easy-ping 0.4.0 → 0.5.0

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-BfLe2J0t.cjs';
-export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-BfLe2J0t.cjs';
+import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-D3lTy-4E.cjs';
+export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-D3lTy-4E.cjs';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-CiMsGlQe.cjs';
-export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-CiMsGlQe.cjs';
+import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-CHd2ZiGC.cjs';
+export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-CHd2ZiGC.cjs';
 import { E as EmailProvider } from './provider-CA45WVqt.cjs';
 export { a as EmailMessage, P as ProviderSendResult } from './provider-CA45WVqt.cjs';
 
@@ -23,10 +23,7 @@ type NotificationDefinition<TSchema extends StandardSchemaV1 | undefined = Stand
 };
 /** Binds TSchema so email callbacks infer the payload; TS cannot infer from a sibling property. */
 declare function defineNotification<TSchema extends StandardSchemaV1 | undefined = undefined>(definition: NotificationDefinition<TSchema>): NotificationDefinition<TSchema>;
-/**
- * Erased form. `EmailTemplate<never>` because callbacks are contravariant —
- * anything else makes every schema-typed definition fail to assign.
- */
+/** Erased form. `EmailTemplate<never>` because callbacks are contravariant. */
 type AnyNotificationDefinition = {
     schema?: StandardSchemaV1 | undefined;
     channels: readonly Channel[];
@@ -42,19 +39,10 @@ type RateLimitConfig = {
     /** Requests allowed per key per window. */
     max: number;
     windowMs: number;
-    /**
-     * Which bucket a request lands in. Defaults to the client address as the
-     * usual proxy headers report it; returning null exempts the request. Behind
-     * no proxy those headers are absent, so supply your own key there.
-     */
+    /** Bucket key. Defaults to the client address from proxy headers; null exempts the request. */
     key?: (request: Request) => string | null;
 };
-/**
- * Fixed-window counter held in process memory. Per isolate on edge runtimes
- * and per replica anywhere else, so it bounds one client's cost to one
- * process rather than enforcing a global quota. That is enough to blunt
- * secret guessing and poll storms, which is what it is for.
- */
+/** Fixed window in process memory: per isolate or replica, so a bound rather than a quota. */
 declare function createRateLimiter(config: RateLimitConfig): (request: Request) => Response | null;
 
 type SessionConfig = {
@@ -70,10 +58,7 @@ type DeliveryConfig = {
     /** inline mode only. */
     throwOnError?: boolean;
     backoff?: "exponential" | ((attempt: number) => number);
-    /**
-     * Next.js `after`, Cloudflare `ctx.waitUntil`, or @vercel/functions.
-     * Injected, not detected: importing a maybe-absent package breaks bundlers.
-     */
+    /** Next.js `after` or Cloudflare `ctx.waitUntil`. Injected, not detected. */
     waitUntil?: (promise: Promise<unknown>) => void;
 };
 type ChannelsConfig = {
@@ -99,25 +84,14 @@ type EasyPingConfig<TDefs extends NotificationDefinitions> = {
         /** Sweeps one POST /cron may run before returning. Defaults to 50. */
         maxSweeps?: number;
     };
-    /**
-     * Bearer secret for plugins' machine routes (`/push/prune`, `/digests/cron`).
-     * Falls back to `cron.secret`; set it when the scheduler that hits /cron
-     * should not also be able to prune devices or fire digests.
-     */
+    /** Bearer secret for plugin machine routes. Falls back to `cron.secret`. */
     machineSecret?: string;
-    /**
-     * In-process fixed-window limiter, applied before routing. Keyed by client
-     * address from the usual proxy headers unless `key` says otherwise.
-     */
+    /** In-process fixed-window limiter, applied before routing. */
     rateLimit?: RateLimitConfig;
     plugins?: readonly AnyPlugin[];
     /** Where the handler is mounted, used to strip the prefix off incoming URLs. */
     basePath?: string;
-    /**
-     * Origins allowed to POST besides the request's own host. Cross-origin
-     * POSTs are otherwise refused with 403, and every POST must be
-     * `application/json`. `"*.example.com"` matches subdomains.
-     */
+    /** Origins other than the request host that may POST. `"*.example.com"` matches subdomains. */
     trustedOrigins?: readonly string[];
     /** Runs before routing. Return a Response to short-circuit — a rate limiter's 429, say. */
     onRequest?: (request: Request) => Promisable<Response | undefined | void>;
@@ -182,13 +156,7 @@ type EasyPing<TDefs extends NotificationDefinitions> = {
     healthCheck(): Promise<HealthReport>;
     /** Every mounted route with its auth scope, so `custom`-scoped ones stay visible. RFC 0002 §3. */
     listRoutes(): readonly MountedRoute[];
-    /**
-     * Deliveries that exhausted their attempts, newest first.
-     *
-     * The retry machinery is otherwise a black box: rows go quiet and the only
-     * way to ask what happened is SQL against tables the library owns. Wire this
-     * to an admin page or an alert.
-     */
+    /** Deliveries that exhausted their attempts, newest first. Wire it to an admin page or an alert. */
     getFailedDeliveries(options?: {
         /** Defaults to the last 24 hours. */
         since?: Date;
@@ -217,11 +185,7 @@ type SweepResult = {
     /** Deliveries that had nothing to do. Not errors; see DeliveryOutcome. */
     skipped: number;
 };
-/**
- * What gets persisted to `last_error`. Provider responses quote the offending
- * field, which for a bad recipient is the address itself; that column outlives
- * the notification and is read by admin tooling, so addresses do not go in.
- */
+/** Persisted to `last_error`, which admin tooling reads: addresses do not go in. */
 declare const redactErrorMessage: (text: string) => string;
 declare function createRunner(deps: RunnerDeps): {
     runOnce: (options?: {
@@ -248,19 +212,10 @@ type JsonBody = {
 } | {
     error: Response;
 };
-/**
- * Reads a JSON object body with a byte cap enforced while streaming, so an
- * oversized body is refused before it is buffered. Malformed JSON is 400; an
- * empty body is `{}`. Plugin routes should use this rather than
- * `request.json()`, which has no limit.
- */
+/** Reads a JSON object body with a streaming byte cap. Malformed JSON is 400; an empty body is `{}`. */
 declare function readJsonBody(request: Request, maxBytes?: number): Promise<JsonBody>;
 
-/**
- * For email templates built with template literals. Anything in a payload
- * that a user typed — a display name, a comment excerpt — goes through this
- * or the recipient gets that user's HTML delivered from your sending domain.
- */
+/** For template literals: anything a user typed goes through this, or their HTML ships from your domain. */
 declare const escapeHtml: (value: unknown) => string;
 
 declare const MIN_SECRET_LENGTH = 16;

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-BfLe2J0t.js';
-export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-BfLe2J0t.js';
+import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-D3lTy-4E.js';
+export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-D3lTy-4E.js';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-C9Hoxus2.js';
-export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-C9Hoxus2.js';
+import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-Cg9usuUi.js';
+export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-Cg9usuUi.js';
 import { E as EmailProvider } from './provider-CA45WVqt.js';
 export { a as EmailMessage, P as ProviderSendResult } from './provider-CA45WVqt.js';
 
@@ -23,10 +23,7 @@ type NotificationDefinition<TSchema extends StandardSchemaV1 | undefined = Stand
 };
 /** Binds TSchema so email callbacks infer the payload; TS cannot infer from a sibling property. */
 declare function defineNotification<TSchema extends StandardSchemaV1 | undefined = undefined>(definition: NotificationDefinition<TSchema>): NotificationDefinition<TSchema>;
-/**
- * Erased form. `EmailTemplate<never>` because callbacks are contravariant —
- * anything else makes every schema-typed definition fail to assign.
- */
+/** Erased form. `EmailTemplate<never>` because callbacks are contravariant. */
 type AnyNotificationDefinition = {
     schema?: StandardSchemaV1 | undefined;
     channels: readonly Channel[];
@@ -42,19 +39,10 @@ type RateLimitConfig = {
     /** Requests allowed per key per window. */
     max: number;
     windowMs: number;
-    /**
-     * Which bucket a request lands in. Defaults to the client address as the
-     * usual proxy headers report it; returning null exempts the request. Behind
-     * no proxy those headers are absent, so supply your own key there.
-     */
+    /** Bucket key. Defaults to the client address from proxy headers; null exempts the request. */
     key?: (request: Request) => string | null;
 };
-/**
- * Fixed-window counter held in process memory. Per isolate on edge runtimes
- * and per replica anywhere else, so it bounds one client's cost to one
- * process rather than enforcing a global quota. That is enough to blunt
- * secret guessing and poll storms, which is what it is for.
- */
+/** Fixed window in process memory: per isolate or replica, so a bound rather than a quota. */
 declare function createRateLimiter(config: RateLimitConfig): (request: Request) => Response | null;
 
 type SessionConfig = {
@@ -70,10 +58,7 @@ type DeliveryConfig = {
     /** inline mode only. */
     throwOnError?: boolean;
     backoff?: "exponential" | ((attempt: number) => number);
-    /**
-     * Next.js `after`, Cloudflare `ctx.waitUntil`, or @vercel/functions.
-     * Injected, not detected: importing a maybe-absent package breaks bundlers.
-     */
+    /** Next.js `after` or Cloudflare `ctx.waitUntil`. Injected, not detected. */
     waitUntil?: (promise: Promise<unknown>) => void;
 };
 type ChannelsConfig = {
@@ -99,25 +84,14 @@ type EasyPingConfig<TDefs extends NotificationDefinitions> = {
         /** Sweeps one POST /cron may run before returning. Defaults to 50. */
         maxSweeps?: number;
     };
-    /**
-     * Bearer secret for plugins' machine routes (`/push/prune`, `/digests/cron`).
-     * Falls back to `cron.secret`; set it when the scheduler that hits /cron
-     * should not also be able to prune devices or fire digests.
-     */
+    /** Bearer secret for plugin machine routes. Falls back to `cron.secret`. */
     machineSecret?: string;
-    /**
-     * In-process fixed-window limiter, applied before routing. Keyed by client
-     * address from the usual proxy headers unless `key` says otherwise.
-     */
+    /** In-process fixed-window limiter, applied before routing. */
     rateLimit?: RateLimitConfig;
     plugins?: readonly AnyPlugin[];
     /** Where the handler is mounted, used to strip the prefix off incoming URLs. */
     basePath?: string;
-    /**
-     * Origins allowed to POST besides the request's own host. Cross-origin
-     * POSTs are otherwise refused with 403, and every POST must be
-     * `application/json`. `"*.example.com"` matches subdomains.
-     */
+    /** Origins other than the request host that may POST. `"*.example.com"` matches subdomains. */
     trustedOrigins?: readonly string[];
     /** Runs before routing. Return a Response to short-circuit — a rate limiter's 429, say. */
     onRequest?: (request: Request) => Promisable<Response | undefined | void>;
@@ -182,13 +156,7 @@ type EasyPing<TDefs extends NotificationDefinitions> = {
     healthCheck(): Promise<HealthReport>;
     /** Every mounted route with its auth scope, so `custom`-scoped ones stay visible. RFC 0002 §3. */
     listRoutes(): readonly MountedRoute[];
-    /**
-     * Deliveries that exhausted their attempts, newest first.
-     *
-     * The retry machinery is otherwise a black box: rows go quiet and the only
-     * way to ask what happened is SQL against tables the library owns. Wire this
-     * to an admin page or an alert.
-     */
+    /** Deliveries that exhausted their attempts, newest first. Wire it to an admin page or an alert. */
     getFailedDeliveries(options?: {
         /** Defaults to the last 24 hours. */
         since?: Date;
@@ -217,11 +185,7 @@ type SweepResult = {
     /** Deliveries that had nothing to do. Not errors; see DeliveryOutcome. */
     skipped: number;
 };
-/**
- * What gets persisted to `last_error`. Provider responses quote the offending
- * field, which for a bad recipient is the address itself; that column outlives
- * the notification and is read by admin tooling, so addresses do not go in.
- */
+/** Persisted to `last_error`, which admin tooling reads: addresses do not go in. */
 declare const redactErrorMessage: (text: string) => string;
 declare function createRunner(deps: RunnerDeps): {
     runOnce: (options?: {
@@ -248,19 +212,10 @@ type JsonBody = {
 } | {
     error: Response;
 };
-/**
- * Reads a JSON object body with a byte cap enforced while streaming, so an
- * oversized body is refused before it is buffered. Malformed JSON is 400; an
- * empty body is `{}`. Plugin routes should use this rather than
- * `request.json()`, which has no limit.
- */
+/** Reads a JSON object body with a streaming byte cap. Malformed JSON is 400; an empty body is `{}`. */
 declare function readJsonBody(request: Request, maxBytes?: number): Promise<JsonBody>;
 
-/**
- * For email templates built with template literals. Anything in a payload
- * that a user typed — a display name, a comment excerpt — goes through this
- * or the recipient gets that user's HTML delivered from your sending domain.
- */
+/** For template literals: anything a user typed goes through this, or their HTML ships from your domain. */
 declare const escapeHtml: (value: unknown) => string;
 
 declare const MIN_SECRET_LENGTH = 16;

package/dist/index.js

@@ -1,12 +1,12 @@
-import { createRunner } from './chunk-CYKAM7LE.js';
-export { createRunner, redactErrorMessage } from './chunk-CYKAM7LE.js';
-export { defineClientPlugin, definePlugin } from './chunk-W6I3B2CI.js';
-import { createHandler, createScopedSigner } from './chunk-DG3ZL5NP.js';
-export { DEFAULT_TOKEN_TTL_SECONDS, MAX_BODY_BYTES, MAX_TOKEN_TTL_SECONDS, expiresIn, readJsonBody, signToken, verifyToken } from './chunk-DG3ZL5NP.js';
-import { consoleLogger, ConfigError, createPluginStore, ValidationError } from './chunk-3Y2MBUAW.js';
-export { ConfigError, EasyPingError, ValidationError, consoleLogger } from './chunk-3Y2MBUAW.js';
+export { defineClientPlugin, definePlugin } from './chunk-E4IZ2CQC.js';
+import { createRunner } from './chunk-GJNLOQJS.js';
+export { createRunner, redactErrorMessage } from './chunk-GJNLOQJS.js';
+import { createHandler, createScopedSigner } from './chunk-BECMTNK7.js';
+export { DEFAULT_TOKEN_TTL_SECONDS, MAX_BODY_BYTES, MAX_TOKEN_TTL_SECONDS, expiresIn, readJsonBody, signToken, verifyToken } from './chunk-BECMTNK7.js';
+import { consoleLogger, ConfigError, createPluginStore, ValidationError } from './chunk-3VOQOGDR.js';
+export { ConfigError, EasyPingError, ValidationError, consoleLogger } from './chunk-3VOQOGDR.js';
+import './chunk-AEYYTE5I.js';
 export { decodeBase64Url, encodeBase64Url } from './chunk-PTGHMCCG.js';
-import './chunk-PSJHXZPR.js';
 
 // src/core/definition.ts
 function defineNotification(definition) {
@@ -197,8 +197,7 @@ async function runSend(type, input, deps) {
       id: newId(),
       channel: decision.channel,
       maxAttempts: definition.maxAttempts ?? deps.maxAttempts,
-      // `defer` needs no machinery beyond not_before — the claim query
-      // already refuses rows whose time has not come. RFC 0004 §4.2.
+      // defer is just not_before; the claim query refuses rows whose time has not come. RFC 0004 §4.2.
       notBefore: decision.action === "defer" && decision.notBefore ? decision.notBefore : now
     }));
     if (deliveries.length === 0) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/definition.ts","../src/core/html.ts","../src/core/rate-limit.ts","../src/core/send.ts","../src/core/instance.ts"],"names":["bucket"],"mappings":";;;;;;;;;;;AAuBO,SAAS,mBACd,UAAA,EACiC;AACjC,EAAA,OAAO,UAAA;AACT;;;AC3BA,IAAM,OAAA,GAAkC;AAAA,EACtC,GAAA,EAAK,OAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,QAAA;AAAA,EACL,GAAA,EAAK;AACP,CAAA;AAOO,IAAM,UAAA,GAAa,CAAC,KAAA,KACzB,MAAA,CAAO,SAAS,EAAE,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,CAAC,IAAA,KAAS,OAAA,CAAQ,IAAI,KAAK,IAAI;;;ACFzE,IAAM,aAAA,GAAgB,CAAC,OAAA,KAAoC;AACzD,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,OACE,QAAQ,GAAA,CAAI,kBAAkB,KAC9B,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IACvB,OAAA,CAAQ,GAAA,CAAI,iBAAiB,GAAG,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA,EAAG,MAAK,IACpD,IAAA;AAEJ,CAAA;AAQO,SAAS,kBAAkB,MAAA,EAAgE;AAChG,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAA,IAAO,aAAA;AAC5B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAgD;AACpE,EAAA,IAAI,SAAA,GAAY,CAAA;AAEhB,EAAA,OAAO,CAAC,OAAA,KAAY;AAClB,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAIrB,IAAA,IAAI,GAAA,GAAM,SAAA,GAAY,MAAA,CAAO,QAAA,EAAU;AACrC,MAAA,KAAA,MAAW,CAAC,EAAA,EAAIA,OAAM,CAAA,IAAK,OAAA,EAAS,IAAIA,OAAAA,CAAO,OAAA,IAAW,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA;AAChF,MAAA,SAAA,GAAY,GAAA;AAAA,IACd;AAEA,IAAA,IAAI,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,OAAA,IAAW,GAAA,EAAK;AACpC,MAAA,MAAA,GAAS,EAAE,KAAA,EAAO,CAAA,EAAG,OAAA,EAAS,GAAA,GAAM,OAAO,QAAA,EAAS;AACpD,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACzB;AAEA,IAAA,MAAA,CAAO,KAAA,IAAS,CAAA;AAChB,IAAA,IAAI,MAAA,CAAO,KAAA,IAAS,MAAA,CAAO,GAAA,EAAK,OAAO,IAAA;AAEvC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,IAAA,CAAA,CAAM,MAAA,CAAO,OAAA,GAAU,GAAA,IAAO,GAAI,CAAC,CAAC,CAAA;AAAA,QAC3E,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,CAAA;AACF;;;ACpCA,eAAe,eAAA,CAAgB,IAAA,EAAc,MAAA,EAA0B,OAAA,EAAkB;AACvF,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,WAAW,CAAA,CAAE,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,IAAA;AAAA,MACA,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,QAC5B,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,KAAA,CAAM,IAAA,GAAO,EAAE,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA,KAAM;AAAC,OACjE,CAAE;AAAA,KACJ;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,KAAA;AAChB;AAWO,SAAS,eAAA,CACd,OAAA,EACA,QAAA,EACA,OAAA,GAAgC,EAAC,EACxB;AACT,EAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,QAAA,CAAS,OAAO,OAAA,KAAY,KAAA;AAC5D,EAAA,IAAI,YAAY,OAAA,EAAS,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,QAAQ,CAAA;AAEhE,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,QAAA,EAAU,QAAA,CAAS,OAAO,CAAA,IAAK,MAAA,CAAO,KAAA,EAAO,OAAO,CAAA;AAC7F;AAGA,eAAe,UAAA,CACb,OAAA,EACA,GAAA,EACA,MAAA,EAC+B;AAC/B,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAE1C,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,OAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,IAAI,MAAA,CAAO,EAAA,EAAI,MAAM,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AAGd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,6CAAA,CAAA,EAAiD;AAAA,QAChF,MAAM,GAAA,CAAI,IAAA;AAAA,QACV;AAAA,OACD,CAAA;AACD,MAAA,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAA,EAAI,MAAS,CAAA;AAAA,IACnC;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT;AAEA,eAAe,cACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,SAAA,EACA,UACA,MAAA,EAC2B;AAC3B,EAAA,IAAI,cAAA,GAAiB,OAAA;AACrB,EAAA,IAAI,gBAAA,GAAmB,SAAA;AAEvB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,UAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,MAAM,IAAA,CAAK;AAAA,QAClB,GAAG,IAAA;AAAA,QACH,OAAA,EAAS,cAAA;AAAA,QACT,SAAA,EAAW,gBAAA;AAAA,QACX,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAGd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,mCAAA,CAAA,EAAuC;AAAA,QACtE,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAQ,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,kBAAA,CAAA,EAAqB;AAAA,IAC9E;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,IAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,cAAA,GAAiB,MAAA,CAAO,OAAA;AAC1D,IAAA,IAAI,MAAA,CAAO,SAAA,KAAc,MAAA,EAAW,gBAAA,GAAmB,MAAA,CAAO,SAAA;AAAA,EAChE;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,UAAA;AAAA,IACR,OAAA,EAAS,cAAA;AAAA,IACT,GAAI,gBAAA,KAAqB,IAAA,GAAO,EAAC,GAAI,EAAE,WAAW,gBAAA;AAAiB,GACrE;AACF;AAEA,eAAe,kBAAA,CACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,UACA,MAAA,EACqC;AACrC,EAAA,IAAI,SAAA,GAAY,OAAA;AAEhB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,eAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,CAAC,GAAI,MAAM,IAAA,CAAK,EAAE,GAAG,IAAA,EAAM,SAAA,EAAW,QAAA,EAAU,SAAS,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG,CAAE,CAAA;AAAA,IACzF,SAAS,KAAA,EAAO;AAGd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,gDAAA,CAAA,EAAoD;AAAA,QACnF,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,SAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAEA,eAAsB,OAAA,CACpB,IAAA,EACA,KAAA,EACA,IAAA,EACqB;AACrB,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,eAAA,CAAgB,IAAA,EAAM,CAAC,EAAE,SAAS,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAA,EAAK,CAAC,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,MAAA,GACvB,MAAM,eAAA,CAAgB,IAAA,EAAM,UAAA,CAAW,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAA,GAC5D,KAAA,CAAM,OAAA;AAEV,EAAA,MAAM,UAAU,CAAC,GAAG,IAAI,GAAA,CAAI,MAAM,OAAA,CAAQ,KAAA,CAAM,EAAE,CAAA,GAAI,MAAM,EAAA,GAAK,CAAC,KAAA,CAAM,EAAY,CAAC,CAAC,CAAA;AACtF,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA;AACnD,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,SAAA,KAAc,CAAC,SAAA,CAAU,MAAA,EAAQ,SAAS,CAAC,CAAC,CAAA;AAErF,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,KAAe,MAAM,OAAO,UAAA,EAAW,CAAA;AAC1D,EAAA,MAAM,UAAoD,EAAC;AAC3D,EAAA,MAAM,OAA6B,EAAC;AACpC,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,IAAA;AAEjC,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,SAAA,EAAW,QAAA,IAAY,UAAA,CAAW,QAAA;AACzD,EAAA,MAAM,YAAY,QAAA,CAAS,MAAA;AAAA,IAAO,CAAC,OAAA,KACjC,eAAA,CAAgB,SAAS,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,GACtD;AAIA,EAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,SAAA,CAAU,WAAW,CAAA,EAAG;AACjD,IAAA,OAAO;AAAA,MACL,eAAe,EAAC;AAAA,MAChB,OAAA,EAAS,QAAQ,GAAA,CAAI,CAAC,YAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,qBAAA,EAA+B,CAAE;AAAA,KACvF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,EAAE,IAAA,EAAM,UAAA,EAAW,EAAG,IAAA,CAAK,MAAM,CAAA;AAEjF,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AACrC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,MAAM,aAAA;AAAA,MACnB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAQ;AAAA,MAC3B,OAAA;AAAA,MACA,MAAM,SAAA,IAAa,IAAA;AAAA,MACnB,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAW,MAAM,kBAAA;AAAA,MACrB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,WAAW,OAAA,EAAQ;AAAA,MACtD,SAAA,CAAU,IAAI,CAAC,OAAA,MAAa,EAAE,OAAA,EAAS,MAAA,EAAQ,QAAgB,CAAE,CAAA;AAAA,MACjE,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,UAAA,GAA+B,SAClC,MAAA,CAAO,CAAC,aAAa,QAAA,CAAS,MAAA,KAAW,MAAM,CAAA,CAC/C,MAAA,CAAO,CAAC,aAAa,eAAA,CAAgB,QAAA,CAAS,OAAA,EAAS,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAO,CAAC,CAAA,CACnF,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAClB,IAAI,KAAA,EAAM;AAAA,MACV,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,WAAA,EAAa,UAAA,CAAW,WAAA,IAAe,IAAA,CAAK,WAAA;AAAA;AAAA;AAAA,MAG5C,WAAW,QAAA,CAAS,MAAA,KAAW,WAAW,QAAA,CAAS,SAAA,GAAY,SAAS,SAAA,GAAY;AAAA,KACtF,CAAE,CAAA;AAEJ,IAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,KAAW,UAAA,GAAa,OAAO,SAAA,GAAY,MAAA;AAEpE,IAAA,IAAA,CAAK,IAAA,CAAK;AAAA,MACR,IAAI,KAAA,EAAM;AAAA,MACV,MAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,OAAO,OAAA,IAAW,OAAA;AAAA,MAC3B,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,MAC7B,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,MACjC;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG,OAAO,EAAE,aAAA,EAAe,IAAI,OAAA,EAAQ;AAE3D,EAAA,MAAM,EAAE,SAAS,OAAA,EAAQ,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,oBAAoB,IAAI,CAAA;AACxE,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAO,CAAA;AAElC,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,WAAW,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,aAAA,GAAgB,IAAA,CACnB,MAAA,CAAO,CAAC,GAAA,KAAQ,UAAA,CAAW,GAAA,CAAI,GAAA,CAAI,EAAE,CAAC,CAAA,CACtC,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,IACb,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,UAAA,EAAY,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAC5C,IAAI,QAAA,CAAS,EAAA;AAAA,MACb,SAAS,QAAA,CAAS;AAAA,KACpB,CAAE;AAAA,GACJ,CAAE,CAAA;AAEJ,EAAA,KAAA,MAAW,MAAA,IAAU,KAAK,OAAA,EAAS;AACjC,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,SAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK;AAAA,QACT,IAAA;AAAA,QACA,OAAA;AAAA,QACA,aAAA,EAAe,aAAA,CAAc,GAAA,CAAI,CAAC,EAAE,EAAA,EAAI,MAAA,EAAO,MAAO,EAAE,EAAA,EAAI,MAAA,EAAO,CAAE,CAAA;AAAA,QACrE,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAGd,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,2BAAA,CAAA,EAA+B,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,IACtF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,eAAe,OAAA,EAAQ;AAClC;;;ACzRA,IAAM,WAAA,GAAuC;AAAA,EAC3C,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,GAAA,EAAK,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACnE,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EAC5E,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,KAAA,EAAO,MAAA;AACtE,CAAA;AAEA,IAAM,QAAA,GAAW;AAAA,EACf,WAAA,EAAa,CAAA;AAAA,EACb,OAAA,EAAS,GAAA;AAAA,EACT,SAAA,EAAW,EAAA;AAAA,EACX,QAAA,EAAU,oBAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,iBAAA,GAAoB;AAEjC,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,UAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAOD,SAAS,mBAAA,CAAoB,MAAc,KAAA,EAAe;AACxD,EAAA,IAAI,KAAA,CAAM,SAAS,iBAAA,IAAqB,mBAAA,CAAoB,IAAI,KAAA,CAAM,WAAA,EAAa,CAAA,EAAG;AACpF,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,CAAA,EAAA,EAAK,IAAI,CAAA,oBAAA,EAAuB,iBAAiB,CAAA,iFAAA;AAAA,KAEnD;AAAA,EACF;AACF;AAEA,SAAS,QAAA,CAAS,QAAiD,OAAA,EAA+B;AAChG,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,YAAY,yBAAyB,CAAA;AACrE,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,MAAM,IAAI,YAAY,8BAA8B,CAAA;AAI/E,EAAA,IAAI,OAAO,MAAA,CAAO,OAAA,EAAS,SAAA,KAAc,UAAA,EAAY;AACnD,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACA,EAAA,mBAAA,CAAoB,QAAA,EAAU,OAAO,MAAM,CAAA;AAC3C,EAAA,IAAI,OAAO,IAAA,EAAM,MAAA,sBAA4B,aAAA,EAAe,MAAA,CAAO,KAAK,MAAM,CAAA;AAC9E,EAAA,IAAI,MAAA,CAAO,aAAA,EAAe,mBAAA,CAAoB,eAAA,EAAiB,OAAO,aAAa,CAAA;AAEnF,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,IAAK,MAAA,CAAO,SAAA,CAAU,QAAA,GAAW,CAAA,CAAA,EAAI;AACnF,IAAA,MAAM,IAAI,YAAY,iEAAiE,CAAA;AAAA,EACzF;AAEA,EAAA,IAAI,OAAO,MAAA,CAAO,aAAA,KAAkB,UAAA,EAAY;AAC9C,IAAA,MAAM,IAAI,YAAY,8DAA8D,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,CAAA,qBAAA,EAAwB,MAAA,CAAO,EAAE,CAAA,4BAAA,CAAyB,CAAA;AAAA,IAClF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAAA,EACpB;AAEA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,SAAA,IAAa,EAAC,EAAG;AAC/C,MAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,YAAA,EAAe,UAAU,CAAA,2BAAA;AAAA,SAC/C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,MAAM,YAAY,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAC/C,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA,CAAY,CAAA,8CAAA,EAAiD,SAAS,CAAA,EAAA,CAAI,CAAA;AAAA,MACtF;AACA,MAAA,MAAA,CAAO,IAAI,SAAS,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,IAAA,CAAK,SAAS,MAAA,IAAU,IAAA,KAAS,eAAe,CAAC,MAAA,CAAO,MAAM,MAAA,EAAQ;AACpE,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,kBAAkB,IAAI,CAAA,oMAAA;AAAA,KAGxB;AAAA,EACF;AACF;AAEO,SAAS,SACd,MAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,EAAC;AACnC,EAAA,QAAA,CAAS,QAAmD,OAAO,CAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,aAAA;AAChC,EAAA,MAAM,WAAA,GAAc,OAAO,WAAA,IAAe,EAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW,QAAA,CAAS,OAAA;AACrD,EAAA,MAAM,WAAqB,EAAC;AAI5B,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,QAAA,CAAS,KAAA,EAAO,QAAA,EAAU,SAAA;AACzD,EAAA,IAAI,eAAA,KAAoB,MAAA,IAAa,eAAA,IAAmB,OAAA,GAAU,CAAA,EAAG;AACnE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,wBAAA,EAA2B,eAAe,CAAA,0CAAA,EACpC,OAAO,CAAA,wDAAA;AAAA,KACf;AAAA,EACF;AAIA,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAsB;AAC3C,EAAA,KAAA,MAAW,CAAC,MAAM,UAAU,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,aAAa,CAAA,EAAG;AACrE,IAAA,MAAM,OAAA,GAAU,WAAW,QAAA,CAAS,MAAA;AAAA,MAClC,CAAC,OAAA,KAAY,CAAC,gBAAgB,OAAA,EAAS,MAAA,CAAO,UAAU,OAAO;AAAA,KACjE;AACA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAA,CAAS,IAAI,IAAA,EAAM,CAAC,GAAG,OAAO,CAAC,CAAA;AAAA,EACzD;AAEA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,QAAA,EAAU;AACvC,IAAA,MAAM,OAAO,QAAA,CAAS,MAAA,KAAW,OAAO,aAAA,CAAc,IAAI,GAAG,QAAA,CAAS,MAAA;AACtE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,cAAA,EAAiB,IAAI,CAAA,WAAA,EAAc,QAAA,CAAS,IAAI,CAAC,CAAA,KAAM,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAC,sCACpC,QAAA,CAAS,MAAA,GAAS,IAAI,MAAA,GAAS,IAAI,CAAA,CAAA,IACvE,IAAA,GAAO,2CAAA,GAAyC,mCAAA;AAAA,KACrD;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,UAAA,IAAc,CAAC,MAAA,CAAO,UAAU,SAAA,EAAW;AACtD,IAAA,QAAA,CAAS,IAAA;AAAA,MACP;AAAA,KAEF;AAAA,EACF;AAIA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,IAAI,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,EAAU;AACjC,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,SAAA,EAAY,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,mBAAA,CAAA,GACxD,KAAA,CAAM,KAAA,CAAM;AAAA,SAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAEnD,EAAA,MAAM,SAAS,YAAA,CAAa;AAAA,IAC1B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,aAAa,MAAA,CAAO,aAAA;AAAA,IACpB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAA;AAAA,IACA,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,MAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,QAAA,EAAU,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,IAClD,OAAA,EAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW;AAAA,GACvC,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,QAAQ,OAAA,CAAQ,CAAC,WAAW,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA;AAEpE,EAAA,MAAM,UAAU,aAAA,CAAc;AAAA,IAC5B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,QAAA,EAAU,MAAA,CAAO,QAAA,IAAY,QAAA,CAAS,QAAA;AAAA,IACtC,YAAA;AAAA,IACA,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,WAAW,MAAA,CAAO,SAAA,GAAY,iBAAA,CAAkB,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA;AAAA,IACpE,aAAA,EAAe,OAAO,IAAA,EAAM,SAAA;AAAA,IAC5B,GAAI,MAAA,CAAO,IAAA,EAAM,MAAA,GAAS,EAAE,YAAY,MAAA,CAAO,IAAA,CAAK,MAAA,EAAO,GAAI,EAAC;AAAA,IAChE,GAAK,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,MAAM,MAAA,GACtC,EAAE,aAAA,EAAe,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,IAAA,EAAM,MAAA,KACtD;AAAC,GACN,CAAA;AAED,EAAA,eAAe,IAAA,CACb,MACA,IAAA,EACqB;AACrB,IAAA,MAAM,SAAS,MAAM,OAAA;AAAA,MACnB,IAAA;AAAA,MACA;AAAA,QACE,IAAI,IAAA,CAAK,EAAA;AAAA,QACT,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,IAAA,CAAK;AAAA,OAClB;AAAA,MACA;AAAA,QACE,SAAS,MAAA,CAAO,QAAA;AAAA,QAChB,aAAa,MAAA,CAAO,aAAA;AAAA,QACpB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,OAAA;AAAA,QACA,eAAe,MAAA,CAAO,aAAA;AAAA,QACtB,WAAA,EAAa,MAAA,CAAO,QAAA,EAAU,WAAA,IAAe,QAAA,CAAS,WAAA;AAAA,QACtD;AAAA;AACF,KACF;AAIA,IAAA,IAAI,MAAA,CAAO,aAAA,CAAc,MAAA,GAAS,CAAA,EAAG;AAGnC,MAAA,MAAM,GAAA,GAAM,OAAO,aAAA,CAAc,OAAA;AAAA,QAAQ,CAAC,iBACxC,YAAA,CAAa,UAAA,CAAW,IAAI,CAAC,QAAA,KAAa,SAAS,EAAE;AAAA,OACvD;AAEA,MAAA,IAAI,SAAS,QAAA,EAAU,MAAM,OAAO,KAAA,CAAM,EAAE,KAAK,CAAA;AAAA,WAAA,IACxC,SAAS,UAAA,EAAY,MAAA,CAAO,iBAAiB,MAAA,CAAO,QAAA,EAAU,WAAW,GAAG,CAAA;AAAA,IACvF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,WAAW,IAAI,GAAA;AAAA,MAAA,CAClB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,OAAA;AAAA,QAAQ,CAAC,KAAA,KAC7B,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,GAAW,CAAC,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA,GAAI;AAAC;AAC3D,KACF;AACA,IAAA,MAAA,CAAO,IAAA,GAAO;AAAA,MACZ,KAAA,EAAO,kBAAkB,MAAA,CAAO,EAAA,EAAI,OAAO,MAAA,EAAQ,MAAA,CAAO,UAAU,WAAW,CAAA;AAAA,MAC/E,IAAA,EAAM,kBAAA;AAAA,QACJ,MAAA,CAAO,MAAA;AAAA,QACP,MAAA,CAAO,EAAA;AAAA,QACP,QAAA;AAAA,QACA,CAAC,OAAA,KAAY,IAAI,WAAA,CAAY,OAAO;AAAA,OACtC;AAAA,MACA,MAAA;AAAA,MACA,iBAAA,EAAmB,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,aAAa,CAAA;AAAA,MACnD,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,MAAM,CAAC,IAAA,EAAM,IAAA,KAAS,IAAA,CAAK,MAA8B,IAAa;AAAA,KACvE,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,OAAA;AAAA,IAEA,aAAa,CAAC,OAAA,KAAY,OAAO,WAAA,CAAY,OAAA,IAAW,EAAE,CAAA;AAAA,IAE1D,YAAY,MAAM;AAAA,MAChB,GAAG,WAAA,CAAY,MAAA,CAAO,CAAC,KAAA,KAAU,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAC,CAAA;AAAA,MACvF,GAAG,OAAA,CAAQ,OAAA;AAAA,QAAQ,CAAC,YACjB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,UACpC,QAAQ,KAAA,CAAM,MAAA;AAAA,UACd,MAAM,KAAA,CAAM,IAAA;AAAA,UACZ,OAAO,KAAA,CAAM,KAAA;AAAA,UACb,OAAO,MAAA,CAAO;AAAA,SAChB,CAAE;AAAA;AACJ,KACF;AAAA,IAEA,qBAAqB,CAAC,OAAA,GAAU,EAAC,KAC/B,MAAA,CAAO,SAAS,mBAAA,CAAoB;AAAA,MAClC,KAAA,EAAO,QAAQ,KAAA,IAAS,IAAI,KAAK,IAAA,CAAK,GAAA,EAAI,GAAI,EAAA,GAAK,IAAQ,CAAA;AAAA,MAC3D,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,KAAA,IAAS,KAAK,GAAI;AAAA,KAC3C,CAAA;AAAA,IAEH,aAAa,YAAmC;AAC9C,MAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAC/C,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,WAAA;AAAA,QACA,wBACE,CAAC,WAAA,KAAgB,SAAS,MAAA,IAAU,IAAA,KAAS,cAAc,IAAA,KAAS,QAAA,CAAA;AAAA,QACtE;AAAA,OACF;AAAA,IACF;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { Channel } from \"./types\";\n\nexport type PayloadFromSchema<TSchema> = TSchema extends StandardSchemaV1\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n\nexport type EmailTemplate<TPayload> = {\n  subject: (payload: TPayload) => string;\n  /** Rendered HTML. react-email users wrap: `(p) => render(<Email {...p} />)`. */\n  template: (payload: TPayload) => string | Promise<string>;\n};\n\nexport type NotificationDefinition<\n  TSchema extends StandardSchemaV1 | undefined = StandardSchemaV1 | undefined,\n> = {\n  schema?: TSchema;\n  channels: readonly Channel[];\n  maxAttempts?: number;\n  email?: EmailTemplate<PayloadFromSchema<TSchema>>;\n};\n\n/** Binds TSchema so email callbacks infer the payload; TS cannot infer from a sibling property. */\nexport function defineNotification<TSchema extends StandardSchemaV1 | undefined = undefined>(\n  definition: NotificationDefinition<TSchema>,\n): NotificationDefinition<TSchema> {\n  return definition;\n}\n\n/**\n * Erased form. `EmailTemplate<never>` because callbacks are contravariant —\n * anything else makes every schema-typed definition fail to assign.\n */\nexport type AnyNotificationDefinition = {\n  schema?: StandardSchemaV1 | undefined;\n  channels: readonly Channel[];\n  maxAttempts?: number | undefined;\n  email?: EmailTemplate<never> | undefined;\n};\n\nexport type NotificationDefinitions = Record<string, AnyNotificationDefinition>;\n\nexport type PayloadOf<TDef> = TDef extends { schema: infer TSchema extends StandardSchemaV1 }\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n","const ESCAPES: Record<string, string> = {\n  \"&\": \"&amp;\",\n  \"<\": \"&lt;\",\n  \">\": \"&gt;\",\n  '\"': \"&quot;\",\n  \"'\": \"&#39;\",\n};\n\n/**\n * For email templates built with template literals. Anything in a payload\n * that a user typed — a display name, a comment excerpt — goes through this\n * or the recipient gets that user's HTML delivered from your sending domain.\n */\nexport const escapeHtml = (value: unknown): string =>\n  String(value ?? \"\").replace(/[&<>\"']/g, (char) => ESCAPES[char] ?? char);\n","export type RateLimitConfig = {\n  /** Requests allowed per key per window. */\n  max: number;\n  windowMs: number;\n  /**\n   * Which bucket a request lands in. Defaults to the client address as the\n   * usual proxy headers report it; returning null exempts the request. Behind\n   * no proxy those headers are absent, so supply your own key there.\n   */\n  key?: (request: Request) => string | null;\n};\n\nconst clientAddress = (request: Request): string | null => {\n  const headers = request.headers;\n  return (\n    headers.get(\"cf-connecting-ip\") ??\n    headers.get(\"x-real-ip\") ??\n    headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\n    null\n  );\n};\n\n/**\n * Fixed-window counter held in process memory. Per isolate on edge runtimes\n * and per replica anywhere else, so it bounds one client's cost to one\n * process rather than enforcing a global quota. That is enough to blunt\n * secret guessing and poll storms, which is what it is for.\n */\nexport function createRateLimiter(config: RateLimitConfig): (request: Request) => Response | null {\n  const keyOf = config.key ?? clientAddress;\n  const buckets = new Map<string, { count: number; resetAt: number }>();\n  let lastSweep = 0;\n\n  return (request) => {\n    const key = keyOf(request);\n    if (key === null) return null;\n\n    const now = Date.now();\n\n    // Drop expired buckets no more than once per window, so memory tracks\n    // active clients rather than everyone ever seen.\n    if (now - lastSweep > config.windowMs) {\n      for (const [id, bucket] of buckets) if (bucket.resetAt <= now) buckets.delete(id);\n      lastSweep = now;\n    }\n\n    let bucket = buckets.get(key);\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + config.windowMs };\n      buckets.set(key, bucket);\n    }\n\n    bucket.count += 1;\n    if (bucket.count <= config.max) return null;\n\n    return new Response(null, {\n      status: 429,\n      headers: {\n        \"retry-after\": String(Math.max(1, Math.ceil((bucket.resetAt - now) / 1000))),\n        \"cache-control\": \"private, no-store\",\n      },\n    });\n  };\n}\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { DatabaseAdapter, InsertDelivery, InsertNotification } from \"./adapter\";\nimport type { ChannelsConfig, SendResult } from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { type Logger, ValidationError } from \"./errors\";\nimport type { AnyPlugin, BeforeSendResult, ChannelDecision } from \"./plugin\";\nimport type { Channel, Recipient, SkipReason } from \"./types\";\n\nexport type SendPipelineDeps = {\n  adapter: DatabaseAdapter;\n  definitions: NotificationDefinitions;\n  channels: ChannelsConfig;\n  plugins: readonly AnyPlugin[];\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  maxAttempts: number;\n  logger: Logger;\n  generateId?: () => string;\n};\n\nexport type SendInput = {\n  to: string | readonly string[];\n  payload: unknown;\n  actorId?: string | undefined;\n  dedupeKey?: string | undefined;\n  overrides?: { channels?: readonly Channel[] } | undefined;\n};\n\nasync function validatePayload(type: string, schema: StandardSchemaV1, payload: unknown) {\n  const result = await schema[\"~standard\"].validate(payload);\n  if (result.issues) {\n    throw new ValidationError(\n      type,\n      result.issues.map((issue) => ({\n        message: issue.message,\n        ...(issue.path ? { path: issue.path.map(String).join(\".\") } : {}),\n      })),\n    );\n  }\n  return result.value;\n}\n\n/**\n * A channel is deliverable only if something can actually carry it.\n *\n * inApp defaults to on when unconfigured — it needs no provider, it is the\n * library's core feature, and making every app write `inApp: { enabled: true }`\n * is noise. Every other channel is off until given a provider, so a type\n * declaring `channels: [\"email\"]` with no email provider silently degrades to\n * in-app rather than throwing at send time.\n */\nexport function isChannelUsable(\n  channel: Channel,\n  channels: ChannelsConfig,\n  plugins: readonly AnyPlugin[] = [],\n): boolean {\n  if (channel === \"inApp\") return channels.inApp?.enabled !== false;\n  if (channel === \"email\") return Boolean(channels.email?.provider);\n  // Anything else is usable only if a plugin claims it and can deliver it.\n  return plugins.some((plugin) => plugin.channels?.includes(channel) && plugin.hooks?.deliver);\n}\n\n/** One prepare() per plugin per send, keyed by plugin id. */\nasync function runPrepare(\n  plugins: readonly AnyPlugin[],\n  ctx: { type: string; recipients: readonly Recipient[] },\n  logger: Logger,\n): Promise<Map<string, unknown>> {\n  const prepared = new Map<string, unknown>();\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.prepare;\n    if (!hook) continue;\n    try {\n      prepared.set(plugin.id, await hook(ctx));\n    } catch (error) {\n      // Fail closed, consistent with the hooks that consume this: a plugin\n      // whose bulk load failed must not then decide with stale assumptions.\n      logger.error(`plugin \"${plugin.id}\" prepare threw; its hooks will see undefined`, {\n        type: ctx.type,\n        error,\n      });\n      prepared.set(plugin.id, undefined);\n    }\n  }\n\n  return prepared;\n}\n\nasync function runBeforeSend(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; actorId: string | null },\n  payload: unknown,\n  dedupeKey: string | null,\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<BeforeSendResult> {\n  let currentPayload = payload;\n  let currentDedupeKey = dedupeKey;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.beforeSend;\n    if (!hook) continue;\n\n    let result: BeforeSendResult;\n    try {\n      result = await hook({\n        ...base,\n        payload: currentPayload,\n        dedupeKey: currentDedupeKey,\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fail closed. A crashed preferences hook failing open would email\n      // people who opted out — a compliance incident. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" beforeSend threw; cancelling send`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return { action: \"cancel\", reason: `plugin \"${plugin.id}\" beforeSend threw` };\n    }\n\n    if (result.action === \"cancel\") return result;\n    if (result.payload !== undefined) currentPayload = result.payload;\n    if (result.dedupeKey !== undefined) currentDedupeKey = result.dedupeKey;\n  }\n\n  return {\n    action: \"continue\",\n    payload: currentPayload,\n    ...(currentDedupeKey === null ? {} : { dedupeKey: currentDedupeKey }),\n  };\n}\n\nasync function runResolveChannels(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; payload: unknown },\n  initial: readonly ChannelDecision[],\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<readonly ChannelDecision[]> {\n  let decisions = initial;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.resolveChannels;\n    if (!hook) continue;\n\n    try {\n      decisions = [...(await hook({ ...base, decisions, prepared: prepared.get(plugin.id) }))];\n    } catch (error) {\n      // Fail closed: keep the decisions already made rather than falling back\n      // to the permissive default. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" resolveChannels threw; keeping prior decisions`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return decisions;\n    }\n  }\n\n  return decisions;\n}\n\nexport async function runSend(\n  type: string,\n  input: SendInput,\n  deps: SendPipelineDeps,\n): Promise<SendResult> {\n  const definition = deps.definitions[type];\n  if (!definition) {\n    throw new ValidationError(type, [{ message: `unknown notification type \"${type}\"` }]);\n  }\n\n  const payload = definition.schema\n    ? await validatePayload(type, definition.schema, input.payload)\n    : input.payload;\n\n  const userIds = [...new Set(Array.isArray(input.to) ? input.to : [input.to as string])];\n  const recipients = await deps.getRecipients(userIds);\n  const byUserId = new Map(recipients.map((recipient) => [recipient.userId, recipient]));\n\n  const newId = deps.generateId ?? (() => crypto.randomUUID());\n  const skipped: { userId: string; reason: SkipReason }[] = [];\n  const rows: InsertNotification[] = [];\n  const actorId = input.actorId ?? null;\n\n  const declared = input.overrides?.channels ?? definition.channels;\n  const requested = declared.filter((channel) =>\n    isChannelUsable(channel, deps.channels, deps.plugins),\n  );\n\n  // Distinguished from \"no-channels\" so a missing provider does not look\n  // identical to a user having opted out of everything.\n  if (declared.length > 0 && requested.length === 0) {\n    return {\n      notifications: [],\n      skipped: userIds.map((userId) => ({ userId, reason: \"channel-unavailable\" as const })),\n    };\n  }\n\n  const prepared = await runPrepare(deps.plugins, { type, recipients }, deps.logger);\n\n  for (const userId of userIds) {\n    const recipient = byUserId.get(userId);\n    if (!recipient) {\n      skipped.push({ userId, reason: \"no-recipient\" });\n      continue;\n    }\n\n    const before = await runBeforeSend(\n      deps.plugins,\n      { type, recipient, actorId },\n      payload,\n      input.dedupeKey ?? null,\n      prepared,\n      deps.logger,\n    );\n\n    if (before.action === \"cancel\") {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const resolved = await runResolveChannels(\n      deps.plugins,\n      { type, recipient, payload: before.payload ?? payload },\n      requested.map((channel) => ({ channel, action: \"send\" as const })),\n      prepared,\n      deps.logger,\n    );\n\n    const now = new Date();\n    const deliveries: InsertDelivery[] = resolved\n      .filter((decision) => decision.action !== \"skip\")\n      .filter((decision) => isChannelUsable(decision.channel, deps.channels, deps.plugins))\n      .map((decision) => ({\n        id: newId(),\n        channel: decision.channel,\n        maxAttempts: definition.maxAttempts ?? deps.maxAttempts,\n        // `defer` needs no machinery beyond not_before — the claim query\n        // already refuses rows whose time has not come. RFC 0004 §4.2.\n        notBefore: decision.action === \"defer\" && decision.notBefore ? decision.notBefore : now,\n      }));\n\n    if (deliveries.length === 0) {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const dedupeKey = before.action === \"continue\" ? before.dedupeKey : undefined;\n\n    rows.push({\n      id: newId(),\n      userId,\n      type,\n      payload: before.payload ?? payload,\n      ...(actorId ? { actorId } : {}),\n      ...(dedupeKey ? { dedupeKey } : {}),\n      deliveries,\n    });\n  }\n\n  if (rows.length === 0) return { notifications: [], skipped };\n\n  const { created, deduped } = await deps.adapter.createNotifications(rows);\n  const createdSet = new Set(created);\n\n  for (const row of rows) {\n    if (deduped.includes(row.id)) skipped.push({ userId: row.userId, reason: \"deduped\" });\n  }\n\n  const notifications = rows\n    .filter((row) => createdSet.has(row.id))\n    .map((row) => ({\n      id: row.id,\n      userId: row.userId,\n      deliveries: row.deliveries.map((delivery) => ({\n        id: delivery.id,\n        channel: delivery.channel,\n      })),\n    }));\n\n  for (const plugin of deps.plugins) {\n    const hook = plugin.hooks?.afterSend;\n    if (!hook) continue;\n    try {\n      await hook({\n        type,\n        payload,\n        notifications: notifications.map(({ id, userId }) => ({ id, userId })),\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fails open: the rows are committed, and throwing here would report a\n      // send that actually happened as a failure.\n      deps.logger.error(`plugin \"${plugin.id}\" afterSend threw; ignoring`, { type, error });\n    }\n  }\n\n  return { notifications, skipped };\n}\n","import type { Backoff } from \"./backoff\";\nimport type {\n  EasyPing,\n  EasyPingConfig,\n  HealthReport,\n  MountedRoute,\n  SendArgs,\n  SendResult,\n} from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { ConfigError, consoleLogger } from \"./errors\";\nimport { createHandler } from \"./handler\";\nimport type { AnyPlugin } from \"./plugin\";\nimport { createRateLimiter } from \"./rate-limit\";\nimport { createRunner } from \"./runner\";\nimport { isChannelUsable, runSend } from \"./send\";\nimport { createPluginStore } from \"./store\";\nimport { createScopedSigner } from \"./tokens\";\nimport type { DeliveryMode } from \"./types\";\n\nconst CORE_ROUTES: readonly MountedRoute[] = [\n  { method: \"GET\", path: \"/\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"GET\", path: \"/count\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/seen\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read-all\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/cron\", scope: { type: \"machine\" }, owner: \"core\" },\n];\n\nconst DEFAULTS = {\n  maxAttempts: 5,\n  leaseMs: 60_000,\n  batchSize: 20,\n  basePath: \"/api/notifications\",\n  mode: \"cron\" as DeliveryMode,\n};\n\nexport const MIN_SECRET_LENGTH = 16;\n\nconst PLACEHOLDER_SECRETS = new Set([\n  \"secret\",\n  \"changeme\",\n  \"change-me\",\n  \"replace-me\",\n  \"replace-me-too\",\n  \"password\",\n  \"demo-signing-secret\",\n  \"demo-cron-secret\",\n]);\n\n/**\n * `secret` keys the HMAC behind every unsubscribe link; `cron.secret` is the\n * only thing between the internet and a flush of your email provider. A short\n * or placeholder value is a startup error, because it ships otherwise.\n */\nfunction checkSecretStrength(name: string, value: string) {\n  if (value.length < MIN_SECRET_LENGTH || PLACEHOLDER_SECRETS.has(value.toLowerCase())) {\n    throw new ConfigError(\n      `\\`${name}\\` must be at least ${MIN_SECRET_LENGTH} characters and not a placeholder. ` +\n        \"Generate one with `openssl rand -base64 32`.\",\n    );\n  }\n}\n\nfunction validate(config: EasyPingConfig<NotificationDefinitions>, plugins: readonly AnyPlugin[]) {\n  if (!config.database) throw new ConfigError(\"`database` is required.\");\n  if (!config.notifications) throw new ConfigError(\"`notifications` is required.\");\n\n  // No default resolver and no dev bypass: the inbox endpoints serve per-user\n  // data, and an insecure default ships where a startup crash does not.\n  if (typeof config.session?.getUserId !== \"function\") {\n    throw new ConfigError(\n      \"`session.getUserId` is required — the mounted endpoints serve a user's private inbox \" +\n        \"and must resolve the caller. See RFC 0002.\",\n    );\n  }\n\n  if (!config.secret) {\n    throw new ConfigError(\n      \"`secret` is required — it signs unsubscribe and other session-less links. \" +\n        \"Adding it later is a breaking change, so it is mandatory from the start.\",\n    );\n  }\n  checkSecretStrength(\"secret\", config.secret);\n  if (config.cron?.secret) checkSecretStrength(\"cron.secret\", config.cron.secret);\n  if (config.machineSecret) checkSecretStrength(\"machineSecret\", config.machineSecret);\n\n  if (config.rateLimit && (config.rateLimit.max < 1 || config.rateLimit.windowMs < 1)) {\n    throw new ConfigError(\"`rateLimit.max` and `rateLimit.windowMs` must both be positive.\");\n  }\n\n  if (typeof config.getRecipients !== \"function\") {\n    throw new ConfigError(\"`getRecipients` is required to resolve emails and timezones.\");\n  }\n\n  const seen = new Set<string>();\n  for (const plugin of plugins) {\n    if (seen.has(plugin.id)) {\n      throw new ConfigError(`duplicate plugin id \"${plugin.id}\" — ids must be unique.`);\n    }\n    seen.add(plugin.id);\n  }\n\n  for (const plugin of plugins) {\n    for (const dependency of plugin.dependsOn ?? []) {\n      if (!seen.has(dependency)) {\n        throw new ConfigError(\n          `plugin \"${plugin.id}\" requires \"${dependency}\", which is not registered.`,\n        );\n      }\n    }\n  }\n\n  // Two plugins claiming the same route silently shadow each other otherwise,\n  // and which one wins depends on registration order.\n  const routes = new Set<string>();\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      const signature = `${route.method} ${route.path}`;\n      if (routes.has(signature)) {\n        throw new ConfigError(`route collision: two plugins both registered \"${signature}\".`);\n      }\n      routes.add(signature);\n    }\n  }\n\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  if ((mode === \"cron\" || mode === \"deferred\") && !config.cron?.secret) {\n    throw new ConfigError(\n      `delivery.mode \"${mode}\" relies on the cron sweep, so \\`cron.secret\\` is required. ` +\n        \"Left unset the endpoint would be unauthenticated — a free flush-everything trigger \" +\n        \"against your email provider. See RFC 0002 §4.\",\n    );\n  }\n}\n\nexport function easyPing<TDefs extends NotificationDefinitions>(\n  config: EasyPingConfig<TDefs>,\n): EasyPing<TDefs> {\n  const plugins = config.plugins ?? [];\n  validate(config as EasyPingConfig<NotificationDefinitions>, plugins);\n\n  const logger = config.logger ?? consoleLogger;\n  const tablePrefix = config.tablePrefix ?? \"\";\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  const leaseMs = config.delivery?.leaseMs ?? DEFAULTS.leaseMs;\n  const warnings: string[] = [];\n\n  // Below this ratio a slow send is re-claimed mid-flight, and duplicates stop\n  // being occasional and become systematic. RFC 0003 §7.\n  const providerTimeout = config.channels.email?.provider?.timeoutMs;\n  if (providerTimeout !== undefined && providerTimeout >= leaseMs / 2) {\n    warnings.push(\n      `email provider timeout (${providerTimeout}ms) is at least half of delivery.leaseMs ` +\n        `(${leaseMs}ms); raise leaseMs or duplicate sends become systematic.`,\n    );\n  }\n\n  // Declaring `channels: [\"push\"]` used to do nothing at all: no warning, and\n  // a skip reason indistinguishable from the user having opted out.\n  const unusable = new Map<string, string[]>();\n  for (const [type, definition] of Object.entries(config.notifications)) {\n    const missing = definition.channels.filter(\n      (channel) => !isChannelUsable(channel, config.channels, plugins),\n    );\n    if (missing.length > 0) unusable.set(type, [...missing]);\n  }\n\n  for (const [type, channels] of unusable) {\n    const dead = channels.length === config.notifications[type]?.channels.length;\n    warnings.push(\n      `notification \"${type}\" declares ${channels.map((c) => `\"${c}\"`).join(\", \")} ` +\n        `but no provider is configured for ${channels.length > 1 ? \"them\" : \"it\"}` +\n        (dead ? \" — this type can never be delivered.\" : \"; those channels will be skipped.\"),\n    );\n  }\n\n  if (mode === \"deferred\" && !config.delivery?.waitUntil) {\n    warnings.push(\n      \"delivery.mode is 'deferred' but no delivery.waitUntil was supplied; \" +\n        \"delivery will wait for the cron sweep.\",\n    );\n  }\n\n  // The escape hatch stays visible: every custom-scoped route is named at\n  // startup with the reason its author gave. RFC 0002 §3.\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      if (route.scope.type === \"custom\") {\n        warnings.push(\n          `plugin \"${plugin.id}\" mounts ${route.method} ${route.path} with custom auth: ` +\n            route.scope.justification,\n        );\n      }\n    }\n  }\n\n  for (const warning of warnings) logger.warn(warning);\n\n  const runner = createRunner({\n    adapter: config.database,\n    definitions: config.notifications,\n    channels: config.channels,\n    plugins,\n    getRecipients: config.getRecipients,\n    logger,\n    leaseMs,\n    batchSize: config.delivery?.batchSize ?? DEFAULTS.batchSize,\n    backoff: (config.delivery?.backoff ?? \"exponential\") as Backoff,\n  });\n\n  const pluginRoutes = plugins.flatMap((plugin) => plugin.routes ?? []);\n\n  const handler = createHandler({\n    adapter: config.database,\n    session: config.session,\n    runner,\n    logger,\n    secret: config.secret,\n    basePath: config.basePath ?? DEFAULTS.basePath,\n    pluginRoutes,\n    trustedOrigins: config.trustedOrigins,\n    onRequest: config.onRequest,\n    maxBodyBytes: config.maxBodyBytes,\n    rateLimit: config.rateLimit ? createRateLimiter(config.rateLimit) : undefined,\n    cronMaxSweeps: config.cron?.maxSweeps,\n    ...(config.cron?.secret ? { cronSecret: config.cron.secret } : {}),\n    ...((config.machineSecret ?? config.cron?.secret)\n      ? { machineSecret: config.machineSecret ?? config.cron?.secret }\n      : {}),\n  });\n\n  async function send<TKey extends keyof TDefs & string>(\n    type: TKey,\n    args: SendArgs<TDefs, TKey>,\n  ): Promise<SendResult> {\n    const result = await runSend(\n      type,\n      {\n        to: args.to,\n        payload: args.payload,\n        actorId: args.actorId,\n        dedupeKey: args.dedupeKey,\n        overrides: args.overrides,\n      },\n      {\n        adapter: config.database,\n        definitions: config.notifications,\n        channels: config.channels,\n        plugins,\n        getRecipients: config.getRecipients,\n        maxAttempts: config.delivery?.maxAttempts ?? DEFAULTS.maxAttempts,\n        logger,\n      },\n    );\n\n    // The rows are committed by this point, so every branch below only affects\n    // latency — never whether the notification survives. RFC 0001 §8.1.\n    if (result.notifications.length > 0) {\n      // Scoped to this send's deliveries. Unscoped, a single inline send in a\n      // request handler flushes the whole backlog.\n      const ids = result.notifications.flatMap((notification) =>\n        notification.deliveries.map((delivery) => delivery.id),\n      );\n\n      if (mode === \"inline\") await runner.drain({ ids });\n      else if (mode === \"deferred\") runner.scheduleDeferred(config.delivery?.waitUntil, ids);\n    }\n\n    return result;\n  }\n\n  // After send() exists, before any hook or route can run.\n  for (const plugin of plugins) {\n    const purposes = new Set(\n      (plugin.routes ?? []).flatMap((route) =>\n        route.scope.type === \"signed\" ? [route.scope.purpose] : [],\n      ),\n    );\n    plugin.init?.({\n      store: createPluginStore(plugin.id, plugin.schema, config.database, tablePrefix),\n      sign: createScopedSigner(\n        config.secret,\n        plugin.id,\n        purposes,\n        (message) => new ConfigError(message),\n      ),\n      logger,\n      notificationTypes: Object.keys(config.notifications),\n      getRecipients: config.getRecipients,\n      send: (type, args) => send(type as keyof TDefs & string, args as never) as Promise<unknown>,\n    });\n  }\n\n  return {\n    send,\n    handler,\n\n    startWorker: (options) => runner.startWorker(options ?? {}),\n\n    listRoutes: () => [\n      ...CORE_ROUTES.filter((route) => route.path !== \"/cron\" || Boolean(config.cron?.secret)),\n      ...plugins.flatMap((plugin) =>\n        (plugin.routes ?? []).map((route) => ({\n          method: route.method,\n          path: route.path,\n          scope: route.scope,\n          owner: plugin.id,\n        })),\n      ),\n    ],\n\n    getFailedDeliveries: (options = {}) =>\n      config.database.getFailedDeliveries({\n        since: options.since ?? new Date(Date.now() - 24 * 3600_000),\n        limit: Math.min(options.limit ?? 100, 1000),\n      }),\n\n    healthCheck: async (): Promise<HealthReport> => {\n      const cronMounted = Boolean(config.cron?.secret);\n      return {\n        mode,\n        cronMounted,\n        cronRequiredButMissing:\n          !cronMounted && (mode === \"cron\" || mode === \"deferred\" || mode === \"inline\"),\n        warnings,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/core/definition.ts","../src/core/html.ts","../src/core/rate-limit.ts","../src/core/send.ts","../src/core/instance.ts"],"names":["bucket"],"mappings":";;;;;;;;;;;AAuBO,SAAS,mBACd,UAAA,EACiC;AACjC,EAAA,OAAO,UAAA;AACT;;;AC3BA,IAAM,OAAA,GAAkC;AAAA,EACtC,GAAA,EAAK,OAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,QAAA;AAAA,EACL,GAAA,EAAK;AACP,CAAA;AAGO,IAAM,UAAA,GAAa,CAAC,KAAA,KACzB,MAAA,CAAO,SAAS,EAAE,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,CAAC,IAAA,KAAS,OAAA,CAAQ,IAAI,KAAK,IAAI;;;ACFzE,IAAM,aAAA,GAAgB,CAAC,OAAA,KAAoC;AACzD,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,OACE,QAAQ,GAAA,CAAI,kBAAkB,KAC9B,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IACvB,OAAA,CAAQ,GAAA,CAAI,iBAAiB,GAAG,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA,EAAG,MAAK,IACpD,IAAA;AAEJ,CAAA;AAGO,SAAS,kBAAkB,MAAA,EAAgE;AAChG,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAA,IAAO,aAAA;AAC5B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAgD;AACpE,EAAA,IAAI,SAAA,GAAY,CAAA;AAEhB,EAAA,OAAO,CAAC,OAAA,KAAY;AAClB,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAGrB,IAAA,IAAI,GAAA,GAAM,SAAA,GAAY,MAAA,CAAO,QAAA,EAAU;AACrC,MAAA,KAAA,MAAW,CAAC,EAAA,EAAIA,OAAM,CAAA,IAAK,OAAA,EAAS,IAAIA,OAAAA,CAAO,OAAA,IAAW,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA;AAChF,MAAA,SAAA,GAAY,GAAA;AAAA,IACd;AAEA,IAAA,IAAI,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,OAAA,IAAW,GAAA,EAAK;AACpC,MAAA,MAAA,GAAS,EAAE,KAAA,EAAO,CAAA,EAAG,OAAA,EAAS,GAAA,GAAM,OAAO,QAAA,EAAS;AACpD,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACzB;AAEA,IAAA,MAAA,CAAO,KAAA,IAAS,CAAA;AAChB,IAAA,IAAI,MAAA,CAAO,KAAA,IAAS,MAAA,CAAO,GAAA,EAAK,OAAO,IAAA;AAEvC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,IAAA,CAAA,CAAM,MAAA,CAAO,OAAA,GAAU,GAAA,IAAO,GAAI,CAAC,CAAC,CAAA;AAAA,QAC3E,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,CAAA;AACF;;;AC1BA,eAAe,eAAA,CAAgB,IAAA,EAAc,MAAA,EAA0B,OAAA,EAAkB;AACvF,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,WAAW,CAAA,CAAE,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,IAAA;AAAA,MACA,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,QAC5B,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,KAAA,CAAM,IAAA,GAAO,EAAE,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA,KAAM;AAAC,OACjE,CAAE;AAAA,KACJ;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,KAAA;AAChB;AAGO,SAAS,eAAA,CACd,OAAA,EACA,QAAA,EACA,OAAA,GAAgC,EAAC,EACxB;AACT,EAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,QAAA,CAAS,OAAO,OAAA,KAAY,KAAA;AAC5D,EAAA,IAAI,YAAY,OAAA,EAAS,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,QAAQ,CAAA;AAEhE,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,QAAA,EAAU,QAAA,CAAS,OAAO,CAAA,IAAK,MAAA,CAAO,KAAA,EAAO,OAAO,CAAA;AAC7F;AAGA,eAAe,UAAA,CACb,OAAA,EACA,GAAA,EACA,MAAA,EAC+B;AAC/B,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAE1C,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,OAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,IAAI,MAAA,CAAO,EAAA,EAAI,MAAM,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,6CAAA,CAAA,EAAiD;AAAA,QAChF,MAAM,GAAA,CAAI,IAAA;AAAA,QACV;AAAA,OACD,CAAA;AACD,MAAA,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAA,EAAI,MAAS,CAAA;AAAA,IACnC;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT;AAEA,eAAe,cACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,SAAA,EACA,UACA,MAAA,EAC2B;AAC3B,EAAA,IAAI,cAAA,GAAiB,OAAA;AACrB,EAAA,IAAI,gBAAA,GAAmB,SAAA;AAEvB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,UAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,MAAM,IAAA,CAAK;AAAA,QAClB,GAAG,IAAA;AAAA,QACH,OAAA,EAAS,cAAA;AAAA,QACT,SAAA,EAAW,gBAAA;AAAA,QACX,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,mCAAA,CAAA,EAAuC;AAAA,QACtE,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAQ,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,kBAAA,CAAA,EAAqB;AAAA,IAC9E;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,IAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,cAAA,GAAiB,MAAA,CAAO,OAAA;AAC1D,IAAA,IAAI,MAAA,CAAO,SAAA,KAAc,MAAA,EAAW,gBAAA,GAAmB,MAAA,CAAO,SAAA;AAAA,EAChE;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,UAAA;AAAA,IACR,OAAA,EAAS,cAAA;AAAA,IACT,GAAI,gBAAA,KAAqB,IAAA,GAAO,EAAC,GAAI,EAAE,WAAW,gBAAA;AAAiB,GACrE;AACF;AAEA,eAAe,kBAAA,CACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,UACA,MAAA,EACqC;AACrC,EAAA,IAAI,SAAA,GAAY,OAAA;AAEhB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,eAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,CAAC,GAAI,MAAM,IAAA,CAAK,EAAE,GAAG,IAAA,EAAM,SAAA,EAAW,QAAA,EAAU,SAAS,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG,CAAE,CAAA;AAAA,IACzF,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,gDAAA,CAAA,EAAoD;AAAA,QACnF,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,SAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAEA,eAAsB,OAAA,CACpB,IAAA,EACA,KAAA,EACA,IAAA,EACqB;AACrB,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,eAAA,CAAgB,IAAA,EAAM,CAAC,EAAE,SAAS,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAA,EAAK,CAAC,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,MAAA,GACvB,MAAM,eAAA,CAAgB,IAAA,EAAM,UAAA,CAAW,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAA,GAC5D,KAAA,CAAM,OAAA;AAEV,EAAA,MAAM,UAAU,CAAC,GAAG,IAAI,GAAA,CAAI,MAAM,OAAA,CAAQ,KAAA,CAAM,EAAE,CAAA,GAAI,MAAM,EAAA,GAAK,CAAC,KAAA,CAAM,EAAY,CAAC,CAAC,CAAA;AACtF,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA;AACnD,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,SAAA,KAAc,CAAC,SAAA,CAAU,MAAA,EAAQ,SAAS,CAAC,CAAC,CAAA;AAErF,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,KAAe,MAAM,OAAO,UAAA,EAAW,CAAA;AAC1D,EAAA,MAAM,UAAoD,EAAC;AAC3D,EAAA,MAAM,OAA6B,EAAC;AACpC,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,IAAA;AAEjC,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,SAAA,EAAW,QAAA,IAAY,UAAA,CAAW,QAAA;AACzD,EAAA,MAAM,YAAY,QAAA,CAAS,MAAA;AAAA,IAAO,CAAC,OAAA,KACjC,eAAA,CAAgB,SAAS,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,GACtD;AAGA,EAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,SAAA,CAAU,WAAW,CAAA,EAAG;AACjD,IAAA,OAAO;AAAA,MACL,eAAe,EAAC;AAAA,MAChB,OAAA,EAAS,QAAQ,GAAA,CAAI,CAAC,YAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,qBAAA,EAA+B,CAAE;AAAA,KACvF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,EAAE,IAAA,EAAM,UAAA,EAAW,EAAG,IAAA,CAAK,MAAM,CAAA;AAEjF,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AACrC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,MAAM,aAAA;AAAA,MACnB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAQ;AAAA,MAC3B,OAAA;AAAA,MACA,MAAM,SAAA,IAAa,IAAA;AAAA,MACnB,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAW,MAAM,kBAAA;AAAA,MACrB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,WAAW,OAAA,EAAQ;AAAA,MACtD,SAAA,CAAU,IAAI,CAAC,OAAA,MAAa,EAAE,OAAA,EAAS,MAAA,EAAQ,QAAgB,CAAE,CAAA;AAAA,MACjE,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,UAAA,GAA+B,SAClC,MAAA,CAAO,CAAC,aAAa,QAAA,CAAS,MAAA,KAAW,MAAM,CAAA,CAC/C,MAAA,CAAO,CAAC,aAAa,eAAA,CAAgB,QAAA,CAAS,OAAA,EAAS,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAO,CAAC,CAAA,CACnF,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAClB,IAAI,KAAA,EAAM;AAAA,MACV,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,WAAA,EAAa,UAAA,CAAW,WAAA,IAAe,IAAA,CAAK,WAAA;AAAA;AAAA,MAE5C,WAAW,QAAA,CAAS,MAAA,KAAW,WAAW,QAAA,CAAS,SAAA,GAAY,SAAS,SAAA,GAAY;AAAA,KACtF,CAAE,CAAA;AAEJ,IAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,KAAW,UAAA,GAAa,OAAO,SAAA,GAAY,MAAA;AAEpE,IAAA,IAAA,CAAK,IAAA,CAAK;AAAA,MACR,IAAI,KAAA,EAAM;AAAA,MACV,MAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,OAAO,OAAA,IAAW,OAAA;AAAA,MAC3B,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,MAC7B,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,MACjC;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG,OAAO,EAAE,aAAA,EAAe,IAAI,OAAA,EAAQ;AAE3D,EAAA,MAAM,EAAE,SAAS,OAAA,EAAQ,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,oBAAoB,IAAI,CAAA;AACxE,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAO,CAAA;AAElC,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,WAAW,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,aAAA,GAAgB,IAAA,CACnB,MAAA,CAAO,CAAC,GAAA,KAAQ,UAAA,CAAW,GAAA,CAAI,GAAA,CAAI,EAAE,CAAC,CAAA,CACtC,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,IACb,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,UAAA,EAAY,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAC5C,IAAI,QAAA,CAAS,EAAA;AAAA,MACb,SAAS,QAAA,CAAS;AAAA,KACpB,CAAE;AAAA,GACJ,CAAE,CAAA;AAEJ,EAAA,KAAA,MAAW,MAAA,IAAU,KAAK,OAAA,EAAS;AACjC,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,SAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK;AAAA,QACT,IAAA;AAAA,QACA,OAAA;AAAA,QACA,aAAA,EAAe,aAAA,CAAc,GAAA,CAAI,CAAC,EAAE,EAAA,EAAI,MAAA,EAAO,MAAO,EAAE,EAAA,EAAI,MAAA,EAAO,CAAE,CAAA;AAAA,QACrE,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAEd,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,2BAAA,CAAA,EAA+B,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,IACtF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,eAAe,OAAA,EAAQ;AAClC;;;AC3QA,IAAM,WAAA,GAAuC;AAAA,EAC3C,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,GAAA,EAAK,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACnE,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EAC5E,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,KAAA,EAAO,MAAA;AACtE,CAAA;AAEA,IAAM,QAAA,GAAW;AAAA,EACf,WAAA,EAAa,CAAA;AAAA,EACb,OAAA,EAAS,GAAA;AAAA,EACT,SAAA,EAAW,EAAA;AAAA,EACX,QAAA,EAAU,oBAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,iBAAA,GAAoB;AAEjC,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,UAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,mBAAA,CAAoB,MAAc,KAAA,EAAe;AACxD,EAAA,IAAI,KAAA,CAAM,SAAS,iBAAA,IAAqB,mBAAA,CAAoB,IAAI,KAAA,CAAM,WAAA,EAAa,CAAA,EAAG;AACpF,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,CAAA,EAAA,EAAK,IAAI,CAAA,oBAAA,EAAuB,iBAAiB,CAAA,iFAAA;AAAA,KAEnD;AAAA,EACF;AACF;AAEA,SAAS,QAAA,CAAS,QAAiD,OAAA,EAA+B;AAChG,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,YAAY,yBAAyB,CAAA;AACrE,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,MAAM,IAAI,YAAY,8BAA8B,CAAA;AAG/E,EAAA,IAAI,OAAO,MAAA,CAAO,OAAA,EAAS,SAAA,KAAc,UAAA,EAAY;AACnD,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACA,EAAA,mBAAA,CAAoB,QAAA,EAAU,OAAO,MAAM,CAAA;AAC3C,EAAA,IAAI,OAAO,IAAA,EAAM,MAAA,sBAA4B,aAAA,EAAe,MAAA,CAAO,KAAK,MAAM,CAAA;AAC9E,EAAA,IAAI,MAAA,CAAO,aAAA,EAAe,mBAAA,CAAoB,eAAA,EAAiB,OAAO,aAAa,CAAA;AAEnF,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,IAAK,MAAA,CAAO,SAAA,CAAU,QAAA,GAAW,CAAA,CAAA,EAAI;AACnF,IAAA,MAAM,IAAI,YAAY,iEAAiE,CAAA;AAAA,EACzF;AAEA,EAAA,IAAI,OAAO,MAAA,CAAO,aAAA,KAAkB,UAAA,EAAY;AAC9C,IAAA,MAAM,IAAI,YAAY,8DAA8D,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,CAAA,qBAAA,EAAwB,MAAA,CAAO,EAAE,CAAA,4BAAA,CAAyB,CAAA;AAAA,IAClF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAAA,EACpB;AAEA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,SAAA,IAAa,EAAC,EAAG;AAC/C,MAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,YAAA,EAAe,UAAU,CAAA,2BAAA;AAAA,SAC/C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,MAAM,YAAY,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAC/C,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA,CAAY,CAAA,8CAAA,EAAiD,SAAS,CAAA,EAAA,CAAI,CAAA;AAAA,MACtF;AACA,MAAA,MAAA,CAAO,IAAI,SAAS,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,IAAA,CAAK,SAAS,MAAA,IAAU,IAAA,KAAS,eAAe,CAAC,MAAA,CAAO,MAAM,MAAA,EAAQ;AACpE,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,kBAAkB,IAAI,CAAA,oMAAA;AAAA,KAGxB;AAAA,EACF;AACF;AAEO,SAAS,SACd,MAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,EAAC;AACnC,EAAA,QAAA,CAAS,QAAmD,OAAO,CAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,aAAA;AAChC,EAAA,MAAM,WAAA,GAAc,OAAO,WAAA,IAAe,EAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW,QAAA,CAAS,OAAA;AACrD,EAAA,MAAM,WAAqB,EAAC;AAG5B,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,QAAA,CAAS,KAAA,EAAO,QAAA,EAAU,SAAA;AACzD,EAAA,IAAI,eAAA,KAAoB,MAAA,IAAa,eAAA,IAAmB,OAAA,GAAU,CAAA,EAAG;AACnE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,wBAAA,EAA2B,eAAe,CAAA,0CAAA,EACpC,OAAO,CAAA,wDAAA;AAAA,KACf;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAsB;AAC3C,EAAA,KAAA,MAAW,CAAC,MAAM,UAAU,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,aAAa,CAAA,EAAG;AACrE,IAAA,MAAM,OAAA,GAAU,WAAW,QAAA,CAAS,MAAA;AAAA,MAClC,CAAC,OAAA,KAAY,CAAC,gBAAgB,OAAA,EAAS,MAAA,CAAO,UAAU,OAAO;AAAA,KACjE;AACA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAA,CAAS,IAAI,IAAA,EAAM,CAAC,GAAG,OAAO,CAAC,CAAA;AAAA,EACzD;AAEA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,QAAA,EAAU;AACvC,IAAA,MAAM,OAAO,QAAA,CAAS,MAAA,KAAW,OAAO,aAAA,CAAc,IAAI,GAAG,QAAA,CAAS,MAAA;AACtE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,cAAA,EAAiB,IAAI,CAAA,WAAA,EAAc,QAAA,CAAS,IAAI,CAAC,CAAA,KAAM,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAC,sCACpC,QAAA,CAAS,MAAA,GAAS,IAAI,MAAA,GAAS,IAAI,CAAA,CAAA,IACvE,IAAA,GAAO,2CAAA,GAAyC,mCAAA;AAAA,KACrD;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,UAAA,IAAc,CAAC,MAAA,CAAO,UAAU,SAAA,EAAW;AACtD,IAAA,QAAA,CAAS,IAAA;AAAA,MACP;AAAA,KAEF;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,IAAI,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,EAAU;AACjC,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,SAAA,EAAY,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,mBAAA,CAAA,GACxD,KAAA,CAAM,KAAA,CAAM;AAAA,SAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAEnD,EAAA,MAAM,SAAS,YAAA,CAAa;AAAA,IAC1B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,aAAa,MAAA,CAAO,aAAA;AAAA,IACpB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAA;AAAA,IACA,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,MAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,QAAA,EAAU,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,IAClD,OAAA,EAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW;AAAA,GACvC,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,QAAQ,OAAA,CAAQ,CAAC,WAAW,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA;AAEpE,EAAA,MAAM,UAAU,aAAA,CAAc;AAAA,IAC5B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,QAAA,EAAU,MAAA,CAAO,QAAA,IAAY,QAAA,CAAS,QAAA;AAAA,IACtC,YAAA;AAAA,IACA,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,WAAW,MAAA,CAAO,SAAA,GAAY,iBAAA,CAAkB,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA;AAAA,IACpE,aAAA,EAAe,OAAO,IAAA,EAAM,SAAA;AAAA,IAC5B,GAAI,MAAA,CAAO,IAAA,EAAM,MAAA,GAAS,EAAE,YAAY,MAAA,CAAO,IAAA,CAAK,MAAA,EAAO,GAAI,EAAC;AAAA,IAChE,GAAK,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,MAAM,MAAA,GACtC,EAAE,aAAA,EAAe,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,IAAA,EAAM,MAAA,KACtD;AAAC,GACN,CAAA;AAED,EAAA,eAAe,IAAA,CACb,MACA,IAAA,EACqB;AACrB,IAAA,MAAM,SAAS,MAAM,OAAA;AAAA,MACnB,IAAA;AAAA,MACA;AAAA,QACE,IAAI,IAAA,CAAK,EAAA;AAAA,QACT,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,IAAA,CAAK;AAAA,OAClB;AAAA,MACA;AAAA,QACE,SAAS,MAAA,CAAO,QAAA;AAAA,QAChB,aAAa,MAAA,CAAO,aAAA;AAAA,QACpB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,OAAA;AAAA,QACA,eAAe,MAAA,CAAO,aAAA;AAAA,QACtB,WAAA,EAAa,MAAA,CAAO,QAAA,EAAU,WAAA,IAAe,QAAA,CAAS,WAAA;AAAA,QACtD;AAAA;AACF,KACF;AAGA,IAAA,IAAI,MAAA,CAAO,aAAA,CAAc,MAAA,GAAS,CAAA,EAAG;AAEnC,MAAA,MAAM,GAAA,GAAM,OAAO,aAAA,CAAc,OAAA;AAAA,QAAQ,CAAC,iBACxC,YAAA,CAAa,UAAA,CAAW,IAAI,CAAC,QAAA,KAAa,SAAS,EAAE;AAAA,OACvD;AAEA,MAAA,IAAI,SAAS,QAAA,EAAU,MAAM,OAAO,KAAA,CAAM,EAAE,KAAK,CAAA;AAAA,WAAA,IACxC,SAAS,UAAA,EAAY,MAAA,CAAO,iBAAiB,MAAA,CAAO,QAAA,EAAU,WAAW,GAAG,CAAA;AAAA,IACvF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,WAAW,IAAI,GAAA;AAAA,MAAA,CAClB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,OAAA;AAAA,QAAQ,CAAC,KAAA,KAC7B,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,GAAW,CAAC,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA,GAAI;AAAC;AAC3D,KACF;AACA,IAAA,MAAA,CAAO,IAAA,GAAO;AAAA,MACZ,KAAA,EAAO,kBAAkB,MAAA,CAAO,EAAA,EAAI,OAAO,MAAA,EAAQ,MAAA,CAAO,UAAU,WAAW,CAAA;AAAA,MAC/E,IAAA,EAAM,kBAAA;AAAA,QACJ,MAAA,CAAO,MAAA;AAAA,QACP,MAAA,CAAO,EAAA;AAAA,QACP,QAAA;AAAA,QACA,CAAC,OAAA,KAAY,IAAI,WAAA,CAAY,OAAO;AAAA,OACtC;AAAA,MACA,MAAA;AAAA,MACA,iBAAA,EAAmB,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,aAAa,CAAA;AAAA,MACnD,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,MAAM,CAAC,IAAA,EAAM,IAAA,KAAS,IAAA,CAAK,MAA8B,IAAa;AAAA,KACvE,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,OAAA;AAAA,IAEA,aAAa,CAAC,OAAA,KAAY,OAAO,WAAA,CAAY,OAAA,IAAW,EAAE,CAAA;AAAA,IAE1D,YAAY,MAAM;AAAA,MAChB,GAAG,WAAA,CAAY,MAAA,CAAO,CAAC,KAAA,KAAU,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAC,CAAA;AAAA,MACvF,GAAG,OAAA,CAAQ,OAAA;AAAA,QAAQ,CAAC,YACjB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,UACpC,QAAQ,KAAA,CAAM,MAAA;AAAA,UACd,MAAM,KAAA,CAAM,IAAA;AAAA,UACZ,OAAO,KAAA,CAAM,KAAA;AAAA,UACb,OAAO,MAAA,CAAO;AAAA,SAChB,CAAE;AAAA;AACJ,KACF;AAAA,IAEA,qBAAqB,CAAC,OAAA,GAAU,EAAC,KAC/B,MAAA,CAAO,SAAS,mBAAA,CAAoB;AAAA,MAClC,KAAA,EAAO,QAAQ,KAAA,IAAS,IAAI,KAAK,IAAA,CAAK,GAAA,EAAI,GAAI,EAAA,GAAK,IAAQ,CAAA;AAAA,MAC3D,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,KAAA,IAAS,KAAK,GAAI;AAAA,KAC3C,CAAA;AAAA,IAEH,aAAa,YAAmC;AAC9C,MAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAC/C,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,WAAA;AAAA,QACA,wBACE,CAAC,WAAA,KAAgB,SAAS,MAAA,IAAU,IAAA,KAAS,cAAc,IAAA,KAAS,QAAA,CAAA;AAAA,QACtE;AAAA,OACF;AAAA,IACF;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { Channel } from \"./types\";\n\nexport type PayloadFromSchema<TSchema> = TSchema extends StandardSchemaV1\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n\nexport type EmailTemplate<TPayload> = {\n  subject: (payload: TPayload) => string;\n  /** Rendered HTML. react-email users wrap: `(p) => render(<Email {...p} />)`. */\n  template: (payload: TPayload) => string | Promise<string>;\n};\n\nexport type NotificationDefinition<\n  TSchema extends StandardSchemaV1 | undefined = StandardSchemaV1 | undefined,\n> = {\n  schema?: TSchema;\n  channels: readonly Channel[];\n  maxAttempts?: number;\n  email?: EmailTemplate<PayloadFromSchema<TSchema>>;\n};\n\n/** Binds TSchema so email callbacks infer the payload; TS cannot infer from a sibling property. */\nexport function defineNotification<TSchema extends StandardSchemaV1 | undefined = undefined>(\n  definition: NotificationDefinition<TSchema>,\n): NotificationDefinition<TSchema> {\n  return definition;\n}\n\n/** Erased form. `EmailTemplate<never>` because callbacks are contravariant. */\nexport type AnyNotificationDefinition = {\n  schema?: StandardSchemaV1 | undefined;\n  channels: readonly Channel[];\n  maxAttempts?: number | undefined;\n  email?: EmailTemplate<never> | undefined;\n};\n\nexport type NotificationDefinitions = Record<string, AnyNotificationDefinition>;\n\nexport type PayloadOf<TDef> = TDef extends { schema: infer TSchema extends StandardSchemaV1 }\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n","const ESCAPES: Record<string, string> = {\n  \"&\": \"&amp;\",\n  \"<\": \"&lt;\",\n  \">\": \"&gt;\",\n  '\"': \"&quot;\",\n  \"'\": \"&#39;\",\n};\n\n/** For template literals: anything a user typed goes through this, or their HTML ships from your domain. */\nexport const escapeHtml = (value: unknown): string =>\n  String(value ?? \"\").replace(/[&<>\"']/g, (char) => ESCAPES[char] ?? char);\n","export type RateLimitConfig = {\n  /** Requests allowed per key per window. */\n  max: number;\n  windowMs: number;\n  /** Bucket key. Defaults to the client address from proxy headers; null exempts the request. */\n  key?: (request: Request) => string | null;\n};\n\nconst clientAddress = (request: Request): string | null => {\n  const headers = request.headers;\n  return (\n    headers.get(\"cf-connecting-ip\") ??\n    headers.get(\"x-real-ip\") ??\n    headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\n    null\n  );\n};\n\n/** Fixed window in process memory: per isolate or replica, so a bound rather than a quota. */\nexport function createRateLimiter(config: RateLimitConfig): (request: Request) => Response | null {\n  const keyOf = config.key ?? clientAddress;\n  const buckets = new Map<string, { count: number; resetAt: number }>();\n  let lastSweep = 0;\n\n  return (request) => {\n    const key = keyOf(request);\n    if (key === null) return null;\n\n    const now = Date.now();\n\n    // Sweep expired buckets at most once per window.\n    if (now - lastSweep > config.windowMs) {\n      for (const [id, bucket] of buckets) if (bucket.resetAt <= now) buckets.delete(id);\n      lastSweep = now;\n    }\n\n    let bucket = buckets.get(key);\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + config.windowMs };\n      buckets.set(key, bucket);\n    }\n\n    bucket.count += 1;\n    if (bucket.count <= config.max) return null;\n\n    return new Response(null, {\n      status: 429,\n      headers: {\n        \"retry-after\": String(Math.max(1, Math.ceil((bucket.resetAt - now) / 1000))),\n        \"cache-control\": \"private, no-store\",\n      },\n    });\n  };\n}\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { DatabaseAdapter, InsertDelivery, InsertNotification } from \"./adapter\";\nimport type { ChannelsConfig, SendResult } from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { type Logger, ValidationError } from \"./errors\";\nimport type { AnyPlugin, BeforeSendResult, ChannelDecision } from \"./plugin\";\nimport type { Channel, Recipient, SkipReason } from \"./types\";\n\nexport type SendPipelineDeps = {\n  adapter: DatabaseAdapter;\n  definitions: NotificationDefinitions;\n  channels: ChannelsConfig;\n  plugins: readonly AnyPlugin[];\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  maxAttempts: number;\n  logger: Logger;\n  generateId?: () => string;\n};\n\nexport type SendInput = {\n  to: string | readonly string[];\n  payload: unknown;\n  actorId?: string | undefined;\n  dedupeKey?: string | undefined;\n  overrides?: { channels?: readonly Channel[] } | undefined;\n};\n\nasync function validatePayload(type: string, schema: StandardSchemaV1, payload: unknown) {\n  const result = await schema[\"~standard\"].validate(payload);\n  if (result.issues) {\n    throw new ValidationError(\n      type,\n      result.issues.map((issue) => ({\n        message: issue.message,\n        ...(issue.path ? { path: issue.path.map(String).join(\".\") } : {}),\n      })),\n    );\n  }\n  return result.value;\n}\n\n/** inApp is on unless disabled; every other channel needs a provider or a plugin that delivers it. */\nexport function isChannelUsable(\n  channel: Channel,\n  channels: ChannelsConfig,\n  plugins: readonly AnyPlugin[] = [],\n): boolean {\n  if (channel === \"inApp\") return channels.inApp?.enabled !== false;\n  if (channel === \"email\") return Boolean(channels.email?.provider);\n  // Anything else is usable only if a plugin claims it and can deliver it.\n  return plugins.some((plugin) => plugin.channels?.includes(channel) && plugin.hooks?.deliver);\n}\n\n/** One prepare() per plugin per send, keyed by plugin id. */\nasync function runPrepare(\n  plugins: readonly AnyPlugin[],\n  ctx: { type: string; recipients: readonly Recipient[] },\n  logger: Logger,\n): Promise<Map<string, unknown>> {\n  const prepared = new Map<string, unknown>();\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.prepare;\n    if (!hook) continue;\n    try {\n      prepared.set(plugin.id, await hook(ctx));\n    } catch (error) {\n      // Fail closed: a failed bulk load must not decide with stale assumptions.\n      logger.error(`plugin \"${plugin.id}\" prepare threw; its hooks will see undefined`, {\n        type: ctx.type,\n        error,\n      });\n      prepared.set(plugin.id, undefined);\n    }\n  }\n\n  return prepared;\n}\n\nasync function runBeforeSend(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; actorId: string | null },\n  payload: unknown,\n  dedupeKey: string | null,\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<BeforeSendResult> {\n  let currentPayload = payload;\n  let currentDedupeKey = dedupeKey;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.beforeSend;\n    if (!hook) continue;\n\n    let result: BeforeSendResult;\n    try {\n      result = await hook({\n        ...base,\n        payload: currentPayload,\n        dedupeKey: currentDedupeKey,\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fail closed: failing open would email people who opted out. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" beforeSend threw; cancelling send`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return { action: \"cancel\", reason: `plugin \"${plugin.id}\" beforeSend threw` };\n    }\n\n    if (result.action === \"cancel\") return result;\n    if (result.payload !== undefined) currentPayload = result.payload;\n    if (result.dedupeKey !== undefined) currentDedupeKey = result.dedupeKey;\n  }\n\n  return {\n    action: \"continue\",\n    payload: currentPayload,\n    ...(currentDedupeKey === null ? {} : { dedupeKey: currentDedupeKey }),\n  };\n}\n\nasync function runResolveChannels(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; payload: unknown },\n  initial: readonly ChannelDecision[],\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<readonly ChannelDecision[]> {\n  let decisions = initial;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.resolveChannels;\n    if (!hook) continue;\n\n    try {\n      decisions = [...(await hook({ ...base, decisions, prepared: prepared.get(plugin.id) }))];\n    } catch (error) {\n      // Fail closed: keep the decisions already made. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" resolveChannels threw; keeping prior decisions`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return decisions;\n    }\n  }\n\n  return decisions;\n}\n\nexport async function runSend(\n  type: string,\n  input: SendInput,\n  deps: SendPipelineDeps,\n): Promise<SendResult> {\n  const definition = deps.definitions[type];\n  if (!definition) {\n    throw new ValidationError(type, [{ message: `unknown notification type \"${type}\"` }]);\n  }\n\n  const payload = definition.schema\n    ? await validatePayload(type, definition.schema, input.payload)\n    : input.payload;\n\n  const userIds = [...new Set(Array.isArray(input.to) ? input.to : [input.to as string])];\n  const recipients = await deps.getRecipients(userIds);\n  const byUserId = new Map(recipients.map((recipient) => [recipient.userId, recipient]));\n\n  const newId = deps.generateId ?? (() => crypto.randomUUID());\n  const skipped: { userId: string; reason: SkipReason }[] = [];\n  const rows: InsertNotification[] = [];\n  const actorId = input.actorId ?? null;\n\n  const declared = input.overrides?.channels ?? definition.channels;\n  const requested = declared.filter((channel) =>\n    isChannelUsable(channel, deps.channels, deps.plugins),\n  );\n\n  // Distinct from \"no-channels\": a missing provider is not an opt-out.\n  if (declared.length > 0 && requested.length === 0) {\n    return {\n      notifications: [],\n      skipped: userIds.map((userId) => ({ userId, reason: \"channel-unavailable\" as const })),\n    };\n  }\n\n  const prepared = await runPrepare(deps.plugins, { type, recipients }, deps.logger);\n\n  for (const userId of userIds) {\n    const recipient = byUserId.get(userId);\n    if (!recipient) {\n      skipped.push({ userId, reason: \"no-recipient\" });\n      continue;\n    }\n\n    const before = await runBeforeSend(\n      deps.plugins,\n      { type, recipient, actorId },\n      payload,\n      input.dedupeKey ?? null,\n      prepared,\n      deps.logger,\n    );\n\n    if (before.action === \"cancel\") {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const resolved = await runResolveChannels(\n      deps.plugins,\n      { type, recipient, payload: before.payload ?? payload },\n      requested.map((channel) => ({ channel, action: \"send\" as const })),\n      prepared,\n      deps.logger,\n    );\n\n    const now = new Date();\n    const deliveries: InsertDelivery[] = resolved\n      .filter((decision) => decision.action !== \"skip\")\n      .filter((decision) => isChannelUsable(decision.channel, deps.channels, deps.plugins))\n      .map((decision) => ({\n        id: newId(),\n        channel: decision.channel,\n        maxAttempts: definition.maxAttempts ?? deps.maxAttempts,\n        // defer is just not_before; the claim query refuses rows whose time has not come. RFC 0004 §4.2.\n        notBefore: decision.action === \"defer\" && decision.notBefore ? decision.notBefore : now,\n      }));\n\n    if (deliveries.length === 0) {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const dedupeKey = before.action === \"continue\" ? before.dedupeKey : undefined;\n\n    rows.push({\n      id: newId(),\n      userId,\n      type,\n      payload: before.payload ?? payload,\n      ...(actorId ? { actorId } : {}),\n      ...(dedupeKey ? { dedupeKey } : {}),\n      deliveries,\n    });\n  }\n\n  if (rows.length === 0) return { notifications: [], skipped };\n\n  const { created, deduped } = await deps.adapter.createNotifications(rows);\n  const createdSet = new Set(created);\n\n  for (const row of rows) {\n    if (deduped.includes(row.id)) skipped.push({ userId: row.userId, reason: \"deduped\" });\n  }\n\n  const notifications = rows\n    .filter((row) => createdSet.has(row.id))\n    .map((row) => ({\n      id: row.id,\n      userId: row.userId,\n      deliveries: row.deliveries.map((delivery) => ({\n        id: delivery.id,\n        channel: delivery.channel,\n      })),\n    }));\n\n  for (const plugin of deps.plugins) {\n    const hook = plugin.hooks?.afterSend;\n    if (!hook) continue;\n    try {\n      await hook({\n        type,\n        payload,\n        notifications: notifications.map(({ id, userId }) => ({ id, userId })),\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fails open: the rows are committed.\n      deps.logger.error(`plugin \"${plugin.id}\" afterSend threw; ignoring`, { type, error });\n    }\n  }\n\n  return { notifications, skipped };\n}\n","import type { Backoff } from \"./backoff\";\nimport type {\n  EasyPing,\n  EasyPingConfig,\n  HealthReport,\n  MountedRoute,\n  SendArgs,\n  SendResult,\n} from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { ConfigError, consoleLogger } from \"./errors\";\nimport { createHandler } from \"./handler\";\nimport type { AnyPlugin } from \"./plugin\";\nimport { createRateLimiter } from \"./rate-limit\";\nimport { createRunner } from \"./runner\";\nimport { isChannelUsable, runSend } from \"./send\";\nimport { createPluginStore } from \"./store\";\nimport { createScopedSigner } from \"./tokens\";\nimport type { DeliveryMode } from \"./types\";\n\nconst CORE_ROUTES: readonly MountedRoute[] = [\n  { method: \"GET\", path: \"/\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"GET\", path: \"/count\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/seen\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read-all\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/cron\", scope: { type: \"machine\" }, owner: \"core\" },\n];\n\nconst DEFAULTS = {\n  maxAttempts: 5,\n  leaseMs: 60_000,\n  batchSize: 20,\n  basePath: \"/api/notifications\",\n  mode: \"cron\" as DeliveryMode,\n};\n\nexport const MIN_SECRET_LENGTH = 16;\n\nconst PLACEHOLDER_SECRETS = new Set([\n  \"secret\",\n  \"changeme\",\n  \"change-me\",\n  \"replace-me\",\n  \"replace-me-too\",\n  \"password\",\n  \"demo-signing-secret\",\n  \"demo-cron-secret\",\n]);\n\nfunction checkSecretStrength(name: string, value: string) {\n  if (value.length < MIN_SECRET_LENGTH || PLACEHOLDER_SECRETS.has(value.toLowerCase())) {\n    throw new ConfigError(\n      `\\`${name}\\` must be at least ${MIN_SECRET_LENGTH} characters and not a placeholder. ` +\n        \"Generate one with `openssl rand -base64 32`.\",\n    );\n  }\n}\n\nfunction validate(config: EasyPingConfig<NotificationDefinitions>, plugins: readonly AnyPlugin[]) {\n  if (!config.database) throw new ConfigError(\"`database` is required.\");\n  if (!config.notifications) throw new ConfigError(\"`notifications` is required.\");\n\n  // No default resolver and no dev bypass: an insecure default ships, a crash does not.\n  if (typeof config.session?.getUserId !== \"function\") {\n    throw new ConfigError(\n      \"`session.getUserId` is required — the mounted endpoints serve a user's private inbox \" +\n        \"and must resolve the caller. See RFC 0002.\",\n    );\n  }\n\n  if (!config.secret) {\n    throw new ConfigError(\n      \"`secret` is required — it signs unsubscribe and other session-less links. \" +\n        \"Adding it later is a breaking change, so it is mandatory from the start.\",\n    );\n  }\n  checkSecretStrength(\"secret\", config.secret);\n  if (config.cron?.secret) checkSecretStrength(\"cron.secret\", config.cron.secret);\n  if (config.machineSecret) checkSecretStrength(\"machineSecret\", config.machineSecret);\n\n  if (config.rateLimit && (config.rateLimit.max < 1 || config.rateLimit.windowMs < 1)) {\n    throw new ConfigError(\"`rateLimit.max` and `rateLimit.windowMs` must both be positive.\");\n  }\n\n  if (typeof config.getRecipients !== \"function\") {\n    throw new ConfigError(\"`getRecipients` is required to resolve emails and timezones.\");\n  }\n\n  const seen = new Set<string>();\n  for (const plugin of plugins) {\n    if (seen.has(plugin.id)) {\n      throw new ConfigError(`duplicate plugin id \"${plugin.id}\" — ids must be unique.`);\n    }\n    seen.add(plugin.id);\n  }\n\n  for (const plugin of plugins) {\n    for (const dependency of plugin.dependsOn ?? []) {\n      if (!seen.has(dependency)) {\n        throw new ConfigError(\n          `plugin \"${plugin.id}\" requires \"${dependency}\", which is not registered.`,\n        );\n      }\n    }\n  }\n\n  const routes = new Set<string>();\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      const signature = `${route.method} ${route.path}`;\n      if (routes.has(signature)) {\n        throw new ConfigError(`route collision: two plugins both registered \"${signature}\".`);\n      }\n      routes.add(signature);\n    }\n  }\n\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  if ((mode === \"cron\" || mode === \"deferred\") && !config.cron?.secret) {\n    throw new ConfigError(\n      `delivery.mode \"${mode}\" relies on the cron sweep, so \\`cron.secret\\` is required. ` +\n        \"Left unset the endpoint would be unauthenticated — a free flush-everything trigger \" +\n        \"against your email provider. See RFC 0002 §4.\",\n    );\n  }\n}\n\nexport function easyPing<TDefs extends NotificationDefinitions>(\n  config: EasyPingConfig<TDefs>,\n): EasyPing<TDefs> {\n  const plugins = config.plugins ?? [];\n  validate(config as EasyPingConfig<NotificationDefinitions>, plugins);\n\n  const logger = config.logger ?? consoleLogger;\n  const tablePrefix = config.tablePrefix ?? \"\";\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  const leaseMs = config.delivery?.leaseMs ?? DEFAULTS.leaseMs;\n  const warnings: string[] = [];\n\n  // Below this ratio a slow send is re-claimed mid-flight. RFC 0003 §7.\n  const providerTimeout = config.channels.email?.provider?.timeoutMs;\n  if (providerTimeout !== undefined && providerTimeout >= leaseMs / 2) {\n    warnings.push(\n      `email provider timeout (${providerTimeout}ms) is at least half of delivery.leaseMs ` +\n        `(${leaseMs}ms); raise leaseMs or duplicate sends become systematic.`,\n    );\n  }\n\n  const unusable = new Map<string, string[]>();\n  for (const [type, definition] of Object.entries(config.notifications)) {\n    const missing = definition.channels.filter(\n      (channel) => !isChannelUsable(channel, config.channels, plugins),\n    );\n    if (missing.length > 0) unusable.set(type, [...missing]);\n  }\n\n  for (const [type, channels] of unusable) {\n    const dead = channels.length === config.notifications[type]?.channels.length;\n    warnings.push(\n      `notification \"${type}\" declares ${channels.map((c) => `\"${c}\"`).join(\", \")} ` +\n        `but no provider is configured for ${channels.length > 1 ? \"them\" : \"it\"}` +\n        (dead ? \" — this type can never be delivered.\" : \"; those channels will be skipped.\"),\n    );\n  }\n\n  if (mode === \"deferred\" && !config.delivery?.waitUntil) {\n    warnings.push(\n      \"delivery.mode is 'deferred' but no delivery.waitUntil was supplied; \" +\n        \"delivery will wait for the cron sweep.\",\n    );\n  }\n\n  // Custom-scoped routes are named at startup with their justification. RFC 0002 §3.\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      if (route.scope.type === \"custom\") {\n        warnings.push(\n          `plugin \"${plugin.id}\" mounts ${route.method} ${route.path} with custom auth: ` +\n            route.scope.justification,\n        );\n      }\n    }\n  }\n\n  for (const warning of warnings) logger.warn(warning);\n\n  const runner = createRunner({\n    adapter: config.database,\n    definitions: config.notifications,\n    channels: config.channels,\n    plugins,\n    getRecipients: config.getRecipients,\n    logger,\n    leaseMs,\n    batchSize: config.delivery?.batchSize ?? DEFAULTS.batchSize,\n    backoff: (config.delivery?.backoff ?? \"exponential\") as Backoff,\n  });\n\n  const pluginRoutes = plugins.flatMap((plugin) => plugin.routes ?? []);\n\n  const handler = createHandler({\n    adapter: config.database,\n    session: config.session,\n    runner,\n    logger,\n    secret: config.secret,\n    basePath: config.basePath ?? DEFAULTS.basePath,\n    pluginRoutes,\n    trustedOrigins: config.trustedOrigins,\n    onRequest: config.onRequest,\n    maxBodyBytes: config.maxBodyBytes,\n    rateLimit: config.rateLimit ? createRateLimiter(config.rateLimit) : undefined,\n    cronMaxSweeps: config.cron?.maxSweeps,\n    ...(config.cron?.secret ? { cronSecret: config.cron.secret } : {}),\n    ...((config.machineSecret ?? config.cron?.secret)\n      ? { machineSecret: config.machineSecret ?? config.cron?.secret }\n      : {}),\n  });\n\n  async function send<TKey extends keyof TDefs & string>(\n    type: TKey,\n    args: SendArgs<TDefs, TKey>,\n  ): Promise<SendResult> {\n    const result = await runSend(\n      type,\n      {\n        to: args.to,\n        payload: args.payload,\n        actorId: args.actorId,\n        dedupeKey: args.dedupeKey,\n        overrides: args.overrides,\n      },\n      {\n        adapter: config.database,\n        definitions: config.notifications,\n        channels: config.channels,\n        plugins,\n        getRecipients: config.getRecipients,\n        maxAttempts: config.delivery?.maxAttempts ?? DEFAULTS.maxAttempts,\n        logger,\n      },\n    );\n\n    // Rows are committed; everything below only affects latency. RFC 0001 §8.1.\n    if (result.notifications.length > 0) {\n      // Scoped to this send, or an inline send flushes the whole backlog.\n      const ids = result.notifications.flatMap((notification) =>\n        notification.deliveries.map((delivery) => delivery.id),\n      );\n\n      if (mode === \"inline\") await runner.drain({ ids });\n      else if (mode === \"deferred\") runner.scheduleDeferred(config.delivery?.waitUntil, ids);\n    }\n\n    return result;\n  }\n\n  // After send() exists, before any hook or route can run.\n  for (const plugin of plugins) {\n    const purposes = new Set(\n      (plugin.routes ?? []).flatMap((route) =>\n        route.scope.type === \"signed\" ? [route.scope.purpose] : [],\n      ),\n    );\n    plugin.init?.({\n      store: createPluginStore(plugin.id, plugin.schema, config.database, tablePrefix),\n      sign: createScopedSigner(\n        config.secret,\n        plugin.id,\n        purposes,\n        (message) => new ConfigError(message),\n      ),\n      logger,\n      notificationTypes: Object.keys(config.notifications),\n      getRecipients: config.getRecipients,\n      send: (type, args) => send(type as keyof TDefs & string, args as never) as Promise<unknown>,\n    });\n  }\n\n  return {\n    send,\n    handler,\n\n    startWorker: (options) => runner.startWorker(options ?? {}),\n\n    listRoutes: () => [\n      ...CORE_ROUTES.filter((route) => route.path !== \"/cron\" || Boolean(config.cron?.secret)),\n      ...plugins.flatMap((plugin) =>\n        (plugin.routes ?? []).map((route) => ({\n          method: route.method,\n          path: route.path,\n          scope: route.scope,\n          owner: plugin.id,\n        })),\n      ),\n    ],\n\n    getFailedDeliveries: (options = {}) =>\n      config.database.getFailedDeliveries({\n        since: options.since ?? new Date(Date.now() - 24 * 3600_000),\n        limit: Math.min(options.limit ?? 100, 1000),\n      }),\n\n    healthCheck: async (): Promise<HealthReport> => {\n      const cronMounted = Boolean(config.cron?.secret);\n      return {\n        mode,\n        cronMounted,\n        cronRequiredButMissing:\n          !cronMounted && (mode === \"cron\" || mode === \"deferred\" || mode === \"inline\"),\n        warnings,\n      };\n    },\n  };\n}\n"]}