@tulip-systems/create-app 0.13.0 → 0.15.0

package/dist/templates/code/src/server/notifications/init.ts

@@ -0,0 +1,49 @@
+import "server-cli-only";
+
+import type { Permission } from "@tulip-systems/auth/permissions";
+import { notificationsDrizzleAdapter } from "@tulip-systems/notifications/drizzle";
+import { Notifications } from "@tulip-systems/notifications/server";
+import { inArray } from "drizzle-orm";
+import * as schema from "@/app/admin/notifications/_lib/schema";
+import { auth } from "@/server/auth/init";
+import type { AccessControl } from "@/server/auth/permissions";
+import { users } from "@/server/auth/schema";
+import { db } from "@/server/db/init";
+import { notificationEmailChannel, notificationWebPushChannel } from "./channels";
+import { notificationDefinitions } from "./definitions";
+
+declare module "@tulip-systems/notifications" {
+  interface NotificationRegister {
+    permission: Permission<AccessControl>;
+  }
+}
+
+/**
+ * Initializes the notifications service for the application. Notifications that require a
+ * permission only reach users whose role grants it, checked by better-auth like the router's
+ * permission middleware.
+ */
+export const notifications = Notifications.init({
+  database: notificationsDrizzleAdapter({ db, schema }),
+  channels: [notificationWebPushChannel, notificationEmailChannel],
+  defaultPreferences: {
+    types: {
+      "project.created": { email: false },
+      "project.status-changed": { email: false },
+      "task.created": { email: false },
+    },
+  },
+  definitions: notificationDefinitions,
+  recipients: (ids) =>
+    db
+      .select({ id: users.id, name: users.name, email: users.email })
+      .from(users)
+      .where(inArray(users.id, ids)),
+  authorize: async (recipient, permission) => {
+    const { success } = await auth.api.userHasPermission({
+      body: { userId: recipient.id, permissions: permission },
+    });
+
+    return success;
+  },
+});

package/dist/templates/spark/package.json

@@ -52,19 +52,19 @@
     "@tiptap/extension-text-style": "catalog:",
     "@tiptap/extension-underline": "catalog:",
     "@tiptap/extensions": "catalog:",
-    "@tulip-systems/app": "0.13.0",
-    "@tulip-systems/auth": "0.13.0",
-    "@tulip-systems/commands": "0.13.0",
-    "@tulip-systems/core": "0.13.0",
-    "@tulip-systems/data-tables": "0.13.0",
-    "@tulip-systems/drive": "0.13.0",
-    "@tulip-systems/drive-local": "0.13.0",
-    "@tulip-systems/editor": "0.13.0",
-    "@tulip-systems/editor-storage": "0.13.0",
-    "@tulip-systems/inline": "0.13.0",
-    "@tulip-systems/query": "0.13.0",
-    "@tulip-systems/storage": "0.13.0",
-    "@tulip-systems/ui": "0.13.0",
+    "@tulip-systems/app": "0.15.0",
+    "@tulip-systems/auth": "0.15.0",
+    "@tulip-systems/commands": "0.15.0",
+    "@tulip-systems/core": "0.15.0",
+    "@tulip-systems/data-tables": "0.15.0",
+    "@tulip-systems/drive": "0.15.0",
+    "@tulip-systems/drive-local": "0.15.0",
+    "@tulip-systems/editor": "0.15.0",
+    "@tulip-systems/editor-storage": "0.15.0",
+    "@tulip-systems/inline": "0.15.0",
+    "@tulip-systems/query": "0.15.0",
+    "@tulip-systems/storage": "0.15.0",
+    "@tulip-systems/ui": "0.15.0",
     "@vercel/functions": "^3.9.0",
     "@zip.js/zip.js": "^2.8.34",
     "better-auth": "catalog:",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tulip-systems/create-app",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "type": "module",
   "sideEffects": false,
   "license": "AGPL-3.0",

package/dist/templates/code/src/app/admin/notifications/_components/command-toggle-push.tsx

@@ -1,115 +0,0 @@
-"use client";
-
-import { useSuspenseQuery } from "@tanstack/react-query";
-import { CommandClick, CommandLabel } from "@tulip-systems/commands/client";
-import { toast } from "@tulip-systems/ui/sonner";
-import { BellIcon, BellOffIcon } from "lucide-react";
-import { orpc } from "@/server/router/client";
-
-const notificationPushSubscriptionQueryKey = ["notifications", "push-subscription"] as const;
-
-export function CommandTogglePush() {
-  const { data: config } = useSuspenseQuery(orpc.notifications.getPushConfig.queryOptions());
-  const { data } = useSuspenseQuery({
-    queryKey: notificationPushSubscriptionQueryKey,
-    queryFn: async () => {
-      const supported =
-        typeof window !== "undefined" &&
-        "serviceWorker" in navigator &&
-        "PushManager" in window &&
-        "Notification" in window;
-
-      if (!supported) return { supported, enabled: false };
-
-      const registration = await navigator.serviceWorker.getRegistration("/sw.js");
-      const subscription = await registration?.pushManager.getSubscription();
-
-      return { supported, enabled: Boolean(subscription) };
-    },
-    refetchOnMount: "always",
-    staleTime: 0,
-  });
-
-  return (
-    <CommandClick
-      label={data.enabled ? "Disable push" : "Enable push"}
-      disabled={!data.supported}
-      variables={{ ...data, config }}
-      mutation={{
-        mutationFn: async (variables) => {
-          if (variables.enabled) {
-            const registration = await navigator.serviceWorker.getRegistration("/sw.js");
-            const subscription = await registration?.pushManager.getSubscription();
-
-            if (subscription) {
-              await orpc.notifications.unsubscribePush.call({ endpoint: subscription.endpoint });
-              await subscription.unsubscribe();
-            }
-
-            return false;
-          }
-
-          if (!variables.supported) throw new Error("This browser does not support Web Push");
-          if (!variables.config.configured || !variables.config.publicKey) {
-            throw new Error("Web Push is not configured for this environment");
-          }
-
-          if (Notification.permission === "denied") {
-            throw new Error("Notifications are blocked for this site");
-          }
-
-          const [registration, permission] = await Promise.all([
-            navigator.serviceWorker.register("/sw.js"),
-            Notification.requestPermission(),
-          ]);
-
-          if (permission !== "granted") {
-            throw new Error("Notification permission was not granted");
-          }
-
-          const publicKey = variables.config.publicKey;
-          const padding = "=".repeat((4 - (publicKey.length % 4)) % 4);
-          const base64 = `${publicKey}${padding}`.replace(/-/g, "+").replace(/_/g, "/");
-          const applicationServerKey = Uint8Array.from(window.atob(base64), (char) =>
-            char.charCodeAt(0),
-          );
-          const subscription = await registration.pushManager.subscribe({
-            userVisibleOnly: true,
-            applicationServerKey,
-          });
-          const subscriptionJson = subscription.toJSON();
-
-          if (!subscriptionJson.keys?.p256dh || !subscriptionJson.keys.auth) {
-            await subscription.unsubscribe();
-            throw new Error("Browser returned an invalid push subscription");
-          }
-
-          await orpc.notifications.subscribePush.call({
-            endpoint: subscription.endpoint,
-            expirationTime: subscription.expirationTime,
-            keys: {
-              p256dh: subscriptionJson.keys.p256dh,
-              auth: subscriptionJson.keys.auth,
-            },
-          });
-
-          return true;
-        },
-        meta: { invalidates: [notificationPushSubscriptionQueryKey] },
-        onSuccess: (enabled) => {
-          toast.success(
-            enabled ? "Browser notifications enabled" : "Browser notifications disabled",
-          );
-        },
-        onError: (error) => {
-          toast.error(
-            error instanceof Error ? error.message : "Could not update push notifications",
-          );
-        },
-      }}
-    >
-      {data.enabled ? <BellOffIcon className="size-4" /> : <BellIcon className="size-4" />}
-      <CommandLabel />
-    </CommandClick>
-  );
-}

package/dist/templates/code/src/app/admin/notifications/_lib/push.server.ts

@@ -1,80 +0,0 @@
-import "server-cli-only";
-
-import { eq } from "drizzle-orm";
-import webpush from "web-push";
-import { env } from "@/env";
-import { db } from "@/server/db/init";
-import { notificationPushSubscriptions } from "./schema";
-import type { Notification } from "./validators";
-
-const publicKey = env.NEXT_PUBLIC_WEB_PUSH_PUBLIC_KEY;
-const privateKey = env.WEB_PUSH_PRIVATE_KEY;
-const subject = env.WEB_PUSH_SUBJECT;
-
-const isWebPushConfigured = Boolean(publicKey && privateKey && subject);
-
-if (publicKey && privateKey && subject) {
-  webpush.setVapidDetails(subject, publicKey, privateKey);
-}
-
-/**
- * Returns the browser-facing Web Push configuration.
- *
- * The client uses this to know whether push is available in the current
- * environment and which public VAPID key to pass to the browser subscription.
- */
-export function getWebPushConfig() {
-  return {
-    publicKey: publicKey ?? null,
-    configured: isWebPushConfigured,
-  };
-}
-
-/**
- * Sends a notification row to every stored browser push subscription.
- *
- * This is a best-effort side effect: if VAPID keys are not configured, it no-ops
- * so database notifications keep working. Expired browser subscriptions are
- * deleted when the push service reports them as gone.
- */
-export async function sendPushNotification(notification: Notification) {
-  if (!isWebPushConfigured) return;
-
-  const subscriptions = await db.query.notificationPushSubscriptions.findMany();
-  if (subscriptions.length === 0) return;
-
-  const payload = JSON.stringify({
-    title: notification.title,
-    body: notification.body,
-    url: notification.sourceHref ?? "/admin/notifications",
-    notificationId: notification.id,
-  });
-
-  await Promise.all(
-    subscriptions.map(async (subscription) => {
-      try {
-        await webpush.sendNotification(
-          {
-            endpoint: subscription.endpoint,
-            keys: {
-              p256dh: subscription.p256dh,
-              auth: subscription.auth,
-            },
-          },
-          payload,
-        );
-      } catch (error) {
-        const statusCode = (error as { statusCode?: number }).statusCode;
-
-        if (statusCode === 404 || statusCode === 410) {
-          await db
-            .delete(notificationPushSubscriptions)
-            .where(eq(notificationPushSubscriptions.endpoint, subscription.endpoint));
-          return;
-        }
-
-        console.error("[notifications] Failed to send Web Push notification", error);
-      }
-    }),
-  );
-}

package/dist/templates/code/src/app/admin/notifications/_lib/validators.ts

@@ -1,19 +0,0 @@
-import { z } from "zod";
-import type { notifications } from "./schema";
-
-/**
- * Notification
- */
-export type Notification = typeof notifications.$inferSelect;
-
-/**
- * Push Subscription Schema
- */
-export const pushSubscriptionSchema = z.object({
-  endpoint: z.url(),
-  expirationTime: z.number().nullable().optional(),
-  keys: z.object({
-    p256dh: z.string().min(1),
-    auth: z.string().min(1),
-  }),
-});