Skip to content

Platform Phase A Built

Status: Built · Owner: Platform / Signal squad · Phase: 2 · Last reviewed: 2026-06-15

ChainLink
RoadmapPhase 2
URDURD
PRDPRD-ACT-001 · PRD-AST-001 · PRD-IDX-001
Decisions (ADR)-
Plan-
Dev docs@nx/signal
RunbookOperations
Delivery logTraceability matrix

Platform is KICKO's cross-cutting realtime backbone. It turns a noteworthy domain activity - a payment clearing, an order completing - into a durable, per-person notification and pushes it to the right user's screen the instant it happens, over a private, end-to-end-encrypted channel. Services produce activities; the platform decides who hears about them and delivers them live.

1. Identity

PropertyValue
Module IDCORE-16
TierCore
StatusBuilt
PhaseP2
PriorityHIGH
Primary usersOwner, Manager, Staff, Platform operator

2. Purpose & Scope

IncludedExcluded
Event-driven activity-notification pipeline (consume → resolve → render → persist → push)Email / SMS / push-notification channels
Recipient resolution by organization / merchant / explicit-user scopePer-user notification preferences, mute, or subscriptions
Self-scoped notification read API (list, count, mark-one-read, mark-all-read)The producing services' own activity logic
Authenticated, end-to-end-encrypted realtime WebSocket deliveryNotification bell / activity-feed UI styling
Stable per-recipient room + topic contract, cross-instance fan-outCross-tenant room authorization hardening (known follow-up)
Administrative transport controls (status, list, send, broadcast, disconnect)-

3. Capabilities

CapabilityWhat the user can do
Activity-notification pipelineTurn an activity event into one durable notification per resolved recipient
Scoped recipient resolutionFan one activity out to an organization, a merchant, or an explicit user list (actor fallback)
Self-scoped read APIList, count (incl. unread), mark-one-read and mark-all-read - only your own notifications
Live pushReceive a new notification on your private channel the instant it is created
Encrypted transportConnect over an authenticated (JWT) socket with ECDH key exchange and end-to-end encryption
Cross-instance deliveryBe reached wherever your socket is connected, via Redis-backed fan-out
Resilient deliveryKeep every notification durably even if your socket is down; read it later via the API
Admin transport controlsInspect connection status, list / get clients, broadcast, send-to-room / client, disconnect

4. Module Dependencies

Depends onWhy
CommerceOrganization / merchant membership drives recipient resolution
PermissionsMembership lookup for scope; admin transport controls are permission-gated
Payment & TransactionFirst live activity source (PAYMENT_SUCCESS)
DeviceDevice monitoring surfaces activity over this same backbone

5. Backend Packages

Implementation detail lives in the developer docs - this section only maps the module to the services that power it.

PackageRoleDeveloper docs
@nx/signalThe realtime edge - activity-notification consumer, worker, socket-event service, rooms / topics, REST read API, admin transport controlssignal
@nx/coreOwns the ActivityNotification schema / model / repository, recognized event-type registry, activity-stream topic + message types, recipient resolutioncore

Engineering Mapping (Feature ⇄ Package)

The horizontal axis of the Feature Spine - each business feature (<AREA> in the URD) maps to its engineering home. Reciprocal: the package docs link back here.

FeatureDev packageADRsStatus
ACT Activity Notifications@nx/signal · @nx/core-Built
WSS Realtime WebSocket Stream@nx/signal-Built

6. Key User Flows

7. Roles & Permissions

RoleCanCannot
Owner / ManagerReceive and read their own notifications; see org / merchant activity liveRead another user's notifications
Staff / CashierReceive, list, count, and mark read their own notificationsRead or mutate another user's notifications
Platform operatorInspect connection status, list / get clients, broadcast, send-to-room / client, disconnect (permission-gated)-

8. Status & Roadmap

PhaseCapabilities
P2Activity-notification pipeline, scoped recipient resolution, self-scoped read API, encrypted realtime push, cross-instance delivery, admin transport controls
FutureAdditional activity event types, room-authorization hardening, additional delivery channels (email / SMS / push)

Proprietary and Confidential. Unauthorized copying, distribution, or use of this software is strictly prohibited.