Admin Notification Dispatcher: Template Registry
epic-admin-portal-core-services-task-011 — Implement AdminNotificationDispatcher's admin-specific template registry. Define templates for: user status changes, certification expiry alerts, pending reimbursement summaries, and export completion notices. Wrap shared notification infrastructure and resolve org-scoped recipient lists from the hierarchy service.
Acceptance Criteria
Technical Requirements
Execution Context
Tier 2 - 518 tasks
Can start after Tier 1 completes
Implementation Notes
Define a `NotificationTemplateType` enum for the 4 admin template types; use it as the registry key for O(1) lookup. Model each template as an immutable Dart class with `const` constructor: `NotificationTemplate({ required this.titleTemplate, required this.bodyTemplate, required this.notificationType, required this.targetRole, required this.requiredVariables })`. Implement variable substitution as a pure function: `String render(String template, Map
For Norwegian pluralization, implement a minimal `pluralize(int count, String singular, String plural)` helper rather than pulling in an i18n library for two forms. Wrap the shared `NotificationService` with an `AdminNotificationService` facade so admin-specific concerns (template resolution, org-scoped recipients) are separated from the low-level FCM dispatch.
Testing Requirements
Unit tests: instantiate the template registry with all 4 templates and assert no TemplateValidationException is thrown. Test each template's variable substitution with valid inputs and assert the output string matches expected format. Test plural form handling for PENDING_REIMBURSEMENT_SUMMARY with count=1 and count=3. Test that a template with an undefined variable throws TemplateValidationException at registration.
Test recipient resolution: mock OrgHierarchyService and the user query; assert only users with the correct role and within the subtree are returned. Localization test: assert Norwegian strings are returned when org locale is 'nb', English when 'en'. Integration test: register templates, call recipient resolution against a Supabase local instance with seeded users, assert the returned recipient list matches expected user IDs.
OrgHierarchyNavigator rendering NHF's full 1,400-chapter tree in a single widget may cause Flutter frame-rate drops below 60 fps on mid-range devices, making the navigator unusable for NHF national admins.
Mitigation & Contingency
Mitigation: Implement lazy expansion: only load immediate children on node expand rather than the full tree upfront. Use virtual scrolling for long sibling lists. Test with a synthetic 1,400-node dataset on a low-end Android device during development.
Contingency: If lazy expansion is insufficient, replace the tree widget with a paginated drill-down navigator (select level → select child) that avoids rendering more than 50 nodes at a time.
Bufdir may update their required export column structure or file format during or after development. If the AdminExportService hardcodes the current Bufdir schema, any format change requires a code release rather than a config update.
Mitigation & Contingency
Mitigation: Drive the Bufdir column mapping from a configuration repository rather than hardcoded constants. Abstract column definitions into a named schema config so that format changes require only a config update and re-deployment without service logic changes.
Contingency: If Bufdir format changes post-launch, release a config update within one sprint. If the change is structural (new required sections), scope a targeted service update and communicate timeline to partner organisations.
Role transition side-effects in UserManagementService (e.g., certification expiry removing mentor from chapter listing, pause triggering coordinator notification) may interact with external services like HLF's website sync. Incomplete side-effect handling could leave the system in an inconsistent state.
Mitigation & Contingency
Mitigation: Model side-effects as explicit domain events published after the primary state change is persisted. Implement event handlers as idempotent operations so re-processing is safe. Write integration tests that assert all side-effects fire correctly for each role transition type.
Contingency: If a side-effect fails after the primary change is persisted, log the failure with full context and trigger a manual reconciliation alert to the on-call team. Provide an admin-accessible re-trigger action for failed side-effects.
If AdminStatisticsService cache TTL is set too long, org_admin may see significantly stale KPI values (e.g., a mentor newly paused an hour ago still appears as active), undermining trust in the dashboard.
Mitigation & Contingency
Mitigation: Default cache TTL to 5 minutes with a manual refresh action on the dashboard. Implement cache invalidation triggered by UserManagementService write operations that affect counted entities.
Contingency: If staleness causes org admin complaints post-launch, reduce TTL to 60 seconds and introduce a real-time Supabase subscription for high-impact counters (paused mentors, expiring certifications).