Files
Epicure/apps/web/lib/notifications.ts
T
Arnaud c5e1643d39 feat: per-category email prefs, admin ops webhooks, per-user feature toggles (v0.61.0)
- Notification email preferences: every push category (follow, comment,
  reply, reaction, rating, mention, leftoverExpiring, shoppingList) now has
  an independent email toggle, plus a Weekly Digest toggle. Previously email
  sent unconditionally whenever the recipient had one; now gated the same
  way push already was. The weekly-digest cron route excludes opted-out
  users.

- Admin-only site-wide webhooks (Admin → Webhooks): new signups, support
  tickets, and reports filed can now fire an HMAC-signed HTTP webhook
  (Slack/Discord/ops alerting), independent of the existing per-user
  webhooks (which stay scoped to a user's own recipe/meal-plan/shopping-list
  events). Signing/delivery logic factored into lib/webhook-delivery.ts and
  shared by both dispatchers instead of duplicated.

- Settings → Features: users can hide Nutrition, Pantry, Meal Plan,
  Shopping Lists, Collections, or Messages from their own nav. Purely
  cosmetic — hidden pages stay reachable by direct link, nothing is
  access-restricted.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-20 23:07:28 +02:00

96 lines
3.3 KiB
TypeScript

import { db, notifications, users, recipes, eq } from "@epicure/db";
import { randomUUID } from "crypto";
import { sendPushNotification } from "./push";
import { sendEmail, notificationEmailHtml } from "./email";
import { getMessages, formatMessage } from "./i18n/server";
import { isNotificationCategoryEnabled, isEmailCategoryEnabled } from "./notification-prefs";
type NotificationType = "follow" | "comment" | "reply" | "reaction" | "rating" | "mention";
type CreateNotificationOpts = {
userId: string;
type: NotificationType;
actorId: string;
recipeId?: string;
commentId?: string;
/** Rating score (1-5), only relevant for type "rating" — included in the push/email copy. */
score?: number;
};
export async function createNotification(opts: CreateNotificationOpts): Promise<void> {
if (opts.userId === opts.actorId) return; // never notify yourself
await db.insert(notifications).values({
id: randomUUID(),
userId: opts.userId,
type: opts.type,
actorId: opts.actorId,
recipeId: opts.recipeId,
commentId: opts.commentId,
});
// Push + email are best-effort side effects — never let a slow/failing SMTP
// or push provider delay or break the caller (which already does `void
// createNotification(...)`). Fire-and-forget from here too.
void dispatchAlerts(opts).catch((err) => {
console.error("[notifications] failed to dispatch push/email", err);
});
}
async function dispatchAlerts(opts: CreateNotificationOpts): Promise<void> {
const [actor, recipient, recipe] = await Promise.all([
db.query.users.findFirst({
where: eq(users.id, opts.actorId),
columns: { name: true, username: true },
}),
db.query.users.findFirst({
where: eq(users.id, opts.userId),
columns: { email: true, locale: true },
}),
opts.recipeId
? db.query.recipes.findFirst({
where: eq(recipes.id, opts.recipeId),
columns: { title: true },
})
: Promise.resolve(undefined),
]);
if (!actor || !recipient) return;
const messages = getMessages(recipient.locale);
const n = messages.notifications as Record<string, unknown>;
const detail = (n["detail"] ?? {}) as Record<string, string>;
const pushTitle = (n["pushTitle"] ?? {}) as Record<string, string>;
const template = detail[opts.type] ?? (n[opts.type] as string | undefined);
if (!template) return;
const body = formatMessage(template, {
name: actor.name,
title: recipe?.title ?? "",
stars: opts.score != null ? String(opts.score) : "",
});
const title = pushTitle[opts.type] ?? "Epicure";
const url = opts.type === "follow"
? (actor.username ? `/u/${actor.username}` : "/")
: opts.recipeId ? `/recipes/${opts.recipeId}` : "/";
if (await isNotificationCategoryEnabled(opts.userId, opts.type)) {
void sendPushNotification(opts.userId, { title, body, url }).catch((err) => {
console.error("[notifications] push failed", err);
});
}
if (recipient.email && (await isEmailCategoryEnabled(opts.userId, opts.type))) {
const baseUrl = process.env["BETTER_AUTH_URL"] ?? "http://localhost:3000";
void sendEmail({
to: recipient.email,
subject: title,
html: notificationEmailHtml(title, body, `${baseUrl}${url}`),
}).catch((err) => {
console.error("[notifications] email failed", err);
});
}
}