snapshot: preserve role-aware notification preferences and operational alerts

backend/workflows/models.py

@@ -28,6 +28,29 @@ class EmployeeProfile(models.Model):
 
 
 class UserProfile(models.Model):
+    NOTIFICATION_ONBOARDING_SUCCESS = 'onboarding_success'
+    NOTIFICATION_ONBOARDING_FAILURE = 'onboarding_failure'
+    NOTIFICATION_OFFBOARDING_SUCCESS = 'offboarding_success'
+    NOTIFICATION_OFFBOARDING_FAILURE = 'offboarding_failure'
+    NOTIFICATION_BACKUP_SUCCESS = 'backup_success'
+    NOTIFICATION_BACKUP_FAILURE = 'backup_failure'
+    NOTIFICATION_WELCOME_EMAIL_SUCCESS = 'welcome_email_success'
+    NOTIFICATION_WELCOME_EMAIL_FAILURE = 'welcome_email_failure'
+    NOTIFICATION_TRIAL_ALERTS = 'trial_alerts'
+    NOTIFICATION_SYSTEM_ALERTS = 'system_alerts'
+    NOTIFICATION_PREFERENCE_DEFAULTS = {
+        NOTIFICATION_ONBOARDING_SUCCESS: True,
+        NOTIFICATION_ONBOARDING_FAILURE: True,
+        NOTIFICATION_OFFBOARDING_SUCCESS: True,
+        NOTIFICATION_OFFBOARDING_FAILURE: True,
+        NOTIFICATION_BACKUP_SUCCESS: True,
+        NOTIFICATION_BACKUP_FAILURE: True,
+        NOTIFICATION_WELCOME_EMAIL_SUCCESS: True,
+        NOTIFICATION_WELCOME_EMAIL_FAILURE: True,
+        NOTIFICATION_TRIAL_ALERTS: True,
+        NOTIFICATION_SYSTEM_ALERTS: True,
+    }
+
     user = models.OneToOneField(settings.AUTH_USER_MODEL, on_delete=models.CASCADE, related_name='profile')
     avatar_image = models.FileField(
         upload_to='profiles/',
@@ -45,6 +68,7 @@ class UserProfile(models.Model):
     totp_enabled = models.BooleanField(default=False)
     totp_confirmed_at = models.DateTimeField(null=True, blank=True)
     totp_recovery_codes = models.JSONField(default=list, blank=True)
+    notification_preferences = models.JSONField(default=dict, blank=True)
     updated_at = models.DateTimeField(auto_now=True)
 
     class Meta:
@@ -84,6 +108,55 @@ class UserProfile(models.Model):
             self.save(update_fields=['totp_recovery_codes', 'updated_at'])
         return matched
 
+    def get_notification_preferences(self) -> dict[str, bool]:
+        current = self.notification_preferences or {}
+        prefs = dict(self.NOTIFICATION_PREFERENCE_DEFAULTS)
+        for key in prefs:
+            if key in current:
+                prefs[key] = bool(current[key])
+        return prefs
+
+    def notification_enabled(self, event_key: str) -> bool:
+        return bool(self.get_notification_preferences().get(event_key, True))
+
+
+class UserNotification(models.Model):
+    LEVEL_INFO = 'info'
+    LEVEL_SUCCESS = 'success'
+    LEVEL_WARNING = 'warning'
+    LEVEL_ERROR = 'error'
+    LEVEL_CHOICES = [
+        (LEVEL_INFO, _('Info')),
+        (LEVEL_SUCCESS, _('Erfolg')),
+        (LEVEL_WARNING, _('Warnung')),
+        (LEVEL_ERROR, _('Fehler')),
+    ]
+
+    user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE, related_name='notifications')
+    title = models.CharField(max_length=255)
+    body = models.TextField(blank=True, default='')
+    level = models.CharField(max_length=20, choices=LEVEL_CHOICES, default=LEVEL_INFO)
+    link_url = models.CharField(max_length=500, blank=True, default='')
+    created_at = models.DateTimeField(auto_now_add=True)
+    read_at = models.DateTimeField(null=True, blank=True)
+
+    class Meta:
+        ordering = ['-created_at', '-id']
+        verbose_name = 'User Notification'
+        verbose_name_plural = 'User Notifications'
+
+    def __str__(self) -> str:
+        return f'{self.user_id} | {self.level} | {self.title}'
+
+    @property
+    def is_unread(self) -> bool:
+        return self.read_at is None
+
+    def mark_read(self) -> None:
+        if self.read_at is None:
+            self.read_at = timezone.now()
+            self.save(update_fields=['read_at'])
+
 
 class PortalBranding(models.Model):
     name = models.CharField(max_length=80, default='Default', unique=True)