@lunora/notify 1.0.0-alpha.29 → 1.0.0-alpha.30

package/README.md

@@ -91,7 +91,26 @@ Move a large broadcast off the request path with `@lunora/queue`:
 await enqueuePushBroadcast(ctx.queues.push, { payload: { title: "New drop", body: "…" } });
 
 // consumer (lunora/queues.ts)
-for (const message of batch.messages) await runPushBroadcastJob(ctx.push, message.body);
+for (const message of batch.messages) {
+    const { failedIds, nextCursor } = await runPushBroadcastPage(ctx.push, message.body);
+
+    // One message = ONE bounded page. Discarding `nextCursor` delivers only the
+    // first page (default 250 devices) and reports success for the whole audience.
+    if (nextCursor !== undefined) {
+        await enqueuePushBroadcast(ctx.queues.push, {
+            payload: message.body.payload,
+            filter: { ...message.body.filter, after: nextCursor },
+        });
+    }
+
+    // Redeliver ONLY the recipients that failed — a retry of the whole page would
+    // re-POST everyone it already reached.
+    if (failedIds.length > 0) {
+        await enqueuePushBroadcast(ctx.queues.push, { payload: message.body.payload, retryIds: failedIds });
+    }
+
+    message.ack();
+}
 ```
 
 ## Subscription storage

package/dist/index.d.mts

@@ -247,7 +247,7 @@ interface LunoraPush {
    * materialized wholesale in the isolate — see `CreateNotifyOptions`'s
    * `broadcastPageSize`. This call still processes the WHOLE matched
    * audience in one request/queue message; use {@link LunoraPush.broadcastPage}
-   * directly (as `runPushBroadcastJob` does) to bound a single queue message
+   * directly (as `runPushBroadcastPage` does) to bound a single queue message
    * to one page.
    */
   broadcast: (payload: PushContent, filter?: SubscriptionFilter) => Promise<BroadcastResult>;
@@ -258,7 +258,7 @@ interface LunoraPush {
    * {@link LunoraPush.broadcast} (retry/circuit-breaker, gone-pruning) but
    * scoped to a single page; returns the page's own {@link BroadcastResult}
    * plus a `nextCursor` to fetch the next page (`undefined` when done).
-   * Backs `runPushBroadcastJob` so one queue message does bounded work
+   * Backs `runPushBroadcastPage` so one queue message does bounded work
    * regardless of audience size — most app code should call
    * {@link LunoraPush.broadcast} instead.
    */
@@ -419,7 +419,7 @@ interface CreateNotifyOptions {
    * Each page is fetched, delivered, and counted independently before the
    * next page's store round trip, so a huge audience is never materialized
    * wholesale in the isolate. Also the per-message bound `push.broadcastPage`
-   * (and so `runPushBroadcastJob`) uses. A test/tuning seam — most apps never
+   * (and so `runPushBroadcastPage`) uses. A test/tuning seam — most apps never
    * need to set this.
    */
   broadcastPageSize?: number;
@@ -505,23 +505,45 @@ declare const buildEngine: (resolved: ResolvedProviders) => Notification;
  * fan-out. Shaped to travel through a `@lunora/queue` producer/consumer without
  * `@lunora/notify` depending on `@lunora/queue` (the seam stays structural).
  * `filter.after`, when set, resumes a broadcast partway through (see
- * {@link runPushBroadcastJob}'s continuation semantics).
+ * {@link runPushBroadcastPage}'s continuation semantics).
  */
 interface PushBroadcastJob {
   /** Subscription filter (which devices/users to target; `filter.after` resumes a paged broadcast). */
   filter?: SubscriptionFilter;
   /** The push payload to deliver (the `to` target is derived per subscription). */
   payload: PushContent;
+  /**
+   * Redeliver to exactly these subscription ids instead of walking a page —
+   * an earlier page's {@link PushBroadcastPageOutcome.failedIds}. Set by the
+   * consumer when it re-enqueues a page's transient failures; `filter` is
+   * ignored on such a job. See {@link runPushBroadcastPage}.
+   */
+  retryIds?: string[];
   /** Discriminator so a shared queue can multiplex message kinds. */
   type: "lunora.push.broadcast";
 }
+/**
+ * One page's outcome plus the ids that need redelivering.
+ *
+ * The consumer MUST act on BOTH fields: `nextCursor` continues the broadcast and
+ * `failedIds` redelivers the recipients this page missed. Acking a message while
+ * ignoring either silently drops part of the audience.
+ */
+interface PushBroadcastPageOutcome extends BroadcastPageResult {
+  /**
+   * Subscriptions that failed transiently on this run (gone/pruned devices are
+   * NOT here — they are deleted, not retried). Re-enqueue a job carrying these
+   * as `retryIds` to redeliver to just them.
+   */
+  failedIds: string[];
+}
 /** The structural slice of a `@lunora/queue` producer (`ctx.queues.<name>`) used here. */
 interface QueueProducerLike {
   send: (body: PushBroadcastJob) => Promise<void>;
 }
 /**
  * Enqueue a fan-out broadcast for background delivery through a `@lunora/queue`
- * queue instead of blocking the request. Pair with {@link runPushBroadcastJob} in
+ * queue instead of blocking the request. Pair with {@link runPushBroadcastPage} in
  * the queue consumer — see its doc comment for how a large audience continues
  * across MULTIPLE messages (one bounded page per message), not one.
  *
@@ -532,7 +554,7 @@ interface QueueProducerLike {
  * // in lunora/queues.ts consumer:
  * export const push = defineQueue({ async handler(batch, ctx) {
  *     for (const message of batch.messages) {
- *         const { nextCursor } = await runPushBroadcastJob(ctx.push, message.body);
+ *         const { failedIds, nextCursor } = await runPushBroadcastPage(ctx.push, message.body);
  *
  *         if (nextCursor !== undefined) {
  *             // More pages remain — enqueue the continuation. Each message still
@@ -542,6 +564,13 @@ interface QueueProducerLike {
  *                 filter: { ...message.body.filter, after: nextCursor },
  *             });
  *         }
+ *
+ *         if (failedIds.length > 0) {
+ *             // Redeliver ONLY the recipients that failed — never the whole page.
+ *             await enqueuePushBroadcast(ctx.queues.push, { payload: message.body.payload, retryIds: failedIds });
+ *         }
+ *
+ *         message.ack();
  *     }
  * }});
  * ```
@@ -553,37 +582,33 @@ declare const enqueuePushBroadcast: (queue: QueueProducerLike, job: Omit<PushBro
  * reuses the engine's retry + circuit-breaker middleware and prunes gone
  * subscriptions).
  *
- * RETRY / CONTINUATION SEMANTICS (rewritten for plan 222 / NOTIFY-01 — a
- * broadcast job used to process the WHOLE audience in one message, which could
- * exceed Worker CPU/wall limits for a large audience and made a retry re-run
- * everything):
+ * RETRY / CONTINUATION SEMANTICS:
  *
- * - A job now processes exactly ONE bounded page (see `CreateNotifyOptions`'s
+ * - A job processes exactly ONE bounded page (see `CreateNotifyOptions`'s
  * page-size option, default 250, or `job.filter.limit` when smaller),
  * keyset-paginated on the subscription `id` (see `SubscriptionFilter.after`)
  * — so per-message work is bounded regardless of total audience size.
- * - Retry is still gated on `result.failed` — the count of TRANSIENT delivery
- * errors (a provider 5xx / network fault worth another attempt). When at
- * least one recipient in THIS PAGE `failed`, the job is RE-THROWN so the
- * queue does NOT ack it and its normal retry/backoff (and, on exhaustion,
- * dead-letter) applies — to just this page, not the whole broadcast.
- * - A page with zero `failed` resolves and is acked — this includes the
- * all-`pruned` case (every device on the page had unsubscribed:
- * `sent:0`, `failed:0`, `pruned:N`), which is a SUCCESSFUL prune, not a
- * failure, so throwing on it would spuriously retry and pressure the DLQ;
- * and the empty-page case (zero `total`), which has nothing to retry.
- * - The returned `nextCursor` is set when more pages remain. `@lunora/notify`
- * does NOT enqueue the continuation itself — it has no `@lunora/queue`
- * dependency (the seam stays structural) and no reference to the producer
- * that enqueued this message — so the CALLER (the `lunora/queues.ts`
- * consumer) is responsible for re-enqueueing with `filter.after: nextCursor`
- * when present. See the consumer example on {@link enqueuePushBroadcast}.
- * - A retry of a page redelivers only that page's already-delivered recipients
- * on a transient partial failure (a page is not individually idempotent) —
- * the accepted cost of getting the transiently failed ones redelivered, now
- * scoped to one page instead of the whole broadcast.
- */
-declare const runPushBroadcastJob: (push: LunoraPush, job: PushBroadcastJob) => Promise<BroadcastPageResult>;
+ * - A page NEVER throws for a partial failure. Throwing discarded the page's
+ * `nextCursor`, which is the only way the broadcast advances: one device that
+ * fails permanently (a rotated VAPID keypair leaves a stale device answering
+ * `403 VapidPkHashMismatch` forever) would then stall the cursor, re-POST
+ * every already-delivered recipient on each retry, dead-letter, and leave
+ * every LATER page unreached. The page's `nextCursor` and its `failedIds`
+ * both come back instead.
+ * - The CALLER (the `lunora/queues.ts` consumer) re-enqueues: `filter.after:
+ * nextCursor` while more pages remain, and a `retryIds: failedIds` job when
+ * any recipient failed. `@lunora/notify` cannot do it itself — it has no
+ * `@lunora/queue` dependency (the seam stays structural) and no reference to
+ * the producer that enqueued this message. See the consumer example on
+ * {@link enqueuePushBroadcast}.
+ * - A `retryIds` job redelivers to exactly those ids and DOES throw while any
+ * of them still fails, so the queue's backoff/dead-letter bounds it. That
+ * message contains no already-delivered recipient, so nothing is re-sent.
+ * - Gone subscriptions (404/410, FCM `UNREGISTERED`) are pruned by the page and
+ * never appear in `failedIds` — an all-`pruned` page is a success, not a
+ * failure, as is an empty page.
+ */
+declare const runPushBroadcastPage: (push: LunoraPush, job: PushBroadcastJob) => Promise<PushBroadcastPageOutcome>;
 /**
  * The minimal structural slice of Cloudflare's `D1Database` this store uses. A
  * structural type (rather than importing `@cloudflare/workers-types`) keeps the
@@ -702,13 +727,13 @@ export { type BroadcastOutcome, type BroadcastResult, type CreateNotifyOptions,
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.
  * @packageDocumentation
  */
-FCM_ENV_KEYS, type FcmConfigFactory, type LunoraNotify, type LunoraPush, type NotifyConfig, type NotifyDefinition, type NotifyDeliveryStatus, type NotifyEnv, type NotifyLogger, type NotifyMetrics, type NotifySkipReason, type PushBroadcastJob, type PushSubscriptionDevice, type PushSubscriptionsResult, type QueueProducerLike, type RegisterInput, type ResolvedProviders, type RoutingPushOptions, type StoredSubscription, type SubscriptionFilter, type SubscriptionKind, type SubscriptionStatus, type SubscriptionStore,
+FCM_ENV_KEYS, type FcmConfigFactory, type LunoraNotify, type LunoraPush, type NotifyConfig, type NotifyDefinition, type NotifyDeliveryStatus, type NotifyEnv, type NotifyLogger, type NotifyMetrics, type NotifySkipReason, type PushBroadcastJob, type PushBroadcastPageOutcome, type PushSubscriptionDevice, type PushSubscriptionsResult, type QueueProducerLike, type RegisterInput, type ResolvedProviders, type RoutingPushOptions, type StoredSubscription, type SubscriptionFilter, type SubscriptionKind, type SubscriptionStatus, type SubscriptionStore,
 /**
  * `@lunora/notify`
  *
@@ -721,7 +746,7 @@ FCM_ENV_KEYS, type FcmConfigFactory, type LunoraNotify, type LunoraPush, type No
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.
@@ -740,13 +765,13 @@ WEB_PUSH_ENV_KEYS, type WebPushConfigFactory, buildEngine, createNotify, d1Subsc
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.
  * @packageDocumentation
  */
-fcmFromEnv, fcmId, isGoneError, isNotifyDefinition, memorySubscriptionStore, normalizeRegisterInput, routingPushProvider, runPushBroadcastJob, targetOf,
+fcmFromEnv, fcmId, isGoneError, isNotifyDefinition, memorySubscriptionStore, normalizeRegisterInput, routingPushProvider, runPushBroadcastPage, targetOf,
 /**
  * `@lunora/notify`
  *
@@ -759,7 +784,7 @@ fcmFromEnv, fcmId, isGoneError, isNotifyDefinition, memorySubscriptionStore, nor
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.

package/dist/index.d.ts

@@ -247,7 +247,7 @@ interface LunoraPush {
    * materialized wholesale in the isolate — see `CreateNotifyOptions`'s
    * `broadcastPageSize`. This call still processes the WHOLE matched
    * audience in one request/queue message; use {@link LunoraPush.broadcastPage}
-   * directly (as `runPushBroadcastJob` does) to bound a single queue message
+   * directly (as `runPushBroadcastPage` does) to bound a single queue message
    * to one page.
    */
   broadcast: (payload: PushContent, filter?: SubscriptionFilter) => Promise<BroadcastResult>;
@@ -258,7 +258,7 @@ interface LunoraPush {
    * {@link LunoraPush.broadcast} (retry/circuit-breaker, gone-pruning) but
    * scoped to a single page; returns the page's own {@link BroadcastResult}
    * plus a `nextCursor` to fetch the next page (`undefined` when done).
-   * Backs `runPushBroadcastJob` so one queue message does bounded work
+   * Backs `runPushBroadcastPage` so one queue message does bounded work
    * regardless of audience size — most app code should call
    * {@link LunoraPush.broadcast} instead.
    */
@@ -419,7 +419,7 @@ interface CreateNotifyOptions {
    * Each page is fetched, delivered, and counted independently before the
    * next page's store round trip, so a huge audience is never materialized
    * wholesale in the isolate. Also the per-message bound `push.broadcastPage`
-   * (and so `runPushBroadcastJob`) uses. A test/tuning seam — most apps never
+   * (and so `runPushBroadcastPage`) uses. A test/tuning seam — most apps never
    * need to set this.
    */
   broadcastPageSize?: number;
@@ -505,23 +505,45 @@ declare const buildEngine: (resolved: ResolvedProviders) => Notification;
  * fan-out. Shaped to travel through a `@lunora/queue` producer/consumer without
  * `@lunora/notify` depending on `@lunora/queue` (the seam stays structural).
  * `filter.after`, when set, resumes a broadcast partway through (see
- * {@link runPushBroadcastJob}'s continuation semantics).
+ * {@link runPushBroadcastPage}'s continuation semantics).
  */
 interface PushBroadcastJob {
   /** Subscription filter (which devices/users to target; `filter.after` resumes a paged broadcast). */
   filter?: SubscriptionFilter;
   /** The push payload to deliver (the `to` target is derived per subscription). */
   payload: PushContent;
+  /**
+   * Redeliver to exactly these subscription ids instead of walking a page —
+   * an earlier page's {@link PushBroadcastPageOutcome.failedIds}. Set by the
+   * consumer when it re-enqueues a page's transient failures; `filter` is
+   * ignored on such a job. See {@link runPushBroadcastPage}.
+   */
+  retryIds?: string[];
   /** Discriminator so a shared queue can multiplex message kinds. */
   type: "lunora.push.broadcast";
 }
+/**
+ * One page's outcome plus the ids that need redelivering.
+ *
+ * The consumer MUST act on BOTH fields: `nextCursor` continues the broadcast and
+ * `failedIds` redelivers the recipients this page missed. Acking a message while
+ * ignoring either silently drops part of the audience.
+ */
+interface PushBroadcastPageOutcome extends BroadcastPageResult {
+  /**
+   * Subscriptions that failed transiently on this run (gone/pruned devices are
+   * NOT here — they are deleted, not retried). Re-enqueue a job carrying these
+   * as `retryIds` to redeliver to just them.
+   */
+  failedIds: string[];
+}
 /** The structural slice of a `@lunora/queue` producer (`ctx.queues.<name>`) used here. */
 interface QueueProducerLike {
   send: (body: PushBroadcastJob) => Promise<void>;
 }
 /**
  * Enqueue a fan-out broadcast for background delivery through a `@lunora/queue`
- * queue instead of blocking the request. Pair with {@link runPushBroadcastJob} in
+ * queue instead of blocking the request. Pair with {@link runPushBroadcastPage} in
  * the queue consumer — see its doc comment for how a large audience continues
  * across MULTIPLE messages (one bounded page per message), not one.
  *
@@ -532,7 +554,7 @@ interface QueueProducerLike {
  * // in lunora/queues.ts consumer:
  * export const push = defineQueue({ async handler(batch, ctx) {
  *     for (const message of batch.messages) {
- *         const { nextCursor } = await runPushBroadcastJob(ctx.push, message.body);
+ *         const { failedIds, nextCursor } = await runPushBroadcastPage(ctx.push, message.body);
  *
  *         if (nextCursor !== undefined) {
  *             // More pages remain — enqueue the continuation. Each message still
@@ -542,6 +564,13 @@ interface QueueProducerLike {
  *                 filter: { ...message.body.filter, after: nextCursor },
  *             });
  *         }
+ *
+ *         if (failedIds.length > 0) {
+ *             // Redeliver ONLY the recipients that failed — never the whole page.
+ *             await enqueuePushBroadcast(ctx.queues.push, { payload: message.body.payload, retryIds: failedIds });
+ *         }
+ *
+ *         message.ack();
  *     }
  * }});
  * ```
@@ -553,37 +582,33 @@ declare const enqueuePushBroadcast: (queue: QueueProducerLike, job: Omit<PushBro
  * reuses the engine's retry + circuit-breaker middleware and prunes gone
  * subscriptions).
  *
- * RETRY / CONTINUATION SEMANTICS (rewritten for plan 222 / NOTIFY-01 — a
- * broadcast job used to process the WHOLE audience in one message, which could
- * exceed Worker CPU/wall limits for a large audience and made a retry re-run
- * everything):
+ * RETRY / CONTINUATION SEMANTICS:
  *
- * - A job now processes exactly ONE bounded page (see `CreateNotifyOptions`'s
+ * - A job processes exactly ONE bounded page (see `CreateNotifyOptions`'s
  * page-size option, default 250, or `job.filter.limit` when smaller),
  * keyset-paginated on the subscription `id` (see `SubscriptionFilter.after`)
  * — so per-message work is bounded regardless of total audience size.
- * - Retry is still gated on `result.failed` — the count of TRANSIENT delivery
- * errors (a provider 5xx / network fault worth another attempt). When at
- * least one recipient in THIS PAGE `failed`, the job is RE-THROWN so the
- * queue does NOT ack it and its normal retry/backoff (and, on exhaustion,
- * dead-letter) applies — to just this page, not the whole broadcast.
- * - A page with zero `failed` resolves and is acked — this includes the
- * all-`pruned` case (every device on the page had unsubscribed:
- * `sent:0`, `failed:0`, `pruned:N`), which is a SUCCESSFUL prune, not a
- * failure, so throwing on it would spuriously retry and pressure the DLQ;
- * and the empty-page case (zero `total`), which has nothing to retry.
- * - The returned `nextCursor` is set when more pages remain. `@lunora/notify`
- * does NOT enqueue the continuation itself — it has no `@lunora/queue`
- * dependency (the seam stays structural) and no reference to the producer
- * that enqueued this message — so the CALLER (the `lunora/queues.ts`
- * consumer) is responsible for re-enqueueing with `filter.after: nextCursor`
- * when present. See the consumer example on {@link enqueuePushBroadcast}.
- * - A retry of a page redelivers only that page's already-delivered recipients
- * on a transient partial failure (a page is not individually idempotent) —
- * the accepted cost of getting the transiently failed ones redelivered, now
- * scoped to one page instead of the whole broadcast.
- */
-declare const runPushBroadcastJob: (push: LunoraPush, job: PushBroadcastJob) => Promise<BroadcastPageResult>;
+ * - A page NEVER throws for a partial failure. Throwing discarded the page's
+ * `nextCursor`, which is the only way the broadcast advances: one device that
+ * fails permanently (a rotated VAPID keypair leaves a stale device answering
+ * `403 VapidPkHashMismatch` forever) would then stall the cursor, re-POST
+ * every already-delivered recipient on each retry, dead-letter, and leave
+ * every LATER page unreached. The page's `nextCursor` and its `failedIds`
+ * both come back instead.
+ * - The CALLER (the `lunora/queues.ts` consumer) re-enqueues: `filter.after:
+ * nextCursor` while more pages remain, and a `retryIds: failedIds` job when
+ * any recipient failed. `@lunora/notify` cannot do it itself — it has no
+ * `@lunora/queue` dependency (the seam stays structural) and no reference to
+ * the producer that enqueued this message. See the consumer example on
+ * {@link enqueuePushBroadcast}.
+ * - A `retryIds` job redelivers to exactly those ids and DOES throw while any
+ * of them still fails, so the queue's backoff/dead-letter bounds it. That
+ * message contains no already-delivered recipient, so nothing is re-sent.
+ * - Gone subscriptions (404/410, FCM `UNREGISTERED`) are pruned by the page and
+ * never appear in `failedIds` — an all-`pruned` page is a success, not a
+ * failure, as is an empty page.
+ */
+declare const runPushBroadcastPage: (push: LunoraPush, job: PushBroadcastJob) => Promise<PushBroadcastPageOutcome>;
 /**
  * The minimal structural slice of Cloudflare's `D1Database` this store uses. A
  * structural type (rather than importing `@cloudflare/workers-types`) keeps the
@@ -702,13 +727,13 @@ export { type BroadcastOutcome, type BroadcastResult, type CreateNotifyOptions,
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.
  * @packageDocumentation
  */
-FCM_ENV_KEYS, type FcmConfigFactory, type LunoraNotify, type LunoraPush, type NotifyConfig, type NotifyDefinition, type NotifyDeliveryStatus, type NotifyEnv, type NotifyLogger, type NotifyMetrics, type NotifySkipReason, type PushBroadcastJob, type PushSubscriptionDevice, type PushSubscriptionsResult, type QueueProducerLike, type RegisterInput, type ResolvedProviders, type RoutingPushOptions, type StoredSubscription, type SubscriptionFilter, type SubscriptionKind, type SubscriptionStatus, type SubscriptionStore,
+FCM_ENV_KEYS, type FcmConfigFactory, type LunoraNotify, type LunoraPush, type NotifyConfig, type NotifyDefinition, type NotifyDeliveryStatus, type NotifyEnv, type NotifyLogger, type NotifyMetrics, type NotifySkipReason, type PushBroadcastJob, type PushBroadcastPageOutcome, type PushSubscriptionDevice, type PushSubscriptionsResult, type QueueProducerLike, type RegisterInput, type ResolvedProviders, type RoutingPushOptions, type StoredSubscription, type SubscriptionFilter, type SubscriptionKind, type SubscriptionStatus, type SubscriptionStore,
 /**
  * `@lunora/notify`
  *
@@ -721,7 +746,7 @@ FCM_ENV_KEYS, type FcmConfigFactory, type LunoraNotify, type LunoraPush, type No
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.
@@ -740,13 +765,13 @@ WEB_PUSH_ENV_KEYS, type WebPushConfigFactory, buildEngine, createNotify, d1Subsc
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.
  * @packageDocumentation
  */
-fcmFromEnv, fcmId, isGoneError, isNotifyDefinition, memorySubscriptionStore, normalizeRegisterInput, routingPushProvider, runPushBroadcastJob, targetOf,
+fcmFromEnv, fcmId, isGoneError, isNotifyDefinition, memorySubscriptionStore, normalizeRegisterInput, routingPushProvider, runPushBroadcastPage, targetOf,
 /**
  * `@lunora/notify`
  *
@@ -759,7 +784,7 @@ fcmFromEnv, fcmId, isGoneError, isNotifyDefinition, memorySubscriptionStore, nor
  * Edge-safety: Web Push (VAPID + RFC 8291) and FCM (HTTP v1) run on `fetch` + Web
  * Crypto under workerd. APNs (`node:http2`) and SMS / Node-only queue adapters are
  * deliberately **not** on the edge facade — route heavy fan-out through
- * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastJob`).
+ * `@lunora/queue` (`enqueuePushBroadcast` / `runPushBroadcastPage`).
  *
  * - `@lunora/notify` — `defineNotify`, `createNotify`, config resolvers, subscription stores and types.
  * - `@lunora/notify/web` — the browser `subscribeToPush` service-worker helper.

package/dist/index.mjs

@@ -1 +1 @@
-import{FCM_ENV_KEYS as e,WEB_PUSH_ENV_KEYS as t,fcmFromEnv as i,webPushFromEnv as f}from"./packem_shared/FCM_ENV_KEYS-BbhPScGH.mjs";import{defineNotify as n,isNotifyDefinition as u}from"./packem_shared/defineNotify-CUi2k7pP.mjs";import{createNotify as p}from"./packem_shared/createNotify-BDE42tvH.mjs";import{buildEngine as d,routingPushProvider as x}from"./packem_shared/buildEngine-oDWs9Pom.mjs";import{enqueuePushBroadcast as c,runPushBroadcastJob as P}from"./packem_shared/enqueuePushBroadcast-tf1LqgzA.mjs";import{d1SubscriptionStore as b}from"./packem_shared/d1SubscriptionStore-s-AJH4hS.mjs";import{memorySubscriptionStore as N}from"./packem_shared/memorySubscriptionStore-FY8yANEM.mjs";import{fcmId as g,isGoneError as y,normalizeRegisterInput as v,targetOf as B,webPushId as F}from"./packem_shared/fcmId-Dwh_R5xe.mjs";export{e as FCM_ENV_KEYS,t as WEB_PUSH_ENV_KEYS,d as buildEngine,p as createNotify,b as d1SubscriptionStore,n as defineNotify,c as enqueuePushBroadcast,i as fcmFromEnv,g as fcmId,y as isGoneError,u as isNotifyDefinition,N as memorySubscriptionStore,v as normalizeRegisterInput,x as routingPushProvider,P as runPushBroadcastJob,B as targetOf,f as webPushFromEnv,F as webPushId};
+import{FCM_ENV_KEYS as e,WEB_PUSH_ENV_KEYS as t,fcmFromEnv as i,webPushFromEnv as f}from"./packem_shared/FCM_ENV_KEYS-BbhPScGH.mjs";import{defineNotify as n,isNotifyDefinition as u}from"./packem_shared/defineNotify-CUi2k7pP.mjs";import{createNotify as p}from"./packem_shared/createNotify-BDE42tvH.mjs";import{buildEngine as a,routingPushProvider as d}from"./packem_shared/buildEngine-oDWs9Pom.mjs";import{enqueuePushBroadcast as P,runPushBroadcastPage as c}from"./packem_shared/enqueuePushBroadcast-B6v3DLLp.mjs";import{d1SubscriptionStore as b}from"./packem_shared/d1SubscriptionStore-s-AJH4hS.mjs";import{memorySubscriptionStore as h}from"./packem_shared/memorySubscriptionStore-FY8yANEM.mjs";import{fcmId as _,isGoneError as y,normalizeRegisterInput as v,targetOf as B,webPushId as F}from"./packem_shared/fcmId-Dwh_R5xe.mjs";export{e as FCM_ENV_KEYS,t as WEB_PUSH_ENV_KEYS,a as buildEngine,p as createNotify,b as d1SubscriptionStore,n as defineNotify,P as enqueuePushBroadcast,i as fcmFromEnv,_ as fcmId,y as isGoneError,u as isNotifyDefinition,h as memorySubscriptionStore,v as normalizeRegisterInput,d as routingPushProvider,c as runPushBroadcastPage,B as targetOf,f as webPushFromEnv,F as webPushId};

package/dist/packem_shared/enqueuePushBroadcast-B6v3DLLp.mjs

@@ -0,0 +1 @@
+import{LunoraError as i}from"@lunora/errors";const u=e=>e.filter(t=>t.status==="failed").map(t=>t.id),h=(e,t)=>e.send({...t,type:"lunora.push.broadcast"}),c=async(e,t,s)=>{const r=[];for(const a of s)try{const o=await e.send(a,t);r.push({id:a,status:o.successful?"ok":"failed"})}catch(o){r.push({error:o instanceof Error?o.message:String(o),id:a,status:"failed"})}const n=u(r),d=r.length-n.length,l={failed:n.length,outcomes:r,pruned:0,sent:d,total:r.length};if(n.length>0)throw new i("INTERNAL",`@lunora/notify: push retry failed for ${n.length.toString()} of ${r.length.toString()} subscription(s) — throwing so the queue retries and eventually dead-letters them`);return{failedIds:n,nextCursor:void 0,result:l}},g=async(e,t)=>{if(t.retryIds!==void 0&&t.retryIds.length>0)return c(e,t.payload,t.retryIds);const s=await e.broadcastPage(t.payload,t.filter);return{failedIds:u(s.result.outcomes),nextCursor:s.nextCursor,result:s.result}};export{h as enqueuePushBroadcast,g as runPushBroadcastPage};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/notify",
-  "version": "1.0.0-alpha.29",
+  "version": "1.0.0-alpha.30",
   "description": "Multi-channel notifications for Lunora — ctx.notify / ctx.push over @visulima/notification: edge-safe Web Push + FCM, plus chat, in-app inbox and webhook channels, with subscription storage and queue-backed fan-out",
   "keywords": [
     "cloudflare",

package/dist/packem_shared/enqueuePushBroadcast-tf1LqgzA.mjs

@@ -1 +0,0 @@
-import{LunoraError as s}from"@lunora/errors";const o=(e,r)=>e.send({...r,type:"lunora.push.broadcast"}),n=async(e,r)=>{const t=await e.broadcastPage(r.payload,r.filter);if(t.result.failed>0)throw new s("INTERNAL",`@lunora/notify: push broadcast page had ${t.result.failed.toString()} transient failure(s) of ${t.result.total.toString()} subscription(s) (${t.result.sent.toString()} sent, ${t.result.pruned.toString()} pruned) — throwing so the queue retries this page`);return t};export{o as enqueuePushBroadcast,n as runPushBroadcastJob};