@godxjp/server-sdk 0.12.0 → 0.13.1

package/README.md

@@ -20,6 +20,7 @@ Naming is by **side**, not by language (`web-sdk` / `server-sdk` / `php-sdk`)
 | `./hono` | Thin adapter: `godxSso()` mounts `/auth/{login,callback,logout}`, `requireAuth`, `requireWritable` (read-only organizations may not write), `dockProxy` (the GoDX Dock's `apiBase` lane — no CORS, no token in the page). Every SSO failure lands back on the app as `/?sso_error=…&sso_error_description=…` with a human-readable description. |
 | `./sync` | The identity feed, both consumer legs — see below. |
 | `./org` | Typed client for the **write-back** surface (`/api/org/v1/*`): me, employees, departments, branches, teams (list / paginate-all / create), and **notifications.create** (godx-jp/id#1962). `Idempotency-Key` on every write (IETF draft), RFC 6750 `WWW-Authenticate` surfaced on 401/403, 422 field errors and 429 `Retry-After` exposed on `OrgApiError`. Tenancy is the token's — the client never sends an organization id. Since godx-jp/id#1960, a downstream **service-launch token carries the `organization-api` audience whenever org.\* scopes are granted** (i.e. survive RBAC narrowing) — see [`./org`](#org--the-write-back-client) below. |
+| `./notifications` | **Notification Center**, one interface for every service (CHAT-65), mirroring php-sdk: an immutable `Notice` checked against Platform's rules (`InvalidNoticeError` names the field), `createNotificationClient` (machine lane, `NotificationError.reason` = php-sdk's `NotificationFailure`), and `handleNoticeAction` for quick-action presses. Shared fixtures `contract/notices` — see [`./notifications`](#notifications--notification-center) below. |
 | `./producer` | The **outbox producer kit** (godx-jp/id#1963 phase 4): `OUTBOX_TABLE_SQL` (D1 DDL), `recordDomainEvent` (write the event next to the state change), `drainOutbox` (relay unpublished rows in sequence order through an injected `publish`). CloudEvents 1.0 envelope mirroring `./sync`'s shape — see [`./producer`](#producer--the-outbox-producer-kit) below. |
 
 Core modules depend on `fetch` + WebCrypto only; `hono` is the only framework-shaped subpath.
@@ -253,6 +254,73 @@ and the scope→permission mapping.
 | `recordDomainEvent` | `(db, {service, organizationId, aggregate, action, data, id?}) => Promise<RecordedDomainEvent>` | Insert one outbox row next to the caller's own write; composes subject/type, validates every token. |
 | `drainOutbox` | `(db, publish, {batch = 100}?) => Promise<{published, remaining}>` | Publish unpublished rows in sequence order; marks `published_at` only after `publish` resolves; stops at the first failure. |
 
+## `./notifications` — Notification Center
+
+Put a notice in a person's Dock bell and receive their quick-action presses — the same contract as
+php-sdk's `Notifications\Notice`, `Http\NotificationClient` and `Route::godxNoticeActions()`
+(Platform: godx-jp/id `docs/guide/downstream-service-onboarding.md` → Sending notifications).
+
+```ts
+import { Notice, NotificationError, createNotificationClient, handleNoticeAction, NOTICE_ACTIONS_PATH } from "@godxjp/server-sdk/notifications";
+
+const notifications = createNotificationClient({
+  issuer: env.GODX_ISSUER,
+  serviceSlug: env.GODX_INSTANCE_SLUG,      // the INSTANCE slug, never client_id
+  serviceSecret: env.GODX_CLIENT_SECRET,    // empty → `configured` is false and send() rejects `not_configured`
+});
+
+const notice = Notice.create({
+  recipients: [approverId],                 // Platform user ids, 1..100
+  sourceRef: `approval:task:${taskId}`,     // the dedup key: one row per ref per person
+  actionUrl: `${baseUrl}/requests/42`,      // absolute, under the instance base URL
+  title: { ja: "承認依頼", en: "Approval requested" },
+  body: { ja: "休暇申請 #42 が届きました。" },
+})
+  .withKind("approval")
+  .forOrganization(consoleOrganizationId)  // pool deployments
+  .withActions(
+    { id: "approve", label: { ja: "承認", en: "Approve" }, style: "primary" },
+    { id: "reject", label: { ja: "却下", en: "Reject" }, style: "danger", reason: "required" },
+  );
+
+try {
+  const { created, updated, skipped } = await notifications.send(notice, { idempotencyKey: `approval:task:${taskId}:1` });
+} catch (e) {
+  if (e instanceof NotificationError && e.retryable) { /* rate_limited / unavailable: retry with the SAME key */ }
+  throw e;
+}
+
+// The press: POST {base_url}/api/platform/v1/notice-actions
+app.post(NOTICE_ACTIONS_PATH, (c) =>
+  handleNoticeAction(c.req.raw, {
+    issuer: c.env.GODX_ISSUER,
+    audience: c.env.GODX_INSTANCE_SLUG,
+    handler: async (press) => {
+      // press.principal.subject / .organization come from the token; press.sourceRef, .action, .reason, .locale
+      if (press.action !== "approve" && press.action !== "reject") return { state: "invalid" };
+      return decide(press); // as that person, under your own rules → done | already_done | denied | invalid
+    },
+  }),
+);
+```
+
+- **Send.** `Notice` is immutable (`with…()` returns a new, re-checked one) and `toPayload()` emits only the fields that
+  were set — Platform fingerprints the body for its `Idempotency-Key`. `Notice.fromPayload(body)` reads a hand-built body,
+  refusing an unknown key or locale that Platform would silently drop. Lengths are counted in code points, as Laravel does.
+- **Failures.** `NotificationError extends GodxHttpError`; `reason` is one of `not_configured`, `unauthenticated`,
+  `forbidden` (the lane is off — `notifications_api_enabled` — or the credential is wrong; Platform answers both alike),
+  `organization_not_served`, `idempotency_conflict`, `invalid`, `rate_limited`, `unavailable`, `unexpected_response`.
+  Like php-sdk, the error body is never read (`body` is `""`): a 422 for one recipient without access refuses the whole
+  call and does not say which. Redirects are not followed.
+- **Receive.** `handleNoticeAction` verifies the token as php-sdk's `AuthenticateResource` does (RS256, `typ` at+jwt,
+  issuer from discovery, `aud`, `exp`, 30 s leeway) — not with `verifyAccessToken`, because Platform mints this token
+  without `organization_id`. It admits only a person (`prn` user) from `platform-notice-actions` with
+  `notices.actions:execute` (else `403 {"error":"forbidden"}`), reads the body (malformed: `422 {"state":"invalid"}`), and
+  answers `{state, message?}`: 200, or 422 for `invalid`. `done` / `already_done` settle the notice on Platform for good —
+  answer `already_done` only when the effect is confirmed, and never treat an unknown action as one you know.
+- **One contract.** `contract/notices/` is byte-identical to php-sdk's `tests/Fixtures/notices/`; both suites run every
+  case and pin the same digest of the set. Change both in the same release.
+
 ## `./sync` — the identity feed
 
 The platform publishes identity/directory changes (organizations, branches, brands, users,
@@ -635,6 +703,8 @@ npx vitest run   # from packages/server-sdk
 - `org.test.ts` (9): Bearer + Accept headers, Idempotency-Key (generated and caller-supplied),
   pagination to the last page, 403 `WWW-Authenticate` surfaced, 401 audience hint, 422 per-field
   validation, 429 `Retry-After`, notifications.create mapping + Idempotency-Key.
+- `notifications.test.ts`: every shared notice fixture (valid and invalid bodies, Platform's answers, signed presses),
+  the typed builder, redirect/network/not-configured handling.
 - `producer.test.ts` (8): subject/type composition, token charset refusal naming the offender,
   sequence monotonicity, drain order + envelope shape (no tenantid), stop-on-first-failure,
   published_at only after publish resolves, batch limit, DDL ships the drain index.

package/dist/notifications.d.ts

@@ -0,0 +1,269 @@
+import { HttpOptions, GodxHttpError } from './http.js';
+import 'jose';
+
+type NoticeLocale = "ja" | "en" | "vi";
+/** Copy in the locales Platform renders: `ja` required, `en`/`vi` optional. Plain text only. */
+interface LocalizedText {
+    readonly ja: string;
+    readonly en?: string | null;
+    readonly vi?: string | null;
+}
+/** Platform's closed categories; `service` is the one for a notice a service authors. */
+type NoticeCategory = "service" | "organization_invitation" | "access_request" | "service_provisioning" | "billing" | "security" | "operator";
+type NoticeActionStyle = "default" | "primary" | "danger";
+/** Whether a press carries a reason; Platform enforces it before calling the service. */
+type NoticeActionReason = "none" | "optional" | "required";
+/** One quick-action button (at most three on a notice). Only a service instance may offer them. */
+interface NoticeActionButton {
+    readonly id: string;
+    readonly label: LocalizedText;
+    readonly style?: NoticeActionStyle;
+    readonly reason?: NoticeActionReason;
+}
+/** Platform's wire body, in the shape both SDKs emit: only fields that were set. */
+interface NoticePayload {
+    recipients: string[];
+    category: NoticeCategory;
+    source_ref: string;
+    action_url: string;
+    title: Partial<Record<NoticeLocale, string>> & {
+        ja: string;
+    };
+    body: Partial<Record<NoticeLocale, string>> & {
+        ja: string;
+    };
+    kind?: string;
+    context?: Partial<Record<NoticeLocale, string>> & {
+        ja: string;
+    };
+    actions?: {
+        id: string;
+        label: Partial<Record<NoticeLocale, string>> & {
+            ja: string;
+        };
+        style: NoticeActionStyle;
+        reason: NoticeActionReason;
+    }[];
+    organization_id?: string;
+}
+/** A notice Platform would refuse (or silently drop part of); `field` is Laravel's dot-notation key. */
+declare class InvalidNoticeError extends Error {
+    readonly field: string;
+    constructor(field: string, reason: string);
+}
+interface NoticeFields {
+    readonly recipients: readonly string[];
+    readonly sourceRef: string;
+    readonly actionUrl: string;
+    readonly title: LocalizedText;
+    readonly body: LocalizedText;
+    readonly category: NoticeCategory;
+    readonly kind: string | null;
+    readonly context: LocalizedText | null;
+    readonly actions: readonly NoticeActionButton[];
+    readonly organizationId: string | null;
+}
+/**
+ * One notice, immutable: each `with…()` returns a new one, checked again.
+ *
+ * ```ts
+ * const notice = Notice.create({
+ *   recipients: [approverId],                          // Platform user ids, 1..100
+ *   sourceRef: `approval:task:${taskId}`,              // the dedup key: one row per ref per person
+ *   actionUrl: `${baseUrl}/requests/42`,               // absolute, under the instance base URL
+ *   title: { ja: "承認依頼", en: "Approval requested" },
+ *   body: { ja: "休暇申請 #42 が届きました。" },
+ * })
+ *   .withKind("approval")
+ *   .withActions(
+ *     { id: "approve", label: { ja: "承認", en: "Approve" }, style: "primary" },
+ *     { id: "reject", label: { ja: "却下", en: "Reject" }, style: "danger", reason: "required" },
+ *   );
+ * ```
+ *
+ * Every recipient must be a member of the organization with access to the service, or Platform
+ * refuses the WHOLE call (422) — checked there, not here. Sending the same `sourceRef` again
+ * rewrites that person's row and marks it unread, without a second email.
+ */
+declare class Notice implements NoticeFields {
+    readonly recipients: readonly string[];
+    readonly sourceRef: string;
+    readonly actionUrl: string;
+    readonly title: LocalizedText;
+    readonly body: LocalizedText;
+    readonly category: NoticeCategory;
+    readonly kind: string | null;
+    readonly context: LocalizedText | null;
+    readonly actions: readonly NoticeActionButton[];
+    readonly organizationId: string | null;
+    private constructor();
+    /** @throws InvalidNoticeError */
+    static create(input: {
+        recipients: readonly string[];
+        sourceRef: string;
+        actionUrl: string;
+        title: LocalizedText;
+        body: LocalizedText;
+    }): Notice;
+    /**
+     * Read a body in Platform's wire shape. Stricter than Platform on purpose: an unknown key or
+     * locale, which Platform would silently drop, is refused.
+     *
+     * @throws InvalidNoticeError
+     */
+    static fromPayload(payload: unknown): Notice;
+    withCategory(category: NoticeCategory): Notice;
+    /** One of the kinds the service declared in its manifest (`notifications`), so a person can turn it off. */
+    withKind(kind: string | null): Notice;
+    /** A short line placing the notice, printed under the email body (e.g. `WEB-123 · Website`). */
+    withContext(context: LocalizedText | null): Notice;
+    /** Replaces the quick actions (at most three). A notice with actions is never mirrored to Renraku. */
+    withActions(...actions: NoticeActionButton[]): Notice;
+    /** The CONSOLE organization id the notice is about — required for a deployment serving many organizations. */
+    forOrganization(consoleOrganizationId: string | null): Notice;
+    /**
+     * Platform's body, with only the fields that were set: an absent optional field and an empty one
+     * are not the same body to Platform's Idempotency-Key fingerprint.
+     */
+    toPayload(): NoticePayload;
+    private assertValid;
+}
+/** Why a notice was not delivered — the same strings as php-sdk's `NotificationFailure`. */
+type NotificationFailureReason = 
+/** No instance credential was configured, so nothing was sent. */
+"not_configured"
+/** 401. */
+ | "unauthenticated"
+/** 403: `notifications_api_enabled` is off (default) or the credential is wrong — Platform answers both alike. */
+ | "forbidden"
+/** 403 `ORGANIZATION_NOT_SERVED`: forOrganization() names one this instance does not serve. */
+ | "organization_not_served"
+/** 409: this Idempotency-Key was already used with another body. */
+ | "idempotency_conflict"
+/** 422: Platform refused the body — usually one recipient without access, which refuses the whole call. */
+ | "invalid" | "rate_limited"
+/** 5xx, a timeout or a network failure. The notice may or may not have been written. */
+ | "unavailable"
+/** A redirect, an unexpected status, or a success whose body is not Platform's shape. */
+ | "unexpected_response";
+/**
+ * A notice was not delivered. A {@link GodxHttpError}, so an existing catch keeps working; its
+ * `body` is always empty — like php-sdk, this client never reads an error body (Platform's have
+ * carried internal detail), only the `X-Godx-Error` code and `X-Request-Id`.
+ */
+declare class NotificationError extends GodxHttpError {
+    readonly reason: NotificationFailureReason;
+    readonly requestId: string | null;
+    constructor(reason: NotificationFailureReason, status?: number, requestId?: string | null, options?: {
+        cause?: unknown;
+    });
+    /**
+     * Whether sending again may succeed. Retry only with the SAME idempotency key and notice: an
+     * unavailable answer can follow a write that happened.
+     */
+    get retryable(): boolean;
+}
+/** Platform's answer: rows inserted, rows rewritten (same `source_ref`), people skipped (`preference_off`). */
+interface NoticeDelivery {
+    readonly created: readonly {
+        id: string;
+        user_id: string;
+    }[];
+    readonly updated: readonly {
+        id: string;
+        user_id: string;
+    }[];
+    readonly skipped: readonly {
+        user_id: string;
+        reason: string;
+    }[];
+}
+interface NotificationClientConfig {
+    issuer: string;
+    /** The INSTANCE slug (the token audience), never the client_id. */
+    serviceSlug: string;
+    /** The instance client_secret. */
+    serviceSecret: string;
+    /** Headers, deadline and fetch for every call. */
+    http?: HttpOptions;
+}
+interface NotificationClient {
+    /** Whether a credential is configured; without one, send() rejects with `not_configured`. */
+    readonly configured: boolean;
+    /**
+     * `idempotencyKey` (at most 191 characters): the same key and notice replay Platform's stored
+     * answer; the same key with another notice is `idempotency_conflict`.
+     */
+    send(notice: Notice, options?: {
+        idempotencyKey?: string;
+    }): Promise<NoticeDelivery>;
+}
+declare const NOTIFICATIONS_PATH = "/api/sso/service/notifications";
+/**
+ * The machine lane — the instance credential, gated by its capability `notifications_api_enabled`
+ * (default off). Redirects are never followed: a credential header must not reach another origin.
+ */
+declare function createNotificationClient(config: NotificationClientConfig): NotificationClient;
+/**
+ * The service's answer to a press. `done` and `already_done` SETTLE the notice: Platform remembers
+ * it and replays it on the next press without calling again — answer `already_done` only when the
+ * effect is confirmed.
+ */
+type NoticeActionState = "done" | "already_done" | "denied" | "invalid";
+interface NoticeActionResult {
+    readonly state: NoticeActionState;
+    /** One short line for the person, in the press's locale (Platform shows at most 500 characters). */
+    readonly message?: string | null;
+}
+/** One press, after the token was verified as Platform's notice-action token for a person. */
+interface NoticeAction {
+    /** Who pressed (`sub`) and in which organization (`organization_context_id`, the console id) — from the token, never the body. */
+    readonly principal: {
+        readonly subject: string;
+        readonly organization: string;
+        readonly clientId: string;
+        readonly scopes: readonly string[];
+    };
+    readonly sourceRef: string;
+    /** The button id. */
+    readonly action: string;
+    /** Null when none was written. */
+    readonly reason: string | null;
+    /** The language to answer `message` in. */
+    readonly locale: NoticeLocale | null;
+    readonly noticeId: string | null;
+}
+/**
+ * Platform decided NOTHING: it checked only that the person may still open the service and that the
+ * notice offered this button. The handler, as `press.principal` and under the service's own rules,
+ * finds the subject by `sourceRef` WITHIN `press.principal.organization`, answers `invalid` for an
+ * action it does not offer, re-checks the person's right (`denied`), and makes the change
+ * atomically. A thrown error is a 500, which the person sees as a failure; nothing is settled.
+ */
+type NoticeActionHandler = (press: NoticeAction) => NoticeActionResult | Promise<NoticeActionResult>;
+declare const NOTICE_ACTIONS_PATH = "/api/platform/v1/notice-actions";
+interface NoticeActionOptions {
+    issuer: string;
+    /** Your instance slug — the token's `aud`. */
+    audience: string;
+    handler: NoticeActionHandler;
+    /** Default `platform-notice-actions`. */
+    clientId?: string;
+    /** Default `notices.actions:execute`. */
+    scope?: string;
+    /** Headers, deadline and fetch for discovery and JWKS. */
+    http?: HttpOptions;
+}
+/**
+ * Answers Platform's `POST {base_url}/api/platform/v1/notice-actions` (Fetch API: Workers, Node 18+;
+ * Hono: `app.post(NOTICE_ACTIONS_PATH, (c) => handleNoticeAction(c.req.raw, options))`).
+ *
+ * The token is verified like php-sdk's `AuthenticateResource` does (RS256, `typ` at+jwt, exact
+ * issuer from discovery, `aud`, `exp`; else 401) — not with {@link verifyAccessToken}, because
+ * Platform mints this token without `organization_id`. Then it must be a PERSON's (`prn` user)
+ * from `clientId` carrying `scope`, else `403 {"error":"forbidden"}`; a malformed body is
+ * `422 {"state":"invalid"}`. The handler's answer is `{state, message?}`: 200, or 422 for `invalid`.
+ */
+declare function handleNoticeAction(request: Request, options: NoticeActionOptions): Promise<Response>;
+
+export { InvalidNoticeError, type LocalizedText, NOTICE_ACTIONS_PATH, NOTIFICATIONS_PATH, Notice, type NoticeAction, type NoticeActionButton, type NoticeActionHandler, type NoticeActionOptions, type NoticeActionReason, type NoticeActionResult, type NoticeActionState, type NoticeActionStyle, type NoticeCategory, type NoticeDelivery, type NoticeLocale, type NoticePayload, type NotificationClient, type NotificationClientConfig, NotificationError, type NotificationFailureReason, createNotificationClient, handleNoticeAction };

package/dist/notifications.js

@@ -0,0 +1,418 @@
+import {
+  GodxHttpError,
+  loadIssuer,
+  platformFetch
+} from "./chunk-DUFW6IQK.js";
+
+// src/notifications.ts
+import { jwtVerify } from "jose";
+var InvalidNoticeError = class extends Error {
+  field;
+  constructor(field, reason) {
+    super(`Invalid notice field \`${field}\`: ${reason}.`);
+    this.name = "InvalidNoticeError";
+    this.field = field;
+  }
+};
+var LOCALES = ["ja", "en", "vi"];
+var CATEGORIES = [
+  "service",
+  "organization_invitation",
+  "access_request",
+  "service_provisioning",
+  "billing",
+  "security",
+  "operator"
+];
+var STYLES = ["default", "primary", "danger"];
+var REASONS = ["none", "optional", "required"];
+var KEYS = ["recipients", "category", "source_ref", "action_url", "title", "body", "kind", "context", "actions", "organization_id"];
+var KIND_PATTERN = /^[a-z][a-z0-9_.-]{0,39}$/;
+var ACTION_ID_PATTERN = /^[a-z][a-z0-9_-]{0,39}$/;
+var LIMITS = {
+  recipients: 100,
+  recipient: 36,
+  sourceRef: 191,
+  actionUrl: 2e3,
+  title: 200,
+  body: 2e3,
+  context: 200,
+  organizationId: 64,
+  actions: 3,
+  label: 40,
+  reason: 2e3
+};
+function length(value) {
+  return [...value].length;
+}
+function blank(value) {
+  return value.replace(/^[ \t\n\r\0\x0B]+|[ \t\n\r\0\x0B]+$/g, "") === "";
+}
+function requiredString(value, field, max) {
+  if (typeof value !== "string" || blank(value)) throw new InvalidNoticeError(field, "is required");
+  if (length(value) > max) throw new InvalidNoticeError(field, `is longer than ${max} characters`);
+  return value;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readText(value, field) {
+  if (!isRecord(value)) throw new InvalidNoticeError(field, "must be a locale map");
+  for (const locale of Object.keys(value)) {
+    if (!LOCALES.includes(locale)) throw new InvalidNoticeError(`${field}.${locale}`, "only ja, en and vi are rendered");
+  }
+  for (const locale of LOCALES) {
+    const text = value[locale];
+    if (text !== void 0 && text !== null && typeof text !== "string") throw new InvalidNoticeError(`${field}.${locale}`, "must be a string");
+  }
+  if (typeof value["ja"] !== "string") throw new InvalidNoticeError(`${field}.ja`, "is required");
+  return { ja: value["ja"], en: value["en"] ?? null, vi: value["vi"] ?? null };
+}
+function textPayload(text) {
+  const out = { ja: text.ja };
+  if (typeof text.en === "string" && text.en !== "") out.en = text.en;
+  if (typeof text.vi === "string" && text.vi !== "") out.vi = text.vi;
+  return out;
+}
+function assertText(text, field, max) {
+  if (typeof text.ja !== "string" || blank(text.ja)) throw new InvalidNoticeError(`${field}.ja`, "is required");
+  for (const [locale, value] of Object.entries(textPayload(text))) {
+    if (length(value) > max) throw new InvalidNoticeError(`${field}.${locale}`, `is longer than ${max} characters`);
+  }
+}
+function absoluteHttpUrl(value) {
+  if (!/^[\x21-\x7e]+$/.test(value)) return false;
+  try {
+    const url = new URL(value);
+    return (url.protocol === "http:" || url.protocol === "https:") && url.hostname !== "";
+  } catch {
+    return false;
+  }
+}
+var Notice = class _Notice {
+  recipients;
+  sourceRef;
+  actionUrl;
+  title;
+  body;
+  category;
+  kind;
+  context;
+  actions;
+  organizationId;
+  constructor(fields) {
+    this.recipients = Object.freeze([...fields.recipients]);
+    this.sourceRef = fields.sourceRef;
+    this.actionUrl = fields.actionUrl;
+    this.title = Object.freeze({ ...fields.title });
+    this.body = Object.freeze({ ...fields.body });
+    this.category = fields.category;
+    this.kind = fields.kind;
+    this.context = fields.context === null ? null : Object.freeze({ ...fields.context });
+    this.actions = Object.freeze(fields.actions.map((a) => Object.freeze({ ...a, label: Object.freeze({ ...a.label }) })));
+    this.organizationId = fields.organizationId;
+    this.assertValid();
+    Object.freeze(this);
+  }
+  /** @throws InvalidNoticeError */
+  static create(input) {
+    return new _Notice({ ...input, category: "service", kind: null, context: null, actions: [], organizationId: null });
+  }
+  /**
+   * Read a body in Platform's wire shape. Stricter than Platform on purpose: an unknown key or
+   * locale, which Platform would silently drop, is refused.
+   *
+   * @throws InvalidNoticeError
+   */
+  static fromPayload(payload) {
+    if (!isRecord(payload)) throw new InvalidNoticeError("recipients", "a notice is an object");
+    for (const key of Object.keys(payload)) {
+      if (!KEYS.includes(key)) throw new InvalidNoticeError(key, "is not a field of a notice");
+    }
+    const recipients = payload["recipients"];
+    if (!Array.isArray(recipients)) throw new InvalidNoticeError("recipients", "must be a list of Platform user ids");
+    recipients.forEach((recipient, index) => {
+      if (typeof recipient !== "string") throw new InvalidNoticeError(`recipients.${index}`, "must be a string");
+    });
+    const actions = payload["actions"] ?? [];
+    if (!Array.isArray(actions)) throw new InvalidNoticeError("actions", "must be a list");
+    const kind = payload["kind"] ?? null;
+    if (kind !== null && typeof kind !== "string") throw new InvalidNoticeError("kind", "must be a string");
+    const organizationId = payload["organization_id"] ?? null;
+    if (organizationId !== null && typeof organizationId !== "string") throw new InvalidNoticeError("organization_id", "must be a string");
+    const sourceRef = payload["source_ref"];
+    if (typeof sourceRef !== "string") throw new InvalidNoticeError("source_ref", "is required");
+    const actionUrl = payload["action_url"];
+    if (typeof actionUrl !== "string") throw new InvalidNoticeError("action_url", "is required");
+    const title = readText(payload["title"], "title");
+    const body = readText(payload["body"], "body");
+    const category = payload["category"];
+    if (typeof category !== "string" || !CATEGORIES.includes(category)) {
+      throw new InvalidNoticeError("category", "must be one of Platform's notification categories");
+    }
+    const context = payload["context"] === void 0 || payload["context"] === null ? null : readText(payload["context"], "context");
+    return new _Notice({
+      recipients,
+      sourceRef,
+      actionUrl,
+      title,
+      body,
+      category,
+      kind,
+      context,
+      actions: actions.map((action, index) => readAction(action, `actions.${index}`)),
+      organizationId
+    });
+  }
+  withCategory(category) {
+    return new _Notice({ ...this, category });
+  }
+  /** One of the kinds the service declared in its manifest (`notifications`), so a person can turn it off. */
+  withKind(kind) {
+    return new _Notice({ ...this, kind });
+  }
+  /** A short line placing the notice, printed under the email body (e.g. `WEB-123 · Website`). */
+  withContext(context) {
+    return new _Notice({ ...this, context });
+  }
+  /** Replaces the quick actions (at most three). A notice with actions is never mirrored to Renraku. */
+  withActions(...actions) {
+    return new _Notice({ ...this, actions });
+  }
+  /** The CONSOLE organization id the notice is about — required for a deployment serving many organizations. */
+  forOrganization(consoleOrganizationId) {
+    return new _Notice({ ...this, organizationId: consoleOrganizationId });
+  }
+  /**
+   * Platform's body, with only the fields that were set: an absent optional field and an empty one
+   * are not the same body to Platform's Idempotency-Key fingerprint.
+   */
+  toPayload() {
+    const payload = {
+      recipients: [...this.recipients],
+      category: this.category,
+      source_ref: this.sourceRef,
+      action_url: this.actionUrl,
+      title: textPayload(this.title),
+      body: textPayload(this.body)
+    };
+    if (this.kind !== null) payload.kind = this.kind;
+    if (this.context !== null) payload.context = textPayload(this.context);
+    if (this.actions.length > 0) {
+      payload.actions = this.actions.map((action) => ({
+        id: action.id,
+        label: textPayload(action.label),
+        style: action.style ?? "default",
+        reason: action.reason ?? "none"
+      }));
+    }
+    if (this.organizationId !== null) payload.organization_id = this.organizationId;
+    return payload;
+  }
+  assertValid() {
+    if (this.recipients.length === 0 || this.recipients.length > LIMITS.recipients) {
+      throw new InvalidNoticeError("recipients", `must list 1 to ${LIMITS.recipients} Platform user ids`);
+    }
+    this.recipients.forEach((recipient, index) => requiredString(recipient, `recipients.${index}`, LIMITS.recipient));
+    requiredString(this.sourceRef, "source_ref", LIMITS.sourceRef);
+    requiredString(this.actionUrl, "action_url", LIMITS.actionUrl);
+    if (!absoluteHttpUrl(this.actionUrl)) {
+      throw new InvalidNoticeError("action_url", "must be an absolute http(s) URL under the service base URL");
+    }
+    assertText(this.title, "title", LIMITS.title);
+    assertText(this.body, "body", LIMITS.body);
+    if (!CATEGORIES.includes(this.category)) {
+      throw new InvalidNoticeError("category", "must be one of Platform's notification categories");
+    }
+    if (this.kind !== null && !KIND_PATTERN.test(this.kind)) throw new InvalidNoticeError("kind", "must match ^[a-z][a-z0-9_.-]{0,39}$");
+    if (this.context !== null) assertText(this.context, "context", LIMITS.context);
+    if (this.actions.length > LIMITS.actions) throw new InvalidNoticeError("actions", `at most ${LIMITS.actions} quick actions`);
+    const seen = /* @__PURE__ */ new Set();
+    this.actions.forEach((action, index) => {
+      if (typeof action.id !== "string" || !ACTION_ID_PATTERN.test(action.id)) {
+        throw new InvalidNoticeError(`actions.${index}.id`, "must match ^[a-z][a-z0-9_-]{0,39}$");
+      }
+      assertText(action.label, `actions.${index}.label`, LIMITS.label);
+      if (action.style !== void 0 && !STYLES.includes(action.style)) throw new InvalidNoticeError(`actions.${index}.style`, "must be default, primary or danger");
+      if (action.reason !== void 0 && !REASONS.includes(action.reason)) throw new InvalidNoticeError(`actions.${index}.reason`, "must be none, optional or required");
+      if (seen.has(action.id)) throw new InvalidNoticeError(`actions.${index}.id`, "is not unique on the notice");
+      seen.add(action.id);
+    });
+    if (this.organizationId !== null) requiredString(this.organizationId, "organization_id", LIMITS.organizationId);
+  }
+};
+function readAction(value, field) {
+  if (!isRecord(value)) throw new InvalidNoticeError(field, "must be an object");
+  for (const key of Object.keys(value)) {
+    if (!["id", "label", "style", "reason"].includes(key)) throw new InvalidNoticeError(field, "only id, label, style and reason are allowed");
+  }
+  const label = readText(value["label"], `${field}.label`);
+  const style = value["style"] ?? "default";
+  if (typeof style !== "string" || !STYLES.includes(style)) throw new InvalidNoticeError(`${field}.style`, "must be default, primary or danger");
+  const reason = value["reason"] ?? "none";
+  if (typeof reason !== "string" || !REASONS.includes(reason)) throw new InvalidNoticeError(`${field}.reason`, "must be none, optional or required");
+  return {
+    id: typeof value["id"] === "string" ? value["id"] : "",
+    label,
+    style,
+    reason
+  };
+}
+var NotificationError = class extends GodxHttpError {
+  reason;
+  requestId;
+  constructor(reason, status = 0, requestId = null, options) {
+    super(status, "", `GoDX notification failed: ${reason}.${requestId ? ` Platform request id: ${requestId}.` : ""}`);
+    this.name = "NotificationError";
+    this.reason = reason;
+    this.requestId = requestId;
+    if (options?.cause !== void 0) this.cause = options.cause;
+  }
+  /**
+   * Whether sending again may succeed. Retry only with the SAME idempotency key and notice: an
+   * unavailable answer can follow a write that happened.
+   */
+  get retryable() {
+    return this.reason === "rate_limited" || this.reason === "unavailable";
+  }
+};
+var NOTIFICATIONS_PATH = "/api/sso/service/notifications";
+function createNotificationClient(config) {
+  const configured = config.issuer !== "" && config.serviceSlug !== "" && config.serviceSecret !== "";
+  return {
+    configured,
+    async send(notice, options = {}) {
+      if (!configured) throw new NotificationError("not_configured");
+      if (options.idempotencyKey !== void 0 && (options.idempotencyKey === "" || length(options.idempotencyKey) > 191)) {
+        throw new RangeError("An Idempotency-Key is 1 to 191 characters.");
+      }
+      const headers = {
+        Accept: "application/json",
+        "Content-Type": "application/json",
+        "X-Service-Slug": config.serviceSlug,
+        "X-Service-Secret": config.serviceSecret
+      };
+      if (options.idempotencyKey !== void 0) headers["Idempotency-Key"] = options.idempotencyKey;
+      let response;
+      try {
+        response = await platformFetch(
+          new URL(NOTIFICATIONS_PATH, config.issuer),
+          { method: "POST", headers, body: JSON.stringify(notice.toPayload()), redirect: "manual" },
+          config.http
+        );
+      } catch (error) {
+        throw new NotificationError("unavailable", 0, null, { cause: error });
+      }
+      const requestId = response.headers.get("X-Request-Id");
+      if (response.status < 200 || response.status >= 300) {
+        const code = response.headers.get("X-Godx-Error");
+        const status = response.status;
+        throw new NotificationError(
+          status === 401 ? "unauthenticated" : code === "ORGANIZATION_NOT_SERVED" ? "organization_not_served" : status === 403 ? "forbidden" : status === 409 ? "idempotency_conflict" : status === 422 ? "invalid" : status === 429 ? "rate_limited" : status >= 500 ? "unavailable" : "unexpected_response",
+          status,
+          requestId
+        );
+      }
+      let body;
+      try {
+        body = await response.json();
+      } catch {
+        throw new NotificationError("unexpected_response", response.status, requestId);
+      }
+      return readDelivery(body, response.status, requestId);
+    }
+  };
+}
+function readDelivery(body, status, requestId) {
+  const data = isRecord(body) ? body["data"] : void 0;
+  if (!isRecord(data)) throw new NotificationError("unexpected_response", status, requestId);
+  const rows = (value, keys) => {
+    if (!Array.isArray(value)) throw new NotificationError("unexpected_response", status, requestId);
+    return value.map((row) => {
+      if (!isRecord(row) || keys.some((key) => typeof row[key] !== "string")) {
+        throw new NotificationError("unexpected_response", status, requestId);
+      }
+      return Object.fromEntries(keys.map((key) => [key, row[key]]));
+    });
+  };
+  return {
+    created: rows(data["created"], ["id", "user_id"]),
+    updated: rows(data["updated"], ["id", "user_id"]),
+    skipped: rows(data["skipped"], ["user_id", "reason"])
+  };
+}
+var NOTICE_ACTIONS_PATH = "/api/platform/v1/notice-actions";
+async function handleNoticeAction(request, options) {
+  if (request.method !== "POST") return json({ error: "method_not_allowed" }, 405, { Allow: "POST" });
+  const match = /^Bearer ([A-Za-z0-9._~-]+)$/i.exec(request.headers.get("Authorization") ?? "");
+  if (!match) return json({ error: "invalid_token", error_description: "A Bearer token is required." }, 401, { "WWW-Authenticate": "Bearer" });
+  let claims;
+  try {
+    const { metadata, jwks } = await loadIssuer(options.issuer, options.http);
+    ({ payload: claims } = await jwtVerify(match[1], jwks, {
+      issuer: metadata.issuer,
+      audience: options.audience,
+      algorithms: ["RS256"],
+      typ: "at+jwt",
+      requiredClaims: ["sub", "exp", "jti"],
+      // php-sdk TokenProfile leeway.
+      clockTolerance: 30
+    }));
+  } catch {
+    return json({ error: "invalid_token" }, 401, { "WWW-Authenticate": 'Bearer error="invalid_token"' });
+  }
+  const subject = claims["sub"];
+  const organization = claims["organization_context_id"];
+  if (typeof subject !== "string" || subject === "" || typeof organization !== "string" || organization === "") {
+    return json({ error: "invalid_token" }, 401, { "WWW-Authenticate": 'Bearer error="invalid_token"' });
+  }
+  const scopes = typeof claims["scope"] === "string" ? claims["scope"].split(" ").filter(Boolean) : [];
+  const clientId = typeof claims["client_id"] === "string" ? claims["client_id"] : "";
+  if (claims["prn"] !== "user" || clientId !== (options.clientId ?? "platform-notice-actions") || !scopes.includes(options.scope ?? "notices.actions:execute")) {
+    return json({ error: "forbidden" }, 403);
+  }
+  let body;
+  try {
+    body = await request.json();
+  } catch {
+    body = null;
+  }
+  const press = readPress(body, { subject, organization, clientId, scopes: Object.freeze(scopes) });
+  if (press === null) return json({ state: "invalid" }, 422);
+  const result = await options.handler(press);
+  return json(
+    { state: result.state, ...typeof result.message === "string" && result.message !== "" ? { message: result.message } : {} },
+    result.state === "invalid" ? 422 : 200
+  );
+}
+function readPress(body, principal) {
+  if (!isRecord(body)) return null;
+  const sourceRef = body["source_ref"];
+  const action = body["action"];
+  const reason = body["reason"] ?? null;
+  const locale = body["locale"] ?? null;
+  const noticeId = body["notice_id"] ?? null;
+  const valid = typeof sourceRef === "string" && !blank(sourceRef) && length(sourceRef) <= LIMITS.sourceRef && typeof action === "string" && ACTION_ID_PATTERN.test(action) && (reason === null || typeof reason === "string" && length(reason) <= LIMITS.reason) && (locale === null || LOCALES.includes(locale)) && (noticeId === null || typeof noticeId === "string" && length(noticeId) <= 64);
+  if (!valid) return null;
+  return Object.freeze({
+    principal: Object.freeze(principal),
+    sourceRef,
+    action,
+    reason: typeof reason === "string" && !blank(reason) ? reason : null,
+    locale,
+    noticeId: typeof noticeId === "string" && noticeId !== "" ? noticeId : null
+  });
+}
+function json(body, status, headers = {}) {
+  return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", ...headers } });
+}
+export {
+  InvalidNoticeError,
+  NOTICE_ACTIONS_PATH,
+  NOTIFICATIONS_PATH,
+  Notice,
+  NotificationError,
+  createNotificationClient,
+  handleNoticeAction
+};
+//# sourceMappingURL=notifications.js.map

package/dist/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/notifications.ts"],"sourcesContent":["/**\n * ./notifications — Notification Center, one interface for every GoDX service (CHAT-65), the\n * mirror of php-sdk's `Notifications\\Notice`, `Http\\NotificationClient` and\n * `Route::godxNoticeActions()`. Platform's contract: godx-jp/id\n * `docs/guide/downstream-service-onboarding.md` → Sending notifications.\n *\n * - Send: a {@link Notice} is the body of `POST /api/sso/service/notifications` (machine lane,\n *   instance credential), checked against every rule Platform applies that can be checked here;\n *   {@link createNotificationClient} sends it and answers a {@link NoticeDelivery} or throws a\n *   {@link NotificationError} with one of the same `reason`s as php-sdk.\n * - Receive: {@link handleNoticeAction} answers Platform's call to\n *   `POST {base_url}/api/platform/v1/notice-actions` when a person presses a quick action.\n *\n * Both SDKs run the same fixtures (`contract/notices`, byte-identical to php-sdk's\n * `tests/Fixtures/notices`).\n */\nimport { jwtVerify } from \"jose\";\nimport { GodxHttpError, type HttpOptions, loadIssuer, platformFetch } from \"./http\";\n\nexport type NoticeLocale = \"ja\" | \"en\" | \"vi\";\n\n/** Copy in the locales Platform renders: `ja` required, `en`/`vi` optional. Plain text only. */\nexport interface LocalizedText {\n  readonly ja: string;\n  readonly en?: string | null;\n  readonly vi?: string | null;\n}\n\n/** Platform's closed categories; `service` is the one for a notice a service authors. */\nexport type NoticeCategory =\n  | \"service\"\n  | \"organization_invitation\"\n  | \"access_request\"\n  | \"service_provisioning\"\n  | \"billing\"\n  | \"security\"\n  | \"operator\";\n\nexport type NoticeActionStyle = \"default\" | \"primary\" | \"danger\";\n\n/** Whether a press carries a reason; Platform enforces it before calling the service. */\nexport type NoticeActionReason = \"none\" | \"optional\" | \"required\";\n\n/** One quick-action button (at most three on a notice). Only a service instance may offer them. */\nexport interface NoticeActionButton {\n  readonly id: string;\n  readonly label: LocalizedText;\n  readonly style?: NoticeActionStyle;\n  readonly reason?: NoticeActionReason;\n}\n\n/** Platform's wire body, in the shape both SDKs emit: only fields that were set. */\nexport interface NoticePayload {\n  recipients: string[];\n  category: NoticeCategory;\n  source_ref: string;\n  action_url: string;\n  title: Partial<Record<NoticeLocale, string>> & { ja: string };\n  body: Partial<Record<NoticeLocale, string>> & { ja: string };\n  kind?: string;\n  context?: Partial<Record<NoticeLocale, string>> & { ja: string };\n  actions?: { id: string; label: Partial<Record<NoticeLocale, string>> & { ja: string }; style: NoticeActionStyle; reason: NoticeActionReason }[];\n  organization_id?: string;\n}\n\n/** A notice Platform would refuse (or silently drop part of); `field` is Laravel's dot-notation key. */\nexport class InvalidNoticeError extends Error {\n  readonly field: string;\n  constructor(field: string, reason: string) {\n    super(`Invalid notice field \\`${field}\\`: ${reason}.`);\n    this.name = \"InvalidNoticeError\";\n    this.field = field;\n  }\n}\n\nconst LOCALES: readonly NoticeLocale[] = [\"ja\", \"en\", \"vi\"];\nconst CATEGORIES: readonly NoticeCategory[] = [\n  \"service\",\n  \"organization_invitation\",\n  \"access_request\",\n  \"service_provisioning\",\n  \"billing\",\n  \"security\",\n  \"operator\",\n];\nconst STYLES: readonly NoticeActionStyle[] = [\"default\", \"primary\", \"danger\"];\nconst REASONS: readonly NoticeActionReason[] = [\"none\", \"optional\", \"required\"];\nconst KEYS = [\"recipients\", \"category\", \"source_ref\", \"action_url\", \"title\", \"body\", \"kind\", \"context\", \"actions\", \"organization_id\"];\nconst KIND_PATTERN = /^[a-z][a-z0-9_.-]{0,39}$/;\nconst ACTION_ID_PATTERN = /^[a-z][a-z0-9_-]{0,39}$/;\nconst LIMITS = {\n  recipients: 100,\n  recipient: 36,\n  sourceRef: 191,\n  actionUrl: 2000,\n  title: 200,\n  body: 2000,\n  context: 200,\n  organizationId: 64,\n  actions: 3,\n  label: 40,\n  reason: 2000,\n} as const;\n\n/** Characters as Laravel's `max` (mb_strlen) counts them: code points, not UTF-16 units. */\nfunction length(value: string): number {\n  return [...value].length;\n}\n\n/** Laravel's `required`: PHP's trim(), so only ASCII whitespace counts as blank. */\nfunction blank(value: string): boolean {\n  return value.replace(/^[ \\t\\n\\r\\0\\x0B]+|[ \\t\\n\\r\\0\\x0B]+$/g, \"\") === \"\";\n}\n\nfunction requiredString(value: unknown, field: string, max: number): string {\n  if (typeof value !== \"string\" || blank(value)) throw new InvalidNoticeError(field, \"is required\");\n  if (length(value) > max) throw new InvalidNoticeError(field, `is longer than ${max} characters`);\n  return value;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/** As php-sdk's LocalizedText::fromArray(): an object of ja/en/vi strings, `ja` present. */\nfunction readText(value: unknown, field: string): LocalizedText {\n  if (!isRecord(value)) throw new InvalidNoticeError(field, \"must be a locale map\");\n  for (const locale of Object.keys(value)) {\n    if (!(LOCALES as readonly string[]).includes(locale)) throw new InvalidNoticeError(`${field}.${locale}`, \"only ja, en and vi are rendered\");\n  }\n  for (const locale of LOCALES) {\n    const text = value[locale];\n    if (text !== undefined && text !== null && typeof text !== \"string\") throw new InvalidNoticeError(`${field}.${locale}`, \"must be a string\");\n  }\n  if (typeof value[\"ja\"] !== \"string\") throw new InvalidNoticeError(`${field}.ja`, \"is required\");\n  return { ja: value[\"ja\"], en: (value[\"en\"] as string | null | undefined) ?? null, vi: (value[\"vi\"] as string | null | undefined) ?? null };\n}\n\n/** The locale map Platform stores: `ja` always, `en`/`vi` only when given and not empty. */\nfunction textPayload(text: LocalizedText): Partial<Record<NoticeLocale, string>> & { ja: string } {\n  const out: Partial<Record<NoticeLocale, string>> & { ja: string } = { ja: text.ja };\n  if (typeof text.en === \"string\" && text.en !== \"\") out.en = text.en;\n  if (typeof text.vi === \"string\" && text.vi !== \"\") out.vi = text.vi;\n  return out;\n}\n\nfunction assertText(text: LocalizedText, field: string, max: number): void {\n  if (typeof text.ja !== \"string\" || blank(text.ja)) throw new InvalidNoticeError(`${field}.ja`, \"is required\");\n  for (const [locale, value] of Object.entries(textPayload(text))) {\n    if (length(value) > max) throw new InvalidNoticeError(`${field}.${locale}`, `is longer than ${max} characters`);\n  }\n}\n\n/** What PHP's FILTER_VALIDATE_URL + an http(s) scheme admit: printable ASCII, a scheme and a host. */\nfunction absoluteHttpUrl(value: string): boolean {\n  if (!/^[\\x21-\\x7e]+$/.test(value)) return false;\n  try {\n    const url = new URL(value);\n    return (url.protocol === \"http:\" || url.protocol === \"https:\") && url.hostname !== \"\";\n  } catch {\n    return false;\n  }\n}\n\ninterface NoticeFields {\n  readonly recipients: readonly string[];\n  readonly sourceRef: string;\n  readonly actionUrl: string;\n  readonly title: LocalizedText;\n  readonly body: LocalizedText;\n  readonly category: NoticeCategory;\n  readonly kind: string | null;\n  readonly context: LocalizedText | null;\n  readonly actions: readonly NoticeActionButton[];\n  readonly organizationId: string | null;\n}\n\n/**\n * One notice, immutable: each `with…()` returns a new one, checked again.\n *\n * ```ts\n * const notice = Notice.create({\n *   recipients: [approverId],                          // Platform user ids, 1..100\n *   sourceRef: `approval:task:${taskId}`,              // the dedup key: one row per ref per person\n *   actionUrl: `${baseUrl}/requests/42`,               // absolute, under the instance base URL\n *   title: { ja: \"承認依頼\", en: \"Approval requested\" },\n *   body: { ja: \"休暇申請 #42 が届きました。\" },\n * })\n *   .withKind(\"approval\")\n *   .withActions(\n *     { id: \"approve\", label: { ja: \"承認\", en: \"Approve\" }, style: \"primary\" },\n *     { id: \"reject\", label: { ja: \"却下\", en: \"Reject\" }, style: \"danger\", reason: \"required\" },\n *   );\n * ```\n *\n * Every recipient must be a member of the organization with access to the service, or Platform\n * refuses the WHOLE call (422) — checked there, not here. Sending the same `sourceRef` again\n * rewrites that person's row and marks it unread, without a second email.\n */\nexport class Notice implements NoticeFields {\n  readonly recipients: readonly string[];\n  readonly sourceRef: string;\n  readonly actionUrl: string;\n  readonly title: LocalizedText;\n  readonly body: LocalizedText;\n  readonly category: NoticeCategory;\n  readonly kind: string | null;\n  readonly context: LocalizedText | null;\n  readonly actions: readonly NoticeActionButton[];\n  readonly organizationId: string | null;\n\n  private constructor(fields: NoticeFields) {\n    this.recipients = Object.freeze([...fields.recipients]);\n    this.sourceRef = fields.sourceRef;\n    this.actionUrl = fields.actionUrl;\n    this.title = Object.freeze({ ...fields.title });\n    this.body = Object.freeze({ ...fields.body });\n    this.category = fields.category;\n    this.kind = fields.kind;\n    this.context = fields.context === null ? null : Object.freeze({ ...fields.context });\n    this.actions = Object.freeze(fields.actions.map((a) => Object.freeze({ ...a, label: Object.freeze({ ...a.label }) })));\n    this.organizationId = fields.organizationId;\n    this.assertValid();\n    Object.freeze(this);\n  }\n\n  /** @throws InvalidNoticeError */\n  static create(input: {\n    recipients: readonly string[];\n    sourceRef: string;\n    actionUrl: string;\n    title: LocalizedText;\n    body: LocalizedText;\n  }): Notice {\n    return new Notice({ ...input, category: \"service\", kind: null, context: null, actions: [], organizationId: null });\n  }\n\n  /**\n   * Read a body in Platform's wire shape. Stricter than Platform on purpose: an unknown key or\n   * locale, which Platform would silently drop, is refused.\n   *\n   * @throws InvalidNoticeError\n   */\n  static fromPayload(payload: unknown): Notice {\n    if (!isRecord(payload)) throw new InvalidNoticeError(\"recipients\", \"a notice is an object\");\n    for (const key of Object.keys(payload)) {\n      if (!KEYS.includes(key)) throw new InvalidNoticeError(key, \"is not a field of a notice\");\n    }\n    const recipients = payload[\"recipients\"];\n    if (!Array.isArray(recipients)) throw new InvalidNoticeError(\"recipients\", \"must be a list of Platform user ids\");\n    recipients.forEach((recipient, index) => {\n      if (typeof recipient !== \"string\") throw new InvalidNoticeError(`recipients.${index}`, \"must be a string\");\n    });\n    const actions = payload[\"actions\"] ?? [];\n    if (!Array.isArray(actions)) throw new InvalidNoticeError(\"actions\", \"must be a list\");\n    const kind = payload[\"kind\"] ?? null;\n    if (kind !== null && typeof kind !== \"string\") throw new InvalidNoticeError(\"kind\", \"must be a string\");\n    const organizationId = payload[\"organization_id\"] ?? null;\n    if (organizationId !== null && typeof organizationId !== \"string\") throw new InvalidNoticeError(\"organization_id\", \"must be a string\");\n    const sourceRef = payload[\"source_ref\"];\n    if (typeof sourceRef !== \"string\") throw new InvalidNoticeError(\"source_ref\", \"is required\");\n    const actionUrl = payload[\"action_url\"];\n    if (typeof actionUrl !== \"string\") throw new InvalidNoticeError(\"action_url\", \"is required\");\n    const title = readText(payload[\"title\"], \"title\");\n    const body = readText(payload[\"body\"], \"body\");\n    const category = payload[\"category\"];\n    if (typeof category !== \"string\" || !(CATEGORIES as readonly string[]).includes(category)) {\n      throw new InvalidNoticeError(\"category\", \"must be one of Platform's notification categories\");\n    }\n    const context = payload[\"context\"] === undefined || payload[\"context\"] === null ? null : readText(payload[\"context\"], \"context\");\n\n    return new Notice({\n      recipients: recipients as string[],\n      sourceRef,\n      actionUrl,\n      title,\n      body,\n      category: category as NoticeCategory,\n      kind: kind as string | null,\n      context,\n      actions: actions.map((action, index) => readAction(action, `actions.${index}`)),\n      organizationId: organizationId as string | null,\n    });\n  }\n\n  withCategory(category: NoticeCategory): Notice {\n    return new Notice({ ...this, category });\n  }\n\n  /** One of the kinds the service declared in its manifest (`notifications`), so a person can turn it off. */\n  withKind(kind: string | null): Notice {\n    return new Notice({ ...this, kind });\n  }\n\n  /** A short line placing the notice, printed under the email body (e.g. `WEB-123 · Website`). */\n  withContext(context: LocalizedText | null): Notice {\n    return new Notice({ ...this, context });\n  }\n\n  /** Replaces the quick actions (at most three). A notice with actions is never mirrored to Renraku. */\n  withActions(...actions: NoticeActionButton[]): Notice {\n    return new Notice({ ...this, actions });\n  }\n\n  /** The CONSOLE organization id the notice is about — required for a deployment serving many organizations. */\n  forOrganization(consoleOrganizationId: string | null): Notice {\n    return new Notice({ ...this, organizationId: consoleOrganizationId });\n  }\n\n  /**\n   * Platform's body, with only the fields that were set: an absent optional field and an empty one\n   * are not the same body to Platform's Idempotency-Key fingerprint.\n   */\n  toPayload(): NoticePayload {\n    const payload: NoticePayload = {\n      recipients: [...this.recipients],\n      category: this.category,\n      source_ref: this.sourceRef,\n      action_url: this.actionUrl,\n      title: textPayload(this.title),\n      body: textPayload(this.body),\n    };\n    if (this.kind !== null) payload.kind = this.kind;\n    if (this.context !== null) payload.context = textPayload(this.context);\n    if (this.actions.length > 0) {\n      payload.actions = this.actions.map((action) => ({\n        id: action.id,\n        label: textPayload(action.label),\n        style: action.style ?? \"default\",\n        reason: action.reason ?? \"none\",\n      }));\n    }\n    if (this.organizationId !== null) payload.organization_id = this.organizationId;\n    return payload;\n  }\n\n  private assertValid(): void {\n    if (this.recipients.length === 0 || this.recipients.length > LIMITS.recipients) {\n      throw new InvalidNoticeError(\"recipients\", `must list 1 to ${LIMITS.recipients} Platform user ids`);\n    }\n    this.recipients.forEach((recipient, index) => requiredString(recipient, `recipients.${index}`, LIMITS.recipient));\n    requiredString(this.sourceRef, \"source_ref\", LIMITS.sourceRef);\n    requiredString(this.actionUrl, \"action_url\", LIMITS.actionUrl);\n    if (!absoluteHttpUrl(this.actionUrl)) {\n      throw new InvalidNoticeError(\"action_url\", \"must be an absolute http(s) URL under the service base URL\");\n    }\n    assertText(this.title, \"title\", LIMITS.title);\n    assertText(this.body, \"body\", LIMITS.body);\n    if (!(CATEGORIES as readonly string[]).includes(this.category)) {\n      throw new InvalidNoticeError(\"category\", \"must be one of Platform's notification categories\");\n    }\n    if (this.kind !== null && !KIND_PATTERN.test(this.kind)) throw new InvalidNoticeError(\"kind\", \"must match ^[a-z][a-z0-9_.-]{0,39}$\");\n    if (this.context !== null) assertText(this.context, \"context\", LIMITS.context);\n    if (this.actions.length > LIMITS.actions) throw new InvalidNoticeError(\"actions\", `at most ${LIMITS.actions} quick actions`);\n    const seen = new Set<string>();\n    this.actions.forEach((action, index) => {\n      if (typeof action.id !== \"string\" || !ACTION_ID_PATTERN.test(action.id)) {\n        throw new InvalidNoticeError(`actions.${index}.id`, \"must match ^[a-z][a-z0-9_-]{0,39}$\");\n      }\n      assertText(action.label, `actions.${index}.label`, LIMITS.label);\n      if (action.style !== undefined && !STYLES.includes(action.style)) throw new InvalidNoticeError(`actions.${index}.style`, \"must be default, primary or danger\");\n      if (action.reason !== undefined && !REASONS.includes(action.reason)) throw new InvalidNoticeError(`actions.${index}.reason`, \"must be none, optional or required\");\n      if (seen.has(action.id)) throw new InvalidNoticeError(`actions.${index}.id`, \"is not unique on the notice\");\n      seen.add(action.id);\n    });\n    if (this.organizationId !== null) requiredString(this.organizationId, \"organization_id\", LIMITS.organizationId);\n  }\n}\n\nfunction readAction(value: unknown, field: string): NoticeActionButton {\n  if (!isRecord(value)) throw new InvalidNoticeError(field, \"must be an object\");\n  for (const key of Object.keys(value)) {\n    if (![\"id\", \"label\", \"style\", \"reason\"].includes(key)) throw new InvalidNoticeError(field, \"only id, label, style and reason are allowed\");\n  }\n  const label = readText(value[\"label\"], `${field}.label`);\n  const style = value[\"style\"] ?? \"default\";\n  if (typeof style !== \"string\" || !(STYLES as readonly string[]).includes(style)) throw new InvalidNoticeError(`${field}.style`, \"must be default, primary or danger\");\n  const reason = value[\"reason\"] ?? \"none\";\n  if (typeof reason !== \"string\" || !(REASONS as readonly string[]).includes(reason)) throw new InvalidNoticeError(`${field}.reason`, \"must be none, optional or required\");\n  return {\n    id: typeof value[\"id\"] === \"string\" ? value[\"id\"] : \"\",\n    label,\n    style: style as NoticeActionStyle,\n    reason: reason as NoticeActionReason,\n  };\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Send\n * --------------------------------------------------------------------------------------------- */\n\n/** Why a notice was not delivered — the same strings as php-sdk's `NotificationFailure`. */\nexport type NotificationFailureReason =\n  /** No instance credential was configured, so nothing was sent. */\n  | \"not_configured\"\n  /** 401. */\n  | \"unauthenticated\"\n  /** 403: `notifications_api_enabled` is off (default) or the credential is wrong — Platform answers both alike. */\n  | \"forbidden\"\n  /** 403 `ORGANIZATION_NOT_SERVED`: forOrganization() names one this instance does not serve. */\n  | \"organization_not_served\"\n  /** 409: this Idempotency-Key was already used with another body. */\n  | \"idempotency_conflict\"\n  /** 422: Platform refused the body — usually one recipient without access, which refuses the whole call. */\n  | \"invalid\"\n  | \"rate_limited\"\n  /** 5xx, a timeout or a network failure. The notice may or may not have been written. */\n  | \"unavailable\"\n  /** A redirect, an unexpected status, or a success whose body is not Platform's shape. */\n  | \"unexpected_response\";\n\n/**\n * A notice was not delivered. A {@link GodxHttpError}, so an existing catch keeps working; its\n * `body` is always empty — like php-sdk, this client never reads an error body (Platform's have\n * carried internal detail), only the `X-Godx-Error` code and `X-Request-Id`.\n */\nexport class NotificationError extends GodxHttpError {\n  readonly reason: NotificationFailureReason;\n  readonly requestId: string | null;\n\n  constructor(reason: NotificationFailureReason, status = 0, requestId: string | null = null, options?: { cause?: unknown }) {\n    super(status, \"\", `GoDX notification failed: ${reason}.${requestId ? ` Platform request id: ${requestId}.` : \"\"}`);\n    this.name = \"NotificationError\";\n    this.reason = reason;\n    this.requestId = requestId;\n    if (options?.cause !== undefined) (this as { cause?: unknown }).cause = options.cause;\n  }\n\n  /**\n   * Whether sending again may succeed. Retry only with the SAME idempotency key and notice: an\n   * unavailable answer can follow a write that happened.\n   */\n  get retryable(): boolean {\n    return this.reason === \"rate_limited\" || this.reason === \"unavailable\";\n  }\n}\n\n/** Platform's answer: rows inserted, rows rewritten (same `source_ref`), people skipped (`preference_off`). */\nexport interface NoticeDelivery {\n  readonly created: readonly { id: string; user_id: string }[];\n  readonly updated: readonly { id: string; user_id: string }[];\n  readonly skipped: readonly { user_id: string; reason: string }[];\n}\n\nexport interface NotificationClientConfig {\n  issuer: string;\n  /** The INSTANCE slug (the token audience), never the client_id. */\n  serviceSlug: string;\n  /** The instance client_secret. */\n  serviceSecret: string;\n  /** Headers, deadline and fetch for every call. */\n  http?: HttpOptions;\n}\n\nexport interface NotificationClient {\n  /** Whether a credential is configured; without one, send() rejects with `not_configured`. */\n  readonly configured: boolean;\n  /**\n   * `idempotencyKey` (at most 191 characters): the same key and notice replay Platform's stored\n   * answer; the same key with another notice is `idempotency_conflict`.\n   */\n  send(notice: Notice, options?: { idempotencyKey?: string }): Promise<NoticeDelivery>;\n}\n\nexport const NOTIFICATIONS_PATH = \"/api/sso/service/notifications\";\n\n/**\n * The machine lane — the instance credential, gated by its capability `notifications_api_enabled`\n * (default off). Redirects are never followed: a credential header must not reach another origin.\n */\nexport function createNotificationClient(config: NotificationClientConfig): NotificationClient {\n  const configured = config.issuer !== \"\" && config.serviceSlug !== \"\" && config.serviceSecret !== \"\";\n\n  return {\n    configured,\n    async send(notice, options = {}) {\n      if (!configured) throw new NotificationError(\"not_configured\");\n      // Platform would answer 422, read as `invalid` — pointing at the notice, not the key.\n      if (options.idempotencyKey !== undefined && (options.idempotencyKey === \"\" || length(options.idempotencyKey) > 191)) {\n        throw new RangeError(\"An Idempotency-Key is 1 to 191 characters.\");\n      }\n      const headers: Record<string, string> = {\n        Accept: \"application/json\",\n        \"Content-Type\": \"application/json\",\n        \"X-Service-Slug\": config.serviceSlug,\n        \"X-Service-Secret\": config.serviceSecret,\n      };\n      if (options.idempotencyKey !== undefined) headers[\"Idempotency-Key\"] = options.idempotencyKey;\n\n      let response: Response;\n      try {\n        response = await platformFetch(\n          new URL(NOTIFICATIONS_PATH, config.issuer),\n          { method: \"POST\", headers, body: JSON.stringify(notice.toPayload()), redirect: \"manual\" },\n          config.http,\n        );\n      } catch (error) {\n        throw new NotificationError(\"unavailable\", 0, null, { cause: error });\n      }\n      const requestId = response.headers.get(\"X-Request-Id\");\n\n      if (response.status < 200 || response.status >= 300) {\n        const code = response.headers.get(\"X-Godx-Error\");\n        const status = response.status;\n        throw new NotificationError(\n          status === 401\n            ? \"unauthenticated\"\n            : code === \"ORGANIZATION_NOT_SERVED\"\n              ? \"organization_not_served\"\n              : status === 403\n                ? \"forbidden\"\n                : status === 409\n                  ? \"idempotency_conflict\"\n                  : status === 422\n                    ? \"invalid\"\n                    : status === 429\n                      ? \"rate_limited\"\n                      : status >= 500\n                        ? \"unavailable\"\n                        : \"unexpected_response\",\n          status,\n          requestId,\n        );\n      }\n\n      let body: unknown;\n      try {\n        body = await response.json();\n      } catch {\n        throw new NotificationError(\"unexpected_response\", response.status, requestId);\n      }\n      return readDelivery(body, response.status, requestId);\n    },\n  };\n}\n\nfunction readDelivery(body: unknown, status: number, requestId: string | null): NoticeDelivery {\n  const data = isRecord(body) ? body[\"data\"] : undefined;\n  if (!isRecord(data)) throw new NotificationError(\"unexpected_response\", status, requestId);\n  const rows = <K extends string>(value: unknown, keys: readonly K[]): Record<K, string>[] => {\n    if (!Array.isArray(value)) throw new NotificationError(\"unexpected_response\", status, requestId);\n    return value.map((row) => {\n      if (!isRecord(row) || keys.some((key) => typeof row[key] !== \"string\")) {\n        throw new NotificationError(\"unexpected_response\", status, requestId);\n      }\n      return Object.fromEntries(keys.map((key) => [key, row[key] as string])) as Record<K, string>;\n    });\n  };\n  return {\n    created: rows(data[\"created\"], [\"id\", \"user_id\"]),\n    updated: rows(data[\"updated\"], [\"id\", \"user_id\"]),\n    skipped: rows(data[\"skipped\"], [\"user_id\", \"reason\"]),\n  };\n}\n\n/* ------------------------------------------------------------------------------------------------\n * Receive a press\n * --------------------------------------------------------------------------------------------- */\n\n/**\n * The service's answer to a press. `done` and `already_done` SETTLE the notice: Platform remembers\n * it and replays it on the next press without calling again — answer `already_done` only when the\n * effect is confirmed.\n */\nexport type NoticeActionState = \"done\" | \"already_done\" | \"denied\" | \"invalid\";\n\nexport interface NoticeActionResult {\n  readonly state: NoticeActionState;\n  /** One short line for the person, in the press's locale (Platform shows at most 500 characters). */\n  readonly message?: string | null;\n}\n\n/** One press, after the token was verified as Platform's notice-action token for a person. */\nexport interface NoticeAction {\n  /** Who pressed (`sub`) and in which organization (`organization_context_id`, the console id) — from the token, never the body. */\n  readonly principal: { readonly subject: string; readonly organization: string; readonly clientId: string; readonly scopes: readonly string[] };\n  readonly sourceRef: string;\n  /** The button id. */\n  readonly action: string;\n  /** Null when none was written. */\n  readonly reason: string | null;\n  /** The language to answer `message` in. */\n  readonly locale: NoticeLocale | null;\n  readonly noticeId: string | null;\n}\n\n/**\n * Platform decided NOTHING: it checked only that the person may still open the service and that the\n * notice offered this button. The handler, as `press.principal` and under the service's own rules,\n * finds the subject by `sourceRef` WITHIN `press.principal.organization`, answers `invalid` for an\n * action it does not offer, re-checks the person's right (`denied`), and makes the change\n * atomically. A thrown error is a 500, which the person sees as a failure; nothing is settled.\n */\nexport type NoticeActionHandler = (press: NoticeAction) => NoticeActionResult | Promise<NoticeActionResult>;\n\nexport const NOTICE_ACTIONS_PATH = \"/api/platform/v1/notice-actions\";\n\nexport interface NoticeActionOptions {\n  issuer: string;\n  /** Your instance slug — the token's `aud`. */\n  audience: string;\n  handler: NoticeActionHandler;\n  /** Default `platform-notice-actions`. */\n  clientId?: string;\n  /** Default `notices.actions:execute`. */\n  scope?: string;\n  /** Headers, deadline and fetch for discovery and JWKS. */\n  http?: HttpOptions;\n}\n\n/**\n * Answers Platform's `POST {base_url}/api/platform/v1/notice-actions` (Fetch API: Workers, Node 18+;\n * Hono: `app.post(NOTICE_ACTIONS_PATH, (c) => handleNoticeAction(c.req.raw, options))`).\n *\n * The token is verified like php-sdk's `AuthenticateResource` does (RS256, `typ` at+jwt, exact\n * issuer from discovery, `aud`, `exp`; else 401) — not with {@link verifyAccessToken}, because\n * Platform mints this token without `organization_id`. Then it must be a PERSON's (`prn` user)\n * from `clientId` carrying `scope`, else `403 {\"error\":\"forbidden\"}`; a malformed body is\n * `422 {\"state\":\"invalid\"}`. The handler's answer is `{state, message?}`: 200, or 422 for `invalid`.\n */\nexport async function handleNoticeAction(request: Request, options: NoticeActionOptions): Promise<Response> {\n  if (request.method !== \"POST\") return json({ error: \"method_not_allowed\" }, 405, { Allow: \"POST\" });\n  const match = /^Bearer ([A-Za-z0-9._~-]+)$/i.exec(request.headers.get(\"Authorization\") ?? \"\");\n  if (!match) return json({ error: \"invalid_token\", error_description: \"A Bearer token is required.\" }, 401, { \"WWW-Authenticate\": \"Bearer\" });\n\n  let claims: Record<string, unknown>;\n  try {\n    const { metadata, jwks } = await loadIssuer(options.issuer, options.http);\n    ({ payload: claims } = await jwtVerify(match[1]!, jwks, {\n      issuer: metadata.issuer,\n      audience: options.audience,\n      algorithms: [\"RS256\"],\n      typ: \"at+jwt\",\n      requiredClaims: [\"sub\", \"exp\", \"jti\"],\n      // php-sdk TokenProfile leeway.\n      clockTolerance: 30,\n    }));\n  } catch {\n    return json({ error: \"invalid_token\" }, 401, { \"WWW-Authenticate\": 'Bearer error=\"invalid_token\"' });\n  }\n  const subject = claims[\"sub\"];\n  const organization = claims[\"organization_context_id\"];\n  if (typeof subject !== \"string\" || subject === \"\" || typeof organization !== \"string\" || organization === \"\") {\n    return json({ error: \"invalid_token\" }, 401, { \"WWW-Authenticate\": 'Bearer error=\"invalid_token\"' });\n  }\n  const scopes = typeof claims[\"scope\"] === \"string\" ? claims[\"scope\"].split(\" \").filter(Boolean) : [];\n  const clientId = typeof claims[\"client_id\"] === \"string\" ? claims[\"client_id\"] : \"\";\n  if (claims[\"prn\"] !== \"user\" || clientId !== (options.clientId ?? \"platform-notice-actions\") || !scopes.includes(options.scope ?? \"notices.actions:execute\")) {\n    return json({ error: \"forbidden\" }, 403);\n  }\n\n  let body: unknown;\n  try {\n    body = await request.json();\n  } catch {\n    body = null;\n  }\n  const press = readPress(body, { subject, organization, clientId, scopes: Object.freeze(scopes) });\n  if (press === null) return json({ state: \"invalid\" }, 422);\n\n  const result = await options.handler(press);\n  return json(\n    { state: result.state, ...(typeof result.message === \"string\" && result.message !== \"\" ? { message: result.message } : {}) },\n    result.state === \"invalid\" ? 422 : 200,\n  );\n}\n\nfunction readPress(body: unknown, principal: NoticeAction[\"principal\"]): NoticeAction | null {\n  if (!isRecord(body)) return null;\n  const sourceRef = body[\"source_ref\"];\n  const action = body[\"action\"];\n  const reason = body[\"reason\"] ?? null;\n  const locale = body[\"locale\"] ?? null;\n  const noticeId = body[\"notice_id\"] ?? null;\n  const valid =\n    typeof sourceRef === \"string\" && !blank(sourceRef) && length(sourceRef) <= LIMITS.sourceRef &&\n    typeof action === \"string\" && ACTION_ID_PATTERN.test(action) &&\n    (reason === null || (typeof reason === \"string\" && length(reason) <= LIMITS.reason)) &&\n    (locale === null || (LOCALES as readonly unknown[]).includes(locale)) &&\n    (noticeId === null || (typeof noticeId === \"string\" && length(noticeId) <= 64));\n  if (!valid) return null;\n  return Object.freeze({\n    principal: Object.freeze(principal),\n    sourceRef: sourceRef as string,\n    action: action as string,\n    reason: typeof reason === \"string\" && !blank(reason) ? reason : null,\n    locale: locale as NoticeLocale | null,\n    noticeId: typeof noticeId === \"string\" && noticeId !== \"\" ? noticeId : null,\n  });\n}\n\nfunction json(body: unknown, status: number, headers: Record<string, string> = {}): Response {\n  return new Response(JSON.stringify(body), { status, headers: { \"Content-Type\": \"application/json\", ...headers } });\n}\n"],"mappings":";;;;;;;AAgBA,SAAS,iBAAiB;AAkDnB,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACnC;AAAA,EACT,YAAY,OAAe,QAAgB;AACzC,UAAM,0BAA0B,KAAK,OAAO,MAAM,GAAG;AACrD,SAAK,OAAO;AACZ,SAAK,QAAQ;AAAA,EACf;AACF;AAEA,IAAM,UAAmC,CAAC,MAAM,MAAM,IAAI;AAC1D,IAAM,aAAwC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,SAAuC,CAAC,WAAW,WAAW,QAAQ;AAC5E,IAAM,UAAyC,CAAC,QAAQ,YAAY,UAAU;AAC9E,IAAM,OAAO,CAAC,cAAc,YAAY,cAAc,cAAc,SAAS,QAAQ,QAAQ,WAAW,WAAW,iBAAiB;AACpI,IAAM,eAAe;AACrB,IAAM,oBAAoB;AAC1B,IAAM,SAAS;AAAA,EACb,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AAAA,EACX,WAAW;AAAA,EACX,OAAO;AAAA,EACP,MAAM;AAAA,EACN,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AACV;AAGA,SAAS,OAAO,OAAuB;AACrC,SAAO,CAAC,GAAG,KAAK,EAAE;AACpB;AAGA,SAAS,MAAM,OAAwB;AACrC,SAAO,MAAM,QAAQ,wCAAwC,EAAE,MAAM;AACvE;AAEA,SAAS,eAAe,OAAgB,OAAe,KAAqB;AAC1E,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAG,OAAM,IAAI,mBAAmB,OAAO,aAAa;AAChG,MAAI,OAAO,KAAK,IAAI,IAAK,OAAM,IAAI,mBAAmB,OAAO,kBAAkB,GAAG,aAAa;AAC/F,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGA,SAAS,SAAS,OAAgB,OAA8B;AAC9D,MAAI,CAAC,SAAS,KAAK,EAAG,OAAM,IAAI,mBAAmB,OAAO,sBAAsB;AAChF,aAAW,UAAU,OAAO,KAAK,KAAK,GAAG;AACvC,QAAI,CAAE,QAA8B,SAAS,MAAM,EAAG,OAAM,IAAI,mBAAmB,GAAG,KAAK,IAAI,MAAM,IAAI,iCAAiC;AAAA,EAC5I;AACA,aAAW,UAAU,SAAS;AAC5B,UAAM,OAAO,MAAM,MAAM;AACzB,QAAI,SAAS,UAAa,SAAS,QAAQ,OAAO,SAAS,SAAU,OAAM,IAAI,mBAAmB,GAAG,KAAK,IAAI,MAAM,IAAI,kBAAkB;AAAA,EAC5I;AACA,MAAI,OAAO,MAAM,IAAI,MAAM,SAAU,OAAM,IAAI,mBAAmB,GAAG,KAAK,OAAO,aAAa;AAC9F,SAAO,EAAE,IAAI,MAAM,IAAI,GAAG,IAAK,MAAM,IAAI,KAAmC,MAAM,IAAK,MAAM,IAAI,KAAmC,KAAK;AAC3I;AAGA,SAAS,YAAY,MAA6E;AAChG,QAAM,MAA8D,EAAE,IAAI,KAAK,GAAG;AAClF,MAAI,OAAO,KAAK,OAAO,YAAY,KAAK,OAAO,GAAI,KAAI,KAAK,KAAK;AACjE,MAAI,OAAO,KAAK,OAAO,YAAY,KAAK,OAAO,GAAI,KAAI,KAAK,KAAK;AACjE,SAAO;AACT;AAEA,SAAS,WAAW,MAAqB,OAAe,KAAmB;AACzE,MAAI,OAAO,KAAK,OAAO,YAAY,MAAM,KAAK,EAAE,EAAG,OAAM,IAAI,mBAAmB,GAAG,KAAK,OAAO,aAAa;AAC5G,aAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,YAAY,IAAI,CAAC,GAAG;AAC/D,QAAI,OAAO,KAAK,IAAI,IAAK,OAAM,IAAI,mBAAmB,GAAG,KAAK,IAAI,MAAM,IAAI,kBAAkB,GAAG,aAAa;AAAA,EAChH;AACF;AAGA,SAAS,gBAAgB,OAAwB;AAC/C,MAAI,CAAC,iBAAiB,KAAK,KAAK,EAAG,QAAO;AAC1C,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,YAAQ,IAAI,aAAa,WAAW,IAAI,aAAa,aAAa,IAAI,aAAa;AAAA,EACrF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqCO,IAAM,SAAN,MAAM,QAA+B;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAED,YAAY,QAAsB;AACxC,SAAK,aAAa,OAAO,OAAO,CAAC,GAAG,OAAO,UAAU,CAAC;AACtD,SAAK,YAAY,OAAO;AACxB,SAAK,YAAY,OAAO;AACxB,SAAK,QAAQ,OAAO,OAAO,EAAE,GAAG,OAAO,MAAM,CAAC;AAC9C,SAAK,OAAO,OAAO,OAAO,EAAE,GAAG,OAAO,KAAK,CAAC;AAC5C,SAAK,WAAW,OAAO;AACvB,SAAK,OAAO,OAAO;AACnB,SAAK,UAAU,OAAO,YAAY,OAAO,OAAO,OAAO,OAAO,EAAE,GAAG,OAAO,QAAQ,CAAC;AACnF,SAAK,UAAU,OAAO,OAAO,OAAO,QAAQ,IAAI,CAAC,MAAM,OAAO,OAAO,EAAE,GAAG,GAAG,OAAO,OAAO,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACrH,SAAK,iBAAiB,OAAO;AAC7B,SAAK,YAAY;AACjB,WAAO,OAAO,IAAI;AAAA,EACpB;AAAA;AAAA,EAGA,OAAO,OAAO,OAMH;AACT,WAAO,IAAI,QAAO,EAAE,GAAG,OAAO,UAAU,WAAW,MAAM,MAAM,SAAS,MAAM,SAAS,CAAC,GAAG,gBAAgB,KAAK,CAAC;AAAA,EACnH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,YAAY,SAA0B;AAC3C,QAAI,CAAC,SAAS,OAAO,EAAG,OAAM,IAAI,mBAAmB,cAAc,uBAAuB;AAC1F,eAAW,OAAO,OAAO,KAAK,OAAO,GAAG;AACtC,UAAI,CAAC,KAAK,SAAS,GAAG,EAAG,OAAM,IAAI,mBAAmB,KAAK,4BAA4B;AAAA,IACzF;AACA,UAAM,aAAa,QAAQ,YAAY;AACvC,QAAI,CAAC,MAAM,QAAQ,UAAU,EAAG,OAAM,IAAI,mBAAmB,cAAc,qCAAqC;AAChH,eAAW,QAAQ,CAAC,WAAW,UAAU;AACvC,UAAI,OAAO,cAAc,SAAU,OAAM,IAAI,mBAAmB,cAAc,KAAK,IAAI,kBAAkB;AAAA,IAC3G,CAAC;AACD,UAAM,UAAU,QAAQ,SAAS,KAAK,CAAC;AACvC,QAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,OAAM,IAAI,mBAAmB,WAAW,gBAAgB;AACrF,UAAM,OAAO,QAAQ,MAAM,KAAK;AAChC,QAAI,SAAS,QAAQ,OAAO,SAAS,SAAU,OAAM,IAAI,mBAAmB,QAAQ,kBAAkB;AACtG,UAAM,iBAAiB,QAAQ,iBAAiB,KAAK;AACrD,QAAI,mBAAmB,QAAQ,OAAO,mBAAmB,SAAU,OAAM,IAAI,mBAAmB,mBAAmB,kBAAkB;AACrI,UAAM,YAAY,QAAQ,YAAY;AACtC,QAAI,OAAO,cAAc,SAAU,OAAM,IAAI,mBAAmB,cAAc,aAAa;AAC3F,UAAM,YAAY,QAAQ,YAAY;AACtC,QAAI,OAAO,cAAc,SAAU,OAAM,IAAI,mBAAmB,cAAc,aAAa;AAC3F,UAAM,QAAQ,SAAS,QAAQ,OAAO,GAAG,OAAO;AAChD,UAAM,OAAO,SAAS,QAAQ,MAAM,GAAG,MAAM;AAC7C,UAAM,WAAW,QAAQ,UAAU;AACnC,QAAI,OAAO,aAAa,YAAY,CAAE,WAAiC,SAAS,QAAQ,GAAG;AACzF,YAAM,IAAI,mBAAmB,YAAY,mDAAmD;AAAA,IAC9F;AACA,UAAM,UAAU,QAAQ,SAAS,MAAM,UAAa,QAAQ,SAAS,MAAM,OAAO,OAAO,SAAS,QAAQ,SAAS,GAAG,SAAS;AAE/H,WAAO,IAAI,QAAO;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI,CAAC,QAAQ,UAAU,WAAW,QAAQ,WAAW,KAAK,EAAE,CAAC;AAAA,MAC9E;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,UAAkC;AAC7C,WAAO,IAAI,QAAO,EAAE,GAAG,MAAM,SAAS,CAAC;AAAA,EACzC;AAAA;AAAA,EAGA,SAAS,MAA6B;AACpC,WAAO,IAAI,QAAO,EAAE,GAAG,MAAM,KAAK,CAAC;AAAA,EACrC;AAAA;AAAA,EAGA,YAAY,SAAuC;AACjD,WAAO,IAAI,QAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,EACxC;AAAA;AAAA,EAGA,eAAe,SAAuC;AACpD,WAAO,IAAI,QAAO,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,EACxC;AAAA;AAAA,EAGA,gBAAgB,uBAA8C;AAC5D,WAAO,IAAI,QAAO,EAAE,GAAG,MAAM,gBAAgB,sBAAsB,CAAC;AAAA,EACtE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAA2B;AACzB,UAAM,UAAyB;AAAA,MAC7B,YAAY,CAAC,GAAG,KAAK,UAAU;AAAA,MAC/B,UAAU,KAAK;AAAA,MACf,YAAY,KAAK;AAAA,MACjB,YAAY,KAAK;AAAA,MACjB,OAAO,YAAY,KAAK,KAAK;AAAA,MAC7B,MAAM,YAAY,KAAK,IAAI;AAAA,IAC7B;AACA,QAAI,KAAK,SAAS,KAAM,SAAQ,OAAO,KAAK;AAC5C,QAAI,KAAK,YAAY,KAAM,SAAQ,UAAU,YAAY,KAAK,OAAO;AACrE,QAAI,KAAK,QAAQ,SAAS,GAAG;AAC3B,cAAQ,UAAU,KAAK,QAAQ,IAAI,CAAC,YAAY;AAAA,QAC9C,IAAI,OAAO;AAAA,QACX,OAAO,YAAY,OAAO,KAAK;AAAA,QAC/B,OAAO,OAAO,SAAS;AAAA,QACvB,QAAQ,OAAO,UAAU;AAAA,MAC3B,EAAE;AAAA,IACJ;AACA,QAAI,KAAK,mBAAmB,KAAM,SAAQ,kBAAkB,KAAK;AACjE,WAAO;AAAA,EACT;AAAA,EAEQ,cAAoB;AAC1B,QAAI,KAAK,WAAW,WAAW,KAAK,KAAK,WAAW,SAAS,OAAO,YAAY;AAC9E,YAAM,IAAI,mBAAmB,cAAc,kBAAkB,OAAO,UAAU,oBAAoB;AAAA,IACpG;AACA,SAAK,WAAW,QAAQ,CAAC,WAAW,UAAU,eAAe,WAAW,cAAc,KAAK,IAAI,OAAO,SAAS,CAAC;AAChH,mBAAe,KAAK,WAAW,cAAc,OAAO,SAAS;AAC7D,mBAAe,KAAK,WAAW,cAAc,OAAO,SAAS;AAC7D,QAAI,CAAC,gBAAgB,KAAK,SAAS,GAAG;AACpC,YAAM,IAAI,mBAAmB,cAAc,4DAA4D;AAAA,IACzG;AACA,eAAW,KAAK,OAAO,SAAS,OAAO,KAAK;AAC5C,eAAW,KAAK,MAAM,QAAQ,OAAO,IAAI;AACzC,QAAI,CAAE,WAAiC,SAAS,KAAK,QAAQ,GAAG;AAC9D,YAAM,IAAI,mBAAmB,YAAY,mDAAmD;AAAA,IAC9F;AACA,QAAI,KAAK,SAAS,QAAQ,CAAC,aAAa,KAAK,KAAK,IAAI,EAAG,OAAM,IAAI,mBAAmB,QAAQ,qCAAqC;AACnI,QAAI,KAAK,YAAY,KAAM,YAAW,KAAK,SAAS,WAAW,OAAO,OAAO;AAC7E,QAAI,KAAK,QAAQ,SAAS,OAAO,QAAS,OAAM,IAAI,mBAAmB,WAAW,WAAW,OAAO,OAAO,gBAAgB;AAC3H,UAAM,OAAO,oBAAI,IAAY;AAC7B,SAAK,QAAQ,QAAQ,CAAC,QAAQ,UAAU;AACtC,UAAI,OAAO,OAAO,OAAO,YAAY,CAAC,kBAAkB,KAAK,OAAO,EAAE,GAAG;AACvE,cAAM,IAAI,mBAAmB,WAAW,KAAK,OAAO,oCAAoC;AAAA,MAC1F;AACA,iBAAW,OAAO,OAAO,WAAW,KAAK,UAAU,OAAO,KAAK;AAC/D,UAAI,OAAO,UAAU,UAAa,CAAC,OAAO,SAAS,OAAO,KAAK,EAAG,OAAM,IAAI,mBAAmB,WAAW,KAAK,UAAU,oCAAoC;AAC7J,UAAI,OAAO,WAAW,UAAa,CAAC,QAAQ,SAAS,OAAO,MAAM,EAAG,OAAM,IAAI,mBAAmB,WAAW,KAAK,WAAW,oCAAoC;AACjK,UAAI,KAAK,IAAI,OAAO,EAAE,EAAG,OAAM,IAAI,mBAAmB,WAAW,KAAK,OAAO,6BAA6B;AAC1G,WAAK,IAAI,OAAO,EAAE;AAAA,IACpB,CAAC;AACD,QAAI,KAAK,mBAAmB,KAAM,gBAAe,KAAK,gBAAgB,mBAAmB,OAAO,cAAc;AAAA,EAChH;AACF;AAEA,SAAS,WAAW,OAAgB,OAAmC;AACrE,MAAI,CAAC,SAAS,KAAK,EAAG,OAAM,IAAI,mBAAmB,OAAO,mBAAmB;AAC7E,aAAW,OAAO,OAAO,KAAK,KAAK,GAAG;AACpC,QAAI,CAAC,CAAC,MAAM,SAAS,SAAS,QAAQ,EAAE,SAAS,GAAG,EAAG,OAAM,IAAI,mBAAmB,OAAO,8CAA8C;AAAA,EAC3I;AACA,QAAM,QAAQ,SAAS,MAAM,OAAO,GAAG,GAAG,KAAK,QAAQ;AACvD,QAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,MAAI,OAAO,UAAU,YAAY,CAAE,OAA6B,SAAS,KAAK,EAAG,OAAM,IAAI,mBAAmB,GAAG,KAAK,UAAU,oCAAoC;AACpK,QAAM,SAAS,MAAM,QAAQ,KAAK;AAClC,MAAI,OAAO,WAAW,YAAY,CAAE,QAA8B,SAAS,MAAM,EAAG,OAAM,IAAI,mBAAmB,GAAG,KAAK,WAAW,oCAAoC;AACxK,SAAO;AAAA,IACL,IAAI,OAAO,MAAM,IAAI,MAAM,WAAW,MAAM,IAAI,IAAI;AAAA,IACpD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AA+BO,IAAM,oBAAN,cAAgC,cAAc;AAAA,EAC1C;AAAA,EACA;AAAA,EAET,YAAY,QAAmC,SAAS,GAAG,YAA2B,MAAM,SAA+B;AACzH,UAAM,QAAQ,IAAI,6BAA6B,MAAM,IAAI,YAAY,yBAAyB,SAAS,MAAM,EAAE,EAAE;AACjH,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,QAAI,SAAS,UAAU,OAAW,CAAC,KAA6B,QAAQ,QAAQ;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,YAAqB;AACvB,WAAO,KAAK,WAAW,kBAAkB,KAAK,WAAW;AAAA,EAC3D;AACF;AA6BO,IAAM,qBAAqB;AAM3B,SAAS,yBAAyB,QAAsD;AAC7F,QAAM,aAAa,OAAO,WAAW,MAAM,OAAO,gBAAgB,MAAM,OAAO,kBAAkB;AAEjG,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,QAAQ,UAAU,CAAC,GAAG;AAC/B,UAAI,CAAC,WAAY,OAAM,IAAI,kBAAkB,gBAAgB;AAE7D,UAAI,QAAQ,mBAAmB,WAAc,QAAQ,mBAAmB,MAAM,OAAO,QAAQ,cAAc,IAAI,MAAM;AACnH,cAAM,IAAI,WAAW,4CAA4C;AAAA,MACnE;AACA,YAAM,UAAkC;AAAA,QACtC,QAAQ;AAAA,QACR,gBAAgB;AAAA,QAChB,kBAAkB,OAAO;AAAA,QACzB,oBAAoB,OAAO;AAAA,MAC7B;AACA,UAAI,QAAQ,mBAAmB,OAAW,SAAQ,iBAAiB,IAAI,QAAQ;AAE/E,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM;AAAA,UACf,IAAI,IAAI,oBAAoB,OAAO,MAAM;AAAA,UACzC,EAAE,QAAQ,QAAQ,SAAS,MAAM,KAAK,UAAU,OAAO,UAAU,CAAC,GAAG,UAAU,SAAS;AAAA,UACxF,OAAO;AAAA,QACT;AAAA,MACF,SAAS,OAAO;AACd,cAAM,IAAI,kBAAkB,eAAe,GAAG,MAAM,EAAE,OAAO,MAAM,CAAC;AAAA,MACtE;AACA,YAAM,YAAY,SAAS,QAAQ,IAAI,cAAc;AAErD,UAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AACnD,cAAM,OAAO,SAAS,QAAQ,IAAI,cAAc;AAChD,cAAM,SAAS,SAAS;AACxB,cAAM,IAAI;AAAA,UACR,WAAW,MACP,oBACA,SAAS,4BACP,4BACA,WAAW,MACT,cACA,WAAW,MACT,yBACA,WAAW,MACT,YACA,WAAW,MACT,iBACA,UAAU,MACR,gBACA;AAAA,UAChB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,UAAI;AACJ,UAAI;AACF,eAAO,MAAM,SAAS,KAAK;AAAA,MAC7B,QAAQ;AACN,cAAM,IAAI,kBAAkB,uBAAuB,SAAS,QAAQ,SAAS;AAAA,MAC/E;AACA,aAAO,aAAa,MAAM,SAAS,QAAQ,SAAS;AAAA,IACtD;AAAA,EACF;AACF;AAEA,SAAS,aAAa,MAAe,QAAgB,WAA0C;AAC7F,QAAM,OAAO,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI;AAC7C,MAAI,CAAC,SAAS,IAAI,EAAG,OAAM,IAAI,kBAAkB,uBAAuB,QAAQ,SAAS;AACzF,QAAM,OAAO,CAAmB,OAAgB,SAA4C;AAC1F,QAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,kBAAkB,uBAAuB,QAAQ,SAAS;AAC/F,WAAO,MAAM,IAAI,CAAC,QAAQ;AACxB,UAAI,CAAC,SAAS,GAAG,KAAK,KAAK,KAAK,CAAC,QAAQ,OAAO,IAAI,GAAG,MAAM,QAAQ,GAAG;AACtE,cAAM,IAAI,kBAAkB,uBAAuB,QAAQ,SAAS;AAAA,MACtE;AACA,aAAO,OAAO,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,GAAG,CAAW,CAAC,CAAC;AAAA,IACxE,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,SAAS,KAAK,KAAK,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC;AAAA,IAChD,SAAS,KAAK,KAAK,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC;AAAA,IAChD,SAAS,KAAK,KAAK,SAAS,GAAG,CAAC,WAAW,QAAQ,CAAC;AAAA,EACtD;AACF;AA0CO,IAAM,sBAAsB;AAyBnC,eAAsB,mBAAmB,SAAkB,SAAiD;AAC1G,MAAI,QAAQ,WAAW,OAAQ,QAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,KAAK,EAAE,OAAO,OAAO,CAAC;AAClG,QAAM,QAAQ,+BAA+B,KAAK,QAAQ,QAAQ,IAAI,eAAe,KAAK,EAAE;AAC5F,MAAI,CAAC,MAAO,QAAO,KAAK,EAAE,OAAO,iBAAiB,mBAAmB,8BAA8B,GAAG,KAAK,EAAE,oBAAoB,SAAS,CAAC;AAE3I,MAAI;AACJ,MAAI;AACF,UAAM,EAAE,UAAU,KAAK,IAAI,MAAM,WAAW,QAAQ,QAAQ,QAAQ,IAAI;AACxE,KAAC,EAAE,SAAS,OAAO,IAAI,MAAM,UAAU,MAAM,CAAC,GAAI,MAAM;AAAA,MACtD,QAAQ,SAAS;AAAA,MACjB,UAAU,QAAQ;AAAA,MAClB,YAAY,CAAC,OAAO;AAAA,MACpB,KAAK;AAAA,MACL,gBAAgB,CAAC,OAAO,OAAO,KAAK;AAAA;AAAA,MAEpC,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH,QAAQ;AACN,WAAO,KAAK,EAAE,OAAO,gBAAgB,GAAG,KAAK,EAAE,oBAAoB,+BAA+B,CAAC;AAAA,EACrG;AACA,QAAM,UAAU,OAAO,KAAK;AAC5B,QAAM,eAAe,OAAO,yBAAyB;AACrD,MAAI,OAAO,YAAY,YAAY,YAAY,MAAM,OAAO,iBAAiB,YAAY,iBAAiB,IAAI;AAC5G,WAAO,KAAK,EAAE,OAAO,gBAAgB,GAAG,KAAK,EAAE,oBAAoB,+BAA+B,CAAC;AAAA,EACrG;AACA,QAAM,SAAS,OAAO,OAAO,OAAO,MAAM,WAAW,OAAO,OAAO,EAAE,MAAM,GAAG,EAAE,OAAO,OAAO,IAAI,CAAC;AACnG,QAAM,WAAW,OAAO,OAAO,WAAW,MAAM,WAAW,OAAO,WAAW,IAAI;AACjF,MAAI,OAAO,KAAK,MAAM,UAAU,cAAc,QAAQ,YAAY,8BAA8B,CAAC,OAAO,SAAS,QAAQ,SAAS,yBAAyB,GAAG;AAC5J,WAAO,KAAK,EAAE,OAAO,YAAY,GAAG,GAAG;AAAA,EACzC;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,UAAU,MAAM,EAAE,SAAS,cAAc,UAAU,QAAQ,OAAO,OAAO,MAAM,EAAE,CAAC;AAChG,MAAI,UAAU,KAAM,QAAO,KAAK,EAAE,OAAO,UAAU,GAAG,GAAG;AAEzD,QAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAC1C,SAAO;AAAA,IACL,EAAE,OAAO,OAAO,OAAO,GAAI,OAAO,OAAO,YAAY,YAAY,OAAO,YAAY,KAAK,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC,EAAG;AAAA,IAC3H,OAAO,UAAU,YAAY,MAAM;AAAA,EACrC;AACF;AAEA,SAAS,UAAU,MAAe,WAA2D;AAC3F,MAAI,CAAC,SAAS,IAAI,EAAG,QAAO;AAC5B,QAAM,YAAY,KAAK,YAAY;AACnC,QAAM,SAAS,KAAK,QAAQ;AAC5B,QAAM,SAAS,KAAK,QAAQ,KAAK;AACjC,QAAM,SAAS,KAAK,QAAQ,KAAK;AACjC,QAAM,WAAW,KAAK,WAAW,KAAK;AACtC,QAAM,QACJ,OAAO,cAAc,YAAY,CAAC,MAAM,SAAS,KAAK,OAAO,SAAS,KAAK,OAAO,aAClF,OAAO,WAAW,YAAY,kBAAkB,KAAK,MAAM,MAC1D,WAAW,QAAS,OAAO,WAAW,YAAY,OAAO,MAAM,KAAK,OAAO,YAC3E,WAAW,QAAS,QAA+B,SAAS,MAAM,OAClE,aAAa,QAAS,OAAO,aAAa,YAAY,OAAO,QAAQ,KAAK;AAC7E,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,OAAO,OAAO;AAAA,IACnB,WAAW,OAAO,OAAO,SAAS;AAAA,IAClC;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,WAAW,YAAY,CAAC,MAAM,MAAM,IAAI,SAAS;AAAA,IAChE;AAAA,IACA,UAAU,OAAO,aAAa,YAAY,aAAa,KAAK,WAAW;AAAA,EACzE,CAAC;AACH;AAEA,SAAS,KAAK,MAAe,QAAgB,UAAkC,CAAC,GAAa;AAC3F,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG,EAAE,QAAQ,SAAS,EAAE,gBAAgB,oBAAoB,GAAG,QAAQ,EAAE,CAAC;AACnH;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@godxjp/server-sdk",
-  "version": "0.12.0",
+  "version": "0.13.1",
   "description": "GoDX server-side SDK (Workers/Node) — holds service credentials; for browser code use @godxjp/web-sdk. Counterpart of godx-jp/php-sdk.",
   "license": "Apache-2.0",
   "repository": {
@@ -63,6 +63,13 @@
       "browser": "./dist/browser-guard.js",
       "default": "./dist/producer.js"
     },
+    "./notifications": {
+      "types": "./dist/notifications.d.ts",
+      "workerd": "./dist/notifications.js",
+      "worker": "./dist/notifications.js",
+      "browser": "./dist/browser-guard.js",
+      "default": "./dist/notifications.js"
+    },
     "./logger": {
       "types": "./dist/logger.d.ts",
       "workerd": "./dist/logger.js",