@chipmobilesdk/rn-notification 0.5.0 → 0.7.0

package/lib/module/permission/state.js

@@ -0,0 +1,83 @@
+"use strict";
+
+/**
+ * The permission state model.
+ *
+ * Six states, never collapsed. The two that matter most are the ones a naive
+ * model loses: `notAsked` must stay distinguishable from `denied`, or reading
+ * state without prompting buys nothing; and `notRequired` must never be
+ * reported as `denied`, because a platform version with no such concept never
+ * refused anything.
+ */
+
+/** Android runtime notification permission arrived in API 33. */
+export const ANDROID_DISPLAY_PERMISSION_API = 33;
+/** Android exact-alarm permission arrived in API 31. */
+export const ANDROID_EXACT_ALARM_API = 31;
+/**
+ * Whether a permission concept exists at all on this platform version.
+ *
+ * Returning `supported: false` is what lets `notRequired` be reported honestly
+ * rather than inventing a refusal.
+ */
+export function capabilityFor(kind, platform) {
+  if (kind === 'display') {
+    if (platform.os === 'android' && (platform.apiLevel ?? 0) < ANDROID_DISPLAY_PERMISSION_API) {
+      return {
+        kind,
+        supported: false,
+        settingsOnly: false
+      };
+    }
+    return {
+      kind,
+      supported: true,
+      settingsOnly: false
+    };
+  }
+
+  // Exact alarms exist only on Android 12+, and are granted through system
+  // settings rather than an in-app dialog on the versions that gate them.
+  if (platform.os !== 'android' || (platform.apiLevel ?? 0) < ANDROID_EXACT_ALARM_API) {
+    return {
+      kind,
+      supported: false,
+      settingsOnly: false
+    };
+  }
+  return {
+    kind,
+    supported: true,
+    settingsOnly: true
+  };
+}
+
+/** Normalizes a platform reading into the six-state model. */
+export function normalizeState(kind, raw, platform) {
+  if (!capabilityFor(kind, platform).supported) {
+    return 'notRequired';
+  }
+  return raw;
+}
+
+/**
+ * Whether a state means the package can still show notifications.
+ *
+ * `provisional` counts: iOS quiet delivery still reaches the user, just without
+ * interrupting them. Treating it as denied would suppress notifications the
+ * user is in fact receiving.
+ */
+export function canDisplay(state) {
+  return state === 'granted' || state === 'provisional' || state === 'notRequired';
+}
+
+/** Whether asking again could produce a dialog, or whether settings is the only route. */
+export function isTerminal(state) {
+  return state === 'permanentlyDenied' || state === 'notRequired';
+}
+
+/** Whether the package has ever asked, which the platform cannot answer after the fact. */
+export function shouldOfferSettings(state) {
+  return state === 'denied' || state === 'permanentlyDenied';
+}
+//# sourceMappingURL=state.js.map

package/lib/module/permission/state.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ANDROID_DISPLAY_PERMISSION_API","ANDROID_EXACT_ALARM_API","capabilityFor","kind","platform","os","apiLevel","supported","settingsOnly","normalizeState","raw","canDisplay","state","isTerminal","shouldOfferSettings"],"sourceRoot":"../../../src","sources":["permission/state.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA,OAAO,MAAMA,8BAA8B,GAAG,EAAE;AAChD;AACA,OAAO,MAAMC,uBAAuB,GAAG,EAAE;AAQzC;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,aAAaA,CAACC,IAAoB,EAAEC,QAAsB,EAAwB;EACjG,IAAID,IAAI,KAAK,SAAS,EAAE;IACvB,IAAIC,QAAQ,CAACC,EAAE,KAAK,SAAS,IAAI,CAACD,QAAQ,CAACE,QAAQ,IAAI,CAAC,IAAIN,8BAA8B,EAAE;MAC3F,OAAO;QAAEG,IAAI;QAAEI,SAAS,EAAE,KAAK;QAAEC,YAAY,EAAE;MAAM,CAAC;IACvD;IACA,OAAO;MAAEL,IAAI;MAAEI,SAAS,EAAE,IAAI;MAAEC,YAAY,EAAE;IAAM,CAAC;EACtD;;EAEA;EACA;EACA,IAAIJ,QAAQ,CAACC,EAAE,KAAK,SAAS,IAAI,CAACD,QAAQ,CAACE,QAAQ,IAAI,CAAC,IAAIL,uBAAuB,EAAE;IACpF,OAAO;MAAEE,IAAI;MAAEI,SAAS,EAAE,KAAK;MAAEC,YAAY,EAAE;IAAM,CAAC;EACvD;EACA,OAAO;IAAEL,IAAI;IAAEI,SAAS,EAAE,IAAI;IAAEC,YAAY,EAAE;EAAK,CAAC;AACrD;;AAEA;AACA,OAAO,SAASC,cAAcA,CAC7BN,IAAoB,EACpBO,GAAoB,EACpBN,QAAsB,EACJ;EAClB,IAAI,CAACF,aAAa,CAACC,IAAI,EAAEC,QAAQ,CAAC,CAACG,SAAS,EAAE;IAC7C,OAAO,aAAa;EACrB;EACA,OAAOG,GAAG;AACX;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,UAAUA,CAACC,KAAsB,EAAW;EAC3D,OAAOA,KAAK,KAAK,SAAS,IAAIA,KAAK,KAAK,aAAa,IAAIA,KAAK,KAAK,aAAa;AACjF;;AAEA;AACA,OAAO,SAASC,UAAUA,CAACD,KAAsB,EAAW;EAC3D,OAAOA,KAAK,KAAK,mBAAmB,IAAIA,KAAK,KAAK,aAAa;AAChE;;AAEA;AACA,OAAO,SAASE,mBAAmBA,CAACF,KAAsB,EAAW;EACpE,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,mBAAmB;AAC3D","ignoreList":[]}

package/lib/module/push/envelope.js

@@ -0,0 +1,137 @@
+"use strict";
+
+/**
+ * Payload normalization.
+ *
+ * Every provider's payload is reduced to one envelope shape before it reaches
+ * the consumer, so changing provider costs consumer code nothing.
+ *
+ * Version handling is best-effort: a payload declaring a version this build
+ * does not implement is still processed, honouring the fields it understands
+ * and ignoring the rest. Servers deploy ahead of app adoption and old app
+ * versions live on devices for months, so gating every server-side change on
+ * app rollout is the more expensive failure.
+ *
+ * That is only safe under an append-only discipline — a released field's
+ * meaning must never be repurposed. The version-skew diagnostic exists so a
+ * misprocessing incident is traceable to the skew rather than investigated as a
+ * logic defect.
+ */
+
+import { DIAGNOSTIC_CODES, NotificationError } from "../contract/errors.js";
+
+/** The contract version this build implements. */
+export const IMPLEMENTED_PAYLOAD_VERSION = 1;
+const KINDS = new Set(['display', 'data', 'schedule', 'cancel']);
+function asRecord(value) {
+  return typeof value === 'object' && value !== null && !Array.isArray(value) ? value : undefined;
+}
+
+/**
+ * Text, or nothing.
+ *
+ * Deliberately not `String(value)`: an object coerces to the literal string
+ * "[object Object]", which would be rendered to the user as a notification
+ * title. A field that is not text is treated as absent.
+ */
+function asText(value) {
+  if (typeof value === 'string') return value;
+  if (typeof value === 'number' && Number.isFinite(value)) return String(value);
+  return undefined;
+}
+
+/** An epoch instant from either a number or an ISO-8601 string. */
+function asInstant(value) {
+  if (typeof value === 'number' && Number.isFinite(value)) return value;
+  if (typeof value === 'string') return Date.parse(value);
+  return Number.NaN;
+}
+
+/** Extracts and validates the contract version, which every payload must declare. */
+function readVersion(body) {
+  const raw = body.v;
+  const version = typeof raw === 'number' ? raw : Number.parseInt(asText(raw) ?? '', 10);
+  if (!Number.isInteger(version) || version < 1) {
+    throw new NotificationError(DIAGNOSTIC_CODES.PAYLOAD_MALFORMED, 'Push payload carries no usable contract version. Every payload must declare `v` from the first release.', {
+      received: typeof raw
+    });
+  }
+  return version;
+}
+function readKind(body) {
+  const kind = asText(body.kind);
+  if (kind === undefined || !KINDS.has(kind)) {
+    throw new NotificationError(DIAGNOSTIC_CODES.PAYLOAD_MALFORMED, `Push payload declares unknown kind "${kind ?? ''}".`, {
+      kind
+    });
+  }
+  return kind;
+}
+function readId(body) {
+  const id = asText(body.id);
+  if (id === undefined || id.length === 0) {
+    throw new NotificationError(DIAGNOSTIC_CODES.PAYLOAD_MALFORMED, 'Push payload carries no identifier.');
+  }
+  return id;
+}
+function readContent(body) {
+  const content = asRecord(body.content);
+  if (content === undefined) return undefined;
+  return {
+    title: asText(content.title) ?? '',
+    body: asText(content.body) ?? '',
+    subtitle: asText(content.subtitle)
+  };
+}
+function readMoment(body) {
+  const moment = asRecord(body.moment);
+  if (moment === undefined) return undefined;
+  return {
+    at: asInstant(moment.at),
+    anchoring: moment.anchoring === 'absolute' ? 'absolute' : 'wallClock'
+  };
+}
+/**
+ * Normalizes a raw provider payload.
+ *
+ * Throws only for a **structurally unparseable** payload — a broken message.
+ * An unrecognized version is a healthy message from a newer contract and must
+ * never collapse into the same condition.
+ */
+export function normalizeEnvelope(raw, receivedAt) {
+  const record = asRecord(raw);
+  if (record === undefined) {
+    throw new NotificationError(DIAGNOSTIC_CODES.PAYLOAD_MALFORMED, 'Push payload is not an object and cannot be interpreted.', {
+      received: Array.isArray(raw) ? 'array' : typeof raw
+    });
+  }
+
+  // Providers deliver the payload under a data bag; accept either shape so the
+  // adapter does not have to reshape before handing it over.
+  const body = asRecord(record.data) ?? record;
+  const version = readVersion(body);
+  const kind = readKind(body);
+  const id = readId(body);
+  const versionSkew = version !== IMPLEMENTED_PAYLOAD_VERSION;
+  return {
+    versionSkew,
+    envelope: {
+      version,
+      kind,
+      id,
+      ownerTag: asText(body.ownerTag),
+      content: readContent(body),
+      tone: asText(body.tone),
+      moment: readMoment(body),
+      routing: asRecord(body.routing),
+      // Falls back to the identifier, so a server that omits it still gets
+      // de-duplication rather than silently losing it.
+      dedupId: asText(body.dedupId) ?? id,
+      receivedAt,
+      versionSkew
+      // Fields this build does not understand are simply not read — that is
+      // what best-effort processing means in practice.
+    }
+  };
+}
+//# sourceMappingURL=envelope.js.map

package/lib/module/push/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DIAGNOSTIC_CODES","NotificationError","IMPLEMENTED_PAYLOAD_VERSION","KINDS","Set","asRecord","value","Array","isArray","undefined","asText","Number","isFinite","String","asInstant","Date","parse","NaN","readVersion","body","raw","v","version","parseInt","isInteger","PAYLOAD_MALFORMED","received","readKind","kind","has","readId","id","length","readContent","content","title","subtitle","readMoment","moment","at","anchoring","normalizeEnvelope","receivedAt","record","data","versionSkew","envelope","ownerTag","tone","routing","dedupId"],"sourceRoot":"../../../src","sources":["push/envelope.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,gBAAgB,EAAEC,iBAAiB,QAAQ,uBAAoB;;AAExE;AACA,OAAO,MAAMC,2BAA2B,GAAG,CAAC;AAE5C,MAAMC,KAAK,GAAG,IAAIC,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAEhE,SAASC,QAAQA,CAACC,KAAc,EAAuC;EACtE,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GACvEA,KAAK,GACNG,SAAS;AACb;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,MAAMA,CAACJ,KAAc,EAAsB;EACnD,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAOA,KAAK;EAC3C,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIK,MAAM,CAACC,QAAQ,CAACN,KAAK,CAAC,EAAE,OAAOO,MAAM,CAACP,KAAK,CAAC;EAC7E,OAAOG,SAAS;AACjB;;AAEA;AACA,SAASK,SAASA,CAACR,KAAc,EAAU;EAC1C,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIK,MAAM,CAACC,QAAQ,CAACN,KAAK,CAAC,EAAE,OAAOA,KAAK;EACrE,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAOS,IAAI,CAACC,KAAK,CAACV,KAAK,CAAC;EACvD,OAAOK,MAAM,CAACM,GAAG;AAClB;;AAEA;AACA,SAASC,WAAWA,CAACC,IAA6B,EAAU;EAC3D,MAAMC,GAAG,GAAGD,IAAI,CAACE,CAAC;EAClB,MAAMC,OAAO,GAAG,OAAOF,GAAG,KAAK,QAAQ,GAAGA,GAAG,GAAGT,MAAM,CAACY,QAAQ,CAACb,MAAM,CAACU,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;EAEtF,IAAI,CAACT,MAAM,CAACa,SAAS,CAACF,OAAO,CAAC,IAAIA,OAAO,GAAG,CAAC,EAAE;IAC9C,MAAM,IAAIrB,iBAAiB,CAC1BD,gBAAgB,CAACyB,iBAAiB,EAClC,yGAAyG,EACzG;MAAEC,QAAQ,EAAE,OAAON;IAAI,CACxB,CAAC;EACF;EACA,OAAOE,OAAO;AACf;AAEA,SAASK,QAAQA,CAACR,IAA6B,EAAwB;EACtE,MAAMS,IAAI,GAAGlB,MAAM,CAACS,IAAI,CAACS,IAAI,CAAC;EAE9B,IAAIA,IAAI,KAAKnB,SAAS,IAAI,CAACN,KAAK,CAAC0B,GAAG,CAACD,IAAI,CAAC,EAAE;IAC3C,MAAM,IAAI3B,iBAAiB,CAC1BD,gBAAgB,CAACyB,iBAAiB,EAClC,uCAAuCG,IAAI,IAAI,EAAE,IAAI,EACrD;MAAEA;IAAK,CACR,CAAC;EACF;EACA,OAAOA,IAAI;AACZ;AAEA,SAASE,MAAMA,CAACX,IAA6B,EAAU;EACtD,MAAMY,EAAE,GAAGrB,MAAM,CAACS,IAAI,CAACY,EAAE,CAAC;EAE1B,IAAIA,EAAE,KAAKtB,SAAS,IAAIsB,EAAE,CAACC,MAAM,KAAK,CAAC,EAAE;IACxC,MAAM,IAAI/B,iBAAiB,CAC1BD,gBAAgB,CAACyB,iBAAiB,EAClC,qCACD,CAAC;EACF;EACA,OAAOM,EAAE;AACV;AAEA,SAASE,WAAWA,CAACd,IAA6B,EAA2B;EAC5E,MAAMe,OAAO,GAAG7B,QAAQ,CAACc,IAAI,CAACe,OAAO,CAAC;EACtC,IAAIA,OAAO,KAAKzB,SAAS,EAAE,OAAOA,SAAS;EAE3C,OAAO;IACN0B,KAAK,EAAEzB,MAAM,CAACwB,OAAO,CAACC,KAAK,CAAC,IAAI,EAAE;IAClChB,IAAI,EAAET,MAAM,CAACwB,OAAO,CAACf,IAAI,CAAC,IAAI,EAAE;IAChCiB,QAAQ,EAAE1B,MAAM,CAACwB,OAAO,CAACE,QAAQ;EAClC,CAAC;AACF;AAEA,SAASC,UAAUA,CAAClB,IAA6B,EAA0B;EAC1E,MAAMmB,MAAM,GAAGjC,QAAQ,CAACc,IAAI,CAACmB,MAAM,CAAC;EACpC,IAAIA,MAAM,KAAK7B,SAAS,EAAE,OAAOA,SAAS;EAE1C,OAAO;IACN8B,EAAE,EAAEzB,SAAS,CAACwB,MAAM,CAACC,EAAE,CAAC;IACxBC,SAAS,EAAEF,MAAM,CAACE,SAAS,KAAK,UAAU,GAAG,UAAU,GAAG;EAC3D,CAAC;AACF;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,iBAAiBA,CAACrB,GAAY,EAAEsB,UAAkB,EAAmB;EACpF,MAAMC,MAAM,GAAGtC,QAAQ,CAACe,GAAG,CAAC;EAC5B,IAAIuB,MAAM,KAAKlC,SAAS,EAAE;IACzB,MAAM,IAAIR,iBAAiB,CAC1BD,gBAAgB,CAACyB,iBAAiB,EAClC,0DAA0D,EAC1D;MAAEC,QAAQ,EAAEnB,KAAK,CAACC,OAAO,CAACY,GAAG,CAAC,GAAG,OAAO,GAAG,OAAOA;IAAI,CACvD,CAAC;EACF;;EAEA;EACA;EACA,MAAMD,IAAI,GAAGd,QAAQ,CAACsC,MAAM,CAACC,IAAI,CAAC,IAAID,MAAM;EAE5C,MAAMrB,OAAO,GAAGJ,WAAW,CAACC,IAAI,CAAC;EACjC,MAAMS,IAAI,GAAGD,QAAQ,CAACR,IAAI,CAAC;EAC3B,MAAMY,EAAE,GAAGD,MAAM,CAACX,IAAI,CAAC;EACvB,MAAM0B,WAAW,GAAGvB,OAAO,KAAKpB,2BAA2B;EAE3D,OAAO;IACN2C,WAAW;IACXC,QAAQ,EAAE;MACTxB,OAAO;MACPM,IAAI;MACJG,EAAE;MACFgB,QAAQ,EAAErC,MAAM,CAACS,IAAI,CAAC4B,QAAQ,CAAC;MAC/Bb,OAAO,EAAED,WAAW,CAACd,IAAI,CAAC;MAC1B6B,IAAI,EAAEtC,MAAM,CAACS,IAAI,CAAC6B,IAAI,CAAC;MACvBV,MAAM,EAAED,UAAU,CAAClB,IAAI,CAAC;MACxB8B,OAAO,EAAE5C,QAAQ,CAACc,IAAI,CAAC8B,OAAO,CAAC;MAC/B;MACA;MACAC,OAAO,EAAExC,MAAM,CAACS,IAAI,CAAC+B,OAAO,CAAC,IAAInB,EAAE;MACnCW,UAAU;MACVG;MACA;MACA;IACD;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/push/fcm-provider.js

@@ -0,0 +1,119 @@
+"use strict";
+
+/**
+ * The Firebase Cloud Messaging provider.
+ *
+ * Every `@react-native-firebase/messaging` import is confined to this file, so
+ * the rest of the package — and every consuming app — stays free of provider
+ * types. Substituting a provider is an adapter swap, not a rewrite.
+ *
+ * The module is required **lazily**. That matters more here than for the
+ * engine: messaging is an *optional* peer dependency, and an app that never
+ * enables push must not fail at import time for a package it deliberately did
+ * not install.
+ */
+
+import { lazyPeer } from '@chipmobilesdk/rn-core';
+
+/** Minimal shape used from the SDK, so its full surface never leaks into typing. */
+
+const messagingPeer = lazyPeer('@react-native-firebase/messaging', () => {
+  // Inside `try`, so Metro bundles an app that leaves this optional peer out.
+  try {
+    return require('@react-native-firebase/messaging');
+  } catch (cause) {
+    throw cause;
+  }
+});
+function loadMessaging() {
+  // Absent optional peer, or missing native module: reported as unavailability
+  // through the normal path rather than thrown at import.
+  const result = messagingPeer.get();
+  return result.ok ? result.module.default : undefined;
+}
+export function createFcmProvider(options = {}) {
+  let cached = options.module;
+  let resolved = options.module !== undefined;
+  const messaging = () => {
+    if (!resolved) {
+      cached = loadMessaging();
+      resolved = true;
+    }
+    return cached?.();
+  };
+  if (options.onBackgroundMessage !== undefined) {
+    messaging()?.setBackgroundMessageHandler(options.onBackgroundMessage);
+  }
+  return {
+    name: '@react-native-firebase/messaging',
+    async getAvailability() {
+      const instance = messaging();
+
+      // A device without Google Play Services, or an app that never installed
+      // the optional peer. Either way the local path is unaffected.
+      if (instance === undefined) return 'unavailable';
+
+      // Asked without registering: fetching a token here would create an FCM
+      // registration (and an APNs one on iOS) just to answer a yes-or-no
+      // question, before the app asked for permission (NOT-24).
+      try {
+        if (instance.isDeviceRegisteredForRemoteMessages === true) {
+          return 'available';
+        }
+        if (instance.hasPermission !== undefined) {
+          // Messaging is present; whether it may deliver is the permission's
+          // question, and that is answered without registering anything.
+          await instance.hasPermission();
+          return 'available';
+        }
+        return 'unknown';
+      } catch {
+        // The SDK does not say why, so `unknown` rather than a guess.
+        return 'unknown';
+      }
+    },
+    async getToken() {
+      const instance = messaging();
+      if (instance === undefined) {
+        throw new Error('Push provider is unavailable on this device.');
+      }
+      // Resolves only once a genuine token exists; the gate never presents an
+      // empty value as if it were one.
+      return instance.getToken();
+    },
+    onTokenChange(handler) {
+      const instance = messaging();
+      if (instance === undefined) return () => undefined;
+      return instance.onTokenRefresh(handler);
+    },
+    async invalidateToken() {
+      const instance = messaging();
+      if (instance === undefined) return false;
+      try {
+        await instance.deleteToken();
+        return true;
+      } catch {
+        // Reported as a failed invalidation rather than assumed successful —
+        // the device may keep receiving the previous account's messages.
+        return false;
+      }
+    },
+    subscribeToMessages(handler) {
+      const instance = messaging();
+      if (instance === undefined) return () => undefined;
+
+      // Foreground only. Background delivery arrives through the handler the
+      // consumer registers at module scope, which the README documents.
+      return instance.onMessage(message => {
+        handler(message);
+      });
+    },
+    async takeInitialMessage() {
+      const instance = messaging();
+      if (instance === undefined) return undefined;
+      const message = await instance.getInitialNotification();
+      return message ?? undefined;
+    }
+  };
+}
+//# sourceMappingURL=fcm-provider.js.map

package/lib/module/push/fcm-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["lazyPeer","messagingPeer","require","cause","loadMessaging","result","get","ok","module","default","undefined","createFcmProvider","options","cached","resolved","messaging","onBackgroundMessage","setBackgroundMessageHandler","name","getAvailability","instance","isDeviceRegisteredForRemoteMessages","hasPermission","getToken","Error","onTokenChange","handler","onTokenRefresh","invalidateToken","deleteToken","subscribeToMessages","onMessage","message","takeInitialMessage","getInitialNotification"],"sourceRoot":"../../../src","sources":["push/fcm-provider.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,QAAQ,QAAQ,wBAAwB;;AAKjD;;AAiBA,MAAMC,aAAa,GAAGD,QAAQ,CAAC,kCAAkC,EAAE,MAAM;EACxE;EACA,IAAI;IACH,OAAOE,OAAO,CAAC,kCAAkC,CAAC;EACnD,CAAC,CAAC,OAAOC,KAAK,EAAE;IACf,MAAMA,KAAK;EACZ;AACD,CAAC,CAAC;AAEF,SAASC,aAAaA,CAAA,EAAgC;EACrD;EACA;EACA,MAAMC,MAAM,GAAGJ,aAAa,CAACK,GAAG,CAAC,CAAC;EAClC,OAAOD,MAAM,CAACE,EAAE,GAAGF,MAAM,CAACG,MAAM,CAACC,OAAO,GAAGC,SAAS;AACrD;AAeA,OAAO,SAASC,iBAAiBA,CAACC,OAA2B,GAAG,CAAC,CAAC,EAAuB;EACxF,IAAIC,MAAmC,GAAGD,OAAO,CAACJ,MAAM;EACxD,IAAIM,QAAQ,GAAGF,OAAO,CAACJ,MAAM,KAAKE,SAAS;EAE3C,MAAMK,SAAS,GAAGA,CAAA,KAAqC;IACtD,IAAI,CAACD,QAAQ,EAAE;MACdD,MAAM,GAAGT,aAAa,CAAC,CAAC;MACxBU,QAAQ,GAAG,IAAI;IAChB;IACA,OAAOD,MAAM,GAAG,CAAC;EAClB,CAAC;EAED,IAAID,OAAO,CAACI,mBAAmB,KAAKN,SAAS,EAAE;IAC9CK,SAAS,CAAC,CAAC,EAAEE,2BAA2B,CAACL,OAAO,CAACI,mBAAmB,CAAC;EACtE;EAEA,OAAO;IACNE,IAAI,EAAE,kCAAkC;IAExC,MAAMC,eAAeA,CAAA,EAA8B;MAClD,MAAMC,QAAQ,GAAGL,SAAS,CAAC,CAAC;;MAE5B;MACA;MACA,IAAIK,QAAQ,KAAKV,SAAS,EAAE,OAAO,aAAa;;MAEhD;MACA;MACA;MACA,IAAI;QACH,IAAIU,QAAQ,CAACC,mCAAmC,KAAK,IAAI,EAAE;UAC1D,OAAO,WAAW;QACnB;QACA,IAAID,QAAQ,CAACE,aAAa,KAAKZ,SAAS,EAAE;UACzC;UACA;UACA,MAAMU,QAAQ,CAACE,aAAa,CAAC,CAAC;UAC9B,OAAO,WAAW;QACnB;QACA,OAAO,SAAS;MACjB,CAAC,CAAC,MAAM;QACP;QACA,OAAO,SAAS;MACjB;IACD,CAAC;IAED,MAAMC,QAAQA,CAAA,EAAoB;MACjC,MAAMH,QAAQ,GAAGL,SAAS,CAAC,CAAC;MAC5B,IAAIK,QAAQ,KAAKV,SAAS,EAAE;QAC3B,MAAM,IAAIc,KAAK,CAAC,8CAA8C,CAAC;MAChE;MACA;MACA;MACA,OAAOJ,QAAQ,CAACG,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAEDE,aAAaA,CAACC,OAAgC,EAAe;MAC5D,MAAMN,QAAQ,GAAGL,SAAS,CAAC,CAAC;MAC5B,IAAIK,QAAQ,KAAKV,SAAS,EAAE,OAAO,MAAMA,SAAS;MAClD,OAAOU,QAAQ,CAACO,cAAc,CAACD,OAAO,CAAC;IACxC,CAAC;IAED,MAAME,eAAeA,CAAA,EAAqB;MACzC,MAAMR,QAAQ,GAAGL,SAAS,CAAC,CAAC;MAC5B,IAAIK,QAAQ,KAAKV,SAAS,EAAE,OAAO,KAAK;MAExC,IAAI;QACH,MAAMU,QAAQ,CAACS,WAAW,CAAC,CAAC;QAC5B,OAAO,IAAI;MACZ,CAAC,CAAC,MAAM;QACP;QACA;QACA,OAAO,KAAK;MACb;IACD,CAAC;IAEDC,mBAAmBA,CAACJ,OAA+B,EAAe;MACjE,MAAMN,QAAQ,GAAGL,SAAS,CAAC,CAAC;MAC5B,IAAIK,QAAQ,KAAKV,SAAS,EAAE,OAAO,MAAMA,SAAS;;MAElD;MACA;MACA,OAAOU,QAAQ,CAACW,SAAS,CAACC,OAAO,IAAI;QACpCN,OAAO,CAACM,OAAO,CAAC;MACjB,CAAC,CAAC;IACH,CAAC;IAED,MAAMC,kBAAkBA,CAAA,EAAiC;MACxD,MAAMb,QAAQ,GAAGL,SAAS,CAAC,CAAC;MAC5B,IAAIK,QAAQ,KAAKV,SAAS,EAAE,OAAOA,SAAS;MAE5C,MAAMsB,OAAO,GAAG,MAAMZ,QAAQ,CAACc,sBAAsB,CAAC,CAAC;MACvD,OAAOF,OAAO,IAAItB,SAAS;IAC5B;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/push/gate.js

@@ -0,0 +1,158 @@
+"use strict";
+
+/**
+ * The push gate.
+ *
+ * Everything a consumer sees about push comes through here, in one normalized
+ * shape with zero provider types. Substituting a provider is therefore an
+ * adapter swap rather than a consumer rewrite.
+ *
+ * Two behaviours are deliberate and easy to get wrong. A push arriving in the
+ * **foreground is never auto-displayed** — presentation is the app's decision,
+ * and a library that decided for it would fight every consumer's design. And a
+ * malformed payload is **dropped safely**, because a broken message from a
+ * server must not be able to crash an installed app.
+ */
+
+import { DIAGNOSTIC_CODES, isNotificationError } from "../contract/errors.js";
+import { normalizeEnvelope, IMPLEMENTED_PAYLOAD_VERSION } from "./envelope.js";
+import { recordSeen } from "../state/dedup-ledger.js";
+export function createPushGate(deps) {
+  const emit = deps.emit ?? (() => {});
+  let handlers = [];
+  let subscription;
+  /** Every token subscription, so a second one does not leak the first (NOT-24). */
+  const tokenSubscriptions = new Set();
+  let deliveryChain = Promise.resolve();
+  const dispatch = envelope => {
+    deliveryChain = deliveryChain.then(async () => {
+      for (const handler of handlers) {
+        try {
+          await handler(envelope);
+        } catch {
+          // A consumer's handler failing must not stop the next payload.
+        }
+      }
+    });
+  };
+  const receive = raw => {
+    let normalized;
+    try {
+      normalized = normalizeEnvelope(raw, deps.now());
+    } catch (error) {
+      // Dropped safely and recorded. A broken message must never crash the app
+      // or corrupt the local schedule.
+      emit(DIAGNOSTIC_CODES.PAYLOAD_MALFORMED, isNotificationError(error) ? error.message : 'Push payload could not be interpreted and was discarded.', isNotificationError(error) ? error.context : undefined);
+      return undefined;
+    }
+    const {
+      envelope,
+      versionSkew
+    } = normalized;
+    if (versionSkew) {
+      emit(DIAGNOSTIC_CODES.PAYLOAD_VERSION_SKEW, `Push payload declares contract version ${envelope.version}; this build implements ${IMPLEMENTED_PAYLOAD_VERSION}. Processed best-effort — known fields honoured, unknown fields ignored.`, {
+        received: envelope.version,
+        implemented: IMPLEMENTED_PAYLOAD_VERSION
+      });
+    }
+
+    // Deduplication survives process death, which is the case that matters:
+    // a redelivery usually arrives in a fresh process.
+    if (recordSeen(deps.state, envelope.dedupId, deps.now(), envelope.ownerTag)) {
+      emit(DIAGNOSTIC_CODES.PAYLOAD_DUPLICATE, 'Push payload was already handled and was suppressed.', {
+        dedupId: envelope.dedupId
+      });
+      return undefined;
+    }
+    dispatch(envelope);
+    return envelope;
+  };
+  return {
+    /** Reports whether platform push services exist, so degradation is controlled. */
+    async getAvailability() {
+      const availability = await deps.provider.getAvailability();
+      if (availability === 'unavailable') {
+        emit(DIAGNOSTIC_CODES.PUSH_UNAVAILABLE, 'Platform push services are unavailable on this device. The push path is disabled; the entire local notification path is unaffected.');
+      }
+      return availability;
+    },
+    /** Waits for a genuine token. Never returns a placeholder presented as one. */
+    async getToken() {
+      const token = await deps.provider.getToken();
+      if (typeof token !== 'string' || token.length === 0) {
+        emit(DIAGNOSTIC_CODES.TOKEN_UNAVAILABLE, 'The provider has no registration token yet. An empty value is never returned as if it were one.');
+        throw new Error('Push token is not yet available.');
+      }
+      // The token value itself is never logged.
+      return token;
+    },
+    onTokenChange(handler) {
+      const unsubscribe = deps.provider.onTokenChange(handler);
+      tokenSubscriptions.add(unsubscribe);
+      return () => {
+        if (tokenSubscriptions.delete(unsubscribe)) {
+          unsubscribe();
+        }
+      };
+    },
+    async invalidateToken() {
+      const ok = await deps.provider.invalidateToken();
+      if (!ok) {
+        emit(DIAGNOSTIC_CODES.TOKEN_INVALIDATION_FAILED, 'Token invalidation did not succeed. The device may keep receiving messages for the previous account.');
+      }
+      return ok;
+    },
+    /**
+     * Subscribes to inbound payloads.
+     *
+     * Nothing is displayed automatically — the consumer decides whether and how
+     * to present a foreground push.
+     */
+    onPushReceived(handler) {
+      handlers.push(handler);
+      subscription ??= deps.provider.subscribeToMessages(receive);
+      return () => {
+        handlers = handlers.filter(h => h !== handler);
+      };
+    },
+    /**
+     * Processes a payload delivered while the app was in the background, from
+     * the module-scope handler `setBackgroundMessageHandler` requires (NOT-24).
+     *
+     * The same normalization and the same persisted deduplication as a
+     * foreground payload, so a redelivery after the process restarted is
+     * suppressed rather than handled twice. Resolves once every handler has run.
+     */
+    async handleBackground(raw) {
+      const envelope = receive(raw);
+      await deliveryChain;
+      return envelope;
+    },
+    /** Processes the payload that launched the app, if any. */
+    async collectInitial() {
+      const raw = await deps.provider.takeInitialMessage();
+      return raw === undefined ? undefined : receive(raw);
+    },
+    /** Reports a specific cause rather than leaving a non-delivery unexplained. */
+    reportUndeliverable(cause, context) {
+      emit(DIAGNOSTIC_CODES.PUSH_UNDELIVERABLE, `A push could not be delivered or displayed: ${cause}.`, {
+        cause,
+        ...context
+      });
+    },
+    /** Exposed for tests and orderly shutdown. */
+    async flush() {
+      await deliveryChain;
+    },
+    dispose() {
+      subscription?.();
+      subscription = undefined;
+      for (const unsubscribe of tokenSubscriptions) {
+        unsubscribe();
+      }
+      tokenSubscriptions.clear();
+      handlers = [];
+    }
+  };
+}
+//# sourceMappingURL=gate.js.map

package/lib/module/push/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DIAGNOSTIC_CODES","isNotificationError","normalizeEnvelope","IMPLEMENTED_PAYLOAD_VERSION","recordSeen","createPushGate","deps","emit","handlers","subscription","tokenSubscriptions","Set","deliveryChain","Promise","resolve","dispatch","envelope","then","handler","receive","raw","normalized","now","error","PAYLOAD_MALFORMED","message","context","undefined","versionSkew","PAYLOAD_VERSION_SKEW","version","received","implemented","state","dedupId","ownerTag","PAYLOAD_DUPLICATE","getAvailability","availability","provider","PUSH_UNAVAILABLE","getToken","token","length","TOKEN_UNAVAILABLE","Error","onTokenChange","unsubscribe","add","delete","invalidateToken","ok","TOKEN_INVALIDATION_FAILED","onPushReceived","push","subscribeToMessages","filter","h","handleBackground","collectInitial","takeInitialMessage","reportUndeliverable","cause","PUSH_UNDELIVERABLE","flush","dispose","clear"],"sourceRoot":"../../../src","sources":["push/gate.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,SAASA,gBAAgB,EAAEC,mBAAmB,QAAQ,uBAAoB;AAC1E,SAASC,iBAAiB,EAAEC,2BAA2B,QAAQ,eAAY;AAC3E,SAASC,UAAU,QAAQ,0BAAuB;AAkBlD,OAAO,SAASC,cAAcA,CAACC,IAA0B,EAAE;EAC1D,MAAMC,IAAI,GAAGD,IAAI,CAACC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;EACpC,IAAIC,QAAuB,GAAG,EAAE;EAChC,IAAIC,YAAqC;EACzC;EACA,MAAMC,kBAAkB,GAAG,IAAIC,GAAG,CAAc,CAAC;EACjD,IAAIC,aAA4B,GAAGC,OAAO,CAACC,OAAO,CAAC,CAAC;EAEpD,MAAMC,QAAQ,GAAIC,QAAsB,IAAW;IAClDJ,aAAa,GAAGA,aAAa,CAACK,IAAI,CAAC,YAAY;MAC9C,KAAK,MAAMC,OAAO,IAAIV,QAAQ,EAAE;QAC/B,IAAI;UACH,MAAMU,OAAO,CAACF,QAAQ,CAAC;QACxB,CAAC,CAAC,MAAM;UACP;QAAA;MAEF;IACD,CAAC,CAAC;EACH,CAAC;EAED,MAAMG,OAAO,GAAIC,GAAY,IAA+B;IAC3D,IAAIC,UAAU;IACd,IAAI;MACHA,UAAU,GAAGnB,iBAAiB,CAACkB,GAAG,EAAEd,IAAI,CAACgB,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,OAAOC,KAAK,EAAE;MACf;MACA;MACAhB,IAAI,CACHP,gBAAgB,CAACwB,iBAAiB,EAClCvB,mBAAmB,CAACsB,KAAK,CAAC,GACvBA,KAAK,CAACE,OAAO,GACb,0DAA0D,EAC7DxB,mBAAmB,CAACsB,KAAK,CAAC,GAAGA,KAAK,CAACG,OAAO,GAAGC,SAC9C,CAAC;MACD,OAAOA,SAAS;IACjB;IAEA,MAAM;MAAEX,QAAQ;MAAEY;IAAY,CAAC,GAAGP,UAAU;IAE5C,IAAIO,WAAW,EAAE;MAChBrB,IAAI,CACHP,gBAAgB,CAAC6B,oBAAoB,EACrC,0CAA0Cb,QAAQ,CAACc,OAAO,2BAA2B3B,2BAA2B,0EAA0E,EAC1L;QAAE4B,QAAQ,EAAEf,QAAQ,CAACc,OAAO;QAAEE,WAAW,EAAE7B;MAA4B,CACxE,CAAC;IACF;;IAEA;IACA;IACA,IAAIC,UAAU,CAACE,IAAI,CAAC2B,KAAK,EAAEjB,QAAQ,CAACkB,OAAO,EAAE5B,IAAI,CAACgB,GAAG,CAAC,CAAC,EAAEN,QAAQ,CAACmB,QAAQ,CAAC,EAAE;MAC5E5B,IAAI,CACHP,gBAAgB,CAACoC,iBAAiB,EAClC,sDAAsD,EACtD;QAAEF,OAAO,EAAElB,QAAQ,CAACkB;MAAQ,CAC7B,CAAC;MACD,OAAOP,SAAS;IACjB;IAEAZ,QAAQ,CAACC,QAAQ,CAAC;IAClB,OAAOA,QAAQ;EAChB,CAAC;EAED,OAAO;IACN;IACA,MAAMqB,eAAeA,CAAA,EAA8B;MAClD,MAAMC,YAAY,GAAG,MAAMhC,IAAI,CAACiC,QAAQ,CAACF,eAAe,CAAC,CAAC;MAE1D,IAAIC,YAAY,KAAK,aAAa,EAAE;QACnC/B,IAAI,CACHP,gBAAgB,CAACwC,gBAAgB,EACjC,qIACD,CAAC;MACF;MACA,OAAOF,YAAY;IACpB,CAAC;IAED;IACA,MAAMG,QAAQA,CAAA,EAAoB;MACjC,MAAMC,KAAK,GAAG,MAAMpC,IAAI,CAACiC,QAAQ,CAACE,QAAQ,CAAC,CAAC;MAE5C,IAAI,OAAOC,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACC,MAAM,KAAK,CAAC,EAAE;QACpDpC,IAAI,CACHP,gBAAgB,CAAC4C,iBAAiB,EAClC,iGACD,CAAC;QACD,MAAM,IAAIC,KAAK,CAAC,kCAAkC,CAAC;MACpD;MACA;MACA,OAAOH,KAAK;IACb,CAAC;IAEDI,aAAaA,CAAC5B,OAAgC,EAAe;MAC5D,MAAM6B,WAAW,GAAGzC,IAAI,CAACiC,QAAQ,CAACO,aAAa,CAAC5B,OAAO,CAAC;MACxDR,kBAAkB,CAACsC,GAAG,CAACD,WAAW,CAAC;MACnC,OAAO,MAAM;QACZ,IAAIrC,kBAAkB,CAACuC,MAAM,CAACF,WAAW,CAAC,EAAE;UAC3CA,WAAW,CAAC,CAAC;QACd;MACD,CAAC;IACF,CAAC;IAED,MAAMG,eAAeA,CAAA,EAAqB;MACzC,MAAMC,EAAE,GAAG,MAAM7C,IAAI,CAACiC,QAAQ,CAACW,eAAe,CAAC,CAAC;MAEhD,IAAI,CAACC,EAAE,EAAE;QACR5C,IAAI,CACHP,gBAAgB,CAACoD,yBAAyB,EAC1C,sGACD,CAAC;MACF;MACA,OAAOD,EAAE;IACV,CAAC;IAED;AACF;AACA;AACA;AACA;AACA;IACEE,cAAcA,CAACnC,OAAoB,EAAe;MACjDV,QAAQ,CAAC8C,IAAI,CAACpC,OAAO,CAAC;MACtBT,YAAY,KAAKH,IAAI,CAACiC,QAAQ,CAACgB,mBAAmB,CAACpC,OAAO,CAAC;MAE3D,OAAO,MAAM;QACZX,QAAQ,GAAGA,QAAQ,CAACgD,MAAM,CAACC,CAAC,IAAIA,CAAC,KAAKvC,OAAO,CAAC;MAC/C,CAAC;IACF,CAAC;IAED;AACF;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMwC,gBAAgBA,CAACtC,GAAY,EAAqC;MACvE,MAAMJ,QAAQ,GAAGG,OAAO,CAACC,GAAG,CAAC;MAC7B,MAAMR,aAAa;MACnB,OAAOI,QAAQ;IAChB,CAAC;IAED;IACA,MAAM2C,cAAcA,CAAA,EAAsC;MACzD,MAAMvC,GAAG,GAAG,MAAMd,IAAI,CAACiC,QAAQ,CAACqB,kBAAkB,CAAC,CAAC;MACpD,OAAOxC,GAAG,KAAKO,SAAS,GAAGA,SAAS,GAAGR,OAAO,CAACC,GAAG,CAAC;IACpD,CAAC;IAED;IACAyC,mBAAmBA,CAACC,KAAyB,EAAEpC,OAAiC,EAAQ;MACvFnB,IAAI,CACHP,gBAAgB,CAAC+D,kBAAkB,EACnC,+CAA+CD,KAAK,GAAG,EACvD;QAAEA,KAAK;QAAE,GAAGpC;MAAQ,CACrB,CAAC;IACF,CAAC;IAED;IACA,MAAMsC,KAAKA,CAAA,EAAkB;MAC5B,MAAMpD,aAAa;IACpB,CAAC;IAEDqD,OAAOA,CAAA,EAAS;MACfxD,YAAY,GAAG,CAAC;MAChBA,YAAY,GAAGkB,SAAS;MACxB,KAAK,MAAMoB,WAAW,IAAIrC,kBAAkB,EAAE;QAC7CqC,WAAW,CAAC,CAAC;MACd;MACArC,kBAAkB,CAACwD,KAAK,CAAC,CAAC;MAC1B1D,QAAQ,GAAG,EAAE;IACd;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/push/index.js

@@ -0,0 +1,16 @@
+"use strict";
+
+/**
+ * Push surface: `@chipmobilesdk/rn-notification/push`
+ *
+ * Separate from the default entrypoint so an app that never imports this ships
+ * zero provider code, zero push permissions, and zero entitlements — and takes
+ * on none of the provider's data-collection declarations.
+ */
+
+export { createPushGate } from "./gate.js";
+export { createFcmProvider } from "./fcm-provider.js";
+export { createSignOut } from "./signout.js";
+export { createInstructionHandler } from "./instructions.js";
+export { normalizeEnvelope, IMPLEMENTED_PAYLOAD_VERSION } from "./envelope.js";
+//# sourceMappingURL=index.js.map

package/lib/module/push/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPushGate","createFcmProvider","createSignOut","createInstructionHandler","normalizeEnvelope","IMPLEMENTED_PAYLOAD_VERSION"],"sourceRoot":"../../../src","sources":["push/index.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,cAAc,QAAQ,WAAQ;AAGvC,SAASC,iBAAiB,QAAQ,mBAAgB;AAGlD,SAASC,aAAa,QAAQ,cAAW;AAGzC,SAASC,wBAAwB,QAAQ,mBAAgB;AAOzD,SAASC,iBAAiB,EAAEC,2BAA2B,QAAQ,eAAY","ignoreList":[]}

package/lib/module/push/instructions.js

@@ -0,0 +1,97 @@
+"use strict";
+
+/**
+ * Push-driven local scheduling.
+ *
+ * Where the two paths meet. A server can schedule or cancel a local
+ * notification, and it gets **no privileged path**: an instruction arriving by
+ * push passes exactly the same identifier validation, moment validation, tone
+ * resolution, and permission rules as a request from app code.
+ *
+ * That symmetry is the point. A server that could bypass validation would be
+ * able to put the device into a state the app itself could not produce, and no
+ * amount of local correctness would survive it.
+ */
+
+import { DIAGNOSTIC_CODES, isNotificationError } from "../contract/errors.js";
+export function createInstructionHandler(deps) {
+  const emit = deps.emit ?? (() => {});
+
+  /**
+   * Whether a local schedule already covers this event.
+   *
+   * Local wins: it is the entry the device can present at the right moment with
+   * no network. A server that genuinely wants to override sends an explicit
+   * cancel followed by a schedule, which is unambiguous in a way "last write
+   * wins" is not.
+   */
+  const localAlreadyCovers = async id => {
+    const pending = await deps.engine.getPending();
+    const existing = pending.find(entry => entry.id === id);
+    return existing !== undefined && !existing.pushCreated;
+  };
+  return {
+    async handle(envelope) {
+      if (envelope.kind !== 'schedule' && envelope.kind !== 'cancel') {
+        return {
+          kind: 'ignored',
+          id: envelope.id
+        };
+      }
+      try {
+        if (envelope.kind === 'cancel') {
+          await deps.scheduler.cancel(envelope.id);
+          return {
+            kind: 'cancelled',
+            id: envelope.id
+          };
+        }
+        if (envelope.moment === undefined || envelope.content === undefined) {
+          throw Object.assign(new Error('A schedule instruction must carry both a moment and content.'), {
+            code: DIAGNOSTIC_CODES.PAYLOAD_MALFORMED
+          });
+        }
+        if (await localAlreadyCovers(envelope.id)) {
+          emit(DIAGNOSTIC_CODES.PAYLOAD_DUPLICATE, 'A local schedule already covers this event; the push instruction was suppressed so the user sees exactly one notification.', {
+            id: envelope.id
+          });
+          return {
+            kind: 'suppressed',
+            id: envelope.id,
+            reason: 'A local schedule already covers this event.'
+          };
+        }
+        const result = await deps.scheduler.schedule({
+          id: envelope.id,
+          content: envelope.content,
+          tone: envelope.tone ?? '',
+          moment: envelope.moment,
+          routing: envelope.routing,
+          ownerTag: envelope.ownerTag
+        }, {
+          pushCreated: true
+        });
+        return {
+          kind: 'scheduled',
+          id: envelope.id,
+          replaced: result.replaced
+        };
+      } catch (error) {
+        // Rejected under exactly the rules an app-initiated request would face,
+        // and recorded rather than swallowed.
+        const code = isNotificationError(error) ? error.code : error.code ?? 'UNKNOWN';
+        const reason = error instanceof Error ? error.message : String(error);
+        emit(code, `Push instruction rejected: ${reason}`, {
+          id: envelope.id
+        });
+        return {
+          kind: 'rejected',
+          id: envelope.id,
+          code,
+          reason
+        };
+      }
+    }
+  };
+}
+//# sourceMappingURL=instructions.js.map

package/lib/module/push/instructions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DIAGNOSTIC_CODES","isNotificationError","createInstructionHandler","deps","emit","localAlreadyCovers","id","pending","engine","getPending","existing","find","entry","undefined","pushCreated","handle","envelope","kind","scheduler","cancel","moment","content","Object","assign","Error","code","PAYLOAD_MALFORMED","PAYLOAD_DUPLICATE","reason","result","schedule","tone","routing","ownerTag","replaced","error","message","String"],"sourceRoot":"../../../src","sources":["push/instructions.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,SAASA,gBAAgB,EAAEC,mBAAmB,QAAQ,uBAAoB;AAoB1E,OAAO,SAASC,wBAAwBA,CAACC,IAA6B,EAAE;EACvE,MAAMC,IAAI,GAAGD,IAAI,CAACC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;;EAEpC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;EACC,MAAMC,kBAAkB,GAAG,MAAOC,EAAU,IAAuB;IAClE,MAAMC,OAAO,GAAG,MAAMJ,IAAI,CAACK,MAAM,CAACC,UAAU,CAAC,CAAC;IAC9C,MAAMC,QAAQ,GAAGH,OAAO,CAACI,IAAI,CAACC,KAAK,IAAIA,KAAK,CAACN,EAAE,KAAKA,EAAE,CAAC;IACvD,OAAOI,QAAQ,KAAKG,SAAS,IAAI,CAACH,QAAQ,CAACI,WAAW;EACvD,CAAC;EAED,OAAO;IACN,MAAMC,MAAMA,CAACC,QAAsB,EAA+B;MACjE,IAAIA,QAAQ,CAACC,IAAI,KAAK,UAAU,IAAID,QAAQ,CAACC,IAAI,KAAK,QAAQ,EAAE;QAC/D,OAAO;UAAEA,IAAI,EAAE,SAAS;UAAEX,EAAE,EAAEU,QAAQ,CAACV;QAAG,CAAC;MAC5C;MAEA,IAAI;QACH,IAAIU,QAAQ,CAACC,IAAI,KAAK,QAAQ,EAAE;UAC/B,MAAMd,IAAI,CAACe,SAAS,CAACC,MAAM,CAACH,QAAQ,CAACV,EAAE,CAAC;UACxC,OAAO;YAAEW,IAAI,EAAE,WAAW;YAAEX,EAAE,EAAEU,QAAQ,CAACV;UAAG,CAAC;QAC9C;QAEA,IAAIU,QAAQ,CAACI,MAAM,KAAKP,SAAS,IAAIG,QAAQ,CAACK,OAAO,KAAKR,SAAS,EAAE;UACpE,MAAMS,MAAM,CAACC,MAAM,CAClB,IAAIC,KAAK,CAAC,8DAA8D,CAAC,EACzE;YAAEC,IAAI,EAAEzB,gBAAgB,CAAC0B;UAAkB,CAC5C,CAAC;QACF;QAEA,IAAI,MAAMrB,kBAAkB,CAACW,QAAQ,CAACV,EAAE,CAAC,EAAE;UAC1CF,IAAI,CACHJ,gBAAgB,CAAC2B,iBAAiB,EAClC,4HAA4H,EAC5H;YAAErB,EAAE,EAAEU,QAAQ,CAACV;UAAG,CACnB,CAAC;UACD,OAAO;YACNW,IAAI,EAAE,YAAY;YAClBX,EAAE,EAAEU,QAAQ,CAACV,EAAE;YACfsB,MAAM,EAAE;UACT,CAAC;QACF;QAEA,MAAMC,MAAM,GAAG,MAAM1B,IAAI,CAACe,SAAS,CAACY,QAAQ,CAC3C;UACCxB,EAAE,EAAEU,QAAQ,CAACV,EAAE;UACfe,OAAO,EAAEL,QAAQ,CAACK,OAAO;UACzBU,IAAI,EAAEf,QAAQ,CAACe,IAAI,IAAI,EAAE;UACzBX,MAAM,EAAEJ,QAAQ,CAACI,MAAM;UACvBY,OAAO,EAAEhB,QAAQ,CAACgB,OAAO;UACzBC,QAAQ,EAAEjB,QAAQ,CAACiB;QACpB,CAAC,EACD;UAAEnB,WAAW,EAAE;QAAK,CACrB,CAAC;QAED,OAAO;UAAEG,IAAI,EAAE,WAAW;UAAEX,EAAE,EAAEU,QAAQ,CAACV,EAAE;UAAE4B,QAAQ,EAAEL,MAAM,CAACK;QAAS,CAAC;MACzE,CAAC,CAAC,OAAOC,KAAK,EAAE;QACf;QACA;QACA,MAAMV,IAAI,GAAGxB,mBAAmB,CAACkC,KAAK,CAAC,GACpCA,KAAK,CAACV,IAAI,GACRU,KAAK,CAAuBV,IAAI,IAAI,SAAU;QACnD,MAAMG,MAAM,GAAGO,KAAK,YAAYX,KAAK,GAAGW,KAAK,CAACC,OAAO,GAAGC,MAAM,CAACF,KAAK,CAAC;QAErE/B,IAAI,CAACqB,IAAI,EAAE,8BAA8BG,MAAM,EAAE,EAAE;UAAEtB,EAAE,EAAEU,QAAQ,CAACV;QAAG,CAAC,CAAC;QACvE,OAAO;UAAEW,IAAI,EAAE,UAAU;UAAEX,EAAE,EAAEU,QAAQ,CAACV,EAAE;UAAEmB,IAAI;UAAEG;QAAO,CAAC;MAC3D;IACD;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/push/provider-adapter.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=provider-adapter.js.map