@growth-labs/push 0.4.0 → 0.4.2

package/src/utils/subscriptions.ts

@@ -0,0 +1,124 @@
+import type { PushSubscriptionRecord } from '../types.js'
+
+/** Insert or update a subscription */
+export async function saveSubscription(db: D1Database, sub: PushSubscriptionRecord): Promise<void> {
+	await db
+		.prepare(
+			`INSERT INTO gl_push_subscriptions
+			 (id, endpoint, key_p256dh, key_auth, topics, created_at, last_delivery_at, failure_count, user_agent, country)
+			 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+			 ON CONFLICT (endpoint) DO UPDATE SET
+				 key_p256dh = excluded.key_p256dh,
+				 key_auth = excluded.key_auth,
+				 failure_count = excluded.failure_count,
+				 last_delivery_at = excluded.last_delivery_at`,
+		)
+		.bind(
+			sub.id,
+			sub.endpoint,
+			sub.keyP256dh,
+			sub.keyAuth,
+			sub.topics,
+			sub.createdAt,
+			sub.lastDeliveryAt,
+			sub.failureCount,
+			sub.userAgent,
+			sub.country,
+		)
+		.run()
+}
+
+/** Find a subscription by its endpoint URL */
+export async function findSubscriptionByEndpoint(
+	db: D1Database,
+	endpoint: string,
+): Promise<PushSubscriptionRecord | null> {
+	const result = await db
+		.prepare('SELECT * FROM gl_push_subscriptions WHERE endpoint = ?')
+		.bind(endpoint)
+		.first()
+
+	return result ? mapRow(result) : null
+}
+
+/** Delete a subscription by endpoint. Returns true if a row was deleted. */
+export async function deleteSubscriptionByEndpoint(
+	db: D1Database,
+	endpoint: string,
+): Promise<boolean> {
+	const result = await db
+		.prepare('DELETE FROM gl_push_subscriptions WHERE endpoint = ?')
+		.bind(endpoint)
+		.run()
+
+	return (result.meta?.changes ?? 0) > 0
+}
+
+/** Delete a subscription by ID */
+export async function deleteSubscriptionById(db: D1Database, id: string): Promise<void> {
+	await db.prepare('DELETE FROM gl_push_subscriptions WHERE id = ?').bind(id).run()
+}
+
+/** Get subscriptions with offset-based pagination. Used by enqueuePushBatchAll. */
+export async function getAllSubscriptions(
+	db: D1Database,
+	options: { limit?: number; offset?: number } = {},
+): Promise<PushSubscriptionRecord[]> {
+	const limit = options.limit ?? 1000
+	const offset = options.offset ?? 0
+
+	const result = await db
+		.prepare('SELECT * FROM gl_push_subscriptions ORDER BY created_at ASC LIMIT ? OFFSET ?')
+		.bind(limit, offset)
+		.all()
+
+	return (result.results ?? []).map(mapRow)
+}
+
+/** Count total subscriptions */
+export async function countSubscriptions(db: D1Database): Promise<number> {
+	const result = await db
+		.prepare('SELECT COUNT(*) as count FROM gl_push_subscriptions')
+		.first<{ count: number }>()
+
+	return result?.count ?? 0
+}
+
+/** Mark a subscription as successfully delivered */
+export async function markDelivered(db: D1Database, id: string): Promise<void> {
+	await db
+		.prepare(
+			`UPDATE gl_push_subscriptions
+			 SET last_delivery_at = ?, failure_count = 0
+			 WHERE id = ?`,
+		)
+		.bind(Math.floor(Date.now() / 1000), id)
+		.run()
+}
+
+/** Increment failure count for a subscription */
+export async function incrementFailureCount(db: D1Database, id: string): Promise<void> {
+	await db
+		.prepare(
+			`UPDATE gl_push_subscriptions
+			 SET failure_count = failure_count + 1
+			 WHERE id = ?`,
+		)
+		.bind(id)
+		.run()
+}
+
+function mapRow(row: Record<string, unknown>): PushSubscriptionRecord {
+	return {
+		id: row.id as string,
+		endpoint: row.endpoint as string,
+		keyP256dh: row.key_p256dh as string, // gitleaks:allow - Web Push field name, not literal secret material.
+		keyAuth: row.key_auth as string,
+		topics: row.topics as string | null,
+		createdAt: row.created_at as number,
+		lastDeliveryAt: row.last_delivery_at as number | null,
+		failureCount: row.failure_count as number,
+		userAgent: row.user_agent as string | null,
+		country: row.country as string | null,
+	}
+}

package/src/utils/turnstile.ts

@@ -0,0 +1,25 @@
+/**
+ * Verify a Turnstile token server-side.
+ */
+export async function verifyTurnstile(
+	token: string,
+	secretKey: string,
+	remoteIp: string | null,
+): Promise<boolean> {
+	try {
+		const response = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
+			method: 'POST',
+			headers: { 'Content-Type': 'application/json' },
+			body: JSON.stringify({
+				secret: secretKey,
+				response: token,
+				remoteip: remoteIp,
+			}),
+		})
+
+		const result = (await response.json()) as { success: boolean }
+		return result.success
+	} catch {
+		return false
+	}
+}

package/src/utils/vapid.ts

@@ -0,0 +1,28 @@
+/**
+ * Generate a new VAPID key pair using Web Crypto API.
+ * Run this once during project setup. Store the private key as a Cloudflare Secret.
+ */
+export async function generateVapidKeys(): Promise<{
+	publicKey: string
+	privateKey: string
+}> {
+	const keyPair = await crypto.subtle.generateKey({ name: 'ECDSA', namedCurve: 'P-256' }, true, [
+		'sign',
+		'verify',
+	])
+
+	const privateJwk = await crypto.subtle.exportKey('jwk', keyPair.privateKey)
+	const publicRaw = await crypto.subtle.exportKey('raw', keyPair.publicKey)
+	const publicKey = uint8ArrayToUrlSafeBase64(new Uint8Array(publicRaw))
+
+	return {
+		publicKey,
+		privateKey: JSON.stringify(privateJwk),
+	}
+}
+
+/** Convert a Uint8Array to URL-safe base64 (no padding) */
+function uint8ArrayToUrlSafeBase64(bytes: Uint8Array): string {
+	const binary = String.fromCharCode(...bytes)
+	return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '')
+}