@ttt-productions/notification-core 0.15.7 → 0.15.8

package/dist/server/delivery-ledger.d.ts

@@ -18,13 +18,36 @@
  *    opaque `activityGeneration`, resets `seenAt`, and flips the row to
  *    `materialized` — so the "applied but not marked" double-apply window is gone.
  *    Retrying a `materialized` row is a successful no-op.
+ *  - The same transaction asks the app whether the recipient may still receive
+ *    (`options.isRecipientEligible`); an ineligible recipient gets no card and the
+ *    row turns terminal `skipped`, so a row queued before (or retried after) the
+ *    recipient became ineligible can never recreate a card. Re-running it is a no-op.
  *  - TTL (`expireAt`, a real Firestore Timestamp via `config.timestampFromMillis`)
- *    is set ONLY at `materialized`; a `queued` or `deadLetter` row is NEVER TTL'd
- *    (round-19) so an unresolved delivery can't be silently deleted before replay.
+ *    is set ONLY at `materialized` / `skipped`; a `queued` or `deadLetter` row is NEVER TTL'd
+ *    so an unresolved delivery can't be silently deleted before replay.
  */
 import type { NotificationSystemConfig, NotificationDoc } from '../types.js';
-import type { ServerFirestore } from './types.js';
-export type DeliveryState = 'queued' | 'materialized' | 'deadLetter';
+import type { ServerFirestore, ServerTransaction } from './types.js';
+/**
+ * `skipped` is terminal: the recipient was not eligible when the row was materialized, so no card
+ * was written. It is TTL'd like `materialized` and never retried.
+ */
+export type DeliveryState = 'queued' | 'materialized' | 'skipped' | 'deadLetter';
+/** Why a row was terminalized as `skipped`. */
+export type DeliverySkipReason = 'recipientIneligible';
+/**
+ * Ledger options the consuming app must decide.
+ */
+export interface DeliveryLedgerOptions {
+    /**
+     * Whether `recipientUid` may still receive a notification. Called INSIDE the materialize
+     * transaction, after the delivery row is read and before anything is written, so the answer
+     * and the card write commit together (BACKEND-116): read through `tx` only. A recipient that
+     * answers false gets no card, and the row becomes `skipped`. Not called for a shared
+     * (recipient-less) row. A consumer with no eligibility rule answers true.
+     */
+    isRecipientEligible: (recipientUid: string, tx: ServerTransaction) => Promise<boolean>;
+}
 export type AggregationStrategy = 'increment' | 'staticRelight';
 export type MaterializationClass = 'directQueued' | 'realtimeFallback' | 'fanoutOrphan' | 'retry';
 /** The materialization payload carried on every delivery row. */
@@ -63,7 +86,7 @@ export interface EnqueueResult {
     /** True iff EVERY row is now represented by a created-or-pre-existing doc (page-cursor invariant input). */
     allResolved: boolean;
 }
-export type MaterializeOutcome = 'materialized' | 'already-materialized' | 'missing' | 'skipped-non-queued';
+export type MaterializeOutcome = 'materialized' | 'already-materialized' | 'skipped-ineligible-recipient' | 'missing' | 'skipped-non-queued';
 export interface DeliveryLedger {
     enqueue(rows: DeliveryRowInput[]): Promise<EnqueueResult>;
     materialize(deliveryId: string): Promise<MaterializeOutcome>;
@@ -97,5 +120,5 @@ export declare function applyAggregation(params: {
     seenAt: number;
     updatedAt: number;
 };
-export declare function createDeliveryLedger(db: ServerFirestore, config: NotificationSystemConfig): DeliveryLedger;
+export declare function createDeliveryLedger(db: ServerFirestore, config: NotificationSystemConfig, options: DeliveryLedgerOptions): DeliveryLedger;
 //# sourceMappingURL=delivery-ledger.d.ts.map

package/dist/server/delivery-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-ledger.d.ts","sourceRoot":"","sources":["../../src/server/delivery-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,YAAY,CAAC;AAWhE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,cAAc,GAAG,YAAY,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,eAAe,CAAC;AAChE,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,kBAAkB,GAClB,cAAc,GACd,OAAO,CAAC;AAEZ,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,oBAAoB,CAAC;CAC5C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAC1C;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAC5C;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,4GAA4G;IAC5G,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,sBAAsB,GACtB,SAAS,GACT,oBAAoB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7D,2GAA2G;IAC3G,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IACxH,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAcD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAqB9H;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,wBAAwB,GAC/B,cAAc,CAwQhB"}
+{"version":3,"file":"delivery-ledger.d.ts","sourceRoot":"","sources":["../../src/server/delivery-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAgB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAWnF;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,GAAG,YAAY,CAAC;AAEjF,+CAA+C;AAC/C,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxF;AACD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,eAAe,CAAC;AAChE,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,kBAAkB,GAClB,cAAc,GACd,OAAO,CAAC;AAEZ,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,6FAA6F;IAC7F,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,oBAAoB,CAAC;CAC5C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAC1C;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAC5C;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,4GAA4G;IAC5G,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,sBAAsB,GACtB,8BAA8B,GAC9B,SAAS,GACT,oBAAoB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7D,2GAA2G;IAC3G,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IACxH,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAcD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAqB9H;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,eAAe,EACnB,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE,qBAAqB,GAC7B,cAAc,CAwRhB"}

package/dist/server/delivery-ledger.js

@@ -18,9 +18,13 @@
  *    opaque `activityGeneration`, resets `seenAt`, and flips the row to
  *    `materialized` — so the "applied but not marked" double-apply window is gone.
  *    Retrying a `materialized` row is a successful no-op.
+ *  - The same transaction asks the app whether the recipient may still receive
+ *    (`options.isRecipientEligible`); an ineligible recipient gets no card and the
+ *    row turns terminal `skipped`, so a row queued before (or retried after) the
+ *    recipient became ineligible can never recreate a card. Re-running it is a no-op.
  *  - TTL (`expireAt`, a real Firestore Timestamp via `config.timestampFromMillis`)
- *    is set ONLY at `materialized`; a `queued` or `deadLetter` row is NEVER TTL'd
- *    (round-19) so an unresolved delivery can't be silently deleted before replay.
+ *    is set ONLY at `materialized` / `skipped`; a `queued` or `deadLetter` row is NEVER TTL'd
+ *    so an unresolved delivery can't be silently deleted before replay.
  */
 import { randomUUID } from 'node:crypto';
 import { buildActiveNotificationDocId } from './activeNotificationId.js';
@@ -67,7 +71,8 @@ export function applyAggregation(params) {
         updatedAt: now,
     };
 }
-export function createDeliveryLedger(db, config) {
+export function createDeliveryLedger(db, config, options) {
+    const { isRecipientEligible } = options;
     const deliveriesPath = config.deliveriesCollectionPath ?? DEFAULT_DELIVERIES_PATH;
     const ttlMs = config.deliveryTtlMs ?? DEFAULT_DELIVERY_TTL_MS;
     const maxAttempts = config.maxDeliveryAttempts ?? DEFAULT_MAX_ATTEMPTS;
@@ -100,7 +105,7 @@ export function createDeliveryLedger(db, config) {
             createdAt: now,
             materializedAt: null,
             deadLetteredAt: null,
-            // No expireAt while queued (round-19).
+            // No expireAt while queued.
         };
     }
     function getTypeConfig(type) {
@@ -139,11 +144,25 @@ export function createDeliveryLedger(db, config) {
             const state = d.state;
             if (state === 'materialized')
                 return 'already-materialized';
+            if (state === 'skipped')
+                return 'skipped-ineligible-recipient';
             if (state !== 'queued')
                 return 'skipped-non-queued';
             const notificationType = d.notificationType;
             const aggregationKey = d.aggregationKey;
             const recipientUid = d.recipientUid ?? null;
+            // The recipient is checked in this transaction, so a recipient that became ineligible
+            // (e.g. an erased account) never gets a card from a row queued before, or retried after.
+            if (recipientUid !== null && !(await isRecipientEligible(recipientUid, tx))) {
+                const skippedAt = Date.now();
+                tx.update(dRef, {
+                    state: 'skipped',
+                    skipReason: 'recipientIneligible',
+                    skippedAt,
+                    expireAt: toTimestamp(skippedAt + ttlMs),
+                });
+                return 'skipped-ineligible-recipient';
+            }
             const strategy = d.strategy ?? 'increment';
             const payload = d.payload ?? { actorId: '', metadata: {}, occurrenceAt: Date.now() };
             const { typeConfig, categoryConfig } = getTypeConfig(notificationType);
@@ -291,7 +310,7 @@ export function createDeliveryLedger(db, config) {
                 nextAttemptAt: Date.now(),
                 lastError: null,
                 deadLetteredAt: null,
-                expireAt: null, // clear any TTL set on a prior terminal (round-19)
+                expireAt: null, // clear any TTL set on a prior terminal
             });
         });
     }
@@ -300,6 +319,7 @@ export function createDeliveryLedger(db, config) {
         const tally = {
             materialized: 0,
             'already-materialized': 0,
+            'skipped-ineligible-recipient': 0,
             missing: 0,
             'skipped-non-queued': 0,
         };

package/dist/server/delivery-ledger.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-ledger.js","sourceRoot":"","sources":["../../src/server/delivery-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAEzE,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AACzD,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AACpE,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AAC3C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AA2DhD,uEAAuE;AACvE,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,CAAC,GAAG,KAAwD,CAAC;IACnE,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,YAAoB;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC3F,2EAA2E;IAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAShC;IACC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAClG,MAAM,UAAU,GAAG,QAAQ,EAAE,cAAc,IAAI,EAAE,CAAC;IAClD,qFAAqF;IACrF,mFAAmF;IACnF,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;QAC5E,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,+EAA+E;IAC/E,MAAM,KAAK,GACT,QAAQ,KAAK,eAAe;QAC1B,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO;QACL,KAAK;QACL,cAAc;QACd,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;QAC5B,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,EAAmB,EACnB,MAAgC;IAEhC,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB,IAAI,uBAAuB,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;IACvE,MAAM,yBAAyB,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7D,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,WAAW,GAA4B,yBAAyB,CAAC;IAEvE,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEjD,SAAS,WAAW,CAAC,UAAkB;QACrC,OAAO,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,gBAAgB,CAAC,GAAqB,EAAE,GAAW;QAC1D,OAAO;YACL,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,QAAyB;YAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,GAAG;YAClB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,uCAAuC;SACxC,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CAAC,IAAY;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,IAAwB;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;aAClC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC,CAAC,CAC7E,CACF,CAAC;QACF,MAAM,OAAO,GAAuB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YACtC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC;YAC7C,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;YAC3E,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,UAAkB;QAC3C,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAsB,CAAC;YACvC,IAAI,KAAK,KAAK,cAAc;gBAAE,OAAO,sBAAsB,CAAC;YAC5D,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,oBAAoB,CAAC;YAEpD,MAAM,gBAAgB,GAAG,CAAC,CAAC,gBAA0B,CAAC;YACtD,MAAM,cAAc,GAAG,CAAC,CAAC,cAAwB,CAAC;YAClD,MAAM,YAAY,GAAI,CAAC,CAAC,YAA8B,IAAI,IAAI,CAAC;YAC/D,MAAM,QAAQ,GAAI,CAAC,CAAC,QAAgC,IAAI,WAAW,CAAC;YACpE,MAAM,OAAO,GAAI,CAAC,CAAC,OAA2B,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC1G,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;YAEvE,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,4BAA4B,CAAC;gBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,YAAY,EAAE,cAAc,CAAC,YAAY;gBACzC,YAAY,EAAE,YAAY;gBAC1B,QAAQ,EAAE,cAAc;gBACxB,gBAAgB;aACjB,CAAC,CACH,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;YAEtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,iBAAiB,CAAC;YAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,iBAAiB,CAAC;YAC1D,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3F,iFAAiF;YACjF,mFAAmF;YACnF,0CAA0C;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxD,4EAA4E;YAC5E,8EAA8E;YAC9E,yEAAyE;YACzE,MAAM,UAAU,GACd,UAAU,CAAC,iBAAiB,KAAK,SAAS;gBACxC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,UAAU,CAAC,iBAAiB,KAAK,UAAU;oBAClD,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAChD,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;YACrC,MAAM,eAAe,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YAEvE,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAsD,CAAC;gBAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC;oBAC7B,QAAQ;oBACR,QAAQ;oBACR,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ;oBACR,QAAQ;oBACR,YAAY;oBACZ,GAAG;oBACH,UAAU;iBACX,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,gBAAgB,CAAC;oBAC7B,QAAQ;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ;oBACR,QAAQ;oBACR,YAAY;oBACZ,GAAG;oBACH,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM,MAAM,GAAgC;oBAC1C,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,cAAc;oBACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,YAAY,EAAE,YAAY;oBAC1B,KAAK;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,GAAG,eAAe;oBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,CAAC;oBACT,kBAAkB,EAAE,UAAU;oBAC9B,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;iBACf,CAAC;gBACF,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,MAAiC,CAAC,CAAC;YACvD,CAAC;YAED,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACd,KAAK,EAAE,cAA+B;gBACtC,cAAc,EAAE,GAAG;gBACnB,QAAQ,EAAE,WAAW,CAAC,GAAG,GAAG,KAAK,CAAC;aACnC,CAAC,CAAC;YACH,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,UAAkB,EAAE,KAAc;QACtE,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,IAAK,CAAC,CAAC,KAAuB,KAAK,QAAQ;gBAAE,OAAO;YACpD,MAAM,YAAY,GAAG,CAAE,CAAC,CAAC,YAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;gBAChC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;oBACd,KAAK,EAAE,YAA6B;oBACpC,YAAY;oBACZ,SAAS,EAAE,OAAO;oBAClB,cAAc,EAAE,GAAG;iBACpB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,0FAA0F;gBAC1F,2FAA2F;gBAC3F,qFAAqF;gBACrF,uFAAuF;gBACvF,oFAAoF;gBACpF,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;oBACd,YAAY;oBACZ,aAAa,EAAE,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC;oBAC5C,SAAS,EAAE,OAAO;oBAClB,oBAAoB,EAAE,OAA+B;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,KAAc;QAC1D,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,IAAK,CAAC,CAAC,KAAuB,KAAK,QAAQ;gBAAE,OAAO;YACpD,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACd,KAAK,EAAE,YAA6B;gBACpC,YAAY,EAAE,CAAE,CAAC,CAAC,YAAuB,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnD,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACjE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,UAAkB;QACtC,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,IAAK,CAAC,CAAC,KAAuB,KAAK,YAAY;gBAAE,OAAO;YACxD,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACd,KAAK,EAAE,QAAyB;gBAChC,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;gBACzB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,IAAI,EAAE,mDAAmD;aACpE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,WAAqB,EACrB,OAAkC;QAElC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAuC;YAChD,YAAY,EAAE,CAAC;YACf,sBAAsB,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;YACV,oBAAoB,EAAE,CAAC;SACxB,CAAC;QACF,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,UAAU,MAAM;YACnB,OAAO,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;oBACtC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC/F,CAAC","sourcesContent":["/**\n * Generic notification delivery ledger (notification redesign — P1).\n *\n * One Firestore doc per (recipient|shared, type, occurrence) is BOTH the queue\n * row AND the idempotency ledger. This package owns the GENERIC mechanism;\n * the consuming app owns the concrete collection name, the deterministic\n * `deliveryId`/`eventId`/`aggregationKey` construction, and the worker that\n * selects rows per `materializationClass`. The app passes fully-formed\n * `DeliveryRowInput`s; this module never invents domain ids.\n *\n * Key invariants (FROZEN — this module is their single source; the consuming app's\n * notification design doc explains the product rationale):\n *  - Enqueue = create-if-absent. `ALREADY_EXISTS` is a per-row duplicate no-op,\n *    never a failure — there is no marker-without-payload state, so the\n *    \"marker created, payload lost\" crash window cannot exist.\n *  - Materialize = ONE transaction that reads the delivery row + active card,\n *    applies the aggregation exactly once (per strategy + caps), rotates the\n *    opaque `activityGeneration`, resets `seenAt`, and flips the row to\n *    `materialized` — so the \"applied but not marked\" double-apply window is gone.\n *    Retrying a `materialized` row is a successful no-op.\n *  - TTL (`expireAt`, a real Firestore Timestamp via `config.timestampFromMillis`)\n *    is set ONLY at `materialized`; a `queued` or `deadLetter` row is NEVER TTL'd\n *    (round-19) so an unresolved delivery can't be silently deleted before replay.\n */\n\nimport { randomUUID } from 'node:crypto';\nimport type { NotificationSystemConfig, NotificationDoc } from '../types.js';\nimport type { ServerFirestore, ServerDocRef } from './types.js';\nimport { buildActiveNotificationDocId } from './activeNotificationId.js';\n\nconst DEFAULT_DELIVERIES_PATH = 'notificationDeliveries';\nconst DEFAULT_DELIVERY_TTL_MS = 90 * 24 * 60 * 60 * 1000; // 90 days\nconst DEFAULT_MAX_ATTEMPTS = 8;\nconst DEFAULT_COUNT_CAP = 5000;\nconst DEFAULT_ACTOR_CAP = 5;\nconst BACKOFF_BASE_MS = 60 * 1000; // 1 min\nconst BACKOFF_MAX_MS = 60 * 60 * 1000; // 1 hour\n\nexport type DeliveryState = 'queued' | 'materialized' | 'deadLetter';\nexport type AggregationStrategy = 'increment' | 'staticRelight';\nexport type MaterializationClass =\n  | 'directQueued'\n  | 'realtimeFallback'\n  | 'fanoutOrphan'\n  | 'retry';\n\n/** The materialization payload carried on every delivery row. */\nexport interface DeliveryPayload {\n  /** The acting user's uid, or `null`/`''` for a system / no-actor occurrence (N-M2). */\n  actorId: string | null;\n  metadata: Record<string, unknown>;\n  occurrenceAt: number;\n}\n\n/** App-supplied, fully-formed delivery row (the app owns all id construction). */\nexport interface DeliveryRowInput {\n  deliveryId: string;\n  notificationType: string;\n  eventId: string;\n  /** `null` for shared-admin occurrences (the deliveryId hash uses the literal `'shared'`). */\n  recipientUid: string | null;\n  aggregationKey: string;\n  strategy: AggregationStrategy;\n  payload: DeliveryPayload;\n  payloadVersion: number;\n  materializationClass: MaterializationClass;\n}\n\nexport type EnqueueRowResult =\n  | { deliveryId: string; outcome: 'created' }\n  | { deliveryId: string; outcome: 'duplicate' }\n  | { deliveryId: string; outcome: 'failed'; error: unknown };\n\nexport interface EnqueueResult {\n  results: EnqueueRowResult[];\n  /** True iff EVERY row is now represented by a created-or-pre-existing doc (page-cursor invariant input). */\n  allResolved: boolean;\n}\n\nexport type MaterializeOutcome =\n  | 'materialized'\n  | 'already-materialized'\n  | 'missing'\n  | 'skipped-non-queued';\n\nexport interface DeliveryLedger {\n  enqueue(rows: DeliveryRowInput[]): Promise<EnqueueResult>;\n  materialize(deliveryId: string): Promise<MaterializeOutcome>;\n  /** Materialize many rows with bounded concurrency; transient throws record a retry/dead-letter outcome. */\n  materializeMany(deliveryIds: string[], options?: { concurrency?: number }): Promise<Record<MaterializeOutcome, number>>;\n  recordTransientFailure(deliveryId: string, error: unknown): Promise<void>;\n  deadLetter(deliveryId: string, error: unknown): Promise<void>;\n  replay(deliveryId: string): Promise<void>;\n}\n\n/** gRPC ALREADY_EXISTS (6) — the create-if-absent duplicate signal. */\nfunction isAlreadyExists(error: unknown): boolean {\n  const e = error as { code?: number; message?: string } | undefined;\n  return e?.code === 6 || /already.?exists/i.test(e?.message ?? '');\n}\n\nfunction backoffMs(attemptCount: number): number {\n  const exp = Math.min(BACKOFF_BASE_MS * 2 ** Math.max(0, attemptCount - 1), BACKOFF_MAX_MS);\n  // Full jitter — spread retries so a burst of failures doesn't synchronize.\n  return Math.floor(exp / 2 + Math.random() * (exp / 2));\n}\n\n/**\n * Apply the aggregation strategy to produce the active-doc field delta.\n * PURE — exported for direct unit testing. `existing` is the current active doc\n * (or null to create). Always rotates `activityGeneration` and resets `seenAt`.\n */\nexport function applyAggregation(params: {\n  strategy: AggregationStrategy;\n  existing: Pick<NotificationDoc, 'count' | 'latestActorIds'> | null;\n  actorId: string | null;\n  countCap: number;\n  actorCap: number;\n  buildMessage: (count: number) => string;\n  now: number;\n  generation: string;\n}): { count: number; latestActorIds: string[]; message: string; activityGeneration: string; seenAt: number; updatedAt: number } {\n  const { strategy, existing, actorId, countCap, actorCap, buildMessage, now, generation } = params;\n  const prevActors = existing?.latestActorIds ?? [];\n  // N-M2: a system / no-actor occurrence (null or '') is never injected into the actor\n  // list — it would render as a blank avatar / unresolvable uid in `latestActorIds`.\n  const latestActorIds = actorId\n    ? [actorId, ...prevActors.filter((id) => id !== actorId)].slice(0, actorCap)\n    : prevActors.slice(0, actorCap);\n  // staticRelight never shows a count (stays 1); increment counts up to the cap.\n  const count =\n    strategy === 'staticRelight'\n      ? 1\n      : Math.min((existing?.count ?? 0) + 1, countCap);\n  return {\n    count,\n    latestActorIds,\n    message: buildMessage(count),\n    activityGeneration: generation,\n    seenAt: 0,\n    updatedAt: now,\n  };\n}\n\nexport function createDeliveryLedger(\n  db: ServerFirestore,\n  config: NotificationSystemConfig,\n): DeliveryLedger {\n  const deliveriesPath = config.deliveriesCollectionPath ?? DEFAULT_DELIVERIES_PATH;\n  const ttlMs = config.deliveryTtlMs ?? DEFAULT_DELIVERY_TTL_MS;\n  const maxAttempts = config.maxDeliveryAttempts ?? DEFAULT_MAX_ATTEMPTS;\n  const configTimestampFromMillis = config.timestampFromMillis;\n  if (!configTimestampFromMillis) {\n    throw new Error(\n      '[notification-core] createDeliveryLedger requires config.timestampFromMillis (Firestore TTL needs a real Timestamp for expireAt).',\n    );\n  }\n  // Bind to an explicitly non-optional type so the nested transaction closures\n  // (called later) see it as defined, not `... | undefined`.\n  const toTimestamp: (ms: number) => unknown = configTimestampFromMillis;\n\n  const deliveries = db.collection(deliveriesPath);\n\n  function deliveryRef(deliveryId: string): ServerDocRef {\n    return deliveries.doc(deliveryId);\n  }\n\n  function buildDeliveryDoc(row: DeliveryRowInput, now: number): Record<string, unknown> {\n    return {\n      deliveryId: row.deliveryId,\n      state: 'queued' as DeliveryState,\n      notificationType: row.notificationType,\n      eventId: row.eventId,\n      recipientUid: row.recipientUid,\n      aggregationKey: row.aggregationKey,\n      strategy: row.strategy,\n      payload: row.payload,\n      payloadVersion: row.payloadVersion,\n      materializationClass: row.materializationClass,\n      attemptCount: 0,\n      nextAttemptAt: now,\n      lastError: null,\n      createdAt: now,\n      materializedAt: null,\n      deadLetteredAt: null,\n      // No expireAt while queued (round-19).\n    };\n  }\n\n  function getTypeConfig(type: string) {\n    const typeConfig = config.types[type];\n    if (!typeConfig) throw new Error(`[notification-core] Unknown notification type: ${type}`);\n    const categoryConfig = config.categories[typeConfig.category];\n    if (!categoryConfig) throw new Error(`[notification-core] Unknown category: ${typeConfig.category}`);\n    return { typeConfig, categoryConfig };\n  }\n\n  async function enqueue(rows: DeliveryRowInput[]): Promise<EnqueueResult> {\n    if (rows.length === 0) return { results: [], allResolved: true };\n    const now = Date.now();\n    const settled = await Promise.allSettled(\n      rows.map((row) =>\n        deliveryRef(row.deliveryId)\n          .create(buildDeliveryDoc(row, now))\n          .then(() => ({ deliveryId: row.deliveryId, outcome: 'created' as const })),\n      ),\n    );\n    const results: EnqueueRowResult[] = settled.map((s, i) => {\n      const deliveryId = rows[i].deliveryId;\n      if (s.status === 'fulfilled') return s.value;\n      if (isAlreadyExists(s.reason)) return { deliveryId, outcome: 'duplicate' };\n      return { deliveryId, outcome: 'failed', error: s.reason };\n    });\n    return { results, allResolved: results.every((r) => r.outcome !== 'failed') };\n  }\n\n  async function materialize(deliveryId: string): Promise<MaterializeOutcome> {\n    return db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return 'missing';\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      const state = d.state as DeliveryState;\n      if (state === 'materialized') return 'already-materialized';\n      if (state !== 'queued') return 'skipped-non-queued';\n\n      const notificationType = d.notificationType as string;\n      const aggregationKey = d.aggregationKey as string;\n      const recipientUid = (d.recipientUid as string | null) ?? null;\n      const strategy = (d.strategy as AggregationStrategy) ?? 'increment';\n      const payload = (d.payload as DeliveryPayload) ?? { actorId: '', metadata: {}, occurrenceAt: Date.now() };\n      const { typeConfig, categoryConfig } = getTypeConfig(notificationType);\n\n      const activeRef = db.collection(categoryConfig.activePath).doc(\n        buildActiveNotificationDocId({\n          category: typeConfig.category,\n          audienceType: categoryConfig.audienceType,\n          targetUserId: recipientUid,\n          dedupKey: aggregationKey,\n          notificationType,\n        }),\n      );\n      const activeSnap = await tx.get(activeRef); // all reads before writes\n\n      const now = Date.now();\n      const generation = randomUUID();\n      const countCap = typeConfig.countCap ?? DEFAULT_COUNT_CAP;\n      const actorCap = typeConfig.actorCap ?? DEFAULT_ACTOR_CAP;\n      const buildMessage = (count: number) => typeConfig.messagePattern(payload.metadata, count);\n      // Latest-occurrence-derived fields — recomputed every materialize so an EXISTING\n      // aggregate card reflects the newest activity (title/targetPath/metadata), not the\n      // first occurrence's stale values (N-I4).\n      const title = typeConfig.titlePattern(payload.metadata);\n      // A type with no defaultTargetPath is linkless: the doc must OMIT the field\n      // entirely (Firestore rejects `undefined` values). A pre-existing doc written\n      // before a type went linkless keeps its stale targetPath until archived.\n      const targetPath =\n        typeConfig.defaultTargetPath === undefined\n          ? undefined\n          : typeof typeConfig.defaultTargetPath === 'function'\n            ? typeConfig.defaultTargetPath(payload.metadata)\n            : typeConfig.defaultTargetPath;\n      const targetPathField = targetPath === undefined ? {} : { targetPath };\n\n      if (activeSnap.exists) {\n        const existing = (activeSnap.data() ?? {}) as Pick<NotificationDoc, 'count' | 'latestActorIds'>;\n        const delta = applyAggregation({\n          strategy,\n          existing,\n          actorId: payload.actorId,\n          countCap,\n          actorCap,\n          buildMessage,\n          now,\n          generation,\n        });\n        tx.update(activeRef, { ...delta, title, ...targetPathField, metadata: payload.metadata });\n      } else {\n        const delta = applyAggregation({\n          strategy,\n          existing: null,\n          actorId: payload.actorId,\n          countCap,\n          actorCap,\n          buildMessage,\n          now,\n          generation,\n        });\n        const newDoc: Omit<NotificationDoc, 'id'> = {\n          type: notificationType,\n          dedupKey: aggregationKey,\n          category: typeConfig.category,\n          targetUserId: recipientUid,\n          title,\n          message: delta.message,\n          count: delta.count,\n          latestActorIds: delta.latestActorIds,\n          ...targetPathField,\n          metadata: payload.metadata,\n          seenAt: 0,\n          activityGeneration: generation,\n          createdAt: now,\n          updatedAt: now,\n        };\n        tx.set(activeRef, newDoc as Record<string, unknown>);\n      }\n\n      tx.update(dRef, {\n        state: 'materialized' as DeliveryState,\n        materializedAt: now,\n        expireAt: toTimestamp(now + ttlMs),\n      });\n      return 'materialized';\n    });\n  }\n\n  async function recordTransientFailure(deliveryId: string, error: unknown): Promise<void> {\n    await db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return;\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      if ((d.state as DeliveryState) !== 'queued') return;\n      const attemptCount = ((d.attemptCount as number) ?? 0) + 1;\n      const now = Date.now();\n      const message = error instanceof Error ? error.message : String(error);\n      if (attemptCount >= maxAttempts) {\n        tx.update(dRef, {\n          state: 'deadLetter' as DeliveryState,\n          attemptCount,\n          lastError: message,\n          deadLetteredAt: now,\n        });\n      } else {\n        // n1: re-stamp the row into the reserved `retry` materialization lane on backoff. Without\n        // this the row keeps its original class and competes for that lane's capacity while backed\n        // off; the worker's reserved `retry` slice (separate CLASS_CAPS capacity, drained in\n        // DRAIN_ORDER) would always select 0 rows. Re-stamping moves a backed-off row into the\n        // anti-starvation lane so it drains there instead of starving in its original lane.\n        tx.update(dRef, {\n          attemptCount,\n          nextAttemptAt: now + backoffMs(attemptCount),\n          lastError: message,\n          materializationClass: 'retry' as MaterializationClass,\n        });\n      }\n    });\n  }\n\n  async function deadLetter(deliveryId: string, error: unknown): Promise<void> {\n    await db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return;\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      if ((d.state as DeliveryState) !== 'queued') return;\n      tx.update(dRef, {\n        state: 'deadLetter' as DeliveryState,\n        attemptCount: ((d.attemptCount as number) ?? 0) + 1,\n        lastError: error instanceof Error ? error.message : String(error),\n        deadLetteredAt: Date.now(),\n      });\n    });\n  }\n\n  async function replay(deliveryId: string): Promise<void> {\n    await db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return;\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      if ((d.state as DeliveryState) !== 'deadLetter') return;\n      tx.update(dRef, {\n        state: 'queued' as DeliveryState,\n        attemptCount: 0,\n        nextAttemptAt: Date.now(),\n        lastError: null,\n        deadLetteredAt: null,\n        expireAt: null, // clear any TTL set on a prior terminal (round-19)\n      });\n    });\n  }\n\n  async function materializeMany(\n    deliveryIds: string[],\n    options?: { concurrency?: number },\n  ): Promise<Record<MaterializeOutcome, number>> {\n    const concurrency = Math.max(1, options?.concurrency ?? 10);\n    const tally: Record<MaterializeOutcome, number> = {\n      materialized: 0,\n      'already-materialized': 0,\n      missing: 0,\n      'skipped-non-queued': 0,\n    };\n    let cursor = 0;\n    async function worker(): Promise<void> {\n      while (cursor < deliveryIds.length) {\n        const id = deliveryIds[cursor++];\n        try {\n          const outcome = await materialize(id);\n          tally[outcome] += 1;\n        } catch (error) {\n          await recordTransientFailure(id, error);\n        }\n      }\n    }\n    await Promise.all(Array.from({ length: Math.min(concurrency, deliveryIds.length) }, worker));\n    return tally;\n  }\n\n  return { enqueue, materialize, materializeMany, recordTransientFailure, deadLetter, replay };\n}\n"]}
+{"version":3,"file":"delivery-ledger.js","sourceRoot":"","sources":["../../src/server/delivery-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAEzE,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AACzD,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AACpE,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AAC3C,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAiFhD,uEAAuE;AACvE,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,CAAC,GAAG,KAAwD,CAAC;IACnE,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,YAAoB;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC3F,2EAA2E;IAC3E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAShC;IACC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAClG,MAAM,UAAU,GAAG,QAAQ,EAAE,cAAc,IAAI,EAAE,CAAC;IAClD,qFAAqF;IACrF,mFAAmF;IACnF,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;QAC5E,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,+EAA+E;IAC/E,MAAM,KAAK,GACT,QAAQ,KAAK,eAAe;QAC1B,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO;QACL,KAAK;QACL,cAAc;QACd,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;QAC5B,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,EAAmB,EACnB,MAAgC,EAChC,OAA8B;IAE9B,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,cAAc,GAAG,MAAM,CAAC,wBAAwB,IAAI,uBAAuB,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;IACvE,MAAM,yBAAyB,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7D,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,WAAW,GAA4B,yBAAyB,CAAC;IAEvE,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEjD,SAAS,WAAW,CAAC,UAAkB;QACrC,OAAO,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,SAAS,gBAAgB,CAAC,GAAqB,EAAE,GAAW;QAC1D,OAAO;YACL,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,QAAyB;YAChC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;YAC9C,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,GAAG;YAClB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,4BAA4B;SAC7B,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CAAC,IAAY;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,IAAwB;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;aAClC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAkB,EAAE,CAAC,CAAC,CAC7E,CACF,CAAC;QACF,MAAM,OAAO,GAAuB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YACtC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC;YAC7C,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;YAC3E,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,UAAkB;QAC3C,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAsB,CAAC;YACvC,IAAI,KAAK,KAAK,cAAc;gBAAE,OAAO,sBAAsB,CAAC;YAC5D,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,8BAA8B,CAAC;YAC/D,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,oBAAoB,CAAC;YAEpD,MAAM,gBAAgB,GAAG,CAAC,CAAC,gBAA0B,CAAC;YACtD,MAAM,cAAc,GAAG,CAAC,CAAC,cAAwB,CAAC;YAClD,MAAM,YAAY,GAAI,CAAC,CAAC,YAA8B,IAAI,IAAI,CAAC;YAE/D,sFAAsF;YACtF,yFAAyF;YACzF,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;oBACd,KAAK,EAAE,SAA0B;oBACjC,UAAU,EAAE,qBAA2C;oBACvD,SAAS;oBACT,QAAQ,EAAE,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC;iBACzC,CAAC,CAAC;gBACH,OAAO,8BAA8B,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAI,CAAC,CAAC,QAAgC,IAAI,WAAW,CAAC;YACpE,MAAM,OAAO,GAAI,CAAC,CAAC,OAA2B,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC1G,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;YAEvE,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,4BAA4B,CAAC;gBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,YAAY,EAAE,cAAc,CAAC,YAAY;gBACzC,YAAY,EAAE,YAAY;gBAC1B,QAAQ,EAAE,cAAc;gBACxB,gBAAgB;aACjB,CAAC,CACH,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;YAEtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,iBAAiB,CAAC;YAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,iBAAiB,CAAC;YAC1D,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3F,iFAAiF;YACjF,mFAAmF;YACnF,0CAA0C;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxD,4EAA4E;YAC5E,8EAA8E;YAC9E,yEAAyE;YACzE,MAAM,UAAU,GACd,UAAU,CAAC,iBAAiB,KAAK,SAAS;gBACxC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,UAAU,CAAC,iBAAiB,KAAK,UAAU;oBAClD,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAChD,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC;YACrC,MAAM,eAAe,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YAEvE,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAsD,CAAC;gBAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC;oBAC7B,QAAQ;oBACR,QAAQ;oBACR,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ;oBACR,QAAQ;oBACR,YAAY;oBACZ,GAAG;oBACH,UAAU;iBACX,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,gBAAgB,CAAC;oBAC7B,QAAQ;oBACR,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ;oBACR,QAAQ;oBACR,YAAY;oBACZ,GAAG;oBACH,UAAU;iBACX,CAAC,CAAC;gBACH,MAAM,MAAM,GAAgC;oBAC1C,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,cAAc;oBACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,YAAY,EAAE,YAAY;oBAC1B,KAAK;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,GAAG,eAAe;oBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,MAAM,EAAE,CAAC;oBACT,kBAAkB,EAAE,UAAU;oBAC9B,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;iBACf,CAAC;gBACF,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,MAAiC,CAAC,CAAC;YACvD,CAAC;YAED,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACd,KAAK,EAAE,cAA+B;gBACtC,cAAc,EAAE,GAAG;gBACnB,QAAQ,EAAE,WAAW,CAAC,GAAG,GAAG,KAAK,CAAC;aACnC,CAAC,CAAC;YACH,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,UAAkB,EAAE,KAAc;QACtE,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,IAAK,CAAC,CAAC,KAAuB,KAAK,QAAQ;gBAAE,OAAO;YACpD,MAAM,YAAY,GAAG,CAAE,CAAC,CAAC,YAAuB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;gBAChC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;oBACd,KAAK,EAAE,YAA6B;oBACpC,YAAY;oBACZ,SAAS,EAAE,OAAO;oBAClB,cAAc,EAAE,GAAG;iBACpB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,0FAA0F;gBAC1F,2FAA2F;gBAC3F,qFAAqF;gBACrF,uFAAuF;gBACvF,oFAAoF;gBACpF,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;oBACd,YAAY;oBACZ,aAAa,EAAE,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC;oBAC5C,SAAS,EAAE,OAAO;oBAClB,oBAAoB,EAAE,OAA+B;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,KAAc;QAC1D,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,IAAK,CAAC,CAAC,KAAuB,KAAK,QAAQ;gBAAE,OAAO;YACpD,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACd,KAAK,EAAE,YAA6B;gBACpC,YAAY,EAAE,CAAE,CAAC,CAAC,YAAuB,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnD,SAAS,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACjE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,UAAkB;QACtC,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO;YAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC1D,IAAK,CAAC,CAAC,KAAuB,KAAK,YAAY;gBAAE,OAAO;YACxD,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;gBACd,KAAK,EAAE,QAAyB;gBAChC,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;gBACzB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,IAAI,EAAE,wCAAwC;aACzD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,WAAqB,EACrB,OAAkC;QAElC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAuC;YAChD,YAAY,EAAE,CAAC;YACf,sBAAsB,EAAE,CAAC;YACzB,8BAA8B,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;YACV,oBAAoB,EAAE,CAAC;SACxB,CAAC;QACF,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,UAAU,MAAM;YACnB,OAAO,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;gBACnC,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;oBACtC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC/F,CAAC","sourcesContent":["/**\n * Generic notification delivery ledger (notification redesign — P1).\n *\n * One Firestore doc per (recipient|shared, type, occurrence) is BOTH the queue\n * row AND the idempotency ledger. This package owns the GENERIC mechanism;\n * the consuming app owns the concrete collection name, the deterministic\n * `deliveryId`/`eventId`/`aggregationKey` construction, and the worker that\n * selects rows per `materializationClass`. The app passes fully-formed\n * `DeliveryRowInput`s; this module never invents domain ids.\n *\n * Key invariants (FROZEN — this module is their single source; the consuming app's\n * notification design doc explains the product rationale):\n *  - Enqueue = create-if-absent. `ALREADY_EXISTS` is a per-row duplicate no-op,\n *    never a failure — there is no marker-without-payload state, so the\n *    \"marker created, payload lost\" crash window cannot exist.\n *  - Materialize = ONE transaction that reads the delivery row + active card,\n *    applies the aggregation exactly once (per strategy + caps), rotates the\n *    opaque `activityGeneration`, resets `seenAt`, and flips the row to\n *    `materialized` — so the \"applied but not marked\" double-apply window is gone.\n *    Retrying a `materialized` row is a successful no-op.\n *  - The same transaction asks the app whether the recipient may still receive\n *    (`options.isRecipientEligible`); an ineligible recipient gets no card and the\n *    row turns terminal `skipped`, so a row queued before (or retried after) the\n *    recipient became ineligible can never recreate a card. Re-running it is a no-op.\n *  - TTL (`expireAt`, a real Firestore Timestamp via `config.timestampFromMillis`)\n *    is set ONLY at `materialized` / `skipped`; a `queued` or `deadLetter` row is NEVER TTL'd\n *    so an unresolved delivery can't be silently deleted before replay.\n */\n\nimport { randomUUID } from 'node:crypto';\nimport type { NotificationSystemConfig, NotificationDoc } from '../types.js';\nimport type { ServerFirestore, ServerDocRef, ServerTransaction } from './types.js';\nimport { buildActiveNotificationDocId } from './activeNotificationId.js';\n\nconst DEFAULT_DELIVERIES_PATH = 'notificationDeliveries';\nconst DEFAULT_DELIVERY_TTL_MS = 90 * 24 * 60 * 60 * 1000; // 90 days\nconst DEFAULT_MAX_ATTEMPTS = 8;\nconst DEFAULT_COUNT_CAP = 5000;\nconst DEFAULT_ACTOR_CAP = 5;\nconst BACKOFF_BASE_MS = 60 * 1000; // 1 min\nconst BACKOFF_MAX_MS = 60 * 60 * 1000; // 1 hour\n\n/**\n * `skipped` is terminal: the recipient was not eligible when the row was materialized, so no card\n * was written. It is TTL'd like `materialized` and never retried.\n */\nexport type DeliveryState = 'queued' | 'materialized' | 'skipped' | 'deadLetter';\n\n/** Why a row was terminalized as `skipped`. */\nexport type DeliverySkipReason = 'recipientIneligible';\n\n/**\n * Ledger options the consuming app must decide.\n */\nexport interface DeliveryLedgerOptions {\n  /**\n   * Whether `recipientUid` may still receive a notification. Called INSIDE the materialize\n   * transaction, after the delivery row is read and before anything is written, so the answer\n   * and the card write commit together (BACKEND-116): read through `tx` only. A recipient that\n   * answers false gets no card, and the row becomes `skipped`. Not called for a shared\n   * (recipient-less) row. A consumer with no eligibility rule answers true.\n   */\n  isRecipientEligible: (recipientUid: string, tx: ServerTransaction) => Promise<boolean>;\n}\nexport type AggregationStrategy = 'increment' | 'staticRelight';\nexport type MaterializationClass =\n  | 'directQueued'\n  | 'realtimeFallback'\n  | 'fanoutOrphan'\n  | 'retry';\n\n/** The materialization payload carried on every delivery row. */\nexport interface DeliveryPayload {\n  /** The acting user's uid, or `null`/`''` for a system / no-actor occurrence (N-M2). */\n  actorId: string | null;\n  metadata: Record<string, unknown>;\n  occurrenceAt: number;\n}\n\n/** App-supplied, fully-formed delivery row (the app owns all id construction). */\nexport interface DeliveryRowInput {\n  deliveryId: string;\n  notificationType: string;\n  eventId: string;\n  /** `null` for shared-admin occurrences (the deliveryId hash uses the literal `'shared'`). */\n  recipientUid: string | null;\n  aggregationKey: string;\n  strategy: AggregationStrategy;\n  payload: DeliveryPayload;\n  payloadVersion: number;\n  materializationClass: MaterializationClass;\n}\n\nexport type EnqueueRowResult =\n  | { deliveryId: string; outcome: 'created' }\n  | { deliveryId: string; outcome: 'duplicate' }\n  | { deliveryId: string; outcome: 'failed'; error: unknown };\n\nexport interface EnqueueResult {\n  results: EnqueueRowResult[];\n  /** True iff EVERY row is now represented by a created-or-pre-existing doc (page-cursor invariant input). */\n  allResolved: boolean;\n}\n\nexport type MaterializeOutcome =\n  | 'materialized'\n  | 'already-materialized'\n  | 'skipped-ineligible-recipient'\n  | 'missing'\n  | 'skipped-non-queued';\n\nexport interface DeliveryLedger {\n  enqueue(rows: DeliveryRowInput[]): Promise<EnqueueResult>;\n  materialize(deliveryId: string): Promise<MaterializeOutcome>;\n  /** Materialize many rows with bounded concurrency; transient throws record a retry/dead-letter outcome. */\n  materializeMany(deliveryIds: string[], options?: { concurrency?: number }): Promise<Record<MaterializeOutcome, number>>;\n  recordTransientFailure(deliveryId: string, error: unknown): Promise<void>;\n  deadLetter(deliveryId: string, error: unknown): Promise<void>;\n  replay(deliveryId: string): Promise<void>;\n}\n\n/** gRPC ALREADY_EXISTS (6) — the create-if-absent duplicate signal. */\nfunction isAlreadyExists(error: unknown): boolean {\n  const e = error as { code?: number; message?: string } | undefined;\n  return e?.code === 6 || /already.?exists/i.test(e?.message ?? '');\n}\n\nfunction backoffMs(attemptCount: number): number {\n  const exp = Math.min(BACKOFF_BASE_MS * 2 ** Math.max(0, attemptCount - 1), BACKOFF_MAX_MS);\n  // Full jitter — spread retries so a burst of failures doesn't synchronize.\n  return Math.floor(exp / 2 + Math.random() * (exp / 2));\n}\n\n/**\n * Apply the aggregation strategy to produce the active-doc field delta.\n * PURE — exported for direct unit testing. `existing` is the current active doc\n * (or null to create). Always rotates `activityGeneration` and resets `seenAt`.\n */\nexport function applyAggregation(params: {\n  strategy: AggregationStrategy;\n  existing: Pick<NotificationDoc, 'count' | 'latestActorIds'> | null;\n  actorId: string | null;\n  countCap: number;\n  actorCap: number;\n  buildMessage: (count: number) => string;\n  now: number;\n  generation: string;\n}): { count: number; latestActorIds: string[]; message: string; activityGeneration: string; seenAt: number; updatedAt: number } {\n  const { strategy, existing, actorId, countCap, actorCap, buildMessage, now, generation } = params;\n  const prevActors = existing?.latestActorIds ?? [];\n  // N-M2: a system / no-actor occurrence (null or '') is never injected into the actor\n  // list — it would render as a blank avatar / unresolvable uid in `latestActorIds`.\n  const latestActorIds = actorId\n    ? [actorId, ...prevActors.filter((id) => id !== actorId)].slice(0, actorCap)\n    : prevActors.slice(0, actorCap);\n  // staticRelight never shows a count (stays 1); increment counts up to the cap.\n  const count =\n    strategy === 'staticRelight'\n      ? 1\n      : Math.min((existing?.count ?? 0) + 1, countCap);\n  return {\n    count,\n    latestActorIds,\n    message: buildMessage(count),\n    activityGeneration: generation,\n    seenAt: 0,\n    updatedAt: now,\n  };\n}\n\nexport function createDeliveryLedger(\n  db: ServerFirestore,\n  config: NotificationSystemConfig,\n  options: DeliveryLedgerOptions,\n): DeliveryLedger {\n  const { isRecipientEligible } = options;\n  const deliveriesPath = config.deliveriesCollectionPath ?? DEFAULT_DELIVERIES_PATH;\n  const ttlMs = config.deliveryTtlMs ?? DEFAULT_DELIVERY_TTL_MS;\n  const maxAttempts = config.maxDeliveryAttempts ?? DEFAULT_MAX_ATTEMPTS;\n  const configTimestampFromMillis = config.timestampFromMillis;\n  if (!configTimestampFromMillis) {\n    throw new Error(\n      '[notification-core] createDeliveryLedger requires config.timestampFromMillis (Firestore TTL needs a real Timestamp for expireAt).',\n    );\n  }\n  // Bind to an explicitly non-optional type so the nested transaction closures\n  // (called later) see it as defined, not `... | undefined`.\n  const toTimestamp: (ms: number) => unknown = configTimestampFromMillis;\n\n  const deliveries = db.collection(deliveriesPath);\n\n  function deliveryRef(deliveryId: string): ServerDocRef {\n    return deliveries.doc(deliveryId);\n  }\n\n  function buildDeliveryDoc(row: DeliveryRowInput, now: number): Record<string, unknown> {\n    return {\n      deliveryId: row.deliveryId,\n      state: 'queued' as DeliveryState,\n      notificationType: row.notificationType,\n      eventId: row.eventId,\n      recipientUid: row.recipientUid,\n      aggregationKey: row.aggregationKey,\n      strategy: row.strategy,\n      payload: row.payload,\n      payloadVersion: row.payloadVersion,\n      materializationClass: row.materializationClass,\n      attemptCount: 0,\n      nextAttemptAt: now,\n      lastError: null,\n      createdAt: now,\n      materializedAt: null,\n      deadLetteredAt: null,\n      // No expireAt while queued.\n    };\n  }\n\n  function getTypeConfig(type: string) {\n    const typeConfig = config.types[type];\n    if (!typeConfig) throw new Error(`[notification-core] Unknown notification type: ${type}`);\n    const categoryConfig = config.categories[typeConfig.category];\n    if (!categoryConfig) throw new Error(`[notification-core] Unknown category: ${typeConfig.category}`);\n    return { typeConfig, categoryConfig };\n  }\n\n  async function enqueue(rows: DeliveryRowInput[]): Promise<EnqueueResult> {\n    if (rows.length === 0) return { results: [], allResolved: true };\n    const now = Date.now();\n    const settled = await Promise.allSettled(\n      rows.map((row) =>\n        deliveryRef(row.deliveryId)\n          .create(buildDeliveryDoc(row, now))\n          .then(() => ({ deliveryId: row.deliveryId, outcome: 'created' as const })),\n      ),\n    );\n    const results: EnqueueRowResult[] = settled.map((s, i) => {\n      const deliveryId = rows[i].deliveryId;\n      if (s.status === 'fulfilled') return s.value;\n      if (isAlreadyExists(s.reason)) return { deliveryId, outcome: 'duplicate' };\n      return { deliveryId, outcome: 'failed', error: s.reason };\n    });\n    return { results, allResolved: results.every((r) => r.outcome !== 'failed') };\n  }\n\n  async function materialize(deliveryId: string): Promise<MaterializeOutcome> {\n    return db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return 'missing';\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      const state = d.state as DeliveryState;\n      if (state === 'materialized') return 'already-materialized';\n      if (state === 'skipped') return 'skipped-ineligible-recipient';\n      if (state !== 'queued') return 'skipped-non-queued';\n\n      const notificationType = d.notificationType as string;\n      const aggregationKey = d.aggregationKey as string;\n      const recipientUid = (d.recipientUid as string | null) ?? null;\n\n      // The recipient is checked in this transaction, so a recipient that became ineligible\n      // (e.g. an erased account) never gets a card from a row queued before, or retried after.\n      if (recipientUid !== null && !(await isRecipientEligible(recipientUid, tx))) {\n        const skippedAt = Date.now();\n        tx.update(dRef, {\n          state: 'skipped' as DeliveryState,\n          skipReason: 'recipientIneligible' as DeliverySkipReason,\n          skippedAt,\n          expireAt: toTimestamp(skippedAt + ttlMs),\n        });\n        return 'skipped-ineligible-recipient';\n      }\n      const strategy = (d.strategy as AggregationStrategy) ?? 'increment';\n      const payload = (d.payload as DeliveryPayload) ?? { actorId: '', metadata: {}, occurrenceAt: Date.now() };\n      const { typeConfig, categoryConfig } = getTypeConfig(notificationType);\n\n      const activeRef = db.collection(categoryConfig.activePath).doc(\n        buildActiveNotificationDocId({\n          category: typeConfig.category,\n          audienceType: categoryConfig.audienceType,\n          targetUserId: recipientUid,\n          dedupKey: aggregationKey,\n          notificationType,\n        }),\n      );\n      const activeSnap = await tx.get(activeRef); // all reads before writes\n\n      const now = Date.now();\n      const generation = randomUUID();\n      const countCap = typeConfig.countCap ?? DEFAULT_COUNT_CAP;\n      const actorCap = typeConfig.actorCap ?? DEFAULT_ACTOR_CAP;\n      const buildMessage = (count: number) => typeConfig.messagePattern(payload.metadata, count);\n      // Latest-occurrence-derived fields — recomputed every materialize so an EXISTING\n      // aggregate card reflects the newest activity (title/targetPath/metadata), not the\n      // first occurrence's stale values (N-I4).\n      const title = typeConfig.titlePattern(payload.metadata);\n      // A type with no defaultTargetPath is linkless: the doc must OMIT the field\n      // entirely (Firestore rejects `undefined` values). A pre-existing doc written\n      // before a type went linkless keeps its stale targetPath until archived.\n      const targetPath =\n        typeConfig.defaultTargetPath === undefined\n          ? undefined\n          : typeof typeConfig.defaultTargetPath === 'function'\n            ? typeConfig.defaultTargetPath(payload.metadata)\n            : typeConfig.defaultTargetPath;\n      const targetPathField = targetPath === undefined ? {} : { targetPath };\n\n      if (activeSnap.exists) {\n        const existing = (activeSnap.data() ?? {}) as Pick<NotificationDoc, 'count' | 'latestActorIds'>;\n        const delta = applyAggregation({\n          strategy,\n          existing,\n          actorId: payload.actorId,\n          countCap,\n          actorCap,\n          buildMessage,\n          now,\n          generation,\n        });\n        tx.update(activeRef, { ...delta, title, ...targetPathField, metadata: payload.metadata });\n      } else {\n        const delta = applyAggregation({\n          strategy,\n          existing: null,\n          actorId: payload.actorId,\n          countCap,\n          actorCap,\n          buildMessage,\n          now,\n          generation,\n        });\n        const newDoc: Omit<NotificationDoc, 'id'> = {\n          type: notificationType,\n          dedupKey: aggregationKey,\n          category: typeConfig.category,\n          targetUserId: recipientUid,\n          title,\n          message: delta.message,\n          count: delta.count,\n          latestActorIds: delta.latestActorIds,\n          ...targetPathField,\n          metadata: payload.metadata,\n          seenAt: 0,\n          activityGeneration: generation,\n          createdAt: now,\n          updatedAt: now,\n        };\n        tx.set(activeRef, newDoc as Record<string, unknown>);\n      }\n\n      tx.update(dRef, {\n        state: 'materialized' as DeliveryState,\n        materializedAt: now,\n        expireAt: toTimestamp(now + ttlMs),\n      });\n      return 'materialized';\n    });\n  }\n\n  async function recordTransientFailure(deliveryId: string, error: unknown): Promise<void> {\n    await db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return;\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      if ((d.state as DeliveryState) !== 'queued') return;\n      const attemptCount = ((d.attemptCount as number) ?? 0) + 1;\n      const now = Date.now();\n      const message = error instanceof Error ? error.message : String(error);\n      if (attemptCount >= maxAttempts) {\n        tx.update(dRef, {\n          state: 'deadLetter' as DeliveryState,\n          attemptCount,\n          lastError: message,\n          deadLetteredAt: now,\n        });\n      } else {\n        // n1: re-stamp the row into the reserved `retry` materialization lane on backoff. Without\n        // this the row keeps its original class and competes for that lane's capacity while backed\n        // off; the worker's reserved `retry` slice (separate CLASS_CAPS capacity, drained in\n        // DRAIN_ORDER) would always select 0 rows. Re-stamping moves a backed-off row into the\n        // anti-starvation lane so it drains there instead of starving in its original lane.\n        tx.update(dRef, {\n          attemptCount,\n          nextAttemptAt: now + backoffMs(attemptCount),\n          lastError: message,\n          materializationClass: 'retry' as MaterializationClass,\n        });\n      }\n    });\n  }\n\n  async function deadLetter(deliveryId: string, error: unknown): Promise<void> {\n    await db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return;\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      if ((d.state as DeliveryState) !== 'queued') return;\n      tx.update(dRef, {\n        state: 'deadLetter' as DeliveryState,\n        attemptCount: ((d.attemptCount as number) ?? 0) + 1,\n        lastError: error instanceof Error ? error.message : String(error),\n        deadLetteredAt: Date.now(),\n      });\n    });\n  }\n\n  async function replay(deliveryId: string): Promise<void> {\n    await db.runTransaction(async (tx) => {\n      const dRef = deliveryRef(deliveryId);\n      const dSnap = await tx.get(dRef);\n      if (!dSnap.exists) return;\n      const d = (dSnap.data() ?? {}) as Record<string, unknown>;\n      if ((d.state as DeliveryState) !== 'deadLetter') return;\n      tx.update(dRef, {\n        state: 'queued' as DeliveryState,\n        attemptCount: 0,\n        nextAttemptAt: Date.now(),\n        lastError: null,\n        deadLetteredAt: null,\n        expireAt: null, // clear any TTL set on a prior terminal\n      });\n    });\n  }\n\n  async function materializeMany(\n    deliveryIds: string[],\n    options?: { concurrency?: number },\n  ): Promise<Record<MaterializeOutcome, number>> {\n    const concurrency = Math.max(1, options?.concurrency ?? 10);\n    const tally: Record<MaterializeOutcome, number> = {\n      materialized: 0,\n      'already-materialized': 0,\n      'skipped-ineligible-recipient': 0,\n      missing: 0,\n      'skipped-non-queued': 0,\n    };\n    let cursor = 0;\n    async function worker(): Promise<void> {\n      while (cursor < deliveryIds.length) {\n        const id = deliveryIds[cursor++];\n        try {\n          const outcome = await materialize(id);\n          tally[outcome] += 1;\n        } catch (error) {\n          await recordTransientFailure(id, error);\n        }\n      }\n    }\n    await Promise.all(Array.from({ length: Math.min(concurrency, deliveryIds.length) }, worker));\n    return tally;\n  }\n\n  return { enqueue, materialize, materializeMany, recordTransientFailure, deadLetter, replay };\n}\n"]}

package/dist/server/index.d.ts

@@ -2,7 +2,7 @@ export { processBatchHelper } from './processBatchHelper.js';
 export { NotificationPermissionError } from './errors.js';
 export { buildActiveNotificationDocId } from './activeNotificationId.js';
 export { createDeliveryLedger, applyAggregation } from './delivery-ledger.js';
-export type { DeliveryLedger, DeliveryRowInput, DeliveryPayload, DeliveryState, AggregationStrategy, MaterializationClass, EnqueueResult, EnqueueRowResult, MaterializeOutcome, } from './delivery-ledger.js';
+export type { DeliveryLedger, DeliveryRowInput, DeliveryPayload, DeliveryState, DeliverySkipReason, DeliveryLedgerOptions, AggregationStrategy, MaterializationClass, EnqueueResult, EnqueueRowResult, MaterializeOutcome, } from './delivery-ledger.js';
 export { markNotificationSeenWithGeneration, archiveNotificationWithGeneration, } from './observed-generation.js';
 export type { MarkSeenOutcome, ArchiveOutcome } from './observed-generation.js';
 export type { ServerFirestore, ServerCollectionRef, ServerQuery, ServerQuerySnapshot, ServerDocSnapshot, ServerDocRef, ServerWriteBatch, ServerTransaction, } from './types.js';

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAGzE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGhF,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAGzE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGhF,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAEzE,+CAA+C;AAC/C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAa9E,yEAAyE;AACzE,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,0BAA0B,CAAC","sourcesContent":["// Server-side helpers (for Cloud Functions)\nexport { processBatchHelper } from './processBatchHelper.js';\nexport { NotificationPermissionError } from './errors.js';\nexport { buildActiveNotificationDocId } from './activeNotificationId.js';\n\n// Delivery ledger (notification redesign — P1)\nexport { createDeliveryLedger, applyAggregation } from './delivery-ledger.js';\nexport type {\n  DeliveryLedger,\n  DeliveryRowInput,\n  DeliveryPayload,\n  DeliveryState,\n  AggregationStrategy,\n  MaterializationClass,\n  EnqueueResult,\n  EnqueueRowResult,\n  MaterializeOutcome,\n} from './delivery-ledger.js';\n\n// Observed-generation seen/archive protocol (notification redesign — P1)\nexport {\n  markNotificationSeenWithGeneration,\n  archiveNotificationWithGeneration,\n} from './observed-generation.js';\nexport type { MarkSeenOutcome, ArchiveOutcome } from './observed-generation.js';\n\n// Server types\nexport type {\n  ServerFirestore,\n  ServerCollectionRef,\n  ServerQuery,\n  ServerQuerySnapshot,\n  ServerDocSnapshot,\n  ServerDocRef,\n  ServerWriteBatch,\n  ServerTransaction,\n} from './types.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAEzE,+CAA+C;AAC/C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAe9E,yEAAyE;AACzE,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,0BAA0B,CAAC","sourcesContent":["// Server-side helpers (for Cloud Functions)\nexport { processBatchHelper } from './processBatchHelper.js';\nexport { NotificationPermissionError } from './errors.js';\nexport { buildActiveNotificationDocId } from './activeNotificationId.js';\n\n// Delivery ledger (notification redesign — P1)\nexport { createDeliveryLedger, applyAggregation } from './delivery-ledger.js';\nexport type {\n  DeliveryLedger,\n  DeliveryRowInput,\n  DeliveryPayload,\n  DeliveryState,\n  DeliverySkipReason,\n  DeliveryLedgerOptions,\n  AggregationStrategy,\n  MaterializationClass,\n  EnqueueResult,\n  EnqueueRowResult,\n  MaterializeOutcome,\n} from './delivery-ledger.js';\n\n// Observed-generation seen/archive protocol (notification redesign — P1)\nexport {\n  markNotificationSeenWithGeneration,\n  archiveNotificationWithGeneration,\n} from './observed-generation.js';\nexport type { MarkSeenOutcome, ArchiveOutcome } from './observed-generation.js';\n\n// Server types\nexport type {\n  ServerFirestore,\n  ServerCollectionRef,\n  ServerQuery,\n  ServerQuerySnapshot,\n  ServerDocSnapshot,\n  ServerDocRef,\n  ServerWriteBatch,\n  ServerTransaction,\n} from './types.js';\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ttt-productions/notification-core",
-  "version": "0.15.7",
+  "version": "0.15.8",
   "description": "Shared notification system for TTT Productions apps — active/history two-tier architecture with dedup, batch processing, and themed UI components",
   "repository": {
     "type": "git",
@@ -35,7 +35,7 @@
     "build": "tsc",
     "clean": "rm -rf dist *.tsbuildinfo",
     "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run clean && npm run build"
   },
   "dependencies": {
     "zod": "^4.4.3"
@@ -43,7 +43,7 @@
   "peerDependencies": {
     "@tanstack/react-query": ">=5.0.0",
     "@ttt-productions/query-core": "^0.14.4",
-    "@ttt-productions/ui-core": "^0.11.16",
+    "@ttt-productions/ui-core": "^0.11.19",
     "firebase": ">=12.0.0",
     "react": ">=19.0.0",
     "react-dom": ">=19.0.0"
@@ -71,13 +71,12 @@
   "devDependencies": {
     "@tanstack/react-query": "^5.0.0",
     "@ttt-productions/query-core": "^0.14.4",
-    "@ttt-productions/ui-core": "^0.11.16",
+    "@ttt-productions/ui-core": "^0.11.19",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
-    "firebase": "^11.0.0",
+    "firebase": "^12.14.0",
     "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "typescript": "^5.8.3"
+    "react-dom": "^19.2.0"
   },
   "author": "DJ (TTT Productions)",
   "license": "MIT"