@growth-labs/push 0.1.3

package/dist/utils/subscriptions.js

@@ -0,0 +1,84 @@
+/** Insert or update a subscription */
+export async function saveSubscription(db, sub) {
+    await db
+        .prepare(`INSERT INTO gl_push_subscriptions
+			 (id, endpoint, key_p256dh, key_auth, topics, created_at, last_delivery_at, failure_count, user_agent, country)
+			 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+			 ON CONFLICT (endpoint) DO UPDATE SET
+				 key_p256dh = excluded.key_p256dh,
+				 key_auth = excluded.key_auth,
+				 failure_count = excluded.failure_count,
+				 last_delivery_at = excluded.last_delivery_at`)
+        .bind(sub.id, sub.endpoint, sub.keyP256dh, sub.keyAuth, sub.topics, sub.createdAt, sub.lastDeliveryAt, sub.failureCount, sub.userAgent, sub.country)
+        .run();
+}
+/** Find a subscription by its endpoint URL */
+export async function findSubscriptionByEndpoint(db, endpoint) {
+    const result = await db
+        .prepare('SELECT * FROM gl_push_subscriptions WHERE endpoint = ?')
+        .bind(endpoint)
+        .first();
+    return result ? mapRow(result) : null;
+}
+/** Delete a subscription by endpoint. Returns true if a row was deleted. */
+export async function deleteSubscriptionByEndpoint(db, endpoint) {
+    const result = await db
+        .prepare('DELETE FROM gl_push_subscriptions WHERE endpoint = ?')
+        .bind(endpoint)
+        .run();
+    return (result.meta?.changes ?? 0) > 0;
+}
+/** Delete a subscription by ID */
+export async function deleteSubscriptionById(db, id) {
+    await db.prepare('DELETE FROM gl_push_subscriptions WHERE id = ?').bind(id).run();
+}
+/** Get subscriptions with offset-based pagination. Used by enqueuePushBatchAll. */
+export async function getAllSubscriptions(db, options = {}) {
+    const limit = options.limit ?? 1000;
+    const offset = options.offset ?? 0;
+    const result = await db
+        .prepare('SELECT * FROM gl_push_subscriptions ORDER BY created_at ASC LIMIT ? OFFSET ?')
+        .bind(limit, offset)
+        .all();
+    return (result.results ?? []).map(mapRow);
+}
+/** Count total subscriptions */
+export async function countSubscriptions(db) {
+    const result = await db
+        .prepare('SELECT COUNT(*) as count FROM gl_push_subscriptions')
+        .first();
+    return result?.count ?? 0;
+}
+/** Mark a subscription as successfully delivered */
+export async function markDelivered(db, id) {
+    await db
+        .prepare(`UPDATE gl_push_subscriptions
+			 SET last_delivery_at = ?, failure_count = 0
+			 WHERE id = ?`)
+        .bind(Math.floor(Date.now() / 1000), id)
+        .run();
+}
+/** Increment failure count for a subscription */
+export async function incrementFailureCount(db, id) {
+    await db
+        .prepare(`UPDATE gl_push_subscriptions
+			 SET failure_count = failure_count + 1
+			 WHERE id = ?`)
+        .bind(id)
+        .run();
+}
+function mapRow(row) {
+    return {
+        id: row.id,
+        endpoint: row.endpoint,
+        keyP256dh: row.key_p256dh,
+        keyAuth: row.key_auth,
+        topics: row.topics,
+        createdAt: row.created_at,
+        lastDeliveryAt: row.last_delivery_at,
+        failureCount: row.failure_count,
+        userAgent: row.user_agent,
+        country: row.country,
+    };
+}
+//# sourceMappingURL=subscriptions.js.map

package/dist/utils/subscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.js","sourceRoot":"","sources":["../../src/utils/subscriptions.ts"],"names":[],"mappings":"AAEA,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAc,EAAE,GAA2B;IACjF,MAAM,EAAE;SACN,OAAO,CACP;;;;;;;kDAO+C,CAC/C;SACA,IAAI,CACJ,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,cAAc,EAClB,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,OAAO,CACX;SACA,GAAG,EAAE,CAAA;AACR,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,EAAc,EACd,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,EAAE;SACrB,OAAO,CAAC,wDAAwD,CAAC;SACjE,IAAI,CAAC,QAAQ,CAAC;SACd,KAAK,EAAE,CAAA;IAET,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtC,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,EAAc,EACd,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,EAAE;SACrB,OAAO,CAAC,sDAAsD,CAAC;SAC/D,IAAI,CAAC,QAAQ,CAAC;SACd,GAAG,EAAE,CAAA;IAEP,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;AACvC,CAAC;AAED,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAc,EAAE,EAAU;IACtE,MAAM,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;AAClF,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,EAAc,EACd,UAA+C,EAAE;IAEjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;IAElC,MAAM,MAAM,GAAG,MAAM,EAAE;SACrB,OAAO,CAAC,8EAA8E,CAAC;SACvF,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;SACnB,GAAG,EAAE,CAAA;IAEP,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAC1C,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAc;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE;SACrB,OAAO,CAAC,qDAAqD,CAAC;SAC9D,KAAK,EAAqB,CAAA;IAE5B,OAAO,MAAM,EAAE,KAAK,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAc,EAAE,EAAU;IAC7D,MAAM,EAAE;SACN,OAAO,CACP;;iBAEc,CACd;SACA,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;SACvC,GAAG,EAAE,CAAA;AACR,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAc,EAAE,EAAU;IACrE,MAAM,EAAE;SACN,OAAO,CACP;;iBAEc,CACd;SACA,IAAI,CAAC,EAAE,CAAC;SACR,GAAG,EAAE,CAAA;AACR,CAAC;AAED,SAAS,MAAM,CAAC,GAA4B;IAC3C,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAkB;QAChC,SAAS,EAAE,GAAG,CAAC,UAAoB;QACnC,OAAO,EAAE,GAAG,CAAC,QAAkB;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAuB;QACnC,SAAS,EAAE,GAAG,CAAC,UAAoB;QACnC,cAAc,EAAE,GAAG,CAAC,gBAAiC;QACrD,YAAY,EAAE,GAAG,CAAC,aAAuB;QACzC,SAAS,EAAE,GAAG,CAAC,UAA2B;QAC1C,OAAO,EAAE,GAAG,CAAC,OAAwB;KACrC,CAAA;AACF,CAAC"}

package/dist/utils/turnstile.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Verify a Turnstile token server-side.
+ */
+export declare function verifyTurnstile(token: string, secretKey: string, remoteIp: string | null): Promise<boolean>;
+//# sourceMappingURL=turnstile.d.ts.map

package/dist/utils/turnstile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile.d.ts","sourceRoot":"","sources":["../../src/utils/turnstile.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAsB,eAAe,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,OAAO,CAAC,CAiBlB"}

package/dist/utils/turnstile.js

@@ -0,0 +1,22 @@
+/**
+ * Verify a Turnstile token server-side.
+ */
+export async function verifyTurnstile(token, secretKey, remoteIp) {
+    try {
+        const response = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                secret: secretKey,
+                response: token,
+                remoteip: remoteIp,
+            }),
+        });
+        const result = (await response.json());
+        return result.success;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=turnstile.js.map

package/dist/utils/turnstile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile.js","sourceRoot":"","sources":["../../src/utils/turnstile.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,KAAa,EACb,SAAiB,EACjB,QAAuB;IAEvB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,2DAA2D,EAAE;YACzF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,QAAQ;aAClB,CAAC;SACF,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAA;QAC9D,OAAO,MAAM,CAAC,OAAO,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC"}

package/dist/utils/vapid.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Generate a new VAPID key pair using Web Crypto API.
+ * Run this once during project setup. Store the private key as a Cloudflare Secret.
+ */
+export declare function generateVapidKeys(): Promise<{
+    publicKey: string;
+    privateKey: string;
+}>;
+//# sourceMappingURL=vapid.d.ts.map

package/dist/utils/vapid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vapid.d.ts","sourceRoot":"","sources":["../../src/utils/vapid.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC;IAClD,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CAClB,CAAC,CAcD"}

package/dist/utils/vapid.js

@@ -0,0 +1,23 @@
+/**
+ * Generate a new VAPID key pair using Web Crypto API.
+ * Run this once during project setup. Store the private key as a Cloudflare Secret.
+ */
+export async function generateVapidKeys() {
+    const keyPair = await crypto.subtle.generateKey({ name: 'ECDSA', namedCurve: 'P-256' }, true, [
+        'sign',
+        'verify',
+    ]);
+    const privateJwk = await crypto.subtle.exportKey('jwk', keyPair.privateKey);
+    const publicRaw = await crypto.subtle.exportKey('raw', keyPair.publicKey);
+    const publicKey = uint8ArrayToUrlSafeBase64(new Uint8Array(publicRaw));
+    return {
+        publicKey,
+        privateKey: JSON.stringify(privateJwk),
+    };
+}
+/** Convert a Uint8Array to URL-safe base64 (no padding) */
+function uint8ArrayToUrlSafeBase64(bytes) {
+    const binary = String.fromCharCode(...bytes);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+//# sourceMappingURL=vapid.js.map

package/dist/utils/vapid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vapid.js","sourceRoot":"","sources":["../../src/utils/vapid.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IAItC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE;QAC7F,MAAM;QACN,QAAQ;KACR,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IAEtE,OAAO;QACN,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;KACtC,CAAA;AACF,CAAC;AAED,2DAA2D;AAC3D,SAAS,yBAAyB,CAAC,KAAiB;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAA;IAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC/E,CAAC"}

package/package.json

@@ -0,0 +1,77 @@
+{
+	"name": "@growth-labs/push",
+	"version": "0.1.3",
+	"type": "module",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		},
+		"./components": {
+			"types": "./src/components/index.ts",
+			"import": "./src/components/index.ts"
+		},
+		"./components/*": {
+			"types": "./src/components/*.astro",
+			"import": "./src/components/*.astro"
+		},
+		"./utils": {
+			"types": "./dist/utils/index.d.ts",
+			"import": "./dist/utils/index.js"
+		},
+		"./utils/*": {
+			"types": "./dist/utils/*.d.ts",
+			"import": "./dist/utils/*.js"
+		},
+		"./client/*": {
+			"types": "./dist/client/*.d.ts",
+			"import": "./dist/client/*.js"
+		},
+		"./db": {
+			"types": "./dist/db/schema.d.ts",
+			"import": "./dist/db/schema.js"
+		},
+		"./middleware": {
+			"types": "./dist/middleware/push.d.ts",
+			"import": "./dist/middleware/push.js",
+			"default": "./dist/middleware/push.js"
+		},
+		"./routes/*": {
+			"types": "./dist/routes/*.d.ts",
+			"import": "./dist/routes/*.js",
+			"default": "./dist/routes/*.js"
+		},
+		"./virtual": {
+			"types": "./src/virtual.d.ts"
+		}
+	},
+	"files": [
+		"dist",
+		"src/components",
+		"src/client",
+		"src/virtual.d.ts",
+		"README.md"
+	],
+	"publishConfig": {
+		"access": "public",
+		"registry": "https://registry.npmjs.org/"
+	},
+	"peerDependencies": {
+		"astro": "^6.0.0"
+	},
+	"dependencies": {
+		"@block65/webcrypto-web-push": "^1.0.0",
+		"drizzle-orm": "^0.36.0",
+		"zod": "^3.23.0"
+	},
+	"devDependencies": {
+		"@cloudflare/workers-types": "^4.0.0",
+		"astro": "^6.0.0",
+		"typescript": "^5.7.0",
+		"vitest": "^3.0.0"
+	},
+	"scripts": {
+		"build": "tsc",
+		"test": "vitest run"
+	}
+}

package/src/client/push-optin.ts

@@ -0,0 +1,189 @@
+/// <reference lib="dom" />
+/// <reference lib="dom.iterable" />
+
+interface PushOptInContainer extends HTMLElement {
+	hidden: boolean
+	querySelector<E extends Element>(selectors: string): E | null
+	querySelectorAll<E extends Element>(selectors: string): NodeListOf<E>
+}
+
+interface PushOptInDependencies {
+	navigator: {
+		serviceWorker: {
+			register(url: string): Promise<ServiceWorkerRegistration>
+			ready: Promise<ServiceWorkerRegistration>
+			getRegistration(url?: string): Promise<ServiceWorkerRegistration | undefined>
+		}
+	}
+	window: Window & {
+		turnstile?: {
+			render(
+				container: HTMLElement,
+				options: {
+					sitekey: string
+					callback(token: string): void
+					'error-callback'(): void
+				},
+			): void
+		}
+	}
+	document: Document & {
+		dispatchEvent(event: CustomEvent): boolean
+	}
+}
+
+function getDependencies(): PushOptInDependencies {
+	return globalThis as unknown as PushOptInDependencies
+}
+
+function urlSafeBase64ToUint8Array(base64: string): Uint8Array {
+	const padded = base64 + '='.repeat((4 - (base64.length % 4)) % 4)
+	const binary = atob(padded.replace(/-/g, '+').replace(/_/g, '/'))
+	return Uint8Array.from(binary, (c) => c.charCodeAt(0))
+}
+
+function getTurnstileToken(
+	windowObject: PushOptInDependencies['window'],
+	siteKey: string,
+	container: HTMLElement,
+): Promise<string> {
+	return new Promise((resolve, reject) => {
+		container.hidden = false
+
+		if (typeof windowObject.turnstile === 'undefined') {
+			reject(new Error('Turnstile script not loaded'))
+			return
+		}
+
+		windowObject.turnstile.render(container, {
+			sitekey: siteKey,
+			callback: (token: string) => {
+				container.hidden = true
+				resolve(token)
+			},
+			'error-callback': () => {
+				container.hidden = true
+				reject(new Error('Turnstile challenge failed'))
+			},
+		})
+	})
+}
+
+export function initPushOptIn(root: ParentNode, deps = getDependencies()): void {
+	const containers = root.querySelectorAll<PushOptInContainer>('.gl-push-optin')
+
+	containers.forEach((container) => {
+		const btn = container.querySelector('[data-push-action="toggle"]') as HTMLButtonElement | null
+		const unsupported = container.querySelector(
+			'[data-push-state="unsupported"]',
+		) as HTMLElement | null
+		const turnstileContainer = container.querySelector(
+			'[data-push-turnstile]',
+		) as HTMLElement | null
+
+		if (!btn || !unsupported || !turnstileContainer) {
+			return
+		}
+
+		const button = btn
+
+		const vapidPublicKey = container.getAttribute('data-vapid-public-key') ?? ''
+		const subscribeUrl = container.getAttribute('data-subscribe-url') ?? '/api/push/subscribe'
+		const unsubscribeUrl = container.getAttribute('data-unsubscribe-url') ?? '/api/push/unsubscribe'
+		const swUrl = container.getAttribute('data-sw-url') ?? '/sw.js'
+		const turnstileSiteKey = container.getAttribute('data-turnstile-site-key') ?? ''
+
+		if (!('serviceWorker' in deps.navigator) || !('PushManager' in deps.window)) {
+			unsupported.hidden = false
+			return
+		}
+
+		button.hidden = false
+
+		function showState(state: string) {
+			container.querySelectorAll('[data-push-state]').forEach((el) => {
+				;(el as HTMLElement).hidden = el.getAttribute('data-push-state') !== state
+			})
+			button.hidden = state === 'unsupported'
+			button.disabled = state === 'subscribing' || state === 'denied'
+		}
+
+		async function checkState() {
+			const registration = await deps.navigator.serviceWorker.getRegistration(swUrl)
+			if (!registration) {
+				showState('prompt')
+				return
+			}
+
+			const subscription = await registration.pushManager.getSubscription()
+			showState(subscription ? 'subscribed' : 'prompt')
+		}
+
+		button.addEventListener('click', async () => {
+			try {
+				// Register before awaiting `ready` so the first click cannot stall forever.
+				await deps.navigator.serviceWorker.register(swUrl)
+				const registration = await deps.navigator.serviceWorker.ready
+				const existing = await registration.pushManager.getSubscription()
+
+				if (existing) {
+					await existing.unsubscribe()
+					await fetch(unsubscribeUrl, {
+						method: 'POST',
+						headers: { 'Content-Type': 'application/json' },
+						body: JSON.stringify({ endpoint: existing.endpoint }),
+					})
+					deps.document.dispatchEvent(
+						new CustomEvent('gl:push_unsubscribed', {
+							detail: { endpoint: existing.endpoint },
+						}),
+					)
+					showState('prompt')
+					return
+				}
+
+				showState('subscribing')
+
+				const turnstileToken = await getTurnstileToken(
+					deps.window,
+					turnstileSiteKey,
+					turnstileContainer,
+				)
+
+				const subscription = await registration.pushManager.subscribe({
+					userVisibleOnly: true,
+					applicationServerKey: urlSafeBase64ToUint8Array(vapidPublicKey) as BufferSource,
+				})
+
+				const response = await fetch(subscribeUrl, {
+					method: 'POST',
+					headers: { 'Content-Type': 'application/json' },
+					body: JSON.stringify({
+						subscription: subscription.toJSON(),
+						turnstileToken,
+					}),
+				})
+
+				if (!response.ok) {
+					throw new Error('Server rejected subscription')
+				}
+
+				deps.document.dispatchEvent(
+					new CustomEvent('gl:push_subscribed', {
+						detail: { endpoint: subscription.endpoint },
+					}),
+				)
+				showState('subscribed')
+			} catch (err) {
+				if (Notification.permission === 'denied') {
+					showState('denied')
+				} else {
+					showState('error')
+					console.error('[gl-push]', err)
+				}
+			}
+		})
+
+		checkState()
+	})
+}

package/src/client/push-sw.d.ts

@@ -0,0 +1,3 @@
+export declare function handlePush(event: PushEvent): void
+export declare function handleNotificationClick(event: NotificationEvent): void
+//# sourceMappingURL=push-sw.d.ts.map

package/src/client/push-sw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-sw.d.ts","sourceRoot":"","sources":["push-sw.ts"],"names":[],"mappings":"AAGA,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAgBjD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAUtE"}

package/src/client/push-sw.js

@@ -0,0 +1,25 @@
+/// <reference lib="webworker" />
+export function handlePush(event) {
+	const data = event.data?.json() ?? {}
+	const options = {
+		body: data.body ?? '',
+		icon: data.icon,
+		image: data.image,
+		tag: data.tag,
+		data: {
+			url: data.url,
+			actionUrl: data.action?.url,
+		},
+		actions: data.action ? [{ action: 'primary', title: data.action.title }] : [],
+	}
+	event.waitUntil(self.registration.showNotification(data.title ?? 'Notification', options))
+}
+export function handleNotificationClick(event) {
+	event.notification.close()
+	const data = event.notification.data ?? {}
+	const url = event.action === 'primary' && data.actionUrl ? data.actionUrl : data.url
+	if (url) {
+		event.waitUntil(self.clients.openWindow(url))
+	}
+}
+//# sourceMappingURL=push-sw.js.map

package/src/client/push-sw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-sw.js","sourceRoot":"","sources":["push-sw.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAGjC,MAAM,UAAU,UAAU,CAAC,KAAgB;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAErC,MAAM,OAAO,GAAG;QACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG;SAC3B;QACD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;KACrB,CAAA;IAEzD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,cAAc,EAAE,OAAO,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC/D,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;IAE1B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAA;IAE1C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;IAEpF,IAAI,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,CAAC;AACF,CAAC"}

package/src/client/push-sw.ts

@@ -0,0 +1,45 @@
+/// <reference lib="webworker" />
+declare const self: ServiceWorkerGlobalScope
+
+export function handlePush(event: PushEvent): void {
+	const data = event.data?.json() ?? {}
+
+	const options = {
+		body: data.body ?? '',
+		icon: data.icon,
+		image: data.image,
+		tag: data.tag,
+		data: {
+			url: data.url,
+			actionUrl: data.action?.url,
+			tag: data.tag,
+		},
+		actions: data.action ? [{ action: 'primary', title: data.action.title }] : [],
+	} satisfies NotificationOptions & Record<string, unknown>
+
+	event.waitUntil(self.registration.showNotification(data.title ?? 'Notification', options))
+}
+
+export function handleNotificationClick(event: NotificationEvent): void {
+	event.notification.close()
+
+	const data = event.notification.data ?? {}
+
+	const url = event.action === 'primary' && data.actionUrl ? data.actionUrl : data.url
+
+	if (url) {
+		// Notify all visible clients so they can emit gl:push_notification_clicked
+		event.waitUntil(
+			self.clients.matchAll({ type: 'window', includeUncontrolled: true }).then((windowClients) => {
+				for (const client of windowClients) {
+					client.postMessage({
+						type: 'gl:push_notification_clicked',
+						tag: data.tag,
+						url,
+					})
+				}
+				return self.clients.openWindow(url)
+			}),
+		)
+	}
+}

package/src/components/PushOptIn.astro

@@ -0,0 +1,53 @@
+---
+interface Props {
+	/** Turnstile site key (public, not the secret) */
+	turnstileSiteKey: string
+	/** Custom subscribe endpoint. Default: from virtual module config */
+	subscribeUrl?: string
+	/** Custom unsubscribe endpoint. Default: from virtual module config */
+	unsubscribeUrl?: string
+	/** Service worker URL. Consumer must register their own SW. */
+	serviceWorkerUrl?: string
+	/** CSS class for the container */
+	class?: string
+}
+
+import config from 'virtual:growth-labs/push/config'
+
+const {
+	turnstileSiteKey,
+	subscribeUrl = config.routes.subscribe,
+	unsubscribeUrl = config.routes.unsubscribe,
+	serviceWorkerUrl = '/sw.js',
+	class: className,
+} = Astro.props
+
+const vapidPublicKey = Astro.locals.push?.vapidPublicKey ?? ''
+---
+
+<div
+	class:list={['gl-push-optin', className]}
+	data-vapid-public-key={vapidPublicKey}
+	data-subscribe-url={subscribeUrl}
+	data-unsubscribe-url={unsubscribeUrl}
+	data-sw-url={serviceWorkerUrl}
+	data-turnstile-site-key={turnstileSiteKey}
+>
+	<button class="gl-push-btn" data-push-action="toggle" type="button" hidden>
+		<span data-push-state="prompt">Enable notifications</span>
+		<span data-push-state="subscribing" hidden>Subscribing…</span>
+		<span data-push-state="subscribed" hidden>Notifications on</span>
+		<span data-push-state="denied" hidden>Notifications blocked</span>
+		<span data-push-state="error" hidden>Something went wrong</span>
+	</button>
+	<p class="gl-push-unsupported" data-push-state="unsupported" hidden>
+		Push notifications are not supported in this browser.
+	</p>
+	<div class="gl-push-turnstile" data-push-turnstile hidden></div>
+</div>
+
+<script>
+	import { initPushOptIn } from '../client/push-optin.ts'
+
+	initPushOptIn(document)
+</script>

package/src/components/index.ts

@@ -0,0 +1 @@
+export { default as PushOptIn } from './PushOptIn.astro'

package/src/virtual.d.ts

@@ -0,0 +1,5 @@
+declare module 'virtual:growth-labs/push/config' {
+	import type { PushConfig } from './types.js'
+	const config: PushConfig
+	export default config
+}