easy-ping 0.6.0 → 0.7.0

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-D3lTy-4E.cjs';
-export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-D3lTy-4E.cjs';
+import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-BJ8Iejvs.cjs';
+export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-BJ8Iejvs.cjs';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-CHd2ZiGC.cjs';
-export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-CHd2ZiGC.cjs';
+import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-Wwp1nvo0.cjs';
+export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-Wwp1nvo0.cjs';
 import { E as EmailProvider } from './provider-CA45WVqt.cjs';
 export { a as EmailMessage, P as ProviderSendResult } from './provider-CA45WVqt.cjs';
 import { S as Signals } from './signals-kPmOlKDX.cjs';
@@ -80,6 +80,10 @@ type EventsConfig = {
      * for changes this often on its subscriber's behalf. Default 30 s; 0 disables.
      */
     probeIntervalMs?: number;
+    /** Concurrent streams one user may hold in this process before a 429. Default 10. */
+    maxStreamsPerUser?: number;
+    /** Concurrent streams this process holds in total before a 503. Default 5000. */
+    maxStreams?: number;
     /** Close the stream after this long; the client reconnects. 0 (default) leaves it open. */
     maxDurationMs?: number;
 };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-D3lTy-4E.js';
-export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-D3lTy-4E.js';
+import { C as Channel, b as DeliveryMode, S as SkipReason, c as DeliveryRecord, D as DatabaseAdapter, R as Recipient } from './adapter-BJ8Iejvs.js';
+export { d as ClaimArgs, e as ClaimedDelivery, f as DeliveryOutcome, g as DeliveryRelease, a as DeliveryStatus, h as FeedPage, i as FeedQuery, F as Frequency, I as InsertDelivery, j as InsertNotification, N as NotificationRecord, P as PreferenceRecord } from './adapter-BJ8Iejvs.js';
 import { StandardSchemaV1 } from '@standard-schema/spec';
-import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-Cg9usuUi.js';
-export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-Cg9usuUi.js';
+import { R as RouteScope, A as AnyPlugin, P as Promisable, L as Logger } from './plugin-CSLKKgXT.js';
+export { a as ActionsOf, b as AfterDeliverContext, c as AnyClientPlugin, B as BeforeSendContext, d as BeforeSendResult, C as ChannelDecision, e as ClientFetch, f as ClientPlugin, g as ConfigError, D as DEFAULT_TOKEN_TTL_SECONDS, E as EasyPingError, h as EasyPingPlugin, F as FieldDeclaration, i as FieldType, M as MAX_TOKEN_TTL_SECONDS, j as PluginHooks, k as PrepareContext, l as ResolveChannelsContext, m as RouteContext, n as RouteDefinition, S as SchemaDeclaration, o as SignRequest, T as TableDeclaration, p as TokenClaims, U as UnionToIntersection, V as ValidationError, q as consoleLogger, r as defineClientPlugin, s as definePlugin, t as expiresIn, u as signToken, v as verifyToken } from './plugin-CSLKKgXT.js';
 import { E as EmailProvider } from './provider-CA45WVqt.js';
 export { a as EmailMessage, P as ProviderSendResult } from './provider-CA45WVqt.js';
 import { S as Signals } from './signals-kPmOlKDX.js';
@@ -80,6 +80,10 @@ type EventsConfig = {
      * for changes this often on its subscriber's behalf. Default 30 s; 0 disables.
      */
     probeIntervalMs?: number;
+    /** Concurrent streams one user may hold in this process before a 429. Default 10. */
+    maxStreamsPerUser?: number;
+    /** Concurrent streams this process holds in total before a 503. Default 5000. */
+    maxStreams?: number;
     /** Close the stream after this long; the client reconnects. 0 (default) leaves it open. */
     maxDurationMs?: number;
 };

package/dist/index.js

@@ -1,8 +1,9 @@
 import { createRunner } from './chunk-JKTMUMQK.js';
 export { createRunner, redactErrorMessage } from './chunk-JKTMUMQK.js';
+export { escapeHtml } from './chunk-R3BE67L7.js';
 export { defineClientPlugin, definePlugin } from './chunk-E4IZ2CQC.js';
-import { createHandler, createScopedSigner } from './chunk-USQ6CQTJ.js';
-export { DEFAULT_TOKEN_TTL_SECONDS, MAX_BODY_BYTES, MAX_TOKEN_TTL_SECONDS, expiresIn, readJsonBody, signToken, verifyToken } from './chunk-USQ6CQTJ.js';
+import { createHandler, createScopedSigner } from './chunk-JOVIZXO6.js';
+export { DEFAULT_TOKEN_TTL_SECONDS, MAX_BODY_BYTES, MAX_TOKEN_TTL_SECONDS, expiresIn, readJsonBody, signToken, verifyToken } from './chunk-JOVIZXO6.js';
 import { createMemorySignals, inboxChannel, DELIVERIES_CHANNEL } from './chunk-ORZKH224.js';
 export { DELIVERIES_CHANNEL, createBridgedSignals, createMemorySignals, inboxChannel } from './chunk-ORZKH224.js';
 import { consoleLogger, ConfigError, createPluginStore, ValidationError } from './chunk-3VOQOGDR.js';
@@ -18,16 +19,6 @@ function defineNotification(definition) {
   return definition;
 }
 
-// src/core/html.ts
-var ESCAPES = {
-  "&": "&",
-  "<": "&lt;",
-  ">": "&gt;",
-  '"': "&quot;",
-  "'": "&#39;"
-};
-var escapeHtml = (value) => String(value ?? "").replace(/[&<>"']/g, (char) => ESCAPES[char] ?? char);
-
 // src/core/rate-limit.ts
 var clientAddress = (request) => {
   const headers = request.headers;
@@ -413,7 +404,9 @@ function easyPing(config) {
   const events = config.events === false ? false : {
     heartbeatMs: config.events?.heartbeatMs ?? 25e3,
     probeIntervalMs: config.events?.probeIntervalMs ?? 3e4,
-    maxDurationMs: config.events?.maxDurationMs ?? 0
+    maxDurationMs: config.events?.maxDurationMs ?? 0,
+    maxStreamsPerUser: config.events?.maxStreamsPerUser ?? 10,
+    maxStreams: config.events?.maxStreams ?? 5e3
   };
   const sweepConfig = config.delivery?.sweepOnRequest;
   let lastRequestSweep = 0;
@@ -533,6 +526,6 @@ function easyPing(config) {
   };
 }
 
-export { INBOX_VERSION_HEADER, MIN_SECRET_LENGTH, createRateLimiter, defineNotification, easyPing, escapeHtml };
+export { INBOX_VERSION_HEADER, MIN_SECRET_LENGTH, createRateLimiter, defineNotification, easyPing };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/config.ts","../src/core/definition.ts","../src/core/html.ts","../src/core/rate-limit.ts","../src/core/send.ts","../src/core/instance.ts"],"names":["bucket","handler"],"mappings":";;;;;;;;;;;;;AAkIO,IAAM,oBAAA,GAAuB;;;AC3G7B,SAAS,mBACd,UAAA,EACiC;AACjC,EAAA,OAAO,UAAA;AACT;;;AC3BA,IAAM,OAAA,GAAkC;AAAA,EACtC,GAAA,EAAK,OAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,MAAA;AAAA,EACL,GAAA,EAAK,QAAA;AAAA,EACL,GAAA,EAAK;AACP,CAAA;AAGO,IAAM,UAAA,GAAa,CAAC,KAAA,KACzB,MAAA,CAAO,SAAS,EAAE,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,CAAC,IAAA,KAAS,OAAA,CAAQ,IAAI,KAAK,IAAI;;;ACFzE,IAAM,aAAA,GAAgB,CAAC,OAAA,KAAoC;AACzD,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,OACE,QAAQ,GAAA,CAAI,kBAAkB,KAC9B,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IACvB,OAAA,CAAQ,GAAA,CAAI,iBAAiB,GAAG,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA,EAAG,MAAK,IACpD,IAAA;AAEJ,CAAA;AAGO,SAAS,kBAAkB,MAAA,EAAgE;AAChG,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAA,IAAO,aAAA;AAC5B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAgD;AACpE,EAAA,IAAI,SAAA,GAAY,CAAA;AAEhB,EAAA,OAAO,CAAC,OAAA,KAAY;AAClB,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAGrB,IAAA,IAAI,GAAA,GAAM,SAAA,GAAY,MAAA,CAAO,QAAA,EAAU;AACrC,MAAA,KAAA,MAAW,CAAC,EAAA,EAAIA,OAAM,CAAA,IAAK,OAAA,EAAS,IAAIA,OAAAA,CAAO,OAAA,IAAW,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA;AAChF,MAAA,SAAA,GAAY,GAAA;AAAA,IACd;AAEA,IAAA,IAAI,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,OAAA,IAAW,GAAA,EAAK;AACpC,MAAA,MAAA,GAAS,EAAE,KAAA,EAAO,CAAA,EAAG,OAAA,EAAS,GAAA,GAAM,OAAO,QAAA,EAAS;AACpD,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACzB;AAEA,IAAA,MAAA,CAAO,KAAA,IAAS,CAAA;AAChB,IAAA,IAAI,MAAA,CAAO,KAAA,IAAS,MAAA,CAAO,GAAA,EAAK,OAAO,IAAA;AAEvC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,IAAA,CAAA,CAAM,MAAA,CAAO,OAAA,GAAU,GAAA,IAAO,GAAI,CAAC,CAAC,CAAA;AAAA,QAC3E,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,CAAA;AACF;;;AC1BA,eAAe,eAAA,CAAgB,IAAA,EAAc,MAAA,EAA0B,OAAA,EAAkB;AACvF,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,WAAW,CAAA,CAAE,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,IAAA;AAAA,MACA,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,QAC5B,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,KAAA,CAAM,IAAA,GAAO,EAAE,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA,KAAM;AAAC,OACjE,CAAE;AAAA,KACJ;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,KAAA;AAChB;AAGO,SAAS,eAAA,CACd,OAAA,EACA,QAAA,EACA,OAAA,GAAgC,EAAC,EACxB;AACT,EAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,QAAA,CAAS,OAAO,OAAA,KAAY,KAAA;AAC5D,EAAA,IAAI,YAAY,OAAA,EAAS,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,QAAQ,CAAA;AAEhE,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,QAAA,EAAU,QAAA,CAAS,OAAO,CAAA,IAAK,MAAA,CAAO,KAAA,EAAO,OAAO,CAAA;AAC7F;AAGA,eAAe,UAAA,CACb,OAAA,EACA,GAAA,EACA,MAAA,EAC+B;AAC/B,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAE1C,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,OAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,IAAI,MAAA,CAAO,EAAA,EAAI,MAAM,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,6CAAA,CAAA,EAAiD;AAAA,QAChF,MAAM,GAAA,CAAI,IAAA;AAAA,QACV;AAAA,OACD,CAAA;AACD,MAAA,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAA,EAAI,MAAS,CAAA;AAAA,IACnC;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT;AAEA,eAAe,cACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,SAAA,EACA,UACA,MAAA,EAC2B;AAC3B,EAAA,IAAI,cAAA,GAAiB,OAAA;AACrB,EAAA,IAAI,gBAAA,GAAmB,SAAA;AAEvB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,UAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,MAAM,IAAA,CAAK;AAAA,QAClB,GAAG,IAAA;AAAA,QACH,OAAA,EAAS,cAAA;AAAA,QACT,SAAA,EAAW,gBAAA;AAAA,QACX,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,mCAAA,CAAA,EAAuC;AAAA,QACtE,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAQ,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,kBAAA,CAAA,EAAqB;AAAA,IAC9E;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,IAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,cAAA,GAAiB,MAAA,CAAO,OAAA;AAC1D,IAAA,IAAI,MAAA,CAAO,SAAA,KAAc,MAAA,EAAW,gBAAA,GAAmB,MAAA,CAAO,SAAA;AAAA,EAChE;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,UAAA;AAAA,IACR,OAAA,EAAS,cAAA;AAAA,IACT,GAAI,gBAAA,KAAqB,IAAA,GAAO,EAAC,GAAI,EAAE,WAAW,gBAAA;AAAiB,GACrE;AACF;AAEA,eAAe,kBAAA,CACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,UACA,MAAA,EACqC;AACrC,EAAA,IAAI,SAAA,GAAY,OAAA;AAEhB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,eAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,CAAC,GAAI,MAAM,IAAA,CAAK,EAAE,GAAG,IAAA,EAAM,SAAA,EAAW,QAAA,EAAU,SAAS,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG,CAAE,CAAA;AAAA,IACzF,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,gDAAA,CAAA,EAAoD;AAAA,QACnF,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,SAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAEA,eAAsB,OAAA,CACpB,IAAA,EACA,KAAA,EACA,IAAA,EACqB;AACrB,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,eAAA,CAAgB,IAAA,EAAM,CAAC,EAAE,SAAS,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAA,EAAK,CAAC,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,MAAA,GACvB,MAAM,eAAA,CAAgB,IAAA,EAAM,UAAA,CAAW,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAA,GAC5D,KAAA,CAAM,OAAA;AAEV,EAAA,MAAM,UAAU,CAAC,GAAG,IAAI,GAAA,CAAI,MAAM,OAAA,CAAQ,KAAA,CAAM,EAAE,CAAA,GAAI,MAAM,EAAA,GAAK,CAAC,KAAA,CAAM,EAAY,CAAC,CAAC,CAAA;AACtF,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA;AACnD,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,SAAA,KAAc,CAAC,SAAA,CAAU,MAAA,EAAQ,SAAS,CAAC,CAAC,CAAA;AAErF,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,KAAe,MAAM,OAAO,UAAA,EAAW,CAAA;AAC1D,EAAA,MAAM,UAAoD,EAAC;AAC3D,EAAA,MAAM,OAA6B,EAAC;AACpC,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,IAAA;AAEjC,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,SAAA,EAAW,QAAA,IAAY,UAAA,CAAW,QAAA;AACzD,EAAA,MAAM,YAAY,QAAA,CAAS,MAAA;AAAA,IAAO,CAAC,OAAA,KACjC,eAAA,CAAgB,SAAS,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,GACtD;AAGA,EAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,SAAA,CAAU,WAAW,CAAA,EAAG;AACjD,IAAA,OAAO;AAAA,MACL,eAAe,EAAC;AAAA,MAChB,OAAA,EAAS,QAAQ,GAAA,CAAI,CAAC,YAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,qBAAA,EAA+B,CAAE;AAAA,KACvF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,EAAE,IAAA,EAAM,UAAA,EAAW,EAAG,IAAA,CAAK,MAAM,CAAA;AAEjF,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AACrC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,MAAM,aAAA;AAAA,MACnB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAQ;AAAA,MAC3B,OAAA;AAAA,MACA,MAAM,SAAA,IAAa,IAAA;AAAA,MACnB,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAW,MAAM,kBAAA;AAAA,MACrB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,WAAW,OAAA,EAAQ;AAAA,MACtD,SAAA,CAAU,IAAI,CAAC,OAAA,MAAa,EAAE,OAAA,EAAS,MAAA,EAAQ,QAAgB,CAAE,CAAA;AAAA,MACjE,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,UAAA,GAA+B,SAClC,MAAA,CAAO,CAAC,aAAa,QAAA,CAAS,MAAA,KAAW,MAAM,CAAA,CAC/C,MAAA,CAAO,CAAC,aAAa,eAAA,CAAgB,QAAA,CAAS,OAAA,EAAS,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAO,CAAC,CAAA,CACnF,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAClB,IAAI,KAAA,EAAM;AAAA,MACV,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,WAAA,EAAa,UAAA,CAAW,WAAA,IAAe,IAAA,CAAK,WAAA;AAAA;AAAA,MAE5C,WAAW,QAAA,CAAS,MAAA,KAAW,WAAW,QAAA,CAAS,SAAA,GAAY,SAAS,SAAA,GAAY;AAAA,KACtF,CAAE,CAAA;AAEJ,IAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,KAAW,UAAA,GAAa,OAAO,SAAA,GAAY,MAAA;AAEpE,IAAA,IAAA,CAAK,IAAA,CAAK;AAAA,MACR,IAAI,KAAA,EAAM;AAAA,MACV,MAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,OAAO,OAAA,IAAW,OAAA;AAAA,MAC3B,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,MAC7B,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,MACjC;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG,OAAO,EAAE,aAAA,EAAe,IAAI,OAAA,EAAQ;AAE3D,EAAA,MAAM,EAAE,SAAS,OAAA,EAAQ,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,oBAAoB,IAAI,CAAA;AACxE,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAO,CAAA;AAElC,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,WAAW,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,aAAA,GAAgB,IAAA,CACnB,MAAA,CAAO,CAAC,GAAA,KAAQ,UAAA,CAAW,GAAA,CAAI,GAAA,CAAI,EAAE,CAAC,CAAA,CACtC,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,IACb,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,UAAA,EAAY,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAC5C,IAAI,QAAA,CAAS,EAAA;AAAA,MACb,SAAS,QAAA,CAAS;AAAA,KACpB,CAAE;AAAA,GACJ,CAAE,CAAA;AAEJ,EAAA,KAAA,MAAW,MAAA,IAAU,KAAK,OAAA,EAAS;AACjC,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,SAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK;AAAA,QACT,IAAA;AAAA,QACA,OAAA;AAAA,QACA,aAAA,EAAe,aAAA,CAAc,GAAA,CAAI,CAAC,EAAE,EAAA,EAAI,MAAA,EAAO,MAAO,EAAE,EAAA,EAAI,MAAA,EAAO,CAAE,CAAA;AAAA,QACrE,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAEd,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,2BAAA,CAAA,EAA+B,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,IACtF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,eAAe,OAAA,EAAQ;AAClC;;;ACzQA,IAAM,WAAA,GAAuC;AAAA,EAC3C,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,GAAA,EAAK,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACnE,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EAC5E,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACzE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,KAAA,EAAO,MAAA;AACtE,CAAA;AAEA,IAAM,QAAA,GAAW;AAAA,EACf,WAAA,EAAa,CAAA;AAAA,EACb,OAAA,EAAS,GAAA;AAAA,EACT,SAAA,EAAW,EAAA;AAAA,EACX,QAAA,EAAU,oBAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,iBAAA,GAAoB;AAEjC,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,UAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,mBAAA,CAAoB,MAAc,KAAA,EAAe;AACxD,EAAA,IAAI,KAAA,CAAM,SAAS,iBAAA,IAAqB,mBAAA,CAAoB,IAAI,KAAA,CAAM,WAAA,EAAa,CAAA,EAAG;AACpF,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,CAAA,EAAA,EAAK,IAAI,CAAA,oBAAA,EAAuB,iBAAiB,CAAA,iFAAA;AAAA,KAEnD;AAAA,EACF;AACF;AAEA,SAAS,QAAA,CAAS,QAAiD,OAAA,EAA+B;AAChG,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,YAAY,yBAAyB,CAAA;AACrE,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,MAAM,IAAI,YAAY,8BAA8B,CAAA;AAG/E,EAAA,IAAI,OAAO,MAAA,CAAO,OAAA,EAAS,SAAA,KAAc,UAAA,EAAY;AACnD,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACA,EAAA,mBAAA,CAAoB,QAAA,EAAU,OAAO,MAAM,CAAA;AAC3C,EAAA,IAAI,OAAO,IAAA,EAAM,MAAA,sBAA4B,aAAA,EAAe,MAAA,CAAO,KAAK,MAAM,CAAA;AAC9E,EAAA,IAAI,MAAA,CAAO,aAAA,EAAe,mBAAA,CAAoB,eAAA,EAAiB,OAAO,aAAa,CAAA;AAEnF,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,IAAK,MAAA,CAAO,SAAA,CAAU,QAAA,GAAW,CAAA,CAAA,EAAI;AACnF,IAAA,MAAM,IAAI,YAAY,iEAAiE,CAAA;AAAA,EACzF;AAEA,EAAA,IAAI,OAAO,MAAA,CAAO,aAAA,KAAkB,UAAA,EAAY;AAC9C,IAAA,MAAM,IAAI,YAAY,8DAA8D,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,CAAA,qBAAA,EAAwB,MAAA,CAAO,EAAE,CAAA,4BAAA,CAAyB,CAAA;AAAA,IAClF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAAA,EACpB;AAEA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,SAAA,IAAa,EAAC,EAAG;AAC/C,MAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,YAAA,EAAe,UAAU,CAAA,2BAAA;AAAA,SAC/C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,MAAM,YAAY,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAC/C,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA,CAAY,CAAA,8CAAA,EAAiD,SAAS,CAAA,EAAA,CAAI,CAAA;AAAA,MACtF;AACA,MAAA,MAAA,CAAO,IAAI,SAAS,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,IAAA,CAAK,SAAS,MAAA,IAAU,IAAA,KAAS,eAAe,CAAC,MAAA,CAAO,MAAM,MAAA,EAAQ;AACpE,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,kBAAkB,IAAI,CAAA,oMAAA;AAAA,KAGxB;AAAA,EACF;AACF;AAEO,SAAS,SACd,MAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,EAAC;AACnC,EAAA,QAAA,CAAS,QAAmD,OAAO,CAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,aAAA;AAChC,EAAA,MAAM,WAAA,GAAc,OAAO,WAAA,IAAe,EAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW,QAAA,CAAS,OAAA;AACrD,EAAA,MAAM,WAAqB,EAAC;AAG5B,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,QAAA,CAAS,KAAA,EAAO,QAAA,EAAU,SAAA;AACzD,EAAA,IAAI,eAAA,KAAoB,MAAA,IAAa,eAAA,IAAmB,OAAA,GAAU,CAAA,EAAG;AACnE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,wBAAA,EAA2B,eAAe,CAAA,0CAAA,EACpC,OAAO,CAAA,wDAAA;AAAA,KACf;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAsB;AAC3C,EAAA,KAAA,MAAW,CAAC,MAAM,UAAU,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,aAAa,CAAA,EAAG;AACrE,IAAA,MAAM,OAAA,GAAU,WAAW,QAAA,CAAS,MAAA;AAAA,MAClC,CAAC,OAAA,KAAY,CAAC,gBAAgB,OAAA,EAAS,MAAA,CAAO,UAAU,OAAO;AAAA,KACjE;AACA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAA,CAAS,IAAI,IAAA,EAAM,CAAC,GAAG,OAAO,CAAC,CAAA;AAAA,EACzD;AAEA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,QAAA,EAAU;AACvC,IAAA,MAAM,OAAO,QAAA,CAAS,MAAA,KAAW,OAAO,aAAA,CAAc,IAAI,GAAG,QAAA,CAAS,MAAA;AACtE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,cAAA,EAAiB,IAAI,CAAA,WAAA,EAAc,QAAA,CAAS,IAAI,CAAC,CAAA,KAAM,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAC,sCACpC,QAAA,CAAS,MAAA,GAAS,IAAI,MAAA,GAAS,IAAI,CAAA,CAAA,IACvE,IAAA,GAAO,2CAAA,GAAyC,mCAAA;AAAA,KACrD;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,UAAA,IAAc,CAAC,MAAA,CAAO,UAAU,SAAA,EAAW;AACtD,IAAA,QAAA,CAAS,IAAA;AAAA,MACP;AAAA,KAEF;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,IAAI,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,EAAU;AACjC,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,SAAA,EAAY,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,mBAAA,CAAA,GACxD,KAAA,CAAM,KAAA,CAAM;AAAA,SAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAEnD,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,IAAW,mBAAA,EAAoB;AAK1D,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAAoB;AAC9C,EAAA,MAAM,OAAA,GAAmB;AAAA,IACvB,cAAc,WAAA,CAAY,YAAA;AAAA,IAC1B,QAAQ,OAAA,EAAS;AACf,MAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,QAAQ,CAAA,EAAG;AAChC,QAAA,IAAI,aAAA,CAAc,IAAA,GAAO,GAAA,EAAQ,aAAA,CAAc,KAAA,EAAM;AACrD,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AAC5C,QAAA,aAAA,CAAc,IAAI,MAAA,EAAA,CAAS,aAAA,CAAc,IAAI,MAAM,CAAA,IAAK,KAAK,CAAC,CAAA;AAAA,MAChE;AACA,MAAA,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,IAC7B,CAAA;AAAA,IACA,WAAW,CAAC,OAAA,EAASC,aAAY,WAAA,CAAY,SAAA,CAAU,SAASA,QAAO;AAAA,GACzE;AAEA,EAAA,MAAM,SAAS,YAAA,CAAa;AAAA,IAC1B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,aAAa,MAAA,CAAO,aAAA;AAAA,IACpB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAA;AAAA,IACA,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,MAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,QAAA,EAAU,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,IAClD,OAAA,EAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW,aAAA;AAAA,IACtC;AAAA,GACD,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,QAAQ,OAAA,CAAQ,CAAC,WAAW,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA;AAEpE,EAAA,MAAM,MAAA,GACJ,MAAA,CAAO,MAAA,KAAW,KAAA,GACd,KAAA,GACA;AAAA,IACE,WAAA,EAAa,MAAA,CAAO,MAAA,EAAQ,WAAA,IAAe,IAAA;AAAA,IAC3C,eAAA,EAAiB,MAAA,CAAO,MAAA,EAAQ,eAAA,IAAmB,GAAA;AAAA,IACnD,aAAA,EAAe,MAAA,CAAO,MAAA,EAAQ,aAAA,IAAiB;AAAA,GACjD;AAEN,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,EAAU,cAAA;AACrC,EAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,EAAA,MAAM,cAAA,GACJ,WAAA,IAAe,IAAA,KAAS,QAAA,GACpB,MAAM;AACJ,IAAA,MAAM,QAAA,GAAW,WAAA,KAAgB,IAAA,GAAO,EAAC,GAAI,WAAA;AAC7C,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,GAAM,gBAAA,IAAoB,QAAA,CAAS,OAAA,IAAW,GAAA,CAAA,EAAQ;AAC1D,IAAA,gBAAA,GAAmB,GAAA;AACnB,IAAA,MAAM,OAAO,MAAA,CACV,OAAA,CAAQ,EAAE,KAAA,EAAO,QAAA,CAAS,SAAS,CAAA,EAAG,EACtC,KAAA,CAAM,CAAC,UAAU,MAAA,CAAO,KAAA,CAAM,+BAA+B,EAAE,KAAA,EAAO,CAAC,CAAA;AAC1E,IAAA,MAAA,CAAO,QAAA,EAAU,YAAY,IAAI,CAAA;AAAA,EACnC,CAAA,GACA,MAAA;AAEN,EAAA,MAAM,UAAU,aAAA,CAAc;AAAA,IAC5B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,OAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA;AAAA,IACA,QAAA,EAAU,MAAA,CAAO,QAAA,IAAY,QAAA,CAAS,QAAA;AAAA,IACtC,YAAA;AAAA,IACA,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,WAAW,MAAA,CAAO,SAAA,GAAY,iBAAA,CAAkB,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA;AAAA,IACpE,aAAA,EAAe,OAAO,IAAA,EAAM,SAAA;AAAA,IAC5B,GAAI,MAAA,CAAO,IAAA,EAAM,MAAA,GAAS,EAAE,YAAY,MAAA,CAAO,IAAA,CAAK,MAAA,EAAO,GAAI,EAAC;AAAA,IAChE,GAAK,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,MAAM,MAAA,GACtC,EAAE,aAAA,EAAe,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,IAAA,EAAM,MAAA,KACtD;AAAC,GACN,CAAA;AAED,EAAA,eAAe,IAAA,CACb,MACA,IAAA,EACqB;AACrB,IAAA,MAAM,SAAS,MAAM,OAAA;AAAA,MACnB,IAAA;AAAA,MACA;AAAA,QACE,IAAI,IAAA,CAAK,EAAA;AAAA,QACT,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,IAAA,CAAK;AAAA,OAClB;AAAA,MACA;AAAA,QACE,SAAS,MAAA,CAAO,QAAA;AAAA,QAChB,aAAa,MAAA,CAAO,aAAA;AAAA,QACpB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,OAAA;AAAA,QACA,eAAe,MAAA,CAAO,aAAA;AAAA,QACtB,WAAA,EAAa,MAAA,CAAO,QAAA,EAAU,WAAA,IAAe,QAAA,CAAS,WAAA;AAAA,QACtD;AAAA;AACF,KACF;AAGA,IAAA,IAAI,MAAA,CAAO,aAAA,CAAc,MAAA,GAAS,CAAA,EAAG;AACnC,MAAA,KAAA,MAAW,YAAA,IAAgB,OAAO,aAAA,EAAe;AAC/C,QAAA,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,YAAA,CAAa,MAAM,CAAC,CAAA;AAAA,MACnD;AACA,MAAA,OAAA,CAAQ,QAAQ,kBAAkB,CAAA;AAGlC,MAAA,MAAM,GAAA,GAAM,OAAO,aAAA,CAAc,OAAA;AAAA,QAAQ,CAAC,iBACxC,YAAA,CAAa,UAAA,CAAW,IAAI,CAAC,QAAA,KAAa,SAAS,EAAE;AAAA,OACvD;AAEA,MAAA,IAAI,SAAS,QAAA,EAAU,MAAM,OAAO,KAAA,CAAM,EAAE,KAAK,CAAA;AAAA,WAAA,IACxC,SAAS,UAAA,EAAY,MAAA,CAAO,iBAAiB,MAAA,CAAO,QAAA,EAAU,WAAW,GAAG,CAAA;AAAA,IACvF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,WAAW,IAAI,GAAA;AAAA,MAAA,CAClB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,OAAA;AAAA,QAAQ,CAAC,KAAA,KAC7B,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,GAAW,CAAC,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA,GAAI;AAAC;AAC3D,KACF;AACA,IAAA,MAAA,CAAO,IAAA,GAAO;AAAA,MACZ,KAAA,EAAO,kBAAkB,MAAA,CAAO,EAAA,EAAI,OAAO,MAAA,EAAQ,MAAA,CAAO,UAAU,WAAW,CAAA;AAAA,MAC/E,IAAA,EAAM,kBAAA;AAAA,QACJ,MAAA,CAAO,MAAA;AAAA,QACP,MAAA,CAAO,EAAA;AAAA,QACP,QAAA;AAAA,QACA,CAAC,OAAA,KAAY,IAAI,WAAA,CAAY,OAAO;AAAA,OACtC;AAAA,MACA,MAAA;AAAA,MACA,iBAAA,EAAmB,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,aAAa,CAAA;AAAA,MACnD,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,MAAM,CAAC,IAAA,EAAM,IAAA,KAAS,IAAA,CAAK,MAA8B,IAAa;AAAA,KACvE,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,OAAA;AAAA,IAEA,aAAa,CAAC,OAAA,KAAY,OAAO,WAAA,CAAY,OAAA,IAAW,EAAE,CAAA;AAAA,IAE1D,YAAA,EAAc,CAAC,MAAA,MAAY;AAAA,MACzB,CAAC,oBAAoB,GAAG,MAAA,CAAO,cAAc,GAAA,CAAI,MAAM,KAAK,CAAC;AAAA,KAC/D,CAAA;AAAA,IAEA,YAAY,MAAM;AAAA,MAChB,GAAG,WAAA,CAAY,MAAA;AAAA,QACb,CAAC,KAAA,KAAA,CACE,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA,MACrD,KAAA,CAAM,IAAA,KAAS,aAAa,MAAA,KAAW,KAAA;AAAA,OAC5C;AAAA,MACA,GAAG,OAAA,CAAQ,OAAA;AAAA,QAAQ,CAAC,YACjB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,UACpC,QAAQ,KAAA,CAAM,MAAA;AAAA,UACd,MAAM,KAAA,CAAM,IAAA;AAAA,UACZ,OAAO,KAAA,CAAM,KAAA;AAAA,UACb,OAAO,MAAA,CAAO;AAAA,SAChB,CAAE;AAAA;AACJ,KACF;AAAA,IAEA,qBAAqB,CAAC,OAAA,GAAU,EAAC,KAC/B,MAAA,CAAO,SAAS,mBAAA,CAAoB;AAAA,MAClC,KAAA,EAAO,QAAQ,KAAA,IAAS,IAAI,KAAK,IAAA,CAAK,GAAA,EAAI,GAAI,EAAA,GAAK,IAAQ,CAAA;AAAA,MAC3D,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,KAAA,IAAS,KAAK,GAAI;AAAA,KAC3C,CAAA;AAAA,IAEH,aAAa,YAAmC;AAC9C,MAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAC/C,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,WAAA;AAAA,QACA,wBACE,CAAC,WAAA,KAAgB,SAAS,MAAA,IAAU,IAAA,KAAS,cAAc,IAAA,KAAS,QAAA,CAAA;AAAA,QACtE;AAAA,OACF;AAAA,IACF;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { DatabaseAdapter } from \"./adapter\";\nimport type { NotificationDefinitions, PayloadOf } from \"./definition\";\nimport type { Logger } from \"./errors\";\nimport type { AnyPlugin, Promisable, RouteScope } from \"./plugin\";\nimport type { EmailProvider } from \"./provider\";\nimport type { RateLimitConfig } from \"./rate-limit\";\nimport type { Signals } from \"./signals\";\nimport type { Channel, DeliveryMode, DeliveryRecord, Recipient, SkipReason } from \"./types\";\n\nexport type SessionConfig = {\n  /** null yields 401; throwing yields 500. Deliberately distinct. */\n  getUserId: (request: Request) => string | null | Promise<string | null>;\n};\n\nexport type DeliveryConfig = {\n  mode?: DeliveryMode;\n  maxAttempts?: number;\n  /** Must exceed the slowest provider timeout, or duplicates are systematic. */\n  leaseMs?: number;\n  batchSize?: number;\n  /** inline mode only. */\n  throwOnError?: boolean;\n  backoff?: \"exponential\" | ((attempt: number) => number);\n  /** Next.js `after` or Cloudflare `ctx.waitUntil`. Injected, not detected. */\n  waitUntil?: (promise: Promise<unknown>) => void;\n  /**\n   * Run one small claim-and-deliver pass after any request the handler serves,\n   * at most once per `everyMs` per process. Delivery then rides on your own\n   * traffic and the cron becomes a backstop. Ignored in `inline` mode. RFC 0006 idea 5.\n   */\n  sweepOnRequest?: true | { everyMs?: number; limit?: number };\n};\n\nexport type EventsConfig = {\n  /** Comment line keeping proxies from closing an idle stream. Default 25 s. */\n  heartbeatMs?: number;\n  /**\n   * Without a cross-process signal source, each stream checks the database\n   * for changes this often on its subscriber's behalf. Default 30 s; 0 disables.\n   */\n  probeIntervalMs?: number;\n  /** Close the stream after this long; the client reconnects. 0 (default) leaves it open. */\n  maxDurationMs?: number;\n};\n\nexport type ChannelsConfig = {\n  inApp?: { enabled: boolean };\n  email?: { provider: EmailProvider };\n};\n\nexport type EasyPingConfig<TDefs extends NotificationDefinitions> = {\n  database: DatabaseAdapter;\n  session: SessionConfig;\n  /** Signs unsubscribe and other tokenised links. See RFC 0002 §5. */\n  secret: string;\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  notifications: TDefs;\n  channels: ChannelsConfig;\n  delivery?: DeliveryConfig;\n  /** Required by `cron` and `deferred` modes. See RFC 0002 §4. */\n  cron?: {\n    secret: string;\n    /** Sweeps one POST /cron may run before returning. Defaults to 50. */\n    maxSweeps?: number;\n  };\n  /** Bearer secret for plugin machine routes. Falls back to `cron.secret`. */\n  machineSecret?: string;\n  /** In-process fixed-window limiter, applied before routing. */\n  rateLimit?: RateLimitConfig;\n  /**\n   * How \"something changed\" travels between the sender, the worker and open\n   * event streams. Defaults to in-process. Supply a LISTEN/NOTIFY or change\n   * stream implementation to cross replicas. RFC 0006 §4C.\n   */\n  signals?: Signals;\n  /** `GET /events`, a Server-Sent Events stream per user. `false` unmounts it. */\n  events?: EventsConfig | false;\n  plugins?: readonly AnyPlugin[];\n  /** Where the handler is mounted, used to strip the prefix off incoming URLs. */\n  basePath?: string;\n  /** Origins other than the request host that may POST. `\"*.example.com\"` matches subdomains. */\n  trustedOrigins?: readonly string[];\n  /** Runs before routing. Return a Response to short-circuit — a rate limiter's 429, say. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: (request: Request) => Promisable<Response | undefined | void>;\n  /** Defaults to 64 KiB. */\n  maxBodyBytes?: number;\n  /** Table-name prefix; must match the one given to the adapter. */\n  tablePrefix?: string;\n  logger?: Logger;\n};\n\nexport type SendArgs<TDefs extends NotificationDefinitions, TKey extends keyof TDefs> = {\n  to: string | readonly string[];\n  payload: PayloadOf<TDefs[TKey]>;\n  actorId?: string;\n  dedupeKey?: string;\n  overrides?: { channels?: readonly Channel[] };\n};\n\nexport type SendResult = {\n  notifications: readonly {\n    id: string;\n    userId: string;\n    deliveries: readonly { id: string; channel: Channel }[];\n  }[];\n  skipped: readonly { userId: string; reason: SkipReason }[];\n};\n\nexport type Worker = {\n  stop: () => Promise<void>;\n};\n\nexport type MountedRoute = {\n  method: \"GET\" | \"POST\";\n  path: string;\n  scope: RouteScope;\n  /** \"core\" for the built-in routes, otherwise the plugin id. */\n  owner: string;\n};\n\nexport type HealthReport = {\n  mode: DeliveryMode;\n  cronMounted: boolean;\n  /** True when the chosen mode relies on a cron sweep that is not wired up. */\n  cronRequiredButMissing: boolean;\n  warnings: readonly string[];\n};\n\n/** Response header carrying a per-user inbox version, so app traffic can replace polling. */\nexport const INBOX_VERSION_HEADER = \"x-easy-ping-inbox\";\n\nexport type EasyPing<TDefs extends NotificationDefinitions> = {\n  send<TKey extends keyof TDefs & string>(\n    type: TKey,\n    args: SendArgs<TDefs, TKey>,\n  ): Promise<SendResult>;\n\n  handler: {\n    /** Method-agnostic entry, for toNodeHandler and single-dispatch frameworks. */\n    handle: (request: Request) => Promise<Response>;\n    GET: (request: Request) => Promise<Response>;\n    POST: (request: Request) => Promise<Response>;\n  };\n\n  /** Idle interval defaults to 10 s; a send in this process wakes the loop at once. */\n  startWorker(options?: { intervalMs?: number; batchSize?: number }): Worker;\n  healthCheck(): Promise<HealthReport>;\n\n  /** Every mounted route with its auth scope, so `custom`-scoped ones stay visible. RFC 0002 §3. */\n  listRoutes(): readonly MountedRoute[];\n\n  /**\n   * Headers to attach to any response your app sends this user. The client's\n   * `instrument(fetch)` reads them and refreshes only when the version moved,\n   * so an active user never needs a dedicated poll. RFC 0006 idea 1.\n   */\n  inboxHeaders(userId: string): Record<string, string>;\n\n  /** Deliveries that exhausted their attempts, newest first. Wire it to an admin page or an alert. */\n  getFailedDeliveries(options?: {\n    /** Defaults to the last 24 hours. */\n    since?: Date;\n    /** Defaults to 100. */\n    limit?: number;\n  }): Promise<readonly DeliveryRecord[]>;\n};\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { Channel } from \"./types\";\n\nexport type PayloadFromSchema<TSchema> = TSchema extends StandardSchemaV1\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n\nexport type EmailTemplate<TPayload> = {\n  subject: (payload: TPayload) => string;\n  /** Rendered HTML. react-email users wrap: `(p) => render(<Email {...p} />)`. */\n  template: (payload: TPayload) => string | Promise<string>;\n};\n\nexport type NotificationDefinition<\n  TSchema extends StandardSchemaV1 | undefined = StandardSchemaV1 | undefined,\n> = {\n  schema?: TSchema;\n  channels: readonly Channel[];\n  maxAttempts?: number;\n  email?: EmailTemplate<PayloadFromSchema<TSchema>>;\n};\n\n/** Binds TSchema so email callbacks infer the payload; TS cannot infer from a sibling property. */\nexport function defineNotification<TSchema extends StandardSchemaV1 | undefined = undefined>(\n  definition: NotificationDefinition<TSchema>,\n): NotificationDefinition<TSchema> {\n  return definition;\n}\n\n/** Erased form. `EmailTemplate<never>` because callbacks are contravariant. */\nexport type AnyNotificationDefinition = {\n  schema?: StandardSchemaV1 | undefined;\n  channels: readonly Channel[];\n  maxAttempts?: number | undefined;\n  email?: EmailTemplate<never> | undefined;\n};\n\nexport type NotificationDefinitions = Record<string, AnyNotificationDefinition>;\n\nexport type PayloadOf<TDef> = TDef extends { schema: infer TSchema extends StandardSchemaV1 }\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n","const ESCAPES: Record<string, string> = {\n  \"&\": \"&amp;\",\n  \"<\": \"&lt;\",\n  \">\": \"&gt;\",\n  '\"': \"&quot;\",\n  \"'\": \"&#39;\",\n};\n\n/** For template literals: anything a user typed goes through this, or their HTML ships from your domain. */\nexport const escapeHtml = (value: unknown): string =>\n  String(value ?? \"\").replace(/[&<>\"']/g, (char) => ESCAPES[char] ?? char);\n","export type RateLimitConfig = {\n  /** Requests allowed per key per window. */\n  max: number;\n  windowMs: number;\n  /** Bucket key. Defaults to the client address from proxy headers; null exempts the request. */\n  key?: (request: Request) => string | null;\n};\n\nconst clientAddress = (request: Request): string | null => {\n  const headers = request.headers;\n  return (\n    headers.get(\"cf-connecting-ip\") ??\n    headers.get(\"x-real-ip\") ??\n    headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\n    null\n  );\n};\n\n/** Fixed window in process memory: per isolate or replica, so a bound rather than a quota. */\nexport function createRateLimiter(config: RateLimitConfig): (request: Request) => Response | null {\n  const keyOf = config.key ?? clientAddress;\n  const buckets = new Map<string, { count: number; resetAt: number }>();\n  let lastSweep = 0;\n\n  return (request) => {\n    const key = keyOf(request);\n    if (key === null) return null;\n\n    const now = Date.now();\n\n    // Sweep expired buckets at most once per window.\n    if (now - lastSweep > config.windowMs) {\n      for (const [id, bucket] of buckets) if (bucket.resetAt <= now) buckets.delete(id);\n      lastSweep = now;\n    }\n\n    let bucket = buckets.get(key);\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + config.windowMs };\n      buckets.set(key, bucket);\n    }\n\n    bucket.count += 1;\n    if (bucket.count <= config.max) return null;\n\n    return new Response(null, {\n      status: 429,\n      headers: {\n        \"retry-after\": String(Math.max(1, Math.ceil((bucket.resetAt - now) / 1000))),\n        \"cache-control\": \"private, no-store\",\n      },\n    });\n  };\n}\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { DatabaseAdapter, InsertDelivery, InsertNotification } from \"./adapter\";\nimport type { ChannelsConfig, SendResult } from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { type Logger, ValidationError } from \"./errors\";\nimport type { AnyPlugin, BeforeSendResult, ChannelDecision } from \"./plugin\";\nimport type { Channel, Recipient, SkipReason } from \"./types\";\n\nexport type SendPipelineDeps = {\n  adapter: DatabaseAdapter;\n  definitions: NotificationDefinitions;\n  channels: ChannelsConfig;\n  plugins: readonly AnyPlugin[];\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  maxAttempts: number;\n  logger: Logger;\n  generateId?: () => string;\n};\n\nexport type SendInput = {\n  to: string | readonly string[];\n  payload: unknown;\n  actorId?: string | undefined;\n  dedupeKey?: string | undefined;\n  overrides?: { channels?: readonly Channel[] } | undefined;\n};\n\nasync function validatePayload(type: string, schema: StandardSchemaV1, payload: unknown) {\n  const result = await schema[\"~standard\"].validate(payload);\n  if (result.issues) {\n    throw new ValidationError(\n      type,\n      result.issues.map((issue) => ({\n        message: issue.message,\n        ...(issue.path ? { path: issue.path.map(String).join(\".\") } : {}),\n      })),\n    );\n  }\n  return result.value;\n}\n\n/** inApp is on unless disabled; every other channel needs a provider or a plugin that delivers it. */\nexport function isChannelUsable(\n  channel: Channel,\n  channels: ChannelsConfig,\n  plugins: readonly AnyPlugin[] = [],\n): boolean {\n  if (channel === \"inApp\") return channels.inApp?.enabled !== false;\n  if (channel === \"email\") return Boolean(channels.email?.provider);\n  // Anything else is usable only if a plugin claims it and can deliver it.\n  return plugins.some((plugin) => plugin.channels?.includes(channel) && plugin.hooks?.deliver);\n}\n\n/** One prepare() per plugin per send, keyed by plugin id. */\nasync function runPrepare(\n  plugins: readonly AnyPlugin[],\n  ctx: { type: string; recipients: readonly Recipient[] },\n  logger: Logger,\n): Promise<Map<string, unknown>> {\n  const prepared = new Map<string, unknown>();\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.prepare;\n    if (!hook) continue;\n    try {\n      prepared.set(plugin.id, await hook(ctx));\n    } catch (error) {\n      // Fail closed: a failed bulk load must not decide with stale assumptions.\n      logger.error(`plugin \"${plugin.id}\" prepare threw; its hooks will see undefined`, {\n        type: ctx.type,\n        error,\n      });\n      prepared.set(plugin.id, undefined);\n    }\n  }\n\n  return prepared;\n}\n\nasync function runBeforeSend(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; actorId: string | null },\n  payload: unknown,\n  dedupeKey: string | null,\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<BeforeSendResult> {\n  let currentPayload = payload;\n  let currentDedupeKey = dedupeKey;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.beforeSend;\n    if (!hook) continue;\n\n    let result: BeforeSendResult;\n    try {\n      result = await hook({\n        ...base,\n        payload: currentPayload,\n        dedupeKey: currentDedupeKey,\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fail closed: failing open would email people who opted out. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" beforeSend threw; cancelling send`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return { action: \"cancel\", reason: `plugin \"${plugin.id}\" beforeSend threw` };\n    }\n\n    if (result.action === \"cancel\") return result;\n    if (result.payload !== undefined) currentPayload = result.payload;\n    if (result.dedupeKey !== undefined) currentDedupeKey = result.dedupeKey;\n  }\n\n  return {\n    action: \"continue\",\n    payload: currentPayload,\n    ...(currentDedupeKey === null ? {} : { dedupeKey: currentDedupeKey }),\n  };\n}\n\nasync function runResolveChannels(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; payload: unknown },\n  initial: readonly ChannelDecision[],\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<readonly ChannelDecision[]> {\n  let decisions = initial;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.resolveChannels;\n    if (!hook) continue;\n\n    try {\n      decisions = [...(await hook({ ...base, decisions, prepared: prepared.get(plugin.id) }))];\n    } catch (error) {\n      // Fail closed: keep the decisions already made. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" resolveChannels threw; keeping prior decisions`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return decisions;\n    }\n  }\n\n  return decisions;\n}\n\nexport async function runSend(\n  type: string,\n  input: SendInput,\n  deps: SendPipelineDeps,\n): Promise<SendResult> {\n  const definition = deps.definitions[type];\n  if (!definition) {\n    throw new ValidationError(type, [{ message: `unknown notification type \"${type}\"` }]);\n  }\n\n  const payload = definition.schema\n    ? await validatePayload(type, definition.schema, input.payload)\n    : input.payload;\n\n  const userIds = [...new Set(Array.isArray(input.to) ? input.to : [input.to as string])];\n  const recipients = await deps.getRecipients(userIds);\n  const byUserId = new Map(recipients.map((recipient) => [recipient.userId, recipient]));\n\n  const newId = deps.generateId ?? (() => crypto.randomUUID());\n  const skipped: { userId: string; reason: SkipReason }[] = [];\n  const rows: InsertNotification[] = [];\n  const actorId = input.actorId ?? null;\n\n  const declared = input.overrides?.channels ?? definition.channels;\n  const requested = declared.filter((channel) =>\n    isChannelUsable(channel, deps.channels, deps.plugins),\n  );\n\n  // Distinct from \"no-channels\": a missing provider is not an opt-out.\n  if (declared.length > 0 && requested.length === 0) {\n    return {\n      notifications: [],\n      skipped: userIds.map((userId) => ({ userId, reason: \"channel-unavailable\" as const })),\n    };\n  }\n\n  const prepared = await runPrepare(deps.plugins, { type, recipients }, deps.logger);\n\n  for (const userId of userIds) {\n    const recipient = byUserId.get(userId);\n    if (!recipient) {\n      skipped.push({ userId, reason: \"no-recipient\" });\n      continue;\n    }\n\n    const before = await runBeforeSend(\n      deps.plugins,\n      { type, recipient, actorId },\n      payload,\n      input.dedupeKey ?? null,\n      prepared,\n      deps.logger,\n    );\n\n    if (before.action === \"cancel\") {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const resolved = await runResolveChannels(\n      deps.plugins,\n      { type, recipient, payload: before.payload ?? payload },\n      requested.map((channel) => ({ channel, action: \"send\" as const })),\n      prepared,\n      deps.logger,\n    );\n\n    const now = new Date();\n    const deliveries: InsertDelivery[] = resolved\n      .filter((decision) => decision.action !== \"skip\")\n      .filter((decision) => isChannelUsable(decision.channel, deps.channels, deps.plugins))\n      .map((decision) => ({\n        id: newId(),\n        channel: decision.channel,\n        maxAttempts: definition.maxAttempts ?? deps.maxAttempts,\n        // defer is just not_before; the claim query refuses rows whose time has not come. RFC 0004 §4.2.\n        notBefore: decision.action === \"defer\" && decision.notBefore ? decision.notBefore : now,\n      }));\n\n    if (deliveries.length === 0) {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const dedupeKey = before.action === \"continue\" ? before.dedupeKey : undefined;\n\n    rows.push({\n      id: newId(),\n      userId,\n      type,\n      payload: before.payload ?? payload,\n      ...(actorId ? { actorId } : {}),\n      ...(dedupeKey ? { dedupeKey } : {}),\n      deliveries,\n    });\n  }\n\n  if (rows.length === 0) return { notifications: [], skipped };\n\n  const { created, deduped } = await deps.adapter.createNotifications(rows);\n  const createdSet = new Set(created);\n\n  for (const row of rows) {\n    if (deduped.includes(row.id)) skipped.push({ userId: row.userId, reason: \"deduped\" });\n  }\n\n  const notifications = rows\n    .filter((row) => createdSet.has(row.id))\n    .map((row) => ({\n      id: row.id,\n      userId: row.userId,\n      deliveries: row.deliveries.map((delivery) => ({\n        id: delivery.id,\n        channel: delivery.channel,\n      })),\n    }));\n\n  for (const plugin of deps.plugins) {\n    const hook = plugin.hooks?.afterSend;\n    if (!hook) continue;\n    try {\n      await hook({\n        type,\n        payload,\n        notifications: notifications.map(({ id, userId }) => ({ id, userId })),\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fails open: the rows are committed.\n      deps.logger.error(`plugin \"${plugin.id}\" afterSend threw; ignoring`, { type, error });\n    }\n  }\n\n  return { notifications, skipped };\n}\n","import type { Backoff } from \"./backoff\";\nimport {\n  type EasyPing,\n  type EasyPingConfig,\n  type HealthReport,\n  INBOX_VERSION_HEADER,\n  type MountedRoute,\n  type SendArgs,\n  type SendResult,\n} from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { ConfigError, consoleLogger } from \"./errors\";\nimport { createHandler } from \"./handler\";\nimport type { AnyPlugin } from \"./plugin\";\nimport { createRateLimiter } from \"./rate-limit\";\nimport { createRunner } from \"./runner\";\nimport { isChannelUsable, runSend } from \"./send\";\nimport { createMemorySignals, DELIVERIES_CHANNEL, inboxChannel, type Signals } from \"./signals\";\nimport { createPluginStore } from \"./store\";\nimport { createScopedSigner } from \"./tokens\";\nimport type { DeliveryMode } from \"./types\";\n\nconst CORE_ROUTES: readonly MountedRoute[] = [\n  { method: \"GET\", path: \"/\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"GET\", path: \"/count\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/seen\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read-all\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"GET\", path: \"/events\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/cron\", scope: { type: \"machine\" }, owner: \"core\" },\n];\n\nconst DEFAULTS = {\n  maxAttempts: 5,\n  leaseMs: 60_000,\n  batchSize: 20,\n  basePath: \"/api/notifications\",\n  mode: \"cron\" as DeliveryMode,\n};\n\nexport const MIN_SECRET_LENGTH = 16;\n\nconst PLACEHOLDER_SECRETS = new Set([\n  \"secret\",\n  \"changeme\",\n  \"change-me\",\n  \"replace-me\",\n  \"replace-me-too\",\n  \"password\",\n  \"demo-signing-secret\",\n  \"demo-cron-secret\",\n]);\n\nfunction checkSecretStrength(name: string, value: string) {\n  if (value.length < MIN_SECRET_LENGTH || PLACEHOLDER_SECRETS.has(value.toLowerCase())) {\n    throw new ConfigError(\n      `\\`${name}\\` must be at least ${MIN_SECRET_LENGTH} characters and not a placeholder. ` +\n        \"Generate one with `openssl rand -base64 32`.\",\n    );\n  }\n}\n\nfunction validate(config: EasyPingConfig<NotificationDefinitions>, plugins: readonly AnyPlugin[]) {\n  if (!config.database) throw new ConfigError(\"`database` is required.\");\n  if (!config.notifications) throw new ConfigError(\"`notifications` is required.\");\n\n  // No default resolver and no dev bypass: an insecure default ships, a crash does not.\n  if (typeof config.session?.getUserId !== \"function\") {\n    throw new ConfigError(\n      \"`session.getUserId` is required — the mounted endpoints serve a user's private inbox \" +\n        \"and must resolve the caller. See RFC 0002.\",\n    );\n  }\n\n  if (!config.secret) {\n    throw new ConfigError(\n      \"`secret` is required — it signs unsubscribe and other session-less links. \" +\n        \"Adding it later is a breaking change, so it is mandatory from the start.\",\n    );\n  }\n  checkSecretStrength(\"secret\", config.secret);\n  if (config.cron?.secret) checkSecretStrength(\"cron.secret\", config.cron.secret);\n  if (config.machineSecret) checkSecretStrength(\"machineSecret\", config.machineSecret);\n\n  if (config.rateLimit && (config.rateLimit.max < 1 || config.rateLimit.windowMs < 1)) {\n    throw new ConfigError(\"`rateLimit.max` and `rateLimit.windowMs` must both be positive.\");\n  }\n\n  if (typeof config.getRecipients !== \"function\") {\n    throw new ConfigError(\"`getRecipients` is required to resolve emails and timezones.\");\n  }\n\n  const seen = new Set<string>();\n  for (const plugin of plugins) {\n    if (seen.has(plugin.id)) {\n      throw new ConfigError(`duplicate plugin id \"${plugin.id}\" — ids must be unique.`);\n    }\n    seen.add(plugin.id);\n  }\n\n  for (const plugin of plugins) {\n    for (const dependency of plugin.dependsOn ?? []) {\n      if (!seen.has(dependency)) {\n        throw new ConfigError(\n          `plugin \"${plugin.id}\" requires \"${dependency}\", which is not registered.`,\n        );\n      }\n    }\n  }\n\n  const routes = new Set<string>();\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      const signature = `${route.method} ${route.path}`;\n      if (routes.has(signature)) {\n        throw new ConfigError(`route collision: two plugins both registered \"${signature}\".`);\n      }\n      routes.add(signature);\n    }\n  }\n\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  if ((mode === \"cron\" || mode === \"deferred\") && !config.cron?.secret) {\n    throw new ConfigError(\n      `delivery.mode \"${mode}\" relies on the cron sweep, so \\`cron.secret\\` is required. ` +\n        \"Left unset the endpoint would be unauthenticated — a free flush-everything trigger \" +\n        \"against your email provider. See RFC 0002 §4.\",\n    );\n  }\n}\n\nexport function easyPing<TDefs extends NotificationDefinitions>(\n  config: EasyPingConfig<TDefs>,\n): EasyPing<TDefs> {\n  const plugins = config.plugins ?? [];\n  validate(config as EasyPingConfig<NotificationDefinitions>, plugins);\n\n  const logger = config.logger ?? consoleLogger;\n  const tablePrefix = config.tablePrefix ?? \"\";\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  const leaseMs = config.delivery?.leaseMs ?? DEFAULTS.leaseMs;\n  const warnings: string[] = [];\n\n  // Below this ratio a slow send is re-claimed mid-flight. RFC 0003 §7.\n  const providerTimeout = config.channels.email?.provider?.timeoutMs;\n  if (providerTimeout !== undefined && providerTimeout >= leaseMs / 2) {\n    warnings.push(\n      `email provider timeout (${providerTimeout}ms) is at least half of delivery.leaseMs ` +\n        `(${leaseMs}ms); raise leaseMs or duplicate sends become systematic.`,\n    );\n  }\n\n  const unusable = new Map<string, string[]>();\n  for (const [type, definition] of Object.entries(config.notifications)) {\n    const missing = definition.channels.filter(\n      (channel) => !isChannelUsable(channel, config.channels, plugins),\n    );\n    if (missing.length > 0) unusable.set(type, [...missing]);\n  }\n\n  for (const [type, channels] of unusable) {\n    const dead = channels.length === config.notifications[type]?.channels.length;\n    warnings.push(\n      `notification \"${type}\" declares ${channels.map((c) => `\"${c}\"`).join(\", \")} ` +\n        `but no provider is configured for ${channels.length > 1 ? \"them\" : \"it\"}` +\n        (dead ? \" — this type can never be delivered.\" : \"; those channels will be skipped.\"),\n    );\n  }\n\n  if (mode === \"deferred\" && !config.delivery?.waitUntil) {\n    warnings.push(\n      \"delivery.mode is 'deferred' but no delivery.waitUntil was supplied; \" +\n        \"delivery will wait for the cron sweep.\",\n    );\n  }\n\n  // Custom-scoped routes are named at startup with their justification. RFC 0002 §3.\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      if (route.scope.type === \"custom\") {\n        warnings.push(\n          `plugin \"${plugin.id}\" mounts ${route.method} ${route.path} with custom auth: ` +\n            route.scope.justification,\n        );\n      }\n    }\n  }\n\n  for (const warning of warnings) logger.warn(warning);\n\n  const baseSignals = config.signals ?? createMemorySignals();\n\n  // Per-user inbox versions for the piggyback header. In-process counters, so\n  // another replica's number differs; the client treats any change as \"look\",\n  // which costs a spurious refresh, never a missed one.\n  const inboxVersions = new Map<string, number>();\n  const signals: Signals = {\n    crossProcess: baseSignals.crossProcess,\n    publish(channel) {\n      if (channel.startsWith(\"inbox:\")) {\n        if (inboxVersions.size > 50_000) inboxVersions.clear();\n        const userId = channel.slice(\"inbox:\".length);\n        inboxVersions.set(userId, (inboxVersions.get(userId) ?? 0) + 1);\n      }\n      baseSignals.publish(channel);\n    },\n    subscribe: (channel, handler) => baseSignals.subscribe(channel, handler),\n  };\n\n  const runner = createRunner({\n    adapter: config.database,\n    definitions: config.notifications,\n    channels: config.channels,\n    plugins,\n    getRecipients: config.getRecipients,\n    logger,\n    leaseMs,\n    batchSize: config.delivery?.batchSize ?? DEFAULTS.batchSize,\n    backoff: (config.delivery?.backoff ?? \"exponential\") as Backoff,\n    signals,\n  });\n\n  const pluginRoutes = plugins.flatMap((plugin) => plugin.routes ?? []);\n\n  const events =\n    config.events === false\n      ? false\n      : {\n          heartbeatMs: config.events?.heartbeatMs ?? 25_000,\n          probeIntervalMs: config.events?.probeIntervalMs ?? 30_000,\n          maxDurationMs: config.events?.maxDurationMs ?? 0,\n        };\n\n  const sweepConfig = config.delivery?.sweepOnRequest;\n  let lastRequestSweep = 0;\n  const sweepOnRequest =\n    sweepConfig && mode !== \"inline\"\n      ? () => {\n          const settings = sweepConfig === true ? {} : sweepConfig;\n          const now = Date.now();\n          if (now - lastRequestSweep < (settings.everyMs ?? 5_000)) return;\n          lastRequestSweep = now;\n          const pass = runner\n            .runOnce({ limit: settings.limit ?? 5 })\n            .catch((error) => logger.error(\"request-driven sweep failed\", { error }));\n          config.delivery?.waitUntil?.(pass);\n        }\n      : undefined;\n\n  const handler = createHandler({\n    adapter: config.database,\n    session: config.session,\n    runner,\n    logger,\n    secret: config.secret,\n    signals,\n    events,\n    sweepOnRequest,\n    basePath: config.basePath ?? DEFAULTS.basePath,\n    pluginRoutes,\n    trustedOrigins: config.trustedOrigins,\n    onRequest: config.onRequest,\n    maxBodyBytes: config.maxBodyBytes,\n    rateLimit: config.rateLimit ? createRateLimiter(config.rateLimit) : undefined,\n    cronMaxSweeps: config.cron?.maxSweeps,\n    ...(config.cron?.secret ? { cronSecret: config.cron.secret } : {}),\n    ...((config.machineSecret ?? config.cron?.secret)\n      ? { machineSecret: config.machineSecret ?? config.cron?.secret }\n      : {}),\n  });\n\n  async function send<TKey extends keyof TDefs & string>(\n    type: TKey,\n    args: SendArgs<TDefs, TKey>,\n  ): Promise<SendResult> {\n    const result = await runSend(\n      type,\n      {\n        to: args.to,\n        payload: args.payload,\n        actorId: args.actorId,\n        dedupeKey: args.dedupeKey,\n        overrides: args.overrides,\n      },\n      {\n        adapter: config.database,\n        definitions: config.notifications,\n        channels: config.channels,\n        plugins,\n        getRecipients: config.getRecipients,\n        maxAttempts: config.delivery?.maxAttempts ?? DEFAULTS.maxAttempts,\n        logger,\n      },\n    );\n\n    // Rows are committed; everything below only affects latency. RFC 0001 §8.1.\n    if (result.notifications.length > 0) {\n      for (const notification of result.notifications) {\n        signals.publish(inboxChannel(notification.userId));\n      }\n      signals.publish(DELIVERIES_CHANNEL);\n\n      // Scoped to this send, or an inline send flushes the whole backlog.\n      const ids = result.notifications.flatMap((notification) =>\n        notification.deliveries.map((delivery) => delivery.id),\n      );\n\n      if (mode === \"inline\") await runner.drain({ ids });\n      else if (mode === \"deferred\") runner.scheduleDeferred(config.delivery?.waitUntil, ids);\n    }\n\n    return result;\n  }\n\n  // After send() exists, before any hook or route can run.\n  for (const plugin of plugins) {\n    const purposes = new Set(\n      (plugin.routes ?? []).flatMap((route) =>\n        route.scope.type === \"signed\" ? [route.scope.purpose] : [],\n      ),\n    );\n    plugin.init?.({\n      store: createPluginStore(plugin.id, plugin.schema, config.database, tablePrefix),\n      sign: createScopedSigner(\n        config.secret,\n        plugin.id,\n        purposes,\n        (message) => new ConfigError(message),\n      ),\n      logger,\n      notificationTypes: Object.keys(config.notifications),\n      getRecipients: config.getRecipients,\n      send: (type, args) => send(type as keyof TDefs & string, args as never) as Promise<unknown>,\n    });\n  }\n\n  return {\n    send,\n    handler,\n\n    startWorker: (options) => runner.startWorker(options ?? {}),\n\n    inboxHeaders: (userId) => ({\n      [INBOX_VERSION_HEADER]: String(inboxVersions.get(userId) ?? 0),\n    }),\n\n    listRoutes: () => [\n      ...CORE_ROUTES.filter(\n        (route) =>\n          (route.path !== \"/cron\" || Boolean(config.cron?.secret)) &&\n          (route.path !== \"/events\" || events !== false),\n      ),\n      ...plugins.flatMap((plugin) =>\n        (plugin.routes ?? []).map((route) => ({\n          method: route.method,\n          path: route.path,\n          scope: route.scope,\n          owner: plugin.id,\n        })),\n      ),\n    ],\n\n    getFailedDeliveries: (options = {}) =>\n      config.database.getFailedDeliveries({\n        since: options.since ?? new Date(Date.now() - 24 * 3600_000),\n        limit: Math.min(options.limit ?? 100, 1000),\n      }),\n\n    healthCheck: async (): Promise<HealthReport> => {\n      const cronMounted = Boolean(config.cron?.secret);\n      return {\n        mode,\n        cronMounted,\n        cronRequiredButMissing:\n          !cronMounted && (mode === \"cron\" || mode === \"deferred\" || mode === \"inline\"),\n        warnings,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/core/config.ts","../src/core/definition.ts","../src/core/rate-limit.ts","../src/core/send.ts","../src/core/instance.ts"],"names":["bucket","handler"],"mappings":";;;;;;;;;;;;;;AAsIO,IAAM,oBAAA,GAAuB;;;AC/G7B,SAAS,mBACd,UAAA,EACiC;AACjC,EAAA,OAAO,UAAA;AACT;;;ACnBA,IAAM,aAAA,GAAgB,CAAC,OAAA,KAAoC;AACzD,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,OACE,QAAQ,GAAA,CAAI,kBAAkB,KAC9B,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,IACvB,OAAA,CAAQ,GAAA,CAAI,iBAAiB,GAAG,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA,EAAG,MAAK,IACpD,IAAA;AAEJ,CAAA;AAGO,SAAS,kBAAkB,MAAA,EAAgE;AAChG,EAAA,MAAM,KAAA,GAAQ,OAAO,GAAA,IAAO,aAAA;AAC5B,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAgD;AACpE,EAAA,IAAI,SAAA,GAAY,CAAA;AAEhB,EAAA,OAAO,CAAC,OAAA,KAAY;AAClB,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAGrB,IAAA,IAAI,GAAA,GAAM,SAAA,GAAY,MAAA,CAAO,QAAA,EAAU;AACrC,MAAA,KAAA,MAAW,CAAC,EAAA,EAAIA,OAAM,CAAA,IAAK,OAAA,EAAS,IAAIA,OAAAA,CAAO,OAAA,IAAW,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,EAAE,CAAA;AAChF,MAAA,SAAA,GAAY,GAAA;AAAA,IACd;AAEA,IAAA,IAAI,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC5B,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,OAAA,IAAW,GAAA,EAAK;AACpC,MAAA,MAAA,GAAS,EAAE,KAAA,EAAO,CAAA,EAAG,OAAA,EAAS,GAAA,GAAM,OAAO,QAAA,EAAS;AACpD,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACzB;AAEA,IAAA,MAAA,CAAO,KAAA,IAAS,CAAA;AAChB,IAAA,IAAI,MAAA,CAAO,KAAA,IAAS,MAAA,CAAO,GAAA,EAAK,OAAO,IAAA;AAEvC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA,EAAQ,GAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,IAAA,CAAA,CAAM,MAAA,CAAO,OAAA,GAAU,GAAA,IAAO,GAAI,CAAC,CAAC,CAAA;AAAA,QAC3E,eAAA,EAAiB;AAAA;AACnB,KACD,CAAA;AAAA,EACH,CAAA;AACF;;;AC1BA,eAAe,eAAA,CAAgB,IAAA,EAAc,MAAA,EAA0B,OAAA,EAAkB;AACvF,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,WAAW,CAAA,CAAE,SAAS,OAAO,CAAA;AACzD,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAM,IAAI,eAAA;AAAA,MACR,IAAA;AAAA,MACA,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,QAC5B,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,KAAA,CAAM,IAAA,GAAO,EAAE,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA,KAAM;AAAC,OACjE,CAAE;AAAA,KACJ;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,KAAA;AAChB;AAGO,SAAS,eAAA,CACd,OAAA,EACA,QAAA,EACA,OAAA,GAAgC,EAAC,EACxB;AACT,EAAA,IAAI,OAAA,KAAY,OAAA,EAAS,OAAO,QAAA,CAAS,OAAO,OAAA,KAAY,KAAA;AAC5D,EAAA,IAAI,YAAY,OAAA,EAAS,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAO,QAAQ,CAAA;AAEhE,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,QAAA,EAAU,QAAA,CAAS,OAAO,CAAA,IAAK,MAAA,CAAO,KAAA,EAAO,OAAO,CAAA;AAC7F;AAGA,eAAe,UAAA,CACb,OAAA,EACA,GAAA,EACA,MAAA,EAC+B;AAC/B,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAE1C,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,OAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,IAAI,MAAA,CAAO,EAAA,EAAI,MAAM,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IACzC,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,6CAAA,CAAA,EAAiD;AAAA,QAChF,MAAM,GAAA,CAAI,IAAA;AAAA,QACV;AAAA,OACD,CAAA;AACD,MAAA,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAA,EAAI,MAAS,CAAA;AAAA,IACnC;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT;AAEA,eAAe,cACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,SAAA,EACA,UACA,MAAA,EAC2B;AAC3B,EAAA,IAAI,cAAA,GAAiB,OAAA;AACrB,EAAA,IAAI,gBAAA,GAAmB,SAAA;AAEvB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,UAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,MAAM,IAAA,CAAK;AAAA,QAClB,GAAG,IAAA;AAAA,QACH,OAAA,EAAS,cAAA;AAAA,QACT,SAAA,EAAW,gBAAA;AAAA,QACX,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,mCAAA,CAAA,EAAuC;AAAA,QACtE,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,QAAQ,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,kBAAA,CAAA,EAAqB;AAAA,IAC9E;AAEA,IAAA,IAAI,MAAA,CAAO,MAAA,KAAW,QAAA,EAAU,OAAO,MAAA;AACvC,IAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,cAAA,GAAiB,MAAA,CAAO,OAAA;AAC1D,IAAA,IAAI,MAAA,CAAO,SAAA,KAAc,MAAA,EAAW,gBAAA,GAAmB,MAAA,CAAO,SAAA;AAAA,EAChE;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,UAAA;AAAA,IACR,OAAA,EAAS,cAAA;AAAA,IACT,GAAI,gBAAA,KAAqB,IAAA,GAAO,EAAC,GAAI,EAAE,WAAW,gBAAA;AAAiB,GACrE;AACF;AAEA,eAAe,kBAAA,CACb,OAAA,EACA,IAAA,EACA,OAAA,EACA,UACA,MAAA,EACqC;AACrC,EAAA,IAAI,SAAA,GAAY,OAAA;AAEhB,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,eAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,CAAC,GAAI,MAAM,IAAA,CAAK,EAAE,GAAG,IAAA,EAAM,SAAA,EAAW,QAAA,EAAU,SAAS,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG,CAAE,CAAA;AAAA,IACzF,SAAS,KAAA,EAAO;AAEd,MAAA,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,gDAAA,CAAA,EAAoD;AAAA,QACnF,MAAM,IAAA,CAAK,IAAA;AAAA,QACX,MAAA,EAAQ,KAAK,SAAA,CAAU,MAAA;AAAA,QACvB;AAAA,OACD,CAAA;AACD,MAAA,OAAO,SAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AAEA,eAAsB,OAAA,CACpB,IAAA,EACA,KAAA,EACA,IAAA,EACqB;AACrB,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,eAAA,CAAgB,IAAA,EAAM,CAAC,EAAE,SAAS,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAA,CAAA,EAAK,CAAC,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,MAAA,GACvB,MAAM,eAAA,CAAgB,IAAA,EAAM,UAAA,CAAW,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAA,GAC5D,KAAA,CAAM,OAAA;AAEV,EAAA,MAAM,UAAU,CAAC,GAAG,IAAI,GAAA,CAAI,MAAM,OAAA,CAAQ,KAAA,CAAM,EAAE,CAAA,GAAI,MAAM,EAAA,GAAK,CAAC,KAAA,CAAM,EAAY,CAAC,CAAC,CAAA;AACtF,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,aAAA,CAAc,OAAO,CAAA;AACnD,EAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,SAAA,KAAc,CAAC,SAAA,CAAU,MAAA,EAAQ,SAAS,CAAC,CAAC,CAAA;AAErF,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,KAAe,MAAM,OAAO,UAAA,EAAW,CAAA;AAC1D,EAAA,MAAM,UAAoD,EAAC;AAC3D,EAAA,MAAM,OAA6B,EAAC;AACpC,EAAA,MAAM,OAAA,GAAU,MAAM,OAAA,IAAW,IAAA;AAEjC,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,SAAA,EAAW,QAAA,IAAY,UAAA,CAAW,QAAA;AACzD,EAAA,MAAM,YAAY,QAAA,CAAS,MAAA;AAAA,IAAO,CAAC,OAAA,KACjC,eAAA,CAAgB,SAAS,IAAA,CAAK,QAAA,EAAU,KAAK,OAAO;AAAA,GACtD;AAGA,EAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,SAAA,CAAU,WAAW,CAAA,EAAG;AACjD,IAAA,OAAO;AAAA,MACL,eAAe,EAAC;AAAA,MAChB,OAAA,EAAS,QAAQ,GAAA,CAAI,CAAC,YAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,qBAAA,EAA+B,CAAE;AAAA,KACvF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,UAAA,CAAW,IAAA,CAAK,OAAA,EAAS,EAAE,IAAA,EAAM,UAAA,EAAW,EAAG,IAAA,CAAK,MAAM,CAAA;AAEjF,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AACrC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,gBAAgB,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,MAAM,aAAA;AAAA,MACnB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAQ;AAAA,MAC3B,OAAA;AAAA,MACA,MAAM,SAAA,IAAa,IAAA;AAAA,MACnB,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU;AAC9B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,WAAW,MAAM,kBAAA;AAAA,MACrB,IAAA,CAAK,OAAA;AAAA,MACL,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,MAAA,CAAO,WAAW,OAAA,EAAQ;AAAA,MACtD,SAAA,CAAU,IAAI,CAAC,OAAA,MAAa,EAAE,OAAA,EAAS,MAAA,EAAQ,QAAgB,CAAE,CAAA;AAAA,MACjE,QAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,UAAA,GAA+B,SAClC,MAAA,CAAO,CAAC,aAAa,QAAA,CAAS,MAAA,KAAW,MAAM,CAAA,CAC/C,MAAA,CAAO,CAAC,aAAa,eAAA,CAAgB,QAAA,CAAS,OAAA,EAAS,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,OAAO,CAAC,CAAA,CACnF,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAClB,IAAI,KAAA,EAAM;AAAA,MACV,SAAS,QAAA,CAAS,OAAA;AAAA,MAClB,WAAA,EAAa,UAAA,CAAW,WAAA,IAAe,IAAA,CAAK,WAAA;AAAA;AAAA,MAE5C,WAAW,QAAA,CAAS,MAAA,KAAW,WAAW,QAAA,CAAS,SAAA,GAAY,SAAS,SAAA,GAAY;AAAA,KACtF,CAAE,CAAA;AAEJ,IAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,eAAe,CAAA;AAC9C,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,KAAW,UAAA,GAAa,OAAO,SAAA,GAAY,MAAA;AAEpE,IAAA,IAAA,CAAK,IAAA,CAAK;AAAA,MACR,IAAI,KAAA,EAAM;AAAA,MACV,MAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA,EAAS,OAAO,OAAA,IAAW,OAAA;AAAA,MAC3B,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,MAC7B,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc,EAAC;AAAA,MACjC;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG,OAAO,EAAE,aAAA,EAAe,IAAI,OAAA,EAAQ;AAE3D,EAAA,MAAM,EAAE,SAAS,OAAA,EAAQ,GAAI,MAAM,IAAA,CAAK,OAAA,CAAQ,oBAAoB,IAAI,CAAA;AACxE,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAO,CAAA;AAElC,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,MAAA,EAAQ,WAAW,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,aAAA,GAAgB,IAAA,CACnB,MAAA,CAAO,CAAC,GAAA,KAAQ,UAAA,CAAW,GAAA,CAAI,GAAA,CAAI,EAAE,CAAC,CAAA,CACtC,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,IACb,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,UAAA,EAAY,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAC5C,IAAI,QAAA,CAAS,EAAA;AAAA,MACb,SAAS,QAAA,CAAS;AAAA,KACpB,CAAE;AAAA,GACJ,CAAE,CAAA;AAEJ,EAAA,KAAA,MAAW,MAAA,IAAU,KAAK,OAAA,EAAS;AACjC,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,EAAO,SAAA;AAC3B,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK;AAAA,QACT,IAAA;AAAA,QACA,OAAA;AAAA,QACA,aAAA,EAAe,aAAA,CAAc,GAAA,CAAI,CAAC,EAAE,EAAA,EAAI,MAAA,EAAO,MAAO,EAAE,EAAA,EAAI,MAAA,EAAO,CAAE,CAAA;AAAA,QACrE,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,MAAA,CAAO,EAAE;AAAA,OACjC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAEd,MAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,2BAAA,CAAA,EAA+B,EAAE,IAAA,EAAM,KAAA,EAAO,CAAA;AAAA,IACtF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,eAAe,OAAA,EAAQ;AAClC;;;ACzQA,IAAM,WAAA,GAAuC;AAAA,EAC3C,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,GAAA,EAAK,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACnE,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACxE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EAC5E,EAAE,MAAA,EAAQ,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO,EAAG,KAAA,EAAO,MAAA,EAAO;AAAA,EACzE,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,KAAA,EAAO,MAAA;AACtE,CAAA;AAEA,IAAM,QAAA,GAAW;AAAA,EACf,WAAA,EAAa,CAAA;AAAA,EACb,OAAA,EAAS,GAAA;AAAA,EACT,SAAA,EAAW,EAAA;AAAA,EACX,QAAA,EAAU,oBAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,iBAAA,GAAoB;AAEjC,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,UAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,mBAAA,CAAoB,MAAc,KAAA,EAAe;AACxD,EAAA,IAAI,KAAA,CAAM,SAAS,iBAAA,IAAqB,mBAAA,CAAoB,IAAI,KAAA,CAAM,WAAA,EAAa,CAAA,EAAG;AACpF,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,CAAA,EAAA,EAAK,IAAI,CAAA,oBAAA,EAAuB,iBAAiB,CAAA,iFAAA;AAAA,KAEnD;AAAA,EACF;AACF;AAEA,SAAS,QAAA,CAAS,QAAiD,OAAA,EAA+B;AAChG,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,YAAY,yBAAyB,CAAA;AACrE,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,EAAe,MAAM,IAAI,YAAY,8BAA8B,CAAA;AAG/E,EAAA,IAAI,OAAO,MAAA,CAAO,OAAA,EAAS,SAAA,KAAc,UAAA,EAAY;AACnD,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AAClB,IAAA,MAAM,IAAI,WAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF;AACA,EAAA,mBAAA,CAAoB,QAAA,EAAU,OAAO,MAAM,CAAA;AAC3C,EAAA,IAAI,OAAO,IAAA,EAAM,MAAA,sBAA4B,aAAA,EAAe,MAAA,CAAO,KAAK,MAAM,CAAA;AAC9E,EAAA,IAAI,MAAA,CAAO,aAAA,EAAe,mBAAA,CAAoB,eAAA,EAAiB,OAAO,aAAa,CAAA;AAEnF,EAAA,IAAI,MAAA,CAAO,cAAc,MAAA,CAAO,SAAA,CAAU,MAAM,CAAA,IAAK,MAAA,CAAO,SAAA,CAAU,QAAA,GAAW,CAAA,CAAA,EAAI;AACnF,IAAA,MAAM,IAAI,YAAY,iEAAiE,CAAA;AAAA,EACzF;AAEA,EAAA,IAAI,OAAO,MAAA,CAAO,aAAA,KAAkB,UAAA,EAAY;AAC9C,IAAA,MAAM,IAAI,YAAY,8DAA8D,CAAA;AAAA,EACtF;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,WAAA,CAAY,CAAA,qBAAA,EAAwB,MAAA,CAAO,EAAE,CAAA,4BAAA,CAAyB,CAAA;AAAA,IAClF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,CAAA;AAAA,EACpB;AAEA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,UAAA,IAAc,MAAA,CAAO,SAAA,IAAa,EAAC,EAAG;AAC/C,MAAA,IAAI,CAAC,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,YAAA,EAAe,UAAU,CAAA,2BAAA;AAAA,SAC/C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,MAAM,YAAY,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,MAAM,IAAI,CAAA,CAAA;AAC/C,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,WAAA,CAAY,CAAA,8CAAA,EAAiD,SAAS,CAAA,EAAA,CAAI,CAAA;AAAA,MACtF;AACA,MAAA,MAAA,CAAO,IAAI,SAAS,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,IAAA,CAAK,SAAS,MAAA,IAAU,IAAA,KAAS,eAAe,CAAC,MAAA,CAAO,MAAM,MAAA,EAAQ;AACpE,IAAA,MAAM,IAAI,WAAA;AAAA,MACR,kBAAkB,IAAI,CAAA,oMAAA;AAAA,KAGxB;AAAA,EACF;AACF;AAEO,SAAS,SACd,MAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,EAAC;AACnC,EAAA,QAAA,CAAS,QAAmD,OAAO,CAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,aAAA;AAChC,EAAA,MAAM,WAAA,GAAc,OAAO,WAAA,IAAe,EAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,EAAU,IAAA,IAAQ,QAAA,CAAS,IAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW,QAAA,CAAS,OAAA;AACrD,EAAA,MAAM,WAAqB,EAAC;AAG5B,EAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,QAAA,CAAS,KAAA,EAAO,QAAA,EAAU,SAAA;AACzD,EAAA,IAAI,eAAA,KAAoB,MAAA,IAAa,eAAA,IAAmB,OAAA,GAAU,CAAA,EAAG;AACnE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,wBAAA,EAA2B,eAAe,CAAA,0CAAA,EACpC,OAAO,CAAA,wDAAA;AAAA,KACf;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAsB;AAC3C,EAAA,KAAA,MAAW,CAAC,MAAM,UAAU,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,aAAa,CAAA,EAAG;AACrE,IAAA,MAAM,OAAA,GAAU,WAAW,QAAA,CAAS,MAAA;AAAA,MAClC,CAAC,OAAA,KAAY,CAAC,gBAAgB,OAAA,EAAS,MAAA,CAAO,UAAU,OAAO;AAAA,KACjE;AACA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG,QAAA,CAAS,IAAI,IAAA,EAAM,CAAC,GAAG,OAAO,CAAC,CAAA;AAAA,EACzD;AAEA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,QAAQ,CAAA,IAAK,QAAA,EAAU;AACvC,IAAA,MAAM,OAAO,QAAA,CAAS,MAAA,KAAW,OAAO,aAAA,CAAc,IAAI,GAAG,QAAA,CAAS,MAAA;AACtE,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,cAAA,EAAiB,IAAI,CAAA,WAAA,EAAc,QAAA,CAAS,IAAI,CAAC,CAAA,KAAM,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAC,sCACpC,QAAA,CAAS,MAAA,GAAS,IAAI,MAAA,GAAS,IAAI,CAAA,CAAA,IACvE,IAAA,GAAO,2CAAA,GAAyC,mCAAA;AAAA,KACrD;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,UAAA,IAAc,CAAC,MAAA,CAAO,UAAU,SAAA,EAAW;AACtD,IAAA,QAAA,CAAS,IAAA;AAAA,MACP;AAAA,KAEF;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG;AACvC,MAAA,IAAI,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,EAAU;AACjC,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,CAAA,QAAA,EAAW,MAAA,CAAO,EAAE,CAAA,SAAA,EAAY,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,mBAAA,CAAA,GACxD,KAAA,CAAM,KAAA,CAAM;AAAA,SAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,QAAA,EAAU,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAEnD,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,IAAW,mBAAA,EAAoB;AAK1D,EAAA,MAAM,aAAA,uBAAoB,GAAA,EAAoB;AAC9C,EAAA,MAAM,OAAA,GAAmB;AAAA,IACvB,cAAc,WAAA,CAAY,YAAA;AAAA,IAC1B,QAAQ,OAAA,EAAS;AACf,MAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,QAAQ,CAAA,EAAG;AAChC,QAAA,IAAI,aAAA,CAAc,IAAA,GAAO,GAAA,EAAQ,aAAA,CAAc,KAAA,EAAM;AACrD,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA;AAC5C,QAAA,aAAA,CAAc,IAAI,MAAA,EAAA,CAAS,aAAA,CAAc,IAAI,MAAM,CAAA,IAAK,KAAK,CAAC,CAAA;AAAA,MAChE;AACA,MAAA,WAAA,CAAY,QAAQ,OAAO,CAAA;AAAA,IAC7B,CAAA;AAAA,IACA,WAAW,CAAC,OAAA,EAASC,aAAY,WAAA,CAAY,SAAA,CAAU,SAASA,QAAO;AAAA,GACzE;AAEA,EAAA,MAAM,SAAS,YAAA,CAAa;AAAA,IAC1B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,aAAa,MAAA,CAAO,aAAA;AAAA,IACpB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAA;AAAA,IACA,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,MAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,QAAA,EAAU,SAAA,IAAa,QAAA,CAAS,SAAA;AAAA,IAClD,OAAA,EAAU,MAAA,CAAO,QAAA,EAAU,OAAA,IAAW,aAAA;AAAA,IACtC;AAAA,GACD,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,QAAQ,OAAA,CAAQ,CAAC,WAAW,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA;AAEpE,EAAA,MAAM,MAAA,GACJ,MAAA,CAAO,MAAA,KAAW,KAAA,GACd,KAAA,GACA;AAAA,IACE,WAAA,EAAa,MAAA,CAAO,MAAA,EAAQ,WAAA,IAAe,IAAA;AAAA,IAC3C,eAAA,EAAiB,MAAA,CAAO,MAAA,EAAQ,eAAA,IAAmB,GAAA;AAAA,IACnD,aAAA,EAAe,MAAA,CAAO,MAAA,EAAQ,aAAA,IAAiB,CAAA;AAAA,IAC/C,iBAAA,EAAmB,MAAA,CAAO,MAAA,EAAQ,iBAAA,IAAqB,EAAA;AAAA,IACvD,UAAA,EAAY,MAAA,CAAO,MAAA,EAAQ,UAAA,IAAc;AAAA,GAC3C;AAEN,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,EAAU,cAAA;AACrC,EAAA,IAAI,gBAAA,GAAmB,CAAA;AACvB,EAAA,MAAM,cAAA,GACJ,WAAA,IAAe,IAAA,KAAS,QAAA,GACpB,MAAM;AACJ,IAAA,MAAM,QAAA,GAAW,WAAA,KAAgB,IAAA,GAAO,EAAC,GAAI,WAAA;AAC7C,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,IAAI,GAAA,GAAM,gBAAA,IAAoB,QAAA,CAAS,OAAA,IAAW,GAAA,CAAA,EAAQ;AAC1D,IAAA,gBAAA,GAAmB,GAAA;AACnB,IAAA,MAAM,OAAO,MAAA,CACV,OAAA,CAAQ,EAAE,KAAA,EAAO,QAAA,CAAS,SAAS,CAAA,EAAG,EACtC,KAAA,CAAM,CAAC,UAAU,MAAA,CAAO,KAAA,CAAM,+BAA+B,EAAE,KAAA,EAAO,CAAC,CAAA;AAC1E,IAAA,MAAA,CAAO,QAAA,EAAU,YAAY,IAAI,CAAA;AAAA,EACnC,CAAA,GACA,MAAA;AAEN,EAAA,MAAM,UAAU,aAAA,CAAc;AAAA,IAC5B,SAAS,MAAA,CAAO,QAAA;AAAA,IAChB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,MAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,OAAA;AAAA,IACA,MAAA;AAAA,IACA,cAAA;AAAA,IACA,QAAA,EAAU,MAAA,CAAO,QAAA,IAAY,QAAA,CAAS,QAAA;AAAA,IACtC,YAAA;AAAA,IACA,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,WAAW,MAAA,CAAO,SAAA,GAAY,iBAAA,CAAkB,MAAA,CAAO,SAAS,CAAA,GAAI,MAAA;AAAA,IACpE,aAAA,EAAe,OAAO,IAAA,EAAM,SAAA;AAAA,IAC5B,GAAI,MAAA,CAAO,IAAA,EAAM,MAAA,GAAS,EAAE,YAAY,MAAA,CAAO,IAAA,CAAK,MAAA,EAAO,GAAI,EAAC;AAAA,IAChE,GAAK,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,MAAM,MAAA,GACtC,EAAE,aAAA,EAAe,MAAA,CAAO,aAAA,IAAiB,MAAA,CAAO,IAAA,EAAM,MAAA,KACtD;AAAC,GACN,CAAA;AAED,EAAA,eAAe,IAAA,CACb,MACA,IAAA,EACqB;AACrB,IAAA,MAAM,SAAS,MAAM,OAAA;AAAA,MACnB,IAAA;AAAA,MACA;AAAA,QACE,IAAI,IAAA,CAAK,EAAA;AAAA,QACT,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,IAAA,CAAK;AAAA,OAClB;AAAA,MACA;AAAA,QACE,SAAS,MAAA,CAAO,QAAA;AAAA,QAChB,aAAa,MAAA,CAAO,aAAA;AAAA,QACpB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,OAAA;AAAA,QACA,eAAe,MAAA,CAAO,aAAA;AAAA,QACtB,WAAA,EAAa,MAAA,CAAO,QAAA,EAAU,WAAA,IAAe,QAAA,CAAS,WAAA;AAAA,QACtD;AAAA;AACF,KACF;AAGA,IAAA,IAAI,MAAA,CAAO,aAAA,CAAc,MAAA,GAAS,CAAA,EAAG;AACnC,MAAA,KAAA,MAAW,YAAA,IAAgB,OAAO,aAAA,EAAe;AAC/C,QAAA,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,YAAA,CAAa,MAAM,CAAC,CAAA;AAAA,MACnD;AACA,MAAA,OAAA,CAAQ,QAAQ,kBAAkB,CAAA;AAGlC,MAAA,MAAM,GAAA,GAAM,OAAO,aAAA,CAAc,OAAA;AAAA,QAAQ,CAAC,iBACxC,YAAA,CAAa,UAAA,CAAW,IAAI,CAAC,QAAA,KAAa,SAAS,EAAE;AAAA,OACvD;AAEA,MAAA,IAAI,SAAS,QAAA,EAAU,MAAM,OAAO,KAAA,CAAM,EAAE,KAAK,CAAA;AAAA,WAAA,IACxC,SAAS,UAAA,EAAY,MAAA,CAAO,iBAAiB,MAAA,CAAO,QAAA,EAAU,WAAW,GAAG,CAAA;AAAA,IACvF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,WAAW,IAAI,GAAA;AAAA,MAAA,CAClB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,OAAA;AAAA,QAAQ,CAAC,KAAA,KAC7B,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,QAAA,GAAW,CAAC,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA,GAAI;AAAC;AAC3D,KACF;AACA,IAAA,MAAA,CAAO,IAAA,GAAO;AAAA,MACZ,KAAA,EAAO,kBAAkB,MAAA,CAAO,EAAA,EAAI,OAAO,MAAA,EAAQ,MAAA,CAAO,UAAU,WAAW,CAAA;AAAA,MAC/E,IAAA,EAAM,kBAAA;AAAA,QACJ,MAAA,CAAO,MAAA;AAAA,QACP,MAAA,CAAO,EAAA;AAAA,QACP,QAAA;AAAA,QACA,CAAC,OAAA,KAAY,IAAI,WAAA,CAAY,OAAO;AAAA,OACtC;AAAA,MACA,MAAA;AAAA,MACA,iBAAA,EAAmB,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,aAAa,CAAA;AAAA,MACnD,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,MAAM,CAAC,IAAA,EAAM,IAAA,KAAS,IAAA,CAAK,MAA8B,IAAa;AAAA,KACvE,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,OAAA;AAAA,IAEA,aAAa,CAAC,OAAA,KAAY,OAAO,WAAA,CAAY,OAAA,IAAW,EAAE,CAAA;AAAA,IAE1D,YAAA,EAAc,CAAC,MAAA,MAAY;AAAA,MACzB,CAAC,oBAAoB,GAAG,MAAA,CAAO,cAAc,GAAA,CAAI,MAAM,KAAK,CAAC;AAAA,KAC/D,CAAA;AAAA,IAEA,YAAY,MAAM;AAAA,MAChB,GAAG,WAAA,CAAY,MAAA;AAAA,QACb,CAAC,KAAA,KAAA,CACE,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA,MACrD,KAAA,CAAM,IAAA,KAAS,aAAa,MAAA,KAAW,KAAA;AAAA,OAC5C;AAAA,MACA,GAAG,OAAA,CAAQ,OAAA;AAAA,QAAQ,CAAC,YACjB,MAAA,CAAO,MAAA,IAAU,EAAC,EAAG,GAAA,CAAI,CAAC,KAAA,MAAW;AAAA,UACpC,QAAQ,KAAA,CAAM,MAAA;AAAA,UACd,MAAM,KAAA,CAAM,IAAA;AAAA,UACZ,OAAO,KAAA,CAAM,KAAA;AAAA,UACb,OAAO,MAAA,CAAO;AAAA,SAChB,CAAE;AAAA;AACJ,KACF;AAAA,IAEA,qBAAqB,CAAC,OAAA,GAAU,EAAC,KAC/B,MAAA,CAAO,SAAS,mBAAA,CAAoB;AAAA,MAClC,KAAA,EAAO,QAAQ,KAAA,IAAS,IAAI,KAAK,IAAA,CAAK,GAAA,EAAI,GAAI,EAAA,GAAK,IAAQ,CAAA;AAAA,MAC3D,OAAO,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,KAAA,IAAS,KAAK,GAAI;AAAA,KAC3C,CAAA;AAAA,IAEH,aAAa,YAAmC;AAC9C,MAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAC/C,MAAA,OAAO;AAAA,QACL,IAAA;AAAA,QACA,WAAA;AAAA,QACA,wBACE,CAAC,WAAA,KAAgB,SAAS,MAAA,IAAU,IAAA,KAAS,cAAc,IAAA,KAAS,QAAA,CAAA;AAAA,QACtE;AAAA,OACF;AAAA,IACF;AAAA,GACF;AACF","file":"index.js","sourcesContent":["import type { DatabaseAdapter } from \"./adapter\";\nimport type { NotificationDefinitions, PayloadOf } from \"./definition\";\nimport type { Logger } from \"./errors\";\nimport type { AnyPlugin, Promisable, RouteScope } from \"./plugin\";\nimport type { EmailProvider } from \"./provider\";\nimport type { RateLimitConfig } from \"./rate-limit\";\nimport type { Signals } from \"./signals\";\nimport type { Channel, DeliveryMode, DeliveryRecord, Recipient, SkipReason } from \"./types\";\n\nexport type SessionConfig = {\n  /** null yields 401; throwing yields 500. Deliberately distinct. */\n  getUserId: (request: Request) => string | null | Promise<string | null>;\n};\n\nexport type DeliveryConfig = {\n  mode?: DeliveryMode;\n  maxAttempts?: number;\n  /** Must exceed the slowest provider timeout, or duplicates are systematic. */\n  leaseMs?: number;\n  batchSize?: number;\n  /** inline mode only. */\n  throwOnError?: boolean;\n  backoff?: \"exponential\" | ((attempt: number) => number);\n  /** Next.js `after` or Cloudflare `ctx.waitUntil`. Injected, not detected. */\n  waitUntil?: (promise: Promise<unknown>) => void;\n  /**\n   * Run one small claim-and-deliver pass after any request the handler serves,\n   * at most once per `everyMs` per process. Delivery then rides on your own\n   * traffic and the cron becomes a backstop. Ignored in `inline` mode. RFC 0006 idea 5.\n   */\n  sweepOnRequest?: true | { everyMs?: number; limit?: number };\n};\n\nexport type EventsConfig = {\n  /** Comment line keeping proxies from closing an idle stream. Default 25 s. */\n  heartbeatMs?: number;\n  /**\n   * Without a cross-process signal source, each stream checks the database\n   * for changes this often on its subscriber's behalf. Default 30 s; 0 disables.\n   */\n  probeIntervalMs?: number;\n  /** Concurrent streams one user may hold in this process before a 429. Default 10. */\n  maxStreamsPerUser?: number;\n  /** Concurrent streams this process holds in total before a 503. Default 5000. */\n  maxStreams?: number;\n  /** Close the stream after this long; the client reconnects. 0 (default) leaves it open. */\n  maxDurationMs?: number;\n};\n\nexport type ChannelsConfig = {\n  inApp?: { enabled: boolean };\n  email?: { provider: EmailProvider };\n};\n\nexport type EasyPingConfig<TDefs extends NotificationDefinitions> = {\n  database: DatabaseAdapter;\n  session: SessionConfig;\n  /** Signs unsubscribe and other tokenised links. See RFC 0002 §5. */\n  secret: string;\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  notifications: TDefs;\n  channels: ChannelsConfig;\n  delivery?: DeliveryConfig;\n  /** Required by `cron` and `deferred` modes. See RFC 0002 §4. */\n  cron?: {\n    secret: string;\n    /** Sweeps one POST /cron may run before returning. Defaults to 50. */\n    maxSweeps?: number;\n  };\n  /** Bearer secret for plugin machine routes. Falls back to `cron.secret`. */\n  machineSecret?: string;\n  /** In-process fixed-window limiter, applied before routing. */\n  rateLimit?: RateLimitConfig;\n  /**\n   * How \"something changed\" travels between the sender, the worker and open\n   * event streams. Defaults to in-process. Supply a LISTEN/NOTIFY or change\n   * stream implementation to cross replicas. RFC 0006 §4C.\n   */\n  signals?: Signals;\n  /** `GET /events`, a Server-Sent Events stream per user. `false` unmounts it. */\n  events?: EventsConfig | false;\n  plugins?: readonly AnyPlugin[];\n  /** Where the handler is mounted, used to strip the prefix off incoming URLs. */\n  basePath?: string;\n  /** Origins other than the request host that may POST. `\"*.example.com\"` matches subdomains. */\n  trustedOrigins?: readonly string[];\n  /** Runs before routing. Return a Response to short-circuit — a rate limiter's 429, say. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: (request: Request) => Promisable<Response | undefined | void>;\n  /** Defaults to 64 KiB. */\n  maxBodyBytes?: number;\n  /** Table-name prefix; must match the one given to the adapter. */\n  tablePrefix?: string;\n  logger?: Logger;\n};\n\nexport type SendArgs<TDefs extends NotificationDefinitions, TKey extends keyof TDefs> = {\n  to: string | readonly string[];\n  payload: PayloadOf<TDefs[TKey]>;\n  actorId?: string;\n  dedupeKey?: string;\n  overrides?: { channels?: readonly Channel[] };\n};\n\nexport type SendResult = {\n  notifications: readonly {\n    id: string;\n    userId: string;\n    deliveries: readonly { id: string; channel: Channel }[];\n  }[];\n  skipped: readonly { userId: string; reason: SkipReason }[];\n};\n\nexport type Worker = {\n  stop: () => Promise<void>;\n};\n\nexport type MountedRoute = {\n  method: \"GET\" | \"POST\";\n  path: string;\n  scope: RouteScope;\n  /** \"core\" for the built-in routes, otherwise the plugin id. */\n  owner: string;\n};\n\nexport type HealthReport = {\n  mode: DeliveryMode;\n  cronMounted: boolean;\n  /** True when the chosen mode relies on a cron sweep that is not wired up. */\n  cronRequiredButMissing: boolean;\n  warnings: readonly string[];\n};\n\n/** Response header carrying a per-user inbox version, so app traffic can replace polling. */\nexport const INBOX_VERSION_HEADER = \"x-easy-ping-inbox\";\n\nexport type EasyPing<TDefs extends NotificationDefinitions> = {\n  send<TKey extends keyof TDefs & string>(\n    type: TKey,\n    args: SendArgs<TDefs, TKey>,\n  ): Promise<SendResult>;\n\n  handler: {\n    /** Method-agnostic entry, for toNodeHandler and single-dispatch frameworks. */\n    handle: (request: Request) => Promise<Response>;\n    GET: (request: Request) => Promise<Response>;\n    POST: (request: Request) => Promise<Response>;\n  };\n\n  /** Idle interval defaults to 10 s; a send in this process wakes the loop at once. */\n  startWorker(options?: { intervalMs?: number; batchSize?: number }): Worker;\n  healthCheck(): Promise<HealthReport>;\n\n  /** Every mounted route with its auth scope, so `custom`-scoped ones stay visible. RFC 0002 §3. */\n  listRoutes(): readonly MountedRoute[];\n\n  /**\n   * Headers to attach to any response your app sends this user. The client's\n   * `instrument(fetch)` reads them and refreshes only when the version moved,\n   * so an active user never needs a dedicated poll. RFC 0006 idea 1.\n   */\n  inboxHeaders(userId: string): Record<string, string>;\n\n  /** Deliveries that exhausted their attempts, newest first. Wire it to an admin page or an alert. */\n  getFailedDeliveries(options?: {\n    /** Defaults to the last 24 hours. */\n    since?: Date;\n    /** Defaults to 100. */\n    limit?: number;\n  }): Promise<readonly DeliveryRecord[]>;\n};\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { Channel } from \"./types\";\n\nexport type PayloadFromSchema<TSchema> = TSchema extends StandardSchemaV1\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n\nexport type EmailTemplate<TPayload> = {\n  subject: (payload: TPayload) => string;\n  /** Rendered HTML. react-email users wrap: `(p) => render(<Email {...p} />)`. */\n  template: (payload: TPayload) => string | Promise<string>;\n};\n\nexport type NotificationDefinition<\n  TSchema extends StandardSchemaV1 | undefined = StandardSchemaV1 | undefined,\n> = {\n  schema?: TSchema;\n  channels: readonly Channel[];\n  maxAttempts?: number;\n  email?: EmailTemplate<PayloadFromSchema<TSchema>>;\n};\n\n/** Binds TSchema so email callbacks infer the payload; TS cannot infer from a sibling property. */\nexport function defineNotification<TSchema extends StandardSchemaV1 | undefined = undefined>(\n  definition: NotificationDefinition<TSchema>,\n): NotificationDefinition<TSchema> {\n  return definition;\n}\n\n/** Erased form. `EmailTemplate<never>` because callbacks are contravariant. */\nexport type AnyNotificationDefinition = {\n  schema?: StandardSchemaV1 | undefined;\n  channels: readonly Channel[];\n  maxAttempts?: number | undefined;\n  email?: EmailTemplate<never> | undefined;\n};\n\nexport type NotificationDefinitions = Record<string, AnyNotificationDefinition>;\n\nexport type PayloadOf<TDef> = TDef extends { schema: infer TSchema extends StandardSchemaV1 }\n  ? StandardSchemaV1.InferOutput<TSchema>\n  : Record<string, unknown>;\n","export type RateLimitConfig = {\n  /** Requests allowed per key per window. */\n  max: number;\n  windowMs: number;\n  /** Bucket key. Defaults to the client address from proxy headers; null exempts the request. */\n  key?: (request: Request) => string | null;\n};\n\nconst clientAddress = (request: Request): string | null => {\n  const headers = request.headers;\n  return (\n    headers.get(\"cf-connecting-ip\") ??\n    headers.get(\"x-real-ip\") ??\n    headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\n    null\n  );\n};\n\n/** Fixed window in process memory: per isolate or replica, so a bound rather than a quota. */\nexport function createRateLimiter(config: RateLimitConfig): (request: Request) => Response | null {\n  const keyOf = config.key ?? clientAddress;\n  const buckets = new Map<string, { count: number; resetAt: number }>();\n  let lastSweep = 0;\n\n  return (request) => {\n    const key = keyOf(request);\n    if (key === null) return null;\n\n    const now = Date.now();\n\n    // Sweep expired buckets at most once per window.\n    if (now - lastSweep > config.windowMs) {\n      for (const [id, bucket] of buckets) if (bucket.resetAt <= now) buckets.delete(id);\n      lastSweep = now;\n    }\n\n    let bucket = buckets.get(key);\n    if (!bucket || bucket.resetAt <= now) {\n      bucket = { count: 0, resetAt: now + config.windowMs };\n      buckets.set(key, bucket);\n    }\n\n    bucket.count += 1;\n    if (bucket.count <= config.max) return null;\n\n    return new Response(null, {\n      status: 429,\n      headers: {\n        \"retry-after\": String(Math.max(1, Math.ceil((bucket.resetAt - now) / 1000))),\n        \"cache-control\": \"private, no-store\",\n      },\n    });\n  };\n}\n","import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { DatabaseAdapter, InsertDelivery, InsertNotification } from \"./adapter\";\nimport type { ChannelsConfig, SendResult } from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { type Logger, ValidationError } from \"./errors\";\nimport type { AnyPlugin, BeforeSendResult, ChannelDecision } from \"./plugin\";\nimport type { Channel, Recipient, SkipReason } from \"./types\";\n\nexport type SendPipelineDeps = {\n  adapter: DatabaseAdapter;\n  definitions: NotificationDefinitions;\n  channels: ChannelsConfig;\n  plugins: readonly AnyPlugin[];\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  maxAttempts: number;\n  logger: Logger;\n  generateId?: () => string;\n};\n\nexport type SendInput = {\n  to: string | readonly string[];\n  payload: unknown;\n  actorId?: string | undefined;\n  dedupeKey?: string | undefined;\n  overrides?: { channels?: readonly Channel[] } | undefined;\n};\n\nasync function validatePayload(type: string, schema: StandardSchemaV1, payload: unknown) {\n  const result = await schema[\"~standard\"].validate(payload);\n  if (result.issues) {\n    throw new ValidationError(\n      type,\n      result.issues.map((issue) => ({\n        message: issue.message,\n        ...(issue.path ? { path: issue.path.map(String).join(\".\") } : {}),\n      })),\n    );\n  }\n  return result.value;\n}\n\n/** inApp is on unless disabled; every other channel needs a provider or a plugin that delivers it. */\nexport function isChannelUsable(\n  channel: Channel,\n  channels: ChannelsConfig,\n  plugins: readonly AnyPlugin[] = [],\n): boolean {\n  if (channel === \"inApp\") return channels.inApp?.enabled !== false;\n  if (channel === \"email\") return Boolean(channels.email?.provider);\n  // Anything else is usable only if a plugin claims it and can deliver it.\n  return plugins.some((plugin) => plugin.channels?.includes(channel) && plugin.hooks?.deliver);\n}\n\n/** One prepare() per plugin per send, keyed by plugin id. */\nasync function runPrepare(\n  plugins: readonly AnyPlugin[],\n  ctx: { type: string; recipients: readonly Recipient[] },\n  logger: Logger,\n): Promise<Map<string, unknown>> {\n  const prepared = new Map<string, unknown>();\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.prepare;\n    if (!hook) continue;\n    try {\n      prepared.set(plugin.id, await hook(ctx));\n    } catch (error) {\n      // Fail closed: a failed bulk load must not decide with stale assumptions.\n      logger.error(`plugin \"${plugin.id}\" prepare threw; its hooks will see undefined`, {\n        type: ctx.type,\n        error,\n      });\n      prepared.set(plugin.id, undefined);\n    }\n  }\n\n  return prepared;\n}\n\nasync function runBeforeSend(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; actorId: string | null },\n  payload: unknown,\n  dedupeKey: string | null,\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<BeforeSendResult> {\n  let currentPayload = payload;\n  let currentDedupeKey = dedupeKey;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.beforeSend;\n    if (!hook) continue;\n\n    let result: BeforeSendResult;\n    try {\n      result = await hook({\n        ...base,\n        payload: currentPayload,\n        dedupeKey: currentDedupeKey,\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fail closed: failing open would email people who opted out. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" beforeSend threw; cancelling send`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return { action: \"cancel\", reason: `plugin \"${plugin.id}\" beforeSend threw` };\n    }\n\n    if (result.action === \"cancel\") return result;\n    if (result.payload !== undefined) currentPayload = result.payload;\n    if (result.dedupeKey !== undefined) currentDedupeKey = result.dedupeKey;\n  }\n\n  return {\n    action: \"continue\",\n    payload: currentPayload,\n    ...(currentDedupeKey === null ? {} : { dedupeKey: currentDedupeKey }),\n  };\n}\n\nasync function runResolveChannels(\n  plugins: readonly AnyPlugin[],\n  base: { type: string; recipient: Recipient; payload: unknown },\n  initial: readonly ChannelDecision[],\n  prepared: Map<string, unknown>,\n  logger: Logger,\n): Promise<readonly ChannelDecision[]> {\n  let decisions = initial;\n\n  for (const plugin of plugins) {\n    const hook = plugin.hooks?.resolveChannels;\n    if (!hook) continue;\n\n    try {\n      decisions = [...(await hook({ ...base, decisions, prepared: prepared.get(plugin.id) }))];\n    } catch (error) {\n      // Fail closed: keep the decisions already made. RFC 0004 §5.\n      logger.error(`plugin \"${plugin.id}\" resolveChannels threw; keeping prior decisions`, {\n        type: base.type,\n        userId: base.recipient.userId,\n        error,\n      });\n      return decisions;\n    }\n  }\n\n  return decisions;\n}\n\nexport async function runSend(\n  type: string,\n  input: SendInput,\n  deps: SendPipelineDeps,\n): Promise<SendResult> {\n  const definition = deps.definitions[type];\n  if (!definition) {\n    throw new ValidationError(type, [{ message: `unknown notification type \"${type}\"` }]);\n  }\n\n  const payload = definition.schema\n    ? await validatePayload(type, definition.schema, input.payload)\n    : input.payload;\n\n  const userIds = [...new Set(Array.isArray(input.to) ? input.to : [input.to as string])];\n  const recipients = await deps.getRecipients(userIds);\n  const byUserId = new Map(recipients.map((recipient) => [recipient.userId, recipient]));\n\n  const newId = deps.generateId ?? (() => crypto.randomUUID());\n  const skipped: { userId: string; reason: SkipReason }[] = [];\n  const rows: InsertNotification[] = [];\n  const actorId = input.actorId ?? null;\n\n  const declared = input.overrides?.channels ?? definition.channels;\n  const requested = declared.filter((channel) =>\n    isChannelUsable(channel, deps.channels, deps.plugins),\n  );\n\n  // Distinct from \"no-channels\": a missing provider is not an opt-out.\n  if (declared.length > 0 && requested.length === 0) {\n    return {\n      notifications: [],\n      skipped: userIds.map((userId) => ({ userId, reason: \"channel-unavailable\" as const })),\n    };\n  }\n\n  const prepared = await runPrepare(deps.plugins, { type, recipients }, deps.logger);\n\n  for (const userId of userIds) {\n    const recipient = byUserId.get(userId);\n    if (!recipient) {\n      skipped.push({ userId, reason: \"no-recipient\" });\n      continue;\n    }\n\n    const before = await runBeforeSend(\n      deps.plugins,\n      { type, recipient, actorId },\n      payload,\n      input.dedupeKey ?? null,\n      prepared,\n      deps.logger,\n    );\n\n    if (before.action === \"cancel\") {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const resolved = await runResolveChannels(\n      deps.plugins,\n      { type, recipient, payload: before.payload ?? payload },\n      requested.map((channel) => ({ channel, action: \"send\" as const })),\n      prepared,\n      deps.logger,\n    );\n\n    const now = new Date();\n    const deliveries: InsertDelivery[] = resolved\n      .filter((decision) => decision.action !== \"skip\")\n      .filter((decision) => isChannelUsable(decision.channel, deps.channels, deps.plugins))\n      .map((decision) => ({\n        id: newId(),\n        channel: decision.channel,\n        maxAttempts: definition.maxAttempts ?? deps.maxAttempts,\n        // defer is just not_before; the claim query refuses rows whose time has not come. RFC 0004 §4.2.\n        notBefore: decision.action === \"defer\" && decision.notBefore ? decision.notBefore : now,\n      }));\n\n    if (deliveries.length === 0) {\n      skipped.push({ userId, reason: \"no-channels\" });\n      continue;\n    }\n\n    const dedupeKey = before.action === \"continue\" ? before.dedupeKey : undefined;\n\n    rows.push({\n      id: newId(),\n      userId,\n      type,\n      payload: before.payload ?? payload,\n      ...(actorId ? { actorId } : {}),\n      ...(dedupeKey ? { dedupeKey } : {}),\n      deliveries,\n    });\n  }\n\n  if (rows.length === 0) return { notifications: [], skipped };\n\n  const { created, deduped } = await deps.adapter.createNotifications(rows);\n  const createdSet = new Set(created);\n\n  for (const row of rows) {\n    if (deduped.includes(row.id)) skipped.push({ userId: row.userId, reason: \"deduped\" });\n  }\n\n  const notifications = rows\n    .filter((row) => createdSet.has(row.id))\n    .map((row) => ({\n      id: row.id,\n      userId: row.userId,\n      deliveries: row.deliveries.map((delivery) => ({\n        id: delivery.id,\n        channel: delivery.channel,\n      })),\n    }));\n\n  for (const plugin of deps.plugins) {\n    const hook = plugin.hooks?.afterSend;\n    if (!hook) continue;\n    try {\n      await hook({\n        type,\n        payload,\n        notifications: notifications.map(({ id, userId }) => ({ id, userId })),\n        prepared: prepared.get(plugin.id),\n      });\n    } catch (error) {\n      // Fails open: the rows are committed.\n      deps.logger.error(`plugin \"${plugin.id}\" afterSend threw; ignoring`, { type, error });\n    }\n  }\n\n  return { notifications, skipped };\n}\n","import type { Backoff } from \"./backoff\";\nimport {\n  type EasyPing,\n  type EasyPingConfig,\n  type HealthReport,\n  INBOX_VERSION_HEADER,\n  type MountedRoute,\n  type SendArgs,\n  type SendResult,\n} from \"./config\";\nimport type { NotificationDefinitions } from \"./definition\";\nimport { ConfigError, consoleLogger } from \"./errors\";\nimport { createHandler } from \"./handler\";\nimport type { AnyPlugin } from \"./plugin\";\nimport { createRateLimiter } from \"./rate-limit\";\nimport { createRunner } from \"./runner\";\nimport { isChannelUsable, runSend } from \"./send\";\nimport { createMemorySignals, DELIVERIES_CHANNEL, inboxChannel, type Signals } from \"./signals\";\nimport { createPluginStore } from \"./store\";\nimport { createScopedSigner } from \"./tokens\";\nimport type { DeliveryMode } from \"./types\";\n\nconst CORE_ROUTES: readonly MountedRoute[] = [\n  { method: \"GET\", path: \"/\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"GET\", path: \"/count\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/seen\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/read-all\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"GET\", path: \"/events\", scope: { type: \"user\" }, owner: \"core\" },\n  { method: \"POST\", path: \"/cron\", scope: { type: \"machine\" }, owner: \"core\" },\n];\n\nconst DEFAULTS = {\n  maxAttempts: 5,\n  leaseMs: 60_000,\n  batchSize: 20,\n  basePath: \"/api/notifications\",\n  mode: \"cron\" as DeliveryMode,\n};\n\nexport const MIN_SECRET_LENGTH = 16;\n\nconst PLACEHOLDER_SECRETS = new Set([\n  \"secret\",\n  \"changeme\",\n  \"change-me\",\n  \"replace-me\",\n  \"replace-me-too\",\n  \"password\",\n  \"demo-signing-secret\",\n  \"demo-cron-secret\",\n]);\n\nfunction checkSecretStrength(name: string, value: string) {\n  if (value.length < MIN_SECRET_LENGTH || PLACEHOLDER_SECRETS.has(value.toLowerCase())) {\n    throw new ConfigError(\n      `\\`${name}\\` must be at least ${MIN_SECRET_LENGTH} characters and not a placeholder. ` +\n        \"Generate one with `openssl rand -base64 32`.\",\n    );\n  }\n}\n\nfunction validate(config: EasyPingConfig<NotificationDefinitions>, plugins: readonly AnyPlugin[]) {\n  if (!config.database) throw new ConfigError(\"`database` is required.\");\n  if (!config.notifications) throw new ConfigError(\"`notifications` is required.\");\n\n  // No default resolver and no dev bypass: an insecure default ships, a crash does not.\n  if (typeof config.session?.getUserId !== \"function\") {\n    throw new ConfigError(\n      \"`session.getUserId` is required — the mounted endpoints serve a user's private inbox \" +\n        \"and must resolve the caller. See RFC 0002.\",\n    );\n  }\n\n  if (!config.secret) {\n    throw new ConfigError(\n      \"`secret` is required — it signs unsubscribe and other session-less links. \" +\n        \"Adding it later is a breaking change, so it is mandatory from the start.\",\n    );\n  }\n  checkSecretStrength(\"secret\", config.secret);\n  if (config.cron?.secret) checkSecretStrength(\"cron.secret\", config.cron.secret);\n  if (config.machineSecret) checkSecretStrength(\"machineSecret\", config.machineSecret);\n\n  if (config.rateLimit && (config.rateLimit.max < 1 || config.rateLimit.windowMs < 1)) {\n    throw new ConfigError(\"`rateLimit.max` and `rateLimit.windowMs` must both be positive.\");\n  }\n\n  if (typeof config.getRecipients !== \"function\") {\n    throw new ConfigError(\"`getRecipients` is required to resolve emails and timezones.\");\n  }\n\n  const seen = new Set<string>();\n  for (const plugin of plugins) {\n    if (seen.has(plugin.id)) {\n      throw new ConfigError(`duplicate plugin id \"${plugin.id}\" — ids must be unique.`);\n    }\n    seen.add(plugin.id);\n  }\n\n  for (const plugin of plugins) {\n    for (const dependency of plugin.dependsOn ?? []) {\n      if (!seen.has(dependency)) {\n        throw new ConfigError(\n          `plugin \"${plugin.id}\" requires \"${dependency}\", which is not registered.`,\n        );\n      }\n    }\n  }\n\n  const routes = new Set<string>();\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      const signature = `${route.method} ${route.path}`;\n      if (routes.has(signature)) {\n        throw new ConfigError(`route collision: two plugins both registered \"${signature}\".`);\n      }\n      routes.add(signature);\n    }\n  }\n\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  if ((mode === \"cron\" || mode === \"deferred\") && !config.cron?.secret) {\n    throw new ConfigError(\n      `delivery.mode \"${mode}\" relies on the cron sweep, so \\`cron.secret\\` is required. ` +\n        \"Left unset the endpoint would be unauthenticated — a free flush-everything trigger \" +\n        \"against your email provider. See RFC 0002 §4.\",\n    );\n  }\n}\n\nexport function easyPing<TDefs extends NotificationDefinitions>(\n  config: EasyPingConfig<TDefs>,\n): EasyPing<TDefs> {\n  const plugins = config.plugins ?? [];\n  validate(config as EasyPingConfig<NotificationDefinitions>, plugins);\n\n  const logger = config.logger ?? consoleLogger;\n  const tablePrefix = config.tablePrefix ?? \"\";\n  const mode = config.delivery?.mode ?? DEFAULTS.mode;\n  const leaseMs = config.delivery?.leaseMs ?? DEFAULTS.leaseMs;\n  const warnings: string[] = [];\n\n  // Below this ratio a slow send is re-claimed mid-flight. RFC 0003 §7.\n  const providerTimeout = config.channels.email?.provider?.timeoutMs;\n  if (providerTimeout !== undefined && providerTimeout >= leaseMs / 2) {\n    warnings.push(\n      `email provider timeout (${providerTimeout}ms) is at least half of delivery.leaseMs ` +\n        `(${leaseMs}ms); raise leaseMs or duplicate sends become systematic.`,\n    );\n  }\n\n  const unusable = new Map<string, string[]>();\n  for (const [type, definition] of Object.entries(config.notifications)) {\n    const missing = definition.channels.filter(\n      (channel) => !isChannelUsable(channel, config.channels, plugins),\n    );\n    if (missing.length > 0) unusable.set(type, [...missing]);\n  }\n\n  for (const [type, channels] of unusable) {\n    const dead = channels.length === config.notifications[type]?.channels.length;\n    warnings.push(\n      `notification \"${type}\" declares ${channels.map((c) => `\"${c}\"`).join(\", \")} ` +\n        `but no provider is configured for ${channels.length > 1 ? \"them\" : \"it\"}` +\n        (dead ? \" — this type can never be delivered.\" : \"; those channels will be skipped.\"),\n    );\n  }\n\n  if (mode === \"deferred\" && !config.delivery?.waitUntil) {\n    warnings.push(\n      \"delivery.mode is 'deferred' but no delivery.waitUntil was supplied; \" +\n        \"delivery will wait for the cron sweep.\",\n    );\n  }\n\n  // Custom-scoped routes are named at startup with their justification. RFC 0002 §3.\n  for (const plugin of plugins) {\n    for (const route of plugin.routes ?? []) {\n      if (route.scope.type === \"custom\") {\n        warnings.push(\n          `plugin \"${plugin.id}\" mounts ${route.method} ${route.path} with custom auth: ` +\n            route.scope.justification,\n        );\n      }\n    }\n  }\n\n  for (const warning of warnings) logger.warn(warning);\n\n  const baseSignals = config.signals ?? createMemorySignals();\n\n  // Per-user inbox versions for the piggyback header. In-process counters, so\n  // another replica's number differs; the client treats any change as \"look\",\n  // which costs a spurious refresh, never a missed one.\n  const inboxVersions = new Map<string, number>();\n  const signals: Signals = {\n    crossProcess: baseSignals.crossProcess,\n    publish(channel) {\n      if (channel.startsWith(\"inbox:\")) {\n        if (inboxVersions.size > 50_000) inboxVersions.clear();\n        const userId = channel.slice(\"inbox:\".length);\n        inboxVersions.set(userId, (inboxVersions.get(userId) ?? 0) + 1);\n      }\n      baseSignals.publish(channel);\n    },\n    subscribe: (channel, handler) => baseSignals.subscribe(channel, handler),\n  };\n\n  const runner = createRunner({\n    adapter: config.database,\n    definitions: config.notifications,\n    channels: config.channels,\n    plugins,\n    getRecipients: config.getRecipients,\n    logger,\n    leaseMs,\n    batchSize: config.delivery?.batchSize ?? DEFAULTS.batchSize,\n    backoff: (config.delivery?.backoff ?? \"exponential\") as Backoff,\n    signals,\n  });\n\n  const pluginRoutes = plugins.flatMap((plugin) => plugin.routes ?? []);\n\n  const events =\n    config.events === false\n      ? false\n      : {\n          heartbeatMs: config.events?.heartbeatMs ?? 25_000,\n          probeIntervalMs: config.events?.probeIntervalMs ?? 30_000,\n          maxDurationMs: config.events?.maxDurationMs ?? 0,\n          maxStreamsPerUser: config.events?.maxStreamsPerUser ?? 10,\n          maxStreams: config.events?.maxStreams ?? 5_000,\n        };\n\n  const sweepConfig = config.delivery?.sweepOnRequest;\n  let lastRequestSweep = 0;\n  const sweepOnRequest =\n    sweepConfig && mode !== \"inline\"\n      ? () => {\n          const settings = sweepConfig === true ? {} : sweepConfig;\n          const now = Date.now();\n          if (now - lastRequestSweep < (settings.everyMs ?? 5_000)) return;\n          lastRequestSweep = now;\n          const pass = runner\n            .runOnce({ limit: settings.limit ?? 5 })\n            .catch((error) => logger.error(\"request-driven sweep failed\", { error }));\n          config.delivery?.waitUntil?.(pass);\n        }\n      : undefined;\n\n  const handler = createHandler({\n    adapter: config.database,\n    session: config.session,\n    runner,\n    logger,\n    secret: config.secret,\n    signals,\n    events,\n    sweepOnRequest,\n    basePath: config.basePath ?? DEFAULTS.basePath,\n    pluginRoutes,\n    trustedOrigins: config.trustedOrigins,\n    onRequest: config.onRequest,\n    maxBodyBytes: config.maxBodyBytes,\n    rateLimit: config.rateLimit ? createRateLimiter(config.rateLimit) : undefined,\n    cronMaxSweeps: config.cron?.maxSweeps,\n    ...(config.cron?.secret ? { cronSecret: config.cron.secret } : {}),\n    ...((config.machineSecret ?? config.cron?.secret)\n      ? { machineSecret: config.machineSecret ?? config.cron?.secret }\n      : {}),\n  });\n\n  async function send<TKey extends keyof TDefs & string>(\n    type: TKey,\n    args: SendArgs<TDefs, TKey>,\n  ): Promise<SendResult> {\n    const result = await runSend(\n      type,\n      {\n        to: args.to,\n        payload: args.payload,\n        actorId: args.actorId,\n        dedupeKey: args.dedupeKey,\n        overrides: args.overrides,\n      },\n      {\n        adapter: config.database,\n        definitions: config.notifications,\n        channels: config.channels,\n        plugins,\n        getRecipients: config.getRecipients,\n        maxAttempts: config.delivery?.maxAttempts ?? DEFAULTS.maxAttempts,\n        logger,\n      },\n    );\n\n    // Rows are committed; everything below only affects latency. RFC 0001 §8.1.\n    if (result.notifications.length > 0) {\n      for (const notification of result.notifications) {\n        signals.publish(inboxChannel(notification.userId));\n      }\n      signals.publish(DELIVERIES_CHANNEL);\n\n      // Scoped to this send, or an inline send flushes the whole backlog.\n      const ids = result.notifications.flatMap((notification) =>\n        notification.deliveries.map((delivery) => delivery.id),\n      );\n\n      if (mode === \"inline\") await runner.drain({ ids });\n      else if (mode === \"deferred\") runner.scheduleDeferred(config.delivery?.waitUntil, ids);\n    }\n\n    return result;\n  }\n\n  // After send() exists, before any hook or route can run.\n  for (const plugin of plugins) {\n    const purposes = new Set(\n      (plugin.routes ?? []).flatMap((route) =>\n        route.scope.type === \"signed\" ? [route.scope.purpose] : [],\n      ),\n    );\n    plugin.init?.({\n      store: createPluginStore(plugin.id, plugin.schema, config.database, tablePrefix),\n      sign: createScopedSigner(\n        config.secret,\n        plugin.id,\n        purposes,\n        (message) => new ConfigError(message),\n      ),\n      logger,\n      notificationTypes: Object.keys(config.notifications),\n      getRecipients: config.getRecipients,\n      send: (type, args) => send(type as keyof TDefs & string, args as never) as Promise<unknown>,\n    });\n  }\n\n  return {\n    send,\n    handler,\n\n    startWorker: (options) => runner.startWorker(options ?? {}),\n\n    inboxHeaders: (userId) => ({\n      [INBOX_VERSION_HEADER]: String(inboxVersions.get(userId) ?? 0),\n    }),\n\n    listRoutes: () => [\n      ...CORE_ROUTES.filter(\n        (route) =>\n          (route.path !== \"/cron\" || Boolean(config.cron?.secret)) &&\n          (route.path !== \"/events\" || events !== false),\n      ),\n      ...plugins.flatMap((plugin) =>\n        (plugin.routes ?? []).map((route) => ({\n          method: route.method,\n          path: route.path,\n          scope: route.scope,\n          owner: plugin.id,\n        })),\n      ),\n    ],\n\n    getFailedDeliveries: (options = {}) =>\n      config.database.getFailedDeliveries({\n        since: options.since ?? new Date(Date.now() - 24 * 3600_000),\n        limit: Math.min(options.limit ?? 100, 1000),\n      }),\n\n    healthCheck: async (): Promise<HealthReport> => {\n      const cronMounted = Boolean(config.cron?.secret);\n      return {\n        mode,\n        cronMounted,\n        cronRequiredButMissing:\n          !cronMounted && (mode === \"cron\" || mode === \"deferred\" || mode === \"inline\"),\n        warnings,\n      };\n    },\n  };\n}\n"]}

package/dist/node.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/handler.ts","../src/node/index.ts"],"names":[],"mappings":";;;AA0CO,IAAM,iBAAiB,EAAA,GAAK,IAAA;AA+BnB,IAAI,WAAA;;;AC5DpB,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAC,CAAA;AAEvC,SAAS,QAAA,CAAS,KAAsB,QAAA,EAA+C;AACrF,EAAA,IAAI,GAAA,CAAI,WAAW,KAAA,IAAS,GAAA,CAAI,WAAW,MAAA,EAAQ,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAS,CAAA;AAEnF,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,gBAAgB,CAAC,CAAA;AACrD,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,IAAK,WAAW,QAAA,EAAU;AACpD,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,iBAAA,EAAmB,CAAA;AAAA,EAC/C;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,SAAmB,EAAC;AAC1B,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,MAAA,KAAA,IAAS,KAAA,CAAM,MAAA;AACf,MAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,QAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,QAAA,MAAA,CAAO,IAAI,mBAAmB,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,IACnB,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,GAAI,MAAS,CAAC,CAAA;AAC9E,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEO,SAAS,YAAA,CAAa,GAAA,EAAsB,IAAA,EAAe,MAAA,EAA+B;AAE/F,EAAA,MAAM,QAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,mBAAmB,CAAA,IAA4B,MAAA;AAC7E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,WAAA;AAEjC,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACtD,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,KAAA,MAAW,QAAQ,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,GAAA,EAAK,IAAI,CAAA;AAAA,SACvE,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAA,EAAG,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,EAAG,GAAA,CAAI,GAAA,IAAO,GAAG,CAAA,CAAA,EAAI;AAAA,IAC3D,MAAA,EAAQ,IAAI,MAAA,IAAU,KAAA;AAAA,IACtB,OAAA;AAAA,IACA,GAAI,OAAO,EAAE,IAAA,EAAM,IAAI,UAAA,CAAW,IAAI,CAAA,EAAE,GAAI,EAAC;AAAA,IAC7C,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW;AAAC,GAC5B,CAAA;AACH;AAEO,SAAS,aAAA,CACd,OAAA,EACA,OAAA,GAA8B,EAAC,EAClB;AACb,EAAA,MAAM,YAAA,GAAe,QAAQ,YAAA,IAAgB,cAAA;AAC7C,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,KAAY,CAAC,UAAmB,OAAA,CAAQ,KAAA,CAAM,eAAe,KAAK,CAAA,CAAA;AAE1F,EAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AAEzB,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,MAAM,UAAA,CAAW,OAAO,CAAA;AAExC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,GAAA,EAAK,YAAY,CAAA;AAC7C,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,YAAA,CAAa,KAAK,IAAA,EAAM,UAAA,CAAW,MAAM,CAAC,CAAA;AAEzE,MAAA,GAAA,CAAI,aAAa,QAAA,CAAS,MAAA;AAE1B,MAAA,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACvC,QAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,MAC1B,CAAC,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,QAAA,GAAA,CAAI,GAAA,EAAI;AACR,QAAA;AAAA,MACF;AAGA,MAAA,GAAA,CAAI,YAAA,EAAa;AACjB,MAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,CAAK,SAAA,EAAU;AACvC,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,EAAO,CAAE,MAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AACnD,MAAA,UAAA,CAAW,OAAO,gBAAA,CAAiB,OAAA,EAAS,QAAQ,EAAE,IAAA,EAAM,MAAM,CAAA;AAClE,MAAA,IAAI;AACF,QAAA,WAAS;AACP,UAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,UAAA,IAAI,IAAA,EAAM;AACV,UAAA,IAAI,CAAC,GAAA,CAAI,KAAA,CAAM,KAAK,GAAG,MAAM,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,QAClF;AAAA,MACF,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,MAAA,CAAO,mBAAA,CAAoB,OAAA,EAAS,MAAM,CAAA;AAAA,MACvD;AACA,MAAA,GAAA,CAAI,GAAA,EAAI;AAAA,IACV,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,CAAC,GAAA,CAAI,WAAA,MAAiB,UAAA,GAAa,KAAA,YAAiB,oBAAoB,GAAA,GAAM,GAAA;AAClF,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA,IAAI,EAAE,KAAA,YAAiB,iBAAA,CAAA,EAAoB,OAAA,CAAQ,KAAK,CAAA;AAAA,IAC1D;AAAA,EACF,CAAA;AACF","file":"node.cjs","sourcesContent":["import type { DatabaseAdapter } from \"./adapter\";\nimport type { SessionConfig } from \"./config\";\nimport type { Logger } from \"./errors\";\nimport type { Promisable, RouteDefinition } from \"./plugin\";\nimport type { Runner } from \"./runner\";\nimport { inboxChannel, type Signals } from \"./signals\";\nimport { verifyToken } from \"./tokens\";\n\nexport type EventsSettings = {\n  heartbeatMs: number;\n  probeIntervalMs: number;\n  maxDurationMs: number;\n};\n\nexport type HandlerDeps = {\n  adapter: DatabaseAdapter;\n  session: SessionConfig;\n  runner: Runner;\n  logger: Logger;\n  basePath: string;\n  secret: string;\n  signals: Signals;\n  /** `false` unmounts GET /events. */\n  events: EventsSettings | false;\n  /** Fire-and-forget delivery pass after a request. Rate-limited by the instance. */\n  sweepOnRequest?: (() => void) | undefined;\n  cronSecret?: string | undefined;\n  /** Guards plugin machine routes. The instance defaults it to cronSecret. */\n  machineSecret?: string | undefined;\n  cronMaxSweeps?: number | undefined;\n  pluginRoutes?: readonly RouteDefinition[] | undefined;\n  /** Returns a 429 to send, or null to proceed. Runs after onRequest, before routing. */\n  rateLimit?: ((request: Request) => Response | null) | undefined;\n  /** Origins other than the request's own host that may POST. `*.example.com` allowed. */\n  trustedOrigins?: readonly string[] | undefined;\n  /** Runs before routing. Returning a Response short-circuits; use it for rate limiting. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: ((request: Request) => Promisable<Response | undefined | void>) | undefined;\n  maxBodyBytes?: number | undefined;\n};\n\n/** Every JSON body is capped here. Nothing legitimate the routes accept is bigger. */\nexport const MAX_BODY_BYTES = 64 * 1024;\n\nconst MAX_READ_IDS = 200;\n\n// Per-user data: no shared caching, no sniffing.\nconst PRIVATE_HEADERS: Record<string, string> = {\n  \"cache-control\": \"private, no-store\",\n  \"x-content-type-options\": \"nosniff\",\n};\n\nconst json = (body: unknown, status = 200) =>\n  new Response(JSON.stringify(body), {\n    status,\n    headers: { \"content-type\": \"application/json\", ...PRIVATE_HEADERS },\n  });\n\nconst empty = (status: number) => new Response(null, { status, headers: PRIVATE_HEADERS });\n\n/** Plugin responses get the same headers, without touching their body. */\nfunction harden(response: Response): Response {\n  const headers = new Headers(response.headers);\n  for (const [name, value] of Object.entries(PRIVATE_HEADERS)) {\n    if (!headers.has(name)) headers.set(name, value);\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n\nconst encoder = new TextEncoder();\n\n/** Constant time over SHA-256 digests, so neither content nor length leaks. Works on edge runtimes. */\nasync function timingSafeEqual(a: string, b: string): Promise<boolean> {\n  const [left, right] = await Promise.all(\n    [a, b].map(\n      async (value) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", encoder.encode(value))),\n    ),\n  );\n  let diff = 0;\n  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);\n  return diff === 0;\n}\n\n/** Anchored at a segment boundary: `/foo/api/notifications/cron` is not a cron request. */\nfunction routePath(url: URL, basePath: string): string {\n  const { pathname } = url;\n  if (pathname === basePath) return \"/\";\n  if (pathname.startsWith(`${basePath}/`)) return pathname.slice(basePath.length);\n  return pathname;\n}\n\nexport type JsonBody = { body: Record<string, unknown> } | { error: Response };\n\n/** Reads a JSON object body with a streaming byte cap. Malformed JSON is 400; an empty body is `{}`. */\nexport async function readJsonBody(\n  request: Request,\n  maxBytes: number = MAX_BODY_BYTES,\n): Promise<JsonBody> {\n  const tooLarge = () => ({ error: json({ error: `body exceeds ${maxBytes} bytes` }, 413) });\n\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > maxBytes) return tooLarge();\n  if (!request.body) return { body: {} };\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      return tooLarge();\n    }\n    chunks.push(value);\n  }\n\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  const text = new TextDecoder().decode(bytes);\n  if (text.trim() === \"\") return { body: {} };\n\n  try {\n    const parsed: unknown = JSON.parse(text);\n    return {\n      body:\n        parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : {},\n    };\n  } catch {\n    return { error: json({ error: \"body must be a JSON object\" }, 400) };\n  }\n}\n\nconst isJsonContentType = (request: Request) =>\n  /^application\\/json\\s*(;|$)/i.test((request.headers.get(\"content-type\") ?? \"\").trim());\n\nfunction originAllowed(origin: string, url: URL, request: Request, trusted: readonly string[]) {\n  let host: string;\n  try {\n    host = new URL(origin).host;\n  } catch {\n    return false;\n  }\n\n  if (host === url.host) return true;\n  // Behind a proxy that rewrites Host, the public host arrives here instead.\n  const forwarded = request.headers.get(\"x-forwarded-host\")?.split(\",\")[0]?.trim();\n  if (forwarded && host === forwarded) return true;\n\n  return trusted.some((entry) =>\n    entry.startsWith(\"*.\") ? host.endsWith(entry.slice(1)) : entry === origin,\n  );\n}\n\n/** CSRF: a cross-site form can neither send `application/json` without a preflight nor forge `Origin`. */\nfunction csrfCheck(request: Request, url: URL, trusted: readonly string[]): Response | null {\n  if (!isJsonContentType(request)) {\n    return json({ error: \"content-type must be application/json\" }, 415);\n  }\n\n  const origin = request.headers.get(\"origin\");\n  if (origin === null) return null;\n  if (origin === \"null\" || !originAllowed(origin, url, request, trusted)) return empty(403);\n\n  return null;\n}\n\nexport function createHandler(deps: HandlerDeps) {\n  const trustedOrigins = deps.trustedOrigins ?? [];\n  const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;\n\n  async function resolveUserId(request: Request): Promise<string | null | \"error\"> {\n    try {\n      return await deps.session.getUserId(request);\n    } catch (error) {\n      // A broken session lookup is a 500, never a 401. RFC 0002 §1.\n      deps.logger.error(\"session.getUserId threw\", { error });\n      return \"error\";\n    }\n  }\n\n  async function bearerMatches(request: Request, secret: string | undefined): Promise<boolean> {\n    if (!secret) return false;\n    const header = request.headers.get(\"authorization\") ?? \"\";\n    const presented = header.startsWith(\"Bearer \") ? header.slice(7) : header;\n    return timingSafeEqual(presented, secret);\n  }\n\n  async function handleCron(request: Request): Promise<Response> {\n    if (!deps.cronSecret) return empty(404);\n    if (!(await bearerMatches(request, deps.cronSecret))) return empty(401);\n\n    // Bounded so an overlapping scheduler does not hold a request open for the whole backlog.\n    const result = await deps.runner.drain(\n      deps.cronMaxSweeps === undefined ? {} : { maxSweeps: deps.cronMaxSweeps },\n    );\n    return json(result);\n  }\n\n  /** Plugin routes first; auth is enforced here so a plugin cannot forget it. */\n  async function handlePluginRoute(\n    route: RouteDefinition,\n    request: Request,\n    url: URL,\n  ): Promise<Response> {\n    if (route.scope.type === \"user\") {\n      if (request.method === \"POST\") {\n        const rejected = csrfCheck(request, url, trustedOrigins);\n        if (rejected) return rejected;\n      }\n\n      const userId = await resolveUserId(request);\n      if (userId === \"error\") return empty(500);\n      if (userId === null) return empty(401);\n      return harden(await route.handler({ request, userId, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"machine\") {\n      if (!deps.machineSecret) return empty(404);\n      if (!(await bearerMatches(request, deps.machineSecret))) return empty(401);\n      return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"signed\") {\n      const token =\n        url.searchParams.get(\"token\") ??\n        (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer /, \"\");\n\n      const claims = await verifyToken(deps.secret, token, route.scope.purpose);\n      // One response for every failure mode. RFC 0002 §5.\n      if (!claims) return empty(400);\n\n      return harden(await route.handler({ request, userId: claims.uid, claims, params: {} }));\n    }\n\n    return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n  }\n\n  async function route(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = routePath(url, deps.basePath);\n\n    if (deps.onRequest) {\n      const early = await deps.onRequest(request);\n      if (early instanceof Response) return early;\n    }\n\n    if (deps.rateLimit) {\n      const limited = deps.rateLimit(request);\n      if (limited) return limited;\n    }\n\n    if (path === \"/cron\") {\n      if (request.method !== \"POST\") return empty(405);\n      return handleCron(request);\n    }\n\n    const pluginRoute = deps.pluginRoutes?.find(\n      (candidate) => candidate.path === path && candidate.method === request.method,\n    );\n    if (pluginRoute) return handlePluginRoute(pluginRoute, request, url);\n\n    if (request.method === \"POST\") {\n      const rejected = csrfCheck(request, url, trustedOrigins);\n      if (rejected) return rejected;\n    }\n\n    const userId = await resolveUserId(request);\n    if (userId === \"error\") return empty(500);\n    if (userId === null) return empty(401);\n\n    if (request.method === \"GET\" && path === \"/events\") {\n      return deps.events ? events(request, userId, deps.events) : empty(404);\n    }\n\n    if (request.method === \"GET\" && path === \"/\") {\n      const limitParam = Number(url.searchParams.get(\"limit\") ?? 20);\n      const limit = Number.isFinite(limitParam) ? Math.min(Math.max(limitParam, 1), 100) : 20;\n      const cursor = url.searchParams.get(\"cursor\");\n\n      // unseenCount rides on the first page only: a cursor request is scrollback, not a poll.\n      const [page, unseenCount] = await Promise.all([\n        deps.adapter.listNotifications({\n          userId,\n          limit,\n          ...(cursor ? { cursor } : {}),\n          ...(url.searchParams.get(\"unreadOnly\") === \"true\" ? { unreadOnly: true } : {}),\n        }),\n        cursor ? Promise.resolve(null) : deps.adapter.countUnseen(userId),\n      ]);\n\n      return json(unseenCount === null ? page : { ...page, unseenCount });\n    }\n\n    if (request.method === \"GET\" && path === \"/count\") {\n      return json({ unseen: await deps.adapter.countUnseen(userId) });\n    }\n\n    if (request.method === \"POST\" && path === \"/seen\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const before = typeof parsed.body.before === \"string\" ? new Date(parsed.body.before) : null;\n\n      // +1ms: Postgres keeps microseconds, an ISO string milliseconds; without it markSeen misses the newest row.\n      const cutoff =\n        before && !Number.isNaN(before.getTime()) ? new Date(before.getTime() + 1) : new Date();\n\n      await deps.adapter.markSeen(userId, cutoff);\n      deps.signals.publish(inboxChannel(userId));\n      return json({ ok: true });\n    }\n\n    if (request.method === \"POST\" && path === \"/read\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const ids = Array.isArray(parsed.body.ids)\n        ? parsed.body.ids.filter((id): id is string => typeof id === \"string\")\n        : [];\n      if (ids.length === 0) return json({ error: \"ids must be a non-empty string array\" }, 400);\n\n      if (ids.length > MAX_READ_IDS) {\n        return json({ error: `at most ${MAX_READ_IDS} ids per request` }, 400);\n      }\n\n      // 404, not 403: a 403 confirms the row exists. RFC 0002 §2.\n      const updated = await deps.adapter.markRead(userId, ids);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return updated === 0 ? empty(404) : json({ updated });\n    }\n\n    if (request.method === \"POST\" && path === \"/read-all\") {\n      const updated = await deps.adapter.markAllRead(userId);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return json({ updated });\n    }\n\n    return empty(404);\n  }\n\n  /** A change fingerprint cheap enough to take every probe interval. */\n  async function fingerprint(userId: string): Promise<string> {\n    const [page, unseen] = await Promise.all([\n      deps.adapter.listNotifications({ userId, limit: 1 }),\n      deps.adapter.countUnseen(userId),\n    ]);\n    const newest = page.notifications[0];\n    return `${newest?.id ?? \"\"}|${newest?.readAt ? 1 : 0}|${unseen}`;\n  }\n\n  /**\n   * Server-Sent Events: `ready` once, `changed` whenever this user's inbox\n   * moves, comments as keepalive. No payload ever travels on the stream; the\n   * client fetches the feed on `changed`. RFC 0006 §4D.\n   */\n  function events(request: Request, userId: string, settings: EventsSettings): Response {\n    const encoder = new TextEncoder();\n    const timers: ReturnType<typeof setInterval>[] = [];\n    let unsubscribe: (() => void) | undefined;\n    let closed = false;\n    let cleanup = () => {};\n\n    const stream = new ReadableStream<Uint8Array>({\n      start(controller) {\n        const write = (text: string) => {\n          if (closed) return;\n          try {\n            controller.enqueue(encoder.encode(text));\n          } catch {\n            cleanup();\n          }\n        };\n        cleanup = () => {\n          if (closed) return;\n          closed = true;\n          unsubscribe?.();\n          for (const timer of timers) clearInterval(timer);\n          try {\n            controller.close();\n          } catch {\n            // already closed by the consumer\n          }\n        };\n        const changed = () => write(\"event: changed\\ndata: {}\\n\\n\");\n\n        write(\"retry: 3000\\n\\nevent: ready\\ndata: {}\\n\\n\");\n        unsubscribe = deps.signals.subscribe(inboxChannel(userId), changed);\n        timers.push(setInterval(() => write(\": keepalive\\n\\n\"), settings.heartbeatMs));\n\n        if (!deps.signals.crossProcess && settings.probeIntervalMs > 0) {\n          let last: string | undefined;\n          fingerprint(userId)\n            .then((value) => {\n              last = value;\n            })\n            .catch(() => {});\n          timers.push(\n            setInterval(() => {\n              fingerprint(userId)\n                .then((value) => {\n                  if (last !== undefined && value !== last) changed();\n                  last = value;\n                })\n                .catch((error) => deps.logger.error(\"events probe failed\", { error }));\n            }, settings.probeIntervalMs),\n          );\n        }\n\n        if (settings.maxDurationMs > 0) {\n          timers.push(\n            setTimeout(cleanup, settings.maxDurationMs) as ReturnType<typeof setInterval>,\n          );\n        }\n        request.signal?.addEventListener(\"abort\", cleanup, { once: true });\n      },\n      cancel() {\n        cleanup();\n      },\n    });\n\n    return new Response(stream, {\n      headers: {\n        \"content-type\": \"text/event-stream; charset=utf-8\",\n        \"cache-control\": \"no-cache, no-store\",\n        connection: \"keep-alive\",\n        \"x-accel-buffering\": \"no\",\n        \"x-content-type-options\": \"nosniff\",\n      },\n    });\n  }\n\n  async function handle(request: Request): Promise<Response> {\n    try {\n      return await route(request);\n    } catch (error) {\n      // A thrown driver error must not escape: unhandled rejection on Node, stack trace elsewhere.\n      deps.logger.error(\"request failed\", { url: request.url, error });\n      return empty(500);\n    } finally {\n      deps.sweepOnRequest?.();\n    }\n  }\n\n  return {\n    handle,\n    GET: handle,\n    POST: handle,\n  };\n}\n","import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { MAX_BODY_BYTES } from \"../core/handler\";\n\n/** Adapts the web-standard handler to Node's http/Express signature. */\nexport type NodeHandler = (req: IncomingMessage, res: ServerResponse) => Promise<void>;\n\nexport type NodeHandlerOptions = {\n  /** Defaults to 64 KiB. Enforced here because this reads the raw stream, bypassing body-parser. */\n  maxBodyBytes?: number;\n  /** Called when the handler itself throws. Defaults to console.error; the response is already a 500. */\n  onError?: (error: unknown) => void;\n};\n\nclass BodyTooLargeError extends Error {}\n\nfunction readBody(req: IncomingMessage, maxBytes: number): Promise<Buffer | undefined> {\n  if (req.method === \"GET\" || req.method === \"HEAD\") return Promise.resolve(undefined);\n\n  const declared = Number(req.headers[\"content-length\"]);\n  if (Number.isFinite(declared) && declared > maxBytes) {\n    return Promise.reject(new BodyTooLargeError());\n  }\n\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let total = 0;\n    req.on(\"data\", (chunk: Buffer) => {\n      total += chunk.length;\n      if (total > maxBytes) {\n        req.destroy();\n        reject(new BodyTooLargeError());\n        return;\n      }\n      chunks.push(chunk);\n    });\n    req.on(\"end\", () => resolve(chunks.length ? Buffer.concat(chunks) : undefined));\n    req.on(\"error\", reject);\n  });\n}\n\nexport function toWebRequest(req: IncomingMessage, body?: Buffer, signal?: AbortSignal): Request {\n  // Behind a load balancer this is the only signal that the site is https.\n  const protocol = (req.headers[\"x-forwarded-proto\"] as string | undefined) ?? \"http\";\n  const host = req.headers.host ?? \"localhost\";\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) for (const item of value) headers.append(key, item);\n    else headers.set(key, value);\n  }\n\n  return new Request(`${protocol}://${host}${req.url ?? \"/\"}`, {\n    method: req.method ?? \"GET\",\n    headers,\n    ...(body ? { body: new Uint8Array(body) } : {}),\n    ...(signal ? { signal } : {}),\n  });\n}\n\nexport function toNodeHandler(\n  handler: (request: Request) => Promise<Response>,\n  options: NodeHandlerOptions = {},\n): NodeHandler {\n  const maxBodyBytes = options.maxBodyBytes ?? MAX_BODY_BYTES;\n  const onError = options.onError ?? ((error: unknown) => console.error(\"[easy-ping]\", error));\n\n  return async (req, res) => {\n    // A client that goes away aborts the request, so an open event stream cleans up.\n    const disconnect = new AbortController();\n    res.on(\"close\", () => disconnect.abort());\n\n    try {\n      const body = await readBody(req, maxBodyBytes);\n      const response = await handler(toWebRequest(req, body, disconnect.signal));\n\n      res.statusCode = response.status;\n      // forEach: Headers is only iterable with \"DOM.Iterable\" in lib.\n      response.headers.forEach((value, key) => {\n        res.setHeader(key, value);\n      });\n\n      if (!response.body) {\n        res.end();\n        return;\n      }\n\n      // Streamed, never buffered: GET /events stays open and every chunk must reach the client now.\n      res.flushHeaders();\n      const reader = response.body.getReader();\n      const cancel = () => reader.cancel().catch(() => {});\n      disconnect.signal.addEventListener(\"abort\", cancel, { once: true });\n      try {\n        for (;;) {\n          const { done, value } = await reader.read();\n          if (done) break;\n          if (!res.write(value)) await new Promise((resolve) => res.once(\"drain\", resolve));\n        }\n      } finally {\n        disconnect.signal.removeEventListener(\"abort\", cancel);\n      }\n      res.end();\n    } catch (error) {\n      // Respond and swallow: a rethrow is an unhandled rejection under Express.\n      if (!res.headersSent) res.statusCode = error instanceof BodyTooLargeError ? 413 : 500;\n      res.end();\n      if (!(error instanceof BodyTooLargeError)) onError(error);\n    }\n  };\n}\n"]}
+{"version":3,"sources":["../src/core/handler.ts","../src/node/index.ts"],"names":[],"mappings":";;;AA+CO,IAAM,iBAAiB,EAAA,GAAK,IAAA;AA+BnB,IAAI,WAAA;;;ACjEpB,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAC,CAAA;AAEvC,SAAS,QAAA,CAAS,KAAsB,QAAA,EAA+C;AACrF,EAAA,IAAI,GAAA,CAAI,WAAW,KAAA,IAAS,GAAA,CAAI,WAAW,MAAA,EAAQ,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAS,CAAA;AAEnF,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,gBAAgB,CAAC,CAAA;AACrD,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,IAAK,WAAW,QAAA,EAAU;AACpD,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,iBAAA,EAAmB,CAAA;AAAA,EAC/C;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,SAAmB,EAAC;AAC1B,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,MAAA,KAAA,IAAS,KAAA,CAAM,MAAA;AACf,MAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,QAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,QAAA,MAAA,CAAO,IAAI,mBAAmB,CAAA;AAC9B,QAAA;AAAA,MACF;AACA,MAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,IACnB,CAAC,CAAA;AACD,IAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,GAAI,MAAS,CAAC,CAAA;AAC9E,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEO,SAAS,YAAA,CAAa,GAAA,EAAsB,IAAA,EAAe,MAAA,EAA+B;AAE/F,EAAA,MAAM,QAAA,GAAY,GAAA,CAAI,OAAA,CAAQ,mBAAmB,CAAA,IAA4B,MAAA;AAC7E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,WAAA;AAEjC,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,KAAK,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACtD,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,KAAA,MAAW,QAAQ,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,GAAA,EAAK,IAAI,CAAA;AAAA,SACvE,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,EAC7B;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAA,EAAG,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,EAAG,GAAA,CAAI,GAAA,IAAO,GAAG,CAAA,CAAA,EAAI;AAAA,IAC3D,MAAA,EAAQ,IAAI,MAAA,IAAU,KAAA;AAAA,IACtB,OAAA;AAAA,IACA,GAAI,OAAO,EAAE,IAAA,EAAM,IAAI,UAAA,CAAW,IAAI,CAAA,EAAE,GAAI,EAAC;AAAA,IAC7C,GAAI,MAAA,GAAS,EAAE,MAAA,KAAW;AAAC,GAC5B,CAAA;AACH;AAEO,SAAS,aAAA,CACd,OAAA,EACA,OAAA,GAA8B,EAAC,EAClB;AACb,EAAA,MAAM,YAAA,GAAe,QAAQ,YAAA,IAAgB,cAAA;AAC7C,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,KAAY,CAAC,UAAmB,OAAA,CAAQ,KAAA,CAAM,eAAe,KAAK,CAAA,CAAA;AAE1F,EAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AAEzB,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,MAAM,UAAA,CAAW,OAAO,CAAA;AAExC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,GAAA,EAAK,YAAY,CAAA;AAC7C,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,YAAA,CAAa,KAAK,IAAA,EAAM,UAAA,CAAW,MAAM,CAAC,CAAA;AAEzE,MAAA,GAAA,CAAI,aAAa,QAAA,CAAS,MAAA;AAE1B,MAAA,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACvC,QAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,MAC1B,CAAC,CAAA;AAED,MAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,QAAA,GAAA,CAAI,GAAA,EAAI;AACR,QAAA;AAAA,MACF;AAGA,MAAA,GAAA,CAAI,YAAA,EAAa;AACjB,MAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,CAAK,SAAA,EAAU;AACvC,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,EAAO,CAAE,MAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AACnD,MAAA,UAAA,CAAW,OAAO,gBAAA,CAAiB,OAAA,EAAS,QAAQ,EAAE,IAAA,EAAM,MAAM,CAAA;AAClE,MAAA,IAAI;AACF,QAAA,WAAS;AACP,UAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,UAAA,IAAI,IAAA,EAAM;AACV,UAAA,IAAI,CAAC,GAAA,CAAI,KAAA,CAAM,KAAK,GAAG,MAAM,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,QAClF;AAAA,MACF,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,MAAA,CAAO,mBAAA,CAAoB,OAAA,EAAS,MAAM,CAAA;AAAA,MACvD;AACA,MAAA,GAAA,CAAI,GAAA,EAAI;AAAA,IACV,SAAS,KAAA,EAAO;AAEd,MAAA,IAAI,CAAC,GAAA,CAAI,WAAA,MAAiB,UAAA,GAAa,KAAA,YAAiB,oBAAoB,GAAA,GAAM,GAAA;AAClF,MAAA,GAAA,CAAI,GAAA,EAAI;AACR,MAAA,IAAI,EAAE,KAAA,YAAiB,iBAAA,CAAA,EAAoB,OAAA,CAAQ,KAAK,CAAA;AAAA,IAC1D;AAAA,EACF,CAAA;AACF","file":"node.cjs","sourcesContent":["import type { DatabaseAdapter } from \"./adapter\";\nimport type { SessionConfig } from \"./config\";\nimport type { Logger } from \"./errors\";\nimport type { Promisable, RouteDefinition } from \"./plugin\";\nimport type { Runner } from \"./runner\";\nimport { inboxChannel, type Signals } from \"./signals\";\nimport { verifyToken } from \"./tokens\";\n\nexport type EventsSettings = {\n  heartbeatMs: number;\n  probeIntervalMs: number;\n  maxDurationMs: number;\n  maxStreamsPerUser: number;\n  maxStreams: number;\n};\n\n/** Unread chunks a stream may hold before it is closed on a consumer that stopped reading. */\nconst STREAM_HIGH_WATER_MARK = 256;\n\nexport type HandlerDeps = {\n  adapter: DatabaseAdapter;\n  session: SessionConfig;\n  runner: Runner;\n  logger: Logger;\n  basePath: string;\n  secret: string;\n  signals: Signals;\n  /** `false` unmounts GET /events. */\n  events: EventsSettings | false;\n  /** Fire-and-forget delivery pass after a request. Rate-limited by the instance. */\n  sweepOnRequest?: (() => void) | undefined;\n  cronSecret?: string | undefined;\n  /** Guards plugin machine routes. The instance defaults it to cronSecret. */\n  machineSecret?: string | undefined;\n  cronMaxSweeps?: number | undefined;\n  pluginRoutes?: readonly RouteDefinition[] | undefined;\n  /** Returns a 429 to send, or null to proceed. Runs after onRequest, before routing. */\n  rateLimit?: ((request: Request) => Response | null) | undefined;\n  /** Origins other than the request's own host that may POST. `*.example.com` allowed. */\n  trustedOrigins?: readonly string[] | undefined;\n  /** Runs before routing. Returning a Response short-circuits; use it for rate limiting. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: ((request: Request) => Promisable<Response | undefined | void>) | undefined;\n  maxBodyBytes?: number | undefined;\n};\n\n/** Every JSON body is capped here. Nothing legitimate the routes accept is bigger. */\nexport const MAX_BODY_BYTES = 64 * 1024;\n\nconst MAX_READ_IDS = 200;\n\n// Per-user data: no shared caching, no sniffing.\nconst PRIVATE_HEADERS: Record<string, string> = {\n  \"cache-control\": \"private, no-store\",\n  \"x-content-type-options\": \"nosniff\",\n};\n\nconst json = (body: unknown, status = 200, headers: Record<string, string> = {}) =>\n  new Response(JSON.stringify(body), {\n    status,\n    headers: { \"content-type\": \"application/json\", ...PRIVATE_HEADERS, ...headers },\n  });\n\nconst empty = (status: number) => new Response(null, { status, headers: PRIVATE_HEADERS });\n\n/** Plugin responses get the same headers, without touching their body. */\nfunction harden(response: Response): Response {\n  const headers = new Headers(response.headers);\n  for (const [name, value] of Object.entries(PRIVATE_HEADERS)) {\n    if (!headers.has(name)) headers.set(name, value);\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n\nconst encoder = new TextEncoder();\n\n/** Constant time over SHA-256 digests, so neither content nor length leaks. Works on edge runtimes. */\nasync function timingSafeEqual(a: string, b: string): Promise<boolean> {\n  const [left, right] = await Promise.all(\n    [a, b].map(\n      async (value) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", encoder.encode(value))),\n    ),\n  );\n  let diff = 0;\n  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);\n  return diff === 0;\n}\n\n/** Anchored at a segment boundary: `/foo/api/notifications/cron` is not a cron request. */\nfunction routePath(url: URL, basePath: string): string {\n  const { pathname } = url;\n  if (pathname === basePath) return \"/\";\n  if (pathname.startsWith(`${basePath}/`)) return pathname.slice(basePath.length);\n  return pathname;\n}\n\nexport type JsonBody = { body: Record<string, unknown> } | { error: Response };\n\n/** Reads a JSON object body with a streaming byte cap. Malformed JSON is 400; an empty body is `{}`. */\nexport async function readJsonBody(\n  request: Request,\n  maxBytes: number = MAX_BODY_BYTES,\n): Promise<JsonBody> {\n  const tooLarge = () => ({ error: json({ error: `body exceeds ${maxBytes} bytes` }, 413) });\n\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > maxBytes) return tooLarge();\n  if (!request.body) return { body: {} };\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      return tooLarge();\n    }\n    chunks.push(value);\n  }\n\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  const text = new TextDecoder().decode(bytes);\n  if (text.trim() === \"\") return { body: {} };\n\n  try {\n    const parsed: unknown = JSON.parse(text);\n    return {\n      body:\n        parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : {},\n    };\n  } catch {\n    return { error: json({ error: \"body must be a JSON object\" }, 400) };\n  }\n}\n\nconst isJsonContentType = (request: Request) =>\n  /^application\\/json\\s*(;|$)/i.test((request.headers.get(\"content-type\") ?? \"\").trim());\n\nfunction originAllowed(origin: string, url: URL, request: Request, trusted: readonly string[]) {\n  let host: string;\n  try {\n    host = new URL(origin).host;\n  } catch {\n    return false;\n  }\n\n  if (host === url.host) return true;\n  // Behind a proxy that rewrites Host, the public host arrives here instead.\n  const forwarded = request.headers.get(\"x-forwarded-host\")?.split(\",\")[0]?.trim();\n  if (forwarded && host === forwarded) return true;\n\n  return trusted.some((entry) =>\n    entry.startsWith(\"*.\") ? host.endsWith(entry.slice(1)) : entry === origin,\n  );\n}\n\n/** CSRF: a cross-site form can neither send `application/json` without a preflight nor forge `Origin`. */\nfunction csrfCheck(request: Request, url: URL, trusted: readonly string[]): Response | null {\n  if (!isJsonContentType(request)) {\n    return json({ error: \"content-type must be application/json\" }, 415);\n  }\n\n  const origin = request.headers.get(\"origin\");\n  if (origin === null) return null;\n  if (origin === \"null\" || !originAllowed(origin, url, request, trusted)) return empty(403);\n\n  return null;\n}\n\nexport function createHandler(deps: HandlerDeps) {\n  const trustedOrigins = deps.trustedOrigins ?? [];\n  const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;\n\n  async function resolveUserId(request: Request): Promise<string | null | \"error\"> {\n    try {\n      return await deps.session.getUserId(request);\n    } catch (error) {\n      // A broken session lookup is a 500, never a 401. RFC 0002 §1.\n      deps.logger.error(\"session.getUserId threw\", { error });\n      return \"error\";\n    }\n  }\n\n  async function bearerMatches(request: Request, secret: string | undefined): Promise<boolean> {\n    if (!secret) return false;\n    const header = request.headers.get(\"authorization\") ?? \"\";\n    const presented = header.startsWith(\"Bearer \") ? header.slice(7) : header;\n    return timingSafeEqual(presented, secret);\n  }\n\n  async function handleCron(request: Request): Promise<Response> {\n    if (!deps.cronSecret) return empty(404);\n    if (!(await bearerMatches(request, deps.cronSecret))) return empty(401);\n\n    // Bounded so an overlapping scheduler does not hold a request open for the whole backlog.\n    const result = await deps.runner.drain(\n      deps.cronMaxSweeps === undefined ? {} : { maxSweeps: deps.cronMaxSweeps },\n    );\n    return json(result);\n  }\n\n  /** Plugin routes first; auth is enforced here so a plugin cannot forget it. */\n  async function handlePluginRoute(\n    route: RouteDefinition,\n    request: Request,\n    url: URL,\n  ): Promise<Response> {\n    if (route.scope.type === \"user\") {\n      if (request.method === \"POST\") {\n        const rejected = csrfCheck(request, url, trustedOrigins);\n        if (rejected) return rejected;\n      }\n\n      const userId = await resolveUserId(request);\n      if (userId === \"error\") return empty(500);\n      if (userId === null) return empty(401);\n      return harden(await route.handler({ request, userId, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"machine\") {\n      if (!deps.machineSecret) return empty(404);\n      if (!(await bearerMatches(request, deps.machineSecret))) return empty(401);\n      return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"signed\") {\n      const token =\n        url.searchParams.get(\"token\") ??\n        (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer /, \"\");\n\n      const claims = await verifyToken(deps.secret, token, route.scope.purpose);\n      // One response for every failure mode. RFC 0002 §5.\n      if (!claims) return empty(400);\n\n      return harden(await route.handler({ request, userId: claims.uid, claims, params: {} }));\n    }\n\n    return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n  }\n\n  async function route(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = routePath(url, deps.basePath);\n\n    if (deps.onRequest) {\n      const early = await deps.onRequest(request);\n      if (early instanceof Response) return early;\n    }\n\n    if (deps.rateLimit) {\n      const limited = deps.rateLimit(request);\n      if (limited) return limited;\n    }\n\n    if (path === \"/cron\") {\n      if (request.method !== \"POST\") return empty(405);\n      return handleCron(request);\n    }\n\n    const pluginRoute = deps.pluginRoutes?.find(\n      (candidate) => candidate.path === path && candidate.method === request.method,\n    );\n    if (pluginRoute) return handlePluginRoute(pluginRoute, request, url);\n\n    if (request.method === \"POST\") {\n      const rejected = csrfCheck(request, url, trustedOrigins);\n      if (rejected) return rejected;\n    }\n\n    const userId = await resolveUserId(request);\n    if (userId === \"error\") return empty(500);\n    if (userId === null) return empty(401);\n\n    if (request.method === \"GET\" && path === \"/events\") {\n      if (!deps.events) return empty(404);\n      // A session can open streams for free; without a cap one account can hold every socket.\n      if ((openStreams.get(userId) ?? 0) >= deps.events.maxStreamsPerUser) {\n        return json({ error: \"too many open event streams\" }, 429, { \"retry-after\": \"30\" });\n      }\n      if (totalStreams >= deps.events.maxStreams) {\n        return json({ error: \"event streams unavailable\" }, 503, { \"retry-after\": \"30\" });\n      }\n      return events(request, userId, deps.events);\n    }\n\n    if (request.method === \"GET\" && path === \"/\") {\n      const limitParam = Number(url.searchParams.get(\"limit\") ?? 20);\n      const limit = Number.isFinite(limitParam) ? Math.min(Math.max(limitParam, 1), 100) : 20;\n      const cursor = url.searchParams.get(\"cursor\");\n\n      // unseenCount rides on the first page only: a cursor request is scrollback, not a poll.\n      const [page, unseenCount] = await Promise.all([\n        deps.adapter.listNotifications({\n          userId,\n          limit,\n          ...(cursor ? { cursor } : {}),\n          ...(url.searchParams.get(\"unreadOnly\") === \"true\" ? { unreadOnly: true } : {}),\n        }),\n        cursor ? Promise.resolve(null) : deps.adapter.countUnseen(userId),\n      ]);\n\n      return json(unseenCount === null ? page : { ...page, unseenCount });\n    }\n\n    if (request.method === \"GET\" && path === \"/count\") {\n      return json({ unseen: await deps.adapter.countUnseen(userId) });\n    }\n\n    if (request.method === \"POST\" && path === \"/seen\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const before = typeof parsed.body.before === \"string\" ? new Date(parsed.body.before) : null;\n\n      // +1ms: Postgres keeps microseconds, an ISO string milliseconds; without it markSeen misses the newest row.\n      const cutoff =\n        before && !Number.isNaN(before.getTime()) ? new Date(before.getTime() + 1) : new Date();\n\n      await deps.adapter.markSeen(userId, cutoff);\n      deps.signals.publish(inboxChannel(userId));\n      return json({ ok: true });\n    }\n\n    if (request.method === \"POST\" && path === \"/read\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const ids = Array.isArray(parsed.body.ids)\n        ? parsed.body.ids.filter((id): id is string => typeof id === \"string\")\n        : [];\n      if (ids.length === 0) return json({ error: \"ids must be a non-empty string array\" }, 400);\n\n      if (ids.length > MAX_READ_IDS) {\n        return json({ error: `at most ${MAX_READ_IDS} ids per request` }, 400);\n      }\n\n      // 404, not 403: a 403 confirms the row exists. RFC 0002 §2.\n      const updated = await deps.adapter.markRead(userId, ids);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return updated === 0 ? empty(404) : json({ updated });\n    }\n\n    if (request.method === \"POST\" && path === \"/read-all\") {\n      const updated = await deps.adapter.markAllRead(userId);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return json({ updated });\n    }\n\n    return empty(404);\n  }\n\n  const openStreams = new Map<string, number>();\n  let totalStreams = 0;\n\n  const trackStream = (userId: string) => {\n    openStreams.set(userId, (openStreams.get(userId) ?? 0) + 1);\n    totalStreams += 1;\n    return () => {\n      const remaining = (openStreams.get(userId) ?? 1) - 1;\n      if (remaining > 0) openStreams.set(userId, remaining);\n      else openStreams.delete(userId);\n      totalStreams -= 1;\n    };\n  };\n\n  /** A change fingerprint cheap enough to take every probe interval. */\n  async function fingerprint(userId: string): Promise<string> {\n    const [page, unseen] = await Promise.all([\n      deps.adapter.listNotifications({ userId, limit: 1 }),\n      deps.adapter.countUnseen(userId),\n    ]);\n    const newest = page.notifications[0];\n    return `${newest?.id ?? \"\"}|${newest?.readAt ? 1 : 0}|${unseen}`;\n  }\n\n  // One probe per user, however many streams that user holds: N tabs must not mean N queries.\n  type Probe = { listeners: Set<() => void>; timer: ReturnType<typeof setInterval>; last?: string };\n  const probes = new Map<string, Probe>();\n\n  function subscribeProbe(userId: string, onChanged: () => void, intervalMs: number) {\n    let probe = probes.get(userId);\n    if (!probe) {\n      const created: Probe = {\n        listeners: new Set(),\n        timer: setInterval(() => {\n          fingerprint(userId)\n            .then((value) => {\n              if (created.last !== undefined && value !== created.last) {\n                for (const listener of created.listeners) listener();\n              }\n              created.last = value;\n            })\n            .catch((error) => deps.logger.error(\"events probe failed\", { error }));\n        }, intervalMs),\n      };\n      probe = created;\n      probes.set(userId, created);\n      fingerprint(userId)\n        .then((value) => {\n          if (created.last === undefined) created.last = value;\n        })\n        .catch(() => {});\n    }\n    probe.listeners.add(onChanged);\n    return () => {\n      const current = probes.get(userId);\n      if (!current) return;\n      current.listeners.delete(onChanged);\n      if (current.listeners.size === 0) {\n        clearInterval(current.timer);\n        probes.delete(userId);\n      }\n    };\n  }\n\n  /**\n   * Server-Sent Events: `ready` once, `changed` whenever this user's inbox\n   * moves, comments as keepalive. No payload ever travels on the stream; the\n   * client fetches the feed on `changed`. RFC 0006 §4D.\n   */\n  function events(request: Request, userId: string, settings: EventsSettings): Response {\n    const encoder = new TextEncoder();\n    const timers: ReturnType<typeof setInterval>[] = [];\n    const unsubscribes: (() => void)[] = [];\n    let closed = false;\n    let cleanup = () => {};\n\n    const stream = new ReadableStream<Uint8Array>(\n      {\n        start(controller) {\n          const write = (text: string) => {\n            if (closed) return;\n            // A consumer that stopped reading would make this queue grow without bound.\n            if (controller.desiredSize !== null && controller.desiredSize <= 0) {\n              cleanup();\n              return;\n            }\n            try {\n              controller.enqueue(encoder.encode(text));\n            } catch {\n              cleanup();\n            }\n          };\n          cleanup = () => {\n            if (closed) return;\n            closed = true;\n            for (const unsubscribe of unsubscribes) unsubscribe();\n            for (const timer of timers) clearInterval(timer);\n            try {\n              controller.close();\n            } catch {\n              // already closed by the consumer\n            }\n          };\n          const changed = () => write(\"event: changed\\ndata: {}\\n\\n\");\n\n          unsubscribes.push(trackStream(userId));\n          write(\"retry: 3000\\n\\nevent: ready\\ndata: {}\\n\\n\");\n          unsubscribes.push(deps.signals.subscribe(inboxChannel(userId), changed));\n          timers.push(setInterval(() => write(\": keepalive\\n\\n\"), settings.heartbeatMs));\n\n          if (!deps.signals.crossProcess && settings.probeIntervalMs > 0) {\n            unsubscribes.push(subscribeProbe(userId, changed, settings.probeIntervalMs));\n          }\n\n          if (settings.maxDurationMs > 0) {\n            timers.push(\n              setTimeout(cleanup, settings.maxDurationMs) as ReturnType<typeof setInterval>,\n            );\n          }\n          request.signal?.addEventListener(\"abort\", cleanup, { once: true });\n        },\n        cancel() {\n          cleanup();\n        },\n      },\n      { highWaterMark: STREAM_HIGH_WATER_MARK },\n    );\n\n    return new Response(stream, {\n      headers: {\n        \"content-type\": \"text/event-stream; charset=utf-8\",\n        \"cache-control\": \"no-cache, no-store\",\n        connection: \"keep-alive\",\n        \"x-accel-buffering\": \"no\",\n        \"x-content-type-options\": \"nosniff\",\n      },\n    });\n  }\n\n  async function handle(request: Request): Promise<Response> {\n    let response: Response | undefined;\n    try {\n      response = await route(request);\n      return response;\n    } catch (error) {\n      // A thrown driver error must not escape: unhandled rejection on Node, stack trace elsewhere.\n      deps.logger.error(\"request failed\", { url: request.url, error });\n      return empty(500);\n    } finally {\n      // Only a served request earns a sweep; anonymous 401s must not drive database work.\n      if (response && response.status < 400) deps.sweepOnRequest?.();\n    }\n  }\n\n  return {\n    handle,\n    GET: handle,\n    POST: handle,\n  };\n}\n","import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { MAX_BODY_BYTES } from \"../core/handler\";\n\n/** Adapts the web-standard handler to Node's http/Express signature. */\nexport type NodeHandler = (req: IncomingMessage, res: ServerResponse) => Promise<void>;\n\nexport type NodeHandlerOptions = {\n  /** Defaults to 64 KiB. Enforced here because this reads the raw stream, bypassing body-parser. */\n  maxBodyBytes?: number;\n  /** Called when the handler itself throws. Defaults to console.error; the response is already a 500. */\n  onError?: (error: unknown) => void;\n};\n\nclass BodyTooLargeError extends Error {}\n\nfunction readBody(req: IncomingMessage, maxBytes: number): Promise<Buffer | undefined> {\n  if (req.method === \"GET\" || req.method === \"HEAD\") return Promise.resolve(undefined);\n\n  const declared = Number(req.headers[\"content-length\"]);\n  if (Number.isFinite(declared) && declared > maxBytes) {\n    return Promise.reject(new BodyTooLargeError());\n  }\n\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let total = 0;\n    req.on(\"data\", (chunk: Buffer) => {\n      total += chunk.length;\n      if (total > maxBytes) {\n        req.destroy();\n        reject(new BodyTooLargeError());\n        return;\n      }\n      chunks.push(chunk);\n    });\n    req.on(\"end\", () => resolve(chunks.length ? Buffer.concat(chunks) : undefined));\n    req.on(\"error\", reject);\n  });\n}\n\nexport function toWebRequest(req: IncomingMessage, body?: Buffer, signal?: AbortSignal): Request {\n  // Behind a load balancer this is the only signal that the site is https.\n  const protocol = (req.headers[\"x-forwarded-proto\"] as string | undefined) ?? \"http\";\n  const host = req.headers.host ?? \"localhost\";\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) for (const item of value) headers.append(key, item);\n    else headers.set(key, value);\n  }\n\n  return new Request(`${protocol}://${host}${req.url ?? \"/\"}`, {\n    method: req.method ?? \"GET\",\n    headers,\n    ...(body ? { body: new Uint8Array(body) } : {}),\n    ...(signal ? { signal } : {}),\n  });\n}\n\nexport function toNodeHandler(\n  handler: (request: Request) => Promise<Response>,\n  options: NodeHandlerOptions = {},\n): NodeHandler {\n  const maxBodyBytes = options.maxBodyBytes ?? MAX_BODY_BYTES;\n  const onError = options.onError ?? ((error: unknown) => console.error(\"[easy-ping]\", error));\n\n  return async (req, res) => {\n    // A client that goes away aborts the request, so an open event stream cleans up.\n    const disconnect = new AbortController();\n    res.on(\"close\", () => disconnect.abort());\n\n    try {\n      const body = await readBody(req, maxBodyBytes);\n      const response = await handler(toWebRequest(req, body, disconnect.signal));\n\n      res.statusCode = response.status;\n      // forEach: Headers is only iterable with \"DOM.Iterable\" in lib.\n      response.headers.forEach((value, key) => {\n        res.setHeader(key, value);\n      });\n\n      if (!response.body) {\n        res.end();\n        return;\n      }\n\n      // Streamed, never buffered: GET /events stays open and every chunk must reach the client now.\n      res.flushHeaders();\n      const reader = response.body.getReader();\n      const cancel = () => reader.cancel().catch(() => {});\n      disconnect.signal.addEventListener(\"abort\", cancel, { once: true });\n      try {\n        for (;;) {\n          const { done, value } = await reader.read();\n          if (done) break;\n          if (!res.write(value)) await new Promise((resolve) => res.once(\"drain\", resolve));\n        }\n      } finally {\n        disconnect.signal.removeEventListener(\"abort\", cancel);\n      }\n      res.end();\n    } catch (error) {\n      // Respond and swallow: a rethrow is an unhandled rejection under Express.\n      if (!res.headersSent) res.statusCode = error instanceof BodyTooLargeError ? 413 : 500;\n      res.end();\n      if (!(error instanceof BodyTooLargeError)) onError(error);\n    }\n  };\n}\n"]}

package/dist/node.js

@@ -1,4 +1,4 @@
-import { MAX_BODY_BYTES } from './chunk-USQ6CQTJ.js';
+import { MAX_BODY_BYTES } from './chunk-JOVIZXO6.js';
 import './chunk-ORZKH224.js';
 import './chunk-PTGHMCCG.js';
 

package/dist/{plugin-Cg9usuUi.d.ts → plugin-CSLKKgXT.d.ts}

@@ -1,4 +1,4 @@
-import { R as Recipient, C as Channel, f as DeliveryOutcome, k as PluginStore } from './adapter-D3lTy-4E.js';
+import { R as Recipient, C as Channel, f as DeliveryOutcome, k as PluginStore } from './adapter-BJ8Iejvs.js';
 
 declare class EasyPingError extends Error {
     constructor(message: string);

package/dist/{plugin-CHd2ZiGC.d.cts → plugin-Wwp1nvo0.d.cts}

@@ -1,4 +1,4 @@
-import { R as Recipient, C as Channel, f as DeliveryOutcome, k as PluginStore } from './adapter-D3lTy-4E.cjs';
+import { R as Recipient, C as Channel, f as DeliveryOutcome, k as PluginStore } from './adapter-BJ8Iejvs.cjs';
 
 declare class EasyPingError extends Error {
     constructor(message: string);

package/dist/plugins/digests.d.cts

@@ -1,5 +1,5 @@
-import { h as EasyPingPlugin } from '../plugin-CHd2ZiGC.cjs';
-import '../adapter-D3lTy-4E.cjs';
+import { h as EasyPingPlugin } from '../plugin-Wwp1nvo0.cjs';
+import '../adapter-BJ8Iejvs.cjs';
 
 type DigestWindow = "daily" | "weekly";
 type LocalMoment = {

package/dist/plugins/digests.d.ts

@@ -1,5 +1,5 @@
-import { h as EasyPingPlugin } from '../plugin-Cg9usuUi.js';
-import '../adapter-D3lTy-4E.js';
+import { h as EasyPingPlugin } from '../plugin-CSLKKgXT.js';
+import '../adapter-BJ8Iejvs.js';
 
 type DigestWindow = "daily" | "weekly";
 type LocalMoment = {

package/dist/plugins/preferences-client.d.cts

@@ -1,5 +1,5 @@
-import { f as ClientPlugin } from '../plugin-CHd2ZiGC.cjs';
-import { C as Channel, F as Frequency } from '../adapter-D3lTy-4E.cjs';
+import { f as ClientPlugin } from '../plugin-Wwp1nvo0.cjs';
+import { C as Channel, F as Frequency } from '../adapter-BJ8Iejvs.cjs';
 
 type PreferenceView = {
     userId: string;

package/dist/plugins/preferences-client.d.ts

@@ -1,5 +1,5 @@
-import { f as ClientPlugin } from '../plugin-Cg9usuUi.js';
-import { C as Channel, F as Frequency } from '../adapter-D3lTy-4E.js';
+import { f as ClientPlugin } from '../plugin-CSLKKgXT.js';
+import { C as Channel, F as Frequency } from '../adapter-BJ8Iejvs.js';
 
 type PreferenceView = {
     userId: string;

package/dist/plugins/preferences-react.d.cts

@@ -1,4 +1,4 @@
-type Channel = "inApp" | "email" | "push" | "sms" | "slack";
+type Channel = "inApp" | "email" | "push" | "telegram" | "sms" | "slack";
 type Frequency = "instant" | "daily" | "weekly" | "off";
 
 type PreferenceView = {

package/dist/plugins/preferences-react.d.ts

@@ -1,4 +1,4 @@
-type Channel = "inApp" | "email" | "push" | "sms" | "slack";
+type Channel = "inApp" | "email" | "push" | "telegram" | "sms" | "slack";
 type Frequency = "instant" | "daily" | "weekly" | "off";
 
 type PreferenceView = {

package/dist/plugins/preferences.cjs

@@ -43,9 +43,9 @@ var PRIVATE_HEADERS = {
   "cache-control": "private, no-store",
   "x-content-type-options": "nosniff"
 };
-var json = (body, status = 200) => new Response(JSON.stringify(body), {
+var json = (body, status = 200, headers = {}) => new Response(JSON.stringify(body), {
   status,
-  headers: { "content-type": "application/json", ...PRIVATE_HEADERS }
+  headers: { "content-type": "application/json", ...PRIVATE_HEADERS, ...headers }
 });
 new TextEncoder();
 async function readJsonBody(request, maxBytes = MAX_BODY_BYTES) {
@@ -87,7 +87,7 @@ async function readJsonBody(request, maxBytes = MAX_BODY_BYTES) {
 // src/plugins/preferences/index.ts
 var UNSUBSCRIBE_PURPOSE = "unsubscribe";
 var TABLE = "notification_preference";
-var CHANNELS = ["inApp", "email", "push", "sms", "slack"];
+var CHANNELS = ["inApp", "email", "push", "telegram", "sms", "slack"];
 var FREQUENCIES = ["instant", "daily", "weekly", "off"];
 var isChannel = (value) => CHANNELS.includes(value);
 var isFrequency = (value) => FREQUENCIES.includes(value);