@open-mercato/channel-expo 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/channel_expo/lib/fake-provider.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/lib/fake-provider.ts"],
+  "sourcesContent": ["import {\n  isPushFakeProvidersEnabled,\n  recordFakePush,\n  warnPushFakeProvidersActive,\n} from '@open-mercato/core/modules/push_notifications/lib/fake-provider-recorder'\nimport {\n  setExpoClientFactory,\n  type ExpoPushMessage,\n  type ExpoPushReceipt,\n  type ExpoPushTicket,\n} from './adapter'\n\n/**\n * Network-free `expo-server-sdk` client used ONLY by integration tests.\n *\n * Swaps the SDK client behind the adapter's existing seam, so the real adapter still runs its token\n * validation, chunking, and `DeviceNotRegistered` \u2192 `device_unregistered` mapping. The adapter itself is\n * never replaced or re-registered.\n *\n * `isExpoPushToken` accepts every token: the sentinels below are not real `ExponentPushToken[...]`\n * values, and rejecting them would short-circuit the adapter before it ever reaches the ticket path.\n *\n * Token sentinels match `push_stub`'s convention (see push-stub-adapter.ts):\n *   - token containing `unregistered` \u2192 an accepted ticket whose *receipt* later reports\n *     `DeviceNotRegistered`, reproducing Expo's real two-phase behavior for an uninstalled app\n *   - token containing `fail`         \u2192 a rejected ticket (retryable)\n *   - otherwise                        \u2192 success\n *\n * The sentinel is encoded into the ticket id because `getReceipts` is polled by the reaper in a\n * *different* process than the send: the fake keeps no cross-process state.\n *\n * Production safety: never installed at module import; no-op unless `OM_PUSH_FAKE_PROVIDERS` is set.\n */\nconst UNREGISTERED_TICKET_MARKER = 'unreg'\n\nexport function ensureExpoFakeProviderInstalled(): void {\n  if (!isPushFakeProvidersEnabled()) return\n  warnPushFakeProvidersActive('expo')\n  setExpoClientFactory(() => ({\n    isExpoPushToken(): boolean {\n      return true\n    },\n    async send(messages: ExpoPushMessage[]): Promise<ExpoPushTicket[]> {\n      return messages.map((message) => {\n        const token = message.to\n        recordFakePush('expo', token, message as unknown as Record<string, unknown>)\n        if (token.includes('fail')) {\n          return { status: 'error', message: 'fake expo transient failure' }\n        }\n        const marker = token.includes('unregistered') ? `${UNREGISTERED_TICKET_MARKER}-` : ''\n        return { status: 'ok', id: `expo-fake-${marker}${token.slice(-8) || 'token'}` }\n      })\n    },\n    async getReceipts(ticketIds: string[]): Promise<Record<string, ExpoPushReceipt>> {\n      const receipts: Record<string, ExpoPushReceipt> = {}\n      for (const ticketId of ticketIds) {\n        receipts[ticketId] = ticketId.includes(`-${UNREGISTERED_TICKET_MARKER}-`)\n          ? { status: 'error', details: { error: 'DeviceNotRegistered' } }\n          : { status: 'ok' }\n      }\n      return receipts\n    },\n  }))\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAIK;AAuBP,MAAM,6BAA6B;AAE5B,SAAS,kCAAwC;AACtD,MAAI,CAAC,2BAA2B,EAAG;AACnC,8BAA4B,MAAM;AAClC,uBAAqB,OAAO;AAAA,IAC1B,kBAA2B;AACzB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,KAAK,UAAwD;AACjE,aAAO,SAAS,IAAI,CAAC,YAAY;AAC/B,cAAM,QAAQ,QAAQ;AACtB,uBAAe,QAAQ,OAAO,OAA6C;AAC3E,YAAI,MAAM,SAAS,MAAM,GAAG;AAC1B,iBAAO,EAAE,QAAQ,SAAS,SAAS,8BAA8B;AAAA,QACnE;AACA,cAAM,SAAS,MAAM,SAAS,cAAc,IAAI,GAAG,0BAA0B,MAAM;AACnF,eAAO,EAAE,QAAQ,MAAM,IAAI,aAAa,MAAM,GAAG,MAAM,MAAM,EAAE,KAAK,OAAO,GAAG;AAAA,MAChF,CAAC;AAAA,IACH;AAAA,IACA,MAAM,YAAY,WAA+D;AAC/E,YAAM,WAA4C,CAAC;AACnD,iBAAW,YAAY,WAAW;AAChC,iBAAS,QAAQ,IAAI,SAAS,SAAS,IAAI,0BAA0B,GAAG,IACpE,EAAE,QAAQ,SAAS,SAAS,EAAE,OAAO,sBAAsB,EAAE,IAC7D,EAAE,QAAQ,KAAK;AAAA,MACrB;AACA,aAAO;AAAA,IACT;AAAA,EACF,EAAE;AACJ;",
+  "names": []
+}

package/dist/modules/channel_expo/lib/health.js

@@ -0,0 +1,10 @@
+import { makePushClientConfigHealthCheck } from "@open-mercato/core/modules/push_notifications/lib/push-health";
+import { expoCredentialsSchema } from "./credentials.js";
+const channelExpoHealthCheck = makePushClientConfigHealthCheck({
+  schema: expoCredentialsSchema,
+  providerLabel: "Expo"
+});
+export {
+  channelExpoHealthCheck
+};
+//# sourceMappingURL=health.js.map

package/dist/modules/channel_expo/lib/health.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/lib/health.ts"],
+  "sourcesContent": ["import { makePushClientConfigHealthCheck } from '@open-mercato/core/modules/push_notifications/lib/push-health'\nimport { expoCredentialsSchema } from './credentials'\n\n/**\n * Liveness probe for the Expo integration. Expo credentials are minimal (an\n * optional access token), so the probe just confirms the stored config is\n * well-formed \u2014 no network call. Per-device token validity surfaces on delivery\n * (`device_unregistered` soft-deletes).\n */\nexport const channelExpoHealthCheck = makePushClientConfigHealthCheck({\n  schema: expoCredentialsSchema,\n  providerLabel: 'Expo',\n})\n"],
+  "mappings": "AAAA,SAAS,uCAAuC;AAChD,SAAS,6BAA6B;AAQ/B,MAAM,yBAAyB,gCAAgC;AAAA,EACpE,QAAQ;AAAA,EACR,eAAe;AACjB,CAAC;",
+  "names": []
+}

package/dist/modules/channel_expo/setup.js

@@ -0,0 +1,25 @@
+import {
+  hasChannelAdapter,
+  registerChannelAdapter
+} from "@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton";
+import { getExpoChannelAdapter } from "./lib/adapter.js";
+function ensureExpoAdapterRegistered() {
+  if (hasChannelAdapter("expo")) return;
+  registerChannelAdapter(getExpoChannelAdapter());
+}
+ensureExpoAdapterRegistered();
+const setup = {
+  defaultRoleFeatures: {
+    superadmin: ["channel_expo.view", "channel_expo.configure"],
+    admin: ["channel_expo.view", "channel_expo.configure"]
+  },
+  async onTenantCreated() {
+    ensureExpoAdapterRegistered();
+  }
+};
+var setup_default = setup;
+export {
+  setup_default as default,
+  setup
+};
+//# sourceMappingURL=setup.js.map

package/dist/modules/channel_expo/setup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_expo/setup.ts"],
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport {\n  hasChannelAdapter,\n  registerChannelAdapter,\n} from '@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton'\nimport { getExpoChannelAdapter } from './lib/adapter'\n\n/**\n * Register the Expo `ChannelAdapter` once per process at import time. Guarded with\n * `hasChannelAdapter` to silence the duplicate error on dev-mode HMR + repeated\n * test imports. Provider credentials (optional access token) are persisted per\n * tenant via the standard `IntegrationCredentials` flow for `channel_expo`.\n */\nfunction ensureExpoAdapterRegistered(): void {\n  if (hasChannelAdapter('expo')) return\n  registerChannelAdapter(getExpoChannelAdapter())\n}\n\nensureExpoAdapterRegistered()\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: ['channel_expo.view', 'channel_expo.configure'],\n    admin: ['channel_expo.view', 'channel_expo.configure'],\n  },\n  async onTenantCreated() {\n    ensureExpoAdapterRegistered()\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AAQtC,SAAS,8BAAoC;AAC3C,MAAI,kBAAkB,MAAM,EAAG;AAC/B,yBAAuB,sBAAsB,CAAC;AAChD;AAEA,4BAA4B;AAErB,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY,CAAC,qBAAqB,wBAAwB;AAAA,IAC1D,OAAO,CAAC,qBAAqB,wBAAwB;AAAA,EACvD;AAAA,EACA,MAAM,kBAAkB;AACtB,gCAA4B;AAAA,EAC9B;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/channel_expo/widgets/injection/connect/widget.client.js

@@ -0,0 +1,157 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { useGuardedMutation } from "@open-mercato/ui/backend/injection/useGuardedMutation";
+import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import {
+  resolvePushConnectErrorMessage,
+  resolvePushConnectFieldErrors
+} from "@open-mercato/core/modules/communication_channels/lib/push-connect-error";
+import { Button } from "@open-mercato/ui/primitives/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle
+} from "@open-mercato/ui/primitives/dialog";
+import { Input } from "@open-mercato/ui/primitives/input";
+import { Label } from "@open-mercato/ui/primitives/label";
+import { PasswordInput } from "@open-mercato/ui/primitives/password-input";
+const INITIAL_FORM = {
+  displayName: "Expo Push",
+  accessToken: ""
+};
+function ConnectExpoWidget({
+  context
+}) {
+  const t = useT();
+  const widgetContext = context;
+  const [open, setOpen] = React.useState(false);
+  const [pending, setPending] = React.useState(false);
+  const [form, setForm] = React.useState(INITIAL_FORM);
+  const [fieldErrors, setFieldErrors] = React.useState({});
+  const { runMutation, retryLastMutation } = useGuardedMutation({
+    contextId: "channel-expo-connect",
+    blockedMessage: t("communication_channels.push.connect.blocked", "Connection blocked by validation")
+  });
+  const mutationContext = React.useMemo(
+    () => ({ providerKey: "expo", retryLastMutation }),
+    [retryLastMutation]
+  );
+  const update = React.useCallback(
+    (key, value) => {
+      setForm((current) => ({ ...current, [key]: value }));
+      setFieldErrors((current) => {
+        if (!current[key]) return current;
+        const next = { ...current };
+        delete next[key];
+        return next;
+      });
+    },
+    []
+  );
+  const submit = React.useCallback(async () => {
+    if (pending) return;
+    setPending(true);
+    setFieldErrors({});
+    const displayName = form.displayName.trim() || "Expo Push";
+    try {
+      const response = await runMutation({
+        context: mutationContext,
+        mutationPayload: { providerKey: "expo", displayName },
+        operation: () => apiCall("/api/communication_channels/channels/connect/tenant-credentials", {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({
+            providerKey: "expo",
+            displayName,
+            credentials: {
+              ...form.accessToken.trim() ? { accessToken: form.accessToken.trim() } : {}
+            }
+          })
+        })
+      });
+      const body = response.result;
+      if (!response.ok) {
+        setFieldErrors(resolvePushConnectFieldErrors(t, body));
+        flash(resolvePushConnectErrorMessage(t, body), "error");
+        return;
+      }
+      flash(t("communication_channels.push.connect.connected", "Push provider connected."), "success");
+      setOpen(false);
+      setForm(INITIAL_FORM);
+      widgetContext?.reload?.();
+    } finally {
+      setPending(false);
+    }
+  }, [form, mutationContext, pending, runMutation, t, widgetContext]);
+  const onDialogKeyDown = React.useCallback(
+    (event) => {
+      if ((event.metaKey || event.ctrlKey) && event.key === "Enter") {
+        event.preventDefault();
+        void submit();
+      }
+    },
+    [submit]
+  );
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", onClick: () => setOpen(true), children: t("communication_channels.push.connect.button.expo", "Connect Expo") }),
+    /* @__PURE__ */ jsx(Dialog, { open, onOpenChange: setOpen, children: /* @__PURE__ */ jsxs(DialogContent, { onKeyDown: onDialogKeyDown, children: [
+      /* @__PURE__ */ jsx(DialogHeader, { children: /* @__PURE__ */ jsx(DialogTitle, { children: t("communication_channels.push.connect.title.expo", "Connect Expo Push") }) }),
+      /* @__PURE__ */ jsxs("div", { className: "grid gap-4 py-2", children: [
+        /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t(
+          "communication_channels.push.connect.description",
+          "This is a shared, tenant-wide channel \u2014 every user's devices in this workspace are served by it."
+        ) }),
+        /* @__PURE__ */ jsx(
+          Field,
+          {
+            label: t("communication_channels.push.connect.displayName", "Display name"),
+            error: fieldErrors.displayName,
+            children: /* @__PURE__ */ jsx(
+              Input,
+              {
+                value: form.displayName,
+                onChange: (event) => update("displayName", event.target.value),
+                "aria-invalid": Boolean(fieldErrors.displayName)
+              }
+            )
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Field,
+          {
+            label: t("communication_channels.push.connect.fields.expo.accessToken", "Access token (optional)"),
+            error: fieldErrors.accessToken,
+            children: /* @__PURE__ */ jsx(
+              PasswordInput,
+              {
+                value: form.accessToken,
+                onChange: (event) => update("accessToken", event.target.value),
+                "aria-invalid": Boolean(fieldErrors.accessToken)
+              }
+            )
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs(DialogFooter, { children: [
+        /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", onClick: () => setOpen(false), disabled: pending, children: t("communication_channels.push.connect.cancel", "Cancel") }),
+        /* @__PURE__ */ jsx(Button, { type: "button", onClick: () => void submit(), disabled: pending, children: pending ? t("communication_channels.push.connect.connecting", "Connecting\u2026") : t("communication_channels.push.connect.save", "Connect") })
+      ] })
+    ] }) })
+  ] });
+}
+function Field(props) {
+  return /* @__PURE__ */ jsxs("label", { className: "grid gap-1.5", children: [
+    /* @__PURE__ */ jsx(Label, { asChild: true, children: /* @__PURE__ */ jsx("span", { children: props.label }) }),
+    props.children,
+    props.error ? /* @__PURE__ */ jsx("span", { className: "text-xs text-destructive", children: props.error }) : null
+  ] });
+}
+export {
+  ConnectExpoWidget as default
+};
+//# sourceMappingURL=widget.client.js.map

package/dist/modules/channel_expo/widgets/injection/connect/widget.client.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/channel_expo/widgets/injection/connect/widget.client.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport {\n  resolvePushConnectErrorMessage,\n  resolvePushConnectFieldErrors,\n} from '@open-mercato/core/modules/communication_channels/lib/push-connect-error'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport {\n  Dialog,\n  DialogContent,\n  DialogFooter,\n  DialogHeader,\n  DialogTitle,\n} from '@open-mercato/ui/primitives/dialog'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { Label } from '@open-mercato/ui/primitives/label'\nimport { PasswordInput } from '@open-mercato/ui/primitives/password-input'\n\ntype WidgetContext = Record<string, unknown> & {\n  reload?: () => void\n}\n\ntype ConnectResponse = {\n  channelId?: string\n  error?: string\n  code?: string\n  fieldErrors?: Record<string, string>\n  fieldErrorCodes?: Record<string, string>\n}\n\ntype FormState = {\n  displayName: string\n  accessToken: string\n}\n\nconst INITIAL_FORM: FormState = {\n  displayName: 'Expo Push',\n  accessToken: '',\n}\n\nexport default function ConnectExpoWidget({\n  context,\n}: InjectionWidgetComponentProps<Record<string, unknown>, Record<string, unknown>>) {\n  const t = useT()\n  const widgetContext = context as WidgetContext | undefined\n  const [open, setOpen] = React.useState(false)\n  const [pending, setPending] = React.useState(false)\n  const [form, setForm] = React.useState<FormState>(INITIAL_FORM)\n  const [fieldErrors, setFieldErrors] = React.useState<Record<string, string>>({})\n  const { runMutation, retryLastMutation } = useGuardedMutation({\n    contextId: 'channel-expo-connect',\n    blockedMessage: t('communication_channels.push.connect.blocked', 'Connection blocked by validation'),\n  })\n  const mutationContext = React.useMemo(\n    () => ({ providerKey: 'expo', retryLastMutation }),\n    [retryLastMutation],\n  )\n\n  const update = React.useCallback(\n    <K extends keyof FormState>(key: K, value: FormState[K]) => {\n      setForm((current) => ({ ...current, [key]: value }))\n      setFieldErrors((current) => {\n        if (!current[key]) return current\n        const next = { ...current }\n        delete next[key]\n        return next\n      })\n    },\n    [],\n  )\n\n  const submit = React.useCallback(async () => {\n    if (pending) return\n    setPending(true)\n    setFieldErrors({})\n    const displayName = form.displayName.trim() || 'Expo Push'\n    try {\n      const response = await runMutation({\n        context: mutationContext,\n        mutationPayload: { providerKey: 'expo', displayName },\n        operation: () =>\n          apiCall<ConnectResponse>('/api/communication_channels/channels/connect/tenant-credentials', {\n            method: 'POST',\n            headers: { 'content-type': 'application/json' },\n            body: JSON.stringify({\n              providerKey: 'expo',\n              displayName,\n              credentials: {\n                ...(form.accessToken.trim() ? { accessToken: form.accessToken.trim() } : {}),\n              },\n            }),\n          }),\n      })\n      const body = response.result as ConnectResponse | undefined\n      if (!response.ok) {\n        setFieldErrors(resolvePushConnectFieldErrors(t, body))\n        flash(resolvePushConnectErrorMessage(t, body), 'error')\n        return\n      }\n      flash(t('communication_channels.push.connect.connected', 'Push provider connected.'), 'success')\n      setOpen(false)\n      setForm(INITIAL_FORM)\n      widgetContext?.reload?.()\n    } finally {\n      setPending(false)\n    }\n  }, [form, mutationContext, pending, runMutation, t, widgetContext])\n\n  const onDialogKeyDown = React.useCallback(\n    (event: React.KeyboardEvent<HTMLDivElement>) => {\n      if ((event.metaKey || event.ctrlKey) && event.key === 'Enter') {\n        event.preventDefault()\n        void submit()\n      }\n    },\n    [submit],\n  )\n\n  return (\n    <>\n      <Button type=\"button\" variant=\"outline\" onClick={() => setOpen(true)}>\n        {t('communication_channels.push.connect.button.expo', 'Connect Expo')}\n      </Button>\n      <Dialog open={open} onOpenChange={setOpen}>\n        <DialogContent onKeyDown={onDialogKeyDown}>\n          <DialogHeader>\n            <DialogTitle>\n              {t('communication_channels.push.connect.title.expo', 'Connect Expo Push')}\n            </DialogTitle>\n          </DialogHeader>\n\n          <div className=\"grid gap-4 py-2\">\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\n                'communication_channels.push.connect.description',\n                \"This is a shared, tenant-wide channel \u2014 every user's devices in this workspace are served by it.\",\n              )}\n            </p>\n            <Field\n              label={t('communication_channels.push.connect.displayName', 'Display name')}\n              error={fieldErrors.displayName}\n            >\n              <Input\n                value={form.displayName}\n                onChange={(event) => update('displayName', event.target.value)}\n                aria-invalid={Boolean(fieldErrors.displayName)}\n              />\n            </Field>\n            <Field\n              label={t('communication_channels.push.connect.fields.expo.accessToken', 'Access token (optional)')}\n              error={fieldErrors.accessToken}\n            >\n              <PasswordInput\n                value={form.accessToken}\n                onChange={(event) => update('accessToken', event.target.value)}\n                aria-invalid={Boolean(fieldErrors.accessToken)}\n              />\n            </Field>\n          </div>\n\n          <DialogFooter>\n            <Button type=\"button\" variant=\"outline\" onClick={() => setOpen(false)} disabled={pending}>\n              {t('communication_channels.push.connect.cancel', 'Cancel')}\n            </Button>\n            <Button type=\"button\" onClick={() => void submit()} disabled={pending}>\n              {pending\n                ? t('communication_channels.push.connect.connecting', 'Connecting\u2026')\n                : t('communication_channels.push.connect.save', 'Connect')}\n            </Button>\n          </DialogFooter>\n        </DialogContent>\n      </Dialog>\n    </>\n  )\n}\n\nfunction Field(props: { label: string; error?: string; children: React.ReactNode }) {\n  return (\n    <label className=\"grid gap-1.5\">\n      <Label asChild>\n        <span>{props.label}</span>\n      </Label>\n      {props.children}\n      {props.error ? <span className=\"text-xs text-destructive\">{props.error}</span> : null}\n    </label>\n  )\n}\n"],
+  "mappings": ";AA6HI,mBACE,KAWI,YAZN;AA3HJ,YAAY,WAAW;AAEvB,SAAS,YAAY;AACrB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,qBAAqB;AAmB9B,MAAM,eAA0B;AAAA,EAC9B,aAAa;AAAA,EACb,aAAa;AACf;AAEe,SAAR,kBAAmC;AAAA,EACxC;AACF,GAAoF;AAClF,QAAM,IAAI,KAAK;AACf,QAAM,gBAAgB;AACtB,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAoB,YAAY;AAC9D,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAiC,CAAC,CAAC;AAC/E,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAAmB;AAAA,IAC5D,WAAW;AAAA,IACX,gBAAgB,EAAE,+CAA+C,kCAAkC;AAAA,EACrG,CAAC;AACD,QAAM,kBAAkB,MAAM;AAAA,IAC5B,OAAO,EAAE,aAAa,QAAQ,kBAAkB;AAAA,IAChD,CAAC,iBAAiB;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB,CAA4B,KAAQ,UAAwB;AAC1D,cAAQ,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,GAAG,GAAG,MAAM,EAAE;AACnD,qBAAe,CAAC,YAAY;AAC1B,YAAI,CAAC,QAAQ,GAAG,EAAG,QAAO;AAC1B,cAAM,OAAO,EAAE,GAAG,QAAQ;AAC1B,eAAO,KAAK,GAAG;AACf,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,MAAM,YAAY,YAAY;AAC3C,QAAI,QAAS;AACb,eAAW,IAAI;AACf,mBAAe,CAAC,CAAC;AACjB,UAAM,cAAc,KAAK,YAAY,KAAK,KAAK;AAC/C,QAAI;AACF,YAAM,WAAW,MAAM,YAAY;AAAA,QACjC,SAAS;AAAA,QACT,iBAAiB,EAAE,aAAa,QAAQ,YAAY;AAAA,QACpD,WAAW,MACT,QAAyB,mEAAmE;AAAA,UAC1F,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB,aAAa;AAAA,YACb;AAAA,YACA,aAAa;AAAA,cACX,GAAI,KAAK,YAAY,KAAK,IAAI,EAAE,aAAa,KAAK,YAAY,KAAK,EAAE,IAAI,CAAC;AAAA,YAC5E;AAAA,UACF,CAAC;AAAA,QACH,CAAC;AAAA,MACL,CAAC;AACD,YAAM,OAAO,SAAS;AACtB,UAAI,CAAC,SAAS,IAAI;AAChB,uBAAe,8BAA8B,GAAG,IAAI,CAAC;AACrD,cAAM,+BAA+B,GAAG,IAAI,GAAG,OAAO;AACtD;AAAA,MACF;AACA,YAAM,EAAE,iDAAiD,0BAA0B,GAAG,SAAS;AAC/F,cAAQ,KAAK;AACb,cAAQ,YAAY;AACpB,qBAAe,SAAS;AAAA,IAC1B,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,MAAM,iBAAiB,SAAS,aAAa,GAAG,aAAa,CAAC;AAElE,QAAM,kBAAkB,MAAM;AAAA,IAC5B,CAAC,UAA+C;AAC9C,WAAK,MAAM,WAAW,MAAM,YAAY,MAAM,QAAQ,SAAS;AAC7D,cAAM,eAAe;AACrB,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AAEA,SACE,iCACE;AAAA,wBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,SAAS,MAAM,QAAQ,IAAI,GAChE,YAAE,mDAAmD,cAAc,GACtE;AAAA,IACA,oBAAC,UAAO,MAAY,cAAc,SAChC,+BAAC,iBAAc,WAAW,iBACxB;AAAA,0BAAC,gBACC,8BAAC,eACE,YAAE,kDAAkD,mBAAmB,GAC1E,GACF;AAAA,MAEA,qBAAC,SAAI,WAAU,mBACb;AAAA,4BAAC,OAAE,WAAU,iCACV;AAAA,UACC;AAAA,UACA;AAAA,QACF,GACF;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,EAAE,mDAAmD,cAAc;AAAA,YAC1E,OAAO,YAAY;AAAA,YAEnB;AAAA,cAAC;AAAA;AAAA,gBACC,OAAO,KAAK;AAAA,gBACZ,UAAU,CAAC,UAAU,OAAO,eAAe,MAAM,OAAO,KAAK;AAAA,gBAC7D,gBAAc,QAAQ,YAAY,WAAW;AAAA;AAAA,YAC/C;AAAA;AAAA,QACF;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,EAAE,+DAA+D,yBAAyB;AAAA,YACjG,OAAO,YAAY;AAAA,YAEnB;AAAA,cAAC;AAAA;AAAA,gBACC,OAAO,KAAK;AAAA,gBACZ,UAAU,CAAC,UAAU,OAAO,eAAe,MAAM,OAAO,KAAK;AAAA,gBAC7D,gBAAc,QAAQ,YAAY,WAAW;AAAA;AAAA,YAC/C;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEA,qBAAC,gBACC;AAAA,4BAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,SAAS,MAAM,QAAQ,KAAK,GAAG,UAAU,SAC9E,YAAE,8CAA8C,QAAQ,GAC3D;AAAA,QACA,oBAAC,UAAO,MAAK,UAAS,SAAS,MAAM,KAAK,OAAO,GAAG,UAAU,SAC3D,oBACG,EAAE,kDAAkD,kBAAa,IACjE,EAAE,4CAA4C,SAAS,GAC7D;AAAA,SACF;AAAA,OACF,GACF;AAAA,KACF;AAEJ;AAEA,SAAS,MAAM,OAAqE;AAClF,SACE,qBAAC,WAAM,WAAU,gBACf;AAAA,wBAAC,SAAM,SAAO,MACZ,8BAAC,UAAM,gBAAM,OAAM,GACrB;AAAA,IACC,MAAM;AAAA,IACN,MAAM,QAAQ,oBAAC,UAAK,WAAU,4BAA4B,gBAAM,OAAM,IAAU;AAAA,KACnF;AAEJ;",
+  "names": []
+}

package/dist/modules/channel_expo/widgets/injection/connect/widget.js

@@ -0,0 +1,17 @@
+import ConnectExpoWidget from "./widget.client.js";
+const widget = {
+  metadata: {
+    id: "channel_expo.injection.connect",
+    title: "Connect Expo",
+    description: "Connects a tenant-wide Expo push channel.",
+    features: ["communication_channels.connect_tenant_channel"],
+    priority: 80,
+    enabled: true
+  },
+  Widget: ConnectExpoWidget
+};
+var widget_default = widget;
+export {
+  widget_default as default
+};
+//# sourceMappingURL=widget.js.map

package/dist/modules/channel_expo/widgets/injection/connect/widget.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/channel_expo/widgets/injection/connect/widget.ts"],
+  "sourcesContent": ["import type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'\nimport ConnectExpoWidget from './widget.client'\n\nconst widget: InjectionWidgetModule<Record<string, unknown>, Record<string, unknown>> = {\n  metadata: {\n    id: 'channel_expo.injection.connect',\n    title: 'Connect Expo',\n    description: 'Connects a tenant-wide Expo push channel.',\n    features: ['communication_channels.connect_tenant_channel'],\n    priority: 80,\n    enabled: true,\n  },\n  Widget: ConnectExpoWidget,\n}\n\nexport default widget\n"],
+  "mappings": "AACA,OAAO,uBAAuB;AAE9B,MAAM,SAAkF;AAAA,EACtF,UAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU,CAAC,+CAA+C;AAAA,IAC1D,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AAAA,EACA,QAAQ;AACV;AAEA,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/channel_expo/widgets/injection-table.js

@@ -0,0 +1,15 @@
+const injectionTable = {
+  // Tenant-wide connect entry on the shared channels admin DataTable toolbar.
+  "data-table:communication_channels.channels:toolbar": [
+    {
+      widgetId: "channel_expo.injection.connect",
+      priority: 80
+    }
+  ]
+};
+var injection_table_default = injectionTable;
+export {
+  injection_table_default as default,
+  injectionTable
+};
+//# sourceMappingURL=injection-table.js.map

package/dist/modules/channel_expo/widgets/injection-table.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_expo/widgets/injection-table.ts"],
+  "sourcesContent": ["import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'\n\nexport const injectionTable: ModuleInjectionTable = {\n  // Tenant-wide connect entry on the shared channels admin DataTable toolbar.\n  'data-table:communication_channels.channels:toolbar': [\n    {\n      widgetId: 'channel_expo.injection.connect',\n      priority: 80,\n    },\n  ],\n}\n\nexport default injectionTable\n"],
+  "mappings": "AAEO,MAAM,iBAAuC;AAAA;AAAA,EAElD,sDAAsD;AAAA,IACpD;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,IAAO,0BAAQ;",
+  "names": []
+}

package/jest.config.cjs

@@ -0,0 +1,34 @@
+/** @type {import('jest').Config} */
+const base = require('../../jest.config.base.cjs')
+
+module.exports = {
+  ...base,
+  testEnvironment: 'node',
+  watchman: false,
+  rootDir: '.',
+  moduleFileExtensions: ['ts', 'tsx', 'js', 'jsx', 'json'],
+  moduleNameMapper: {
+    '^@open-mercato/channel-expo/(.*)$': '<rootDir>/src/$1',
+    '^@open-mercato/core/(.*)$': '<rootDir>/../core/src/$1',
+    '^@open-mercato/shared/(.*)$': '<rootDir>/../shared/src/$1',
+    '^@open-mercato/queue/(.*)$': '<rootDir>/../queue/src/$1',
+    '^@open-mercato/ui/(.*)$': '<rootDir>/../ui/src/$1',
+  },
+  transform: {
+    '^.+\\.(t|j)sx?$': [
+      '<rootDir>/../../scripts/jest-mikroorm-transformer.cjs',
+      {
+        tsconfig: {
+          jsx: 'react-jsx',
+          rootDir: '.',
+          ignoreDeprecations: '6.0',
+        },
+      },
+    ],
+  },
+  transformIgnorePatterns: [
+    'node_modules/(?!(@mikro-orm|kysely)/)',
+  ],
+  testMatch: ['<rootDir>/src/**/__tests__/**/*.test.(ts|tsx)'],
+  passWithNoTests: true,
+}

package/package.json

@@ -0,0 +1,96 @@
+{
+  "name": "@open-mercato/channel-expo",
+  "version": "0.6.8-develop.6985.1.fb93574faa",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "scripts": {
+    "build": "node build.mjs",
+    "watch": "node watch.mjs",
+    "test": "jest --config jest.config.cjs",
+    "typecheck": "tsc --noEmit"
+  },
+  "exports": {
+    ".": "./dist/index.js",
+    "./*.ts": {
+      "types": "./src/*.ts",
+      "default": "./dist/*.js"
+    },
+    "./*.tsx": {
+      "types": "./src/*.tsx",
+      "default": "./dist/*.js"
+    },
+    "./*.json": "./src/*.json",
+    "./*": {
+      "types": [
+        "./src/*.ts",
+        "./src/*.tsx"
+      ],
+      "default": "./dist/*.js"
+    },
+    "./*/*.json": "./src/*/*.json",
+    "./*/*": {
+      "types": [
+        "./src/*/*.ts",
+        "./src/*/*.tsx"
+      ],
+      "default": "./dist/*/*.js"
+    },
+    "./*/*/*.json": "./src/*/*/*.json",
+    "./*/*/*": {
+      "types": [
+        "./src/*/*/*.ts",
+        "./src/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*.js"
+    },
+    "./*/*/*/*.json": "./src/*/*/*/*.json",
+    "./*/*/*/*": {
+      "types": [
+        "./src/*/*/*/*.ts",
+        "./src/*/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*/*.js"
+    },
+    "./*/*/*/*/*.json": "./src/*/*/*/*/*.json",
+    "./*/*/*/*/*": {
+      "types": [
+        "./src/*/*/*/*/*.ts",
+        "./src/*/*/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*/*/*.js"
+    }
+  },
+  "dependencies": {
+    "@open-mercato/core": "0.6.8-develop.6985.1.fb93574faa",
+    "@open-mercato/ui": "0.6.8-develop.6985.1.fb93574faa",
+    "expo-server-sdk": "^3.15.0"
+  },
+  "peerDependencies": {
+    "@mikro-orm/postgresql": "^7.0.14",
+    "@open-mercato/shared": "0.6.8-develop.6985.1.fb93574faa",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "devDependencies": {
+    "@open-mercato/shared": "0.6.8-develop.6985.1.fb93574faa",
+    "@types/jest": "^30.0.0",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "esbuild": "^0.28.1",
+    "glob": "^13.0.6",
+    "jest": "^30.4.2",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "ts-jest": "^29.4.11"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/open-mercato/open-mercato",
+    "directory": "packages/channel-expo"
+  },
+  "stableVersion": "0.6.7"
+}

package/src/index.ts

@@ -0,0 +1 @@
+export { metadata } from './modules/channel_expo/index'

package/src/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-004.spec.ts

@@ -0,0 +1,76 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+import { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'
+
+/**
+ * TC-CHANNEL-PUSH-004 — Expo is registered AND tenant-scoped.
+ *
+ * `@open-mercato/channel-expo` registers the `expo` push `ChannelAdapter` at import with
+ * `channelScope: 'tenant'`. Push providers have no OAuth/webhook surface of their own, so
+ * the credential-connect routes are where hub registration is observable:
+ *
+ * - the **per-user** route short-circuits tenant-scoped providers with 403
+ *   (`provider_is_tenant_scoped`) before touching credentials — 403 rather than 404
+ *   (`no_adapter`) proves the adapter is registered, and it guards against a non-admin
+ *   minting a tenant-wide channel;
+ * - the **tenant** route runs the adapter's own `validateCredentials`, which returns 422.
+ *
+ * Expo credentials are all-optional (`accessToken?`), so an empty object would VALIDATE
+ * and create a channel on the tenant route — we send a wrong-typed `accessToken` instead,
+ * so `validateCredentials` rejects it and the flow stays side-effect-free.
+ */
+test.describe('TC-CHANNEL-PUSH-004: Expo provider registration', () => {
+  test('POST per-user connect/credentials with providerKey=expo is refused (403, tenant-scoped)', async ({
+    request,
+  }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/channels/connect/credentials',
+      {
+        token,
+        data: {
+          providerKey: 'expo',
+          displayName: 'Expo — per-user (should be refused)',
+          credentials: { accessToken: 12345 },
+        },
+      },
+    )
+    expect(response.status(), 'route should not 5xx').toBeLessThan(500)
+    expect(response.status(), 'Expo provider should be registered (never 404 no_adapter)').not.toBe(404)
+    expect(response.status(), 'authenticated request should not 401').not.toBe(401)
+    expect(response.status()).toBe(403)
+    const body = await readJsonSafe<{ code?: string }>(response)
+    expect(body?.code).toBe('provider_is_tenant_scoped')
+  })
+
+  test('POST tenant connect/credentials with providerKey=expo reaches validateCredentials (422)', async ({
+    request,
+  }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/channels/connect/tenant-credentials',
+      {
+        token,
+        // Wrong-typed accessToken (not an empty object, which would validate and create a
+        // channel) → validateCredentials rejects it, so the flow stays side-effect-free.
+        data: {
+          providerKey: 'expo',
+          displayName: 'Expo — tenant connect',
+          credentials: { accessToken: 12345 },
+        },
+      },
+    )
+    expect(response.status(), 'route should not 5xx').toBeLessThan(500)
+    // A 422 proves the request reached the registered adapter and ran its validateCredentials
+    // — not just that auth short-circuited. 401 would satisfy "not 404" without proving it.
+    expect(response.status(), 'authenticated request should not 401').not.toBe(401)
+    expect(response.status(), 'wrong-typed credentials should reach the adapter and 422').toBe(422)
+    const body = await readJsonSafe<{ error?: string; fieldErrors?: Record<string, string> }>(response)
+    expect(body?.fieldErrors ?? body?.error).toBeTruthy()
+  })
+})

package/src/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.meta.ts

@@ -0,0 +1,3 @@
+export const integrationMeta = {
+  requiredEnvVars: ['OM_PUSH_FAKE_PROVIDERS'],
+}

package/src/modules/channel_expo/__integration__/TC-CHANNEL-PUSH-007.spec.ts

@@ -0,0 +1,83 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/api'
+import { getTokenScope } from '@open-mercato/core/helpers/integration/generalFixtures'
+import { createNotificationFixture } from '@open-mercato/core/helpers/integration/notificationsFixtures'
+import { drainIntegrationQueue } from '@open-mercato/core/helpers/integration/queue'
+import {
+  connectFakePushChannel,
+  deleteChannelIfExists,
+  deleteDeliveriesForDevice,
+  deleteFakePushDevice,
+  expectNativeMessage,
+  makeFakePushToken,
+  readLatestDelivery,
+  registerFakePushDevice,
+} from '@open-mercato/core/helpers/integration/pushFake'
+
+/**
+ * TC-CHANNEL-PUSH-007 — the REAL Expo adapter, end-to-end, without live credentials.
+ *
+ * Only the `expo-server-sdk` client is faked (`OM_PUSH_FAKE_PROVIDERS`), so the adapter's token
+ * validation, chunking, and `buildExpoMessage` run for real.
+ */
+const PROVIDER = 'expo'
+
+test.describe('TC-CHANNEL-PUSH-007: real Expo adapter reaches sent with a correct native message', () => {
+  test('maps sound and priority onto the Expo message', async ({ request }) => {
+    // Budgeted explicitly rather than via `test.slow()` (which only triples the config's 20s budget).
+    // NOTE: this does not fix the current CI failure — `POST /api/notifications` hangs >30s in the
+    // channel-package shard, so the test dies on `apiRequest`'s own 30s timeout. See the spec changelog.
+    test.setTimeout(120_000)
+    const adminToken = await getAuthToken(request, 'admin')
+    const { tenantId, userId } = getTokenScope(adminToken)
+    const { pushToken, tokenTail } = makeFakePushToken(PROVIDER)
+    const startedAt = new Date().toISOString()
+
+    let channelId: string | null = null
+    let userDeviceId: string | null = null
+    try {
+      channelId = await connectFakePushChannel(request, adminToken, PROVIDER, 'TC-CHANNEL-PUSH-007 Expo')
+      userDeviceId = await registerFakePushDevice(
+        request,
+        adminToken,
+        PROVIDER,
+        pushToken,
+        `qa-tc-channel-push-007-${Date.now()}`,
+      )
+
+      await createNotificationFixture(request, adminToken, {
+          recipientUserId: userId,
+          type: 'admin.custom_message',
+          title: 'Order shipped',
+          body: 'Your order is on its way',
+          data: { probe: 'tc-channel-push-007' },
+          pushOptions: { sound: 'chime.caf', priority: 'high', channelId: 'orders' },
+        })
+
+      await drainIntegrationQueue('events')
+      await drainIntegrationQueue('push-deliveries')
+
+      await expect
+        .poll(async () => (await readLatestDelivery(tenantId, userDeviceId as string))?.status ?? null, {
+          timeout: 30_000,
+        })
+        .toBe('sent')
+
+      const row = await readLatestDelivery(tenantId, userDeviceId as string)
+      expect(row?.provider).toBe(PROVIDER)
+      expect(row?.token_snapshot).toBe(tokenTail)
+
+      const native = await expectNativeMessage(PROVIDER, tokenTail, startedAt)
+      expect(native.to).toBe(pushToken)
+      expect(native.title).toBe('Order shipped')
+      expect(native.body).toBe('Your order is on its way')
+      expect(native.sound).toBe('chime.caf')
+      expect(native.priority).toBe('high')
+      expect(native.channelId).toBe('orders')
+    } finally {
+      await deleteDeliveriesForDevice(userDeviceId)
+      await deleteFakePushDevice(request, adminToken, userDeviceId)
+      await deleteChannelIfExists(request, adminToken, channelId)
+    }
+  })
+})

package/src/modules/channel_expo/acl.ts

@@ -0,0 +1,6 @@
+export const features = [
+  { id: 'channel_expo.view', title: 'View Expo push channel configuration', module: 'channel_expo' },
+  { id: 'channel_expo.configure', title: 'Configure Expo push credentials', module: 'channel_expo' },
+]
+
+export default features

package/src/modules/channel_expo/di.ts

@@ -0,0 +1,26 @@
+import { asValue } from 'awilix'
+import type { AppContainer } from '@open-mercato/shared/lib/di/container'
+import {
+  hasChannelAdapter,
+  registerChannelAdapter,
+} from '@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton'
+import { getExpoChannelAdapter } from './lib/adapter'
+import { ensureExpoFakeProviderInstalled } from './lib/fake-provider'
+import { channelExpoHealthCheck } from './lib/health'
+
+export function register(container: AppContainer): void {
+  // Test-only: swap expo-server-sdk for a network-free fake when `OM_PUSH_FAKE_PROVIDERS` is set
+  // (no-op in production), so integration specs exercise this adapter end-to-end. Swaps the SDK
+  // client only — the adapter below stays registered. See lib/fake-provider.ts.
+  ensureExpoFakeProviderInstalled()
+
+  if (!hasChannelAdapter('expo')) {
+    registerChannelAdapter(getExpoChannelAdapter())
+  }
+  container.register({
+    channelExpoAdapter: asValue(getExpoChannelAdapter()),
+    // Registered under the exact service name declared in `integration.ts`
+    // (`healthCheck.service`); without it the hub's resolve throws.
+    channelExpoHealthCheck: asValue(channelExpoHealthCheck),
+  })
+}