@pilotiq/pilotiq 0.1.0

package/dist/notifications/database.js

@@ -0,0 +1,321 @@
+/**
+ * Database-backed notifications — server-side store helpers.
+ *
+ * Pilotiq doesn't ship a Prisma model; we read/write the
+ * `notification` table that `@rudderjs/notification`'s
+ * `NotificationProvider` publishes (`prisma/schema/notification.prisma`).
+ * Apps that want bell-icon notifications add `NotificationProvider` to
+ * their providers list and run `prisma generate`/`db push`; pilotiq
+ * then queries the same table via `@rudderjs/orm`'s `ModelRegistry`
+ * adapter so the wire shape matches what
+ * `Notifier.send(user, new MyNotification())` already writes.
+ *
+ * `@rudderjs/orm` is a runtime soft-import — pilotiq has no hard
+ * dependency on it. When the host app hasn't installed orm (or no
+ * adapter is registered), every helper resolves to a clean
+ * "store unavailable" sentinel rather than throwing.
+ */
+/** Test-injected adapter override; `null` falls back to dynamic import. */
+let _testAdapter = 'unset';
+/** Soft-resolved orm adapter. `null` when no orm adapter is registered.
+ *
+ *  Prefers the rudder service container (`app().make('db')`) — the
+ *  orm-prisma / orm-drizzle providers register the adapter as a
+ *  globalThis-rooted singleton there, so this resolution path survives
+ *  the Vite SSR module-cache duplication that breaks shared singletons
+ *  in raw ES module land. Falls back to `ModelRegistry.get()` for
+ *  setups that wired the adapter directly.
+ *
+ *  Both modules are imported indirectly so TypeScript doesn't try to
+ *  resolve them at type-check time — pilotiq doesn't peer-depend on
+ *  `@rudderjs/orm` or `@rudderjs/core` (the bell-icon is opt-in).
+ */
+async function adapter() {
+    if (_testAdapter !== 'unset')
+        return _testAdapter;
+    const fromContainer = await resolveFromContainer();
+    if (fromContainer)
+        return fromContainer;
+    return resolveFromOrmModule();
+}
+async function resolveFromContainer() {
+    const moduleName = '@rudderjs/core';
+    try {
+        const mod = await import(/* @vite-ignore */ moduleName);
+        if (!mod.app)
+            return null;
+        const adapter = mod.app().make('db');
+        if (!adapter || typeof adapter !== 'object')
+            return null;
+        if (typeof adapter.query !== 'function')
+            return null;
+        return adapter;
+    }
+    catch {
+        return null;
+    }
+}
+async function resolveFromOrmModule() {
+    const moduleName = '@rudderjs/orm';
+    try {
+        const mod = await import(/* @vite-ignore */ moduleName);
+        return mod.ModelRegistry?.get() ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Notification-table row JSON-decoded `data` payload. We always store
+ *  pilotiq's `NotificationMeta` shape; rows written by
+ *  `@rudderjs/notification.Notifier.send(...)` may carry arbitrary
+ *  application keys — we surface what we can recognize and ignore the rest. */
+function parseRowData(raw) {
+    if (typeof raw !== 'string')
+        return raw;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+function rowToMeta(row) {
+    const data = parseRowData(row.data);
+    const meta = {
+        id: row.id,
+        createdAt: Date.parse(row.created_at) || Date.now(),
+        title: typeof data['title'] === 'string' ? data['title'] : '',
+    };
+    if (row.read_at)
+        meta.readAt = row.read_at;
+    if (typeof data['body'] === 'string')
+        meta.body = data['body'];
+    if (typeof data['icon'] === 'string')
+        meta.icon = data['icon'];
+    if (typeof data['url'] === 'string')
+        meta.url = data['url'];
+    if (data['type'] === 'info' || data['type'] === 'success' ||
+        data['type'] === 'warning' || data['type'] === 'error') {
+        meta.type = data['type'];
+    }
+    const actions = parseStoredActions(data['actions']);
+    if (actions.length > 0)
+        meta.actions = actions;
+    return meta;
+}
+/**
+ * Validate the stored action array shape — the `data.actions` column
+ * is end-user controllable through the `Notification` builder, so we
+ * defend in depth: malformed entries are dropped with a warning rather
+ * than crashing the bell dropdown render.
+ *
+ * Required: `name: string`, `label: string`, exactly one of `url` /
+ * `post` / `handler` set to a string.
+ */
+function parseStoredActions(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const entry of raw) {
+        if (!entry || typeof entry !== 'object')
+            continue;
+        const e = entry;
+        if (typeof e['name'] !== 'string' || !e['name']) {
+            warnDrop(e, 'missing name');
+            continue;
+        }
+        if (typeof e['label'] !== 'string' || !e['label']) {
+            warnDrop(e, 'missing label');
+            continue;
+        }
+        const url = typeof e['url'] === 'string' ? e['url'] : undefined;
+        const post = typeof e['post'] === 'string' ? e['post'] : undefined;
+        const handler = typeof e['handler'] === 'string' ? e['handler'] : undefined;
+        const dispatchModes = [url, post, handler].filter(v => v !== undefined).length;
+        if (dispatchModes !== 1) {
+            warnDrop(e, 'must set exactly one of url/post/handler');
+            continue;
+        }
+        const action = { name: e['name'], label: e['label'] };
+        if (url !== undefined)
+            action.url = url;
+        if (post !== undefined)
+            action.post = post;
+        if (handler !== undefined)
+            action.handler = handler;
+        if (e['payload'] && typeof e['payload'] === 'object' && !Array.isArray(e['payload'])) {
+            action.payload = e['payload'];
+        }
+        if (typeof e['color'] === 'string')
+            action.color = e['color'];
+        if (typeof e['icon'] === 'string')
+            action.icon = e['icon'];
+        if (e['outlined'] === true)
+            action.outlined = true;
+        if (typeof e['size'] === 'string')
+            action.size = e['size'];
+        if (e['openUrlInNewTab'] === true)
+            action.openUrlInNewTab = true;
+        if (e['markAsRead'] === true)
+            action.markAsRead = true;
+        out.push(action);
+    }
+    return out;
+}
+function warnDrop(entry, reason) {
+    // Only warn in non-production — keep the bell quiet on prod where
+    // a dropped row is preferable to console spam.
+    if (typeof process !== 'undefined' && process.env?.['NODE_ENV'] === 'production')
+        return;
+    console.warn(`[Pilotiq] notification action dropped: ${reason}. Entry:`, entry);
+}
+/**
+ * Fetch the latest notifications for a notifiable + the unread count.
+ * Returns `{ notifications: [], unreadCount: 0 }` when no orm adapter is
+ * registered — apps without a database stay quiet rather than 500.
+ */
+export async function listForUser(opts) {
+    const adp = await adapter();
+    if (!adp)
+        return { notifications: [], unreadCount: 0 };
+    const limit = opts.limit ?? 25;
+    let q = adp.query('notification')
+        .where('notifiable_type', opts.notifiableType)
+        .where('notifiable_id', opts.notifiableId);
+    if (opts.unreadOnly)
+        q = q.where('read_at', null);
+    q = q.orderBy('created_at', 'DESC');
+    const [page, count] = await Promise.all([
+        q.paginate(1, limit),
+        unreadCount({ notifiableType: opts.notifiableType, notifiableId: opts.notifiableId }),
+    ]);
+    const rows = page.data.map(rowToMeta);
+    return { notifications: rows, unreadCount: count };
+}
+/**
+ * Fetch a single row by id, scoped to the notifiable. Returns
+ * `undefined` when no row matches (already-deleted / wrong owner /
+ * store unavailable). Used by the notification action route to look
+ * up the stored `data.actions` array before dispatching.
+ */
+export async function findOneForUser(id, opts) {
+    const adp = await adapter();
+    if (!adp)
+        return undefined;
+    const q = adp.query('notification')
+        .where('notifiable_type', opts.notifiableType)
+        .where('notifiable_id', opts.notifiableId)
+        .where('id', id);
+    const page = await q.paginate(1, 1);
+    const row = page.data[0];
+    if (!row)
+        return undefined;
+    return rowToMeta(row);
+}
+/** Count rows with `read_at IS NULL` for the notifiable. */
+export async function unreadCount(opts) {
+    const adp = await adapter();
+    if (!adp)
+        return 0;
+    const q = adp.query('notification')
+        .where('notifiable_type', opts.notifiableType)
+        .where('notifiable_id', opts.notifiableId)
+        .where('read_at', null);
+    // Cheap path when the adapter implements `count()`; fall back to
+    // paginate(1,1).total which both Prisma and Drizzle adapters support.
+    if (q.count)
+        return q.count();
+    const page = await q.paginate(1, 1);
+    return page.total;
+}
+/**
+ * Mark a single notification row as read. Always scoped to
+ * `notifiableId` so a tampered POST can't mark another user's row.
+ *
+ * Returns `true` when a row was updated, `false` when no row matched
+ * (already-deleted / wrong owner / store unavailable).
+ */
+export async function markAsRead(id, opts) {
+    const adp = await adapter();
+    if (!adp)
+        return false;
+    const q = adp.query('notification')
+        .where('notifiable_type', opts.notifiableType)
+        .where('notifiable_id', opts.notifiableId)
+        .where('id', id);
+    if (!q.updateAll)
+        return false;
+    const n = await q.updateAll({ read_at: new Date().toISOString() });
+    return n > 0;
+}
+/** Mark a row unread again — used by the bell's "mark unread" affordance. */
+export async function markAsUnread(id, opts) {
+    const adp = await adapter();
+    if (!adp)
+        return false;
+    const q = adp.query('notification')
+        .where('notifiable_type', opts.notifiableType)
+        .where('notifiable_id', opts.notifiableId)
+        .where('id', id);
+    if (!q.updateAll)
+        return false;
+    const n = await q.updateAll({ read_at: null });
+    return n > 0;
+}
+/** Mark every unread notification for the notifiable as read. */
+export async function markAllAsRead(opts) {
+    const adp = await adapter();
+    if (!adp)
+        return 0;
+    const q = adp.query('notification')
+        .where('notifiable_type', opts.notifiableType)
+        .where('notifiable_id', opts.notifiableId)
+        .where('read_at', null);
+    if (!q.updateAll)
+        return 0;
+    return q.updateAll({ read_at: new Date().toISOString() });
+}
+/**
+ * Insert a notification row directly. Powers
+ * `Notification.make(...).sendToDatabase(recipient)`. Throws when the
+ * orm adapter isn't registered — the caller has explicitly asked to
+ * persist, so silent no-op would hide a real config error.
+ */
+export async function persist(opts) {
+    const adp = await adapter();
+    if (!adp) {
+        throw new Error('[Pilotiq] sendToDatabase() called but no @rudderjs/orm adapter is registered. ' +
+            'Add a database provider (orm-prisma / orm-drizzle) to your providers list, ' +
+            "or call .sendToDatabase() only when the orm is wired up.");
+    }
+    const q = adp.query('notification');
+    if (!q.create) {
+        throw new Error('[Pilotiq] orm adapter does not support `query.create()`.');
+    }
+    const id = `pn_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
+    const now = new Date().toISOString();
+    await q.create({
+        id,
+        notifiable_id: opts.notifiableId,
+        notifiable_type: opts.notifiableType,
+        type: opts.type ?? 'PilotiqNotification',
+        data: JSON.stringify(opts.data),
+        read_at: null,
+        created_at: now,
+        updated_at: now,
+    });
+    return { id };
+}
+/** @internal — test seam. Inject a fake adapter (or `null` to mimic
+ *  "store unavailable"). Pass `undefined` to clear and fall back to the
+ *  dynamic `@rudderjs/orm` import. Tests should clear in `afterEach`. */
+export function _setTestAdapter(adp) {
+    _testAdapter = adp === undefined ? 'unset' : adp;
+}
+/** @internal — exposed for tests; lets a unit test inject a fake
+ *  ModelRegistry without monkey-patching dynamic-import. */
+export const _internal = {
+    parseRowData,
+    rowToMeta,
+};
+//# sourceMappingURL=database.js.map

package/dist/notifications/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/notifications/database.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA4DH,2EAA2E;AAC3E,IAAI,YAAY,GAAyD,OAAO,CAAA;AAEhF;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,OAAO;IACpB,IAAI,YAAY,KAAK,OAAO;QAAE,OAAO,YAAY,CAAA;IACjD,MAAM,aAAa,GAAG,MAAM,oBAAoB,EAAE,CAAA;IAClD,IAAI,aAAa;QAAE,OAAO,aAAa,CAAA;IACvC,OAAO,oBAAoB,EAAE,CAAA;AAC/B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,UAAU,GAAG,gBAAgB,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAErD,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACxD,IAAI,OAAQ,OAA+B,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAA;QAC7E,OAAO,OAA8C,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,UAAU,GAAG,eAAe,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAErD,CAAA;QACD,OAAO,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,IAAI,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;+EAG+E;AAC/E,SAAS,YAAY,CAAC,GAAqC;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACvC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;IAAC,CAAC;IACzD,MAAM,CAAC;QAAC,OAAO,EAAE,CAAA;IAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAoB;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,IAAI,GAA6B;QACrC,EAAE,EAAS,GAAG,CAAC,EAAE;QACjB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QACnD,KAAK,EAAM,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,EAAE;KAC9E,CAAA;IACD,IAAI,GAAG,CAAC,OAAO;QAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAA;IAC1C,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAW,CAAA;IACxE,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAW,CAAA;IACxE,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAM,QAAQ;QAAE,IAAI,CAAC,GAAG,GAAI,IAAI,CAAC,KAAK,CAAY,CAAA;IACxE,IACE,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,OAAO,EACtD,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IAC9C,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAClC,MAAM,GAAG,GAA6B,EAAE,CAAA;IACxC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QACjD,MAAM,CAAC,GAAG,KAAgC,CAAA;QAC1C,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAM,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAG,CAAC;YAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC7F,MAAM,GAAG,GAAO,OAAO,CAAC,CAAC,KAAK,CAAC,KAAS,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAe,CAAC,CAAC,CAAC,SAAS,CAAA;QACrF,MAAM,IAAI,GAAM,OAAO,CAAC,CAAC,MAAM,CAAC,KAAQ,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAc,CAAC,CAAC,CAAC,SAAS,CAAA;QACrF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAW,CAAC,CAAC,CAAC,SAAS,CAAA;QACrF,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;QAC9E,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,CAAC,EAAE,0CAA0C,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAE9F,MAAM,MAAM,GAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAW,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAW,EAAE,CAAA;QACjG,IAAI,GAAG,KAAS,SAAS;YAAE,MAAM,CAAC,GAAG,GAAO,GAAG,CAAA;QAC/C,IAAI,IAAI,KAAQ,SAAS;YAAE,MAAM,CAAC,IAAI,GAAM,IAAI,CAAA;QAChD,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;QACnD,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,CAA4B,CAAA;QAC1D,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAQ,QAAQ;YAAE,MAAM,CAAC,KAAK,GAAM,CAAC,CAAC,OAAO,CAAa,CAAA;QAC/E,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAS,QAAQ;YAAE,MAAM,CAAC,IAAI,GAAO,CAAC,CAAC,MAAM,CAAe,CAAA;QAChF,IAAI,CAAC,CAAC,UAAU,CAAC,KAAY,IAAI;YAAM,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;QAC7D,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAS,QAAQ;YAAE,MAAM,CAAC,IAAI,GAAO,CAAC,CAAC,MAAM,CAAc,CAAA;QAC/E,IAAI,CAAC,CAAC,iBAAiB,CAAC,KAAK,IAAI;YAAM,MAAM,CAAC,eAAe,GAAG,IAAI,CAAA;QACpE,IAAI,CAAC,CAAC,YAAY,CAAC,KAAU,IAAI;YAAM,MAAM,CAAC,UAAU,GAAQ,IAAI,CAAA;QACpE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,KAA8B,EAAE,MAAc;IAC9D,kEAAkE;IAClE,+CAA+C;IAC/C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,YAAY;QAAE,OAAM;IAExF,OAAO,CAAC,IAAI,CACV,0CAA0C,MAAM,UAAU,EAC1D,KAAK,CACN,CAAA;AACH,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAiB;IACjD,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAA;IAC9B,IAAI,CAAC,GAAO,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC;SACnD,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC7C,KAAK,CAAC,eAAe,EAAI,IAAI,CAAC,YAAY,CAAC,CAAA;IAC9C,IAAI,IAAI,CAAC,UAAU;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACjD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAEnC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC;QACpB,WAAW,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;KACtF,CAAC,CAAA;IACF,MAAM,IAAI,GAAI,IAAI,CAAC,IAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5D,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU,EACV,IAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC;SACjD,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC7C,KAAK,CAAC,eAAe,EAAI,IAAI,CAAC,YAAY,CAAC;SAC3C,KAAK,CAAC,IAAI,EAAe,EAAE,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACnC,MAAM,GAAG,GAAI,IAAI,CAAC,IAA0B,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;AACvB,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAGjC;IACC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAA;IAClB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC;SACjD,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC7C,KAAK,CAAC,eAAe,EAAI,IAAI,CAAC,YAAY,CAAC;SAC3C,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACzB,iEAAiE;IACjE,sEAAsE;IACtE,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACnC,OAAO,IAAI,CAAC,KAAK,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,IAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC;SACjD,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC7C,KAAK,CAAC,eAAe,EAAI,IAAI,CAAC,YAAY,CAAC;SAC3C,KAAK,CAAC,IAAI,EAAe,EAAE,CAAC,CAAA;IAC/B,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAClE,OAAO,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,IAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC;SACjD,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC7C,KAAK,CAAC,eAAe,EAAI,IAAI,CAAC,YAAY,CAAC;SAC3C,KAAK,CAAC,IAAI,EAAe,EAAE,CAAC,CAAA;IAC/B,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,OAAO,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAGnC;IACC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAA;IAClB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC;SACjD,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC7C,KAAK,CAAC,eAAe,EAAI,IAAI,CAAC,YAAY,CAAC;SAC3C,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACzB,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,CAAA;IAC1B,OAAO,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAK7B;IACC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,gFAAgF;YAChF,6EAA6E;YAC7E,0DAA0D,CAC3D,CAAA;IACH,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAkB,cAAc,CAAC,CAAA;IACpD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IACrF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,CAAC,CAAC,MAAM,CAAC;QACb,EAAE;QACF,aAAa,EAAI,IAAI,CAAC,YAAY;QAClC,eAAe,EAAE,IAAI,CAAC,cAAc;QACpC,IAAI,EAAa,IAAI,CAAC,IAAI,IAAI,qBAAqB;QACnD,IAAI,EAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1C,OAAO,EAAU,IAAI;QACrB,UAAU,EAAO,GAAG;QACpB,UAAU,EAAO,GAAG;KACrB,CAAC,CAAA;IACF,OAAO,EAAE,EAAE,EAAE,CAAA;AACf,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,eAAe,CAC7B,GAA2D;IAE3D,YAAY,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;AAClD,CAAC;AAED;4DAC4D;AAC5D,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,YAAY;IACZ,SAAS;CACV,CAAA"}

package/dist/notifications/dispatchNotificationAction.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Server-side dispatcher for `Notification.actions([Action…])` slots
+ * that target a registered handler by name. Mounted by `routes.ts` at
+ * `POST {base}/_notifications/:id/_action/:actionName`.
+ *
+ * Auth/lookup chain (each step returns the next-status code on miss):
+ *   401  → no resolved user
+ *   404  → row doesn't exist OR `notifiable_id !== user.id`
+ *   404  → stored row's `data.actions` doesn't contain `actionName`
+ *   404  → stored action's `handler` field isn't a string (closures
+ *          should already be filtered at `sendToDatabase` — defend in
+ *          depth)
+ *   404  → no registry entry under that handler name
+ *   200  → handler ran cleanly; result echoes back as
+ *          `{ ok, redirect?, notifications?, download? }`
+ *   500  → handler threw — caught and wrapped
+ *
+ * The handler reads `payload` exclusively from the stored row, never
+ * from the request body, so a tampered client can't inject extra
+ * payload keys.
+ */
+import type { Pilotiq } from '../Pilotiq.js';
+import type { NotificationMeta } from './Notification.js';
+export interface DispatchNotificationActionInput {
+    notificationId: string;
+    actionName: string;
+    notifiableType: string;
+    notifiableId: string;
+    user: unknown;
+    request?: unknown;
+}
+export interface DispatchNotificationActionSuccess {
+    ok: true;
+    redirect?: string;
+    notifications?: NotificationMeta[];
+    /** When the matched action carried `markAsRead: true`, the route
+     *  flipped `read_at` server-side. Mirrored back so the bell client
+     *  can update its optimistic state without an extra round-trip. */
+    markedAsRead?: boolean;
+}
+export interface DispatchNotificationActionFailure {
+    ok: false;
+    status: 401 | 404 | 500;
+    error: string;
+}
+export type DispatchNotificationActionResult = DispatchNotificationActionSuccess | DispatchNotificationActionFailure;
+export declare function dispatchNotificationAction(pilotiq: Pilotiq, input: DispatchNotificationActionInput): Promise<DispatchNotificationActionResult>;
+//# sourceMappingURL=dispatchNotificationAction.d.ts.map

package/dist/notifications/dispatchNotificationAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchNotificationAction.d.ts","sourceRoot":"","sources":["../../src/notifications/dispatchNotificationAction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAK5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAGzD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAM,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAI,MAAM,CAAA;IACtB,IAAI,EAAY,OAAO,CAAA;IACvB,OAAO,CAAC,EAAQ,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,iCAAiC;IAChD,EAAE,EAAc,IAAI,CAAA;IACpB,QAAQ,CAAC,EAAO,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAClC;;uEAEmE;IACnE,YAAY,CAAC,EAAG,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,iCAAiC;IAChD,EAAE,EAAM,KAAK,CAAA;IACb,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;IACvB,KAAK,EAAG,MAAM,CAAA;CACf;AAED,MAAM,MAAM,gCAAgC,GACxC,iCAAiC,GACjC,iCAAiC,CAAA;AAErC,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,KAAK,EAAI,+BAA+B,GACvC,OAAO,CAAC,gCAAgC,CAAC,CA+E3C"}

package/dist/notifications/dispatchNotificationAction.js

@@ -0,0 +1,100 @@
+/**
+ * Server-side dispatcher for `Notification.actions([Action…])` slots
+ * that target a registered handler by name. Mounted by `routes.ts` at
+ * `POST {base}/_notifications/:id/_action/:actionName`.
+ *
+ * Auth/lookup chain (each step returns the next-status code on miss):
+ *   401  → no resolved user
+ *   404  → row doesn't exist OR `notifiable_id !== user.id`
+ *   404  → stored row's `data.actions` doesn't contain `actionName`
+ *   404  → stored action's `handler` field isn't a string (closures
+ *          should already be filtered at `sendToDatabase` — defend in
+ *          depth)
+ *   404  → no registry entry under that handler name
+ *   200  → handler ran cleanly; result echoes back as
+ *          `{ ok, redirect?, notifications?, download? }`
+ *   500  → handler threw — caught and wrapped
+ *
+ * The handler reads `payload` exclusively from the stored row, never
+ * from the request body, so a tampered client can't inject extra
+ * payload keys.
+ */
+import { findOneForUser, markAsRead } from './database.js';
+export async function dispatchNotificationAction(pilotiq, input) {
+    if (input.user === null || input.user === undefined) {
+        return { ok: false, status: 401, error: 'Not authenticated' };
+    }
+    const row = await findOneForUser(input.notificationId, {
+        notifiableType: input.notifiableType,
+        notifiableId: input.notifiableId,
+    });
+    if (!row)
+        return { ok: false, status: 404, error: 'Notification not found' };
+    const action = row.actions?.find(a => a.name === input.actionName);
+    if (!action)
+        return { ok: false, status: 404, error: 'Action not found on notification' };
+    // Closures don't survive serialization — if a stored action carries
+    // anything other than a string handler, treat it as a tampered row
+    // (or one written by an older code path) and refuse to dispatch.
+    if (typeof action.handler !== 'string') {
+        return {
+            ok: false,
+            status: 404,
+            error: 'Action does not target a registered handler (use Pilotiq.notificationHandlers).',
+        };
+    }
+    const handler = pilotiq.getNotificationHandler(action.handler);
+    if (!handler) {
+        return {
+            ok: false,
+            status: 404,
+            error: `No notification handler registered for "${action.handler}".`,
+        };
+    }
+    const ctx = {
+        user: input.user,
+        payload: action.payload ?? {},
+        notificationId: input.notificationId,
+    };
+    if (input.request !== undefined)
+        ctx.request = input.request;
+    let result;
+    try {
+        result = await handler(ctx);
+    }
+    catch (e) {
+        return {
+            ok: false,
+            status: 500,
+            error: e instanceof Error ? e.message : 'Notification handler threw',
+        };
+    }
+    // Side-effect: flip `read_at` when the stored action opted in.
+    // Server-side authoritative — handler dispatch is one round-trip,
+    // not two, and tampered clients can't suppress the mark.
+    let markedAsRead = false;
+    if (action.markAsRead) {
+        markedAsRead = await markAsRead(input.notificationId, {
+            notifiableType: input.notifiableType,
+            notifiableId: input.notifiableId,
+        });
+    }
+    const success = { ok: true };
+    if (result && typeof result === 'object') {
+        if (typeof result.redirect === 'string')
+            success.redirect = result.redirect;
+        if (result.notify !== undefined) {
+            const notifs = Array.isArray(result.notify) ? result.notify : [result.notify];
+            const valid = notifs.filter((n) => Boolean(n) && typeof n === 'object' && typeof n.title === 'string');
+            if (valid.length > 0)
+                success.notifications = valid;
+        }
+        // download envelope (parallel to dispatchAction) — wired through
+        // the route layer when present; v1 doesn't surface it here to keep
+        // the wire shape narrow. Add when a consumer asks.
+    }
+    if (markedAsRead)
+        success.markedAsRead = true;
+    return success;
+}
+//# sourceMappingURL=dispatchNotificationAction.js.map

package/dist/notifications/dispatchNotificationAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchNotificationAction.js","sourceRoot":"","sources":["../../src/notifications/dispatchNotificationAction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAQH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AA+B1D,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB,EAChB,KAAwC;IAExC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE;QACrD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAI,KAAK,CAAC,YAAY;KACnC,CAAC,CAAA;IACF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAA;IAE5E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,CAAC,CAAA;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;IAEzF,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAM,KAAK;YACb,MAAM,EAAE,GAAG;YACX,KAAK,EAAG,iFAAiF;SAC1F,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAM,KAAK;YACb,MAAM,EAAE,GAAG;YACX,KAAK,EAAG,2CAA2C,MAAM,CAAC,OAAO,IAAI;SACtE,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAA8B;QACrC,IAAI,EAAY,KAAK,CAAC,IAAI;QAC1B,OAAO,EAAS,MAAM,CAAC,OAAO,IAAI,EAAE;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAA;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAE5D,IAAI,MAA4C,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAM,KAAK;YACb,MAAM,EAAE,GAAG;YACX,KAAK,EAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;SACtE,CAAA;IACH,CAAC;IAED,+DAA+D;IAC/D,kEAAkE;IAClE,yDAAyD;IACzD,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,YAAY,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAI,KAAK,CAAC,YAAY;SACnC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAsC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC7E,MAAM,KAAK,GAAI,MAAM,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAyB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAsB,CAAC,KAAK,KAAK,QAAQ,CACvH,CAAA;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAA;QACrD,CAAC;QACD,iEAAiE;QACjE,mEAAmE;QACnE,mDAAmD;IACrD,CAAC;IACD,IAAI,YAAY;QAAE,OAAO,CAAC,YAAY,GAAG,IAAI,CAAA;IAC7C,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/notifications/flash.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Bridge between the form/action lifecycle (which produces
+ * `NotificationMeta[]` on success) and the next request's render (which
+ * needs them in `viewProps.notifications` so the `Toaster` can fire).
+ *
+ * Sits on top of `@rudderjs/session`'s built-in flash primitive — see
+ * `SessionInstance.flash / getFlash`. We don't ship our own storage; we
+ * only namespace the key (`pilotiq:notifications`) and shape the value.
+ *
+ * If the host app hasn't installed `@rudderjs/session`, `req.session` is
+ * undefined; both helpers no-op silently rather than throwing — losing
+ * notifications on the 303 path is the same status quo as before flash
+ * landed, so an opt-out is the correct fallback.
+ */
+import type { NotificationMeta } from './Notification.js';
+/**
+ * Stash notifications on the session for the next request to consume.
+ * Called from POST handlers right before `res.redirect(..., 303)`.
+ *
+ * Invariant: call at most once per response. The underlying
+ * `session.flash(key, value)` overwrites any previously flashed value
+ * under the same key, so coalescing across multiple calls would silently
+ * lose the earlier batch.
+ *
+ * No-ops silently when the host app hasn't installed `@rudderjs/session`.
+ */
+export declare function flashNotifications(req: unknown, notifications: ReadonlyArray<NotificationMeta> | undefined): void;
+/**
+ * Read & clear the flashed notifications (consume-once semantics — the
+ * session driver clears the previous-request flash slot on save). Returns
+ * an empty array when there's nothing flashed or no session is installed.
+ */
+export declare function consumeFlashedNotifications(req: unknown): NotificationMeta[];
+//# sourceMappingURL=flash.d.ts.map

package/dist/notifications/flash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flash.d.ts","sourceRoot":"","sources":["../../src/notifications/flash.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AA0BzD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAY,OAAO,EACtB,aAAa,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAAG,SAAS,GACzD,IAAI,CAKN;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAI5E"}

package/dist/notifications/flash.js

@@ -0,0 +1,51 @@
+const FLASH_KEY = 'pilotiq:notifications';
+/**
+ * Pull a `FlashCapableSession` off any request-like object. `AppRequest`
+ * doesn't declare `session` in `@rudderjs/contracts` directly — the field
+ * is added via module augmentation in `@rudderjs/session`, which pilotiq
+ * doesn't peer-depend on (sessions are optional in the host). We duck-type
+ * at runtime so the helpers compile against unaugmented `AppRequest` and
+ * still find a real `SessionInstance` when one's mounted.
+ */
+function getSession(req) {
+    if (!req || typeof req !== 'object')
+        return undefined;
+    const session = req.session;
+    if (!session || typeof session !== 'object')
+        return undefined;
+    const s = session;
+    if (typeof s['flash'] !== 'function' || typeof s['getFlash'] !== 'function')
+        return undefined;
+    return session;
+}
+/**
+ * Stash notifications on the session for the next request to consume.
+ * Called from POST handlers right before `res.redirect(..., 303)`.
+ *
+ * Invariant: call at most once per response. The underlying
+ * `session.flash(key, value)` overwrites any previously flashed value
+ * under the same key, so coalescing across multiple calls would silently
+ * lose the earlier batch.
+ *
+ * No-ops silently when the host app hasn't installed `@rudderjs/session`.
+ */
+export function flashNotifications(req, notifications) {
+    if (!notifications || notifications.length === 0)
+        return;
+    const session = getSession(req);
+    if (!session)
+        return;
+    session.flash(FLASH_KEY, [...notifications]);
+}
+/**
+ * Read & clear the flashed notifications (consume-once semantics — the
+ * session driver clears the previous-request flash slot on save). Returns
+ * an empty array when there's nothing flashed or no session is installed.
+ */
+export function consumeFlashedNotifications(req) {
+    const session = getSession(req);
+    if (!session)
+        return [];
+    return session.getFlash(FLASH_KEY) ?? [];
+}
+//# sourceMappingURL=flash.js.map

package/dist/notifications/flash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flash.js","sourceRoot":"","sources":["../../src/notifications/flash.ts"],"names":[],"mappings":"AAgBA,MAAM,SAAS,GAAG,uBAAuB,CAAA;AAOzC;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACrD,MAAM,OAAO,GAAI,GAA6B,CAAC,OAAO,CAAA;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7D,MAAM,CAAC,GAAG,OAAkC,CAAA;IAC5C,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAC7F,OAAO,OAA8B,CAAA;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAsB,EACtB,aAA0D;IAE1D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAM;IACpB,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAY;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,OAAO,OAAO,CAAC,QAAQ,CAAqB,SAAS,CAAC,IAAI,EAAE,CAAA;AAC9D,CAAC"}

package/dist/notifications/index.d.ts

@@ -0,0 +1,8 @@
+export { Notification, type NotificationType, type NotificationMeta, _resetNotificationIdSeq, } from './Notification.js';
+export { resolveSavedNotification, type SavedNotificationMode, } from './resolveSavedNotification.js';
+export { flashNotifications, consumeFlashedNotifications, } from './flash.js';
+export type { Notifiable } from './types.js';
+export { listForUser, unreadCount, findOneForUser as findDatabaseNotificationForUser, markAsRead, markAsUnread, markAllAsRead, persist as persistDatabaseNotification, type DatabaseNotificationMeta, type ListOptions as DatabaseNotificationListOptions, type ListResult as DatabaseNotificationListResult, } from './database.js';
+export type { NotificationActionMeta, NotificationActionHandler, NotificationActionContext, NotificationActionResult, } from './types.js';
+export { push as pushBroadcastNotification, notificationChannel, NOTIFICATION_CREATED_EVENT, type PushOptions as PushBroadcastOptions, } from './broadcast.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,uBAAuB,GACxB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,wBAAwB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,+BAA+B,CAAA;AAEtC,OAAO,EACL,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,YAAY,CAAA;AAEnB,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,OAAO,EACL,WAAW,EACX,WAAW,EACX,cAAc,IAAI,+BAA+B,EACjD,UAAU,EACV,YAAY,EACZ,aAAa,EACb,OAAO,IAAI,2BAA2B,EACtC,KAAK,wBAAwB,EAC7B,KAAK,WAAW,IAAO,+BAA+B,EACtD,KAAK,UAAU,IAAQ,8BAA8B,GACtD,MAAM,eAAe,CAAA;AAEtB,YAAY,EACV,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,IAAI,IAAI,yBAAyB,EACjC,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,WAAW,IAAI,oBAAoB,GACzC,MAAM,gBAAgB,CAAA"}

package/dist/notifications/index.js

@@ -0,0 +1,6 @@
+export { Notification, _resetNotificationIdSeq, } from './Notification.js';
+export { resolveSavedNotification, } from './resolveSavedNotification.js';
+export { flashNotifications, consumeFlashedNotifications, } from './flash.js';
+export { listForUser, unreadCount, findOneForUser as findDatabaseNotificationForUser, markAsRead, markAsUnread, markAllAsRead, persist as persistDatabaseNotification, } from './database.js';
+export { push as pushBroadcastNotification, notificationChannel, NOTIFICATION_CREATED_EVENT, } from './broadcast.js';
+//# sourceMappingURL=index.js.map

package/dist/notifications/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAGZ,uBAAuB,GACxB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,wBAAwB,GAEzB,MAAM,+BAA+B,CAAA;AAEtC,OAAO,EACL,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,YAAY,CAAA;AAInB,OAAO,EACL,WAAW,EACX,WAAW,EACX,cAAc,IAAI,+BAA+B,EACjD,UAAU,EACV,YAAY,EACZ,aAAa,EACb,OAAO,IAAI,2BAA2B,GAIvC,MAAM,eAAe,CAAA;AAStB,OAAO,EACL,IAAI,IAAI,yBAAyB,EACjC,mBAAmB,EACnB,0BAA0B,GAE3B,MAAM,gBAAgB,CAAA"}