@chipmobilesdk/rn-notification 0.6.0 → 0.7.0

package/lib/module/contract/hash.js

@@ -0,0 +1,29 @@
+"use strict";
+
+/**
+ * FNV-1a, 32-bit: the package's one hash (NOT-19). Deterministic,
+ * dependency-free, and stable across releases.
+ *
+ * Bitwise operators are the algorithm, not a micro-optimisation: arithmetic
+ * equivalents would not wrap to 32 bits. Stability matters: a marker id or a
+ * label fingerprint that changed between releases would orphan every marker
+ * already scheduled, or refresh every channel label once more.
+ */
+export const FNV_OFFSET_BASIS = 0x811c9dc5;
+
+/* eslint-disable no-bitwise */
+export function fnv1a(value, basis = FNV_OFFSET_BASIS) {
+  let hash = basis;
+  for (let index = 0; index < value.length; index += 1) {
+    hash ^= value.codePointAt(index) ?? 0;
+    hash = Math.imul(hash, 0x01000193) >>> 0;
+  }
+  return hash >>> 0;
+}
+/* eslint-enable no-bitwise */
+
+/** Eight lowercase hex digits. */
+export function hex8(value) {
+  return value.toString(16).padStart(8, '0');
+}
+//# sourceMappingURL=hash.js.map

package/lib/module/contract/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["FNV_OFFSET_BASIS","fnv1a","value","basis","hash","index","length","codePointAt","Math","imul","hex8","toString","padStart"],"sourceRoot":"../../../src","sources":["contract/hash.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMA,gBAAgB,GAAG,UAAU;;AAE1C;AACA,OAAO,SAASC,KAAKA,CAACC,KAAa,EAAEC,KAAa,GAAGH,gBAAgB,EAAU;EAC9E,IAAII,IAAI,GAAGD,KAAK;EAChB,KAAK,IAAIE,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGH,KAAK,CAACI,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACrDD,IAAI,IAAIF,KAAK,CAACK,WAAW,CAACF,KAAK,CAAC,IAAI,CAAC;IACrCD,IAAI,GAAGI,IAAI,CAACC,IAAI,CAACL,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;EACzC;EACA,OAAOA,IAAI,KAAK,CAAC;AAClB;AACA;;AAEA;AACA,OAAO,SAASM,IAAIA,CAACR,KAAa,EAAU;EAC3C,OAAOA,KAAK,CAACS,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3C","ignoreList":[]}

package/lib/module/contract/index.js

@@ -0,0 +1,13 @@
+"use strict";
+
+/** Public contract types. Types only — no logic lives in this layer. */
+
+export * from "./notification.js";
+export * from "./recurrence.js";
+export * from "./reconcile.js";
+export * from "./permission.js";
+export * from "./channel.js";
+export * from "./interaction.js";
+export * from "./diagnostics.js";
+export * from "./errors.js";
+//# sourceMappingURL=index.js.map

package/lib/module/contract/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/index.ts"],"mappings":";;AAAA;;AAEA,cAAc,mBAAgB;AAC9B,cAAc,iBAAc;AAC5B,cAAc,gBAAa;AAC3B,cAAc,iBAAc;AAC5B,cAAc,cAAW;AACzB,cAAc,kBAAe;AAC7B,cAAc,kBAAe;AAC7B,cAAc,aAAU","ignoreList":[]}

package/lib/module/contract/interaction.js

@@ -0,0 +1,33 @@
+"use strict";
+
+/**
+ * Interaction types.
+ *
+ * One event shape covers foreground, background, and cold start, so a consumer
+ * writes one handler. Events that occur before a handler registers are buffered
+ * durably and delivered on registration — the cold-start case is the one most
+ * integrations quietly get wrong.
+ */
+
+/** Which app state the interaction arrived in. Informational; the shape never varies. */
+
+/**
+ * Signals the routing target no longer exists.
+ *
+ * The consumer chooses its own fallback screen. A platform error is never
+ * shown to the user for this — a notification pointing at deleted data is an
+ * ordinary condition, not a crash.
+ */
+
+/** Limits on the durable interaction buffer, so it can never grow without bound. */
+export const INTERACTION_BUFFER_LIMITS = {
+  maxEntries: 50,
+  retentionMs: 7 * 24 * 60 * 60 * 1000
+};
+
+/** Maximum size of a routing payload, validated at schedule time rather than discovered at tap time. */
+export const MAX_ROUTING_PAYLOAD_BYTES = 4 * 1024;
+
+/** Maximum action buttons on one notification. */
+export const MAX_ACTIONS_PER_NOTIFICATION = 10;
+//# sourceMappingURL=interaction.js.map

package/lib/module/contract/interaction.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["INTERACTION_BUFFER_LIMITS","maxEntries","retentionMs","MAX_ROUTING_PAYLOAD_BYTES","MAX_ACTIONS_PER_NOTIFICATION"],"sourceRoot":"../../../src","sources":["contract/interaction.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;;AAUA;AACA,OAAO,MAAMA,yBAAyB,GAAG;EACxCC,UAAU,EAAE,EAAE;EACdC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;AACjC,CAAU;;AAEV;AACA,OAAO,MAAMC,yBAAyB,GAAG,CAAC,GAAG,IAAI;;AAEjD;AACA,OAAO,MAAMC,4BAA4B,GAAG,EAAE","ignoreList":[]}

package/lib/module/contract/notification.js

@@ -0,0 +1,38 @@
+"use strict";
+
+/**
+ * Core notification request types.
+ *
+ * Nothing here carries business meaning. The package accepts fully-described
+ * requests and is responsible only for delivering them at the right moment.
+ */
+
+/**
+ * How a delivery moment is pinned to the passage of time.
+ *
+ * - `wallClock` — the local clock time named. An 08:00 reminder stays 08:00
+ *   after the user crosses a time zone. This is the default, because reminders
+ *   are wall-clock things and a caller who does not choose should get what
+ *   their users expect.
+ * - `absolute` — one fixed instant worldwide, unaffected by zone changes.
+ */
+
+export const DEFAULT_ANCHORING_MODE = 'wallClock';
+
+/** When a notification should be presented, and how that moment is anchored. */
+
+/**
+ * Resolved display strings. The package performs no translation, formatting,
+ * or locale resolution — only the consuming app knows its content model.
+ */
+
+/** Structured data carried to the interaction handler, unchanged. */
+
+/** A button on a notification. */
+
+/** The complete, self-contained description of one notification. */
+
+/** One entry the platform is currently holding, in enough detail to diff against intent. */
+
+/** Outcome of a single schedule call. */
+//# sourceMappingURL=notification.js.map

package/lib/module/contract/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DEFAULT_ANCHORING_MODE"],"sourceRoot":"../../../src","sources":["contract/notification.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,OAAO,MAAMA,sBAAqC,GAAG,WAAW;;AAEhE;;AAQA;AACA;AACA;AACA;;AAQA;;AAGA;;AAiBA;;AAmBA;;AA4BA","ignoreList":[]}

package/lib/module/contract/permission.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=permission.js.map

package/lib/module/contract/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/permission.ts"],"mappings":"","ignoreList":[]}

package/lib/module/contract/reconcile.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=reconcile.js.map

package/lib/module/contract/reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/reconcile.ts"],"mappings":"","ignoreList":[]}

package/lib/module/contract/recurrence.js

@@ -0,0 +1,49 @@
+"use strict";
+
+/**
+ * Recurrence declaration types.
+ *
+ * A caller declares a rule once; the package expands it inside a finite
+ * lookahead window. No caller ever writes an expansion loop, and no unbounded
+ * series is ever handed to the platform.
+ */
+
+/** Days of the week, `0` = Sunday, matching `Date.prototype.getDay`. */
+
+/** Every day at the declared clock time. */
+
+/** Selected weekdays at the declared clock time. */
+
+/**
+ * A fixed day of the month at the declared clock time.
+ *
+ * Months shorter than `dayOfMonth` are skipped rather than clamped: a caller
+ * asking for the 31st means the 31st, and inventing the 28th would be the
+ * package deciding something it was not asked to decide.
+ */
+
+/** When a series stops producing occurrences. */
+
+/** Content shared by every occurrence of a series. Identity and moment are derived. */
+
+/**
+ * How far ahead occurrences are registered with the platform.
+ *
+ * Bounded by both a duration and a count because either alone fails: a duration
+ * alone lets a frequent series exhaust the platform ceiling, and a count alone
+ * leaves an annual series scheduled a decade out.
+ */
+
+export const DEFAULT_LOOKAHEAD = {
+  days: 60,
+  occurrencesPerSeries: 32
+};
+
+/** Bounds on consumer adjustment, because the platform ceiling is not negotiable. */
+export const LOOKAHEAD_BOUNDS = {
+  minDays: 1,
+  maxDays: 365,
+  minOccurrences: 1,
+  maxOccurrences: 64
+};
+//# sourceMappingURL=recurrence.js.map

package/lib/module/contract/recurrence.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DEFAULT_LOOKAHEAD","days","occurrencesPerSeries","LOOKAHEAD_BOUNDS","minDays","maxDays","minOccurrences","maxOccurrences"],"sourceRoot":"../../../src","sources":["contract/recurrence.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;;AAGA;;AASA;;AAUA;AACA;AACA;AACA;AACA;AACA;AACA;;AAYA;;AAMA;;AAyBA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,OAAO,MAAMA,iBAAkC,GAAG;EACjDC,IAAI,EAAE,EAAE;EACRC,oBAAoB,EAAE;AACvB,CAAC;;AAED;AACA,OAAO,MAAMC,gBAAgB,GAAG;EAC/BC,OAAO,EAAE,CAAC;EACVC,OAAO,EAAE,GAAG;EACZC,cAAc,EAAE,CAAC;EACjBC,cAAc,EAAE;AACjB,CAAU","ignoreList":[]}

package/lib/module/diagnostics/burst.js

@@ -0,0 +1,85 @@
+"use strict";
+
+/**
+ * Burst detection.
+ *
+ * Both platforms apply undocumented delivery rate limits and will silently drop
+ * or delay past them — which is exactly the invisible failure this package
+ * exists to eliminate. So volume is watched and reported.
+ *
+ * It is **not** acted upon. Nothing is throttled, delayed, coalesced, or
+ * dropped: deciding which of a user's notifications to suppress is a product
+ * decision the package has no basis to make. Noticing that something abnormal
+ * is happening is one it can.
+ *
+ * Counters are in memory only. A burst is a live condition, and persisting it
+ * would expand the state contract for no diagnostic gain.
+ */
+
+import { DEFAULT_BURST_THRESHOLD } from "../contract/diagnostics.js";
+import { DIAGNOSTIC_CODES } from "../contract/errors.js";
+const MINUTE_MS = 60_000;
+const HOUR_MS = 60 * MINUTE_MS;
+export function createBurstDetector(deps = {}) {
+  const threshold = deps.threshold ?? DEFAULT_BURST_THRESHOLD;
+  const emit = deps.emit ?? (() => {});
+  /** Per owner tag, because one busy account should not implicate another. */
+  const timestamps = new Map();
+  /** Prevents one sustained burst producing a diagnostic per notification. */
+  const reportedAt = new Map();
+  const prune = (tag, now) => {
+    const kept = (timestamps.get(tag) ?? []).filter(at => now - at <= HOUR_MS);
+    timestamps.set(tag, kept);
+    return kept;
+  };
+  return {
+    /**
+     * Records one presented notification and reports if the threshold is crossed.
+     *
+     * Always returns after recording — the caller delivers regardless of what
+     * this says.
+     */
+    record(now, ownerTag = '*') {
+      const kept = prune(ownerTag, now);
+      kept.push(now);
+      const lastMinute = kept.filter(at => now - at <= MINUTE_MS).length;
+      const lastHour = kept.length;
+      const exceeded = lastMinute > threshold.perMinute || lastHour > threshold.perHour;
+      if (exceeded) {
+        const last = reportedAt.get(ownerTag) ?? 0;
+        // One report per minute per tag; a sustained burst is one condition,
+        // not a hundred.
+        if (now - last >= MINUTE_MS) {
+          reportedAt.set(ownerTag, now);
+          emit(DIAGNOSTIC_CODES.BURST_THRESHOLD_EXCEEDED, `Abnormal notification volume: ${lastMinute} in the last minute and ${lastHour} in the last hour (thresholds ${threshold.perMinute}/minute, ${threshold.perHour}/hour). Every notification was still delivered — the package throttles nothing.`, {
+            ownerTag,
+            lastMinute,
+            lastHour,
+            threshold
+          });
+        }
+      }
+      return {
+        ownerTag,
+        lastMinute,
+        lastHour,
+        exceeded
+      };
+    },
+    status(now, ownerTag = '*') {
+      const kept = prune(ownerTag, now);
+      const lastMinute = kept.filter(at => now - at <= MINUTE_MS).length;
+      return {
+        ownerTag,
+        lastMinute,
+        lastHour: kept.length,
+        exceeded: lastMinute > threshold.perMinute || kept.length > threshold.perHour
+      };
+    },
+    reset() {
+      timestamps.clear();
+      reportedAt.clear();
+    }
+  };
+}
+//# sourceMappingURL=burst.js.map

package/lib/module/diagnostics/burst.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DEFAULT_BURST_THRESHOLD","DIAGNOSTIC_CODES","MINUTE_MS","HOUR_MS","createBurstDetector","deps","threshold","emit","timestamps","Map","reportedAt","prune","tag","now","kept","get","filter","at","set","record","ownerTag","push","lastMinute","length","lastHour","exceeded","perMinute","perHour","last","BURST_THRESHOLD_EXCEEDED","status","reset","clear"],"sourceRoot":"../../../src","sources":["diagnostics/burst.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,uBAAuB,QAAQ,4BAAyB;AACjE,SAASC,gBAAgB,QAAQ,uBAAoB;AAErD,MAAMC,SAAS,GAAG,MAAM;AACxB,MAAMC,OAAO,GAAG,EAAE,GAAGD,SAAS;AAc9B,OAAO,SAASE,mBAAmBA,CAACC,IAA+B,GAAG,CAAC,CAAC,EAAE;EACzE,MAAMC,SAAS,GAAGD,IAAI,CAACC,SAAS,IAAIN,uBAAuB;EAC3D,MAAMO,IAAI,GAAGF,IAAI,CAACE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;EACpC;EACA,MAAMC,UAAU,GAAG,IAAIC,GAAG,CAAmB,CAAC;EAC9C;EACA,MAAMC,UAAU,GAAG,IAAID,GAAG,CAAiB,CAAC;EAE5C,MAAME,KAAK,GAAGA,CAACC,GAAW,EAAEC,GAAW,KAAe;IACrD,MAAMC,IAAI,GAAG,CAACN,UAAU,CAACO,GAAG,CAACH,GAAG,CAAC,IAAI,EAAE,EAAEI,MAAM,CAACC,EAAE,IAAIJ,GAAG,GAAGI,EAAE,IAAId,OAAO,CAAC;IAC1EK,UAAU,CAACU,GAAG,CAACN,GAAG,EAAEE,IAAI,CAAC;IACzB,OAAOA,IAAI;EACZ,CAAC;EAED,OAAO;IACN;AACF;AACA;AACA;AACA;AACA;IACEK,MAAMA,CAACN,GAAW,EAAEO,QAAQ,GAAG,GAAG,EAAe;MAChD,MAAMN,IAAI,GAAGH,KAAK,CAACS,QAAQ,EAAEP,GAAG,CAAC;MACjCC,IAAI,CAACO,IAAI,CAACR,GAAG,CAAC;MAEd,MAAMS,UAAU,GAAGR,IAAI,CAACE,MAAM,CAACC,EAAE,IAAIJ,GAAG,GAAGI,EAAE,IAAIf,SAAS,CAAC,CAACqB,MAAM;MAClE,MAAMC,QAAQ,GAAGV,IAAI,CAACS,MAAM;MAC5B,MAAME,QAAQ,GAAGH,UAAU,GAAGhB,SAAS,CAACoB,SAAS,IAAIF,QAAQ,GAAGlB,SAAS,CAACqB,OAAO;MAEjF,IAAIF,QAAQ,EAAE;QACb,MAAMG,IAAI,GAAGlB,UAAU,CAACK,GAAG,CAACK,QAAQ,CAAC,IAAI,CAAC;QAC1C;QACA;QACA,IAAIP,GAAG,GAAGe,IAAI,IAAI1B,SAAS,EAAE;UAC5BQ,UAAU,CAACQ,GAAG,CAACE,QAAQ,EAAEP,GAAG,CAAC;UAC7BN,IAAI,CACHN,gBAAgB,CAAC4B,wBAAwB,EACzC,iCAAiCP,UAAU,2BAA2BE,QAAQ,iCAAiClB,SAAS,CAACoB,SAAS,YAAYpB,SAAS,CAACqB,OAAO,iFAAiF,EAChP;YAAEP,QAAQ;YAAEE,UAAU;YAAEE,QAAQ;YAAElB;UAAU,CAC7C,CAAC;QACF;MACD;MAEA,OAAO;QAAEc,QAAQ;QAAEE,UAAU;QAAEE,QAAQ;QAAEC;MAAS,CAAC;IACpD,CAAC;IAEDK,MAAMA,CAACjB,GAAW,EAAEO,QAAQ,GAAG,GAAG,EAAe;MAChD,MAAMN,IAAI,GAAGH,KAAK,CAACS,QAAQ,EAAEP,GAAG,CAAC;MACjC,MAAMS,UAAU,GAAGR,IAAI,CAACE,MAAM,CAACC,EAAE,IAAIJ,GAAG,GAAGI,EAAE,IAAIf,SAAS,CAAC,CAACqB,MAAM;MAElE,OAAO;QACNH,QAAQ;QACRE,UAAU;QACVE,QAAQ,EAAEV,IAAI,CAACS,MAAM;QACrBE,QAAQ,EAAEH,UAAU,GAAGhB,SAAS,CAACoB,SAAS,IAAIZ,IAAI,CAACS,MAAM,GAAGjB,SAAS,CAACqB;MACvE,CAAC;IACF,CAAC;IAEDI,KAAKA,CAAA,EAAS;MACbvB,UAAU,CAACwB,KAAK,CAAC,CAAC;MAClBtB,UAAU,CAACsB,KAAK,CAAC,CAAC;IACnB;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/diagnostics/events.js

@@ -0,0 +1,58 @@
+"use strict";
+
+/**
+ * The structured event stream.
+ *
+ * With no sink attached the package emits nothing and buffers nothing. A
+ * library that writes to the console in production has decided something for
+ * its consumer; this one routes events wherever the app already sends its logs,
+ * or stays silent.
+ */
+
+import { createDiagnosticChannel } from '@chipmobilesdk/rn-core';
+import { isNonFailure } from "../contract/errors.js";
+import { redactContext } from "./redact.js";
+const channel = createDiagnosticChannel('rn-notification');
+export class DiagnosticEmitter {
+  constructor(options = {}) {
+    this.sink = options.sink;
+    this.verbose = options.verbose ?? false;
+    this.now = options.now ?? (() => Date.now());
+  }
+  setSink(sink) {
+    this.sink = sink;
+  }
+  setVerbose(verbose) {
+    this.verbose = verbose;
+  }
+  get hasSink() {
+    return this.sink !== undefined;
+  }
+  emit(code, message, context, severity) {
+    const resolvedSeverity = severity ?? (isNonFailure(code) ? 'info' : 'error');
+    // The app's SDK sinks (`installSdkSink`, CORE-08) never get content, even
+    // with verbose diagnostics on: verbose is for this package's own sink.
+    channel.emit(code, resolvedSeverity, redactContext(context, false));
+
+    // No sink means no work at all — not a buffer that grows until one appears.
+    if (this.sink === undefined) return;
+    const event = {
+      code,
+      severity: resolvedSeverity,
+      message,
+      at: this.now(),
+      context: redactContext(context, this.verbose)
+    };
+    try {
+      this.sink(event);
+    } catch {
+      // A failing sink is the consumer's problem and must never become ours.
+    }
+  }
+
+  /** Lifecycle transitions that are not failures: scheduled, delivered, reconciled. */
+  info(code, message, context) {
+    this.emit(code, message, context, 'info');
+  }
+}
+//# sourceMappingURL=events.js.map

package/lib/module/diagnostics/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDiagnosticChannel","isNonFailure","redactContext","channel","DiagnosticEmitter","constructor","options","sink","verbose","now","Date","setSink","setVerbose","hasSink","undefined","emit","code","message","context","severity","resolvedSeverity","event","at","info"],"sourceRoot":"../../../src","sources":["diagnostics/events.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,uBAAuB,QAAQ,wBAAwB;AAIhE,SAASC,YAAY,QAAQ,uBAAoB;AACjD,SAASC,aAAa,QAAQ,aAAU;AAQxC,MAAMC,OAAO,GAAGH,uBAAuB,CAAiB,iBAAiB,CAAC;AAE1E,OAAO,MAAMI,iBAAiB,CAAC;EAK9BC,WAAWA,CAACC,OAAuB,GAAG,CAAC,CAAC,EAAE;IACzC,IAAI,CAACC,IAAI,GAAGD,OAAO,CAACC,IAAI;IACxB,IAAI,CAACC,OAAO,GAAGF,OAAO,CAACE,OAAO,IAAI,KAAK;IACvC,IAAI,CAACC,GAAG,GAAGH,OAAO,CAACG,GAAG,KAAK,MAAMC,IAAI,CAACD,GAAG,CAAC,CAAC,CAAC;EAC7C;EAEAE,OAAOA,CAACJ,IAA2B,EAAQ;IAC1C,IAAI,CAACA,IAAI,GAAGA,IAAI;EACjB;EAEAK,UAAUA,CAACJ,OAAgB,EAAQ;IAClC,IAAI,CAACA,OAAO,GAAGA,OAAO;EACvB;EAEA,IAAIK,OAAOA,CAAA,EAAY;IACtB,OAAO,IAAI,CAACN,IAAI,KAAKO,SAAS;EAC/B;EAEAC,IAAIA,CACHC,IAAoB,EACpBC,OAAe,EACfC,OAA2C,EAC3CC,QAA6B,EACtB;IACP,MAAMC,gBAAgB,GAAGD,QAAQ,KAAKlB,YAAY,CAACe,IAAI,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC;IAC5E;IACA;IACAb,OAAO,CAACY,IAAI,CAACC,IAAI,EAAEI,gBAAgB,EAAElB,aAAa,CAACgB,OAAO,EAAE,KAAK,CAAC,CAAC;;IAEnE;IACA,IAAI,IAAI,CAACX,IAAI,KAAKO,SAAS,EAAE;IAE7B,MAAMO,KAAsB,GAAG;MAC9BL,IAAI;MACJG,QAAQ,EAAEC,gBAAgB;MAC1BH,OAAO;MACPK,EAAE,EAAE,IAAI,CAACb,GAAG,CAAC,CAAC;MACdS,OAAO,EAAEhB,aAAa,CAACgB,OAAO,EAAE,IAAI,CAACV,OAAO;IAC7C,CAAC;IAED,IAAI;MACH,IAAI,CAACD,IAAI,CAACc,KAAK,CAAC;IACjB,CAAC,CAAC,MAAM;MACP;IAAA;EAEF;;EAEA;EACAE,IAAIA,CAACP,IAAoB,EAAEC,OAAe,EAAEC,OAA2C,EAAQ;IAC9F,IAAI,CAACH,IAAI,CAACC,IAAI,EAAEC,OAAO,EAAEC,OAAO,EAAE,MAAM,CAAC;EAC1C;AACD","ignoreList":[]}

package/lib/module/diagnostics/redact.js

@@ -0,0 +1,44 @@
+"use strict";
+
+/**
+ * Content redaction for diagnostics.
+ *
+ * A notification library that logs notification bodies has turned a diagnostic
+ * aid into a privacy incident. Nothing content-bearing reaches an event unless
+ * verbose diagnostics is explicitly enabled — and that setting is documented as
+ * unsuitable for production.
+ *
+ * Values are replaced by their *shape* — a length, a type, a character position
+ * — which is what actually helps someone debug a validation failure anyway.
+ */
+
+import { createRedactor } from '@chipmobilesdk/rn-core';
+
+/** Keys whose values are never emitted at any verbosity below verbose. */
+const REDACTED_KEYS = new Set(['title', 'body', 'subtitle', 'content', 'routing', 'routingPayload', 'payload', 'token', 'pushToken', 'inputText', 'text', 'data']);
+
+/**
+ * rn-core's redactor: the keys above are replaced by their shape (a length, a
+ * type), and every other string is pattern-redacted, so a token or an e-mail
+ * address under an innocent key such as `reason` does not get through either.
+ */
+const redactor = createRedactor({
+  shapeKeys: REDACTED_KEYS
+});
+
+/**
+ * Strips content values from a diagnostic context.
+ *
+ * Recurses so a nested `{ request: { content: { body } } }` is caught — a
+ * top-level-only scrub is the kind of redaction that leaks the first time
+ * anyone nests a payload.
+ */
+export function redactContext(context, verbose) {
+  return verbose ? context : redactor.context(context);
+}
+
+/** True when a key would be redacted. Exported so tests can assert the policy directly. */
+export function isRedactedKey(key) {
+  return REDACTED_KEYS.has(key);
+}
+//# sourceMappingURL=redact.js.map

package/lib/module/diagnostics/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createRedactor","REDACTED_KEYS","Set","redactor","shapeKeys","redactContext","context","verbose","isRedactedKey","key","has"],"sourceRoot":"../../../src","sources":["diagnostics/redact.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,cAAc,QAAQ,wBAAwB;;AAEvD;AACA,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAAC,CAC7B,OAAO,EACP,MAAM,EACN,UAAU,EACV,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,OAAO,EACP,WAAW,EACX,WAAW,EACX,MAAM,EACN,MAAM,CACN,CAAC;;AAEF;AACA;AACA;AACA;AACA;AACA,MAAMC,QAAQ,GAAGH,cAAc,CAAC;EAAEI,SAAS,EAAEH;AAAc,CAAC,CAAC;;AAE7D;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,aAAaA,CAC5BC,OAAsD,EACtDC,OAAgB,EACgC;EAChD,OAAOA,OAAO,GAAGD,OAAO,GAAGH,QAAQ,CAACG,OAAO,CAACA,OAAO,CAAC;AACrD;;AAEA;AACA,OAAO,SAASE,aAAaA,CAACC,GAAW,EAAW;EACnD,OAAOR,aAAa,CAACS,GAAG,CAACD,GAAG,CAAC;AAC9B","ignoreList":[]}

package/lib/module/diagnostics/snapshot.js

@@ -0,0 +1,64 @@
+"use strict";
+
+/**
+ * The state snapshot.
+ *
+ * The readable answer to "why didn't it arrive?" — assembled in one place so
+ * that question can be answered without attaching a native debugger.
+ *
+ * The push token appears as **presence only**. Its value is never exposed here
+ * or anywhere else, because a snapshot is the thing most likely to be pasted
+ * into a bug report.
+ */
+
+import { describeShape } from '@chipmobilesdk/rn-core';
+/**
+ * A pending entry with content replaced by its shape. A snapshot is the thing
+ * most likely to be pasted into a bug report, so it never carries notification
+ * text or routing values unless verbose diagnostics is on (NOT-14).
+ */
+function withoutContent(entry) {
+  const {
+    content,
+    routing
+  } = entry;
+  return {
+    ...entry,
+    content: {
+      title: describeShape(content.title),
+      body: describeShape(content.body),
+      ...(content.subtitle === undefined ? {} : {
+        subtitle: describeShape(content.subtitle)
+      })
+    },
+    ...(routing === undefined ? {} : {
+      routing: Object.fromEntries(Object.entries(routing).map(([key, value]) => [key, describeShape(value)]))
+    })
+  };
+}
+export function createSnapshot(deps) {
+  return {
+    async capture() {
+      const [permissions, restrictions, pending] = await Promise.all([deps.permissions(), deps.restrictions(), deps.engine.getPending()]);
+      const maintenance = deps.lastMaintenance();
+      const discrepancy = maintenance?.discrepancy;
+      return {
+        permissions,
+        restrictions,
+        tones: deps.appliedTones().map(tone => ({
+          id: tone.toneId,
+          appliedVersion: tone.appliedVersion
+        })),
+        pendingCount: pending.length,
+        pending: deps.verbose?.() ? pending : pending.map(entry => withoutContent(entry)),
+        lastReconcile: deps.lastReconcile(),
+        lastMaintenance: maintenance,
+        discrepancy,
+        stateHealth: deps.state.health(),
+        pushTokenPresent: deps.hasPushToken(),
+        capturedAt: deps.now()
+      };
+    }
+  };
+}
+//# sourceMappingURL=snapshot.js.map

package/lib/module/diagnostics/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["describeShape","withoutContent","entry","content","routing","title","body","subtitle","undefined","Object","fromEntries","entries","map","key","value","createSnapshot","deps","capture","permissions","restrictions","pending","Promise","all","engine","getPending","maintenance","lastMaintenance","discrepancy","tones","appliedTones","tone","id","toneId","appliedVersion","pendingCount","length","verbose","lastReconcile","stateHealth","state","health","pushTokenPresent","hasPushToken","capturedAt","now"],"sourceRoot":"../../../src","sources":["diagnostics/snapshot.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,aAAa,QAAQ,wBAAwB;AA8BtD;AACA;AACA;AACA;AACA;AACA,SAASC,cAAcA,CAACC,KAAmB,EAAgB;EAC1D,MAAM;IAAEC,OAAO;IAAEC;EAAQ,CAAC,GAAGF,KAAK;EAClC,OAAO;IACN,GAAGA,KAAK;IACRC,OAAO,EAAE;MACRE,KAAK,EAAEL,aAAa,CAACG,OAAO,CAACE,KAAK,CAAC;MACnCC,IAAI,EAAEN,aAAa,CAACG,OAAO,CAACG,IAAI,CAAC;MACjC,IAAIH,OAAO,CAACI,QAAQ,KAAKC,SAAS,GAAG,CAAC,CAAC,GAAG;QAAED,QAAQ,EAAEP,aAAa,CAACG,OAAO,CAACI,QAAQ;MAAE,CAAC;IACxF,CAAC;IACD,IAAIH,OAAO,KAAKI,SAAS,GACtB,CAAC,CAAC,GACF;MACAJ,OAAO,EAAEK,MAAM,CAACC,WAAW,CAC1BD,MAAM,CAACE,OAAO,CAACP,OAAO,CAAC,CAACQ,GAAG,CAAC,CAAC,CAACC,GAAG,EAAEC,KAAK,CAAC,KAAK,CAACD,GAAG,EAAEb,aAAa,CAACc,KAAK,CAAC,CAAC,CAC1E;IACD,CAAC;EACJ,CAAC;AACF;AAEA,OAAO,SAASC,cAAcA,CAACC,IAA0B,EAAE;EAC1D,OAAO;IACN,MAAMC,OAAOA,CAAA,EAA2B;MACvC,MAAM,CAACC,WAAW,EAAEC,YAAY,EAAEC,OAAO,CAAC,GAAG,MAAMC,OAAO,CAACC,GAAG,CAAC,CAC9DN,IAAI,CAACE,WAAW,CAAC,CAAC,EAClBF,IAAI,CAACG,YAAY,CAAC,CAAC,EACnBH,IAAI,CAACO,MAAM,CAACC,UAAU,CAAC,CAAC,CACxB,CAAC;MAEF,MAAMC,WAAW,GAAGT,IAAI,CAACU,eAAe,CAAC,CAAC;MAC1C,MAAMC,WAA2C,GAAGF,WAAW,EAAEE,WAAW;MAE5E,OAAO;QACNT,WAAW;QACXC,YAAY;QACZS,KAAK,EAAEZ,IAAI,CAACa,YAAY,CAAC,CAAC,CAACjB,GAAG,CAACkB,IAAI,KAAK;UACvCC,EAAE,EAAED,IAAI,CAACE,MAAM;UACfC,cAAc,EAAEH,IAAI,CAACG;QACtB,CAAC,CAAC,CAAC;QACHC,YAAY,EAAEd,OAAO,CAACe,MAAM;QAC5Bf,OAAO,EAAEJ,IAAI,CAACoB,OAAO,GAAG,CAAC,GACrBhB,OAAO,GACRA,OAAO,CAACR,GAAG,CAACV,KAAK,IAAID,cAAc,CAACC,KAAqB,CAAC,CAAC;QAC9DmC,aAAa,EAAErB,IAAI,CAACqB,aAAa,CAAC,CAAC;QACnCX,eAAe,EAAED,WAAW;QAC5BE,WAAW;QACXW,WAAW,EAAEtB,IAAI,CAACuB,KAAK,CAACC,MAAM,CAAC,CAAC;QAChCC,gBAAgB,EAAEzB,IAAI,CAAC0B,YAAY,CAAC,CAAC;QACrCC,UAAU,EAAE3B,IAAI,CAAC4B,GAAG,CAAC;MACtB,CAAC;IACF;EACD,CAAC;AACF","ignoreList":[]}

package/lib/module/engine/adapter.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=adapter.js.map

package/lib/module/engine/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["engine/adapter.ts"],"mappings":"","ignoreList":[]}

package/lib/module/engine/codec.js

@@ -0,0 +1,79 @@
+"use strict";
+
+/**
+ * The metadata codec for a notification's platform data bag.
+ *
+ * Anchoring, series origin, tags, routing and actions have no engine
+ * equivalent, and `getPending` must return them (FR-010) or a consumer cannot
+ * diff against intent. They travel as strings in the free-form data bag, which
+ * is the one field both platforms carry through unchanged.
+ *
+ * Shared by the real engine and the fake. When the fake stored requests
+ * verbatim it could not lose a field the real engine lost — `actions` never
+ * came back from a device, so every reconcile replaced every notification that
+ * had them, and the fake-backed tests never saw it.
+ */
+
+/** Everything `getPending` reports that only the data bag can carry. */
+
+export function packData(request) {
+  return {
+    __cms_anchoring: request.request.moment.anchoring ?? 'wallClock',
+    // The IANA zone, not the tone. Storing the wrong value here does not merely
+    // mislabel an entry: the re-anchoring pass feeds it straight to
+    // Intl.DateTimeFormat, which throws a hard Hermes error on an invalid zone.
+    ...(request.anchoringGeneration !== undefined ? {
+      __cms_generation: request.anchoringGeneration
+    } : {}),
+    __cms_tone: request.request.tone,
+    __cms_approximate: String(request.approximate),
+    __cms_pushCreated: String(request.pushCreated ?? false),
+    ...(request.seriesId !== undefined ? {
+      __cms_series: request.seriesId
+    } : {}),
+    ...(request.request.ownerTag !== undefined ? {
+      __cms_owner: request.request.ownerTag
+    } : {}),
+    ...(request.request.groupTag !== undefined ? {
+      __cms_group: request.request.groupTag
+    } : {}),
+    ...(request.request.routing !== undefined ? {
+      __cms_routing: JSON.stringify(request.request.routing)
+    } : {}),
+    ...(request.request.actions !== undefined ? {
+      __cms_actions: JSON.stringify(request.request.actions)
+    } : {}),
+    // A stop marker's whole payload. It travels here rather than in `ownerTag`
+    // or `routing` so it can never collide with a value a consumer owns.
+    ...(request.repeatStop !== undefined ? {
+      __cms_stop_target: request.repeatStop.targetId,
+      __cms_stop_due: String(request.repeatStop.dueAt)
+    } : {})
+  };
+}
+
+/** A JSON field we cannot parse is reported as absent: the notification is still valid. */
+function parseJson(raw) {
+  if (typeof raw !== 'string') return undefined;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return undefined;
+  }
+}
+export function unpackData(data) {
+  const anchoring = data.__cms_anchoring === 'absolute' ? 'absolute' : 'wallClock';
+  return {
+    anchoring,
+    anchoringGeneration: anchoring === 'absolute' ? undefined : data.__cms_generation,
+    tone: data.__cms_tone ?? '',
+    routing: parseJson(data.__cms_routing),
+    actions: parseJson(data.__cms_actions),
+    ownerTag: data.__cms_owner,
+    groupTag: data.__cms_group,
+    seriesId: data.__cms_series,
+    mayBeDelayed: data.__cms_approximate === 'true',
+    pushCreated: data.__cms_pushCreated === 'true'
+  };
+}
+//# sourceMappingURL=codec.js.map

package/lib/module/engine/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["packData","request","__cms_anchoring","moment","anchoring","anchoringGeneration","undefined","__cms_generation","__cms_tone","tone","__cms_approximate","String","approximate","__cms_pushCreated","pushCreated","seriesId","__cms_series","ownerTag","__cms_owner","groupTag","__cms_group","routing","__cms_routing","JSON","stringify","actions","__cms_actions","repeatStop","__cms_stop_target","targetId","__cms_stop_due","dueAt","parseJson","raw","parse","unpackData","data","mayBeDelayed"],"sourceRoot":"../../../src","sources":["engine/codec.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA;;AAeA,OAAO,SAASA,QAAQA,CAACC,OAA8B,EAA0B;EAChF,OAAO;IACNC,eAAe,EAAED,OAAO,CAACA,OAAO,CAACE,MAAM,CAACC,SAAS,IAAI,WAAW;IAChE;IACA;IACA;IACA,IAAIH,OAAO,CAACI,mBAAmB,KAAKC,SAAS,GAC1C;MAAEC,gBAAgB,EAAEN,OAAO,CAACI;IAAoB,CAAC,GACjD,CAAC,CAAC,CAAC;IACNG,UAAU,EAAEP,OAAO,CAACA,OAAO,CAACQ,IAAI;IAChCC,iBAAiB,EAAEC,MAAM,CAACV,OAAO,CAACW,WAAW,CAAC;IAC9CC,iBAAiB,EAAEF,MAAM,CAACV,OAAO,CAACa,WAAW,IAAI,KAAK,CAAC;IACvD,IAAIb,OAAO,CAACc,QAAQ,KAAKT,SAAS,GAAG;MAAEU,YAAY,EAAEf,OAAO,CAACc;IAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,IAAId,OAAO,CAACA,OAAO,CAACgB,QAAQ,KAAKX,SAAS,GAAG;MAAEY,WAAW,EAAEjB,OAAO,CAACA,OAAO,CAACgB;IAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,IAAIhB,OAAO,CAACA,OAAO,CAACkB,QAAQ,KAAKb,SAAS,GAAG;MAAEc,WAAW,EAAEnB,OAAO,CAACA,OAAO,CAACkB;IAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,IAAIlB,OAAO,CAACA,OAAO,CAACoB,OAAO,KAAKf,SAAS,GACtC;MAAEgB,aAAa,EAAEC,IAAI,CAACC,SAAS,CAACvB,OAAO,CAACA,OAAO,CAACoB,OAAO;IAAE,CAAC,GAC1D,CAAC,CAAC,CAAC;IACN,IAAIpB,OAAO,CAACA,OAAO,CAACwB,OAAO,KAAKnB,SAAS,GACtC;MAAEoB,aAAa,EAAEH,IAAI,CAACC,SAAS,CAACvB,OAAO,CAACA,OAAO,CAACwB,OAAO;IAAE,CAAC,GAC1D,CAAC,CAAC,CAAC;IACN;IACA;IACA,IAAIxB,OAAO,CAAC0B,UAAU,KAAKrB,SAAS,GACjC;MACAsB,iBAAiB,EAAE3B,OAAO,CAAC0B,UAAU,CAACE,QAAQ;MAC9CC,cAAc,EAAEnB,MAAM,CAACV,OAAO,CAAC0B,UAAU,CAACI,KAAK;IAChD,CAAC,GACA,CAAC,CAAC;EACN,CAAC;AACF;;AAEA;AACA,SAASC,SAASA,CAAIC,GAAuB,EAAiB;EAC7D,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE,OAAO3B,SAAS;EAC7C,IAAI;IACH,OAAOiB,IAAI,CAACW,KAAK,CAACD,GAAG,CAAC;EACvB,CAAC,CAAC,MAAM;IACP,OAAO3B,SAAS;EACjB;AACD;AAEA,OAAO,SAAS6B,UAAUA,CAACC,IAA4B,EAAkB;EACxE,MAAMhC,SAAwB,GAAGgC,IAAI,CAAClC,eAAe,KAAK,UAAU,GAAG,UAAU,GAAG,WAAW;EAC/F,OAAO;IACNE,SAAS;IACTC,mBAAmB,EAAED,SAAS,KAAK,UAAU,GAAGE,SAAS,GAAG8B,IAAI,CAAC7B,gBAAgB;IACjFE,IAAI,EAAE2B,IAAI,CAAC5B,UAAU,IAAI,EAAE;IAC3Ba,OAAO,EAAEW,SAAS,CAAiBI,IAAI,CAACd,aAAa,CAAC;IACtDG,OAAO,EAAEO,SAAS,CAAoBI,IAAI,CAACV,aAAa,CAAC;IACzDT,QAAQ,EAAEmB,IAAI,CAAClB,WAAW;IAC1BC,QAAQ,EAAEiB,IAAI,CAAChB,WAAW;IAC1BL,QAAQ,EAAEqB,IAAI,CAACpB,YAAY;IAC3BqB,YAAY,EAAED,IAAI,CAAC1B,iBAAiB,KAAK,MAAM;IAC/CI,WAAW,EAAEsB,IAAI,CAACvB,iBAAiB,KAAK;EACzC,CAAC;AACF","ignoreList":[]}