Notification classes & preferences, credentials as first-class records, and a worker that fits - #290

Merged

important-new merged 48 commits into

InspectorHub:mainfrom

important-new:feat/notification-classes-and-preferences

Aug 1, 2026

Commits on Jul 31, 2026

feat(notifications): one class vocabulary, and 8 templates a tenant could wrongly disable

important-new
and
claude
committed
6aecf98
feat(notifications): the send boundary now knows what it is sending

important-new
and
claude
committed
4ca4b31
feat(notifications): the three hand-built sends become templates

important-new
and
claude
committed
e4f0770
refactor(sms): one gate chain, and the two test sends now run it

important-new
and
claude
committed
fe60d47
feat(notifications): a gate, because auditing found what auditing could miss

important-new
and
claude
committed
459f444
perf(gates): cache a gate on what it read, so running it twice costs nothing

important-new
and
claude
committed
c6051ff
feat(notifications): the preferences table, shaped by the constraint that has to hold

important-new
and
claude
committed
5bfaa7e
feat(notifications): preferences enforced where the send happens

important-new
and
claude
committed
cc4adc8
refactor(notifications): withdraw the fourth category, add recipientFacing

important-new
and
claude
committed
9eda941
feat(notifications): every seeded automation rule now says what it is

important-new
and
claude
committed
7d9d04f
test(notifications): pin the two consequences D3 and D5 accepted

important-new
and
claude
committed
92f51fb
feat(notifications): in-app honours the same preference decision

important-new
and
claude
committed
124d84b
feat(notifications): §2's "Who" column, and the model the screen renders

important-new
and
claude
committed
6d9d410
feat(notifications): the preferences screen component, and two test packages

important-new
and
claude
committed
5c6e6d3
feat(notifications): the preferences API, and a refusal the tests found

important-new
and
claude
committed
49e954e
feat(notifications): per-recipient preference screens for staff, agent and client

important-new
and
claude
committed
951674d
feat(notifications): bulk row/column actions, and honour preferences on SMS

important-new
and
claude
committed
cb896c1
feat(notifications): the screen offers every channel, always

important-new
and
claude
committed
91b1630
feat(notifications): SMS consent block, and spec §4.2 for what a channel switch means

important-new
and
claude
committed
9ff5812
feat(notifications): consent is the gate — inline grant, and a locked Text column

important-new
and
claude
committed
be1c4d5
feat(sms): staff can STOP — a consent ledger keyed on a subject, not a contact

important-new
and
claude
committed
be6efd4
feat(sms): staff and agents can turn texts back on — one surface, one contract

important-new
and
claude
committed
828dfc8
fix(profile): credentials are visible when added, and reach the signature

important-new
and
claude
committed
44bfaa4
fix(agent): a session ends at the door it was opened at

important-new
and
claude
committed
c741992
feat(notifications): a page to link to, for a reader who is not signed in

important-new
and
claude
committed
228edd3
feat(legal): a tenant's Privacy and Terms now have a history

important-new
and
claude
committed
1671b9a
fix(credentials): the badges now reach the recipient, not just the preview

important-new
and
claude
committed
5f84d7f
refactor(settings): a button means submit; its absence means it saved

important-new
and
claude
committed
7331a46
feat(reports): a published version renders what it froze

important-new
and
claude
committed
20e1ae8
feat(credentials): the state license becomes a credential row

important-new
and
claude
committed
fa310eb
feat(credentials): retire users.license_number; the section is now Licenses & affiliations

important-new
and
claude
committed
47b7b05
chore: drop exports nothing imports

important-new
and
claude
committed
fdccf68
chore(deps): drop @testing-library/user-event — nothing imports it

important-new
and
claude
committed
202061e
fix(schema): notification_preferences.enabled -> is_enabled

important-new
and
claude
committed
9321deb
fix(reports): one person, one source — the pinned name and licence too

important-new
and
claude
committed
4499026
feat(gates): enforce the agent- route prefix that loginPathFor depends on

important-new
and
claude
committed
bf35b7c

Commits on Aug 1, 2026

fix(ui): three things only a browser could show

important-new
and
claude
committed
fe55a32
perf(credentials): serve badges at the size they are actually drawn

important-new
and
claude
committed
bcef1ea
fix(settings): the signature card, and two controls that looked broken

important-new
and
claude
committed
6ad893a
feat(settings): one cropper for every image on the profile page

important-new
and
claude
committed
f0e6e80
fix(editor): auto-sign now applies to the publish it was ticked for

important-new
and
claude
committed
b948a46
feat(reports): a delivered report renders what it froze (option A)

important-new
and
claude
committed
41d736b
feat(editor): the rehearsal must be as reachable as the performance

important-new
and
claude
committed
94f8aed
fix(editor): drop the unused HeaderOverflowKey export

important-new
and
claude
committed
5c261fa
feat(credentials): drop the licence column, name the badge rule, finish on a phone

important-new
and
claude
committed
2201c7e
fix(migrations): repair the drizzle meta chain, and gate it

important-new
and
claude
committed
d6781aa
build: minify the worker — 100.8% of the Free script limit down to 57.9%

important-new
and
claude
committed
a78e0cb
fix(tests): three suites that only CI could fail, and one that pinned the old door

important-new
and
claude
committed
ee5bfbc