Obavijesti

Overview

• ProductionOperate · Notifications
  Tell the right person that something needs them, on whichever device they are using.

Pipeline

1. A domain change writes a notification in the same transaction.
2. A change bus fans it out to open clients; a one-minute drain decides at send time whether a push is still useful (expired, resolved, muted, quiet hours, already seen in a live tab) and sends one push per person per drain.
3. FCM, APNs and Web Push deliver to registered devices; email goes through the configured mail provider.
4. Reconciliation re-sends anything not acknowledged.

Data owned

Models and engines

This module makes no model calls. Everything it computes is deterministic code.

Guardrails

• Native push carries a generic category sentence; web push is sent without a payload, so there is nothing to leak.
• Tokens are encrypted at rest.
• No provider call runs inside a database transaction; drains work under a lease, so a crash re-sends at most once and the device collapses duplicates.

Rollout and status

• ProductionInbox, push, email
  Native push through Capacitor

Interfaces