@shware/workflow 0.0.0-stage → 0.1.0

package/dist/webhooks.mjs

@@ -0,0 +1,94 @@
+//#region src/webhooks.ts
+/**
+* `@shware/workflow/webhooks` — messages posted to a team channel through an incoming webhook:
+* Discord (`discord-api-types` bodies) and Slack (Block Kit). Plain fetch, no SDKs. A template
+* names its webhook through the Worker's environment (`webhook: (env) => env.WEBHOOK_DISCORD_…`), so the
+* renderer hands the sender both the URL and the message.
+*
+* A request the channel refuses for good — the webhook deleted, the channel archived, a message
+* Discord or Slack rejects (4xx) — settles the copy undelivered instead of retrying into it, so a
+* team-channel post never holds up the customer messages after it. Rate limits (429), timeouts
+* (408) and server errors throw, and the step retries.
+*/
+/** A 4xx that retrying cannot fix. */
+const permanent = (status) => status >= 400 && status < 500 && status !== 408 && status !== 429;
+async function post(doFetch, url, body) {
+	const response = await doFetch(url, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify(body)
+	});
+	return {
+		status: response.status,
+		text: response.ok ? "" : await response.text()
+	};
+}
+function requireChannel(message, channel) {
+	if (message.channel !== channel) throw new Error(`${channel} webhook sender: unsupported channel '${message.channel}'`);
+}
+var DiscordWebhookSender = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async send(message) {
+		requireChannel(message, "discord");
+		const { url, content } = await this.options.render(message.template, message.props);
+		const { status, text } = await post(this.options.fetch ?? fetch, url, content);
+		if (status >= 200 && status < 300) return;
+		if (status === 404 || status === 401) {
+			console.warn(`[discord] webhook gone for template ${message.template}: ${status} ${text}`);
+			return {
+				delivered: false,
+				reason: "UnknownWebhook"
+			};
+		}
+		if (permanent(status)) {
+			console.warn(`[discord] refused ${message.template}: ${status} ${text}`);
+			return {
+				delivered: false,
+				reason: `HTTP ${status}`
+			};
+		}
+		throw new Error(`[discord] ${status}: ${text}`);
+	}
+};
+/** Slack's answers for a webhook that will never deliver again. */
+const SLACK_GONE = /* @__PURE__ */ new Set([
+	"no_service",
+	"channel_not_found",
+	"channel_is_archived",
+	"action_prohibited"
+]);
+var SlackWebhookSender = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async send(message) {
+		requireChannel(message, "slack");
+		const { url, content } = await this.options.render(message.template, message.props);
+		const { status, text } = await post(this.options.fetch ?? fetch, url, content);
+		if (status >= 200 && status < 300) return;
+		const reason = text.trim();
+		if (SLACK_GONE.has(reason)) {
+			console.warn(`[slack] webhook gone for template ${message.template}: ${reason}`);
+			return {
+				delivered: false,
+				reason
+			};
+		}
+		if (permanent(status)) {
+			console.warn(`[slack] refused ${message.template}: ${status} ${reason}`);
+			return {
+				delivered: false,
+				reason: reason || `HTTP ${status}`
+			};
+		}
+		throw new Error(`[slack] ${status}: ${reason}`);
+	}
+};
+//#endregion
+export { DiscordWebhookSender, SlackWebhookSender };
+
+//# sourceMappingURL=webhooks.mjs.map

package/dist/webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.mjs","names":[],"sources":["../src/webhooks.ts"],"sourcesContent":["import type { MessageSender, OutboundMessage, SendResult } from './engine';\nimport type { DiscordContent, SlackContent } from './templates';\n\n/**\n * `@shware/workflow/webhooks` — messages posted to a team channel through an incoming webhook:\n * Discord (`discord-api-types` bodies) and Slack (Block Kit). Plain fetch, no SDKs. A template\n * names its webhook through the Worker's environment (`webhook: (env) => env.WEBHOOK_DISCORD_…`), so the\n * renderer hands the sender both the URL and the message.\n *\n * A request the channel refuses for good — the webhook deleted, the channel archived, a message\n * Discord or Slack rejects (4xx) — settles the copy undelivered instead of retrying into it, so a\n * team-channel post never holds up the customer messages after it. Rate limits (429), timeouts\n * (408) and server errors throw, and the step retries.\n */\n\n/** A 4xx that retrying cannot fix. */\nconst permanent = (status: number) =>\n  status >= 400 && status < 500 && status !== 408 && status !== 429;\n\nexport interface WebhookMessage<C> {\n  url: string;\n  content: C;\n}\n\nexport interface WebhookSenderOptions<C> {\n  render: (\n    template: string,\n    props: OutboundMessage['props']\n  ) => Promise<WebhookMessage<C>> | WebhookMessage<C>;\n  /** Fetch implementation (defaults to the global one). */\n  fetch?: typeof fetch;\n}\n\nasync function post(\n  doFetch: typeof fetch,\n  url: string,\n  body: unknown\n): Promise<{ status: number; text: string }> {\n  const response = await doFetch(url, {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify(body),\n  });\n  return { status: response.status, text: response.ok ? '' : await response.text() };\n}\n\nfunction requireChannel(message: OutboundMessage, channel: 'discord' | 'slack') {\n  if (message.channel !== channel) {\n    throw new Error(`${channel} webhook sender: unsupported channel '${message.channel}'`);\n  }\n}\n\nexport class DiscordWebhookSender implements MessageSender {\n  constructor(private readonly options: WebhookSenderOptions<DiscordContent>) {}\n\n  async send(message: OutboundMessage): Promise<void | SendResult> {\n    requireChannel(message, 'discord');\n    const { url, content } = await this.options.render(message.template, message.props);\n    const { status, text } = await post(this.options.fetch ?? fetch, url, content);\n    if (status >= 200 && status < 300) return;\n    // 10015 Unknown Webhook: deleted, or its channel is gone — it will never deliver again\n    if (status === 404 || status === 401) {\n      console.warn(`[discord] webhook gone for template ${message.template}: ${status} ${text}`);\n      return { delivered: false, reason: 'UnknownWebhook' };\n    }\n    if (permanent(status)) {\n      console.warn(`[discord] refused ${message.template}: ${status} ${text}`);\n      return { delivered: false, reason: `HTTP ${status}` };\n    }\n    throw new Error(`[discord] ${status}: ${text}`);\n  }\n}\n\n/** Slack's answers for a webhook that will never deliver again. */\nconst SLACK_GONE = new Set([\n  'no_service',\n  'channel_not_found',\n  'channel_is_archived',\n  'action_prohibited',\n]);\n\nexport class SlackWebhookSender implements MessageSender {\n  constructor(private readonly options: WebhookSenderOptions<SlackContent>) {}\n\n  async send(message: OutboundMessage): Promise<void | SendResult> {\n    requireChannel(message, 'slack');\n    const { url, content } = await this.options.render(message.template, message.props);\n    const { status, text } = await post(this.options.fetch ?? fetch, url, content);\n    if (status >= 200 && status < 300) return;\n    const reason = text.trim();\n    if (SLACK_GONE.has(reason)) {\n      console.warn(`[slack] webhook gone for template ${message.template}: ${reason}`);\n      return { delivered: false, reason };\n    }\n    if (permanent(status)) {\n      console.warn(`[slack] refused ${message.template}: ${status} ${reason}`);\n      return { delivered: false, reason: reason || `HTTP ${status}` };\n    }\n    throw new Error(`[slack] ${status}: ${reason}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAgBA,MAAM,aAAa,WACjB,UAAU,OAAO,SAAS,OAAO,WAAW,OAAO,WAAW;AAgBhE,eAAe,KACb,SACA,KACA,MAC2C;CAC3C,MAAM,WAAW,MAAM,QAAQ,KAAK;EAClC,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,MAAM,KAAK,UAAU,IAAI;CAC3B,CAAC;CACD,OAAO;EAAE,QAAQ,SAAS;EAAQ,MAAM,SAAS,KAAK,KAAK,MAAM,SAAS,KAAK;CAAE;AACnF;AAEA,SAAS,eAAe,SAA0B,SAA8B;CAC9E,IAAI,QAAQ,YAAY,SACtB,MAAM,IAAI,MAAM,GAAG,QAAQ,wCAAwC,QAAQ,QAAQ,EAAE;AAEzF;AAEA,IAAa,uBAAb,MAA2D;CAC5B;CAA7B,YAAY,SAAgE;EAA/C,KAAA,UAAA;CAAgD;CAE7E,MAAM,KAAK,SAAsD;EAC/D,eAAe,SAAS,SAAS;EACjC,MAAM,EAAE,KAAK,YAAY,MAAM,KAAK,QAAQ,OAAO,QAAQ,UAAU,QAAQ,KAAK;EAClF,MAAM,EAAE,QAAQ,SAAS,MAAM,KAAK,KAAK,QAAQ,SAAS,OAAO,KAAK,OAAO;EAC7E,IAAI,UAAU,OAAO,SAAS,KAAK;EAEnC,IAAI,WAAW,OAAO,WAAW,KAAK;GACpC,QAAQ,KAAK,uCAAuC,QAAQ,SAAS,IAAI,OAAO,GAAG,MAAM;GACzF,OAAO;IAAE,WAAW;IAAO,QAAQ;GAAiB;EACtD;EACA,IAAI,UAAU,MAAM,GAAG;GACrB,QAAQ,KAAK,qBAAqB,QAAQ,SAAS,IAAI,OAAO,GAAG,MAAM;GACvE,OAAO;IAAE,WAAW;IAAO,QAAQ,QAAQ;GAAS;EACtD;EACA,MAAM,IAAI,MAAM,aAAa,OAAO,IAAI,MAAM;CAChD;AACF;;AAGA,MAAM,6BAAa,IAAI,IAAI;CACzB;CACA;CACA;CACA;AACF,CAAC;AAED,IAAa,qBAAb,MAAyD;CAC1B;CAA7B,YAAY,SAA8D;EAA7C,KAAA,UAAA;CAA8C;CAE3E,MAAM,KAAK,SAAsD;EAC/D,eAAe,SAAS,OAAO;EAC/B,MAAM,EAAE,KAAK,YAAY,MAAM,KAAK,QAAQ,OAAO,QAAQ,UAAU,QAAQ,KAAK;EAClF,MAAM,EAAE,QAAQ,SAAS,MAAM,KAAK,KAAK,QAAQ,SAAS,OAAO,KAAK,OAAO;EAC7E,IAAI,UAAU,OAAO,SAAS,KAAK;EACnC,MAAM,SAAS,KAAK,KAAK;EACzB,IAAI,WAAW,IAAI,MAAM,GAAG;GAC1B,QAAQ,KAAK,qCAAqC,QAAQ,SAAS,IAAI,QAAQ;GAC/E,OAAO;IAAE,WAAW;IAAO;GAAO;EACpC;EACA,IAAI,UAAU,MAAM,GAAG;GACrB,QAAQ,KAAK,mBAAmB,QAAQ,SAAS,IAAI,OAAO,GAAG,QAAQ;GACvE,OAAO;IAAE,WAAW;IAAO,QAAQ,UAAU,QAAQ;GAAS;EAChE;EACA,MAAM,IAAI,MAAM,WAAW,OAAO,IAAI,QAAQ;CAChD;AACF"}

package/dist/webpush.cjs

@@ -0,0 +1,180 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_jwt = require("./jwt.cjs");
+//#region src/webpush.ts
+/** A fresh VAPID key pair (once per project; the private key is a secret). */
+async function generateVapidKeys() {
+	const pair = await crypto.subtle.generateKey({
+		name: "ECDSA",
+		namedCurve: "P-256"
+	}, true, ["sign", "verify"]);
+	const raw = new Uint8Array(await crypto.subtle.exportKey("raw", pair.publicKey));
+	const jwk = await crypto.subtle.exportKey("jwk", pair.privateKey);
+	return {
+		publicKey: require_jwt.base64url(raw),
+		privateKey: jwk.d ?? ""
+	};
+}
+/** Records are one per message here: the payload stays far below the 4096-byte record size. */
+const RECORD_SIZE = 4096;
+const encoder = new TextEncoder();
+const utf8 = (text) => encoder.encode(text);
+function fromBase64url(text) {
+	const binary = atob(text.replace(/-/g, "+").replace(/_/g, "/"));
+	return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+}
+function concat(...parts) {
+	const out = new Uint8Array(parts.reduce((n, part) => n + part.length, 0));
+	let offset = 0;
+	for (const part of parts) {
+		out.set(part, offset);
+		offset += part.length;
+	}
+	return out;
+}
+async function hmac(key, data) {
+	const imported = await crypto.subtle.importKey("raw", key, {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	return new Uint8Array(await crypto.subtle.sign("HMAC", imported, data));
+}
+/** HKDF-SHA256 with a single output block (every length here is ≤ 32 bytes). */
+async function hkdf(salt, ikm, info, length) {
+	return (await hmac(await hmac(salt, ikm), concat(info, new Uint8Array([1])))).slice(0, length);
+}
+/**
+* The `aes128gcm` body for one subscription (RFC 8291 §3.4): salt, record size, the sender's
+* ephemeral public key, then the payload sealed under a key both sides derive from ECDH and the
+* subscription's auth secret.
+*/
+async function encryptPayload(payload, p256dh, authSecret, salt = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16))) {
+	const ephemeral = await crypto.subtle.generateKey({
+		name: "ECDH",
+		namedCurve: "P-256"
+	}, true, ["deriveBits"]);
+	const senderPublic = new Uint8Array(await crypto.subtle.exportKey("raw", ephemeral.publicKey));
+	const receiver = await crypto.subtle.importKey("raw", p256dh, {
+		name: "ECDH",
+		namedCurve: "P-256"
+	}, false, []);
+	const ikm = await hkdf(authSecret, new Uint8Array(await crypto.subtle.deriveBits({
+		name: "ECDH",
+		public: receiver
+	}, ephemeral.privateKey, 256)), concat(utf8("WebPush: info\0"), p256dh, senderPublic), 32);
+	const cek = await hkdf(salt, ikm, utf8("Content-Encoding: aes128gcm\0"), 16);
+	const nonce = await hkdf(salt, ikm, utf8("Content-Encoding: nonce\0"), 12);
+	const key = await crypto.subtle.importKey("raw", cek, "AES-GCM", false, ["encrypt"]);
+	const sealed = new Uint8Array(await crypto.subtle.encrypt({
+		name: "AES-GCM",
+		iv: nonce
+	}, key, concat(payload, new Uint8Array([2]))));
+	const header = /* @__PURE__ */ new Uint8Array(21);
+	header.set(salt, 0);
+	new DataView(header.buffer).setUint32(16, RECORD_SIZE);
+	header[20] = senderPublic.length;
+	return concat(header, senderPublic, sealed);
+}
+/** The VAPID `Authorization` header for one push service (RFC 8292 §3). */
+async function vapidAuthorization(endpoint, vapid, now = Date.now()) {
+	const publicKey = fromBase64url(vapid.publicKey);
+	const key = await crypto.subtle.importKey("jwk", {
+		kty: "EC",
+		crv: "P-256",
+		d: vapid.privateKey,
+		x: require_jwt.base64url(publicKey.slice(1, 33)),
+		y: require_jwt.base64url(publicKey.slice(33, 65)),
+		ext: true
+	}, {
+		name: "ECDSA",
+		namedCurve: "P-256"
+	}, false, ["sign"]);
+	const header = require_jwt.base64url(JSON.stringify({
+		typ: "JWT",
+		alg: "ES256"
+	}));
+	const claims = require_jwt.base64url(JSON.stringify({
+		aud: new URL(endpoint).origin,
+		exp: Math.floor(now / 1e3) + 43200,
+		sub: vapid.subject
+	}));
+	const signature = new Uint8Array(await crypto.subtle.sign({
+		name: "ECDSA",
+		hash: "SHA-256"
+	}, key, utf8(`${header}.${claims}`)));
+	return `vapid t=${header}.${claims}.${require_jwt.base64url(signature)}, k=${vapid.publicKey}`;
+}
+/**
+* A browser subscription as a sender can use it: an https endpoint, a 65-byte uncompressed P-256
+* key and a 16-byte auth secret. Anything else — not JSON, missing keys, a key of the wrong size,
+* an endpoint that is not https — is undefined.
+*/
+function parseSubscription(token) {
+	try {
+		const value = JSON.parse(token);
+		if (typeof value.endpoint !== "string" || new URL(value.endpoint).protocol !== "https:") return;
+		const p256dh = fromBase64url(value.keys?.p256dh ?? "");
+		const auth = fromBase64url(value.keys?.auth ?? "");
+		if (p256dh.length !== 65 || p256dh[0] !== 4 || auth.length !== 16) return void 0;
+		return {
+			endpoint: value.endpoint,
+			p256dh,
+			auth
+		};
+	} catch {
+		return;
+	}
+}
+var WebPushSender = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async send(message) {
+		if (message.channel !== "push") throw new Error(`WebPushSender: unsupported channel '${message.channel}'`);
+		if (message.recipient === void 0) throw new Error(`WebPushSender: no subscription for user '${message.userId}'`);
+		const subscription = parseSubscription(message.recipient);
+		if (subscription === void 0) {
+			await this.options.onUnregistered?.(message);
+			return {
+				delivered: false,
+				reason: "InvalidSubscription"
+			};
+		}
+		const content = await this.options.render(message.template, message.props);
+		const body = await encryptPayload(utf8(JSON.stringify({
+			...content,
+			template: message.template,
+			idempotencyKey: message.idempotencyKey,
+			...message.tracking?.data
+		})), subscription.p256dh, subscription.auth);
+		const response = await (this.options.fetch ?? fetch)(subscription.endpoint, {
+			method: "POST",
+			headers: {
+				authorization: await vapidAuthorization(subscription.endpoint, this.options.vapid),
+				"content-encoding": "aes128gcm",
+				"content-type": "application/octet-stream",
+				ttl: String(this.options.ttl ?? 86400),
+				urgency: "normal"
+			},
+			body
+		});
+		if (response.ok) return;
+		if (response.status === 404 || response.status === 410) {
+			console.warn(`[webpush] subscription gone for user ${message.userId}: ${response.status}`);
+			await this.options.onUnregistered?.(message);
+			return {
+				delivered: false,
+				reason: response.status === 410 ? "Gone" : "NotFound"
+			};
+		}
+		throw new Error(`[webpush] ${response.status}: ${await response.text()}`);
+	}
+};
+//#endregion
+exports.WebPushSender = WebPushSender;
+exports.encryptPayload = encryptPayload;
+exports.fromBase64url = fromBase64url;
+exports.generateVapidKeys = generateVapidKeys;
+exports.vapidAuthorization = vapidAuthorization;
+
+//# sourceMappingURL=webpush.cjs.map

package/dist/webpush.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webpush.cjs","names":["base64url"],"sources":["../src/webpush.ts"],"sourcesContent":["import type { MessageSender, OutboundMessage, SendResult } from './engine';\nimport { base64url } from './jwt';\nimport type { PushRenderer } from './push';\n\n/**\n * `@shware/workflow/webpush` — browser push through the standard Web Push protocol: VAPID\n * (RFC 8292) identifies the sender, the payload is encrypted for the subscription (RFC 8291,\n * `aes128gcm`, RFC 8188). One sender reaches Chrome, Edge, Firefox and Safari 16+ — each\n * browser's push service accepts the same request, over HTTP/1.1 — with nothing but WebCrypto.\n *\n * The recipient is a browser's `PushSubscription` as JSON (`JSON.stringify(subscription)`),\n * registered like an app token (`registerDevice(userId, { token, platform: 'web' })`). The\n * service worker receives `{ title, body, image?, url?, template, …tracking data }` as the push\n * event's JSON.\n */\n\n/** A VAPID key pair: the uncompressed P-256 public key and the private scalar, base64url. */\nexport interface VapidKeys {\n  publicKey: string;\n  privateKey: string;\n}\n\nexport interface WebPushOptions {\n  vapid: VapidKeys & {\n    /** Who to contact about this sender: `mailto:` or an `https:` URL (RFC 8292). */\n    subject: string;\n  };\n  render: PushRenderer;\n  /** Seconds the push service keeps an undelivered message; a day by default. */\n  ttl?: number;\n  /** Fetch implementation (defaults to the global one). */\n  fetch?: typeof fetch;\n  /** Called for a subscription the push service reports as gone (404 / 410). */\n  onUnregistered?: (message: OutboundMessage) => Promise<void> | void;\n}\n\ninterface Subscription {\n  endpoint: string;\n  keys: { p256dh: string; auth: string };\n}\n\n/** A fresh VAPID key pair (once per project; the private key is a secret). */\nexport async function generateVapidKeys(): Promise<VapidKeys> {\n  const pair = await crypto.subtle.generateKey({ name: 'ECDSA', namedCurve: 'P-256' }, true, [\n    'sign',\n    'verify',\n  ]);\n  const raw = new Uint8Array(await crypto.subtle.exportKey('raw', pair.publicKey));\n  const jwk = await crypto.subtle.exportKey('jwk', pair.privateKey);\n  return { publicKey: base64url(raw), privateKey: jwk.d ?? '' };\n}\n\n/** Records are one per message here: the payload stays far below the 4096-byte record size. */\nconst RECORD_SIZE = 4096;\n/** Bytes WebCrypto accepts (backed by a plain ArrayBuffer). */\ntype Bytes = Uint8Array<ArrayBuffer>;\nconst encoder = new TextEncoder();\nconst utf8 = (text: string): Bytes => encoder.encode(text);\n\nexport function fromBase64url(text: string): Bytes {\n  const binary = atob(text.replace(/-/g, '+').replace(/_/g, '/'));\n  return Uint8Array.from(binary, (char) => char.charCodeAt(0));\n}\n\nfunction concat(...parts: Uint8Array[]): Bytes {\n  const out = new Uint8Array(parts.reduce((n, part) => n + part.length, 0));\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\nasync function hmac(key: Bytes, data: Bytes): Promise<Bytes> {\n  const imported = await crypto.subtle.importKey(\n    'raw',\n    key,\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign']\n  );\n  return new Uint8Array(await crypto.subtle.sign('HMAC', imported, data));\n}\n\n/** HKDF-SHA256 with a single output block (every length here is ≤ 32 bytes). */\nasync function hkdf(salt: Bytes, ikm: Bytes, info: Bytes, length: number): Promise<Bytes> {\n  const prk = await hmac(salt, ikm);\n  return (await hmac(prk, concat(info, new Uint8Array([1])))).slice(0, length);\n}\n\n/**\n * The `aes128gcm` body for one subscription (RFC 8291 §3.4): salt, record size, the sender's\n * ephemeral public key, then the payload sealed under a key both sides derive from ECDH and the\n * subscription's auth secret.\n */\nexport async function encryptPayload(\n  payload: Bytes,\n  p256dh: Bytes,\n  authSecret: Bytes,\n  salt: Bytes = crypto.getRandomValues(new Uint8Array(16))\n): Promise<Bytes> {\n  const ephemeral = await crypto.subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, true, [\n    'deriveBits',\n  ]);\n  const senderPublic = new Uint8Array(await crypto.subtle.exportKey('raw', ephemeral.publicKey));\n  const receiver = await crypto.subtle.importKey(\n    'raw',\n    p256dh,\n    { name: 'ECDH', namedCurve: 'P-256' },\n    false,\n    []\n  );\n  const shared = new Uint8Array(\n    await crypto.subtle.deriveBits({ name: 'ECDH', public: receiver }, ephemeral.privateKey, 256)\n  );\n  const ikm = await hkdf(\n    authSecret,\n    shared,\n    concat(utf8('WebPush: info\\0'), p256dh, senderPublic),\n    32\n  );\n  const cek = await hkdf(salt, ikm, utf8('Content-Encoding: aes128gcm\\0'), 16);\n  const nonce = await hkdf(salt, ikm, utf8('Content-Encoding: nonce\\0'), 12);\n  const key = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['encrypt']);\n  // The single, last record: the payload and the 0x02 delimiter, no padding\n  const sealed = new Uint8Array(\n    await crypto.subtle.encrypt(\n      { name: 'AES-GCM', iv: nonce },\n      key,\n      concat(payload, new Uint8Array([2]))\n    )\n  );\n  const header = new Uint8Array(16 + 4 + 1);\n  header.set(salt, 0);\n  new DataView(header.buffer).setUint32(16, RECORD_SIZE);\n  header[20] = senderPublic.length;\n  return concat(header, senderPublic, sealed);\n}\n\n/** The VAPID `Authorization` header for one push service (RFC 8292 §3). */\nexport async function vapidAuthorization(\n  endpoint: string,\n  vapid: WebPushOptions['vapid'],\n  now = Date.now()\n): Promise<string> {\n  const publicKey = fromBase64url(vapid.publicKey);\n  const key = await crypto.subtle.importKey(\n    'jwk',\n    {\n      kty: 'EC',\n      crv: 'P-256',\n      d: vapid.privateKey,\n      x: base64url(publicKey.slice(1, 33)),\n      y: base64url(publicKey.slice(33, 65)),\n      ext: true,\n    },\n    { name: 'ECDSA', namedCurve: 'P-256' },\n    false,\n    ['sign']\n  );\n  const header = base64url(JSON.stringify({ typ: 'JWT', alg: 'ES256' }));\n  const claims = base64url(\n    JSON.stringify({\n      aud: new URL(endpoint).origin,\n      exp: Math.floor(now / 1000) + 12 * 3600,\n      sub: vapid.subject,\n    })\n  );\n  const signature = new Uint8Array(\n    await crypto.subtle.sign({ name: 'ECDSA', hash: 'SHA-256' }, key, utf8(`${header}.${claims}`))\n  );\n  return `vapid t=${header}.${claims}.${base64url(signature)}, k=${vapid.publicKey}`;\n}\n\n/**\n * A browser subscription as a sender can use it: an https endpoint, a 65-byte uncompressed P-256\n * key and a 16-byte auth secret. Anything else — not JSON, missing keys, a key of the wrong size,\n * an endpoint that is not https — is undefined.\n */\nfunction parseSubscription(\n  token: string\n): { endpoint: string; p256dh: Bytes; auth: Bytes } | undefined {\n  try {\n    const value = JSON.parse(token) as Partial<Subscription>;\n    if (typeof value.endpoint !== 'string' || new URL(value.endpoint).protocol !== 'https:') {\n      return undefined;\n    }\n    const p256dh = fromBase64url(value.keys?.p256dh ?? '');\n    const auth = fromBase64url(value.keys?.auth ?? '');\n    if (p256dh.length !== 65 || p256dh[0] !== 4 || auth.length !== 16) return undefined;\n    return { endpoint: value.endpoint, p256dh, auth };\n  } catch {\n    return undefined;\n  }\n}\n\nexport class WebPushSender implements MessageSender {\n  constructor(private readonly options: WebPushOptions) {}\n\n  async send(message: OutboundMessage): Promise<void | SendResult> {\n    if (message.channel !== 'push') {\n      throw new Error(`WebPushSender: unsupported channel '${message.channel}'`);\n    }\n    if (message.recipient === undefined) {\n      throw new Error(`WebPushSender: no subscription for user '${message.userId}'`);\n    }\n    const subscription = parseSubscription(message.recipient);\n    if (subscription === undefined) {\n      // Not a usable subscription: nothing will ever deliver to it, so do not retry into it\n      await this.options.onUnregistered?.(message);\n      return { delivered: false, reason: 'InvalidSubscription' };\n    }\n    const content = await this.options.render(message.template, message.props);\n    const payload = utf8(\n      JSON.stringify({\n        ...content,\n        template: message.template,\n        idempotencyKey: message.idempotencyKey,\n        ...message.tracking?.data,\n      })\n    );\n    const body = await encryptPayload(payload, subscription.p256dh, subscription.auth);\n    const doFetch = this.options.fetch ?? fetch;\n    const response = await doFetch(subscription.endpoint, {\n      method: 'POST',\n      headers: {\n        authorization: await vapidAuthorization(subscription.endpoint, this.options.vapid),\n        'content-encoding': 'aes128gcm',\n        'content-type': 'application/octet-stream',\n        ttl: String(this.options.ttl ?? 86_400),\n        urgency: 'normal',\n      },\n      body,\n    });\n    if (response.ok) return;\n    if (response.status === 404 || response.status === 410) {\n      // The browser unsubscribed or the subscription expired: it will never deliver again\n      console.warn(`[webpush] subscription gone for user ${message.userId}: ${response.status}`);\n      await this.options.onUnregistered?.(message);\n      return { delivered: false, reason: response.status === 410 ? 'Gone' : 'NotFound' };\n    }\n    throw new Error(`[webpush] ${response.status}: ${await response.text()}`);\n  }\n}\n"],"mappings":";;;;AA0CA,eAAsB,oBAAwC;CAC5D,MAAM,OAAO,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAS,YAAY;CAAQ,GAAG,MAAM,CACzF,QACA,QACF,CAAC;CACD,MAAM,MAAM,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,SAAS,CAAC;CAC/E,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,UAAU;CAChE,OAAO;EAAE,WAAWA,YAAAA,UAAU,GAAG;EAAG,YAAY,IAAI,KAAK;CAAG;AAC9D;;AAGA,MAAM,cAAc;AAGpB,MAAM,UAAU,IAAI,YAAY;AAChC,MAAM,QAAQ,SAAwB,QAAQ,OAAO,IAAI;AAEzD,SAAgB,cAAc,MAAqB;CACjD,MAAM,SAAS,KAAK,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC;CAC9D,OAAO,WAAW,KAAK,SAAS,SAAS,KAAK,WAAW,CAAC,CAAC;AAC7D;AAEA,SAAS,OAAO,GAAG,OAA4B;CAC7C,MAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,GAAG,SAAS,IAAI,KAAK,QAAQ,CAAC,CAAC;CACxE,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,IAAI,MAAM,MAAM;EACpB,UAAU,KAAK;CACjB;CACA,OAAO;AACT;AAEA,eAAe,KAAK,KAAY,MAA6B;CAC3D,MAAM,WAAW,MAAM,OAAO,OAAO,UACnC,OACA,KACA;EAAE,MAAM;EAAQ,MAAM;CAAU,GAChC,OACA,CAAC,MAAM,CACT;CACA,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,QAAQ,UAAU,IAAI,CAAC;AACxE;;AAGA,eAAe,KAAK,MAAa,KAAY,MAAa,QAAgC;CAExF,QAAQ,MAAM,KAAK,MADD,KAAK,MAAM,GAAG,GACR,OAAO,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAA,CAAG,MAAM,GAAG,MAAM;AAC7E;;;;;;AAOA,eAAsB,eACpB,SACA,QACA,YACA,OAAc,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC,GACvC;CAChB,MAAM,YAAY,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAQ,YAAY;CAAQ,GAAG,MAAM,CAC7F,YACF,CAAC;CACD,MAAM,eAAe,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,UAAU,SAAS,CAAC;CAC7F,MAAM,WAAW,MAAM,OAAO,OAAO,UACnC,OACA,QACA;EAAE,MAAM;EAAQ,YAAY;CAAQ,GACpC,OACA,CAAC,CACH;CAIA,MAAM,MAAM,MAAM,KAChB,YACA,IALiB,WACjB,MAAM,OAAO,OAAO,WAAW;EAAE,MAAM;EAAQ,QAAQ;CAAS,GAAG,UAAU,YAAY,GAAG,CAIvF,GACL,OAAO,KAAK,iBAAiB,GAAG,QAAQ,YAAY,GACpD,EACF;CACA,MAAM,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,+BAA+B,GAAG,EAAE;CAC3E,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK,KAAK,2BAA2B,GAAG,EAAE;CACzE,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,WAAW,OAAO,CAAC,SAAS,CAAC;CAEnF,MAAM,SAAS,IAAI,WACjB,MAAM,OAAO,OAAO,QAClB;EAAE,MAAM;EAAW,IAAI;CAAM,GAC7B,KACA,OAAO,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CACrC,CACF;CACA,MAAM,yBAAS,IAAI,WAAW,EAAU;CACxC,OAAO,IAAI,MAAM,CAAC;CAClB,IAAI,SAAS,OAAO,MAAM,CAAC,CAAC,UAAU,IAAI,WAAW;CACrD,OAAO,MAAM,aAAa;CAC1B,OAAO,OAAO,QAAQ,cAAc,MAAM;AAC5C;;AAGA,eAAsB,mBACpB,UACA,OACA,MAAM,KAAK,IAAI,GACE;CACjB,MAAM,YAAY,cAAc,MAAM,SAAS;CAC/C,MAAM,MAAM,MAAM,OAAO,OAAO,UAC9B,OACA;EACE,KAAK;EACL,KAAK;EACL,GAAG,MAAM;EACT,GAAGA,YAAAA,UAAU,UAAU,MAAM,GAAG,EAAE,CAAC;EACnC,GAAGA,YAAAA,UAAU,UAAU,MAAM,IAAI,EAAE,CAAC;EACpC,KAAK;CACP,GACA;EAAE,MAAM;EAAS,YAAY;CAAQ,GACrC,OACA,CAAC,MAAM,CACT;CACA,MAAM,SAASA,YAAAA,UAAU,KAAK,UAAU;EAAE,KAAK;EAAO,KAAK;CAAQ,CAAC,CAAC;CACrE,MAAM,SAASA,YAAAA,UACb,KAAK,UAAU;EACb,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC;EACvB,KAAK,KAAK,MAAM,MAAM,GAAI,IAAI;EAC9B,KAAK,MAAM;CACb,CAAC,CACH;CACA,MAAM,YAAY,IAAI,WACpB,MAAM,OAAO,OAAO,KAAK;EAAE,MAAM;EAAS,MAAM;CAAU,GAAG,KAAK,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC,CAC/F;CACA,OAAO,WAAW,OAAO,GAAG,OAAO,GAAGA,YAAAA,UAAU,SAAS,EAAE,MAAM,MAAM;AACzE;;;;;;AAOA,SAAS,kBACP,OAC8D;CAC9D,IAAI;EACF,MAAM,QAAQ,KAAK,MAAM,KAAK;EAC9B,IAAI,OAAO,MAAM,aAAa,YAAY,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC,aAAa,UAC7E;EAEF,MAAM,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE;EACrD,MAAM,OAAO,cAAc,MAAM,MAAM,QAAQ,EAAE;EACjD,IAAI,OAAO,WAAW,MAAM,OAAO,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAA;EAC1E,OAAO;GAAE,UAAU,MAAM;GAAU;GAAQ;EAAK;CAClD,QAAQ;EACN;CACF;AACF;AAEA,IAAa,gBAAb,MAAoD;CACrB;CAA7B,YAAY,SAA0C;EAAzB,KAAA,UAAA;CAA0B;CAEvD,MAAM,KAAK,SAAsD;EAC/D,IAAI,QAAQ,YAAY,QACtB,MAAM,IAAI,MAAM,uCAAuC,QAAQ,QAAQ,EAAE;EAE3E,IAAI,QAAQ,cAAc,KAAA,GACxB,MAAM,IAAI,MAAM,4CAA4C,QAAQ,OAAO,EAAE;EAE/E,MAAM,eAAe,kBAAkB,QAAQ,SAAS;EACxD,IAAI,iBAAiB,KAAA,GAAW;GAE9B,MAAM,KAAK,QAAQ,iBAAiB,OAAO;GAC3C,OAAO;IAAE,WAAW;IAAO,QAAQ;GAAsB;EAC3D;EACA,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,QAAQ,UAAU,QAAQ,KAAK;EASzE,MAAM,OAAO,MAAM,eARH,KACd,KAAK,UAAU;GACb,GAAG;GACH,UAAU,QAAQ;GAClB,gBAAgB,QAAQ;GACxB,GAAG,QAAQ,UAAU;EACvB,CAAC,CAEqC,GAAG,aAAa,QAAQ,aAAa,IAAI;EAEjF,MAAM,WAAW,OADD,KAAK,QAAQ,SAAS,MAAA,CACP,aAAa,UAAU;GACpD,QAAQ;GACR,SAAS;IACP,eAAe,MAAM,mBAAmB,aAAa,UAAU,KAAK,QAAQ,KAAK;IACjF,oBAAoB;IACpB,gBAAgB;IAChB,KAAK,OAAO,KAAK,QAAQ,OAAO,KAAM;IACtC,SAAS;GACX;GACA;EACF,CAAC;EACD,IAAI,SAAS,IAAI;EACjB,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;GAEtD,QAAQ,KAAK,wCAAwC,QAAQ,OAAO,IAAI,SAAS,QAAQ;GACzF,MAAM,KAAK,QAAQ,iBAAiB,OAAO;GAC3C,OAAO;IAAE,WAAW;IAAO,QAAQ,SAAS,WAAW,MAAM,SAAS;GAAW;EACnF;EACA,MAAM,IAAI,MAAM,aAAa,SAAS,OAAO,IAAI,MAAM,SAAS,KAAK,GAAG;CAC1E;AACF"}

package/dist/webpush.d.cts

@@ -0,0 +1,53 @@
+import { MessageSender, OutboundMessage, SendResult } from "./engine/ports.cjs";
+import "./engine/index.cjs";
+import { PushRenderer } from "./push.cjs";
+//#region src/webpush.d.ts
+/**
+ * `@shware/workflow/webpush` — browser push through the standard Web Push protocol: VAPID
+ * (RFC 8292) identifies the sender, the payload is encrypted for the subscription (RFC 8291,
+ * `aes128gcm`, RFC 8188). One sender reaches Chrome, Edge, Firefox and Safari 16+ — each
+ * browser's push service accepts the same request, over HTTP/1.1 — with nothing but WebCrypto.
+ *
+ * The recipient is a browser's `PushSubscription` as JSON (`JSON.stringify(subscription)`),
+ * registered like an app token (`registerDevice(userId, { token, platform: 'web' })`). The
+ * service worker receives `{ title, body, image?, url?, template, …tracking data }` as the push
+ * event's JSON.
+ */
+/** A VAPID key pair: the uncompressed P-256 public key and the private scalar, base64url. */
+export interface VapidKeys {
+  publicKey: string;
+  privateKey: string;
+}
+export interface WebPushOptions {
+  vapid: VapidKeys & {
+    /** Who to contact about this sender: `mailto:` or an `https:` URL (RFC 8292). */
+    subject: string;
+  };
+  render: PushRenderer;
+  /** Seconds the push service keeps an undelivered message; a day by default. */
+  ttl?: number;
+  /** Fetch implementation (defaults to the global one). */
+  fetch?: typeof fetch;
+  /** Called for a subscription the push service reports as gone (404 / 410). */
+  onUnregistered?: (message: OutboundMessage) => Promise<void> | void;
+}
+/** A fresh VAPID key pair (once per project; the private key is a secret). */
+export declare function generateVapidKeys(): Promise<VapidKeys>;
+/** Bytes WebCrypto accepts (backed by a plain ArrayBuffer). */
+type Bytes = Uint8Array<ArrayBuffer>;
+export declare function fromBase64url(text: string): Bytes;
+/**
+ * The `aes128gcm` body for one subscription (RFC 8291 §3.4): salt, record size, the sender's
+ * ephemeral public key, then the payload sealed under a key both sides derive from ECDH and the
+ * subscription's auth secret.
+ */
+export declare function encryptPayload(payload: Bytes, p256dh: Bytes, authSecret: Bytes, salt?: Bytes): Promise<Bytes>;
+/** The VAPID `Authorization` header for one push service (RFC 8292 §3). */
+export declare function vapidAuthorization(endpoint: string, vapid: WebPushOptions['vapid'], now?: number): Promise<string>;
+export declare class WebPushSender implements MessageSender {
+  private readonly options;
+  constructor(options: WebPushOptions);
+  send(message: OutboundMessage): Promise<void | SendResult>;
+}
+//#endregion
+//# sourceMappingURL=webpush.d.cts.map

package/dist/webpush.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webpush.d.cts","names":[],"sources":["../src/webpush.ts"],"mappings":";;;;;;;;;;;;;;;;iBAiBiB;EACf;EACA;;iBAGe;EACf,OAAO;;IAEL;;EAEF,QAAQ;;EAER;;EAEA,eAAe;;EAEf,kBAAkB,SAAS,oBAAoB;;;wBAS3B,qBAAqB,QAAQ;;KAa9C,QAAQ,WAAW;wBAIR,cAAc,eAAe;;;;;;wBAqCvB,eACpB,SAAS,OACT,QAAQ,OACR,YAAY,OACZ,OAAM,QACL,QAAQ;;wBAwCW,mBACpB,kBACA,OAAO,yBACP,eACC;qBAoDU,yBAAyB;mBACP;EAA7B,YAA6B,SAAS;EAEhC,KAAK,SAAS,kBAAkB,eAAe"}

package/dist/webpush.d.mts

@@ -0,0 +1,53 @@
+import { MessageSender, OutboundMessage, SendResult } from "./engine/ports.mjs";
+import "./engine/index.mjs";
+import { PushRenderer } from "./push.mjs";
+//#region src/webpush.d.ts
+/**
+ * `@shware/workflow/webpush` — browser push through the standard Web Push protocol: VAPID
+ * (RFC 8292) identifies the sender, the payload is encrypted for the subscription (RFC 8291,
+ * `aes128gcm`, RFC 8188). One sender reaches Chrome, Edge, Firefox and Safari 16+ — each
+ * browser's push service accepts the same request, over HTTP/1.1 — with nothing but WebCrypto.
+ *
+ * The recipient is a browser's `PushSubscription` as JSON (`JSON.stringify(subscription)`),
+ * registered like an app token (`registerDevice(userId, { token, platform: 'web' })`). The
+ * service worker receives `{ title, body, image?, url?, template, …tracking data }` as the push
+ * event's JSON.
+ */
+/** A VAPID key pair: the uncompressed P-256 public key and the private scalar, base64url. */
+export interface VapidKeys {
+  publicKey: string;
+  privateKey: string;
+}
+export interface WebPushOptions {
+  vapid: VapidKeys & {
+    /** Who to contact about this sender: `mailto:` or an `https:` URL (RFC 8292). */
+    subject: string;
+  };
+  render: PushRenderer;
+  /** Seconds the push service keeps an undelivered message; a day by default. */
+  ttl?: number;
+  /** Fetch implementation (defaults to the global one). */
+  fetch?: typeof fetch;
+  /** Called for a subscription the push service reports as gone (404 / 410). */
+  onUnregistered?: (message: OutboundMessage) => Promise<void> | void;
+}
+/** A fresh VAPID key pair (once per project; the private key is a secret). */
+export declare function generateVapidKeys(): Promise<VapidKeys>;
+/** Bytes WebCrypto accepts (backed by a plain ArrayBuffer). */
+type Bytes = Uint8Array<ArrayBuffer>;
+export declare function fromBase64url(text: string): Bytes;
+/**
+ * The `aes128gcm` body for one subscription (RFC 8291 §3.4): salt, record size, the sender's
+ * ephemeral public key, then the payload sealed under a key both sides derive from ECDH and the
+ * subscription's auth secret.
+ */
+export declare function encryptPayload(payload: Bytes, p256dh: Bytes, authSecret: Bytes, salt?: Bytes): Promise<Bytes>;
+/** The VAPID `Authorization` header for one push service (RFC 8292 §3). */
+export declare function vapidAuthorization(endpoint: string, vapid: WebPushOptions['vapid'], now?: number): Promise<string>;
+export declare class WebPushSender implements MessageSender {
+  private readonly options;
+  constructor(options: WebPushOptions);
+  send(message: OutboundMessage): Promise<void | SendResult>;
+}
+//#endregion
+//# sourceMappingURL=webpush.d.mts.map

package/dist/webpush.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webpush.d.mts","names":[],"sources":["../src/webpush.ts"],"mappings":";;;;;;;;;;;;;;;;iBAiBiB;EACf;EACA;;iBAGe;EACf,OAAO;;IAEL;;EAEF,QAAQ;;EAER;;EAEA,eAAe;;EAEf,kBAAkB,SAAS,oBAAoB;;;wBAS3B,qBAAqB,QAAQ;;KAa9C,QAAQ,WAAW;wBAIR,cAAc,eAAe;;;;;;wBAqCvB,eACpB,SAAS,OACT,QAAQ,OACR,YAAY,OACZ,OAAM,QACL,QAAQ;;wBAwCW,mBACpB,kBACA,OAAO,yBACP,eACC;qBAoDU,yBAAyB;mBACP;EAA7B,YAA6B,SAAS;EAEhC,KAAK,SAAS,kBAAkB,eAAe"}

package/dist/webpush.mjs

@@ -0,0 +1,175 @@
+import { base64url } from "./jwt.mjs";
+//#region src/webpush.ts
+/** A fresh VAPID key pair (once per project; the private key is a secret). */
+async function generateVapidKeys() {
+	const pair = await crypto.subtle.generateKey({
+		name: "ECDSA",
+		namedCurve: "P-256"
+	}, true, ["sign", "verify"]);
+	const raw = new Uint8Array(await crypto.subtle.exportKey("raw", pair.publicKey));
+	const jwk = await crypto.subtle.exportKey("jwk", pair.privateKey);
+	return {
+		publicKey: base64url(raw),
+		privateKey: jwk.d ?? ""
+	};
+}
+/** Records are one per message here: the payload stays far below the 4096-byte record size. */
+const RECORD_SIZE = 4096;
+const encoder = new TextEncoder();
+const utf8 = (text) => encoder.encode(text);
+function fromBase64url(text) {
+	const binary = atob(text.replace(/-/g, "+").replace(/_/g, "/"));
+	return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+}
+function concat(...parts) {
+	const out = new Uint8Array(parts.reduce((n, part) => n + part.length, 0));
+	let offset = 0;
+	for (const part of parts) {
+		out.set(part, offset);
+		offset += part.length;
+	}
+	return out;
+}
+async function hmac(key, data) {
+	const imported = await crypto.subtle.importKey("raw", key, {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	return new Uint8Array(await crypto.subtle.sign("HMAC", imported, data));
+}
+/** HKDF-SHA256 with a single output block (every length here is ≤ 32 bytes). */
+async function hkdf(salt, ikm, info, length) {
+	return (await hmac(await hmac(salt, ikm), concat(info, new Uint8Array([1])))).slice(0, length);
+}
+/**
+* The `aes128gcm` body for one subscription (RFC 8291 §3.4): salt, record size, the sender's
+* ephemeral public key, then the payload sealed under a key both sides derive from ECDH and the
+* subscription's auth secret.
+*/
+async function encryptPayload(payload, p256dh, authSecret, salt = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16))) {
+	const ephemeral = await crypto.subtle.generateKey({
+		name: "ECDH",
+		namedCurve: "P-256"
+	}, true, ["deriveBits"]);
+	const senderPublic = new Uint8Array(await crypto.subtle.exportKey("raw", ephemeral.publicKey));
+	const receiver = await crypto.subtle.importKey("raw", p256dh, {
+		name: "ECDH",
+		namedCurve: "P-256"
+	}, false, []);
+	const ikm = await hkdf(authSecret, new Uint8Array(await crypto.subtle.deriveBits({
+		name: "ECDH",
+		public: receiver
+	}, ephemeral.privateKey, 256)), concat(utf8("WebPush: info\0"), p256dh, senderPublic), 32);
+	const cek = await hkdf(salt, ikm, utf8("Content-Encoding: aes128gcm\0"), 16);
+	const nonce = await hkdf(salt, ikm, utf8("Content-Encoding: nonce\0"), 12);
+	const key = await crypto.subtle.importKey("raw", cek, "AES-GCM", false, ["encrypt"]);
+	const sealed = new Uint8Array(await crypto.subtle.encrypt({
+		name: "AES-GCM",
+		iv: nonce
+	}, key, concat(payload, new Uint8Array([2]))));
+	const header = /* @__PURE__ */ new Uint8Array(21);
+	header.set(salt, 0);
+	new DataView(header.buffer).setUint32(16, RECORD_SIZE);
+	header[20] = senderPublic.length;
+	return concat(header, senderPublic, sealed);
+}
+/** The VAPID `Authorization` header for one push service (RFC 8292 §3). */
+async function vapidAuthorization(endpoint, vapid, now = Date.now()) {
+	const publicKey = fromBase64url(vapid.publicKey);
+	const key = await crypto.subtle.importKey("jwk", {
+		kty: "EC",
+		crv: "P-256",
+		d: vapid.privateKey,
+		x: base64url(publicKey.slice(1, 33)),
+		y: base64url(publicKey.slice(33, 65)),
+		ext: true
+	}, {
+		name: "ECDSA",
+		namedCurve: "P-256"
+	}, false, ["sign"]);
+	const header = base64url(JSON.stringify({
+		typ: "JWT",
+		alg: "ES256"
+	}));
+	const claims = base64url(JSON.stringify({
+		aud: new URL(endpoint).origin,
+		exp: Math.floor(now / 1e3) + 43200,
+		sub: vapid.subject
+	}));
+	const signature = new Uint8Array(await crypto.subtle.sign({
+		name: "ECDSA",
+		hash: "SHA-256"
+	}, key, utf8(`${header}.${claims}`)));
+	return `vapid t=${header}.${claims}.${base64url(signature)}, k=${vapid.publicKey}`;
+}
+/**
+* A browser subscription as a sender can use it: an https endpoint, a 65-byte uncompressed P-256
+* key and a 16-byte auth secret. Anything else — not JSON, missing keys, a key of the wrong size,
+* an endpoint that is not https — is undefined.
+*/
+function parseSubscription(token) {
+	try {
+		const value = JSON.parse(token);
+		if (typeof value.endpoint !== "string" || new URL(value.endpoint).protocol !== "https:") return;
+		const p256dh = fromBase64url(value.keys?.p256dh ?? "");
+		const auth = fromBase64url(value.keys?.auth ?? "");
+		if (p256dh.length !== 65 || p256dh[0] !== 4 || auth.length !== 16) return void 0;
+		return {
+			endpoint: value.endpoint,
+			p256dh,
+			auth
+		};
+	} catch {
+		return;
+	}
+}
+var WebPushSender = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async send(message) {
+		if (message.channel !== "push") throw new Error(`WebPushSender: unsupported channel '${message.channel}'`);
+		if (message.recipient === void 0) throw new Error(`WebPushSender: no subscription for user '${message.userId}'`);
+		const subscription = parseSubscription(message.recipient);
+		if (subscription === void 0) {
+			await this.options.onUnregistered?.(message);
+			return {
+				delivered: false,
+				reason: "InvalidSubscription"
+			};
+		}
+		const content = await this.options.render(message.template, message.props);
+		const body = await encryptPayload(utf8(JSON.stringify({
+			...content,
+			template: message.template,
+			idempotencyKey: message.idempotencyKey,
+			...message.tracking?.data
+		})), subscription.p256dh, subscription.auth);
+		const response = await (this.options.fetch ?? fetch)(subscription.endpoint, {
+			method: "POST",
+			headers: {
+				authorization: await vapidAuthorization(subscription.endpoint, this.options.vapid),
+				"content-encoding": "aes128gcm",
+				"content-type": "application/octet-stream",
+				ttl: String(this.options.ttl ?? 86400),
+				urgency: "normal"
+			},
+			body
+		});
+		if (response.ok) return;
+		if (response.status === 404 || response.status === 410) {
+			console.warn(`[webpush] subscription gone for user ${message.userId}: ${response.status}`);
+			await this.options.onUnregistered?.(message);
+			return {
+				delivered: false,
+				reason: response.status === 410 ? "Gone" : "NotFound"
+			};
+		}
+		throw new Error(`[webpush] ${response.status}: ${await response.text()}`);
+	}
+};
+//#endregion
+export { WebPushSender, encryptPayload, fromBase64url, generateVapidKeys, vapidAuthorization };
+
+//# sourceMappingURL=webpush.mjs.map

package/dist/webpush.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webpush.mjs","names":[],"sources":["../src/webpush.ts"],"sourcesContent":["import type { MessageSender, OutboundMessage, SendResult } from './engine';\nimport { base64url } from './jwt';\nimport type { PushRenderer } from './push';\n\n/**\n * `@shware/workflow/webpush` — browser push through the standard Web Push protocol: VAPID\n * (RFC 8292) identifies the sender, the payload is encrypted for the subscription (RFC 8291,\n * `aes128gcm`, RFC 8188). One sender reaches Chrome, Edge, Firefox and Safari 16+ — each\n * browser's push service accepts the same request, over HTTP/1.1 — with nothing but WebCrypto.\n *\n * The recipient is a browser's `PushSubscription` as JSON (`JSON.stringify(subscription)`),\n * registered like an app token (`registerDevice(userId, { token, platform: 'web' })`). The\n * service worker receives `{ title, body, image?, url?, template, …tracking data }` as the push\n * event's JSON.\n */\n\n/** A VAPID key pair: the uncompressed P-256 public key and the private scalar, base64url. */\nexport interface VapidKeys {\n  publicKey: string;\n  privateKey: string;\n}\n\nexport interface WebPushOptions {\n  vapid: VapidKeys & {\n    /** Who to contact about this sender: `mailto:` or an `https:` URL (RFC 8292). */\n    subject: string;\n  };\n  render: PushRenderer;\n  /** Seconds the push service keeps an undelivered message; a day by default. */\n  ttl?: number;\n  /** Fetch implementation (defaults to the global one). */\n  fetch?: typeof fetch;\n  /** Called for a subscription the push service reports as gone (404 / 410). */\n  onUnregistered?: (message: OutboundMessage) => Promise<void> | void;\n}\n\ninterface Subscription {\n  endpoint: string;\n  keys: { p256dh: string; auth: string };\n}\n\n/** A fresh VAPID key pair (once per project; the private key is a secret). */\nexport async function generateVapidKeys(): Promise<VapidKeys> {\n  const pair = await crypto.subtle.generateKey({ name: 'ECDSA', namedCurve: 'P-256' }, true, [\n    'sign',\n    'verify',\n  ]);\n  const raw = new Uint8Array(await crypto.subtle.exportKey('raw', pair.publicKey));\n  const jwk = await crypto.subtle.exportKey('jwk', pair.privateKey);\n  return { publicKey: base64url(raw), privateKey: jwk.d ?? '' };\n}\n\n/** Records are one per message here: the payload stays far below the 4096-byte record size. */\nconst RECORD_SIZE = 4096;\n/** Bytes WebCrypto accepts (backed by a plain ArrayBuffer). */\ntype Bytes = Uint8Array<ArrayBuffer>;\nconst encoder = new TextEncoder();\nconst utf8 = (text: string): Bytes => encoder.encode(text);\n\nexport function fromBase64url(text: string): Bytes {\n  const binary = atob(text.replace(/-/g, '+').replace(/_/g, '/'));\n  return Uint8Array.from(binary, (char) => char.charCodeAt(0));\n}\n\nfunction concat(...parts: Uint8Array[]): Bytes {\n  const out = new Uint8Array(parts.reduce((n, part) => n + part.length, 0));\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\nasync function hmac(key: Bytes, data: Bytes): Promise<Bytes> {\n  const imported = await crypto.subtle.importKey(\n    'raw',\n    key,\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign']\n  );\n  return new Uint8Array(await crypto.subtle.sign('HMAC', imported, data));\n}\n\n/** HKDF-SHA256 with a single output block (every length here is ≤ 32 bytes). */\nasync function hkdf(salt: Bytes, ikm: Bytes, info: Bytes, length: number): Promise<Bytes> {\n  const prk = await hmac(salt, ikm);\n  return (await hmac(prk, concat(info, new Uint8Array([1])))).slice(0, length);\n}\n\n/**\n * The `aes128gcm` body for one subscription (RFC 8291 §3.4): salt, record size, the sender's\n * ephemeral public key, then the payload sealed under a key both sides derive from ECDH and the\n * subscription's auth secret.\n */\nexport async function encryptPayload(\n  payload: Bytes,\n  p256dh: Bytes,\n  authSecret: Bytes,\n  salt: Bytes = crypto.getRandomValues(new Uint8Array(16))\n): Promise<Bytes> {\n  const ephemeral = await crypto.subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, true, [\n    'deriveBits',\n  ]);\n  const senderPublic = new Uint8Array(await crypto.subtle.exportKey('raw', ephemeral.publicKey));\n  const receiver = await crypto.subtle.importKey(\n    'raw',\n    p256dh,\n    { name: 'ECDH', namedCurve: 'P-256' },\n    false,\n    []\n  );\n  const shared = new Uint8Array(\n    await crypto.subtle.deriveBits({ name: 'ECDH', public: receiver }, ephemeral.privateKey, 256)\n  );\n  const ikm = await hkdf(\n    authSecret,\n    shared,\n    concat(utf8('WebPush: info\\0'), p256dh, senderPublic),\n    32\n  );\n  const cek = await hkdf(salt, ikm, utf8('Content-Encoding: aes128gcm\\0'), 16);\n  const nonce = await hkdf(salt, ikm, utf8('Content-Encoding: nonce\\0'), 12);\n  const key = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['encrypt']);\n  // The single, last record: the payload and the 0x02 delimiter, no padding\n  const sealed = new Uint8Array(\n    await crypto.subtle.encrypt(\n      { name: 'AES-GCM', iv: nonce },\n      key,\n      concat(payload, new Uint8Array([2]))\n    )\n  );\n  const header = new Uint8Array(16 + 4 + 1);\n  header.set(salt, 0);\n  new DataView(header.buffer).setUint32(16, RECORD_SIZE);\n  header[20] = senderPublic.length;\n  return concat(header, senderPublic, sealed);\n}\n\n/** The VAPID `Authorization` header for one push service (RFC 8292 §3). */\nexport async function vapidAuthorization(\n  endpoint: string,\n  vapid: WebPushOptions['vapid'],\n  now = Date.now()\n): Promise<string> {\n  const publicKey = fromBase64url(vapid.publicKey);\n  const key = await crypto.subtle.importKey(\n    'jwk',\n    {\n      kty: 'EC',\n      crv: 'P-256',\n      d: vapid.privateKey,\n      x: base64url(publicKey.slice(1, 33)),\n      y: base64url(publicKey.slice(33, 65)),\n      ext: true,\n    },\n    { name: 'ECDSA', namedCurve: 'P-256' },\n    false,\n    ['sign']\n  );\n  const header = base64url(JSON.stringify({ typ: 'JWT', alg: 'ES256' }));\n  const claims = base64url(\n    JSON.stringify({\n      aud: new URL(endpoint).origin,\n      exp: Math.floor(now / 1000) + 12 * 3600,\n      sub: vapid.subject,\n    })\n  );\n  const signature = new Uint8Array(\n    await crypto.subtle.sign({ name: 'ECDSA', hash: 'SHA-256' }, key, utf8(`${header}.${claims}`))\n  );\n  return `vapid t=${header}.${claims}.${base64url(signature)}, k=${vapid.publicKey}`;\n}\n\n/**\n * A browser subscription as a sender can use it: an https endpoint, a 65-byte uncompressed P-256\n * key and a 16-byte auth secret. Anything else — not JSON, missing keys, a key of the wrong size,\n * an endpoint that is not https — is undefined.\n */\nfunction parseSubscription(\n  token: string\n): { endpoint: string; p256dh: Bytes; auth: Bytes } | undefined {\n  try {\n    const value = JSON.parse(token) as Partial<Subscription>;\n    if (typeof value.endpoint !== 'string' || new URL(value.endpoint).protocol !== 'https:') {\n      return undefined;\n    }\n    const p256dh = fromBase64url(value.keys?.p256dh ?? '');\n    const auth = fromBase64url(value.keys?.auth ?? '');\n    if (p256dh.length !== 65 || p256dh[0] !== 4 || auth.length !== 16) return undefined;\n    return { endpoint: value.endpoint, p256dh, auth };\n  } catch {\n    return undefined;\n  }\n}\n\nexport class WebPushSender implements MessageSender {\n  constructor(private readonly options: WebPushOptions) {}\n\n  async send(message: OutboundMessage): Promise<void | SendResult> {\n    if (message.channel !== 'push') {\n      throw new Error(`WebPushSender: unsupported channel '${message.channel}'`);\n    }\n    if (message.recipient === undefined) {\n      throw new Error(`WebPushSender: no subscription for user '${message.userId}'`);\n    }\n    const subscription = parseSubscription(message.recipient);\n    if (subscription === undefined) {\n      // Not a usable subscription: nothing will ever deliver to it, so do not retry into it\n      await this.options.onUnregistered?.(message);\n      return { delivered: false, reason: 'InvalidSubscription' };\n    }\n    const content = await this.options.render(message.template, message.props);\n    const payload = utf8(\n      JSON.stringify({\n        ...content,\n        template: message.template,\n        idempotencyKey: message.idempotencyKey,\n        ...message.tracking?.data,\n      })\n    );\n    const body = await encryptPayload(payload, subscription.p256dh, subscription.auth);\n    const doFetch = this.options.fetch ?? fetch;\n    const response = await doFetch(subscription.endpoint, {\n      method: 'POST',\n      headers: {\n        authorization: await vapidAuthorization(subscription.endpoint, this.options.vapid),\n        'content-encoding': 'aes128gcm',\n        'content-type': 'application/octet-stream',\n        ttl: String(this.options.ttl ?? 86_400),\n        urgency: 'normal',\n      },\n      body,\n    });\n    if (response.ok) return;\n    if (response.status === 404 || response.status === 410) {\n      // The browser unsubscribed or the subscription expired: it will never deliver again\n      console.warn(`[webpush] subscription gone for user ${message.userId}: ${response.status}`);\n      await this.options.onUnregistered?.(message);\n      return { delivered: false, reason: response.status === 410 ? 'Gone' : 'NotFound' };\n    }\n    throw new Error(`[webpush] ${response.status}: ${await response.text()}`);\n  }\n}\n"],"mappings":";;;AA0CA,eAAsB,oBAAwC;CAC5D,MAAM,OAAO,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAS,YAAY;CAAQ,GAAG,MAAM,CACzF,QACA,QACF,CAAC;CACD,MAAM,MAAM,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,SAAS,CAAC;CAC/E,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,UAAU;CAChE,OAAO;EAAE,WAAW,UAAU,GAAG;EAAG,YAAY,IAAI,KAAK;CAAG;AAC9D;;AAGA,MAAM,cAAc;AAGpB,MAAM,UAAU,IAAI,YAAY;AAChC,MAAM,QAAQ,SAAwB,QAAQ,OAAO,IAAI;AAEzD,SAAgB,cAAc,MAAqB;CACjD,MAAM,SAAS,KAAK,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC;CAC9D,OAAO,WAAW,KAAK,SAAS,SAAS,KAAK,WAAW,CAAC,CAAC;AAC7D;AAEA,SAAS,OAAO,GAAG,OAA4B;CAC7C,MAAM,MAAM,IAAI,WAAW,MAAM,QAAQ,GAAG,SAAS,IAAI,KAAK,QAAQ,CAAC,CAAC;CACxE,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,IAAI,MAAM,MAAM;EACpB,UAAU,KAAK;CACjB;CACA,OAAO;AACT;AAEA,eAAe,KAAK,KAAY,MAA6B;CAC3D,MAAM,WAAW,MAAM,OAAO,OAAO,UACnC,OACA,KACA;EAAE,MAAM;EAAQ,MAAM;CAAU,GAChC,OACA,CAAC,MAAM,CACT;CACA,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,QAAQ,UAAU,IAAI,CAAC;AACxE;;AAGA,eAAe,KAAK,MAAa,KAAY,MAAa,QAAgC;CAExF,QAAQ,MAAM,KAAK,MADD,KAAK,MAAM,GAAG,GACR,OAAO,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAA,CAAG,MAAM,GAAG,MAAM;AAC7E;;;;;;AAOA,eAAsB,eACpB,SACA,QACA,YACA,OAAc,OAAO,gCAAgB,IAAI,WAAW,EAAE,CAAC,GACvC;CAChB,MAAM,YAAY,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAQ,YAAY;CAAQ,GAAG,MAAM,CAC7F,YACF,CAAC;CACD,MAAM,eAAe,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,UAAU,SAAS,CAAC;CAC7F,MAAM,WAAW,MAAM,OAAO,OAAO,UACnC,OACA,QACA;EAAE,MAAM;EAAQ,YAAY;CAAQ,GACpC,OACA,CAAC,CACH;CAIA,MAAM,MAAM,MAAM,KAChB,YACA,IALiB,WACjB,MAAM,OAAO,OAAO,WAAW;EAAE,MAAM;EAAQ,QAAQ;CAAS,GAAG,UAAU,YAAY,GAAG,CAIvF,GACL,OAAO,KAAK,iBAAiB,GAAG,QAAQ,YAAY,GACpD,EACF;CACA,MAAM,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,+BAA+B,GAAG,EAAE;CAC3E,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK,KAAK,2BAA2B,GAAG,EAAE;CACzE,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,WAAW,OAAO,CAAC,SAAS,CAAC;CAEnF,MAAM,SAAS,IAAI,WACjB,MAAM,OAAO,OAAO,QAClB;EAAE,MAAM;EAAW,IAAI;CAAM,GAC7B,KACA,OAAO,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CACrC,CACF;CACA,MAAM,yBAAS,IAAI,WAAW,EAAU;CACxC,OAAO,IAAI,MAAM,CAAC;CAClB,IAAI,SAAS,OAAO,MAAM,CAAC,CAAC,UAAU,IAAI,WAAW;CACrD,OAAO,MAAM,aAAa;CAC1B,OAAO,OAAO,QAAQ,cAAc,MAAM;AAC5C;;AAGA,eAAsB,mBACpB,UACA,OACA,MAAM,KAAK,IAAI,GACE;CACjB,MAAM,YAAY,cAAc,MAAM,SAAS;CAC/C,MAAM,MAAM,MAAM,OAAO,OAAO,UAC9B,OACA;EACE,KAAK;EACL,KAAK;EACL,GAAG,MAAM;EACT,GAAG,UAAU,UAAU,MAAM,GAAG,EAAE,CAAC;EACnC,GAAG,UAAU,UAAU,MAAM,IAAI,EAAE,CAAC;EACpC,KAAK;CACP,GACA;EAAE,MAAM;EAAS,YAAY;CAAQ,GACrC,OACA,CAAC,MAAM,CACT;CACA,MAAM,SAAS,UAAU,KAAK,UAAU;EAAE,KAAK;EAAO,KAAK;CAAQ,CAAC,CAAC;CACrE,MAAM,SAAS,UACb,KAAK,UAAU;EACb,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC;EACvB,KAAK,KAAK,MAAM,MAAM,GAAI,IAAI;EAC9B,KAAK,MAAM;CACb,CAAC,CACH;CACA,MAAM,YAAY,IAAI,WACpB,MAAM,OAAO,OAAO,KAAK;EAAE,MAAM;EAAS,MAAM;CAAU,GAAG,KAAK,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC,CAC/F;CACA,OAAO,WAAW,OAAO,GAAG,OAAO,GAAG,UAAU,SAAS,EAAE,MAAM,MAAM;AACzE;;;;;;AAOA,SAAS,kBACP,OAC8D;CAC9D,IAAI;EACF,MAAM,QAAQ,KAAK,MAAM,KAAK;EAC9B,IAAI,OAAO,MAAM,aAAa,YAAY,IAAI,IAAI,MAAM,QAAQ,CAAC,CAAC,aAAa,UAC7E;EAEF,MAAM,SAAS,cAAc,MAAM,MAAM,UAAU,EAAE;EACrD,MAAM,OAAO,cAAc,MAAM,MAAM,QAAQ,EAAE;EACjD,IAAI,OAAO,WAAW,MAAM,OAAO,OAAO,KAAK,KAAK,WAAW,IAAI,OAAO,KAAA;EAC1E,OAAO;GAAE,UAAU,MAAM;GAAU;GAAQ;EAAK;CAClD,QAAQ;EACN;CACF;AACF;AAEA,IAAa,gBAAb,MAAoD;CACrB;CAA7B,YAAY,SAA0C;EAAzB,KAAA,UAAA;CAA0B;CAEvD,MAAM,KAAK,SAAsD;EAC/D,IAAI,QAAQ,YAAY,QACtB,MAAM,IAAI,MAAM,uCAAuC,QAAQ,QAAQ,EAAE;EAE3E,IAAI,QAAQ,cAAc,KAAA,GACxB,MAAM,IAAI,MAAM,4CAA4C,QAAQ,OAAO,EAAE;EAE/E,MAAM,eAAe,kBAAkB,QAAQ,SAAS;EACxD,IAAI,iBAAiB,KAAA,GAAW;GAE9B,MAAM,KAAK,QAAQ,iBAAiB,OAAO;GAC3C,OAAO;IAAE,WAAW;IAAO,QAAQ;GAAsB;EAC3D;EACA,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,QAAQ,UAAU,QAAQ,KAAK;EASzE,MAAM,OAAO,MAAM,eARH,KACd,KAAK,UAAU;GACb,GAAG;GACH,UAAU,QAAQ;GAClB,gBAAgB,QAAQ;GACxB,GAAG,QAAQ,UAAU;EACvB,CAAC,CAEqC,GAAG,aAAa,QAAQ,aAAa,IAAI;EAEjF,MAAM,WAAW,OADD,KAAK,QAAQ,SAAS,MAAA,CACP,aAAa,UAAU;GACpD,QAAQ;GACR,SAAS;IACP,eAAe,MAAM,mBAAmB,aAAa,UAAU,KAAK,QAAQ,KAAK;IACjF,oBAAoB;IACpB,gBAAgB;IAChB,KAAK,OAAO,KAAK,QAAQ,OAAO,KAAM;IACtC,SAAS;GACX;GACA;EACF,CAAC;EACD,IAAI,SAAS,IAAI;EACjB,IAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;GAEtD,QAAQ,KAAK,wCAAwC,QAAQ,OAAO,IAAI,SAAS,QAAQ;GACzF,MAAM,KAAK,QAAQ,iBAAiB,OAAO;GAC3C,OAAO;IAAE,WAAW;IAAO,QAAQ,SAAS,WAAW,MAAM,SAAS;GAAW;EACnF;EACA,MAAM,IAAI,MAAM,aAAa,SAAS,OAAO,IAAI,MAAM,SAAS,KAAK,GAAG;CAC1E;AACF"}