hazo_notify 1.1.4 → 3.1.0

package/dist/{template_manager → lib/template_manager}/engine/variable_resolver.js

@@ -1,16 +1,16 @@
 /**
- * Variable resolver for template manager
+ * Variable resolver for template manager (v2.0.0)
  *
- * Resolves user variables, system variables, and @template references
+ * Resolves user variables, system variables, and @template references.
+ * Uses scope_chain (hierarchical scope resolution) instead of org_id.
  */
 import { TEMPLATE_REFERENCE_PATTERN, MAX_TEMPLATE_REFERENCE_DEPTH, ERROR_MESSAGES, } from '../config/constants.js';
 import { resolve_system_variables } from '../utils/system_variables.js';
 import { get_template_by_name } from '../db/template_repository.js';
 import { render_handlebars_string } from './handlebars_engine.js';
 /**
- * Merge user variables with system variables
- *
- * System variables take lower priority than user variables
+ * Merge user variables with system variables.
+ * System variables take lower priority than user variables.
  *
  * @param user_variables - Variables provided by user
  * @returns Merged variables with system variables
@@ -23,7 +23,7 @@ export function resolve_variables(user_variables) {
     };
 }
 /**
- * Extract @template references from content
+ * Extract @template references from content.
  *
  * @param content - Template content to scan
  * @returns Array of template names referenced
@@ -42,21 +42,19 @@ export function extract_template_references(content) {
     return Array.from(references);
 }
 /**
- * Resolve @template references in content
- *
- * Recursively fetches and renders referenced templates
+ * Resolve @template references in HTML content.
+ * Recursively fetches and renders referenced templates using the scope_chain.
  *
  * @param content - Template content with @references
  * @param variables - Variables to use for rendering
  * @param hazo_connect - Database connection
- * @param org_id - Organization ID
+ * @param scope_chain - Ordered scope chain, deepest first (see get_template_by_name)
  * @param visited - Set of already visited templates (for circular detection)
  * @param depth - Current recursion depth
  * @returns Resolved content with references replaced
  */
-export async function resolve_template_references(content, variables, hazo_connect, org_id, visited = new Set(), depth = 0) {
+export async function resolve_template_references(content, variables, hazo_connect, scope_chain, visited = new Set(), depth = 0) {
     try {
-        // Check max depth
         if (depth > MAX_TEMPLATE_REFERENCE_DEPTH) {
             return {
                 success: false,
@@ -74,7 +72,6 @@ export async function resolve_template_references(content, variables, hazo_conne
         }
         let resolved_content = content;
         for (const ref_name of references) {
-            // Check for circular reference
             if (visited.has(ref_name)) {
                 return {
                     success: false,
@@ -82,22 +79,18 @@ export async function resolve_template_references(content, variables, hazo_conne
                     message: `Circular reference detected: ${ref_name}`,
                 };
             }
-            // Fetch the referenced template
-            const template_result = await get_template_by_name(hazo_connect, org_id, ref_name);
+            const template_result = await get_template_by_name(hazo_connect, scope_chain, ref_name);
             if (!template_result.success || !template_result.data) {
-                // Template not found, leave reference as-is
+                // Template not found — leave reference as-is
                 continue;
             }
             const template = template_result.data;
             visited.add(ref_name);
-            // Recursively resolve any references in the fetched template
-            const nested_result = await resolve_template_references(template.template_html, variables, hazo_connect, org_id, new Set(visited), depth + 1);
+            const nested_result = await resolve_template_references(template.template_html, variables, hazo_connect, scope_chain, new Set(visited), depth + 1);
             if (!nested_result.success) {
                 return nested_result;
             }
-            // Render the fetched template with variables
             const rendered_ref = render_handlebars_string(nested_result.rendered_html || template.template_html, variables);
-            // Replace the @reference with rendered content
             const ref_pattern = new RegExp(`@${ref_name}\\b`, 'g');
             resolved_content = resolved_content.replace(ref_pattern, rendered_ref);
         }
@@ -117,24 +110,24 @@ export async function resolve_template_references(content, variables, hazo_conne
     }
 }
 /**
- * Resolve @template references for both HTML and text content
+ * Resolve @template references for both HTML and text content.
  *
  * @param html_content - HTML template content
  * @param text_content - Text template content
  * @param variables - Variables for rendering
  * @param hazo_connect - Database connection
- * @param org_id - Organization ID
+ * @param scope_chain - Ordered scope chain, deepest first
  * @returns Resolved HTML and text content
  */
-export async function resolve_all_template_references(html_content, text_content, variables, hazo_connect, org_id) {
+export async function resolve_all_template_references(html_content, text_content, variables, hazo_connect, scope_chain) {
     try {
-        // Resolve HTML references
-        const html_result = await resolve_template_references(html_content, variables, hazo_connect, org_id);
+        const [html_result, text_result] = await Promise.all([
+            resolve_template_references(html_content, variables, hazo_connect, scope_chain),
+            resolve_text_template_references(text_content, variables, hazo_connect, scope_chain),
+        ]);
         if (!html_result.success) {
             return html_result;
         }
-        // Resolve text references (fetch text version of templates)
-        const text_result = await resolve_text_template_references(text_content, variables, hazo_connect, org_id);
         if (!text_result.success) {
             return text_result;
         }
@@ -155,10 +148,10 @@ export async function resolve_all_template_references(html_content, text_content
     }
 }
 /**
- * Resolve @template references in text content
- * Uses template_text instead of template_html
+ * Resolve @template references in text content.
+ * Uses template_text instead of template_html.
  */
-async function resolve_text_template_references(content, variables, hazo_connect, org_id, visited = new Set(), depth = 0) {
+async function resolve_text_template_references(content, variables, hazo_connect, scope_chain, visited = new Set(), depth = 0) {
     try {
         if (depth > MAX_TEMPLATE_REFERENCE_DEPTH) {
             return {
@@ -184,14 +177,13 @@ async function resolve_text_template_references(content, variables, hazo_connect
                     message: `Circular reference detected: ${ref_name}`,
                 };
             }
-            const template_result = await get_template_by_name(hazo_connect, org_id, ref_name);
+            const template_result = await get_template_by_name(hazo_connect, scope_chain, ref_name);
             if (!template_result.success || !template_result.data) {
                 continue;
             }
             const template = template_result.data;
             visited.add(ref_name);
-            // Recursively resolve text template references
-            const nested_result = await resolve_text_template_references(template.template_text, variables, hazo_connect, org_id, new Set(visited), depth + 1);
+            const nested_result = await resolve_text_template_references(template.template_text, variables, hazo_connect, scope_chain, new Set(visited), depth + 1);
             if (!nested_result.success) {
                 return nested_result;
             }

package/dist/lib/template_manager/engine/variable_resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variable_resolver.js","sourceRoot":"","sources":["../../../../src/lib/template_manager/engine/variable_resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,cAAsC;IAEtC,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,OAAO;QACL,GAAG,WAAW;QACd,GAAG,cAAc,EAAE,2CAA2C;KAC/D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAe,EACf,SAAiC,EACjC,YAAiC,EACjC,WAAqB,EACrB,UAAuB,IAAI,GAAG,EAAE,EAChC,QAAgB,CAAC;IAEjB,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,4BAA4B,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc,CAAC,4BAA4B;gBAClD,OAAO,EAAE,cAAc,CAAC,4BAA4B;aACrD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,OAAO;gBACtB,OAAO,EAAE,mCAAmC;aAC7C,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAE/B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,cAAc,CAAC,2BAA2B;oBACjD,OAAO,EAAE,gCAAgC,QAAQ,EAAE;iBACpD,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAChD,YAAY,EACZ,WAAW,EACX,QAAQ,CACT,CAAC;YAEF,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;gBACtD,6CAA6C;gBAC7C,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEtB,MAAM,aAAa,GAAG,MAAM,2BAA2B,CACrD,QAAQ,CAAC,aAAa,EACtB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,IAAI,GAAG,CAAC,OAAO,CAAC,EAChB,KAAK,GAAG,CAAC,CACV,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,aAAa,CAAC;YACvB,CAAC;YAED,MAAM,YAAY,GAAG,wBAAwB,CAC3C,aAAa,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,EACrD,SAAS,CACV,CAAC;YAEF,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,IAAI,QAAQ,KAAK,EAAE,GAAG,CAAC,CAAC;YACvD,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACzE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,gBAAgB;YAC/B,OAAO,EAAE,2CAA2C;SACrD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,GACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,0CAA0C,aAAa,EAAE;SACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,YAAoB,EACpB,YAAoB,EACpB,SAAiC,EACjC,YAAiC,EACjC,WAAqB;IAErB,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,2BAA2B,CACzB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,WAAW,CACZ;YACD,gCAAgC,CAC9B,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,WAAW,CACZ;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,OAAO,EAAE,kCAAkC;SAC5C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,GACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,qCAAqC,aAAa,EAAE;SAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gCAAgC,CAC7C,OAAe,EACf,SAAiC,EACjC,YAAiC,EACjC,WAAqB,EACrB,UAAuB,IAAI,GAAG,EAAE,EAChC,QAAgB,CAAC;IAEjB,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,4BAA4B,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,cAAc,CAAC,4BAA4B;gBAClD,OAAO,EAAE,cAAc,CAAC,4BAA4B;aACrD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAExD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,OAAO;gBACtB,OAAO,EAAE,mCAAmC;aAC7C,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAE/B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,cAAc,CAAC,2BAA2B;oBACjD,OAAO,EAAE,gCAAgC,QAAQ,EAAE;iBACpD,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAChD,YAAY,EACZ,WAAW,EACX,QAAQ,CACT,CAAC;YAEF,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEtB,MAAM,aAAa,GAAG,MAAM,gCAAgC,CAC1D,QAAQ,CAAC,aAAa,EACtB,SAAS,EACT,YAAY,EACZ,WAAW,EACX,IAAI,GAAG,CAAC,OAAO,CAAC,EAChB,KAAK,GAAG,CAAC,CACV,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,aAAa,CAAC;YACvB,CAAC;YAED,MAAM,YAAY,GAAG,wBAAwB,CAC3C,aAAa,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,EACrD,SAAS,CACV,CAAC;YAEF,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,IAAI,QAAQ,KAAK,EAAE,GAAG,CAAC,CAAC;YACvD,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACzE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,gBAAgB;YAC/B,OAAO,EAAE,gDAAgD;SAC1D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,GACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,sCAAsC,aAAa,EAAE;SAC/D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/template_manager/handlers/adapters/hazo_auth.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Convenience adapter wiring hazo_auth's `hazo_get_tenant_auth` into the
+ * template-manager auth wrapper.
+ *
+ * hazo_auth is dynamic-imported so it stays an OPTIONAL peer dependency of
+ * hazo_notify — apps that authenticate differently can implement
+ * `TemplateManagerAuthAdapter` themselves without installing hazo_auth.
+ */
+import 'server-only';
+import type { TemplateManagerAuthAdapter } from '../auth.js';
+export interface CreateHazoAuthAdapterOptions {
+    scoped_permission?: string;
+    global_permission?: string;
+}
+/**
+ * Resolve the hazo_auth adapter. Throws a clear error if hazo_auth is not
+ * installed in the consuming app.
+ */
+export declare function create_hazo_auth_adapter(options?: CreateHazoAuthAdapterOptions): Promise<TemplateManagerAuthAdapter>;
+//# sourceMappingURL=hazo_auth.d.ts.map

package/dist/lib/template_manager/handlers/adapters/hazo_auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hazo_auth.d.ts","sourceRoot":"","sources":["../../../../../src/lib/template_manager/handlers/adapters/hazo_auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,4BAA4B;IAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAWD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,0BAA0B,CAAC,CAiCrC"}

package/dist/lib/template_manager/handlers/adapters/hazo_auth.js

@@ -0,0 +1,46 @@
+/**
+ * Convenience adapter wiring hazo_auth's `hazo_get_tenant_auth` into the
+ * template-manager auth wrapper.
+ *
+ * hazo_auth is dynamic-imported so it stays an OPTIONAL peer dependency of
+ * hazo_notify — apps that authenticate differently can implement
+ * `TemplateManagerAuthAdapter` themselves without installing hazo_auth.
+ */
+import 'server-only';
+// hazo_auth re-exports template_manager types from hazo_notify itself. Resolving
+// the import path statically would make tsc follow that chain back through the
+// workspace symlink to this package's own dist/.d.ts files, triggering TS5055
+// "would overwrite input file" errors on every rebuild after the first. We
+// defeat constant-folding by passing the spec through a variable that's only
+// computed at runtime — tsc treats it as `Promise<any>` and never resolves the
+// types, while Node still imports it normally at the consumer site.
+const HAZO_AUTH_PKG = ['hazo_auth', 'server-lib'].join('/');
+/**
+ * Resolve the hazo_auth adapter. Throws a clear error if hazo_auth is not
+ * installed in the consuming app.
+ */
+export async function create_hazo_auth_adapter(options) {
+    let mod;
+    try {
+        mod = (await import(HAZO_AUTH_PKG));
+    }
+    catch (err) {
+        throw new Error("hazo_notify/template_manager_handlers/hazo_auth requires the optional peer 'hazo_auth' to be installed. Install it or supply a custom TemplateManagerAuthAdapter.");
+    }
+    const hazo_get_tenant_auth = mod.hazo_get_tenant_auth;
+    return {
+        scoped_permission: options?.scoped_permission ?? 'notify_templates_admin',
+        global_permission: options?.global_permission ?? 'notify_templates_super_admin',
+        resolve: async (request, required_permission) => {
+            const r = (await hazo_get_tenant_auth(request, {
+                required_permissions: [required_permission],
+            }));
+            return {
+                authenticated: r.authenticated,
+                permission_ok: r.permission_ok,
+                organization_id: r.organization_id ?? null,
+            };
+        },
+    };
+}
+//# sourceMappingURL=hazo_auth.js.map

package/dist/lib/template_manager/handlers/adapters/hazo_auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hazo_auth.js","sourceRoot":"","sources":["../../../../../src/lib/template_manager/handlers/adapters/hazo_auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,aAAa,CAAC;AASrB,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAsC;IAEtC,IAAI,GAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAEjC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mKAAmK,CACpK,CAAC;IACJ,CAAC;IAED,MAAM,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAEtD,OAAO;QACL,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,wBAAwB;QACzE,iBAAiB,EACf,OAAO,EAAE,iBAAiB,IAAI,8BAA8B;QAC9D,OAAO,EAAE,KAAK,EAAE,OAAoB,EAAE,mBAA2B,EAAE,EAAE;YACnE,MAAM,CAAC,GAAG,CAAC,MAAM,oBAAoB,CAAC,OAAO,EAAE;gBAC7C,oBAAoB,EAAE,CAAC,mBAAmB,CAAC;aAC5C,CAAC,CAID,CAAC;YACF,OAAO;gBACL,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;aAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/template_manager/handlers/auth.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Pluggable auth wrapper for the template-manager admin route handlers.
+ *
+ * The wrapper resolves whether the request is in "global" view (`?view=global`)
+ * or scoped (per-tenant), checks the matching permission via the supplied
+ * `TemplateManagerAuthAdapter`, and on success calls the wrapped handler with
+ * `{ scope_id, is_global }` and any URL params.
+ *
+ * hazo_notify intentionally has NO direct dependency on hazo_auth — consumers
+ * supply an adapter. A convenience adapter for hazo_auth ships at
+ * `hazo_notify/template_manager_handlers/hazo_auth` (dynamic-imported, so
+ * apps that don't use hazo_auth aren't forced to install it).
+ */
+import 'server-only';
+import { NextRequest, NextResponse } from 'next/server';
+export interface TemplateManagerAuth {
+    scope_id: string | null;
+    is_global: boolean;
+}
+export interface TemplateManagerAuthAdapterResult {
+    authenticated: boolean;
+    permission_ok: boolean;
+    organization_id?: string | null;
+}
+export interface TemplateManagerAuthAdapter {
+    /**
+     * Resolve auth for the request against the named permission. Mirrors the
+     * shape of hazo_auth's `hazo_get_tenant_auth`.
+     */
+    resolve: (request: NextRequest, required_permission: string) => Promise<TemplateManagerAuthAdapterResult>;
+    /** Permission required for scoped (per-tenant) admin. */
+    scoped_permission: string;
+    /** Permission required for global (super-admin) admin. */
+    global_permission: string;
+}
+export type TemplateManagerHandler<P = Record<string, never>> = (request: NextRequest, auth: TemplateManagerAuth, params: P) => Promise<NextResponse>;
+interface RouteContext<P> {
+    params: P | Promise<P>;
+}
+/**
+ * Build a `with_template_auth` higher-order handler bound to the supplied
+ * adapter and CORS headers. The returned function wraps a route handler
+ * with auth, scope resolution and consistent error responses.
+ */
+export declare function create_with_template_auth(adapter: TemplateManagerAuthAdapter, cors_headers?: HeadersInit): <P = Record<string, never>>(handler: TemplateManagerHandler<P>) => (request: NextRequest, context?: RouteContext<P>) => Promise<NextResponse>;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/template_manager/handlers/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/lib/template_manager/handlers/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,OAAO,EAAE,CACP,OAAO,EAAE,WAAW,EACpB,mBAAmB,EAAE,MAAM,KACxB,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC/C,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,sBAAsB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAC9D,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,CAAC,KACN,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B,UAAU,YAAY,CAAC,CAAC;IACtB,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACxB;AAgBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,EACnC,YAAY,GAAE,WAAgB,IAKK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAC1D,SAAS,sBAAsB,CAAC,CAAC,CAAC,MAGhC,SAAS,WAAW,EACpB,UAAU,YAAY,CAAC,CAAC,CAAC,KACxB,OAAO,CAAC,YAAY,CAAC,CAoC3B"}

package/dist/lib/template_manager/handlers/auth.js

@@ -0,0 +1,67 @@
+/**
+ * Pluggable auth wrapper for the template-manager admin route handlers.
+ *
+ * The wrapper resolves whether the request is in "global" view (`?view=global`)
+ * or scoped (per-tenant), checks the matching permission via the supplied
+ * `TemplateManagerAuthAdapter`, and on success calls the wrapped handler with
+ * `{ scope_id, is_global }` and any URL params.
+ *
+ * hazo_notify intentionally has NO direct dependency on hazo_auth — consumers
+ * supply an adapter. A convenience adapter for hazo_auth ships at
+ * `hazo_notify/template_manager_handlers/hazo_auth` (dynamic-imported, so
+ * apps that don't use hazo_auth aren't forced to install it).
+ */
+import 'server-only';
+import { NextResponse } from 'next/server';
+async function resolve_params(context) {
+    if (!context)
+        return {};
+    const p = context.params;
+    return (p && typeof p.then === 'function'
+        ? await p
+        : p);
+}
+function is_global_view(request) {
+    return new URL(request.url).searchParams.get('view') === 'global';
+}
+/**
+ * Build a `with_template_auth` higher-order handler bound to the supplied
+ * adapter and CORS headers. The returned function wraps a route handler
+ * with auth, scope resolution and consistent error responses.
+ */
+export function create_with_template_auth(adapter, cors_headers = {}) {
+    const unauth = (status, body) => NextResponse.json(body, { status, headers: cors_headers });
+    return function with_template_auth(handler) {
+        return async (request, context) => {
+            const params = await resolve_params(context);
+            const is_global = is_global_view(request);
+            const required = is_global
+                ? adapter.global_permission
+                : adapter.scoped_permission;
+            const auth_result = await adapter.resolve(request, required);
+            if (!auth_result.authenticated) {
+                return unauth(401, {
+                    error: 'Authentication required',
+                    code: 'UNAUTHENTICATED',
+                });
+            }
+            if (!auth_result.permission_ok) {
+                return unauth(403, {
+                    error: 'Insufficient permissions',
+                    code: 'FORBIDDEN',
+                });
+            }
+            const scope_id = is_global
+                ? null
+                : auth_result.organization_id ?? null;
+            if (!is_global && !scope_id) {
+                return unauth(403, {
+                    error: 'Organization context required',
+                    code: 'TENANT_REQUIRED',
+                });
+            }
+            return handler(request, { scope_id, is_global }, params);
+        };
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/template_manager/handlers/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/lib/template_manager/handlers/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,aAAa,CAAC;AACrB,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAC;AAsCxD,KAAK,UAAU,cAAc,CAC3B,OAAoC;IAEpC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAO,CAAC;IAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,CAAC,CAAC,IAAI,OAAQ,CAAgB,CAAC,IAAI,KAAK,UAAU;QACvD,CAAC,CAAC,MAAM,CAAC;QACT,CAAC,CAAC,CAAC,CAAM,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,OAAoB;IAC1C,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAmC,EACnC,eAA4B,EAAE;IAE9B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,IAA6B,EAAE,EAAE,CAC/D,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAE7D,OAAO,SAAS,kBAAkB,CAChC,OAAkC;QAElC,OAAO,KAAK,EACV,OAAoB,EACpB,OAAyB,EACF,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,SAAS;gBACxB,CAAC,CAAC,OAAO,CAAC,iBAAiB;gBAC3B,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAE9B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAE7D,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,GAAG,EAAE;oBACjB,KAAK,EAAE,yBAAyB;oBAChC,IAAI,EAAE,iBAAiB;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,GAAG,EAAE;oBACjB,KAAK,EAAE,0BAA0B;oBACjC,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,SAAS;gBACxB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,WAAW,CAAC,eAAe,IAAI,IAAI,CAAC;YAExC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC,GAAG,EAAE;oBACjB,KAAK,EAAE,+BAA+B;oBACtC,IAAI,EAAE,iBAAiB;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/template_manager/handlers/index.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Mountable route-handler factory for the template-manager admin UI.
+ *
+ * v3.1.0 lifts the test-app's route handlers + auth wrapper into a single
+ * factory that consumers wire up with three lines:
+ *
+ * ```ts
+ * // app/api/template_manager/[...path]/route.ts
+ * import { create_template_manager_handlers } from 'hazo_notify/template_manager_handlers';
+ * import { create_hazo_auth_adapter } from 'hazo_notify/template_manager_handlers/hazo_auth';
+ * import { get_db } from '@/lib/db';
+ *
+ * export const dynamic = 'force-dynamic';
+ *
+ * const handlers = create_template_manager_handlers({
+ *   hazo_connect_factory: () => get_db(),
+ *   auth: await create_hazo_auth_adapter(),
+ * });
+ *
+ * export const { GET, POST, PUT, PATCH, DELETE, OPTIONS } = handlers;
+ * ```
+ *
+ * Routes handled (relative to mount point):
+ *   GET    /categories                       list categories
+ *   POST   /categories                       create category
+ *   GET    /categories/:id                   get category
+ *   PUT    /categories/:id                   update category (PATCH alias)
+ *   DELETE /categories/:id                   delete category
+ *   GET    /templates                        list templates (?category_id filters)
+ *   POST   /templates                        create template
+ *   GET    /templates/:id                    get template
+ *   PUT    /templates/:id                    update template (PATCH alias)
+ *   DELETE /templates/:id                    delete template
+ *   GET    /types                            list registered template types
+ */
+import 'server-only';
+import { NextRequest, NextResponse } from 'next/server';
+import type { HazoConnectInstance } from '../types.js';
+import { type TemplateManagerAuthAdapter } from './auth.js';
+export type { TemplateManagerAuth, TemplateManagerAuthAdapter, TemplateManagerAuthAdapterResult, TemplateManagerHandler, } from './auth.js';
+export { create_with_template_auth } from './auth.js';
+export interface TemplateManagerHandlersOptions {
+    /**
+     * Returns the hazo_connect instance to use for this request. Called per
+     * request so the consumer can short-circuit to a singleton or per-request
+     * connection as appropriate.
+     */
+    hazo_connect_factory: () => Promise<HazoConnectInstance> | HazoConnectInstance;
+    /** Auth adapter (see `create_hazo_auth_adapter` for the hazo_auth default). */
+    auth: TemplateManagerAuthAdapter;
+    /**
+     * CORS headers to attach to every response. Defaults to building from
+     * `cors_allowed_origins` in `hazo_notify_config.ini` (wildcard if missing).
+     * Pass a function to recompute per request.
+     */
+    cors_headers?: HeadersInit | (() => HeadersInit);
+}
+export interface TemplateManagerHandlers {
+    GET: (request: NextRequest, ctx?: unknown) => Promise<NextResponse>;
+    POST: (request: NextRequest, ctx?: unknown) => Promise<NextResponse>;
+    PUT: (request: NextRequest, ctx?: unknown) => Promise<NextResponse>;
+    PATCH: (request: NextRequest, ctx?: unknown) => Promise<NextResponse>;
+    DELETE: (request: NextRequest, ctx?: unknown) => Promise<NextResponse>;
+    OPTIONS: () => Promise<NextResponse>;
+}
+export declare function create_template_manager_handlers(options: TemplateManagerHandlersOptions): TemplateManagerHandlers;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/template_manager/handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/template_manager/handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkBxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAKtD,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,oBAAoB,EAAE,MAClB,OAAO,CAAC,mBAAmB,CAAC,GAC5B,mBAAmB,CAAC;IACxB,+EAA+E;IAC/E,IAAI,EAAE,0BAA0B,CAAC;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACrE,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACvE,OAAO,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;CACtC;AAmCD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,8BAA8B,GACtC,uBAAuB,CAmRzB"}