@de-otio/trellis 0.10.11 → 0.11.0

package/dist/lib/encrypted-settings/encrypted-settings-handler.js

@@ -0,0 +1,178 @@
+// WS5 — EncryptedSettingsHandler: server-blind state-sync boundary.
+//
+// Owns request-boundary validation (namespace allowlist, size cap, Zod body),
+// optimistic-concurrency mapping (CAS -> 200 / 409-with-current), the idle-client
+// 304 fast path, and the publish-on-change content-free wakeup.
+//
+// SERVER-BLIND INVARIANT: the handler treats `ciphertext` as an opaque string.
+// It never JSON-parses it, never logs it, and never puts it on the realtime wire
+// (the wakeup carries only `version` as the changeToken). The blob travels ONLY
+// over the authenticated REST GET. Asserted by the unit tests.
+import { z } from "zod";
+import { channelFor } from "../realtime/channel.js";
+import { encodeWakeup } from "../realtime/types.js";
+import { getLogger } from "../logger.js";
+import { supportsChangeCursor } from "../realtime/types.js";
+import { BlobTooLargeError, UnknownNamespaceError } from "./types.js";
+/** PUT body: opaque ciphertext + the version the client believes it is editing. */
+const putBodySchema = z.object({
+    ciphertext: z.string(),
+    // expectVersion: 0 for a first write, else the version last seen.
+    expectVersion: z.number().int().nonnegative(),
+});
+const JSON_HEADERS = { "content-type": "application/json" };
+function json(body, status, extraHeaders) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { ...JSON_HEADERS, ...extraHeaders },
+    });
+}
+/**
+ * The change-token / ETag for a blob is just its `version` rendered as a string.
+ * It leaks only THAT/WHEN a setting changed (version is already plaintext sync
+ * metadata per the frozen contract), never WHAT.
+ */
+function changeTokenFor(version) {
+    return String(version);
+}
+export class EncryptedSettingsHandler {
+    store;
+    config;
+    transport;
+    constructor(store, config, transport) {
+        this.store = store;
+        this.config = config;
+        this.transport = transport;
+    }
+    assertNamespaceAllowed(namespace) {
+        if (!this.config.allowedNamespaces.has(namespace)) {
+            throw new UnknownNamespaceError(namespace);
+        }
+    }
+    /**
+     * GET /api/settings/:namespace. Session-scoped to `userId`.
+     *  - unknown namespace -> 404
+     *  - matching If-None-Match (the version) -> 304, empty body (idle fast path)
+     *  - no blob yet -> 404
+     *  - else -> 200 { ciphertext, version, updatedAt } + ETag: <version>
+     */
+    async handleGet(userId, namespace, ifNoneMatch) {
+        this.assertNamespaceAllowed(namespace);
+        const blob = await this.store.get(userId, namespace);
+        if (!blob) {
+            return json({ error: "NOT_FOUND", message: "No setting blob" }, 404);
+        }
+        const token = changeTokenFor(blob.version);
+        if (ifNoneMatch !== null && ifNoneMatch === token) {
+            // Idle-client fast path: nothing changed, return an empty 304.
+            return new Response(null, { status: 304, headers: { ETag: token } });
+        }
+        return json({
+            ciphertext: blob.ciphertext,
+            version: blob.version,
+            updatedAt: blob.updatedAt,
+        }, 200, { ETag: token });
+    }
+    /**
+     * GET /api/settings/changes?since=<cursor>. Track C — offline backfill.
+     * Session-scoped to `userId`. Returns METADATA ONLY for namespaces whose
+     * version advanced past the opaque `sinceVersion` cursor — NEVER `ciphertext`.
+     * The client re-pulls each changed namespace's blob over the per-namespace GET.
+     *
+     *  - store lacks the change-cursor capability -> 501 (not configured)
+     *  - else -> 200 { changes: [{ namespace, version, updatedAt }, ...], cursor }
+     *
+     * `cursor` echoes back the new high-watermark (max version seen, or the input
+     * `sinceVersion` when nothing changed) so the client can persist it verbatim.
+     */
+    async handleChanges(userId, sinceVersion) {
+        if (!supportsChangeCursor(this.store)) {
+            // The configured store does not implement offline backfill.
+            return json({
+                error: "NOT_IMPLEMENTED",
+                message: "Change cursor is not available on this store",
+            }, 501);
+        }
+        const changes = await this.store.listChangedSince(userId, sinceVersion);
+        // New high-watermark: the largest version observed, else the unchanged cursor.
+        const cursor = changes.reduce((max, c) => (c.version > max ? c.version : max), sinceVersion);
+        // METADATA ONLY — `changes` entries are ChangedSettingMeta, which is
+        // structurally incapable of carrying ciphertext (asserted by the tests).
+        return json({ changes, cursor }, 200);
+    }
+    /**
+     * PUT /api/settings/:namespace. Session-scoped to `userId`; `tenantId` is the
+     * server-resolved active tenant (used ONLY to scope the wakeup channel — the
+     * blob itself has no tenant).
+     *  - unknown namespace -> 404
+     *  - invalid body -> 400
+     *  - ciphertext over the size cap -> 413, store NEVER called
+     *  - CAS conflict -> 409 with the server's current blob (client merges)
+     *  - CAS not_found (non-zero expectVersion, no row) -> 409 with null current
+     *  - success -> 200 { version, changeToken } + ETag; best-effort wakeup published
+     */
+    async handlePut(userId, tenantId, namespace, body) {
+        this.assertNamespaceAllowed(namespace);
+        const parsed = putBodySchema.safeParse(body);
+        if (!parsed.success) {
+            return json({ error: "VALIDATION_ERROR", message: "Invalid request body" }, 400);
+        }
+        const { ciphertext, expectVersion } = parsed.data;
+        // Size cap is enforced BEFORE the store is touched.
+        const bytes = Buffer.byteLength(ciphertext, "utf8");
+        if (bytes > this.config.maxSettingBytes) {
+            throw new BlobTooLargeError(bytes, this.config.maxSettingBytes);
+        }
+        const result = await this.store.put(userId, namespace, 
+        // updatedAt is server-assigned by the store; pass a placeholder.
+        { ciphertext, version: expectVersion, updatedAt: "" }, expectVersion);
+        if (!result.ok) {
+            if (result.reason === "version_conflict") {
+                return json({
+                    error: "VERSION_CONFLICT",
+                    message: "Stale version; reconcile against current",
+                    current: {
+                        ciphertext: result.current.ciphertext,
+                        version: result.current.version,
+                        updatedAt: result.current.updatedAt,
+                    },
+                }, 409, { ETag: changeTokenFor(result.current.version) });
+            }
+            // not_found: non-zero expectVersion against an absent row.
+            return json({
+                error: "NOT_FOUND",
+                message: "No setting blob to update at that version",
+                current: null,
+            }, 409);
+        }
+        const version = result.stored.version;
+        const changeToken = changeTokenFor(version);
+        // Publish-on-change: ONE content-free setting_sync wakeup, best-effort. A
+        // delivery failure must NOT fail the PUT — REST is the source of truth and
+        // the client's next poll converges.
+        await this.publishWakeup(userId, tenantId, changeToken);
+        return json({ version, changeToken }, 200, { ETag: changeToken });
+    }
+    /**
+     * Best-effort content-free wakeup. Uses encodeWakeup() (the ONLY sanctioned
+     * payload builder for setting_sync) with changeToken=version — NEVER the
+     * ciphertext. Swallows transport errors; logs at warn.
+     */
+    async publishWakeup(userId, tenantId, changeToken) {
+        if (!this.transport)
+            return;
+        try {
+            const channel = channelFor("setting_sync", { tenantId, userId });
+            const payload = encodeWakeup({
+                v: 1,
+                kind: "setting_sync",
+                changeToken,
+            });
+            await this.transport.deliver({ userId, tenantId }, channel, payload);
+        }
+        catch (err) {
+            getLogger().warn("setting_sync wakeup publish failed (best-effort)", err);
+        }
+    }
+}
+//# sourceMappingURL=encrypted-settings-handler.js.map

package/dist/lib/encrypted-settings/encrypted-settings-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-settings-handler.js","sourceRoot":"","sources":["../../../src/lib/encrypted-settings/encrypted-settings-handler.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,8EAA8E;AAC9E,kFAAkF;AAClF,gEAAgE;AAChE,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,+DAA+D;AAE/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEtE,mFAAmF;AACnF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kEAAkE;IAClE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC9C,CAAC,CAAC;AAIH,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAW,CAAC;AAErE,SAAS,IAAI,CAAC,IAAa,EAAE,MAAc,EAAE,YAAqC;IAChF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,YAAY,EAAE,GAAG,YAAY,EAAE;KAC9C,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,OAAO,wBAAwB;IAEhB;IACA;IACA;IAHnB,YACmB,KAAmB,EACnB,MAAsB,EACtB,SAA6B;QAF7B,UAAK,GAAL,KAAK,CAAc;QACnB,WAAM,GAAN,MAAM,CAAgB;QACtB,cAAS,GAAT,SAAS,CAAoB;IAC7C,CAAC;IAEI,sBAAsB,CAAC,SAAiB;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,MAAc,EACd,SAAiB,EACjB,WAA0B;QAE1B,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAClD,+DAA+D;YAC/D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,IAAI,CACT;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,EACD,GAAG,EACH,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,YAAoB;QAEpB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,4DAA4D;YAC5D,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,8CAA8C;aACxD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,+EAA+E;QAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC/C,YAAY,CACb,CAAC;QACF,qEAAqE;QACrE,yEAAyE;QACzE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,CACb,MAAc,EACd,QAAgB,EAChB,SAAiB,EACjB,IAAa;QAEb,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CACT,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAC9D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAElD,oDAAoD;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,IAAI,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CACjC,MAAM,EACN,SAAS;QACT,iEAAiE;QACjE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,EACrD,aAAa,CACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBACzC,OAAO,IAAI,CACT;oBACE,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,0CAA0C;oBACnD,OAAO,EAAE;wBACP,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;wBACrC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;wBAC/B,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;qBACpC;iBACF,EACD,GAAG,EACH,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CACjD,CAAC;YACJ,CAAC;YACD,2DAA2D;YAC3D,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,2CAA2C;gBACpD,OAAO,EAAE,IAAI;aACd,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACtC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAE5C,0EAA0E;QAC1E,2EAA2E;QAC3E,oCAAoC;QACpC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,aAAa,CACzB,MAAc,EACd,QAAgB,EAChB,WAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,YAAY,CAAC;gBAC3B,CAAC,EAAE,CAAC;gBACJ,IAAI,EAAE,cAAc;gBACpB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,IAAI,CAAC,kDAAkD,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF"}

package/dist/lib/encrypted-settings/encrypted-settings-store.d.ts

@@ -0,0 +1,110 @@
+import type { ChangeCursorStore, ChangedSettingMeta, EncryptedBlob, PutResult, SettingStore } from "./types.js";
+/** The row shape this store reads back from Postgres. */
+interface EncryptedUserSettingRow {
+    ciphertext: string;
+    version: number;
+    updatedAt: Date;
+}
+/**
+ * The change-cursor projection. Note the DELIBERATE absence of `ciphertext`:
+ * `listChangedSince` selects metadata ONLY, so the blob body never leaves the DB.
+ */
+interface ChangedSettingRow {
+    namespace: string;
+    version: number;
+    updatedAt: Date;
+}
+/**
+ * The minimal Prisma surface this store needs. Declared structurally so the
+ * store is unit-testable against a mock without importing the generated client
+ * (which also keeps it decoupled from Prisma version drift).
+ */
+export interface EncryptedUserSettingDelegate {
+    findUnique(args: {
+        where: {
+            userId_namespace: {
+                userId: string;
+                namespace: string;
+            };
+        };
+        select: {
+            ciphertext: true;
+            version: true;
+            updatedAt: true;
+        };
+    }): Promise<EncryptedUserSettingRow | null>;
+    create(args: {
+        data: {
+            userId: string;
+            namespace: string;
+            ciphertext: string;
+            version: number;
+        };
+        select: {
+            ciphertext: true;
+            version: true;
+            updatedAt: true;
+        };
+    }): Promise<EncryptedUserSettingRow>;
+    updateMany(args: {
+        where: {
+            userId: string;
+            namespace: string;
+            version: number;
+        };
+        data: {
+            ciphertext: string;
+            version: {
+                increment: number;
+            };
+        };
+    }): Promise<{
+        count: number;
+    }>;
+    findMany(args: {
+        where: {
+            userId: string;
+            version: {
+                gt: number;
+            };
+        };
+        select: {
+            namespace: true;
+            version: true;
+            updatedAt: true;
+        };
+        orderBy: {
+            version: "asc";
+        };
+    }): Promise<ChangedSettingRow[]>;
+}
+export interface PrismaWithEncryptedUserSetting {
+    encryptedUserSetting: EncryptedUserSettingDelegate;
+}
+export declare class PrismaEncryptedSettingsStore implements SettingStore, ChangeCursorStore {
+    private readonly db;
+    constructor(db: PrismaWithEncryptedUserSetting);
+    get(userId: string, namespace: string): Promise<EncryptedBlob | null>;
+    /**
+     * Optimistic concurrency, matching InMemorySettingStore semantics exactly:
+     *  - `expectVersion === 0`: a fresh create. A pre-existing row (lost the race)
+     *    surfaces as a P2002 unique violation -> version_conflict with current.
+     *  - `expectVersion > 0`: conditional `updateMany WHERE version = expectVersion`.
+     *    `count === 0` means the stored version moved (or the row is gone) ->
+     *    re-read and return version_conflict / not_found.
+     * On success the new version is `expectVersion + 1`; the DB assigns updatedAt.
+     */
+    put(userId: string, namespace: string, blob: EncryptedBlob, expectVersion: number): Promise<PutResult>;
+    /**
+     * Track C — offline backfill cursor. Returns metadata for this user's
+     * namespaces whose `version` is strictly greater than `sinceVersion`, ordered
+     * by ascending version. Backed by the `@@index([userId])` on the table.
+     *
+     * SERVER-BLIND: the `select` projects `namespace`/`version`/`updatedAt` ONLY.
+     * `ciphertext` is NEVER selected, so the opaque blob body never leaves the DB
+     * on this path. The cursor is an opaque per-user version high-watermark.
+     */
+    listChangedSince(userId: string, sinceVersion: number): Promise<ChangedSettingMeta[]>;
+}
+export {};
+//# sourceMappingURL=encrypted-settings-store.d.ts.map

package/dist/lib/encrypted-settings/encrypted-settings-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-settings-store.d.ts","sourceRoot":"","sources":["../../../src/lib/encrypted-settings/encrypted-settings-store.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB,yDAAyD;AACzD,UAAU,uBAAuB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,IAAI,EAAE;QACf,KAAK,EAAE;YAAE,gBAAgB,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACnE,MAAM,EAAE;YAAE,UAAU,EAAE,IAAI,CAAC;YAAC,OAAO,EAAE,IAAI,CAAC;YAAC,SAAS,EAAE,IAAI,CAAA;SAAE,CAAC;KAC9D,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,IAAI,EAAE;QACX,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QACjF,MAAM,EAAE;YAAE,UAAU,EAAE,IAAI,CAAC;YAAC,OAAO,EAAE,IAAI,CAAC;YAAC,SAAS,EAAE,IAAI,CAAA;SAAE,CAAC;KAC9D,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,UAAU,CAAC,IAAI,EAAE;QACf,KAAK,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9D,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;KAC9D,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE;QACb,KAAK,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACnD,MAAM,EAAE;YAAE,SAAS,EAAE,IAAI,CAAC;YAAC,OAAO,EAAE,IAAI,CAAC;YAAC,SAAS,EAAE,IAAI,CAAA;SAAE,CAAC;QAC5D,OAAO,EAAE;YAAE,OAAO,EAAE,KAAK,CAAA;SAAE,CAAC;KAC7B,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,8BAA8B;IAC7C,oBAAoB,EAAE,4BAA4B,CAAC;CACpD;AAUD,qBAAa,4BACX,YAAW,YAAY,EAAE,iBAAiB;IAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,8BAA8B;IAEzD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAQ3E;;;;;;;;OAQG;IACG,GAAG,CACP,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,SAAS,CAAC;IAsCrB;;;;;;;;OAQG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAYjC"}

package/dist/lib/encrypted-settings/encrypted-settings-store.js

@@ -0,0 +1,103 @@
+// WS5 — PrismaEncryptedSettingsStore: the production SettingStore.
+//
+// Implements the FROZEN WS1 `SettingStore` port (apps/api/src/lib/realtime/
+// types.ts) backed by the `EncryptedUserSetting` Postgres table. Postgres (not
+// DynamoKv) is chosen for two reasons recorded in the frozen contract §M5:
+//   1. Cascade-on-user-delete — the blob is dropped via the existing User
+//      deletion path; no second deletion surface to audit
+//      (surveillance-threat-model data-minimization).
+//   2. Prisma consistency — optimistic concurrency (CAS) is a single conditional
+//      `updateMany({ where: { ..., version } })`, atomic at the DB.
+//
+// SERVER-BLIND: this store reads/writes `ciphertext` as an opaque string. It
+// NEVER parses, decodes, or logs the ciphertext. Only plaintext sync metadata
+// (`version`, `updatedAt`) is interpreted.
+function toBlob(row) {
+    return {
+        ciphertext: row.ciphertext,
+        version: row.version,
+        updatedAt: row.updatedAt.toISOString(),
+    };
+}
+export class PrismaEncryptedSettingsStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async get(userId, namespace) {
+        const row = await this.db.encryptedUserSetting.findUnique({
+            where: { userId_namespace: { userId, namespace } },
+            select: { ciphertext: true, version: true, updatedAt: true },
+        });
+        return row ? toBlob(row) : null;
+    }
+    /**
+     * Optimistic concurrency, matching InMemorySettingStore semantics exactly:
+     *  - `expectVersion === 0`: a fresh create. A pre-existing row (lost the race)
+     *    surfaces as a P2002 unique violation -> version_conflict with current.
+     *  - `expectVersion > 0`: conditional `updateMany WHERE version = expectVersion`.
+     *    `count === 0` means the stored version moved (or the row is gone) ->
+     *    re-read and return version_conflict / not_found.
+     * On success the new version is `expectVersion + 1`; the DB assigns updatedAt.
+     */
+    async put(userId, namespace, blob, expectVersion) {
+        if (expectVersion === 0) {
+            try {
+                const row = await this.db.encryptedUserSetting.create({
+                    data: { userId, namespace, ciphertext: blob.ciphertext, version: 1 },
+                    select: { ciphertext: true, version: true, updatedAt: true },
+                });
+                return { ok: true, stored: toBlob(row) };
+            }
+            catch (err) {
+                if (err?.code === "P2002") {
+                    // A row already exists: caller's expectVersion=0 is stale.
+                    const current = await this.get(userId, namespace);
+                    if (current)
+                        return { ok: false, reason: "version_conflict", current };
+                    // Vanishingly rare: row deleted between create-fail and re-read.
+                    return { ok: false, reason: "not_found", current: null };
+                }
+                throw err;
+            }
+        }
+        const result = await this.db.encryptedUserSetting.updateMany({
+            where: { userId, namespace, version: expectVersion },
+            data: { ciphertext: blob.ciphertext, version: { increment: 1 } },
+        });
+        if (result.count === 0) {
+            // CAS failed: either the version moved (conflict) or no row (not_found).
+            const current = await this.get(userId, namespace);
+            if (current)
+                return { ok: false, reason: "version_conflict", current };
+            return { ok: false, reason: "not_found", current: null };
+        }
+        const stored = await this.get(userId, namespace);
+        // The row exists (we just updated it); narrow for the type system.
+        if (!stored)
+            return { ok: false, reason: "not_found", current: null };
+        return { ok: true, stored };
+    }
+    /**
+     * Track C — offline backfill cursor. Returns metadata for this user's
+     * namespaces whose `version` is strictly greater than `sinceVersion`, ordered
+     * by ascending version. Backed by the `@@index([userId])` on the table.
+     *
+     * SERVER-BLIND: the `select` projects `namespace`/`version`/`updatedAt` ONLY.
+     * `ciphertext` is NEVER selected, so the opaque blob body never leaves the DB
+     * on this path. The cursor is an opaque per-user version high-watermark.
+     */
+    async listChangedSince(userId, sinceVersion) {
+        const rows = await this.db.encryptedUserSetting.findMany({
+            where: { userId, version: { gt: sinceVersion } },
+            select: { namespace: true, version: true, updatedAt: true },
+            orderBy: { version: "asc" },
+        });
+        return rows.map((row) => ({
+            namespace: row.namespace,
+            version: row.version,
+            updatedAt: row.updatedAt.toISOString(),
+        }));
+    }
+}
+//# sourceMappingURL=encrypted-settings-store.js.map

package/dist/lib/encrypted-settings/encrypted-settings-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-settings-store.js","sourceRoot":"","sources":["../../../src/lib/encrypted-settings/encrypted-settings-store.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,0DAA0D;AAC1D,sDAAsD;AACtD,iFAAiF;AACjF,oEAAoE;AACpE,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,2CAA2C;AAwD3C,SAAS,MAAM,CAAC,GAA4B;IAC1C,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,4BAA4B;IAGV;IAA7B,YAA6B,EAAkC;QAAlC,OAAE,GAAF,EAAE,CAAgC;IAAG,CAAC;IAEnE,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,SAAiB;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACxD,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YAClD,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;SAC7D,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,GAAG,CACP,MAAc,EACd,SAAiB,EACjB,IAAmB,EACnB,aAAqB;QAErB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBACpD,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE;oBACpE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;iBAC7D,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAAyB,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;oBACjD,2DAA2D;oBAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAClD,IAAI,OAAO;wBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;oBACvE,iEAAiE;oBACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3D,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC;YAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE;YACpD,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;SACjE,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACvB,yEAAyE;YACzE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAClD,IAAI,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjD,mEAAmE;QACnE,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,YAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YACvD,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE;YAChD,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;YAC3D,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/lib/encrypted-settings/types.d.ts

@@ -0,0 +1,26 @@
+import type { EncryptedBlob, PutResult, SettingStore, ChangedSettingMeta, ChangeCursorStore } from "../realtime/types.js";
+export type { EncryptedBlob, PutResult, SettingStore, ChangedSettingMeta, ChangeCursorStore, };
+/**
+ * Resolved runtime configuration for the settings-sync surface. Sourced ONLY
+ * from env (REALTIME_SETTING_NAMESPACES + REALTIME_SETTING_MAX_BYTES, read in
+ * env.ts which is the single writer). No compiled-in thresholds at call sites
+ * (CLAUDE.md threshold-secrecy rule).
+ */
+export interface SettingsConfig {
+    /** Allowlisted namespaces. A namespace outside this set is a 404. */
+    allowedNamespaces: ReadonlySet<string>;
+    /** Max bytes for a single ciphertext blob; exceeded => 413. */
+    maxSettingBytes: number;
+}
+/** Raised when a request names a namespace not in the allowlist. */
+export declare class UnknownNamespaceError extends Error {
+    readonly namespace: string;
+    constructor(namespace: string);
+}
+/** Raised when a ciphertext blob exceeds the configured size cap. */
+export declare class BlobTooLargeError extends Error {
+    readonly bytes: number;
+    readonly maxBytes: number;
+    constructor(bytes: number, maxBytes: number);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/encrypted-settings/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/encrypted-settings/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,GAClB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,oEAAoE;AACpE,qBAAa,qBAAsB,SAAQ,KAAK;aAClB,SAAS,EAAE,MAAM;gBAAjB,SAAS,EAAE,MAAM;CAI9C;AAED,qEAAqE;AACrE,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,KAAK,EAAE,MAAM;aACb,QAAQ,EAAE,MAAM;gBADhB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM;CAKnC"}

package/dist/lib/encrypted-settings/types.js

@@ -0,0 +1,27 @@
+// WS5 — encrypted-settings state-sync types.
+//
+// The blob/store contract is OWNED by the frozen WS1 realtime contract
+// (apps/api/src/lib/realtime/types.ts). We re-export the frozen shapes here so
+// the encrypted-settings module has a single import surface and can NEVER drift
+// from WS1. Do not redefine EncryptedBlob/PutResult/SettingStore — import them.
+/** Raised when a request names a namespace not in the allowlist. */
+export class UnknownNamespaceError extends Error {
+    namespace;
+    constructor(namespace) {
+        super(`Unknown setting namespace: ${namespace}`);
+        this.namespace = namespace;
+        this.name = "UnknownNamespaceError";
+    }
+}
+/** Raised when a ciphertext blob exceeds the configured size cap. */
+export class BlobTooLargeError extends Error {
+    bytes;
+    maxBytes;
+    constructor(bytes, maxBytes) {
+        super(`Encrypted setting blob too large: ${bytes} > ${maxBytes} bytes`);
+        this.bytes = bytes;
+        this.maxBytes = maxBytes;
+        this.name = "BlobTooLargeError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/lib/encrypted-settings/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/encrypted-settings/types.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AA+BhF,oEAAoE;AACpE,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAClB;IAA5B,YAA4B,SAAiB;QAC3C,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;QADvB,cAAS,GAAT,SAAS,CAAQ;QAE3C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IACA;IAFlB,YACkB,KAAa,EACb,QAAgB;QAEhC,KAAK,CAAC,qCAAqC,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC;QAHxD,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAGhC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/lib/notification-handler.d.ts

@@ -8,6 +8,8 @@
  */
 import type { Env } from "../env.js";
 import type { NotificationType } from "@prisma/client";
+import { type BlockStore } from "./realtime/block-store.js";
+import type { DeliveryPolicyResolver } from "./realtime/index.js";
 export interface NotificationListResponse {
     notifications: Array<{
         id: string;
@@ -22,6 +24,15 @@ export interface NotificationListResponse {
     hasMore: boolean;
 }
 export declare class NotificationHandler {
+    private readonly injectedResolver;
+    private readonly blockStore;
+    constructor(deliveryResolver?: DeliveryPolicyResolver | null, blockStore?: BlockStore | null);
+    /**
+     * The resolver for this call: the injected one (tests) or a default built
+     * from env's runtime re-engagement denylist (threshold-secrecy: the denylist
+     * is env-driven config, never a compiled-in constant).
+     */
+    private resolverFor;
     /**
      * Create a notification for a user.
      * Checks preferences (unless SAFETY_ALERT or PARENTAL_LINK) and quiet hours.
@@ -54,10 +65,6 @@ export declare class NotificationHandler {
      * Check whether a notification type is enabled in preferences.
      */
     private isTypeEnabled;
-    /**
-     * Check if current time falls within user's quiet hours.
-     */
-    private isInQuietHours;
 }
 export declare class NotificationNotFoundError extends Error {
     constructor(notificationId: string);

package/dist/lib/notification-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-handler.d.ts","sourceRoot":"","sources":["../../src/lib/notification-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIvD,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,gBAAgB,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,GAAG,CAAC;QACV,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAQD,qBAAa,mBAAmB;IAC9B;;;OAGG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,GAAG,EACT,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAmE1B;;OAEG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,CAAC;IAuCpC;;OAEG;IACG,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAqBhB;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5E;;;;OAIG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwBlD;;OAEG;IACH,OAAO,CAAC,aAAa;IAgCrB;;OAEG;IACH,OAAO,CAAC,cAAc;CA0BvB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,cAAc,EAAE,MAAM;CAInC"}
+{"version":3,"file":"notification-handler.d.ts","sourceRoot":"","sources":["../../src/lib/notification-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAW,MAAM,gBAAgB,CAAC;AAKhE,OAAO,EAEL,KAAK,UAAU,EAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAEV,sBAAsB,EAEvB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,gBAAgB,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,GAAG,CAAC;QACV,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AA+FD,qBAAa,mBAAmB;IAU9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IAIjE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAG7C,gBAAgB,GAAE,sBAAsB,GAAG,IAAW,EACtD,UAAU,GAAE,UAAU,GAAG,IAAW;IAMtC;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAOnB;;;OAGG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,GAAG,EACT,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAoI1B;;OAEG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,wBAAwB,CAAC;IAuCpC;;OAEG;IACG,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAqBhB;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5E;;;;OAIG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAwBlD;;OAEG;IACH,OAAO,CAAC,aAAa;CAmCtB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,cAAc,EAAE,MAAM;CAInC"}