@quanticjs/notification-bff 8.3.0

package/dist/commands/mark-notification-read.handler.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MarkNotificationReadHandler = exports.MarkNotificationReadCommand = void 0;
+const cqrs_1 = require("@nestjs/cqrs");
+const NotificationEngineClient_1 = require("../NotificationEngineClient");
+const engine_result_1 = require("../engine-result");
+/**
+ * Mark a single notification read (proxied). Addressed by id and user-scoped by
+ * the engine (another user's / another app's id 404s), so no app scope applied.
+ */
+class MarkNotificationReadCommand {
+    authorization;
+    id;
+    constructor(authorization, id) {
+        this.authorization = authorization;
+        this.id = id;
+    }
+}
+exports.MarkNotificationReadCommand = MarkNotificationReadCommand;
+let MarkNotificationReadHandler = class MarkNotificationReadHandler {
+    engine;
+    constructor(engine) {
+        this.engine = engine;
+    }
+    async execute(command) {
+        return (0, engine_result_1.toResult)(await this.engine.forward('POST', `/notifications/${encodeURIComponent(command.id)}/read`, command.authorization));
+    }
+};
+exports.MarkNotificationReadHandler = MarkNotificationReadHandler;
+exports.MarkNotificationReadHandler = MarkNotificationReadHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(MarkNotificationReadCommand),
+    __metadata("design:paramtypes", [NotificationEngineClient_1.NotificationEngineClient])
+], MarkNotificationReadHandler);
+//# sourceMappingURL=mark-notification-read.handler.js.map

package/dist/commands/mark-notification-read.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mark-notification-read.handler.js","sourceRoot":"","sources":["../../src/commands/mark-notification-read.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAA+D;AAE/D,0EAAuE;AACvE,oDAA4C;AAE5C;;;GAGG;AACH,MAAa,2BAA2B;IAE3B;IACA;IAFX,YACW,aAAiC,EACjC,EAAU;QADV,kBAAa,GAAb,aAAa,CAAoB;QACjC,OAAE,GAAF,EAAE,CAAQ;IAClB,CAAC;CACL;AALD,kEAKC;AAGM,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAGT;IAA7B,YAA6B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;IAAG,CAAC;IAEjE,KAAK,CAAC,OAAO,CAAC,OAAoC;QAChD,OAAO,IAAA,wBAAQ,EACb,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACvB,MAAM,EACN,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EACvD,OAAO,CAAC,aAAa,CACtB,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAdY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,qBAAc,EAAC,2BAA2B,CAAC;qCAIL,mDAAwB;GAHlD,2BAA2B,CAcvC","sourcesContent":["import { CommandHandler, ICommandHandler } from '@nestjs/cqrs';\nimport { Result } from '@quanticjs/core';\nimport { NotificationEngineClient } from '../NotificationEngineClient';\nimport { toResult } from '../engine-result';\n\n/**\n * Mark a single notification read (proxied). Addressed by id and user-scoped by\n * the engine (another user's / another app's id 404s), so no app scope applied.\n */\nexport class MarkNotificationReadCommand {\n  constructor(\n    readonly authorization: string | undefined,\n    readonly id: string,\n  ) {}\n}\n\n@CommandHandler(MarkNotificationReadCommand)\nexport class MarkNotificationReadHandler\n  implements ICommandHandler<MarkNotificationReadCommand>\n{\n  constructor(private readonly engine: NotificationEngineClient) {}\n\n  async execute(command: MarkNotificationReadCommand): Promise<Result<unknown>> {\n    return toResult(\n      await this.engine.forward(\n        'POST',\n        `/notifications/${encodeURIComponent(command.id)}/read`,\n        command.authorization,\n      ),\n    );\n  }\n}\n"]}

package/dist/commands/update-notification-settings.handler.d.ts

@@ -0,0 +1,17 @@
+import { ICommandHandler } from '@nestjs/cqrs';
+import { Result } from '@quanticjs/core';
+import { NotificationEngineClient } from '../NotificationEngineClient';
+import type { NotificationSettingsPath } from '../queries/get-notification-settings.handler';
+/** Upsert a settings document (preferences / quiet-hours / frequency-cap) — engine enforces admin where required. */
+export declare class UpdateNotificationSettingsCommand {
+    readonly authorization: string | undefined;
+    readonly path: NotificationSettingsPath;
+    readonly body: unknown;
+    constructor(authorization: string | undefined, path: NotificationSettingsPath, body: unknown);
+}
+export declare class UpdateNotificationSettingsHandler implements ICommandHandler<UpdateNotificationSettingsCommand> {
+    private readonly engine;
+    constructor(engine: NotificationEngineClient);
+    execute(command: UpdateNotificationSettingsCommand): Promise<Result<unknown>>;
+}
+//# sourceMappingURL=update-notification-settings.handler.d.ts.map

package/dist/commands/update-notification-settings.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-notification-settings.handler.d.ts","sourceRoot":"","sources":["../../src/commands/update-notification-settings.handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,qHAAqH;AACrH,qBAAa,iCAAiC;IAE1C,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,OAAO;gBAFb,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,EAAE,wBAAwB,EAC9B,IAAI,EAAE,OAAO;CAEzB;AAED,qBACa,iCACX,YAAW,eAAe,CAAC,iCAAiC,CAAC;IAEjD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,wBAAwB;IAEvD,OAAO,CAAC,OAAO,EAAE,iCAAiC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;CAUpF"}

package/dist/commands/update-notification-settings.handler.js

@@ -0,0 +1,42 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateNotificationSettingsHandler = exports.UpdateNotificationSettingsCommand = void 0;
+const cqrs_1 = require("@nestjs/cqrs");
+const NotificationEngineClient_1 = require("../NotificationEngineClient");
+const engine_result_1 = require("../engine-result");
+/** Upsert a settings document (preferences / quiet-hours / frequency-cap) — engine enforces admin where required. */
+class UpdateNotificationSettingsCommand {
+    authorization;
+    path;
+    body;
+    constructor(authorization, path, body) {
+        this.authorization = authorization;
+        this.path = path;
+        this.body = body;
+    }
+}
+exports.UpdateNotificationSettingsCommand = UpdateNotificationSettingsCommand;
+let UpdateNotificationSettingsHandler = class UpdateNotificationSettingsHandler {
+    engine;
+    constructor(engine) {
+        this.engine = engine;
+    }
+    async execute(command) {
+        return (0, engine_result_1.toResult)(await this.engine.forward('PUT', `/notifications/${command.path}`, command.authorization, command.body));
+    }
+};
+exports.UpdateNotificationSettingsHandler = UpdateNotificationSettingsHandler;
+exports.UpdateNotificationSettingsHandler = UpdateNotificationSettingsHandler = __decorate([
+    (0, cqrs_1.CommandHandler)(UpdateNotificationSettingsCommand),
+    __metadata("design:paramtypes", [NotificationEngineClient_1.NotificationEngineClient])
+], UpdateNotificationSettingsHandler);
+//# sourceMappingURL=update-notification-settings.handler.js.map

package/dist/commands/update-notification-settings.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-notification-settings.handler.js","sourceRoot":"","sources":["../../src/commands/update-notification-settings.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAA+D;AAE/D,0EAAuE;AACvE,oDAA4C;AAG5C,qHAAqH;AACrH,MAAa,iCAAiC;IAEjC;IACA;IACA;IAHX,YACW,aAAiC,EACjC,IAA8B,EAC9B,IAAa;QAFb,kBAAa,GAAb,aAAa,CAAoB;QACjC,SAAI,GAAJ,IAAI,CAA0B;QAC9B,SAAI,GAAJ,IAAI,CAAS;IACrB,CAAC;CACL;AAND,8EAMC;AAGM,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAGf;IAA7B,YAA6B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;IAAG,CAAC;IAEjE,KAAK,CAAC,OAAO,CAAC,OAA0C;QACtD,OAAO,IAAA,wBAAQ,EACb,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACvB,KAAK,EACL,kBAAkB,OAAO,CAAC,IAAI,EAAE,EAChC,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,IAAI,CACb,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAfY,8EAAiC;4CAAjC,iCAAiC;IAD7C,IAAA,qBAAc,EAAC,iCAAiC,CAAC;qCAIX,mDAAwB;GAHlD,iCAAiC,CAe7C","sourcesContent":["import { CommandHandler, ICommandHandler } from '@nestjs/cqrs';\nimport { Result } from '@quanticjs/core';\nimport { NotificationEngineClient } from '../NotificationEngineClient';\nimport { toResult } from '../engine-result';\nimport type { NotificationSettingsPath } from '../queries/get-notification-settings.handler';\n\n/** Upsert a settings document (preferences / quiet-hours / frequency-cap) — engine enforces admin where required. */\nexport class UpdateNotificationSettingsCommand {\n  constructor(\n    readonly authorization: string | undefined,\n    readonly path: NotificationSettingsPath,\n    readonly body: unknown,\n  ) {}\n}\n\n@CommandHandler(UpdateNotificationSettingsCommand)\nexport class UpdateNotificationSettingsHandler\n  implements ICommandHandler<UpdateNotificationSettingsCommand>\n{\n  constructor(private readonly engine: NotificationEngineClient) {}\n\n  async execute(command: UpdateNotificationSettingsCommand): Promise<Result<unknown>> {\n    return toResult(\n      await this.engine.forward(\n        'PUT',\n        `/notifications/${command.path}`,\n        command.authorization,\n        command.body,\n      ),\n    );\n  }\n}\n"]}

package/dist/engine-result.d.ts

@@ -0,0 +1,18 @@
+import { Result } from '@quanticjs/core';
+import type { ProxiedResponse } from './NotificationEngineClient';
+import type { NotificationProxyOptions } from './interfaces';
+/**
+ * Map a proxied notification-engine response onto a `Result` so the CQRS
+ * pipeline + `ResultInterceptor` produce the HTTP response. 2xx bodies pass
+ * through as the success value (the frontend sees the engine's exact shape);
+ * engine error statuses map to the framework's `ErrorType` problem-details.
+ */
+export declare function toResult<T = unknown>(res: ProxiedResponse): Result<T>;
+/**
+ * Apply this app's scope to a feed path. Per-app mode forces `appId=<appId>`
+ * (server-authoritative, overriding any client value); shell mode sends no
+ * `appId` (all apps for the user). A client-supplied `appId` is always stripped
+ * — the browser cannot widen or narrow the app scope.
+ */
+export declare function scopedFeedPath(options: NotificationProxyOptions, base: string, query?: Record<string, string>): string;
+//# sourceMappingURL=engine-result.d.ts.map

package/dist/engine-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-result.d.ts","sourceRoot":"","sources":["../src/engine-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,CAyBrE;AAUD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,wBAAwB,EACjC,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAQR"}

package/dist/engine-result.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toResult = toResult;
+exports.scopedFeedPath = scopedFeedPath;
+const core_1 = require("@quanticjs/core");
+/**
+ * Map a proxied notification-engine response onto a `Result` so the CQRS
+ * pipeline + `ResultInterceptor` produce the HTTP response. 2xx bodies pass
+ * through as the success value (the frontend sees the engine's exact shape);
+ * engine error statuses map to the framework's `ErrorType` problem-details.
+ */
+function toResult(res) {
+    const { status, body } = res;
+    if (status >= 200 && status < 300)
+        return core_1.Result.success(body);
+    const detail = extractDetail(body) ?? 'Notification request failed';
+    switch (status) {
+        case 400:
+            return core_1.Result.failure(core_1.ErrorType.ValidationError, detail);
+        case 401:
+            return core_1.Result.failure(core_1.ErrorType.Unauthorized, detail);
+        case 403:
+            return core_1.Result.failure(core_1.ErrorType.Forbidden, detail);
+        case 404:
+            return core_1.Result.failure(core_1.ErrorType.NotFound, detail);
+        case 409:
+            return core_1.Result.failure(core_1.ErrorType.Conflict, detail);
+        case 422:
+            return core_1.Result.failure(core_1.ErrorType.UnprocessableEntity, detail);
+        case 429:
+            return core_1.Result.failure(core_1.ErrorType.RateLimited, detail);
+        case 503:
+            return core_1.Result.failure(core_1.ErrorType.ServiceUnavailable, detail);
+        default:
+            return core_1.Result.failure(core_1.ErrorType.InternalError, detail);
+    }
+}
+function extractDetail(body) {
+    if (body && typeof body === 'object') {
+        const d = body.detail ?? body.message;
+        if (typeof d === 'string')
+            return d;
+    }
+    return typeof body === 'string' && body ? body : null;
+}
+/**
+ * Apply this app's scope to a feed path. Per-app mode forces `appId=<appId>`
+ * (server-authoritative, overriding any client value); shell mode sends no
+ * `appId` (all apps for the user). A client-supplied `appId` is always stripped
+ * — the browser cannot widen or narrow the app scope.
+ */
+function scopedFeedPath(options, base, query = {}) {
+    const params = new URLSearchParams(query);
+    params.delete('appId');
+    if (!options.unified && options.appId) {
+        params.set('appId', options.appId);
+    }
+    const qs = params.toString();
+    return qs ? `${base}?${qs}` : base;
+}
+//# sourceMappingURL=engine-result.js.map

package/dist/engine-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-result.js","sourceRoot":"","sources":["../src/engine-result.ts"],"names":[],"mappings":";;AAUA,4BAyBC;AAgBD,wCAYC;AA/DD,0CAAoD;AAIpD;;;;;GAKG;AACH,SAAgB,QAAQ,CAAc,GAAoB;IACxD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,aAAM,CAAC,OAAO,CAAC,IAAS,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3D,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxD,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC/D,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvD,KAAK,GAAG;YACN,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC9D;YACE,OAAO,aAAM,CAAC,OAAO,CAAC,gBAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,GAAI,IAAgC,CAAC,MAAM,IAAK,IAAgC,CAAC,OAAO,CAAC;QAChG,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAC5B,OAAiC,EACjC,IAAY,EACZ,QAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC","sourcesContent":["import { ErrorType, Result } from '@quanticjs/core';\nimport type { ProxiedResponse } from './NotificationEngineClient';\nimport type { NotificationProxyOptions } from './interfaces';\n\n/**\n * Map a proxied notification-engine response onto a `Result` so the CQRS\n * pipeline + `ResultInterceptor` produce the HTTP response. 2xx bodies pass\n * through as the success value (the frontend sees the engine's exact shape);\n * engine error statuses map to the framework's `ErrorType` problem-details.\n */\nexport function toResult<T = unknown>(res: ProxiedResponse): Result<T> {\n  const { status, body } = res;\n  if (status >= 200 && status < 300) return Result.success(body as T);\n\n  const detail = extractDetail(body) ?? 'Notification request failed';\n  switch (status) {\n    case 400:\n      return Result.failure(ErrorType.ValidationError, detail);\n    case 401:\n      return Result.failure(ErrorType.Unauthorized, detail);\n    case 403:\n      return Result.failure(ErrorType.Forbidden, detail);\n    case 404:\n      return Result.failure(ErrorType.NotFound, detail);\n    case 409:\n      return Result.failure(ErrorType.Conflict, detail);\n    case 422:\n      return Result.failure(ErrorType.UnprocessableEntity, detail);\n    case 429:\n      return Result.failure(ErrorType.RateLimited, detail);\n    case 503:\n      return Result.failure(ErrorType.ServiceUnavailable, detail);\n    default:\n      return Result.failure(ErrorType.InternalError, detail);\n  }\n}\n\nfunction extractDetail(body: unknown): string | null {\n  if (body && typeof body === 'object') {\n    const d = (body as Record<string, unknown>).detail ?? (body as Record<string, unknown>).message;\n    if (typeof d === 'string') return d;\n  }\n  return typeof body === 'string' && body ? body : null;\n}\n\n/**\n * Apply this app's scope to a feed path. Per-app mode forces `appId=<appId>`\n * (server-authoritative, overriding any client value); shell mode sends no\n * `appId` (all apps for the user). A client-supplied `appId` is always stripped\n * — the browser cannot widen or narrow the app scope.\n */\nexport function scopedFeedPath(\n  options: NotificationProxyOptions,\n  base: string,\n  query: Record<string, string> = {},\n): string {\n  const params = new URLSearchParams(query);\n  params.delete('appId');\n  if (!options.unified && options.appId) {\n    params.set('appId', options.appId);\n  }\n  const qs = params.toString();\n  return qs ? `${base}?${qs}` : base;\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { NotificationProxyModule } from './NotificationProxyModule';
+export { NotificationProxyController } from './NotificationProxyController';
+export { NotificationEngineClient, type ProxiedResponse } from './NotificationEngineClient';
+export { NOTIFICATION_PROXY_OPTIONS, type NotificationProxyOptions } from './interfaces';
+export { toResult, scopedFeedPath } from './engine-result';
+export { ListNotificationsQuery, ListNotificationsHandler } from './queries/list-notifications.handler';
+export { CountUnreadQuery, CountUnreadHandler } from './queries/count-unread.handler';
+export { GetNotificationSettingsQuery, GetNotificationSettingsHandler, type NotificationSettingsPath, } from './queries/get-notification-settings.handler';
+export { MarkNotificationReadCommand, MarkNotificationReadHandler, } from './commands/mark-notification-read.handler';
+export { MarkAllNotificationsReadCommand, MarkAllNotificationsReadHandler, } from './commands/mark-all-read.handler';
+export { UpdateNotificationSettingsCommand, UpdateNotificationSettingsHandler, } from './commands/update-notification-settings.handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,KAAK,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AACxG,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,6CAA6C,CAAC;AAGrD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,iDAAiD,CAAC"}

package/dist/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateNotificationSettingsHandler = exports.UpdateNotificationSettingsCommand = exports.MarkAllNotificationsReadHandler = exports.MarkAllNotificationsReadCommand = exports.MarkNotificationReadHandler = exports.MarkNotificationReadCommand = exports.GetNotificationSettingsHandler = exports.GetNotificationSettingsQuery = exports.CountUnreadHandler = exports.CountUnreadQuery = exports.ListNotificationsHandler = exports.ListNotificationsQuery = exports.scopedFeedPath = exports.toResult = exports.NOTIFICATION_PROXY_OPTIONS = exports.NotificationEngineClient = exports.NotificationProxyController = exports.NotificationProxyModule = void 0;
+var NotificationProxyModule_1 = require("./NotificationProxyModule");
+Object.defineProperty(exports, "NotificationProxyModule", { enumerable: true, get: function () { return NotificationProxyModule_1.NotificationProxyModule; } });
+var NotificationProxyController_1 = require("./NotificationProxyController");
+Object.defineProperty(exports, "NotificationProxyController", { enumerable: true, get: function () { return NotificationProxyController_1.NotificationProxyController; } });
+var NotificationEngineClient_1 = require("./NotificationEngineClient");
+Object.defineProperty(exports, "NotificationEngineClient", { enumerable: true, get: function () { return NotificationEngineClient_1.NotificationEngineClient; } });
+var interfaces_1 = require("./interfaces");
+Object.defineProperty(exports, "NOTIFICATION_PROXY_OPTIONS", { enumerable: true, get: function () { return interfaces_1.NOTIFICATION_PROXY_OPTIONS; } });
+var engine_result_1 = require("./engine-result");
+Object.defineProperty(exports, "toResult", { enumerable: true, get: function () { return engine_result_1.toResult; } });
+Object.defineProperty(exports, "scopedFeedPath", { enumerable: true, get: function () { return engine_result_1.scopedFeedPath; } });
+// Queries
+var list_notifications_handler_1 = require("./queries/list-notifications.handler");
+Object.defineProperty(exports, "ListNotificationsQuery", { enumerable: true, get: function () { return list_notifications_handler_1.ListNotificationsQuery; } });
+Object.defineProperty(exports, "ListNotificationsHandler", { enumerable: true, get: function () { return list_notifications_handler_1.ListNotificationsHandler; } });
+var count_unread_handler_1 = require("./queries/count-unread.handler");
+Object.defineProperty(exports, "CountUnreadQuery", { enumerable: true, get: function () { return count_unread_handler_1.CountUnreadQuery; } });
+Object.defineProperty(exports, "CountUnreadHandler", { enumerable: true, get: function () { return count_unread_handler_1.CountUnreadHandler; } });
+var get_notification_settings_handler_1 = require("./queries/get-notification-settings.handler");
+Object.defineProperty(exports, "GetNotificationSettingsQuery", { enumerable: true, get: function () { return get_notification_settings_handler_1.GetNotificationSettingsQuery; } });
+Object.defineProperty(exports, "GetNotificationSettingsHandler", { enumerable: true, get: function () { return get_notification_settings_handler_1.GetNotificationSettingsHandler; } });
+// Commands
+var mark_notification_read_handler_1 = require("./commands/mark-notification-read.handler");
+Object.defineProperty(exports, "MarkNotificationReadCommand", { enumerable: true, get: function () { return mark_notification_read_handler_1.MarkNotificationReadCommand; } });
+Object.defineProperty(exports, "MarkNotificationReadHandler", { enumerable: true, get: function () { return mark_notification_read_handler_1.MarkNotificationReadHandler; } });
+var mark_all_read_handler_1 = require("./commands/mark-all-read.handler");
+Object.defineProperty(exports, "MarkAllNotificationsReadCommand", { enumerable: true, get: function () { return mark_all_read_handler_1.MarkAllNotificationsReadCommand; } });
+Object.defineProperty(exports, "MarkAllNotificationsReadHandler", { enumerable: true, get: function () { return mark_all_read_handler_1.MarkAllNotificationsReadHandler; } });
+var update_notification_settings_handler_1 = require("./commands/update-notification-settings.handler");
+Object.defineProperty(exports, "UpdateNotificationSettingsCommand", { enumerable: true, get: function () { return update_notification_settings_handler_1.UpdateNotificationSettingsCommand; } });
+Object.defineProperty(exports, "UpdateNotificationSettingsHandler", { enumerable: true, get: function () { return update_notification_settings_handler_1.UpdateNotificationSettingsHandler; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qEAAoE;AAA3D,kIAAA,uBAAuB,OAAA;AAChC,6EAA4E;AAAnE,0IAAA,2BAA2B,OAAA;AACpC,uEAA4F;AAAnF,oIAAA,wBAAwB,OAAA;AACjC,2CAAyF;AAAhF,wHAAA,0BAA0B,OAAA;AACnC,iDAA2D;AAAlD,yGAAA,QAAQ,OAAA;AAAE,+GAAA,cAAc,OAAA;AAEjC,UAAU;AACV,mFAAwG;AAA/F,oIAAA,sBAAsB,OAAA;AAAE,sIAAA,wBAAwB,OAAA;AACzD,uEAAsF;AAA7E,wHAAA,gBAAgB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAC7C,iGAIqD;AAHnD,iJAAA,4BAA4B,OAAA;AAC5B,mJAAA,8BAA8B,OAAA;AAIhC,WAAW;AACX,4FAGmD;AAFjD,6IAAA,2BAA2B,OAAA;AAC3B,6IAAA,2BAA2B,OAAA;AAE7B,0EAG0C;AAFxC,wIAAA,+BAA+B,OAAA;AAC/B,wIAAA,+BAA+B,OAAA;AAEjC,wGAGyD;AAFvD,yJAAA,iCAAiC,OAAA;AACjC,yJAAA,iCAAiC,OAAA","sourcesContent":["export { NotificationProxyModule } from './NotificationProxyModule';\nexport { NotificationProxyController } from './NotificationProxyController';\nexport { NotificationEngineClient, type ProxiedResponse } from './NotificationEngineClient';\nexport { NOTIFICATION_PROXY_OPTIONS, type NotificationProxyOptions } from './interfaces';\nexport { toResult, scopedFeedPath } from './engine-result';\n\n// Queries\nexport { ListNotificationsQuery, ListNotificationsHandler } from './queries/list-notifications.handler';\nexport { CountUnreadQuery, CountUnreadHandler } from './queries/count-unread.handler';\nexport {\n  GetNotificationSettingsQuery,\n  GetNotificationSettingsHandler,\n  type NotificationSettingsPath,\n} from './queries/get-notification-settings.handler';\n\n// Commands\nexport {\n  MarkNotificationReadCommand,\n  MarkNotificationReadHandler,\n} from './commands/mark-notification-read.handler';\nexport {\n  MarkAllNotificationsReadCommand,\n  MarkAllNotificationsReadHandler,\n} from './commands/mark-all-read.handler';\nexport {\n  UpdateNotificationSettingsCommand,\n  UpdateNotificationSettingsHandler,\n} from './commands/update-notification-settings.handler';\n"]}

package/dist/interfaces.d.ts

@@ -0,0 +1,41 @@
+/** DI token for the resolved, validated proxy options. */
+export declare const NOTIFICATION_PROXY_OPTIONS = "NOTIFICATION_PROXY_OPTIONS";
+/**
+ * Configuration for {@link NotificationProxyModule}.
+ *
+ * Exactly one mode must be chosen — there is deliberately NO implicit
+ * "unscoped" default, so a misconfigured app can never silently expose every
+ * app's notifications:
+ *
+ *  - **Per-app** (`{ appId: 'delivery-hub' }`): the BFF server-authoritatively
+ *    stamps `appId=<appId>` on every feed read/mutation and strips any
+ *    client-supplied `appId`. The bell shows only this app's notifications.
+ *
+ *  - **Shell / unified** (`{ unified: true }`, optionally with an `appId`
+ *    identity label e.g. `{ appId: 'shell', unified: true }`): the BFF sends
+ *    NO `appId` filter, so the engine returns the caller's notifications across
+ *    ALL apps. This is still strictly user-scoped — the engine derives the
+ *    recipient from the verified token (`requireCurrentUser()`), never from the
+ *    request — so a shell user only ever sees their OWN notifications.
+ */
+export interface NotificationProxyOptions {
+    /**
+     * This app's registered application slug (must match a row in the engine's
+     * application registry). Required for per-app mode; in shell mode it is an
+     * optional identity label only and does NOT narrow the feed.
+     */
+    appId?: string;
+    /**
+     * Shell mode: surface the caller's notifications across every app. Mutually
+     * exclusive in intent with per-app scoping — set this ONLY on a shell/portal.
+     * The feed remains user-scoped by the token; this widens the *app* scope, not
+     * the *user* scope.
+     */
+    unified?: boolean;
+    /**
+     * Override the notification engine base URL. Defaults to
+     * `process.env.NOTIFICATION_ENGINE_URL` then `http://notification-engine:3000`.
+     */
+    engineBaseUrl?: string;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../src/interfaces.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/interfaces.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NOTIFICATION_PROXY_OPTIONS = void 0;
+/** DI token for the resolved, validated proxy options. */
+exports.NOTIFICATION_PROXY_OPTIONS = 'NOTIFICATION_PROXY_OPTIONS';
+//# sourceMappingURL=interfaces.js.map

package/dist/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../src/interfaces.ts"],"names":[],"mappings":";;;AAAA,0DAA0D;AAC7C,QAAA,0BAA0B,GAAG,4BAA4B,CAAC","sourcesContent":["/** DI token for the resolved, validated proxy options. */\nexport const NOTIFICATION_PROXY_OPTIONS = 'NOTIFICATION_PROXY_OPTIONS';\n\n/**\n * Configuration for {@link NotificationProxyModule}.\n *\n * Exactly one mode must be chosen — there is deliberately NO implicit\n * \"unscoped\" default, so a misconfigured app can never silently expose every\n * app's notifications:\n *\n *  - **Per-app** (`{ appId: 'delivery-hub' }`): the BFF server-authoritatively\n *    stamps `appId=<appId>` on every feed read/mutation and strips any\n *    client-supplied `appId`. The bell shows only this app's notifications.\n *\n *  - **Shell / unified** (`{ unified: true }`, optionally with an `appId`\n *    identity label e.g. `{ appId: 'shell', unified: true }`): the BFF sends\n *    NO `appId` filter, so the engine returns the caller's notifications across\n *    ALL apps. This is still strictly user-scoped — the engine derives the\n *    recipient from the verified token (`requireCurrentUser()`), never from the\n *    request — so a shell user only ever sees their OWN notifications.\n */\nexport interface NotificationProxyOptions {\n  /**\n   * This app's registered application slug (must match a row in the engine's\n   * application registry). Required for per-app mode; in shell mode it is an\n   * optional identity label only and does NOT narrow the feed.\n   */\n  appId?: string;\n\n  /**\n   * Shell mode: surface the caller's notifications across every app. Mutually\n   * exclusive in intent with per-app scoping — set this ONLY on a shell/portal.\n   * The feed remains user-scoped by the token; this widens the *app* scope, not\n   * the *user* scope.\n   */\n  unified?: boolean;\n\n  /**\n   * Override the notification engine base URL. Defaults to\n   * `process.env.NOTIFICATION_ENGINE_URL` then `http://notification-engine:3000`.\n   */\n  engineBaseUrl?: string;\n}\n"]}

package/dist/queries/count-unread.handler.d.ts

@@ -0,0 +1,16 @@
+import { IQueryHandler } from '@nestjs/cqrs';
+import { Result } from '@quanticjs/core';
+import { NotificationEngineClient } from '../NotificationEngineClient';
+import { type NotificationProxyOptions } from '../interfaces';
+/** Unread count for the caller (proxied), scoped to this app (or all apps in shell mode). */
+export declare class CountUnreadQuery {
+    readonly authorization: string | undefined;
+    constructor(authorization: string | undefined);
+}
+export declare class CountUnreadHandler implements IQueryHandler<CountUnreadQuery> {
+    private readonly engine;
+    private readonly options;
+    constructor(engine: NotificationEngineClient, options: NotificationProxyOptions);
+    execute(query: CountUnreadQuery): Promise<Result<unknown>>;
+}
+//# sourceMappingURL=count-unread.handler.d.ts.map

package/dist/queries/count-unread.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"count-unread.handler.d.ts","sourceRoot":"","sources":["../../src/queries/count-unread.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAgB,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAA8B,KAAK,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG1F,6FAA6F;AAC7F,qBAAa,gBAAgB;IACf,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS;gBAAjC,aAAa,EAAE,MAAM,GAAG,SAAS;CACvD;AAED,qBACa,kBAAmB,YAAW,aAAa,CAAC,gBAAgB,CAAC;IAEtE,OAAO,CAAC,QAAQ,CAAC,MAAM;IACa,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAD3C,MAAM,EAAE,wBAAwB,EACI,OAAO,EAAE,wBAAwB;IAGlF,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;CAIjE"}

package/dist/queries/count-unread.handler.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CountUnreadHandler = exports.CountUnreadQuery = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const NotificationEngineClient_1 = require("../NotificationEngineClient");
+const interfaces_1 = require("../interfaces");
+const engine_result_1 = require("../engine-result");
+/** Unread count for the caller (proxied), scoped to this app (or all apps in shell mode). */
+class CountUnreadQuery {
+    authorization;
+    constructor(authorization) {
+        this.authorization = authorization;
+    }
+}
+exports.CountUnreadQuery = CountUnreadQuery;
+let CountUnreadHandler = class CountUnreadHandler {
+    engine;
+    options;
+    constructor(engine, options) {
+        this.engine = engine;
+        this.options = options;
+    }
+    async execute(query) {
+        const path = (0, engine_result_1.scopedFeedPath)(this.options, '/notifications/unread-count');
+        return (0, engine_result_1.toResult)(await this.engine.forward('GET', path, query.authorization));
+    }
+};
+exports.CountUnreadHandler = CountUnreadHandler;
+exports.CountUnreadHandler = CountUnreadHandler = __decorate([
+    (0, cqrs_1.QueryHandler)(CountUnreadQuery),
+    __param(1, (0, common_1.Inject)(interfaces_1.NOTIFICATION_PROXY_OPTIONS)),
+    __metadata("design:paramtypes", [NotificationEngineClient_1.NotificationEngineClient, Object])
+], CountUnreadHandler);
+//# sourceMappingURL=count-unread.handler.js.map

package/dist/queries/count-unread.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"count-unread.handler.js","sourceRoot":"","sources":["../../src/queries/count-unread.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwC;AACxC,uCAA2D;AAE3D,0EAAuE;AACvE,8CAA0F;AAC1F,oDAA4D;AAE5D,6FAA6F;AAC7F,MAAa,gBAAgB;IACN;IAArB,YAAqB,aAAiC;QAAjC,kBAAa,GAAb,aAAa,CAAoB;IAAG,CAAC;CAC3D;AAFD,4CAEC;AAGM,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEV;IACoC;IAFvD,YACmB,MAAgC,EACI,OAAiC;QADrE,WAAM,GAAN,MAAM,CAA0B;QACI,YAAO,GAAP,OAAO,CAA0B;IACrF,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAAuB;QACnC,MAAM,IAAI,GAAG,IAAA,8BAAc,EAAC,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACzE,OAAO,IAAA,wBAAQ,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAVY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAY,EAAC,gBAAgB,CAAC;IAI1B,WAAA,IAAA,eAAM,EAAC,uCAA0B,CAAC,CAAA;qCADV,mDAAwB;GAFxC,kBAAkB,CAU9B","sourcesContent":["import { Inject } from '@nestjs/common';\nimport { IQueryHandler, QueryHandler } from '@nestjs/cqrs';\nimport { Result } from '@quanticjs/core';\nimport { NotificationEngineClient } from '../NotificationEngineClient';\nimport { NOTIFICATION_PROXY_OPTIONS, type NotificationProxyOptions } from '../interfaces';\nimport { scopedFeedPath, toResult } from '../engine-result';\n\n/** Unread count for the caller (proxied), scoped to this app (or all apps in shell mode). */\nexport class CountUnreadQuery {\n  constructor(readonly authorization: string | undefined) {}\n}\n\n@QueryHandler(CountUnreadQuery)\nexport class CountUnreadHandler implements IQueryHandler<CountUnreadQuery> {\n  constructor(\n    private readonly engine: NotificationEngineClient,\n    @Inject(NOTIFICATION_PROXY_OPTIONS) private readonly options: NotificationProxyOptions,\n  ) {}\n\n  async execute(query: CountUnreadQuery): Promise<Result<unknown>> {\n    const path = scopedFeedPath(this.options, '/notifications/unread-count');\n    return toResult(await this.engine.forward('GET', path, query.authorization));\n  }\n}\n"]}

package/dist/queries/get-notification-settings.handler.d.ts

@@ -0,0 +1,17 @@
+import { IQueryHandler } from '@nestjs/cqrs';
+import { Result } from '@quanticjs/core';
+import { NotificationEngineClient } from '../NotificationEngineClient';
+/** Allowed settings sub-paths (allowlisted to prevent path traversal). */
+export type NotificationSettingsPath = 'preferences' | 'config/quiet-hours' | 'config/frequency-cap';
+/** Read a settings document (preferences / quiet-hours / frequency-cap) — not app-scoped. */
+export declare class GetNotificationSettingsQuery {
+    readonly authorization: string | undefined;
+    readonly path: NotificationSettingsPath;
+    constructor(authorization: string | undefined, path: NotificationSettingsPath);
+}
+export declare class GetNotificationSettingsHandler implements IQueryHandler<GetNotificationSettingsQuery> {
+    private readonly engine;
+    constructor(engine: NotificationEngineClient);
+    execute(query: GetNotificationSettingsQuery): Promise<Result<unknown>>;
+}
+//# sourceMappingURL=get-notification-settings.handler.d.ts.map

package/dist/queries/get-notification-settings.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-notification-settings.handler.d.ts","sourceRoot":"","sources":["../../src/queries/get-notification-settings.handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAgB,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,0EAA0E;AAC1E,MAAM,MAAM,wBAAwB,GAChC,aAAa,GACb,oBAAoB,GACpB,sBAAsB,CAAC;AAE3B,6FAA6F;AAC7F,qBAAa,4BAA4B;IAErC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,wBAAwB;gBAD9B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,EAAE,wBAAwB;CAE1C;AAED,qBACa,8BACX,YAAW,aAAa,CAAC,4BAA4B,CAAC;IAE1C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,wBAAwB;IAEvD,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;CAK7E"}

package/dist/queries/get-notification-settings.handler.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetNotificationSettingsHandler = exports.GetNotificationSettingsQuery = void 0;
+const cqrs_1 = require("@nestjs/cqrs");
+const NotificationEngineClient_1 = require("../NotificationEngineClient");
+const engine_result_1 = require("../engine-result");
+/** Read a settings document (preferences / quiet-hours / frequency-cap) — not app-scoped. */
+class GetNotificationSettingsQuery {
+    authorization;
+    path;
+    constructor(authorization, path) {
+        this.authorization = authorization;
+        this.path = path;
+    }
+}
+exports.GetNotificationSettingsQuery = GetNotificationSettingsQuery;
+let GetNotificationSettingsHandler = class GetNotificationSettingsHandler {
+    engine;
+    constructor(engine) {
+        this.engine = engine;
+    }
+    async execute(query) {
+        return (0, engine_result_1.toResult)(await this.engine.forward('GET', `/notifications/${query.path}`, query.authorization));
+    }
+};
+exports.GetNotificationSettingsHandler = GetNotificationSettingsHandler;
+exports.GetNotificationSettingsHandler = GetNotificationSettingsHandler = __decorate([
+    (0, cqrs_1.QueryHandler)(GetNotificationSettingsQuery),
+    __metadata("design:paramtypes", [NotificationEngineClient_1.NotificationEngineClient])
+], GetNotificationSettingsHandler);
+//# sourceMappingURL=get-notification-settings.handler.js.map

package/dist/queries/get-notification-settings.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-notification-settings.handler.js","sourceRoot":"","sources":["../../src/queries/get-notification-settings.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAA2D;AAE3D,0EAAuE;AACvE,oDAA4C;AAQ5C,6FAA6F;AAC7F,MAAa,4BAA4B;IAE5B;IACA;IAFX,YACW,aAAiC,EACjC,IAA8B;QAD9B,kBAAa,GAAb,aAAa,CAAoB;QACjC,SAAI,GAAJ,IAAI,CAA0B;IACtC,CAAC;CACL;AALD,oEAKC;AAGM,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IAGZ;IAA7B,YAA6B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;IAAG,CAAC;IAEjE,KAAK,CAAC,OAAO,CAAC,KAAmC;QAC/C,OAAO,IAAA,wBAAQ,EACb,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,kBAAkB,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,aAAa,CAAC,CACtF,CAAC;IACJ,CAAC;CACF,CAAA;AAVY,wEAA8B;yCAA9B,8BAA8B;IAD1C,IAAA,mBAAY,EAAC,4BAA4B,CAAC;qCAIJ,mDAAwB;GAHlD,8BAA8B,CAU1C","sourcesContent":["import { IQueryHandler, QueryHandler } from '@nestjs/cqrs';\nimport { Result } from '@quanticjs/core';\nimport { NotificationEngineClient } from '../NotificationEngineClient';\nimport { toResult } from '../engine-result';\n\n/** Allowed settings sub-paths (allowlisted to prevent path traversal). */\nexport type NotificationSettingsPath =\n  | 'preferences'\n  | 'config/quiet-hours'\n  | 'config/frequency-cap';\n\n/** Read a settings document (preferences / quiet-hours / frequency-cap) — not app-scoped. */\nexport class GetNotificationSettingsQuery {\n  constructor(\n    readonly authorization: string | undefined,\n    readonly path: NotificationSettingsPath,\n  ) {}\n}\n\n@QueryHandler(GetNotificationSettingsQuery)\nexport class GetNotificationSettingsHandler\n  implements IQueryHandler<GetNotificationSettingsQuery>\n{\n  constructor(private readonly engine: NotificationEngineClient) {}\n\n  async execute(query: GetNotificationSettingsQuery): Promise<Result<unknown>> {\n    return toResult(\n      await this.engine.forward('GET', `/notifications/${query.path}`, query.authorization),\n    );\n  }\n}\n"]}

package/dist/queries/list-notifications.handler.d.ts

@@ -0,0 +1,21 @@
+import { IQueryHandler } from '@nestjs/cqrs';
+import { Result } from '@quanticjs/core';
+import { NotificationEngineClient } from '../NotificationEngineClient';
+import { type NotificationProxyOptions } from '../interfaces';
+/**
+ * List the caller's notifications (proxied). `authorization` carries the caller's
+ * bearer token to forward to the engine — the deliberate BFF credential-forwarding
+ * exception to "no auth in queries"; the engine resolves the user from it.
+ */
+export declare class ListNotificationsQuery {
+    readonly authorization: string | undefined;
+    readonly query: Record<string, string>;
+    constructor(authorization: string | undefined, query: Record<string, string>);
+}
+export declare class ListNotificationsHandler implements IQueryHandler<ListNotificationsQuery> {
+    private readonly engine;
+    private readonly options;
+    constructor(engine: NotificationEngineClient, options: NotificationProxyOptions);
+    execute(query: ListNotificationsQuery): Promise<Result<unknown>>;
+}
+//# sourceMappingURL=list-notifications.handler.d.ts.map

package/dist/queries/list-notifications.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-notifications.handler.d.ts","sourceRoot":"","sources":["../../src/queries/list-notifications.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAgB,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAA8B,KAAK,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG1F;;;;GAIG;AACH,qBAAa,sBAAsB;IAE/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;gBAD7B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAEzC;AAED,qBACa,wBAAyB,YAAW,aAAa,CAAC,sBAAsB,CAAC;IAElF,OAAO,CAAC,QAAQ,CAAC,MAAM;IACa,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAD3C,MAAM,EAAE,wBAAwB,EACI,OAAO,EAAE,wBAAwB;IAGlF,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;CAIvE"}

package/dist/queries/list-notifications.handler.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListNotificationsHandler = exports.ListNotificationsQuery = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const NotificationEngineClient_1 = require("../NotificationEngineClient");
+const interfaces_1 = require("../interfaces");
+const engine_result_1 = require("../engine-result");
+/**
+ * List the caller's notifications (proxied). `authorization` carries the caller's
+ * bearer token to forward to the engine — the deliberate BFF credential-forwarding
+ * exception to "no auth in queries"; the engine resolves the user from it.
+ */
+class ListNotificationsQuery {
+    authorization;
+    query;
+    constructor(authorization, query) {
+        this.authorization = authorization;
+        this.query = query;
+    }
+}
+exports.ListNotificationsQuery = ListNotificationsQuery;
+let ListNotificationsHandler = class ListNotificationsHandler {
+    engine;
+    options;
+    constructor(engine, options) {
+        this.engine = engine;
+        this.options = options;
+    }
+    async execute(query) {
+        const path = (0, engine_result_1.scopedFeedPath)(this.options, '/notifications', query.query);
+        return (0, engine_result_1.toResult)(await this.engine.forward('GET', path, query.authorization));
+    }
+};
+exports.ListNotificationsHandler = ListNotificationsHandler;
+exports.ListNotificationsHandler = ListNotificationsHandler = __decorate([
+    (0, cqrs_1.QueryHandler)(ListNotificationsQuery),
+    __param(1, (0, common_1.Inject)(interfaces_1.NOTIFICATION_PROXY_OPTIONS)),
+    __metadata("design:paramtypes", [NotificationEngineClient_1.NotificationEngineClient, Object])
+], ListNotificationsHandler);
+//# sourceMappingURL=list-notifications.handler.js.map

package/dist/queries/list-notifications.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-notifications.handler.js","sourceRoot":"","sources":["../../src/queries/list-notifications.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwC;AACxC,uCAA2D;AAE3D,0EAAuE;AACvE,8CAA0F;AAC1F,oDAA4D;AAE5D;;;;GAIG;AACH,MAAa,sBAAsB;IAEtB;IACA;IAFX,YACW,aAAiC,EACjC,KAA6B;QAD7B,kBAAa,GAAb,aAAa,CAAoB;QACjC,UAAK,GAAL,KAAK,CAAwB;IACrC,CAAC;CACL;AALD,wDAKC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEhB;IACoC;IAFvD,YACmB,MAAgC,EACI,OAAiC;QADrE,WAAM,GAAN,MAAM,CAA0B;QACI,YAAO,GAAP,OAAO,CAA0B;IACrF,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,KAA6B;QACzC,MAAM,IAAI,GAAG,IAAA,8BAAc,EAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACzE,OAAO,IAAA,wBAAQ,EAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAVY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAY,EAAC,sBAAsB,CAAC;IAIhC,WAAA,IAAA,eAAM,EAAC,uCAA0B,CAAC,CAAA;qCADV,mDAAwB;GAFxC,wBAAwB,CAUpC","sourcesContent":["import { Inject } from '@nestjs/common';\nimport { IQueryHandler, QueryHandler } from '@nestjs/cqrs';\nimport { Result } from '@quanticjs/core';\nimport { NotificationEngineClient } from '../NotificationEngineClient';\nimport { NOTIFICATION_PROXY_OPTIONS, type NotificationProxyOptions } from '../interfaces';\nimport { scopedFeedPath, toResult } from '../engine-result';\n\n/**\n * List the caller's notifications (proxied). `authorization` carries the caller's\n * bearer token to forward to the engine — the deliberate BFF credential-forwarding\n * exception to \"no auth in queries\"; the engine resolves the user from it.\n */\nexport class ListNotificationsQuery {\n  constructor(\n    readonly authorization: string | undefined,\n    readonly query: Record<string, string>,\n  ) {}\n}\n\n@QueryHandler(ListNotificationsQuery)\nexport class ListNotificationsHandler implements IQueryHandler<ListNotificationsQuery> {\n  constructor(\n    private readonly engine: NotificationEngineClient,\n    @Inject(NOTIFICATION_PROXY_OPTIONS) private readonly options: NotificationProxyOptions,\n  ) {}\n\n  async execute(query: ListNotificationsQuery): Promise<Result<unknown>> {\n    const path = scopedFeedPath(this.options, '/notifications', query.query);\n    return toResult(await this.engine.forward('GET', path, query.authorization));\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@quanticjs/notification-bff",
+  "version": "8.3.0",
+  "description": "Server-authoritative BFF proxy to the standalone notification engine — per-app scoping or shell (unified) mode.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "eslint src",
+    "test": "jest",
+    "test:cov": "jest --coverage",
+    "clean": "rm -rf dist"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^11.0.0",
+    "@nestjs/core": "^11.0.0",
+    "@quanticjs/core": "~8.3.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/quanticjs/quanticjs-backend.git",
+    "directory": "packages/notification-bff"
+  },
+  "license": "UNLICENSED"
+}