@open-mercato/channel-fcm 0.6.8-develop.6985.1.fb93574faa

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+[build:channel-fcm] found 17 entry points
+[build:channel-fcm] built successfully

package/AGENTS.md

@@ -0,0 +1,31 @@
+# `@open-mercato/channel-fcm` — Agent Guidelines
+
+Firebase Cloud Messaging push provider for the Communications Hub (`communication_channels`). Registers a `push` `ChannelAdapter` (providerKey `fcm`) consumed by the `push_notifications` delivery strategy/worker.
+
+- **Package**: `@open-mercato/channel-fcm` ⇒ **module id**: `channel_fcm`
+- **Provider key**: `fcm` · **channelType**: `push`
+- Integration provider package — keep all FCM-specific logic here. Do NOT add it to `packages/core`.
+
+## Key Files (`src/modules/channel_fcm/`)
+
+| File | Purpose |
+|------|---------|
+| `integration.ts` | `IntegrationDefinition` (credentials fields, `healthCheck.service`) |
+| `di.ts` | `register(container)` — registers the adapter AND `channelFcmHealthCheck` |
+| `setup.ts` | Registers the adapter at import; `defaultRoleFeatures` |
+| `acl.ts` | `channel_fcm.view`, `channel_fcm.configure` |
+| `lib/adapter.ts` | `FcmChannelAdapter` — `sendMessage` via firebase-admin; `setFcmMessagingFactory` test seam |
+| `lib/credentials.ts` | Zod schema for the service-account JSON credentials |
+| `lib/health.ts` | `channelFcmHealthCheck` liveness probe |
+
+## Adapter Contract
+
+Implements the push-adapter contract shared with the `push_stub`, `channel-apns`, and `channel-expo` adapters:
+- reads `metadata.pushToken` + the push envelope from `content.raw` (`@open-mercato/core/.../push-envelope`)
+- capabilities come from the shared `pushChannelCapabilities` baseline
+- a permanently-invalid token returns the **uniform** `device_unregistered` sentinel (`error:'device_unregistered'`, `metadata.unregistered:true`) so the worker soft-deletes the device. FCM codes mapped: `messaging/registration-token-not-registered`, `messaging/invalid-registration-token`. `messaging/invalid-argument` is **deliberately excluded** — FCM returns it for any malformed request field (oversized payload, bad data key), so mapping it would let a single payload-shape bug soft-delete every targeted device tenant-wide; it falls through to the generic retryable `failed` path instead.
+- one firebase-admin app is cached per service-account hash (re-init per send is wasteful + errors on duplicate app names).
+
+## Credentials
+
+Tenant-level credentials live on `IntegrationCredentials` for provider `channel_fcm`: `{ serviceAccountJson, appName? }`. Connect via the existing `POST /api/communication_channels/channels/connect/credentials` flow. Per-device tokens live in `devices.UserDevice.push_token`, never here.

package/build.mjs

@@ -0,0 +1,7 @@
+import { dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { buildPackage } from '../../scripts/build-package.mjs'
+
+const packageDir = dirname(fileURLToPath(import.meta.url))
+
+await buildPackage(packageDir, { name: 'channel-fcm' })

package/dist/index.js

@@ -0,0 +1,5 @@
+import { metadata } from "./modules/channel_fcm/index.js";
+export {
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts"],
+  "sourcesContent": ["export { metadata } from './modules/channel_fcm/index'\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-001.spec.js

@@ -0,0 +1,23 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/helpers/integration/authFixtures";
+import { apiRequest } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+test.describe("TC-CHANNEL-PUSH-001: FCM registered + rejected on the per-user route", () => {
+  test("POST per-user connect/credentials with providerKey=fcm is refused (403, tenant-scoped)", async ({ request }) => {
+    const token = await getAuthToken(request);
+    const response = await apiRequest(
+      request,
+      "POST",
+      "/api/communication_channels/channels/connect/credentials",
+      {
+        token,
+        data: { providerKey: "fcm", displayName: "FCM \u2014 per-user (should be refused)", credentials: {} }
+      }
+    );
+    expect(response.status(), "route should not 5xx").toBeLessThan(500);
+    expect(response.status()).toBe(403);
+    const body = await readJsonSafe(response);
+    expect(body?.code).toBe("provider_is_tenant_scoped");
+  });
+});
+//# sourceMappingURL=TC-CHANNEL-PUSH-001.spec.js.map

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-001.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-001.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'\nimport { apiRequest } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\n\n/**\n * TC-CHANNEL-PUSH-001 \u2014 FCM is registered AND tenant-scoped, so the per-user\n * connect route refuses it.\n *\n * `@open-mercato/channel-fcm` registers the `fcm` push `ChannelAdapter` at import\n * with `channelScope: 'tenant'`. Push providers are connected tenant-wide by an\n * admin through `POST /channels/connect/tenant-credentials` (see\n * TC-CHANNEL-PUSH-002), NOT the per-user route. The per-user route\n * `POST /channels/connect/credentials` now short-circuits tenant-scoped providers\n * with 403 (`provider_is_tenant_scoped`) before touching credentials \u2014 this both\n * proves the adapter is registered (an UNregistered provider would fall through to\n * 404 `no_adapter`) and guards against a non-admin minting a tenant-wide channel.\n * No channel is created, so there is nothing to clean up.\n */\ntest.describe('TC-CHANNEL-PUSH-001: FCM registered + rejected on the per-user route', () => {\n  test('POST per-user connect/credentials with providerKey=fcm is refused (403, tenant-scoped)', async ({ request }) => {\n    const token = await getAuthToken(request)\n    const response = await apiRequest(\n      request,\n      'POST',\n      '/api/communication_channels/channels/connect/credentials',\n      {\n        token,\n        data: { providerKey: 'fcm', displayName: 'FCM \u2014 per-user (should be refused)', credentials: {} },\n      },\n    )\n    expect(response.status(), 'route should not 5xx').toBeLessThan(500)\n    // 403 (not 404) proves the FCM adapter is registered and declares tenant scope,\n    // and that the per-user route refuses it before any credential/channel work.\n    expect(response.status()).toBe(403)\n    const body = await readJsonSafe<{ code?: string }>(response)\n    expect(body?.code).toBe('provider_is_tenant_scoped')\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAgB7B,KAAK,SAAS,wEAAwE,MAAM;AAC1F,OAAK,0FAA0F,OAAO,EAAE,QAAQ,MAAM;AACpH,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA,QACA,MAAM,EAAE,aAAa,OAAO,aAAa,2CAAsC,aAAa,CAAC,EAAE;AAAA,MACjG;AAAA,IACF;AACA,WAAO,SAAS,OAAO,GAAG,sBAAsB,EAAE,aAAa,GAAG;AAGlE,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAO,MAAM,aAAgC,QAAQ;AAC3D,WAAO,MAAM,IAAI,EAAE,KAAK,2BAA2B;AAAA,EACrD,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-002.spec.js

@@ -0,0 +1,43 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/helpers/integration/authFixtures";
+import { apiRequest } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+test.describe("TC-CHANNEL-PUSH-002: tenant-wide push connect route", () => {
+  test("reaches the registered FCM adapter and rejects missing credentials (422)", async ({ request }) => {
+    const token = await getAuthToken(request);
+    const response = await apiRequest(
+      request,
+      "POST",
+      "/api/communication_channels/channels/connect/tenant-credentials",
+      {
+        token,
+        // Missing serviceAccountJson → the adapter's validateCredentials rejects it,
+        // so the flow never creates a tenant channel (no side effect / no cleanup).
+        data: { providerKey: "fcm", displayName: "FCM \u2014 tenant connect", credentials: {} }
+      }
+    );
+    expect(response.status(), "route should not 5xx").toBeLessThan(500);
+    expect(response.status()).toBe(422);
+    const body = await readJsonSafe(response);
+    expect(body?.fieldErrors ?? body?.error).toBeTruthy();
+  });
+  test("rejects a per-user provider on the tenant route (400)", async ({ request }) => {
+    const token = await getAuthToken(request);
+    const response = await apiRequest(
+      request,
+      "POST",
+      "/api/communication_channels/channels/connect/tenant-credentials",
+      {
+        token,
+        // IMAP is a per-user provider (no channelScope) — an admin must not be able
+        // to force it into a shared tenant-wide channel through this route.
+        data: { providerKey: "imap", displayName: "IMAP \u2014 should be rejected", credentials: {} }
+      }
+    );
+    expect(response.status(), "route should not 5xx").toBeLessThan(500);
+    expect(response.status()).toBe(400);
+    const body = await readJsonSafe(response);
+    expect(body?.code).toBe("provider_not_tenant_scoped");
+  });
+});
+//# sourceMappingURL=TC-CHANNEL-PUSH-002.spec.js.map

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-002.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-002.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'\nimport { apiRequest } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\n\n/**\n * TC-CHANNEL-PUSH-002 \u2014 tenant-wide connect route for push providers.\n *\n * Push providers (FCM/APNs/Expo) declare `channelScope: 'tenant'` so their channel\n * is created once per tenant with `user_id = NULL` and serves every user's devices.\n * They connect through the dedicated admin route\n * `POST /api/communication_channels/channels/connect/tenant-credentials`\n * (feature `communication_channels.connect_tenant_channel`), NOT the per-user route.\n *\n * These assertions are network-free and self-contained: with empty/invalid input the\n * flow never creates a channel or credential row, so there is nothing to clean up.\n * The read side (fan-out + delivery) is already user-agnostic \u2014 it resolves a push\n * channel by `{ tenantId, channelType: 'push' }` with no `user_id` filter and reads\n * credentials at `channel.userId ?? null` \u2014 which is what makes one tenant channel\n * serve the whole tenant; that path is covered network-free by\n * `push_notifications/lib/__tests__/push-delivery.test.ts`.\n */\ntest.describe('TC-CHANNEL-PUSH-002: tenant-wide push connect route', () => {\n  test('reaches the registered FCM adapter and rejects missing credentials (422)', async ({ request }) => {\n    const token = await getAuthToken(request)\n    const response = await apiRequest(\n      request,\n      'POST',\n      '/api/communication_channels/channels/connect/tenant-credentials',\n      {\n        token,\n        // Missing serviceAccountJson \u2192 the adapter's validateCredentials rejects it,\n        // so the flow never creates a tenant channel (no side effect / no cleanup).\n        data: { providerKey: 'fcm', displayName: 'FCM \u2014 tenant connect', credentials: {} },\n      },\n    )\n    expect(response.status(), 'route should not 5xx').toBeLessThan(500)\n    // 422 proves: authenticated, the caller HAS connect_tenant_channel, the provider\n    // is tenant-scoped (else 400), and the registered FCM adapter's validateCredentials\n    // ran and rejected the empty credentials.\n    expect(response.status()).toBe(422)\n    const body = await readJsonSafe<{ error?: string; fieldErrors?: Record<string, string> }>(response)\n    expect(body?.fieldErrors ?? body?.error).toBeTruthy()\n  })\n\n  test('rejects a per-user provider on the tenant route (400)', async ({ request }) => {\n    const token = await getAuthToken(request)\n    const response = await apiRequest(\n      request,\n      'POST',\n      '/api/communication_channels/channels/connect/tenant-credentials',\n      {\n        token,\n        // IMAP is a per-user provider (no channelScope) \u2014 an admin must not be able\n        // to force it into a shared tenant-wide channel through this route.\n        data: { providerKey: 'imap', displayName: 'IMAP \u2014 should be rejected', credentials: {} },\n      },\n    )\n    expect(response.status(), 'route should not 5xx').toBeLessThan(500)\n    expect(response.status()).toBe(400)\n    const body = await readJsonSafe<{ code?: string }>(response)\n    expect(body?.code).toBe('provider_not_tenant_scoped')\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAmB7B,KAAK,SAAS,uDAAuD,MAAM;AACzE,OAAK,4EAA4E,OAAO,EAAE,QAAQ,MAAM;AACtG,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA;AAAA;AAAA,QAGA,MAAM,EAAE,aAAa,OAAO,aAAa,6BAAwB,aAAa,CAAC,EAAE;AAAA,MACnF;AAAA,IACF;AACA,WAAO,SAAS,OAAO,GAAG,sBAAsB,EAAE,aAAa,GAAG;AAIlE,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAO,MAAM,aAAuE,QAAQ;AAClG,WAAO,MAAM,eAAe,MAAM,KAAK,EAAE,WAAW;AAAA,EACtD,CAAC;AAED,OAAK,yDAAyD,OAAO,EAAE,QAAQ,MAAM;AACnF,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE;AAAA;AAAA;AAAA,QAGA,MAAM,EAAE,aAAa,QAAQ,aAAa,kCAA6B,aAAa,CAAC,EAAE;AAAA,MACzF;AAAA,IACF;AACA,WAAO,SAAS,OAAO,GAAG,sBAAsB,EAAE,aAAa,GAAG;AAClE,WAAO,SAAS,OAAO,CAAC,EAAE,KAAK,GAAG;AAClC,UAAM,OAAO,MAAM,aAAgC,QAAQ;AAC3D,WAAO,MAAM,IAAI,EAAE,KAAK,4BAA4B;AAAA,EACtD,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-005.meta.js

@@ -0,0 +1,7 @@
+const integrationMeta = {
+  requiredEnvVars: ["OM_PUSH_FAKE_PROVIDERS"]
+};
+export {
+  integrationMeta
+};
+//# sourceMappingURL=TC-CHANNEL-PUSH-005.meta.js.map

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-005.meta.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-005.meta.ts"],
+  "sourcesContent": ["export const integrationMeta = {\n  requiredEnvVars: ['OM_PUSH_FAKE_PROVIDERS'],\n}\n"],
+  "mappings": "AAAO,MAAM,kBAAkB;AAAA,EAC7B,iBAAiB,CAAC,wBAAwB;AAC5C;",
+  "names": []
+}

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-005.spec.js

@@ -0,0 +1,64 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { getTokenScope } from "@open-mercato/core/helpers/integration/generalFixtures";
+import { createNotificationFixture } from "@open-mercato/core/helpers/integration/notificationsFixtures";
+import { drainIntegrationQueue } from "@open-mercato/core/helpers/integration/queue";
+import {
+  connectFakePushChannel,
+  deleteChannelIfExists,
+  deleteDeliveriesForDevice,
+  deleteFakePushDevice,
+  expectNativeMessage,
+  makeFakePushToken,
+  readLatestDelivery,
+  registerFakePushDevice
+} from "@open-mercato/core/helpers/integration/pushFake";
+const PROVIDER = "fcm";
+test.describe("TC-CHANNEL-PUSH-005: real FCM adapter reaches sent with a correct native message", () => {
+  test("delivers a visible notification and maps pushOptions onto the FCM message", async ({ request }) => {
+    test.setTimeout(12e4);
+    const adminToken = await getAuthToken(request, "admin");
+    const { tenantId, organizationId, userId } = getTokenScope(adminToken);
+    const { pushToken, tokenTail } = makeFakePushToken(PROVIDER);
+    const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+    let channelId = null;
+    let userDeviceId = null;
+    try {
+      channelId = await connectFakePushChannel(request, adminToken, PROVIDER, "TC-CHANNEL-PUSH-005 FCM");
+      userDeviceId = await registerFakePushDevice(
+        request,
+        adminToken,
+        PROVIDER,
+        pushToken,
+        `qa-tc-channel-push-005-${Date.now()}`
+      );
+      await createNotificationFixture(request, adminToken, {
+        recipientUserId: userId,
+        type: "admin.custom_message",
+        title: "Order shipped",
+        body: "Your order is on its way",
+        data: { probe: "tc-channel-push-005" },
+        pushOptions: { channelId: "orders", badge: 3, sound: "chime.caf" }
+      });
+      await drainIntegrationQueue("events");
+      await drainIntegrationQueue("push-deliveries");
+      await expect.poll(async () => (await readLatestDelivery(tenantId, userDeviceId))?.status ?? null, {
+        timeout: 3e4
+      }).toBe("sent");
+      const row = await readLatestDelivery(tenantId, userDeviceId);
+      expect(row?.provider).toBe(PROVIDER);
+      expect(row?.token_snapshot).toBe(tokenTail);
+      expect(row?.organization_id).toBe(organizationId ?? null);
+      const native = await expectNativeMessage(PROVIDER, tokenTail, startedAt);
+      expect(native.token).toBe(pushToken);
+      expect(native.notification).toMatchObject({ title: "Order shipped", body: "Your order is on its way" });
+      expect(native.android).toMatchObject({ notification: { channelId: "orders", sound: "chime.caf" } });
+      expect(native.apns).toMatchObject({ payload: { aps: { badge: 3, sound: "chime.caf" } } });
+    } finally {
+      await deleteDeliveriesForDevice(userDeviceId);
+      await deleteFakePushDevice(request, adminToken, userDeviceId);
+      await deleteChannelIfExists(request, adminToken, channelId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHANNEL-PUSH-005.spec.js.map

package/dist/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-005.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-005.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { getTokenScope } from '@open-mercato/core/helpers/integration/generalFixtures'\nimport { createNotificationFixture } from '@open-mercato/core/helpers/integration/notificationsFixtures'\nimport { drainIntegrationQueue } from '@open-mercato/core/helpers/integration/queue'\nimport {\n  connectFakePushChannel,\n  deleteChannelIfExists,\n  deleteDeliveriesForDevice,\n  deleteFakePushDevice,\n  expectNativeMessage,\n  makeFakePushToken,\n  readLatestDelivery,\n  registerFakePushDevice,\n} from '@open-mercato/core/helpers/integration/pushFake'\n\n/**\n * TC-CHANNEL-PUSH-005 \u2014 the REAL FCM adapter, end-to-end, without live credentials.\n *\n * `push_stub` replaces the whole adapter, so TC-PUSH-003 never executes a line of `channel-fcm`. Here\n * only the `firebase-admin` client is faked (`OM_PUSH_FAKE_PROVIDERS`), so the adapter's own credential\n * parsing, client caching, and `buildFcmMessage` all run: connect a tenant channel through the real\n * credential-connect route \u2192 register a device routed to `fcm` \u2192 `POST /api/notifications` \u2192 drain\n * `events` (fan-out) then `push-deliveries` (worker) \u2192 the delivery row reaches `sent` AND the\n * provider-native message the adapter handed the SDK is asserted.\n */\nconst PROVIDER = 'fcm'\n\ntest.describe('TC-CHANNEL-PUSH-005: real FCM adapter reaches sent with a correct native message', () => {\n  test('delivers a visible notification and maps pushOptions onto the FCM message', async ({ request }) => {\n    // Budgeted explicitly rather than via `test.slow()` (which only triples the config's 20s budget).\n    // NOTE: this does not fix the current CI failure \u2014 `POST /api/notifications` hangs >30s in the\n    // channel-package shard, so the test dies on `apiRequest`'s own 30s timeout. See the spec changelog.\n    test.setTimeout(120_000)\n    const adminToken = await getAuthToken(request, 'admin')\n    const { tenantId, organizationId, userId } = getTokenScope(adminToken)\n    // Run-unique: the sink is append-only and is not truncated on the reused-environment path.\n    const { pushToken, tokenTail } = makeFakePushToken(PROVIDER)\n    const startedAt = new Date().toISOString()\n\n    let channelId: string | null = null\n    let userDeviceId: string | null = null\n    try {\n      channelId = await connectFakePushChannel(request, adminToken, PROVIDER, 'TC-CHANNEL-PUSH-005 FCM')\n      userDeviceId = await registerFakePushDevice(\n        request,\n        adminToken,\n        PROVIDER,\n        pushToken,\n        `qa-tc-channel-push-005-${Date.now()}`,\n      )\n\n      await createNotificationFixture(request, adminToken, {\n          recipientUserId: userId,\n          type: 'admin.custom_message',\n          title: 'Order shipped',\n          body: 'Your order is on its way',\n          data: { probe: 'tc-channel-push-005' },\n          pushOptions: { channelId: 'orders', badge: 3, sound: 'chime.caf' },\n        })\n\n      await drainIntegrationQueue('events')\n      await drainIntegrationQueue('push-deliveries')\n\n      await expect\n        .poll(async () => (await readLatestDelivery(tenantId, userDeviceId as string))?.status ?? null, {\n          timeout: 30_000,\n        })\n        .toBe('sent')\n\n      const row = await readLatestDelivery(tenantId, userDeviceId as string)\n      expect(row?.provider).toBe(PROVIDER)\n      expect(row?.token_snapshot).toBe(tokenTail)\n      expect(row?.organization_id).toBe(organizationId ?? null)\n\n      // The message firebase-admin would have transmitted \u2014 proof the real adapter, not a stub, ran.\n      const native = await expectNativeMessage(PROVIDER, tokenTail, startedAt)\n      expect(native.token).toBe(pushToken)\n      expect(native.notification).toMatchObject({ title: 'Order shipped', body: 'Your order is on its way' })\n      expect(native.android).toMatchObject({ notification: { channelId: 'orders', sound: 'chime.caf' } })\n      expect(native.apns).toMatchObject({ payload: { aps: { badge: 3, sound: 'chime.caf' } } })\n    } finally {\n      await deleteDeliveriesForDevice(userDeviceId)\n      await deleteFakePushDevice(request, adminToken, userDeviceId)\n      await deleteChannelIfExists(request, adminToken, channelId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,iCAAiC;AAC1C,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAYP,MAAM,WAAW;AAEjB,KAAK,SAAS,oFAAoF,MAAM;AACtG,OAAK,6EAA6E,OAAO,EAAE,QAAQ,MAAM;AAIvG,SAAK,WAAW,IAAO;AACvB,UAAM,aAAa,MAAM,aAAa,SAAS,OAAO;AACtD,UAAM,EAAE,UAAU,gBAAgB,OAAO,IAAI,cAAc,UAAU;AAErE,UAAM,EAAE,WAAW,UAAU,IAAI,kBAAkB,QAAQ;AAC3D,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAEzC,QAAI,YAA2B;AAC/B,QAAI,eAA8B;AAClC,QAAI;AACF,kBAAY,MAAM,uBAAuB,SAAS,YAAY,UAAU,yBAAyB;AACjG,qBAAe,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,0BAA0B,KAAK,IAAI,CAAC;AAAA,MACtC;AAEA,YAAM,0BAA0B,SAAS,YAAY;AAAA,QACjD,iBAAiB;AAAA,QACjB,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,QACN,MAAM,EAAE,OAAO,sBAAsB;AAAA,QACrC,aAAa,EAAE,WAAW,UAAU,OAAO,GAAG,OAAO,YAAY;AAAA,MACnE,CAAC;AAEH,YAAM,sBAAsB,QAAQ;AACpC,YAAM,sBAAsB,iBAAiB;AAE7C,YAAM,OACH,KAAK,aAAa,MAAM,mBAAmB,UAAU,YAAsB,IAAI,UAAU,MAAM;AAAA,QAC9F,SAAS;AAAA,MACX,CAAC,EACA,KAAK,MAAM;AAEd,YAAM,MAAM,MAAM,mBAAmB,UAAU,YAAsB;AACrE,aAAO,KAAK,QAAQ,EAAE,KAAK,QAAQ;AACnC,aAAO,KAAK,cAAc,EAAE,KAAK,SAAS;AAC1C,aAAO,KAAK,eAAe,EAAE,KAAK,kBAAkB,IAAI;AAGxD,YAAM,SAAS,MAAM,oBAAoB,UAAU,WAAW,SAAS;AACvE,aAAO,OAAO,KAAK,EAAE,KAAK,SAAS;AACnC,aAAO,OAAO,YAAY,EAAE,cAAc,EAAE,OAAO,iBAAiB,MAAM,2BAA2B,CAAC;AACtG,aAAO,OAAO,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,UAAU,OAAO,YAAY,EAAE,CAAC;AAClG,aAAO,OAAO,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,YAAY,EAAE,EAAE,CAAC;AAAA,IAC1F,UAAE;AACA,YAAM,0BAA0B,YAAY;AAC5C,YAAM,qBAAqB,SAAS,YAAY,YAAY;AAC5D,YAAM,sBAAsB,SAAS,YAAY,SAAS;AAAA,IAC5D;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/channel_fcm/acl.js

@@ -0,0 +1,10 @@
+const features = [
+  { id: "channel_fcm.view", title: "View FCM channel configuration", module: "channel_fcm" },
+  { id: "channel_fcm.configure", title: "Configure FCM credentials", module: "channel_fcm" }
+];
+var acl_default = features;
+export {
+  acl_default as default,
+  features
+};
+//# sourceMappingURL=acl.js.map

package/dist/modules/channel_fcm/acl.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_fcm/acl.ts"],
+  "sourcesContent": ["export const features = [\n  { id: 'channel_fcm.view', title: 'View FCM channel configuration', module: 'channel_fcm' },\n  { id: 'channel_fcm.configure', title: 'Configure FCM credentials', module: 'channel_fcm' },\n]\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,oBAAoB,OAAO,kCAAkC,QAAQ,cAAc;AAAA,EACzF,EAAE,IAAI,yBAAyB,OAAO,6BAA6B,QAAQ,cAAc;AAC3F;AAEA,IAAO,cAAQ;",
+  "names": []
+}

package/dist/modules/channel_fcm/di.js

@@ -0,0 +1,25 @@
+import { asValue } from "awilix";
+import {
+  hasChannelAdapter,
+  registerChannelAdapter
+} from "@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton";
+import { getFcmChannelAdapter } from "./lib/adapter.js";
+import { ensureFcmFakeProviderInstalled } from "./lib/fake-provider.js";
+import { channelFcmHealthCheck } from "./lib/health.js";
+function register(container) {
+  ensureFcmFakeProviderInstalled();
+  if (!hasChannelAdapter("fcm")) {
+    registerChannelAdapter(getFcmChannelAdapter());
+  }
+  container.register({
+    channelFcmAdapter: asValue(getFcmChannelAdapter()),
+    // Registered under the exact service name declared in `integration.ts`
+    // (`healthCheck.service`); without it the hub's resolve throws and the
+    // channel reports permanently 'unhealthy'.
+    channelFcmHealthCheck: asValue(channelFcmHealthCheck)
+  });
+}
+export {
+  register
+};
+//# sourceMappingURL=di.js.map

package/dist/modules/channel_fcm/di.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_fcm/di.ts"],
+  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  hasChannelAdapter,\n  registerChannelAdapter,\n} from '@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton'\nimport { getFcmChannelAdapter } from './lib/adapter'\nimport { ensureFcmFakeProviderInstalled } from './lib/fake-provider'\nimport { channelFcmHealthCheck } from './lib/health'\n\nexport function register(container: AppContainer): void {\n  // Test-only: swap firebase-admin for a network-free fake when `OM_PUSH_FAKE_PROVIDERS` is set\n  // (no-op in production), so integration specs exercise this adapter end-to-end. Swaps the SDK\n  // client only \u2014 the adapter below stays registered. See lib/fake-provider.ts.\n  ensureFcmFakeProviderInstalled()\n\n  if (!hasChannelAdapter('fcm')) {\n    registerChannelAdapter(getFcmChannelAdapter())\n  }\n  container.register({\n    channelFcmAdapter: asValue(getFcmChannelAdapter()),\n    // Registered under the exact service name declared in `integration.ts`\n    // (`healthCheck.service`); without it the hub's resolve throws and the\n    // channel reports permanently 'unhealthy'.\n    channelFcmHealthCheck: asValue(channelFcmHealthCheck),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AAExB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,sCAAsC;AAC/C,SAAS,6BAA6B;AAE/B,SAAS,SAAS,WAA+B;AAItD,iCAA+B;AAE/B,MAAI,CAAC,kBAAkB,KAAK,GAAG;AAC7B,2BAAuB,qBAAqB,CAAC;AAAA,EAC/C;AACA,YAAU,SAAS;AAAA,IACjB,mBAAmB,QAAQ,qBAAqB,CAAC;AAAA;AAAA;AAAA;AAAA,IAIjD,uBAAuB,QAAQ,qBAAqB;AAAA,EACtD,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/channel_fcm/index.js

@@ -0,0 +1,9 @@
+const metadata = {
+  id: "channel_fcm",
+  title: "Firebase Cloud Messaging Channel",
+  description: "Deliver mobile push to Android/iOS devices via Firebase Cloud Messaging. Registers a `push` ChannelAdapter (providerKey `fcm`) into the Communications Hub; consumed by the push_notifications delivery strategy."
+};
+export {
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/channel_fcm/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_fcm/index.ts"],
+  "sourcesContent": ["export const metadata = {\n  id: 'channel_fcm',\n  title: 'Firebase Cloud Messaging Channel',\n  description:\n    'Deliver mobile push to Android/iOS devices via Firebase Cloud Messaging. Registers a `push` ChannelAdapter (providerKey `fcm`) into the Communications Hub; consumed by the push_notifications delivery strategy.',\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AACJ;",
+  "names": []
+}

package/dist/modules/channel_fcm/integration.js

@@ -0,0 +1,54 @@
+const integration = {
+  id: "channel_fcm",
+  title: "Firebase Cloud Messaging",
+  description: "Deliver mobile push to Android (and iOS via FCM) devices using Firebase Cloud Messaging. Provider for the push_notifications channel.",
+  category: "communication",
+  hub: "communication_channels",
+  providerKey: "fcm",
+  icon: "firebase",
+  docsUrl: "https://firebase.google.com/docs/cloud-messaging",
+  package: "@open-mercato/channel-fcm",
+  version: "0.1.0",
+  author: "Open Mercato Team",
+  company: "Open Mercato",
+  license: "MIT",
+  tags: ["push", "fcm", "firebase", "android", "communication"],
+  apiVersions: [
+    {
+      id: "v1",
+      label: "FCM HTTP v1",
+      status: "stable",
+      default: true,
+      changelog: "Firebase Cloud Messaging HTTP v1 via firebase-admin (service-account auth)."
+    }
+  ],
+  credentials: {
+    fields: [
+      {
+        key: "serviceAccountJson",
+        label: "Service Account JSON",
+        type: "secret",
+        required: true,
+        helpText: "Firebase Console -> Project Settings -> Service Accounts -> Generate New Private Key. Paste the full JSON. Stored encrypted at rest."
+      },
+      {
+        key: "appName",
+        label: "App Name (optional)",
+        type: "text",
+        required: false,
+        helpText: "Optional label for the Firebase app instance. Leave blank to auto-derive."
+      }
+    ]
+  },
+  healthCheck: { service: "channelFcmHealthCheck" }
+};
+const integrations = [integration];
+const bundles = [];
+const bundle = void 0;
+export {
+  bundle,
+  bundles,
+  integration,
+  integrations
+};
+//# sourceMappingURL=integration.js.map

package/dist/modules/channel_fcm/integration.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_fcm/integration.ts"],
+  "sourcesContent": ["import {\n  type IntegrationBundle,\n  type IntegrationDefinition,\n} from '@open-mercato/shared/modules/integrations/types'\n\nexport const integration: IntegrationDefinition = {\n  id: 'channel_fcm',\n  title: 'Firebase Cloud Messaging',\n  description:\n    'Deliver mobile push to Android (and iOS via FCM) devices using Firebase Cloud Messaging. Provider for the push_notifications channel.',\n  category: 'communication',\n  hub: 'communication_channels',\n  providerKey: 'fcm',\n  icon: 'firebase',\n  docsUrl: 'https://firebase.google.com/docs/cloud-messaging',\n  package: '@open-mercato/channel-fcm',\n  version: '0.1.0',\n  author: 'Open Mercato Team',\n  company: 'Open Mercato',\n  license: 'MIT',\n  tags: ['push', 'fcm', 'firebase', 'android', 'communication'],\n  apiVersions: [\n    {\n      id: 'v1',\n      label: 'FCM HTTP v1',\n      status: 'stable',\n      default: true,\n      changelog: 'Firebase Cloud Messaging HTTP v1 via firebase-admin (service-account auth).',\n    },\n  ],\n  credentials: {\n    fields: [\n      {\n        key: 'serviceAccountJson',\n        label: 'Service Account JSON',\n        type: 'secret',\n        required: true,\n        helpText:\n          'Firebase Console -> Project Settings -> Service Accounts -> Generate New Private Key. Paste the full JSON. Stored encrypted at rest.',\n      },\n      {\n        key: 'appName',\n        label: 'App Name (optional)',\n        type: 'text',\n        required: false,\n        helpText: 'Optional label for the Firebase app instance. Leave blank to auto-derive.',\n      },\n    ],\n  },\n  healthCheck: { service: 'channelFcmHealthCheck' },\n}\n\nexport const integrations: IntegrationDefinition[] = [integration]\nexport const bundles: IntegrationBundle[] = []\nexport const bundle: IntegrationBundle | undefined = undefined\n"],
+  "mappings": "AAKO,MAAM,cAAqC;AAAA,EAChD,IAAI;AAAA,EACJ,OAAO;AAAA,EACP,aACE;AAAA,EACF,UAAU;AAAA,EACV,KAAK;AAAA,EACL,aAAa;AAAA,EACb,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,MAAM,CAAC,QAAQ,OAAO,YAAY,WAAW,eAAe;AAAA,EAC5D,aAAa;AAAA,IACX;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,QAAQ;AAAA,MACN;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,UACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,UAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa,EAAE,SAAS,wBAAwB;AAClD;AAEO,MAAM,eAAwC,CAAC,WAAW;AAC1D,MAAM,UAA+B,CAAC;AACtC,MAAM,SAAwC;",
+  "names": []
+}

package/dist/modules/channel_fcm/lib/adapter.js

@@ -0,0 +1,160 @@
+import { createHash } from "node:crypto";
+import {
+  BasePushChannelAdapter,
+  deviceUnregisteredResult,
+  MISSING_PUSH_TOKEN_RESULT,
+  readPushToken
+} from "@open-mercato/core/modules/communication_channels/lib/push-adapter";
+import { createRefCountedClientCache } from "@open-mercato/core/modules/communication_channels/lib/refcounted-client-cache";
+import { readPushEnvelope, resolvePushBody } from "@open-mercato/core/modules/communication_channels/lib/push-envelope";
+import {
+  fcmCredentialsSchema,
+  parseFcmServiceAccount
+} from "./credentials.js";
+const PERMANENT_FCM_ERROR_CODES = /* @__PURE__ */ new Set([
+  "messaging/registration-token-not-registered",
+  "messaging/invalid-registration-token"
+]);
+let messagingFactory = null;
+function setFcmMessagingFactory(factory) {
+  messagingFactory = factory;
+}
+function cacheKeyForServiceAccount(serviceAccount) {
+  const hash = createHash("sha256").update(`${serviceAccount.projectId}:${serviceAccount.clientEmail}:${serviceAccount.privateKey}`).digest("hex").slice(0, 16);
+  return `om-fcm-${hash}`;
+}
+const APP_CACHE_MAX = 32;
+const appCache = createRefCountedClientCache({
+  max: APP_CACHE_MAX,
+  dispose: (app) => {
+    void app.delete().catch(() => {
+    });
+  }
+});
+let appInitSeq = 0;
+async function createFirebaseApp(serviceAccount, appName) {
+  const { initializeApp, cert } = await import("firebase-admin/app");
+  return initializeApp(
+    {
+      credential: cert({
+        projectId: serviceAccount.projectId,
+        clientEmail: serviceAccount.clientEmail,
+        privateKey: serviceAccount.privateKey
+      })
+    },
+    appName
+  );
+}
+function buildFcmMessage(token, envelope) {
+  const { options, silent } = envelope;
+  const apnsPriority = options.priority === "normal" ? "5" : "10";
+  if (silent) {
+    return {
+      token,
+      data: envelope.data,
+      android: { priority: "high" },
+      apns: {
+        headers: { "apns-push-type": "background", "apns-priority": "5" },
+        payload: { aps: { "content-available": 1 } }
+      }
+    };
+  }
+  const body = resolvePushBody(envelope);
+  const sound = options.sound ?? "default";
+  const androidNotification = { sound };
+  if (options.channelId) androidNotification.channelId = options.channelId;
+  if (options.image) androidNotification.imageUrl = options.image;
+  const aps = { sound };
+  if (typeof options.badge === "number") aps.badge = options.badge;
+  return {
+    token,
+    notification: {
+      title: envelope.title,
+      body,
+      ...options.image ? { imageUrl: options.image } : {}
+    },
+    data: envelope.data,
+    android: {
+      ...options.priority ? { priority: options.priority } : {},
+      notification: androidNotification
+    },
+    apns: {
+      headers: { "apns-priority": apnsPriority },
+      payload: { aps }
+    }
+  };
+}
+class FcmChannelAdapter extends BasePushChannelAdapter {
+  constructor() {
+    super(...arguments);
+    this.providerKey = "fcm";
+    this.credentialsSchema = fcmCredentialsSchema;
+  }
+  async sendMessage(input) {
+    const token = readPushToken(input);
+    if (!token) return MISSING_PUSH_TOKEN_RESULT;
+    const parsedCredentials = fcmCredentialsSchema.safeParse(input.credentials);
+    if (!parsedCredentials.success) {
+      return { externalMessageId: "", status: "failed", error: "invalid_fcm_credentials" };
+    }
+    const envelope = readPushEnvelope(input.content);
+    let serviceAccount;
+    try {
+      serviceAccount = parseFcmServiceAccount(parsedCredentials.data);
+    } catch (err) {
+      return { externalMessageId: "", status: "failed", error: err instanceof Error ? err.message : String(err) };
+    }
+    const message = buildFcmMessage(token, envelope);
+    if (messagingFactory) {
+      let messaging;
+      try {
+        messaging = messagingFactory(serviceAccount);
+      } catch (err) {
+        return { externalMessageId: "", status: "failed", error: err instanceof Error ? err.message : String(err) };
+      }
+      return this.performSend(messaging, message);
+    }
+    const cacheKey = cacheKeyForServiceAccount(serviceAccount);
+    let lease;
+    try {
+      appInitSeq += 1;
+      const appName = `${cacheKey}-${appInitSeq}`;
+      lease = await appCache.acquire(cacheKey, () => createFirebaseApp(serviceAccount, appName));
+    } catch (err) {
+      return { externalMessageId: "", status: "failed", error: err instanceof Error ? err.message : String(err) };
+    }
+    try {
+      const { getMessaging } = await import("firebase-admin/messaging");
+      const messaging = getMessaging(lease.client);
+      return await this.performSend(messaging, message);
+    } catch (err) {
+      return { externalMessageId: "", status: "failed", error: err instanceof Error ? err.message : String(err) };
+    } finally {
+      lease.release();
+    }
+  }
+  async performSend(messaging, message) {
+    try {
+      const externalMessageId = await messaging.send(message);
+      return { externalMessageId, status: "sent" };
+    } catch (err) {
+      const code = typeof err.code === "string" ? err.code : void 0;
+      const errorMessage = err instanceof Error ? err.message : String(err);
+      if (code && PERMANENT_FCM_ERROR_CODES.has(code)) {
+        return deviceUnregisteredResult({ code });
+      }
+      return { externalMessageId: "", status: "failed", error: errorMessage };
+    }
+  }
+}
+let cachedAdapter = null;
+function getFcmChannelAdapter() {
+  if (!cachedAdapter) cachedAdapter = new FcmChannelAdapter();
+  return cachedAdapter;
+}
+export {
+  buildFcmMessage,
+  getFcmChannelAdapter,
+  setFcmMessagingFactory
+};
+//# sourceMappingURL=adapter.js.map

package/dist/modules/channel_fcm/lib/adapter.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/lib/adapter.ts"],
+  "sourcesContent": ["import { createHash } from 'node:crypto'\nimport type {\n  SendMessageInput,\n  SendMessageResult,\n} from '@open-mercato/core/modules/communication_channels/lib/adapter'\nimport {\n  BasePushChannelAdapter,\n  deviceUnregisteredResult,\n  MISSING_PUSH_TOKEN_RESULT,\n  readPushToken,\n} from '@open-mercato/core/modules/communication_channels/lib/push-adapter'\nimport { createRefCountedClientCache } from '@open-mercato/core/modules/communication_channels/lib/refcounted-client-cache'\nimport { readPushEnvelope, resolvePushBody, type PushEnvelope } from '@open-mercato/core/modules/communication_channels/lib/push-envelope'\nimport {\n  fcmCredentialsSchema,\n  parseFcmServiceAccount,\n  type FcmServiceAccount,\n} from './credentials'\n\n/**\n * FCM error codes that mean the device *token* is permanently invalid. Mapped to\n * the uniform `device_unregistered` sentinel so the push worker soft-deletes the\n * device (identical contract across fcm/apns/expo \u2014 see push-stub-adapter).\n *\n * Deliberately excludes `messaging/invalid-argument`: FCM v1 returns it for ANY\n * malformed request field (oversized payload, bad data key, bad notification\n * field), not just a bad token \u2014 treating it as unregistered would let a single\n * payload-shape bug progressively soft-delete every targeted device tenant-wide.\n * It falls through to the generic retryable `failed` path instead.\n */\nconst PERMANENT_FCM_ERROR_CODES = new Set([\n  'messaging/registration-token-not-registered',\n  'messaging/invalid-registration-token',\n])\n\ntype FirebaseMessaging = {\n  send(message: Record<string, unknown>): Promise<string>\n}\n\n/**\n * Pluggable messaging factory so tests can inject a fake without importing\n * firebase-admin. Production path lazily loads firebase-admin and caches one app\n * per service-account hash (re-initializing per send is wasteful and\n * firebase-admin throws on duplicate app names).\n */\nexport type FcmMessagingFactory = (serviceAccount: FcmServiceAccount) => FirebaseMessaging\n\nlet messagingFactory: FcmMessagingFactory | null = null\n\n/** Test-only seam to swap the firebase-admin messaging factory. */\nexport function setFcmMessagingFactory(factory: FcmMessagingFactory | null): void {\n  messagingFactory = factory\n}\n\nfunction cacheKeyForServiceAccount(serviceAccount: FcmServiceAccount): string {\n  const hash = createHash('sha256')\n    .update(`${serviceAccount.projectId}:${serviceAccount.clientEmail}:${serviceAccount.privateKey}`)\n    .digest('hex')\n    .slice(0, 16)\n  return `om-fcm-${hash}`\n}\n\ntype FcmAppLike = {\n  name?: string\n  /**\n   * firebase-admin's App exposes async `delete()`, which stops the background\n   * OAuth token-refresh timer bound to the service-account credential and drops\n   * the app from the SDK's registry.\n   */\n  delete(): Promise<void>\n}\n\n/**\n * Bounds the number of live firebase-admin apps cached at once. Each app holds a\n * service-account OAuth credential with a background token-refresh timer, so an\n * unbounded cache would leak an app (and its timer) every time a tenant rotates\n * their service account (the hash changes \u2192 a new app, while the stale app never\n * gets deleted). LRU-evicting the least-recently used app and calling `delete()`\n * keeps the app and timer count bounded. Disposal is fenced on in-flight sends: an\n * evicted app is deleted only once its last concurrent `send` releases (see\n * refcounted-client-cache), so eviction never tears an app out from under a send.\n */\nconst APP_CACHE_MAX = 32\nconst appCache = createRefCountedClientCache<FcmAppLike>({\n  max: APP_CACHE_MAX,\n  dispose: (app) => {\n    void app.delete().catch(() => {})\n  },\n})\n\n// firebase-admin registers every app by name in a process-global registry and throws on a duplicate\n// name. Cache keys are per-credential-identity (a rotated service account churns keys in and out), so a\n// stable name-per-credential would let a re-created entry reuse \u2014 via getApps() \u2014 an app a still-in-flight\n// evicted entry is about to delete(). A monotonic suffix makes every initialized app name unique, so each\n// cache entry owns exactly one app and disposing an evicted app can never affect a live one.\nlet appInitSeq = 0\n\nasync function createFirebaseApp(serviceAccount: FcmServiceAccount, appName: string): Promise<FcmAppLike> {\n  const { initializeApp, cert } = await import('firebase-admin/app')\n  return initializeApp(\n    {\n      credential: cert({\n        projectId: serviceAccount.projectId,\n        clientEmail: serviceAccount.clientEmail,\n        privateKey: serviceAccount.privateKey,\n      }),\n    },\n    appName,\n  ) as unknown as FcmAppLike\n}\n\n/**\n * Build the firebase-admin message from the push envelope, branching on\n * `envelope.silent` (data-only content-available wake-up) and applying the\n * recognized `pushOptions` (sound/badge/image/priority/channelId) per platform.\n */\nexport function buildFcmMessage(token: string, envelope: PushEnvelope): Record<string, unknown> {\n  const { options, silent } = envelope\n  const apnsPriority = options.priority === 'normal' ? '5' : '10'\n\n  if (silent) {\n    return {\n      token,\n      data: envelope.data,\n      android: { priority: 'high' },\n      apns: {\n        headers: { 'apns-push-type': 'background', 'apns-priority': '5' },\n        payload: { aps: { 'content-available': 1 } },\n      },\n    }\n  }\n\n  const body = resolvePushBody(envelope)\n  const sound = options.sound ?? 'default'\n  const androidNotification: Record<string, unknown> = { sound }\n  if (options.channelId) androidNotification.channelId = options.channelId\n  if (options.image) androidNotification.imageUrl = options.image\n  const aps: Record<string, unknown> = { sound }\n  if (typeof options.badge === 'number') aps.badge = options.badge\n\n  return {\n    token,\n    notification: {\n      title: envelope.title,\n      body,\n      ...(options.image ? { imageUrl: options.image } : {}),\n    },\n    data: envelope.data,\n    android: {\n      ...(options.priority ? { priority: options.priority } : {}),\n      notification: androidNotification,\n    },\n    apns: {\n      headers: { 'apns-priority': apnsPriority },\n      payload: { aps },\n    },\n  }\n}\n\nclass FcmChannelAdapter extends BasePushChannelAdapter {\n  readonly providerKey = 'fcm'\n  protected readonly credentialsSchema = fcmCredentialsSchema\n\n  async sendMessage(input: SendMessageInput): Promise<SendMessageResult> {\n    const token = readPushToken(input)\n    if (!token) return MISSING_PUSH_TOKEN_RESULT\n\n    const parsedCredentials = fcmCredentialsSchema.safeParse(input.credentials)\n    if (!parsedCredentials.success) {\n      return { externalMessageId: '', status: 'failed', error: 'invalid_fcm_credentials' }\n    }\n\n    const envelope = readPushEnvelope(input.content)\n    let serviceAccount: FcmServiceAccount\n    try {\n      serviceAccount = parseFcmServiceAccount(parsedCredentials.data)\n    } catch (err) {\n      return { externalMessageId: '', status: 'failed', error: err instanceof Error ? err.message : String(err) }\n    }\n    const message = buildFcmMessage(token, envelope)\n\n    // Test seam: an injected factory bypasses the app cache entirely.\n    if (messagingFactory) {\n      let messaging: FirebaseMessaging\n      try {\n        messaging = messagingFactory(serviceAccount)\n      } catch (err) {\n        return { externalMessageId: '', status: 'failed', error: err instanceof Error ? err.message : String(err) }\n      }\n      return this.performSend(messaging, message)\n    }\n\n    // Production path: borrow a cached firebase-admin app for the duration of the send. Holding the\n    // lease keeps an evicted app alive until the send completes (release() in finally).\n    const cacheKey = cacheKeyForServiceAccount(serviceAccount)\n    let lease\n    try {\n      appInitSeq += 1\n      const appName = `${cacheKey}-${appInitSeq}`\n      lease = await appCache.acquire(cacheKey, () => createFirebaseApp(serviceAccount, appName))\n    } catch (err) {\n      return { externalMessageId: '', status: 'failed', error: err instanceof Error ? err.message : String(err) }\n    }\n    try {\n      const { getMessaging } = await import('firebase-admin/messaging')\n      const messaging = getMessaging(lease.client as never) as unknown as FirebaseMessaging\n      return await this.performSend(messaging, message)\n    } catch (err) {\n      return { externalMessageId: '', status: 'failed', error: err instanceof Error ? err.message : String(err) }\n    } finally {\n      lease.release()\n    }\n  }\n\n  private async performSend(\n    messaging: FirebaseMessaging,\n    message: Record<string, unknown>,\n  ): Promise<SendMessageResult> {\n    try {\n      const externalMessageId = await messaging.send(message)\n      return { externalMessageId, status: 'sent' }\n    } catch (err) {\n      const code = typeof (err as { code?: unknown }).code === 'string' ? (err as { code: string }).code : undefined\n      const errorMessage = err instanceof Error ? err.message : String(err)\n      if (code && PERMANENT_FCM_ERROR_CODES.has(code)) {\n        return deviceUnregisteredResult({ code })\n      }\n      return { externalMessageId: '', status: 'failed', error: errorMessage }\n    }\n  }\n}\n\nlet cachedAdapter: FcmChannelAdapter | null = null\n\nexport function getFcmChannelAdapter(): FcmChannelAdapter {\n  if (!cachedAdapter) cachedAdapter = new FcmChannelAdapter()\n  return cachedAdapter\n}\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAK3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,mCAAmC;AAC5C,SAAS,kBAAkB,uBAA0C;AACrE;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAaP,MAAM,4BAA4B,oBAAI,IAAI;AAAA,EACxC;AAAA,EACA;AACF,CAAC;AAcD,IAAI,mBAA+C;AAG5C,SAAS,uBAAuB,SAA2C;AAChF,qBAAmB;AACrB;AAEA,SAAS,0BAA0B,gBAA2C;AAC5E,QAAM,OAAO,WAAW,QAAQ,EAC7B,OAAO,GAAG,eAAe,SAAS,IAAI,eAAe,WAAW,IAAI,eAAe,UAAU,EAAE,EAC/F,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,SAAO,UAAU,IAAI;AACvB;AAsBA,MAAM,gBAAgB;AACtB,MAAM,WAAW,4BAAwC;AAAA,EACvD,KAAK;AAAA,EACL,SAAS,CAAC,QAAQ;AAChB,SAAK,IAAI,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAClC;AACF,CAAC;AAOD,IAAI,aAAa;AAEjB,eAAe,kBAAkB,gBAAmC,SAAsC;AACxG,QAAM,EAAE,eAAe,KAAK,IAAI,MAAM,OAAO,oBAAoB;AACjE,SAAO;AAAA,IACL;AAAA,MACE,YAAY,KAAK;AAAA,QACf,WAAW,eAAe;AAAA,QAC1B,aAAa,eAAe;AAAA,QAC5B,YAAY,eAAe;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AAOO,SAAS,gBAAgB,OAAe,UAAiD;AAC9F,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,eAAe,QAAQ,aAAa,WAAW,MAAM;AAE3D,MAAI,QAAQ;AACV,WAAO;AAAA,MACL;AAAA,MACA,MAAM,SAAS;AAAA,MACf,SAAS,EAAE,UAAU,OAAO;AAAA,MAC5B,MAAM;AAAA,QACJ,SAAS,EAAE,kBAAkB,cAAc,iBAAiB,IAAI;AAAA,QAChE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE;AAAA,MAC7C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,gBAAgB,QAAQ;AACrC,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,sBAA+C,EAAE,MAAM;AAC7D,MAAI,QAAQ,UAAW,qBAAoB,YAAY,QAAQ;AAC/D,MAAI,QAAQ,MAAO,qBAAoB,WAAW,QAAQ;AAC1D,QAAM,MAA+B,EAAE,MAAM;AAC7C,MAAI,OAAO,QAAQ,UAAU,SAAU,KAAI,QAAQ,QAAQ;AAE3D,SAAO;AAAA,IACL;AAAA,IACA,cAAc;AAAA,MACZ,OAAO,SAAS;AAAA,MAChB;AAAA,MACA,GAAI,QAAQ,QAAQ,EAAE,UAAU,QAAQ,MAAM,IAAI,CAAC;AAAA,IACrD;AAAA,IACA,MAAM,SAAS;AAAA,IACf,SAAS;AAAA,MACP,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,MACzD,cAAc;AAAA,IAChB;AAAA,IACA,MAAM;AAAA,MACJ,SAAS,EAAE,iBAAiB,aAAa;AAAA,MACzC,SAAS,EAAE,IAAI;AAAA,IACjB;AAAA,EACF;AACF;AAEA,MAAM,0BAA0B,uBAAuB;AAAA,EAAvD;AAAA;AACE,SAAS,cAAc;AACvB,SAAmB,oBAAoB;AAAA;AAAA,EAEvC,MAAM,YAAY,OAAqD;AACrE,UAAM,QAAQ,cAAc,KAAK;AACjC,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,oBAAoB,qBAAqB,UAAU,MAAM,WAAW;AAC1E,QAAI,CAAC,kBAAkB,SAAS;AAC9B,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,0BAA0B;AAAA,IACrF;AAEA,UAAM,WAAW,iBAAiB,MAAM,OAAO;AAC/C,QAAI;AACJ,QAAI;AACF,uBAAiB,uBAAuB,kBAAkB,IAAI;AAAA,IAChE,SAAS,KAAK;AACZ,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,IAC5G;AACA,UAAM,UAAU,gBAAgB,OAAO,QAAQ;AAG/C,QAAI,kBAAkB;AACpB,UAAI;AACJ,UAAI;AACF,oBAAY,iBAAiB,cAAc;AAAA,MAC7C,SAAS,KAAK;AACZ,eAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,MAC5G;AACA,aAAO,KAAK,YAAY,WAAW,OAAO;AAAA,IAC5C;AAIA,UAAM,WAAW,0BAA0B,cAAc;AACzD,QAAI;AACJ,QAAI;AACF,oBAAc;AACd,YAAM,UAAU,GAAG,QAAQ,IAAI,UAAU;AACzC,cAAQ,MAAM,SAAS,QAAQ,UAAU,MAAM,kBAAkB,gBAAgB,OAAO,CAAC;AAAA,IAC3F,SAAS,KAAK;AACZ,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,IAC5G;AACA,QAAI;AACF,YAAM,EAAE,aAAa,IAAI,MAAM,OAAO,0BAA0B;AAChE,YAAM,YAAY,aAAa,MAAM,MAAe;AACpD,aAAO,MAAM,KAAK,YAAY,WAAW,OAAO;AAAA,IAClD,SAAS,KAAK;AACZ,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,IAC5G,UAAE;AACA,YAAM,QAAQ;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAc,YACZ,WACA,SAC4B;AAC5B,QAAI;AACF,YAAM,oBAAoB,MAAM,UAAU,KAAK,OAAO;AACtD,aAAO,EAAE,mBAAmB,QAAQ,OAAO;AAAA,IAC7C,SAAS,KAAK;AACZ,YAAM,OAAO,OAAQ,IAA2B,SAAS,WAAY,IAAyB,OAAO;AACrG,YAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACpE,UAAI,QAAQ,0BAA0B,IAAI,IAAI,GAAG;AAC/C,eAAO,yBAAyB,EAAE,KAAK,CAAC;AAAA,MAC1C;AACA,aAAO,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,aAAa;AAAA,IACxE;AAAA,EACF;AACF;AAEA,IAAI,gBAA0C;AAEvC,SAAS,uBAA0C;AACxD,MAAI,CAAC,cAAe,iBAAgB,IAAI,kBAAkB;AAC1D,SAAO;AACT;",
+  "names": []
+}