,aAAa,SAAS,CAAC;AACnF,aAAO,KAAK,gDAAgD;AAAA,QAC1D;AAAA,QACA,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB,gBAAgB,OAAO;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,IAKZ,KAAK,OAAO,EAAE,IAAI,UAAU,eAAe,MAAM;AAC/C,YAAM,CAAC,EAAE,4BAA4B,GAAG,EAAE,sBAAsB,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrF,OAAO,0CAA0C;AAAA,QACjD,OAAO,sDAAsD;AAAA,MAC/D,CAAC;AACD,iBAAW,SAAS,6BAA6B;AAC/C,cAAM,sBAAsB,IAAI;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,MAAM;AAAA,UACN,OAAO,MAAM;AAAA,UACb,OAAO,MAAM;AAAA,UACb,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QACd,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,KAAK,OAAO,EAAE,WAAW,UAAU,eAAe,MAAM;AACtD,YAAM,EAAE,2CAA2C,IAAI,MAAM,OAC3D,mDACF;AACA,YAAM,2CAA2C,WAAW,EAAE,UAAU,eAAe,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,SAAO,eACJ,OAAO,CAAC,WAAW,gBAAgB,OAAO,SAAS,OAAO,KAAK,CAAC,EAChE,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,SAAS,EAAE,OAAO,KAAK,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AACrF;AAEO,SAAS,kBAAkB,UAAkB,YAAyD;AAC3G,QAAM,UAAU,mBAAmB,UAAU,EAAE,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AACxF,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,QAAQ,SAAS,CAAC;AACnC;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport * as semver from 'semver'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { reconcileAttachmentOrganizations } from '@open-mercato/core/modules/attachments/lib/reconcileOrganization'\n\nconst logger = createLogger('configs').child({ component: 'upgrade-actions' })\n\nexport type UpgradeActionContext = {\n  tenantId: string\n  organizationId: string\n  container: AppContainer\n  em: EntityManager\n}\n\nexport type UpgradeActionDefinition = {\n  id: string\n  version: string\n  messageKey: string\n  ctaKey: string\n  successKey: string\n  loadingKey?: string\n  run: (ctx: UpgradeActionContext) => Promise<void>\n}\n\n/**\n * Compare two semantic version strings.\n * Uses the semver library for robust version comparison.\n * Returns negative if a < b, positive if a > b, 0 if equal.\n * Throws an error if either version string is invalid.\n */\nexport function compareVersions(a: string, b: string): number {\n  const cleanA = semver.valid(semver.coerce(a))\n  const cleanB = semver.valid(semver.coerce(b))\n  if (!cleanA) {\n    throw new Error(`Invalid version string: \"${a}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  if (!cleanB) {\n    throw new Error(`Invalid version string: \"${b}\". Expected a valid semver format (e.g., \"1.2.3\").`)\n  }\n  return semver.compare(cleanA, cleanB)\n}\n\nexport const upgradeActions: UpgradeActionDefinition[] = [\n  {\n    id: 'attachments.reconcile-organization',\n    version: '0.6.6',\n    messageKey: 'configs.upgrades.attachmentsOrgReconcile.message',\n    ctaKey: 'configs.upgrades.attachmentsOrgReconcile.cta',\n    successKey: 'configs.upgrades.attachmentsOrgReconcile.success',\n    loadingKey: 'configs.upgrades.attachmentsOrgReconcile.loading',\n    async run({ container, em, tenantId }) {\n      const queryEngine = container.resolve('queryEngine') as QueryEngine\n      const report = await reconcileAttachmentOrganizations({ em, queryEngine, tenantId })\n      logger.info('attachments organization reconcile completed', {\n        tenantId,\n        scanned: report.scanned,\n        updated: report.updated,\n        unresolved: report.unresolved,\n        skippedVirtual: report.skippedVirtual,\n      })\n    },\n  },\n  {\n    id: 'devices.seed-push-token-encryption-map',\n    version: '0.6.6',\n    messageKey: 'configs.upgrades.devicesPushTokenEncryption.message',\n    ctaKey: 'configs.upgrades.devicesPushTokenEncryption.cta',\n    successKey: 'configs.upgrades.devicesPushTokenEncryption.success',\n    loadingKey: 'configs.upgrades.devicesPushTokenEncryption.loading',\n    // Encryption maps are seeded once at tenant creation (`entities seed-encryption`), so a tenant\n    // that predates the devices push-token feature has no `devices:user_device` map row. Without it\n    // `encryptEntityPayload` no-ops and `push_token` is written as PLAINTEXT (the map is a declaration\n    // of which fields to encrypt; the tenant DEK still drives the actual crypto, so seeding it is safe\n    // even when encryption is currently disabled \u2014 it only takes effect once encryption is on).\n    // Lazy-imported so configs stays decoupled from devices/entities (mirrors the customers action).\n    run: async ({ em, tenantId, organizationId }) => {\n      const [{ default: devicesEncryptionMaps }, { upsertEncryptionMapSpecs }] = await Promise.all([\n        import('@open-mercato/core/modules/devices/encryption'),\n        import('@open-mercato/core/modules/entities/cli'),\n      ])\n      await upsertEncryptionMapSpecs(em, tenantId, organizationId ?? null, devicesEncryptionMaps)\n    },\n  },\n  {\n    id: 'customers.seed-interaction-statuses',\n    version: '0.6.5',\n    messageKey: 'customers.config.upgradeActions.interactionStatuses.message',\n    ctaKey: 'customers.config.upgradeActions.interactionStatuses.cta',\n    successKey: 'customers.config.upgradeActions.interactionStatuses.success',\n    loadingKey: 'customers.config.upgradeActions.interactionStatuses.loading',\n    // Existing tenants predate the `interaction_status` dictionary, so their status\n    // dropdown is empty until seeded. New tenants get it via customers `seedDefaults`.\n    // Lazy-imported so configs stays decoupled from customers (the catalog of actions\n    // lives here, but customers code only loads when the action actually runs).\n    run: async ({ em, tenantId, organizationId }) => {\n      const [{ INTERACTION_STATUS_DEFAULTS }, { ensureDictionaryEntry }] = await Promise.all([\n        import('@open-mercato/core/modules/customers/cli'),\n        import('@open-mercato/core/modules/customers/commands/shared'),\n      ])\n      for (const entry of INTERACTION_STATUS_DEFAULTS) {\n        await ensureDictionaryEntry(em, {\n          tenantId,\n          organizationId,\n          kind: 'interaction_status',\n          value: entry.value,\n          label: entry.label,\n          color: entry.color,\n          icon: entry.icon,\n        })\n      }\n    },\n  },\n  {\n    id: 'payment_gateways.register-session-initialization-prune',\n    version: '0.6.6',\n    messageKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.message',\n    ctaKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.cta',\n    successKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.success',\n    loadingKey: 'payment_gateways.upgradeActions.sessionInitializationPrune.loading',\n    run: async ({ container, tenantId, organizationId }) => {\n      const { registerSessionInitializationPruneSchedule } = await import(\n        '@open-mercato/core/modules/payment_gateways/setup'\n      )\n      await registerSessionInitializationPruneSchedule(container, { tenantId, organizationId })\n    },\n  },\n]\n\nexport function actionsUpToVersion(version: string): UpgradeActionDefinition[] {\n  return upgradeActions // NOSONAR \u2014 upgradeActions is populated at boot time by modules\n    .filter((action) => compareVersions(action.version, version) <= 0)\n    .sort((a, b) => compareVersions(a.version, b.version) || a.id.localeCompare(b.id))\n}\n\nexport function findUpgradeAction(actionId: string, maxVersion: string): UpgradeActionDefinition | undefined {\n  const matches = actionsUpToVersion(maxVersion).filter((action) => action.id === actionId)\n  if (!matches.length) return undefined\n  return matches[matches.length - 1]\n}\n"],
+  "mappings": "AACA,YAAY,YAAY;AAExB,SAAS,oBAAoB;AAE7B,SAAS,wCAAwC;AAEjD,MAAM,SAAS,aAAa,SAAS,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAyBtE,SAAS,gBAAgB,GAAW,GAAmB;AAC5D,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,QAAM,SAAS,OAAO,MAAM,OAAO,OAAO,CAAC,CAAC;AAC5C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,CAAC,oDAAoD;AAAA,EACnG;AACA,SAAO,OAAO,QAAQ,QAAQ,MAAM;AACtC;AAEO,MAAM,iBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,MAAM,IAAI,EAAE,WAAW,IAAI,SAAS,GAAG;AACrC,YAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,YAAM,SAAS,MAAM,iCAAiC,EAAE,IAAI,aAAa,SAAS,CAAC;AACnF,aAAO,KAAK,gDAAgD;AAAA,QAC1D;AAAA,QACA,SAAS,OAAO;AAAA,QAChB,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB,gBAAgB,OAAO;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOZ,KAAK,OAAO,EAAE,IAAI,UAAU,eAAe,MAAM;AAC/C,YAAM,CAAC,EAAE,SAAS,sBAAsB,GAAG,EAAE,yBAAyB,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC3F,OAAO,+CAA+C;AAAA,QACtD,OAAO,yCAAyC;AAAA,MAClD,CAAC;AACD,YAAM,yBAAyB,IAAI,UAAU,kBAAkB,MAAM,qBAAqB;AAAA,IAC5F;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,IAKZ,KAAK,OAAO,EAAE,IAAI,UAAU,eAAe,MAAM;AAC/C,YAAM,CAAC,EAAE,4BAA4B,GAAG,EAAE,sBAAsB,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrF,OAAO,0CAA0C;AAAA,QACjD,OAAO,sDAAsD;AAAA,MAC/D,CAAC;AACD,iBAAW,SAAS,6BAA6B;AAC/C,cAAM,sBAAsB,IAAI;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,MAAM;AAAA,UACN,OAAO,MAAM;AAAA,UACb,OAAO,MAAM;AAAA,UACb,OAAO,MAAM;AAAA,UACb,MAAM,MAAM;AAAA,QACd,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,KAAK,OAAO,EAAE,WAAW,UAAU,eAAe,MAAM;AACtD,YAAM,EAAE,2CAA2C,IAAI,MAAM,OAC3D,mDACF;AACA,YAAM,2CAA2C,WAAW,EAAE,UAAU,eAAe,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,SAAO,eACJ,OAAO,CAAC,WAAW,gBAAgB,OAAO,SAAS,OAAO,KAAK,CAAC,EAChE,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE,SAAS,EAAE,OAAO,KAAK,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AACrF;AAEO,SAAS,kBAAkB,UAAkB,YAAyD;AAC3G,QAAM,UAAU,mBAAmB,UAAU,EAAE,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AACxF,MAAI,CAAC,QAAQ,OAAQ,QAAO;AAC5B,SAAO,QAAQ,QAAQ,SAAS,CAAC;AACnC;",
   "names": []
 }

package/dist/modules/customer_accounts/notifications.js

@@ -1,6 +1,8 @@
 const notificationTypes = [
   {
     type: "customer_accounts.user.signup",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customer_accounts",
     titleKey: "customer_accounts.notifications.user.signup.title",
     bodyKey: "customer_accounts.notifications.user.signup.body",
@@ -20,6 +22,8 @@ const notificationTypes = [
   },
   {
     type: "customer_accounts.user.locked",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customer_accounts",
     titleKey: "customer_accounts.notifications.user.locked.title",
     bodyKey: "customer_accounts.notifications.user.locked.body",
@@ -39,6 +43,8 @@ const notificationTypes = [
   },
   {
     type: "customer_accounts.domain_mapping.verified",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customer_accounts",
     titleKey: "customer_accounts.notifications.domain_mapping.verified.title",
     bodyKey: "customer_accounts.notifications.domain_mapping.verified.body",
@@ -58,6 +64,8 @@ const notificationTypes = [
   },
   {
     type: "customer_accounts.domain_mapping.activated",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customer_accounts",
     titleKey: "customer_accounts.notifications.domain_mapping.activated.title",
     bodyKey: "customer_accounts.notifications.domain_mapping.activated.body",
@@ -77,6 +85,8 @@ const notificationTypes = [
   },
   {
     type: "customer_accounts.domain_mapping.dns_failed",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customer_accounts",
     titleKey: "customer_accounts.notifications.domain_mapping.dns_failed.title",
     bodyKey: "customer_accounts.notifications.domain_mapping.dns_failed.body",
@@ -96,6 +106,8 @@ const notificationTypes = [
   },
   {
     type: "customer_accounts.domain_mapping.tls_failed",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customer_accounts",
     titleKey: "customer_accounts.notifications.domain_mapping.tls_failed.title",
     bodyKey: "customer_accounts.notifications.domain_mapping.tls_failed.body",

package/dist/modules/customer_accounts/notifications.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/customer_accounts/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'customer_accounts.user.signup',\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.user.signup.title',\n    bodyKey: 'customer_accounts.notifications.user.signup.body',\n    icon: 'user-plus',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/users/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/users/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.user.locked',\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.user.locked.title',\n    bodyKey: 'customer_accounts.notifications.user.locked.body',\n    icon: 'lock',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/users/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/users/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.verified',\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.verified.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.verified.body',\n    icon: 'check-circle',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.activated',\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.activated.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.activated.body',\n    icon: 'globe',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.dns_failed',\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.dns_failed.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.dns_failed.body',\n    icon: 'alert-triangle',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.tls_failed',\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.tls_failed.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.tls_failed.body',\n    icon: 'shield-alert',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'customer_accounts.user.signup',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.user.signup.title',\n    bodyKey: 'customer_accounts.notifications.user.signup.body',\n    icon: 'user-plus',\n    severity: 'info',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/users/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/users/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.user.locked',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.user.locked.title',\n    bodyKey: 'customer_accounts.notifications.user.locked.body',\n    icon: 'lock',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/users/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/users/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.verified',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.verified.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.verified.body',\n    icon: 'check-circle',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.activated',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.activated.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.activated.body',\n    icon: 'globe',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.dns_failed',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.dns_failed.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.dns_failed.body',\n    icon: 'alert-triangle',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'customer_accounts.domain_mapping.tls_failed',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customer_accounts',\n    titleKey: 'customer_accounts.notifications.domain_mapping.tls_failed.title',\n    bodyKey: 'customer_accounts.notifications.domain_mapping.tls_failed.body',\n    icon: 'shield-alert',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customer_accounts/settings/domain',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customer_accounts/settings/domain',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
+  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/customers/notifications.js

@@ -1,6 +1,8 @@
 const notificationTypes = [
   {
     type: "customers.deal.won",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customers",
     titleKey: "customers.notifications.deal.won.title",
     bodyKey: "customers.notifications.deal.won.body",
@@ -21,6 +23,8 @@ const notificationTypes = [
   },
   {
     type: "customers.deal.lost",
+    // Ships without push — operators re-enable it per type from the Notification Delivery settings.
+    channels: ["in_app", "email"],
     module: "customers",
     titleKey: "customers.notifications.deal.lost.title",
     bodyKey: "customers.notifications.deal.lost.body",

package/dist/modules/customers/notifications.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/customers/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'customers.deal.won',\n    module: 'customers',\n    titleKey: 'customers.notifications.deal.won.title',\n    bodyKey: 'customers.notifications.deal.won.body',\n    icon: 'trophy',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customers/deals/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customers/deals/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'customers.deal.lost',\n    module: 'customers',\n    titleKey: 'customers.notifications.deal.lost.title',\n    bodyKey: 'customers.notifications.deal.lost.body',\n    icon: 'x-circle',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customers/deals/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customers/deals/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'customers.deal.won',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customers',\n    titleKey: 'customers.notifications.deal.won.title',\n    bodyKey: 'customers.notifications.deal.won.body',\n    icon: 'trophy',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customers/deals/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customers/deals/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'customers.deal.lost',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'customers',\n    titleKey: 'customers.notifications.deal.lost.title',\n    bodyKey: 'customers.notifications.deal.lost.body',\n    icon: 'x-circle',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/customers/deals/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/customers/deals/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n]\n\nexport default notificationTypes\n"],
+  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/devices/acl.js

@@ -0,0 +1,11 @@
+const features = [
+  { id: "devices.view", title: "View own devices", module: "devices" },
+  { id: "devices.manage", title: "Manage own devices", module: "devices" },
+  { id: "devices.admin", title: "Manage devices across users", module: "devices" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/devices/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/devices/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'devices.view', title: 'View own devices', module: 'devices' },\n  { id: 'devices.manage', title: 'Manage own devices', module: 'devices' },\n  { id: 'devices.admin', title: 'Manage devices across users', module: 'devices' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,gBAAgB,OAAO,oBAAoB,QAAQ,UAAU;AAAA,EACnE,EAAE,IAAI,kBAAkB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EACvE,EAAE,IAAI,iBAAiB,OAAO,+BAA+B,QAAQ,UAAU;AACjF;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/devices/api/[id]/route.js

@@ -0,0 +1,167 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { readJsonSafe } from "@open-mercato/shared/lib/http/readJsonSafe";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { UserDevice } from "../../data/entities.js";
+import { updateDeviceSchema } from "../../data/validators.js";
+import { resolveDeviceActorUserId } from "../auth.js";
+import { executeUpdate, executeDeactivate } from "../deviceOps.js";
+const logger = createLogger("devices");
+const metadata = {
+  PUT: { requireAuth: true, requireFeatures: ["devices.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["devices.manage"] }
+};
+const paramsSchema = z.object({ id: z.string().uuid() });
+async function PUT(req, { params }) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const parsedParams = paramsSchema.safeParse({ id: params.id });
+    if (!parsedParams.success) {
+      return NextResponse.json({ error: translate("devices.errors.invalid_id", "Invalid device id") }, { status: 400 });
+    }
+    const body = updateDeviceSchema.parse(await readJsonSafe(req, {}));
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const currentOrganizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const em = container.resolve("em");
+    const device = await findOneWithDecryption(
+      em,
+      UserDevice,
+      {
+        id: parsedParams.data.id,
+        tenantId: auth.tenantId,
+        ...currentOrganizationId ? { organizationId: currentOrganizationId } : {},
+        deletedAt: null
+      },
+      void 0,
+      { tenantId: auth.tenantId, organizationId: currentOrganizationId }
+    );
+    if (!device) {
+      return NextResponse.json({ error: translate("devices.errors.not_found", "Device not found") }, { status: 404 });
+    }
+    if (device.userId !== actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    const mctx = {
+      container,
+      auth,
+      scope,
+      organizationId: device.organizationId ?? null,
+      actorUserId,
+      request: req
+    };
+    return await executeUpdate(mctx, device, body);
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: translate("devices.errors.invalid_payload", "Invalid device payload"), details: err.flatten() },
+        { status: 400 }
+      );
+    }
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.PUT failed", { err });
+    return NextResponse.json({ error: translate("devices.errors.update_failed", "Failed to update device") }, { status: 500 });
+  }
+}
+async function DELETE(req, { params }) {
+  const { translate } = await resolveTranslations();
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    const actorUserId = resolveDeviceActorUserId(auth);
+    if (!auth || !auth.tenantId || !actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.unauthorized", "Unauthorized") }, { status: 401 });
+    }
+    const parsedParams = paramsSchema.safeParse({ id: params.id });
+    if (!parsedParams.success) {
+      return NextResponse.json({ error: translate("devices.errors.invalid_id", "Invalid device id") }, { status: 400 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
+    const currentOrganizationId = scope?.selectedId ?? auth.orgId ?? null;
+    const em = container.resolve("em");
+    const device = await findOneWithDecryption(
+      em,
+      UserDevice,
+      {
+        id: parsedParams.data.id,
+        tenantId: auth.tenantId,
+        ...currentOrganizationId ? { organizationId: currentOrganizationId } : {},
+        deletedAt: null
+      },
+      void 0,
+      { tenantId: auth.tenantId, organizationId: currentOrganizationId }
+    );
+    if (!device) {
+      return NextResponse.json({ error: translate("devices.errors.not_found", "Device not found") }, { status: 404 });
+    }
+    if (device.userId !== actorUserId) {
+      return NextResponse.json({ error: translate("devices.errors.forbidden", "Access denied") }, { status: 403 });
+    }
+    const mctx = {
+      container,
+      auth,
+      scope,
+      organizationId: device.organizationId ?? null,
+      actorUserId,
+      request: req
+    };
+    return await executeDeactivate(mctx, device);
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    logger.error("devices.DELETE failed", { err });
+    return NextResponse.json({ error: translate("devices.errors.delete_failed", "Failed to delete device") }, { status: 500 });
+  }
+}
+const okResponseSchema = z.object({ ok: z.literal(true), id: z.string().uuid().optional() });
+const errorResponseSchema = z.object({ error: z.string() });
+const openApi = {
+  tag: "Devices",
+  summary: "Update or deactivate one of your registered devices",
+  methods: {
+    PUT: {
+      summary: "Update your device",
+      description: "Updates last-seen, app/OS metadata, and push token for a device owned by the current user. Set pushToken to null to clear a revoked OS permission.",
+      requestBody: { schema: updateDeviceSchema },
+      responses: [{ status: 200, description: "Device updated", schema: okResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid payload or id", schema: errorResponseSchema },
+        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
+        { status: 403, description: "Not the device owner", schema: errorResponseSchema },
+        { status: 404, description: "Device not found", schema: errorResponseSchema }
+      ]
+    },
+    DELETE: {
+      summary: "Deactivate your device",
+      description: "Soft-deletes a device owned by the current user.",
+      responses: [{ status: 200, description: "Device deactivated", schema: okResponseSchema }],
+      errors: [
+        { status: 400, description: "Invalid id", schema: errorResponseSchema },
+        { status: 401, description: "Unauthorized", schema: errorResponseSchema },
+        { status: 403, description: "Not the device owner", schema: errorResponseSchema },
+        { status: 404, description: "Device not found", schema: errorResponseSchema }
+      ]
+    }
+  }
+};
+export {
+  DELETE,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/devices/api/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/devices/api/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { UserDevice } from '../../data/entities'\nimport { updateDeviceSchema } from '../../data/validators'\nimport { resolveDeviceActorUserId } from '../auth'\nimport { executeUpdate, executeDeactivate, type DeviceMutationContext } from '../deviceOps'\n\nconst logger = createLogger('devices')\n\n// Self-serve: the caller may only mutate their OWN device. Cross-user device administration lives in\n// api/admin/devices/[id] (gated by devices.admin).\nexport const metadata = {\n  PUT: { requireAuth: true, requireFeatures: ['devices.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['devices.manage'] },\n}\n\nconst paramsSchema = z.object({ id: z.string().uuid() })\n\nexport async function PUT(req: Request, { params }: { params: { id: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n    const parsedParams = paramsSchema.safeParse({ id: params.id })\n    if (!parsedParams.success) {\n      return NextResponse.json({ error: translate('devices.errors.invalid_id', 'Invalid device id') }, { status: 400 })\n    }\n\n    const body = updateDeviceSchema.parse(await readJsonSafe(req, {}))\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    // Self devices are scoped to the caller's active organization, mirroring the list route and the\n    // user-owned-resource convention (e.g. progress jobs): a device outside the current org context\n    // reads as not-found. When there is no active org, scope by tenant only.\n    const currentOrganizationId = scope?.selectedId ?? auth.orgId ?? null\n    const em = container.resolve('em') as EntityManager\n    const device = await findOneWithDecryption(\n      em,\n      UserDevice,\n      {\n        id: parsedParams.data.id,\n        tenantId: auth.tenantId,\n        ...(currentOrganizationId ? { organizationId: currentOrganizationId } : {}),\n        deletedAt: null,\n      },\n      undefined,\n      { tenantId: auth.tenantId, organizationId: currentOrganizationId },\n    )\n    if (!device) {\n      return NextResponse.json({ error: translate('devices.errors.not_found', 'Device not found') }, { status: 404 })\n    }\n    if (device.userId !== actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n\n    const mctx: DeviceMutationContext = {\n      container,\n      auth,\n      scope,\n      organizationId: device.organizationId ?? null,\n      actorUserId,\n      request: req,\n    }\n    return await executeUpdate(mctx, device, body)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json(\n        { error: translate('devices.errors.invalid_payload', 'Invalid device payload'), details: err.flatten() },\n        { status: 400 },\n      )\n    }\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.PUT failed', { err })\n    return NextResponse.json({ error: translate('devices.errors.update_failed', 'Failed to update device') }, { status: 500 })\n  }\n}\n\nexport async function DELETE(req: Request, { params }: { params: { id: string } }) {\n  const { translate } = await resolveTranslations()\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    const actorUserId = resolveDeviceActorUserId(auth)\n    if (!auth || !auth.tenantId || !actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n    }\n    const parsedParams = paramsSchema.safeParse({ id: params.id })\n    if (!parsedParams.success) {\n      return NextResponse.json({ error: translate('devices.errors.invalid_id', 'Invalid device id') }, { status: 400 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    // Same active-org scoping as PUT/the list route: a device outside the current org reads as not-found.\n    const currentOrganizationId = scope?.selectedId ?? auth.orgId ?? null\n    const em = container.resolve('em') as EntityManager\n    const device = await findOneWithDecryption(\n      em,\n      UserDevice,\n      {\n        id: parsedParams.data.id,\n        tenantId: auth.tenantId,\n        ...(currentOrganizationId ? { organizationId: currentOrganizationId } : {}),\n        deletedAt: null,\n      },\n      undefined,\n      { tenantId: auth.tenantId, organizationId: currentOrganizationId },\n    )\n    if (!device) {\n      return NextResponse.json({ error: translate('devices.errors.not_found', 'Device not found') }, { status: 404 })\n    }\n    if (device.userId !== actorUserId) {\n      return NextResponse.json({ error: translate('devices.errors.forbidden', 'Access denied') }, { status: 403 })\n    }\n\n    const mctx: DeviceMutationContext = {\n      container,\n      auth,\n      scope,\n      organizationId: device.organizationId ?? null,\n      actorUserId,\n      request: req,\n    }\n    return await executeDeactivate(mctx, device)\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('devices.DELETE failed', { err })\n    return NextResponse.json({ error: translate('devices.errors.delete_failed', 'Failed to delete device') }, { status: 500 })\n  }\n}\n\nconst okResponseSchema = z.object({ ok: z.literal(true), id: z.string().uuid().optional() })\nconst errorResponseSchema = z.object({ error: z.string() })\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Devices',\n  summary: 'Update or deactivate one of your registered devices',\n  methods: {\n    PUT: {\n      summary: 'Update your device',\n      description:\n        'Updates last-seen, app/OS metadata, and push token for a device owned by the current user. Set pushToken to null to clear a revoked OS permission.',\n      requestBody: { schema: updateDeviceSchema },\n      responses: [{ status: 200, description: 'Device updated', schema: okResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload or id', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Not the device owner', schema: errorResponseSchema },\n        { status: 404, description: 'Device not found', schema: errorResponseSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Deactivate your device',\n      description: 'Soft-deletes a device owned by the current user.',\n      responses: [{ status: 200, description: 'Device deactivated', schema: okResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid id', schema: errorResponseSchema },\n        { status: 401, description: 'Unauthorized', schema: errorResponseSchema },\n        { status: 403, description: 'Not the device owner', schema: errorResponseSchema },\n        { status: 404, description: 'Device not found', schema: errorResponseSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AAEpC,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,0BAA0B;AACnC,SAAS,gCAAgC;AACzC,SAAS,eAAe,yBAAqD;AAE7E,MAAM,SAAS,aAAa,SAAS;AAI9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACnE;AAEA,MAAM,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEvD,eAAsB,IAAI,KAAc,EAAE,OAAO,GAA+B;AAC9E,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AACA,UAAM,eAAe,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AAC7D,QAAI,CAAC,aAAa,SAAS;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AAEA,UAAM,OAAO,mBAAmB,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACjE,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAIxF,UAAM,wBAAwB,OAAO,cAAc,KAAK,SAAS;AACjE,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,aAAa,KAAK;AAAA,QACtB,UAAU,KAAK;AAAA,QACf,GAAI,wBAAwB,EAAE,gBAAgB,sBAAsB,IAAI,CAAC;AAAA,QACzE,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,sBAAsB;AAAA,IACnE;AACA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChH;AACA,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7G;AAEA,UAAM,OAA8B;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,OAAO,kBAAkB;AAAA,MACzC;AAAA,MACA,SAAS;AAAA,IACX;AACA,WAAO,MAAM,cAAc,MAAM,QAAQ,IAAI;AAAA,EAC/C,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,GAAG,SAAS,IAAI,QAAQ,EAAE;AAAA,QACvG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC;AAC1C,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,gCAAgC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3H;AACF;AAEA,eAAsB,OAAO,KAAc,EAAE,OAAO,GAA+B;AACjF,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,cAAc,yBAAyB,IAAI;AACjD,QAAI,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,aAAa;AAC3C,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,+BAA+B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/G;AACA,UAAM,eAAe,aAAa,UAAU,EAAE,IAAI,OAAO,GAAG,CAAC;AAC7D,QAAI,CAAC,aAAa,SAAS;AACzB,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,6BAA6B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClH;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAExF,UAAM,wBAAwB,OAAO,cAAc,KAAK,SAAS;AACjE,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI,aAAa,KAAK;AAAA,QACtB,UAAU,KAAK;AAAA,QACf,GAAI,wBAAwB,EAAE,gBAAgB,sBAAsB,IAAI,CAAC;AAAA,QACzE,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,UAAU,KAAK,UAAU,gBAAgB,sBAAsB;AAAA,IACnE;AACA,QAAI,CAAC,QAAQ;AACX,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAChH;AACA,QAAI,OAAO,WAAW,aAAa;AACjC,aAAO,aAAa,KAAK,EAAE,OAAO,UAAU,4BAA4B,eAAe,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7G;AAEA,UAAM,OAA8B;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA,gBAAgB,OAAO,kBAAkB;AAAA,MACzC;AAAA,MACA,SAAS;AAAA,IACX;AACA,WAAO,MAAM,kBAAkB,MAAM,MAAM;AAAA,EAC7C,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,yBAAyB,EAAE,IAAI,CAAC;AAC7C,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,gCAAgC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3H;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC3F,MAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnD,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,mBAAmB;AAAA,MAC1C,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iBAAiB,CAAC;AAAA,MACpF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,oBAAoB;AAAA,QAChF,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC9E;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,iBAAiB,CAAC;AAAA,MACxF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,cAAc,QAAQ,oBAAoB;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,oBAAoB;AAAA,QAChF,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}