@rei-standard/amsg-shared 0.4.0-next.0 → 0.4.0-next.2

package/dist/webpush.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Send a single Web Push notification.
+ *
+ * @param {Object}   args
+ * @param {Object}   args.subscription  - Standard PushSubscription JSON.
+ * @param {string}   args.subscription.endpoint
+ * @param {Object}   args.subscription.keys
+ * @param {string}   args.subscription.keys.p256dh - base64url, 65 B uncompressed P-256 point.
+ * @param {string}   args.subscription.keys.auth   - base64url, 16 B auth secret.
+ * @param {string}   args.payload       - Already-stringified JSON to deliver.
+ * @param {Object}   args.vapid
+ * @param {string}   args.vapid.email      - VAPID `sub` (mailto: auto-prepended if missing).
+ * @param {string}   args.vapid.publicKey  - base64url, 65 B uncompressed P-256 point.
+ * @param {string}   args.vapid.privateKey - base64url, 32 B scalar.
+ * @param {number}  [args.ttl=60]       - Push service TTL header, seconds.
+ * @param {typeof fetch} [args.fetch]   - Override fetch impl (testing / proxy).
+ * @returns {Promise<{ statusCode: number, body: string, headers: Headers }>}
+ * @throws  {Error}  err.code = 'PUSH_SEND_FAILED' on push-service error.
+ */
+export function sendWebPush({ subscription, payload, vapid, ttl, fetch: fetchImpl }: {
+    subscription: {
+        endpoint: string;
+        keys: {
+            p256dh: string;
+            auth: string;
+        };
+    };
+    payload: string;
+    vapid: {
+        email: string;
+        publicKey: string;
+        privateKey: string;
+    };
+    ttl?: number;
+    fetch?: typeof fetch;
+}): Promise<{
+    statusCode: number;
+    body: string;
+    headers: Headers;
+}>;
+/**
+ * Build a VAPID `Authorization` JWT for a single push.
+ *
+ * @param {Object} args
+ * @param {string} args.audience    - Origin of the push endpoint (e.g. https://fcm.googleapis.com).
+ * @param {string} args.subject     - VAPID `sub` claim, typically `mailto:you@example.com`.
+ * @param {string} args.publicKey   - base64url, 65 B uncompressed P-256 point.
+ * @param {string} args.privateKey  - base64url, 32 B scalar.
+ * @returns {Promise<string>} compact JWS (three base64url segments).
+ */
+export function buildVapidJwt({ audience, subject, publicKey, privateKey }: {
+    audience: string;
+    subject: string;
+    publicKey: string;
+    privateKey: string;
+}): Promise<string>;
+/**
+ * Verify a VAPID JWT signature. Exported for tests / advanced consumers.
+ * Returns the decoded payload if the signature and `exp` are valid.
+ *
+ * @param {string} jwt
+ * @param {string} publicKey  - VAPID public key (base64url, 65 B).
+ * @returns {Promise<{ aud: string, exp: number, sub: string }>}
+ */
+export function verifyVapidJwt(jwt: string, publicKey: string): Promise<{
+    aud: string;
+    exp: number;
+    sub: string;
+}>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rei-standard/amsg-shared",
-  "version": "0.4.0-next.0",
+  "version": "0.4.0-next.2",
   "description": "ReiStandard Active Messaging shared types and push builders — the lowest layer (no deps on other amsg packages)",
   "repository": {
     "type": "git",
@@ -27,7 +27,7 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsup && tsc -p tsconfig.json && node -e \"require('fs').copyFileSync('dist/index.d.ts', 'dist/index.d.cts')\"",
+    "build": "tsup && tsc -p tsconfig.json && node -e \"const fs=require('fs');for(const f of fs.readdirSync('dist'))if(f.endsWith('.d.ts'))fs.copyFileSync('dist/'+f,'dist/'+f.slice(0,-5)+'.d.cts')\"",
     "test": "node --test test/*.test.mjs"
   },
   "engines": {