@dereekb/dbx-components-mcp 14.14.0 → 14.16.0

package/dbx-components-mcp.js

@@ -10,7 +10,7 @@ var __export = (target, all) => {
 // packages/dbx-components-mcp/package.json
 var package_default = {
   name: "@dereekb/dbx-components-mcp",
-  version: "14.14.0",
+  version: "14.16.0",
   sideEffects: false,
   type: "module",
   bin: {
@@ -22,8 +22,8 @@ var package_default = {
     "ts-morph": "^21.0.0"
   },
   peerDependencies: {
-    "@dereekb/dbx-cli": "14.14.0",
-    "@dereekb/util": "14.14.0"
+    "@dereekb/dbx-cli": "14.16.0",
+    "@dereekb/util": "14.16.0"
   }
 };
 
@@ -2496,10 +2496,18 @@ var FIREBASE_MODELS = [
         tsType: "Maybe<NotificationHealthCheck>",
         optional: true,
         description: "The result of the most recent notification delivery health check run for this user."
+      },
+      {
+        name: "tso",
+        longName: "textStoppedPhoneNumbers",
+        converter: "optionalFirestoreArray<E164PhoneNumber>({ filterUnique: true, dontStoreIfEmpty: true })",
+        tsType: "Maybe<E164PhoneNumber[]>",
+        optional: true,
+        description: "Phone numbers that replied STOP to a text. Texts to a number in this list resolve to off, at send time and in the health check."
       }
     ],
     enums: [],
-    detectionHints: ["b", "x", "dc", "gc", "bc", "ns", "hc"],
+    detectionHints: ["b", "x", "dc", "gc", "bc", "ns", "hc", "tso"],
     description: "A global notification user profile that tracks notification preferences and box subscriptions.",
     modelGroup: "Notification",
     collectionKind: "root",
@@ -6492,15 +6500,16 @@ function parseSignalInput(property) {
     ...defaultValue === void 0 ? {} : { defaultValue }
   };
 }
+var SIGNAL_INPUT_FUNCTION_NAMES = /* @__PURE__ */ new Set(["input", "model"]);
 function classifySignalInputCall(call) {
   const expression = call.getExpression();
   let result;
-  if (Node9.isIdentifier(expression) && expression.getText() === "input") {
+  if (Node9.isIdentifier(expression) && SIGNAL_INPUT_FUNCTION_NAMES.has(expression.getText())) {
     result = "plain";
   } else if (Node9.isPropertyAccessExpression(expression)) {
     const baseExpr = expression.getExpression();
     const propertyName = expression.getName();
-    if (Node9.isIdentifier(baseExpr) && baseExpr.getText() === "input" && propertyName === "required") {
+    if (Node9.isIdentifier(baseExpr) && SIGNAL_INPUT_FUNCTION_NAMES.has(baseExpr.getText()) && propertyName === "required") {
       result = "required";
     }
   }
@@ -24747,9 +24756,9 @@ var RULE_CATALOG = [
   {
     code: "NOTIF_TASK_IN_VALIDATE_WITHOUT_HANDLER",
     source: "dbx_notification_m_validate_app",
-    severity: "warning",
+    severity: "error",
     title: "A task type appears in `validate:` but has no matching `handlers:` registration",
-    whatItFlags: "A task type appears in `validate:` but has no matching `handlers:` registration.",
+    whatItFlags: "A task type appears in `validate:` but has no matching `handlers:` registration.\n`notificationTaskService()` throws at startup for this.",
     whenItApplies: "When `notificationTaskService({ validate, handlers })` lists a task type in `validate:` that the `handlers:` traversal doesn't reach.",
     whenItDoesNotApply: "Tasks whose handler is provided by an upstream module (covered by the trust list).",
     canonicalFix: "Add the matching `NotificationTaskServiceTaskHandlerConfig` for the task and include it in `handlers:`."
@@ -24870,6 +24879,54 @@ var RULE_CATALOG = [
     whenItDoesNotApply: "Spreads from trust-listed `@dereekb/*` modules.",
     canonicalFix: "Declare the missing function or import it from a trusted module."
   },
+  {
+    code: "NOTIF_TEMPLATE_FACTORY_UNLISTED_DELIVERY_METHOD",
+    source: "dbx_notification_m_validate_app",
+    severity: "warning",
+    title: "A template's message factory returns channel content for a delivery method its `NotificationTemplateTypeInfo` does not list in `userConfigurableDeliveryMethods` or `forcedDeliveryMethods`",
+    whatItFlags: "A template's message factory returns channel content for a delivery method its `NotificationTemplateTypeInfo` does not list in `userConfigurableDeliveryMethods` or `forcedDeliveryMethods`.",
+    whenItApplies: "Template types whose info declares an explicit `userConfigurableDeliveryMethods` array, or only a `forcedDeliveryMethods` array (forcing a method changes the `userConfigurableDeliveryMethods` default to none), and whose handler factory (or the function its `factory:` names) builds an object literal with `emailContent`, `textContent` or `notificationSummaryContent` for a method neither array lists.",
+    whenItDoesNotApply: "Infos with neither `userConfigurableDeliveryMethods` nor `forcedDeliveryMethods` (the defaults list email, text and notification summary), lists the scanner cannot read statically (including a `forcedDeliveryMethods` it cannot read), and content built outside the factory's own source \u2014 the send pipeline's runtime warning (`notificationMessageFunctionWithUnlistedDeliveryMethodsWarning`) still covers those.",
+    canonicalFix: "Stop returning the unlisted content from the factory, or add the delivery method to the info's `userConfigurableDeliveryMethods` (or `forcedDeliveryMethods`).",
+    seeAlso: [
+      {
+        kind: "artifact",
+        target: "notification-template"
+      }
+    ]
+  },
+  {
+    code: "NOTIF_TEMPLATE_FORCED_DELIVERY_METHOD_EXPLICIT_OPT_IN",
+    source: "dbx_notification_m_validate_app",
+    severity: "error",
+    title: "A `NotificationTemplateTypeInfo` forces a delivery method while `onlySendToExplicitlyEnabledRecipients` is `true`. A forced method is on by default, which an opt-in only type cannot be, and the app throws at startup when the info record is built",
+    whatItFlags: "A `NotificationTemplateTypeInfo` forces a delivery method while `onlySendToExplicitlyEnabledRecipients` is `true`. A forced method is on by default, which an opt-in only type cannot be, and the app throws at startup when the info record is built.",
+    whenItApplies: "Infos with a non-empty statically read `forcedDeliveryMethods` array and `onlySendToExplicitlyEnabledRecipients: true`.",
+    whenItDoesNotApply: "Infos without `forcedDeliveryMethods`, lists the scanner cannot read statically, and `onlySendToExplicitlyEnabledRecipients` values other than a `true` literal.",
+    canonicalFix: "Remove `forcedDeliveryMethods`, or remove `onlySendToExplicitlyEnabledRecipients` from the info.",
+    seeAlso: [
+      {
+        kind: "artifact",
+        target: "notification-template"
+      }
+    ]
+  },
+  {
+    code: "NOTIF_TEMPLATE_FORCED_TEXT_DELIVERY_METHOD",
+    source: "dbx_notification_m_validate_app",
+    severity: "error",
+    title: "A `NotificationTemplateTypeInfo` lists the text delivery method in `forcedDeliveryMethods`. Texts cannot be forced, and the app throws at startup when the info record is built",
+    whatItFlags: "A `NotificationTemplateTypeInfo` lists the text delivery method in `forcedDeliveryMethods`. Texts cannot be forced, and the app throws at startup when the info record is built.",
+    whenItApplies: "Infos whose statically read `forcedDeliveryMethods` array contains `NotificationDeliveryMethod.TEXT`.",
+    whenItDoesNotApply: "Infos without `forcedDeliveryMethods`, and lists the scanner cannot read statically.",
+    canonicalFix: "Remove `NotificationDeliveryMethod.TEXT` from `forcedDeliveryMethods`. Texts stay opt-in for the recipient.",
+    seeAlso: [
+      {
+        kind: "artifact",
+        target: "notification-template"
+      }
+    ]
+  },
   {
     code: "NOTIF_TEMPLATE_INFO_MISSING",
     source: "dbx_notification_m_validate_app",
@@ -30840,6 +30897,16 @@ function readStringProperty2(obj, name) {
   }
   return void 0;
 }
+function readBooleanProperty2(obj, name) {
+  const init = unwrapAsExpressions(getPropertyInitializer(obj, name));
+  let result;
+  if (init?.getKind() === SyntaxKind11.TrueKeyword) {
+    result = true;
+  } else if (init?.getKind() === SyntaxKind11.FalseKeyword) {
+    result = false;
+  }
+  return result;
+}
 function readIdentifierProperty(obj, name) {
   const init = unwrapAsExpressions(getPropertyInitializer(obj, name));
   if (init && Node26.isIdentifier(init)) {
@@ -31566,7 +31633,8 @@ __export(notification_m_validate_app_exports, {
   extractAppNotifications: () => extractAppNotifications,
   formatResult: () => formatResult6,
   inspectAppNotifications: () => inspectAppNotifications,
-  validateAppNotifications: () => validateAppNotifications
+  validateAppNotifications: () => validateAppNotifications,
+  validateExtractedAppNotifications: () => validateExtractedAppNotifications
 });
 
 // packages/dbx-cli/validate/src/lib/notification-m-validate-app/extract.ts
@@ -31587,6 +31655,27 @@ var TEMPLATE_CONFIGS_ARRAY_FACTORY_SUFFIX = "NotificationTemplateServiceConfigsA
 var TEMPLATE_CONFIGS_ARRAY_TOKEN = "NOTIFICATION_TEMPLATE_SERVICE_CONFIGS_ARRAY_TOKEN";
 var CHECKPOINT_ALIAS_SUFFIX = "NotificationTaskCheckpoint";
 var TASK_DATA_INTERFACE_SUFFIX = "NotificationTaskData";
+var USER_CONFIGURABLE_DELIVERY_METHODS_PROPERTY = "userConfigurableDeliveryMethods";
+var FORCED_DELIVERY_METHODS_PROPERTY = "forcedDeliveryMethods";
+var ONLY_SEND_TO_EXPLICITLY_ENABLED_RECIPIENTS_PROPERTY = "onlySendToExplicitlyEnabledRecipients";
+var DELIVERY_METHOD_ENUM = "NotificationDeliveryMethod";
+var DELIVERY_METHOD_BY_MEMBER = /* @__PURE__ */ new Map([
+  ["EMAIL", "EMAIL"],
+  ["TEXT", "TEXT"],
+  ["PUSH", "PUSH"],
+  ["NOTIFICATION_SUMMARY", "NOTIFICATION_SUMMARY"]
+]);
+var DELIVERY_METHOD_BY_CODE = /* @__PURE__ */ new Map([
+  ["e", "EMAIL"],
+  ["t", "TEXT"],
+  ["p", "PUSH"],
+  ["n", "NOTIFICATION_SUMMARY"]
+]);
+var CONTENT_PROPERTY_DELIVERY_METHODS = /* @__PURE__ */ new Map([
+  ["emailContent", "EMAIL"],
+  ["textContent", "TEXT"],
+  ["notificationSummaryContent", "NOTIFICATION_SUMMARY"]
+]);
 function extractAppNotifications(inspection) {
   const { componentSources, apiSources } = buildInMemoryProject(inspection);
   const trustedExternalIdentifiers = collectTrustedExternalIdentifiers([...componentSources, ...apiSources]);
@@ -31660,13 +31749,20 @@ function extractTemplateTypeInfos(sources) {
         if (!nameMatches && !typeMatches) continue;
         const obj = asObjectLiteral(decl.getInitializer());
         if (!obj) continue;
+        const deliveryMethods = readDeliveryMethodsProperty(obj, sf, USER_CONFIGURABLE_DELIVERY_METHODS_PROPERTY);
+        const forcedDeliveryMethods = readDeliveryMethodsProperty(obj, sf, FORCED_DELIVERY_METHODS_PROPERTY);
         const entry = {
           symbolName: name,
           typeConstantName: readIdentifierProperty(obj, "type"),
           humanName: readStringProperty2(obj, "name"),
           description: readStringProperty2(obj, "description"),
-          notificationMIdentity: readIdentifierProperty(obj, "notificationMIdentity"),
+          notificationModelIdentity: readIdentifierProperty(obj, "notificationModelIdentity"),
           targetModelIdentity: readIdentifierProperty(obj, "targetModelIdentity"),
+          userConfigurableDeliveryMethods: deliveryMethods.methods,
+          userConfigurableDeliveryMethodsSource: deliveryMethods.source,
+          forcedDeliveryMethods: forcedDeliveryMethods.methods,
+          forcedDeliveryMethodsSource: forcedDeliveryMethods.source,
+          onlySendToExplicitlyEnabledRecipients: readBooleanProperty2(obj, ONLY_SEND_TO_EXPLICITLY_ENABLED_RECIPIENTS_PROPERTY),
           sourceFile: rel,
           line: decl.getStartLineNumber()
         };
@@ -31676,6 +31772,44 @@ function extractTemplateTypeInfos(sources) {
   }
   return out;
 }
+function readDeliveryMethodsProperty(obj, sf, propertyName) {
+  const value = unwrapAsExpressions(getPropertyInitializer(obj, propertyName));
+  let result;
+  if (!value || isNullishLiteral(value)) {
+    result = { methods: void 0, source: "default" };
+  } else if (Node28.isIdentifier(value)) {
+    result = readDeliveryMethodsArray(asArrayLiteral(findLocalVariable(sf, value.getText())?.getInitializer()));
+  } else {
+    result = readDeliveryMethodsArray(asArrayLiteral(value));
+  }
+  return result;
+}
+function readDeliveryMethodsArray(arr) {
+  const methods = [];
+  let readable = arr !== void 0;
+  for (const el of arr?.getElements() ?? []) {
+    const method = readDeliveryMethodElement(unwrapAsExpressions(el));
+    if (!method) {
+      readable = false;
+    } else if (!methods.includes(method)) {
+      methods.push(method);
+    }
+  }
+  const result = readable ? { methods, source: "declared" } : { methods: void 0, source: "unresolved" };
+  return result;
+}
+function readDeliveryMethodElement(el) {
+  let result;
+  if (el && Node28.isPropertyAccessExpression(el) && el.getExpression().getText() === DELIVERY_METHOD_ENUM) {
+    result = DELIVERY_METHOD_BY_MEMBER.get(el.getName());
+  } else if (el && Node28.isStringLiteral(el)) {
+    result = DELIVERY_METHOD_BY_CODE.get(el.getLiteralText());
+  }
+  return result;
+}
+function isNullishLiteral(node) {
+  return node !== void 0 && (Node28.isIdentifier(node) && node.getText() === "undefined" || node.getKind() === SyntaxKind12.NullKeyword);
+}
 function extractTemplateInfoAggregates(sources) {
   const out = [];
   for (const sf of sources) {
@@ -32037,6 +32171,7 @@ function collectFromSingleEntryFactory(name, out, index) {
   out.push({
     typeIdentifier: typeIdent,
     factoryFunctionName: name,
+    contentDeliveryMethods: collectContentDeliveryMethods([fn.node, factoryPropertyFunctionNode(obj, index)]),
     sourceFile: fn.relPath,
     line: obj.getStartLineNumber()
   });
@@ -32063,7 +32198,7 @@ function consumeArrayEntryFactoryElement(options) {
     chaseDirectSingleEntryFactoryCall(inner, out, index);
     return;
   }
-  recordInlineEntryFactoryObject({ inner, factoryName, relPath, out });
+  recordInlineEntryFactoryObject({ inner, factoryName, relPath, out, index });
 }
 function chaseSpreadEntryFactoryCall(inner, out, index) {
   if (!Node28.isCallExpression(inner)) return;
@@ -32080,12 +32215,40 @@ function chaseDirectSingleEntryFactoryCall(inner, out, index) {
   }
 }
 function recordInlineEntryFactoryObject(options) {
-  const { inner, factoryName, relPath, out } = options;
+  const { inner, factoryName, relPath, out, index } = options;
   const obj = asObjectLiteral(inner);
   if (!obj) return;
   const typeIdent = readIdentifierProperty(obj, "type");
   if (!typeIdent) return;
-  out.push({ typeIdentifier: typeIdent, factoryFunctionName: factoryName, sourceFile: relPath, line: obj.getStartLineNumber() });
+  const contentDeliveryMethods = collectContentDeliveryMethods([obj, factoryPropertyFunctionNode(obj, index)]);
+  out.push({ typeIdentifier: typeIdent, factoryFunctionName: factoryName, contentDeliveryMethods, sourceFile: relPath, line: obj.getStartLineNumber() });
+}
+function factoryPropertyFunctionNode(obj, index) {
+  const name = readIdentifierProperty(obj, "factory");
+  return name ? index.functionsByName.get(name)?.node : void 0;
+}
+function collectContentDeliveryMethods(nodes) {
+  const found = /* @__PURE__ */ new Set();
+  for (const node of nodes) {
+    if (node) {
+      scanContentDeliveryMethods(node, found);
+    }
+  }
+  return Array.from(CONTENT_PROPERTY_DELIVERY_METHODS.values()).filter((method) => found.has(method));
+}
+function scanContentDeliveryMethods(node, found) {
+  for (const prop of node.getDescendantsOfKind(SyntaxKind12.PropertyAssignment)) {
+    const method = CONTENT_PROPERTY_DELIVERY_METHODS.get(prop.getName());
+    if (method && !isNullishLiteral(unwrapAsExpressions(prop.getInitializer()))) {
+      found.add(method);
+    }
+  }
+  for (const prop of node.getDescendantsOfKind(SyntaxKind12.ShorthandPropertyAssignment)) {
+    const method = CONTENT_PROPERTY_DELIVERY_METHODS.get(prop.getName());
+    if (method) {
+      found.add(method);
+    }
+  }
 }
 function extractTaskServiceCalls(sources, index, trustedExternal) {
   const out = [];
@@ -32373,6 +32536,8 @@ function runRules6(inspection, extracted) {
   checkTemplateInfoPairing(extracted, violations);
   checkTemplateInfoRecord(extracted, violations);
   checkTemplateHandlerFactory(extracted, violations);
+  checkTemplateDeliveryMethods(extracted, violations);
+  checkTemplateForcedDeliveryMethods(extracted, violations);
   checkTasks(extracted, violations);
   checkDuplicates2(extracted, violations);
   return violations;
@@ -32541,6 +32706,63 @@ function checkTemplateHandlerFactory(extracted, violations) {
     });
   }
 }
+function checkTemplateDeliveryMethods(extracted, violations) {
+  const infoByTypeConstant = /* @__PURE__ */ new Map();
+  for (const info of extracted.templateTypeInfos) {
+    if (info.typeConstantName) infoByTypeConstant.set(info.typeConstantName, info);
+  }
+  for (const entry of extracted.templateHandlerEntries) {
+    const info = infoByTypeConstant.get(entry.typeIdentifier);
+    const userConfigurable = info ? staticUserConfigurableDeliveryMethods(info) : void 0;
+    if (!info || !userConfigurable) continue;
+    const forced = info.forcedDeliveryMethods ?? [];
+    const listed = [...userConfigurable, ...forced.filter((method) => !userConfigurable.includes(method))];
+    const unlisted = entry.contentDeliveryMethods.filter((method) => !listed.includes(method));
+    if (unlisted.length === 0) continue;
+    const listedText = listed.length > 0 ? listed.join(", ") : "none";
+    const forcedSuffix = forced.length > 0 ? " and `forcedDeliveryMethods`" : "";
+    const listedIn = info.userConfigurableDeliveryMethodsSource === "declared" ? `\`userConfigurableDeliveryMethods\`${forcedSuffix}` : "`forcedDeliveryMethods` (it leaves `userConfigurableDeliveryMethods` out, so it is only sent by its forced methods)";
+    pushViolation8(violations, {
+      code: "NOTIF_TEMPLATE_FACTORY_UNLISTED_DELIVERY_METHOD",
+      severity: "warning",
+      message: `Template handler factory \`${entry.factoryFunctionName ?? "<anonymous>"}\` for \`${entry.typeIdentifier}\` builds content for ${unlisted.join(", ")}, but \`${info.symbolName}\` only lists ${listedText} in ${listedIn}. This is the build-time counterpart of the send pipeline's runtime unlisted-delivery-method warning.`,
+      side: "api",
+      file: entry.sourceFile
+    });
+  }
+}
+function staticUserConfigurableDeliveryMethods(info) {
+  let result;
+  if (info.forcedDeliveryMethodsSource !== "unresolved") {
+    if (info.userConfigurableDeliveryMethodsSource === "declared") {
+      result = info.userConfigurableDeliveryMethods;
+    } else if (info.userConfigurableDeliveryMethodsSource === "default" && (info.forcedDeliveryMethods ?? []).some((method) => method !== "TEXT")) {
+      result = [];
+    }
+  }
+  return result;
+}
+function checkTemplateForcedDeliveryMethods(extracted, violations) {
+  for (const info of extracted.templateTypeInfos) {
+    const forced = info.forcedDeliveryMethodsSource === "declared" ? info.forcedDeliveryMethods ?? [] : [];
+    if (forced.includes("TEXT")) {
+      pushViolation8(violations, {
+        code: "NOTIF_TEMPLATE_FORCED_TEXT_DELIVERY_METHOD",
+        message: `Info \`${info.symbolName}\` lists TEXT in \`forcedDeliveryMethods\`. Texts cannot be forced; the info record throws at startup.`,
+        side: "component",
+        file: info.sourceFile
+      });
+    }
+    if (forced.length > 0 && info.onlySendToExplicitlyEnabledRecipients === true) {
+      pushViolation8(violations, {
+        code: "NOTIF_TEMPLATE_FORCED_DELIVERY_METHOD_EXPLICIT_OPT_IN",
+        message: `Info \`${info.symbolName}\` forces ${forced.join(", ")} while \`onlySendToExplicitlyEnabledRecipients\` is true. A forced method is on by default, so the info record throws at startup.`,
+        side: "component",
+        file: info.sourceFile
+      });
+    }
+  }
+}
 function checkTasks(extracted, violations) {
   if (extracted.taskTypeConstants.length === 0) return;
   flagTasksMissingFromAllArrays(extracted, violations);
@@ -32687,8 +32909,7 @@ function flagValidateWithoutHandler(options) {
     if (!lenientHandlerTypeIdentifiers.has(name) && !extracted.trustedExternalIdentifiers.has(name)) {
       pushViolation8(violations, {
         code: "NOTIF_TASK_IN_VALIDATE_WITHOUT_HANDLER",
-        severity: "warning",
-        message: `Task type \`${name}\` appears in \`notificationTaskService({ validate })\` but has no matching handler in the \`handlers\` array.`,
+        message: `Task type \`${name}\` appears in \`notificationTaskService({ validate })\` but has no matching handler in the \`handlers\` array. \`notificationTaskService()\` throws at startup for this.`,
         side: "api",
         file: call.sourceFile
       });
@@ -32874,12 +33095,11 @@ async function inspectAppNotifications(componentDir, apiDir) {
 }
 
 // packages/dbx-cli/validate/src/lib/notification-m-validate-app/index.ts
-function validateAppNotifications(inspection, options) {
-  const extracted = extractAppNotifications(inspection);
+function validateExtractedAppNotifications(input) {
   const violations = [];
   let errorCount = 0;
   let warningCount = 0;
-  for (const v of runRules6(inspection, extracted)) {
+  for (const v of runRules6(input.inspection, input.extracted)) {
     violations.push(v);
     if (v.severity === "error") {
       errorCount += 1;
@@ -32891,11 +33111,14 @@ function validateAppNotifications(inspection, options) {
     violations,
     errorCount,
     warningCount,
-    componentDir: options.componentDir,
-    apiDir: options.apiDir
+    componentDir: input.componentDir,
+    apiDir: input.apiDir
   };
   return result;
 }
+function validateAppNotifications(inspection, options) {
+  return validateExtractedAppNotifications({ inspection, extracted: extractAppNotifications(inspection), componentDir: options.componentDir, apiDir: options.apiDir });
+}
 
 // packages/dbx-cli/validate/src/lib/notification-m-validate-folder/index.ts
 var notification_m_validate_folder_exports = {};
@@ -38012,6 +38235,7 @@ function listAppAssets(inspection, options) {
 // packages/dbx-cli/validate/src/lib/notification-m-list-app/index.ts
 var notification_m_list_app_exports = {};
 __export(notification_m_list_app_exports, {
+  collectAppNotifications: () => collectAppNotifications,
   formatReportAsJson: () => formatReportAsJson5,
   formatReportAsMarkdown: () => formatReportAsMarkdown5,
   listAppNotifications: () => listAppNotifications
@@ -38043,8 +38267,12 @@ function buildTemplateSummaries(extracted) {
   const record = extracted.templateInfoRecord;
   const resolved = new Set(record ? record.resolvedInfoIdentifiers : []);
   const handlerByType = /* @__PURE__ */ new Map();
+  const handlerEntriesByType = /* @__PURE__ */ new Map();
   for (const entry of extracted.templateHandlerEntries) {
     handlerByType.set(entry.typeIdentifier, { factoryFunctionName: entry.factoryFunctionName });
+    const entries = handlerEntriesByType.get(entry.typeIdentifier) ?? [];
+    entries.push(entry);
+    handlerEntriesByType.set(entry.typeIdentifier, entries);
   }
   const templates = [];
   for (const constant of extracted.templateTypeConstants) {
@@ -38056,8 +38284,13 @@ function buildTemplateSummaries(extracted) {
       infoSymbolName: info?.symbolName,
       humanName: info?.humanName,
       description: info?.description,
-      notificationMIdentity: info?.notificationMIdentity,
+      notificationModelIdentity: info?.notificationModelIdentity,
       targetModelIdentity: info?.targetModelIdentity,
+      userConfigurableDeliveryMethods: info?.userConfigurableDeliveryMethods,
+      userConfigurableDeliveryMethodsSource: info?.userConfigurableDeliveryMethodsSource,
+      forcedDeliveryMethods: info?.forcedDeliveryMethods,
+      forcedDeliveryMethodsSource: info?.forcedDeliveryMethodsSource,
+      factoryContentDeliveryMethods: unionContentDeliveryMethods(handlerEntriesByType.get(constant.symbolName) ?? []),
       inInfoRecord: info ? resolved.has(info.symbolName) : false,
       hasFactory: handler !== void 0,
       factoryFunctionName: handler?.factoryFunctionName,
@@ -38066,6 +38299,15 @@ function buildTemplateSummaries(extracted) {
   }
   return templates;
 }
+function unionContentDeliveryMethods(entries) {
+  const result = [];
+  for (const entry of entries) {
+    for (const method of entry.contentDeliveryMethods) {
+      if (!result.includes(method)) result.push(method);
+    }
+  }
+  return result;
+}
 function buildTaskSummaries(extracted) {
   const indices = buildTaskIndices(extracted);
   const tasks = [];
@@ -38193,13 +38435,45 @@ function formatTemplateBlock(t) {
   parts.push(heading);
   if (t.humanName) parts.push(`- Human name: ${t.humanName}`);
   if (t.description) parts.push(`- Description: ${t.description}`);
-  if (t.notificationMIdentity) parts.push(`- Notification model: \`${t.notificationMIdentity}\``);
+  if (t.notificationModelIdentity) parts.push(`- Notification model: \`${t.notificationModelIdentity}\``);
   if (t.targetModelIdentity) parts.push(`- Target model: \`${t.targetModelIdentity}\``);
+  const deliveryMethodsText = formatUserConfigurableDeliveryMethods(t);
+  if (deliveryMethodsText) parts.push(`- User-configurable delivery methods: ${deliveryMethodsText}`);
+  const forcedDeliveryMethodsText = formatForcedDeliveryMethods(t);
+  if (forcedDeliveryMethodsText) parts.push(`- Forced (always on) delivery methods: ${forcedDeliveryMethodsText}`);
+  if (t.factoryContentDeliveryMethods.length > 0) parts.push(`- Factory returns content for: ${t.factoryContentDeliveryMethods.join(", ")}`);
   const infoText = t.infoSymbolName ? code6(t.infoSymbolName) : "_Missing._";
   const factorySuffix = t.factoryFunctionName ? ` (${code6(t.factoryFunctionName)})` : "";
   parts.push(`- Info object: ${infoText}`, `- In info record: ${formatBool2(t.inInfoRecord)}`, `- Has factory: ${formatBool2(t.hasFactory)}${factorySuffix}`, `- Source: \`${t.sourceFile}\``);
   return parts.join("\n");
 }
+function formatUserConfigurableDeliveryMethods(t) {
+  let result;
+  switch (t.userConfigurableDeliveryMethodsSource) {
+    case "declared":
+      result = t.userConfigurableDeliveryMethods && t.userConfigurableDeliveryMethods.length > 0 ? t.userConfigurableDeliveryMethods.join(", ") : "_none_";
+      break;
+    case "default":
+      result = t.forcedDeliveryMethodsSource === "declared" && (t.forcedDeliveryMethods ?? []).some((method) => method !== "TEXT") ? "_none_ (the default when the info forces a method)" : "default";
+      break;
+    case "unresolved":
+      result = "_unresolved_";
+      break;
+    case void 0:
+      result = void 0;
+      break;
+  }
+  return result;
+}
+function formatForcedDeliveryMethods(t) {
+  let result;
+  if (t.forcedDeliveryMethodsSource === "declared" && t.forcedDeliveryMethods && t.forcedDeliveryMethods.length > 0) {
+    result = t.forcedDeliveryMethods.join(", ");
+  } else if (t.forcedDeliveryMethodsSource === "unresolved") {
+    result = "_unresolved_";
+  }
+  return result;
+}
 function formatTaskBlock(t) {
   const parts = [];
   const heading = t.typeCode ? `### ${t.typeCode} \u2014 \`${t.symbolName}\`` : `### \`${t.symbolName}\``;
@@ -44619,6 +44893,8 @@ var DBX_NOTIFICATION_M_VALIDATE_APP_TOOL = {
     "",
     "External identifiers imported from `@dereekb/*` are trusted \u2014 spreads and handler `type:` references that resolve into upstream packages do not produce orphan/unresolved errors.",
     "",
+    "The same checks run at build time through `dbx-cli-generate-notification-manifest` (see the `@dereekb/dbx-cli` README); this tool always scans the current source.",
+    "",
     "Provide both:",
     "- `componentDir`: relative path to the `-firebase` component package (e.g. `components/demo-firebase`).",
     "- `apiDir`: relative path to the API app (e.g. `apps/demo-api`).",
@@ -44655,7 +44931,9 @@ var { formatReportAsJson: formatReportAsJson11, formatReportAsMarkdown: formatRe
 var DBX_NOTIFICATION_M_LIST_APP_TOOL = {
   name: "dbx_notification_m_list_app",
   description: [
-    "List every notification template + notification task configured in a downstream `-firebase` component + API app pair. Each entry reports its type code, metadata (human name, description, notification/target model identity), and registration flags \u2014 `inInfoRecord` + `hasFactory` for templates, `inAllArray` + `inValidateList` + `hasHandler` for tasks.",
+    "List every notification template + notification task configured in a downstream `-firebase` component + API app pair. Each entry reports its type code, metadata (human name, description, notification/target model identity), and registration flags \u2014 `inInfoRecord` + `hasFactory` for templates, `inAllArray` + `inValidateList` + `hasHandler` for tasks. Templates also report `userConfigurableDeliveryMethods` (with a `default` / `declared` / `unresolved` source), `forcedDeliveryMethods` (always-on methods, with the same kind of source) and `factoryContentDeliveryMethods`, the channels their factory builds content for.",
+    "",
+    "Its JSON is the report part of the `notification.manifest.json` that `dbx-cli-generate-notification-manifest` writes at build time; this tool always scans the current source.",
     "",
     "Cross-file resolution mirrors `dbx_notification_m_validate_app` \u2014 spreads and factory composition are traced through every `.ts` file under `src/lib/model/notification/` on the component side and `src/app/common/model/notification/` + `src/app/common/firebase/` on the API side.",
     "",
@@ -51420,7 +51698,7 @@ export const <<SCREAMING>>_NOTIFICATION_TEMPLATE_TYPE_INFO: NotificationTemplate
   type: <<SCREAMING>>_NOTIFICATION_TEMPLATE_TYPE,
   name: '<<Pascal>>',
   description: 'TODO: describe the <<Pascal>> notification.',
-  notificationMIdentity: profileIdentity // TODO: replace with the model identity this notification targets
+  notificationModelIdentity: profileIdentity // TODO: replace with the model identity this notification targets
 };
 
 export interface <<Pascal>>NotificationData {
@@ -52075,6 +52353,31 @@ var STORAGEFILE_PROCESSOR_SUBTASK = {
   seeAlso: ["storagefile-processor", "storagefile-purpose"],
   verify: "Run `dbx_validate_app_storagefiles` \u2014 `STORAGEFILE_PROCESSING_SUBTASK_NOT_HANDLED` should clear once the flow entry is added."
 };
+var NOTIFICATION_BUILD_TIME_CHECK_STEP = {
+  heading: "Build-time check",
+  path: "<apiDir>/project.json",
+  body: [
+    "Wire `dbx-cli-generate-notification-manifest` (from `@dereekb/dbx-cli`) as an nx target so broken notification wiring fails the build before deploy. It runs the same rules as `dbx_notification_m_validate_app`, writes `notification.manifest.json`, and exits non-zero on a validator error (warnings are written into the manifest). One target covers every template and task type; add it once per app.",
+    "",
+    "```json",
+    '"generate-notification-manifest": {',
+    '  "executor": "nx:run-commands",',
+    '  "outputs": ["{workspaceRoot}/dist/<apiDir>/notification.manifest.json"],',
+    '  "inputs": [',
+    '    "{workspaceRoot}/<componentDir>/src/lib/model/notification/**/*.ts",',
+    '    "{workspaceRoot}/<apiDir>/src/app/common/model/notification/**/*.ts",',
+    '    "{workspaceRoot}/<apiDir>/src/app/common/firebase/**/*.ts"',
+    "  ],",
+    '  "options": {',
+    '    "command": "npx dbx-cli-generate-notification-manifest --component-dir=<componentDir> --api-dir=<apiDir> --output=dist/<apiDir>/notification.manifest.json",',
+    '    "cwd": "{workspaceRoot}"',
+    "  }",
+    "}",
+    "```",
+    "",
+    "**Wire into:** the API project's `build.dependsOn` (not `serve`: nothing reads the manifest at runtime, and the server's startup checks already cover `serve`)."
+  ].join("\n")
+};
 var NOTIFICATION_TEMPLATE = {
   artifact: "notification-template",
   title: "Notification template",
@@ -52087,7 +52390,7 @@ var NOTIFICATION_TEMPLATE = {
       body: [
         "**Required exports:**",
         "- `<NAME>_NOTIFICATION_TEMPLATE_TYPE: NotificationTemplateType = '<short_code>'`.",
-        "- `<NAME>_NOTIFICATION_TEMPLATE_TYPE_INFO: NotificationTemplateTypeInfo` with `{ type, name, description, notificationMIdentity, targetModelIdentity? }`.",
+        "- `<NAME>_NOTIFICATION_TEMPLATE_TYPE_INFO: NotificationTemplateTypeInfo` with `{ type, name, description, notificationModelIdentity, targetModelIdentity? }`.",
         "- For multi-file workspaces, also declare `ALL_<MODULE>_NOTIFICATION_TEMPLATE_TYPE_INFOS: NotificationTemplateTypeInfo[]` and re-export the per-file infos.",
         "",
         "**Barrel:** Re-export from `<componentDir>/src/lib/model/notification/index.ts`."
@@ -52109,10 +52412,11 @@ var NOTIFICATION_TEMPLATE = {
         "",
         "**Wire into:** the top-level `<app>NotificationTemplateServiceConfigsArrayFactory(context)` \u2014 call the new factory inside its returned array. The configs-array factory is itself bound via `NOTIFICATION_TEMPLATE_SERVICE_CONFIGS_ARRAY_TOKEN` in the notification module."
       ].join("\n")
-    }
+    },
+    NOTIFICATION_BUILD_TIME_CHECK_STEP
   ],
   seeAlso: ["notification-task"],
-  verify: "Run `dbx_notification_m_validate_app` to confirm both registration paths (info-record + handler factory) are wired, then `dbx_notification_m_list_app` to confirm the new template appears with `inInfoRecord: true` and `hasFactory: true`."
+  verify: "Run `dbx_notification_m_validate_app` to confirm both registration paths (info-record + handler factory) are wired, then `dbx_notification_m_list_app` to confirm the new template appears with `inInfoRecord: true` and `hasFactory: true`, then `npx nx run <api-project>:generate-notification-manifest` runs the same checks the build does."
 };
 var NOTIFICATION_TASK = {
   artifact: "notification-task",
@@ -52152,10 +52456,11 @@ var NOTIFICATION_TASK = {
     {
       heading: "Wire into task service",
       body: ["Push the new handler config into the `handlers: [...]` array passed to `notificationTaskService({ validate, handlers })`. The `validate:` spread should already cover it via `ALL_NOTIFICATION_TASK_TYPES`."].join("\n")
-    }
+    },
+    NOTIFICATION_BUILD_TIME_CHECK_STEP
   ],
   seeAlso: ["notification-template"],
-  verify: "Run `dbx_notification_m_validate_app` to confirm `inAllArray: true` + `hasHandler: true` for the new task type."
+  verify: "Run `dbx_notification_m_validate_app` to confirm `inAllArray: true` + `hasHandler: true` for the new task type, then `npx nx run <api-project>:generate-notification-manifest` runs the same checks the build does."
 };
 var NESTJS_MODEL_MODULE = {
   artifact: "nestjs-model-module",

package/generated/dereekb-dbx-web.ui-components.mcp.generated.json

@@ -93,13 +93,13 @@
         {
           "name": "buttonStyle",
           "type": "Maybe<DbxButtonStyle>",
-          "description": "",
+          "description": "Style of the button. Individual style inputs (e.g. {@link color}, {@link raised}) take precedence.\n\nDeclared as a `model` so a directive composed onto the button (e.g. `dbxRotatingButton`) can set it.",
           "required": false
         },
         {
           "name": "color",
           "type": "Maybe<ThemePalette | DbxColorInput>",
-          "description": "",
+          "description": "Color of the button. Takes precedence over the {@link buttonStyle} color.\n\nDeclared as a `model` so a directive composed onto the button (e.g. `dbxRotatingButton`) can set it.",
           "required": false
         },
         {
@@ -854,6 +854,36 @@
       "example": "<dbx-progress-spinner-button [config]=\"cfg\" (btnClick)=\"onClick()\"></dbx-progress-spinner-button>",
       "minimalExample": "<dbx-progress-spinner-button [config]=\"cfg\"></dbx-progress-spinner-button>"
     },
+    {
+      "slug": "rotating-button",
+      "category": "button",
+      "kind": "directive",
+      "selector": "[dbxRotatingButton]",
+      "className": "DbxRotatingButtonDirective",
+      "module": "@dereekb/dbx-web",
+      "description": "Turns a `dbx-button` into a rotating / multi-state button. Each click moves to the next configured state, and the\nstate's icon, text, style and aria-label are set on the button.\n\nUse {@link dbxTristateRotatingButtonConfig} for a three-state / 3-phase (default/on/off) toggle. The directive sets the\nbutton's `icon`, `text`, `buttonStyle` and `ariaLabel`, so configure those through the config rather than on the button.\n\nThe button stops click propagation by default, so a rotating button works inside clickable list rows.",
+      "inputs": [
+        {
+          "name": "dbxRotatingButton",
+          "type": "Maybe<DbxRotatingButtonConfig<T>>",
+          "description": "",
+          "required": false
+        },
+        {
+          "name": "dbxRotatingButtonValue",
+          "type": "Maybe<T>",
+          "description": "The current value. Two-way bindable with `[(dbxRotatingButtonValue)]`.",
+          "required": false
+        }
+      ],
+      "outputs": [],
+      "relatedSlugs": [
+        "button",
+        "icon-button"
+      ],
+      "example": "readonly tristateConfig = dbxTristateRotatingButtonConfig({ label: 'Text', defaultValue: false });",
+      "minimalExample": "<dbx-button iconOnly [dbxRotatingButton]=\"tristateConfig\" [(dbxRotatingButtonValue)]=\"emailEnabled\"></dbx-button>"
+    },
     {
       "slug": "browser-agent-view",
       "category": "misc",
@@ -874,6 +904,12 @@
           "type": "Maybe<boolean>",
           "description": "",
           "required": false
+        },
+        {
+          "name": "overrideKey",
+          "type": "Maybe<DbxBrowserAgentViewEntryKey>",
+          "description": "Key of the manually selected entry. Can be bound two-way to persist the user's choice.",
+          "required": false
         }
       ],
       "outputs": [],
@@ -1033,7 +1069,7 @@
       "selector": "dbx-prompt-confirm",
       "className": "DbxPromptConfirmComponent",
       "module": "@dereekb/dbx-web",
-      "description": "Renders a confirmation prompt with customizable title, message, confirm, and cancel buttons.",
+      "description": "Renders a confirmation prompt with customizable title, message, confirm, and cancel buttons.\n\nProjected content shows above the buttons. Content marked with the `buttons` attribute shows in the same row, before the\nconfirm button.",
       "inputs": [
         {
           "name": "config",
@@ -1055,7 +1091,7 @@
           "description": ""
         }
       ],
-      "contentProjection": "<ng-content></ng-content>",
+      "contentProjection": "<ng-content></ng-content>; <ng-content select=\"[buttons]\"></ng-content>",
       "relatedSlugs": [
         "prompt",
         "action-confirm"
@@ -2121,7 +2157,20 @@
       "className": "DbxColorDirective",
       "module": "@dereekb/dbx-web",
       "description": "Provides themed color *tokens* to the host element — it never paints a background itself.\n\nAccepts either a {@link DbxThemeColor} string (e.g. `'primary'`, `'success'`) or a {@link DbxColorConfig}\nobject carrying arbitrary CSS color values (any hex, `rgb()`, `hsl()`, `var(...)`, `color-mix(...)`, etc.).\nThe directive sets the `--dbx-bg-color-current` / `--dbx-color-current` (and tone) custom properties and adds the\n`.dbx-color` marker class, leaving the actual painting to either the explicit `.dbx-color-bg` utility on the same\nelement or a colored-surface component's own `.dbx-color`-scoped SCSS (e.g. `<dbx-bar>`, `<dbx-button>`, `<dbx-loading>`,\n`<dbx-icon-tile>`, `<mat-card>`) that reads the inherited tokens.\n\nOptionally set {@link dbxColorTone} (0-100) to control background opacity for a tonal/muted appearance.\nWhen tonal mode is active, the `dbx-color-tonal` CSS class is added and a CSS rule overrides the text\ncolor to the vibrant color (via `--dbx-bg-color-current`).\n\nThe standalone `[dbxColorTone]` input wins over `config.tone` when both are set; the same precedence\napplies to tonal mode.",
-      "inputs": [],
+      "inputs": [
+        {
+          "name": "dbxColor",
+          "type": "Maybe<DbxColorInput>",
+          "description": "The color to provide tokens for. Declared as a `model` so a colored-surface component on the same host (e.g.\n`dbx-button`) can push its resolved color into the directive, keeping it the single token provider on the element.",
+          "required": false
+        },
+        {
+          "name": "dbxColorTone",
+          "type": "Maybe<DbxColorTone>",
+          "description": "Background tone level (0-100). When set, the background becomes semi-transparent\nand text color switches to the vibrant theme color for a tonal appearance.\n\nDeclared as a `model` for the same reason as {@link dbxColor}: a colored-surface component on the same host (e.g.\n`dbx-avatar-view`) resolves its tone from its own inputs/context and pushes it here, keeping this directive the\nsingle token provider on the element.",
+          "required": false
+        }
+      ],
       "outputs": [],
       "relatedSlugs": [
         "text-color",

package/generated/dereekb-firebase.model-firebase-index.mcp.generated.json

@@ -513,6 +513,125 @@
       "derivedComposites": [],
       "derivedFieldOverrides": []
     },
+    {
+      "slug": "notification-users-with-text-phone-number-query",
+      "name": "notificationUsersWithTextPhoneNumberQuery",
+      "module": "@dereekb/firebase",
+      "subpath": "model/notification/notification.query",
+      "signature": "notificationUsersWithTextPhoneNumberQuery(phoneNumber: E164PhoneNumber): FirestoreQueryConstraint[]",
+      "description": "Query constraints for finding {@link NotificationUser} documents whose texting number (`gc.t`) is the given phone number.\n\nUsed by the text opt-out sync to find the users a STOP reply came from.",
+      "model": "NotificationUser",
+      "collection": "nu",
+      "isNested": false,
+      "scope": "COLLECTION",
+      "manual": false,
+      "skip": false,
+      "category": "lookup",
+      "params": [
+        {
+          "name": "phoneNumber",
+          "type": "E164PhoneNumber",
+          "description": "- The texting number to match.",
+          "optional": false
+        }
+      ],
+      "returns": "Array of Firestore query constraints filtering for users with that texting number.",
+      "tags": [
+        "lookup",
+        "notificationuser",
+        "notification",
+        "users",
+        "with",
+        "text",
+        "phone",
+        "number",
+        "query",
+        "notificationuserswithtextphonenumberquery",
+        "user",
+        "constraints",
+        "finding",
+        "link",
+        "documents",
+        "whose",
+        "texting",
+        "given",
+        "used"
+      ],
+      "constraintSequences": [
+        {
+          "pathLabel": "all",
+          "entries": [
+            {
+              "kind": "where",
+              "fieldPath": "gc.t",
+              "operator": "=="
+            }
+          ]
+        }
+      ],
+      "derivedComposites": [],
+      "derivedFieldOverrides": []
+    },
+    {
+      "slug": "notification-users-with-stopped-text-phone-number-query",
+      "name": "notificationUsersWithStoppedTextPhoneNumberQuery",
+      "module": "@dereekb/firebase",
+      "subpath": "model/notification/notification.query",
+      "signature": "notificationUsersWithStoppedTextPhoneNumberQuery(phoneNumber: E164PhoneNumber): FirestoreQueryConstraint[]",
+      "description": "Query constraints for finding {@link NotificationUser} documents that have the given phone number in their stopped numbers (`tso`).\n\nUsed by the text opt-out sync to find the users a START reply turns texts back on for.",
+      "model": "NotificationUser",
+      "collection": "nu",
+      "isNested": false,
+      "scope": "COLLECTION",
+      "manual": false,
+      "skip": false,
+      "category": "lookup",
+      "params": [
+        {
+          "name": "phoneNumber",
+          "type": "E164PhoneNumber",
+          "description": "- The stopped phone number to match.",
+          "optional": false
+        }
+      ],
+      "returns": "Array of Firestore query constraints filtering for users that stopped that number.",
+      "tags": [
+        "lookup",
+        "notificationuser",
+        "notification",
+        "users",
+        "with",
+        "stopped",
+        "text",
+        "phone",
+        "number",
+        "query",
+        "notificationuserswithstoppedtextphonenumberquery",
+        "user",
+        "constraints",
+        "finding",
+        "link",
+        "documents",
+        "have",
+        "given",
+        "their",
+        "numbers"
+      ],
+      "constraintSequences": [
+        {
+          "pathLabel": "all",
+          "entries": [
+            {
+              "kind": "where",
+              "fieldPath": "tso",
+              "operator": "array-contains"
+            }
+          ]
+        }
+      ],
+      "derivedComposites": [],
+      "derivedFieldOverrides": []
+    },
     {
       "slug": "notification-summaries-flagged-for-needs-initialization-query",
       "name": "notificationSummariesFlaggedForNeedsInitializationQuery",

package/generated/dereekb-firebase.semantic-types.mcp.generated.json

@@ -298,6 +298,20 @@
       ],
       "notes": "Names one upload \"slot\" within a FormSpace — the resume, the cover letter, the photo of the ID.\n\nA slot is stored on the uploaded {@link StorageFile} as its `pg` (purposeSubgroup), which is what makes\n\"replace the file in this slot\" the existing `flagPreviousForDelete` behaviour rather than new machinery."
     },
+    {
+      "name": "NotificationTemplateTypeInfoGroupKey",
+      "package": "@dereekb/firebase",
+      "module": "src/lib/model/notification/notification.details",
+      "kind": "semantic-type",
+      "definition": "string",
+      "baseType": "string",
+      "topics": [
+        "identifier",
+        "string",
+        "dereekb-firebase:notification"
+      ],
+      "notes": "Key of a {@link NotificationTemplateTypeInfoGroup}. Template types whose groups share a key are shown together."
+    },
     {
       "name": "NotificationTemplateType",
       "package": "@dereekb/firebase",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dereekb/dbx-components-mcp",
-  "version": "14.14.0",
+  "version": "14.16.0",
   "sideEffects": false,
   "type": "module",
   "bin": {
@@ -12,7 +12,7 @@
     "ts-morph": "^21.0.0"
   },
   "peerDependencies": {
-    "@dereekb/dbx-cli": "14.14.0",
-    "@dereekb/util": "14.14.0"
+    "@dereekb/dbx-cli": "14.16.0",
+    "@dereekb/util": "14.16.0"
   }
 }