@voltro/plugin-notifications 0.81.0 → 0.83.0

package/dist/index.js

@@ -1,18 +1,19 @@
-import { BASE_NAME as e, archiveDescriptor as t, clearQuietHoursDescriptor as n, inboxDescriptor as r, markAllReadDescriptor as i, markReadDescriptor as a, markUnreadDescriptor as o, notificationsRpcClientImports as s, preferencesDescriptor as c, setPreferenceDescriptor as l, setQuietHoursDescriptor as u, subscribeDescriptor as d, unarchiveDescriptor as f, unreadCountDescriptor as p, unsubscribeDescriptor as m, webPushPublicKeyDescriptor as ee, webPushRpcClientImports as te, webPushStatusDescriptor as ne, webPushSubscribeDescriptor as re, webPushUnsubscribeDescriptor as ie } from "./rpc.js";
-import { Context as h, Effect as g, Layer as ae, Schema as _ } from "effect";
-import { and as v, boolean as y, eq as b, generateId as x, id as S, integer as C, isNotNull as oe, isNull as w, json as T, lte as E, registerRetention as D, retentionTtlMsFromEnv as O, table as k, text as A, timestamp as j } from "@voltro/database";
-import { definePlugin as se, pluginInstanceName as ce } from "@voltro/protocol";
-import { createCipheriv as M, createDecipheriv as le, createECDH as N, createHash as ue, createHmac as de, createPrivateKey as fe, randomBytes as pe, randomUUID as P, sign as me, timingSafeEqual as he } from "node:crypto";
+import { BASE_NAME as e, archiveDescriptor as t, clearQuietHoursDescriptor as n, inboxDescriptor as r, inboxFeed as i, markAllReadDescriptor as a, markReadDescriptor as o, markUnreadDescriptor as s, notificationsRpcClientImports as c, preferencesDescriptor as l, setPreferenceDescriptor as u, setQuietHoursDescriptor as d, subscribeDescriptor as f, unarchiveDescriptor as p, unreadCountDescriptor as m, unsubscribeDescriptor as ee, webPushPublicKeyDescriptor as te, webPushRpcClientImports as ne, webPushStatusDescriptor as re, webPushSubscribeDescriptor as ie, webPushUnsubscribeDescriptor as ae } from "./rpc.js";
+import { defineNotification as h } from "./define.js";
+import { Context as oe, Effect as g, Layer as se, Schema as _ } from "effect";
+import { and as v, boolean as y, eq as b, generateId as x, id as S, integer as C, isNotNull as ce, isNull as w, json as T, lte as E, registerRetention as D, retentionTtlMsFromEnv as O, table as k, text as A, timestamp as j } from "@voltro/database";
+import { definePlugin as le, pluginInstanceName as ue, publishReactivity as de } from "@voltro/protocol";
+import { createCipheriv as M, createDecipheriv as fe, createECDH as N, createHash as pe, createHmac as me, createPrivateKey as he, randomBytes as ge, randomUUID as P, sign as F, timingSafeEqual as _e } from "node:crypto";
 //#region src/errors.ts
-var F = class extends _.TaggedError()("PushTokenRejected", {
+var I = class extends _.TaggedError()("PushTokenRejected", {
 	token: _.String,
 	reason: _.String
-}) {}, I = () => ({
+}) {}, ve = () => ({
 	id: "console",
 	deliver: async (e) => {
 		process.stdout.write(`[notify:${e.category}] → ${e.to}: ${e.title} — ${e.body}\n`);
 	}
-}), ge = (e) => ({
+}), ye = (e) => ({
 	id: e.id ?? "slack",
 	deliver: async (t) => {
 		let n = e.format ? e.format(t) : { text: `*${t.title}*\n${t.body}` }, r = await fetch(e.url, {
@@ -25,7 +26,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		});
 		if (!r.ok) throw Error(`webhook ${e.id ?? "slack"} POST ${r.status}`);
 	}
-}), _e = (e) => ({
+}), be = (e) => ({
 	id: "email",
 	deliver: (t) => e({
 		to: t.to,
@@ -33,20 +34,30 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		html: `<p>${t.body}</p>`,
 		text: t.body
 	})
-}), ve = (e) => ({
+}), xe = (e) => ({
 	id: "sms",
 	deliver: (t) => e(t.to, `${t.title}: ${t.body}`)
-}), ye = (e, t) => ({
+}), Se = (e, t) => ({
 	id: e,
 	deliver: t
-}), be = (e) => {
+}), Ce = (e) => {
+	let t = typeof e?.image == "string" ? e.image : void 0, n = e?.actions, r = Array.isArray(n) ? n.filter((e) => typeof e == "object" && !!e && typeof e.id == "string" && typeof e.title == "string").map((e) => ({
+		id: e.id,
+		title: e.title
+	})) : void 0;
+	return {
+		...t === void 0 ? {} : { image: t },
+		...r !== void 0 && r.length > 0 ? { actions: r } : {}
+	};
+}, we = (e) => {
 	let t = async (t, n, r) => {
 		let i = {
 			token: n,
 			title: t.title,
 			body: t.body,
 			...r === void 0 ? {} : { badge: r },
-			data: t.data ?? {}
+			data: t.data ?? {},
+			...Ce(t.data)
 		};
 		try {
 			return await e.transport(i), {
@@ -54,7 +65,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 				status: "sent"
 			};
 		} catch (t) {
-			let r = t instanceof F, i = r ? t.reason : t instanceof Error ? t.message : String(t);
+			let r = t instanceof I, i = r ? t.reason : t instanceof Error ? t.message : String(t);
 			if (r && e.onTokenRejected !== void 0) try {
 				await e.onTokenRejected(n, i);
 			} catch {}
@@ -74,17 +85,17 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		id: e.id ?? "push",
 		deliver: async (e) => {
 			let t = await n(e), r = t.filter((e) => e.status === "failed");
-			if (t.length > 0 && r.length === t.length) throw new F({
+			if (t.length > 0 && r.length === t.length) throw new I({
 				token: t[0].endpoint,
 				reason: r[0].error ?? "all tokens rejected"
 			});
 		},
 		deliverDetailed: n
 	};
-}, L = (e, t, n, r, i) => {
+}, Te = (e, t, n, r, i) => {
 	let a = n ? e.filter((e) => n.includes(e)) : [...e], o = new Set(r.filter((e) => e.subjectId === i && e.category === t && e.enabled === !1).map((e) => e.channel));
 	return a.filter((e) => !o.has(e));
-}, R = () => {
+}, Ee = () => {
 	let e = [], t = /* @__PURE__ */ new Map(), n = [], r = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map(), a = [], o = (e) => `${e.subjectId}|${e.category}|${e.channel}`, s = (e, t) => `${e}|${t}`;
 	return {
 		addInbox: async (t) => {
@@ -172,7 +183,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 			for (let e = a.length - 1; e >= 0; e--) t.has(a[e].id) && a.splice(e, 1);
 		}
 	};
-}, z = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : "", xe = (e) => {
+}, L = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : "", De = (e) => {
 	let t = async (t, n, r, i) => await e.query({
 		table: t,
 		predicate: n,
@@ -187,9 +198,9 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		title: String(e.title),
 		body: String(e.body),
 		data: e.data ?? {},
-		readAt: e.readAt == null ? null : z(e.readAt),
-		archivedAt: e.archivedAt == null ? null : z(e.archivedAt),
-		createdAt: z(e.createdAt),
+		readAt: e.readAt == null ? null : L(e.readAt),
+		archivedAt: e.archivedAt == null ? null : L(e.archivedAt),
+		createdAt: L(e.createdAt),
 		tenantId: e.tenantId ?? null
 	}), r = (e) => ({
 		subjectId: String(e.subjectId),
@@ -202,11 +213,11 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		category: String(e.category),
 		channel: String(e.channel),
 		status: e.status,
-		at: z(e.at),
+		at: L(e.at),
 		...e.error == null ? {} : { error: String(e.error) },
 		...e.endpoint == null ? {} : { endpoint: String(e.endpoint) },
 		...e.clickToken == null ? {} : { clickToken: String(e.clickToken) },
-		...e.clickedAt == null ? {} : { clickedAt: z(e.clickedAt) }
+		...e.clickedAt == null ? {} : { clickedAt: L(e.clickedAt) }
 	}), a = (e) => ({
 		topic: String(e.topic),
 		subjectId: String(e.subjectId),
@@ -222,7 +233,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		kind: e.kind === "quiet" ? "quiet" : "digest",
 		subjectId: String(e.subjectId),
 		send: e.send ?? {},
-		flushAt: z(e.flushAt)
+		flushAt: L(e.flushAt)
 	});
 	return {
 		addInbox: async (t) => {
@@ -369,7 +380,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 			for (let n of t) await e.delete("_voltro_notification_held", n);
 		}
 	};
-}, Se = (e) => ({
+}, Oe = (e) => ({
 	id: "inApp",
 	deliver: async (t) => {
 		await e.addInbox({
@@ -383,7 +394,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 			createdAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
-}), B = (e, t) => {
+}), R = (e, t) => {
 	try {
 		let n = new Intl.DateTimeFormat("en-US", {
 			timeZone: t,
@@ -395,16 +406,16 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 	} catch {
 		return e.getUTCHours() * 60 + e.getUTCMinutes();
 	}
-}, Ce = (e, t) => {
+}, ke = (e, t) => {
 	if (e.startMinute === e.endMinute) return !1;
-	let n = B(t, e.tz ?? "UTC");
+	let n = R(t, e.tz ?? "UTC");
 	return e.startMinute < e.endMinute ? n >= e.startMinute && n < e.endMinute : n >= e.startMinute || n < e.endMinute;
-}, we = (e, t) => {
-	let n = B(t, e.tz ?? "UTC"), r = e.endMinute - n;
+}, Ae = (e, t) => {
+	let n = R(t, e.tz ?? "UTC"), r = e.endMinute - n;
 	return r <= 0 && (r += 1440), new Date(t.getTime() + r * 6e4);
-}, Te = (e) => {
+}, je = (e) => {
 	let t = new Map(e.channels.map((e) => [e.id, e])), n = e.channels.map((e) => e.id), r = e.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()), i = e.digestWindowMs ?? 0, a = async (i) => {
-		let a = await e.store.getPreferences(i.to), o = L(n, i.category, i.channels, a, i.to), s = n.filter((e) => !o.includes(e)), c = [], l = [], u = {
+		let a = await e.store.getPreferences(i.to), o = Te(n, i.category, i.channels, a, i.to), s = n.filter((e) => !o.includes(e)), c = [], l = [], u = {
 			to: i.to,
 			category: i.category,
 			title: i.title,
@@ -482,7 +493,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		};
 	}, o = async (t) => {
 		let n = await e.store.getQuietHours(t.to), o = new Date(r());
-		if (n && Ce(n, o)) return (n.policy ?? "hold") === "drop" ? {
+		if (n && ke(n, o)) return (n.policy ?? "hold") === "drop" ? {
 			delivered: [],
 			failed: [],
 			skipped: [],
@@ -492,7 +503,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 			kind: "quiet",
 			subjectId: t.to,
 			send: t,
-			flushAt: we(n, o).toISOString()
+			flushAt: Ae(n, o).toISOString()
 		}), {
 			delivered: [],
 			failed: [],
@@ -556,11 +567,11 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 				let t = i.get(e.subjectId) ?? [];
 				t.push(e), i.set(e.subjectId, t);
 			}
-			for (let [e, t] of i) await a(Ee(e, t));
+			for (let [e, t] of i) await a(Me(e, t));
 			return await e.store.clearHeld(n.map((e) => e.id)), n.length;
 		}
 	};
-}, Ee = (e, t) => {
+}, Me = (e, t) => {
 	if (t.length === 1) return t[0].send;
 	let n = t.map((e) => ({
 		category: e.send.category,
@@ -575,82 +586,82 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		data: { items: n },
 		tenantId: t[0].send.tenantId ?? null
 	};
-}, V = (e) => e.toString("base64url"), H = (e) => Buffer.from(e, "base64url"), U = (e, t) => de("sha256", e).update(t).digest(), W = (e, t, n) => U(e, Buffer.concat([t, Buffer.from([1])])).subarray(0, n), De = () => {
+}, z = (e) => e.toString("base64url"), B = (e) => Buffer.from(e, "base64url"), V = (e, t) => me("sha256", e).update(t).digest(), H = (e, t, n) => V(e, Buffer.concat([t, Buffer.from([1])])).subarray(0, n), Ne = () => {
 	let e = N("prime256v1");
-	return e.generateKeys(), V(Oe(e.getPrivateKey()));
-}, Oe = (e) => {
+	return e.generateKeys(), z(Pe(e.getPrivateKey()));
+}, Pe = (e) => {
 	if (e.length === 32) return e;
 	if (e.length > 32) throw Error(`P-256 scalar must be at most 32 bytes (got ${e.length})`);
 	return Buffer.concat([Buffer.alloc(32 - e.length), e]);
-}, ke = (e) => {
-	let t = H(e);
+}, Fe = (e) => {
+	let t = B(e);
 	if (t.length !== 32) throw Error(`VOLTRO_VAPID_PRIVATE_KEY must be a base64url 32-byte P-256 scalar (got ${t.length} bytes)`);
 	return t;
-}, G = (e) => {
-	let t = ke(e), n = N("prime256v1");
-	return n.setPrivateKey(t), V(n.getPublicKey());
-}, Ae = (e) => {
-	let t = ke(e), n = N("prime256v1");
+}, U = (e) => {
+	let t = Fe(e), n = N("prime256v1");
+	return n.setPrivateKey(t), z(n.getPublicKey());
+}, Ie = (e) => {
+	let t = Fe(e), n = N("prime256v1");
 	n.setPrivateKey(t);
 	let r = n.getPublicKey();
-	return fe({
+	return he({
 		key: {
 			kty: "EC",
 			crv: "P-256",
-			d: V(t),
-			x: V(r.subarray(1, 33)),
-			y: V(r.subarray(33, 65))
+			d: z(t),
+			x: z(r.subarray(1, 33)),
+			y: z(r.subarray(33, 65))
 		},
 		format: "jwk"
 	});
-}, je = (e, t, n, r = Date.now()) => {
+}, Le = (e, t, n, r = Date.now()) => {
 	let i = new URL(e), a = {
 		aud: `${i.protocol}//${i.host}`,
 		exp: Math.floor(r / 1e3) + 43200,
 		...n === void 0 ? {} : { sub: n }
-	}, o = `${V(Buffer.from(JSON.stringify({
+	}, o = `${z(Buffer.from(JSON.stringify({
 		typ: "JWT",
 		alg: "ES256"
-	})))}.${V(Buffer.from(JSON.stringify(a)))}`;
-	return `vapid t=${o}.${V(me("sha256", Buffer.from(o), {
-		key: Ae(t),
+	})))}.${z(Buffer.from(JSON.stringify(a)))}`;
+	return `vapid t=${o}.${z(F("sha256", Buffer.from(o), {
+		key: Ie(t),
 		dsaEncoding: "ieee-p1363"
-	}))}, k=${G(t)}`;
-}, Me = Buffer.from("WebPush: info\0"), K = Buffer.from("Content-Encoding: aes128gcm\0"), Ne = Buffer.from("Content-Encoding: nonce\0"), Pe = 4096, Fe = (e, t, n = {}) => {
-	let r = H(e.p256dh), i = H(e.auth);
+	}))}, k=${U(t)}`;
+}, Re = Buffer.from("WebPush: info\0"), ze = Buffer.from("Content-Encoding: aes128gcm\0"), Be = Buffer.from("Content-Encoding: nonce\0"), Ve = 4096, He = (e, t, n = {}) => {
+	let r = B(e.p256dh), i = B(e.auth);
 	if (r.length !== 65 || r[0] !== 4) throw Error("push subscription p256dh must be a 65-byte uncompressed P-256 point");
 	if (i.length !== 16) throw Error("push subscription auth must be 16 bytes");
 	let a = N("prime256v1");
 	n.asPrivate ? a.setPrivateKey(n.asPrivate) : a.generateKeys();
-	let o = a.getPublicKey(), s = W(U(i, a.computeSecret(r)), Buffer.concat([
-		Me,
+	let o = a.getPublicKey(), s = H(V(i, a.computeSecret(r)), Buffer.concat([
+		Re,
 		r,
 		o
-	]), 32), c = n.salt ?? pe(16), l = U(c, s), u = W(l, K, 16), d = W(l, Ne, 12), f = M("aes-128-gcm", u, d), p = Buffer.concat([
+	]), 32), c = n.salt ?? ge(16), l = V(c, s), u = H(l, ze, 16), d = H(l, Be, 12), f = M("aes-128-gcm", u, d), p = Buffer.concat([
 		f.update(Buffer.concat([t, Buffer.from([2])])),
 		f.final(),
 		f.getAuthTag()
 	]), m = Buffer.alloc(21);
-	return c.copy(m, 0), m.writeUInt32BE(Pe, 16), m.writeUInt8(o.length, 20), Buffer.concat([
+	return c.copy(m, 0), m.writeUInt32BE(Ve, 16), m.writeUInt8(o.length, 20), Buffer.concat([
 		m,
 		o,
 		p
 	]);
-}, Ie = (e, t) => {
+}, Ue = (e, t) => {
 	let n = e.subarray(0, 16), r = e.readUInt8(20), i = e.subarray(21, 21 + r), a = e.subarray(21 + r), o = N("prime256v1");
 	o.setPrivateKey(t.uaPrivate);
-	let s = o.getPublicKey(), c = o.computeSecret(i), l = U(n, W(U(t.authSecret, c), Buffer.concat([
-		Me,
+	let s = o.getPublicKey(), c = o.computeSecret(i), l = V(n, H(V(t.authSecret, c), Buffer.concat([
+		Re,
 		s,
 		i
-	]), 32)), u = W(l, K, 16), d = W(l, Ne, 12), f = le("aes-128-gcm", u, d);
+	]), 32)), u = H(l, ze, 16), d = H(l, Be, 12), f = fe("aes-128-gcm", u, d);
 	f.setAuthTag(a.subarray(a.length - 16));
 	let p = Buffer.concat([f.update(a.subarray(0, a.length - 16)), f.final()]), m = p.length - 1;
 	for (; m >= 0 && p[m] === 0;) m--;
 	if (p[m] !== 2) throw Error("web-push record missing the last-record delimiter");
 	return p.subarray(0, m);
-}, Le = async (e, t, n) => {
-	let r = Fe(e.keys, t), i = n.fetchImpl ?? fetch, a;
+}, We = async (e, t, n) => {
+	let r = He(e.keys, t), i = n.fetchImpl ?? fetch, a;
 	try {
 		a = await i(e.endpoint, {
 			method: "POST",
@@ -659,7 +670,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 				"content-type": "application/octet-stream",
 				ttl: String(n.ttl ?? 86400),
 				urgency: "normal",
-				authorization: je(e.endpoint, n.privateKey, n.contact)
+				authorization: Le(e.endpoint, n.privateKey, n.contact)
 			},
 			body: new Uint8Array(r)
 		});
@@ -684,10 +695,10 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		status: a.status,
 		detail: o.slice(0, 200)
 	};
-}, Re = (e, t) => {
+}, Ge = (e, t) => {
 	let n = Buffer.from(e), r = Buffer.from(t);
-	return n.length === r.length && he(n, r);
-}, ze = k("_voltro_notification_push_subscriptions", {
+	return n.length === r.length && _e(n, r);
+}, Ke = k("_voltro_notification_push_subscriptions", {
 	id: S({ prefix: "notifpush" }),
 	subjectId: A(),
 	endpointHash: A(),
@@ -697,7 +708,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 	ua: A().nullable(),
 	createdAt: j().default("now"),
 	tenantId: A().nullable()
-}).unique("byPushEndpointHash", ["endpointHash"]).index("byPushSubject", ["subjectId"]), q = (e) => ue("sha256").update(e).digest("hex"), J = () => {
+}).unique("byPushEndpointHash", ["endpointHash"]).index("byPushSubject", ["subjectId"]), W = (e) => pe("sha256").update(e).digest("hex"), G = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		upsert: async (t) => {
@@ -713,9 +724,9 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		},
 		countForSubject: async (t) => [...e.values()].filter((e) => e.subjectId === t).length
 	};
-}, Y = "_voltro_notification_push_subscriptions", Be = (e) => {
+}, K = "_voltro_notification_push_subscriptions", qe = (e) => {
 	let t = async (t, n) => e.query({
-		table: Y,
+		table: K,
 		predicate: t,
 		order: [],
 		take: n,
@@ -735,8 +746,8 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 			let n = x({
 				kind: "typeid",
 				prefix: "notifpush"
-			}, Y);
-			await e.upsert(Y, {
+			}, K);
+			await e.upsert(K, {
 				id: n,
 				subjectId: t.subjectId,
 				endpointHash: t.endpointHash,
@@ -759,31 +770,31 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		listForSubject: async (e) => (await t(b("subjectId", e))).map(n),
 		removeForSubject: async (n, r) => {
 			let i = await t(v(b("endpointHash", n), b("subjectId", r)), 1);
-			return i[0] ? (await e.delete(Y, String(i[0].id)), !0) : !1;
+			return i[0] ? (await e.delete(K, String(i[0].id)), !0) : !1;
 		},
 		removeByHash: async (n) => {
 			let r = await t(b("endpointHash", n), 1);
-			r[0] && await e.delete(Y, String(r[0].id));
+			r[0] && await e.delete(K, String(r[0].id));
 		},
 		countForSubject: async (e) => (await t(b("subjectId", e))).length
 	};
-}, Ve = Symbol.for("@voltro/plugin-notifications:web-push"), X = () => {
+}, Je = Symbol.for("@voltro/plugin-notifications:web-push"), q = () => {
 	let e = globalThis;
-	return e[Ve] ??= {
-		store: J(),
+	return e[Je] ??= {
+		store: G(),
 		bound: !1
 	};
-}, He = (e) => {
-	let t = X();
-	t.store = Be(e), t.bound = !0;
-}, Ue = () => {
-	let e = X();
-	e.store = J(), e.bound = !1;
-}, Z = (e) => {
+}, Ye = (e) => {
+	let t = q();
+	t.store = qe(e), t.bound = !0;
+}, Xe = () => {
+	let e = q();
+	e.store = G(), e.bound = !1;
+}, J = (e) => {
 	let t = e ?? process.env.VOLTRO_VAPID_PRIVATE_KEY;
 	if (t === void 0 || t.trim() === "") throw Error("web push needs VOLTRO_VAPID_PRIVATE_KEY (a base64url P-256 scalar). `voltro dev` mints one into .env.local; for production generate one and set it in the deployment environment. There is deliberately no default.");
 	return t;
-}, Q = 3800, We = (e, t) => {
+}, Y = 3800, Ze = (e, t) => {
 	let n = typeof e.data?.url == "string" ? e.data.url : void 0, r = {
 		title: e.title,
 		body: e.body,
@@ -792,44 +803,44 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		...n === void 0 ? {} : { url: n },
 		...e.data === void 0 ? {} : { data: e.data }
 	}, i = Buffer.from(JSON.stringify(r));
-	if (i.length <= Q) return i;
+	if (i.length <= Y) return i;
 	let { data: a, ...o } = r;
-	if (i = Buffer.from(JSON.stringify(o)), i.length <= Q) return i;
-	let s = i.length - Buffer.byteLength(o.body), c = Math.max(0, Q - s - Buffer.byteLength("…")), l = Buffer.from(o.body).subarray(0, c).toString("utf8").replace(/�+$/u, "");
+	if (i = Buffer.from(JSON.stringify(o)), i.length <= Y) return i;
+	let s = i.length - Buffer.byteLength(o.body), c = Math.max(0, Y - s - Buffer.byteLength("…")), l = Buffer.from(o.body).subarray(0, c).toString("utf8").replace(/�+$/u, "");
 	return Buffer.from(JSON.stringify({
 		...o,
 		body: `${l}…`
 	}));
-}, Ge = (e = {}) => (X().channelOptions = e, qe(e)), Ke = () => {
-	let e = X().channelOptions;
-	G(Z(e?.privateKey));
-}, qe = (e) => ({
+}, Qe = (e = {}) => (q().channelOptions = e, et(e)), $e = () => {
+	let e = q().channelOptions;
+	U(J(e?.privateKey));
+}, et = (e) => ({
 	id: e.id ?? "webPush",
 	deliver: async (t) => {
-		let n = await Je(t, e), r = n.filter((e) => e.status === "failed");
+		let n = await tt(t, e), r = n.filter((e) => e.status === "failed");
 		if (n.length > 0 && r.length === n.length) throw Error(`web push failed for all ${r.length} endpoint(s): ${r[0].error ?? "unknown"}`);
 	},
-	deliverDetailed: (t) => Je(t, e)
-}), Je = async (e, t) => {
-	let n = Z(t.privateKey), r = await X().store.listForSubject(e.to), i = [];
+	deliverDetailed: (t) => tt(t, e)
+}), tt = async (e, t) => {
+	let n = J(t.privateKey), r = await q().store.listForSubject(e.to), i = [];
 	for (let a of r) {
-		let r = pe(16).toString("base64url"), o = {
+		let r = ge(16).toString("base64url"), o = {
 			privateKey: n,
 			...t.contact === void 0 ? {} : { contact: t.contact },
 			...t.ttl === void 0 ? {} : { ttl: t.ttl },
 			...t.fetchImpl === void 0 ? {} : { fetchImpl: t.fetchImpl }
-		}, s = await Le({
+		}, s = await We({
 			endpoint: a.endpoint,
 			keys: {
 				p256dh: a.p256dh,
 				auth: a.auth
 			}
-		}, We(e, r), o);
+		}, Ze(e, r), o);
 		s.kind === "delivered" ? i.push({
 			endpoint: a.endpoint,
 			status: "sent",
 			clickToken: r
-		}) : s.kind === "gone" ? (await X().store.removeByHash(a.endpointHash), i.push({
+		}) : s.kind === "gone" ? (await q().store.removeByHash(a.endpointHash), i.push({
 			endpoint: a.endpoint,
 			status: "failed",
 			error: `endpoint gone (${s.status}) — pruned`,
@@ -841,7 +852,277 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		});
 	}
 	return i;
-}, Ye = (e) => G(Z(e)), Xe = k("_voltro_notification_inbox", {
+}, nt = (e) => U(J(e)), rt = (e) => {
+	if (typeof e == "object" && e) {
+		let t = e;
+		if (typeof t.userId == "string") return [t.userId];
+		if (Array.isArray(t.userIds)) return t.userIds.filter((e) => typeof e == "string");
+	}
+	throw Error("sendNotification: pass `recipients` — the audience has neither `userId` nor `userIds`");
+}, it = async (e, t, n) => {
+	let r = _.decodeUnknownSync(t.audience)(n.audience), i = _.decodeUnknownSync(t.payload)(n.payload), a = n.recipients ? await n.recipients(r) : rt(r), o = [];
+	for (let r of a) {
+		let a = (n.localeFor ? await n.localeFor(r) : null) ?? n.defaultLocale ?? "en", s = await e.send(at(t, i, r, a, n.tenantId));
+		o.push({
+			recipientId: r,
+			locale: a,
+			result: s
+		});
+	}
+	return o;
+}, at = (e, t, n, r, i) => {
+	let a = e.render(t, {
+		locale: r,
+		recipientId: n
+	});
+	return {
+		to: n,
+		category: e.category,
+		title: a.title,
+		body: a.body,
+		data: {
+			...a.data,
+			notification: e.name,
+			...a.image === void 0 ? {} : { image: a.image },
+			...a.actions === void 0 ? {} : { actions: a.actions }
+		},
+		...e.channels === void 0 ? {} : { channels: e.channels },
+		...i === void 0 ? {} : { tenantId: i }
+	};
+}, X = "voltro.notification.send", ot = async (e, t, n) => {
+	let r = _.decodeUnknownSync(t.audience)(n.audience), i = _.is(t.payload)(n.payload) ? _.encodeUnknownSync(t.payload)(n.payload) : (_.decodeUnknownSync(t.payload)(n.payload), n.payload), a = n.recipients ? await n.recipients(r) : rt(r), o = [];
+	for (let r of a) {
+		let a = (n.localeFor ? await n.localeFor(r) : null) ?? n.defaultLocale ?? "en", s = {
+			notification: t.name,
+			recipientId: r,
+			locale: a,
+			payload: i,
+			tenantId: n.tenantId ?? null
+		}, c = await e.enqueue(X, { ...s }, {
+			...n.idempotencyKey === void 0 ? {} : { idempotencyKey: `${t.name}:${r}:${n.idempotencyKey}` },
+			...n.maxAttempts === void 0 ? {} : { maxAttempts: n.maxAttempts },
+			...n.delayMs === void 0 ? {} : { delayMs: n.delayMs }
+		});
+		o.push({
+			recipientId: r,
+			locale: a,
+			outboxId: c
+		});
+	}
+	return o;
+}, st = (e) => typeof e.notification == "string" && typeof e.recipientId == "string" && typeof e.locale == "string", ct = (e) => {
+	let t = new Map(e.notifications.map((e) => [e.name, e]));
+	return {
+		effect: X,
+		maxAttempts: e.maxAttempts ?? 5,
+		handler: async ({ payload: n }) => {
+			if (!st(n)) throw Error(`${X}: row payload needs notification, recipientId and locale — got keys ${Object.keys(n).join(", ") || "(none)"}`);
+			let r = t.get(n.notification);
+			if (r === void 0) throw Error(`${X}: no descriptor named ${JSON.stringify(n.notification)} in this handler — list it in notificationOutboxHandler({ notifications })`);
+			let i = e.service();
+			if (i === void 0) throw Error(`${X}: the notification service is not available in this process`);
+			let a = _.decodeUnknownSync(r.payload)(n.payload);
+			return i.send(at(r, a, n.recipientId, n.locale, n.tenantId));
+		}
+	};
+}, lt = {
+	production: "https://api.push.apple.com",
+	sandbox: "https://api.sandbox.push.apple.com"
+}, ut = 3e6, dt = /* @__PURE__ */ new Set([
+	"BadDeviceToken",
+	"Unregistered",
+	"DeviceTokenNotForTopic",
+	"ExpiredToken"
+]), Z = (e) => Buffer.from(e).toString("base64url"), ft = (e, t) => {
+	let n = Z(JSON.stringify({
+		alg: "ES256",
+		kid: e.keyId
+	})), r = Z(JSON.stringify({
+		iss: e.teamId,
+		iat: Math.floor(t / 1e3)
+	}));
+	return `${n}.${r}.${Z(F("sha256", Buffer.from(`${n}.${r}`), {
+		key: e.privateKey,
+		dsaEncoding: "ieee-p1363"
+	}))}`;
+}, pt = (e) => ({
+	aps: {
+		alert: {
+			title: e.title,
+			body: e.body
+		},
+		...e.badge === void 0 ? {} : { badge: e.badge },
+		sound: "default",
+		...e.image === void 0 ? {} : { "mutable-content": 1 },
+		...e.actions !== void 0 && typeof e.data.notification == "string" ? { category: e.data.notification } : {}
+	},
+	...e.data
+}), mt = async ({ url: e, headers: t, body: n }) => {
+	let r = await import("node:http2"), i = new URL(e), a = r.connect(i.origin);
+	try {
+		return await new Promise((e, r) => {
+			a.once("error", r);
+			let o = a.request({
+				":method": "POST",
+				":path": i.pathname,
+				...t
+			}), s = 0, c = [];
+			o.on("response", (e) => {
+				s = Number(e[":status"] ?? 0);
+			}), o.on("data", (e) => c.push(e)), o.on("end", () => e({
+				status: s,
+				body: Buffer.concat(c).toString("utf8")
+			})), o.on("error", r), o.end(n);
+		});
+	} finally {
+		a.close();
+	}
+}, ht = (e) => {
+	let t = [
+		"keyId",
+		"teamId",
+		"privateKey",
+		"bundleId"
+	].filter((t) => !e[t]);
+	if (t.length > 0) throw Error(`apnsTransport: ${t.join(", ")} required — supply APNS_KEY_ID, APNS_TEAM_ID, APNS_PRIVATE_KEY (the .p8) and APNS_BUNDLE_ID from the environment`);
+	let n = e.request ?? mt, r = e.now ?? Date.now, i = lt[e.environment ?? "production"], a = null, o = () => {
+		let t = r();
+		return (a === null || t - a.at > ut) && (a = {
+			token: ft(e, t),
+			at: t
+		}), a.token;
+	};
+	return async (t) => {
+		let r = await n({
+			url: `${i}/3/device/${encodeURIComponent(t.token)}`,
+			headers: {
+				authorization: `bearer ${o()}`,
+				"apns-topic": e.bundleId,
+				"apns-push-type": "alert",
+				"apns-priority": "10",
+				"content-type": "application/json"
+			},
+			body: JSON.stringify(pt(t))
+		});
+		if (r.status === 200) return;
+		let a = "";
+		try {
+			a = String(JSON.parse(r.body).reason ?? "");
+		} catch {
+			a = "";
+		}
+		throw r.status === 410 || dt.has(a) ? new I({
+			token: t.token,
+			reason: a || "Unregistered"
+		}) : Error(`apns: HTTP ${r.status}${a ? ` — ${a}` : ""}`);
+	};
+}, gt = "https://www.googleapis.com/auth/firebase.messaging", _t = "https://oauth2.googleapis.com/token", vt = (e) => `https://fcm.googleapis.com/v1/projects/${encodeURIComponent(e)}/messages:send`, yt = /* @__PURE__ */ new Set(["UNREGISTERED", "NOT_FOUND"]), Q = (e) => Buffer.from(e).toString("base64url"), bt = (e) => {
+	let t;
+	if (typeof e == "string") try {
+		t = JSON.parse(e);
+	} catch {
+		throw Error("fcmTransport: FCM_SERVICE_ACCOUNT is not the JSON Google issued");
+	}
+	else t = e;
+	let n = [
+		"project_id",
+		"client_email",
+		"private_key"
+	].filter((e) => typeof t[e] != "string" || t[e].length === 0);
+	if (n.length > 0) throw Error(`fcmTransport: service account is missing ${n.join(", ")} — supply FCM_SERVICE_ACCOUNT from the environment`);
+	return t;
+}, xt = (e, t) => {
+	let n = Math.floor(t / 1e3), r = Q(JSON.stringify({
+		alg: "RS256",
+		typ: "JWT"
+	})), i = Q(JSON.stringify({
+		iss: e.client_email,
+		scope: gt,
+		aud: e.token_uri ?? "https://oauth2.googleapis.com/token",
+		iat: n,
+		exp: n + 3600
+	}));
+	return `${r}.${i}.${Q(F("sha256", Buffer.from(`${r}.${i}`), e.private_key))}`;
+}, St = (e) => ({ message: {
+	token: e.token,
+	notification: {
+		title: e.title,
+		body: e.body,
+		...e.image === void 0 ? {} : { image: e.image }
+	},
+	data: Object.fromEntries(Object.entries(e.data).map(([e, t]) => [e, typeof t == "string" ? t : JSON.stringify(t)])),
+	...e.badge !== void 0 || e.image !== void 0 ? { apns: {
+		payload: { aps: {
+			...e.badge === void 0 ? {} : { badge: e.badge },
+			...e.image === void 0 ? {} : { "mutable-content": 1 }
+		} },
+		...e.image === void 0 ? {} : { fcm_options: { image: e.image } }
+	} } : {}
+} }), Ct = (e) => {
+	let t = bt(e.serviceAccount), n = e.fetch ?? fetch, r = e.now ?? Date.now, i = e.endpoint ?? vt(t.project_id), a = null, o = async () => {
+		let e = r();
+		if (a !== null && a.expiresAt - 6e4 > e) return a.token;
+		let i = await n(t.token_uri ?? "https://oauth2.googleapis.com/token", {
+			method: "POST",
+			headers: { "content-type": "application/x-www-form-urlencoded" },
+			body: new URLSearchParams({
+				grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+				assertion: xt(t, e)
+			}).toString()
+		}), o = await i.json().catch(() => ({}));
+		if (!i.ok || typeof o.access_token != "string") throw Error(`fcm: token exchange HTTP ${i.status}${o.error ? ` — ${o.error}` : ""}`);
+		return a = {
+			token: o.access_token,
+			expiresAt: e + (o.expires_in ?? 3600) * 1e3
+		}, a.token;
+	};
+	return async (e) => {
+		let t = await n(i, {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${await o()}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify(St(e))
+		});
+		if (t.ok) return;
+		let r = await t.json().catch(() => ({})), a = r.error?.details?.find((e) => typeof e.errorCode == "string")?.errorCode ?? r.error?.status ?? "";
+		throw t.status === 404 || yt.has(a) ? new I({
+			token: e.token,
+			reason: a || "UNREGISTERED"
+		}) : Error(`fcm: HTTP ${t.status}${a ? ` — ${a}` : ""}${r.error?.message ? ` — ${r.error.message}` : ""}`);
+	};
+}, wt = "https://exp.host/--/api/v2/push/send", Tt = (e) => /^Expo(nent)?PushToken\[[^\]]+\]$/.test(e), Et = (e = {}) => async (t) => {
+	if (!Tt(t.token)) throw new I({
+		token: t.token,
+		reason: "not an Expo push token"
+	});
+	let n = await (e.fetch ?? fetch)(e.endpoint ?? "https://exp.host/--/api/v2/push/send", {
+		method: "POST",
+		headers: {
+			"content-type": "application/json",
+			accept: "application/json",
+			...e.accessToken ? { authorization: `Bearer ${e.accessToken}` } : {}
+		},
+		body: JSON.stringify({
+			to: t.token,
+			title: t.title,
+			body: t.body,
+			data: t.data,
+			...t.badge === void 0 ? {} : { badge: t.badge },
+			...t.image === void 0 ? {} : { richContent: { image: t.image } },
+			...t.actions !== void 0 && typeof t.data.notification == "string" ? { categoryId: t.data.notification } : {}
+		})
+	}), r = await n.json().catch(() => ({}));
+	if (!n.ok) throw Error(`expo push: HTTP ${n.status}${r.errors?.[0]?.message ? ` — ${r.errors[0].message}` : ""}`);
+	let i = Array.isArray(r.data) ? r.data[0] : r.data;
+	if (!i || i.status === "ok") return;
+	let a = i.details?.error;
+	throw a === "DeviceNotRegistered" || a === "InvalidCredentials" ? new I({
+		token: t.token,
+		reason: a
+	}) : Error(`expo push: ${a ?? "error"}${i.message ? ` — ${i.message}` : ""}`);
+}, Dt = k("_voltro_notification_inbox", {
 	id: S({ prefix: "notif" }),
 	subjectId: A(),
 	category: A(),
@@ -852,7 +1133,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 	archivedAt: j().nullable(),
 	createdAt: j().default("now"),
 	tenantId: A().nullable()
-}).renamedFrom("notification_inbox").index("byInboxSubject", ["subjectId"]).index("byInboxSubjectCreatedAt", ["subjectId", "createdAt"]).index("byInboxSubjectUnread", ["subjectId"], { where: "\"readAt\" IS NULL" }), Ze = k("_voltro_notification_preferences", {
+}).renamedFrom("notification_inbox").index("byInboxSubject", ["subjectId"]).index("byInboxSubjectCreatedAt", ["subjectId", "createdAt"]).index("byInboxSubjectUnread", ["subjectId"], { where: "\"readAt\" IS NULL" }), Ot = k("_voltro_notification_preferences", {
 	id: S({ prefix: "notifpref" }),
 	subjectId: A(),
 	category: A(),
@@ -862,7 +1143,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 	"subjectId",
 	"category",
 	"channel"
-]), Qe = k("_voltro_notification_deliveries", {
+]), kt = k("_voltro_notification_deliveries", {
 	id: S({ prefix: "notifdlv" }),
 	recipient: A(),
 	category: A(),
@@ -873,33 +1154,52 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 	endpoint: A().nullable(),
 	clickToken: A().nullable(),
 	clickedAt: j().nullable()
-}).renamedFrom("notification_deliveries").index("byDeliveriesAt", ["at"]).index("byDeliveriesClickToken", ["clickToken"]), $e = k("_voltro_notification_topic_subscriptions", {
+}).renamedFrom("notification_deliveries").index("byDeliveriesAt", ["at"]).index("byDeliveriesClickToken", ["clickToken"]), At = k("_voltro_notification_topic_subscriptions", {
 	id: S({ prefix: "notiftsub" }),
 	topic: A(),
 	subjectId: A(),
 	tenantId: A().nullable()
-}).renamedFrom("notification_topic_subscriptions").unique("byTopicSubject", ["topic", "subjectId"]).index("byTopic", ["topic"]), et = k("_voltro_notification_quiet_hours", {
+}).renamedFrom("notification_topic_subscriptions").unique("byTopicSubject", ["topic", "subjectId"]).index("byTopic", ["topic"]), jt = k("_voltro_notification_quiet_hours", {
 	id: S({ prefix: "notifqh" }),
 	subjectId: A(),
 	startMinute: C(),
 	endMinute: C(),
 	tz: A().default("UTC"),
 	policy: A().default("hold")
-}).renamedFrom("notification_quiet_hours").unique("byQuietHoursSubject", ["subjectId"]), tt = k("_voltro_notification_held", {
+}).renamedFrom("notification_quiet_hours").unique("byQuietHoursSubject", ["subjectId"]), Mt = k("_voltro_notification_held", {
 	id: S({ prefix: "notifheld" }),
 	kind: A(),
 	subjectId: A(),
 	send: T(),
 	flushAt: j()
-}).renamedFrom("notification_held").index("byHeldFlushAt", ["flushAt"]).index("byHeldSubjectKind", ["subjectId", "kind"]), nt = class extends h.Tag("@voltro/plugin-notifications/NotificationService")() {}, rt = (e) => async (t) => {
+}).renamedFrom("notification_held").index("byHeldFlushAt", ["flushAt"]).index("byHeldSubjectKind", ["subjectId", "kind"]), $ = class extends oe.Tag("@voltro/plugin-notifications/NotificationService")() {}, Nt = (e) => async (t) => {
 	if (e !== void 0) try {
 		let n = await e(t);
 		if (typeof n == "string" && n !== "") return n;
 	} catch {}
 	return t.request.subject.id ?? "anonymous";
-}, it = (e) => e.request.subject.tenantId ?? null, $ = e, at = (e = {}) => {
-	let h = rt(e.resolveSubjectId), _ = ce({
-		base: $,
+}, Pt = (e) => e.request.subject.tenantId ?? null, Ft = e, It = { collects: [
+	{
+		category: "device-id",
+		linked: !0,
+		tracking: !1,
+		purposes: ["app-functionality"]
+	},
+	{
+		category: "identifiers",
+		linked: !0,
+		tracking: !1,
+		purposes: ["app-functionality"]
+	},
+	{
+		category: "other-diagnostic-data",
+		linked: !1,
+		tracking: !1,
+		purposes: ["app-functionality"]
+	}
+] }, Lt = (e = {}) => {
+	let h = Nt(e.resolveSubjectId), oe = ue({
+		base: Ft,
 		alias: e.alias,
 		instance: e.name
 	});
@@ -915,7 +1215,7 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		timeColumn: "createdAt",
 		ttlMs: O(process.env.VOLTRO_NOTIFICATION_INBOX_READ_TTL_HOURS, 4320),
 		envVar: "VOLTRO_NOTIFICATION_INBOX_READ_TTL_HOURS",
-		where: oe("readAt")
+		where: ce("readAt")
 	}), D({
 		source: "plugin",
 		table: "_voltro_notification_held",
@@ -923,80 +1223,80 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		ttlMs: O(process.env.VOLTRO_NOTIFICATION_HELD_TTL_HOURS, 168),
 		envVar: "VOLTRO_NOTIFICATION_HELD_TTL_HOURS"
 	});
-	let v = e.store === void 0, y = { current: e.store ?? R() }, b = {
-		addInbox: (e) => y.current.addInbox(e),
-		listInbox: (e, t) => y.current.listInbox(e, t),
-		markRead: (e, t) => y.current.markRead(e, t),
-		markUnread: (e, t) => y.current.markUnread(e, t),
-		markAllRead: (e) => y.current.markAllRead(e),
-		setArchived: (e, t, n) => y.current.setArchived(e, t, n),
-		unreadCount: (e) => y.current.unreadCount(e),
-		getPreferences: (e) => y.current.getPreferences(e),
-		setPreference: (e) => y.current.setPreference(e),
-		recordDelivery: (e) => y.current.recordDelivery(e),
-		listDeliveries: (e) => y.current.listDeliveries(e),
-		markClicked: (e) => y.current.markClicked(e),
-		subscribeTopic: (e) => y.current.subscribeTopic(e),
-		unsubscribeTopic: (e, t) => y.current.unsubscribeTopic(e, t),
-		listTopicSubscribers: (e) => y.current.listTopicSubscribers(e),
-		getQuietHours: (e) => y.current.getQuietHours(e),
-		setQuietHours: (e) => y.current.setQuietHours(e),
-		clearQuietHours: (e) => y.current.clearQuietHours(e),
-		enqueueHeld: (e) => y.current.enqueueHeld(e),
-		pendingDigest: (e) => y.current.pendingDigest(e),
-		dueHeld: (e) => y.current.dueHeld(e),
-		clearHeld: (e) => y.current.clearHeld(e)
-	}, x = e.channels ?? [I()], S = x.some((e) => e.id === "inApp") ? x : [...x, Se(b)], C = e.digestWindowMs ?? 0, w = S.some((e) => e.id === "webPush"), T = Te({
-		channels: S,
-		store: b,
-		digestWindowMs: C
-	}), E, k = [
+	let _ = e.store === void 0, v = { current: e.store ?? Ee() }, y, b = (e) => e.then((e) => (de(y, i), e)), x = {
+		addInbox: (e) => b(v.current.addInbox(e)),
+		listInbox: (e, t) => v.current.listInbox(e, t),
+		markRead: (e, t) => b(v.current.markRead(e, t)),
+		markUnread: (e, t) => b(v.current.markUnread(e, t)),
+		markAllRead: (e) => b(v.current.markAllRead(e)),
+		setArchived: (e, t, n) => b(v.current.setArchived(e, t, n)),
+		unreadCount: (e) => v.current.unreadCount(e),
+		getPreferences: (e) => v.current.getPreferences(e),
+		setPreference: (e) => v.current.setPreference(e),
+		recordDelivery: (e) => v.current.recordDelivery(e),
+		listDeliveries: (e) => v.current.listDeliveries(e),
+		markClicked: (e) => v.current.markClicked(e),
+		subscribeTopic: (e) => v.current.subscribeTopic(e),
+		unsubscribeTopic: (e, t) => v.current.unsubscribeTopic(e, t),
+		listTopicSubscribers: (e) => v.current.listTopicSubscribers(e),
+		getQuietHours: (e) => v.current.getQuietHours(e),
+		setQuietHours: (e) => v.current.setQuietHours(e),
+		clearQuietHours: (e) => v.current.clearQuietHours(e),
+		enqueueHeld: (e) => v.current.enqueueHeld(e),
+		pendingDigest: (e) => v.current.pendingDigest(e),
+		dueHeld: (e) => v.current.dueHeld(e),
+		clearHeld: (e) => v.current.clearHeld(e)
+	}, S = e.channels ?? [ve()], C = S.some((e) => e.id === "inApp") ? S : [...S, Oe(x)], w = e.digestWindowMs ?? 0, T = C.some((e) => e.id === "webPush"), E = je({
+		channels: C,
+		store: x,
+		digestWindowMs: w
+	}), k, A = [
 		{
 			...r,
 			description: "The caller's in-app inbox items.",
-			execute: (e, t) => g.promise(async () => T.inbox(await h(t), e))
+			execute: (e, t) => g.promise(async () => E.inbox(await h(t), e))
 		},
 		{
-			...p,
+			...m,
 			description: "The caller's unread count.",
-			execute: (e, t) => g.promise(async () => ({ count: await T.unreadCount(await h(t)) }))
+			execute: (e, t) => g.promise(async () => ({ count: await E.unreadCount(await h(t)) }))
 		},
 		{
-			...a,
+			...o,
 			description: "Mark an inbox item read.",
-			execute: (e, t) => g.promise(async () => ({ ok: await T.markRead(e.id, await h(t)) }))
+			execute: (e, t) => g.promise(async () => ({ ok: await E.markRead(e.id, await h(t)) }))
 		},
 		{
-			...o,
+			...s,
 			description: "Mark an inbox item unread again.",
-			execute: (e, t) => g.promise(async () => ({ ok: await T.markUnread(e.id, await h(t)) }))
+			execute: (e, t) => g.promise(async () => ({ ok: await E.markUnread(e.id, await h(t)) }))
 		},
 		{
-			...i,
+			...a,
 			description: "Mark every unread item in the caller's inbox read.",
-			execute: (e, t) => g.promise(async () => ({ count: await T.markAllRead(await h(t)) }))
+			execute: (e, t) => g.promise(async () => ({ count: await E.markAllRead(await h(t)) }))
 		},
 		{
 			...t,
 			description: "Archive an inbox item — a different state from read; this is what empties the inbox.",
-			execute: (e, t) => g.promise(async () => ({ ok: await T.setArchived(e.id, await h(t), !0) }))
+			execute: (e, t) => g.promise(async () => ({ ok: await E.setArchived(e.id, await h(t), !0) }))
 		},
 		{
-			...f,
+			...p,
 			description: "Return an archived item to the inbox.",
-			execute: (e, t) => g.promise(async () => ({ ok: await T.setArchived(e.id, await h(t), !1) }))
+			execute: (e, t) => g.promise(async () => ({ ok: await E.setArchived(e.id, await h(t), !1) }))
 		},
 		{
-			...c,
+			...l,
 			description: "The caller's channel preferences.",
-			execute: (e, t) => g.promise(async () => T.getPreferences(await h(t)))
+			execute: (e, t) => g.promise(async () => E.getPreferences(await h(t)))
 		},
 		{
-			...l,
+			...u,
 			description: "Toggle a channel on/off for a category.",
 			execute: (e, t) => g.promise(async () => {
 				let { category: n, channel: r, enabled: i } = e;
-				return await T.setPreference({
+				return await E.setPreference({
 					subjectId: await h(t),
 					category: n,
 					channel: r,
@@ -1005,21 +1305,21 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 			})
 		},
 		{
-			...d,
+			...f,
 			description: "Subscribe the caller to a broadcast topic.",
-			execute: (e, t) => g.promise(async () => (await T.subscribe(e.topic, await h(t), it(t)), { ok: !0 }))
+			execute: (e, t) => g.promise(async () => (await E.subscribe(e.topic, await h(t), Pt(t)), { ok: !0 }))
 		},
 		{
-			...m,
+			...ee,
 			description: "Unsubscribe the caller from a broadcast topic.",
-			execute: (e, t) => g.promise(async () => (await T.unsubscribe(e.topic, await h(t)), { ok: !0 }))
+			execute: (e, t) => g.promise(async () => (await E.unsubscribe(e.topic, await h(t)), { ok: !0 }))
 		},
 		{
-			...u,
+			...d,
 			description: "Set the caller's quiet-hours (DND) window.",
 			execute: (e, t) => g.promise(async () => {
 				let n = e;
-				return await T.setQuietHours({
+				return await E.setQuietHours({
 					subjectId: await h(t),
 					startMinute: n.startMinute,
 					endMinute: n.endMinute,
@@ -1031,59 +1331,59 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		{
 			...n,
 			description: "Clear the caller's quiet-hours window.",
-			execute: (e, t) => g.promise(async () => (await T.clearQuietHours(await h(t)), { ok: !0 }))
+			execute: (e, t) => g.promise(async () => (await E.clearQuietHours(await h(t)), { ok: !0 }))
 		}
-	], A = w ? [
+	], j = T ? [
 		{
-			...ee,
+			...te,
 			description: "The VAPID application-server key a subscribing browser needs.",
-			execute: () => g.sync(() => ({ key: Ye(X().channelOptions?.privateKey) }))
+			execute: () => g.sync(() => ({ key: nt(q().channelOptions?.privateKey) }))
 		},
 		{
-			...re,
+			...ie,
 			description: "Register the calling subject's browser push subscription (one row per endpoint).",
 			execute: (e, t) => g.promise(async () => {
 				let n = e;
-				return await X().store.upsert({
+				return await q().store.upsert({
 					subjectId: await h(t),
 					endpoint: n.endpoint,
-					endpointHash: q(n.endpoint),
+					endpointHash: W(n.endpoint),
 					p256dh: n.p256dh,
 					auth: n.auth,
 					ua: n.ua ?? null,
-					tenantId: it(t)
+					tenantId: Pt(t)
 				}), { ok: !0 };
 			})
 		},
 		{
-			...ie,
+			...ae,
 			description: "Remove one of the calling subject's own subscriptions.",
-			execute: (e, t) => g.promise(async () => ({ ok: await X().store.removeForSubject(q(e.endpoint), await h(t)) }))
+			execute: (e, t) => g.promise(async () => ({ ok: await q().store.removeForSubject(W(e.endpoint), await h(t)) }))
 		},
 		{
-			...ne,
+			...re,
 			description: "How many push endpoints the calling subject has registered.",
-			execute: (e, t) => g.promise(async () => ({ endpoints: await X().store.countForSubject(await h(t)) }))
+			execute: (e, t) => g.promise(async () => ({ endpoints: await q().store.countForSubject(await h(t)) }))
 		}
-	] : [], j = (e) => ({
+	] : [], M = (e) => ({
 		kind: "json",
 		data: e
-	}), M = (e, t) => ({
+	}), fe = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), le = (e, t) => new URLSearchParams(new URL(e, "http://x").search).get(t), N = [{
+	}), N = (e, t) => new URLSearchParams(new URL(e, "http://x").search).get(t), pe = [{
 		method: "GET",
 		path: "/deliveries",
 		scope: "process",
 		description: "Recent delivery records (newest first) + per-channel + per-status counts.",
 		handler: () => g.promise(async () => {
-			let e = await b.listDeliveries({ limit: 200 }), t = {}, n = 0, r = 0;
+			let e = await x.listDeliveries({ limit: 200 }), t = {}, n = 0, r = 0;
 			for (let i of e) t[i.channel] = (t[i.channel] ?? 0) + 1, i.status === "sent" ? n++ : i.status === "failed" && r++;
 			let i = e.slice(0, 100).map(({ clickToken: e, ...t }) => t);
-			return j({
+			return M({
 				deliveries: i,
-				channels: S.map((e) => e.id),
+				channels: C.map((e) => e.id),
 				stats: {
 					sent: n,
 					failed: r,
@@ -1097,28 +1397,29 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 		scope: "process",
 		description: "In-app inbox for a subject (?subjectId=…).",
 		handler: (e) => {
-			let t = le(e.url, "subjectId");
-			return t ? g.promise(async () => j({
-				items: await b.listInbox(t, { limit: 100 }),
-				unread: await b.unreadCount(t)
-			})) : g.succeed(M(400, "subjectId query param required"));
+			let t = N(e.url, "subjectId");
+			return t ? g.promise(async () => M({
+				items: await x.listInbox(t, { limit: 100 }),
+				unread: await x.unreadCount(t)
+			})) : g.succeed(fe(400, "subjectId query param required"));
 		}
 	}];
-	return se({
-		name: _,
-		baseName: $,
+	return le({
+		privacy: It,
+		name: oe,
+		baseName: Ft,
 		description: "Unified notifications — email/slack/sms/push/in-app with preference routing, inbox + delivery log.",
 		permissions: ["inspect:read", "store:write"],
 		...e.tables === !1 ? {} : { extendSchema: { tables: [
-			Xe,
-			Ze,
-			Qe,
-			$e,
-			et,
-			tt,
-			ze
+			Dt,
+			Ot,
+			kt,
+			At,
+			jt,
+			Mt,
+			Ke
 		] } },
-		...w ? {
+		...T ? {
 			declaredEnv: [{
 				name: "VOLTRO_VAPID_PRIVATE_KEY",
 				required: !0,
@@ -1134,12 +1435,12 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 					try {
 						t = JSON.parse(Buffer.from(e.rawBody).toString("utf8")).token;
 					} catch {}
-					if (typeof t != "string" || t === "" || !Re(t, t)) return {
+					if (typeof t != "string" || t === "" || !Ge(t, t)) return {
 						status: 400,
 						body: JSON.stringify({ error: "token required" }),
 						contentType: "application/json"
 					};
-					let n = await b.markClicked(t);
+					let n = await x.markClicked(t);
 					return {
 						status: n ? 200 : 404,
 						body: JSON.stringify({ ok: n }),
@@ -1149,27 +1450,27 @@ var F = class extends _.TaggedError()("PushTokenRejected", {
 				maxBodyBytes: 4096
 			}]
 		} : {},
-		services: ae.succeed(nt, T),
-		routes: [...k, ...A],
-		rpcClientDescriptors: w ? [...s, ...te] : s,
-		inspectEndpoints: N,
+		services: se.succeed($, E),
+		routes: [...A, ...j],
+		rpcClientDescriptors: T ? [...c, ...ne] : c,
+		inspectEndpoints: pe,
 		bindDataStore: (t) => {
-			v && (y.current = xe(t)), He(t);
+			y = t, _ && (v.current = De(t)), Ye(t);
 			let n = e.flushIntervalMs ?? 3e4;
-			E = setInterval(() => {
-				T.flushDue().catch(() => {});
-			}, n), typeof E.unref == "function" && E.unref();
+			k = setInterval(() => {
+				E.flushDue().catch(() => {});
+			}, n), typeof k.unref == "function" && k.unref();
 		},
 		onActivate: (e) => g.sync(() => {
-			w && Ke(), e.logger.info("notifications active", {
-				channels: S.map((e) => e.id),
-				digestWindowMs: C
+			T && $e(), e.logger.info("notifications active", {
+				channels: C.map((e) => e.id),
+				digestWindowMs: w
 			});
 		}),
 		onDeactivate: () => g.sync(() => {
-			E && clearInterval(E), E = void 0;
+			k && clearInterval(k), k = void 0;
 		})
 	});
 };
 //#endregion
-export { nt as NotificationService, F as PushTokenRejected, Te as buildNotificationService, I as consoleChannel, ye as customChannel, xe as dataStoreNotificationStore, Be as dataStorePushSubscriptionStore, Ie as decryptWebPushPayload, Qe as deliveriesTable, _e as emailChannel, Fe as encryptWebPushPayload, q as endpointHashOf, De as generateVapidPrivateKey, tt as heldTable, Se as inAppChannel, Ce as inQuietHours, Xe as inboxTable, rt as makeSubjectId, R as memoryNotificationStore, J as memoryPushSubscriptionStore, B as minuteOfDayInZone, at as notificationsPlugin, Ze as preferencesTable, be as pushChannel, ze as pushSubscriptionsTable, we as quietHoursEnd, et as quietHoursTable, Ue as resetWebPushStoreForTest, L as resolveChannels, Le as sendWebPush, ve as smsChannel, $e as topicSubscriptionsTable, je as vapidAuthorization, G as vapidPublicKeyFor, Ge as webPushChannel, Ye as webPushPublicKey, ge as webhookChannel };
+export { lt as APNS_HOSTS, dt as APNS_TOKEN_REJECTIONS, wt as EXPO_PUSH_ENDPOINT, gt as FCM_SCOPE, yt as FCM_TOKEN_REJECTIONS, _t as GOOGLE_TOKEN_URI, X as NOTIFICATION_SEND_EFFECT, $ as NotificationService, I as PushTokenRejected, pt as apnsBody, ft as apnsProviderToken, ht as apnsTransport, je as buildNotificationService, ve as consoleChannel, Se as customChannel, De as dataStoreNotificationStore, qe as dataStorePushSubscriptionStore, Ue as decryptWebPushPayload, h as defineNotification, kt as deliveriesTable, be as emailChannel, He as encryptWebPushPayload, W as endpointHashOf, ot as enqueueNotification, Et as expoPushTransport, xt as fcmAssertion, St as fcmMessage, vt as fcmSendEndpoint, Ct as fcmTransport, Ne as generateVapidPrivateKey, Mt as heldTable, Oe as inAppChannel, ke as inQuietHours, Dt as inboxTable, Tt as isExpoPushToken, Nt as makeSubjectId, Ee as memoryNotificationStore, G as memoryPushSubscriptionStore, R as minuteOfDayInZone, ct as notificationOutboxHandler, Lt as notificationsPlugin, bt as parseServiceAccount, Ot as preferencesTable, we as pushChannel, Ke as pushSubscriptionsTable, Ae as quietHoursEnd, jt as quietHoursTable, Xe as resetWebPushStoreForTest, Te as resolveChannels, Ce as richPushOf, it as sendNotification, We as sendWebPush, xe as smsChannel, At as topicSubscriptionsTable, Le as vapidAuthorization, U as vapidPublicKeyFor, Qe as webPushChannel, nt as webPushPublicKey, ye as webhookChannel };