@rei-standard/amsg-server 1.2.1 → 2.0.1

package/dist/index.d.ts

@@ -1,2 +1,2149 @@
-export { c as createAdapter, d as createReiServer, e as decryptFromStorage, f as decryptPayload, g as deriveUserEncryptionKey, h as encryptForStorage, i as isValidISO8601, j as isValidUUID, k as isValidUUIDv4, l as isValidUrl, v as validateScheduleMessagePayload } from './index-BXb6gptO.js';
-import 'crypto';
+import { createDecipheriv, createHash, randomBytes, createCipheriv, randomUUID, timingSafeEqual, createHmac } from 'crypto';
+
+/**
+ * Adapter Factory
+ * ReiStandard SDK v2.0.1
+ *
+ * Creates a database adapter instance based on the supplied configuration.
+ *
+ * @typedef {'neon'|'pg'} DriverName
+ *
+ * @typedef {Object} AdapterConfig
+ * @property {DriverName} driver  - Which database driver to use.
+ * @property {string}     connectionString - Database connection URL.
+ */
+
+/**
+ * Create a database adapter.
+ *
+ * @param {AdapterConfig} config
+ * @returns {Promise<import('./interface.js').DbAdapter>}
+ */
+async function createAdapter(config) {
+  if (!config || !config.driver) {
+    throw new Error(
+      '[rei-standard-amsg-server] "driver" is required in the db config. ' +
+      'Supported drivers: neon, pg'
+    );
+  }
+
+  if (!config.connectionString) {
+    throw new Error(
+      '[rei-standard-amsg-server] "connectionString" is required in the db config.'
+    );
+  }
+
+  switch (config.driver) {
+    case 'neon': {
+      const { NeonAdapter } = await import('./neon-DYvGnCzx.d.ts');
+      return new NeonAdapter(config.connectionString);
+    }
+
+    case 'pg': {
+      const { PgAdapter } = await import('./pg-Du-pN_UT.d.ts');
+      return new PgAdapter(config.connectionString);
+    }
+
+    default:
+      throw new Error(
+        `[rei-standard-amsg-server] Unsupported driver "${config.driver}". ` +
+        'Supported drivers: neon, pg'
+      );
+  }
+}
+
+/**
+ * Validation utility library (SDK version)
+ * ReiStandard SDK v2.0.1
+ */
+
+/**
+ * Validate ISO 8601 date string.
+ * @param {string} dateString
+ * @returns {boolean}
+ */
+function isValidISO8601(dateString) {
+  const date = new Date(dateString);
+  return date instanceof Date && !isNaN(date.getTime());
+}
+
+/**
+ * Validate URL format.
+ * @param {string} urlString
+ * @returns {boolean}
+ */
+function isValidUrl(urlString) {
+  try {
+    new URL(urlString);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Validate UUID format.
+ * @param {string} uuid
+ * @returns {boolean}
+ */
+function isValidUUID(uuid) {
+  const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+  return uuidRegex.test(uuid);
+}
+
+/**
+ * Validate UUID v4 format.
+ * @param {string} uuid
+ * @returns {boolean}
+ */
+function isValidUUIDv4(uuid) {
+  const uuidV4Regex = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+  return uuidV4Regex.test(uuid);
+}
+
+/**
+ * Validate the schedule-message request payload.
+ *
+ * @param {Object} payload
+ * @returns {{ valid: boolean, errorCode?: string, errorMessage?: string, details?: Object }}
+ */
+function validateScheduleMessagePayload(payload) {
+  if (!payload.contactName || typeof payload.contactName !== 'string') {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { missingFields: ['contactName'] } };
+  }
+
+  if (!payload.messageType || !['fixed', 'prompted', 'auto', 'instant'].includes(payload.messageType)) {
+    return { valid: false, errorCode: 'INVALID_MESSAGE_TYPE', errorMessage: '消息类型无效', details: { providedType: payload.messageType, allowedTypes: ['fixed', 'prompted', 'auto', 'instant'] } };
+  }
+
+  if (!payload.firstSendTime || !isValidISO8601(payload.firstSendTime)) {
+    return { valid: false, errorCode: 'INVALID_TIMESTAMP', errorMessage: '时间格式无效', details: { field: 'firstSendTime' } };
+  }
+
+  if (payload.firstSendTime && new Date(payload.firstSendTime) <= new Date()) {
+    return { valid: false, errorCode: 'INVALID_TIMESTAMP', errorMessage: '时间必须在未来', details: { field: 'firstSendTime', reason: 'must be in the future' } };
+  }
+
+  if (!payload.pushSubscription || typeof payload.pushSubscription !== 'object') {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { missingFields: ['pushSubscription'] } };
+  }
+
+  if (payload.recurrenceType && !['none', 'daily', 'weekly'].includes(payload.recurrenceType)) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['recurrenceType'] } };
+  }
+
+  if (
+    payload.maxTokens !== undefined &&
+    payload.maxTokens !== null &&
+    (!Number.isInteger(payload.maxTokens) || payload.maxTokens <= 0)
+  ) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['maxTokens'] } };
+  }
+
+  if (payload.messageType === 'fixed') {
+    if (!payload.userMessage) {
+      return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { missingFields: ['userMessage (required for fixed type)'] } };
+    }
+  }
+
+  if (payload.messageType === 'prompted' || payload.messageType === 'auto') {
+    const missingAiFields = [];
+    if (!payload.completePrompt) missingAiFields.push('completePrompt');
+    if (!payload.apiUrl) missingAiFields.push('apiUrl');
+    if (!payload.apiKey) missingAiFields.push('apiKey');
+    if (!payload.primaryModel) missingAiFields.push('primaryModel');
+    if (missingAiFields.length > 0) {
+      return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { missingFields: missingAiFields } };
+    }
+  }
+
+  if (payload.messageType === 'instant') {
+    if (payload.recurrenceType && payload.recurrenceType !== 'none') {
+      return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: 'instant 类型的 recurrenceType 必须为 none', details: { invalidFields: ['recurrenceType (must be "none" for instant type)'] } };
+    }
+    const hasAiConfig = payload.completePrompt && payload.apiUrl && payload.apiKey && payload.primaryModel;
+    const hasUserMessage = payload.userMessage;
+    if (!hasAiConfig && !hasUserMessage) {
+      return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: 'instant 类型必须提供 userMessage 或完整的 AI 配置', details: { missingFields: ['userMessage or (completePrompt + apiUrl + apiKey + primaryModel)'] } };
+    }
+  }
+
+  if (payload.avatarUrl && !isValidUrl(payload.avatarUrl)) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['avatarUrl (invalid URL format)'] } };
+  }
+  if (payload.uuid && !isValidUUID(payload.uuid)) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['uuid (invalid UUID format)'] } };
+  }
+  if (payload.messageSubtype && !['chat', 'forum', 'moment'].includes(payload.messageSubtype)) {
+    return { valid: false, errorCode: 'INVALID_PARAMETERS', errorMessage: '缺少必需参数或参数格式错误', details: { invalidFields: ['messageSubtype'] } };
+  }
+
+  return { valid: true };
+}
+
+/**
+ * Request payload utilities.
+ * Keeps body parsing and shape validation consistent across handlers.
+ */
+
+const REQUEST_ERRORS = {
+  INVALID_JSON: { code: 'INVALID_JSON', message: '请求体不是有效的 JSON' },
+  INVALID_REQUEST_BODY: { code: 'INVALID_REQUEST_BODY', message: '请求体格式无效' },
+  INVALID_ENCRYPTED_PAYLOAD: { code: 'INVALID_ENCRYPTED_PAYLOAD', message: '加密数据格式错误' }
+};
+
+/**
+ * @typedef {{ code: string, message: string }} ValidationError
+ */
+
+/**
+ * @typedef {{
+ *   invalidJson?: ValidationError,
+ *   invalidType?: ValidationError
+ * }} ParseBodyOptions
+ */
+
+/**
+ * @typedef {{
+ *   ok: true,
+ *   data: Record<string, any>
+ * } | {
+ *   ok: false,
+ *   error: ValidationError
+ * }} ParseBodyResult
+ */
+
+/**
+ * Parse body into a JSON object.
+ *
+ * @param {unknown} body
+ * @param {ParseBodyOptions} [options]
+ * @returns {ParseBodyResult}
+ */
+function parseBodyAsObject(body, options = {}) {
+  const invalidJson = options.invalidJson || REQUEST_ERRORS.INVALID_JSON;
+  const invalidType = options.invalidType || REQUEST_ERRORS.INVALID_REQUEST_BODY;
+
+  let parsed = body;
+  if (typeof parsed === 'string') {
+    try {
+      parsed = JSON.parse(parsed);
+    } catch {
+      return { ok: false, error: invalidJson };
+    }
+  }
+
+  if (!isPlainObject(parsed)) {
+    return { ok: false, error: invalidType };
+  }
+
+  return { ok: true, data: parsed };
+}
+
+/**
+ * Parse a standard JSON object body.
+ *
+ * @param {unknown} body
+ * @returns {ParseBodyResult}
+ */
+function parseJsonBody(body) {
+  return parseBodyAsObject(body, {
+    invalidJson: REQUEST_ERRORS.INVALID_JSON,
+    invalidType: REQUEST_ERRORS.INVALID_REQUEST_BODY
+  });
+}
+
+/**
+ * Check if a value is a plain object (and not null/array).
+ *
+ * @param {unknown} value
+ * @returns {value is Record<string, any>}
+ */
+function isPlainObject(value) {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+/**
+ * Check if an object follows the encrypted payload envelope shape.
+ *
+ * @param {unknown} payload
+ * @returns {payload is { iv: string, authTag: string, encryptedData: string }}
+ */
+function isEncryptedEnvelope(payload) {
+  if (!isPlainObject(payload)) return false;
+
+  return (
+    typeof payload.iv === 'string' &&
+    typeof payload.authTag === 'string' &&
+    typeof payload.encryptedData === 'string'
+  );
+}
+
+/**
+ * Parse and validate an encrypted payload envelope.
+ *
+ * @param {unknown} body
+ * @returns {ParseBodyResult}
+ */
+function parseEncryptedBody(body) {
+  const parsedBody = parseBodyAsObject(body, {
+    invalidJson: REQUEST_ERRORS.INVALID_ENCRYPTED_PAYLOAD,
+    invalidType: REQUEST_ERRORS.INVALID_ENCRYPTED_PAYLOAD
+  });
+
+  if (!parsedBody.ok) {
+    return parsedBody;
+  }
+
+  if (!isEncryptedEnvelope(parsedBody.data)) {
+    return { ok: false, error: REQUEST_ERRORS.INVALID_ENCRYPTED_PAYLOAD };
+  }
+
+  return parsedBody;
+}
+
+/**
+ * Read a header value case-insensitively.
+ *
+ * @param {Record<string, any>} headers
+ * @param {string} name
+ * @returns {string}
+ */
+function getHeader(headers = {}, name) {
+  if (!headers || typeof headers !== 'object') {
+    return '';
+  }
+
+  const lowerName = String(name || '').toLowerCase();
+  if (!lowerName) return '';
+
+  for (const [key, value] of Object.entries(headers)) {
+    if (String(key).toLowerCase() === lowerName) {
+      return String(value || '').trim();
+    }
+  }
+
+  return '';
+}
+
+/**
+ * Handler: init-tenant
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ POST: function }}
+ */
+
+
+function createInitTenantHandler(ctx) {
+  async function POST(headers, body) {
+    const initSecret = getHeader(headers, 'x-init-secret');
+
+    // If initSecret is configured, require a matching X-Init-Secret.
+    if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
+      return {
+        status: 401,
+        body: {
+          success: false,
+          error: {
+            code: 'INVALID_INIT_AUTH',
+            message: '初始化鉴权失败'
+          }
+        }
+      };
+    }
+
+    const parsed = parseJsonBody(body);
+    if (!parsed.ok) {
+      return {
+        status: 400,
+        body: {
+          success: false,
+          error: parsed.error
+        }
+      };
+    }
+
+    const payload = parsed.data;
+    const tenantId = payload.tenantId || undefined;
+    const driver = payload.driver;
+    const databaseUrl = payload.databaseUrl || payload.connectionString;
+
+    if (tenantId && !isValidUUIDv4(tenantId)) {
+      return {
+        status: 400,
+        body: {
+          success: false,
+          error: {
+            code: 'INVALID_TENANT_ID',
+            message: 'tenantId 必须是 UUID v4 格式'
+          }
+        }
+      };
+    }
+
+    if (!databaseUrl || !driver) {
+      return {
+        status: 400,
+        body: {
+          success: false,
+          error: {
+            code: 'INVALID_PARAMETERS',
+            message: '缺少 driver 或 databaseUrl 参数'
+          }
+        }
+      };
+    }
+
+    try {
+      const result = await ctx.tenantManager.initializeTenant({
+        tenantId,
+        driver,
+        connectionString: databaseUrl
+      });
+
+      return {
+        status: 201,
+        body: {
+          success: true,
+          data: {
+            tenantId: result.tenantId,
+            tenantToken: result.tenantToken,
+            cronToken: result.cronToken,
+            cronWebhookUrl: result.cronWebhookUrl,
+            masterKeyFingerprint: result.masterKeyFingerprint
+          }
+        }
+      };
+    } catch (error) {
+      if (error.message === 'INVALID_DRIVER') {
+        return {
+          status: 400,
+          body: {
+            success: false,
+            error: {
+              code: 'INVALID_DRIVER',
+              message: 'driver 必须是 neon 或 pg'
+            }
+          }
+        };
+      }
+
+      if (error.message === 'INVALID_DATABASE_URL') {
+        return {
+          status: 400,
+          body: {
+            success: false,
+            error: {
+              code: 'INVALID_DATABASE_URL',
+              message: 'databaseUrl 不能为空'
+            }
+          }
+        };
+      }
+
+      if (error.message === 'TENANT_ALREADY_INITIALIZED') {
+        return {
+          status: 409,
+          body: {
+            success: false,
+            error: {
+              code: 'TENANT_ALREADY_INITIALIZED',
+              message: 'tenantId 已存在，不能重复初始化'
+            }
+          }
+        };
+      }
+
+      throw error;
+    }
+  }
+
+  return { POST };
+}
+
+/**
+ * Encryption utility library (SDK version)
+ * ReiStandard SDK v2.0.1
+ *
+ * Wraps AES-256-GCM operations for request/response and storage encryption.
+ */
+
+
+/**
+ * Derive a user-specific encryption key from the master key.
+ *
+ * @param {string} userId    - Unique user identifier.
+ * @param {string} masterKey - 64-char hex master key.
+ * @returns {string} 64-char hex key.
+ */
+function deriveUserEncryptionKey(userId, masterKey) {
+  return createHash('sha256')
+    .update(masterKey + userId)
+    .digest('hex')
+    .slice(0, 64);
+}
+
+/**
+ * Decrypt a client-encrypted request body (AES-256-GCM, base64 encoded).
+ *
+ * @param {{ iv: string, authTag: string, encryptedData: string }} encryptedPayload
+ * @param {string} encryptionKey - 64-char hex key.
+ * @returns {Object} Decrypted JSON object.
+ */
+function decryptPayload(encryptedPayload, encryptionKey) {
+  const { iv, authTag, encryptedData } = encryptedPayload;
+
+  const decipher = createDecipheriv(
+    'aes-256-gcm',
+    Buffer.from(encryptionKey, 'hex'),
+    Buffer.from(iv, 'base64')
+  );
+
+  decipher.setAuthTag(Buffer.from(authTag, 'base64'));
+
+  const decrypted = Buffer.concat([
+    decipher.update(Buffer.from(encryptedData, 'base64')),
+    decipher.final()
+  ]);
+
+  return JSON.parse(decrypted.toString('utf8'));
+}
+
+/**
+ * Encrypt a JSON payload for API transfer (AES-256-GCM, base64 encoded).
+ *
+ * @param {string|Object} payload
+ * @param {string} encryptionKey - 64-char hex key.
+ * @returns {{ iv: string, authTag: string, encryptedData: string }}
+ */
+function encryptPayload(payload, encryptionKey) {
+  const plaintext = typeof payload === 'string' ? payload : JSON.stringify(payload);
+  const iv = randomBytes(12);
+  const cipher = createCipheriv('aes-256-gcm', Buffer.from(encryptionKey, 'hex'), iv);
+  const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+  const authTag = cipher.getAuthTag();
+
+  return {
+    iv: iv.toString('base64'),
+    authTag: authTag.toString('base64'),
+    encryptedData: encrypted.toString('base64')
+  };
+}
+
+/**
+ * Encrypt data for database storage (hex encoded, colon-separated).
+ *
+ * @param {string} text          - Plaintext string.
+ * @param {string} encryptionKey - 64-char hex key.
+ * @returns {string} Format: iv:authTag:encryptedData
+ */
+function encryptForStorage(text, encryptionKey) {
+  const iv = randomBytes(16);
+  const cipher = createCipheriv('aes-256-gcm', Buffer.from(encryptionKey, 'hex'), iv);
+  const encrypted = cipher.update(text, 'utf8', 'hex') + cipher.final('hex');
+  const authTag = cipher.getAuthTag();
+  return `${iv.toString('hex')}:${authTag.toString('hex')}:${encrypted}`;
+}
+
+/**
+ * Decrypt data from database storage format.
+ *
+ * @param {string} encryptedText - Format: iv:authTag:encryptedData
+ * @param {string} encryptionKey - 64-char hex key.
+ * @returns {string} Plaintext string.
+ */
+function decryptFromStorage(encryptedText, encryptionKey) {
+  const [ivHex, authTagHex, encryptedDataHex] = encryptedText.split(':');
+  const decipher = createDecipheriv(
+    'aes-256-gcm',
+    Buffer.from(encryptionKey, 'hex'),
+    Buffer.from(ivHex, 'hex')
+  );
+  decipher.setAuthTag(Buffer.from(authTagHex, 'hex'));
+  return decipher.update(encryptedDataHex, 'hex', 'utf8') + decipher.final('utf8');
+}
+
+/**
+ * Handler: get-user-key
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ GET: function }}
+ */
+
+
+function createGetUserKeyHandler(ctx) {
+  async function GET(url, headers) {
+    const effectiveHeaders = headers || url || {};
+    const tenantResult = await ctx.tenantManager.resolveTenant(effectiveHeaders);
+    if (!tenantResult.ok) {
+      return tenantResult.error;
+    }
+
+    const { masterKey } = tenantResult.context;
+    const userId = getHeader(effectiveHeaders, 'x-user-id');
+
+    if (!userId) {
+      return {
+        status: 400,
+        body: { success: false, error: { code: 'USER_ID_REQUIRED', message: '缺少用户标识符' } }
+      };
+    }
+
+    if (!isValidUUIDv4(userId)) {
+      return {
+        status: 400,
+        body: { success: false, error: { code: 'INVALID_USER_ID_FORMAT', message: 'X-User-Id 必须是 UUID v4 格式' } }
+      };
+    }
+
+    return {
+      status: 200,
+      body: {
+        success: true,
+        data: {
+          userKey: deriveUserEncryptionKey(userId, masterKey),
+          version: 1
+        }
+      }
+    };
+  }
+
+  return { GET };
+}
+
+/**
+ * Database error helpers.
+ */
+
+/**
+ * Check whether an error is caused by a unique-constraint violation.
+ *
+ * @param {unknown} error
+ * @returns {boolean}
+ */
+function isUniqueViolation(error) {
+  if (!error || typeof error !== 'object') return false;
+
+  const code = error.code;
+  if (code === '23505') return true;
+
+  const message = typeof error.message === 'string' ? error.message.toLowerCase() : '';
+  return message.includes('duplicate key') || message.includes('unique constraint');
+}
+
+/**
+ * Message Processor (SDK version)
+ * ReiStandard SDK v2.0.1
+ *
+ * Handles single message content generation and Web Push delivery.
+ * Receives its dependencies (encryption helpers, webpush, VAPID config)
+ * via a context object so that it stays free of process.env references.
+ */
+
+
+/**
+ * @typedef {Object} ProcessorContext
+ * @property {Object}  webpush           - The web-push module instance (already VAPID-configured).
+ * @property {Object}  vapid             - { email, publicKey, privateKey }
+ * @property {import('../adapters/interface.js').DbAdapter} db
+ */
+
+/**
+ * Process a single database task row: decrypt → generate content → push.
+ *
+ * @param {import('../adapters/interface.js').TaskRow} task
+ * @param {ProcessorContext} ctx
+ * @param {string} [providedMasterKey]
+ * @returns {Promise<{ success: boolean, messagesSent: number, error?: string }>}
+ */
+async function processSingleMessage(task, ctx, providedMasterKey) {
+  try {
+    const masterKey = providedMasterKey || ctx.masterKey;
+    if (!masterKey) {
+      return { success: false, messagesSent: 0, error: 'TENANT_MASTER_KEY_MISSING' };
+    }
+
+    const userKey = deriveUserEncryptionKey(task.user_id, masterKey);
+    const decryptedPayload = JSON.parse(decryptFromStorage(task.encrypted_payload, userKey));
+
+    let messageContent;
+
+    if (decryptedPayload.messageType === 'fixed') {
+      messageContent = decryptedPayload.userMessage;
+
+    } else if (decryptedPayload.messageType === 'instant') {
+      if (decryptedPayload.completePrompt && decryptedPayload.apiUrl && decryptedPayload.apiKey && decryptedPayload.primaryModel) {
+        messageContent = await _callAI(decryptedPayload);
+      } else if (decryptedPayload.userMessage) {
+        messageContent = decryptedPayload.userMessage;
+      } else {
+        throw new Error('Invalid instant message: no content source available');
+      }
+
+    } else if (decryptedPayload.messageType === 'prompted' || decryptedPayload.messageType === 'auto') {
+      messageContent = await _callAI(decryptedPayload);
+    } else {
+      throw new Error('Invalid message configuration: no content source available');
+    }
+
+    // Sentence splitting
+    const sentences = messageContent
+      .split(/([。！？!?]+)/)
+      .reduce((acc, part, i, arr) => {
+        if (i % 2 === 0 && part.trim()) {
+          const punctuation = arr[i + 1] || '';
+          acc.push(part.trim() + punctuation);
+        }
+        return acc;
+      }, [])
+      .filter(s => s.length > 0);
+
+    const messages = sentences.length > 0 ? sentences : [messageContent];
+
+    if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
+      throw new Error('VAPID configuration missing - push notifications cannot be sent');
+    }
+
+    const pushSubscription = decryptedPayload.pushSubscription;
+
+    for (let i = 0; i < messages.length; i++) {
+      const notificationPayload = {
+        title: `来自 ${decryptedPayload.contactName}`,
+        message: messages[i],
+        contactName: decryptedPayload.contactName,
+        messageId: `msg_${randomUUID()}_${task.id || 'instant'}_${i}`,
+        messageIndex: i + 1,
+        totalMessages: messages.length,
+        messageType: decryptedPayload.messageType,
+        messageSubtype: decryptedPayload.messageSubtype || 'chat',
+        taskId: task.id || null,
+        timestamp: new Date().toISOString(),
+        source: decryptedPayload.messageType === 'instant' ? 'instant' : 'scheduled',
+        avatarUrl: decryptedPayload.avatarUrl || null,
+        metadata: decryptedPayload.metadata || {}
+      };
+
+      await ctx.webpush.sendNotification(pushSubscription, JSON.stringify(notificationPayload));
+
+      if (i < messages.length - 1) {
+        await new Promise(resolve => setTimeout(resolve, 1500));
+      }
+    }
+
+    return { success: true, messagesSent: messages.length };
+
+  } catch (error) {
+    return { success: false, messagesSent: 0, error: error.message };
+  }
+}
+
+/**
+ * Process a single message identified by UUID (used for instant type).
+ *
+ * @param {string} uuid
+ * @param {ProcessorContext} ctx
+ * @param {number} [maxRetries=2]
+ * @param {string} [userId]
+ * @param {string} [providedMasterKey]
+ * @returns {Promise<{ success: boolean, messagesSent?: number, retriesUsed?: number, error?: Object }>}
+ */
+async function processMessagesByUuid(uuid, ctx, maxRetries = 2, userId, providedMasterKey) {
+  let retryCount = 0;
+  const masterKey = providedMasterKey || ctx.masterKey;
+
+  if (!masterKey) {
+    return {
+      success: false,
+      error: { code: 'TENANT_MASTER_KEY_MISSING', message: '租户主密钥不存在或配置异常' }
+    };
+  }
+
+  while (retryCount <= maxRetries) {
+    let task;
+    try {
+      task = userId
+        ? await ctx.db.getTaskByUuid(uuid, userId)
+        : await ctx.db.getTaskByUuidOnly(uuid);
+    } catch (error) {
+      if (retryCount < maxRetries) {
+        retryCount++;
+        await new Promise(resolve => setTimeout(resolve, 1000 * retryCount));
+        continue;
+      }
+
+      return {
+        success: false,
+        error: { code: 'INTERNAL_ERROR', message: error.message, retriesAttempted: retryCount }
+      };
+    }
+
+    if (!task) {
+      return { success: false, error: { code: 'TASK_NOT_FOUND', message: '任务不存在或已处理' } };
+    }
+
+    const result = await processSingleMessage(task, ctx, masterKey);
+
+    if (!result.success) {
+      if (retryCount < maxRetries) {
+        retryCount++;
+        await new Promise(resolve => setTimeout(resolve, 1000 * retryCount));
+        continue;
+      }
+
+      try {
+        await ctx.db.updateTaskById(task.id, { status: 'failed', retry_count: retryCount });
+      } catch (_updateError) {
+        // best-effort status update; keep original processing error as primary signal
+      }
+
+      return {
+        success: false,
+        error: { code: 'PROCESSING_ERROR', message: result.error, retriesAttempted: retryCount }
+      };
+    }
+
+    try {
+      await ctx.db.deleteTaskById(task.id);
+    } catch (error) {
+      try {
+        await ctx.db.updateTaskById(task.id, { status: 'sent', retry_count: 0 });
+      } catch (_markSentError) {
+        // best effort: avoid re-sending if storage mutation partially fails
+      }
+
+      return {
+        success: false,
+        error: {
+          code: 'POST_SEND_CLEANUP_FAILED',
+          message: '消息已发送，但任务清理失败',
+          details: { error: error.message }
+        }
+      };
+    }
+
+    return { success: true, messagesSent: result.messagesSent, retriesUsed: retryCount };
+  }
+}
+
+/**
+ * Call an OpenAI-compatible API.
+ * @private
+ */
+async function _callAI(payload) {
+  const normalizedApiUrl = normalizeAiApiUrl(payload.apiUrl);
+  const requestBody = buildAiRequestBody(payload);
+
+  const aiResponse = await fetch(normalizedApiUrl, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'Authorization': `Bearer ${payload.apiKey}`
+    },
+    body: JSON.stringify(requestBody),
+    signal: AbortSignal.timeout(300000)
+  });
+
+  if (!aiResponse.ok) {
+    if (aiResponse.status === 405) {
+      throw new Error(
+        `AI API error: 405 Method Not Allowed. ` +
+        `apiUrl must point to a full chat endpoint (for example: /chat/completions). ` +
+        `Received: ${normalizedApiUrl}`
+      );
+    }
+
+    throw new Error(
+      `AI API error: ${aiResponse.status} ${aiResponse.statusText || 'Unknown Error'}. ` +
+      `Request URL: ${normalizedApiUrl}`
+    );
+  }
+
+  const aiData = await aiResponse.json();
+  const content = aiData?.choices?.[0]?.message?.content;
+  if (typeof content !== 'string' || !content.trim()) {
+    throw new Error('AI API error: response missing choices[0].message.content');
+  }
+
+  return content.trim();
+}
+
+/**
+ * Build OpenAI-compatible request body.
+ *
+ * `max_tokens` is optional:
+ * - include it only when payload.maxTokens is provided
+ * - omit it when payload.maxTokens is undefined / null
+ *
+ * @param {Object} payload
+ * @returns {Object}
+ */
+function buildAiRequestBody(payload) {
+  const requestBody = {
+    model: payload.primaryModel,
+    messages: [{ role: 'user', content: payload.completePrompt }],
+    temperature: 0.8
+  };
+
+  if (payload.maxTokens === undefined || payload.maxTokens === null) {
+    return requestBody;
+  }
+
+  if (!Number.isInteger(payload.maxTokens) || payload.maxTokens <= 0) {
+    throw new Error('Invalid maxTokens: maxTokens must be a positive integer when provided.');
+  }
+
+  requestBody.max_tokens = payload.maxTokens;
+  return requestBody;
+}
+
+/**
+ * Normalize AI API URL with minimal, non-breaking rules:
+ * - trim whitespace
+ * - remove redundant trailing slashes from pathname
+ * - keep query string untouched
+ *
+ * Note: This function does NOT auto-append /v1 or /chat/completions.
+ *
+ * @param {string} apiUrl
+ * @returns {string}
+ */
+function normalizeAiApiUrl(apiUrl) {
+  if (typeof apiUrl !== 'string' || !apiUrl.trim()) {
+    throw new Error(
+      'Invalid apiUrl: apiUrl is required. ' +
+      'Please provide a full chat endpoint URL (for example: https://api.openai.com/v1/chat/completions).'
+    );
+  }
+
+  const trimmedApiUrl = apiUrl.trim();
+  let parsedUrl;
+
+  try {
+    parsedUrl = new URL(trimmedApiUrl);
+  } catch {
+    throw new Error(
+      `Invalid apiUrl: "${apiUrl}". ` +
+      'Please provide a valid absolute URL that points to a full chat endpoint.'
+    );
+  }
+
+  parsedUrl.pathname = parsedUrl.pathname.replace(/\/+$/, '') || '/';
+  return parsedUrl.toString();
+}
+
+/**
+ * Handler: schedule-message
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ POST: function }}
+ */
+
+
+function createScheduleMessageHandler(ctx) {
+  async function POST(headers, body) {
+    const tenantResult = await ctx.tenantManager.resolveTenant(headers);
+    if (!tenantResult.ok) {
+      return tenantResult.error;
+    }
+
+    const tenantCtx = tenantResult.context;
+    const db = tenantCtx.db;
+    const masterKey = tenantCtx.masterKey;
+    const isEncrypted = getHeader(headers, 'x-payload-encrypted') === 'true';
+    const encryptionVersion = getHeader(headers, 'x-encryption-version');
+    const userId = getHeader(headers, 'x-user-id');
+
+    if (!isEncrypted) {
+      return { status: 400, body: { success: false, error: { code: 'ENCRYPTION_REQUIRED', message: '请求体必须加密' } } };
+    }
+    if (!userId) {
+      return { status: 400, body: { success: false, error: { code: 'USER_ID_REQUIRED', message: '缺少用户标识符' } } };
+    }
+    if (!isValidUUIDv4(userId)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_USER_ID_FORMAT', message: 'X-User-Id 必须是 UUID v4 格式' } } };
+    }
+    if (encryptionVersion !== '1') {
+      return { status: 400, body: { success: false, error: { code: 'UNSUPPORTED_ENCRYPTION_VERSION', message: '加密版本不支持' } } };
+    }
+
+    // Decrypt request body
+    const parsedBody = parseEncryptedBody(body);
+    if (!parsedBody.ok) {
+      return { status: 400, body: { success: false, error: parsedBody.error } };
+    }
+
+    const encryptedBody = parsedBody.data;
+
+    let payload;
+    try {
+      const userKey = deriveUserEncryptionKey(userId, masterKey);
+      payload = decryptPayload(encryptedBody, userKey);
+    } catch (error) {
+      if (error instanceof SyntaxError) {
+        return { status: 400, body: { success: false, error: { code: 'INVALID_PAYLOAD_FORMAT', message: '解密后的数据不是有效 JSON' } } };
+      }
+
+      const message = typeof error.message === 'string' ? error.message : '';
+      if (message.includes('auth') || message.includes('Unsupported state')) {
+        return { status: 400, body: { success: false, error: { code: 'DECRYPTION_FAILED', message: '请求体解密失败' } } };
+      }
+
+      return { status: 400, body: { success: false, error: { code: 'DECRYPTION_FAILED', message: '请求体解密失败' } } };
+    }
+
+    if (!isPlainObject(payload)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_PAYLOAD_FORMAT', message: '解密后的数据必须是 JSON 对象' } } };
+    }
+
+    // Validate
+    const validationResult = validateScheduleMessagePayload(payload);
+    if (!validationResult.valid) {
+      return { status: 400, body: { success: false, error: { code: validationResult.errorCode, message: validationResult.errorMessage, details: validationResult.details } } };
+    }
+
+    const taskUuid = payload.uuid || randomUUID();
+    const userKey = deriveUserEncryptionKey(userId, masterKey);
+
+    const fullTaskData = {
+      contactName: payload.contactName,
+      avatarUrl: payload.avatarUrl || null,
+      messageType: payload.messageType,
+      messageSubtype: payload.messageSubtype || 'chat',
+      userMessage: payload.userMessage || null,
+      firstSendTime: payload.firstSendTime,
+      recurrenceType: payload.recurrenceType || 'none',
+      apiUrl: payload.apiUrl || null,
+      apiKey: payload.apiKey || null,
+      primaryModel: payload.primaryModel || null,
+      completePrompt: payload.completePrompt || null,
+      maxTokens: payload.maxTokens ?? null,
+      pushSubscription: payload.pushSubscription,
+      metadata: payload.metadata || {}
+    };
+
+    const encryptedPayload = encryptForStorage(JSON.stringify(fullTaskData), userKey);
+
+    // Instant type: check VAPID before creating the task to avoid orphaned rows
+    if (payload.messageType === 'instant') {
+      if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
+        return {
+          status: 500,
+          body: {
+            success: false,
+            error: {
+              code: 'VAPID_CONFIG_ERROR',
+              message: 'VAPID 配置缺失，无法发送即时消息',
+              details: {
+                missingKeys: [
+                  !ctx.vapid.email && 'VAPID_EMAIL',
+                  !ctx.vapid.publicKey && 'NEXT_PUBLIC_VAPID_PUBLIC_KEY',
+                  !ctx.vapid.privateKey && 'VAPID_PRIVATE_KEY'
+                ].filter(Boolean)
+              }
+            }
+          }
+        };
+      }
+    }
+
+    // Insert into database
+    let dbResult;
+    try {
+      dbResult = await db.createTask({
+        user_id: userId,
+        uuid: taskUuid,
+        encrypted_payload: encryptedPayload,
+        next_send_at: payload.firstSendTime,
+        message_type: payload.messageType
+      });
+    } catch (error) {
+      if (isUniqueViolation(error)) {
+        return {
+          status: 409,
+          body: {
+            success: false,
+            error: {
+              code: 'TASK_UUID_CONFLICT',
+              message: '任务 UUID 已存在，请使用新的 uuid 重新提交'
+            }
+          }
+        };
+      }
+      throw error;
+    }
+
+    if (!dbResult) {
+      return { status: 500, body: { success: false, error: { code: 'TASK_CREATE_FAILED', message: '创建任务失败' } } };
+    }
+
+    // Instant type: send immediately
+    if (payload.messageType === 'instant') {
+      try {
+        const sendResult = await processMessagesByUuid(taskUuid, {
+          ...ctx,
+          db,
+          masterKey
+        }, 2, userId, masterKey);
+
+        if (!sendResult.success) {
+          return { status: 500, body: { success: false, error: { code: 'MESSAGE_SEND_FAILED', message: '消息发送失败', details: sendResult.error } } };
+        }
+
+        return {
+          status: 200,
+          body: {
+            success: true,
+            data: {
+              uuid: taskUuid,
+              contactName: payload.contactName,
+              messagesSent: sendResult.messagesSent,
+              sentAt: new Date().toISOString(),
+              status: 'sent',
+              retriesUsed: sendResult.retriesUsed || 0
+            }
+          }
+        };
+      } catch (error) {
+        return { status: 500, body: { success: false, error: { code: 'MESSAGE_SEND_FAILED', message: '消息发送失败', details: { error: error.message } } } };
+      }
+    }
+
+    // Non-instant: return scheduled response
+    return {
+      status: 201,
+      body: {
+        success: true,
+        data: {
+          id: dbResult.id,
+          uuid: dbResult.uuid,
+          contactName: payload.contactName,
+          nextSendAt: dbResult.next_send_at,
+          status: dbResult.status,
+          createdAt: dbResult.created_at
+        }
+      }
+    };
+  }
+
+  return { POST };
+}
+
+/**
+ * Handler: send-notifications
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ POST: function }}
+ */
+
+
+function createSendNotificationsHandler(ctx) {
+  async function POST(urlOrHeaders, maybeHeaders) {
+    const url = typeof urlOrHeaders === 'string' ? urlOrHeaders : '';
+    const headers = maybeHeaders || (typeof urlOrHeaders === 'object' ? urlOrHeaders : {});
+
+    const tenantResult = await ctx.tenantManager.resolveTenant(headers, {
+      allowCronToken: true,
+      url
+    });
+    if (!tenantResult.ok) {
+      return tenantResult.error;
+    }
+
+    const tenantCtx = tenantResult.context;
+    const db = tenantCtx.db;
+    const masterKey = tenantCtx.masterKey;
+
+    if (!ctx.vapid.email || !ctx.vapid.publicKey || !ctx.vapid.privateKey) {
+      return {
+        status: 500,
+        body: {
+          success: false,
+          error: {
+            code: 'VAPID_CONFIG_ERROR',
+            message: 'VAPID 配置缺失，无法发送推送通知',
+            details: {
+              missingKeys: [
+                !ctx.vapid.email && 'VAPID_EMAIL',
+                !ctx.vapid.publicKey && 'NEXT_PUBLIC_VAPID_PUBLIC_KEY',
+                !ctx.vapid.privateKey && 'VAPID_PRIVATE_KEY'
+              ].filter(Boolean)
+            }
+          }
+        }
+      };
+    }
+
+    const startTime = Date.now();
+    const tasks = await db.getPendingTasks(50);
+
+    const MAX_CONCURRENT = 8;
+    const results = {
+      totalTasks: tasks.length,
+      successCount: 0,
+      failedCount: 0,
+      deletedOnceOffTasks: 0,
+      updatedRecurringTasks: 0,
+      failedTasks: []
+    };
+
+    async function handleDeliveryFailure(task, reason) {
+      results.failedCount++;
+
+      try {
+        if (task.retry_count >= 3) {
+          await db.updateTaskById(task.id, { status: 'failed' });
+          results.failedTasks.push({ taskId: task.id, reason, retryCount: task.retry_count, status: 'permanently_failed' });
+        } else {
+          const nextRetryTime = new Date(Date.now() + (task.retry_count + 1) * 2 * 60 * 1000);
+          await db.updateTaskById(task.id, { next_send_at: nextRetryTime.toISOString(), retry_count: task.retry_count + 1 });
+          results.failedTasks.push({ taskId: task.id, reason, retryCount: task.retry_count + 1, nextRetryAt: nextRetryTime.toISOString() });
+        }
+      } catch (updateError) {
+        results.failedTasks.push({
+          taskId: task.id,
+          reason,
+          status: 'retry_update_failed',
+          updateError: updateError.message
+        });
+      }
+    }
+
+    async function handlePostSendPersistenceFailure(task, reason) {
+      results.failedCount++;
+
+      let markedSent = false;
+      try {
+        await db.updateTaskById(task.id, { status: 'sent', retry_count: 0 });
+        markedSent = true;
+      } catch (_markSentError) {
+        markedSent = false;
+      }
+
+      results.failedTasks.push({
+        taskId: task.id,
+        reason,
+        status: markedSent ? 'post_send_cleanup_failed_marked_sent' : 'post_send_cleanup_failed',
+        messageDelivered: true
+      });
+    }
+
+    async function processTask(task) {
+      let sendResult;
+      try {
+        sendResult = await processSingleMessage(task, {
+          ...ctx,
+          db,
+          masterKey
+        }, masterKey);
+      } catch (error) {
+        await handleDeliveryFailure(task, error.message || '消息发送失败');
+        return;
+      }
+
+      if (!sendResult.success) {
+        await handleDeliveryFailure(task, sendResult.error || '消息发送失败');
+        return;
+      }
+
+      try {
+        const userKey = deriveUserEncryptionKey(task.user_id, masterKey);
+        const decryptedPayload = JSON.parse(decryptFromStorage(task.encrypted_payload, userKey));
+
+        if (decryptedPayload.recurrenceType === 'none') {
+          await db.deleteTaskById(task.id);
+          results.deletedOnceOffTasks++;
+        } else {
+          let nextSendAt;
+          const currentSendAt = new Date(task.next_send_at);
+          if (decryptedPayload.recurrenceType === 'daily') {
+            nextSendAt = new Date(currentSendAt.getTime() + 24 * 60 * 60 * 1000);
+          } else if (decryptedPayload.recurrenceType === 'weekly') {
+            nextSendAt = new Date(currentSendAt.getTime() + 7 * 24 * 60 * 60 * 1000);
+          }
+          await db.updateTaskById(task.id, { next_send_at: nextSendAt.toISOString(), retry_count: 0 });
+          results.updatedRecurringTasks++;
+        }
+
+        results.successCount++;
+      } catch (error) {
+        await handlePostSendPersistenceFailure(task, error.message || '发送后状态更新失败');
+      }
+    }
+
+    // Dynamic task pool
+    const taskQueue = [...tasks];
+    const processing = [];
+
+    while (taskQueue.length > 0 || processing.length > 0) {
+      while (processing.length < MAX_CONCURRENT && taskQueue.length > 0) {
+        const task = taskQueue.shift();
+        const promise = processTask(task);
+        processing.push(promise);
+        promise.finally(() => {
+          const index = processing.indexOf(promise);
+          if (index > -1) processing.splice(index, 1);
+        });
+      }
+      if (processing.length > 0) {
+        await Promise.race(processing);
+      }
+    }
+
+    // Cleanup old tasks
+    await db.cleanupOldTasks(7);
+
+    const executionTime = Date.now() - startTime;
+
+    return {
+      status: 200,
+      body: {
+        success: true,
+        data: {
+          totalTasks: results.totalTasks,
+          successCount: results.successCount,
+          failedCount: results.failedCount,
+          processedAt: new Date().toISOString(),
+          executionTime,
+          details: {
+            deletedOnceOffTasks: results.deletedOnceOffTasks,
+            updatedRecurringTasks: results.updatedRecurringTasks,
+            failedTasks: results.failedTasks
+          }
+        }
+      }
+    };
+  }
+
+  return { POST };
+}
+
+/**
+ * Handler: update-message
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ PUT: function }}
+ */
+
+
+function createUpdateMessageHandler(ctx) {
+  async function PUT(url, headers, body) {
+    const tenantResult = await ctx.tenantManager.resolveTenant(headers, { url });
+    if (!tenantResult.ok) {
+      return tenantResult.error;
+    }
+
+    const tenantCtx = tenantResult.context;
+    const db = tenantCtx.db;
+    const masterKey = tenantCtx.masterKey;
+    const u = new URL(url, 'https://dummy');
+    const taskUuid = u.searchParams.get('id');
+
+    if (!taskUuid) {
+      return { status: 400, body: { success: false, error: { code: 'TASK_ID_REQUIRED', message: '缺少任务ID' } } };
+    }
+
+    const userId = getHeader(headers, 'x-user-id');
+    if (!userId) {
+      return { status: 400, body: { success: false, error: { code: 'USER_ID_REQUIRED', message: '缺少用户标识符' } } };
+    }
+    if (!isValidUUIDv4(userId)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_USER_ID_FORMAT', message: 'X-User-Id 必须是 UUID v4 格式' } } };
+    }
+
+    const isEncrypted = getHeader(headers, 'x-payload-encrypted') === 'true';
+    const encryptionVersion = getHeader(headers, 'x-encryption-version');
+
+    if (!isEncrypted) {
+      return { status: 400, body: { success: false, error: { code: 'ENCRYPTION_REQUIRED', message: '请求体必须加密' } } };
+    }
+
+    if (encryptionVersion !== '1') {
+      return { status: 400, body: { success: false, error: { code: 'UNSUPPORTED_ENCRYPTION_VERSION', message: '加密版本不支持' } } };
+    }
+
+    const parsedBody = parseEncryptedBody(body);
+    if (!parsedBody.ok) {
+      return { status: 400, body: { success: false, error: parsedBody.error } };
+    }
+
+    const encryptedBody = parsedBody.data;
+    const userKey = deriveUserEncryptionKey(userId, masterKey);
+    let updates;
+
+    try {
+      updates = decryptPayload(encryptedBody, userKey);
+    } catch (_error) {
+      return { status: 400, body: { success: false, error: { code: 'DECRYPTION_FAILED', message: '请求体解密失败' } } };
+    }
+
+    if (!isPlainObject(updates)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: '更新数据格式错误' } } };
+    }
+
+    if (updates.nextSendAt && !isValidISO8601(updates.nextSendAt)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: '更新数据格式错误', details: { invalidFields: ['nextSendAt'] } } } };
+    }
+
+    if (updates.recurrenceType && !['none', 'daily', 'weekly'].includes(updates.recurrenceType)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: '更新数据格式错误', details: { invalidFields: ['recurrenceType'] } } } };
+    }
+
+    if (
+      Object.prototype.hasOwnProperty.call(updates, 'maxTokens') &&
+      updates.maxTokens !== null &&
+      (!Number.isInteger(updates.maxTokens) || updates.maxTokens <= 0)
+    ) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_UPDATE_DATA', message: '更新数据格式错误', details: { invalidFields: ['maxTokens'] } } } };
+    }
+
+    // Fetch existing task
+    const existingTask = await db.getTaskByUuid(taskUuid, userId);
+
+    if (!existingTask) {
+      const taskStatus = await db.getTaskStatus(taskUuid, userId);
+      if (!taskStatus) {
+        return { status: 404, body: { success: false, error: { code: 'TASK_NOT_FOUND', message: '指定的任务不存在或已被删除' } } };
+      }
+      return { status: 409, body: { success: false, error: { code: 'TASK_ALREADY_COMPLETED', message: '任务已完成或已失败，无法更新' } } };
+    }
+
+    const existingData = JSON.parse(decryptFromStorage(existingTask.encrypted_payload, userKey));
+
+    const updatedData = {
+      ...existingData,
+      ...(updates.completePrompt && { completePrompt: updates.completePrompt }),
+      ...(updates.userMessage && { userMessage: updates.userMessage }),
+      ...(updates.recurrenceType && { recurrenceType: updates.recurrenceType }),
+      ...(updates.avatarUrl && { avatarUrl: updates.avatarUrl }),
+      ...(updates.metadata && { metadata: updates.metadata }),
+      ...(Object.prototype.hasOwnProperty.call(updates, 'maxTokens') && { maxTokens: updates.maxTokens ?? null })
+    };
+
+    const encryptedPayload = encryptForStorage(JSON.stringify(updatedData), userKey);
+    const extraFields = updates.nextSendAt ? { next_send_at: updates.nextSendAt } : undefined;
+
+    const result = await db.updateTaskByUuid(taskUuid, userId, encryptedPayload, extraFields);
+
+    if (!result) {
+      return { status: 409, body: { success: false, error: { code: 'UPDATE_CONFLICT', message: '任务更新失败，任务可能已被修改或删除' } } };
+    }
+
+    return {
+      status: 200,
+      body: {
+        success: true,
+        data: {
+          uuid: taskUuid,
+          updatedFields: Object.keys(updates),
+          updatedAt: result.updated_at
+        }
+      }
+    };
+  }
+
+  return { PUT };
+}
+
+/**
+ * Handler: cancel-message
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ DELETE: function }}
+ */
+
+
+function createCancelMessageHandler(ctx) {
+  async function DELETE(url, headers) {
+    const tenantResult = await ctx.tenantManager.resolveTenant(headers, { url });
+    if (!tenantResult.ok) {
+      return tenantResult.error;
+    }
+
+    const db = tenantResult.context.db;
+    const u = new URL(url, 'https://dummy');
+    const taskUuid = u.searchParams.get('id');
+
+    if (!taskUuid) {
+      return { status: 400, body: { success: false, error: { code: 'TASK_ID_REQUIRED', message: '缺少任务ID' } } };
+    }
+
+    const userId = getHeader(headers, 'x-user-id');
+    if (!userId) {
+      return { status: 400, body: { success: false, error: { code: 'USER_ID_REQUIRED', message: '缺少用户标识符' } } };
+    }
+    if (!isValidUUIDv4(userId)) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_USER_ID_FORMAT', message: 'X-User-Id 必须是 UUID v4 格式' } } };
+    }
+
+    const deleted = await db.deleteTaskByUuid(taskUuid, userId);
+
+    if (!deleted) {
+      return {
+        status: 404,
+        body: { success: false, error: { code: 'TASK_NOT_FOUND', message: '指定的任务不存在或已被删除' } }
+      };
+    }
+
+    return {
+      status: 200,
+      body: {
+        success: true,
+        data: { uuid: taskUuid, message: '任务已成功取消', deletedAt: new Date().toISOString() }
+      }
+    };
+  }
+
+  return { DELETE };
+}
+
+/**
+ * Handler: messages
+ * ReiStandard SDK v2.0.1
+ *
+ * @param {Object} ctx - Server context.
+ * @returns {{ GET: function }}
+ */
+
+
+function createMessagesHandler(ctx) {
+  async function GET(url, headers) {
+    const tenantResult = await ctx.tenantManager.resolveTenant(headers, { url });
+    if (!tenantResult.ok) {
+      return tenantResult.error;
+    }
+
+    const tenantCtx = tenantResult.context;
+    const db = tenantCtx.db;
+    const masterKey = tenantCtx.masterKey;
+    const userId = getHeader(headers, 'x-user-id');
+
+    if (!userId) {
+      return {
+        status: 400,
+        body: { success: false, error: { code: 'USER_ID_REQUIRED', message: '必须提供 X-User-Id 请求头' } }
+      };
+    }
+    if (!isValidUUIDv4(userId)) {
+      return {
+        status: 400,
+        body: { success: false, error: { code: 'INVALID_USER_ID_FORMAT', message: 'X-User-Id 必须是 UUID v4 格式' } }
+      };
+    }
+
+    const u = new URL(url, 'https://dummy');
+    const status = u.searchParams.get('status') || 'all';
+    const limit = Math.min(parseInt(u.searchParams.get('limit') || '20', 10), 100);
+    const offset = parseInt(u.searchParams.get('offset') || '0', 10);
+
+    if (isNaN(limit) || limit < 1) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_PARAMETERS', message: 'limit 参数无效，必须为正整数' } } };
+    }
+
+    if (isNaN(offset) || offset < 0) {
+      return { status: 400, body: { success: false, error: { code: 'INVALID_PARAMETERS', message: 'offset 参数无效，必须为非负整数' } } };
+    }
+
+    const { tasks, total } = await db.listTasks(userId, { status, limit, offset });
+
+    const userKey = deriveUserEncryptionKey(userId, masterKey);
+
+    const decryptedTasks = tasks.map(task => {
+      const decrypted = JSON.parse(decryptFromStorage(task.encrypted_payload, userKey));
+      return {
+        id: task.id,
+        uuid: task.uuid,
+        contactName: decrypted.contactName,
+        messageType: task.message_type,
+        messageSubtype: decrypted.messageSubtype,
+        nextSendAt: task.next_send_at,
+        recurrenceType: decrypted.recurrenceType,
+        status: task.status,
+        retryCount: task.retry_count,
+        createdAt: task.created_at,
+        updatedAt: task.updated_at
+      };
+    });
+
+    const responsePayload = {
+      tasks: decryptedTasks,
+      pagination: { total, limit, offset, hasMore: offset + limit < total }
+    };
+    const encryptedResponse = encryptPayload(responsePayload, userKey);
+
+    return {
+      status: 200,
+      body: {
+        success: true,
+        encrypted: true,
+        version: 1,
+        data: encryptedResponse
+      }
+    };
+  }
+
+  return { GET };
+}
+
+const inMemoryNamespaces = new Map();
+
+function base64UrlEncode$1(input) {
+  return Buffer.from(input)
+    .toString('base64')
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/=+$/g, '');
+}
+
+function base64UrlDecode$1(input) {
+  const normalized = input
+    .replace(/-/g, '+')
+    .replace(/_/g, '/');
+  const padLength = (4 - (normalized.length % 4)) % 4;
+  return Buffer.from(normalized + '='.repeat(padLength), 'base64');
+}
+
+function getKekBuffer(kek) {
+  const value = String(kek || '').trim();
+  if (!value) {
+    throw new Error('[rei-standard-amsg-server] tenant.kek is required');
+  }
+  return createHash('sha256').update(value).digest();
+}
+
+function encryptConfig(config, kekBuffer) {
+  const iv = randomBytes(12);
+  const cipher = createCipheriv('aes-256-gcm', kekBuffer, iv);
+  const plaintext = Buffer.from(JSON.stringify(config), 'utf8');
+  const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+  const authTag = cipher.getAuthTag();
+
+  return `v1.${base64UrlEncode$1(iv)}.${base64UrlEncode$1(authTag)}.${base64UrlEncode$1(ciphertext)}`;
+}
+
+function decryptConfig(encrypted, kekBuffer) {
+  const parts = String(encrypted || '').split('.');
+  if (parts.length !== 4 || parts[0] !== 'v1') {
+    throw new Error('INVALID_TENANT_CONFIG');
+  }
+
+  const iv = base64UrlDecode$1(parts[1]);
+  const authTag = base64UrlDecode$1(parts[2]);
+  const ciphertext = base64UrlDecode$1(parts[3]);
+
+  const decipher = createDecipheriv('aes-256-gcm', kekBuffer, iv);
+  decipher.setAuthTag(authTag);
+  const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
+  return JSON.parse(plaintext);
+}
+
+function createInMemoryStore(namespace) {
+  if (!inMemoryNamespaces.has(namespace)) {
+    inMemoryNamespaces.set(namespace, new Map());
+  }
+
+  const namespaceMap = inMemoryNamespaces.get(namespace);
+
+  return {
+    async get(key) {
+      return namespaceMap.has(key) ? namespaceMap.get(key) : null;
+    },
+    async set(key, value) {
+      namespaceMap.set(key, value);
+    },
+    async delete(key) {
+      namespaceMap.delete(key);
+    }
+  };
+}
+
+async function resolveBlobStore(namespace) {
+  if (globalThis.__REI_BLOB_STORE__ && typeof globalThis.__REI_BLOB_STORE__.get === 'function') {
+    return globalThis.__REI_BLOB_STORE__;
+  }
+
+  try {
+    const blobModule = await import('@netlify/blobs');
+    const getStore = blobModule.getStore || blobModule.default?.getStore;
+    if (typeof getStore === 'function') {
+      return getStore({ name: namespace });
+    }
+  } catch (_error) {
+    // Fall back to in-memory store for local tests / non-Netlify runtimes
+  }
+
+  return createInMemoryStore(namespace);
+}
+
+/**
+ * @typedef {{
+ *   tenantId: string,
+ *   db: { driver: 'neon'|'pg', connectionString: string },
+ *   masterKey: string,
+ *   createdAt: string,
+ *   updatedAt: string
+ * }} TenantConfig
+ */
+
+/**
+ * @param {{ namespace?: string, kek: string }} options
+ */
+function createTenantBlobStore(options) {
+  const namespace = String(options.namespace).trim() || 'rei-tenants';
+  const kekBuffer = getKekBuffer(options.kek);
+
+  function getTenantKey(tenantId) {
+    return `tenant/${tenantId}`;
+  }
+
+  return {
+    async getTenantConfig(tenantId) {
+      const store = await resolveBlobStore(namespace);
+      const encrypted = await store.get(getTenantKey(tenantId), { type: 'text' });
+      if (!encrypted) return null;
+      return decryptConfig(encrypted, kekBuffer);
+    },
+
+    async setTenantConfig(config) {
+      const store = await resolveBlobStore(namespace);
+      const encrypted = encryptConfig(config, kekBuffer);
+      await store.set(getTenantKey(config.tenantId), encrypted);
+    },
+
+    async deleteTenantConfig(tenantId) {
+      const store = await resolveBlobStore(namespace);
+      await store.delete(getTenantKey(tenantId));
+    }
+  };
+}
+
+function base64UrlEncode(input) {
+  return Buffer.from(input)
+    .toString('base64')
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/=+$/g, '');
+}
+
+function base64UrlDecode(input) {
+  const normalized = input
+    .replace(/-/g, '+')
+    .replace(/_/g, '/');
+  const padLength = (4 - (normalized.length % 4)) % 4;
+  return Buffer.from(normalized + '='.repeat(padLength), 'base64');
+}
+
+function sign(input, secret) {
+  return base64UrlEncode(createHmac('sha256', secret).update(input).digest());
+}
+
+function nowEpochSeconds() {
+  return Math.floor(Date.now() / 1000);
+}
+
+/**
+ * @typedef {'tenant'|'cron'} TokenType
+ */
+
+/**
+ * @param {{ tenantId: string, type: TokenType, expiresInSeconds?: number }} params
+ * @param {string} secret
+ */
+function createTenantToken(params, secret) {
+  const issuedAt = nowEpochSeconds();
+  const expiresInSeconds = Number(params.expiresInSeconds || 60 * 60 * 24 * 30);
+  const payload = {
+    tid: params.tenantId,
+    typ: params.type,
+    iat: issuedAt,
+    exp: issuedAt + expiresInSeconds,
+    v: 1
+  };
+
+  const header = { alg: 'HS256', typ: 'JWT' };
+  const encodedHeader = base64UrlEncode(JSON.stringify(header));
+  const encodedPayload = base64UrlEncode(JSON.stringify(payload));
+  const signingInput = `${encodedHeader}.${encodedPayload}`;
+  const signature = sign(signingInput, secret);
+  return `${signingInput}.${signature}`;
+}
+
+/**
+ * @param {string} token
+ * @param {string} secret
+ * @param {{ expectedTypes?: TokenType[] }} [options]
+ */
+function verifyTenantToken(token, secret, options = {}) {
+  if (!token || typeof token !== 'string') {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  const parts = token.split('.');
+  if (parts.length !== 3) {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  const [encodedHeader, encodedPayload, receivedSignature] = parts;
+  const signingInput = `${encodedHeader}.${encodedPayload}`;
+  const expectedSignature = sign(signingInput, secret);
+
+  const receivedBuffer = Buffer.from(receivedSignature);
+  const expectedBuffer = Buffer.from(expectedSignature);
+  if (
+    receivedBuffer.length !== expectedBuffer.length ||
+    !timingSafeEqual(receivedBuffer, expectedBuffer)
+  ) {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  let payload;
+  try {
+    payload = JSON.parse(base64UrlDecode(encodedPayload).toString('utf8'));
+  } catch {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  if (!payload || typeof payload !== 'object' || payload.v !== 1) {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  if (!payload.tid || !payload.typ || !payload.exp) {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  if (payload.exp <= nowEpochSeconds()) {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  const expectedTypes = options.expectedTypes || [];
+  if (expectedTypes.length > 0 && !expectedTypes.includes(payload.typ)) {
+    throw new Error('INVALID_TENANT_AUTH');
+  }
+
+  return payload;
+}
+
+/**
+ * @param {Record<string, any>} headers
+ * @returns {string}
+ */
+function extractBearerToken(headers = {}) {
+  let authorization = '';
+  for (const [key, value] of Object.entries(headers || {})) {
+    if (String(key).toLowerCase() === 'authorization') {
+      authorization = String(value || '').trim();
+      break;
+    }
+  }
+  if (!authorization.toLowerCase().startsWith('bearer ')) {
+    return '';
+  }
+  return authorization.slice(7).trim();
+}
+
+function fingerprint(masterKey) {
+  return createHash('sha256').update(masterKey).digest('hex').slice(0, 16);
+}
+
+function sanitizeDbConfig(driver, connectionString) {
+  const normalizedDriver = String(driver || '').trim();
+  const normalizedConnectionString = String(connectionString || '').trim();
+
+  if (!['neon', 'pg'].includes(normalizedDriver)) {
+    throw new Error('INVALID_DRIVER');
+  }
+  if (!normalizedConnectionString) {
+    throw new Error('INVALID_DATABASE_URL');
+  }
+
+  return {
+    driver: normalizedDriver,
+    connectionString: normalizedConnectionString
+  };
+}
+
+function parseTokenFromUrl(url) {
+  if (!url || typeof url !== 'string') {
+    return '';
+  }
+
+  try {
+    const parsed = new URL(url, 'https://dummy.local');
+    return String(parsed.searchParams.get('token') || '').trim();
+  } catch {
+    return '';
+  }
+}
+
+/**
+ * @param {{
+ *   tenantStore: ReturnType<import('./blob-store.js').createTenantBlobStore>,
+ *   tokenSigningKey: string,
+ *   publicBaseUrl?: string
+ * }} options
+ */
+function createTenantContextManager(options) {
+  const tenantStore = options.tenantStore;
+  const tokenSigningKey = String(options.tokenSigningKey || '').trim();
+  const publicBaseUrl = String(options.publicBaseUrl || '').replace(/\/$/, '');
+  const adapterFactory = options.adapterFactory || createAdapter;
+  const adapterCache = new Map();
+
+  if (!tokenSigningKey) {
+    throw new Error('[rei-standard-amsg-server] tenant.tokenSigningKey is required');
+  }
+
+  async function getOrCreateAdapter(dbConfig) {
+    const cacheKey = `${dbConfig.driver}:${dbConfig.connectionString}`;
+    if (!adapterCache.has(cacheKey)) {
+      const adapter = await adapterFactory(dbConfig);
+      adapterCache.set(cacheKey, adapter);
+    }
+    return adapterCache.get(cacheKey);
+  }
+
+  async function initializeTenant({ driver, connectionString, tenantId: providedTenantId }) {
+    const dbConfig = sanitizeDbConfig(driver, connectionString);
+    const tenantId = String(providedTenantId || randomUUID()).trim();
+
+    const existing = await tenantStore.getTenantConfig(tenantId);
+    if (existing) {
+      throw new Error('TENANT_ALREADY_INITIALIZED');
+    }
+
+    const adapter = await getOrCreateAdapter(dbConfig);
+    await adapter.initSchema();
+
+    const masterKey = randomBytes(32).toString('hex');
+    const now = new Date().toISOString();
+
+    await tenantStore.setTenantConfig({
+      tenantId,
+      db: dbConfig,
+      masterKey,
+      createdAt: now,
+      updatedAt: now
+    });
+
+    const tenantToken = createTenantToken({ tenantId, type: 'tenant' }, tokenSigningKey);
+    const cronToken = createTenantToken({ tenantId, type: 'cron' }, tokenSigningKey);
+
+    return {
+      tenantId,
+      masterKeyFingerprint: fingerprint(masterKey),
+      tenantToken,
+      cronToken,
+      cronWebhookUrl: publicBaseUrl ? `${publicBaseUrl}/api/v1/send-notifications?token=${cronToken}` : ''
+    };
+  }
+
+  async function resolveTenant(headers, options = {}) {
+    const allowCronToken = options.allowCronToken === true;
+    const url = options.url || '';
+
+    const bearerToken = extractBearerToken(headers);
+    const tokenFromQuery = allowCronToken ? parseTokenFromUrl(url) : '';
+    const token = bearerToken || tokenFromQuery;
+
+    if (!token) {
+      return {
+        ok: false,
+        error: {
+          status: 401,
+          body: { success: false, error: { code: 'INVALID_TENANT_AUTH', message: '缺少租户鉴权信息' } }
+        }
+      };
+    }
+
+    let payload;
+    try {
+      payload = verifyTenantToken(token, tokenSigningKey, {
+        expectedTypes: allowCronToken ? ['cron'] : ['tenant']
+      });
+    } catch (_error) {
+      return {
+        ok: false,
+        error: {
+          status: 401,
+          body: { success: false, error: { code: 'INVALID_TENANT_AUTH', message: '租户令牌无效或已过期' } }
+        }
+      };
+    }
+
+    const tenantConfig = await tenantStore.getTenantConfig(payload.tid);
+    if (!tenantConfig) {
+      return {
+        ok: false,
+        error: {
+          status: 401,
+          body: { success: false, error: { code: 'INVALID_TENANT_AUTH', message: '租户配置不存在或已失效' } }
+        }
+      };
+    }
+
+    const adapter = await getOrCreateAdapter(tenantConfig.db);
+
+    return {
+      ok: true,
+      context: {
+        tenantId: tenantConfig.tenantId,
+        tokenType: payload.typ,
+        db: adapter,
+        masterKey: tenantConfig.masterKey
+      }
+    };
+  }
+
+  return {
+    initializeTenant,
+    resolveTenant
+  };
+}
+
+/**
+ * ReiStandard Server SDK Entry Point
+ * v2.0.1
+ *
+ * Usage:
+ *   import { createReiServer } from '@rei-standard/amsg-server';
+ *
+ *   const rei = await createReiServer({
+ *     vapid: {
+ *       email: process.env.VAPID_EMAIL,
+ *       publicKey: process.env.NEXT_PUBLIC_VAPID_PUBLIC_KEY,
+ *       privateKey: process.env.VAPID_PRIVATE_KEY,
+ *     },
+ *     tenant: {
+ *       blobNamespace: 'rei-tenants',
+ *       kek: process.env.TENANT_CONFIG_KEK,
+ *       tokenSigningKey: process.env.TENANT_TOKEN_SIGNING_KEY,
+ *       initSecret: process.env.INIT_SECRET,
+ *       publicBaseUrl: process.env.PUBLIC_BASE_URL
+ *     }
+ *   });
+ */
+
+
+function normalizeVapidSubject(email) {
+  const trimmedEmail = String(email || '').trim();
+  if (!trimmedEmail) return '';
+  return /^mailto:/i.test(trimmedEmail) ? trimmedEmail : `mailto:${trimmedEmail}`;
+}
+
+/**
+ * @typedef {Object} VapidConfig
+ * @property {string} [email]      - VAPID contact email (e.g. mailto:…).
+ * @property {string} [publicKey]  - VAPID public key.
+ * @property {string} [privateKey] - VAPID private key.
+ */
+
+/**
+ * @typedef {Object} TenantServerConfig
+ * @property {string} [blobNamespace]  - Netlify Blob namespace.
+ * @property {string} kek              - KEK used to encrypt tenant config in blobs.
+ * @property {string} tokenSigningKey  - HMAC key used to sign tenant/cron tokens.
+ * @property {string} [initSecret]     - Optional secret for /init-tenant bootstrap endpoint.
+ * @property {string} [publicBaseUrl]  - Optional base URL for generated cron webhook.
+ * @property {(db: {driver:'neon'|'pg', connectionString:string}) => Promise<any>} [adapterFactory]
+ *   Optional adapter factory override (mainly for tests).
+ */
+
+/**
+ * @typedef {Object} ReiServerConfig
+ * @property {VapidConfig} [vapid]   - VAPID keys for Web Push.
+ * @property {TenantServerConfig} tenant - Tenant config & auth settings.
+ */
+
+/**
+ * @typedef {Object} ReiHandlers
+ * @property {{ POST: function }} initTenant
+ * @property {{ GET: function }} getUserKey
+ * @property {{ POST: function }} scheduleMessage
+ * @property {{ POST: function }} sendNotifications
+ * @property {{ PUT: function }} updateMessage
+ * @property {{ DELETE: function }} cancelMessage
+ * @property {{ GET: function }} messages
+ */
+
+/**
+ * @typedef {Object} ReiServer
+ * @property {ReiHandlers} handlers - Standard API route handler objects.
+ */
+
+/**
+ * Initialise the ReiStandard server.
+ *
+ * @param {ReiServerConfig} config
+ * @returns {Promise<ReiServer>}
+ */
+async function createReiServer(config) {
+  if (!config) throw new Error('[rei-standard-amsg-server] config is required');
+  if (!config.tenant) throw new Error('[rei-standard-amsg-server] tenant config is required');
+
+  // web-push is a hard dependency for ReiStandard server features
+  let webpushModule;
+  try {
+    const webpushImport = await import('web-push');
+    webpushModule = webpushImport.default || webpushImport;
+  } catch (_err) {
+    throw new Error(
+      '[rei-standard-amsg-server] web-push is required. Install it with: npm install web-push'
+    );
+  }
+
+  const vapid = config.vapid || {};
+
+  if (vapid.email && vapid.publicKey && vapid.privateKey) {
+    webpushModule.setVapidDetails(
+      normalizeVapidSubject(vapid.email),
+      vapid.publicKey,
+      vapid.privateKey
+    );
+  }
+
+  const tenantStore = createTenantBlobStore({
+    namespace: config.tenant.blobNamespace || 'rei-tenants',
+    kek: config.tenant.kek
+  });
+
+  const tenantManager = createTenantContextManager({
+    tenantStore,
+    tokenSigningKey: config.tenant.tokenSigningKey,
+    publicBaseUrl: config.tenant.publicBaseUrl,
+    adapterFactory: config.tenant.adapterFactory
+  });
+
+  const initSecret = String(config.tenant.initSecret || '').trim();
+
+  const ctx = {
+    vapid: {
+      email: vapid.email || '',
+      publicKey: vapid.publicKey || '',
+      privateKey: vapid.privateKey || ''
+    },
+    webpush: webpushModule,
+    tenant: {
+      initSecret
+    },
+    tenantManager
+  };
+
+  return {
+    handlers: {
+      initTenant: createInitTenantHandler(ctx),
+      getUserKey: createGetUserKeyHandler(ctx),
+      scheduleMessage: createScheduleMessageHandler(ctx),
+      sendNotifications: createSendNotificationsHandler(ctx),
+      updateMessage: createUpdateMessageHandler(ctx),
+      cancelMessage: createCancelMessageHandler(ctx),
+      messages: createMessagesHandler(ctx)
+    }
+  };
+}
+
+export { createAdapter, createReiServer, createTenantToken, decryptFromStorage, decryptPayload, deriveUserEncryptionKey, encryptForStorage, isValidISO8601, isValidUUID, isValidUUIDv4, isValidUrl, validateScheduleMessagePayload, verifyTenantToken };