@aeolus-fleet/gateway 0.29.1 → 0.30.0

package/dist/adapters/web-push/web-push.js

@@ -0,0 +1,70 @@
+/**
+ * The gateway's web push (wake a person, W1, W4): a wake to one browser
+ * through its push service, encrypted for that browser and signed with the
+ * gateway's push keys (VAPID). It connects only to an address the policy
+ * allows, checked as the endpoint's host resolves at the moment of sending,
+ * an address written in the endpoint included: a push service is reached at
+ * a public address only. The push service answers 404 or 410 once the
+ * subscription ended: it is gone. Any other refusal, a refused address, or
+ * no answer, failed. Subscribing lets only https through; plain http is
+ * taken here for the tests' local push service.
+ */
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { isIP } from 'node:net';
+// web-push is CommonJS: Node's ESM loader finds no named exports on it, only the module itself.
+import webPush from 'web-push';
+import { allowedLookup } from '../webhooks/allowed-lookup.js';
+/** How long a wake stays with the push service while the browser is away: a day. */
+const TIME_TO_LIVE_SECONDS = 24 * 60 * 60;
+const GONE_STATUSES = new Set([404, 410]);
+const HTTP_OK_FIRST = 200;
+const HTTP_OK_LAST = 299;
+export function createWebPush(deps) {
+    const lookup = allowedLookup(deps);
+    return {
+        send: ({ endpoint, keys: browserKeys }, wake) => new Promise((resolve) => {
+            let request;
+            let target;
+            try {
+                request = webPush.generateRequestDetails({ endpoint, keys: browserKeys }, JSON.stringify({ fleetName: wake.fleetName, overviewUrl: wake.overviewUrl }), {
+                    vapidDetails: { subject: deps.subject, publicKey: deps.publicKey, privateKey: deps.privateKey },
+                    TTL: TIME_TO_LIVE_SECONDS,
+                });
+                target = new URL(request.endpoint);
+            }
+            catch {
+                resolve('failed');
+                return;
+            }
+            // Node looks up no address written in the URL itself: it is checked here instead.
+            const host = target.hostname.replace(/^\[(.*)\]$/, '$1');
+            if (isIP(host) !== 0 && !deps.isAllowedAddress(host)) {
+                resolve('failed');
+                return;
+            }
+            let isSettled = false;
+            const settle = (sent) => {
+                if (!isSettled) {
+                    isSettled = true;
+                    clearTimeout(timer);
+                    resolve(sent);
+                }
+            };
+            const options = { method: request.method, headers: request.headers, lookup };
+            const sent = (target.protocol === 'https:' ? httpsRequest : httpRequest)(target, options, (response) => {
+                const status = response.statusCode ?? 0;
+                settle(status >= HTTP_OK_FIRST && status <= HTTP_OK_LAST ? 'sent' : GONE_STATUSES.has(status) ? 'gone' : 'failed');
+                response.resume();
+            });
+            const timer = setTimeout(() => {
+                sent.destroy(new Error(`No answer within ${String(deps.timeoutMs)} ms`));
+            }, deps.timeoutMs);
+            sent.on('error', () => {
+                settle('failed');
+            });
+            sent.end(request.body);
+        }),
+    };
+}
+//# sourceMappingURL=web-push.js.map

package/dist/adapters/web-push/web-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-push.js","sourceRoot":"","sources":["../../../src/adapters/web-push/web-push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAuB,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,gGAAgG;AAChG,OAAO,OAAO,MAAM,UAAU,CAAC;AAG/B,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,oFAAoF;AACpF,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE1C,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB,MAAM,UAAU,aAAa,CAAC,IAO7B;IACC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,CAC9C,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,OAA0D,CAAC;YAC/D,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE;oBACtJ,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;oBAC/F,GAAG,EAAE,oBAAoB;iBAC1B,CAAC,CAAC;gBACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,kFAAkF;YAClF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,IAAiB,EAAE,EAAE;gBACnC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS,GAAG,IAAI,CAAC;oBACjB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,OAAO,GAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACrG,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,MAAM,IAAI,aAAa,IAAI,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACnH,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACpB,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/adapters/webhooks/allowed-lookup.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A lookup for an outgoing connection that answers only the addresses the
+ * policy allows, as the name resolves at the moment of connecting, and
+ * refuses the connection otherwise: a name that resolved elsewhere when it
+ * was checked cannot steer the connection inside. Webhooks and web push use it.
+ */
+import type { LookupFunction } from 'node:net';
+/** The code of the error a connection is refused with when its host resolves to an address the policy refuses. */
+export declare const ADDRESS_REFUSED = "ADDRESS_REFUSED";
+/** A lookup that answers only the allowed addresses of the name, and refuses the connection otherwise. */
+export declare function allowedLookup(deps: {
+    addressesOf: (host: string) => Promise<string[]>;
+    isAllowedAddress: (address: string) => boolean;
+}): LookupFunction;

package/dist/adapters/webhooks/allowed-lookup.js

@@ -0,0 +1,28 @@
+/** The code of the error a connection is refused with when its host resolves to an address the policy refuses. */
+export const ADDRESS_REFUSED = 'ADDRESS_REFUSED';
+const IPV4 = 4;
+const IPV6 = 6;
+/** A lookup that answers only the allowed addresses of the name, and refuses the connection otherwise. */
+export function allowedLookup(deps) {
+    // eslint-disable-next-line @typescript-eslint/max-params -- Node's net.LookupFunction takes these three.
+    return (host, options, callback) => {
+        deps.addressesOf(host).then((addresses) => {
+            const [address] = addresses;
+            if (address === undefined || !addresses.every(deps.isAllowedAddress)) {
+                callback(Object.assign(new Error(`${host} resolves to an address the gateway does not reach`), { code: ADDRESS_REFUSED }), '', IPV4);
+                return;
+            }
+            const familyOf = (each) => (each.includes(':') ? IPV6 : IPV4);
+            // Node asks for every address when it tries them in turn (autoSelectFamily).
+            if (options.all === true) {
+                callback(null, addresses.map((each) => ({ address: each, family: familyOf(each) })));
+            }
+            else {
+                callback(null, address, familyOf(address));
+            }
+        }, (error) => {
+            callback(error instanceof Error ? error : new Error(String(error)), '', IPV4);
+        });
+    };
+}
+//# sourceMappingURL=allowed-lookup.js.map

package/dist/adapters/webhooks/allowed-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-lookup.js","sourceRoot":"","sources":["../../../src/adapters/webhooks/allowed-lookup.ts"],"names":[],"mappings":"AAQA,kHAAkH;AAClH,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,IAAI,GAAG,CAAC,CAAC;AACf,MAAM,IAAI,GAAG,CAAC,CAAC;AAEf,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,IAA0G;IACtI,yGAAyG;IACzG,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE;YACZ,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;YAC5B,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACrE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,oDAAoD,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBACrI,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtE,6EAA6E;YAC7E,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,QAAQ,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/adapters/webhooks/host-resolver.d.ts

@@ -0,0 +1,3 @@
+import type { HostResolver } from '../../core/a2a-in/ports.js';
+/** The addresses a host resolves to, as the system resolves it: none when it does not. */
+export declare const systemHostResolver: HostResolver;

package/dist/adapters/webhooks/host-resolver.js

@@ -0,0 +1,13 @@
+import { lookup } from 'node:dns/promises';
+/** The addresses a host resolves to, as the system resolves it: none when it does not. */
+export const systemHostResolver = {
+    addressesOf: async (host) => {
+        try {
+            return (await lookup(host, { all: true, verbatim: true })).map((found) => found.address);
+        }
+        catch {
+            return [];
+        }
+    },
+};
+//# sourceMappingURL=host-resolver.js.map

package/dist/adapters/webhooks/host-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-resolver.js","sourceRoot":"","sources":["../../../src/adapters/webhooks/host-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAI3C,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAiB;IAC9C,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/adapters/webhooks/webhook-poster.d.ts

@@ -0,0 +1,6 @@
+import type { WebhookPoster } from '../../core/a2a-in/ports.js';
+export declare function createWebhookPoster(deps: {
+    addressesOf: (host: string) => Promise<string[]>;
+    isAllowedAddress: (address: string) => boolean;
+    timeoutMs: number;
+}): WebhookPoster;

package/dist/adapters/webhooks/webhook-poster.js

@@ -0,0 +1,67 @@
+/**
+ * The gateway's POST of a push to an outside A2A client's webhook (slice 4).
+ * It connects only to an address the policy allows, checked as the name
+ * resolves at the moment of connecting: the core checked the name before,
+ * and this closes the gap of a name that resolves elsewhere the second time.
+ * It follows no redirect. The whole POST, answer included, takes at most the
+ * timeout, and the answer's body is read no further than a cap: only its
+ * status counts, so a slow or endless answer never holds the party's round.
+ * The core lets only https through; plain http is
+ * taken here for the tests' local server.
+ */
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { err, ok } from '../../core/shared/result.js';
+import { ADDRESS_REFUSED, allowedLookup } from './allowed-lookup.js';
+/** How much of a webhook's answer body is read before its status is taken: the fleet's payload limit. */
+const ANSWER_BODY_CAP_BYTES = 64 * 1024;
+export function createWebhookPoster(deps) {
+    const lookup = allowedLookup(deps);
+    return {
+        post: (url, push) => new Promise((resolve) => {
+            const target = new URL(url);
+            const headers = { 'content-type': 'application/json', 'content-length': String(Buffer.byteLength(push.body)) };
+            if (push.token !== null) {
+                headers['x-a2a-notification-token'] = push.token;
+            }
+            if (push.authentication !== null) {
+                headers.authorization = `${push.authentication.scheme} ${push.authentication.credentials}`;
+            }
+            const options = { method: 'POST', headers, lookup };
+            let isSettled = false;
+            const settle = (result) => {
+                if (!isSettled) {
+                    isSettled = true;
+                    clearTimeout(timer);
+                    resolve(result);
+                }
+            };
+            const sent = (target.protocol === 'https:' ? httpsRequest : httpRequest)(target, options, (response) => {
+                const answered = () => {
+                    settle(ok({ status: response.statusCode ?? 0 }));
+                };
+                let read = 0;
+                response.on('data', (chunk) => {
+                    read += chunk.length;
+                    if (read > ANSWER_BODY_CAP_BYTES) {
+                        answered();
+                        sent.destroy();
+                    }
+                });
+                response.on('end', answered);
+                // Cut short by the timeout or the cap: the request's own error, or the status taken, already settled it.
+                response.on('error', (error) => {
+                    settle(err({ kind: 'UNREACHABLE', message: error.message }));
+                });
+            });
+            const timer = setTimeout(() => {
+                sent.destroy(new Error(`No answer within ${String(deps.timeoutMs)} ms`));
+            }, deps.timeoutMs);
+            sent.on('error', (error) => {
+                settle(err(error.code === ADDRESS_REFUSED ? { kind: 'ADDRESS_REFUSED' } : { kind: 'UNREACHABLE', message: error.message }));
+            });
+            sent.end(push.body);
+        }),
+    };
+}
+//# sourceMappingURL=webhook-poster.js.map

package/dist/adapters/webhooks/webhook-poster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-poster.js","sourceRoot":"","sources":["../../../src/adapters/webhooks/webhook-poster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAuB,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAGrD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAErE,yGAAyG;AACzG,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,UAAU,mBAAmB,CAAC,IAA6H;IAC/J,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAClB,IAAI,OAAO,CAA0C,CAAC,OAAO,EAAE,EAAE;YAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACvI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACnD,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;gBACjC,OAAO,CAAC,aAAa,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;YAC7F,CAAC;YACD,MAAM,OAAO,GAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACpE,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,MAA+C,EAAE,EAAE;gBACjE,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS,GAAG,IAAI,CAAC;oBACjB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACrG,MAAM,QAAQ,GAAG,GAAG,EAAE;oBACpB,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnD,CAAC,CAAC;gBACF,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACpC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;oBACrB,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;wBACjC,QAAQ,EAAE,CAAC;wBACX,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC7B,yGAAyG;gBACzG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC/D,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAgC,EAAE,EAAE;gBACpD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9H,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/app.d.ts

@@ -29,6 +29,18 @@ export interface GatewayAppOptions {
         clientId: string;
         clientSecret: string;
     };
+    /** The gateway's push keys, which sign each web push wake, and the subject a push service may contact (wake a person, S3): unset, no one is offered web push. */
+    webPush?: {
+        publicKey: string;
+        privateKey: string;
+        subject: string;
+    };
+    /** Which addresses web push may connect to: public ones unless set. Tests set it to reach their push service on this machine. */
+    isAllowedPushAddress?: (address: string) => boolean;
+    /** The least time between two wakes web push sends one person ship (wake a person, W10): 10 minutes unless set. */
+    webPushWakeWindowMs?: number;
+    /** The least time between two wakes the email channel sends one person ship (wake a person, W10): 60 minutes unless set. */
+    emailWakeWindowMs?: number;
     /** The gateway's web app, answering the pages the server has none of: unset, an unknown page is answered as any unknown address. */
     web?: WebApp;
 }