easy-ping 0.8.1 → 0.10.0

package/dist/plugins/mobile-push.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/handler.ts","../../src/plugins/mobile-push/index.ts"],"names":[],"mappings":";;;AA+CO,IAAM,iBAAiB,EAAA,GAAK,IAAA;AAKnC,IAAM,eAAA,GAA0C;AAAA,EAC9C,eAAA,EAAiB,mBAAA;AAAA,EACjB,wBAAA,EAA0B;AAC5B,CAAA;AAEA,IAAM,IAAA,GAAO,CAAC,IAAA,EAAe,MAAA,GAAS,GAAA,EAAK,OAAA,GAAkC,EAAC,KAC5E,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG;AAAA,EACjC,MAAA;AAAA,EACA,SAAS,EAAE,cAAA,EAAgB,oBAAoB,GAAG,eAAA,EAAiB,GAAG,OAAA;AACxE,CAAC,CAAA;AAiBa,IAAI,WAAA;AAyBpB,eAAsB,YAAA,CACpB,OAAA,EACA,QAAA,GAAmB,cAAA,EACA;AACnB,EAAA,MAAM,QAAA,GAAW,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,aAAA,EAAgB,QAAQ,CAAA,MAAA,CAAA,EAAS,EAAG,GAAG,CAAA,EAAE,CAAA;AAExF,EAAA,MAAM,WAAW,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAC,CAAA;AAC7D,EAAA,IAAI,OAAO,QAAA,CAAS,QAAQ,KAAK,QAAA,GAAW,QAAA,SAAiB,QAAA,EAAS;AACtE,EAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,SAAa,EAAE,IAAA,EAAM,EAAC,EAAE;AAErC,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAU;AACtC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,WAAS;AACP,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,KAAA,IAAS,KAAA,CAAM,UAAA;AACf,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,MAAM,OAAO,MAAA,EAAO;AACpB,MAAA,OAAO,QAAA,EAAS;AAAA,IAClB;AACA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,KAAK,CAAA;AAClC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,KAAA,CAAM,GAAA,CAAI,OAAO,MAAM,CAAA;AACvB,IAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAAA,EAClB;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,MAAK,KAAM,EAAA,SAAW,EAAE,IAAA,EAAM,EAAC,EAAE;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACvC,IAAA,OAAO;AAAA,MACL,IAAA,EACE,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GACxD,MAAA,GACD;AAAC,KACT;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,OAAO,IAAA,CAAK,EAAE,OAAO,4BAAA,EAA6B,EAAG,GAAG,CAAA,EAAE;AAAA,EACrE;AACF;;;AC1IA,IAAM,MAAA,GAAS,iCAAA;AACf,IAAM,MAAA,GAAS,iCAAA;AAgCf,IAAM,SAAA,GAA2C,CAAC,KAAA,EAAO,SAAA,EAAW,KAAK,CAAA;AAGlE,IAAM,gBAAA,GAAmB;AAAA,EAC9B,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACxC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC7B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,YAAY,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC/D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,QAAQ,CAAA,EAAG,MAAM,6BAAA,EAA8B;AAAA;AAAA,MAEtD,EAAE,IAAI,CAAC,OAAO,GAAG,MAAA,EAAQ,IAAA,EAAM,MAAM,8BAAA;AAA+B;AACtE,GACF;AAAA,EACA,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,CAAC,WAAW,CAAA,EAAG,IAAA,EAAM,gCAAA,EAAkC;AAAA;AAE3E;AAEA,IAAM,WAAA,GAAc,CAAC,KAAA,KAA4B;AAC/C,EAAA,MAAM,OAAQ,KAAA,EAA8B,IAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,IAAA,EAAO,OAAO,IAAA;AAC/C,EAAA,MAAM,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAClE,EAAA,OAAO,mBAAA,CAAoB,KAAK,IAAI,CAAA;AACtC,CAAA;AAaO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,IAAI,GAAA;AACJ,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,GAAA;AACjD,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,CAAQ,qBAAqB,EAAE,CAAA;AAE9D,EAAA,eAAe,aAAA,GAAgB;AAC7B,IAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,QAAA,SAAiB,EAAE,OAAA,EAAS,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAE;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,MAC9B,MAAA;AAAA,MACA,EAAC;AAAA,MACD,EAAE,SAAS,EAAE,KAAA,EAAO,aAAa,SAAA,EAAW,KAAA,EAAM,EAAG,KAAA,EAAO,GAAA;AAAK,KACnE;AACA,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,QAAQ,CAAA,EAAE;AAEzD,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAC,CAAA;AACnF,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,QAAQ,CAAC,CAAC,CAAA;AAC9E,IAAA,MAAM,OAAO,QAAA,CAAS,OAAA;AAAA,MAAQ,CAAC,OAAA,KAC7B,CAAC,OAAA,CAAQ,MAAM,OAAA,CAAQ,IAAA,GAAO,CAAC,QAAA,CAAS,IAAI,OAAA,CAAQ,QAAQ,CAAA,IAAK,EAAE,IAAI;AAAC,KAC1E;AACA,IAAA,MAAM,UAAU,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY,QAAQ,QAAQ,CAAA;AAE1D,IAAA,IAAI,KAAK,MAAA,GAAS,CAAA,EAAG,MAAM,GAAA,CAAI,MAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,IAAA,CAAK,OAAO,OAAO,CAAA,IAAK,CAAA;AACxF,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,IAAW,CAAA;AAE9E,IAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,KAAK,IAAS,CAAA;AACnD,IAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,WAAW,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAE5D,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,KAAK,MAAA,EAAO;AAAA,EACxD;AAEA,EAAA,MAAM,MAAA,GAA4B;AAAA,IAChC;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AAErC,QAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAU,UAAA,KAAe,MAAA,CAAO,IAAA;AAK/C,QAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,QAAQ,QAAA,CAAS,YAAA,CAAa,KAAK,CAAA,EAAG;AACtE,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,qBAAA,EAAwB,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,WAAA,CAAA,EAAc;AAAA,YACpE,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,SAAA,CAAU,QAAA,CAAS,QAA8B,CAAA,EAAG;AACvF,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,wBAAA,EAA2B,UAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,EAAG;AAAA,YAC3D,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,OAAO,UAAA,KAAe,QAAA,GAAW,WAAW,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,GAAI,IAAA;AACzE,QAAA,MAAM,QAAQ,MAAA,IAAU,EAAA;AACxB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAGrB,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,MAAM,IAAI,KAAA,CAAM,IAAA,CAAuB,MAAA,EAAQ,EAAE,KAAA,EAAM,EAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AACzF,QAAA,IAAI,QAAA,IAAY,QAAA,CAAS,MAAA,KAAW,KAAA,EAAO;AACzC,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,YAClD,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,MAAM,IAAI,KAAA,CAAM,MAAA;AAAA,YACd,MAAA;AAAA,YACA,EAAE,EAAA,EAAI,QAAA,CAAS,EAAA,EAAG;AAAA,YAClB,EAAE,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,YAAY,GAAA;AAAI,WAChD;AACA,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,QACnC;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,QAAQ,KAAA,EAAM;AAAA,UAChB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,OAAM;AAAE,SACvD;AACA,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,GAAS,UAAA,GAAa,CAAA;AAC7C,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAA;AAAE,WAC/D,CAAA;AAAA,QACH;AACA,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B;AAAA,cACE,EAAA,EAAI,OAAO,UAAA,EAAW;AAAA,cACtB,MAAA,EAAQ,KAAA;AAAA,cACR,KAAA;AAAA,cACA,QAAA;AAAA,cACA,UAAA,EAAY,IAAA;AAAA,cACZ,SAAA,EAAW,GAAA;AAAA,cACX,UAAA,EAAY;AAAA;AACd,WACD,CAAA;AAAA,QACH,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,YAAA,OAAO,QAAA,CAAS,IAAA;AAAA,cACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,cAClD,EAAE,QAAQ,GAAA;AAAI,aAChB;AAAA,UACF;AACA,UAAA,MAAM,KAAA;AAAA,QACR;AACA,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACnC;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAG;AAAA,UACvB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,QAAO;AAAE,SACxD;AACA,QAAA,OAAO,SAAS,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY;AAAA,YAChC,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,YAAY,MAAA,CAAO,UAAA;AAAA;AAAA,YAEnB,WAAA,EAAa,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,EAAE,CAAA;AAAA,YAClC,UAAA,EAAY,MAAA,CAAO,UAAA,CAAW,WAAA;AAAY,WAC5C,CAAE;AAAA,SACH,CAAA;AAAA,MACH;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,6BAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,QAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAA,CAAO,IAAA;AACzB,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,EAAA,EAAI;AAC7C,UAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,qBAAoB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,QACtE;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAI,KAAA,EAAO,CAAA;AAC9E,QAAA,OAAO,OAAA,KAAY,CAAA,GAAI,IAAI,QAAA,CAAS,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAI,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACzF;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,uBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY,QAAA,CAAS,IAAA,CAAK,MAAM,eAAe;AAAA,KAC1D;AAAA,IACA;AAAA,MACE,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY;AACnB,QAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,iBAAiB,KAAU,CAAA;AAChE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,UAAA,EAAY,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAC7E,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAA,EAAS,CAAA;AAAA,MAClC;AAAA;AACF,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,YAAA;AAAA,IACJ,QAAA,EAAU,CAAC,YAAY,CAAA;AAAA,IACvB,MAAA,EAAQ,gBAAA;AAAA,IAER,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,OAAO,OAAA,KAAsD;AACpE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,KAAuB,MAAA,EAAQ;AAAA,UAC7D,MAAA,EAAQ,QAAQ,YAAA,CAAa;AAAA,SAC9B,CAAA;AACD,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,QAAQ,uBAAA,EAAwB;AAEtF,QAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO;AAAA,UAC9B,IAAA,EAAM,QAAQ,YAAA,CAAa,IAAA;AAAA,UAC3B,OAAA,EAAS,QAAQ,YAAA,CAAa;AAAA,SAC/B,CAAA;AACD,QAAA,MAAM,IAAA,GAAO;AAAA,UACX,GAAG,QAAA,CAAS,IAAA;AAAA,UACZ,cAAA,EAAgB,QAAQ,YAAA,CAAa,EAAA;AAAA,UACrC,IAAA,EAAM,QAAQ,YAAA,CAAa;AAAA,SAC7B;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,IAAA;AAAA,UACrC,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY,EAAE,GAAG,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,CAAE,CAAA;AAAA,UACpE,OAAA,CAAQ;AAAA,SACV;AAEA,QAAA,MAAM,QAAkB,EAAC;AACzB,QAAA,MAAM,WAAgE,EAAC;AACvE,QAAA,IAAI,SAAA,GAAY,CAAA;AAChB,QAAA,IAAI,SAAA,GAAY,KAAA;AAChB,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAErB,QAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,MAAA,EAAQ,KAAA,KAAU;AACjC,UAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,UAAA,IAAI,CAAC,MAAA,EAAQ;AACb,UAAA,IAAI,OAAO,EAAA,EAAI;AACb,YAAA,SAAA,IAAa,CAAA;AACb,YAAA,IAAI,MAAA,CAAO,QAAA;AACT,cAAA,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,CAAO,QAAA,EAAU,UAAU,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,GAAA,EAAK,CAAA;AAC5E,YAAA;AAAA,UACF;AACA,UAAA,SAAA,GAAY,MAAA,CAAO,KAAA;AACnB,UAAA,IAAI,MAAA,CAAO,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,eAAA,IAC5B,MAAA,CAAO,WAAW,SAAA,GAAY,IAAA;AAAA,QACzC,CAAC,CAAA;AAED,QAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,IAAS,CAAA;AAC1E,QAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,OAAA,CAAQ,SAAS,QAAA,EAAU;AAEpD,UAAA,MAAM,GAAA,CAAI,KAAA,CACP,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA,CACvB,KAAA;AAAA,YAAM,CAAC,UACN,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,uCAAA,EAA0C,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE;AAAA,WAC3E;AAAA,QACJ;AAEA,QAAA,IAAI,SAAA,GAAY,CAAA,EAAG,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC3C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,CAAQ,MAAA,EAAQ;AACnC,UAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,4BAAA,EAA8B,WAAW,KAAA,EAAM;AAAA,QACnF;AACA,QAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,SAAA,IAAa,+BAA+B,SAAA,EAAU;AAAA,MAC1F;AAAA,KACF;AAAA,IAEA,MAAA;AAAA,IACA;AAAA,GACF;AACF","file":"mobile-push.cjs","sourcesContent":["import type { DatabaseAdapter } from \"./adapter\";\nimport type { SessionConfig } from \"./config\";\nimport type { Logger } from \"./errors\";\nimport type { Promisable, RouteDefinition } from \"./plugin\";\nimport type { Runner } from \"./runner\";\nimport { inboxChannel, type Signals } from \"./signals\";\nimport { verifyToken } from \"./tokens\";\n\nexport type EventsSettings = {\n  heartbeatMs: number;\n  probeIntervalMs: number;\n  maxDurationMs: number;\n  maxStreamsPerUser: number;\n  maxStreams: number;\n};\n\n/** Unread chunks a stream may hold before it is closed on a consumer that stopped reading. */\nconst STREAM_HIGH_WATER_MARK = 256;\n\nexport type HandlerDeps = {\n  adapter: DatabaseAdapter;\n  session: SessionConfig;\n  runner: Runner;\n  logger: Logger;\n  basePath: string;\n  secret: string;\n  signals: Signals;\n  /** `false` unmounts GET /events. */\n  events: EventsSettings | false;\n  /** Fire-and-forget delivery pass after a request. Rate-limited by the instance. */\n  sweepOnRequest?: (() => void) | undefined;\n  cronSecret?: string | undefined;\n  /** Guards plugin machine routes. The instance defaults it to cronSecret. */\n  machineSecret?: string | undefined;\n  cronMaxSweeps?: number | undefined;\n  pluginRoutes?: readonly RouteDefinition[] | undefined;\n  /** Returns a 429 to send, or null to proceed. Runs after onRequest, before routing. */\n  rateLimit?: ((request: Request) => Response | null) | undefined;\n  /** Origins other than the request's own host that may POST. `*.example.com` allowed. */\n  trustedOrigins?: readonly string[] | undefined;\n  /** Runs before routing. Returning a Response short-circuits; use it for rate limiting. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: ((request: Request) => Promisable<Response | undefined | void>) | undefined;\n  maxBodyBytes?: number | undefined;\n};\n\n/** Every JSON body is capped here. Nothing legitimate the routes accept is bigger. */\nexport const MAX_BODY_BYTES = 64 * 1024;\n\nconst MAX_READ_IDS = 200;\n\n// Per-user data: no shared caching, no sniffing.\nconst PRIVATE_HEADERS: Record<string, string> = {\n  \"cache-control\": \"private, no-store\",\n  \"x-content-type-options\": \"nosniff\",\n};\n\nconst json = (body: unknown, status = 200, headers: Record<string, string> = {}) =>\n  new Response(JSON.stringify(body), {\n    status,\n    headers: { \"content-type\": \"application/json\", ...PRIVATE_HEADERS, ...headers },\n  });\n\nconst empty = (status: number) => new Response(null, { status, headers: PRIVATE_HEADERS });\n\n/** Plugin responses get the same headers, without touching their body. */\nfunction harden(response: Response): Response {\n  const headers = new Headers(response.headers);\n  for (const [name, value] of Object.entries(PRIVATE_HEADERS)) {\n    if (!headers.has(name)) headers.set(name, value);\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n\nconst encoder = new TextEncoder();\n\n/** Constant time over SHA-256 digests, so neither content nor length leaks. Works on edge runtimes. */\nasync function timingSafeEqual(a: string, b: string): Promise<boolean> {\n  const [left, right] = await Promise.all(\n    [a, b].map(\n      async (value) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", encoder.encode(value))),\n    ),\n  );\n  let diff = 0;\n  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);\n  return diff === 0;\n}\n\n/** Anchored at a segment boundary: `/foo/api/notifications/cron` is not a cron request. */\nfunction routePath(url: URL, basePath: string): string {\n  const { pathname } = url;\n  if (pathname === basePath) return \"/\";\n  if (pathname.startsWith(`${basePath}/`)) return pathname.slice(basePath.length);\n  return pathname;\n}\n\nexport type JsonBody = { body: Record<string, unknown> } | { error: Response };\n\n/** Reads a JSON object body with a streaming byte cap. Malformed JSON is 400; an empty body is `{}`. */\nexport async function readJsonBody(\n  request: Request,\n  maxBytes: number = MAX_BODY_BYTES,\n): Promise<JsonBody> {\n  const tooLarge = () => ({ error: json({ error: `body exceeds ${maxBytes} bytes` }, 413) });\n\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > maxBytes) return tooLarge();\n  if (!request.body) return { body: {} };\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      return tooLarge();\n    }\n    chunks.push(value);\n  }\n\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  const text = new TextDecoder().decode(bytes);\n  if (text.trim() === \"\") return { body: {} };\n\n  try {\n    const parsed: unknown = JSON.parse(text);\n    return {\n      body:\n        parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : {},\n    };\n  } catch {\n    return { error: json({ error: \"body must be a JSON object\" }, 400) };\n  }\n}\n\nconst isJsonContentType = (request: Request) =>\n  /^application\\/json\\s*(;|$)/i.test((request.headers.get(\"content-type\") ?? \"\").trim());\n\nfunction originAllowed(origin: string, url: URL, request: Request, trusted: readonly string[]) {\n  let host: string;\n  try {\n    host = new URL(origin).host;\n  } catch {\n    return false;\n  }\n\n  if (host === url.host) return true;\n  // Behind a proxy that rewrites Host, the public host arrives here instead.\n  const forwarded = request.headers.get(\"x-forwarded-host\")?.split(\",\")[0]?.trim();\n  if (forwarded && host === forwarded) return true;\n\n  return trusted.some((entry) =>\n    entry.startsWith(\"*.\") ? host.endsWith(entry.slice(1)) : entry === origin,\n  );\n}\n\n/** CSRF: a cross-site form can neither send `application/json` without a preflight nor forge `Origin`. */\nfunction csrfCheck(request: Request, url: URL, trusted: readonly string[]): Response | null {\n  if (!isJsonContentType(request)) {\n    return json({ error: \"content-type must be application/json\" }, 415);\n  }\n\n  const origin = request.headers.get(\"origin\");\n  if (origin === null) return null;\n  if (origin === \"null\" || !originAllowed(origin, url, request, trusted)) return empty(403);\n\n  return null;\n}\n\nexport function createHandler(deps: HandlerDeps) {\n  const trustedOrigins = deps.trustedOrigins ?? [];\n  const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;\n\n  async function resolveUserId(request: Request): Promise<string | null | \"error\"> {\n    try {\n      return await deps.session.getUserId(request);\n    } catch (error) {\n      // A broken session lookup is a 500, never a 401. RFC 0002 §1.\n      deps.logger.error(\"session.getUserId threw\", { error });\n      return \"error\";\n    }\n  }\n\n  async function bearerMatches(request: Request, secret: string | undefined): Promise<boolean> {\n    if (!secret) return false;\n    const header = request.headers.get(\"authorization\") ?? \"\";\n    const presented = header.startsWith(\"Bearer \") ? header.slice(7) : header;\n    return timingSafeEqual(presented, secret);\n  }\n\n  async function handleCron(request: Request): Promise<Response> {\n    if (!deps.cronSecret) return empty(404);\n    if (!(await bearerMatches(request, deps.cronSecret))) return empty(401);\n\n    // Bounded so an overlapping scheduler does not hold a request open for the whole backlog.\n    const result = await deps.runner.drain(\n      deps.cronMaxSweeps === undefined ? {} : { maxSweeps: deps.cronMaxSweeps },\n    );\n    return json(result);\n  }\n\n  /** Plugin routes first; auth is enforced here so a plugin cannot forget it. */\n  async function handlePluginRoute(\n    route: RouteDefinition,\n    request: Request,\n    url: URL,\n  ): Promise<Response> {\n    if (route.scope.type === \"user\") {\n      if (request.method === \"POST\") {\n        const rejected = csrfCheck(request, url, trustedOrigins);\n        if (rejected) return rejected;\n      }\n\n      const userId = await resolveUserId(request);\n      if (userId === \"error\") return empty(500);\n      if (userId === null) return empty(401);\n      return harden(await route.handler({ request, userId, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"machine\") {\n      if (!deps.machineSecret) return empty(404);\n      if (!(await bearerMatches(request, deps.machineSecret))) return empty(401);\n      return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"signed\") {\n      const token =\n        url.searchParams.get(\"token\") ??\n        (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer /, \"\");\n\n      const claims = await verifyToken(deps.secret, token, route.scope.purpose);\n      // One response for every failure mode. RFC 0002 §5.\n      if (!claims) return empty(400);\n\n      return harden(await route.handler({ request, userId: claims.uid, claims, params: {} }));\n    }\n\n    return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n  }\n\n  async function route(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = routePath(url, deps.basePath);\n\n    if (deps.onRequest) {\n      const early = await deps.onRequest(request);\n      if (early instanceof Response) return early;\n    }\n\n    if (deps.rateLimit) {\n      const limited = deps.rateLimit(request);\n      if (limited) return limited;\n    }\n\n    if (path === \"/cron\") {\n      if (request.method !== \"POST\") return empty(405);\n      return handleCron(request);\n    }\n\n    const pluginRoute = deps.pluginRoutes?.find(\n      (candidate) => candidate.path === path && candidate.method === request.method,\n    );\n    if (pluginRoute) return handlePluginRoute(pluginRoute, request, url);\n\n    if (request.method === \"POST\") {\n      const rejected = csrfCheck(request, url, trustedOrigins);\n      if (rejected) return rejected;\n    }\n\n    const userId = await resolveUserId(request);\n    if (userId === \"error\") return empty(500);\n    if (userId === null) return empty(401);\n\n    if (request.method === \"GET\" && path === \"/events\") {\n      if (!deps.events) return empty(404);\n      // A session can open streams for free; without a cap one account can hold every socket.\n      if ((openStreams.get(userId) ?? 0) >= deps.events.maxStreamsPerUser) {\n        return json({ error: \"too many open event streams\" }, 429, { \"retry-after\": \"30\" });\n      }\n      if (totalStreams >= deps.events.maxStreams) {\n        return json({ error: \"event streams unavailable\" }, 503, { \"retry-after\": \"30\" });\n      }\n      return events(request, userId, deps.events);\n    }\n\n    if (request.method === \"GET\" && path === \"/\") {\n      const limitParam = Number(url.searchParams.get(\"limit\") ?? 20);\n      const limit = Number.isFinite(limitParam) ? Math.min(Math.max(limitParam, 1), 100) : 20;\n      const cursor = url.searchParams.get(\"cursor\");\n\n      // unseenCount rides on the first page only: a cursor request is scrollback, not a poll.\n      const [page, unseenCount] = await Promise.all([\n        deps.adapter.listNotifications({\n          userId,\n          limit,\n          ...(cursor ? { cursor } : {}),\n          ...(url.searchParams.get(\"unreadOnly\") === \"true\" ? { unreadOnly: true } : {}),\n        }),\n        cursor ? Promise.resolve(null) : deps.adapter.countUnseen(userId),\n      ]);\n\n      return json(unseenCount === null ? page : { ...page, unseenCount });\n    }\n\n    if (request.method === \"GET\" && path === \"/count\") {\n      return json({ unseen: await deps.adapter.countUnseen(userId) });\n    }\n\n    if (request.method === \"POST\" && path === \"/seen\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const before = typeof parsed.body.before === \"string\" ? new Date(parsed.body.before) : null;\n\n      // +1ms: Postgres keeps microseconds, an ISO string milliseconds; without it markSeen misses the newest row.\n      const cutoff =\n        before && !Number.isNaN(before.getTime()) ? new Date(before.getTime() + 1) : new Date();\n\n      await deps.adapter.markSeen(userId, cutoff);\n      deps.signals.publish(inboxChannel(userId));\n      return json({ ok: true });\n    }\n\n    if (request.method === \"POST\" && path === \"/read\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const ids = Array.isArray(parsed.body.ids)\n        ? parsed.body.ids.filter((id): id is string => typeof id === \"string\")\n        : [];\n      if (ids.length === 0) return json({ error: \"ids must be a non-empty string array\" }, 400);\n\n      if (ids.length > MAX_READ_IDS) {\n        return json({ error: `at most ${MAX_READ_IDS} ids per request` }, 400);\n      }\n\n      // 404, not 403: a 403 confirms the row exists. RFC 0002 §2.\n      const updated = await deps.adapter.markRead(userId, ids);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return updated === 0 ? empty(404) : json({ updated });\n    }\n\n    if (request.method === \"POST\" && path === \"/read-all\") {\n      const updated = await deps.adapter.markAllRead(userId);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return json({ updated });\n    }\n\n    return empty(404);\n  }\n\n  const openStreams = new Map<string, number>();\n  let totalStreams = 0;\n\n  const trackStream = (userId: string) => {\n    openStreams.set(userId, (openStreams.get(userId) ?? 0) + 1);\n    totalStreams += 1;\n    return () => {\n      const remaining = (openStreams.get(userId) ?? 1) - 1;\n      if (remaining > 0) openStreams.set(userId, remaining);\n      else openStreams.delete(userId);\n      totalStreams -= 1;\n    };\n  };\n\n  /** A change fingerprint cheap enough to take every probe interval. */\n  async function fingerprint(userId: string): Promise<string> {\n    const [page, unseen] = await Promise.all([\n      deps.adapter.listNotifications({ userId, limit: 1 }),\n      deps.adapter.countUnseen(userId),\n    ]);\n    const newest = page.notifications[0];\n    return `${newest?.id ?? \"\"}|${newest?.readAt ? 1 : 0}|${unseen}`;\n  }\n\n  // One probe per user, however many streams that user holds: N tabs must not mean N queries.\n  type Probe = { listeners: Set<() => void>; timer: ReturnType<typeof setInterval>; last?: string };\n  const probes = new Map<string, Probe>();\n\n  function subscribeProbe(userId: string, onChanged: () => void, intervalMs: number) {\n    let probe = probes.get(userId);\n    if (!probe) {\n      const created: Probe = {\n        listeners: new Set(),\n        timer: setInterval(() => {\n          fingerprint(userId)\n            .then((value) => {\n              if (created.last !== undefined && value !== created.last) {\n                for (const listener of created.listeners) listener();\n              }\n              created.last = value;\n            })\n            .catch((error) => deps.logger.error(\"events probe failed\", { error }));\n        }, intervalMs),\n      };\n      probe = created;\n      probes.set(userId, created);\n      fingerprint(userId)\n        .then((value) => {\n          if (created.last === undefined) created.last = value;\n        })\n        .catch(() => {});\n    }\n    probe.listeners.add(onChanged);\n    return () => {\n      const current = probes.get(userId);\n      if (!current) return;\n      current.listeners.delete(onChanged);\n      if (current.listeners.size === 0) {\n        clearInterval(current.timer);\n        probes.delete(userId);\n      }\n    };\n  }\n\n  /**\n   * Server-Sent Events: `ready` once, `changed` whenever this user's inbox\n   * moves, comments as keepalive. No payload ever travels on the stream; the\n   * client fetches the feed on `changed`. RFC 0006 §4D.\n   */\n  function events(request: Request, userId: string, settings: EventsSettings): Response {\n    const encoder = new TextEncoder();\n    const timers: ReturnType<typeof setInterval>[] = [];\n    const unsubscribes: (() => void)[] = [];\n    let closed = false;\n    let cleanup = () => {};\n\n    const stream = new ReadableStream<Uint8Array>(\n      {\n        start(controller) {\n          const write = (text: string) => {\n            if (closed) return;\n            // A consumer that stopped reading would make this queue grow without bound.\n            if (controller.desiredSize !== null && controller.desiredSize <= 0) {\n              cleanup();\n              return;\n            }\n            try {\n              controller.enqueue(encoder.encode(text));\n            } catch {\n              cleanup();\n            }\n          };\n          cleanup = () => {\n            if (closed) return;\n            closed = true;\n            for (const unsubscribe of unsubscribes) unsubscribe();\n            for (const timer of timers) clearInterval(timer);\n            try {\n              controller.close();\n            } catch {\n              // already closed by the consumer\n            }\n          };\n          const changed = () => write(\"event: changed\\ndata: {}\\n\\n\");\n\n          unsubscribes.push(trackStream(userId));\n          write(\"retry: 3000\\n\\nevent: ready\\ndata: {}\\n\\n\");\n          unsubscribes.push(deps.signals.subscribe(inboxChannel(userId), changed));\n          timers.push(setInterval(() => write(\": keepalive\\n\\n\"), settings.heartbeatMs));\n\n          if (!deps.signals.crossProcess && settings.probeIntervalMs > 0) {\n            unsubscribes.push(subscribeProbe(userId, changed, settings.probeIntervalMs));\n          }\n\n          if (settings.maxDurationMs > 0) {\n            timers.push(\n              setTimeout(cleanup, settings.maxDurationMs) as ReturnType<typeof setInterval>,\n            );\n          }\n          request.signal?.addEventListener(\"abort\", cleanup, { once: true });\n        },\n        cancel() {\n          cleanup();\n        },\n      },\n      { highWaterMark: STREAM_HIGH_WATER_MARK },\n    );\n\n    return new Response(stream, {\n      headers: {\n        \"content-type\": \"text/event-stream; charset=utf-8\",\n        \"cache-control\": \"no-cache, no-store\",\n        connection: \"keep-alive\",\n        \"x-accel-buffering\": \"no\",\n        \"x-content-type-options\": \"nosniff\",\n      },\n    });\n  }\n\n  async function handle(request: Request): Promise<Response> {\n    let response: Response | undefined;\n    try {\n      response = await route(request);\n      return response;\n    } catch (error) {\n      // A thrown driver error must not escape: unhandled rejection on Node, stack trace elsewhere.\n      deps.logger.error(\"request failed\", { url: request.url, error });\n      return empty(500);\n    } finally {\n      // Only a served request earns a sweep; anonymous 401s must not drive database work.\n      if (response && response.status < 400) deps.sweepOnRequest?.();\n    }\n  }\n\n  return {\n    handle,\n    GET: handle,\n    POST: handle,\n  };\n}\n","import type { DeliveryOutcome } from \"../../core/adapter\";\nimport { readJsonBody } from \"../../core/handler\";\nimport type {\n  DeliverContext,\n  EasyPingPlugin,\n  PluginInitContext,\n  RouteDefinition,\n  SchemaDeclaration,\n} from \"../../core/plugin\";\nimport type { MobilePushMessage, MobilePushProvider } from \"../../providers/expo-push\";\n\nconst DEVICE = \"notification_mobile_push_device\";\nconst TICKET = \"notification_mobile_push_ticket\";\n\nexport type MobilePushPlatform = \"ios\" | \"android\" | \"web\";\n\nexport type MobilePushDevice = {\n  id: string;\n  userId: string;\n  token: string;\n  platform: MobilePushPlatform;\n  deviceName: string | null;\n  createdAt: Date;\n  lastSeenAt: Date;\n};\n\nexport type MobilePushTicketRow = {\n  id: string;\n  deviceId: string;\n  createdAt: Date;\n};\n\nexport type MobilePushRendered = Omit<MobilePushMessage, \"token\">;\n\nexport type MobilePushOptions = {\n  provider: MobilePushProvider;\n  /** What the OS notification shows. `data` rides along to the app's tap handler. */\n  render: (input: { type: string; payload: unknown }) => MobilePushRendered;\n  /** Devices untouched for this long are pruned by POST /mobile-push/prune. Default 180 days. */\n  staleAfterDays?: number | undefined;\n  /** Registering past this evicts the user's least recently seen device. Default 20. */\n  maxDevicesPerUser?: number | undefined;\n};\n\nconst PLATFORMS: readonly MobilePushPlatform[] = [\"ios\", \"android\", \"web\"];\n\n/** The tables this plugin owns, exported so DDL needs no plugin instance. */\nexport const mobilePushSchema = {\n  mobilePushDevice: {\n    tableName: DEVICE,\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      token: { type: \"string\", required: true },\n      platform: { type: \"string\", required: true },\n      deviceName: { type: \"string\" },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n      lastSeenAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\"], name: \"mobile_push_device_user_idx\" },\n      // One row per token: re-registering updates instead of duplicating.\n      { on: [\"token\"], unique: true, name: \"mobile_push_device_token_idx\" },\n    ],\n  },\n  mobilePushTicket: {\n    tableName: TICKET,\n    fields: {\n      id: { type: \"string\", required: true },\n      deviceId: { type: \"string\", required: true },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [{ on: [\"createdAt\"], name: \"mobile_push_ticket_created_idx\" }],\n  },\n} as const satisfies SchemaDeclaration;\n\nconst isDuplicate = (error: unknown): boolean => {\n  const code = (error as { code?: unknown })?.code;\n  if (code === \"23505\" || code === 11000) return true;\n  const text = error instanceof Error ? error.message : String(error);\n  return /duplicate|unique/i.test(text);\n};\n\nexport type MobilePushPlugin = EasyPingPlugin<\"mobilePush\", typeof mobilePushSchema> & {\n  /**\n   * Asks the provider for the verdict on accepted messages and prunes devices\n   * it reports gone. Expo learns \"device not registered\" from APNs/FCM only\n   * after accepting the message, so this is where uninstalls are caught.\n   * Also mounted as POST /mobile-push/receipts for the cron.\n   */\n  checkReceipts(): Promise<{ checked: number; pruned: number }>;\n};\n\n/** Native push through a token registry. Fans out per device; dead tokens are pruned on the spot or by receipt. */\nexport function mobilePush(options: MobilePushOptions): MobilePushPlugin {\n  let ctx: PluginInitContext;\n  const staleAfterDays = options.staleAfterDays ?? 180;\n  const maxDevices = Math.max(1, options.maxDevicesPerUser ?? 20);\n\n  async function checkReceipts() {\n    if (!options.provider.receipts) return { checked: 0, pruned: 0 };\n    const tickets = await ctx.store.find<MobilePushTicketRow>(\n      TICKET,\n      {},\n      { orderBy: { field: \"createdAt\", direction: \"asc\" }, limit: 1000 },\n    );\n    if (tickets.length === 0) return { checked: 0, pruned: 0 };\n\n    const receipts = await options.provider.receipts(tickets.map((ticket) => ticket.id));\n    const byTicket = new Map(tickets.map((ticket) => [ticket.id, ticket.deviceId]));\n    const gone = receipts.flatMap((receipt) =>\n      !receipt.ok && receipt.gone ? [byTicket.get(receipt.ticketId) ?? \"\"] : [],\n    );\n    const settled = receipts.map((receipt) => receipt.ticketId);\n\n    if (gone.length > 0) await ctx.store.remove(DEVICE, { id: { in: gone.filter(Boolean) } });\n    if (settled.length > 0) await ctx.store.remove(TICKET, { id: { in: settled } });\n    // Receipts the service has already forgotten (older than a day) would sit forever.\n    const cutoff = new Date(Date.now() - 24 * 3_600_000);\n    await ctx.store.remove(TICKET, { createdAt: { lt: cutoff } });\n\n    return { checked: settled.length, pruned: gone.length };\n  }\n\n  const routes: RouteDefinition[] = [\n    {\n      path: \"/mobile-push/devices\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n\n        const { token, platform, deviceName } = parsed.body as {\n          token?: unknown;\n          platform?: unknown;\n          deviceName?: unknown;\n        };\n        if (typeof token !== \"string\" || !options.provider.isValidToken(token)) {\n          return Response.json(\n            { error: `token is not a valid ${options.provider.name} push token` },\n            { status: 400 },\n          );\n        }\n        if (typeof platform !== \"string\" || !PLATFORMS.includes(platform as MobilePushPlatform)) {\n          return Response.json(\n            { error: `platform must be one of ${PLATFORMS.join(\", \")}` },\n            { status: 400 },\n          );\n        }\n        const name = typeof deviceName === \"string\" ? deviceName.slice(0, 120) : null;\n        const owner = userId ?? \"\";\n        const now = new Date();\n\n        // A token belongs to one account for life; upserting on token alone would let anyone re-home it.\n        const [existing] = await ctx.store.find<MobilePushDevice>(DEVICE, { token }, { limit: 1 });\n        if (existing && existing.userId !== owner) {\n          return Response.json(\n            { error: \"token is registered to another account\" },\n            { status: 409 },\n          );\n        }\n        if (existing) {\n          await ctx.store.update(\n            DEVICE,\n            { id: existing.id },\n            { platform, deviceName: name, lastSeenAt: now },\n          );\n          return Response.json({ ok: true });\n        }\n\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: owner },\n          { orderBy: { field: \"lastSeenAt\", direction: \"asc\" } },\n        );\n        const excess = devices.length - maxDevices + 1;\n        if (excess > 0) {\n          await ctx.store.remove(DEVICE, {\n            id: { in: devices.slice(0, excess).map((device) => device.id) },\n          });\n        }\n        try {\n          await ctx.store.insert(DEVICE, [\n            {\n              id: crypto.randomUUID(),\n              userId: owner,\n              token,\n              platform,\n              deviceName: name,\n              createdAt: now,\n              lastSeenAt: now,\n            },\n          ]);\n        } catch (error) {\n          if (isDuplicate(error)) {\n            return Response.json(\n              { error: \"token is registered to another account\" },\n              { status: 409 },\n            );\n          }\n          throw error;\n        }\n        return Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/devices\",\n      method: \"GET\",\n      scope: { type: \"user\" },\n      handler: async ({ userId }) => {\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: userId ?? \"\" },\n          { orderBy: { field: \"lastSeenAt\", direction: \"desc\" } },\n        );\n        return Response.json({\n          devices: devices.map((device) => ({\n            platform: device.platform,\n            deviceName: device.deviceName,\n            // The token itself is not returned: it is a capability, not a label.\n            tokenSuffix: device.token.slice(-6),\n            lastSeenAt: device.lastSeenAt.toISOString(),\n          })),\n        });\n      },\n    },\n    {\n      path: \"/mobile-push/devices/remove\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n        const { token } = parsed.body;\n        if (typeof token !== \"string\" || token === \"\") {\n          return Response.json({ error: \"token is required\" }, { status: 400 });\n        }\n        const removed = await ctx.store.remove(DEVICE, { userId: userId ?? \"\", token });\n        return removed === 0 ? new Response(null, { status: 404 }) : Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/receipts\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => Response.json(await checkReceipts()),\n    },\n    {\n      path: \"/mobile-push/prune\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => {\n        const cutoff = new Date(Date.now() - staleAfterDays * 86_400_000);\n        const removed = await ctx.store.remove(DEVICE, { lastSeenAt: { lt: cutoff } });\n        return Response.json({ removed });\n      },\n    },\n  ];\n\n  return {\n    id: \"mobilePush\",\n    channels: [\"mobilePush\"],\n    schema: mobilePushSchema,\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    hooks: {\n      deliver: async (context: DeliverContext): Promise<DeliveryOutcome> => {\n        const devices = await ctx.store.find<MobilePushDevice>(DEVICE, {\n          userId: context.notification.userId,\n        });\n        if (devices.length === 0) return { result: \"skipped\", reason: \"no registered devices\" };\n\n        const rendered = options.render({\n          type: context.notification.type,\n          payload: context.notification.payload,\n        });\n        const data = {\n          ...rendered.data,\n          notificationId: context.notification.id,\n          type: context.notification.type,\n        };\n\n        const tickets = await options.provider.send(\n          devices.map((device) => ({ ...rendered, data, token: device.token })),\n          context.signal,\n        );\n\n        const prune: string[] = [];\n        const accepted: { id: string; deviceId: string; createdAt: Date }[] = [];\n        let delivered = 0;\n        let retryable = false;\n        let lastError = \"\";\n        const now = new Date();\n\n        tickets.forEach((ticket, index) => {\n          const device = devices[index];\n          if (!device) return;\n          if (ticket.ok) {\n            delivered += 1;\n            if (ticket.ticketId)\n              accepted.push({ id: ticket.ticketId, deviceId: device.id, createdAt: now });\n            return;\n          }\n          lastError = ticket.error;\n          if (ticket.gone) prune.push(device.id);\n          else if (ticket.retryable) retryable = true;\n        });\n\n        if (prune.length > 0) await ctx.store.remove(DEVICE, { id: { in: prune } });\n        if (accepted.length > 0 && options.provider.receipts) {\n          // Best effort: a failed bookkeeping insert must not fail a delivered push.\n          await ctx.store\n            .insert(TICKET, accepted)\n            .catch((error) =>\n              ctx.logger.warn(`mobile push: could not record tickets: ${String(error)}`),\n            );\n        }\n\n        if (delivered > 0) return { result: \"sent\" };\n        if (prune.length === devices.length) {\n          return { result: \"failed\", error: \"every device token is gone\", retryable: false };\n        }\n        return { result: \"failed\", error: lastError || \"no device accepted the push\", retryable };\n      },\n    },\n\n    routes,\n    checkReceipts,\n  };\n}\n"]}
+{"version":3,"sources":["../../src/core/handler.ts","../../src/plugins/mobile-push/index.ts"],"names":[],"mappings":";;;AA+CO,IAAM,iBAAiB,EAAA,GAAK,IAAA;AAOnC,IAAM,eAAA,GAA0C;AAAA,EAC9C,eAAA,EAAiB,mBAAA;AAAA,EACjB,wBAAA,EAA0B;AAC5B,CAAA;AAEA,IAAM,IAAA,GAAO,CAAC,IAAA,EAAe,MAAA,GAAS,GAAA,EAAK,OAAA,GAAkC,EAAC,KAC5E,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG;AAAA,EACjC,MAAA;AAAA,EACA,SAAS,EAAE,cAAA,EAAgB,oBAAoB,GAAG,eAAA,EAAiB,GAAG,OAAA;AACxE,CAAC,CAAA;AAiBa,IAAI,WAAA;AAyBpB,eAAsB,YAAA,CACpB,OAAA,EACA,QAAA,GAAmB,cAAA,EACA;AACnB,EAAA,MAAM,QAAA,GAAW,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,aAAA,EAAgB,QAAQ,CAAA,MAAA,CAAA,EAAS,EAAG,GAAG,CAAA,EAAE,CAAA;AAExF,EAAA,MAAM,WAAW,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAC,CAAA;AAC7D,EAAA,IAAI,OAAO,QAAA,CAAS,QAAQ,KAAK,QAAA,GAAW,QAAA,SAAiB,QAAA,EAAS;AACtE,EAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,SAAa,EAAE,IAAA,EAAM,EAAC,EAAE;AAErC,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,CAAK,SAAA,EAAU;AACtC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,WAAS;AACP,IAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,IAAA,IAAI,IAAA,EAAM;AACV,IAAA,KAAA,IAAS,KAAA,CAAM,UAAA;AACf,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,MAAM,OAAO,MAAA,EAAO;AACpB,MAAA,OAAO,QAAA,EAAS;AAAA,IAClB;AACA,IAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,EACnB;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,KAAK,CAAA;AAClC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,KAAA,CAAM,GAAA,CAAI,OAAO,MAAM,CAAA;AACvB,IAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAAA,EAClB;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAC3C,EAAA,IAAI,IAAA,CAAK,MAAK,KAAM,EAAA,SAAW,EAAE,IAAA,EAAM,EAAC,EAAE;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACvC,IAAA,OAAO;AAAA,MACL,IAAA,EACE,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GACxD,MAAA,GACD;AAAC,KACT;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,OAAO,IAAA,CAAK,EAAE,OAAO,4BAAA,EAA6B,EAAG,GAAG,CAAA,EAAE;AAAA,EACrE;AACF;;;AC5IA,IAAM,MAAA,GAAS,iCAAA;AACf,IAAM,MAAA,GAAS,iCAAA;AAgCf,IAAM,SAAA,GAA2C,CAAC,KAAA,EAAO,SAAA,EAAW,KAAK,CAAA;AAEzE,IAAM,gBAAA,GAAmB,GAAA;AAGlB,IAAM,gBAAA,GAAmB;AAAA,EAC9B,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACxC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC7B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,YAAY,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC/D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,QAAQ,CAAA,EAAG,MAAM,6BAAA,EAA8B;AAAA;AAAA,MAEtD,EAAE,IAAI,CAAC,OAAO,GAAG,MAAA,EAAQ,IAAA,EAAM,MAAM,8BAAA;AAA+B;AACtE,GACF;AAAA,EACA,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,CAAC,WAAW,CAAA,EAAG,IAAA,EAAM,gCAAA,EAAkC;AAAA;AAE3E;AAEA,IAAM,WAAA,GAAc,CAAC,KAAA,KAA4B;AAC/C,EAAA,MAAM,OAAQ,KAAA,EAA8B,IAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,IAAA,EAAO,OAAO,IAAA;AAC/C,EAAA,MAAM,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAClE,EAAA,OAAO,mBAAA,CAAoB,KAAK,IAAI,CAAA;AACtC,CAAA;AAaO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,IAAI,GAAA;AACJ,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,GAAA;AACjD,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,CAAQ,qBAAqB,EAAE,CAAA;AAE9D,EAAA,eAAe,aAAA,GAAgB;AAC7B,IAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,QAAA,SAAiB,EAAE,OAAA,EAAS,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAE;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,MAC9B,MAAA;AAAA,MACA,EAAC;AAAA,MACD,EAAE,SAAS,EAAE,KAAA,EAAO,aAAa,SAAA,EAAW,KAAA,EAAM,EAAG,KAAA,EAAO,GAAA;AAAK,KACnE;AACA,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,QAAQ,CAAA,EAAE;AAEzD,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAC,CAAA;AACnF,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,QAAQ,CAAC,CAAC,CAAA;AAC9E,IAAA,MAAM,OAAO,QAAA,CAAS,OAAA;AAAA,MAAQ,CAAC,OAAA,KAC7B,CAAC,OAAA,CAAQ,MAAM,OAAA,CAAQ,IAAA,GAAO,CAAC,QAAA,CAAS,IAAI,OAAA,CAAQ,QAAQ,CAAA,IAAK,EAAE,IAAI;AAAC,KAC1E;AACA,IAAA,MAAM,UAAU,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY,QAAQ,QAAQ,CAAA;AAE1D,IAAA,IAAI,KAAK,MAAA,GAAS,CAAA,EAAG,MAAM,GAAA,CAAI,MAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,IAAA,CAAK,OAAO,OAAO,CAAA,IAAK,CAAA;AACxF,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,IAAW,CAAA;AAE9E,IAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,KAAK,IAAS,CAAA;AACnD,IAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,WAAW,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAE5D,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,KAAK,MAAA,EAAO;AAAA,EACxD;AAEA,EAAA,MAAM,MAAA,GAA4B;AAAA,IAChC;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AAErC,QAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAU,UAAA,KAAe,MAAA,CAAO,IAAA;AAK/C,QAAA,IACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,CAAM,MAAA,GAAS,gBAAA,IACf,CAAC,OAAA,CAAQ,QAAA,CAAS,YAAA,CAAa,KAAK,CAAA,EACpC;AACA,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,qBAAA,EAAwB,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,WAAA,CAAA,EAAc;AAAA,YACpE,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,SAAA,CAAU,QAAA,CAAS,QAA8B,CAAA,EAAG;AACvF,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,wBAAA,EAA2B,UAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,EAAG;AAAA,YAC3D,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,OAAO,UAAA,KAAe,QAAA,GAAW,WAAW,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,GAAI,IAAA;AACzE,QAAA,MAAM,QAAQ,MAAA,IAAU,EAAA;AACxB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAGrB,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,MAAM,IAAI,KAAA,CAAM,IAAA,CAAuB,MAAA,EAAQ,EAAE,KAAA,EAAM,EAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AACzF,QAAA,IAAI,QAAA,IAAY,QAAA,CAAS,MAAA,KAAW,KAAA,EAAO;AACzC,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,YAClD,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,MAAM,IAAI,KAAA,CAAM,MAAA;AAAA,YACd,MAAA;AAAA,YACA,EAAE,EAAA,EAAI,QAAA,CAAS,EAAA,EAAG;AAAA,YAClB,EAAE,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,YAAY,GAAA;AAAI,WAChD;AACA,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,QACnC;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,QAAQ,KAAA,EAAM;AAAA,UAChB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,OAAM;AAAE,SACvD;AACA,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,GAAS,UAAA,GAAa,CAAA;AAC7C,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAA;AAAE,WAC/D,CAAA;AAAA,QACH;AACA,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B;AAAA,cACE,EAAA,EAAI,OAAO,UAAA,EAAW;AAAA,cACtB,MAAA,EAAQ,KAAA;AAAA,cACR,KAAA;AAAA,cACA,QAAA;AAAA,cACA,UAAA,EAAY,IAAA;AAAA,cACZ,SAAA,EAAW,GAAA;AAAA,cACX,UAAA,EAAY;AAAA;AACd,WACD,CAAA;AAAA,QACH,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,YAAA,OAAO,QAAA,CAAS,IAAA;AAAA,cACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,cAClD,EAAE,QAAQ,GAAA;AAAI,aAChB;AAAA,UACF;AACA,UAAA,MAAM,KAAA;AAAA,QACR;AACA,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACnC;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAG;AAAA,UACvB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,QAAO;AAAE,SACxD;AACA,QAAA,OAAO,SAAS,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY;AAAA,YAChC,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,YAAY,MAAA,CAAO,UAAA;AAAA;AAAA,YAEnB,WAAA,EAAa,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,EAAE,CAAA;AAAA,YAClC,UAAA,EAAY,MAAA,CAAO,UAAA,CAAW,WAAA;AAAY,WAC5C,CAAE;AAAA,SACH,CAAA;AAAA,MACH;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,6BAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,QAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAA,CAAO,IAAA;AACzB,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,EAAA,EAAI;AAC7C,UAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,qBAAoB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,QACtE;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAI,KAAA,EAAO,CAAA;AAC9E,QAAA,OAAO,OAAA,KAAY,CAAA,GAAI,IAAI,QAAA,CAAS,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAI,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACzF;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,uBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY,QAAA,CAAS,IAAA,CAAK,MAAM,eAAe;AAAA,KAC1D;AAAA,IACA;AAAA,MACE,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY;AACnB,QAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,iBAAiB,KAAU,CAAA;AAChE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,UAAA,EAAY,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAC7E,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAA,EAAS,CAAA;AAAA,MAClC;AAAA;AACF,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,YAAA;AAAA,IACJ,QAAA,EAAU,CAAC,YAAY,CAAA;AAAA,IACvB,MAAA,EAAQ,gBAAA;AAAA,IAER,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,OAAO,OAAA,KAAsD;AACpE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,KAAuB,MAAA,EAAQ;AAAA,UAC7D,MAAA,EAAQ,QAAQ,YAAA,CAAa;AAAA,SAC9B,CAAA;AACD,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,QAAQ,uBAAA,EAAwB;AAEtF,QAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO;AAAA,UAC9B,IAAA,EAAM,QAAQ,YAAA,CAAa,IAAA;AAAA,UAC3B,OAAA,EAAS,QAAQ,YAAA,CAAa;AAAA,SAC/B,CAAA;AACD,QAAA,MAAM,IAAA,GAAO;AAAA,UACX,GAAG,QAAA,CAAS,IAAA;AAAA,UACZ,cAAA,EAAgB,QAAQ,YAAA,CAAa,EAAA;AAAA,UACrC,IAAA,EAAM,QAAQ,YAAA,CAAa;AAAA,SAC7B;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,IAAA;AAAA,UACrC,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY,EAAE,GAAG,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,CAAE,CAAA;AAAA,UACpE,OAAA,CAAQ;AAAA,SACV;AAEA,QAAA,MAAM,QAAkB,EAAC;AACzB,QAAA,MAAM,WAAgE,EAAC;AACvE,QAAA,IAAI,SAAA,GAAY,CAAA;AAChB,QAAA,IAAI,SAAA,GAAY,KAAA;AAChB,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAErB,QAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,MAAA,EAAQ,KAAA,KAAU;AACjC,UAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,UAAA,IAAI,CAAC,MAAA,EAAQ;AACb,UAAA,IAAI,OAAO,EAAA,EAAI;AACb,YAAA,SAAA,IAAa,CAAA;AACb,YAAA,IAAI,MAAA,CAAO,QAAA;AACT,cAAA,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,CAAO,QAAA,EAAU,UAAU,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,GAAA,EAAK,CAAA;AAC5E,YAAA;AAAA,UACF;AACA,UAAA,SAAA,GAAY,MAAA,CAAO,KAAA;AACnB,UAAA,IAAI,MAAA,CAAO,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,eAAA,IAC5B,MAAA,CAAO,WAAW,SAAA,GAAY,IAAA;AAAA,QACzC,CAAC,CAAA;AAED,QAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,IAAS,CAAA;AAC1E,QAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,OAAA,CAAQ,SAAS,QAAA,EAAU;AAEpD,UAAA,MAAM,GAAA,CAAI,KAAA,CACP,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA,CACvB,KAAA;AAAA,YAAM,CAAC,UACN,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,uCAAA,EAA0C,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE;AAAA,WAC3E;AAAA,QACJ;AAEA,QAAA,IAAI,SAAA,GAAY,CAAA,EAAG,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC3C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,CAAQ,MAAA,EAAQ;AACnC,UAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,4BAAA,EAA8B,WAAW,KAAA,EAAM;AAAA,QACnF;AACA,QAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,SAAA,IAAa,+BAA+B,SAAA,EAAU;AAAA,MAC1F;AAAA,KACF;AAAA,IAEA,MAAA;AAAA,IACA;AAAA,GACF;AACF","file":"mobile-push.cjs","sourcesContent":["import type { DatabaseAdapter } from \"./adapter\";\nimport type { SessionConfig } from \"./config\";\nimport type { Logger } from \"./errors\";\nimport type { Promisable, RouteDefinition } from \"./plugin\";\nimport type { Runner } from \"./runner\";\nimport { inboxChannel, type Signals } from \"./signals\";\nimport { verifyToken } from \"./tokens\";\n\nexport type EventsSettings = {\n  heartbeatMs: number;\n  probeIntervalMs: number;\n  maxDurationMs: number;\n  maxStreamsPerUser: number;\n  maxStreams: number;\n};\n\n/** Unread chunks a stream may hold before it is closed on a consumer that stopped reading. */\nconst STREAM_HIGH_WATER_MARK = 256;\n\nexport type HandlerDeps = {\n  adapter: DatabaseAdapter;\n  session: SessionConfig;\n  runner: Runner;\n  logger: Logger;\n  basePath: string;\n  secret: string;\n  signals: Signals;\n  /** `false` unmounts GET /events. */\n  events: EventsSettings | false;\n  /** Fire-and-forget delivery pass after a request. Rate-limited by the instance. */\n  sweepOnRequest?: (() => void) | undefined;\n  cronSecret?: string | undefined;\n  /** Guards plugin machine routes. The instance defaults it to cronSecret. */\n  machineSecret?: string | undefined;\n  cronMaxSweeps?: number | undefined;\n  pluginRoutes?: readonly RouteDefinition[] | undefined;\n  /** Returns a 429 to send, or null to proceed. Runs after onRequest, before routing. */\n  rateLimit?: ((request: Request) => Response | null) | undefined;\n  /** Origins other than the request's own host that may POST. `*.example.com` allowed. */\n  trustedOrigins?: readonly string[] | undefined;\n  /** Runs before routing. Returning a Response short-circuits; use it for rate limiting. */\n  // biome-ignore lint/suspicious/noConfusingVoidType: a hook that returns nothing is the common case\n  onRequest?: ((request: Request) => Promisable<Response | undefined | void>) | undefined;\n  maxBodyBytes?: number | undefined;\n};\n\n/** Every JSON body is capped here. Nothing legitimate the routes accept is bigger. */\nexport const MAX_BODY_BYTES = 64 * 1024;\n\nconst MAX_READ_IDS = 200;\n\nconst SESSION_ERROR: unique symbol = Symbol(\"session-error\");\n\n// Per-user data: no shared caching, no sniffing.\nconst PRIVATE_HEADERS: Record<string, string> = {\n  \"cache-control\": \"private, no-store\",\n  \"x-content-type-options\": \"nosniff\",\n};\n\nconst json = (body: unknown, status = 200, headers: Record<string, string> = {}) =>\n  new Response(JSON.stringify(body), {\n    status,\n    headers: { \"content-type\": \"application/json\", ...PRIVATE_HEADERS, ...headers },\n  });\n\nconst empty = (status: number) => new Response(null, { status, headers: PRIVATE_HEADERS });\n\n/** Plugin responses get the same headers, without touching their body. */\nfunction harden(response: Response): Response {\n  const headers = new Headers(response.headers);\n  for (const [name, value] of Object.entries(PRIVATE_HEADERS)) {\n    if (!headers.has(name)) headers.set(name, value);\n  }\n  return new Response(response.body, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n\nconst encoder = new TextEncoder();\n\n/** Constant time over SHA-256 digests, so neither content nor length leaks. Works on edge runtimes. */\nasync function timingSafeEqual(a: string, b: string): Promise<boolean> {\n  const [left, right] = await Promise.all(\n    [a, b].map(\n      async (value) => new Uint8Array(await crypto.subtle.digest(\"SHA-256\", encoder.encode(value))),\n    ),\n  );\n  let diff = 0;\n  for (let i = 0; i < 32; i += 1) diff |= (left?.[i] ?? 0) ^ (right?.[i] ?? 0);\n  return diff === 0;\n}\n\n/** Anchored at a segment boundary: `/foo/api/notifications/cron` is not a cron request. */\nfunction routePath(url: URL, basePath: string): string {\n  const { pathname } = url;\n  if (pathname === basePath) return \"/\";\n  if (pathname.startsWith(`${basePath}/`)) return pathname.slice(basePath.length);\n  return pathname;\n}\n\nexport type JsonBody = { body: Record<string, unknown> } | { error: Response };\n\n/** Reads a JSON object body with a streaming byte cap. Malformed JSON is 400; an empty body is `{}`. */\nexport async function readJsonBody(\n  request: Request,\n  maxBytes: number = MAX_BODY_BYTES,\n): Promise<JsonBody> {\n  const tooLarge = () => ({ error: json({ error: `body exceeds ${maxBytes} bytes` }, 413) });\n\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > maxBytes) return tooLarge();\n  if (!request.body) return { body: {} };\n\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel();\n      return tooLarge();\n    }\n    chunks.push(value);\n  }\n\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  const text = new TextDecoder().decode(bytes);\n  if (text.trim() === \"\") return { body: {} };\n\n  try {\n    const parsed: unknown = JSON.parse(text);\n    return {\n      body:\n        parsed && typeof parsed === \"object\" && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : {},\n    };\n  } catch {\n    return { error: json({ error: \"body must be a JSON object\" }, 400) };\n  }\n}\n\nconst isJsonContentType = (request: Request) =>\n  /^application\\/json\\s*(;|$)/i.test((request.headers.get(\"content-type\") ?? \"\").trim());\n\nfunction originAllowed(origin: string, url: URL, request: Request, trusted: readonly string[]) {\n  let host: string;\n  try {\n    host = new URL(origin).host;\n  } catch {\n    return false;\n  }\n\n  if (host === url.host) return true;\n  // Behind a proxy that rewrites Host, the public host arrives here instead.\n  const forwarded = request.headers.get(\"x-forwarded-host\")?.split(\",\")[0]?.trim();\n  if (forwarded && host === forwarded) return true;\n\n  return trusted.some((entry) =>\n    entry.startsWith(\"*.\") ? host.endsWith(entry.slice(1)) : entry === origin,\n  );\n}\n\n/** CSRF: a cross-site form can neither send `application/json` without a preflight nor forge `Origin`. */\nfunction csrfCheck(request: Request, url: URL, trusted: readonly string[]): Response | null {\n  if (!isJsonContentType(request)) {\n    return json({ error: \"content-type must be application/json\" }, 415);\n  }\n\n  const origin = request.headers.get(\"origin\");\n  if (origin === null) return null;\n  if (origin === \"null\" || !originAllowed(origin, url, request, trusted)) return empty(403);\n\n  return null;\n}\n\nexport function createHandler(deps: HandlerDeps) {\n  const trustedOrigins = deps.trustedOrigins ?? [];\n  const maxBodyBytes = deps.maxBodyBytes ?? MAX_BODY_BYTES;\n\n  let warnedBadUserId = false;\n\n  async function resolveUserId(request: Request): Promise<string | null | typeof SESSION_ERROR> {\n    let id: unknown;\n    try {\n      id = await deps.session.getUserId(request);\n    } catch (error) {\n      // A broken session lookup is a 500, never a 401. RFC 0002 §1.\n      deps.logger.error(\"session.getUserId threw\", { error });\n      return SESSION_ERROR;\n    }\n    if (id === null || id === undefined) return null;\n    if (typeof id !== \"string\" || id === \"\") {\n      if (!warnedBadUserId) {\n        warnedBadUserId = true;\n        deps.logger.warn(\n          `session.getUserId returned ${id === \"\" ? \"an empty string\" : typeof id}; treating the ` +\n            \"request as unauthenticated. Return a non-empty string or null.\",\n        );\n      }\n      return null;\n    }\n    return id;\n  }\n\n  async function bearerMatches(request: Request, secret: string | undefined): Promise<boolean> {\n    if (!secret) return false;\n    const header = request.headers.get(\"authorization\") ?? \"\";\n    const presented = header.startsWith(\"Bearer \") ? header.slice(7) : header;\n    return timingSafeEqual(presented, secret);\n  }\n\n  async function handleCron(request: Request): Promise<Response> {\n    if (!deps.cronSecret) return empty(404);\n    if (!(await bearerMatches(request, deps.cronSecret))) return empty(401);\n\n    // Bounded so an overlapping scheduler does not hold a request open for the whole backlog.\n    const result = await deps.runner.drain(\n      deps.cronMaxSweeps === undefined ? {} : { maxSweeps: deps.cronMaxSweeps },\n    );\n    return json(result);\n  }\n\n  /** Plugin routes first; auth is enforced here so a plugin cannot forget it. */\n  async function handlePluginRoute(\n    route: RouteDefinition,\n    request: Request,\n    url: URL,\n  ): Promise<Response> {\n    if (route.scope.type === \"user\") {\n      if (request.method === \"POST\") {\n        const rejected = csrfCheck(request, url, trustedOrigins);\n        if (rejected) return rejected;\n      }\n\n      const userId = await resolveUserId(request);\n      if (userId === SESSION_ERROR) return empty(500);\n      if (userId === null) return empty(401);\n      return harden(await route.handler({ request, userId, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"machine\") {\n      if (!deps.machineSecret) return empty(404);\n      if (!(await bearerMatches(request, deps.machineSecret))) return empty(401);\n      return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n    }\n\n    if (route.scope.type === \"signed\") {\n      const token =\n        url.searchParams.get(\"token\") ??\n        (request.headers.get(\"authorization\") ?? \"\").replace(/^Bearer /, \"\");\n\n      const claims = await verifyToken(deps.secret, token, route.scope.purpose);\n      // One response for every failure mode. RFC 0002 §5.\n      if (!claims) return empty(400);\n\n      return harden(await route.handler({ request, userId: claims.uid, claims, params: {} }));\n    }\n\n    return harden(await route.handler({ request, userId: null, claims: null, params: {} }));\n  }\n\n  async function route(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = routePath(url, deps.basePath);\n\n    if (deps.onRequest) {\n      const early = await deps.onRequest(request);\n      if (early instanceof Response) return early;\n    }\n\n    if (deps.rateLimit) {\n      const limited = deps.rateLimit(request);\n      if (limited) return limited;\n    }\n\n    if (path === \"/cron\") {\n      if (request.method !== \"POST\") return empty(405);\n      return handleCron(request);\n    }\n\n    const pluginRoute = deps.pluginRoutes?.find(\n      (candidate) => candidate.path === path && candidate.method === request.method,\n    );\n    if (pluginRoute) return handlePluginRoute(pluginRoute, request, url);\n\n    if (request.method === \"POST\") {\n      const rejected = csrfCheck(request, url, trustedOrigins);\n      if (rejected) return rejected;\n    }\n\n    const userId = await resolveUserId(request);\n    if (userId === SESSION_ERROR) return empty(500);\n    if (userId === null) return empty(401);\n\n    if (request.method === \"GET\" && path === \"/events\") {\n      if (!deps.events) return empty(404);\n      // A session can open streams for free; without a cap one account can hold every socket.\n      if ((openStreams.get(userId) ?? 0) >= deps.events.maxStreamsPerUser) {\n        return json({ error: \"too many open event streams\" }, 429, { \"retry-after\": \"30\" });\n      }\n      if (totalStreams >= deps.events.maxStreams) {\n        return json({ error: \"event streams unavailable\" }, 503, { \"retry-after\": \"30\" });\n      }\n      return events(request, userId, deps.events);\n    }\n\n    if (request.method === \"GET\" && path === \"/\") {\n      const limitParam = Number(url.searchParams.get(\"limit\") ?? 20);\n      const limit = Number.isFinite(limitParam) ? Math.min(Math.max(limitParam, 1), 100) : 20;\n      const cursor = url.searchParams.get(\"cursor\");\n\n      // unseenCount rides on the first page only: a cursor request is scrollback, not a poll.\n      const [page, unseenCount] = await Promise.all([\n        deps.adapter.listNotifications({\n          userId,\n          limit,\n          ...(cursor ? { cursor } : {}),\n          ...(url.searchParams.get(\"unreadOnly\") === \"true\" ? { unreadOnly: true } : {}),\n        }),\n        cursor ? Promise.resolve(null) : deps.adapter.countUnseen(userId),\n      ]);\n\n      return json(unseenCount === null ? page : { ...page, unseenCount });\n    }\n\n    if (request.method === \"GET\" && path === \"/count\") {\n      return json({ unseen: await deps.adapter.countUnseen(userId) });\n    }\n\n    if (request.method === \"POST\" && path === \"/seen\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const before = typeof parsed.body.before === \"string\" ? new Date(parsed.body.before) : null;\n\n      // +1ms: Postgres keeps microseconds, an ISO string milliseconds; without it markSeen misses the newest row.\n      const cutoff =\n        before && !Number.isNaN(before.getTime()) ? new Date(before.getTime() + 1) : new Date();\n\n      await deps.adapter.markSeen(userId, cutoff);\n      deps.signals.publish(inboxChannel(userId));\n      return json({ ok: true });\n    }\n\n    if (request.method === \"POST\" && path === \"/read\") {\n      const parsed = await readJsonBody(request, maxBodyBytes);\n      if (\"error\" in parsed) return parsed.error;\n      const ids = Array.isArray(parsed.body.ids)\n        ? parsed.body.ids.filter((id): id is string => typeof id === \"string\")\n        : [];\n      if (ids.length === 0) return json({ error: \"ids must be a non-empty string array\" }, 400);\n\n      if (ids.length > MAX_READ_IDS) {\n        return json({ error: `at most ${MAX_READ_IDS} ids per request` }, 400);\n      }\n\n      // 404, not 403: a 403 confirms the row exists. RFC 0002 §2.\n      const updated = await deps.adapter.markRead(userId, ids);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return updated === 0 ? empty(404) : json({ updated });\n    }\n\n    if (request.method === \"POST\" && path === \"/read-all\") {\n      const updated = await deps.adapter.markAllRead(userId);\n      if (updated > 0) deps.signals.publish(inboxChannel(userId));\n      return json({ updated });\n    }\n\n    return empty(404);\n  }\n\n  const openStreams = new Map<string, number>();\n  let totalStreams = 0;\n\n  const trackStream = (userId: string) => {\n    openStreams.set(userId, (openStreams.get(userId) ?? 0) + 1);\n    totalStreams += 1;\n    return () => {\n      const remaining = (openStreams.get(userId) ?? 1) - 1;\n      if (remaining > 0) openStreams.set(userId, remaining);\n      else openStreams.delete(userId);\n      totalStreams -= 1;\n    };\n  };\n\n  /** A change fingerprint cheap enough to take every probe interval. */\n  async function fingerprint(userId: string): Promise<string> {\n    const [page, unseen] = await Promise.all([\n      deps.adapter.listNotifications({ userId, limit: 1 }),\n      deps.adapter.countUnseen(userId),\n    ]);\n    const newest = page.notifications[0];\n    return `${newest?.id ?? \"\"}|${newest?.readAt ? 1 : 0}|${unseen}`;\n  }\n\n  // One probe per user, however many streams that user holds: N tabs must not mean N queries.\n  type Probe = { listeners: Set<() => void>; timer: ReturnType<typeof setInterval>; last?: string };\n  const probes = new Map<string, Probe>();\n\n  function subscribeProbe(userId: string, onChanged: () => void, intervalMs: number) {\n    let probe = probes.get(userId);\n    if (!probe) {\n      const created: Probe = {\n        listeners: new Set(),\n        timer: setInterval(() => {\n          fingerprint(userId)\n            .then((value) => {\n              if (created.last !== undefined && value !== created.last) {\n                for (const listener of created.listeners) listener();\n              }\n              created.last = value;\n            })\n            .catch((error) => deps.logger.error(\"events probe failed\", { error }));\n        }, intervalMs),\n      };\n      probe = created;\n      probes.set(userId, created);\n      fingerprint(userId)\n        .then((value) => {\n          if (created.last === undefined) created.last = value;\n        })\n        .catch(() => {});\n    }\n    probe.listeners.add(onChanged);\n    return () => {\n      const current = probes.get(userId);\n      if (!current) return;\n      current.listeners.delete(onChanged);\n      if (current.listeners.size === 0) {\n        clearInterval(current.timer);\n        probes.delete(userId);\n      }\n    };\n  }\n\n  /**\n   * Server-Sent Events: `ready` once, `changed` whenever this user's inbox\n   * moves, comments as keepalive. No payload ever travels on the stream; the\n   * client fetches the feed on `changed`. RFC 0006 §4D.\n   */\n  function events(request: Request, userId: string, settings: EventsSettings): Response {\n    const encoder = new TextEncoder();\n    const timers: ReturnType<typeof setInterval>[] = [];\n    const unsubscribes: (() => void)[] = [];\n    let closed = false;\n    let cleanup = () => {};\n\n    const stream = new ReadableStream<Uint8Array>(\n      {\n        start(controller) {\n          const write = (text: string) => {\n            if (closed) return;\n            // A consumer that stopped reading would make this queue grow without bound.\n            if (controller.desiredSize !== null && controller.desiredSize <= 0) {\n              cleanup();\n              return;\n            }\n            try {\n              controller.enqueue(encoder.encode(text));\n            } catch {\n              cleanup();\n            }\n          };\n          cleanup = () => {\n            if (closed) return;\n            closed = true;\n            for (const unsubscribe of unsubscribes) unsubscribe();\n            for (const timer of timers) clearInterval(timer);\n            try {\n              controller.close();\n            } catch {\n              // already closed by the consumer\n            }\n          };\n          const changed = () => write(\"event: changed\\ndata: {}\\n\\n\");\n\n          unsubscribes.push(trackStream(userId));\n          write(\"retry: 3000\\n\\nevent: ready\\ndata: {}\\n\\n\");\n          unsubscribes.push(deps.signals.subscribe(inboxChannel(userId), changed));\n          timers.push(setInterval(() => write(\": keepalive\\n\\n\"), settings.heartbeatMs));\n\n          if (!deps.signals.crossProcess && settings.probeIntervalMs > 0) {\n            unsubscribes.push(subscribeProbe(userId, changed, settings.probeIntervalMs));\n          }\n\n          if (settings.maxDurationMs > 0) {\n            timers.push(\n              setTimeout(cleanup, settings.maxDurationMs) as ReturnType<typeof setInterval>,\n            );\n          }\n          request.signal?.addEventListener(\"abort\", cleanup, { once: true });\n        },\n        cancel() {\n          cleanup();\n        },\n      },\n      { highWaterMark: STREAM_HIGH_WATER_MARK },\n    );\n\n    return new Response(stream, {\n      headers: {\n        \"content-type\": \"text/event-stream; charset=utf-8\",\n        \"cache-control\": \"no-cache, no-store\",\n        connection: \"keep-alive\",\n        \"x-accel-buffering\": \"no\",\n        \"x-content-type-options\": \"nosniff\",\n      },\n    });\n  }\n\n  async function handle(request: Request): Promise<Response> {\n    let response: Response | undefined;\n    try {\n      response = await route(request);\n      return response;\n    } catch (error) {\n      // A thrown driver error must not escape: unhandled rejection on Node, stack trace elsewhere.\n      deps.logger.error(\"request failed\", { url: request.url, error });\n      return empty(500);\n    } finally {\n      // Only a served request earns a sweep; anonymous 401s must not drive database work.\n      if (response && response.status < 400) deps.sweepOnRequest?.();\n    }\n  }\n\n  return {\n    handle,\n    GET: handle,\n    POST: handle,\n  };\n}\n","import type { DeliveryOutcome } from \"../../core/adapter\";\nimport { readJsonBody } from \"../../core/handler\";\nimport type {\n  DeliverContext,\n  EasyPingPlugin,\n  PluginInitContext,\n  RouteDefinition,\n  SchemaDeclaration,\n} from \"../../core/plugin\";\nimport type { MobilePushMessage, MobilePushProvider } from \"../../providers/expo-push\";\n\nconst DEVICE = \"notification_mobile_push_device\";\nconst TICKET = \"notification_mobile_push_ticket\";\n\nexport type MobilePushPlatform = \"ios\" | \"android\" | \"web\";\n\nexport type MobilePushDevice = {\n  id: string;\n  userId: string;\n  token: string;\n  platform: MobilePushPlatform;\n  deviceName: string | null;\n  createdAt: Date;\n  lastSeenAt: Date;\n};\n\nexport type MobilePushTicketRow = {\n  id: string;\n  deviceId: string;\n  createdAt: Date;\n};\n\nexport type MobilePushRendered = Omit<MobilePushMessage, \"token\">;\n\nexport type MobilePushOptions = {\n  provider: MobilePushProvider;\n  /** What the OS notification shows. `data` rides along to the app's tap handler. */\n  render: (input: { type: string; payload: unknown }) => MobilePushRendered;\n  /** Devices untouched for this long are pruned by POST /mobile-push/prune. Default 180 days. */\n  staleAfterDays?: number | undefined;\n  /** Registering past this evicts the user's least recently seen device. Default 20. */\n  maxDevicesPerUser?: number | undefined;\n};\n\nconst PLATFORMS: readonly MobilePushPlatform[] = [\"ios\", \"android\", \"web\"];\n\nconst MAX_TOKEN_LENGTH = 512;\n\n/** The tables this plugin owns, exported so DDL needs no plugin instance. */\nexport const mobilePushSchema = {\n  mobilePushDevice: {\n    tableName: DEVICE,\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      token: { type: \"string\", required: true },\n      platform: { type: \"string\", required: true },\n      deviceName: { type: \"string\" },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n      lastSeenAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\"], name: \"mobile_push_device_user_idx\" },\n      // One row per token: re-registering updates instead of duplicating.\n      { on: [\"token\"], unique: true, name: \"mobile_push_device_token_idx\" },\n    ],\n  },\n  mobilePushTicket: {\n    tableName: TICKET,\n    fields: {\n      id: { type: \"string\", required: true },\n      deviceId: { type: \"string\", required: true },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [{ on: [\"createdAt\"], name: \"mobile_push_ticket_created_idx\" }],\n  },\n} as const satisfies SchemaDeclaration;\n\nconst isDuplicate = (error: unknown): boolean => {\n  const code = (error as { code?: unknown })?.code;\n  if (code === \"23505\" || code === 11000) return true;\n  const text = error instanceof Error ? error.message : String(error);\n  return /duplicate|unique/i.test(text);\n};\n\nexport type MobilePushPlugin = EasyPingPlugin<\"mobilePush\", typeof mobilePushSchema> & {\n  /**\n   * Asks the provider for the verdict on accepted messages and prunes devices\n   * it reports gone. Expo learns \"device not registered\" from APNs/FCM only\n   * after accepting the message, so this is where uninstalls are caught.\n   * Also mounted as POST /mobile-push/receipts for the cron.\n   */\n  checkReceipts(): Promise<{ checked: number; pruned: number }>;\n};\n\n/** Native push through a token registry. Fans out per device; dead tokens are pruned on the spot or by receipt. */\nexport function mobilePush(options: MobilePushOptions): MobilePushPlugin {\n  let ctx: PluginInitContext;\n  const staleAfterDays = options.staleAfterDays ?? 180;\n  const maxDevices = Math.max(1, options.maxDevicesPerUser ?? 20);\n\n  async function checkReceipts() {\n    if (!options.provider.receipts) return { checked: 0, pruned: 0 };\n    const tickets = await ctx.store.find<MobilePushTicketRow>(\n      TICKET,\n      {},\n      { orderBy: { field: \"createdAt\", direction: \"asc\" }, limit: 1000 },\n    );\n    if (tickets.length === 0) return { checked: 0, pruned: 0 };\n\n    const receipts = await options.provider.receipts(tickets.map((ticket) => ticket.id));\n    const byTicket = new Map(tickets.map((ticket) => [ticket.id, ticket.deviceId]));\n    const gone = receipts.flatMap((receipt) =>\n      !receipt.ok && receipt.gone ? [byTicket.get(receipt.ticketId) ?? \"\"] : [],\n    );\n    const settled = receipts.map((receipt) => receipt.ticketId);\n\n    if (gone.length > 0) await ctx.store.remove(DEVICE, { id: { in: gone.filter(Boolean) } });\n    if (settled.length > 0) await ctx.store.remove(TICKET, { id: { in: settled } });\n    // Receipts the service has already forgotten (older than a day) would sit forever.\n    const cutoff = new Date(Date.now() - 24 * 3_600_000);\n    await ctx.store.remove(TICKET, { createdAt: { lt: cutoff } });\n\n    return { checked: settled.length, pruned: gone.length };\n  }\n\n  const routes: RouteDefinition[] = [\n    {\n      path: \"/mobile-push/devices\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n\n        const { token, platform, deviceName } = parsed.body as {\n          token?: unknown;\n          platform?: unknown;\n          deviceName?: unknown;\n        };\n        if (\n          typeof token !== \"string\" ||\n          token.length > MAX_TOKEN_LENGTH ||\n          !options.provider.isValidToken(token)\n        ) {\n          return Response.json(\n            { error: `token is not a valid ${options.provider.name} push token` },\n            { status: 400 },\n          );\n        }\n        if (typeof platform !== \"string\" || !PLATFORMS.includes(platform as MobilePushPlatform)) {\n          return Response.json(\n            { error: `platform must be one of ${PLATFORMS.join(\", \")}` },\n            { status: 400 },\n          );\n        }\n        const name = typeof deviceName === \"string\" ? deviceName.slice(0, 120) : null;\n        const owner = userId ?? \"\";\n        const now = new Date();\n\n        // A token belongs to one account for life; upserting on token alone would let anyone re-home it.\n        const [existing] = await ctx.store.find<MobilePushDevice>(DEVICE, { token }, { limit: 1 });\n        if (existing && existing.userId !== owner) {\n          return Response.json(\n            { error: \"token is registered to another account\" },\n            { status: 409 },\n          );\n        }\n        if (existing) {\n          await ctx.store.update(\n            DEVICE,\n            { id: existing.id },\n            { platform, deviceName: name, lastSeenAt: now },\n          );\n          return Response.json({ ok: true });\n        }\n\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: owner },\n          { orderBy: { field: \"lastSeenAt\", direction: \"asc\" } },\n        );\n        const excess = devices.length - maxDevices + 1;\n        if (excess > 0) {\n          await ctx.store.remove(DEVICE, {\n            id: { in: devices.slice(0, excess).map((device) => device.id) },\n          });\n        }\n        try {\n          await ctx.store.insert(DEVICE, [\n            {\n              id: crypto.randomUUID(),\n              userId: owner,\n              token,\n              platform,\n              deviceName: name,\n              createdAt: now,\n              lastSeenAt: now,\n            },\n          ]);\n        } catch (error) {\n          if (isDuplicate(error)) {\n            return Response.json(\n              { error: \"token is registered to another account\" },\n              { status: 409 },\n            );\n          }\n          throw error;\n        }\n        return Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/devices\",\n      method: \"GET\",\n      scope: { type: \"user\" },\n      handler: async ({ userId }) => {\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: userId ?? \"\" },\n          { orderBy: { field: \"lastSeenAt\", direction: \"desc\" } },\n        );\n        return Response.json({\n          devices: devices.map((device) => ({\n            platform: device.platform,\n            deviceName: device.deviceName,\n            // The token itself is not returned: it is a capability, not a label.\n            tokenSuffix: device.token.slice(-6),\n            lastSeenAt: device.lastSeenAt.toISOString(),\n          })),\n        });\n      },\n    },\n    {\n      path: \"/mobile-push/devices/remove\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n        const { token } = parsed.body;\n        if (typeof token !== \"string\" || token === \"\") {\n          return Response.json({ error: \"token is required\" }, { status: 400 });\n        }\n        const removed = await ctx.store.remove(DEVICE, { userId: userId ?? \"\", token });\n        return removed === 0 ? new Response(null, { status: 404 }) : Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/receipts\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => Response.json(await checkReceipts()),\n    },\n    {\n      path: \"/mobile-push/prune\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => {\n        const cutoff = new Date(Date.now() - staleAfterDays * 86_400_000);\n        const removed = await ctx.store.remove(DEVICE, { lastSeenAt: { lt: cutoff } });\n        return Response.json({ removed });\n      },\n    },\n  ];\n\n  return {\n    id: \"mobilePush\",\n    channels: [\"mobilePush\"],\n    schema: mobilePushSchema,\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    hooks: {\n      deliver: async (context: DeliverContext): Promise<DeliveryOutcome> => {\n        const devices = await ctx.store.find<MobilePushDevice>(DEVICE, {\n          userId: context.notification.userId,\n        });\n        if (devices.length === 0) return { result: \"skipped\", reason: \"no registered devices\" };\n\n        const rendered = options.render({\n          type: context.notification.type,\n          payload: context.notification.payload,\n        });\n        const data = {\n          ...rendered.data,\n          notificationId: context.notification.id,\n          type: context.notification.type,\n        };\n\n        const tickets = await options.provider.send(\n          devices.map((device) => ({ ...rendered, data, token: device.token })),\n          context.signal,\n        );\n\n        const prune: string[] = [];\n        const accepted: { id: string; deviceId: string; createdAt: Date }[] = [];\n        let delivered = 0;\n        let retryable = false;\n        let lastError = \"\";\n        const now = new Date();\n\n        tickets.forEach((ticket, index) => {\n          const device = devices[index];\n          if (!device) return;\n          if (ticket.ok) {\n            delivered += 1;\n            if (ticket.ticketId)\n              accepted.push({ id: ticket.ticketId, deviceId: device.id, createdAt: now });\n            return;\n          }\n          lastError = ticket.error;\n          if (ticket.gone) prune.push(device.id);\n          else if (ticket.retryable) retryable = true;\n        });\n\n        if (prune.length > 0) await ctx.store.remove(DEVICE, { id: { in: prune } });\n        if (accepted.length > 0 && options.provider.receipts) {\n          // Best effort: a failed bookkeeping insert must not fail a delivered push.\n          await ctx.store\n            .insert(TICKET, accepted)\n            .catch((error) =>\n              ctx.logger.warn(`mobile push: could not record tickets: ${String(error)}`),\n            );\n        }\n\n        if (delivered > 0) return { result: \"sent\" };\n        if (prune.length === devices.length) {\n          return { result: \"failed\", error: \"every device token is gone\", retryable: false };\n        }\n        return { result: \"failed\", error: lastError || \"no device accepted the push\", retryable };\n      },\n    },\n\n    routes,\n    checkReceipts,\n  };\n}\n"]}

package/dist/plugins/mobile-push.d.cts

@@ -1,4 +1,4 @@
-import { h as EasyPingPlugin } from '../plugin-6S8tpH0n.cjs';
+import { h as EasyPingPlugin } from '../plugin-p4HS8yjS.cjs';
 import { MobilePushProvider, MobilePushMessage } from '../providers/expo-push.cjs';
 import '../adapter-CV5Yt2c6.cjs';
 

package/dist/plugins/mobile-push.d.ts

@@ -1,4 +1,4 @@
-import { h as EasyPingPlugin } from '../plugin-C4fikLl7.js';
+import { h as EasyPingPlugin } from '../plugin-Bp68CCnd.js';
 import { MobilePushProvider, MobilePushMessage } from '../providers/expo-push.js';
 import '../adapter-CV5Yt2c6.js';
 

package/dist/plugins/mobile-push.js

@@ -1,4 +1,4 @@
-import { readJsonBody } from '../chunk-JOVIZXO6.js';
+import { readJsonBody } from '../chunk-CFLVAF2R.js';
 import '../chunk-ORZKH224.js';
 import '../chunk-PTGHMCCG.js';
 
@@ -6,6 +6,7 @@ import '../chunk-PTGHMCCG.js';
 var DEVICE = "notification_mobile_push_device";
 var TICKET = "notification_mobile_push_ticket";
 var PLATFORMS = ["ios", "android", "web"];
+var MAX_TOKEN_LENGTH = 512;
 var mobilePushSchema = {
   mobilePushDevice: {
     tableName: DEVICE,
@@ -75,7 +76,7 @@ function mobilePush(options) {
         const parsed = await readJsonBody(request);
         if ("error" in parsed) return parsed.error;
         const { token, platform, deviceName } = parsed.body;
-        if (typeof token !== "string" || !options.provider.isValidToken(token)) {
+        if (typeof token !== "string" || token.length > MAX_TOKEN_LENGTH || !options.provider.isValidToken(token)) {
           return Response.json(
             { error: `token is not a valid ${options.provider.name} push token` },
             { status: 400 }

package/dist/plugins/mobile-push.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/plugins/mobile-push/index.ts"],"names":[],"mappings":";;;;;AAWA,IAAM,MAAA,GAAS,iCAAA;AACf,IAAM,MAAA,GAAS,iCAAA;AAgCf,IAAM,SAAA,GAA2C,CAAC,KAAA,EAAO,SAAA,EAAW,KAAK,CAAA;AAGlE,IAAM,gBAAA,GAAmB;AAAA,EAC9B,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACxC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC7B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,YAAY,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC/D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,QAAQ,CAAA,EAAG,MAAM,6BAAA,EAA8B;AAAA;AAAA,MAEtD,EAAE,IAAI,CAAC,OAAO,GAAG,MAAA,EAAQ,IAAA,EAAM,MAAM,8BAAA;AAA+B;AACtE,GACF;AAAA,EACA,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,CAAC,WAAW,CAAA,EAAG,IAAA,EAAM,gCAAA,EAAkC;AAAA;AAE3E;AAEA,IAAM,WAAA,GAAc,CAAC,KAAA,KAA4B;AAC/C,EAAA,MAAM,OAAQ,KAAA,EAA8B,IAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,IAAA,EAAO,OAAO,IAAA;AAC/C,EAAA,MAAM,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAClE,EAAA,OAAO,mBAAA,CAAoB,KAAK,IAAI,CAAA;AACtC,CAAA;AAaO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,IAAI,GAAA;AACJ,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,GAAA;AACjD,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,CAAQ,qBAAqB,EAAE,CAAA;AAE9D,EAAA,eAAe,aAAA,GAAgB;AAC7B,IAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,QAAA,SAAiB,EAAE,OAAA,EAAS,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAE;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,MAC9B,MAAA;AAAA,MACA,EAAC;AAAA,MACD,EAAE,SAAS,EAAE,KAAA,EAAO,aAAa,SAAA,EAAW,KAAA,EAAM,EAAG,KAAA,EAAO,GAAA;AAAK,KACnE;AACA,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,QAAQ,CAAA,EAAE;AAEzD,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAC,CAAA;AACnF,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,QAAQ,CAAC,CAAC,CAAA;AAC9E,IAAA,MAAM,OAAO,QAAA,CAAS,OAAA;AAAA,MAAQ,CAAC,OAAA,KAC7B,CAAC,OAAA,CAAQ,MAAM,OAAA,CAAQ,IAAA,GAAO,CAAC,QAAA,CAAS,IAAI,OAAA,CAAQ,QAAQ,CAAA,IAAK,EAAE,IAAI;AAAC,KAC1E;AACA,IAAA,MAAM,UAAU,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY,QAAQ,QAAQ,CAAA;AAE1D,IAAA,IAAI,KAAK,MAAA,GAAS,CAAA,EAAG,MAAM,GAAA,CAAI,MAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,IAAA,CAAK,OAAO,OAAO,CAAA,IAAK,CAAA;AACxF,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,IAAW,CAAA;AAE9E,IAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,KAAK,IAAS,CAAA;AACnD,IAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,WAAW,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAE5D,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,KAAK,MAAA,EAAO;AAAA,EACxD;AAEA,EAAA,MAAM,MAAA,GAA4B;AAAA,IAChC;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AAErC,QAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAU,UAAA,KAAe,MAAA,CAAO,IAAA;AAK/C,QAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,QAAQ,QAAA,CAAS,YAAA,CAAa,KAAK,CAAA,EAAG;AACtE,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,qBAAA,EAAwB,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,WAAA,CAAA,EAAc;AAAA,YACpE,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,SAAA,CAAU,QAAA,CAAS,QAA8B,CAAA,EAAG;AACvF,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,wBAAA,EAA2B,UAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,EAAG;AAAA,YAC3D,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,OAAO,UAAA,KAAe,QAAA,GAAW,WAAW,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,GAAI,IAAA;AACzE,QAAA,MAAM,QAAQ,MAAA,IAAU,EAAA;AACxB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAGrB,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,MAAM,IAAI,KAAA,CAAM,IAAA,CAAuB,MAAA,EAAQ,EAAE,KAAA,EAAM,EAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AACzF,QAAA,IAAI,QAAA,IAAY,QAAA,CAAS,MAAA,KAAW,KAAA,EAAO;AACzC,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,YAClD,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,MAAM,IAAI,KAAA,CAAM,MAAA;AAAA,YACd,MAAA;AAAA,YACA,EAAE,EAAA,EAAI,QAAA,CAAS,EAAA,EAAG;AAAA,YAClB,EAAE,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,YAAY,GAAA;AAAI,WAChD;AACA,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,QACnC;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,QAAQ,KAAA,EAAM;AAAA,UAChB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,OAAM;AAAE,SACvD;AACA,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,GAAS,UAAA,GAAa,CAAA;AAC7C,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAA;AAAE,WAC/D,CAAA;AAAA,QACH;AACA,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B;AAAA,cACE,EAAA,EAAI,OAAO,UAAA,EAAW;AAAA,cACtB,MAAA,EAAQ,KAAA;AAAA,cACR,KAAA;AAAA,cACA,QAAA;AAAA,cACA,UAAA,EAAY,IAAA;AAAA,cACZ,SAAA,EAAW,GAAA;AAAA,cACX,UAAA,EAAY;AAAA;AACd,WACD,CAAA;AAAA,QACH,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,YAAA,OAAO,QAAA,CAAS,IAAA;AAAA,cACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,cAClD,EAAE,QAAQ,GAAA;AAAI,aAChB;AAAA,UACF;AACA,UAAA,MAAM,KAAA;AAAA,QACR;AACA,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACnC;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAG;AAAA,UACvB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,QAAO;AAAE,SACxD;AACA,QAAA,OAAO,SAAS,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY;AAAA,YAChC,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,YAAY,MAAA,CAAO,UAAA;AAAA;AAAA,YAEnB,WAAA,EAAa,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,EAAE,CAAA;AAAA,YAClC,UAAA,EAAY,MAAA,CAAO,UAAA,CAAW,WAAA;AAAY,WAC5C,CAAE;AAAA,SACH,CAAA;AAAA,MACH;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,6BAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,QAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAA,CAAO,IAAA;AACzB,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,EAAA,EAAI;AAC7C,UAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,qBAAoB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,QACtE;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAI,KAAA,EAAO,CAAA;AAC9E,QAAA,OAAO,OAAA,KAAY,CAAA,GAAI,IAAI,QAAA,CAAS,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAI,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACzF;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,uBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY,QAAA,CAAS,IAAA,CAAK,MAAM,eAAe;AAAA,KAC1D;AAAA,IACA;AAAA,MACE,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY;AACnB,QAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,iBAAiB,KAAU,CAAA;AAChE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,UAAA,EAAY,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAC7E,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAA,EAAS,CAAA;AAAA,MAClC;AAAA;AACF,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,YAAA;AAAA,IACJ,QAAA,EAAU,CAAC,YAAY,CAAA;AAAA,IACvB,MAAA,EAAQ,gBAAA;AAAA,IAER,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,OAAO,OAAA,KAAsD;AACpE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,KAAuB,MAAA,EAAQ;AAAA,UAC7D,MAAA,EAAQ,QAAQ,YAAA,CAAa;AAAA,SAC9B,CAAA;AACD,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,QAAQ,uBAAA,EAAwB;AAEtF,QAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO;AAAA,UAC9B,IAAA,EAAM,QAAQ,YAAA,CAAa,IAAA;AAAA,UAC3B,OAAA,EAAS,QAAQ,YAAA,CAAa;AAAA,SAC/B,CAAA;AACD,QAAA,MAAM,IAAA,GAAO;AAAA,UACX,GAAG,QAAA,CAAS,IAAA;AAAA,UACZ,cAAA,EAAgB,QAAQ,YAAA,CAAa,EAAA;AAAA,UACrC,IAAA,EAAM,QAAQ,YAAA,CAAa;AAAA,SAC7B;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,IAAA;AAAA,UACrC,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY,EAAE,GAAG,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,CAAE,CAAA;AAAA,UACpE,OAAA,CAAQ;AAAA,SACV;AAEA,QAAA,MAAM,QAAkB,EAAC;AACzB,QAAA,MAAM,WAAgE,EAAC;AACvE,QAAA,IAAI,SAAA,GAAY,CAAA;AAChB,QAAA,IAAI,SAAA,GAAY,KAAA;AAChB,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAErB,QAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,MAAA,EAAQ,KAAA,KAAU;AACjC,UAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,UAAA,IAAI,CAAC,MAAA,EAAQ;AACb,UAAA,IAAI,OAAO,EAAA,EAAI;AACb,YAAA,SAAA,IAAa,CAAA;AACb,YAAA,IAAI,MAAA,CAAO,QAAA;AACT,cAAA,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,CAAO,QAAA,EAAU,UAAU,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,GAAA,EAAK,CAAA;AAC5E,YAAA;AAAA,UACF;AACA,UAAA,SAAA,GAAY,MAAA,CAAO,KAAA;AACnB,UAAA,IAAI,MAAA,CAAO,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,eAAA,IAC5B,MAAA,CAAO,WAAW,SAAA,GAAY,IAAA;AAAA,QACzC,CAAC,CAAA;AAED,QAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,IAAS,CAAA;AAC1E,QAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,OAAA,CAAQ,SAAS,QAAA,EAAU;AAEpD,UAAA,MAAM,GAAA,CAAI,KAAA,CACP,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA,CACvB,KAAA;AAAA,YAAM,CAAC,UACN,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,uCAAA,EAA0C,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE;AAAA,WAC3E;AAAA,QACJ;AAEA,QAAA,IAAI,SAAA,GAAY,CAAA,EAAG,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC3C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,CAAQ,MAAA,EAAQ;AACnC,UAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,4BAAA,EAA8B,WAAW,KAAA,EAAM;AAAA,QACnF;AACA,QAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,SAAA,IAAa,+BAA+B,SAAA,EAAU;AAAA,MAC1F;AAAA,KACF;AAAA,IAEA,MAAA;AAAA,IACA;AAAA,GACF;AACF","file":"mobile-push.js","sourcesContent":["import type { DeliveryOutcome } from \"../../core/adapter\";\nimport { readJsonBody } from \"../../core/handler\";\nimport type {\n  DeliverContext,\n  EasyPingPlugin,\n  PluginInitContext,\n  RouteDefinition,\n  SchemaDeclaration,\n} from \"../../core/plugin\";\nimport type { MobilePushMessage, MobilePushProvider } from \"../../providers/expo-push\";\n\nconst DEVICE = \"notification_mobile_push_device\";\nconst TICKET = \"notification_mobile_push_ticket\";\n\nexport type MobilePushPlatform = \"ios\" | \"android\" | \"web\";\n\nexport type MobilePushDevice = {\n  id: string;\n  userId: string;\n  token: string;\n  platform: MobilePushPlatform;\n  deviceName: string | null;\n  createdAt: Date;\n  lastSeenAt: Date;\n};\n\nexport type MobilePushTicketRow = {\n  id: string;\n  deviceId: string;\n  createdAt: Date;\n};\n\nexport type MobilePushRendered = Omit<MobilePushMessage, \"token\">;\n\nexport type MobilePushOptions = {\n  provider: MobilePushProvider;\n  /** What the OS notification shows. `data` rides along to the app's tap handler. */\n  render: (input: { type: string; payload: unknown }) => MobilePushRendered;\n  /** Devices untouched for this long are pruned by POST /mobile-push/prune. Default 180 days. */\n  staleAfterDays?: number | undefined;\n  /** Registering past this evicts the user's least recently seen device. Default 20. */\n  maxDevicesPerUser?: number | undefined;\n};\n\nconst PLATFORMS: readonly MobilePushPlatform[] = [\"ios\", \"android\", \"web\"];\n\n/** The tables this plugin owns, exported so DDL needs no plugin instance. */\nexport const mobilePushSchema = {\n  mobilePushDevice: {\n    tableName: DEVICE,\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      token: { type: \"string\", required: true },\n      platform: { type: \"string\", required: true },\n      deviceName: { type: \"string\" },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n      lastSeenAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\"], name: \"mobile_push_device_user_idx\" },\n      // One row per token: re-registering updates instead of duplicating.\n      { on: [\"token\"], unique: true, name: \"mobile_push_device_token_idx\" },\n    ],\n  },\n  mobilePushTicket: {\n    tableName: TICKET,\n    fields: {\n      id: { type: \"string\", required: true },\n      deviceId: { type: \"string\", required: true },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [{ on: [\"createdAt\"], name: \"mobile_push_ticket_created_idx\" }],\n  },\n} as const satisfies SchemaDeclaration;\n\nconst isDuplicate = (error: unknown): boolean => {\n  const code = (error as { code?: unknown })?.code;\n  if (code === \"23505\" || code === 11000) return true;\n  const text = error instanceof Error ? error.message : String(error);\n  return /duplicate|unique/i.test(text);\n};\n\nexport type MobilePushPlugin = EasyPingPlugin<\"mobilePush\", typeof mobilePushSchema> & {\n  /**\n   * Asks the provider for the verdict on accepted messages and prunes devices\n   * it reports gone. Expo learns \"device not registered\" from APNs/FCM only\n   * after accepting the message, so this is where uninstalls are caught.\n   * Also mounted as POST /mobile-push/receipts for the cron.\n   */\n  checkReceipts(): Promise<{ checked: number; pruned: number }>;\n};\n\n/** Native push through a token registry. Fans out per device; dead tokens are pruned on the spot or by receipt. */\nexport function mobilePush(options: MobilePushOptions): MobilePushPlugin {\n  let ctx: PluginInitContext;\n  const staleAfterDays = options.staleAfterDays ?? 180;\n  const maxDevices = Math.max(1, options.maxDevicesPerUser ?? 20);\n\n  async function checkReceipts() {\n    if (!options.provider.receipts) return { checked: 0, pruned: 0 };\n    const tickets = await ctx.store.find<MobilePushTicketRow>(\n      TICKET,\n      {},\n      { orderBy: { field: \"createdAt\", direction: \"asc\" }, limit: 1000 },\n    );\n    if (tickets.length === 0) return { checked: 0, pruned: 0 };\n\n    const receipts = await options.provider.receipts(tickets.map((ticket) => ticket.id));\n    const byTicket = new Map(tickets.map((ticket) => [ticket.id, ticket.deviceId]));\n    const gone = receipts.flatMap((receipt) =>\n      !receipt.ok && receipt.gone ? [byTicket.get(receipt.ticketId) ?? \"\"] : [],\n    );\n    const settled = receipts.map((receipt) => receipt.ticketId);\n\n    if (gone.length > 0) await ctx.store.remove(DEVICE, { id: { in: gone.filter(Boolean) } });\n    if (settled.length > 0) await ctx.store.remove(TICKET, { id: { in: settled } });\n    // Receipts the service has already forgotten (older than a day) would sit forever.\n    const cutoff = new Date(Date.now() - 24 * 3_600_000);\n    await ctx.store.remove(TICKET, { createdAt: { lt: cutoff } });\n\n    return { checked: settled.length, pruned: gone.length };\n  }\n\n  const routes: RouteDefinition[] = [\n    {\n      path: \"/mobile-push/devices\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n\n        const { token, platform, deviceName } = parsed.body as {\n          token?: unknown;\n          platform?: unknown;\n          deviceName?: unknown;\n        };\n        if (typeof token !== \"string\" || !options.provider.isValidToken(token)) {\n          return Response.json(\n            { error: `token is not a valid ${options.provider.name} push token` },\n            { status: 400 },\n          );\n        }\n        if (typeof platform !== \"string\" || !PLATFORMS.includes(platform as MobilePushPlatform)) {\n          return Response.json(\n            { error: `platform must be one of ${PLATFORMS.join(\", \")}` },\n            { status: 400 },\n          );\n        }\n        const name = typeof deviceName === \"string\" ? deviceName.slice(0, 120) : null;\n        const owner = userId ?? \"\";\n        const now = new Date();\n\n        // A token belongs to one account for life; upserting on token alone would let anyone re-home it.\n        const [existing] = await ctx.store.find<MobilePushDevice>(DEVICE, { token }, { limit: 1 });\n        if (existing && existing.userId !== owner) {\n          return Response.json(\n            { error: \"token is registered to another account\" },\n            { status: 409 },\n          );\n        }\n        if (existing) {\n          await ctx.store.update(\n            DEVICE,\n            { id: existing.id },\n            { platform, deviceName: name, lastSeenAt: now },\n          );\n          return Response.json({ ok: true });\n        }\n\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: owner },\n          { orderBy: { field: \"lastSeenAt\", direction: \"asc\" } },\n        );\n        const excess = devices.length - maxDevices + 1;\n        if (excess > 0) {\n          await ctx.store.remove(DEVICE, {\n            id: { in: devices.slice(0, excess).map((device) => device.id) },\n          });\n        }\n        try {\n          await ctx.store.insert(DEVICE, [\n            {\n              id: crypto.randomUUID(),\n              userId: owner,\n              token,\n              platform,\n              deviceName: name,\n              createdAt: now,\n              lastSeenAt: now,\n            },\n          ]);\n        } catch (error) {\n          if (isDuplicate(error)) {\n            return Response.json(\n              { error: \"token is registered to another account\" },\n              { status: 409 },\n            );\n          }\n          throw error;\n        }\n        return Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/devices\",\n      method: \"GET\",\n      scope: { type: \"user\" },\n      handler: async ({ userId }) => {\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: userId ?? \"\" },\n          { orderBy: { field: \"lastSeenAt\", direction: \"desc\" } },\n        );\n        return Response.json({\n          devices: devices.map((device) => ({\n            platform: device.platform,\n            deviceName: device.deviceName,\n            // The token itself is not returned: it is a capability, not a label.\n            tokenSuffix: device.token.slice(-6),\n            lastSeenAt: device.lastSeenAt.toISOString(),\n          })),\n        });\n      },\n    },\n    {\n      path: \"/mobile-push/devices/remove\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n        const { token } = parsed.body;\n        if (typeof token !== \"string\" || token === \"\") {\n          return Response.json({ error: \"token is required\" }, { status: 400 });\n        }\n        const removed = await ctx.store.remove(DEVICE, { userId: userId ?? \"\", token });\n        return removed === 0 ? new Response(null, { status: 404 }) : Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/receipts\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => Response.json(await checkReceipts()),\n    },\n    {\n      path: \"/mobile-push/prune\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => {\n        const cutoff = new Date(Date.now() - staleAfterDays * 86_400_000);\n        const removed = await ctx.store.remove(DEVICE, { lastSeenAt: { lt: cutoff } });\n        return Response.json({ removed });\n      },\n    },\n  ];\n\n  return {\n    id: \"mobilePush\",\n    channels: [\"mobilePush\"],\n    schema: mobilePushSchema,\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    hooks: {\n      deliver: async (context: DeliverContext): Promise<DeliveryOutcome> => {\n        const devices = await ctx.store.find<MobilePushDevice>(DEVICE, {\n          userId: context.notification.userId,\n        });\n        if (devices.length === 0) return { result: \"skipped\", reason: \"no registered devices\" };\n\n        const rendered = options.render({\n          type: context.notification.type,\n          payload: context.notification.payload,\n        });\n        const data = {\n          ...rendered.data,\n          notificationId: context.notification.id,\n          type: context.notification.type,\n        };\n\n        const tickets = await options.provider.send(\n          devices.map((device) => ({ ...rendered, data, token: device.token })),\n          context.signal,\n        );\n\n        const prune: string[] = [];\n        const accepted: { id: string; deviceId: string; createdAt: Date }[] = [];\n        let delivered = 0;\n        let retryable = false;\n        let lastError = \"\";\n        const now = new Date();\n\n        tickets.forEach((ticket, index) => {\n          const device = devices[index];\n          if (!device) return;\n          if (ticket.ok) {\n            delivered += 1;\n            if (ticket.ticketId)\n              accepted.push({ id: ticket.ticketId, deviceId: device.id, createdAt: now });\n            return;\n          }\n          lastError = ticket.error;\n          if (ticket.gone) prune.push(device.id);\n          else if (ticket.retryable) retryable = true;\n        });\n\n        if (prune.length > 0) await ctx.store.remove(DEVICE, { id: { in: prune } });\n        if (accepted.length > 0 && options.provider.receipts) {\n          // Best effort: a failed bookkeeping insert must not fail a delivered push.\n          await ctx.store\n            .insert(TICKET, accepted)\n            .catch((error) =>\n              ctx.logger.warn(`mobile push: could not record tickets: ${String(error)}`),\n            );\n        }\n\n        if (delivered > 0) return { result: \"sent\" };\n        if (prune.length === devices.length) {\n          return { result: \"failed\", error: \"every device token is gone\", retryable: false };\n        }\n        return { result: \"failed\", error: lastError || \"no device accepted the push\", retryable };\n      },\n    },\n\n    routes,\n    checkReceipts,\n  };\n}\n"]}
+{"version":3,"sources":["../../src/plugins/mobile-push/index.ts"],"names":[],"mappings":";;;;;AAWA,IAAM,MAAA,GAAS,iCAAA;AACf,IAAM,MAAA,GAAS,iCAAA;AAgCf,IAAM,SAAA,GAA2C,CAAC,KAAA,EAAO,SAAA,EAAW,KAAK,CAAA;AAEzE,IAAM,gBAAA,GAAmB,GAAA;AAGlB,IAAM,gBAAA,GAAmB;AAAA,EAC9B,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACxC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC7B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,YAAY,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC/D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,QAAQ,CAAA,EAAG,MAAM,6BAAA,EAA8B;AAAA;AAAA,MAEtD,EAAE,IAAI,CAAC,OAAO,GAAG,MAAA,EAAQ,IAAA,EAAM,MAAM,8BAAA;AAA+B;AACtE,GACF;AAAA,EACA,gBAAA,EAAkB;AAAA,IAChB,SAAA,EAAW,MAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC3C,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS,CAAC,EAAE,EAAA,EAAI,CAAC,WAAW,CAAA,EAAG,IAAA,EAAM,gCAAA,EAAkC;AAAA;AAE3E;AAEA,IAAM,WAAA,GAAc,CAAC,KAAA,KAA4B;AAC/C,EAAA,MAAM,OAAQ,KAAA,EAA8B,IAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS,IAAA,EAAO,OAAO,IAAA;AAC/C,EAAA,MAAM,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAClE,EAAA,OAAO,mBAAA,CAAoB,KAAK,IAAI,CAAA;AACtC,CAAA;AAaO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,IAAI,GAAA;AACJ,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,GAAA;AACjD,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,CAAQ,qBAAqB,EAAE,CAAA;AAE9D,EAAA,eAAe,aAAA,GAAgB;AAC7B,IAAA,IAAI,CAAC,QAAQ,QAAA,CAAS,QAAA,SAAiB,EAAE,OAAA,EAAS,CAAA,EAAG,MAAA,EAAQ,CAAA,EAAE;AAC/D,IAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,MAC9B,MAAA;AAAA,MACA,EAAC;AAAA,MACD,EAAE,SAAS,EAAE,KAAA,EAAO,aAAa,SAAA,EAAW,KAAA,EAAM,EAAG,KAAA,EAAO,GAAA;AAAK,KACnE;AACA,IAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,QAAQ,CAAA,EAAE;AAEzD,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAC,CAAA;AACnF,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,QAAQ,CAAC,CAAC,CAAA;AAC9E,IAAA,MAAM,OAAO,QAAA,CAAS,OAAA;AAAA,MAAQ,CAAC,OAAA,KAC7B,CAAC,OAAA,CAAQ,MAAM,OAAA,CAAQ,IAAA,GAAO,CAAC,QAAA,CAAS,IAAI,OAAA,CAAQ,QAAQ,CAAA,IAAK,EAAE,IAAI;AAAC,KAC1E;AACA,IAAA,MAAM,UAAU,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY,QAAQ,QAAQ,CAAA;AAE1D,IAAA,IAAI,KAAK,MAAA,GAAS,CAAA,EAAG,MAAM,GAAA,CAAI,MAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,IAAA,CAAK,OAAO,OAAO,CAAA,IAAK,CAAA;AACxF,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,IAAW,CAAA;AAE9E,IAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,KAAK,IAAS,CAAA;AACnD,IAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,WAAW,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAE5D,IAAA,OAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,MAAA,EAAQ,MAAA,EAAQ,KAAK,MAAA,EAAO;AAAA,EACxD;AAEA,EAAA,MAAM,MAAA,GAA4B;AAAA,IAChC;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AAErC,QAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAU,UAAA,KAAe,MAAA,CAAO,IAAA;AAK/C,QAAA,IACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,CAAM,MAAA,GAAS,gBAAA,IACf,CAAC,OAAA,CAAQ,QAAA,CAAS,YAAA,CAAa,KAAK,CAAA,EACpC;AACA,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,qBAAA,EAAwB,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA,WAAA,CAAA,EAAc;AAAA,YACpE,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,CAAC,SAAA,CAAU,QAAA,CAAS,QAA8B,CAAA,EAAG;AACvF,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,KAAA,EAAO,CAAA,wBAAA,EAA2B,UAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,EAAG;AAAA,YAC3D,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,OAAO,UAAA,KAAe,QAAA,GAAW,WAAW,KAAA,CAAM,CAAA,EAAG,GAAG,CAAA,GAAI,IAAA;AACzE,QAAA,MAAM,QAAQ,MAAA,IAAU,EAAA;AACxB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAGrB,QAAA,MAAM,CAAC,QAAQ,CAAA,GAAI,MAAM,IAAI,KAAA,CAAM,IAAA,CAAuB,MAAA,EAAQ,EAAE,KAAA,EAAM,EAAG,EAAE,KAAA,EAAO,GAAG,CAAA;AACzF,QAAA,IAAI,QAAA,IAAY,QAAA,CAAS,MAAA,KAAW,KAAA,EAAO;AACzC,UAAA,OAAO,QAAA,CAAS,IAAA;AAAA,YACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,YAClD,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,MAAM,IAAI,KAAA,CAAM,MAAA;AAAA,YACd,MAAA;AAAA,YACA,EAAE,EAAA,EAAI,QAAA,CAAS,EAAA,EAAG;AAAA,YAClB,EAAE,QAAA,EAAU,UAAA,EAAY,IAAA,EAAM,YAAY,GAAA;AAAI,WAChD;AACA,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,QACnC;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,QAAQ,KAAA,EAAM;AAAA,UAChB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,OAAM;AAAE,SACvD;AACA,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,GAAS,UAAA,GAAa,CAAA;AAC7C,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B,EAAA,EAAI,EAAE,EAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,MAAA,KAAW,MAAA,CAAO,EAAE,CAAA;AAAE,WAC/D,CAAA;AAAA,QACH;AACA,QAAA,IAAI;AACF,UAAA,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ;AAAA,YAC7B;AAAA,cACE,EAAA,EAAI,OAAO,UAAA,EAAW;AAAA,cACtB,MAAA,EAAQ,KAAA;AAAA,cACR,KAAA;AAAA,cACA,QAAA;AAAA,cACA,UAAA,EAAY,IAAA;AAAA,cACZ,SAAA,EAAW,GAAA;AAAA,cACX,UAAA,EAAY;AAAA;AACd,WACD,CAAA;AAAA,QACH,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,YAAA,OAAO,QAAA,CAAS,IAAA;AAAA,cACd,EAAE,OAAO,wCAAA,EAAyC;AAAA,cAClD,EAAE,QAAQ,GAAA;AAAI,aAChB;AAAA,UACF;AACA,UAAA,MAAM,KAAA;AAAA,QACR;AACA,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACnC;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,sBAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,IAAA;AAAA,UAC9B,MAAA;AAAA,UACA,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAG;AAAA,UACvB,EAAE,OAAA,EAAS,EAAE,OAAO,YAAA,EAAc,SAAA,EAAW,QAAO;AAAE,SACxD;AACA,QAAA,OAAO,SAAS,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY;AAAA,YAChC,UAAU,MAAA,CAAO,QAAA;AAAA,YACjB,YAAY,MAAA,CAAO,UAAA;AAAA;AAAA,YAEnB,WAAA,EAAa,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,EAAE,CAAA;AAAA,YAClC,UAAA,EAAY,MAAA,CAAO,UAAA,CAAW,WAAA;AAAY,WAC5C,CAAE;AAAA,SACH,CAAA;AAAA,MACH;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,6BAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,QAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,OAAO,CAAA;AACzC,QAAA,IAAI,OAAA,IAAW,MAAA,EAAQ,OAAO,MAAA,CAAO,KAAA;AACrC,QAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAA,CAAO,IAAA;AACzB,QAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,EAAA,EAAI;AAC7C,UAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,qBAAoB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,QACtE;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,MAAA,EAAQ,MAAA,IAAU,EAAA,EAAI,KAAA,EAAO,CAAA;AAC9E,QAAA,OAAO,OAAA,KAAY,CAAA,GAAI,IAAI,QAAA,CAAS,MAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,IAAI,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,MACzF;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,uBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY,QAAA,CAAS,IAAA,CAAK,MAAM,eAAe;AAAA,KAC1D;AAAA,IACA;AAAA,MACE,IAAA,EAAM,oBAAA;AAAA,MACN,MAAA,EAAQ,MAAA;AAAA,MACR,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAU;AAAA,MACzB,SAAS,YAAY;AACnB,QAAA,MAAM,SAAS,IAAI,IAAA,CAAK,KAAK,GAAA,EAAI,GAAI,iBAAiB,KAAU,CAAA;AAChE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,UAAA,EAAY,EAAE,EAAA,EAAI,MAAA,EAAO,EAAG,CAAA;AAC7E,QAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,OAAA,EAAS,CAAA;AAAA,MAClC;AAAA;AACF,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,YAAA;AAAA,IACJ,QAAA,EAAU,CAAC,YAAY,CAAA;AAAA,IACvB,MAAA,EAAQ,gBAAA;AAAA,IAER,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,OAAO,OAAA,KAAsD;AACpE,QAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,KAAA,CAAM,KAAuB,MAAA,EAAQ;AAAA,UAC7D,MAAA,EAAQ,QAAQ,YAAA,CAAa;AAAA,SAC9B,CAAA;AACD,QAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,QAAQ,uBAAA,EAAwB;AAEtF,QAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,CAAO;AAAA,UAC9B,IAAA,EAAM,QAAQ,YAAA,CAAa,IAAA;AAAA,UAC3B,OAAA,EAAS,QAAQ,YAAA,CAAa;AAAA,SAC/B,CAAA;AACD,QAAA,MAAM,IAAA,GAAO;AAAA,UACX,GAAG,QAAA,CAAS,IAAA;AAAA,UACZ,cAAA,EAAgB,QAAQ,YAAA,CAAa,EAAA;AAAA,UACrC,IAAA,EAAM,QAAQ,YAAA,CAAa;AAAA,SAC7B;AAEA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,IAAA;AAAA,UACrC,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,MAAY,EAAE,GAAG,QAAA,EAAU,IAAA,EAAM,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,CAAE,CAAA;AAAA,UACpE,OAAA,CAAQ;AAAA,SACV;AAEA,QAAA,MAAM,QAAkB,EAAC;AACzB,QAAA,MAAM,WAAgE,EAAC;AACvE,QAAA,IAAI,SAAA,GAAY,CAAA;AAChB,QAAA,IAAI,SAAA,GAAY,KAAA;AAChB,QAAA,IAAI,SAAA,GAAY,EAAA;AAChB,QAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AAErB,QAAA,OAAA,CAAQ,OAAA,CAAQ,CAAC,MAAA,EAAQ,KAAA,KAAU;AACjC,UAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,UAAA,IAAI,CAAC,MAAA,EAAQ;AACb,UAAA,IAAI,OAAO,EAAA,EAAI;AACb,YAAA,SAAA,IAAa,CAAA;AACb,YAAA,IAAI,MAAA,CAAO,QAAA;AACT,cAAA,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,CAAO,QAAA,EAAU,UAAU,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,GAAA,EAAK,CAAA;AAC5E,YAAA;AAAA,UACF;AACA,UAAA,SAAA,GAAY,MAAA,CAAO,KAAA;AACnB,UAAA,IAAI,MAAA,CAAO,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,eAAA,IAC5B,MAAA,CAAO,WAAW,SAAA,GAAY,IAAA;AAAA,QACzC,CAAC,CAAA;AAED,QAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAE,EAAA,EAAI,KAAA,IAAS,CAAA;AAC1E,QAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,IAAK,OAAA,CAAQ,SAAS,QAAA,EAAU;AAEpD,UAAA,MAAM,GAAA,CAAI,KAAA,CACP,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA,CACvB,KAAA;AAAA,YAAM,CAAC,UACN,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,uCAAA,EAA0C,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE;AAAA,WAC3E;AAAA,QACJ;AAEA,QAAA,IAAI,SAAA,GAAY,CAAA,EAAG,OAAO,EAAE,QAAQ,MAAA,EAAO;AAC3C,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,CAAQ,MAAA,EAAQ;AACnC,UAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,4BAAA,EAA8B,WAAW,KAAA,EAAM;AAAA,QACnF;AACA,QAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,SAAA,IAAa,+BAA+B,SAAA,EAAU;AAAA,MAC1F;AAAA,KACF;AAAA,IAEA,MAAA;AAAA,IACA;AAAA,GACF;AACF","file":"mobile-push.js","sourcesContent":["import type { DeliveryOutcome } from \"../../core/adapter\";\nimport { readJsonBody } from \"../../core/handler\";\nimport type {\n  DeliverContext,\n  EasyPingPlugin,\n  PluginInitContext,\n  RouteDefinition,\n  SchemaDeclaration,\n} from \"../../core/plugin\";\nimport type { MobilePushMessage, MobilePushProvider } from \"../../providers/expo-push\";\n\nconst DEVICE = \"notification_mobile_push_device\";\nconst TICKET = \"notification_mobile_push_ticket\";\n\nexport type MobilePushPlatform = \"ios\" | \"android\" | \"web\";\n\nexport type MobilePushDevice = {\n  id: string;\n  userId: string;\n  token: string;\n  platform: MobilePushPlatform;\n  deviceName: string | null;\n  createdAt: Date;\n  lastSeenAt: Date;\n};\n\nexport type MobilePushTicketRow = {\n  id: string;\n  deviceId: string;\n  createdAt: Date;\n};\n\nexport type MobilePushRendered = Omit<MobilePushMessage, \"token\">;\n\nexport type MobilePushOptions = {\n  provider: MobilePushProvider;\n  /** What the OS notification shows. `data` rides along to the app's tap handler. */\n  render: (input: { type: string; payload: unknown }) => MobilePushRendered;\n  /** Devices untouched for this long are pruned by POST /mobile-push/prune. Default 180 days. */\n  staleAfterDays?: number | undefined;\n  /** Registering past this evicts the user's least recently seen device. Default 20. */\n  maxDevicesPerUser?: number | undefined;\n};\n\nconst PLATFORMS: readonly MobilePushPlatform[] = [\"ios\", \"android\", \"web\"];\n\nconst MAX_TOKEN_LENGTH = 512;\n\n/** The tables this plugin owns, exported so DDL needs no plugin instance. */\nexport const mobilePushSchema = {\n  mobilePushDevice: {\n    tableName: DEVICE,\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      token: { type: \"string\", required: true },\n      platform: { type: \"string\", required: true },\n      deviceName: { type: \"string\" },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n      lastSeenAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\"], name: \"mobile_push_device_user_idx\" },\n      // One row per token: re-registering updates instead of duplicating.\n      { on: [\"token\"], unique: true, name: \"mobile_push_device_token_idx\" },\n    ],\n  },\n  mobilePushTicket: {\n    tableName: TICKET,\n    fields: {\n      id: { type: \"string\", required: true },\n      deviceId: { type: \"string\", required: true },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [{ on: [\"createdAt\"], name: \"mobile_push_ticket_created_idx\" }],\n  },\n} as const satisfies SchemaDeclaration;\n\nconst isDuplicate = (error: unknown): boolean => {\n  const code = (error as { code?: unknown })?.code;\n  if (code === \"23505\" || code === 11000) return true;\n  const text = error instanceof Error ? error.message : String(error);\n  return /duplicate|unique/i.test(text);\n};\n\nexport type MobilePushPlugin = EasyPingPlugin<\"mobilePush\", typeof mobilePushSchema> & {\n  /**\n   * Asks the provider for the verdict on accepted messages and prunes devices\n   * it reports gone. Expo learns \"device not registered\" from APNs/FCM only\n   * after accepting the message, so this is where uninstalls are caught.\n   * Also mounted as POST /mobile-push/receipts for the cron.\n   */\n  checkReceipts(): Promise<{ checked: number; pruned: number }>;\n};\n\n/** Native push through a token registry. Fans out per device; dead tokens are pruned on the spot or by receipt. */\nexport function mobilePush(options: MobilePushOptions): MobilePushPlugin {\n  let ctx: PluginInitContext;\n  const staleAfterDays = options.staleAfterDays ?? 180;\n  const maxDevices = Math.max(1, options.maxDevicesPerUser ?? 20);\n\n  async function checkReceipts() {\n    if (!options.provider.receipts) return { checked: 0, pruned: 0 };\n    const tickets = await ctx.store.find<MobilePushTicketRow>(\n      TICKET,\n      {},\n      { orderBy: { field: \"createdAt\", direction: \"asc\" }, limit: 1000 },\n    );\n    if (tickets.length === 0) return { checked: 0, pruned: 0 };\n\n    const receipts = await options.provider.receipts(tickets.map((ticket) => ticket.id));\n    const byTicket = new Map(tickets.map((ticket) => [ticket.id, ticket.deviceId]));\n    const gone = receipts.flatMap((receipt) =>\n      !receipt.ok && receipt.gone ? [byTicket.get(receipt.ticketId) ?? \"\"] : [],\n    );\n    const settled = receipts.map((receipt) => receipt.ticketId);\n\n    if (gone.length > 0) await ctx.store.remove(DEVICE, { id: { in: gone.filter(Boolean) } });\n    if (settled.length > 0) await ctx.store.remove(TICKET, { id: { in: settled } });\n    // Receipts the service has already forgotten (older than a day) would sit forever.\n    const cutoff = new Date(Date.now() - 24 * 3_600_000);\n    await ctx.store.remove(TICKET, { createdAt: { lt: cutoff } });\n\n    return { checked: settled.length, pruned: gone.length };\n  }\n\n  const routes: RouteDefinition[] = [\n    {\n      path: \"/mobile-push/devices\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n\n        const { token, platform, deviceName } = parsed.body as {\n          token?: unknown;\n          platform?: unknown;\n          deviceName?: unknown;\n        };\n        if (\n          typeof token !== \"string\" ||\n          token.length > MAX_TOKEN_LENGTH ||\n          !options.provider.isValidToken(token)\n        ) {\n          return Response.json(\n            { error: `token is not a valid ${options.provider.name} push token` },\n            { status: 400 },\n          );\n        }\n        if (typeof platform !== \"string\" || !PLATFORMS.includes(platform as MobilePushPlatform)) {\n          return Response.json(\n            { error: `platform must be one of ${PLATFORMS.join(\", \")}` },\n            { status: 400 },\n          );\n        }\n        const name = typeof deviceName === \"string\" ? deviceName.slice(0, 120) : null;\n        const owner = userId ?? \"\";\n        const now = new Date();\n\n        // A token belongs to one account for life; upserting on token alone would let anyone re-home it.\n        const [existing] = await ctx.store.find<MobilePushDevice>(DEVICE, { token }, { limit: 1 });\n        if (existing && existing.userId !== owner) {\n          return Response.json(\n            { error: \"token is registered to another account\" },\n            { status: 409 },\n          );\n        }\n        if (existing) {\n          await ctx.store.update(\n            DEVICE,\n            { id: existing.id },\n            { platform, deviceName: name, lastSeenAt: now },\n          );\n          return Response.json({ ok: true });\n        }\n\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: owner },\n          { orderBy: { field: \"lastSeenAt\", direction: \"asc\" } },\n        );\n        const excess = devices.length - maxDevices + 1;\n        if (excess > 0) {\n          await ctx.store.remove(DEVICE, {\n            id: { in: devices.slice(0, excess).map((device) => device.id) },\n          });\n        }\n        try {\n          await ctx.store.insert(DEVICE, [\n            {\n              id: crypto.randomUUID(),\n              userId: owner,\n              token,\n              platform,\n              deviceName: name,\n              createdAt: now,\n              lastSeenAt: now,\n            },\n          ]);\n        } catch (error) {\n          if (isDuplicate(error)) {\n            return Response.json(\n              { error: \"token is registered to another account\" },\n              { status: 409 },\n            );\n          }\n          throw error;\n        }\n        return Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/devices\",\n      method: \"GET\",\n      scope: { type: \"user\" },\n      handler: async ({ userId }) => {\n        const devices = await ctx.store.find<MobilePushDevice>(\n          DEVICE,\n          { userId: userId ?? \"\" },\n          { orderBy: { field: \"lastSeenAt\", direction: \"desc\" } },\n        );\n        return Response.json({\n          devices: devices.map((device) => ({\n            platform: device.platform,\n            deviceName: device.deviceName,\n            // The token itself is not returned: it is a capability, not a label.\n            tokenSuffix: device.token.slice(-6),\n            lastSeenAt: device.lastSeenAt.toISOString(),\n          })),\n        });\n      },\n    },\n    {\n      path: \"/mobile-push/devices/remove\",\n      method: \"POST\",\n      scope: { type: \"user\" },\n      handler: async ({ request, userId }) => {\n        const parsed = await readJsonBody(request);\n        if (\"error\" in parsed) return parsed.error;\n        const { token } = parsed.body;\n        if (typeof token !== \"string\" || token === \"\") {\n          return Response.json({ error: \"token is required\" }, { status: 400 });\n        }\n        const removed = await ctx.store.remove(DEVICE, { userId: userId ?? \"\", token });\n        return removed === 0 ? new Response(null, { status: 404 }) : Response.json({ ok: true });\n      },\n    },\n    {\n      path: \"/mobile-push/receipts\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => Response.json(await checkReceipts()),\n    },\n    {\n      path: \"/mobile-push/prune\",\n      method: \"POST\",\n      scope: { type: \"machine\" },\n      handler: async () => {\n        const cutoff = new Date(Date.now() - staleAfterDays * 86_400_000);\n        const removed = await ctx.store.remove(DEVICE, { lastSeenAt: { lt: cutoff } });\n        return Response.json({ removed });\n      },\n    },\n  ];\n\n  return {\n    id: \"mobilePush\",\n    channels: [\"mobilePush\"],\n    schema: mobilePushSchema,\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    hooks: {\n      deliver: async (context: DeliverContext): Promise<DeliveryOutcome> => {\n        const devices = await ctx.store.find<MobilePushDevice>(DEVICE, {\n          userId: context.notification.userId,\n        });\n        if (devices.length === 0) return { result: \"skipped\", reason: \"no registered devices\" };\n\n        const rendered = options.render({\n          type: context.notification.type,\n          payload: context.notification.payload,\n        });\n        const data = {\n          ...rendered.data,\n          notificationId: context.notification.id,\n          type: context.notification.type,\n        };\n\n        const tickets = await options.provider.send(\n          devices.map((device) => ({ ...rendered, data, token: device.token })),\n          context.signal,\n        );\n\n        const prune: string[] = [];\n        const accepted: { id: string; deviceId: string; createdAt: Date }[] = [];\n        let delivered = 0;\n        let retryable = false;\n        let lastError = \"\";\n        const now = new Date();\n\n        tickets.forEach((ticket, index) => {\n          const device = devices[index];\n          if (!device) return;\n          if (ticket.ok) {\n            delivered += 1;\n            if (ticket.ticketId)\n              accepted.push({ id: ticket.ticketId, deviceId: device.id, createdAt: now });\n            return;\n          }\n          lastError = ticket.error;\n          if (ticket.gone) prune.push(device.id);\n          else if (ticket.retryable) retryable = true;\n        });\n\n        if (prune.length > 0) await ctx.store.remove(DEVICE, { id: { in: prune } });\n        if (accepted.length > 0 && options.provider.receipts) {\n          // Best effort: a failed bookkeeping insert must not fail a delivered push.\n          await ctx.store\n            .insert(TICKET, accepted)\n            .catch((error) =>\n              ctx.logger.warn(`mobile push: could not record tickets: ${String(error)}`),\n            );\n        }\n\n        if (delivered > 0) return { result: \"sent\" };\n        if (prune.length === devices.length) {\n          return { result: \"failed\", error: \"every device token is gone\", retryable: false };\n        }\n        return { result: \"failed\", error: lastError || \"no device accepted the push\", retryable };\n      },\n    },\n\n    routes,\n    checkReceipts,\n  };\n}\n"]}

package/dist/plugins/preferences-client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/plugin.ts","../../src/plugins/preferences/client.ts"],"names":[],"mappings":";;;AA2LO,SAAS,mBACd,MAAA,EAC6B;AAC7B,EAAA,OAAO,MAAA;AACT;;;AC3KO,IAAM,iBAAA,GAAoB,MAC/B,kBAAA,CAAmB;AAAA,EACjB,EAAA,EAAI,aAAA;AAAA,EACJ,oBAAoB,EAAC;AAAA,EAErB,OAAA,EAAS,CAAC,KAAA,MAAW;AAAA,IACnB,eAAA,EAAiB,YAId,MAAM,KAAA,CAAM,cAAc,CAAA;AAAA,IAK7B,gBAAA,EAAkB,OAAO,KAAA,KACtB,MAAM,MAAM,cAAA,EAAgB;AAAA,MAC3B,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,KAAK;AAAA,KAC3B;AAAA,GACL;AACF,CAAC","file":"preferences-client.cjs","sourcesContent":["import type { DeliveryOutcome } from \"./adapter\";\nimport type { Logger } from \"./errors\";\nimport type { PluginStore } from \"./store\";\nimport type { SignRequest, TokenClaims } from \"./tokens\";\nimport type { Channel, Recipient } from \"./types\";\n\nexport type Promisable<T> = T | Promise<T>;\n\nexport type PrepareContext = {\n  type: string;\n  recipients: readonly Recipient[];\n};\n\nexport type BeforeSendContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  actorId: string | null;\n  dedupeKey: string | null;\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type BeforeSendResult =\n  | { action: \"continue\"; payload?: unknown; dedupeKey?: string }\n  | { action: \"cancel\"; reason: string };\n\nexport type ChannelDecision = {\n  channel: Channel;\n  action: \"send\" | \"skip\" | \"defer\";\n  /** defer only. Written to notification_delivery.not_before. */\n  notBefore?: Date | undefined;\n};\n\nexport type ResolveChannelsContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  decisions: readonly ChannelDecision[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type DeliverContext = {\n  channel: Channel;\n  deliveryId: string;\n  attempt: number;\n  recipient: Recipient;\n  notification: { id: string; userId: string; type: string; payload: unknown };\n  /** Aborted on the runner's timeout. */\n  signal: AbortSignal;\n};\n\nexport type AfterSendContext = {\n  type: string;\n  payload: unknown;\n  /** Committed rows. Ids exist only at this point. */\n  notifications: readonly { id: string; userId: string }[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type AfterDeliverContext = {\n  deliveryId: string;\n  notificationId: string;\n  userId: string;\n  channel: Channel;\n  outcome: DeliveryOutcome;\n  attempt: number;\n  isTerminal: boolean;\n};\n\n/** beforeSend and resolveChannels fail closed; afterDeliver fails open. */\nexport type PluginHooks = {\n  /** Once per send, for bulk loading — the per-recipient hooks would be an N+1. */\n  prepare?: (ctx: PrepareContext) => Promisable<unknown>;\n  beforeSend?: (ctx: BeforeSendContext) => Promisable<BeforeSendResult>;\n  resolveChannels?: (ctx: ResolveChannelsContext) => Promisable<readonly ChannelDecision[]>;\n  /** Once per send, after commit. The only hook that sees notification ids. Fails open. */\n  afterSend?: (ctx: AfterSendContext) => Promisable<void>;\n  /** Delivers one of the plugin's declared `channels`. Core carries inApp and email. */\n  deliver?: (ctx: DeliverContext) => Promisable<DeliveryOutcome>;\n  afterDeliver?: (ctx: AfterDeliverContext) => Promisable<void>;\n};\n\nexport type FieldType = \"string\" | \"number\" | \"boolean\" | \"date\" | \"json\";\n\nexport type FieldDeclaration = {\n  type: FieldType;\n  required?: boolean;\n  default?: string | number | boolean;\n  /** date fields only. Renders as defaultNow() / CURRENT_TIMESTAMP. */\n  defaultNow?: boolean;\n};\n\nexport type IndexDeclaration = {\n  on: readonly string[];\n  unique?: boolean;\n  name?: string;\n};\n\nexport type TableDeclaration = {\n  tableName: string;\n  fields: Record<string, FieldDeclaration>;\n  primaryKey?: readonly string[];\n  indexes?: readonly IndexDeclaration[];\n};\n\nexport type SchemaDeclaration = Record<string, TableDeclaration>;\n\nexport type RouteScope =\n  | { type: \"user\" }\n  | { type: \"machine\" }\n  | { type: \"signed\"; purpose: string }\n  | { type: \"custom\"; justification: string };\n\nexport type RouteContext = {\n  request: Request;\n  /** Resolved for user-scoped routes, so a handler cannot forget to scope. */\n  userId: string | null;\n  /** Verified before dispatch, so a handler cannot forget to check. */\n  claims: TokenClaims | null;\n  params: Record<string, string>;\n};\n\nexport type RouteDefinition = {\n  path: string;\n  method: \"GET\" | \"POST\";\n  scope: RouteScope;\n  handler: (ctx: RouteContext) => Promise<Response>;\n};\n\n/** Handed to a plugin at startup so it need not be given the database twice. */\nexport type PluginInitContext = {\n  /** Scoped to the tables this plugin declares in schema(). */\n  store: PluginStore;\n  /** Mints tokens for this plugin's own `signed` routes only. The secret itself is never handed out. */\n  sign: (request: SignRequest) => Promise<string>;\n  logger: Logger;\n  /** Configured notification names, so a route can refuse to store rows for types that do not exist. */\n  notificationTypes: readonly string[];\n  /** The app's resolver, for plugins that need timezones or addresses. */\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  /** The instance's own send(), so a composed message inherits retry, backoff and idempotency. */\n  send: (\n    type: string,\n    args: { to: string | readonly string[]; payload: unknown; dedupeKey?: string },\n  ) => Promise<unknown>;\n};\n\nexport type EasyPingPlugin<\n  TId extends string = string,\n  TSchema extends SchemaDeclaration = SchemaDeclaration,\n> = {\n  id: TId;\n  dependsOn?: readonly string[];\n  schema?: TSchema;\n  routes?: readonly RouteDefinition[];\n  hooks?: PluginHooks;\n  /** Channels this plugin delivers. Makes them usable in a notification. */\n  channels?: readonly Channel[];\n  /** Called once by easyPing() before any hook or route can run. */\n  init?: (ctx: PluginInitContext) => void;\n};\n\nexport type AnyPlugin = EasyPingPlugin<string, SchemaDeclaration>;\n\nexport function definePlugin<TId extends string, TSchema extends SchemaDeclaration>(\n  plugin: EasyPingPlugin<TId, TSchema>,\n): EasyPingPlugin<TId, TSchema> {\n  return plugin;\n}\n\nexport type ClientFetch = (path: string, init?: RequestInit) => Promise<unknown>;\n\nexport type ClientPlugin<\n  TId extends string = string,\n  TActions extends Record<string, unknown> = Record<string, unknown>,\n> = {\n  id: TId;\n  /** Phantom. Links client types to the server plugin so a mismatch is a type error. */\n  $InferServerPlugin?: AnyPlugin;\n  actions: (fetch: ClientFetch) => TActions;\n};\n\nexport type AnyClientPlugin = ClientPlugin<string, Record<string, unknown>>;\n\nexport function defineClientPlugin<TId extends string, TActions extends Record<string, unknown>>(\n  plugin: ClientPlugin<TId, TActions>,\n): ClientPlugin<TId, TActions> {\n  return plugin;\n}\n\nexport type UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (\n  k: infer I,\n) => void\n  ? I\n  : never;\n\n/** Naked type parameter, so the conditional distributes over the union. */\ntype ExtractActions<TPlugin> = TPlugin extends { actions: (fetch: never) => infer TActions }\n  ? TActions\n  : never;\n\n/** Indexes the tuple rather than recursing: a fold blows the instantiation depth limit. */\nexport type ActionsOf<TPlugins extends readonly AnyClientPlugin[]> = UnionToIntersection<\n  ExtractActions<TPlugins[number]>\n>;\n","import { defineClientPlugin } from \"../../core/plugin\";\nimport type { Channel, Frequency } from \"../../core/types\";\nimport type { preferences } from \"./index\";\n\nexport type PreferenceView = {\n  userId: string;\n  type: string;\n  channel: Channel;\n  enabled: boolean;\n  frequency: Frequency;\n};\n\nexport type UpdatePreferenceInput = {\n  type: string;\n  channel: Channel;\n  enabled?: boolean;\n  frequency?: Frequency;\n};\n\n/** Paired by phantom type: importing the server plugin's value would bundle the DB. */\nexport const preferencesClient = () =>\n  defineClientPlugin({\n    id: \"preferences\",\n    $InferServerPlugin: {} as ReturnType<typeof preferences>,\n\n    actions: (fetch) => ({\n      listPreferences: async (): Promise<{\n        preferences: PreferenceView[];\n        defaultEnabled: boolean;\n      }> =>\n        (await fetch(\"/preferences\")) as {\n          preferences: PreferenceView[];\n          defaultEnabled: boolean;\n        },\n\n      updatePreference: async (input: UpdatePreferenceInput): Promise<{ ok: boolean }> =>\n        (await fetch(\"/preferences\", {\n          method: \"POST\",\n          body: JSON.stringify(input),\n        })) as { ok: boolean },\n    }),\n  });\n\nexport type PreferencesClient = ReturnType<typeof preferencesClient>;\n"]}
+{"version":3,"sources":["../../src/core/plugin.ts","../../src/plugins/preferences/client.ts"],"names":[],"mappings":";;;AA4LO,SAAS,mBACd,MAAA,EAC6B;AAC7B,EAAA,OAAO,MAAA;AACT;;;AC5KO,IAAM,iBAAA,GAAoB,MAC/B,kBAAA,CAAmB;AAAA,EACjB,EAAA,EAAI,aAAA;AAAA,EACJ,oBAAoB,EAAC;AAAA,EAErB,OAAA,EAAS,CAAC,KAAA,MAAW;AAAA,IACnB,eAAA,EAAiB,YAId,MAAM,KAAA,CAAM,cAAc,CAAA;AAAA,IAK7B,gBAAA,EAAkB,OAAO,KAAA,KACtB,MAAM,MAAM,cAAA,EAAgB;AAAA,MAC3B,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,KAAK;AAAA,KAC3B;AAAA,GACL;AACF,CAAC","file":"preferences-client.cjs","sourcesContent":["import type { DeliveryOutcome } from \"./adapter\";\nimport type { Logger } from \"./errors\";\nimport type { PluginStore } from \"./store\";\nimport type { SignRequest, TokenClaims } from \"./tokens\";\nimport type { Channel, Recipient } from \"./types\";\n\nexport type Promisable<T> = T | Promise<T>;\n\nexport type PrepareContext = {\n  type: string;\n  recipients: readonly Recipient[];\n};\n\nexport type BeforeSendContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  actorId: string | null;\n  dedupeKey: string | null;\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type BeforeSendResult =\n  | { action: \"continue\"; payload?: unknown; dedupeKey?: string }\n  | { action: \"cancel\"; reason: string };\n\nexport type ChannelDecision = {\n  channel: Channel;\n  action: \"send\" | \"skip\" | \"defer\";\n  /** defer only. Written to notification_delivery.not_before. */\n  notBefore?: Date | undefined;\n};\n\nexport type ResolveChannelsContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  decisions: readonly ChannelDecision[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type DeliverContext = {\n  channel: Channel;\n  deliveryId: string;\n  attempt: number;\n  recipient: Recipient;\n  notification: { id: string; userId: string; type: string; payload: unknown };\n  /** Aborted on the runner's timeout. */\n  signal: AbortSignal;\n};\n\nexport type AfterSendContext = {\n  type: string;\n  payload: unknown;\n  /** Committed rows. Ids exist only at this point. */\n  notifications: readonly { id: string; userId: string }[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type AfterDeliverContext = {\n  deliveryId: string;\n  notificationId: string;\n  userId: string;\n  channel: Channel;\n  outcome: DeliveryOutcome;\n  attempt: number;\n  isTerminal: boolean;\n};\n\n/** beforeSend and resolveChannels fail closed; afterDeliver fails open. */\nexport type PluginHooks = {\n  /** Once per send, for bulk loading — the per-recipient hooks would be an N+1. */\n  prepare?: (ctx: PrepareContext) => Promisable<unknown>;\n  beforeSend?: (ctx: BeforeSendContext) => Promisable<BeforeSendResult>;\n  resolveChannels?: (ctx: ResolveChannelsContext) => Promisable<readonly ChannelDecision[]>;\n  /** Once per send, after commit. The only hook that sees notification ids. Fails open. */\n  afterSend?: (ctx: AfterSendContext) => Promisable<void>;\n  /** Delivers one of the plugin's declared `channels`. Core carries inApp and email. */\n  deliver?: (ctx: DeliverContext) => Promisable<DeliveryOutcome>;\n  afterDeliver?: (ctx: AfterDeliverContext) => Promisable<void>;\n};\n\nexport type FieldType = \"string\" | \"number\" | \"boolean\" | \"date\" | \"json\";\n\nexport type FieldDeclaration = {\n  type: FieldType;\n  required?: boolean;\n  default?: string | number | boolean;\n  /** date fields only. Renders as defaultNow() / CURRENT_TIMESTAMP. */\n  defaultNow?: boolean;\n};\n\nexport type IndexDeclaration = {\n  on: readonly string[];\n  unique?: boolean;\n  name?: string;\n};\n\nexport type TableDeclaration = {\n  tableName: string;\n  fields: Record<string, FieldDeclaration>;\n  primaryKey?: readonly string[];\n  indexes?: readonly IndexDeclaration[];\n  readOnly?: boolean;\n};\n\nexport type SchemaDeclaration = Record<string, TableDeclaration>;\n\nexport type RouteScope =\n  | { type: \"user\" }\n  | { type: \"machine\" }\n  | { type: \"signed\"; purpose: string }\n  | { type: \"custom\"; justification: string };\n\nexport type RouteContext = {\n  request: Request;\n  /** Resolved for user-scoped routes, so a handler cannot forget to scope. */\n  userId: string | null;\n  /** Verified before dispatch, so a handler cannot forget to check. */\n  claims: TokenClaims | null;\n  params: Record<string, string>;\n};\n\nexport type RouteDefinition = {\n  path: string;\n  method: \"GET\" | \"POST\";\n  scope: RouteScope;\n  handler: (ctx: RouteContext) => Promise<Response>;\n};\n\n/** Handed to a plugin at startup so it need not be given the database twice. */\nexport type PluginInitContext = {\n  /** Scoped to the tables this plugin declares in schema(). */\n  store: PluginStore;\n  /** Mints tokens for this plugin's own `signed` routes only. The secret itself is never handed out. */\n  sign: (request: SignRequest) => Promise<string>;\n  logger: Logger;\n  /** Configured notification names, so a route can refuse to store rows for types that do not exist. */\n  notificationTypes: readonly string[];\n  /** The app's resolver, for plugins that need timezones or addresses. */\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  /** The instance's own send(), so a composed message inherits retry, backoff and idempotency. */\n  send: (\n    type: string,\n    args: { to: string | readonly string[]; payload: unknown; dedupeKey?: string },\n  ) => Promise<unknown>;\n};\n\nexport type EasyPingPlugin<\n  TId extends string = string,\n  TSchema extends SchemaDeclaration = SchemaDeclaration,\n> = {\n  id: TId;\n  dependsOn?: readonly string[];\n  schema?: TSchema;\n  routes?: readonly RouteDefinition[];\n  hooks?: PluginHooks;\n  /** Channels this plugin delivers. Makes them usable in a notification. */\n  channels?: readonly Channel[];\n  /** Called once by easyPing() before any hook or route can run. */\n  init?: (ctx: PluginInitContext) => void;\n};\n\nexport type AnyPlugin = EasyPingPlugin<string, SchemaDeclaration>;\n\nexport function definePlugin<TId extends string, TSchema extends SchemaDeclaration>(\n  plugin: EasyPingPlugin<TId, TSchema>,\n): EasyPingPlugin<TId, TSchema> {\n  return plugin;\n}\n\nexport type ClientFetch = (path: string, init?: RequestInit) => Promise<unknown>;\n\nexport type ClientPlugin<\n  TId extends string = string,\n  TActions extends Record<string, unknown> = Record<string, unknown>,\n> = {\n  id: TId;\n  /** Phantom. Links client types to the server plugin so a mismatch is a type error. */\n  $InferServerPlugin?: AnyPlugin;\n  actions: (fetch: ClientFetch) => TActions;\n};\n\nexport type AnyClientPlugin = ClientPlugin<string, Record<string, unknown>>;\n\nexport function defineClientPlugin<TId extends string, TActions extends Record<string, unknown>>(\n  plugin: ClientPlugin<TId, TActions>,\n): ClientPlugin<TId, TActions> {\n  return plugin;\n}\n\nexport type UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (\n  k: infer I,\n) => void\n  ? I\n  : never;\n\n/** Naked type parameter, so the conditional distributes over the union. */\ntype ExtractActions<TPlugin> = TPlugin extends { actions: (fetch: never) => infer TActions }\n  ? TActions\n  : never;\n\n/** Indexes the tuple rather than recursing: a fold blows the instantiation depth limit. */\nexport type ActionsOf<TPlugins extends readonly AnyClientPlugin[]> = UnionToIntersection<\n  ExtractActions<TPlugins[number]>\n>;\n","import { defineClientPlugin } from \"../../core/plugin\";\nimport type { Channel, Frequency } from \"../../core/types\";\nimport type { preferences } from \"./index\";\n\nexport type PreferenceView = {\n  userId: string;\n  type: string;\n  channel: Channel;\n  enabled: boolean;\n  frequency: Frequency;\n};\n\nexport type UpdatePreferenceInput = {\n  type: string;\n  channel: Channel;\n  enabled?: boolean;\n  frequency?: Frequency;\n};\n\n/** Paired by phantom type: importing the server plugin's value would bundle the DB. */\nexport const preferencesClient = () =>\n  defineClientPlugin({\n    id: \"preferences\",\n    $InferServerPlugin: {} as ReturnType<typeof preferences>,\n\n    actions: (fetch) => ({\n      listPreferences: async (): Promise<{\n        preferences: PreferenceView[];\n        defaultEnabled: boolean;\n      }> =>\n        (await fetch(\"/preferences\")) as {\n          preferences: PreferenceView[];\n          defaultEnabled: boolean;\n        },\n\n      updatePreference: async (input: UpdatePreferenceInput): Promise<{ ok: boolean }> =>\n        (await fetch(\"/preferences\", {\n          method: \"POST\",\n          body: JSON.stringify(input),\n        })) as { ok: boolean },\n    }),\n  });\n\nexport type PreferencesClient = ReturnType<typeof preferencesClient>;\n"]}

package/dist/plugins/preferences-client.d.cts

@@ -1,4 +1,4 @@
-import { f as ClientPlugin } from '../plugin-6S8tpH0n.cjs';
+import { f as ClientPlugin } from '../plugin-p4HS8yjS.cjs';
 import { C as Channel, F as Frequency } from '../adapter-CV5Yt2c6.cjs';
 
 type PreferenceView = {

package/dist/plugins/preferences-client.d.ts

@@ -1,4 +1,4 @@
-import { f as ClientPlugin } from '../plugin-C4fikLl7.js';
+import { f as ClientPlugin } from '../plugin-Bp68CCnd.js';
 import { C as Channel, F as Frequency } from '../adapter-CV5Yt2c6.js';
 
 type PreferenceView = {

package/dist/plugins/preferences-client.js

@@ -1,4 +1,4 @@
-import { defineClientPlugin } from '../chunk-E4IZ2CQC.js';
+import { defineClientPlugin } from '../chunk-JN3UCQBP.js';
 
 // src/plugins/preferences/client.ts
 var preferencesClient = () => defineClientPlugin({