@open-mercato/channel-fcm 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/channel_fcm/lib/credentials.js

@@ -0,0 +1,56 @@
+import { z } from "zod";
+import {
+  PUSH_CREDENTIAL_ERROR_INVALID_JSON,
+  PUSH_CREDENTIAL_ERROR_MISSING_FIELDS,
+  PUSH_CREDENTIAL_ERROR_REQUIRED
+} from "@open-mercato/core/modules/communication_channels/lib/push-credential-errors";
+const fcmServiceAccountSchema = z.object({
+  projectId: z.string().min(1, "project_id missing"),
+  clientEmail: z.string().min(1, "client_email missing"),
+  privateKey: z.string().min(1, "private_key missing")
+}).passthrough();
+function normalizeServiceAccount(raw) {
+  return fcmServiceAccountSchema.parse({
+    projectId: raw.projectId ?? raw.project_id,
+    clientEmail: raw.clientEmail ?? raw.client_email,
+    privateKey: raw.privateKey ?? raw.private_key
+  });
+}
+const fcmCredentialsSchema = z.object({
+  serviceAccountJson: z.string().min(1, PUSH_CREDENTIAL_ERROR_REQUIRED),
+  appName: z.string().optional()
+}).passthrough().superRefine((value, ctx) => {
+  let parsed;
+  try {
+    parsed = JSON.parse(value.serviceAccountJson);
+  } catch {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      path: ["serviceAccountJson"],
+      message: PUSH_CREDENTIAL_ERROR_INVALID_JSON
+    });
+    return;
+  }
+  const account = fcmServiceAccountSchema.safeParse({
+    projectId: parsed.projectId ?? parsed.project_id,
+    clientEmail: parsed.clientEmail ?? parsed.client_email,
+    privateKey: parsed.privateKey ?? parsed.private_key
+  });
+  if (!account.success) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      path: ["serviceAccountJson"],
+      message: PUSH_CREDENTIAL_ERROR_MISSING_FIELDS
+    });
+  }
+});
+function parseFcmServiceAccount(credentials) {
+  const parsed = JSON.parse(credentials.serviceAccountJson);
+  return normalizeServiceAccount(parsed);
+}
+export {
+  fcmCredentialsSchema,
+  fcmServiceAccountSchema,
+  parseFcmServiceAccount
+};
+//# sourceMappingURL=credentials.js.map

package/dist/modules/channel_fcm/lib/credentials.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/lib/credentials.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport {\n  PUSH_CREDENTIAL_ERROR_INVALID_JSON,\n  PUSH_CREDENTIAL_ERROR_MISSING_FIELDS,\n  PUSH_CREDENTIAL_ERROR_REQUIRED,\n} from '@open-mercato/core/modules/communication_channels/lib/push-credential-errors'\n\n/**\n * Firebase service account shape (camelCase) used to mint FCM credentials.\n * Source JSON from the Firebase console uses snake_case keys, normalized by\n * {@link parseFcmServiceAccount}.\n */\nexport const fcmServiceAccountSchema = z\n  .object({\n    projectId: z.string().min(1, 'project_id missing'),\n    clientEmail: z.string().min(1, 'client_email missing'),\n    privateKey: z.string().min(1, 'private_key missing'),\n  })\n  .passthrough()\n\nexport type FcmServiceAccount = z.infer<typeof fcmServiceAccountSchema>\n\nfunction normalizeServiceAccount(raw: Record<string, unknown>): FcmServiceAccount {\n  return fcmServiceAccountSchema.parse({\n    projectId: raw.projectId ?? raw.project_id,\n    clientEmail: raw.clientEmail ?? raw.client_email,\n    privateKey: raw.privateKey ?? raw.private_key,\n  })\n}\n\n/**\n * Tenant-level FCM credentials persisted on `IntegrationCredentials` for provider\n * `channel_fcm`. `serviceAccountJson` is the full Firebase service-account JSON\n * (stored encrypted at rest); `appName` is an optional label for the cached\n * firebase-admin app.\n */\nexport const fcmCredentialsSchema = z\n  .object({\n    serviceAccountJson: z.string().min(1, PUSH_CREDENTIAL_ERROR_REQUIRED),\n    appName: z.string().optional(),\n  })\n  .passthrough()\n  .superRefine((value, ctx) => {\n    // Two distinct failures, two distinct codes. Never interpolate the caught\n    // error: a `normalizeServiceAccount` rejection is a ZodError whose\n    // `.message` is a JSON dump of the issue array, which used to reach the\n    // operator verbatim through `fieldErrors`.\n    let parsed: Record<string, unknown>\n    try {\n      parsed = JSON.parse(value.serviceAccountJson) as Record<string, unknown>\n    } catch {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['serviceAccountJson'],\n        message: PUSH_CREDENTIAL_ERROR_INVALID_JSON,\n      })\n      return\n    }\n    const account = fcmServiceAccountSchema.safeParse({\n      projectId: parsed.projectId ?? parsed.project_id,\n      clientEmail: parsed.clientEmail ?? parsed.client_email,\n      privateKey: parsed.privateKey ?? parsed.private_key,\n    })\n    if (!account.success) {\n      ctx.addIssue({\n        code: z.ZodIssueCode.custom,\n        path: ['serviceAccountJson'],\n        message: PUSH_CREDENTIAL_ERROR_MISSING_FIELDS,\n      })\n    }\n  })\n\nexport type FcmCredentials = z.infer<typeof fcmCredentialsSchema>\n\n/** Parse and normalize the service account out of validated credentials. Throws on malformed JSON. */\nexport function parseFcmServiceAccount(credentials: FcmCredentials): FcmServiceAccount {\n  const parsed = JSON.parse(credentials.serviceAccountJson) as Record<string, unknown>\n  return normalizeServiceAccount(parsed)\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOA,MAAM,0BAA0B,EACpC,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,oBAAoB;AAAA,EACjD,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB;AAAA,EACrD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,qBAAqB;AACrD,CAAC,EACA,YAAY;AAIf,SAAS,wBAAwB,KAAiD;AAChF,SAAO,wBAAwB,MAAM;AAAA,IACnC,WAAW,IAAI,aAAa,IAAI;AAAA,IAChC,aAAa,IAAI,eAAe,IAAI;AAAA,IACpC,YAAY,IAAI,cAAc,IAAI;AAAA,EACpC,CAAC;AACH;AAQO,MAAM,uBAAuB,EACjC,OAAO;AAAA,EACN,oBAAoB,EAAE,OAAO,EAAE,IAAI,GAAG,8BAA8B;AAAA,EACpE,SAAS,EAAE,OAAO,EAAE,SAAS;AAC/B,CAAC,EACA,YAAY,EACZ,YAAY,CAAC,OAAO,QAAQ;AAK3B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,MAAM,kBAAkB;AAAA,EAC9C,QAAQ;AACN,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,oBAAoB;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AACD;AAAA,EACF;AACA,QAAM,UAAU,wBAAwB,UAAU;AAAA,IAChD,WAAW,OAAO,aAAa,OAAO;AAAA,IACtC,aAAa,OAAO,eAAe,OAAO;AAAA,IAC1C,YAAY,OAAO,cAAc,OAAO;AAAA,EAC1C,CAAC;AACD,MAAI,CAAC,QAAQ,SAAS;AACpB,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,MAAM,CAAC,oBAAoB;AAAA,MAC3B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AAKI,SAAS,uBAAuB,aAAgD;AACrF,QAAM,SAAS,KAAK,MAAM,YAAY,kBAAkB;AACxD,SAAO,wBAAwB,MAAM;AACvC;",
+  "names": []
+}

package/dist/modules/channel_fcm/lib/fake-provider.js

@@ -0,0 +1,32 @@
+import {
+  isPushFakeProvidersEnabled,
+  recordFakePush,
+  warnPushFakeProvidersActive
+} from "@open-mercato/core/modules/push_notifications/lib/fake-provider-recorder";
+import { setFcmMessagingFactory } from "./adapter.js";
+function fakeSendError(message, code) {
+  const error = new Error(message);
+  if (code) Object.assign(error, { code });
+  return error;
+}
+function ensureFcmFakeProviderInstalled() {
+  if (!isPushFakeProvidersEnabled()) return;
+  warnPushFakeProvidersActive("fcm");
+  setFcmMessagingFactory(() => ({
+    async send(message) {
+      const token = typeof message.token === "string" ? message.token : "";
+      recordFakePush("fcm", token, message);
+      if (token.includes("unregistered")) {
+        throw fakeSendError("fake fcm token not registered", "messaging/registration-token-not-registered");
+      }
+      if (token.includes("fail")) {
+        throw fakeSendError("fake fcm transient failure");
+      }
+      return `fcm-fake-${token.slice(-8) || "token"}`;
+    }
+  }));
+}
+export {
+  ensureFcmFakeProviderInstalled
+};
+//# sourceMappingURL=fake-provider.js.map

package/dist/modules/channel_fcm/lib/fake-provider.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/lib/fake-provider.ts"],
+  "sourcesContent": ["import {\n  isPushFakeProvidersEnabled,\n  recordFakePush,\n  warnPushFakeProvidersActive,\n} from '@open-mercato/core/modules/push_notifications/lib/fake-provider-recorder'\nimport { setFcmMessagingFactory } from './adapter'\n\n/**\n * Network-free `firebase-admin` messaging client used ONLY by integration tests.\n *\n * Swaps the SDK client behind the adapter's existing seam, so every line of the real adapter still\n * runs \u2014 message construction, credential parsing, client caching, and the\n * `messaging/registration-token-not-registered` \u2192 `device_unregistered` mapping. The adapter itself is\n * never replaced (unlike `push_stub`), and is never re-registered: `registerChannelAdapter` throws on a\n * duplicate provider key.\n *\n * Token sentinels match `push_stub`'s convention (see push-stub-adapter.ts):\n *   - token containing `unregistered` \u2192 FCM's native permanent-token error code\n *   - token containing `fail`         \u2192 a retryable error (no `code`, so the adapter retries)\n *   - otherwise                        \u2192 success\n *\n * Production safety: never installed at module import; no-op unless `OM_PUSH_FAKE_PROVIDERS` is set.\n */\nfunction fakeSendError(message: string, code?: string): Error {\n  const error = new Error(message)\n  if (code) Object.assign(error, { code })\n  return error\n}\n\nexport function ensureFcmFakeProviderInstalled(): void {\n  if (!isPushFakeProvidersEnabled()) return\n  warnPushFakeProvidersActive('fcm')\n  setFcmMessagingFactory(() => ({\n    async send(message: Record<string, unknown>): Promise<string> {\n      const token = typeof message.token === 'string' ? message.token : ''\n      recordFakePush('fcm', token, message)\n      if (token.includes('unregistered')) {\n        throw fakeSendError('fake fcm token not registered', 'messaging/registration-token-not-registered')\n      }\n      if (token.includes('fail')) {\n        throw fakeSendError('fake fcm transient failure')\n      }\n      return `fcm-fake-${token.slice(-8) || 'token'}`\n    },\n  }))\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AAkBvC,SAAS,cAAc,SAAiB,MAAsB;AAC5D,QAAM,QAAQ,IAAI,MAAM,OAAO;AAC/B,MAAI,KAAM,QAAO,OAAO,OAAO,EAAE,KAAK,CAAC;AACvC,SAAO;AACT;AAEO,SAAS,iCAAuC;AACrD,MAAI,CAAC,2BAA2B,EAAG;AACnC,8BAA4B,KAAK;AACjC,yBAAuB,OAAO;AAAA,IAC5B,MAAM,KAAK,SAAmD;AAC5D,YAAM,QAAQ,OAAO,QAAQ,UAAU,WAAW,QAAQ,QAAQ;AAClE,qBAAe,OAAO,OAAO,OAAO;AACpC,UAAI,MAAM,SAAS,cAAc,GAAG;AAClC,cAAM,cAAc,iCAAiC,6CAA6C;AAAA,MACpG;AACA,UAAI,MAAM,SAAS,MAAM,GAAG;AAC1B,cAAM,cAAc,4BAA4B;AAAA,MAClD;AACA,aAAO,YAAY,MAAM,MAAM,EAAE,KAAK,OAAO;AAAA,IAC/C;AAAA,EACF,EAAE;AACJ;",
+  "names": []
+}

package/dist/modules/channel_fcm/lib/health.js

@@ -0,0 +1,10 @@
+import { makePushClientConfigHealthCheck } from "@open-mercato/core/modules/push_notifications/lib/push-health";
+import { fcmCredentialsSchema } from "./credentials.js";
+const channelFcmHealthCheck = makePushClientConfigHealthCheck({
+  schema: fcmCredentialsSchema,
+  providerLabel: "FCM"
+});
+export {
+  channelFcmHealthCheck
+};
+//# sourceMappingURL=health.js.map

package/dist/modules/channel_fcm/lib/health.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/lib/health.ts"],
+  "sourcesContent": ["import { makePushClientConfigHealthCheck } from '@open-mercato/core/modules/push_notifications/lib/push-health'\nimport { fcmCredentialsSchema } from './credentials'\n\n/**\n * Liveness probe for the FCM integration. The hub passes the tenant-scoped\n * credentials (the service-account JSON), so the probe just confirms they are\n * present and parse into a valid service account \u2014 no network call. Per-device\n * token validity surfaces on delivery (`device_unregistered` soft-deletes).\n */\nexport const channelFcmHealthCheck = makePushClientConfigHealthCheck({\n  schema: fcmCredentialsSchema,\n  providerLabel: 'FCM',\n})\n"],
+  "mappings": "AAAA,SAAS,uCAAuC;AAChD,SAAS,4BAA4B;AAQ9B,MAAM,wBAAwB,gCAAgC;AAAA,EACnE,QAAQ;AAAA,EACR,eAAe;AACjB,CAAC;",
+  "names": []
+}

package/dist/modules/channel_fcm/setup.js

@@ -0,0 +1,25 @@
+import {
+  hasChannelAdapter,
+  registerChannelAdapter
+} from "@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton";
+import { getFcmChannelAdapter } from "./lib/adapter.js";
+function ensureFcmAdapterRegistered() {
+  if (hasChannelAdapter("fcm")) return;
+  registerChannelAdapter(getFcmChannelAdapter());
+}
+ensureFcmAdapterRegistered();
+const setup = {
+  defaultRoleFeatures: {
+    superadmin: ["channel_fcm.view", "channel_fcm.configure"],
+    admin: ["channel_fcm.view", "channel_fcm.configure"]
+  },
+  async onTenantCreated() {
+    ensureFcmAdapterRegistered();
+  }
+};
+var setup_default = setup;
+export {
+  setup_default as default,
+  setup
+};
+//# sourceMappingURL=setup.js.map

package/dist/modules/channel_fcm/setup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/channel_fcm/setup.ts"],
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport {\n  hasChannelAdapter,\n  registerChannelAdapter,\n} from '@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton'\nimport { getFcmChannelAdapter } from './lib/adapter'\n\n/**\n * Register the FCM `ChannelAdapter` once per process at import time. The registry\n * is process-wide; we guard with `hasChannelAdapter` to silence the duplicate\n * error on dev-mode HMR + repeated test imports.\n *\n * Provider credentials (the Firebase service account) are persisted per tenant via\n * the standard `IntegrationCredentials` flow for the `channel_fcm` provider; this\n * module never preconfigures credentials from env.\n */\nfunction ensureFcmAdapterRegistered(): void {\n  if (hasChannelAdapter('fcm')) return\n  registerChannelAdapter(getFcmChannelAdapter())\n}\n\nensureFcmAdapterRegistered()\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    superadmin: ['channel_fcm.view', 'channel_fcm.configure'],\n    admin: ['channel_fcm.view', 'channel_fcm.configure'],\n  },\n  async onTenantCreated() {\n    ensureFcmAdapterRegistered()\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AAWrC,SAAS,6BAAmC;AAC1C,MAAI,kBAAkB,KAAK,EAAG;AAC9B,yBAAuB,qBAAqB,CAAC;AAC/C;AAEA,2BAA2B;AAEpB,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA,IACnB,YAAY,CAAC,oBAAoB,uBAAuB;AAAA,IACxD,OAAO,CAAC,oBAAoB,uBAAuB;AAAA,EACrD;AAAA,EACA,MAAM,kBAAkB;AACtB,+BAA2B;AAAA,EAC7B;AACF;AAEA,IAAO,gBAAQ;",
+  "names": []
+}

package/dist/modules/channel_fcm/widgets/injection/connect/widget.client.js

@@ -0,0 +1,176 @@
+"use client";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import * as React from "react";
+import { useT } from "@open-mercato/shared/lib/i18n/context";
+import { flash } from "@open-mercato/ui/backend/FlashMessages";
+import { useGuardedMutation } from "@open-mercato/ui/backend/injection/useGuardedMutation";
+import { apiCall } from "@open-mercato/ui/backend/utils/apiCall";
+import {
+  resolvePushConnectErrorMessage,
+  resolvePushConnectFieldErrors
+} from "@open-mercato/core/modules/communication_channels/lib/push-connect-error";
+import { Button } from "@open-mercato/ui/primitives/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle
+} from "@open-mercato/ui/primitives/dialog";
+import { Input } from "@open-mercato/ui/primitives/input";
+import { Label } from "@open-mercato/ui/primitives/label";
+import { Textarea } from "@open-mercato/ui/primitives/textarea";
+const INITIAL_FORM = {
+  displayName: "Firebase Cloud Messaging",
+  serviceAccountJson: "",
+  appName: ""
+};
+function ConnectFcmWidget({
+  context
+}) {
+  const t = useT();
+  const widgetContext = context;
+  const [open, setOpen] = React.useState(false);
+  const [pending, setPending] = React.useState(false);
+  const [form, setForm] = React.useState(INITIAL_FORM);
+  const [fieldErrors, setFieldErrors] = React.useState({});
+  const { runMutation, retryLastMutation } = useGuardedMutation({
+    contextId: "channel-fcm-connect",
+    blockedMessage: t("communication_channels.push.connect.blocked", "Connection blocked by validation")
+  });
+  const mutationContext = React.useMemo(
+    () => ({ providerKey: "fcm", retryLastMutation }),
+    [retryLastMutation]
+  );
+  const update = React.useCallback(
+    (key, value) => {
+      setForm((current) => ({ ...current, [key]: value }));
+      setFieldErrors((current) => {
+        if (!current[key]) return current;
+        const next = { ...current };
+        delete next[key];
+        return next;
+      });
+    },
+    []
+  );
+  const submit = React.useCallback(async () => {
+    if (pending) return;
+    setPending(true);
+    setFieldErrors({});
+    const displayName = form.displayName.trim() || "Firebase Cloud Messaging";
+    try {
+      const response = await runMutation({
+        context: mutationContext,
+        mutationPayload: { providerKey: "fcm", displayName },
+        operation: () => apiCall("/api/communication_channels/channels/connect/tenant-credentials", {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({
+            providerKey: "fcm",
+            displayName,
+            credentials: {
+              serviceAccountJson: form.serviceAccountJson.trim(),
+              ...form.appName.trim() ? { appName: form.appName.trim() } : {}
+            }
+          })
+        })
+      });
+      const body = response.result;
+      if (!response.ok) {
+        setFieldErrors(resolvePushConnectFieldErrors(t, body));
+        flash(resolvePushConnectErrorMessage(t, body), "error");
+        return;
+      }
+      flash(t("communication_channels.push.connect.connected", "Push provider connected."), "success");
+      setOpen(false);
+      setForm(INITIAL_FORM);
+      widgetContext?.reload?.();
+    } finally {
+      setPending(false);
+    }
+  }, [form, mutationContext, pending, runMutation, t, widgetContext]);
+  const onDialogKeyDown = React.useCallback(
+    (event) => {
+      if ((event.metaKey || event.ctrlKey) && event.key === "Enter") {
+        event.preventDefault();
+        void submit();
+      }
+    },
+    [submit]
+  );
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", onClick: () => setOpen(true), children: t("communication_channels.push.connect.button.fcm", "Connect FCM") }),
+    /* @__PURE__ */ jsx(Dialog, { open, onOpenChange: setOpen, children: /* @__PURE__ */ jsxs(DialogContent, { onKeyDown: onDialogKeyDown, children: [
+      /* @__PURE__ */ jsx(DialogHeader, { children: /* @__PURE__ */ jsx(DialogTitle, { children: t("communication_channels.push.connect.title.fcm", "Connect Firebase Cloud Messaging") }) }),
+      /* @__PURE__ */ jsxs("div", { className: "grid gap-4 py-2", children: [
+        /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: t(
+          "communication_channels.push.connect.description",
+          "This is a shared, tenant-wide channel \u2014 every user's devices in this workspace are served by it."
+        ) }),
+        /* @__PURE__ */ jsx(
+          Field,
+          {
+            label: t("communication_channels.push.connect.displayName", "Display name"),
+            error: fieldErrors.displayName,
+            children: /* @__PURE__ */ jsx(
+              Input,
+              {
+                value: form.displayName,
+                onChange: (event) => update("displayName", event.target.value),
+                "aria-invalid": Boolean(fieldErrors.displayName)
+              }
+            )
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Field,
+          {
+            label: t("communication_channels.push.connect.fields.fcm.serviceAccountJson", "Service Account JSON"),
+            error: fieldErrors.serviceAccountJson,
+            children: /* @__PURE__ */ jsx(
+              Textarea,
+              {
+                rows: 8,
+                value: form.serviceAccountJson,
+                onChange: (event) => update("serviceAccountJson", event.target.value),
+                "aria-invalid": Boolean(fieldErrors.serviceAccountJson),
+                className: "font-mono text-xs"
+              }
+            )
+          }
+        ),
+        /* @__PURE__ */ jsx(
+          Field,
+          {
+            label: t("communication_channels.push.connect.fields.fcm.appName", "App name (optional)"),
+            error: fieldErrors.appName,
+            children: /* @__PURE__ */ jsx(
+              Input,
+              {
+                value: form.appName,
+                onChange: (event) => update("appName", event.target.value),
+                "aria-invalid": Boolean(fieldErrors.appName)
+              }
+            )
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxs(DialogFooter, { children: [
+        /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", onClick: () => setOpen(false), disabled: pending, children: t("communication_channels.push.connect.cancel", "Cancel") }),
+        /* @__PURE__ */ jsx(Button, { type: "button", onClick: () => void submit(), disabled: pending, children: pending ? t("communication_channels.push.connect.connecting", "Connecting\u2026") : t("communication_channels.push.connect.save", "Connect") })
+      ] })
+    ] }) })
+  ] });
+}
+function Field(props) {
+  return /* @__PURE__ */ jsxs("label", { className: "grid gap-1.5", children: [
+    /* @__PURE__ */ jsx(Label, { asChild: true, children: /* @__PURE__ */ jsx("span", { children: props.label }) }),
+    props.children,
+    props.error ? /* @__PURE__ */ jsx("span", { className: "text-xs text-destructive", children: props.error }) : null
+  ] });
+}
+export {
+  ConnectFcmWidget as default
+};
+//# sourceMappingURL=widget.client.js.map

package/dist/modules/channel_fcm/widgets/injection/connect/widget.client.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/channel_fcm/widgets/injection/connect/widget.client.tsx"],
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport type { InjectionWidgetComponentProps } from '@open-mercato/shared/modules/widgets/injection'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { apiCall } from '@open-mercato/ui/backend/utils/apiCall'\nimport {\n  resolvePushConnectErrorMessage,\n  resolvePushConnectFieldErrors,\n} from '@open-mercato/core/modules/communication_channels/lib/push-connect-error'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport {\n  Dialog,\n  DialogContent,\n  DialogFooter,\n  DialogHeader,\n  DialogTitle,\n} from '@open-mercato/ui/primitives/dialog'\nimport { Input } from '@open-mercato/ui/primitives/input'\nimport { Label } from '@open-mercato/ui/primitives/label'\nimport { Textarea } from '@open-mercato/ui/primitives/textarea'\n\ntype WidgetContext = Record<string, unknown> & {\n  reload?: () => void\n}\n\ntype ConnectResponse = {\n  channelId?: string\n  error?: string\n  code?: string\n  fieldErrors?: Record<string, string>\n  fieldErrorCodes?: Record<string, string>\n}\n\ntype FormState = {\n  displayName: string\n  serviceAccountJson: string\n  appName: string\n}\n\nconst INITIAL_FORM: FormState = {\n  displayName: 'Firebase Cloud Messaging',\n  serviceAccountJson: '',\n  appName: '',\n}\n\nexport default function ConnectFcmWidget({\n  context,\n}: InjectionWidgetComponentProps<Record<string, unknown>, Record<string, unknown>>) {\n  const t = useT()\n  const widgetContext = context as WidgetContext | undefined\n  const [open, setOpen] = React.useState(false)\n  const [pending, setPending] = React.useState(false)\n  const [form, setForm] = React.useState<FormState>(INITIAL_FORM)\n  const [fieldErrors, setFieldErrors] = React.useState<Record<string, string>>({})\n  const { runMutation, retryLastMutation } = useGuardedMutation({\n    contextId: 'channel-fcm-connect',\n    blockedMessage: t('communication_channels.push.connect.blocked', 'Connection blocked by validation'),\n  })\n  const mutationContext = React.useMemo(\n    () => ({ providerKey: 'fcm', retryLastMutation }),\n    [retryLastMutation],\n  )\n\n  const update = React.useCallback(\n    <K extends keyof FormState>(key: K, value: FormState[K]) => {\n      setForm((current) => ({ ...current, [key]: value }))\n      setFieldErrors((current) => {\n        if (!current[key]) return current\n        const next = { ...current }\n        delete next[key]\n        return next\n      })\n    },\n    [],\n  )\n\n  const submit = React.useCallback(async () => {\n    if (pending) return\n    setPending(true)\n    setFieldErrors({})\n    const displayName = form.displayName.trim() || 'Firebase Cloud Messaging'\n    try {\n      const response = await runMutation({\n        context: mutationContext,\n        mutationPayload: { providerKey: 'fcm', displayName },\n        operation: () =>\n          apiCall<ConnectResponse>('/api/communication_channels/channels/connect/tenant-credentials', {\n            method: 'POST',\n            headers: { 'content-type': 'application/json' },\n            body: JSON.stringify({\n              providerKey: 'fcm',\n              displayName,\n              credentials: {\n                serviceAccountJson: form.serviceAccountJson.trim(),\n                ...(form.appName.trim() ? { appName: form.appName.trim() } : {}),\n              },\n            }),\n          }),\n      })\n      const body = response.result as ConnectResponse | undefined\n      if (!response.ok) {\n        setFieldErrors(resolvePushConnectFieldErrors(t, body))\n        flash(resolvePushConnectErrorMessage(t, body), 'error')\n        return\n      }\n      flash(t('communication_channels.push.connect.connected', 'Push provider connected.'), 'success')\n      setOpen(false)\n      setForm(INITIAL_FORM)\n      widgetContext?.reload?.()\n    } finally {\n      setPending(false)\n    }\n  }, [form, mutationContext, pending, runMutation, t, widgetContext])\n\n  const onDialogKeyDown = React.useCallback(\n    (event: React.KeyboardEvent<HTMLDivElement>) => {\n      if ((event.metaKey || event.ctrlKey) && event.key === 'Enter') {\n        event.preventDefault()\n        void submit()\n      }\n    },\n    [submit],\n  )\n\n  return (\n    <>\n      <Button type=\"button\" variant=\"outline\" onClick={() => setOpen(true)}>\n        {t('communication_channels.push.connect.button.fcm', 'Connect FCM')}\n      </Button>\n      <Dialog open={open} onOpenChange={setOpen}>\n        <DialogContent onKeyDown={onDialogKeyDown}>\n          <DialogHeader>\n            <DialogTitle>\n              {t('communication_channels.push.connect.title.fcm', 'Connect Firebase Cloud Messaging')}\n            </DialogTitle>\n          </DialogHeader>\n\n          <div className=\"grid gap-4 py-2\">\n            <p className=\"text-sm text-muted-foreground\">\n              {t(\n                'communication_channels.push.connect.description',\n                \"This is a shared, tenant-wide channel \u2014 every user's devices in this workspace are served by it.\",\n              )}\n            </p>\n            <Field\n              label={t('communication_channels.push.connect.displayName', 'Display name')}\n              error={fieldErrors.displayName}\n            >\n              <Input\n                value={form.displayName}\n                onChange={(event) => update('displayName', event.target.value)}\n                aria-invalid={Boolean(fieldErrors.displayName)}\n              />\n            </Field>\n            <Field\n              label={t('communication_channels.push.connect.fields.fcm.serviceAccountJson', 'Service Account JSON')}\n              error={fieldErrors.serviceAccountJson}\n            >\n              <Textarea\n                rows={8}\n                value={form.serviceAccountJson}\n                onChange={(event) => update('serviceAccountJson', event.target.value)}\n                aria-invalid={Boolean(fieldErrors.serviceAccountJson)}\n                className=\"font-mono text-xs\"\n              />\n            </Field>\n            <Field\n              label={t('communication_channels.push.connect.fields.fcm.appName', 'App name (optional)')}\n              error={fieldErrors.appName}\n            >\n              <Input\n                value={form.appName}\n                onChange={(event) => update('appName', event.target.value)}\n                aria-invalid={Boolean(fieldErrors.appName)}\n              />\n            </Field>\n          </div>\n\n          <DialogFooter>\n            <Button type=\"button\" variant=\"outline\" onClick={() => setOpen(false)} disabled={pending}>\n              {t('communication_channels.push.connect.cancel', 'Cancel')}\n            </Button>\n            <Button type=\"button\" onClick={() => void submit()} disabled={pending}>\n              {pending\n                ? t('communication_channels.push.connect.connecting', 'Connecting\u2026')\n                : t('communication_channels.push.connect.save', 'Connect')}\n            </Button>\n          </DialogFooter>\n        </DialogContent>\n      </Dialog>\n    </>\n  )\n}\n\nfunction Field(props: { label: string; error?: string; children: React.ReactNode }) {\n  return (\n    <label className=\"grid gap-1.5\">\n      <Label asChild>\n        <span>{props.label}</span>\n      </Label>\n      {props.children}\n      {props.error ? <span className=\"text-xs text-destructive\">{props.error}</span> : null}\n    </label>\n  )\n}\n"],
+  "mappings": ";AAgII,mBACE,KAWI,YAZN;AA9HJ,YAAY,WAAW;AAEvB,SAAS,YAAY;AACrB,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,eAAe;AACxB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa;AACtB,SAAS,aAAa;AACtB,SAAS,gBAAgB;AAoBzB,MAAM,eAA0B;AAAA,EAC9B,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,SAAS;AACX;AAEe,SAAR,iBAAkC;AAAA,EACvC;AACF,GAAoF;AAClF,QAAM,IAAI,KAAK;AACf,QAAM,gBAAgB;AACtB,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,KAAK;AAC5C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAoB,YAAY;AAC9D,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAiC,CAAC,CAAC;AAC/E,QAAM,EAAE,aAAa,kBAAkB,IAAI,mBAAmB;AAAA,IAC5D,WAAW;AAAA,IACX,gBAAgB,EAAE,+CAA+C,kCAAkC;AAAA,EACrG,CAAC;AACD,QAAM,kBAAkB,MAAM;AAAA,IAC5B,OAAO,EAAE,aAAa,OAAO,kBAAkB;AAAA,IAC/C,CAAC,iBAAiB;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM;AAAA,IACnB,CAA4B,KAAQ,UAAwB;AAC1D,cAAQ,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,GAAG,GAAG,MAAM,EAAE;AACnD,qBAAe,CAAC,YAAY;AAC1B,YAAI,CAAC,QAAQ,GAAG,EAAG,QAAO;AAC1B,cAAM,OAAO,EAAE,GAAG,QAAQ;AAC1B,eAAO,KAAK,GAAG;AACf,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,MAAM,YAAY,YAAY;AAC3C,QAAI,QAAS;AACb,eAAW,IAAI;AACf,mBAAe,CAAC,CAAC;AACjB,UAAM,cAAc,KAAK,YAAY,KAAK,KAAK;AAC/C,QAAI;AACF,YAAM,WAAW,MAAM,YAAY;AAAA,QACjC,SAAS;AAAA,QACT,iBAAiB,EAAE,aAAa,OAAO,YAAY;AAAA,QACnD,WAAW,MACT,QAAyB,mEAAmE;AAAA,UAC1F,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU;AAAA,YACnB,aAAa;AAAA,YACb;AAAA,YACA,aAAa;AAAA,cACX,oBAAoB,KAAK,mBAAmB,KAAK;AAAA,cACjD,GAAI,KAAK,QAAQ,KAAK,IAAI,EAAE,SAAS,KAAK,QAAQ,KAAK,EAAE,IAAI,CAAC;AAAA,YAChE;AAAA,UACF,CAAC;AAAA,QACH,CAAC;AAAA,MACL,CAAC;AACD,YAAM,OAAO,SAAS;AACtB,UAAI,CAAC,SAAS,IAAI;AAChB,uBAAe,8BAA8B,GAAG,IAAI,CAAC;AACrD,cAAM,+BAA+B,GAAG,IAAI,GAAG,OAAO;AACtD;AAAA,MACF;AACA,YAAM,EAAE,iDAAiD,0BAA0B,GAAG,SAAS;AAC/F,cAAQ,KAAK;AACb,cAAQ,YAAY;AACpB,qBAAe,SAAS;AAAA,IAC1B,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,MAAM,iBAAiB,SAAS,aAAa,GAAG,aAAa,CAAC;AAElE,QAAM,kBAAkB,MAAM;AAAA,IAC5B,CAAC,UAA+C;AAC9C,WAAK,MAAM,WAAW,MAAM,YAAY,MAAM,QAAQ,SAAS;AAC7D,cAAM,eAAe;AACrB,aAAK,OAAO;AAAA,MACd;AAAA,IACF;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AAEA,SACE,iCACE;AAAA,wBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,SAAS,MAAM,QAAQ,IAAI,GAChE,YAAE,kDAAkD,aAAa,GACpE;AAAA,IACA,oBAAC,UAAO,MAAY,cAAc,SAChC,+BAAC,iBAAc,WAAW,iBACxB;AAAA,0BAAC,gBACC,8BAAC,eACE,YAAE,iDAAiD,kCAAkC,GACxF,GACF;AAAA,MAEA,qBAAC,SAAI,WAAU,mBACb;AAAA,4BAAC,OAAE,WAAU,iCACV;AAAA,UACC;AAAA,UACA;AAAA,QACF,GACF;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,EAAE,mDAAmD,cAAc;AAAA,YAC1E,OAAO,YAAY;AAAA,YAEnB;AAAA,cAAC;AAAA;AAAA,gBACC,OAAO,KAAK;AAAA,gBACZ,UAAU,CAAC,UAAU,OAAO,eAAe,MAAM,OAAO,KAAK;AAAA,gBAC7D,gBAAc,QAAQ,YAAY,WAAW;AAAA;AAAA,YAC/C;AAAA;AAAA,QACF;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,EAAE,qEAAqE,sBAAsB;AAAA,YACpG,OAAO,YAAY;AAAA,YAEnB;AAAA,cAAC;AAAA;AAAA,gBACC,MAAM;AAAA,gBACN,OAAO,KAAK;AAAA,gBACZ,UAAU,CAAC,UAAU,OAAO,sBAAsB,MAAM,OAAO,KAAK;AAAA,gBACpE,gBAAc,QAAQ,YAAY,kBAAkB;AAAA,gBACpD,WAAU;AAAA;AAAA,YACZ;AAAA;AAAA,QACF;AAAA,QACA;AAAA,UAAC;AAAA;AAAA,YACC,OAAO,EAAE,0DAA0D,qBAAqB;AAAA,YACxF,OAAO,YAAY;AAAA,YAEnB;AAAA,cAAC;AAAA;AAAA,gBACC,OAAO,KAAK;AAAA,gBACZ,UAAU,CAAC,UAAU,OAAO,WAAW,MAAM,OAAO,KAAK;AAAA,gBACzD,gBAAc,QAAQ,YAAY,OAAO;AAAA;AAAA,YAC3C;AAAA;AAAA,QACF;AAAA,SACF;AAAA,MAEA,qBAAC,gBACC;AAAA,4BAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,SAAS,MAAM,QAAQ,KAAK,GAAG,UAAU,SAC9E,YAAE,8CAA8C,QAAQ,GAC3D;AAAA,QACA,oBAAC,UAAO,MAAK,UAAS,SAAS,MAAM,KAAK,OAAO,GAAG,UAAU,SAC3D,oBACG,EAAE,kDAAkD,kBAAa,IACjE,EAAE,4CAA4C,SAAS,GAC7D;AAAA,SACF;AAAA,OACF,GACF;AAAA,KACF;AAEJ;AAEA,SAAS,MAAM,OAAqE;AAClF,SACE,qBAAC,WAAM,WAAU,gBACf;AAAA,wBAAC,SAAM,SAAO,MACZ,8BAAC,UAAM,gBAAM,OAAM,GACrB;AAAA,IACC,MAAM;AAAA,IACN,MAAM,QAAQ,oBAAC,UAAK,WAAU,4BAA4B,gBAAM,OAAM,IAAU;AAAA,KACnF;AAEJ;",
+  "names": []
+}

package/dist/modules/channel_fcm/widgets/injection/connect/widget.js

@@ -0,0 +1,17 @@
+import ConnectFcmWidget from "./widget.client.js";
+const widget = {
+  metadata: {
+    id: "channel_fcm.injection.connect",
+    title: "Connect FCM",
+    description: "Connects a tenant-wide Firebase Cloud Messaging push channel.",
+    features: ["communication_channels.connect_tenant_channel"],
+    priority: 100,
+    enabled: true
+  },
+  Widget: ConnectFcmWidget
+};
+var widget_default = widget;
+export {
+  widget_default as default
+};
+//# sourceMappingURL=widget.js.map

package/dist/modules/channel_fcm/widgets/injection/connect/widget.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/channel_fcm/widgets/injection/connect/widget.ts"],
+  "sourcesContent": ["import type { InjectionWidgetModule } from '@open-mercato/shared/modules/widgets/injection'\nimport ConnectFcmWidget from './widget.client'\n\nconst widget: InjectionWidgetModule<Record<string, unknown>, Record<string, unknown>> = {\n  metadata: {\n    id: 'channel_fcm.injection.connect',\n    title: 'Connect FCM',\n    description: 'Connects a tenant-wide Firebase Cloud Messaging push channel.',\n    features: ['communication_channels.connect_tenant_channel'],\n    priority: 100,\n    enabled: true,\n  },\n  Widget: ConnectFcmWidget,\n}\n\nexport default widget\n"],
+  "mappings": "AACA,OAAO,sBAAsB;AAE7B,MAAM,SAAkF;AAAA,EACtF,UAAU;AAAA,IACR,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU,CAAC,+CAA+C;AAAA,IAC1D,UAAU;AAAA,IACV,SAAS;AAAA,EACX;AAAA,EACA,QAAQ;AACV;AAEA,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/channel_fcm/widgets/injection-table.js

@@ -0,0 +1,15 @@
+const injectionTable = {
+  // Tenant-wide connect entry on the shared channels admin DataTable toolbar.
+  "data-table:communication_channels.channels:toolbar": [
+    {
+      widgetId: "channel_fcm.injection.connect",
+      priority: 100
+    }
+  ]
+};
+var injection_table_default = injectionTable;
+export {
+  injection_table_default as default,
+  injectionTable
+};
+//# sourceMappingURL=injection-table.js.map

package/dist/modules/channel_fcm/widgets/injection-table.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_fcm/widgets/injection-table.ts"],
+  "sourcesContent": ["import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'\n\nexport const injectionTable: ModuleInjectionTable = {\n  // Tenant-wide connect entry on the shared channels admin DataTable toolbar.\n  'data-table:communication_channels.channels:toolbar': [\n    {\n      widgetId: 'channel_fcm.injection.connect',\n      priority: 100,\n    },\n  ],\n}\n\nexport default injectionTable\n"],
+  "mappings": "AAEO,MAAM,iBAAuC;AAAA;AAAA,EAElD,sDAAsD;AAAA,IACpD;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,IAAO,0BAAQ;",
+  "names": []
+}

package/jest.config.cjs

@@ -0,0 +1,34 @@
+/** @type {import('jest').Config} */
+const base = require('../../jest.config.base.cjs')
+
+module.exports = {
+  ...base,
+  testEnvironment: 'node',
+  watchman: false,
+  rootDir: '.',
+  moduleFileExtensions: ['ts', 'tsx', 'js', 'jsx', 'json'],
+  moduleNameMapper: {
+    '^@open-mercato/channel-fcm/(.*)$': '<rootDir>/src/$1',
+    '^@open-mercato/core/(.*)$': '<rootDir>/../core/src/$1',
+    '^@open-mercato/shared/(.*)$': '<rootDir>/../shared/src/$1',
+    '^@open-mercato/queue/(.*)$': '<rootDir>/../queue/src/$1',
+    '^@open-mercato/ui/(.*)$': '<rootDir>/../ui/src/$1',
+  },
+  transform: {
+    '^.+\\.(t|j)sx?$': [
+      '<rootDir>/../../scripts/jest-mikroorm-transformer.cjs',
+      {
+        tsconfig: {
+          jsx: 'react-jsx',
+          rootDir: '.',
+          ignoreDeprecations: '6.0',
+        },
+      },
+    ],
+  },
+  transformIgnorePatterns: [
+    'node_modules/(?!(@mikro-orm|kysely)/)',
+  ],
+  testMatch: ['<rootDir>/src/**/__tests__/**/*.test.(ts|tsx)'],
+  passWithNoTests: true,
+}

package/package.json

@@ -0,0 +1,96 @@
+{
+  "name": "@open-mercato/channel-fcm",
+  "version": "0.6.8-develop.6985.1.fb93574faa",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "scripts": {
+    "build": "node build.mjs",
+    "watch": "node watch.mjs",
+    "test": "jest --config jest.config.cjs",
+    "typecheck": "tsc --noEmit"
+  },
+  "exports": {
+    ".": "./dist/index.js",
+    "./*.ts": {
+      "types": "./src/*.ts",
+      "default": "./dist/*.js"
+    },
+    "./*.tsx": {
+      "types": "./src/*.tsx",
+      "default": "./dist/*.js"
+    },
+    "./*.json": "./src/*.json",
+    "./*": {
+      "types": [
+        "./src/*.ts",
+        "./src/*.tsx"
+      ],
+      "default": "./dist/*.js"
+    },
+    "./*/*.json": "./src/*/*.json",
+    "./*/*": {
+      "types": [
+        "./src/*/*.ts",
+        "./src/*/*.tsx"
+      ],
+      "default": "./dist/*/*.js"
+    },
+    "./*/*/*.json": "./src/*/*/*.json",
+    "./*/*/*": {
+      "types": [
+        "./src/*/*/*.ts",
+        "./src/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*.js"
+    },
+    "./*/*/*/*.json": "./src/*/*/*/*.json",
+    "./*/*/*/*": {
+      "types": [
+        "./src/*/*/*/*.ts",
+        "./src/*/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*/*.js"
+    },
+    "./*/*/*/*/*.json": "./src/*/*/*/*/*.json",
+    "./*/*/*/*/*": {
+      "types": [
+        "./src/*/*/*/*/*.ts",
+        "./src/*/*/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*/*/*.js"
+    }
+  },
+  "dependencies": {
+    "@open-mercato/core": "0.6.8-develop.6985.1.fb93574faa",
+    "@open-mercato/ui": "0.6.8-develop.6985.1.fb93574faa",
+    "firebase-admin": "^13.0.2"
+  },
+  "peerDependencies": {
+    "@mikro-orm/postgresql": "^7.0.14",
+    "@open-mercato/shared": "0.6.8-develop.6985.1.fb93574faa",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "devDependencies": {
+    "@open-mercato/shared": "0.6.8-develop.6985.1.fb93574faa",
+    "@types/jest": "^30.0.0",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "esbuild": "^0.28.1",
+    "glob": "^13.0.6",
+    "jest": "^30.4.2",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "ts-jest": "^29.4.11"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/open-mercato/open-mercato",
+    "directory": "packages/channel-fcm"
+  },
+  "stableVersion": "0.6.7"
+}

package/src/index.ts

@@ -0,0 +1 @@
+export { metadata } from './modules/channel_fcm/index'

package/src/modules/channel_fcm/__integration__/TC-CHANNEL-PUSH-001.spec.ts

@@ -0,0 +1,39 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+import { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'
+
+/**
+ * TC-CHANNEL-PUSH-001 — FCM is registered AND tenant-scoped, so the per-user
+ * connect route refuses it.
+ *
+ * `@open-mercato/channel-fcm` registers the `fcm` push `ChannelAdapter` at import
+ * with `channelScope: 'tenant'`. Push providers are connected tenant-wide by an
+ * admin through `POST /channels/connect/tenant-credentials` (see
+ * TC-CHANNEL-PUSH-002), NOT the per-user route. The per-user route
+ * `POST /channels/connect/credentials` now short-circuits tenant-scoped providers
+ * with 403 (`provider_is_tenant_scoped`) before touching credentials — this both
+ * proves the adapter is registered (an UNregistered provider would fall through to
+ * 404 `no_adapter`) and guards against a non-admin minting a tenant-wide channel.
+ * No channel is created, so there is nothing to clean up.
+ */
+test.describe('TC-CHANNEL-PUSH-001: FCM registered + rejected on the per-user route', () => {
+  test('POST per-user connect/credentials with providerKey=fcm is refused (403, tenant-scoped)', async ({ request }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/channels/connect/credentials',
+      {
+        token,
+        data: { providerKey: 'fcm', displayName: 'FCM — per-user (should be refused)', credentials: {} },
+      },
+    )
+    expect(response.status(), 'route should not 5xx').toBeLessThan(500)
+    // 403 (not 404) proves the FCM adapter is registered and declares tenant scope,
+    // and that the per-user route refuses it before any credential/channel work.
+    expect(response.status()).toBe(403)
+    const body = await readJsonSafe<{ code?: string }>(response)
+    expect(body?.code).toBe('provider_is_tenant_scoped')
+  })
+})