@open-mercato/core 0.6.8-develop.6983.1.e4f794099e → 0.6.8-develop.6985.1.fb93574faa

package/dist/modules/push_notifications/di.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/push_notifications/di.ts"],
+  "sourcesContent": ["import { asValue } from 'awilix'\nimport type { AppContainer } from '@open-mercato/shared/lib/di/container'\nimport { PushNotificationDelivery } from './data/entities'\nimport { ensurePushStubAdapterRegistered } from './lib/push-stub-adapter'\nimport { pushNotificationService } from './lib/send-custom-push'\n\nexport function register(container: AppContainer) {\n  // Test-only: register the network-free `push_stub` channel adapter when\n  // `OM_ENABLE_PUSH_STUB_ADAPTER` is set (no-op in production). Lets the integration harness drive\n  // the strategy \u2192 delivery-row \u2192 worker \u2192 sendMessage chain without a real provider. Mirrors the\n  // communication_channels test-seed adapter registration. See lib/push-stub-adapter.ts.\n  ensurePushStubAdapterRegistered()\n\n  container.register({\n    PushNotificationDelivery: asValue(PushNotificationDelivery),\n    // Stateless service backing the admin custom-send push (decoupled via DI). The caller passes\n    // its own scoped `resolve` in the call args.\n    pushNotificationService: asValue(pushNotificationService),\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AAExB,SAAS,gCAAgC;AACzC,SAAS,uCAAuC;AAChD,SAAS,+BAA+B;AAEjC,SAAS,SAAS,WAAyB;AAKhD,kCAAgC;AAEhC,YAAU,SAAS;AAAA,IACjB,0BAA0B,QAAQ,wBAAwB;AAAA;AAAA;AAAA,IAG1D,yBAAyB,QAAQ,uBAAuB;AAAA,EAC1D,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/push_notifications/events.js

@@ -0,0 +1,24 @@
+import { createModuleEvents } from "@open-mercato/shared/modules/events";
+const events = [
+  { id: "push_notifications.delivery.sent", label: "Push Delivery Sent", entity: "delivery", category: "lifecycle" },
+  {
+    id: "push_notifications.delivery.failed",
+    label: "Push Delivery Failed",
+    entity: "delivery",
+    category: "lifecycle",
+    // Fires on every failed send attempt for a delivery, not only the terminal one. A retryable
+    // failure that will be re-attempted carries `willRetry: true`; the final give-up (and terminal
+    // errors like channel_unavailable / no_adapter) omit it. Subscribers that count "deliveries that
+    // ultimately failed" MUST filter to `willRetry !== true` to avoid double-counting retries.
+    description: "A push delivery attempt failed. Carries willRetry:true when another attempt is scheduled."
+  }
+];
+const eventsConfig = createModuleEvents({ moduleId: "push_notifications", events });
+const emitPushNotificationsEvent = eventsConfig.emit;
+var events_default = eventsConfig;
+export {
+  events_default as default,
+  emitPushNotificationsEvent,
+  eventsConfig
+};
+//# sourceMappingURL=events.js.map

package/dist/modules/push_notifications/events.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/push_notifications/events.ts"],
+  "sourcesContent": ["import { createModuleEvents } from '@open-mercato/shared/modules/events'\n\nconst events = [\n  { id: 'push_notifications.delivery.sent', label: 'Push Delivery Sent', entity: 'delivery', category: 'lifecycle' },\n  {\n    id: 'push_notifications.delivery.failed',\n    label: 'Push Delivery Failed',\n    entity: 'delivery',\n    category: 'lifecycle',\n    // Fires on every failed send attempt for a delivery, not only the terminal one. A retryable\n    // failure that will be re-attempted carries `willRetry: true`; the final give-up (and terminal\n    // errors like channel_unavailable / no_adapter) omit it. Subscribers that count \"deliveries that\n    // ultimately failed\" MUST filter to `willRetry !== true` to avoid double-counting retries.\n    description: 'A push delivery attempt failed. Carries willRetry:true when another attempt is scheduled.',\n  },\n] as const\n\nexport const eventsConfig = createModuleEvents({ moduleId: 'push_notifications', events })\nexport const emitPushNotificationsEvent = eventsConfig.emit\nexport type PushNotificationsEventId = typeof events[number]['id']\nexport default eventsConfig\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAEnC,MAAM,SAAS;AAAA,EACb,EAAE,IAAI,oCAAoC,OAAO,sBAAsB,QAAQ,YAAY,UAAU,YAAY;AAAA,EACjH;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,IAKV,aAAa;AAAA,EACf;AACF;AAEO,MAAM,eAAe,mBAAmB,EAAE,UAAU,sBAAsB,OAAO,CAAC;AAClF,MAAM,6BAA6B,aAAa;AAEvD,IAAO,iBAAQ;",
+  "names": []
+}

package/dist/modules/push_notifications/index.js

@@ -0,0 +1,16 @@
+const metadata = {
+  name: "push_notifications",
+  title: "Push Notifications",
+  version: "0.1.0",
+  description: "Push delivery rails: a `push` notification delivery strategy that fans out to registered devices and sends through the communication_channels hub.",
+  author: "Open Mercato Team",
+  license: "MIT",
+  requires: ["auth", "devices", "notifications", "communication_channels", "integrations"],
+  ejectable: true
+};
+import { features } from "./acl.js";
+export {
+  features,
+  metadata
+};
+//# sourceMappingURL=index.js.map

package/dist/modules/push_notifications/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/modules/push_notifications/index.ts"],
+  "sourcesContent": ["import type { ModuleInfo } from '@open-mercato/shared/modules/registry'\n\nexport const metadata: ModuleInfo = {\n  name: 'push_notifications',\n  title: 'Push Notifications',\n  version: '0.1.0',\n  description:\n    'Push delivery rails: a `push` notification delivery strategy that fans out to registered devices and sends through the communication_channels hub.',\n  author: 'Open Mercato Team',\n  license: 'MIT',\n  requires: ['auth', 'devices', 'notifications', 'communication_channels', 'integrations'],\n  ejectable: true,\n}\n\nexport { features } from './acl'\n"],
+  "mappings": "AAEO,MAAM,WAAuB;AAAA,EAClC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,SAAS;AAAA,EACT,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,UAAU,CAAC,QAAQ,WAAW,iBAAiB,0BAA0B,cAAc;AAAA,EACvF,WAAW;AACb;AAEA,SAAS,gBAAgB;",
+  "names": []
+}

package/dist/modules/push_notifications/lib/fake-provider-recorder.js

@@ -0,0 +1,80 @@
+import { randomBytes } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("push_notifications");
+const PUSH_FAKE_PROVIDERS_ENV = "OM_PUSH_FAKE_PROVIDERS";
+const LOG_FILE_NAME = "push-fake-messages.jsonl";
+function isPushFakeProvidersEnabled() {
+  return parseBooleanToken(process.env[PUSH_FAKE_PROVIDERS_ENV]) === true;
+}
+const warnedFakeProviders = /* @__PURE__ */ new Set();
+function warnPushFakeProvidersActive(provider) {
+  if (!isPushFakeProvidersEnabled() || warnedFakeProviders.has(provider)) return;
+  warnedFakeProviders.add(provider);
+  logger.warn(
+    `${provider} push adapter is running in FAKE mode (${PUSH_FAKE_PROVIDERS_ENV} is set): messages are recorded, NOT delivered. This must never be set in production.`,
+    { provider, env: PUSH_FAKE_PROVIDERS_ENV }
+  );
+}
+function resolveQueueBaseDir() {
+  const explicit = process.env.QUEUE_BASE_DIR?.trim();
+  if (explicit) return explicit;
+  return path.resolve(process.env.OM_TEST_APP_ROOT?.trim() || process.cwd(), ".mercato/queue");
+}
+function resolveFakePushLogPath() {
+  return path.join(resolveQueueBaseDir(), LOG_FILE_NAME);
+}
+function pushTokenTail(token) {
+  return token.slice(-8);
+}
+function uniquePushTokenTail() {
+  return randomBytes(4).toString("hex").toUpperCase();
+}
+function recordFakePush(provider, token, native) {
+  if (!isPushFakeProvidersEnabled()) return;
+  const entry = {
+    provider,
+    tokenTail: pushTokenTail(token),
+    native,
+    at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const filePath = resolveFakePushLogPath();
+  fs.mkdirSync(path.dirname(filePath), { recursive: true });
+  fs.appendFileSync(filePath, `${JSON.stringify(entry)}
+`, "utf8");
+}
+function parseEntry(line) {
+  try {
+    return JSON.parse(line);
+  } catch {
+    return null;
+  }
+}
+function readFakePushLog() {
+  const filePath = resolveFakePushLogPath();
+  if (!fs.existsSync(filePath)) return [];
+  return fs.readFileSync(filePath, "utf8").split("\n").filter((line) => line.trim().length > 0).map(parseEntry).filter((entry) => entry !== null);
+}
+function findFakePush(provider, tokenTail, sinceIso) {
+  return readFakePushLog().filter((entry) => entry.provider === provider && entry.tokenTail === tokenTail).filter((entry) => !sinceIso || entry.at >= sinceIso).pop();
+}
+function clearFakePushLog() {
+  const filePath = resolveFakePushLogPath();
+  if (fs.existsSync(filePath)) fs.rmSync(filePath);
+}
+export {
+  PUSH_FAKE_PROVIDERS_ENV,
+  clearFakePushLog,
+  findFakePush,
+  isPushFakeProvidersEnabled,
+  pushTokenTail,
+  readFakePushLog,
+  recordFakePush,
+  resolveFakePushLogPath,
+  resolveQueueBaseDir,
+  uniquePushTokenTail,
+  warnPushFakeProvidersActive
+};
+//# sourceMappingURL=fake-provider-recorder.js.map

package/dist/modules/push_notifications/lib/fake-provider-recorder.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/push_notifications/lib/fake-provider-recorder.ts"],
+  "sourcesContent": ["import { randomBytes } from 'node:crypto'\nimport fs from 'node:fs'\nimport path from 'node:path'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('push_notifications')\n\n/**\n * Test-only sink recording the **provider-native** message each push adapter handed its SDK client.\n *\n * The `channel-{fcm,apns,expo}` fakes replace the SDK *client*, not the adapter \u2014 so the real adapter\n * builds the native message, but nothing persists it: no adapter returns `metadata` on success, and\n * APNs deliberately reports an empty `externalMessageId` (its value reaches the admin-exposed\n * `provider_response`, which must never carry token material). The message is therefore written here,\n * out of band.\n *\n * **Why a file and not an in-memory recorder.** The adapter does not run in the spec's process, and\n * *which* process it runs in is not fixed: the send happens in the Next.js app server (which may\n * process the job inline), in a drain child that `drainIntegrationQueue` spawns whenever\n * `OM_TEST_APP_ROOT` is set, or \u2014 only in the monorepo path \u2014 in the Playwright process itself. A\n * module-level array would live in whichever of those three ran the adapter, and the spec could read it\n * in just one. The queue already crosses exactly these boundaries through `QUEUE_BASE_DIR`, so the sink\n * rides the same directory rather than inventing a second IPC channel.\n *\n * Production safety: every entry point is a no-op unless `OM_PUSH_FAKE_PROVIDERS` is set. Mirrors\n * `ensurePushStubAdapterRegistered()` in ./push-stub-adapter.ts.\n */\nexport const PUSH_FAKE_PROVIDERS_ENV = 'OM_PUSH_FAKE_PROVIDERS'\n\nconst LOG_FILE_NAME = 'push-fake-messages.jsonl'\n\nexport type FakePushProvider = 'fcm' | 'apns' | 'expo'\n\nexport type FakePushEntry = {\n  provider: FakePushProvider\n  tokenTail: string\n  native: Record<string, unknown>\n  at: string\n}\n\nexport function isPushFakeProvidersEnabled(): boolean {\n  return parseBooleanToken(process.env[PUSH_FAKE_PROVIDERS_ENV]) === true\n}\n\nconst warnedFakeProviders = new Set<FakePushProvider>()\n\n/**\n * Loudly flag \u2014 exactly once per provider per process \u2014 that a push adapter is running against the\n * network-free fake instead of the real SDK. `OM_PUSH_FAKE_PROVIDERS` is a test-harness flag, and a\n * legitimate-but-misplaced `=1` (e.g. a staging env block promoted to prod) would otherwise report\n * every push as `sent` with no delivery, no log line, and no admin signal for days. This warn plus the\n * `degraded` health status (see `makePushClientConfigHealthCheck`) make that misconfiguration visible.\n */\nexport function warnPushFakeProvidersActive(provider: FakePushProvider): void {\n  if (!isPushFakeProvidersEnabled() || warnedFakeProviders.has(provider)) return\n  warnedFakeProviders.add(provider)\n  logger.warn(\n    `${provider} push adapter is running in FAKE mode (${PUSH_FAKE_PROVIDERS_ENV} is set): messages are recorded, NOT delivered. This must never be set in production.`,\n    { provider, env: PUSH_FAKE_PROVIDERS_ENV },\n  )\n}\n\n/**\n * The one place the queue base dir is resolved. The worker process, the drain child, and the spec must\n * all agree, so every caller goes through this: `QUEUE_BASE_DIR` when set (the harness always sets it,\n * and `drainIntegrationQueue` propagates it to its child), else `<appRoot>/.mercato/queue`.\n *\n * In the app/worker process `cwd` IS the app root. The Playwright process runs from the repo root, so\n * `helpers/integration/pushFake` sets `QUEUE_BASE_DIR` before anything reads it \u2014 this fallback is never\n * reached there.\n */\nexport function resolveQueueBaseDir(): string {\n  const explicit = process.env.QUEUE_BASE_DIR?.trim()\n  if (explicit) return explicit\n  return path.resolve(process.env.OM_TEST_APP_ROOT?.trim() || process.cwd(), '.mercato/queue')\n}\n\nexport function resolveFakePushLogPath(): string {\n  return path.join(resolveQueueBaseDir(), LOG_FILE_NAME)\n}\n\n/** Token tail used to key entries \u2014 never the raw token (mirrors `token_snapshot` on the delivery row). */\nexport function pushTokenTail(token: string): string {\n  return token.slice(-8)\n}\n\n/**\n * An 8-char token tail unique to this run.\n *\n * The sink is append-only and is NOT truncated between runs on the reused-environment path\n * (`tryReuseExistingEnvironment` does not wipe `QUEUE_BASE_DIR`, unlike the fresh path). A compile-time\n * constant tail would therefore let a *previous* run's entry satisfy an assertion before this run's\n * worker had written anything \u2014 a false pass. Uniqueness also isolates specs running in parallel.\n */\nexport function uniquePushTokenTail(): string {\n  return randomBytes(4).toString('hex').toUpperCase()\n}\n\nexport function recordFakePush(provider: FakePushProvider, token: string, native: Record<string, unknown>): void {\n  if (!isPushFakeProvidersEnabled()) return\n  const entry: FakePushEntry = {\n    provider,\n    tokenTail: pushTokenTail(token),\n    native,\n    at: new Date().toISOString(),\n  }\n  const filePath = resolveFakePushLogPath()\n  fs.mkdirSync(path.dirname(filePath), { recursive: true })\n  // A single `O_APPEND` write of one short line \u2014 concurrent deliveries interleave by line, not within one.\n  fs.appendFileSync(filePath, `${JSON.stringify(entry)}\\n`, 'utf8')\n}\n\nfunction parseEntry(line: string): FakePushEntry | null {\n  try {\n    return JSON.parse(line) as FakePushEntry\n  } catch {\n    // A reader can observe a line the writer has not finished appending. Skipping it lets the caller\n    // poll again; throwing would permanently fail the enclosing `expect.poll`.\n    return null\n  }\n}\n\nexport function readFakePushLog(): FakePushEntry[] {\n  const filePath = resolveFakePushLogPath()\n  if (!fs.existsSync(filePath)) return []\n  return fs\n    .readFileSync(filePath, 'utf8')\n    .split('\\n')\n    .filter((line) => line.trim().length > 0)\n    .map(parseEntry)\n    .filter((entry): entry is FakePushEntry => entry !== null)\n}\n\n/**\n * Find the message a spec's own device produced. `tokenTail` should come from\n * {@link uniquePushTokenTail}; `sinceIso` additionally rejects entries predating the caller, so a stale\n * sink can never satisfy an assertion.\n */\nexport function findFakePush(\n  provider: FakePushProvider,\n  tokenTail: string,\n  sinceIso?: string,\n): FakePushEntry | undefined {\n  return readFakePushLog()\n    .filter((entry) => entry.provider === provider && entry.tokenTail === tokenTail)\n    .filter((entry) => !sinceIso || entry.at >= sinceIso)\n    .pop()\n}\n\nexport function clearFakePushLog(): void {\n  const filePath = resolveFakePushLogPath()\n  if (fs.existsSync(filePath)) fs.rmSync(filePath)\n}\n"],
+  "mappings": "AAAA,SAAS,mBAAmB;AAC5B,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,oBAAoB;AAsBzC,MAAM,0BAA0B;AAEvC,MAAM,gBAAgB;AAWf,SAAS,6BAAsC;AACpD,SAAO,kBAAkB,QAAQ,IAAI,uBAAuB,CAAC,MAAM;AACrE;AAEA,MAAM,sBAAsB,oBAAI,IAAsB;AAS/C,SAAS,4BAA4B,UAAkC;AAC5E,MAAI,CAAC,2BAA2B,KAAK,oBAAoB,IAAI,QAAQ,EAAG;AACxE,sBAAoB,IAAI,QAAQ;AAChC,SAAO;AAAA,IACL,GAAG,QAAQ,0CAA0C,uBAAuB;AAAA,IAC5E,EAAE,UAAU,KAAK,wBAAwB;AAAA,EAC3C;AACF;AAWO,SAAS,sBAA8B;AAC5C,QAAM,WAAW,QAAQ,IAAI,gBAAgB,KAAK;AAClD,MAAI,SAAU,QAAO;AACrB,SAAO,KAAK,QAAQ,QAAQ,IAAI,kBAAkB,KAAK,KAAK,QAAQ,IAAI,GAAG,gBAAgB;AAC7F;AAEO,SAAS,yBAAiC;AAC/C,SAAO,KAAK,KAAK,oBAAoB,GAAG,aAAa;AACvD;AAGO,SAAS,cAAc,OAAuB;AACnD,SAAO,MAAM,MAAM,EAAE;AACvB;AAUO,SAAS,sBAA8B;AAC5C,SAAO,YAAY,CAAC,EAAE,SAAS,KAAK,EAAE,YAAY;AACpD;AAEO,SAAS,eAAe,UAA4B,OAAe,QAAuC;AAC/G,MAAI,CAAC,2BAA2B,EAAG;AACnC,QAAM,QAAuB;AAAA,IAC3B;AAAA,IACA,WAAW,cAAc,KAAK;AAAA,IAC9B;AAAA,IACA,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,EAC7B;AACA,QAAM,WAAW,uBAAuB;AACxC,KAAG,UAAU,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAExD,KAAG,eAAe,UAAU,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,GAAM,MAAM;AAClE;AAEA,SAAS,WAAW,MAAoC;AACtD,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,kBAAmC;AACjD,QAAM,WAAW,uBAAuB;AACxC,MAAI,CAAC,GAAG,WAAW,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,GACJ,aAAa,UAAU,MAAM,EAC7B,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC,EACvC,IAAI,UAAU,EACd,OAAO,CAAC,UAAkC,UAAU,IAAI;AAC7D;AAOO,SAAS,aACd,UACA,WACA,UAC2B;AAC3B,SAAO,gBAAgB,EACpB,OAAO,CAAC,UAAU,MAAM,aAAa,YAAY,MAAM,cAAc,SAAS,EAC9E,OAAO,CAAC,UAAU,CAAC,YAAY,MAAM,MAAM,QAAQ,EACnD,IAAI;AACT;AAEO,SAAS,mBAAyB;AACvC,QAAM,WAAW,uBAAuB;AACxC,MAAI,GAAG,WAAW,QAAQ,EAAG,IAAG,OAAO,QAAQ;AACjD;",
+  "names": []
+}

package/dist/modules/push_notifications/lib/push-delivery-strategy.js

@@ -0,0 +1,54 @@
+import { getNotificationType } from "@open-mercato/core/modules/notifications/lib/notification-type-registry";
+import { fanOutPushDeliveries, PUSH_CHANNEL } from "./push-fanout.js";
+import { PUSH_CHANNEL as PUSH_CHANNEL2 } from "./push-fanout.js";
+const mobilePushDeliveryStrategy = {
+  id: PUSH_CHANNEL,
+  label: "Mobile push",
+  // Attempt push whenever a tenant has a push channel configured; the fan-out short-circuits
+  // (no rows, no enqueue) when push is not set up for the tenant/recipient.
+  defaultEnabled: true,
+  async deliver(ctx) {
+    const { notification } = ctx;
+    const tenantId = notification.tenantId;
+    const userId = notification.recipientUserId;
+    const organizationId = notification.organizationId ?? null;
+    const type = getNotificationType(notification.type);
+    if (!type) return;
+    const em = ctx.resolve("em");
+    const silent = type.silent === true;
+    const data = { ...notification.data ?? {} };
+    data.notificationId = notification.id;
+    data.type = notification.type;
+    if (notification.linkHref) data.linkHref = notification.linkHref;
+    const payload = {
+      data,
+      options: notification.pushOptions ?? void 0,
+      silent
+    };
+    const copy = silent ? void 0 : {
+      titleKey: notification.titleKey ?? null,
+      bodyKey: notification.bodyKey ?? null,
+      titleVariables: notification.titleVariables ?? null,
+      bodyVariables: notification.bodyVariables ?? null,
+      title: ctx.title,
+      body: ctx.body
+    };
+    await fanOutPushDeliveries({
+      em,
+      resolve: ctx.resolve,
+      scope: { tenantId, organizationId },
+      userId,
+      notificationId: notification.id,
+      notificationTypeId: notification.type,
+      payload,
+      copy
+    });
+  }
+};
+var push_delivery_strategy_default = mobilePushDeliveryStrategy;
+export {
+  PUSH_CHANNEL2 as PUSH_CHANNEL,
+  push_delivery_strategy_default as default,
+  mobilePushDeliveryStrategy
+};
+//# sourceMappingURL=push-delivery-strategy.js.map

package/dist/modules/push_notifications/lib/push-delivery-strategy.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/push_notifications/lib/push-delivery-strategy.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { NotificationDeliveryStrategy } from '@open-mercato/core/modules/notifications/lib/deliveryStrategies'\nimport { getNotificationType } from '@open-mercato/core/modules/notifications/lib/notification-type-registry'\nimport type { PushOptions } from '@open-mercato/core/modules/communication_channels/lib/push-envelope'\nimport type { NotificationCopySource } from '@open-mercato/core/modules/notifications/lib/notificationCopy'\nimport { fanOutPushDeliveries, PUSH_CHANNEL, type PushFanoutPayload } from './push-fanout'\n\nexport { PUSH_CHANNEL } from './push-fanout'\n\n/**\n * `push` notification delivery strategy.\n *\n * Registered into the notifications strategy seam (see notifications.delivery-strategies.ts).\n * Runs inside the persistent `notifications:deliver` subscriber for every created notification.\n * It only enqueues fast work \u2014 the actual provider send (with retry/backoff) happens in the\n * `send-push` worker, so a slow/unavailable provider never blocks notification creation.\n *\n * Whether a push is silent (content-available wake-up) is a property of the registered\n * notification TYPE (`NotificationTypeDefinition.silent`), never a per-call flag. `silent`\n * controls only HOW the device is notified (background wake-up vs visible alert); it does not\n * imply the push is non-opt-out. Silent types still respect the recipient's per-channel\n * preference unless the type is `nonOptOut` \u2014 to force a silent push, mark the type\n * `nonOptOut: true`. A silent push is therefore just a notification created through the normal\n * `notificationService.create()` flow whose type is `silent: true`; there is no separate helper.\n *\n * The shared device/channel fan-out lives in {@link fanOutPushDeliveries}.\n */\nexport const mobilePushDeliveryStrategy: NotificationDeliveryStrategy = {\n  id: PUSH_CHANNEL,\n  label: 'Mobile push',\n  // Attempt push whenever a tenant has a push channel configured; the fan-out short-circuits\n  // (no rows, no enqueue) when push is not set up for the tenant/recipient.\n  defaultEnabled: true,\n  async deliver(ctx) {\n    const { notification } = ctx\n    const tenantId = notification.tenantId\n    const userId = notification.recipientUserId\n    const organizationId = notification.organizationId ?? null\n\n    // Skip unknown types (the catalogue is the source of truth for what can notify a user).\n    const type = getNotificationType(notification.type)\n    if (!type) return\n\n    const em = ctx.resolve('em') as EntityManager\n    const silent = type.silent === true\n\n    // Per-channel opt-out / `nonOptOut` is enforced once, upstream, at create time: the dispatcher\n    // only invokes this strategy when `push \u2208 notification.channels` (the resolved target snapshot).\n    // `silent` still controls delivery STYLE only (content-available wake-up vs visible alert).\n\n    // App-readable data payload: caller-supplied custom fields plus the system identifiers.\n    const data: Record<string, string> = { ...(notification.data ?? {}) }\n    data.notificationId = notification.id\n    data.type = notification.type\n    if (notification.linkHref) data.linkHref = notification.linkHref\n\n    const payload: PushFanoutPayload = {\n      data,\n      options: (notification.pushOptions ?? undefined) as PushOptions | undefined,\n      silent,\n    }\n\n    // For visible notifications, hand the raw copy down so the fan-out can translate title/body per\n    // device locale. `ctx.title`/`ctx.body` are already resolved in the default locale and serve as\n    // the fallback. Silent pushes carry no user-facing copy, so they skip translation entirely.\n    const copy: NotificationCopySource | undefined = silent\n      ? undefined\n      : {\n          titleKey: notification.titleKey ?? null,\n          bodyKey: notification.bodyKey ?? null,\n          titleVariables: notification.titleVariables ?? null,\n          bodyVariables: notification.bodyVariables ?? null,\n          title: ctx.title,\n          body: ctx.body,\n        }\n\n    await fanOutPushDeliveries({\n      em,\n      resolve: ctx.resolve,\n      scope: { tenantId, organizationId },\n      userId,\n      notificationId: notification.id,\n      notificationTypeId: notification.type,\n      payload,\n      copy,\n    })\n  },\n}\n\nexport default mobilePushDeliveryStrategy\n"],
+  "mappings": "AAEA,SAAS,2BAA2B;AAGpC,SAAS,sBAAsB,oBAA4C;AAE3E,SAAS,gBAAAA,qBAAoB;AAoBtB,MAAM,6BAA2D;AAAA,EACtE,IAAI;AAAA,EACJ,OAAO;AAAA;AAAA;AAAA,EAGP,gBAAgB;AAAA,EAChB,MAAM,QAAQ,KAAK;AACjB,UAAM,EAAE,aAAa,IAAI;AACzB,UAAM,WAAW,aAAa;AAC9B,UAAM,SAAS,aAAa;AAC5B,UAAM,iBAAiB,aAAa,kBAAkB;AAGtD,UAAM,OAAO,oBAAoB,aAAa,IAAI;AAClD,QAAI,CAAC,KAAM;AAEX,UAAM,KAAK,IAAI,QAAQ,IAAI;AAC3B,UAAM,SAAS,KAAK,WAAW;AAO/B,UAAM,OAA+B,EAAE,GAAI,aAAa,QAAQ,CAAC,EAAG;AACpE,SAAK,iBAAiB,aAAa;AACnC,SAAK,OAAO,aAAa;AACzB,QAAI,aAAa,SAAU,MAAK,WAAW,aAAa;AAExD,UAAM,UAA6B;AAAA,MACjC;AAAA,MACA,SAAU,aAAa,eAAe;AAAA,MACtC;AAAA,IACF;AAKA,UAAM,OAA2C,SAC7C,SACA;AAAA,MACE,UAAU,aAAa,YAAY;AAAA,MACnC,SAAS,aAAa,WAAW;AAAA,MACjC,gBAAgB,aAAa,kBAAkB;AAAA,MAC/C,eAAe,aAAa,iBAAiB;AAAA,MAC7C,OAAO,IAAI;AAAA,MACX,MAAM,IAAI;AAAA,IACZ;AAEJ,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA,SAAS,IAAI;AAAA,MACb,OAAO,EAAE,UAAU,eAAe;AAAA,MAClC;AAAA,MACA,gBAAgB,aAAa;AAAA,MAC7B,oBAAoB,aAAa;AAAA,MACjC;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,IAAO,iCAAQ;",
+  "names": ["PUSH_CHANNEL"]
+}

package/dist/modules/push_notifications/lib/push-delivery.js

@@ -0,0 +1,297 @@
+import { raw } from "@mikro-orm/core";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { DEVICE_UNREGISTERED } from "@open-mercato/core/modules/communication_channels/lib/push-adapter";
+import { refreshCredentialsIfNeeded } from "@open-mercato/core/modules/communication_channels/lib/credential-refresh";
+import { calculateBackoffDelayMs } from "@open-mercato/shared/lib/delivery/retry";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { PushNotificationDelivery } from "../data/entities.js";
+import { emitPushNotificationsEvent } from "../events.js";
+import { resolveStuckThresholdMs } from "./reclaim-window.js";
+import { enqueuePushDelivery } from "./queue.js";
+const logger = createLogger("push_notifications");
+const MAX_ATTEMPTS = 3;
+const DEFAULT_SEND_TIMEOUT_MS = 6e4;
+const MIN_SEND_TIMEOUT_MS = 5e3;
+const SEND_TIMEOUT_SAFETY_MARGIN_MS = 6e4;
+function resolvePushSendTimeoutMs() {
+  const ceiling = Math.max(MIN_SEND_TIMEOUT_MS, resolveStuckThresholdMs() - SEND_TIMEOUT_SAFETY_MARGIN_MS);
+  const parsed = Number.parseInt(process.env.OM_PUSH_SEND_TIMEOUT_MS ?? "", 10);
+  const configured = Number.isFinite(parsed) && parsed >= MIN_SEND_TIMEOUT_MS ? parsed : DEFAULT_SEND_TIMEOUT_MS;
+  return Math.min(configured, ceiling);
+}
+function isUnregistered(result) {
+  return result.metadata?.unregistered === true || result.error === DEVICE_UNREGISTERED;
+}
+async function applyFencedTransition(em, lease, patch, fromStatus = "sending") {
+  const affected = await em.nativeUpdate(
+    PushNotificationDelivery,
+    { id: lease.deliveryId, tenantId: lease.tenantId, status: fromStatus, attempts: lease.attempts },
+    { ...patch, updatedAt: /* @__PURE__ */ new Date() }
+  );
+  return affected > 0;
+}
+async function finalize(em, delivery, lease, event, patch) {
+  const held = await applyFencedTransition(em, lease, { ...patch, nextRetryAt: null });
+  if (!held) {
+    logger.warn("Push delivery lease lost before finalize; abandoning", {
+      deliveryId: lease.deliveryId,
+      tenantId: lease.tenantId
+    });
+    return { status: delivery.status, deliveryId: delivery.id };
+  }
+  const finalStatus = patch.status ?? delivery.status;
+  await emitPushNotificationsEvent(
+    event,
+    {
+      deliveryId: delivery.id,
+      tenantId: delivery.tenantId,
+      organizationId: delivery.organizationId ?? null,
+      userId: delivery.userId,
+      provider: delivery.provider,
+      status: finalStatus
+    },
+    { persistent: true }
+  );
+  return { status: finalStatus, deliveryId: delivery.id };
+}
+async function failTerminal(em, delivery, lease, reason) {
+  return finalize(em, delivery, lease, "push_notifications.delivery.failed", {
+    status: "failed",
+    lastError: reason
+  });
+}
+async function handleRetryableFailure(em, delivery, lease, job, reason, providerResponse) {
+  if (lease.attempts < MAX_ATTEMPTS) {
+    const delayMs = calculateBackoffDelayMs(lease.attempts);
+    const held = await applyFencedTransition(em, lease, {
+      status: "pending",
+      lastError: reason,
+      providerResponse,
+      nextRetryAt: new Date(Date.now() + delayMs)
+    });
+    if (!held) {
+      logger.warn("Push delivery lease lost before retry; abandoning", {
+        deliveryId: lease.deliveryId,
+        tenantId: lease.tenantId
+      });
+      return { status: delivery.status, deliveryId: delivery.id };
+    }
+    try {
+      await enqueuePushDelivery(job, delayMs);
+    } catch (error) {
+      const failReason = error instanceof Error ? `retry_scheduling_failed: ${error.message}` : "retry_scheduling_failed";
+      const failed = await applyFencedTransition(
+        em,
+        lease,
+        { status: "failed", lastError: failReason, nextRetryAt: null },
+        "pending"
+      );
+      if (failed) {
+        await emitPushNotificationsEvent(
+          "push_notifications.delivery.failed",
+          {
+            deliveryId: delivery.id,
+            tenantId: delivery.tenantId,
+            organizationId: delivery.organizationId ?? null,
+            userId: delivery.userId,
+            provider: delivery.provider,
+            status: "failed"
+          },
+          { persistent: true }
+        );
+      }
+      return { status: "failed", deliveryId: delivery.id };
+    }
+    await emitPushNotificationsEvent(
+      "push_notifications.delivery.failed",
+      {
+        deliveryId: delivery.id,
+        tenantId: delivery.tenantId,
+        organizationId: delivery.organizationId ?? null,
+        userId: delivery.userId,
+        provider: delivery.provider,
+        // The row is reset to `pending` to release the claim for the re-enqueued attempt, but the
+        // logical outcome of THIS attempt is "failed, retry scheduled". Emit `retrying` (not the reset
+        // row status `pending`) so subscribers keying off `status` aren't misled; `willRetry` still gates
+        // ultimate-failure counters.
+        status: "retrying",
+        willRetry: true
+      },
+      { persistent: true }
+    );
+    return { status: "pending", deliveryId: delivery.id };
+  }
+  return finalize(em, delivery, lease, "push_notifications.delivery.failed", {
+    status: "expired",
+    lastError: reason,
+    providerResponse
+  });
+}
+async function softDeleteUnregisteredDevice(resolve, input) {
+  try {
+    const commandBus = resolve("commandBus");
+    await commandBus.execute("devices.user_devices.deactivate", {
+      input,
+      ctx: {
+        container: { resolve },
+        auth: null,
+        organizationScope: null,
+        selectedOrganizationId: input.organizationId,
+        organizationIds: input.organizationId ? [input.organizationId] : null,
+        systemActor: true
+      }
+    });
+  } catch (error) {
+    logger.error("Failed to deactivate unregistered device", {
+      userDeviceId: input.id,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+}
+async function sendWithTimeout(adapter, input, timeoutMs) {
+  let timer;
+  const timeout = new Promise((resolve) => {
+    timer = setTimeout(() => resolve({ externalMessageId: "", status: "failed", error: "send_timeout" }), timeoutMs);
+  });
+  const send = adapter.sendMessage(input);
+  send.catch(() => {
+  });
+  try {
+    return await Promise.race([send, timeout]);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+async function processPushDeliveryJob(em, job, resolve) {
+  const claimed = await em.nativeUpdate(
+    PushNotificationDelivery,
+    { id: job.deliveryId, tenantId: job.tenantId, status: "pending" },
+    { status: "sending", attempts: raw('"attempts" + 1'), updatedAt: /* @__PURE__ */ new Date() }
+  );
+  const delivery = await em.findOne(
+    PushNotificationDelivery,
+    { id: job.deliveryId, tenantId: job.tenantId },
+    { refresh: true }
+  );
+  if (!delivery) return null;
+  if (claimed === 0) return { status: delivery.status, deliveryId: delivery.id };
+  const lease = { deliveryId: delivery.id, tenantId: delivery.tenantId, attempts: delivery.attempts };
+  const DeviceRef = resolve("UserDevice");
+  const device = await findOneWithDecryption(
+    em,
+    DeviceRef,
+    { id: delivery.userDeviceId, tenantId: job.tenantId, deletedAt: null },
+    void 0,
+    { tenantId: job.tenantId, organizationId: job.organizationId ?? null }
+  );
+  if (!device || !device.pushToken) {
+    const held = await applyFencedTransition(em, lease, {
+      status: "skipped",
+      lastError: "device_unavailable",
+      nextRetryAt: null
+    });
+    return { status: held ? "skipped" : delivery.status, deliveryId: delivery.id };
+  }
+  const ChannelRef = resolve("CommunicationChannel");
+  const channel = await em.findOne(ChannelRef, {
+    tenantId: job.tenantId,
+    providerKey: delivery.provider,
+    channelType: "push",
+    isActive: true,
+    deletedAt: null
+  });
+  if (!channel) return failTerminal(em, delivery, lease, "channel_unavailable");
+  const registry = resolve("channelAdapterRegistry");
+  const adapter = registry?.get(delivery.provider);
+  if (!adapter) return failTerminal(em, delivery, lease, "no_adapter");
+  let credentialsService;
+  try {
+    credentialsService = resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = void 0;
+  }
+  const credentialScope = {
+    tenantId: job.tenantId,
+    organizationId: channel.organizationId ?? job.tenantId,
+    userId: channel.userId ?? null
+  };
+  let credentials = {};
+  if (channel.credentialsRef && credentialsService) {
+    credentials = await credentialsService.resolve(`channel_${delivery.provider}`, credentialScope).catch(() => null) ?? {};
+  }
+  try {
+    const refreshed = await refreshCredentialsIfNeeded(
+      { adapter, channelId: channel.id, credentials, scope: credentialScope },
+      { credentialsService: credentialsService ?? null }
+    );
+    credentials = refreshed.credentials;
+  } catch (error) {
+    logger.error("Credential refresh failed; sending with current credentials", {
+      deliveryId: delivery.id,
+      provider: delivery.provider,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+  const scope = { tenantId: job.tenantId, organizationId: job.organizationId ?? job.tenantId };
+  const payload = delivery.payload ?? {};
+  const body = payload.body ?? payload.title ?? "";
+  try {
+    const converted = await adapter.convertOutbound({ body, bodyFormat: "text" });
+    const result = await sendWithTimeout(
+      adapter,
+      {
+        content: {
+          ...converted.content,
+          raw: {
+            title: payload.title ?? "",
+            body: payload.body ?? null,
+            data: payload.data ?? {},
+            options: payload.options ?? {},
+            silent: payload.silent === true
+          }
+        },
+        credentials,
+        scope,
+        metadata: {
+          pushToken: device.pushToken,
+          platform: device.platform,
+          userDeviceId: device.id,
+          provider: delivery.provider
+        }
+      },
+      resolvePushSendTimeoutMs()
+    );
+    if (result.status === "sent" || result.status === "queued") {
+      return finalize(em, delivery, lease, "push_notifications.delivery.sent", {
+        status: "sent",
+        sentAt: /* @__PURE__ */ new Date(),
+        lastError: null,
+        providerResponse: result.metadata ?? { externalMessageId: result.externalMessageId }
+      });
+    }
+    if (isUnregistered(result)) {
+      const outcome = await finalize(em, delivery, lease, "push_notifications.delivery.failed", {
+        status: "failed",
+        lastError: DEVICE_UNREGISTERED,
+        providerResponse: result.metadata ?? null
+      });
+      await softDeleteUnregisteredDevice(resolve, {
+        id: device.id,
+        tenantId: device.tenantId,
+        userId: device.userId,
+        organizationId: device.organizationId ?? null
+      });
+      return outcome;
+    }
+    return handleRetryableFailure(em, delivery, lease, job, result.error ?? "send_failed", result.metadata ?? null);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "send_failed";
+    return handleRetryableFailure(em, delivery, lease, job, message, null);
+  }
+}
+export {
+  MAX_ATTEMPTS,
+  processPushDeliveryJob,
+  softDeleteUnregisteredDevice
+};
+//# sourceMappingURL=push-delivery.js.map

package/dist/modules/push_notifications/lib/push-delivery.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/push_notifications/lib/push-delivery.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { raw, type EntityName } from '@mikro-orm/core'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { ChannelAdapter, SendMessageResult } from '@open-mercato/core/modules/communication_channels/lib/adapter'\nimport { DEVICE_UNREGISTERED } from '@open-mercato/core/modules/communication_channels/lib/push-adapter'\nimport { refreshCredentialsIfNeeded } from '@open-mercato/core/modules/communication_channels/lib/credential-refresh'\nimport type { CommunicationChannel } from '@open-mercato/core/modules/communication_channels/data/entities'\nimport type { PushOptions } from '@open-mercato/core/modules/communication_channels/lib/push-envelope'\nimport type { UserDevice } from '@open-mercato/core/modules/devices/data/entities'\nimport { calculateBackoffDelayMs } from '@open-mercato/shared/lib/delivery/retry'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { PushNotificationDelivery } from '../data/entities'\nimport { emitPushNotificationsEvent } from '../events'\nimport { resolveStuckThresholdMs } from './reclaim-window'\nimport { enqueuePushDelivery, type PushDeliveryJob } from './queue'\n\nconst logger = createLogger('push_notifications')\n\nexport const MAX_ATTEMPTS = 3\n\n// Bound the worker's wait on a single provider send. If a send outlived the stuck-reclaim window the\n// reaper would reclaim the row mid-send and a second worker would re-send it, so the wait is capped\n// well under that window (see ./reclaim-window). Configurable via OM_PUSH_SEND_TIMEOUT_MS; clamped to\n// stay below the reclaim window regardless of the configured value.\n//\n// NOTE: without an AbortSignal through the adapter contract this bounds the WORKER's wait, not the\n// underlying socket \u2014 a black-holed SDK call may still complete later, but the lease stays fresh (the\n// worker finalizes/retries within the window) so the reaper never steals it and fenced write-backs keep\n// terminal state consistent. A timeout is surfaced as a retryable `send_timeout` failure.\nconst DEFAULT_SEND_TIMEOUT_MS = 60_000\nconst MIN_SEND_TIMEOUT_MS = 5_000\nconst SEND_TIMEOUT_SAFETY_MARGIN_MS = 60_000\n\nfunction resolvePushSendTimeoutMs(): number {\n  const ceiling = Math.max(MIN_SEND_TIMEOUT_MS, resolveStuckThresholdMs() - SEND_TIMEOUT_SAFETY_MARGIN_MS)\n  const parsed = Number.parseInt(process.env.OM_PUSH_SEND_TIMEOUT_MS ?? '', 10)\n  const configured = Number.isFinite(parsed) && parsed >= MIN_SEND_TIMEOUT_MS ? parsed : DEFAULT_SEND_TIMEOUT_MS\n  return Math.min(configured, ceiling)\n}\n\ntype Resolve = <T = unknown>(name: string) => T\n\ninterface ChannelAdapterRegistryLike {\n  get(providerKey: string): ChannelAdapter | undefined\n}\n\ninterface CredentialsServiceLike {\n  resolve(\n    integrationId: string,\n    scope: { tenantId: string; organizationId: string; userId?: string | null },\n  ): Promise<Record<string, unknown> | null>\n}\n\ntype PushPayload = {\n  title?: string\n  body?: string | null\n  data?: Record<string, string>\n  options?: PushOptions\n  silent?: boolean\n}\n\ntype ProcessResult = { status: PushNotificationDelivery['status']; deliveryId: string } | null\n\n// Identifies the exact lease a worker holds on a delivery row. `attempts` is the lease-generation token:\n// it is incremented in the claim itself, and the reaper resets `sending`\u2192`pending` WITHOUT touching it,\n// so the next worker's claim bumps it again. Every write-back is fenced on `(status='sending', attempts)`\n// \u2014 if the reaper broke this lease and another worker re-claimed, `attempts` has moved on and the fenced\n// update matches 0 rows, so this worker abandons instead of clobbering the new owner's state.\ntype DeliveryLease = { deliveryId: string; tenantId: string; attempts: number }\n\n// The `unregistered` sentinel is shared (`deviceUnregisteredResult` / `DEVICE_UNREGISTERED`) across the\n// fcm/apns/expo adapters + the stub, so the device soft-delete below fires uniformly regardless of provider.\nfunction isUnregistered(result: SendMessageResult): boolean {\n  return result.metadata?.unregistered === true || result.error === DEVICE_UNREGISTERED\n}\n\n// Apply a delivery state transition as a fenced `nativeUpdate` (never `em.flush()`, so a stale\n// identity-map copy can never issue an unfenced `UPDATE ... WHERE id`). Returns `true` iff this worker\n// still held the lease and the write landed; `false` means the lease was lost (reaper reclaimed it) and\n// the caller MUST abandon \u2014 no re-enqueue, no event \u2014 to avoid corrupting the new owner's state.\nasync function applyFencedTransition(\n  em: EntityManager,\n  lease: DeliveryLease,\n  patch: Record<string, unknown>,\n  fromStatus: PushNotificationDelivery['status'] = 'sending',\n): Promise<boolean> {\n  const affected = await em.nativeUpdate(\n    PushNotificationDelivery,\n    { id: lease.deliveryId, tenantId: lease.tenantId, status: fromStatus, attempts: lease.attempts },\n    { ...patch, updatedAt: new Date() },\n  )\n  return affected > 0\n}\n\nasync function finalize(\n  em: EntityManager,\n  delivery: PushNotificationDelivery,\n  lease: DeliveryLease,\n  event: 'push_notifications.delivery.sent' | 'push_notifications.delivery.failed',\n  patch: Record<string, unknown>,\n): Promise<ProcessResult> {\n  // A terminal row never has a pending retry scheduled.\n  const held = await applyFencedTransition(em, lease, { ...patch, nextRetryAt: null })\n  if (!held) {\n    // Lease lost \u2014 the reaper reclaimed this row and another actor now owns it. Emitting or re-enqueueing\n    // here would corrupt the new owner's terminal state, so abandon quietly.\n    logger.warn('Push delivery lease lost before finalize; abandoning', {\n      deliveryId: lease.deliveryId,\n      tenantId: lease.tenantId,\n    })\n    return { status: delivery.status, deliveryId: delivery.id }\n  }\n  const finalStatus = (patch.status as PushNotificationDelivery['status'] | undefined) ?? delivery.status\n  await emitPushNotificationsEvent(\n    event,\n    {\n      deliveryId: delivery.id,\n      tenantId: delivery.tenantId,\n      organizationId: delivery.organizationId ?? null,\n      userId: delivery.userId,\n      provider: delivery.provider,\n      status: finalStatus,\n    },\n    { persistent: true },\n  )\n  return { status: finalStatus, deliveryId: delivery.id }\n}\n\nasync function failTerminal(\n  em: EntityManager,\n  delivery: PushNotificationDelivery,\n  lease: DeliveryLease,\n  reason: string,\n): Promise<ProcessResult> {\n  return finalize(em, delivery, lease, 'push_notifications.delivery.failed', {\n    status: 'failed',\n    lastError: reason,\n  })\n}\n\nasync function handleRetryableFailure(\n  em: EntityManager,\n  delivery: PushNotificationDelivery,\n  lease: DeliveryLease,\n  job: PushDeliveryJob,\n  reason: string,\n  providerResponse: Record<string, unknown> | null,\n): Promise<ProcessResult> {\n  // `lease.attempts` is the count already persisted at claim time, so it is the real cap on provider\n  // sends (each claim = one send attempt). Compare against it, not a stale in-memory field.\n  if (lease.attempts < MAX_ATTEMPTS) {\n    // Release the claim (`pending`) and re-enqueue with exponential backoff + jitter; per-delivery\n    // isolation. Jitter avoids a thundering herd when a provider outage fails many deliveries at once.\n    const delayMs = calculateBackoffDelayMs(lease.attempts)\n    const held = await applyFencedTransition(em, lease, {\n      status: 'pending',\n      lastError: reason,\n      providerResponse,\n      nextRetryAt: new Date(Date.now() + delayMs),\n    })\n    if (!held) {\n      // Lease lost mid-flight (reaper reclaimed + another worker re-owns it). Do NOT re-enqueue \u2014 that\n      // would rewind the new owner's attempt counter and schedule a duplicate job.\n      logger.warn('Push delivery lease lost before retry; abandoning', {\n        deliveryId: lease.deliveryId,\n        tenantId: lease.tenantId,\n      })\n      return { status: delivery.status, deliveryId: delivery.id }\n    }\n    try {\n      await enqueuePushDelivery(job, delayMs)\n    } catch (error) {\n      // The row is now `pending` under our lease; fence the terminal failure on that state. If the\n      // reaper already grabbed it (it will not \u2014 we just stamped updated_at), the write no-ops.\n      const failReason = error instanceof Error ? `retry_scheduling_failed: ${error.message}` : 'retry_scheduling_failed'\n      const failed = await applyFencedTransition(\n        em,\n        lease,\n        { status: 'failed', lastError: failReason, nextRetryAt: null },\n        'pending',\n      )\n      if (failed) {\n        await emitPushNotificationsEvent(\n          'push_notifications.delivery.failed',\n          {\n            deliveryId: delivery.id,\n            tenantId: delivery.tenantId,\n            organizationId: delivery.organizationId ?? null,\n            userId: delivery.userId,\n            provider: delivery.provider,\n            status: 'failed',\n          },\n          { persistent: true },\n        )\n      }\n      return { status: 'failed', deliveryId: delivery.id }\n    }\n    await emitPushNotificationsEvent(\n      'push_notifications.delivery.failed',\n      {\n        deliveryId: delivery.id,\n        tenantId: delivery.tenantId,\n        organizationId: delivery.organizationId ?? null,\n        userId: delivery.userId,\n        provider: delivery.provider,\n        // The row is reset to `pending` to release the claim for the re-enqueued attempt, but the\n        // logical outcome of THIS attempt is \"failed, retry scheduled\". Emit `retrying` (not the reset\n        // row status `pending`) so subscribers keying off `status` aren't misled; `willRetry` still gates\n        // ultimate-failure counters.\n        status: 'retrying',\n        willRetry: true,\n      },\n      { persistent: true },\n    )\n    return { status: 'pending', deliveryId: delivery.id }\n  }\n  // Retries exhausted: distinct terminal `expired` status (vs `failed` for terminal errors), so the\n  // admin log can tell \"gave up after N attempts\" from \"channel unavailable / no adapter\".\n  return finalize(em, delivery, lease, 'push_notifications.delivery.failed', {\n    status: 'expired',\n    lastError: reason,\n    providerResponse,\n  })\n}\n\n// Soft-delete the device through the devices module's own command (audit/events/undo stay\n// consistent) rather than mutating its table directly. Dispatched by command id with a trusted\n// system context \u2014 no business-logic import, no authenticated actor.\nexport async function softDeleteUnregisteredDevice(\n  resolve: Resolve,\n  input: { id: string; tenantId: string; userId: string; organizationId: string | null },\n): Promise<void> {\n  try {\n    const commandBus = resolve('commandBus') as CommandBus\n    await commandBus.execute('devices.user_devices.deactivate', {\n      input,\n      ctx: {\n        container: { resolve } as never,\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: input.organizationId,\n        organizationIds: input.organizationId ? [input.organizationId] : null,\n        systemActor: true,\n      } as never,\n    })\n  } catch (error) {\n    logger.error('Failed to deactivate unregistered device', {\n      userDeviceId: input.id,\n      error: error instanceof Error ? error.message : String(error),\n    })\n  }\n}\n\n// Bound the wait on a single provider send (B3a): a hung/black-holed call must not outlive the\n// stuck-reclaim window, or the reaper would reclaim the row mid-send and a second worker would re-send.\n// On timeout we return a retryable `send_timeout` result and move on; the underlying SDK promise is left\n// to settle on its own (its late rejection is swallowed to avoid an unhandled rejection).\nasync function sendWithTimeout(\n  adapter: ChannelAdapter,\n  input: Parameters<ChannelAdapter['sendMessage']>[0],\n  timeoutMs: number,\n): Promise<SendMessageResult> {\n  let timer: ReturnType<typeof setTimeout> | undefined\n  const timeout = new Promise<SendMessageResult>((resolve) => {\n    timer = setTimeout(() => resolve({ externalMessageId: '', status: 'failed', error: 'send_timeout' }), timeoutMs)\n  })\n  const send = adapter.sendMessage(input)\n  send.catch(() => {})\n  try {\n    return await Promise.race([send, timeout])\n  } finally {\n    if (timer) clearTimeout(timer)\n  }\n}\n\n/**\n * Send one push delivery row through the communication_channels hub.\n *\n * Idempotent on the delivery id: the row is claimed atomically, so a redelivered job that cannot win\n * the claim (already `sending`/terminal) is a no-op. Mirrors the `test-send` route flow \u2014 resolve\n * channel \u2192 adapter \u2192 credentials \u2192 convertOutbound \u2192 sendMessage \u2014 but adds delivery-row\n * bookkeeping, retry/backoff, and device soft-delete on `unregistered`.\n *\n * Lease fencing (B3): the claim increments `attempts` atomically, and every post-claim state write goes\n * through `applyFencedTransition`, fenced on `(status='sending', attempts=<claimed>)`. If the reaper\n * broke this worker's lease and another worker re-claimed the row (bumping `attempts`), this worker's\n * writes match 0 rows and it abandons \u2014 so a stolen lease can neither rewind the attempt counter nor\n * overwrite the new owner's terminal state.\n */\nexport async function processPushDeliveryJob(\n  em: EntityManager,\n  job: PushDeliveryJob,\n  resolve: Resolve,\n): Promise<ProcessResult> {\n  // Atomically claim the row (`pending` \u2192 `sending`) so a redelivered/duplicated job \u2014 inherent to\n  // at-least-once queues \u2014 is processed by exactly one worker. Only the worker whose update wins the\n  // race proceeds; the loser (or a non-pending/terminal row) is a no-op. Mirrors the `messages`\n  // send-email claim pattern, which is stronger than a plain read-then-check status guard.\n  // Count the attempt AT CLAIM time, in the same atomic update. `attempts` doubles as the lease token\n  // (see DeliveryLease): each claim increments it, the reaper never touches it, so it uniquely tags this\n  // lease generation. Persisting it before the send makes MAX_ATTEMPTS a real cap on provider sends\n  // (a crash after the send can't lose the increment). Only the worker whose update wins the race\n  // proceeds; the loser (or a non-pending/terminal row) is a no-op.\n  const claimed = await em.nativeUpdate(\n    PushNotificationDelivery,\n    { id: job.deliveryId, tenantId: job.tenantId, status: 'pending' },\n    { status: 'sending', attempts: raw('\"attempts\" + 1'), updatedAt: new Date() },\n  )\n  // Fresh read (forked EM per job \u2192 empty identity map \u2192 hits DB) so `attempts` reflects the increment.\n  const delivery = await em.findOne(\n    PushNotificationDelivery,\n    { id: job.deliveryId, tenantId: job.tenantId },\n    { refresh: true },\n  )\n  if (!delivery) return null\n  if (claimed === 0) return { status: delivery.status, deliveryId: delivery.id }\n\n  const lease: DeliveryLease = { deliveryId: delivery.id, tenantId: delivery.tenantId, attempts: delivery.attempts }\n\n  // Resolve the device for its full (secret) push token. Soft via DI token to avoid coupling.\n  // `push_token` is encrypted at rest, so decrypt on read (no-op when encryption is disabled).\n  const DeviceRef = resolve('UserDevice') as EntityName<UserDevice>\n  const device = await findOneWithDecryption(\n    em,\n    DeviceRef,\n    { id: delivery.userDeviceId, tenantId: job.tenantId, deletedAt: null },\n    undefined,\n    { tenantId: job.tenantId, organizationId: job.organizationId ?? null },\n  )\n  if (!device || !device.pushToken) {\n    const held = await applyFencedTransition(em, lease, {\n      status: 'skipped',\n      lastError: 'device_unavailable',\n      nextRetryAt: null,\n    })\n    return { status: held ? 'skipped' : delivery.status, deliveryId: delivery.id }\n  }\n\n  // Resolve the tenant's push channel matching the snapshotted provider.\n  const ChannelRef = resolve('CommunicationChannel') as EntityName<CommunicationChannel>\n  const channel = await em.findOne(ChannelRef, {\n    tenantId: job.tenantId,\n    providerKey: delivery.provider,\n    channelType: 'push',\n    isActive: true,\n    deletedAt: null,\n  })\n  if (!channel) return failTerminal(em, delivery, lease, 'channel_unavailable')\n\n  const registry = resolve('channelAdapterRegistry') as ChannelAdapterRegistryLike | undefined\n  const adapter = registry?.get(delivery.provider)\n  // No provider package registered this provider's adapter (e.g. channel-fcm/apns/expo not installed).\n  // Terminal, no retry.\n  if (!adapter) return failTerminal(em, delivery, lease, 'no_adapter')\n\n  // Resolve credentials (best-effort, mirrors test-send).\n  let credentialsService: CredentialsServiceLike | undefined\n  try {\n    credentialsService = resolve('integrationCredentialsService') as CredentialsServiceLike | undefined\n  } catch {\n    credentialsService = undefined\n  }\n  // Credentials are keyed by the CHANNEL's org context, not the notification's: at connect time they\n  // are stored under `channel.organizationId ?? tenantId` (see communication_channels\n  // connect-credential-channel). Using the notification's `job.organizationId` here would miss the\n  // creds whenever a tenant-level (org-less) channel serves an org-scoped notification.\n  const credentialScope = {\n    tenantId: job.tenantId,\n    organizationId: channel.organizationId ?? job.tenantId,\n    userId: channel.userId ?? null,\n  }\n  let credentials: Record<string, unknown> = {}\n  if (channel.credentialsRef && credentialsService) {\n    credentials = (await credentialsService.resolve(`channel_${delivery.provider}`, credentialScope).catch(() => null)) ?? {}\n  }\n\n  // Mirror the test-send flow: refresh near-expiry OAuth credentials before sending so providers with\n  // short-lived access tokens (FCM/APNs in Phase 4) don't fail with a stale token. No-op for adapters\n  // without `refreshCredentials` (e.g. the push_stub). Best-effort \u2014 on failure we keep current creds.\n  try {\n    const refreshed = await refreshCredentialsIfNeeded(\n      { adapter, channelId: channel.id, credentials, scope: credentialScope },\n      { credentialsService: credentialsService ?? null },\n    )\n    credentials = refreshed.credentials\n  } catch (error) {\n    logger.error('Credential refresh failed; sending with current credentials', {\n      deliveryId: delivery.id,\n      provider: delivery.provider,\n      error: error instanceof Error ? error.message : String(error),\n    })\n  }\n\n  const scope = { tenantId: job.tenantId, organizationId: job.organizationId ?? job.tenantId }\n  const payload = (delivery.payload ?? {}) as PushPayload\n  const body = payload.body ?? payload.title ?? ''\n\n  try {\n    const converted = await adapter.convertOutbound({ body, bodyFormat: 'text' })\n    const result = await sendWithTimeout(\n      adapter,\n      {\n        content: {\n          ...converted.content,\n          raw: {\n            title: payload.title ?? '',\n            body: payload.body ?? null,\n            data: payload.data ?? {},\n            options: payload.options ?? {},\n            silent: payload.silent === true,\n          },\n        },\n        credentials,\n        scope,\n        metadata: {\n          pushToken: device.pushToken,\n          platform: device.platform,\n          userDeviceId: device.id,\n          provider: delivery.provider,\n        },\n      },\n      resolvePushSendTimeoutMs(),\n    )\n\n    if (result.status === 'sent' || result.status === 'queued') {\n      return finalize(em, delivery, lease, 'push_notifications.delivery.sent', {\n        status: 'sent',\n        sentAt: new Date(),\n        lastError: null,\n        providerResponse: result.metadata ?? { externalMessageId: result.externalMessageId },\n      })\n    }\n\n    if (isUnregistered(result)) {\n      const outcome = await finalize(em, delivery, lease, 'push_notifications.delivery.failed', {\n        status: 'failed',\n        lastError: DEVICE_UNREGISTERED,\n        providerResponse: result.metadata ?? null,\n      })\n      await softDeleteUnregisteredDevice(resolve, {\n        id: device.id,\n        tenantId: device.tenantId,\n        userId: device.userId,\n        organizationId: device.organizationId ?? null,\n      })\n      return outcome\n    }\n\n    return handleRetryableFailure(em, delivery, lease, job, result.error ?? 'send_failed', result.metadata ?? null)\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'send_failed'\n    return handleRetryableFailure(em, delivery, lease, job, message, null)\n  }\n}\n"],
+  "mappings": "AACA,SAAS,WAA4B;AACrC,SAAS,6BAA6B;AAGtC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAI3C,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAC7B,SAAS,gCAAgC;AACzC,SAAS,kCAAkC;AAC3C,SAAS,+BAA+B;AACxC,SAAS,2BAAiD;AAE1D,MAAM,SAAS,aAAa,oBAAoB;AAEzC,MAAM,eAAe;AAW5B,MAAM,0BAA0B;AAChC,MAAM,sBAAsB;AAC5B,MAAM,gCAAgC;AAEtC,SAAS,2BAAmC;AAC1C,QAAM,UAAU,KAAK,IAAI,qBAAqB,wBAAwB,IAAI,6BAA6B;AACvG,QAAM,SAAS,OAAO,SAAS,QAAQ,IAAI,2BAA2B,IAAI,EAAE;AAC5E,QAAM,aAAa,OAAO,SAAS,MAAM,KAAK,UAAU,sBAAsB,SAAS;AACvF,SAAO,KAAK,IAAI,YAAY,OAAO;AACrC;AAkCA,SAAS,eAAe,QAAoC;AAC1D,SAAO,OAAO,UAAU,iBAAiB,QAAQ,OAAO,UAAU;AACpE;AAMA,eAAe,sBACb,IACA,OACA,OACA,aAAiD,WAC/B;AAClB,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA,EAAE,IAAI,MAAM,YAAY,UAAU,MAAM,UAAU,QAAQ,YAAY,UAAU,MAAM,SAAS;AAAA,IAC/F,EAAE,GAAG,OAAO,WAAW,oBAAI,KAAK,EAAE;AAAA,EACpC;AACA,SAAO,WAAW;AACpB;AAEA,eAAe,SACb,IACA,UACA,OACA,OACA,OACwB;AAExB,QAAM,OAAO,MAAM,sBAAsB,IAAI,OAAO,EAAE,GAAG,OAAO,aAAa,KAAK,CAAC;AACnF,MAAI,CAAC,MAAM;AAGT,WAAO,KAAK,wDAAwD;AAAA,MAClE,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,IAClB,CAAC;AACD,WAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY,SAAS,GAAG;AAAA,EAC5D;AACA,QAAM,cAAe,MAAM,UAA6D,SAAS;AACjG,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,YAAY,SAAS;AAAA,MACrB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS,kBAAkB;AAAA,MAC3C,QAAQ,SAAS;AAAA,MACjB,UAAU,SAAS;AAAA,MACnB,QAAQ;AAAA,IACV;AAAA,IACA,EAAE,YAAY,KAAK;AAAA,EACrB;AACA,SAAO,EAAE,QAAQ,aAAa,YAAY,SAAS,GAAG;AACxD;AAEA,eAAe,aACb,IACA,UACA,OACA,QACwB;AACxB,SAAO,SAAS,IAAI,UAAU,OAAO,sCAAsC;AAAA,IACzE,QAAQ;AAAA,IACR,WAAW;AAAA,EACb,CAAC;AACH;AAEA,eAAe,uBACb,IACA,UACA,OACA,KACA,QACA,kBACwB;AAGxB,MAAI,MAAM,WAAW,cAAc;AAGjC,UAAM,UAAU,wBAAwB,MAAM,QAAQ;AACtD,UAAM,OAAO,MAAM,sBAAsB,IAAI,OAAO;AAAA,MAClD,QAAQ;AAAA,MACR,WAAW;AAAA,MACX;AAAA,MACA,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO;AAAA,IAC5C,CAAC;AACD,QAAI,CAAC,MAAM;AAGT,aAAO,KAAK,qDAAqD;AAAA,QAC/D,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,aAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY,SAAS,GAAG;AAAA,IAC5D;AACA,QAAI;AACF,YAAM,oBAAoB,KAAK,OAAO;AAAA,IACxC,SAAS,OAAO;AAGd,YAAM,aAAa,iBAAiB,QAAQ,4BAA4B,MAAM,OAAO,KAAK;AAC1F,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA,EAAE,QAAQ,UAAU,WAAW,YAAY,aAAa,KAAK;AAAA,QAC7D;AAAA,MACF;AACA,UAAI,QAAQ;AACV,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,YACE,YAAY,SAAS;AAAA,YACrB,UAAU,SAAS;AAAA,YACnB,gBAAgB,SAAS,kBAAkB;AAAA,YAC3C,QAAQ,SAAS;AAAA,YACjB,UAAU,SAAS;AAAA,YACnB,QAAQ;AAAA,UACV;AAAA,UACA,EAAE,YAAY,KAAK;AAAA,QACrB;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,UAAU,YAAY,SAAS,GAAG;AAAA,IACrD;AACA,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,YAAY,SAAS;AAAA,QACrB,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS,kBAAkB;AAAA,QAC3C,QAAQ,SAAS;AAAA,QACjB,UAAU,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,QAKnB,QAAQ;AAAA,QACR,WAAW;AAAA,MACb;AAAA,MACA,EAAE,YAAY,KAAK;AAAA,IACrB;AACA,WAAO,EAAE,QAAQ,WAAW,YAAY,SAAS,GAAG;AAAA,EACtD;AAGA,SAAO,SAAS,IAAI,UAAU,OAAO,sCAAsC;AAAA,IACzE,QAAQ;AAAA,IACR,WAAW;AAAA,IACX;AAAA,EACF,CAAC;AACH;AAKA,eAAsB,6BACpB,SACA,OACe;AACf,MAAI;AACF,UAAM,aAAa,QAAQ,YAAY;AACvC,UAAM,WAAW,QAAQ,mCAAmC;AAAA,MAC1D;AAAA,MACA,KAAK;AAAA,QACH,WAAW,EAAE,QAAQ;AAAA,QACrB,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,aAAa;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,4CAA4C;AAAA,MACvD,cAAc,MAAM;AAAA,MACpB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AACF;AAMA,eAAe,gBACb,SACA,OACA,WAC4B;AAC5B,MAAI;AACJ,QAAM,UAAU,IAAI,QAA2B,CAAC,YAAY;AAC1D,YAAQ,WAAW,MAAM,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,UAAU,OAAO,eAAe,CAAC,GAAG,SAAS;AAAA,EACjH,CAAC;AACD,QAAM,OAAO,QAAQ,YAAY,KAAK;AACtC,OAAK,MAAM,MAAM;AAAA,EAAC,CAAC;AACnB,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,OAAO,CAAC;AAAA,EAC3C,UAAE;AACA,QAAI,MAAO,cAAa,KAAK;AAAA,EAC/B;AACF;AAgBA,eAAsB,uBACpB,IACA,KACA,SACwB;AAUxB,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA,EAAE,IAAI,IAAI,YAAY,UAAU,IAAI,UAAU,QAAQ,UAAU;AAAA,IAChE,EAAE,QAAQ,WAAW,UAAU,IAAI,gBAAgB,GAAG,WAAW,oBAAI,KAAK,EAAE;AAAA,EAC9E;AAEA,QAAM,WAAW,MAAM,GAAG;AAAA,IACxB;AAAA,IACA,EAAE,IAAI,IAAI,YAAY,UAAU,IAAI,SAAS;AAAA,IAC7C,EAAE,SAAS,KAAK;AAAA,EAClB;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,EAAG,QAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY,SAAS,GAAG;AAE7E,QAAM,QAAuB,EAAE,YAAY,SAAS,IAAI,UAAU,SAAS,UAAU,UAAU,SAAS,SAAS;AAIjH,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,SAAS,cAAc,UAAU,IAAI,UAAU,WAAW,KAAK;AAAA,IACrE;AAAA,IACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,KAAK;AAAA,EACvE;AACA,MAAI,CAAC,UAAU,CAAC,OAAO,WAAW;AAChC,UAAM,OAAO,MAAM,sBAAsB,IAAI,OAAO;AAAA,MAClD,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AACD,WAAO,EAAE,QAAQ,OAAO,YAAY,SAAS,QAAQ,YAAY,SAAS,GAAG;AAAA,EAC/E;AAGA,QAAM,aAAa,QAAQ,sBAAsB;AACjD,QAAM,UAAU,MAAM,GAAG,QAAQ,YAAY;AAAA,IAC3C,UAAU,IAAI;AAAA,IACd,aAAa,SAAS;AAAA,IACtB,aAAa;AAAA,IACb,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,QAAS,QAAO,aAAa,IAAI,UAAU,OAAO,qBAAqB;AAE5E,QAAM,WAAW,QAAQ,wBAAwB;AACjD,QAAM,UAAU,UAAU,IAAI,SAAS,QAAQ;AAG/C,MAAI,CAAC,QAAS,QAAO,aAAa,IAAI,UAAU,OAAO,YAAY;AAGnE,MAAI;AACJ,MAAI;AACF,yBAAqB,QAAQ,+BAA+B;AAAA,EAC9D,QAAQ;AACN,yBAAqB;AAAA,EACvB;AAKA,QAAM,kBAAkB;AAAA,IACtB,UAAU,IAAI;AAAA,IACd,gBAAgB,QAAQ,kBAAkB,IAAI;AAAA,IAC9C,QAAQ,QAAQ,UAAU;AAAA,EAC5B;AACA,MAAI,cAAuC,CAAC;AAC5C,MAAI,QAAQ,kBAAkB,oBAAoB;AAChD,kBAAe,MAAM,mBAAmB,QAAQ,WAAW,SAAS,QAAQ,IAAI,eAAe,EAAE,MAAM,MAAM,IAAI,KAAM,CAAC;AAAA,EAC1H;AAKA,MAAI;AACF,UAAM,YAAY,MAAM;AAAA,MACtB,EAAE,SAAS,WAAW,QAAQ,IAAI,aAAa,OAAO,gBAAgB;AAAA,MACtE,EAAE,oBAAoB,sBAAsB,KAAK;AAAA,IACnD;AACA,kBAAc,UAAU;AAAA,EAC1B,SAAS,OAAO;AACd,WAAO,MAAM,+DAA+D;AAAA,MAC1E,YAAY,SAAS;AAAA,MACrB,UAAU,SAAS;AAAA,MACnB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IAC9D,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,kBAAkB,IAAI,SAAS;AAC3F,QAAM,UAAW,SAAS,WAAW,CAAC;AACtC,QAAM,OAAO,QAAQ,QAAQ,QAAQ,SAAS;AAE9C,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,gBAAgB,EAAE,MAAM,YAAY,OAAO,CAAC;AAC5E,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE,SAAS;AAAA,UACP,GAAG,UAAU;AAAA,UACb,KAAK;AAAA,YACH,OAAO,QAAQ,SAAS;AAAA,YACxB,MAAM,QAAQ,QAAQ;AAAA,YACtB,MAAM,QAAQ,QAAQ,CAAC;AAAA,YACvB,SAAS,QAAQ,WAAW,CAAC;AAAA,YAC7B,QAAQ,QAAQ,WAAW;AAAA,UAC7B;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,UACR,WAAW,OAAO;AAAA,UAClB,UAAU,OAAO;AAAA,UACjB,cAAc,OAAO;AAAA,UACrB,UAAU,SAAS;AAAA,QACrB;AAAA,MACF;AAAA,MACA,yBAAyB;AAAA,IAC3B;AAEA,QAAI,OAAO,WAAW,UAAU,OAAO,WAAW,UAAU;AAC1D,aAAO,SAAS,IAAI,UAAU,OAAO,oCAAoC;AAAA,QACvE,QAAQ;AAAA,QACR,QAAQ,oBAAI,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,kBAAkB,OAAO,YAAY,EAAE,mBAAmB,OAAO,kBAAkB;AAAA,MACrF,CAAC;AAAA,IACH;AAEA,QAAI,eAAe,MAAM,GAAG;AAC1B,YAAM,UAAU,MAAM,SAAS,IAAI,UAAU,OAAO,sCAAsC;AAAA,QACxF,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,kBAAkB,OAAO,YAAY;AAAA,MACvC,CAAC;AACD,YAAM,6BAA6B,SAAS;AAAA,QAC1C,IAAI,OAAO;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,gBAAgB,OAAO,kBAAkB;AAAA,MAC3C,CAAC;AACD,aAAO;AAAA,IACT;AAEA,WAAO,uBAAuB,IAAI,UAAU,OAAO,KAAK,OAAO,SAAS,eAAe,OAAO,YAAY,IAAI;AAAA,EAChH,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO,uBAAuB,IAAI,UAAU,OAAO,KAAK,SAAS,IAAI;AAAA,EACvE;AACF;",
+  "names": []
+}