@voltro/plugin-notifications 0.86.0 → 0.87.0

package/dist/rpc.js

@@ -1,7 +1,12 @@
 import { Schema as e } from "effect";
 import { defineMutation as t, defineQuery as n, reactivityChannel as r } from "@voltro/protocol";
 //#region src/rpc.ts
-var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
+var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = r("notifications-preferences"), s = e.Struct({
+	subjectId: e.String,
+	category: e.String,
+	channel: e.String,
+	enabled: e.Boolean
+}), c = n({
 	name: "notifications.inbox",
 	source: a,
 	input: e.Struct({
@@ -10,43 +15,44 @@ var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
 	}),
 	output: e.Array(e.Record(e.String, e.Unknown)),
 	openAccess: "self-scoped read: returns only the calling subject's own inbox items"
-}), s = n({
+}), l = n({
 	name: "notifications.unreadCount",
 	source: a,
 	input: e.Struct({}),
 	output: e.Struct({ count: e.Number }),
 	openAccess: "self-scoped read: counts only the calling subject's own unread items"
-}), c = t({
+}), u = t({
 	name: "notifications.markRead",
 	input: e.Struct({ id: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: marks an item read only within the calling subject's own inbox"
-}), l = t({
+}), d = t({
 	name: "notifications.markUnread",
 	input: e.Struct({ id: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: marks an item unread only within the calling subject's own inbox"
-}), u = t({
+}), f = t({
 	name: "notifications.markAllRead",
 	input: e.Struct({}),
 	output: e.Struct({ count: e.Number }),
 	openAccess: "self-scoped write: clears unread state only in the calling subject's own inbox"
-}), d = t({
+}), p = t({
 	name: "notifications.archive",
 	input: e.Struct({ id: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: archives an item only within the calling subject's own inbox"
-}), f = t({
+}), m = t({
 	name: "notifications.unarchive",
 	input: e.Struct({ id: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: unarchives an item only within the calling subject's own inbox"
-}), p = n({
+}), h = n({
 	name: "notifications.preferences",
+	source: o,
 	input: e.Struct({}),
-	output: e.Array(e.Record(e.String, e.Unknown)),
+	output: e.Array(s),
 	openAccess: "self-scoped read: returns only the calling subject's own channel preferences"
-}), m = t({
+}), g = t({
 	name: "notifications.setPreference",
 	input: e.Struct({
 		category: e.String,
@@ -55,17 +61,17 @@ var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
 	}),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: toggles a channel only on the calling subject's own preferences"
-}), h = t({
+}), _ = t({
 	name: "notifications.subscribe",
 	input: e.Struct({ topic: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-service: subscribes the calling subject itself to a topic (the subject is never caller-supplied)"
-}), g = t({
+}), v = t({
 	name: "notifications.unsubscribe",
 	input: e.Struct({ topic: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-service: unsubscribes the calling subject itself from a topic"
-}), _ = t({
+}), y = t({
 	name: "notifications.setQuietHours",
 	input: e.Struct({
 		startMinute: e.Number,
@@ -75,17 +81,17 @@ var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
 	}),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: sets only the calling subject's own quiet-hours window"
-}), v = t({
+}), b = t({
 	name: "notifications.clearQuietHours",
 	input: e.Struct({}),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: clears only the calling subject's own quiet-hours window"
-}), y = n({
+}), x = n({
 	name: "notifications.webPushPublicKey",
 	input: e.Struct({}),
 	output: e.Struct({ key: e.String }),
 	openAccess: "public application-server key — the value every subscribing browser is handed by design"
-}), b = t({
+}), S = t({
 	name: "notifications.webPushSubscribe",
 	input: e.Struct({
 		endpoint: e.String,
@@ -95,17 +101,17 @@ var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
 	}),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: registers the calling subject's own browser subscription (the subject is never caller-supplied)"
-}), x = t({
+}), C = t({
 	name: "notifications.webPushUnsubscribe",
 	input: e.Struct({ endpoint: e.String }),
 	output: e.Struct({ ok: e.Boolean }),
 	openAccess: "self-scoped write: removes only a subscription the calling subject owns"
-}), S = n({
+}), w = n({
 	name: "notifications.webPushStatus",
 	input: e.Struct({}),
 	output: e.Struct({ endpoints: e.Number }),
 	openAccess: "self-scoped read: counts only the calling subject's own subscriptions"
-}), C = [
+}), T = [
 	{
 		tag: "notifications.webPushPublicKey",
 		kind: "query",
@@ -138,7 +144,7 @@ var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
 			name: "webPushStatusDescriptor"
 		}
 	}
-], w = [
+], E = [
 	{
 		tag: "notifications.inbox",
 		kind: "query",
@@ -245,4 +251,4 @@ var i = "@voltro/plugin-notifications", a = r("notifications-inbox"), o = n({
 	}
 ];
 //#endregion
-export { i as BASE_NAME, d as archiveDescriptor, v as clearQuietHoursDescriptor, o as inboxDescriptor, a as inboxFeed, u as markAllReadDescriptor, c as markReadDescriptor, l as markUnreadDescriptor, w as notificationsRpcClientImports, p as preferencesDescriptor, m as setPreferenceDescriptor, _ as setQuietHoursDescriptor, h as subscribeDescriptor, f as unarchiveDescriptor, s as unreadCountDescriptor, g as unsubscribeDescriptor, y as webPushPublicKeyDescriptor, C as webPushRpcClientImports, S as webPushStatusDescriptor, b as webPushSubscribeDescriptor, x as webPushUnsubscribeDescriptor };
+export { i as BASE_NAME, s as ChannelPreferenceSchema, p as archiveDescriptor, b as clearQuietHoursDescriptor, c as inboxDescriptor, a as inboxFeed, f as markAllReadDescriptor, u as markReadDescriptor, d as markUnreadDescriptor, E as notificationsRpcClientImports, h as preferencesDescriptor, o as preferencesFeed, g as setPreferenceDescriptor, y as setQuietHoursDescriptor, _ as subscribeDescriptor, m as unarchiveDescriptor, l as unreadCountDescriptor, v as unsubscribeDescriptor, x as webPushPublicKeyDescriptor, T as webPushRpcClientImports, w as webPushStatusDescriptor, S as webPushSubscribeDescriptor, C as webPushUnsubscribeDescriptor };

package/dist/service.js

@@ -35,8 +35,32 @@ var n = (e) => ({
 	let n = r(t, e.tz ?? "UTC"), i = e.endMinute - n;
 	return i <= 0 && (i += 1440), new Date(t.getTime() + i * 6e4);
 }, o = (n) => {
-	let r = new Map(n.channels.map((e) => [e.id, e])), o = n.channels.map((e) => e.id), c = n.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()), l = n.digestWindowMs ?? 0, u = async (i) => {
-		let a = await n.store.getPreferences(i.to), s = e(o, i.category, i.channels, a, i.to), l = o.filter((e) => !s.includes(e)), u = [], d = [], f = {
+	let r = new Map(n.channels.map((e) => [e.id, e])), o = n.channels.map((e) => e.id), c = n.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()), l = n.digestWindowMs ?? 0, u = new Map(Object.entries(n.deliveryGuards ?? {}));
+	if (u.size > 256 || [...u].some(([e, t]) => !/^[a-z][a-zA-Z0-9._-]{0,127}$/.test(e) || typeof t != "function")) throw Error("Invalid notification delivery guard registry");
+	let d = async (e) => {
+		let t = e.deliveryGuard;
+		if (t === void 0) return !0;
+		if (!t || typeof t.id != "string" || !t.payload || typeof t.payload != "object" || Array.isArray(t.payload)) throw Error("Invalid notification delivery guard reference");
+		let n = u.get(t.id);
+		if (!n) throw Error("Notification delivery guard unavailable");
+		let r = JSON.stringify(t.payload);
+		if (typeof r != "string" || r.length > 8192) throw Error("Notification delivery guard payload exceeds budget");
+		let i = JSON.parse(r);
+		if (typeof i != "object" || !i || Array.isArray(i)) throw Error("Invalid notification delivery guard payload");
+		let a = await n({
+			recipientId: e.to,
+			tenantId: e.tenantId ?? null,
+			payload: i
+		});
+		if (a !== !0 && a !== !1) throw Error("Invalid notification delivery guard decision");
+		return a;
+	}, f = () => ({
+		delivered: [],
+		failed: [],
+		skipped: [...o]
+	}), p = async (i) => {
+		if (!await d(i)) return f();
+		let a = await n.store.getPreferences(i.to), s = e(o, i.category, i.channels, a, i.to), l = o.filter((e) => !s.includes(e)), u = [], p = [], m = {
 			to: i.to,
 			category: i.category,
 			title: i.title,
@@ -45,11 +69,15 @@ var n = (e) => ({
 			tenantId: i.tenantId ?? null
 		};
 		for (let e of s) {
+			if (!await d(i)) {
+				l.push(e);
+				continue;
+			}
 			let a = r.get(e);
 			if (!a) continue;
 			if (a.deliverDetailed !== void 0) {
 				try {
-					let r = await a.deliverDetailed(f);
+					let r = await a.deliverDetailed(m);
 					for (let a of r) await n.store.recordDelivery({
 						id: t(),
 						to: i.to,
@@ -62,13 +90,13 @@ var n = (e) => ({
 						...a.clickToken === void 0 ? {} : { clickToken: a.clickToken }
 					});
 					let o = r.filter((e) => e.status === "failed");
-					r.length === 0 || o.length < r.length ? u.push(e) : d.push({
+					r.length === 0 || o.length < r.length ? u.push(e) : p.push({
 						channel: e,
 						error: o[0]?.error ?? "all endpoints failed"
 					});
 				} catch (r) {
 					let a = r instanceof Error ? r.message : String(r);
-					d.push({
+					p.push({
 						channel: e,
 						error: a
 					}), await n.store.recordDelivery({
@@ -91,13 +119,13 @@ var n = (e) => ({
 				at: c()
 			};
 			try {
-				await a.deliver(f), u.push(e), await n.store.recordDelivery({
+				await a.deliver(m), u.push(e), await n.store.recordDelivery({
 					...o,
 					status: "sent"
 				});
 			} catch (t) {
 				let r = t instanceof Error ? t.message : String(t);
-				d.push({
+				p.push({
 					channel: e,
 					error: r
 				}), await n.store.recordDelivery({
@@ -109,12 +137,14 @@ var n = (e) => ({
 		}
 		return {
 			delivered: u,
-			failed: d,
+			failed: p,
 			skipped: l
 		};
-	}, d = async (e) => {
-		let r = await n.store.getQuietHours(e.to), o = new Date(c());
-		if (r && i(r, o)) return (r.policy ?? "hold") === "drop" ? {
+	}, m = async (e) => {
+		let r = structuredClone(e);
+		if (!await d(r)) return f();
+		let o = await n.store.getQuietHours(r.to), s = new Date(c());
+		if (o && i(o, s)) return (o.policy ?? "hold") === "drop" ? {
 			delivered: [],
 			failed: [],
 			skipped: [],
@@ -122,23 +152,23 @@ var n = (e) => ({
 		} : (await n.store.enqueueHeld({
 			id: t(),
 			kind: "quiet",
-			subjectId: e.to,
-			send: e,
-			flushAt: a(r, o).toISOString()
+			subjectId: r.to,
+			send: r,
+			flushAt: a(o, s).toISOString()
 		}), {
 			delivered: [],
 			failed: [],
 			skipped: [],
 			held: "quiet-held"
 		});
-		if (l > 0 && !e.channels) {
-			let r = (await n.store.pendingDigest(e.to))[0]?.flushAt ?? new Date(o.getTime() + l).toISOString();
+		if (l > 0 && !r.channels) {
+			let e = (await n.store.pendingDigest(r.to))[0]?.flushAt ?? new Date(s.getTime() + l).toISOString();
 			return await n.store.enqueueHeld({
 				id: t(),
 				kind: "digest",
-				subjectId: e.to,
-				send: e,
-				flushAt: r
+				subjectId: r.to,
+				send: r,
+				flushAt: e
 			}), {
 				delivered: [],
 				failed: [],
@@ -146,10 +176,10 @@ var n = (e) => ({
 				held: "digest"
 			};
 		}
-		return u(e);
+		return p(r);
 	};
 	return {
-		send: d,
+		send: m,
 		inbox: (e, t) => n.store.listInbox(e, t),
 		unreadCount: (e) => n.store.unreadCount(e),
 		markRead: (e, t) => n.store.markRead(e, t),
@@ -166,7 +196,7 @@ var n = (e) => ({
 		unsubscribe: (e, t) => n.store.unsubscribeTopic(e, t),
 		broadcast: async (e, t) => {
 			let r = await n.store.listTopicSubscribers(e), i = [];
-			for (let e of r) i.push(await d({
+			for (let e of r) i.push(await m({
 				...t,
 				to: e.subjectId,
 				tenantId: t.tenantId ?? e.tenantId ?? null
@@ -182,13 +212,17 @@ var n = (e) => ({
 		flushDue: async (e = new Date(c())) => {
 			let t = await n.store.dueHeld(e.toISOString());
 			if (t.length === 0) return 0;
-			for (let e of t.filter((e) => e.kind === "quiet")) await u(e.send);
+			for (let e of t.filter((e) => e.kind === "quiet")) await p(e.send);
 			let r = /* @__PURE__ */ new Map();
 			for (let e of t.filter((e) => e.kind === "digest")) {
-				let t = r.get(e.subjectId) ?? [];
-				t.push(e), r.set(e.subjectId, t);
+				if (e.send.deliveryGuard !== void 0) {
+					await p(e.send);
+					continue;
+				}
+				let t = JSON.stringify([e.send.tenantId ?? null, e.subjectId]), n = r.get(t) ?? [];
+				n.push(e), r.set(t, n);
 			}
-			for (let [e, t] of r) await u(s(e, t));
+			for (let e of r.values()) await p(s(e[0].subjectId, e));
 			return await n.store.clearHeld(t.map((e) => e.id)), t.length;
 		}
 	};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-notifications",
-  "version": "0.86.0",
+  "version": "0.87.0",
   "description": "One unified notification surface — email, Slack/webhook, SMS, push, in-app — with per-subject preference routing, an in-app inbox, and a delivery log. NotificationService + typed routes + useInbox/useUnreadCount hooks.",
   "keywords": [
     "voltro",
@@ -49,9 +49,9 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/client": "0.86.0",
-    "@voltro/database": "0.86.0",
-    "@voltro/protocol": "0.86.0"
+    "@voltro/client": "0.87.0",
+    "@voltro/database": "0.87.0",
+    "@voltro/protocol": "0.87.0"
   },
   "peerDependencies": {
     "effect": "4.0.1",