@voltro/plugin-notifications 0.86.0 → 0.88.0

package/dist/sendNotification.js

@@ -1,5 +1,5 @@
 import { Schema as e } from "effect";
-//#region src/sendNotification.ts
+// src/sendNotification.ts
 var t = (e) => {
 	if (typeof e == "object" && e) {
 		let t = e;
@@ -38,5 +38,4 @@ var t = (e) => {
 		...i === void 0 ? {} : { tenantId: i }
 	};
 };
-//#endregion
 export { t as defaultRecipients, r as sendInputFor, n as sendNotification };

package/dist/service.js

@@ -1,6 +1,6 @@
 import { resolveChannels as e } from "./channels.js";
 import { randomUUID as t } from "node:crypto";
-//#region src/service.ts
+// src/service.ts
 var n = (e) => ({
 	id: "inApp",
 	deliver: async (n) => {
@@ -35,8 +35,32 @@ var n = (e) => ({
 	let n = r(t, e.tz ?? "UTC"), i = e.endMinute - n;
 	return i <= 0 && (i += 1440), new Date(t.getTime() + i * 6e4);
 }, o = (n) => {
-	let r = new Map(n.channels.map((e) => [e.id, e])), o = n.channels.map((e) => e.id), c = n.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()), l = n.digestWindowMs ?? 0, u = async (i) => {
-		let a = await n.store.getPreferences(i.to), s = e(o, i.category, i.channels, a, i.to), l = o.filter((e) => !s.includes(e)), u = [], d = [], f = {
+	let r = new Map(n.channels.map((e) => [e.id, e])), o = n.channels.map((e) => e.id), c = n.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()), l = n.digestWindowMs ?? 0, u = new Map(Object.entries(n.deliveryGuards ?? {}));
+	if (u.size > 256 || [...u].some(([e, t]) => !/^[a-z][a-zA-Z0-9._-]{0,127}$/.test(e) || typeof t != "function")) throw Error("Invalid notification delivery guard registry");
+	let d = async (e) => {
+		let t = e.deliveryGuard;
+		if (t === void 0) return !0;
+		if (!t || typeof t.id != "string" || !t.payload || typeof t.payload != "object" || Array.isArray(t.payload)) throw Error("Invalid notification delivery guard reference");
+		let n = u.get(t.id);
+		if (!n) throw Error("Notification delivery guard unavailable");
+		let r = JSON.stringify(t.payload);
+		if (typeof r != "string" || r.length > 8192) throw Error("Notification delivery guard payload exceeds budget");
+		let i = JSON.parse(r);
+		if (typeof i != "object" || !i || Array.isArray(i)) throw Error("Invalid notification delivery guard payload");
+		let a = await n({
+			recipientId: e.to,
+			tenantId: e.tenantId ?? null,
+			payload: i
+		});
+		if (a !== !0 && a !== !1) throw Error("Invalid notification delivery guard decision");
+		return a;
+	}, f = () => ({
+		delivered: [],
+		failed: [],
+		skipped: [...o]
+	}), p = async (i) => {
+		if (!await d(i)) return f();
+		let a = await n.store.getPreferences(i.to), s = e(o, i.category, i.channels, a, i.to), l = o.filter((e) => !s.includes(e)), u = [], p = [], m = {
 			to: i.to,
 			category: i.category,
 			title: i.title,
@@ -45,11 +69,15 @@ var n = (e) => ({
 			tenantId: i.tenantId ?? null
 		};
 		for (let e of s) {
+			if (!await d(i)) {
+				l.push(e);
+				continue;
+			}
 			let a = r.get(e);
 			if (!a) continue;
 			if (a.deliverDetailed !== void 0) {
 				try {
-					let r = await a.deliverDetailed(f);
+					let r = await a.deliverDetailed(m);
 					for (let a of r) await n.store.recordDelivery({
 						id: t(),
 						to: i.to,
@@ -62,13 +90,13 @@ var n = (e) => ({
 						...a.clickToken === void 0 ? {} : { clickToken: a.clickToken }
 					});
 					let o = r.filter((e) => e.status === "failed");
-					r.length === 0 || o.length < r.length ? u.push(e) : d.push({
+					r.length === 0 || o.length < r.length ? u.push(e) : p.push({
 						channel: e,
 						error: o[0]?.error ?? "all endpoints failed"
 					});
 				} catch (r) {
 					let a = r instanceof Error ? r.message : String(r);
-					d.push({
+					p.push({
 						channel: e,
 						error: a
 					}), await n.store.recordDelivery({
@@ -91,13 +119,13 @@ var n = (e) => ({
 				at: c()
 			};
 			try {
-				await a.deliver(f), u.push(e), await n.store.recordDelivery({
+				await a.deliver(m), u.push(e), await n.store.recordDelivery({
 					...o,
 					status: "sent"
 				});
 			} catch (t) {
 				let r = t instanceof Error ? t.message : String(t);
-				d.push({
+				p.push({
 					channel: e,
 					error: r
 				}), await n.store.recordDelivery({
@@ -109,12 +137,14 @@ var n = (e) => ({
 		}
 		return {
 			delivered: u,
-			failed: d,
+			failed: p,
 			skipped: l
 		};
-	}, d = async (e) => {
-		let r = await n.store.getQuietHours(e.to), o = new Date(c());
-		if (r && i(r, o)) return (r.policy ?? "hold") === "drop" ? {
+	}, m = async (e) => {
+		let r = structuredClone(e);
+		if (!await d(r)) return f();
+		let o = await n.store.getQuietHours(r.to), s = new Date(c());
+		if (o && i(o, s)) return (o.policy ?? "hold") === "drop" ? {
 			delivered: [],
 			failed: [],
 			skipped: [],
@@ -122,23 +152,23 @@ var n = (e) => ({
 		} : (await n.store.enqueueHeld({
 			id: t(),
 			kind: "quiet",
-			subjectId: e.to,
-			send: e,
-			flushAt: a(r, o).toISOString()
+			subjectId: r.to,
+			send: r,
+			flushAt: a(o, s).toISOString()
 		}), {
 			delivered: [],
 			failed: [],
 			skipped: [],
 			held: "quiet-held"
 		});
-		if (l > 0 && !e.channels) {
-			let r = (await n.store.pendingDigest(e.to))[0]?.flushAt ?? new Date(o.getTime() + l).toISOString();
+		if (l > 0 && !r.channels) {
+			let e = (await n.store.pendingDigest(r.to))[0]?.flushAt ?? new Date(s.getTime() + l).toISOString();
 			return await n.store.enqueueHeld({
 				id: t(),
 				kind: "digest",
-				subjectId: e.to,
-				send: e,
-				flushAt: r
+				subjectId: r.to,
+				send: r,
+				flushAt: e
 			}), {
 				delivered: [],
 				failed: [],
@@ -146,10 +176,10 @@ var n = (e) => ({
 				held: "digest"
 			};
 		}
-		return u(e);
+		return p(r);
 	};
 	return {
-		send: d,
+		send: m,
 		inbox: (e, t) => n.store.listInbox(e, t),
 		unreadCount: (e) => n.store.unreadCount(e),
 		markRead: (e, t) => n.store.markRead(e, t),
@@ -166,7 +196,7 @@ var n = (e) => ({
 		unsubscribe: (e, t) => n.store.unsubscribeTopic(e, t),
 		broadcast: async (e, t) => {
 			let r = await n.store.listTopicSubscribers(e), i = [];
-			for (let e of r) i.push(await d({
+			for (let e of r) i.push(await m({
 				...t,
 				to: e.subjectId,
 				tenantId: t.tenantId ?? e.tenantId ?? null
@@ -182,13 +212,17 @@ var n = (e) => ({
 		flushDue: async (e = new Date(c())) => {
 			let t = await n.store.dueHeld(e.toISOString());
 			if (t.length === 0) return 0;
-			for (let e of t.filter((e) => e.kind === "quiet")) await u(e.send);
+			for (let e of t.filter((e) => e.kind === "quiet")) await p(e.send);
 			let r = /* @__PURE__ */ new Map();
 			for (let e of t.filter((e) => e.kind === "digest")) {
-				let t = r.get(e.subjectId) ?? [];
-				t.push(e), r.set(e.subjectId, t);
+				if (e.send.deliveryGuard !== void 0) {
+					await p(e.send);
+					continue;
+				}
+				let t = JSON.stringify([e.send.tenantId ?? null, e.subjectId]), n = r.get(t) ?? [];
+				n.push(e), r.set(t, n);
 			}
-			for (let [e, t] of r) await u(s(e, t));
+			for (let e of r.values()) await p(s(e[0].subjectId, e));
 			return await n.store.clearHeld(t.map((e) => e.id)), t.length;
 		}
 	};
@@ -208,5 +242,4 @@ var n = (e) => ({
 		tenantId: t[0].send.tenantId ?? null
 	};
 };
-//#endregion
 export { o as buildNotificationService, n as inAppChannel, i as inQuietHours, r as minuteOfDayInZone, a as quietHoursEnd };

package/dist/store.js

@@ -1,5 +1,5 @@
 import { and as e, eq as t, generateId as n, isNull as r, lte as i } from "@voltro/database";
-//#region src/store.ts
+// src/store.ts
 var a = () => {
 	let e = [], t = /* @__PURE__ */ new Map(), n = [], r = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map(), a = [], o = (e) => `${e.subjectId}|${e.category}|${e.channel}`, s = (e, t) => `${e}|${t}`;
 	return {
@@ -299,5 +299,4 @@ var a = () => {
 		}
 	};
 };
-//#endregion
 export { s as dataStoreNotificationStore, a as memoryNotificationStore };

package/dist/web.js

@@ -2,7 +2,7 @@ import { BASE_NAME as e } from "./rpc.js";
 import { pluginTag as t } from "@voltro/protocol";
 import { useEffect as n, useState as r } from "react";
 import { useMutation as i, useSubscription as a } from "@voltro/client";
-//#region src/web.ts
+// src/web.ts
 var o = (n) => t(e, n), s = (e = {}, t = "app") => {
 	let { data: n } = a(t, o("inbox"), e);
 	return n ?? [];
@@ -95,5 +95,4 @@ var o = (n) => t(e, n), s = (e = {}, t = "app") => {
 		clear: () => n.mutate({})
 	};
 };
-//#endregion
 export { s as useInbox, l as useMarkRead, m as useQuietHours, u as useSetNotificationPreference, d as useTopicSubscription, c as useUnreadCount, p as useWebPush };

package/dist/webPush.js

@@ -1,7 +1,7 @@
 import { sendWebPush as e, vapidPublicKeyFor as t } from "./webPushProtocol.js";
 import { and as n, eq as r, generateId as i, id as a, table as o, text as s, timestamp as c } from "@voltro/database";
 import { createHash as l, randomBytes as u } from "node:crypto";
-//#region src/webPush.ts
+// src/webPush.ts
 var d = o("_voltro_notification_push_subscriptions", {
 	id: a({ prefix: "notifpush" }),
 	subjectId: s(),
@@ -157,5 +157,4 @@ var d = o("_voltro_notification_push_subscriptions", {
 	}
 	return a;
 }, D = (e) => t(b(e));
-//#endregion
 export { w as assertWebPushConfigured, v as bindWebPushStore, S as buildPushPayload, h as dataStorePushSubscriptionStore, f as endpointHashOf, p as memoryPushSubscriptionStore, d as pushSubscriptionsTable, y as resetWebPushStoreForTest, b as resolveVapidPrivateKey, _ as webPushCell, C as webPushChannel, D as webPushPublicKey };

package/dist/webPushProtocol.js

@@ -1,5 +1,5 @@
 import { createCipheriv as e, createDecipheriv as t, createECDH as n, createHmac as r, createPrivateKey as i, randomBytes as a, sign as o, timingSafeEqual as s } from "node:crypto";
-//#region src/webPushProtocol.ts
+// src/webPushProtocol.ts
 var c = (e) => e.toString("base64url"), l = (e) => Buffer.from(e, "base64url"), u = (e, t) => r("sha256", e).update(t).digest(), d = (e, t, n) => u(e, Buffer.concat([t, Buffer.from([1])])).subarray(0, n), f = () => {
 	let e = n("prime256v1");
 	return e.generateKeys(), c(p(e.getPrivateKey()));
@@ -113,5 +113,4 @@ var c = (e) => e.toString("base64url"), l = (e) => Buffer.from(e, "base64url"),
 	let n = Buffer.from(e), r = Buffer.from(t);
 	return n.length === r.length && s(n, r);
 };
-//#endregion
 export { T as clickTokenMatches, C as decryptWebPushPayload, S as encryptWebPushPayload, f as generateVapidPrivateKey, w as sendWebPush, _ as vapidAuthorization, h as vapidPublicKeyFor };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-notifications",
-  "version": "0.86.0",
+  "version": "0.88.0",
   "description": "One unified notification surface — email, Slack/webhook, SMS, push, in-app — with per-subject preference routing, an in-app inbox, and a delivery log. NotificationService + typed routes + useInbox/useUnreadCount hooks.",
   "keywords": [
     "voltro",
@@ -49,12 +49,12 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/client": "0.86.0",
-    "@voltro/database": "0.86.0",
-    "@voltro/protocol": "0.86.0"
+    "@voltro/client": "0.88.0",
+    "@voltro/database": "0.88.0",
+    "@voltro/protocol": "0.88.0"
   },
   "peerDependencies": {
-    "effect": "4.0.1",
+    "effect": "4.1.0",
     "react": "^19.0.0"
   },
   "publishConfig": {