@scalemule/nextjs 0.0.28 → 0.0.30

package/dist/index.mjs

@@ -1,5 +1,6 @@
 import { createContext, useState, useMemo, useEffect, useCallback, useContext, useRef } from 'react';
 import { jsx } from 'react/jsx-runtime';
+import { WebPushManager } from '@scalemule/sdk';
 
 // src/provider.tsx
 
@@ -3051,6 +3052,265 @@ function useFeatureFlags(options = {}) {
     getFlag
   };
 }
+function getCsrfToken() {
+  if (typeof document === "undefined") return "";
+  const match = document.cookie.match(/(?:^|;\s*)sm_csrf=([^;]*)/);
+  return match ? decodeURIComponent(match[1]) : "";
+}
+function usePushNotifications(options = {}) {
+  const { serviceWorkerUrl = "/sw.js", pushProxyUrl = "/api/push", onNotification } = options;
+  const { user } = useScaleMule();
+  const [isSupported, setIsSupported] = useState(false);
+  const [permission, setPermission] = useState("unsupported");
+  const [isSubscribed, setIsSubscribed] = useState(false);
+  const [isLoading, setIsLoading] = useState(false);
+  const [error, setError] = useState(null);
+  const [tokenId, setTokenId] = useState(null);
+  const onNotificationRef = useRef(onNotification);
+  useEffect(() => {
+    onNotificationRef.current = onNotification;
+  }, [onNotification]);
+  const prevUserRef = useRef(null);
+  const fetcher = useMemo(() => {
+    async function proxyGet(path) {
+      const res = await fetch(`${pushProxyUrl}/${path}`);
+      const json = await res.json();
+      if (!json.success) throw new Error(json.error?.message || "Request failed");
+      return json.data;
+    }
+    async function proxyPost(path, body) {
+      const res = await fetch(`${pushProxyUrl}/${path}`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "x-csrf-token": getCsrfToken()
+        },
+        body: body ? JSON.stringify(body) : void 0
+      });
+      const json = await res.json();
+      if (!json.success) throw new Error(json.error?.message || "Request failed");
+      return json.data;
+    }
+    async function proxyPut(path, body) {
+      const res = await fetch(`${pushProxyUrl}/${path}`, {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json",
+          "x-csrf-token": getCsrfToken()
+        },
+        body: body ? JSON.stringify(body) : void 0
+      });
+      const json = await res.json();
+      if (!json.success) throw new Error(json.error?.message || "Request failed");
+      return json.data;
+    }
+    async function proxyDelete(path) {
+      const res = await fetch(`${pushProxyUrl}/${path}`, {
+        method: "DELETE",
+        headers: {
+          "x-csrf-token": getCsrfToken()
+        }
+      });
+      const json = await res.json();
+      if (!json.success) throw new Error(json.error?.message || "Request failed");
+    }
+    return {
+      getSettings: () => proxyGet("settings/me"),
+      registerToken: (data) => proxyPost("register", data),
+      unregisterToken: (id) => proxyDelete(`tokens/by-id/${id}`),
+      associateUser: (id) => proxyPut(`tokens/by-id/${id}/user`, {}),
+      disassociateUser: (id) => proxyDelete(`tokens/by-id/${id}/user`)
+    };
+  }, [pushProxyUrl]);
+  const manager = useMemo(() => {
+    if (typeof window === "undefined") return null;
+    try {
+      return new WebPushManager({ fetcher, serviceWorkerUrl });
+    } catch {
+      return null;
+    }
+  }, [fetcher, serviceWorkerUrl]);
+  useEffect(() => {
+    if (!manager) return;
+    const supported = manager.isSupported();
+    setIsSupported(supported);
+    setPermission(manager.getPermissionState());
+    if (supported) {
+      const storedTokenId = manager.getTokenId();
+      manager.isSubscribed().then((sub) => {
+        if (!sub && storedTokenId) {
+          manager.unsubscribe().catch(() => {
+          });
+          setIsSubscribed(false);
+          setTokenId(null);
+          setPermission(manager.getPermissionState());
+        } else {
+          setIsSubscribed(sub);
+          setTokenId(manager.getTokenId());
+        }
+      });
+    }
+  }, [manager]);
+  useEffect(() => {
+    if (typeof navigator === "undefined" || !("serviceWorker" in navigator)) return;
+    function handleMessage(event) {
+      if (event.data?.type === "push-received") {
+        onNotificationRef.current?.(event.data.payload);
+      }
+      if (event.data?.type === "push-subscription-expired") {
+        if (manager) {
+          manager.unsubscribe().catch(() => {
+          });
+        }
+        setIsSubscribed(false);
+        setTokenId(null);
+        setPermission(typeof Notification !== "undefined" ? Notification.permission : "unsupported");
+      }
+    }
+    navigator.serviceWorker.addEventListener("message", handleMessage);
+    return () => navigator.serviceWorker.removeEventListener("message", handleMessage);
+  }, [manager]);
+  useEffect(() => {
+    if (!manager) return;
+    const currentUserId = user?.id || null;
+    const prevUserId = prevUserRef.current;
+    if (currentUserId && !prevUserId && isSubscribed) {
+      manager.associateUser().catch(() => {
+      });
+    }
+    prevUserRef.current = currentUserId;
+  }, [user?.id, manager, isSubscribed]);
+  const subscribe = useCallback(async () => {
+    if (!manager) return;
+    setIsLoading(true);
+    setError(null);
+    try {
+      const result = await manager.subscribe();
+      if (result) {
+        setIsSubscribed(true);
+        setTokenId(result.tokenId);
+        setPermission("granted");
+      } else {
+        setPermission(manager.getPermissionState());
+      }
+    } catch (e) {
+      setError({
+        code: "PUSH_SUBSCRIBE_ERROR",
+        message: e instanceof Error ? e.message : "Failed to subscribe"
+      });
+    } finally {
+      setIsLoading(false);
+    }
+  }, [manager]);
+  const unsubscribe = useCallback(async () => {
+    if (!manager) return;
+    setIsLoading(true);
+    setError(null);
+    try {
+      await manager.unsubscribe();
+      setIsSubscribed(false);
+      setTokenId(null);
+    } catch (e) {
+      setError({
+        code: "PUSH_UNSUBSCRIBE_ERROR",
+        message: e instanceof Error ? e.message : "Failed to unsubscribe"
+      });
+    } finally {
+      setIsLoading(false);
+    }
+  }, [manager]);
+  const disassociateUser = useCallback(async () => {
+    if (!manager) return;
+    try {
+      await manager.disassociateUser();
+    } catch {
+    }
+  }, [manager]);
+  return {
+    isSupported,
+    permission,
+    isSubscribed,
+    isLoading,
+    error,
+    subscribe,
+    unsubscribe,
+    disassociateUser,
+    tokenId
+  };
+}
+function useShare(options) {
+  const { client, user } = useScaleMule();
+  const [referralCode, setReferralCode] = useState(
+    options?.referralCode ?? null
+  );
+  const [loading, setLoading] = useState(false);
+  const [copied, setCopied] = useState(false);
+  useEffect(() => {
+    if (!user) {
+      setReferralCode(options?.referralCode ?? null);
+      setLoading(false);
+      return;
+    }
+    if (!options?.autoFetchReferral) {
+      setLoading(false);
+      return;
+    }
+    if (options?.referralCode) {
+      setReferralCode(options.referralCode);
+      setLoading(false);
+      return;
+    }
+    setReferralCode(null);
+    let cancelled = false;
+    setLoading(true);
+    client.get("/v1/referrals/me").then((data) => {
+      if (!cancelled) setReferralCode(data.referral_code);
+    }).catch(() => {
+      if (!cancelled) setReferralCode(null);
+    }).finally(() => {
+      if (!cancelled) setLoading(false);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [user?.id, options?.url, options?.referralCode, options?.autoFetchReferral, client]);
+  const shareUrl = useMemo(() => {
+    const raw = options?.url || (typeof window !== "undefined" ? window.location.href : "");
+    if (!raw) return raw;
+    try {
+      const base = typeof window !== "undefined" ? window.location.origin : void 0;
+      const u = new URL(raw, base);
+      if (referralCode) {
+        u.searchParams.set("rc", referralCode);
+      }
+      return u.toString();
+    } catch {
+      return raw;
+    }
+  }, [options?.url, referralCode]);
+  const copyLink = useCallback(async () => {
+    try {
+      await navigator.clipboard.writeText(shareUrl);
+    } catch {
+      try {
+        const textarea = document.createElement("textarea");
+        textarea.value = shareUrl;
+        textarea.style.position = "fixed";
+        textarea.style.opacity = "0";
+        document.body.appendChild(textarea);
+        textarea.select();
+        document.execCommand("copy");
+        document.body.removeChild(textarea);
+      } catch {
+        return false;
+      }
+    }
+    setCopied(true);
+    setTimeout(() => setCopied(false), 2e3);
+    return true;
+  }, [shareUrl]);
+  return { shareUrl, referralCode, copyLink, copied, loading };
+}
 
 // src/validation.ts
 var phoneCountries = [
@@ -3343,4 +3603,4 @@ function createSafeLogger(prefix) {
   };
 }
 
-export { ScaleMuleApiError, ScaleMuleClient, ScaleMuleProvider, composePhone, createClient, createSafeLogger, normalizePhone, phoneCountries, sanitizeForLog, useAnalytics, useAuth, useBilling, useContent, useFeatureFlags, useRealtime, useScaleMule, useScaleMuleClient, useUser, validateForm, validators };
+export { ScaleMuleApiError, ScaleMuleClient, ScaleMuleProvider, composePhone, createClient, createSafeLogger, normalizePhone, phoneCountries, sanitizeForLog, useAnalytics, useAuth, useBilling, useContent, useFeatureFlags, usePushNotifications, useRealtime, useScaleMule, useScaleMuleClient, useShare, useUser, validateForm, validators };

package/dist/server/index.d.mts

@@ -1,6 +1,6 @@
-import { S as ServerConfig } from '../webhook-handler-DS0r_w4M.mjs';
-export { a as ScaleMuleServer, e as VideoFailedEvent, V as VideoReadyEvent, g as VideoTranscodedEvent, f as VideoUploadedEvent, W as WebhookEvent, h as WebhookRoutesConfig, c as createServerClient, i as createWebhookHandler, d as createWebhookRoutes, p as parseWebhookEvent, b as registerVideoWebhook, r as resolveGatewayUrl, v as verifyWebhookSignature } from '../webhook-handler-DS0r_w4M.mjs';
-import { $ as ClientContext, A as ApiError } from '../index-DewTyMF2.mjs';
+import { S as ServerConfig } from '../webhook-handler-Cz9jtet2.mjs';
+export { a as ScaleMuleServer, V as VideoFailedEvent, b as VideoReadyEvent, c as VideoTranscodedEvent, d as VideoUploadedEvent, W as WebhookEvent, e as WebhookRoutesConfig, f as createServerClient, g as createWebhookHandler, h as createWebhookRoutes, p as parseWebhookEvent, r as registerVideoWebhook, i as resolveGatewayUrl, v as verifyWebhookSignature } from '../webhook-handler-Cz9jtet2.mjs';
+import { p as ClientContext, A as ApiError } from '../index-BoENfro3.mjs';
 import { NextRequest, NextResponse } from 'next/server';
 
 /**
@@ -231,7 +231,7 @@ interface AuthRoutesConfig {
         email: string;
     }) => void | Promise<void>;
 }
-type RouteHandler = (request: Request, context: {
+type RouteHandler$1 = (request: Request, context: {
     params: Promise<{
         scalemule?: string[];
     }>;
@@ -264,10 +264,10 @@ type RouteHandler = (request: Request, context: {
  * - POST /api/auth/verify-email - Verify email
  */
 declare function createAuthRoutes(config?: AuthRoutesConfig): {
-    GET: RouteHandler;
-    POST: RouteHandler;
-    DELETE: RouteHandler;
-    PATCH: RouteHandler;
+    GET: RouteHandler$1;
+    POST: RouteHandler$1;
+    DELETE: RouteHandler$1;
+    PATCH: RouteHandler$1;
 };
 interface AnalyticsTrackingGateConfig {
     /** Feature flag key used to decide whether to forward analytics */
@@ -346,7 +346,44 @@ interface AnalyticsRoutesConfig {
  * ```
  */
 declare function createAnalyticsRoutes(config?: AnalyticsRoutesConfig): {
+    POST: RouteHandler$1;
+};
+
+/**
+ * Push Notification Proxy Routes
+ *
+ * Drop-in route handlers for Next.js App Router that proxy push notification
+ * requests to the ScaleMule gateway. Follows the same pattern as createAuthRoutes().
+ *
+ * @example
+ * ```ts
+ * // app/api/push/[...action]/route.ts
+ * import { createPushRoutes } from '@scalemule/nextjs/server'
+ *
+ * export const { GET, POST, PUT, DELETE } = createPushRoutes({
+ *   apiKey: process.env.SCALEMULE_API_KEY!,
+ *   gatewayUrl: process.env.SCALEMULE_API_URL!,
+ * })
+ * ```
+ */
+interface PushRoutesConfig {
+    /** Server-side secret API key */
+    apiKey: string;
+    /** Gateway URL (e.g., https://api.scalemule.com) */
+    gatewayUrl: string;
+    /** Enable CSRF validation on POST/PUT/DELETE (default: true) */
+    csrf?: boolean;
+}
+type RouteHandler = (request: Request, context: {
+    params: Promise<{
+        action?: string[];
+    }>;
+}) => Promise<Response>;
+declare function createPushRoutes(config: PushRoutesConfig): {
+    GET: RouteHandler;
     POST: RouteHandler;
+    PUT: RouteHandler;
+    DELETE: RouteHandler;
 };
 
 /**
@@ -940,4 +977,4 @@ declare function invalidateBundleCache(key?: string): void;
  */
 declare function prefetchBundles(keys: string[]): Promise<void>;
 
-export { type AnalyticsRoutesConfig, type AnalyticsTrackingGateConfig, type AuthMiddlewareConfig, type AuthRoutesConfig, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type HandlerContext, type HandlerOptions, type MySqlBundle, OAUTH_STATE_COOKIE_NAME, type OAuthBundle, type PostgresBundle, type RedisBundle, type S3Bundle, SESSION_COOKIE_NAME, ScaleMuleError, ServerConfig, type SessionCookieOptions, type SessionData, type SmtpBundle, USER_ID_COOKIE_NAME, apiHandler, buildClientContextHeaders, buildFlagContext, clearOAuthState, clearSession, configureBundles, configureSecrets, createAnalyticsRoutes, createAuthMiddleware, createAuthRoutes, errorCodeToStatus, extractClientContext, extractClientContextFromReq, generateCSRFToken, getAppSecret, getAppSecretOrDefault, getBootstrapFlags, getBundle, getCSRFToken, getMySqlBundle, getOAuthBundle, getPostgresBundle, getRedisBundle, getS3Bundle, getSession, getSessionFromRequest, getSmtpBundle, invalidateBundleCache, invalidateSecretCache, prefetchBundles, prefetchSecrets, requireAppSecret, requireBundle, requireSession, setOAuthState, unwrap, validateCSRFToken, validateCSRFTokenAsync, validateOAuthState, validateOAuthStateAsync, withAuth, withCSRFProtection, withCSRFToken, withSession };
+export { type AnalyticsRoutesConfig, type AnalyticsTrackingGateConfig, type AuthMiddlewareConfig, type AuthRoutesConfig, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type HandlerContext, type HandlerOptions, type MySqlBundle, OAUTH_STATE_COOKIE_NAME, type OAuthBundle, type PostgresBundle, type PushRoutesConfig, type RedisBundle, type S3Bundle, SESSION_COOKIE_NAME, ScaleMuleError, ServerConfig, type SessionCookieOptions, type SessionData, type SmtpBundle, USER_ID_COOKIE_NAME, apiHandler, buildClientContextHeaders, buildFlagContext, clearOAuthState, clearSession, configureBundles, configureSecrets, createAnalyticsRoutes, createAuthMiddleware, createAuthRoutes, createPushRoutes, errorCodeToStatus, extractClientContext, extractClientContextFromReq, generateCSRFToken, getAppSecret, getAppSecretOrDefault, getBootstrapFlags, getBundle, getCSRFToken, getMySqlBundle, getOAuthBundle, getPostgresBundle, getRedisBundle, getS3Bundle, getSession, getSessionFromRequest, getSmtpBundle, invalidateBundleCache, invalidateSecretCache, prefetchBundles, prefetchSecrets, requireAppSecret, requireBundle, requireSession, setOAuthState, unwrap, validateCSRFToken, validateCSRFTokenAsync, validateOAuthState, validateOAuthStateAsync, withAuth, withCSRFProtection, withCSRFToken, withSession };

package/dist/server/index.d.ts

@@ -1,6 +1,6 @@
-import { S as ServerConfig } from '../webhook-handler-CQ2lZgy0.js';
-export { a as ScaleMuleServer, e as VideoFailedEvent, V as VideoReadyEvent, g as VideoTranscodedEvent, f as VideoUploadedEvent, W as WebhookEvent, h as WebhookRoutesConfig, c as createServerClient, i as createWebhookHandler, d as createWebhookRoutes, p as parseWebhookEvent, b as registerVideoWebhook, r as resolveGatewayUrl, v as verifyWebhookSignature } from '../webhook-handler-CQ2lZgy0.js';
-import { $ as ClientContext, A as ApiError } from '../index-DewTyMF2.js';
+import { S as ServerConfig } from '../webhook-handler-CjSSCdvI.js';
+export { a as ScaleMuleServer, V as VideoFailedEvent, b as VideoReadyEvent, c as VideoTranscodedEvent, d as VideoUploadedEvent, W as WebhookEvent, e as WebhookRoutesConfig, f as createServerClient, g as createWebhookHandler, h as createWebhookRoutes, p as parseWebhookEvent, r as registerVideoWebhook, i as resolveGatewayUrl, v as verifyWebhookSignature } from '../webhook-handler-CjSSCdvI.js';
+import { p as ClientContext, A as ApiError } from '../index-BoENfro3.js';
 import { NextRequest, NextResponse } from 'next/server';
 
 /**
@@ -231,7 +231,7 @@ interface AuthRoutesConfig {
         email: string;
     }) => void | Promise<void>;
 }
-type RouteHandler = (request: Request, context: {
+type RouteHandler$1 = (request: Request, context: {
     params: Promise<{
         scalemule?: string[];
     }>;
@@ -264,10 +264,10 @@ type RouteHandler = (request: Request, context: {
  * - POST /api/auth/verify-email - Verify email
  */
 declare function createAuthRoutes(config?: AuthRoutesConfig): {
-    GET: RouteHandler;
-    POST: RouteHandler;
-    DELETE: RouteHandler;
-    PATCH: RouteHandler;
+    GET: RouteHandler$1;
+    POST: RouteHandler$1;
+    DELETE: RouteHandler$1;
+    PATCH: RouteHandler$1;
 };
 interface AnalyticsTrackingGateConfig {
     /** Feature flag key used to decide whether to forward analytics */
@@ -346,7 +346,44 @@ interface AnalyticsRoutesConfig {
  * ```
  */
 declare function createAnalyticsRoutes(config?: AnalyticsRoutesConfig): {
+    POST: RouteHandler$1;
+};
+
+/**
+ * Push Notification Proxy Routes
+ *
+ * Drop-in route handlers for Next.js App Router that proxy push notification
+ * requests to the ScaleMule gateway. Follows the same pattern as createAuthRoutes().
+ *
+ * @example
+ * ```ts
+ * // app/api/push/[...action]/route.ts
+ * import { createPushRoutes } from '@scalemule/nextjs/server'
+ *
+ * export const { GET, POST, PUT, DELETE } = createPushRoutes({
+ *   apiKey: process.env.SCALEMULE_API_KEY!,
+ *   gatewayUrl: process.env.SCALEMULE_API_URL!,
+ * })
+ * ```
+ */
+interface PushRoutesConfig {
+    /** Server-side secret API key */
+    apiKey: string;
+    /** Gateway URL (e.g., https://api.scalemule.com) */
+    gatewayUrl: string;
+    /** Enable CSRF validation on POST/PUT/DELETE (default: true) */
+    csrf?: boolean;
+}
+type RouteHandler = (request: Request, context: {
+    params: Promise<{
+        action?: string[];
+    }>;
+}) => Promise<Response>;
+declare function createPushRoutes(config: PushRoutesConfig): {
+    GET: RouteHandler;
     POST: RouteHandler;
+    PUT: RouteHandler;
+    DELETE: RouteHandler;
 };
 
 /**
@@ -940,4 +977,4 @@ declare function invalidateBundleCache(key?: string): void;
  */
 declare function prefetchBundles(keys: string[]): Promise<void>;
 
-export { type AnalyticsRoutesConfig, type AnalyticsTrackingGateConfig, type AuthMiddlewareConfig, type AuthRoutesConfig, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type HandlerContext, type HandlerOptions, type MySqlBundle, OAUTH_STATE_COOKIE_NAME, type OAuthBundle, type PostgresBundle, type RedisBundle, type S3Bundle, SESSION_COOKIE_NAME, ScaleMuleError, ServerConfig, type SessionCookieOptions, type SessionData, type SmtpBundle, USER_ID_COOKIE_NAME, apiHandler, buildClientContextHeaders, buildFlagContext, clearOAuthState, clearSession, configureBundles, configureSecrets, createAnalyticsRoutes, createAuthMiddleware, createAuthRoutes, errorCodeToStatus, extractClientContext, extractClientContextFromReq, generateCSRFToken, getAppSecret, getAppSecretOrDefault, getBootstrapFlags, getBundle, getCSRFToken, getMySqlBundle, getOAuthBundle, getPostgresBundle, getRedisBundle, getS3Bundle, getSession, getSessionFromRequest, getSmtpBundle, invalidateBundleCache, invalidateSecretCache, prefetchBundles, prefetchSecrets, requireAppSecret, requireBundle, requireSession, setOAuthState, unwrap, validateCSRFToken, validateCSRFTokenAsync, validateOAuthState, validateOAuthStateAsync, withAuth, withCSRFProtection, withCSRFToken, withSession };
+export { type AnalyticsRoutesConfig, type AnalyticsTrackingGateConfig, type AuthMiddlewareConfig, type AuthRoutesConfig, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type HandlerContext, type HandlerOptions, type MySqlBundle, OAUTH_STATE_COOKIE_NAME, type OAuthBundle, type PostgresBundle, type PushRoutesConfig, type RedisBundle, type S3Bundle, SESSION_COOKIE_NAME, ScaleMuleError, ServerConfig, type SessionCookieOptions, type SessionData, type SmtpBundle, USER_ID_COOKIE_NAME, apiHandler, buildClientContextHeaders, buildFlagContext, clearOAuthState, clearSession, configureBundles, configureSecrets, createAnalyticsRoutes, createAuthMiddleware, createAuthRoutes, createPushRoutes, errorCodeToStatus, extractClientContext, extractClientContextFromReq, generateCSRFToken, getAppSecret, getAppSecretOrDefault, getBootstrapFlags, getBundle, getCSRFToken, getMySqlBundle, getOAuthBundle, getPostgresBundle, getRedisBundle, getS3Bundle, getSession, getSessionFromRequest, getSmtpBundle, invalidateBundleCache, invalidateSecretCache, prefetchBundles, prefetchSecrets, requireAppSecret, requireBundle, requireSession, setOAuthState, unwrap, validateCSRFToken, validateCSRFTokenAsync, validateOAuthState, validateOAuthStateAsync, withAuth, withCSRFProtection, withCSRFToken, withSession };

package/dist/server/index.js

@@ -1601,6 +1601,137 @@ function createAnalyticsRoutes(config = {}) {
   return { POST };
 }
 
+// src/server/push.ts
+function errorResponse2(code, message, status) {
+  return new Response(
+    JSON.stringify({ success: false, error: { code, message } }),
+    { status, headers: { "Content-Type": "application/json" } }
+  );
+}
+function successResponse2(data, status = 200) {
+  return new Response(
+    JSON.stringify({ success: true, data }),
+    { status, headers: { "Content-Type": "application/json" } }
+  );
+}
+function createPushRoutes(config) {
+  const { apiKey, gatewayUrl, csrf = true } = config;
+  async function proxyToGateway(request, method, subPath) {
+    const targetUrl = `${gatewayUrl}/v1/communication/push/${subPath}`;
+    const headers2 = {
+      "x-api-key": apiKey
+    };
+    const session = getSessionFromRequest(request);
+    if (session?.sessionToken) {
+      headers2["Authorization"] = `Bearer ${session.sessionToken}`;
+    }
+    const clientContext = extractClientContext(
+      request
+    );
+    const contextHeaders = buildClientContextHeaders(clientContext);
+    Object.assign(headers2, contextHeaders);
+    const workspaceId = request.headers.get("x-sm-workspace-id");
+    if (workspaceId) {
+      headers2["x-sm-workspace-id"] = workspaceId;
+    }
+    const fetchOptions = {
+      method,
+      headers: headers2
+    };
+    if (method !== "GET" && method !== "DELETE") {
+      try {
+        const body = await request.text();
+        if (body) {
+          headers2["Content-Type"] = "application/json";
+          fetchOptions.body = body;
+        }
+      } catch {
+      }
+    }
+    const response = await fetch(targetUrl, fetchOptions);
+    if (response.status === 204) {
+      return successResponse2(null);
+    }
+    const contentType = response.headers.get("content-type") || "";
+    if (contentType.includes("application/json")) {
+      const json = await response.json();
+      if (response.ok) {
+        return new Response(JSON.stringify(json), {
+          status: response.status,
+          headers: { "Content-Type": "application/json" }
+        });
+      } else {
+        const errMsg = json?.error?.message || json?.message || "Request failed";
+        const errCode = json?.error?.code || json?.code || "PUSH_ERROR";
+        return errorResponse2(errCode, errMsg, response.status);
+      }
+    }
+    const text = await response.text();
+    if (response.ok) {
+      return successResponse2(text);
+    }
+    return errorResponse2("PUSH_ERROR", text || "Request failed", response.status);
+  }
+  function extractSubPath(params) {
+    return (params.action || []).join("/");
+  }
+  const GET = async (request, context) => {
+    try {
+      const params = await context?.params;
+      const subPath = extractSubPath(params || {});
+      return proxyToGateway(request, "GET", subPath);
+    } catch (e) {
+      return errorResponse2("INTERNAL_ERROR", String(e), 500);
+    }
+  };
+  const POST = async (request, context) => {
+    if (csrf) {
+      const csrfError = validateCSRFToken(request);
+      if (csrfError) {
+        return errorResponse2("CSRF_ERROR", "CSRF validation failed", 403);
+      }
+    }
+    try {
+      const params = await context?.params;
+      const subPath = extractSubPath(params || {});
+      return proxyToGateway(request, "POST", subPath);
+    } catch (e) {
+      return errorResponse2("INTERNAL_ERROR", String(e), 500);
+    }
+  };
+  const PUT = async (request, context) => {
+    if (csrf) {
+      const csrfError = validateCSRFToken(request);
+      if (csrfError) {
+        return errorResponse2("CSRF_ERROR", "CSRF validation failed", 403);
+      }
+    }
+    try {
+      const params = await context?.params;
+      const subPath = extractSubPath(params || {});
+      return proxyToGateway(request, "PUT", subPath);
+    } catch (e) {
+      return errorResponse2("INTERNAL_ERROR", String(e), 500);
+    }
+  };
+  const DELETE = async (request, context) => {
+    if (csrf) {
+      const csrfError = validateCSRFToken(request);
+      if (csrfError) {
+        return errorResponse2("CSRF_ERROR", "CSRF validation failed", 403);
+      }
+    }
+    try {
+      const params = await context?.params;
+      const subPath = extractSubPath(params || {});
+      return proxyToGateway(request, "DELETE", subPath);
+    } catch (e) {
+      return errorResponse2("INTERNAL_ERROR", String(e), 500);
+    }
+  };
+  return { GET, POST, PUT, DELETE };
+}
+
 // src/server/errors.ts
 var ScaleMuleError = class extends Error {
   constructor(code, message, status = 400, details) {
@@ -1705,8 +1836,12 @@ function apiHandler(handler, options) {
           const custom = options.onError(error);
           if (custom) return custom;
         }
+        const safeMessage = error.status >= 500 ? "An unexpected error occurred" : error.message;
+        if (error.status >= 500) {
+          console.error("Internal API error:", error.message);
+        }
         return Response.json(
-          { success: false, error: { code: error.code, message: error.message } },
+          { success: false, error: { code: error.code, message: safeMessage } },
           { status: error.status }
         );
       }
@@ -2220,6 +2355,7 @@ exports.configureSecrets = configureSecrets;
 exports.createAnalyticsRoutes = createAnalyticsRoutes;
 exports.createAuthMiddleware = createAuthMiddleware;
 exports.createAuthRoutes = createAuthRoutes;
+exports.createPushRoutes = createPushRoutes;
 exports.createServerClient = createServerClient;
 exports.createWebhookHandler = createWebhookHandler;
 exports.createWebhookRoutes = createWebhookRoutes;