@amalgm/channels 0.1.0

package/PURPOSE.md

@@ -0,0 +1,50 @@
+# Amalgm Channels
+
+## Purpose
+
+Channels is the sole owner of delivering a message from Amalgm to the current
+user. A caller supplies content and an optional channel preference; Channels
+resolves the authenticated user's destination, persists one durable delivery,
+and hands it to the configured provider. Callers never choose another user,
+handle provider credentials, or infer whether delivery happened from a network
+attempt.
+
+The SDK owns notification validation, idempotency, delivery state, and history.
+The HTTP API, MCP server, CLI, worker, and Fly host are adapters over that SDK.
+Supabase is the durable authority; providers are effects supplied by the host.
+The hosted service is its own deployable and does not run inside or depend on
+Amalgm Gateway.
+
+## Axioms
+
+1. Every delivery belongs to exactly one authenticated user.
+2. A public send input never contains a user id, email address, phone number,
+   provider credential, or other recipient coordinate.
+3. One idempotency key names at most one delivery for a user.
+4. A provider attempt begins only after a durable, exclusively leased delivery
+   exists; completion is accepted only from that lease.
+5. Failed and expired leases remain visible and retryable. They are never
+   reported as delivered.
+6. Supabase is authoritative for pending work and permanent delivery history.
+7. Provider responses are reduced to bounded identifiers and safe errors before
+   persistence; secrets and recipient coordinates never enter public records.
+8. The SDK is the behavior. HTTP, MCP, CLI, workers, and provider adapters stay
+   thin and do not create another send path.
+9. Browser sessions use verified user identity. Machines use Core's exact
+   `amalgm-channels` audience, scope checks, and one-time DPoP proof.
+10. Channels is a standalone service. Gateway does not compose, proxy, schedule,
+    or deliver its work.
+
+## Tree
+
+```text
+src/contract.ts       public SDK shapes
+src/service.ts        validation and user-bound behavior
+src/worker.ts         lease-to-provider delivery pump
+src/http.ts           HTTP adapter
+src/client.ts         browser/host API client
+src/mcp.ts            agent adapter
+host/                 Supabase, auth, provider, server, and Fly composition
+supabase/migrations/  durable schema and atomic RPCs
+skills/channels/      agent usage guidance
+```

package/README.md

@@ -0,0 +1,17 @@
+# @amalgm/channels
+
+The SDK and standalone hosted service for sending notifications to the current
+Amalgm user.
+
+```ts
+const channels = service.for({ userId, scopes: ['channels:send'] });
+await channels.notify({ message: 'Call Mom', idempotencyKey: runId });
+```
+
+Use `createChannelsApi` for HTTP, `createChannelsMcpServer` for agents, and
+`createChannelsHost` for the Fly service. See [PURPOSE.md](./PURPOSE.md) for the
+ownership and security laws.
+
+```bash
+npm run verify
+```

package/dist/host/auth.d.ts

@@ -0,0 +1,10 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import { type AuthorizationScope } from '@amalgm/core/authorization';
+import type { ChannelPrincipal, ChannelScope } from '../src/contract.js';
+export declare function createChannelsAuthenticator(options: {
+    readonly issuer: string;
+    readonly supabase: SupabaseClient;
+    readonly now?: () => number;
+}): (request: Request) => Promise<ChannelPrincipal>;
+export declare function machineHeaders(authorization: string, dpop: string): Readonly<Record<string, string>>;
+export type ChannelsAuthorizationScope = Extract<AuthorizationScope, ChannelScope>;

package/dist/host/auth.js

@@ -0,0 +1,76 @@
+import { authorizeMachineResource, } from '@amalgm/core/authorization';
+import { calculateJwkThumbprint, createRemoteJWKSet, decodeProtectedHeader, importJWK, jwtVerify, } from 'jose';
+import { createHash } from 'node:crypto';
+import { ChannelsError } from '../src/errors.js';
+export function createChannelsAuthenticator(options) {
+    const jwks = createRemoteJWKSet(new URL(`${options.issuer}/.well-known/jwks.json`));
+    const ports = resourcePorts(options, jwks);
+    return async (request) => {
+        const authorization = request.headers.get('authorization');
+        if (authorization?.startsWith('Bearer ')) {
+            const token = authorization.slice('Bearer '.length).trim();
+            const result = await options.supabase.auth.getUser(token);
+            if (result.error || !result.data.user)
+                throw new ChannelsError('forbidden', 'User authorization denied');
+            return Object.freeze({
+                userId: result.data.user.id,
+                scopes: Object.freeze(['channels:read', 'channels:send']),
+            });
+        }
+        const required = request.method.toUpperCase() === 'POST'
+            ? ['channels:send']
+            : ['channels:read'];
+        const principal = await authorizeMachineResource({
+            authorization,
+            dpop: request.headers.get('dpop'),
+            method: request.method,
+            url: request.url,
+            issuer: options.issuer,
+            audience: 'amalgm-channels',
+            requiredScopes: required,
+        }, ports);
+        return Object.freeze({
+            userId: principal.userId,
+            scopes: principal.scopes.filter((scope) => scope.startsWith('channels:')),
+        });
+    };
+}
+function resourcePorts(options, jwks) {
+    return {
+        nowSeconds: options.now ?? (() => Math.floor(Date.now() / 1000)),
+        async verifyAccessToken(token) {
+            const verified = await jwtVerify(token, jwks, {
+                issuer: options.issuer,
+                audience: 'amalgm-channels',
+                algorithms: ['ES256'],
+            });
+            return { header: verified.protectedHeader, claims: verified.payload };
+        },
+        async verifyDpopProof(proof) {
+            const header = decodeProtectedHeader(proof);
+            const jwk = header.jwk;
+            if (!jwk)
+                throw new Error('DPoP proof has no public key');
+            const verified = await jwtVerify(proof, await importJWK(jwk, 'ES256'), {
+                algorithms: ['ES256'],
+                typ: 'dpop+jwt',
+            });
+            return { header: verified.protectedHeader, claims: verified.payload };
+        },
+        jwkThumbprint: (jwk) => calculateJwkThumbprint(jwk, 'sha256'),
+        accessTokenHash: async (token) => createHash('sha256').update(token).digest('base64url'),
+        async consumeProof(keyThumbprint, jti) {
+            const result = await options.supabase.rpc('consume_authorization_dpop_proof', {
+                p_key_thumbprint: keyThumbprint,
+                p_jti: jti,
+            });
+            if (result.error)
+                throw result.error;
+            return result.data === true;
+        },
+    };
+}
+export function machineHeaders(authorization, dpop) {
+    return Object.freeze({ authorization, dpop });
+}
+//# sourceMappingURL=auth.js.map

package/dist/host/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../host/auth.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,GAGzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CAAC,OAI3C;IACC,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE3C,OAAO,KAAK,EAAE,OAAgB,EAA6B,EAAE;QAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;YACzG,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,eAAe,CAAU,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM;YACtD,CAAC,CAAC,CAAC,eAAe,CAAU;YAC5B,CAAC,CAAC,CAAC,eAAe,CAAU,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC;YAC/C,aAAa;YACb,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,iBAAiB;YAC3B,cAAc,EAAE,QAAQ;SACzB,EAAE,KAAK,CAAC,CAAC;QACV,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;SACjG,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAyE,EACzE,IAA2C;IAE3C,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,CAAC,OAAO,CAAC;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAsB,CAAC;YAC1C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE;gBACrE,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAU,EAAE,QAAQ,CAAC;QACpE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACxF,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG;YACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,kCAAkC,EAAE;gBAC5E,gBAAgB,EAAE,aAAa;gBAC/B,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,aAAqB,EACrB,IAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/host/config.d.ts

@@ -0,0 +1,10 @@
+export interface ChannelsHostConfig {
+    readonly port: number;
+    readonly supabaseUrl: string;
+    readonly supabaseServiceRoleKey: string;
+    readonly authorizationIssuer: string;
+    readonly resendApiKey: string;
+    readonly emailFrom: string;
+    readonly pollIntervalMs: number;
+}
+export declare function channelsHostConfig(env?: Readonly<Record<string, string | undefined>>): ChannelsHostConfig;

package/dist/host/config.js

@@ -0,0 +1,32 @@
+export function channelsHostConfig(env = process.env) {
+    return Object.freeze({
+        port: integer(env.PORT, 8080, 1, 65_535),
+        supabaseUrl: httpsUrl(env.SUPABASE_URL ?? env.NEXT_PUBLIC_SUPABASE_URL, 'SUPABASE_URL'),
+        supabaseServiceRoleKey: required(env.SUPABASE_SERVICE_ROLE_KEY, 'SUPABASE_SERVICE_ROLE_KEY'),
+        authorizationIssuer: httpsUrl(env.AMALGM_AUTHORIZATION_ISSUER, 'AMALGM_AUTHORIZATION_ISSUER'),
+        resendApiKey: required(env.RESEND_API_KEY, 'RESEND_API_KEY'),
+        emailFrom: required(env.CHANNELS_EMAIL_FROM, 'CHANNELS_EMAIL_FROM'),
+        pollIntervalMs: integer(env.CHANNELS_POLL_INTERVAL_MS, 1_000, 250, 60_000),
+    });
+}
+function required(value, name) {
+    if (!value?.trim())
+        throw new Error(`${name} is required`);
+    return value.trim();
+}
+function httpsUrl(value, name) {
+    const parsed = new URL(required(value, name));
+    const local = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';
+    if (parsed.protocol !== 'https:' && !(local && parsed.protocol === 'http:')) {
+        throw new Error(`${name} must use HTTPS`);
+    }
+    return parsed.toString().replace(/\/$/, '');
+}
+function integer(value, fallback, minimum, maximum) {
+    const parsed = value === undefined ? fallback : Number(value);
+    if (!Number.isInteger(parsed) || parsed < minimum || parsed > maximum) {
+        throw new Error(`Expected an integer from ${minimum} to ${maximum}`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=config.js.map

package/dist/host/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../host/config.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,kBAAkB,CAChC,GAAG,GAAiD,OAAO,CAAC,GAAG;IAE/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC;QACxC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,wBAAwB,EAAE,cAAc,CAAC;QACvF,sBAAsB,EAAE,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;QAC5F,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;QAC7F,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAC5D,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QACnE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CACd,KAAyB,EACzB,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/host/index.d.ts

@@ -0,0 +1,6 @@
+export * from './auth.js';
+export * from './config.js';
+export * from './recipient.js';
+export * from './repository.js';
+export * from './resend.js';
+export * from './server.js';

package/dist/host/index.js

@@ -0,0 +1,7 @@
+export * from './auth.js';
+export * from './config.js';
+export * from './recipient.js';
+export * from './repository.js';
+export * from './resend.js';
+export * from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../host/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/host/main.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/host/main.js

@@ -0,0 +1,29 @@
+import { createClient } from '@supabase/supabase-js';
+import { createChannelsApi } from '../src/http.js';
+import { createChannelsService } from '../src/service.js';
+import { ChannelsWorker } from '../src/worker.js';
+import { createChannelsAuthenticator } from './auth.js';
+import { channelsHostConfig } from './config.js';
+import { SupabaseRecipientDirectory } from './recipient.js';
+import { SupabaseDeliveryRepository } from './repository.js';
+import { ResendEmailProvider } from './resend.js';
+import { createChannelsHost } from './server.js';
+const config = channelsHostConfig();
+const supabase = createClient(config.supabaseUrl, config.supabaseServiceRoleKey, {
+    auth: { persistSession: false, autoRefreshToken: false },
+});
+const repository = new SupabaseDeliveryRepository(supabase);
+const worker = new ChannelsWorker(repository, new SupabaseRecipientDirectory(supabase), new ResendEmailProvider(config.resendApiKey, config.emailFrom), { log });
+const api = createChannelsApi({
+    service: createChannelsService(repository),
+    authenticate: createChannelsAuthenticator({ issuer: config.authorizationIssuer, supabase }),
+});
+const host = createChannelsHost({ api, worker, pollIntervalMs: config.pollIntervalMs, log });
+host.server.listen(config.port, '0.0.0.0', () => log('host.ready', { port: config.port }));
+for (const signal of ['SIGINT', 'SIGTERM']) {
+    process.once(signal, () => void host.close().finally(() => process.exit(0)));
+}
+function log(event, details = {}) {
+    console.log(JSON.stringify({ service: 'amalgm-channels', event, ...details }));
+}
+//# sourceMappingURL=main.js.map

package/dist/host/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../host/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;AACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,sBAAsB,EAAE;IAC/E,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;CACzD,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,0BAA0B,CAAC,QAAQ,CAAC,CAAC;AAC5D,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,UAAU,EACV,IAAI,0BAA0B,CAAC,QAAQ,CAAC,EACxC,IAAI,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,EAC9D,EAAE,GAAG,EAAE,CACR,CAAC;AACF,MAAM,GAAG,GAAG,iBAAiB,CAAC;IAC5B,OAAO,EAAE,qBAAqB,CAAC,UAAU,CAAC;IAC1C,YAAY,EAAE,2BAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC;CAC5F,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;AAE7F,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3F,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,GAAG,CAAC,KAAa,EAAE,OAAO,GAAsC,EAAE;IACzE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC"}

package/dist/host/recipient.d.ts

@@ -0,0 +1,7 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { RecipientDirectory } from '../src/contract.js';
+export declare class SupabaseRecipientDirectory implements RecipientDirectory {
+    private readonly client;
+    constructor(client: SupabaseClient);
+    emailForUser(userId: string): Promise<string>;
+}

package/dist/host/recipient.js

@@ -0,0 +1,17 @@
+import { ChannelsError } from '../src/errors.js';
+export class SupabaseRecipientDirectory {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async emailForUser(userId) {
+        const result = await this.client.auth.admin.getUserById(userId);
+        if (result.error)
+            throw new ChannelsError('internal', 'Recipient lookup failed');
+        const email = result.data.user?.email?.trim().toLowerCase();
+        if (!email)
+            throw new ChannelsError('provider', 'The current user has no email channel');
+        return email;
+    }
+}
+//# sourceMappingURL=recipient.js.map

package/dist/host/recipient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient.js","sourceRoot":"","sources":["../../host/recipient.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,OAAO,0BAA0B;IACR,MAAM;IAAnC,YAA6B,MAAsB;sBAAtB,MAAM;IAAmB,CAAC;IAEvD,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/host/repository.d.ts

@@ -0,0 +1,13 @@
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { Delivery, DeliveryPage, DeliveryRepository, NormalizedListDeliveries, NotifyUserInput, PendingDelivery } from '../src/contract.js';
+export declare class SupabaseDeliveryRepository implements DeliveryRepository {
+    #private;
+    private readonly client;
+    constructor(client: SupabaseClient);
+    enqueue(userId: string, input: Required<NotifyUserInput>): Promise<Delivery>;
+    list(userId: string, query: NormalizedListDeliveries): Promise<DeliveryPage>;
+    get(userId: string, deliveryId: string): Promise<Delivery | null>;
+    claim(limit: number, leaseSeconds: number): Promise<readonly PendingDelivery[]>;
+    complete(item: PendingDelivery, providerId: string, now: Date): Promise<boolean>;
+    fail(item: PendingDelivery, error: string, now: Date): Promise<boolean>;
+}

package/dist/host/repository.js

@@ -0,0 +1,103 @@
+import { ChannelsError } from '../src/errors.js';
+export class SupabaseDeliveryRepository {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async enqueue(userId, input) {
+        return delivery(await this.#rpc('enqueue_amalgm_channel_delivery', {
+            p_user_id: userId,
+            p_delivery: input,
+        }));
+    }
+    async list(userId, query) {
+        const page = await this.#rpc('list_amalgm_channel_deliveries', {
+            p_user_id: userId,
+            p_status: query.status ?? null,
+            p_limit: query.limit,
+            p_offset: query.offset,
+        });
+        return {
+            items: page.items.map(delivery),
+            total: page.total,
+            limit: query.limit,
+            offset: query.offset,
+            hasMore: query.offset + page.items.length < page.total,
+        };
+    }
+    async get(userId, deliveryId) {
+        const row = await this.#rpc('get_amalgm_channel_delivery', {
+            p_user_id: userId,
+            p_delivery_id: deliveryId,
+        });
+        return row ? delivery(row) : null;
+    }
+    async claim(limit, leaseSeconds) {
+        const rows = await this.#rpc('claim_amalgm_channel_deliveries', {
+            p_limit: limit,
+            p_lease_seconds: leaseSeconds,
+        });
+        return rows.map((row) => {
+            const title = optional(row.title);
+            return {
+                id: text(row.id),
+                userId: text(row.user_id),
+                channel: 'email',
+                ...(title === undefined ? {} : { title }),
+                message: text(row.message),
+                idempotencyKey: text(row.idempotency_key),
+                leaseToken: text(row.lease_token),
+                attempts: number(row.attempts),
+            };
+        });
+    }
+    complete(item, providerId, now) {
+        return this.#rpc('complete_amalgm_channel_delivery', {
+            p_delivery_id: item.id,
+            p_lease_token: item.leaseToken,
+            p_provider_id: providerId,
+            p_now: now.toISOString(),
+        });
+    }
+    fail(item, error, now) {
+        return this.#rpc('fail_amalgm_channel_delivery', {
+            p_delivery_id: item.id,
+            p_lease_token: item.leaseToken,
+            p_error: error,
+            p_now: now.toISOString(),
+        });
+    }
+    async #rpc(name, arguments_) {
+        const { data, error } = await this.client.rpc(name, arguments_);
+        if (error) {
+            if (error.code === '23505')
+                throw new ChannelsError('validation', error.message);
+            throw new ChannelsError('internal', `Channels storage failed: ${error.message}`);
+        }
+        return data;
+    }
+}
+function delivery(row) {
+    const title = optional(row.title);
+    const providerId = optional(row.provider_id);
+    const error = optional(row.error);
+    return {
+        id: text(row.id),
+        channel: 'email',
+        ...(title === undefined ? {} : { title }),
+        message: text(row.message),
+        idempotencyKey: text(row.idempotency_key),
+        status: text(row.status),
+        attempts: number(row.attempts),
+        createdAt: timestamp(row.created_at),
+        updatedAt: timestamp(row.updated_at),
+        ...(optional(row.delivered_at) ? { deliveredAt: timestamp(row.delivered_at) } : {}),
+        ...(providerId === undefined ? {} : { providerId }),
+        ...(error === undefined ? {} : { error }),
+    };
+}
+const text = (value) => typeof value === 'string' ? value : String(value ?? '');
+const optional = (value) => typeof value === 'string' && value ? value : undefined;
+const number = (value) => Number(value) || 0;
+const timestamp = (value) => new Date(String(value)).toISOString();
+//# sourceMappingURL=repository.js.map

package/dist/host/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../host/repository.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,MAAM,OAAO,0BAA0B;IACR,MAAM;IAAnC,YAA6B,MAAsB;sBAAtB,MAAM;IAAmB,CAAC;IAEvD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAgC;QAC5D,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAM,iCAAiC,EAAE;YACtE,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,KAA+B;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAkC,gCAAgC,EAAE;YAC9F,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC9B,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,QAAQ,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK;SACvD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,UAAkB;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,6BAA6B,EAAE;YACrE,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,YAAoB;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAQ,iCAAiC,EAAE;YACrE,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,YAAY;SAC9B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACzB,OAAO,EAAE,OAAO;gBAChB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC1B,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;gBACzC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBACjC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;aAC/B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAqB,EAAE,UAAkB,EAAE,GAAS;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,kCAAkC,EAAE;YACnD,aAAa,EAAE,IAAI,CAAC,EAAE;YACtB,aAAa,EAAE,IAAI,CAAC,UAAU;YAC9B,aAAa,EAAE,UAAU;YACzB,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAqB,EAAE,KAAa,EAAE,GAAS;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC/C,aAAa,EAAE,IAAI,CAAC,EAAE;YACtB,aAAa,EAAE,IAAI,CAAC,UAAU;YAC9B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE;SACzB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,UAAmC;QAC7D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACjF,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAQ;IACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAC1B,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAuB;QAC9C,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACzF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC"}

package/dist/host/resend.d.ts

@@ -0,0 +1,10 @@
+import type { EmailProvider } from '../src/contract.js';
+export declare class ResendEmailProvider implements EmailProvider {
+    private readonly apiKey;
+    private readonly from;
+    private readonly fetch;
+    constructor(apiKey: string, from: string, fetch?: typeof globalThis.fetch);
+    send(input: Parameters<EmailProvider['send']>[0]): Promise<{
+        providerId: string;
+    }>;
+}

package/dist/host/resend.js

@@ -0,0 +1,33 @@
+import { ChannelsError } from '../src/errors.js';
+export class ResendEmailProvider {
+    apiKey;
+    from;
+    fetch;
+    constructor(apiKey, from, fetch = globalThis.fetch) {
+        this.apiKey = apiKey;
+        this.from = from;
+        this.fetch = fetch;
+    }
+    async send(input) {
+        const response = await this.fetch('https://api.resend.com/emails', {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${this.apiKey}`,
+                'content-type': 'application/json',
+                'idempotency-key': input.idempotencyKey,
+            },
+            body: JSON.stringify({
+                from: this.from,
+                to: [input.to],
+                subject: input.subject,
+                text: input.text,
+            }),
+        });
+        const body = await response.json().catch(() => ({}));
+        if (!response.ok || !body.id) {
+            throw new ChannelsError('provider', body.message?.slice(0, 300) || `Email provider returned ${response.status}`);
+        }
+        return { providerId: body.id };
+    }
+}
+//# sourceMappingURL=resend.js.map

package/dist/host/resend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.js","sourceRoot":"","sources":["../../host/resend.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,OAAO,mBAAmB;IAEX,MAAM;IACN,IAAI;IACJ,KAAK;IAHxB,YACmB,MAAc,EACd,IAAY,EACZ,KAAK,GAA4B,UAAU,CAAC,KAAK;sBAFjD,MAAM;oBACN,IAAI;qBACJ,KAAK;IACrB,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,KAA2C;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,KAAK,CAAC,cAAc;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAsC,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,2BAA2B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACjC,CAAC;CACF"}

package/dist/host/server.d.ts

@@ -0,0 +1,12 @@
+import { createServer } from 'node:http';
+import type { ChannelsWorker } from '../src/worker.js';
+export interface ChannelsHost {
+    readonly server: ReturnType<typeof createServer>;
+    close(): Promise<void>;
+}
+export declare function createChannelsHost(options: {
+    readonly api: (request: Request) => Promise<Response>;
+    readonly worker: ChannelsWorker;
+    readonly pollIntervalMs: number;
+    readonly log?: (event: string, details?: Readonly<Record<string, unknown>>) => void;
+}): ChannelsHost;

package/dist/host/server.js

@@ -0,0 +1,57 @@
+import { createServer } from 'node:http';
+export function createChannelsHost(options) {
+    const log = options.log ?? (() => { });
+    let draining = null;
+    const drain = () => {
+        if (draining)
+            return;
+        draining = options.worker.drainOnce()
+            .then((count) => { if (count)
+            log('worker.drained', { count }); return count; })
+            .catch((error) => { log('worker.failed', { error: safe(error) }); return 0; })
+            .finally(() => { draining = null; });
+    };
+    const timer = setInterval(drain, options.pollIntervalMs);
+    timer.unref();
+    drain();
+    const server = createServer(async (incoming, outgoing) => {
+        try {
+            if (incoming.url === '/healthz')
+                return send(outgoing, Response.json({ ok: true }));
+            const response = await options.api(await webRequest(incoming));
+            send(outgoing, response);
+            if (incoming.method === 'POST' && incoming.url === '/v1/notifications')
+                drain();
+        }
+        catch (error) {
+            log('request.failed', { error: safe(error) });
+            send(outgoing, Response.json({ error: 'Channels service failed' }, { status: 500 }));
+        }
+    });
+    return {
+        server,
+        async close() {
+            clearInterval(timer);
+            await draining;
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        },
+    };
+}
+async function webRequest(request) {
+    const origin = `http://${request.headers.host ?? '127.0.0.1'}`;
+    const chunks = [];
+    for await (const chunk of request)
+        chunks.push(Buffer.from(chunk));
+    const body = Buffer.concat(chunks);
+    return new Request(new URL(request.url ?? '/', origin), {
+        method: request.method ?? 'GET',
+        headers: request.headers,
+        ...(body.length ? { body } : {}),
+    });
+}
+async function send(response, source) {
+    response.writeHead(source.status, Object.fromEntries(source.headers));
+    response.end(Buffer.from(await source.arrayBuffer()));
+}
+const safe = (error) => (error instanceof Error ? error.message : String(error)).slice(0, 500);
+//# sourceMappingURL=server.js.map

package/dist/host/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../host/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AAQpF,MAAM,UAAU,kBAAkB,CAAC,OAKlC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;aAClC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,KAAK;YAAE,GAAG,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;aAC/E,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;aAC7E,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzD,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,KAAK,EAAE,CAAC;IAER,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,GAAG,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzB,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,mBAAmB;gBAAE,KAAK,EAAE,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,KAAK,CAAC,KAAK;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,QAAQ,CAAC;YACf,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAwB;IAChD,MAAM,MAAM,GAAG,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,EAAE;QACtD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO,EAAE,OAAO,CAAC,OAAsB;QACvC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,QAAwB,EAAE,MAAgB;IAC5D,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC"}

package/dist/src/client.d.ts

@@ -0,0 +1,7 @@
+import type { Channels } from './contract.js';
+export type ChannelsHeaders = (method: string, url: string) => Promise<Readonly<Record<string, string>>> | Readonly<Record<string, string>>;
+export declare function createChannelsClient(options: {
+    readonly baseUrl: string;
+    readonly headers: ChannelsHeaders;
+    readonly fetch?: typeof globalThis.fetch;
+}): Channels;

package/dist/src/client.js

@@ -0,0 +1,41 @@
+import { ChannelsError } from './errors.js';
+export function createChannelsClient(options) {
+    const base = options.baseUrl.replace(/\/$/, '');
+    const fetch = options.fetch ?? globalThis.fetch;
+    async function request(path, method, body) {
+        const url = `${base}${path}`;
+        const response = await fetch(url, {
+            method,
+            headers: {
+                accept: 'application/json',
+                ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+                ...await options.headers(method, url),
+            },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+        });
+        const payload = await response.json().catch(() => ({}));
+        if (!response.ok)
+            throw new ChannelsError(payload.code === 'forbidden' || payload.code === 'not_found' || payload.code === 'provider'
+                ? payload.code : response.status >= 500 ? 'internal' : 'validation', payload.error ?? `Channels API returned ${response.status}`);
+        return payload;
+    }
+    return Object.freeze({
+        notify: (input) => request('/v1/notifications', 'POST', input),
+        list: (query = {}) => request(`/v1/deliveries${queryString(query)}`, 'GET'),
+        get: async (deliveryId) => {
+            try {
+                return await request(`/v1/deliveries/${encodeURIComponent(deliveryId)}`, 'GET');
+            }
+            catch (error) {
+                if (error instanceof ChannelsError && error.code === 'not_found')
+                    return null;
+                throw error;
+            }
+        },
+    });
+}
+function queryString(query) {
+    const entries = Object.entries(query).filter(([, value]) => value !== undefined);
+    return entries.length ? `?${new URLSearchParams(entries.map(([key, value]) => [key, String(value)]))}` : '';
+}
+//# sourceMappingURL=client.js.map

package/dist/src/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAO5C,MAAM,UAAU,oBAAoB,CAAC,OAIpC;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAEhD,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,MAAc,EAAE,IAAc;QACpE,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBACrE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACtC;YACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAsC,CAAC;QAC7F,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CACvC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;gBACzF,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EACrE,OAAO,CAAC,KAAK,IAAI,yBAAyB,QAAQ,CAAC,MAAM,EAAE,CAC5D,CAAC;QACF,OAAO,OAAY,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,OAAO,CAAW,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC;QACzF,IAAI,EAAE,CAAC,KAAK,GAAmB,EAAE,EAAE,EAAE,CAAC,OAAO,CAAe,iBAAiB,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC;QACzG,GAAG,EAAE,KAAK,EAAE,UAAkB,EAAE,EAAE;YAChC,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAW,kBAAkB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO,IAAI,CAAC;gBAC9E,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAqB;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9G,CAAC"}