@pilotiq/pilotiq 0.1.0

package/dist/notifications/registerBroadcastAuth.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Broadcast auth-callback registration. Runs once at panel boot when
+ * `Pilotiq.databaseNotifications({ broadcast: true })` is set; gates
+ * subscriptions to `private-pilotiq-notifications.${userId}` on the
+ * current user resolving to `userId`.
+ *
+ * Idempotent — calling twice for the same panel only registers once
+ * (the broadcast auth registry stores by pattern, so re-registration
+ * would just overwrite with the same callback). The pattern is namespaced
+ * by panel base-path so two panels in one app don't fight over the same
+ * registration slot.
+ *
+ * `@rudderjs/broadcast` is soft-imported via variable-string indirection
+ * so pilotiq stays zero-dep on broadcast — apps that don't enable
+ * broadcast don't need the package installed.
+ */
+import type { Pilotiq } from '../Pilotiq.js';
+/** Mirror of `@rudderjs/broadcast`'s `BroadcastAuthRequest` — copied to
+ *  avoid a hard import dependency. We use a structural subset; broadcast
+ *  passes the full object through but we only consume `headers` + `url`. */
+interface BroadcastAuthRequest {
+    headers: Record<string, string | string[] | undefined>;
+    url: string;
+    token?: string;
+}
+interface BroadcastModule {
+    registerAuth?(pattern: string, callback: (req: BroadcastAuthRequest, channel: string) => Promise<boolean | Record<string, unknown>>): void;
+}
+/** Register the auth callback for `private-pilotiq-notifications.*`.
+ *  Soft-fails when `@rudderjs/broadcast` isn't installed.
+ *
+ *  The auth callback receives a synthetic request — the WebSocket
+ *  upgrade carries cookies / Authorization headers but lacks the rudder
+ *  request shape pilotiq's user resolver expects. We pass the original
+ *  upgrade headers + url through under the same `req` key the resolver
+ *  reads from; apps using `@rudderjs/auth` see cookies and resolve as
+ *  usual. Apps that need the raw Hono context can read it from the
+ *  `headers` object. */
+export declare function registerBroadcastAuth(pilotiq: Pilotiq): Promise<void>;
+/** @internal — test seam; injects a fake `@rudderjs/broadcast` module
+ *  so we can assert the pattern + callback shape without spinning up a
+ *  real WebSocket server. */
+export declare function _setTestBroadcastAuth(mod: BroadcastModule | null | undefined): void;
+export {};
+//# sourceMappingURL=registerBroadcastAuth.d.ts.map

package/dist/notifications/registerBroadcastAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerBroadcastAuth.d.ts","sourceRoot":"","sources":["../../src/notifications/registerBroadcastAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE5C;;4EAE4E;AAC5E,UAAU,oBAAoB;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,GAAG,EAAM,MAAM,CAAA;IACf,KAAK,CAAC,EAAG,MAAM,CAAA;CAChB;AAED,UAAU,eAAe;IACvB,YAAY,CAAC,CACX,OAAO,EAAG,MAAM,EAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACnG,IAAI,CAAA;CACR;AAID;;;;;;;;;wBASwB;AACxB,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B3E;AAqBD;;6BAE6B;AAC7B,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAEnF"}

package/dist/notifications/registerBroadcastAuth.js

@@ -0,0 +1,86 @@
+/**
+ * Broadcast auth-callback registration. Runs once at panel boot when
+ * `Pilotiq.databaseNotifications({ broadcast: true })` is set; gates
+ * subscriptions to `private-pilotiq-notifications.${userId}` on the
+ * current user resolving to `userId`.
+ *
+ * Idempotent — calling twice for the same panel only registers once
+ * (the broadcast auth registry stores by pattern, so re-registration
+ * would just overwrite with the same callback). The pattern is namespaced
+ * by panel base-path so two panels in one app don't fight over the same
+ * registration slot.
+ *
+ * `@rudderjs/broadcast` is soft-imported via variable-string indirection
+ * so pilotiq stays zero-dep on broadcast — apps that don't enable
+ * broadcast don't need the package installed.
+ */
+let _testModule = 'unset';
+/** Register the auth callback for `private-pilotiq-notifications.*`.
+ *  Soft-fails when `@rudderjs/broadcast` isn't installed.
+ *
+ *  The auth callback receives a synthetic request — the WebSocket
+ *  upgrade carries cookies / Authorization headers but lacks the rudder
+ *  request shape pilotiq's user resolver expects. We pass the original
+ *  upgrade headers + url through under the same `req` key the resolver
+ *  reads from; apps using `@rudderjs/auth` see cookies and resolve as
+ *  usual. Apps that need the raw Hono context can read it from the
+ *  `headers` object. */
+export async function registerBroadcastAuth(pilotiq) {
+    const cfg = pilotiq.getConfig();
+    if (!cfg.databaseNotifications?.enabled)
+        return;
+    if (!cfg.databaseNotifications.broadcast)
+        return;
+    const mod = await loadBroadcast();
+    if (!mod?.registerAuth)
+        return;
+    // Pattern matches every `private-pilotiq-notifications.<id>` channel.
+    // Wildcard `*` is the broadcast package's single-segment match — fine
+    // for numeric / uuid-style ids.
+    mod.registerAuth('private-pilotiq-notifications.*', async (req, channel) => {
+        const expectedId = parseChannelUserId(channel);
+        if (expectedId === null)
+            return false;
+        // Pilotiq's user resolver takes "the request" and returns a user
+        // object. The broadcast upgrade-req carries headers but not the full
+        // rudder request shape — apps using `@rudderjs/auth` read from
+        // `req.headers.cookie` so this works for the common case. For custom
+        // resolvers that read deeper request state, register your own
+        // callback before pilotiq's via `Broadcast.channel(...)`.
+        const user = await pilotiq.resolveUser(req);
+        if (!user || typeof user !== 'object')
+            return false;
+        const id = user.id;
+        if (id === undefined || id === null)
+            return false;
+        return String(id) === expectedId;
+    });
+}
+function parseChannelUserId(channel) {
+    const prefix = 'private-pilotiq-notifications.';
+    if (!channel.startsWith(prefix))
+        return null;
+    const id = channel.slice(prefix.length);
+    return id === '' ? null : id;
+}
+async function loadBroadcast() {
+    if (_testModule !== 'unset')
+        return _testModule;
+    const moduleName = '@rudderjs/broadcast';
+    try {
+        const mod = await import(/* @vite-ignore */ moduleName);
+        if (typeof mod.registerAuth !== 'function')
+            return null;
+        return mod;
+    }
+    catch {
+        return null;
+    }
+}
+/** @internal — test seam; injects a fake `@rudderjs/broadcast` module
+ *  so we can assert the pattern + callback shape without spinning up a
+ *  real WebSocket server. */
+export function _setTestBroadcastAuth(mod) {
+    _testModule = mod === undefined ? 'unset' : mod;
+}
+//# sourceMappingURL=registerBroadcastAuth.js.map

package/dist/notifications/registerBroadcastAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerBroadcastAuth.js","sourceRoot":"","sources":["../../src/notifications/registerBroadcastAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAoBH,IAAI,WAAW,GAAqC,OAAO,CAAA;AAE3D;;;;;;;;;wBASwB;AACxB,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAA;IAC/B,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO;QAAE,OAAM;IAC/C,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,SAAS;QAAG,OAAM;IAEjD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAA;IACjC,IAAI,CAAC,GAAG,EAAE,YAAY;QAAE,OAAM;IAE9B,sEAAsE;IACtE,sEAAsE;IACtE,gCAAgC;IAChC,GAAG,CAAC,YAAY,CAAC,iCAAiC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACzE,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QAC9C,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QACrC,iEAAiE;QACjE,qEAAqE;QACrE,+DAA+D;QAC/D,qEAAqE;QACrE,8DAA8D;QAC9D,0DAA0D;QAC1D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACnD,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAA;QACxC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QACjD,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,UAAU,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,MAAM,GAAG,gCAAgC,CAAA;IAC/C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACvC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;AAC9B,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,WAAW,CAAA;IAC/C,MAAM,UAAU,GAAG,qBAAqB,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAA6B,CAAA;QACnF,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,UAAU;YAAE,OAAO,IAAI,CAAA;QACvD,OAAO,GAAsB,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;6BAE6B;AAC7B,MAAM,UAAU,qBAAqB,CAAC,GAAuC;IAC3E,WAAW,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;AACjD,CAAC"}

package/dist/notifications/resolveSavedNotification.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Resolve the saved-notification spec on a `Form` into a concrete
+ * `NotificationMeta`, or `null` when notifications are explicitly
+ * disabled. Used by `dispatchFormSubmit` to attach the success toast to
+ * its result.
+ *
+ * Resolution order:
+ *   1. If the form has `disableSavedNotification()` → null.
+ *   2. Mode-specific spec (`createdNotification` for create) wins over
+ *      generic `savedNotification` when set.
+ *   3. `null` spec returns null (explicitly suppress the toast for that
+ *      mode while keeping the generic fallback for the other mode).
+ *   4. String spec → success toast with that title.
+ *   5. Function spec → invoked with `(record, ctx)` and re-resolved.
+ *   6. `Notification` builder or `NotificationMeta` → passes through.
+ */
+import { type NotificationMeta } from './Notification.js';
+import type { Form, FormContext } from '../elements/Form.js';
+export type SavedNotificationMode = 'create' | 'update';
+export declare function resolveSavedNotification<R>(form: Form<R>, mode: SavedNotificationMode, record: R, ctx: FormContext<R>): NotificationMeta | null;
+//# sourceMappingURL=resolveSavedNotification.d.ts.map

package/dist/notifications/resolveSavedNotification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSavedNotification.d.ts","sourceRoot":"","sources":["../../src/notifications/resolveSavedNotification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACvE,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAA4B,MAAM,qBAAqB,CAAA;AAEtF,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAEvD,wBAAgB,wBAAwB,CAAC,CAAC,EACxC,IAAI,EAAK,IAAI,CAAC,CAAC,CAAC,EAChB,IAAI,EAAK,qBAAqB,EAC9B,MAAM,EAAG,CAAC,EACV,GAAG,EAAM,WAAW,CAAC,CAAC,CAAC,GACtB,gBAAgB,GAAG,IAAI,CASzB"}

package/dist/notifications/resolveSavedNotification.js

@@ -0,0 +1,43 @@
+/**
+ * Resolve the saved-notification spec on a `Form` into a concrete
+ * `NotificationMeta`, or `null` when notifications are explicitly
+ * disabled. Used by `dispatchFormSubmit` to attach the success toast to
+ * its result.
+ *
+ * Resolution order:
+ *   1. If the form has `disableSavedNotification()` → null.
+ *   2. Mode-specific spec (`createdNotification` for create) wins over
+ *      generic `savedNotification` when set.
+ *   3. `null` spec returns null (explicitly suppress the toast for that
+ *      mode while keeping the generic fallback for the other mode).
+ *   4. String spec → success toast with that title.
+ *   5. Function spec → invoked with `(record, ctx)` and re-resolved.
+ *   6. `Notification` builder or `NotificationMeta` → passes through.
+ */
+import { Notification } from './Notification.js';
+export function resolveSavedNotification(form, mode, record, ctx) {
+    if (form.isSavedNotificationDisabled())
+        return null;
+    const modeSpec = mode === 'create' ? form.getCreatedNotification() : undefined;
+    const sharedSpec = form.getSavedNotification();
+    const spec = modeSpec !== undefined ? modeSpec : sharedSpec;
+    if (spec === undefined)
+        return null;
+    return resolveSpec(spec, record, ctx);
+}
+function resolveSpec(spec, record, ctx) {
+    if (spec === null)
+        return null;
+    if (typeof spec === 'function') {
+        const next = spec(record, ctx);
+        return next === null ? null : resolveSpec(next, record, ctx);
+    }
+    if (typeof spec === 'string') {
+        return Notification.make(spec).success().toMeta();
+    }
+    if (spec instanceof Notification) {
+        return spec.toMeta();
+    }
+    return spec;
+}
+//# sourceMappingURL=resolveSavedNotification.js.map

package/dist/notifications/resolveSavedNotification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSavedNotification.js","sourceRoot":"","sources":["../../src/notifications/resolveSavedNotification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAyB,MAAM,mBAAmB,CAAA;AAKvE,MAAM,UAAU,wBAAwB,CACtC,IAAgB,EAChB,IAA8B,EAC9B,MAAU,EACV,GAAuB;IAEvB,IAAI,IAAI,CAAC,2BAA2B,EAAE;QAAE,OAAO,IAAI,CAAA;IAEnD,MAAM,QAAQ,GAAM,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACjF,MAAM,UAAU,GAAI,IAAI,CAAC,oBAAoB,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAU,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;IAElE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,WAAW,CAClB,IAAmC,EACnC,MAAS,EACT,GAAsB;IAEtB,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAE9B,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC9B,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAmC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;IAC7F,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,IAAI,IAAI,YAAY,YAAY,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/notifications/types.d.ts

@@ -0,0 +1,87 @@
+import type { ActionColor, ActionSize, DownloadEnvelope } from '../actions/Action.js';
+import type { NotificationMeta } from './Notification.js';
+/**
+ * Minimal notifiable contract used by `Notification.sendToDatabase()`
+ * and the bell-icon endpoints. Mirrors the shape `@rudderjs/notification`
+ * already publishes — `id` (string or number) is the only required
+ * field. We coerce to string when writing the `notifiable_id` column so
+ * mixed `number`/`string` ids stay consistent on disk.
+ */
+export interface Notifiable {
+    readonly id: string | number;
+    readonly email?: string;
+    readonly name?: string;
+}
+/**
+ * Slim wire shape emitted by `Notification.actions([Action…])`. Same
+ * format on the transient toast meta, the persisted database row's
+ * `data.actions` JSON, and the `_notifications` list endpoint — so the
+ * bell client and the toaster can share render code.
+ *
+ * Exactly one of `url` / `post` / `handler` is set. The serializer in
+ * `Notification.ts` enforces mutual exclusion at config time and rejects
+ * Action features that don't make sense in a notification context
+ * (modal-form, submit, bulk placement) with a clear error.
+ */
+export interface NotificationActionMeta {
+    /** Stable name; used as the registry key for handler dispatch and
+     *  as the action identifier the route's URL carries. */
+    name: string;
+    label: string;
+    /** Click navigates here. */
+    url?: string;
+    /** Click submits a `<form method="post" action="…">`. */
+    post?: string;
+    /** Registry key — looked up via `Pilotiq.notificationHandlers({…})`
+     *  at request time. The matching handler runs server-side; the bell
+     *  client renders a button that POSTs to the notification action
+     *  endpoint. */
+    handler?: string;
+    /** Per-fire context the handler receives on `ctx.payload`. JSON-only
+     *  (`Date`/`Map`/etc don't survive — stringify them yourself). Stored
+     *  alongside the action when the row is persisted. */
+    payload?: Record<string, unknown>;
+    color?: ActionColor;
+    icon?: string;
+    outlined?: boolean;
+    size?: ActionSize;
+    openUrlInNewTab?: boolean;
+    /**
+     * When set, firing this action also flips the notification's
+     * `read_at` column. Url/post variants fire the read POST as a
+     * client-side side-effect; handler dispatch handles it server-side
+     * inside the action route so the round-trip is one request.
+     */
+    markAsRead?: boolean;
+}
+/**
+ * Server-side handler signature for `Pilotiq.notificationHandlers({…})`
+ * registry entries. Mirrors the `ActionHandler` from
+ * `dispatchAction` minus row context (notifications don't carry one),
+ * plus `payload` (the per-fire context the action carried) and
+ * `notificationId` (the row the click came from).
+ */
+export type NotificationActionHandler = (ctx: NotificationActionContext) => Promise<NotificationActionResult | undefined> | NotificationActionResult | undefined;
+export interface NotificationActionContext {
+    /** Resolved by `pilotiq.resolveUser(req)` before the route fires.
+     *  Always present — the route gates on auth before reaching the
+     *  registry. */
+    user: unknown;
+    /** Per-fire context the action carried. Empty object when the action
+     *  was created without `.payload({…})`. */
+    payload: Record<string, unknown>;
+    /** Database row id this click came from. */
+    notificationId: string;
+    /** Raw request — same opaque shape that flows into Resource action
+     *  handlers, in case a handler needs cookies / headers. */
+    request?: unknown;
+}
+export interface NotificationActionResult {
+    /** SPA-navigate after the handler completes. */
+    redirect?: string;
+    /** Toast(s) to flash after the handler completes. */
+    notify?: NotificationMeta | NotificationMeta[];
+    /** File-download envelope (parallel to dispatchAction). */
+    download?: DownloadEnvelope;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/notifications/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEzD;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAM,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAG,MAAM,CAAA;CACxB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC;4DACwD;IACxD,IAAI,EAAgB,MAAM,CAAA;IAC1B,KAAK,EAAe,MAAM,CAAA;IAC1B,4BAA4B;IAC5B,GAAG,CAAC,EAAgB,MAAM,CAAA;IAC1B,yDAAyD;IACzD,IAAI,CAAC,EAAe,MAAM,CAAA;IAC1B;;;oBAGgB;IAChB,OAAO,CAAC,EAAY,MAAM,CAAA;IAC1B;;0DAEsD;IACtD,OAAO,CAAC,EAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,KAAK,CAAC,EAAc,WAAW,CAAA;IAC/B,IAAI,CAAC,EAAe,MAAM,CAAA;IAC1B,QAAQ,CAAC,EAAW,OAAO,CAAA;IAC3B,IAAI,CAAC,EAAe,UAAU,CAAA;IAC9B,eAAe,CAAC,EAAI,OAAO,CAAA;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAS,OAAO,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,GAAG,EAAE,yBAAyB,KAC3B,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,GAAG,wBAAwB,GAAG,SAAS,CAAA;AAEzF,MAAM,WAAW,yBAAyB;IACxC;;oBAEgB;IAChB,IAAI,EAAY,OAAO,CAAA;IACvB;+CAC2C;IAC3C,OAAO,EAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,4CAA4C;IAC5C,cAAc,EAAE,MAAM,CAAA;IACtB;+DAC2D;IAC3D,OAAO,CAAC,EAAQ,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,qDAAqD;IACrD,MAAM,CAAC,EAAI,gBAAgB,GAAG,gBAAgB,EAAE,CAAA;IAChD,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,gBAAgB,CAAA;CAC5B"}

package/dist/notifications/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/notifications/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/notifications/types.ts"],"names":[],"mappings":""}

package/dist/orm/m2mAccessor.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The M2M pivot-mutation surface exposed by `@rudderjs/orm`. Returned
+ * from per-relation accessor methods installed on parent prototypes
+ * (e.g. `user.roles()` → `{ attach, detach, sync }`).
+ *
+ * Each method is optional in the structural type because some test
+ * doubles only stub the subset they exercise — `resolveM2MAccessor`
+ * gates on `attach || detach` being callable to filter unrelated
+ * shapes (e.g. a deferred QB Proxy from `parent.related()`).
+ */
+export interface M2MAccessor {
+    attach?(input: unknown): Promise<void>;
+    detach?(input?: unknown): Promise<unknown>;
+    sync?(desiredIds: ReadonlyArray<string | number>): Promise<unknown>;
+    /**
+     * Update extras on an existing pivot row without touching either side
+     * of the relation. Returns the number of rows updated (0 when no
+     * matching pivot exists). Optional on the structural shape; pilotiq's
+     * `Repeater.relationship.pivotColumns([…])` pipeline gates on its
+     * presence and throws a clear error when missing (rudder ORM ships
+     * it from `feat(orm): pivot-extras read/update + per-id sync` —
+     * see `~/Projects/rudder/docs/plans/2026-05-06-belongs-to-many-pivot-extras.md`).
+     */
+    updatePivot?(relatedId: string | number, data: Record<string, unknown>): Promise<number>;
+}
+/**
+ * Resolve the M2M pivot-mutation accessor for `parent[rel]`. Two
+ * shapes are supported, in this order:
+ *
+ *   1. `parent[rel]()` — the real `@rudderjs/orm` shape installed by
+ *      `_installBelongsToManyMethods` / `_installMorphPivotMethods`
+ *      (e.g. `post.tags()` returns `{ attach, detach, sync }`).
+ *   2. `parent.related(rel)` — legacy / test-double shape that returns
+ *      the accessor directly. Kept so existing pilotiq tests built
+ *      around `parent.related(...)` mocks keep passing.
+ *
+ * Returns `undefined` when neither shape exposes a callable `attach`
+ * AND a callable `detach` — caller should surface a clear error
+ * (different copy depending on whether they're inside an Action handler
+ * or a `Repeater.relationship` save).
+ *
+ * Note `parent.related(rel)` returns a deferred-QB Proxy in the real
+ * ORM, NOT an attach/detach accessor — see
+ * `feedback_m2m_accessor_shape.md`. The shape-1 instance-method form is
+ * the canonical lookup; the related() fallback is purely a test-mock
+ * affordance.
+ */
+export declare function resolveM2MAccessor(parent: unknown, rel: string): M2MAccessor | undefined;
+//# sourceMappingURL=m2mAccessor.d.ts.map

package/dist/orm/m2mAccessor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"m2mAccessor.d.ts","sourceRoot":"","sources":["../../src/orm/m2mAccessor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,CAAC,KAAK,EAAO,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,CAAC,CAAC,KAAK,CAAC,EAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9C,IAAI,CAAC,CAAC,UAAU,EAAI,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrE;;;;;;;;OAQG;IACH,WAAW,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACzF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAiBxF"}

package/dist/orm/m2mAccessor.js

@@ -0,0 +1,45 @@
+/**
+ * Resolve the M2M pivot-mutation accessor for `parent[rel]`. Two
+ * shapes are supported, in this order:
+ *
+ *   1. `parent[rel]()` — the real `@rudderjs/orm` shape installed by
+ *      `_installBelongsToManyMethods` / `_installMorphPivotMethods`
+ *      (e.g. `post.tags()` returns `{ attach, detach, sync }`).
+ *   2. `parent.related(rel)` — legacy / test-double shape that returns
+ *      the accessor directly. Kept so existing pilotiq tests built
+ *      around `parent.related(...)` mocks keep passing.
+ *
+ * Returns `undefined` when neither shape exposes a callable `attach`
+ * AND a callable `detach` — caller should surface a clear error
+ * (different copy depending on whether they're inside an Action handler
+ * or a `Repeater.relationship` save).
+ *
+ * Note `parent.related(rel)` returns a deferred-QB Proxy in the real
+ * ORM, NOT an attach/detach accessor — see
+ * `feedback_m2m_accessor_shape.md`. The shape-1 instance-method form is
+ * the canonical lookup; the related() fallback is purely a test-mock
+ * affordance.
+ */
+export function resolveM2MAccessor(parent, rel) {
+    if (!parent || typeof parent !== 'object')
+        return undefined;
+    // Shape 1: parent[rel]() — real ORM. Prototype-installed method.
+    const inst = parent[rel];
+    if (typeof inst === 'function') {
+        try {
+            const out = inst.call(parent);
+            if (out && (typeof out.attach === 'function' || typeof out.detach === 'function'))
+                return out;
+        }
+        catch { /* fall through to legacy shape */ }
+    }
+    // Shape 2: parent.related(rel) — legacy / test-mock shape.
+    const relatedFn = parent.related;
+    if (typeof relatedFn === 'function') {
+        const out = relatedFn.call(parent, rel);
+        if (out && (typeof out.attach === 'function' || typeof out.detach === 'function'))
+            return out;
+    }
+    return undefined;
+}
+//# sourceMappingURL=m2mAccessor.js.map

package/dist/orm/m2mAccessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"m2mAccessor.js","sourceRoot":"","sources":["../../src/orm/m2mAccessor.ts"],"names":[],"mappings":"AA0BA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,GAAW;IAC7D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC3D,iEAAiE;IACjE,MAAM,IAAI,GAAI,MAAkC,CAAC,GAAG,CAAC,CAAA;IACrD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAI,IAAsB,CAAC,IAAI,CAAC,MAAM,CAA4B,CAAA;YAC3E,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC;gBAAE,OAAO,GAAG,CAAA;QAC/F,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;IAChD,CAAC;IACD,2DAA2D;IAC3D,MAAM,SAAS,GAAI,MAA+C,CAAC,OAAO,CAAA;IAC1E,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAA4B,CAAA;QAClE,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC;YAAE,OAAO,GAAG,CAAA;IAC/F,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}