@serve.zone/dcrouter 17.7.1 → 17.9.0

package/dist_ts/webpush/classes.webpush-transport.d.ts

@@ -0,0 +1,45 @@
+import * as plugins from '../plugins.js';
+import { type TWebPushDnsLookup } from './helpers.webpush-endpoint.js';
+export interface IWebPushTransportRequest {
+    subscription: plugins.webpush.PushSubscription;
+    payload: string;
+    ttlSeconds: number;
+    urgency: plugins.webpush.Urgency;
+    topic?: string;
+    vapid: {
+        subject: string;
+        publicKey: string;
+        privateKey: string;
+    };
+}
+export interface IWebPushTransportResponse {
+    statusCode: number;
+    retryAfter?: string;
+}
+export interface IWebPushTransport {
+    send(requestArg: IWebPushTransportRequest): Promise<IWebPushTransportResponse>;
+}
+export type TWebPushTransportErrorCode = 'PUSH_DNS_TIMEOUT' | 'PUSH_REQUEST_TIMEOUT' | 'PUSH_RESPONSE_TOO_LARGE' | 'PUSH_RESPONSE_INVALID' | 'PUSH_NETWORK_ERROR';
+export declare class WebPushTransportError extends Error {
+    readonly code: TWebPushTransportErrorCode;
+    constructor(code: TWebPushTransportErrorCode, optionsArg?: {
+        cause?: unknown;
+    });
+}
+export interface IWebPushHttpTransportOptions {
+    dnsLookup?: TWebPushDnsLookup;
+    dnsTimeoutMs?: number;
+    connectTimeoutMs?: number;
+    requestTimeoutMs?: number;
+    maxResponseBytes?: number;
+}
+export declare class WebPushHttpTransport implements IWebPushTransport {
+    private readonly dnsLookup?;
+    private readonly dnsTimeoutMs;
+    private readonly connectTimeoutMs;
+    private readonly requestTimeoutMs;
+    private readonly maxResponseBytes;
+    constructor(optionsArg?: IWebPushHttpTransportOptions);
+    send(requestArg: IWebPushTransportRequest): Promise<IWebPushTransportResponse>;
+    private normalizePositiveInteger;
+}

package/dist_ts/webpush/classes.webpush-transport.js

@@ -0,0 +1,161 @@
+import * as plugins from '../plugins.js';
+import { createPinnedWebPushAgent, resolveWebPushEndpoint, WebPushEndpointPolicyError, } from './helpers.webpush-endpoint.js';
+export class WebPushTransportError extends Error {
+    code;
+    constructor(code, optionsArg = {}) {
+        super(code, optionsArg);
+        this.code = code;
+        this.name = 'WebPushTransportError';
+    }
+}
+const normalizeRetryAfter = (valueArg) => {
+    if (Array.isArray(valueArg))
+        return valueArg[0]?.slice(0, 128);
+    return typeof valueArg === 'string' ? valueArg.slice(0, 128) : undefined;
+};
+export class WebPushHttpTransport {
+    dnsLookup;
+    dnsTimeoutMs;
+    connectTimeoutMs;
+    requestTimeoutMs;
+    maxResponseBytes;
+    constructor(optionsArg = {}) {
+        this.dnsLookup = optionsArg.dnsLookup;
+        this.dnsTimeoutMs = this.normalizePositiveInteger(optionsArg.dnsTimeoutMs, 5_000, 'dnsTimeoutMs');
+        this.connectTimeoutMs = this.normalizePositiveInteger(optionsArg.connectTimeoutMs, 10_000, 'connectTimeoutMs');
+        this.requestTimeoutMs = this.normalizePositiveInteger(optionsArg.requestTimeoutMs, 15_000, 'requestTimeoutMs');
+        this.maxResponseBytes = this.normalizePositiveInteger(optionsArg.maxResponseBytes, 16_384, 'maxResponseBytes');
+    }
+    async send(requestArg) {
+        const sendDeadline = Date.now() + this.requestTimeoutMs;
+        let resolved;
+        try {
+            resolved = await new Promise((resolve, reject) => {
+                let settled = false;
+                const settle = (errorArg, valueArg) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timer);
+                    if (errorArg)
+                        reject(errorArg);
+                    else
+                        resolve(valueArg);
+                };
+                const timer = setTimeout(() => {
+                    settle(new WebPushTransportError('PUSH_DNS_TIMEOUT'));
+                }, Math.min(this.dnsTimeoutMs, this.requestTimeoutMs));
+                resolveWebPushEndpoint(requestArg.subscription.endpoint, this.dnsLookup).then((valueArg) => settle(null, valueArg), (errorArg) => settle(errorArg));
+            });
+        }
+        catch (error) {
+            if (error instanceof WebPushEndpointPolicyError)
+                throw error;
+            if (error instanceof WebPushTransportError)
+                throw error;
+            throw new WebPushTransportError('PUSH_NETWORK_ERROR', { cause: error });
+        }
+        const remainingRequestTimeoutMs = sendDeadline - Date.now();
+        if (remainingRequestTimeoutMs <= 0) {
+            throw new WebPushTransportError('PUSH_REQUEST_TIMEOUT');
+        }
+        const agent = createPinnedWebPushAgent(resolved);
+        try {
+            const requestDetails = plugins.webpush.generateRequestDetails(requestArg.subscription, requestArg.payload, {
+                TTL: requestArg.ttlSeconds,
+                contentEncoding: 'aes128gcm',
+                urgency: requestArg.urgency,
+                ...(requestArg.topic ? { topic: requestArg.topic } : {}),
+                vapidDetails: requestArg.vapid,
+            });
+            if (requestDetails.method !== 'POST'
+                || requestDetails.endpoint !== requestArg.subscription.endpoint
+                || !Buffer.isBuffer(requestDetails.body)) {
+                throw new WebPushTransportError('PUSH_RESPONSE_INVALID');
+            }
+            return await new Promise((resolve, reject) => {
+                let settled = false;
+                let requestTimer;
+                const settle = (errorArg, responseArg) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    if (requestTimer)
+                        clearTimeout(requestTimer);
+                    if (errorArg)
+                        reject(errorArg);
+                    else
+                        resolve(responseArg);
+                };
+                const pushRequest = plugins.https.request({
+                    protocol: 'https:',
+                    hostname: resolved.hostname,
+                    servername: resolved.hostname,
+                    port: 443,
+                    path: `${resolved.url.pathname}${resolved.url.search}`,
+                    method: 'POST',
+                    headers: requestDetails.headers,
+                    agent,
+                    timeout: Math.min(this.connectTimeoutMs, remainingRequestTimeoutMs),
+                    maxHeaderSize: 16_384,
+                    setHost: true,
+                }, (pushResponse) => {
+                    let responseBytes = 0;
+                    pushResponse.on('data', (chunkArg) => {
+                        responseBytes += Buffer.byteLength(chunkArg);
+                        if (responseBytes > this.maxResponseBytes) {
+                            const error = new WebPushTransportError('PUSH_RESPONSE_TOO_LARGE');
+                            settle(error);
+                            pushResponse.destroy(error);
+                            pushRequest.destroy(error);
+                        }
+                    });
+                    pushResponse.once('end', () => {
+                        const statusCode = pushResponse.statusCode;
+                        if (!Number.isSafeInteger(statusCode) || statusCode < 100 || statusCode > 599) {
+                            settle(new WebPushTransportError('PUSH_RESPONSE_INVALID'));
+                            return;
+                        }
+                        settle(null, {
+                            statusCode: statusCode,
+                            retryAfter: normalizeRetryAfter(pushResponse.headers['retry-after']),
+                        });
+                    });
+                    pushResponse.once('error', (errorArg) => {
+                        settle(errorArg instanceof WebPushTransportError
+                            ? errorArg
+                            : new WebPushTransportError('PUSH_NETWORK_ERROR', { cause: errorArg }));
+                    });
+                });
+                pushRequest.once('timeout', () => {
+                    const error = new WebPushTransportError('PUSH_REQUEST_TIMEOUT');
+                    settle(error);
+                    pushRequest.destroy(error);
+                });
+                pushRequest.once('error', (errorArg) => {
+                    settle(errorArg instanceof WebPushTransportError
+                        ? errorArg
+                        : new WebPushTransportError('PUSH_NETWORK_ERROR', { cause: errorArg }));
+                });
+                requestTimer = setTimeout(() => {
+                    const error = new WebPushTransportError('PUSH_REQUEST_TIMEOUT');
+                    settle(error);
+                    pushRequest.destroy(error);
+                }, remainingRequestTimeoutMs);
+                requestTimer.unref();
+                pushRequest.end(requestDetails.body);
+            });
+        }
+        finally {
+            agent.destroy();
+        }
+    }
+    normalizePositiveInteger(valueArg, defaultArg, labelArg) {
+        const value = valueArg ?? defaultArg;
+        if (!Number.isSafeInteger(value) || value <= 0) {
+            throw new Error(`Web Push transport ${labelArg} must be a positive integer`);
+        }
+        return value;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/webpush/helpers.webpush-endpoint.d.ts

@@ -0,0 +1,21 @@
+import * as plugins from '../plugins.js';
+export type TWebPushEndpointPolicyErrorCode = 'ENDPOINT_URL_INVALID' | 'ENDPOINT_SCHEME_INVALID' | 'ENDPOINT_PORT_INVALID' | 'ENDPOINT_AUTHORITY_INVALID' | 'ENDPOINT_FRAGMENT_INVALID' | 'ENDPOINT_IP_LITERAL_FORBIDDEN' | 'ENDPOINT_DNS_EMPTY' | 'ENDPOINT_DNS_UNSAFE';
+export declare class WebPushEndpointPolicyError extends Error {
+    readonly code: TWebPushEndpointPolicyErrorCode;
+    constructor(code: TWebPushEndpointPolicyErrorCode);
+}
+export interface IWebPushDnsAddress {
+    address: string;
+    family: number;
+}
+export type TWebPushDnsLookup = (hostnameArg: string) => Promise<IWebPushDnsAddress[]>;
+export interface IWebPushResolvedEndpoint {
+    url: URL;
+    hostname: string;
+    address: string;
+    family: 4 | 6;
+}
+export declare function isGloballyRoutableWebPushAddress(addressArg: string): boolean;
+export declare function parseWebPushEndpoint(endpointArg: string): URL;
+export declare function resolveWebPushEndpoint(endpointArg: string, lookupArg?: TWebPushDnsLookup): Promise<IWebPushResolvedEndpoint>;
+export declare function createPinnedWebPushAgent(resolvedArg: IWebPushResolvedEndpoint): InstanceType<typeof plugins.https.Agent>;

package/dist_ts/webpush/helpers.webpush-endpoint.js

@@ -0,0 +1,111 @@
+import * as plugins from '../plugins.js';
+export class WebPushEndpointPolicyError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+        this.name = 'WebPushEndpointPolicyError';
+    }
+}
+const defaultDnsLookup = async (hostnameArg) => {
+    return await plugins.dns.promises.lookup(hostnameArg, {
+        all: true,
+        verbatim: true,
+    });
+};
+export function isGloballyRoutableWebPushAddress(addressArg) {
+    const family = plugins.net.isIP(addressArg);
+    if (family !== 4 && family !== 6)
+        return false;
+    try {
+        const parsed = plugins.ipaddr.parse(addressArg);
+        if (parsed.kind() === 'ipv6'
+            && 'isIPv4MappedAddress' in parsed
+            && parsed.isIPv4MappedAddress())
+            return false;
+        return parsed.range() === 'unicast';
+    }
+    catch {
+        return false;
+    }
+}
+export function parseWebPushEndpoint(endpointArg) {
+    if (typeof endpointArg !== 'string' || endpointArg.length === 0 || endpointArg.length > 4096) {
+        throw new WebPushEndpointPolicyError('ENDPOINT_URL_INVALID');
+    }
+    let endpoint;
+    try {
+        endpoint = new URL(endpointArg);
+    }
+    catch {
+        throw new WebPushEndpointPolicyError('ENDPOINT_URL_INVALID');
+    }
+    if (endpoint.protocol !== 'https:') {
+        throw new WebPushEndpointPolicyError('ENDPOINT_SCHEME_INVALID');
+    }
+    if (endpoint.port && endpoint.port !== '443') {
+        throw new WebPushEndpointPolicyError('ENDPOINT_PORT_INVALID');
+    }
+    if (endpoint.username || endpoint.password || !endpoint.hostname) {
+        throw new WebPushEndpointPolicyError('ENDPOINT_AUTHORITY_INVALID');
+    }
+    if (endpoint.hash) {
+        throw new WebPushEndpointPolicyError('ENDPOINT_FRAGMENT_INVALID');
+    }
+    const hostname = endpoint.hostname.startsWith('[') && endpoint.hostname.endsWith(']')
+        ? endpoint.hostname.slice(1, -1)
+        : endpoint.hostname;
+    if (plugins.net.isIP(hostname) !== 0) {
+        throw new WebPushEndpointPolicyError('ENDPOINT_IP_LITERAL_FORBIDDEN');
+    }
+    return endpoint;
+}
+export async function resolveWebPushEndpoint(endpointArg, lookupArg = defaultDnsLookup) {
+    const url = parseWebPushEndpoint(endpointArg);
+    const hostname = url.hostname.toLowerCase();
+    const answers = await lookupArg(hostname);
+    if (!Array.isArray(answers) || answers.length === 0) {
+        throw new WebPushEndpointPolicyError('ENDPOINT_DNS_EMPTY');
+    }
+    const normalized = answers.map((answerArg) => ({
+        address: String(answerArg.address || '').trim(),
+        family: plugins.net.isIP(String(answerArg.address || '').trim()),
+    }));
+    if (normalized.some((answerArg) => ((answerArg.family !== 4 && answerArg.family !== 6)
+        || !isGloballyRoutableWebPushAddress(answerArg.address)))) {
+        throw new WebPushEndpointPolicyError('ENDPOINT_DNS_UNSAFE');
+    }
+    const unique = Array.from(new Map(normalized.map((answerArg) => [`${answerArg.family}:${answerArg.address}`, answerArg])).values());
+    const selected = unique[0];
+    return {
+        url,
+        hostname,
+        address: selected.address,
+        family: selected.family,
+    };
+}
+export function createPinnedWebPushAgent(resolvedArg) {
+    const lookup = (hostnameArg, optionsArg, callbackArg) => {
+        if (hostnameArg.toLowerCase() !== resolvedArg.hostname) {
+            const error = new Error('Pinned Web Push agent hostname mismatch');
+            error.code = 'EHOSTUNREACH';
+            callbackArg(error, '', 0);
+            return;
+        }
+        if (optionsArg.all) {
+            callbackArg(null, [{
+                    address: resolvedArg.address,
+                    family: resolvedArg.family,
+                }]);
+            return;
+        }
+        callbackArg(null, resolvedArg.address, resolvedArg.family);
+    };
+    return new plugins.https.Agent({
+        keepAlive: false,
+        maxSockets: 1,
+        maxFreeSockets: 0,
+        lookup,
+    });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaGVscGVycy53ZWJwdXNoLWVuZHBvaW50LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vdHMvd2VicHVzaC9oZWxwZXJzLndlYnB1c2gtZW5kcG9pbnQudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQ0EsT0FBTyxLQUFLLE9BQU8sTUFBTSxlQUFlLENBQUM7QUFZekMsTUFBTSxPQUFPLDBCQUEyQixTQUFRLEtBQUs7SUFDaEI7SUFBbkMsWUFBbUMsSUFBcUM7UUFDdEUsS0FBSyxDQUFDLElBQUksQ0FBQyxDQUFDO1FBRHFCLFNBQUksR0FBSixJQUFJLENBQWlDO1FBRXRFLElBQUksQ0FBQyxJQUFJLEdBQUcsNEJBQTRCLENBQUM7SUFDM0MsQ0FBQztDQUNGO0FBa0JELE1BQU0sZ0JBQWdCLEdBQXNCLEtBQUssRUFBRSxXQUFXLEVBQUUsRUFBRTtJQUNoRSxPQUFPLE1BQU0sT0FBTyxDQUFDLEdBQUcsQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLFdBQVcsRUFBRTtRQUNwRCxHQUFHLEVBQUUsSUFBSTtRQUNULFFBQVEsRUFBRSxJQUFJO0tBQ2YsQ0FBQyxDQUFDO0FBQ0wsQ0FBQyxDQUFDO0FBRUYsTUFBTSxVQUFVLGdDQUFnQyxDQUFDLFVBQWtCO0lBQ2pFLE1BQU0sTUFBTSxHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDO0lBQzVDLElBQUksTUFBTSxLQUFLLENBQUMsSUFBSSxNQUFNLEtBQUssQ0FBQztRQUFFLE9BQU8sS0FBSyxDQUFDO0lBQy9DLElBQUksQ0FBQztRQUNILE1BQU0sTUFBTSxHQUFHLE9BQU8sQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBQ2hELElBQ0UsTUFBTSxDQUFDLElBQUksRUFBRSxLQUFLLE1BQU07ZUFDckIscUJBQXFCLElBQUksTUFBTTtlQUMvQixNQUFNLENBQUMsbUJBQW1CLEVBQUU7WUFDL0IsT0FBTyxLQUFLLENBQUM7UUFDZixPQUFPLE1BQU0sQ0FBQyxLQUFLLEVBQUUsS0FBSyxTQUFTLENBQUM7SUFDdEMsQ0FBQztJQUFDLE1BQU0sQ0FBQztRQUNQLE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztBQUNILENBQUM7QUFFRCxNQUFNLFVBQVUsb0JBQW9CLENBQUMsV0FBbUI7SUFDdEQsSUFBSSxPQUFPLFdBQVcsS0FBSyxRQUFRLElBQUksV0FBVyxDQUFDLE1BQU0sS0FBSyxDQUFDLElBQUksV0FBVyxDQUFDLE1BQU0sR0FBRyxJQUFJLEVBQUUsQ0FBQztRQUM3RixNQUFNLElBQUksMEJBQTBCLENBQUMsc0JBQXNCLENBQUMsQ0FBQztJQUMvRCxDQUFDO0lBQ0QsSUFBSSxRQUFhLENBQUM7SUFDbEIsSUFBSSxDQUFDO1FBQ0gsUUFBUSxHQUFHLElBQUksR0FBRyxDQUFDLFdBQVcsQ0FBQyxDQUFDO0lBQ2xDLENBQUM7SUFBQyxNQUFNLENBQUM7UUFDUCxNQUFNLElBQUksMEJBQTBCLENBQUMsc0JBQXNCLENBQUMsQ0FBQztJQUMvRCxDQUFDO0lBQ0QsSUFBSSxRQUFRLENBQUMsUUFBUSxLQUFLLFFBQVEsRUFBRSxDQUFDO1FBQ25DLE1BQU0sSUFBSSwwQkFBMEIsQ0FBQyx5QkFBeUIsQ0FBQyxDQUFDO0lBQ2xFLENBQUM7SUFDRCxJQUFJLFFBQVEsQ0FBQyxJQUFJLElBQUksUUFBUSxDQUFDLElBQUksS0FBSyxLQUFLLEVBQUUsQ0FBQztRQUM3QyxNQUFNLElBQUksMEJBQTBCLENBQUMsdUJBQXVCLENBQUMsQ0FBQztJQUNoRSxDQUFDO0lBQ0QsSUFBSSxRQUFRLENBQUMsUUFBUSxJQUFJLFFBQVEsQ0FBQyxRQUFRLElBQUksQ0FBQyxRQUFRLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDakUsTUFBTSxJQUFJLDBCQUEwQixDQUFDLDRCQUE0QixDQUFDLENBQUM7SUFDckUsQ0FBQztJQUNELElBQUksUUFBUSxDQUFDLElBQUksRUFBRSxDQUFDO1FBQ2xCLE1BQU0sSUFBSSwwQkFBMEIsQ0FBQywyQkFBMkIsQ0FBQyxDQUFDO0lBQ3BFLENBQUM7SUFDRCxNQUFNLFFBQVEsR0FBRyxRQUFRLENBQUMsUUFBUSxDQUFDLFVBQVUsQ0FBQyxHQUFHLENBQUMsSUFBSSxRQUFRLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxHQUFHLENBQUM7UUFDbkYsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQztRQUNoQyxDQUFDLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQztJQUN0QixJQUFJLE9BQU8sQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQ3JDLE1BQU0sSUFBSSwwQkFBMEIsQ0FBQywrQkFBK0IsQ0FBQyxDQUFDO0lBQ3hFLENBQUM7SUFDRCxPQUFPLFFBQVEsQ0FBQztBQUNsQixDQUFDO0FBRUQsTUFBTSxDQUFDLEtBQUssVUFBVSxzQkFBc0IsQ0FDMUMsV0FBbUIsRUFDbkIsWUFBK0IsZ0JBQWdCO0lBRS9DLE1BQU0sR0FBRyxHQUFHLG9CQUFvQixDQUFDLFdBQVcsQ0FBQyxDQUFDO0lBQzlDLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxRQUFRLENBQUMsV0FBVyxFQUFFLENBQUM7SUFDNUMsTUFBTSxPQUFPLEdBQUcsTUFBTSxTQUFTLENBQUMsUUFBUSxDQUFDLENBQUM7SUFDMUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLElBQUksT0FBTyxDQUFDLE1BQU0sS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNwRCxNQUFNLElBQUksMEJBQTBCLENBQUMsb0JBQW9CLENBQUMsQ0FBQztJQUM3RCxDQUFDO0lBQ0QsTUFBTSxVQUFVLEdBQUcsT0FBTyxDQUFDLEdBQUcsQ0FBQyxDQUFDLFNBQVMsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUM3QyxPQUFPLEVBQUUsTUFBTSxDQUFDLFNBQVMsQ0FBQyxPQUFPLElBQUksRUFBRSxDQUFDLENBQUMsSUFBSSxFQUFFO1FBQy9DLE1BQU0sRUFBRSxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsU0FBUyxDQUFDLE9BQU8sSUFBSSxFQUFFLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FBQztLQUNqRSxDQUFDLENBQUMsQ0FBQztJQUNKLElBQ0UsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLFNBQVMsRUFBRSxFQUFFLENBQUMsQ0FDN0IsQ0FBQyxTQUFTLENBQUMsTUFBTSxLQUFLLENBQUMsSUFBSSxTQUFTLENBQUMsTUFBTSxLQUFLLENBQUMsQ0FBQztXQUMvQyxDQUFDLGdDQUFnQyxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUMsQ0FDeEQsQ0FBQyxFQUNGLENBQUM7UUFDRCxNQUFNLElBQUksMEJBQTBCLENBQUMscUJBQXFCLENBQUMsQ0FBQztJQUM5RCxDQUFDO0lBQ0QsTUFBTSxNQUFNLEdBQUcsS0FBSyxDQUFDLElBQUksQ0FDdkIsSUFBSSxHQUFHLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxDQUFDLFNBQVMsRUFBRSxFQUFFLENBQUMsQ0FBQyxHQUFHLFNBQVMsQ0FBQyxNQUFNLElBQUksU0FBUyxDQUFDLE9BQU8sRUFBRSxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FDekcsQ0FBQztJQUNGLE1BQU0sUUFBUSxHQUFHLE1BQU0sQ0FBQyxDQUFDLENBQXVDLENBQUM7SUFDakUsT0FBTztRQUNMLEdBQUc7UUFDSCxRQUFRO1FBQ1IsT0FBTyxFQUFFLFFBQVEsQ0FBQyxPQUFPO1FBQ3pCLE1BQU0sRUFBRSxRQUFRLENBQUMsTUFBTTtLQUN4QixDQUFDO0FBQ0osQ0FBQztBQUVELE1BQU0sVUFBVSx3QkFBd0IsQ0FDdEMsV0FBcUM7SUFFckMsTUFBTSxNQUFNLEdBQW1CLENBQUMsV0FBVyxFQUFFLFVBQVUsRUFBRSxXQUFXLEVBQUUsRUFBRTtRQUN0RSxJQUFJLFdBQVcsQ0FBQyxXQUFXLEVBQUUsS0FBSyxXQUFXLENBQUMsUUFBUSxFQUFFLENBQUM7WUFDdkQsTUFBTSxLQUFLLEdBQUcsSUFBSSxLQUFLLENBQUMseUNBQXlDLENBQTBCLENBQUM7WUFDNUYsS0FBSyxDQUFDLElBQUksR0FBRyxjQUFjLENBQUM7WUFDNUIsV0FBVyxDQUFDLEtBQUssRUFBRSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUM7WUFDMUIsT0FBTztRQUNULENBQUM7UUFDRCxJQUFJLFVBQVUsQ0FBQyxHQUFHLEVBQUUsQ0FBQztZQUNuQixXQUFXLENBQUMsSUFBSSxFQUFFLENBQUM7b0JBQ2pCLE9BQU8sRUFBRSxXQUFXLENBQUMsT0FBTztvQkFDNUIsTUFBTSxFQUFFLFdBQVcsQ0FBQyxNQUFNO2lCQUMzQixDQUFDLENBQUMsQ0FBQztZQUNKLE9BQU87UUFDVCxDQUFDO1FBQ0QsV0FBVyxDQUFDLElBQUksRUFBRSxXQUFXLENBQUMsT0FBTyxFQUFFLFdBQVcsQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUM3RCxDQUFDLENBQUM7SUFDRixPQUFPLElBQUksT0FBTyxDQUFDLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDN0IsU0FBUyxFQUFFLEtBQUs7UUFDaEIsVUFBVSxFQUFFLENBQUM7UUFDYixjQUFjLEVBQUUsQ0FBQztRQUNqQixNQUFNO0tBQ1AsQ0FBQyxDQUFDO0FBQ0wsQ0FBQyJ9

package/dist_ts/webpush/index.d.ts

@@ -0,0 +1,4 @@
+export * from './classes.webpush-crypto.js';
+export * from './classes.webpush-manager.js';
+export * from './classes.webpush-transport.js';
+export * from './helpers.webpush-endpoint.js';

package/dist_ts/webpush/index.js

@@ -0,0 +1,5 @@
+export * from './classes.webpush-crypto.js';
+export * from './classes.webpush-manager.js';
+export * from './classes.webpush-transport.js';
+export * from './helpers.webpush-endpoint.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy93ZWJwdXNoL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLGNBQWMsNkJBQTZCLENBQUM7QUFDNUMsY0FBYyw4QkFBOEIsQ0FBQztBQUM3QyxjQUFjLGdDQUFnQyxDQUFDO0FBQy9DLGNBQWMsK0JBQStCLENBQUMifQ==

package/dist_ts/webpush/webpush-indexes.d.ts

@@ -0,0 +1,11 @@
+export type TWebPushIndexCollection = 'WebPushBindingDoc' | 'WebPushAdmissionDoc' | 'WebPushSpoolDoc';
+export interface IWebPushIndexSpecification {
+    collection: TWebPushIndexCollection;
+    name: string;
+    key: Record<string, 1 | -1>;
+    unique?: true;
+    expireAfterSeconds?: number;
+    partialFilterExpression?: Record<string, unknown>;
+}
+export declare const webPushIndexSpecifications: IWebPushIndexSpecification[];
+export declare function getWebPushIndexSpecifications(collectionArg: TWebPushIndexCollection): IWebPushIndexSpecification[];

package/dist_ts/webpush/webpush-indexes.js

@@ -0,0 +1,123 @@
+export const webPushIndexSpecifications = [
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_id_unique',
+        key: { id: 1 },
+        unique: true,
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_owner_unique',
+        key: {
+            ownerGatewayClientType: 1,
+            ownerGatewayClientId: 1,
+            ownerAppInstanceId: 1,
+        },
+        unique: true,
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_credential_unique',
+        key: { 'credential.id': 1 },
+        unique: true,
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_previous_credential_lookup',
+        key: { 'previousCredentials.id': 1 },
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_previous_credential_cleanup',
+        key: { 'previousCredentials.validUntil': 1 },
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_rotation_recovery_cleanup',
+        key: { 'credentialRotationRecovery.expiresAt': 1 },
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_vapid_status_cleanup',
+        key: { 'vapidKeys.status': 1 },
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_vapid_retire_after_cleanup',
+        key: { 'vapidKeys.retireAfter': 1 },
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_disabled_cleanup',
+        key: { enabled: 1, lifecycleGeneration: 1 },
+    },
+    {
+        collection: 'WebPushBindingDoc',
+        name: 'web_push_binding_deleted_cleanup',
+        key: { deletedAt: 1, lifecycleGeneration: 1 },
+    },
+    {
+        collection: 'WebPushAdmissionDoc',
+        name: 'web_push_admission_binding_unique',
+        key: { bindingId: 1, lifecycleGeneration: 1 },
+        unique: true,
+    },
+    {
+        collection: 'WebPushAdmissionDoc',
+        name: 'web_push_admission_ttl',
+        key: { purgeAt: 1 },
+        expireAfterSeconds: 0,
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_id_unique',
+        key: { id: 1 },
+        unique: true,
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_idempotency_unique',
+        key: {
+            bindingId: 1,
+            lifecycleGeneration: 1,
+            credentialId: 1,
+            idempotencyKeyDigest: 1,
+        },
+        unique: true,
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_delivery_scan',
+        key: { state: 1, nextAttemptAt: 1, leaseExpiresAt: 1 },
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_cancellation_scan',
+        key: { bindingId: 1, lifecycleGeneration: 1, subscriptionId: 1, state: 1 },
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_cancelled_lease_scan',
+        key: { state: 1, cancelRequestedAt: 1, leaseExpiresAt: 1, id: 1 },
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_lifecycle_drain_scan',
+        key: { bindingId: 1, lifecycleGeneration: 1, state: 1, leaseExpiresAt: 1 },
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_vapid_retirement_scan',
+        key: { bindingId: 1, lifecycleGeneration: 1, vapidKeyId: 1, state: 1 },
+    },
+    {
+        collection: 'WebPushSpoolDoc',
+        name: 'web_push_spool_terminal_ttl',
+        key: { purgeAt: 1 },
+        expireAfterSeconds: 0,
+    },
+];
+export function getWebPushIndexSpecifications(collectionArg) {
+    return webPushIndexSpecifications.filter((specificationArg) => specificationArg.collection === collectionArg);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_interfaces/data/remoteingress.d.ts

@@ -148,14 +148,26 @@ export interface IRouteRemoteIngress {
      *  When absent, the route applies to all edges. */
     edgeFilter?: string[];
 }
+export interface IRouteIngress {
+    /** Accept traffic connected directly to the gateway hub listener. */
+    directHub: boolean;
+    /** Accept authenticated SmartVPN traffic carrying trusted VPN metadata. */
+    smartVpn: boolean;
+}
 /**
  * Extended route config used within dcrouter.
- * Adds optional `remoteIngress` and `vpnOnly` properties to SmartProxy's IRouteConfig.
+ * Adds explicit ingress path policy and dcrouter compatibility properties to
+ * SmartProxy's IRouteConfig.
  * SmartProxy ignores unknown properties at runtime.
  */
 export type IDcRouterRouteConfig = IRouteConfig & {
+    /**
+     * Explicit trusted ingress paths. New routes must opt in; direct hub
+     * listening is intentionally not a default.
+     */
+    ingress?: IRouteIngress;
     remoteIngress?: IRouteRemoteIngress;
-    /** When true, only VPN clients whose TargetProfile matches this route get access.
+    /** Compatibility policy: only VPN clients whose TargetProfile matches this route get access.
      *  Matching is determined by domain overlap, target overlap, or direct routeRef. */
     vpnOnly?: boolean;
 };

package/dist_ts_interfaces/data/route-management.d.ts

@@ -39,6 +39,8 @@ export interface IApiTokenPolicy {
         manageMail?: boolean;
         readCertificates?: boolean;
         requestCertificates?: boolean;
+        readWebPush?: boolean;
+        manageWebPush?: boolean;
     };
 }
 export interface IGatewayCredentialLifecycle {

package/dist_ts_interfaces/data/route-management.js

@@ -120,4 +120,4 @@ export function canonicalizeSourceRouteId(routeId) {
     const sourceVariantIndex = routeId.indexOf(':source:');
     return sourceVariantIndex === -1 ? routeId : routeId.slice(0, sourceVariantIndex);
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUtbWFuYWdlbWVudC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3RzX2ludGVyZmFjZXMvZGF0YS9yb3V0ZS1tYW5hZ2VtZW50LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQXFCQSwrRUFBK0U7QUFDL0UsOEJBQThCO0FBQzlCLCtFQUErRTtBQUUvRSxNQUFNLENBQUMsTUFBTSxjQUFjLEdBQUc7SUFDNUIsR0FBRztJQUNILGFBQWE7SUFDYixjQUFjO0lBQ2QsYUFBYTtJQUNiLFlBQVk7SUFDWixXQUFXO0lBQ1gsb0JBQW9CO0lBQ3BCLHFCQUFxQjtJQUNyQixlQUFlO0lBQ2YsZ0JBQWdCO0lBQ2hCLGFBQWE7SUFDYixjQUFjO0lBQ2QsbUJBQW1CO0lBQ25CLG9CQUFvQjtJQUNwQixhQUFhO0lBQ2IsZUFBZTtJQUNmLFlBQVk7SUFDWixjQUFjO0lBQ2Qsc0JBQXNCO0lBQ3RCLHVCQUF1QjtJQUN2QixzQkFBc0I7SUFDdEIsdUJBQXVCO0lBQ3ZCLGNBQWM7SUFDZCxlQUFlO0lBQ2Ysb0JBQW9CO0lBQ3BCLHFCQUFxQjtJQUNyQixjQUFjO0lBQ2QsZUFBZTtJQUNmLGtCQUFrQjtJQUNsQixtQkFBbUI7SUFDbkIsa0JBQWtCO0lBQ2xCLG1CQUFtQjtJQUNuQixvQkFBb0I7SUFDcEIscUJBQXFCO0lBQ3JCLHFCQUFxQjtJQUNyQixzQkFBc0I7SUFDdEIsVUFBVTtJQUNWLFdBQVc7SUFDWCxhQUFhO0lBQ2IsY0FBYztJQUNkLHNCQUFzQjtJQUN0Qix1QkFBdUI7SUFDdkIsa0JBQWtCO0lBQ2xCLG1CQUFtQjtDQUNYLENBQUM7QUErRVgsTUFBTSxDQUFDLE1BQU0sZ0JBQWdCLEdBQUc7SUFDOUIsZ0JBQWdCO0lBQ2hCLFFBQVE7SUFDUixhQUFhO0lBQ2IsZ0JBQWdCO0lBQ2hCLEtBQUs7SUFDTCxTQUFTO0NBQ0QsQ0FBQztBQUlYLE1BQU0sQ0FBQyxNQUFNLHlCQUF5QixHQUFvQztJQUN4RSxnQkFBZ0IsRUFBRSxnQkFBZ0I7SUFDbEMsTUFBTSxFQUFFLGVBQWU7SUFDdkIsYUFBYSxFQUFFLGFBQWE7SUFDNUIsZ0JBQWdCLEVBQUUsZ0JBQWdCO0lBQ2xDLEdBQUcsRUFBRSxXQUFXO0lBQ2hCLE9BQU8sRUFBRSxVQUFVO0NBQ3BCLENBQUM7QUFFRixNQUFNLENBQUMsTUFBTSwyQkFBMkIsR0FBc0M7SUFDNUUsZ0JBQWdCLEVBQUU7UUFDaEIsb0JBQW9CO1FBQ3BCLDBCQUEwQjtRQUMxQiwyQkFBMkI7UUFDM0IsbUJBQW1CO1FBQ25CLHFCQUFxQjtLQUN0QjtJQUNELE1BQU0sRUFBRTtRQUNOLFdBQVc7UUFDWCxZQUFZO1FBQ1osaUJBQWlCO1FBQ2pCLGdCQUFnQjtRQUNoQixRQUFRO1FBQ1IsUUFBUTtRQUNSLE9BQU87UUFDUCxVQUFVO1FBQ1YsY0FBYztLQUNmO0lBQ0QsYUFBYSxFQUFFLEVBQUU7SUFDakIsZ0JBQWdCLEVBQUU7UUFDaEIsWUFBWTtRQUNaLFNBQVM7UUFDVCxXQUFXO1FBQ1gsUUFBUTtRQUNSLFVBQVU7UUFDVixTQUFTO1FBQ1QsZ0JBQWdCO1FBQ2hCLFlBQVk7UUFDWixlQUFlO1FBQ2YsWUFBWTtRQUNaLFlBQVk7UUFDWixlQUFlO1FBQ2YsYUFBYTtRQUNiLFlBQVk7UUFDWixlQUFlO1FBQ2YsY0FBYztRQUNkLGVBQWU7S0FDaEI7SUFDRCxHQUFHLEVBQUU7UUFDSCxZQUFZO1FBQ1osWUFBWTtLQUNiO0lBQ0QsT0FBTyxFQUFFO1FBQ1AsZ0JBQWdCO1FBQ2hCLDBCQUEwQjtLQUMzQjtDQUNGLENBQUM7QUFtREYsK0VBQStFO0FBQy9FLHVCQUF1QjtBQUN2QiwrRUFBK0U7QUFFL0UsTUFBTSxDQUFDLE1BQU0saUJBQWlCLEdBQUcsQ0FBQyw0QkFBNEIsQ0FBVSxDQUFDO0FBdUZ6RSxnRkFBZ0Y7QUFDaEYsTUFBTSxVQUFVLHlCQUF5QixDQUFDLE9BQWU7SUFDdkQsTUFBTSxrQkFBa0IsR0FBRyxPQUFPLENBQUMsT0FBTyxDQUFDLFVBQVUsQ0FBQyxDQUFDO0lBQ3ZELE9BQU8sa0JBQWtCLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsa0JBQWtCLENBQUMsQ0FBQztBQUNwRixDQUFDIn0=
+//# sourceMappingURL=data:application/json;base64,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