@open-mercato/channel-expo 0.6.8-develop.6985.1.fb93574faa

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+[build:channel-expo] found 16 entry points
+[build:channel-expo] built successfully

package/AGENTS.md

@@ -0,0 +1,26 @@
+# `@open-mercato/channel-expo` — Agent Guidelines
+
+Expo push provider for the Communications Hub (`communication_channels`). Registers a `push` `ChannelAdapter` (providerKey `expo`) consumed by the `push_notifications` delivery strategy/worker.
+
+- **Package**: `@open-mercato/channel-expo` ⇒ **module id**: `channel_expo`
+- **Provider key**: `expo` · **channelType**: `push`
+- Transport: `expo-server-sdk` (Expo push service) — keep all Expo-specific logic here.
+
+## Key Files (`src/modules/channel_expo/`)
+
+| File | Purpose |
+|------|---------|
+| `integration.ts` | `IntegrationDefinition` (credentials field, `healthCheck.service`) |
+| `di.ts` / `setup.ts` | Register the adapter + `channelExpoHealthCheck`; `defaultRoleFeatures` |
+| `acl.ts` | `channel_expo.view`, `channel_expo.configure` |
+| `lib/adapter.ts` | `ExpoChannelAdapter`; `setExpoClientFactory` test seam isolates expo-server-sdk |
+| `lib/credentials.ts` | Zod schema: `{ accessToken? }` |
+| `lib/health.ts` | `channelExpoHealthCheck` liveness probe |
+
+## Adapter Contract
+
+Implements the shared push-adapter contract (see `channel-fcm` AGENTS.md). A malformed Expo token (`!Expo.isExpoPushToken`) and a `DeviceNotRegistered` ticket both map to the uniform `device_unregistered` sentinel so the worker soft-deletes the device. Receipt-polling for delayed `DeviceNotRegistered` is out of scope — classification is on the send ticket.
+
+## Credentials
+
+Tenant-level credentials on `IntegrationCredentials` for provider `channel_expo`: `{ accessToken? }` (only needed with Expo enhanced push security). Connect via the existing `communication_channels` credentials-connect flow. Device tokens (`ExponentPushToken[...]`) live in `devices.UserDevice.push_token`, never here.

package/build.mjs

@@ -0,0 +1,7 @@
+import { dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { buildPackage } from '../../scripts/build-package.mjs'
+
+const packageDir = dirname(fileURLToPath(import.meta.url))
+
+await buildPackage(packageDir, { name: 'channel-expo' })

package/dist/index.js

@@ -0,0 +1,5 @@
+import { metadata } from "./modules/channel_expo/index.js";
+export {
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts"],
+  "sourcesContent": ["export { metadata } from './modules/channel_expo/index'\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-004.spec.js

@@ -0,0 +1,56 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/helpers/integration/authFixtures";
+import { apiRequest } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+test.describe("TC-CHANNEL-PUSH-004: Expo provider registration", () => {
+  test("POST per-user connect/credentials with providerKey=expo is refused (403, tenant-scoped)", async ({
+    request
+  }) => {
+    const token = await getAuthToken(request);
+    const response = await apiRequest(
+      request,
+      "POST",
+      "/api/communication_channels/channels/connect/credentials",
+      {
+        token,
+        data: {
+          providerKey: "expo",
+          displayName: "Expo \u2014 per-user (should be refused)",
+          credentials: { accessToken: 12345 }
+        }
+      }
+    );
+    expect(response.status(), "route should not 5xx").toBeLessThan(500);
+    expect(response.status(), "Expo provider should be registered (never 404 no_adapter)").not.toBe(404);
+    expect(response.status(), "authenticated request should not 401").not.toBe(401);
+    expect(response.status()).toBe(403);
+    const body = await readJsonSafe(response);
+    expect(body?.code).toBe("provider_is_tenant_scoped");
+  });
+  test("POST tenant connect/credentials with providerKey=expo reaches validateCredentials (422)", async ({
+    request
+  }) => {
+    const token = await getAuthToken(request);
+    const response = await apiRequest(
+      request,
+      "POST",
+      "/api/communication_channels/channels/connect/tenant-credentials",
+      {
+        token,
+        // Wrong-typed accessToken (not an empty object, which would validate and create a
+        // channel) → validateCredentials rejects it, so the flow stays side-effect-free.
+        data: {
+          providerKey: "expo",
+          displayName: "Expo \u2014 tenant connect",
+          credentials: { accessToken: 12345 }
+        }
+      }
+    );
+    expect(response.status(), "route should not 5xx").toBeLessThan(500);
+    expect(response.status(), "authenticated request should not 401").not.toBe(401);
+    expect(response.status(), "wrong-typed credentials should reach the adapter and 422").toBe(422);
+    const body = await readJsonSafe(response);
+    expect(body?.fieldErrors ?? body?.error).toBeTruthy();
+  });
+});
+//# sourceMappingURL=TC-CHANNEL-PUSH-004.spec.js.map

package/dist/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-004.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-004.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'\nimport { apiRequest } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\n\n/**\n * TC-CHANNEL-PUSH-004 \u2014 Expo is registered AND tenant-scoped.\n *\n * `@open-mercato/channel-expo` registers the `expo` push `ChannelAdapter` at import with\n * `channelScope: 'tenant'`. Push providers have no OAuth/webhook surface of their own, so\n * the credential-connect routes are where hub registration is observable:\n *\n * - the **per-user** route short-circuits tenant-scoped providers with 403\n *   (`provider_is_tenant_scoped`) before touching credentials \u2014 403 rather than 404\n *   (`no_adapter`) proves the adapter is registered, and it guards against a non-admin\n *   minting a tenant-wide channel;\n * - the **tenant** route runs the adapter's own `validateCredentials`, which returns 422.\n *\n * Expo credentials are all-optional (`accessToken?`), so an empty object would VALIDATE\n * and create a channel on the tenant route \u2014 we send a wrong-typed `accessToken` instead,\n * so `validateCredentials` rejects it and the flow stays side-effect-free.\n */\ntest.describe('TC-CHANNEL-PUSH-004: Expo provider registration', () => {\n  test('POST per-user connect/credentials with providerKey=expo is refused (403, tenant-scoped)', async ({\n    request,\n  }) => {\n    const token = await getAuthToken(request)\n    const response = await apiRequest(\n      request,\n      'POST',\n      '/api/communication_channels/channels/connect/credentials',\n      {\n        token,\n        data: {\n          providerKey: 'expo',\n          displayName: 'Expo \u2014 per-user (should be refused)',\n          credentials: { accessToken: 12345 },\n        },\n      },\n    )\n    expect(response.status(), 'route should not 5xx').toBeLessThan(500)\n    expect(response.status(), 'Expo provider should be registered (never 404 no_adapter)').not.toBe(404)\n    expect(response.status(), 'authenticated request should not 401').not.toBe(401)\n    expect(response.status()).toBe(403)\n    const body = await readJsonSafe<{ code?: string }>(response)\n    expect(body?.code).toBe('provider_is_tenant_scoped')\n  })\n\n  test('POST tenant connect/credentials with providerKey=expo reaches validateCredentials (422)', async ({\n    request,\n  }) => {\n    const token = await getAuthToken(request)\n    const response = await apiRequest(\n      request,\n      'POST',\n      '/api/communication_channels/channels/connect/tenant-credentials',\n      {\n        token,\n        // Wrong-typed accessToken (not an empty object, which would validate and create a\n        // channel) \u2192 validateCredentials rejects it, so the flow stays side-effect-free.\n        data: {\n          providerKey: 'expo',\n          displayName: 'Expo \u2014 tenant connect',\n          credentials: { accessToken: 12345 },\n        },\n      },\n    )\n    expect(response.status(), 'route should not 5xx').toBeLessThan(500)\n    // A 422 proves the request reached the registered adapter and ran its validateCredentials\n    // \u2014 not just that auth short-circuited. 401 would satisfy \"not 404\" without proving it.\n    expect(response.status(), 'authenticated request should not 401').not.toBe(401)\n    expect(response.status(), 'wrong-typed credentials should reach the adapter and 422').toBe(422)\n    const body = await readJsonSafe<{ error?: string; fieldErrors?: Record<string, string> }>(response)\n    expect(body?.fieldErrors ?? body?.error).toBeTruthy()\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAmB7B,KAAK,SAAS,mDAAmD,MAAM;AACrE,OAAK,2FAA2F,OAAO;AAAA,IACrG;AAAA,EACF,MAAM;AACJ,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA,MAAM;AAAA,UACJ,aAAa;AAAA,UACb,aAAa;AAAA,UACb,aAAa,EAAE,aAAa,MAAM;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AACA,WAAO,SAAS,OAAO,GAAG,sBAAsB,EAAE,aAAa,GAAG;AAClE,WAAO,SAAS,OAAO,GAAG,2DAA2D,EAAE,IAAI,KAAK,GAAG;AACnG,WAAO,SAAS,OAAO,GAAG,sCAAsC,EAAE,IAAI,KAAK,GAAG;AAC9E,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAO,MAAM,aAAgC,QAAQ;AAC3D,WAAO,MAAM,IAAI,EAAE,KAAK,2BAA2B;AAAA,EACrD,CAAC;AAED,OAAK,2FAA2F,OAAO;AAAA,IACrG;AAAA,EACF,MAAM;AACJ,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA;AAAA;AAAA,QAGA,MAAM;AAAA,UACJ,aAAa;AAAA,UACb,aAAa;AAAA,UACb,aAAa,EAAE,aAAa,MAAM;AAAA,QACpC;AAAA,MACF;AAAA,IACF;AACA,WAAO,SAAS,OAAO,GAAG,sBAAsB,EAAE,aAAa,GAAG;AAGlE,WAAO,SAAS,OAAO,GAAG,sCAAsC,EAAE,IAAI,KAAK,GAAG;AAC9E,WAAO,SAAS,OAAO,GAAG,0DAA0D,EAAE,KAAK,GAAG;AAC9F,UAAM,OAAO,MAAM,aAAuE,QAAQ;AAClG,WAAO,MAAM,eAAe,MAAM,KAAK,EAAE,WAAW;AAAA,EACtD,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.meta.js

@@ -0,0 +1,7 @@
+const integrationMeta = {
+  requiredEnvVars: ["OM_PUSH_FAKE_PROVIDERS"]
+};
+export {
+  integrationMeta
+};
+//# sourceMappingURL=TC-CHANNEL-PUSH-007.meta.js.map

package/dist/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.meta.ts"],
+  "sourcesContent": ["export const integrationMeta = {\n  requiredEnvVars: ['OM_PUSH_FAKE_PROVIDERS'],\n}\n"],
+  "mappings": "AAAO,MAAM,kBAAkB;AAAA,EAC7B,iBAAiB,CAAC,wBAAwB;AAC5C;",
+  "names": []
+}

package/dist/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.spec.js

@@ -0,0 +1,65 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { getTokenScope } from "@open-mercato/core/helpers/integration/generalFixtures";
+import { createNotificationFixture } from "@open-mercato/core/helpers/integration/notificationsFixtures";
+import { drainIntegrationQueue } from "@open-mercato/core/helpers/integration/queue";
+import {
+  connectFakePushChannel,
+  deleteChannelIfExists,
+  deleteDeliveriesForDevice,
+  deleteFakePushDevice,
+  expectNativeMessage,
+  makeFakePushToken,
+  readLatestDelivery,
+  registerFakePushDevice
+} from "@open-mercato/core/helpers/integration/pushFake";
+const PROVIDER = "expo";
+test.describe("TC-CHANNEL-PUSH-007: real Expo adapter reaches sent with a correct native message", () => {
+  test("maps sound and priority onto the Expo message", async ({ request }) => {
+    test.setTimeout(12e4);
+    const adminToken = await getAuthToken(request, "admin");
+    const { tenantId, userId } = getTokenScope(adminToken);
+    const { pushToken, tokenTail } = makeFakePushToken(PROVIDER);
+    const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+    let channelId = null;
+    let userDeviceId = null;
+    try {
+      channelId = await connectFakePushChannel(request, adminToken, PROVIDER, "TC-CHANNEL-PUSH-007 Expo");
+      userDeviceId = await registerFakePushDevice(
+        request,
+        adminToken,
+        PROVIDER,
+        pushToken,
+        `qa-tc-channel-push-007-${Date.now()}`
+      );
+      await createNotificationFixture(request, adminToken, {
+        recipientUserId: userId,
+        type: "admin.custom_message",
+        title: "Order shipped",
+        body: "Your order is on its way",
+        data: { probe: "tc-channel-push-007" },
+        pushOptions: { sound: "chime.caf", priority: "high", channelId: "orders" }
+      });
+      await drainIntegrationQueue("events");
+      await drainIntegrationQueue("push-deliveries");
+      await expect.poll(async () => (await readLatestDelivery(tenantId, userDeviceId))?.status ?? null, {
+        timeout: 3e4
+      }).toBe("sent");
+      const row = await readLatestDelivery(tenantId, userDeviceId);
+      expect(row?.provider).toBe(PROVIDER);
+      expect(row?.token_snapshot).toBe(tokenTail);
+      const native = await expectNativeMessage(PROVIDER, tokenTail, startedAt);
+      expect(native.to).toBe(pushToken);
+      expect(native.title).toBe("Order shipped");
+      expect(native.body).toBe("Your order is on its way");
+      expect(native.sound).toBe("chime.caf");
+      expect(native.priority).toBe("high");
+      expect(native.channelId).toBe("orders");
+    } finally {
+      await deleteDeliveriesForDevice(userDeviceId);
+      await deleteFakePushDevice(request, adminToken, userDeviceId);
+      await deleteChannelIfExists(request, adminToken, channelId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHANNEL-PUSH-007.spec.js.map

package/dist/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { getTokenScope } from '@open-mercato/core/helpers/integration/generalFixtures'\nimport { createNotificationFixture } from '@open-mercato/core/helpers/integration/notificationsFixtures'\nimport { drainIntegrationQueue } from '@open-mercato/core/helpers/integration/queue'\nimport {\n  connectFakePushChannel,\n  deleteChannelIfExists,\n  deleteDeliveriesForDevice,\n  deleteFakePushDevice,\n  expectNativeMessage,\n  makeFakePushToken,\n  readLatestDelivery,\n  registerFakePushDevice,\n} from '@open-mercato/core/helpers/integration/pushFake'\n\n/**\n * TC-CHANNEL-PUSH-007 \u2014 the REAL Expo adapter, end-to-end, without live credentials.\n *\n * Only the `expo-server-sdk` client is faked (`OM_PUSH_FAKE_PROVIDERS`), so the adapter's token\n * validation, chunking, and `buildExpoMessage` run for real.\n */\nconst PROVIDER = 'expo'\n\ntest.describe('TC-CHANNEL-PUSH-007: real Expo adapter reaches sent with a correct native message', () => {\n  test('maps sound and priority onto the Expo message', async ({ request }) => {\n    // Budgeted explicitly rather than via `test.slow()` (which only triples the config's 20s budget).\n    // NOTE: this does not fix the current CI failure \u2014 `POST /api/notifications` hangs >30s in the\n    // channel-package shard, so the test dies on `apiRequest`'s own 30s timeout. See the spec changelog.\n    test.setTimeout(120_000)\n    const adminToken = await getAuthToken(request, 'admin')\n    const { tenantId, userId } = getTokenScope(adminToken)\n    const { pushToken, tokenTail } = makeFakePushToken(PROVIDER)\n    const startedAt = new Date().toISOString()\n\n    let channelId: string | null = null\n    let userDeviceId: string | null = null\n    try {\n      channelId = await connectFakePushChannel(request, adminToken, PROVIDER, 'TC-CHANNEL-PUSH-007 Expo')\n      userDeviceId = await registerFakePushDevice(\n        request,\n        adminToken,\n        PROVIDER,\n        pushToken,\n        `qa-tc-channel-push-007-${Date.now()}`,\n      )\n\n      await createNotificationFixture(request, adminToken, {\n          recipientUserId: userId,\n          type: 'admin.custom_message',\n          title: 'Order shipped',\n          body: 'Your order is on its way',\n          data: { probe: 'tc-channel-push-007' },\n          pushOptions: { sound: 'chime.caf', priority: 'high', channelId: 'orders' },\n        })\n\n      await drainIntegrationQueue('events')\n      await drainIntegrationQueue('push-deliveries')\n\n      await expect\n        .poll(async () => (await readLatestDelivery(tenantId, userDeviceId as string))?.status ?? null, {\n          timeout: 30_000,\n        })\n        .toBe('sent')\n\n      const row = await readLatestDelivery(tenantId, userDeviceId as string)\n      expect(row?.provider).toBe(PROVIDER)\n      expect(row?.token_snapshot).toBe(tokenTail)\n\n      const native = await expectNativeMessage(PROVIDER, tokenTail, startedAt)\n      expect(native.to).toBe(pushToken)\n      expect(native.title).toBe('Order shipped')\n      expect(native.body).toBe('Your order is on its way')\n      expect(native.sound).toBe('chime.caf')\n      expect(native.priority).toBe('high')\n      expect(native.channelId).toBe('orders')\n    } finally {\n      await deleteDeliveriesForDevice(userDeviceId)\n      await deleteFakePushDevice(request, adminToken, userDeviceId)\n      await deleteChannelIfExists(request, adminToken, channelId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,iCAAiC;AAC1C,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,MAAM,WAAW;AAEjB,KAAK,SAAS,qFAAqF,MAAM;AACvG,OAAK,iDAAiD,OAAO,EAAE,QAAQ,MAAM;AAI3E,SAAK,WAAW,IAAO;AACvB,UAAM,aAAa,MAAM,aAAa,SAAS,OAAO;AACtD,UAAM,EAAE,UAAU,OAAO,IAAI,cAAc,UAAU;AACrD,UAAM,EAAE,WAAW,UAAU,IAAI,kBAAkB,QAAQ;AAC3D,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAEzC,QAAI,YAA2B;AAC/B,QAAI,eAA8B;AAClC,QAAI;AACF,kBAAY,MAAM,uBAAuB,SAAS,YAAY,UAAU,0BAA0B;AAClG,qBAAe,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,0BAA0B,KAAK,IAAI,CAAC;AAAA,MACtC;AAEA,YAAM,0BAA0B,SAAS,YAAY;AAAA,QACjD,iBAAiB;AAAA,QACjB,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,QACN,MAAM,EAAE,OAAO,sBAAsB;AAAA,QACrC,aAAa,EAAE,OAAO,aAAa,UAAU,QAAQ,WAAW,SAAS;AAAA,MAC3E,CAAC;AAEH,YAAM,sBAAsB,QAAQ;AACpC,YAAM,sBAAsB,iBAAiB;AAE7C,YAAM,OACH,KAAK,aAAa,MAAM,mBAAmB,UAAU,YAAsB,IAAI,UAAU,MAAM;AAAA,QAC9F,SAAS;AAAA,MACX,CAAC,EACA,KAAK,MAAM;AAEd,YAAM,MAAM,MAAM,mBAAmB,UAAU,YAAsB;AACrE,aAAO,KAAK,QAAQ,EAAE,KAAK,QAAQ;AACnC,aAAO,KAAK,cAAc,EAAE,KAAK,SAAS;AAE1C,YAAM,SAAS,MAAM,oBAAoB,UAAU,WAAW,SAAS;AACvE,aAAO,OAAO,EAAE,EAAE,KAAK,SAAS;AAChC,aAAO,OAAO,KAAK,EAAE,KAAK,eAAe;AACzC,aAAO,OAAO,IAAI,EAAE,KAAK,0BAA0B;AACnD,aAAO,OAAO,KAAK,EAAE,KAAK,WAAW;AACrC,aAAO,OAAO,QAAQ,EAAE,KAAK,MAAM;AACnC,aAAO,OAAO,SAAS,EAAE,KAAK,QAAQ;AAAA,IACxC,UAAE;AACA,YAAM,0BAA0B,YAAY;AAC5C,YAAM,qBAAqB,SAAS,YAAY,YAAY;AAC5D,YAAM,sBAAsB,SAAS,YAAY,SAAS;AAAA,IAC5D;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/channel_expo/acl.js

@@ -0,0 +1,10 @@
+const features = [
+  { id: "channel_expo.view", title: "View Expo push channel configuration", module: "channel_expo" },
+  { id: "channel_expo.configure", title: "Configure Expo push credentials", module: "channel_expo" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/channel_expo/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_expo/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'channel_expo.view', title: 'View Expo push channel configuration', module: 'channel_expo' },\n  { id: 'channel_expo.configure', title: 'Configure Expo push credentials', module: 'channel_expo' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,qBAAqB,OAAO,wCAAwC,QAAQ,eAAe;AAAA,EACjG,EAAE,IAAI,0BAA0B,OAAO,mCAAmC,QAAQ,eAAe;AACnG;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/channel_expo/di.js

@@ -0,0 +1,24 @@
+import { asValue } from "awilix";
+import {
+  hasChannelAdapter,
+  registerChannelAdapter
+} from "@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton";
+import { getExpoChannelAdapter } from "./lib/adapter.js";
+import { ensureExpoFakeProviderInstalled } from "./lib/fake-provider.js";
+import { channelExpoHealthCheck } from "./lib/health.js";
+function register(container) {
+  ensureExpoFakeProviderInstalled();
+  if (!hasChannelAdapter("expo")) {
+    registerChannelAdapter(getExpoChannelAdapter());
+  }
+  container.register({
+    channelExpoAdapter: asValue(getExpoChannelAdapter()),
+    // Registered under the exact service name declared in `integration.ts`
+    // (`healthCheck.service`); without it the hub's resolve throws.
+    channelExpoHealthCheck: asValue(channelExpoHealthCheck)
+  });
+}
+export {
+  register
+};
+//# sourceMappingURL=di.js.map

package/dist/modules/channel_expo/di.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_expo/di.ts"],
+  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  hasChannelAdapter,\n  registerChannelAdapter,\n} from '@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton'\nimport { getExpoChannelAdapter } from './lib/adapter'\nimport { ensureExpoFakeProviderInstalled } from './lib/fake-provider'\nimport { channelExpoHealthCheck } from './lib/health'\n\nexport function register(container: AppContainer): void {\n  // Test-only: swap expo-server-sdk for a network-free fake when `OM_PUSH_FAKE_PROVIDERS` is set\n  // (no-op in production), so integration specs exercise this adapter end-to-end. Swaps the SDK\n  // client only \u2014 the adapter below stays registered. See lib/fake-provider.ts.\n  ensureExpoFakeProviderInstalled()\n\n  if (!hasChannelAdapter('expo')) {\n    registerChannelAdapter(getExpoChannelAdapter())\n  }\n  container.register({\n    channelExpoAdapter: asValue(getExpoChannelAdapter()),\n    // Registered under the exact service name declared in `integration.ts`\n    // (`healthCheck.service`); without it the hub's resolve throws.\n    channelExpoHealthCheck: asValue(channelExpoHealthCheck),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AAExB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,uCAAuC;AAChD,SAAS,8BAA8B;AAEhC,SAAS,SAAS,WAA+B;AAItD,kCAAgC;AAEhC,MAAI,CAAC,kBAAkB,MAAM,GAAG;AAC9B,2BAAuB,sBAAsB,CAAC;AAAA,EAChD;AACA,YAAU,SAAS;AAAA,IACjB,oBAAoB,QAAQ,sBAAsB,CAAC;AAAA;AAAA;AAAA,IAGnD,wBAAwB,QAAQ,sBAAsB;AAAA,EACxD,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/channel_expo/index.js

@@ -0,0 +1,9 @@
+const metadata = {
+  id: "channel_expo",
+  title: "Expo Push Channel",
+  description: "Deliver mobile push to Expo apps via the Expo push service. Registers a `push` ChannelAdapter (providerKey `expo`) into the Communications Hub; consumed by the push_notifications delivery strategy."
+};
+export {
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/channel_expo/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_expo/index.ts"],
+  "sourcesContent": ["export const metadata = {\n  id: 'channel_expo',\n  title: 'Expo Push Channel',\n  description:\n    'Deliver mobile push to Expo apps via the Expo push service. Registers a `push` ChannelAdapter (providerKey `expo`) into the Communications Hub; consumed by the push_notifications delivery strategy.',\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AACJ;",
+  "names": []
+}

package/dist/modules/channel_expo/integration.js

@@ -0,0 +1,47 @@
+const integration = {
+  id: "channel_expo",
+  title: "Expo Push",
+  description: "Deliver mobile push to Expo apps via the Expo push service (ExponentPushToken). Provider for the push_notifications channel.",
+  category: "communication",
+  hub: "communication_channels",
+  providerKey: "expo",
+  icon: "expo",
+  docsUrl: "https://docs.expo.dev/push-notifications/sending-notifications/",
+  package: "@open-mercato/channel-expo",
+  version: "0.1.0",
+  author: "Open Mercato Team",
+  company: "Open Mercato",
+  license: "MIT",
+  tags: ["push", "expo", "react-native", "communication"],
+  apiVersions: [
+    {
+      id: "v1",
+      label: "Expo Push API",
+      status: "stable",
+      default: true,
+      changelog: "Expo push service via expo-server-sdk (ExponentPushToken delivery)."
+    }
+  ],
+  credentials: {
+    fields: [
+      {
+        key: "accessToken",
+        label: "Expo Access Token (optional)",
+        type: "secret",
+        required: false,
+        helpText: "Only required when Expo enhanced push security is enabled for the project. Expo dashboard -> Account -> Access Tokens. Stored encrypted at rest."
+      }
+    ]
+  },
+  healthCheck: { service: "channelExpoHealthCheck" }
+};
+const integrations = [integration];
+const bundles = [];
+const bundle = void 0;
+export {
+  bundle,
+  bundles,
+  integration,
+  integrations
+};
+//# sourceMappingURL=integration.js.map

package/dist/modules/channel_expo/integration.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_expo/integration.ts"],
+  "sourcesContent": ["import {\n  type IntegrationBundle,\n  type IntegrationDefinition,\n} from '@open-mercato/shared/modules/integrations/types'\n\nexport const integration: IntegrationDefinition = {\n  id: 'channel_expo',\n  title: 'Expo Push',\n  description:\n    'Deliver mobile push to Expo apps via the Expo push service (ExponentPushToken). Provider for the push_notifications channel.',\n  category: 'communication',\n  hub: 'communication_channels',\n  providerKey: 'expo',\n  icon: 'expo',\n  docsUrl: 'https://docs.expo.dev/push-notifications/sending-notifications/',\n  package: '@open-mercato/channel-expo',\n  version: '0.1.0',\n  author: 'Open Mercato Team',\n  company: 'Open Mercato',\n  license: 'MIT',\n  tags: ['push', 'expo', 'react-native', 'communication'],\n  apiVersions: [\n    {\n      id: 'v1',\n      label: 'Expo Push API',\n      status: 'stable',\n      default: true,\n      changelog: 'Expo push service via expo-server-sdk (ExponentPushToken delivery).',\n    },\n  ],\n  credentials: {\n    fields: [\n      {\n        key: 'accessToken',\n        label: 'Expo Access Token (optional)',\n        type: 'secret',\n        required: false,\n        helpText:\n          'Only required when Expo enhanced push security is enabled for the project. Expo dashboard -> Account -> Access Tokens. Stored encrypted at rest.',\n      },\n    ],\n  },\n  healthCheck: { service: 'channelExpoHealthCheck' },\n}\n\nexport const integrations: IntegrationDefinition[] = [integration]\nexport const bundles: IntegrationBundle[] = []\nexport const bundle: IntegrationBundle | undefined = undefined\n"],
+  "mappings": "AAKO,MAAM,cAAqC;AAAA,EAChD,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AAAA,EACF,UAAU;AAAA,EACV,KAAK;AAAA,EACL,aAAa;AAAA,EACb,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,MAAM,CAAC,QAAQ,QAAQ,gBAAgB,eAAe;AAAA,EACtD,aAAa;AAAA,IACX;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,UACE;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa,EAAE,SAAS,yBAAyB;AACnD;AAEO,MAAM,eAAwC,CAAC,WAAW;AAC1D,MAAM,UAA+B,CAAC;AACtC,MAAM,SAAwC;",
+  "names": []
+}

package/dist/modules/channel_expo/lib/adapter.js

@@ -0,0 +1,154 @@
+import { createHash } from "node:crypto";
+import {
+  BasePushChannelAdapter,
+  deviceUnregisteredResult,
+  MISSING_PUSH_TOKEN_RESULT,
+  readPushToken
+} from "@open-mercato/core/modules/communication_channels/lib/push-adapter";
+import { readPushEnvelope, resolvePushBody } from "@open-mercato/core/modules/communication_channels/lib/push-envelope";
+import { expoCredentialsSchema } from "./credentials.js";
+const PERMANENT_EXPO_RECEIPT_ERRORS = /* @__PURE__ */ new Set(["DeviceNotRegistered"]);
+function buildExpoMessage(token, envelope) {
+  const { options, silent } = envelope;
+  if (silent) {
+    return { to: token, data: envelope.data, _contentAvailable: true };
+  }
+  const message = {
+    to: token,
+    title: envelope.title,
+    body: resolvePushBody(envelope),
+    data: envelope.data,
+    sound: options.sound ?? "default"
+  };
+  if (typeof options.badge === "number") message.badge = options.badge;
+  if (options.priority) message.priority = options.priority;
+  if (options.channelId) message.channelId = options.channelId;
+  if (options.image) message.richContent = { image: options.image };
+  return message;
+}
+let clientFactory = null;
+function setExpoClientFactory(factory) {
+  clientFactory = factory;
+}
+const INSTANCE_CACHE_MAX = 32;
+const expoInstanceCache = /* @__PURE__ */ new Map();
+let expoModulePromise = null;
+function loadExpoModule() {
+  if (!expoModulePromise) {
+    const loading = import("expo-server-sdk").then((mod) => {
+      const candidate = mod;
+      return candidate.default ?? candidate;
+    });
+    loading.catch(() => {
+      if (expoModulePromise === loading) expoModulePromise = null;
+    });
+    expoModulePromise = loading;
+  }
+  return expoModulePromise;
+}
+function getExpoInstance(accessToken) {
+  const cacheKey = accessToken ? createHash("sha256").update(accessToken).digest("hex").slice(0, 16) : "no-access-token";
+  const existing = expoInstanceCache.get(cacheKey);
+  if (existing) {
+    expoInstanceCache.delete(cacheKey);
+    expoInstanceCache.set(cacheKey, existing);
+    return existing;
+  }
+  const pending = loadExpoModule().then(({ Expo }) => new Expo({ accessToken }));
+  pending.catch(() => {
+    if (expoInstanceCache.get(cacheKey) === pending) expoInstanceCache.delete(cacheKey);
+  });
+  expoInstanceCache.set(cacheKey, pending);
+  if (expoInstanceCache.size > INSTANCE_CACHE_MAX) {
+    const oldestKey = expoInstanceCache.keys().next().value;
+    if (oldestKey != null) expoInstanceCache.delete(oldestKey);
+  }
+  return pending;
+}
+function defaultClientFactory(credentials) {
+  return {
+    async isExpoPushToken(token) {
+      const { Expo } = await loadExpoModule();
+      return Expo.isExpoPushToken(token);
+    },
+    async send(messages) {
+      const expo = await getExpoInstance(credentials.accessToken);
+      return expo.sendPushNotificationsAsync(messages);
+    },
+    async getReceipts(ticketIds) {
+      const expo = await getExpoInstance(credentials.accessToken);
+      const receipts = {};
+      for (const chunk of expo.chunkPushNotificationReceiptIds(ticketIds)) {
+        Object.assign(receipts, await expo.getPushNotificationReceiptsAsync(chunk));
+      }
+      return receipts;
+    }
+  };
+}
+class ExpoChannelAdapter extends BasePushChannelAdapter {
+  constructor() {
+    super(...arguments);
+    this.providerKey = "expo";
+    this.credentialsSchema = expoCredentialsSchema;
+  }
+  async sendMessage(input) {
+    const token = readPushToken(input);
+    if (!token) return MISSING_PUSH_TOKEN_RESULT;
+    const parsedCredentials = expoCredentialsSchema.safeParse(input.credentials);
+    if (!parsedCredentials.success) {
+      return { externalMessageId: "", status: "failed", error: "invalid_expo_credentials" };
+    }
+    const client = (clientFactory ?? defaultClientFactory)(parsedCredentials.data);
+    if (!await client.isExpoPushToken(token)) {
+      return deviceUnregisteredResult({ reason: "invalid_expo_push_token" });
+    }
+    const envelope = readPushEnvelope(input.content);
+    try {
+      const tickets = await client.send([buildExpoMessage(token, envelope)]);
+      const ticket = tickets[0];
+      if (!ticket) return { externalMessageId: "", status: "failed", error: "no_response" };
+      if (ticket.status === "ok") {
+        return { externalMessageId: ticket.id ?? "", status: "sent" };
+      }
+      if (ticket.details?.error === "DeviceNotRegistered") {
+        return deviceUnregisteredResult({ reason: "DeviceNotRegistered" });
+      }
+      return { externalMessageId: "", status: "failed", error: ticket.message ?? "expo_send_failed" };
+    } catch (err) {
+      return { externalMessageId: "", status: "failed", error: err instanceof Error ? err.message : String(err) };
+    }
+  }
+  /**
+   * Poll async delivery receipts for previously-accepted tickets and report which map to a
+   * permanently-unregistered device token. Returns an entry ONLY for tickets whose receipt is ready
+   * (present in the SDK response); tickets with no receipt yet are omitted so the reaper re-checks them
+   * on a later sweep. `MessageRateExceeded` (and any other non-`DeviceNotRegistered` error) is treated
+   * as transient — the receipt resolves but the token is NOT killed.
+   */
+  async checkReceipts(ticketIds, credentials) {
+    const ids = ticketIds.filter((id) => typeof id === "string" && id.length > 0);
+    if (ids.length === 0) return [];
+    const parsedCredentials = expoCredentialsSchema.safeParse(credentials ?? {});
+    const client = (clientFactory ?? defaultClientFactory)(parsedCredentials.success ? parsedCredentials.data : {});
+    const receipts = await client.getReceipts(ids);
+    const outcomes = [];
+    for (const ticketId of ids) {
+      const receipt = receipts[ticketId];
+      if (!receipt) continue;
+      const unregistered = receipt.status === "error" && !!receipt.details?.error && PERMANENT_EXPO_RECEIPT_ERRORS.has(receipt.details.error);
+      outcomes.push({ ticketId, unregistered });
+    }
+    return outcomes;
+  }
+}
+let cachedAdapter = null;
+function getExpoChannelAdapter() {
+  if (!cachedAdapter) cachedAdapter = new ExpoChannelAdapter();
+  return cachedAdapter;
+}
+export {
+  buildExpoMessage,
+  getExpoChannelAdapter,
+  setExpoClientFactory
+};
+//# sourceMappingURL=adapter.js.map

package/dist/modules/channel_expo/lib/adapter.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/lib/adapter.ts"],
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type {\n  SendMessageInput,\n  SendMessageResult,\n} from '@open-mercato/core/modules/communication_channels/lib/adapter'\nimport {\n  BasePushChannelAdapter,\n  deviceUnregisteredResult,\n  MISSING_PUSH_TOKEN_RESULT,\n  readPushToken,\n  type PushReceiptChecker,\n  type PushReceiptOutcome,\n} from '@open-mercato/core/modules/communication_channels/lib/push-adapter'\nimport { readPushEnvelope, resolvePushBody, type PushEnvelope } from '@open-mercato/core/modules/communication_channels/lib/push-envelope'\nimport { expoCredentialsSchema, type ExpoCredentials } from './credentials'\n\nexport interface ExpoPushTicket {\n  status: 'ok' | 'error'\n  id?: string\n  message?: string\n  details?: { error?: string }\n}\n\n/**\n * Async delivery receipt fetched later by ticket id via `getPushNotificationReceiptsAsync`. This is\n * where the common \"app uninstalled\" case surfaces for Expo (`details.error === 'DeviceNotRegistered'`),\n * NOT the synchronous send ticket.\n */\nexport interface ExpoPushReceipt {\n  status: 'ok' | 'error'\n  message?: string\n  details?: { error?: string }\n}\n\n/**\n * Expo receipt-error codes that mean the device token is permanently invalid \u21D2 soft-delete the device\n * (uniform `device_unregistered` contract). Everything else (notably `MessageRateExceeded`) is transient\n * and must NOT kill the token.\n */\nconst PERMANENT_EXPO_RECEIPT_ERRORS = new Set(['DeviceNotRegistered'])\n\nexport interface ExpoPushMessage {\n  to: string\n  title?: string\n  body?: string\n  data?: Record<string, string>\n  sound?: string\n  badge?: number\n  priority?: 'default' | 'normal' | 'high'\n  channelId?: string\n  richContent?: { image?: string }\n  /** Data-only / silent delivery (iOS background wake-up). */\n  _contentAvailable?: boolean\n}\n\n/** Build the Expo message, branching on silent and applying recognized push options. */\nexport function buildExpoMessage(token: string, envelope: PushEnvelope): ExpoPushMessage {\n  const { options, silent } = envelope\n  if (silent) {\n    return { to: token, data: envelope.data, _contentAvailable: true }\n  }\n  const message: ExpoPushMessage = {\n    to: token,\n    title: envelope.title,\n    body: resolvePushBody(envelope),\n    data: envelope.data,\n    sound: options.sound ?? 'default',\n  }\n  if (typeof options.badge === 'number') message.badge = options.badge\n  if (options.priority) message.priority = options.priority\n  if (options.channelId) message.channelId = options.channelId\n  if (options.image) message.richContent = { image: options.image }\n  return message\n}\n\n/**\n * Seam over `expo-server-sdk` so the SDK (and its network client) stays out of\n * the adapter control flow and unit tests.\n */\nexport interface ExpoClientLike {\n  isExpoPushToken(token: string): boolean | Promise<boolean>\n  send(messages: ExpoPushMessage[]): Promise<ExpoPushTicket[]>\n  /** Fetch async delivery receipts keyed by ticket id (chunked internally by the SDK). */\n  getReceipts(ticketIds: string[]): Promise<Record<string, ExpoPushReceipt>>\n}\n\ntype ExpoModule = {\n  Expo: {\n    isExpoPushToken(token: string): boolean\n    new (options: { accessToken?: string }): {\n      sendPushNotificationsAsync(messages: ExpoPushMessage[]): Promise<ExpoPushTicket[]>\n      chunkPushNotificationReceiptIds(receiptIds: string[]): string[][]\n      getPushNotificationReceiptsAsync(receiptIds: string[]): Promise<Record<string, ExpoPushReceipt>>\n    }\n  }\n}\n\nexport type ExpoClientFactory = (credentials: ExpoCredentials) => ExpoClientLike\n\nlet clientFactory: ExpoClientFactory | null = null\n\n/** Test-only seam to swap the Expo client factory. */\nexport function setExpoClientFactory(factory: ExpoClientFactory | null): void {\n  clientFactory = factory\n}\n\ntype ExpoInstance = InstanceType<ExpoModule['Expo']>\n\n// Bound the Expo client cache like the FCM/APNs adapters. An Expo instance is a plain SDK client (no\n// background timer or teardown), so eviction just drops the map entry \u2014 but leaving it unbounded would\n// grow one entry per distinct tenant access token.\nconst INSTANCE_CACHE_MAX = 32\nconst expoInstanceCache = new Map<string, Promise<ExpoInstance>>()\n\nlet expoModulePromise: Promise<ExpoModule> | null = null\n\nfunction loadExpoModule(): Promise<ExpoModule> {\n  if (!expoModulePromise) {\n    const loading = import('expo-server-sdk').then((mod) => {\n      const candidate = mod as unknown as { default?: ExpoModule } & ExpoModule\n      return candidate.default ?? candidate\n    })\n    // Drop a failed import so a later call can retry instead of returning the cached rejection forever.\n    loading.catch(() => {\n      if (expoModulePromise === loading) expoModulePromise = null\n    })\n    expoModulePromise = loading\n  }\n  return expoModulePromise\n}\n\n// Key the cache on a hash of the access token, never the raw secret (mirrors the FCM/APNs adapters):\n// a Map key is trivially inspectable in a heap dump, and hashing keeps tenant credential material out\n// of the cache's key space. The empty-token case (Expo allows an unauthenticated client) keeps a stable\n// sentinel so those callers still share one instance.\nfunction getExpoInstance(accessToken: string | undefined): Promise<ExpoInstance> {\n  const cacheKey = accessToken\n    ? createHash('sha256').update(accessToken).digest('hex').slice(0, 16)\n    : 'no-access-token'\n  const existing = expoInstanceCache.get(cacheKey)\n  if (existing) {\n    // Refresh recency: delete + re-insert moves the key to the newest position.\n    expoInstanceCache.delete(cacheKey)\n    expoInstanceCache.set(cacheKey, existing)\n    return existing\n  }\n  const pending = loadExpoModule().then(({ Expo }) => new Expo({ accessToken }))\n  // Drop a failed init so a later call can retry instead of returning the cached rejection forever.\n  pending.catch(() => {\n    if (expoInstanceCache.get(cacheKey) === pending) expoInstanceCache.delete(cacheKey)\n  })\n  expoInstanceCache.set(cacheKey, pending)\n  if (expoInstanceCache.size > INSTANCE_CACHE_MAX) {\n    const oldestKey = expoInstanceCache.keys().next().value as string | undefined\n    if (oldestKey != null) expoInstanceCache.delete(oldestKey)\n  }\n  return pending\n}\n\nfunction defaultClientFactory(credentials: ExpoCredentials): ExpoClientLike {\n  return {\n    async isExpoPushToken(token: string): Promise<boolean> {\n      const { Expo } = await loadExpoModule()\n      return Expo.isExpoPushToken(token)\n    },\n    async send(messages: ExpoPushMessage[]): Promise<ExpoPushTicket[]> {\n      const expo = await getExpoInstance(credentials.accessToken)\n      return expo.sendPushNotificationsAsync(messages)\n    },\n    async getReceipts(ticketIds: string[]): Promise<Record<string, ExpoPushReceipt>> {\n      const expo = await getExpoInstance(credentials.accessToken)\n      const receipts: Record<string, ExpoPushReceipt> = {}\n      for (const chunk of expo.chunkPushNotificationReceiptIds(ticketIds)) {\n        Object.assign(receipts, await expo.getPushNotificationReceiptsAsync(chunk))\n      }\n      return receipts\n    },\n  }\n}\n\nclass ExpoChannelAdapter extends BasePushChannelAdapter implements PushReceiptChecker {\n  readonly providerKey = 'expo'\n  protected readonly credentialsSchema = expoCredentialsSchema\n\n  async sendMessage(input: SendMessageInput): Promise<SendMessageResult> {\n    const token = readPushToken(input)\n    if (!token) return MISSING_PUSH_TOKEN_RESULT\n\n    const parsedCredentials = expoCredentialsSchema.safeParse(input.credentials)\n    if (!parsedCredentials.success) {\n      return { externalMessageId: '', status: 'failed', error: 'invalid_expo_credentials' }\n    }\n\n    const client = (clientFactory ?? defaultClientFactory)(parsedCredentials.data)\n\n    // A malformed Expo token can never deliver \u2014 treat it as unregistered so the\n    // worker soft-deletes the device (uniform sentinel across providers).\n    if (!(await client.isExpoPushToken(token))) {\n      return deviceUnregisteredResult({ reason: 'invalid_expo_push_token' })\n    }\n\n    const envelope = readPushEnvelope(input.content)\n\n    try {\n      const tickets = await client.send([buildExpoMessage(token, envelope)])\n      const ticket = tickets[0]\n      if (!ticket) return { externalMessageId: '', status: 'failed', error: 'no_response' }\n      if (ticket.status === 'ok') {\n        return { externalMessageId: ticket.id ?? '', status: 'sent' }\n      }\n      // Expo delivery is two-phase. A `status: 'ok'` ticket only means Expo *accepted* the message \u2014 it\n      // does NOT confirm the token is valid. This ticket-level check catches the narrow cases Expo\n      // rejects synchronously; the common \"app uninstalled\" case (`DeviceNotRegistered` for a\n      // well-formed-but-stale token) surfaces later in the RECEIPT phase and is pruned by `checkReceipts`\n      // below, polled by the push_notifications receipt reaper.\n      if (ticket.details?.error === 'DeviceNotRegistered') {\n        return deviceUnregisteredResult({ reason: 'DeviceNotRegistered' })\n      }\n      return { externalMessageId: '', status: 'failed', error: ticket.message ?? 'expo_send_failed' }\n    } catch (err) {\n      return { externalMessageId: '', status: 'failed', error: err instanceof Error ? err.message : String(err) }\n    }\n  }\n\n  /**\n   * Poll async delivery receipts for previously-accepted tickets and report which map to a\n   * permanently-unregistered device token. Returns an entry ONLY for tickets whose receipt is ready\n   * (present in the SDK response); tickets with no receipt yet are omitted so the reaper re-checks them\n   * on a later sweep. `MessageRateExceeded` (and any other non-`DeviceNotRegistered` error) is treated\n   * as transient \u2014 the receipt resolves but the token is NOT killed.\n   */\n  async checkReceipts(ticketIds: string[], credentials: unknown): Promise<PushReceiptOutcome[]> {\n    const ids = ticketIds.filter((id) => typeof id === 'string' && id.length > 0)\n    if (ids.length === 0) return []\n\n    const parsedCredentials = expoCredentialsSchema.safeParse(credentials ?? {})\n    const client = (clientFactory ?? defaultClientFactory)(parsedCredentials.success ? parsedCredentials.data : {})\n\n    const receipts = await client.getReceipts(ids)\n    const outcomes: PushReceiptOutcome[] = []\n    for (const ticketId of ids) {\n      const receipt = receipts[ticketId]\n      if (!receipt) continue // receipt not ready yet \u2014 leave it for a later sweep\n      const unregistered = receipt.status === 'error' && !!receipt.details?.error && PERMANENT_EXPO_RECEIPT_ERRORS.has(receipt.details.error)\n      outcomes.push({ ticketId, unregistered })\n    }\n    return outcomes\n  }\n}\n\nlet cachedAdapter: ExpoChannelAdapter | null = null\n\nexport function getExpoChannelAdapter(): ExpoChannelAdapter {\n  if (!cachedAdapter) cachedAdapter = new ExpoChannelAdapter()\n  return cachedAdapter\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAK3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP,SAAS,kBAAkB,uBAA0C;AACrE,SAAS,6BAAmD;AAyB5D,MAAM,gCAAgC,oBAAI,IAAI,CAAC,qBAAqB,CAAC;AAiB9D,SAAS,iBAAiB,OAAe,UAAyC;AACvF,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,MAAI,QAAQ;AACV,WAAO,EAAE,IAAI,OAAO,MAAM,SAAS,MAAM,mBAAmB,KAAK;AAAA,EACnE;AACA,QAAM,UAA2B;AAAA,IAC/B,IAAI;AAAA,IACJ,OAAO,SAAS;AAAA,IAChB,MAAM,gBAAgB,QAAQ;AAAA,IAC9B,MAAM,SAAS;AAAA,IACf,OAAO,QAAQ,SAAS;AAAA,EAC1B;AACA,MAAI,OAAO,QAAQ,UAAU,SAAU,SAAQ,QAAQ,QAAQ;AAC/D,MAAI,QAAQ,SAAU,SAAQ,WAAW,QAAQ;AACjD,MAAI,QAAQ,UAAW,SAAQ,YAAY,QAAQ;AACnD,MAAI,QAAQ,MAAO,SAAQ,cAAc,EAAE,OAAO,QAAQ,MAAM;AAChE,SAAO;AACT;AA0BA,IAAI,gBAA0C;AAGvC,SAAS,qBAAqB,SAAyC;AAC5E,kBAAgB;AAClB;AAOA,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB,oBAAI,IAAmC;AAEjE,IAAI,oBAAgD;AAEpD,SAAS,iBAAsC;AAC7C,MAAI,CAAC,mBAAmB;AACtB,UAAM,UAAU,OAAO,iBAAiB,EAAE,KAAK,CAAC,QAAQ;AACtD,YAAM,YAAY;AAClB,aAAO,UAAU,WAAW;AAAA,IAC9B,CAAC;AAED,YAAQ,MAAM,MAAM;AAClB,UAAI,sBAAsB,QAAS,qBAAoB;AAAA,IACzD,CAAC;AACD,wBAAoB;AAAA,EACtB;AACA,SAAO;AACT;AAMA,SAAS,gBAAgB,aAAwD;AAC/E,QAAM,WAAW,cACb,WAAW,QAAQ,EAAE,OAAO,WAAW,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,IAClE;AACJ,QAAM,WAAW,kBAAkB,IAAI,QAAQ;AAC/C,MAAI,UAAU;AAEZ,sBAAkB,OAAO,QAAQ;AACjC,sBAAkB,IAAI,UAAU,QAAQ;AACxC,WAAO;AAAA,EACT;AACA,QAAM,UAAU,eAAe,EAAE,KAAK,CAAC,EAAE,KAAK,MAAM,IAAI,KAAK,EAAE,YAAY,CAAC,CAAC;AAE7E,UAAQ,MAAM,MAAM;AAClB,QAAI,kBAAkB,IAAI,QAAQ,MAAM,QAAS,mBAAkB,OAAO,QAAQ;AAAA,EACpF,CAAC;AACD,oBAAkB,IAAI,UAAU,OAAO;AACvC,MAAI,kBAAkB,OAAO,oBAAoB;AAC/C,UAAM,YAAY,kBAAkB,KAAK,EAAE,KAAK,EAAE;AAClD,QAAI,aAAa,KAAM,mBAAkB,OAAO,SAAS;AAAA,EAC3D;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,aAA8C;AAC1E,SAAO;AAAA,IACL,MAAM,gBAAgB,OAAiC;AACrD,YAAM,EAAE,KAAK,IAAI,MAAM,eAAe;AACtC,aAAO,KAAK,gBAAgB,KAAK;AAAA,IACnC;AAAA,IACA,MAAM,KAAK,UAAwD;AACjE,YAAM,OAAO,MAAM,gBAAgB,YAAY,WAAW;AAC1D,aAAO,KAAK,2BAA2B,QAAQ;AAAA,IACjD;AAAA,IACA,MAAM,YAAY,WAA+D;AAC/E,YAAM,OAAO,MAAM,gBAAgB,YAAY,WAAW;AAC1D,YAAM,WAA4C,CAAC;AACnD,iBAAW,SAAS,KAAK,gCAAgC,SAAS,GAAG;AACnE,eAAO,OAAO,UAAU,MAAM,KAAK,iCAAiC,KAAK,CAAC;AAAA,MAC5E;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,MAAM,2BAA2B,uBAAqD;AAAA,EAAtF;AAAA;AACE,SAAS,cAAc;AACvB,SAAmB,oBAAoB;AAAA;AAAA,EAEvC,MAAM,YAAY,OAAqD;AACrE,UAAM,QAAQ,cAAc,KAAK;AACjC,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,oBAAoB,sBAAsB,UAAU,MAAM,WAAW;AAC3E,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,2BAA2B;AAAA,IACtF;AAEA,UAAM,UAAU,iBAAiB,sBAAsB,kBAAkB,IAAI;AAI7E,QAAI,CAAE,MAAM,OAAO,gBAAgB,KAAK,GAAI;AAC1C,aAAO,yBAAyB,EAAE,QAAQ,0BAA0B,CAAC;AAAA,IACvE;AAEA,UAAM,WAAW,iBAAiB,MAAM,OAAO;AAE/C,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,KAAK,CAAC,iBAAiB,OAAO,QAAQ,CAAC,CAAC;AACrE,YAAM,SAAS,QAAQ,CAAC;AACxB,UAAI,CAAC,OAAQ,QAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,cAAc;AACpF,UAAI,OAAO,WAAW,MAAM;AAC1B,eAAO,EAAE,mBAAmB,OAAO,MAAM,IAAI,QAAQ,OAAO;AAAA,MAC9D;AAMA,UAAI,OAAO,SAAS,UAAU,uBAAuB;AACnD,eAAO,yBAAyB,EAAE,QAAQ,sBAAsB,CAAC;AAAA,MACnE;AACA,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,OAAO,WAAW,mBAAmB;AAAA,IAChG,SAAS,KAAK;AACZ,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,IAC5G;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,cAAc,WAAqB,aAAqD;AAC5F,UAAM,MAAM,UAAU,OAAO,CAAC,OAAO,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAC5E,QAAI,IAAI,WAAW,EAAG,QAAO,CAAC;AAE9B,UAAM,oBAAoB,sBAAsB,UAAU,eAAe,CAAC,CAAC;AAC3E,UAAM,UAAU,iBAAiB,sBAAsB,kBAAkB,UAAU,kBAAkB,OAAO,CAAC,CAAC;AAE9G,UAAM,WAAW,MAAM,OAAO,YAAY,GAAG;AAC7C,UAAM,WAAiC,CAAC;AACxC,eAAW,YAAY,KAAK;AAC1B,YAAM,UAAU,SAAS,QAAQ;AACjC,UAAI,CAAC,QAAS;AACd,YAAM,eAAe,QAAQ,WAAW,WAAW,CAAC,CAAC,QAAQ,SAAS,SAAS,8BAA8B,IAAI,QAAQ,QAAQ,KAAK;AACtI,eAAS,KAAK,EAAE,UAAU,aAAa,CAAC;AAAA,IAC1C;AACA,WAAO;AAAA,EACT;AACF;AAEA,IAAI,gBAA2C;AAExC,SAAS,wBAA4C;AAC1D,MAAI,CAAC,cAAe,iBAAgB,IAAI,mBAAmB;AAC3D,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/channel_expo/lib/credentials.js

@@ -0,0 +1,8 @@
+import { z } from "zod";
+const expoCredentialsSchema = z.object({
+  accessToken: z.string().optional()
+}).passthrough();
+export {
+  expoCredentialsSchema
+};
+//# sourceMappingURL=credentials.js.map

package/dist/modules/channel_expo/lib/credentials.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/lib/credentials.ts"],
+  "sourcesContent": ["import { z } from 'zod'\n\n/**\n * Tenant-level Expo credentials persisted on `IntegrationCredentials` for provider\n * `channel_expo`. The access token is optional (only required when Expo \"enhanced\n * push security\" is enabled for the project); stored encrypted at rest.\n */\nexport const expoCredentialsSchema = z\n  .object({\n    accessToken: z.string().optional(),\n  })\n  .passthrough()\n\nexport type ExpoCredentials = z.infer<typeof expoCredentialsSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAOX,MAAM,wBAAwB,EAClC,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,SAAS;AACnC,CAAC,EACA,YAAY;",
+  "names": []
+}

package/dist/modules/channel_expo/lib/fake-provider.js

@@ -0,0 +1,40 @@
+import {
+  isPushFakeProvidersEnabled,
+  recordFakePush,
+  warnPushFakeProvidersActive
+} from "@open-mercato/core/modules/push_notifications/lib/fake-provider-recorder";
+import {
+  setExpoClientFactory
+} from "./adapter.js";
+const UNREGISTERED_TICKET_MARKER = "unreg";
+function ensureExpoFakeProviderInstalled() {
+  if (!isPushFakeProvidersEnabled()) return;
+  warnPushFakeProvidersActive("expo");
+  setExpoClientFactory(() => ({
+    isExpoPushToken() {
+      return true;
+    },
+    async send(messages) {
+      return messages.map((message) => {
+        const token = message.to;
+        recordFakePush("expo", token, message);
+        if (token.includes("fail")) {
+          return { status: "error", message: "fake expo transient failure" };
+        }
+        const marker = token.includes("unregistered") ? `${UNREGISTERED_TICKET_MARKER}-` : "";
+        return { status: "ok", id: `expo-fake-${marker}${token.slice(-8) || "token"}` };
+      });
+    },
+    async getReceipts(ticketIds) {
+      const receipts = {};
+      for (const ticketId of ticketIds) {
+        receipts[ticketId] = ticketId.includes(`-${UNREGISTERED_TICKET_MARKER}-`) ? { status: "error", details: { error: "DeviceNotRegistered" } } : { status: "ok" };
+      }
+      return receipts;
+    }
+  }));
+}
+export {
+  ensureExpoFakeProviderInstalled
+};
+//# sourceMappingURL=fake-provider.js.map