@cogenta/channels 0.1.0

package/dist/linking/codes.js

@@ -0,0 +1,37 @@
+import { createHash, randomBytes } from 'node:crypto';
+/**
+ * Crockford-style alphabet, ambiguous characters (`0`/`O`, `1`/`I`/`L`)
+ * removed — a code a person reads on a screen and types into a chat app
+ * must not depend on font rendering to tell `0` from `O`. 32 symbols divides
+ * 256 evenly, so mapping a random byte to an index via modulo carries no
+ * bias (unlike an alphabet size that doesn't divide 256).
+ */
+const CODE_ALPHABET = 'ABCDEFGHJKMNPQRSTUVWXYZ23456789';
+/**
+ * 8 symbols x 5 bits = 40 bits of entropy. Single-use and short-TTL (minutes,
+ * not hours), so this is judged against "can an attacker brute-force one
+ * code before it expires", not against long-term-secret standards (that's
+ * what session tokens, 256 bits, are for — see `@cogenta/auth`'s
+ * `TOKEN_BYTES`). Even at an implausible 100 guesses/second, 2^40 / 100 is
+ * over 100 days — a code generated in the admin and typed into a channel
+ * within a 10-minute window is not brute-forceable in that window.
+ */
+const CODE_LENGTH = 8;
+export function generateLinkCode() {
+    const bytes = randomBytes(CODE_LENGTH);
+    let code = '';
+    for (let i = 0; i < CODE_LENGTH; i++) {
+        const byte = bytes[i] ?? 0;
+        code += CODE_ALPHABET[byte % CODE_ALPHABET.length];
+    }
+    return code;
+}
+/** Stored hashed, exactly like a session token (`@cogenta/auth/sessions.ts`) — a leaked table hands out nothing usable. */
+export function hashLinkCode(code) {
+    return createHash('sha256').update(normalizeCode(code)).digest('base64url');
+}
+/** Case-insensitive, whitespace-tolerant — a code typed by hand into a chat app should not fail on a stray space or lowercase letter. */
+export function normalizeCode(code) {
+    return code.trim().toUpperCase();
+}
+//# sourceMappingURL=codes.js.map

package/dist/linking/codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codes.js","sourceRoot":"","sources":["../../src/linking/codes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,iCAAiC,CAAA;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG,CAAC,CAAA;AAErB,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACtC,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,IAAI,aAAa,CAAC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAC7E,CAAC;AAED,yIAAyI;AACzI,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAClC,CAAC"}

package/dist/linking/store.d.ts

@@ -0,0 +1,39 @@
+import { type DatabaseHandle } from '@cogenta/core';
+import type { ChannelIdentity } from '../adapter.js';
+export interface GeneratedLinkCode {
+    readonly code: string;
+    readonly expiresAt: string;
+}
+export interface LinkedChannel {
+    readonly channelName: string;
+    readonly channelUserId: string;
+    readonly linkedAt: string;
+}
+export interface ChannelLinkStore {
+    /** Admin side: a real, already-authenticated Cogenta user requests a code for a channel type. */
+    generateCode(userId: string, channelName: string, options?: {
+        readonly ttlMs?: number;
+    }): Promise<GeneratedLinkCode>;
+    /**
+     * Channel side: a code typed into the channel, plus the channel's own
+     * identifiers. On success, creates the real link — `resolveIdentity` for
+     * this `(channelName, channelUserId)` returns a non-null `linkedUserId`
+     * from this point on. Rejects with a single, uniform `CHANNEL_LINK_CODE_INVALID`
+     * for every failure kind (nonexistent, expired, already used, wrong
+     * channel) — the caller (a future channel-facing reply) must never turn
+     * this into a "code doesn't exist" vs "code expired" distinction visible
+     * to whoever is typing, or an unlinked identity is handed a free oracle to
+     * probe with (`## La règle de sécurité centrale`).
+     */
+    verifyCode(code: string, channelName: string, channelUserId: string): Promise<{
+        readonly userId: string;
+    }>;
+    /** `linkedUserId: null` for a channel identity with no active link — the exact shape task 1's `ChannelIdentity` was built to represent. */
+    resolveIdentity(channelName: string, channelUserId: string): Promise<ChannelIdentity>;
+    /** Revoking an already-unlinked (or nonexistent) identity is not an error — it's already in the state being asked for. */
+    revoke(channelName: string, channelUserId: string): Promise<void>;
+    /** "listée dans les sessions actives de l'utilisateur" — every channel currently linked to this user. */
+    listLinkedChannels(userId: string): Promise<readonly LinkedChannel[]>;
+}
+export declare function createChannelLinkStore(db: DatabaseHandle, now?: () => number): ChannelLinkStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/linking/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/linking/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAMpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,iGAAiG;IACjG,YAAY,CACV,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACpC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAE7B;;;;;;;;;;OAUG;IACH,UAAU,CACR,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAEvC,2IAA2I;IAC3I,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAErF,0HAA0H;IAC1H,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjE,yGAAyG;IACzG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;CACtE;AAgCD,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,cAAc,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,gBAAgB,CAuElB"}

package/dist/linking/store.js

@@ -0,0 +1,77 @@
+import { CogentaError, identifier, newId, sql } from '@cogenta/core';
+import { generateLinkCode, hashLinkCode, normalizeCode } from './codes.js';
+import { LINKING_TABLES } from './tables.js';
+const DEFAULT_TTL_MS = 10 * 60 * 1000; // "valable quelques minutes" (lot doc, verbatim)
+function invalidCodeError(reason) {
+    // `reason` is structured error detail for logs/debugging only — never
+    // forward it into a channel-facing reply (see `verifyCode`'s doc comment).
+    return new CogentaError({
+        code: 'CHANNEL_LINK_CODE_INVALID',
+        message: 'This linking code is not valid.',
+        hint: 'Generate a new code from the admin and enter it again — codes are single-use and expire after a few minutes.',
+        details: { reason },
+    });
+}
+export function createChannelLinkStore(db, now = Date.now) {
+    const linkCodes = identifier(LINKING_TABLES.linkCodes, db.dialect);
+    const links = identifier(LINKING_TABLES.links, db.dialect);
+    return {
+        async generateCode(userId, channelName, options) {
+            const code = generateLinkCode();
+            const created = new Date(now()).toISOString();
+            const expires = new Date(now() + (options?.ttlMs ?? DEFAULT_TTL_MS)).toISOString();
+            await db.query(sql `
+        insert into ${linkCodes} (id, code_hash, channel_name, user_id, created_at, expires_at, used_at)
+        values (${newId(now)}, ${hashLinkCode(code)}, ${channelName}, ${userId}, ${created}, ${expires}, ${null})`);
+            return { code, expiresAt: expires };
+        },
+        async verifyCode(code, channelName, channelUserId) {
+            const targetHash = hashLinkCode(normalizeCode(code));
+            const result = await db.query(sql `select * from ${linkCodes} where code_hash = ${targetHash}`);
+            const row = result.rows[0];
+            if (row === undefined)
+                throw invalidCodeError('nonexistent');
+            if (row.used_at !== null)
+                throw invalidCodeError('already-used');
+            if (row.channel_name !== channelName)
+                throw invalidCodeError('wrong-channel');
+            if (new Date(row.expires_at).getTime() <= now())
+                throw invalidCodeError('expired');
+            const linkedAt = new Date(now()).toISOString();
+            await db.query(sql `update ${linkCodes} set used_at = ${linkedAt} where id = ${row.id}`);
+            // Re-linking the same (channel, channelUserId) replaces any prior link
+            // for it — one active user per channel identity, the newest wins.
+            await db.query(sql `delete from ${links} where channel_name = ${channelName} and channel_user_id = ${channelUserId}`);
+            await db.query(sql `
+        insert into ${links} (id, channel_name, channel_user_id, user_id, linked_at, revoked_at)
+        values (${newId(now)}, ${channelName}, ${channelUserId}, ${row.user_id}, ${linkedAt}, ${null})`);
+            return { userId: row.user_id };
+        },
+        async resolveIdentity(channelName, channelUserId) {
+            const result = await db.query(sql `
+        select * from ${links}
+        where channel_name = ${channelName} and channel_user_id = ${channelUserId} and revoked_at is null`);
+            const row = result.rows[0];
+            return {
+                channelName,
+                channelUserId,
+                linkedUserId: row?.user_id ?? null,
+            };
+        },
+        async revoke(channelName, channelUserId) {
+            await db.query(sql `
+        update ${links} set revoked_at = ${new Date(now()).toISOString()}
+        where channel_name = ${channelName} and channel_user_id = ${channelUserId} and revoked_at is null`);
+        },
+        async listLinkedChannels(userId) {
+            const result = await db.query(sql `
+        select * from ${links} where user_id = ${userId} and revoked_at is null order by linked_at desc`);
+            return result.rows.map((row) => ({
+                channelName: row.channel_name,
+                channelUserId: row.channel_user_id,
+                linkedAt: row.linked_at,
+            }));
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/linking/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/linking/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAEzF,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,iDAAiD;AAmEvF,SAAS,gBAAgB,CAAC,MAAc;IACtC,sEAAsE;IACtE,2EAA2E;IAC3E,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,8GAA8G;QACpH,OAAO,EAAE,EAAE,MAAM,EAAE;KACpB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,EAAkB,EAClB,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAE1D,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO;YAC7C,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAA;YAC/B,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC7C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YAElF,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,SAAS;kBACb,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,KAAK,WAAW,KAAK,MAAM,KAAK,OAAO,KAAK,OAAO,KAAK,IAAI,GAAG,CAAC,CAAA;YAE7G,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;QACrC,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa;YAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,iBAAiB,SAAS,sBAAsB,UAAU,EAAE,CAChE,CAAA;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,GAAG,KAAK,SAAS;gBAAE,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAA;YAC5D,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,gBAAgB,CAAC,cAAc,CAAC,CAAA;YAChE,IAAI,GAAG,CAAC,YAAY,KAAK,WAAW;gBAAE,MAAM,gBAAgB,CAAC,eAAe,CAAC,CAAA;YAC7E,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE;gBAAE,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAElF,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC9C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,UAAU,SAAS,kBAAkB,QAAQ,eAAe,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;YAEvF,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,EAAE,CAAC,KAAK,CACZ,GAAG,CAAA,eAAe,KAAK,yBAAyB,WAAW,0BAA0B,aAAa,EAAE,CACrG,CAAA;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;kBACT,KAAK,CAAC,GAAG,CAAC,KAAK,WAAW,KAAK,aAAa,KAAK,GAAG,CAAC,OAAO,KAAK,QAAQ,KAAK,IAAI,GAAG,CAAC,CAAA;YAElG,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAA;QAChC,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa;YAC9C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA;wBACxB,KAAK;+BACE,WAAW,0BAA0B,aAAa,yBAAyB,CAAC,CAAA;YACrG,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO;gBACL,WAAW;gBACX,aAAa;gBACb,YAAY,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;aACnC,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa;YACrC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK,qBAAqB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;+BACzC,WAAW,0BAA0B,aAAa,yBAAyB,CAAC,CAAA;QACvG,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,MAAM;YAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA;wBACxB,KAAK,oBAAoB,MAAM,iDAAiD,CAAC,CAAA;YACnG,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,aAAa,EAAE,GAAG,CAAC,eAAe;gBAClC,QAAQ,EAAE,GAAG,CAAC,SAAS;aACxB,CAAC,CAAC,CAAA;QACL,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/linking/tables.d.ts

@@ -0,0 +1,14 @@
+import { type DatabaseHandle } from '@cogenta/core';
+export declare const LINKING_TABLES: {
+    readonly linkCodes: 'cogenta_channel_link_codes';
+    readonly links: 'cogenta_channel_links';
+};
+/**
+ * Owned by `@cogenta/channels`, following `@cogenta/auth`'s `ensureAuthTables`
+ * pattern exactly: `create table if not exists`, run once at startup, so a
+ * fresh install and an upgrade take the same path — no separate migration
+ * file, same as `cogenta_sessions`/`cogenta_users` are not migration-file-backed
+ * either.
+ */
+export declare function ensureChannelTables(db: DatabaseHandle): Promise<void>;
+//# sourceMappingURL=tables.d.ts.map

package/dist/linking/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../src/linking/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,eAAe,CAAA;AAEtB,eAAO,MAAM,cAAc;aACzB,SAAS,EAAE,4BAA4B;aACvC,KAAK,EAAE,uBAAuB;CACtB,CAAA;AAMV;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC3E"}

package/dist/linking/tables.js

@@ -0,0 +1,52 @@
+import { identifier, sql, unsafeRaw, } from '@cogenta/core';
+export const LINKING_TABLES = {
+    linkCodes: 'cogenta_channel_link_codes',
+    links: 'cogenta_channel_links',
+};
+function textColumn(dialect, length) {
+    return unsafeRaw(dialect === 'sqlite' ? 'text' : `varchar(${length})`);
+}
+/**
+ * Owned by `@cogenta/channels`, following `@cogenta/auth`'s `ensureAuthTables`
+ * pattern exactly: `create table if not exists`, run once at startup, so a
+ * fresh install and an upgrade take the same path — no separate migration
+ * file, same as `cogenta_sessions`/`cogenta_users` are not migration-file-backed
+ * either.
+ */
+export async function ensureChannelTables(db) {
+    const d = db.dialect;
+    const linkCodes = identifier(LINKING_TABLES.linkCodes, d);
+    const links = identifier(LINKING_TABLES.links, d);
+    const t64 = textColumn(d, 64);
+    const t255 = textColumn(d, 255);
+    const t512 = textColumn(d, 512);
+    await db.query(sql `
+    create table if not exists ${linkCodes} (
+      id ${t64} not null primary key,
+      -- Hashed, never stored plain — same reasoning as a session token
+      -- (@cogenta/auth): a leaked table hands out nothing usable.
+      code_hash ${t512} not null unique,
+      channel_name ${t64} not null,
+      user_id ${t64} not null,
+      created_at ${t64} not null,
+      expires_at ${t64} not null,
+      used_at ${t64}
+    )`);
+    await db.query(sql `
+    create table if not exists ${links} (
+      id ${t64} not null primary key,
+      channel_name ${t64} not null,
+      channel_user_id ${t255} not null,
+      user_id ${t64} not null,
+      linked_at ${t64} not null,
+      revoked_at ${t64}
+    )`);
+    await createIndexIfMissing(db, 'cogenta_channel_links_lookup', links, sql `(channel_name, channel_user_id)`);
+    await createIndexIfMissing(db, 'cogenta_channel_links_user', links, sql `(user_id)`);
+}
+async function createIndexIfMissing(db, name, table, columns) {
+    await db
+        .query(sql `create index ${identifier(name, db.dialect)} on ${table} ${columns}`)
+        .catch(() => undefined); // already there — no portable "if not exists" for indexes
+}
+//# sourceMappingURL=tables.js.map

package/dist/linking/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../src/linking/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,UAAU,EAEV,GAAG,EACH,SAAS,GACV,MAAM,eAAe,CAAA;AAEtB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,4BAA4B;IACvC,KAAK,EAAE,uBAAuB;CACtB,CAAA;AAEV,SAAS,UAAU,CAAC,OAAwB,EAAE,MAAc;IAC1D,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,GAAG,CAAC,CAAA;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAkB;IAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;IACpB,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAE/B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iCACa,SAAS;WAC/B,GAAG;;;kBAGI,IAAI;qBACD,GAAG;gBACR,GAAG;mBACA,GAAG;mBACH,GAAG;gBACN,GAAG;MACb,CAAC,CAAA;IAEL,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iCACa,KAAK;WAC3B,GAAG;qBACO,GAAG;wBACA,IAAI;gBACZ,GAAG;kBACD,GAAG;mBACF,GAAG;MAChB,CAAC,CAAA;IAEL,MAAM,oBAAoB,CACxB,EAAE,EACF,8BAA8B,EAC9B,KAAK,EACL,GAAG,CAAA,iCAAiC,CACrC,CAAA;IACD,MAAM,oBAAoB,CAAC,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE,GAAG,CAAA,WAAW,CAAC,CAAA;AACrF,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,EAAkB,EAClB,IAAY,EACZ,KAAkB,EAClB,OAAoB;IAEpB,MAAM,EAAE;SACL,KAAK,CAAC,GAAG,CAAA,gBAAgB,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAC;SAC/E,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,0DAA0D;AACtF,CAAC"}

package/dist/preferences/dispatcher.d.ts

@@ -0,0 +1,37 @@
+import { type DatabaseHandle } from '@cogenta/core';
+import type { ChannelSeverity, MessageId } from '../adapter.js';
+import type { ChannelLinkStore } from '../linking/store.js';
+import type { ChannelRegistry } from '../registry.js';
+import type { PreferenceStore } from './store.js';
+import { type ChannelEventType } from './types.js';
+export interface NotifyInput {
+    readonly userId: string;
+    readonly channelName: string;
+    readonly eventType: ChannelEventType;
+    readonly severity: ChannelSeverity;
+    readonly title: string;
+    readonly summary: string;
+}
+export type NotifyOutcome = {
+    readonly dispatched: true;
+    readonly messageId: MessageId;
+} | {
+    readonly dispatched: false;
+    readonly reason: 'not-subscribed' | 'below-severity-threshold' | 'no-linked-channel' | 'deferred-quiet-hours' | 'queued-for-grouping';
+};
+export interface NotificationDispatcher {
+    /** Filters against preferences, then either sends immediately or queues for a later `flushDue()`. Never throws on a normal filtered/queued outcome — only on a real infra failure. */
+    notify(input: NotifyInput): Promise<NotifyOutcome>;
+    /** "sans lui, un scan de dépendances produit quinze messages" — collapses every due group of pending notifications into one message each. Call periodically; scheduling it is the deployer's job (same honest split as `resetPlaygroundData`, L9 task 12). */
+    flushDue(): Promise<readonly MessageId[]>;
+}
+export interface CreateNotificationDispatcherOptions {
+    readonly db: DatabaseHandle;
+    readonly registry: ChannelRegistry;
+    readonly linkStore: ChannelLinkStore;
+    readonly preferenceStore: PreferenceStore;
+    readonly buildAdminUrl: (userId: string, channelName: string) => string;
+    readonly now?: () => number;
+}
+export declare function createNotificationDispatcher(options: CreateNotificationDispatcherOptions): NotificationDispatcher;
+//# sourceMappingURL=dispatcher.d.ts.map

package/dist/preferences/dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/preferences/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAC3E,OAAO,KAAK,EAAkB,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAG/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAErD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,OAAO,EAAE,KAAK,gBAAgB,EAAiB,MAAM,YAAY,CAAA;AAEjE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAC5D;IACE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAA;IAC1B,QAAQ,CAAC,MAAM,EACX,gBAAgB,GAChB,0BAA0B,GAC1B,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,CAAA;CAC1B,CAAA;AAEL,MAAM,WAAW,sBAAsB;IACrC,sLAAsL;IACtL,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAClD,8PAA8P;IAC9P,QAAQ,IAAI,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAAA;CAC1C;AAgBD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,MAAM,CAAA;IACvE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,sBAAsB,CA8GxB"}

package/dist/preferences/dispatcher.js

@@ -0,0 +1,103 @@
+import { identifier, newId, sql } from '@cogenta/core';
+import { buildNotification } from '../formats/notification.js';
+import { buildReport } from '../formats/report.js';
+import { isWithinQuietHours } from './quiet-hours.js';
+import { PREFERENCE_TABLES } from './tables.js';
+import { SEVERITY_RANK } from './types.js';
+const GROUPING_WINDOW_MS = {
+    hourly: 60 * 60 * 1000,
+    daily: 24 * 60 * 60 * 1000,
+};
+export function createNotificationDispatcher(options) {
+    const { db, registry, linkStore, preferenceStore, buildAdminUrl } = options;
+    const now = options.now ?? Date.now;
+    const pending = identifier(PREFERENCE_TABLES.pending, db.dialect);
+    async function resolveTarget(userId, channelName) {
+        const linked = await linkStore.listLinkedChannels(userId);
+        return linked.find((l) => l.channelName === channelName) ?? null;
+    }
+    async function enqueue(input) {
+        await db.query(sql `
+      insert into ${pending} (id, user_id, channel_name, event_type, severity, title, summary, created_at)
+      values (${newId(now)}, ${input.userId}, ${input.channelName}, ${input.eventType}, ${input.severity}, ${input.title}, ${input.summary}, ${new Date(now()).toISOString()})`);
+    }
+    async function sendOne(channelName, targetId, message) {
+        return registry.get(channelName).send({ id: targetId }, message);
+    }
+    return {
+        async notify(input) {
+            const prefs = await preferenceStore.get(input.userId, input.channelName);
+            if (!prefs.eventTypes.includes(input.eventType)) {
+                return { dispatched: false, reason: 'not-subscribed' };
+            }
+            if (SEVERITY_RANK[input.severity] < SEVERITY_RANK[prefs.minSeverity]) {
+                return { dispatched: false, reason: 'below-severity-threshold' };
+            }
+            const inQuietHours = prefs.quietHours !== null &&
+                input.severity !== 'critical' &&
+                isWithinQuietHours(prefs.quietHours, now());
+            if (inQuietHours) {
+                await enqueue(input);
+                return { dispatched: false, reason: 'deferred-quiet-hours' };
+            }
+            if (prefs.grouping !== 'immediate') {
+                await enqueue(input);
+                return { dispatched: false, reason: 'queued-for-grouping' };
+            }
+            const target = await resolveTarget(input.userId, input.channelName);
+            if (target === null)
+                return { dispatched: false, reason: 'no-linked-channel' };
+            // `NotifyInput` only carries a title/summary, not the separate
+            // context/expectedAction/adminUrl an `AlertChannelMessage` requires —
+            // a single immediate item always renders as a one-line Notification;
+            // producers that need the richer Alert shape (e.g. approvals) build
+            // and dispatch it themselves via `buildAlert`/`dispatchApproval`.
+            const message = buildNotification(`${input.title} — ${input.summary}`);
+            const messageId = await sendOne(input.channelName, target.channelUserId, message);
+            return { dispatched: true, messageId };
+        },
+        async flushDue() {
+            const groupsResult = await db.query(sql `
+        select distinct user_id, channel_name from ${pending}`);
+            const sent = [];
+            for (const group of groupsResult.rows) {
+                const prefs = await preferenceStore.get(group.user_id, group.channel_name);
+                const stillInQuietHours = prefs.quietHours !== null && isWithinQuietHours(prefs.quietHours, now());
+                if (stillInQuietHours)
+                    continue;
+                const rowsResult = await db.query(sql `
+          select * from ${pending}
+          where user_id = ${group.user_id} and channel_name = ${group.channel_name}
+          order by created_at asc`);
+                const rows = rowsResult.rows;
+                if (rows.length === 0)
+                    continue;
+                const first = rows[0];
+                if (first === undefined)
+                    continue;
+                const oldest = new Date(first.created_at).getTime();
+                const windowMs = prefs.grouping === 'immediate' ? 0 : GROUPING_WINDOW_MS[prefs.grouping];
+                const due = now() - oldest >= windowMs;
+                if (!due)
+                    continue;
+                const target = await resolveTarget(group.user_id, group.channel_name);
+                if (target !== null) {
+                    const message = rows.length === 1 && first !== undefined
+                        ? buildNotification(`${first.title} — ${first.summary}`)
+                        : buildReport({
+                            title: 'Notifications groupées',
+                            keyFigures: [{ label: 'Constats', value: String(rows.length) }],
+                            sections: rows.map((row) => ({ heading: row.title, body: row.summary })),
+                            moreUrl: buildAdminUrl(group.user_id, group.channel_name),
+                        });
+                    sent.push(await sendOne(group.channel_name, target.channelUserId, message));
+                }
+                await db.query(sql `
+          delete from ${pending}
+          where user_id = ${group.user_id} and channel_name = ${group.channel_name}`);
+            }
+            return sent;
+        },
+    };
+}
+//# sourceMappingURL=dispatcher.js.map

package/dist/preferences/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/preferences/dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAE3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAGlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAyB,aAAa,EAAE,MAAM,YAAY,CAAA;AA8BjE,MAAM,kBAAkB,GAAiD;IACvE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACtB,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;CAC3B,CAAA;AAoBD,MAAM,UAAU,4BAA4B,CAC1C,OAA4C;IAE5C,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAEjE,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,WAAmB;QAC9D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACzD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,IAAI,IAAI,CAAA;IAClE,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,KAAkB;QACvC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;oBACF,OAAO;gBACX,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;IAC9K,CAAC;IAED,KAAK,UAAU,OAAO,CACpB,WAAmB,EACnB,QAAgB,EAChB,OAAuB;QAEvB,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAA;IAClE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAExE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;YACxD,CAAC;YACD,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;YAClE,CAAC;YAED,MAAM,YAAY,GAChB,KAAK,CAAC,UAAU,KAAK,IAAI;gBACzB,KAAK,CAAC,QAAQ,KAAK,UAAU;gBAC7B,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;YAE7C,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;gBACpB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAA;YAC9D,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACnC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;gBACpB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;YAC7D,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YACnE,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;YAE9E,+DAA+D;YAC/D,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACtE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;YACjF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;QACxC,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,KAAK,CAA4C,GAAG,CAAA;qDACnC,OAAO,EAAE,CAAC,CAAA;YAEzD,MAAM,IAAI,GAAgB,EAAE,CAAA;YAE5B,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;gBAC1E,MAAM,iBAAiB,GACrB,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC1E,IAAI,iBAAiB;oBAAE,SAAQ;gBAE/B,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,KAAK,CAAa,GAAG,CAAA;0BAC/B,OAAO;4BACL,KAAK,CAAC,OAAO,uBAAuB,KAAK,CAAC,YAAY;kCAChD,CAAC,CAAA;gBAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAA;gBAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAQ;gBAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;gBACrB,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAQ;gBACjC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAA;gBACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACxF,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,MAAM,IAAI,QAAQ,CAAA;gBACtC,IAAI,CAAC,GAAG;oBAAE,SAAQ;gBAElB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;gBACrE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS;wBACtC,CAAC,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;wBACxD,CAAC,CAAC,WAAW,CAAC;4BACV,KAAK,EAAE,wBAAwB;4BAC/B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC/D,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;4BACxE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC;yBAC1D,CAAC,CAAA;oBACR,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAA;gBAC7E,CAAC;gBAED,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;wBACF,OAAO;4BACH,KAAK,CAAC,OAAO,uBAAuB,KAAK,CAAC,YAAY,EAAE,CAAC,CAAA;YAC/E,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/preferences/quiet-hours.d.ts

@@ -0,0 +1,12 @@
+import type { QuietHours } from './types.js';
+/**
+ * Minute-of-day, UTC. This package stores no per-user timezone yet (nothing
+ * upstream collects one) — quiet hours compare against UTC clock minutes, a
+ * documented simplification, not a silent one: a user in a different
+ * timezone gets a UTC-anchored window until per-user timezone storage
+ * exists somewhere in this codebase.
+ */
+export declare function minuteOfDayUtc(epochMs: number): number;
+/** Handles a window that wraps past midnight (e.g. 22:00 → 06:00). */
+export declare function isWithinQuietHours(quietHours: QuietHours, epochMs: number): boolean;
+//# sourceMappingURL=quiet-hours.d.ts.map

package/dist/preferences/quiet-hours.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quiet-hours.d.ts","sourceRoot":"","sources":["../../src/preferences/quiet-hours.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAMnF"}

package/dist/preferences/quiet-hours.js

@@ -0,0 +1,22 @@
+/**
+ * Minute-of-day, UTC. This package stores no per-user timezone yet (nothing
+ * upstream collects one) — quiet hours compare against UTC clock minutes, a
+ * documented simplification, not a silent one: a user in a different
+ * timezone gets a UTC-anchored window until per-user timezone storage
+ * exists somewhere in this codebase.
+ */
+export function minuteOfDayUtc(epochMs) {
+    const date = new Date(epochMs);
+    return date.getUTCHours() * 60 + date.getUTCMinutes();
+}
+/** Handles a window that wraps past midnight (e.g. 22:00 → 06:00). */
+export function isWithinQuietHours(quietHours, epochMs) {
+    const minute = minuteOfDayUtc(epochMs);
+    const { startMinute, endMinute } = quietHours;
+    if (startMinute === endMinute)
+        return false; // a zero-width window never applies
+    if (startMinute < endMinute)
+        return minute >= startMinute && minute < endMinute;
+    return minute >= startMinute || minute < endMinute;
+}
+//# sourceMappingURL=quiet-hours.js.map

package/dist/preferences/quiet-hours.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quiet-hours.js","sourceRoot":"","sources":["../../src/preferences/quiet-hours.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAA;AACvD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,UAAsB,EAAE,OAAe;IACxE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,UAAU,CAAA;IAC7C,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA,CAAC,oCAAoC;IAChF,IAAI,WAAW,GAAG,SAAS;QAAE,OAAO,MAAM,IAAI,WAAW,IAAI,MAAM,GAAG,SAAS,CAAA;IAC/E,OAAO,MAAM,IAAI,WAAW,IAAI,MAAM,GAAG,SAAS,CAAA;AACpD,CAAC"}

package/dist/preferences/store.d.ts

@@ -0,0 +1,8 @@
+import { type DatabaseHandle } from '@cogenta/core';
+import { type ChannelPreferences } from './types.js';
+export interface PreferenceStore {
+    get(userId: string, channelName: string): Promise<ChannelPreferences>;
+    set(userId: string, channelName: string, preferences: ChannelPreferences): Promise<void>;
+}
+export declare function createPreferenceStore(db: DatabaseHandle, now?: () => number): PreferenceStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/preferences/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/preferences/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAGzF,OAAO,EAGL,KAAK,kBAAkB,EAGxB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACrE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzF;AA2DD,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,cAAc,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,eAAe,CA2BjB"}

package/dist/preferences/store.js

@@ -0,0 +1,60 @@
+import { CogentaError, identifier, newId, sql } from '@cogenta/core';
+import { PREFERENCE_TABLES } from './tables.js';
+import { CHANNEL_EVENT_TYPES, DEFAULT_CHANNEL_PREFERENCES, } from './types.js';
+function isEventType(value) {
+    return CHANNEL_EVENT_TYPES.includes(value);
+}
+function invalid(message, hint) {
+    return new CogentaError({ code: 'CHANNEL_PREFERENCES_INVALID', message, hint });
+}
+function validate(preferences) {
+    for (const eventType of preferences.eventTypes) {
+        if (!isEventType(eventType)) {
+            throw invalid(`"${eventType}" is not a known channel event type.`, `Use one of: ${CHANNEL_EVENT_TYPES.join(', ')}.`);
+        }
+    }
+    const { quietHours } = preferences;
+    if (quietHours !== null) {
+        for (const [label, minute] of [
+            ['startMinute', quietHours.startMinute],
+            ['endMinute', quietHours.endMinute],
+        ]) {
+            if (!Number.isInteger(minute) || minute < 0 || minute > 1439) {
+                throw invalid(`quietHours.${label} must be an integer between 0 and 1439 (minutes since local midnight), got ${minute}.`, 'Pick a minute-of-day in [0, 1439], or set quietHours to null to disable it.');
+            }
+        }
+    }
+}
+function rowToPreferences(row) {
+    return {
+        eventTypes: row.event_types.split(',').filter((v) => v.length > 0),
+        minSeverity: row.min_severity,
+        quietHours: row.quiet_start_minute === null || row.quiet_end_minute === null
+            ? null
+            : { startMinute: row.quiet_start_minute, endMinute: row.quiet_end_minute },
+        grouping: row.grouping,
+    };
+}
+export function createPreferenceStore(db, now = Date.now) {
+    const preferences = identifier(PREFERENCE_TABLES.preferences, db.dialect);
+    return {
+        async get(userId, channelName) {
+            const result = await db.query(sql `select * from ${preferences} where user_id = ${userId} and channel_name = ${channelName}`);
+            const row = result.rows[0];
+            return row === undefined ? DEFAULT_CHANNEL_PREFERENCES : rowToPreferences(row);
+        },
+        async set(userId, channelName, next) {
+            validate(next);
+            const updatedAt = new Date(now()).toISOString();
+            await db.query(sql `delete from ${preferences} where user_id = ${userId} and channel_name = ${channelName}`);
+            await db.query(sql `
+        insert into ${preferences}
+          (id, user_id, channel_name, event_types, min_severity, quiet_start_minute, quiet_end_minute, grouping, updated_at)
+        values (
+          ${newId(now)}, ${userId}, ${channelName}, ${next.eventTypes.join(',')}, ${next.minSeverity},
+          ${next.quietHours?.startMinute ?? null}, ${next.quietHours?.endMinute ?? null}, ${next.grouping}, ${updatedAt}
+        )`);
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/preferences/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/preferences/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAEzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EACL,mBAAmB,EAGnB,2BAA2B,GAE5B,MAAM,YAAY,CAAA;AAmBnB,SAAS,WAAW,CAAC,KAAa;IAChC,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY;IAC5C,OAAO,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,WAA+B;IAC/C,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,CACX,IAAI,SAAS,sCAAsC,EACnD,eAAe,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjD,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAA;IAClC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;YAC5B,CAAC,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC;YACvC,CAAC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC;SAC3B,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;gBAC7D,MAAM,OAAO,CACX,cAAc,KAAK,8EAA8E,MAAM,GAAG,EAC1G,6EAA6E,CAC9E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAuB;QACxF,WAAW,EAAE,GAAG,CAAC,YAA+B;QAChD,UAAU,EACR,GAAG,CAAC,kBAAkB,KAAK,IAAI,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAC9D,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE;QAC9E,QAAQ,EAAE,GAAG,CAAC,QAAwB;KACvC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAkB,EAClB,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,MAAM,WAAW,GAAG,UAAU,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAEzE,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW;YAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,iBAAiB,WAAW,oBAAoB,MAAM,uBAAuB,WAAW,EAAE,CAC9F,CAAA;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;QAChF,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;YACjC,QAAQ,CAAC,IAAI,CAAC,CAAA;YACd,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC/C,MAAM,EAAE,CAAC,KAAK,CACZ,GAAG,CAAA,eAAe,WAAW,oBAAoB,MAAM,uBAAuB,WAAW,EAAE,CAC5F,CAAA;YACD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,WAAW;;;YAGrB,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,KAAK,WAAW,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,WAAW;YACxF,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,KAAK,SAAS;UAC7G,CAAC,CAAA;QACP,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/preferences/tables.d.ts

@@ -0,0 +1,12 @@
+import { type DatabaseHandle } from '@cogenta/core';
+export declare const PREFERENCE_TABLES: {
+    readonly preferences: 'cogenta_channel_preferences';
+    readonly pending: 'cogenta_channel_pending_notifications';
+};
+/**
+ * Owned by `@cogenta/channels`, same `create table if not exists` pattern as
+ * `ensureChannelTables` (`../linking/tables.js`) — no separate migration
+ * file, a fresh install and an upgrade take the same path.
+ */
+export declare function ensurePreferenceTables(db: DatabaseHandle): Promise<void>;
+//# sourceMappingURL=tables.d.ts.map

package/dist/preferences/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../src/preferences/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,eAAe,CAAA;AAEtB,eAAO,MAAM,iBAAiB;aAC5B,WAAW,EAAE,6BAA6B;aAC1C,OAAO,EAAE,uCAAuC;CACxC,CAAA;AAMV;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkD9E"}

package/dist/preferences/tables.js

@@ -0,0 +1,55 @@
+import { identifier, sql, unsafeRaw, } from '@cogenta/core';
+export const PREFERENCE_TABLES = {
+    preferences: 'cogenta_channel_preferences',
+    pending: 'cogenta_channel_pending_notifications',
+};
+function textColumn(dialect, length) {
+    return unsafeRaw(dialect === 'sqlite' ? 'text' : `varchar(${length})`);
+}
+/**
+ * Owned by `@cogenta/channels`, same `create table if not exists` pattern as
+ * `ensureChannelTables` (`../linking/tables.js`) — no separate migration
+ * file, a fresh install and an upgrade take the same path.
+ */
+export async function ensurePreferenceTables(db) {
+    const d = db.dialect;
+    const preferences = identifier(PREFERENCE_TABLES.preferences, d);
+    const pending = identifier(PREFERENCE_TABLES.pending, d);
+    const t64 = textColumn(d, 64);
+    const t255 = textColumn(d, 255);
+    const int = unsafeRaw('integer');
+    await db.query(sql `
+    create table if not exists ${preferences} (
+      id ${t64} not null primary key,
+      user_id ${t64} not null,
+      channel_name ${t64} not null,
+      -- Comma-joined ChannelEventTypes (types.ts) — an open, but real,
+      -- typed set, not free text.
+      event_types ${t255} not null,
+      min_severity ${t64} not null,
+      quiet_start_minute ${int},
+      quiet_end_minute ${int},
+      grouping ${t64} not null,
+      updated_at ${t64} not null
+    )`);
+    await createIndexIfMissing(db, 'cogenta_channel_preferences_lookup', preferences, sql `(user_id, channel_name)`, true);
+    await db.query(sql `
+    create table if not exists ${pending} (
+      id ${t64} not null primary key,
+      user_id ${t64} not null,
+      channel_name ${t64} not null,
+      event_type ${t64} not null,
+      severity ${t64} not null,
+      title ${t255} not null,
+      summary ${t255} not null,
+      created_at ${t64} not null
+    )`);
+    await createIndexIfMissing(db, 'cogenta_channel_pending_lookup', pending, sql `(user_id, channel_name)`, false);
+}
+async function createIndexIfMissing(db, name, table, columns, unique) {
+    const kind = unique ? unsafeRaw('unique index') : unsafeRaw('index');
+    await db
+        .query(sql `create ${kind} ${identifier(name, db.dialect)} on ${table} ${columns}`)
+        .catch(() => undefined); // already there — no portable "if not exists" for indexes
+}
+//# sourceMappingURL=tables.js.map

package/dist/preferences/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../src/preferences/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,UAAU,EAEV,GAAG,EACH,SAAS,GACV,MAAM,eAAe,CAAA;AAEtB,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,6BAA6B;IAC1C,OAAO,EAAE,uCAAuC;CACxC,CAAA;AAEV,SAAS,UAAU,CAAC,OAAwB,EAAE,MAAc;IAC1D,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,GAAG,CAAC,CAAA;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAkB;IAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAA;IACpB,MAAM,WAAW,GAAG,UAAU,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAChE,MAAM,OAAO,GAAG,UAAU,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAEhC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iCACa,WAAW;WACjC,GAAG;gBACE,GAAG;qBACE,GAAG;;;oBAGJ,IAAI;qBACH,GAAG;2BACG,GAAG;yBACL,GAAG;iBACX,GAAG;mBACD,GAAG;MAChB,CAAC,CAAA;IAEL,MAAM,oBAAoB,CACxB,EAAE,EACF,oCAAoC,EACpC,WAAW,EACX,GAAG,CAAA,yBAAyB,EAC5B,IAAI,CACL,CAAA;IAED,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iCACa,OAAO;WAC7B,GAAG;gBACE,GAAG;qBACE,GAAG;mBACL,GAAG;iBACL,GAAG;cACN,IAAI;gBACF,IAAI;mBACD,GAAG;MAChB,CAAC,CAAA;IAEL,MAAM,oBAAoB,CACxB,EAAE,EACF,gCAAgC,EAChC,OAAO,EACP,GAAG,CAAA,yBAAyB,EAC5B,KAAK,CACN,CAAA;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,EAAkB,EAClB,IAAY,EACZ,KAAkB,EAClB,OAAoB,EACpB,MAAe;IAEf,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACpE,MAAM,EAAE;SACL,KAAK,CAAC,GAAG,CAAA,UAAU,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAC;SACjF,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA,CAAC,0DAA0D;AACtF,CAAC"}