[thomasluizon]

Change

Add GET api/notifications/subscriptions for the authenticated user. The response contains a newest first items list with id, transport, createdAtUtc, and a lowercase SHA-256 endpointHash, plus max from the existing subscription cap. It does not expose endpoints or keys.

The route in src/Orbit.Api/Controllers/NotificationController.cs dispatches the query in src/Orbit.Application/Notifications/Queries/GetPushSubscriptionsQuery.cs. Its validator lives in src/Orbit.Application/Notifications/Validators/GetPushSubscriptionsQueryValidator.cs. The existing repository filters by user before mapping to a response DTO. src/Orbit.Api/openapi.json was regenerated by the build. The action is registered in the notification read capability and app surface in src/Orbit.Infrastructure/Services/AgentCatalogService.Capabilities.cs and src/Orbit.Infrastructure/Services/AgentCatalogService.Surfaces.cs.

Tests in tests/Orbit.Application.Tests/Queries/Notifications/GetPushSubscriptionsQueryHandlerTests.cs cover 0, 1, and 5 subscriptions, isolation from another user, sorting, hash output, transport mapping, and serialized field safety. tests/Orbit.Infrastructure.Tests/Controllers/NotificationControllerTests.cs checks dispatch with the authenticated user ID.

Closes thomasluizon/orbit-tickets#915.

Assumptions

• Used items for the list, matching the existing notifications response, instead of a subscriptions property.
• Mapped FCM to native and Web Push to web, instead of exposing internal enum names.
• Hashed the exact stored endpoint UTF-8 bytes, instead of normalizing the endpoint before hashing.

Test evidence

• dotnet test tests/Orbit.Application.Tests --filter FullyQualifiedName~GetPushSubscriptionsQueryHandlerTests: 4 passed.
• dotnet test tests/Orbit.Infrastructure.Tests --filter FullyQualifiedName~NotificationControllerTests: 18 passed.
• Initial env -u LANG LC_ALL=en_US.UTF-8 dotnet test: the existing AgentCatalogServiceTests.EveryControllerAction_IsMappedToTheCatalog failed for NotificationController.GetSubscriptions; the catalog mapping was added and its focused rerun passed.
• Final env -u LANG LC_ALL=en_US.UTF-8 dotnet build Orbit.slnx -v:q: 0 errors.
• Final env -u LANG LC_ALL=en_US.UTF-8 dotnet test -v:q: 8,065 passed, 0 failed.

[pullfrog]

✅ No new issues found.

Reviewed changes in the authenticated subscription listing, its generated API schema, catalog mapping, and unit tests:

• Subscription query: Filters by user, sorts newest first, and returns transport, timestamp, ID, and endpoint hash without exposing push credentials.
• HTTP and catalog: Adds the authorized GET route and registers it on the notification surface.
• Coverage: Exercises user isolation, response fields, transport mapping, ordering, and authenticated dispatch.

  ^{｜ View workflow run ｜ Using GPT Sol ｜ 𝕏}