@stacksjs/ts-cloud 0.9.2 → 0.9.4

package/dist/protection/index.js

@@ -1,89 +1 @@
-import {
-  DEFAULT_ATTACK_MODE_HOURS,
-  MAX_CONTROL_HOURS,
-  PROTECTION_SETTING,
-  ProtectionControlStore,
-  RATE_LIMIT_KEY_SEPARATOR,
-  RateLimiter,
-  applyControlsToDdos,
-  applyControlsToRateLimits,
-  defaultRateLimitRules,
-  describePosture,
-  globMatches,
-  mergeControlsIntoConfig,
-  rateLimitHeaders,
-  rateLimitKey,
-  ruleMatches
-} from "../chunk-d48vtdj4.js";
-import {
-  escapeSecLang,
-  globToRegex,
-  isSafePattern,
-  renderWafConfig,
-  renderWafInstallScript,
-  wafEventTelemetry
-} from "../chunk-va2yd85b.js";
-import {
-  DEFAULT_DDOS_THRESHOLDS,
-  applyMitigationFactor,
-  isValidCidr,
-  planMitigation,
-  renderDdosInstallScript,
-  renderNftablesRuleset,
-  renderSysctlFile,
-  sysctlHardening
-} from "../chunk-aa2dkn7b.js";
-import {
-  CHAIN_HEADER,
-  DEFAULT_RECURSION_LIMITS,
-  DEPTH_HEADER,
-  RecursionGuard,
-  TRACE_HEADER,
-  functionFingerprint,
-  inspectInvocation,
-  parseChain,
-  propagationHeaders,
-  recursionBlockedResponse
-} from "../chunk-050r7ycy.js";
-import"../chunk-v0bahtg2.js";
-export {
-  wafEventTelemetry,
-  sysctlHardening,
-  ruleMatches,
-  renderWafInstallScript,
-  renderWafConfig,
-  renderSysctlFile,
-  renderNftablesRuleset,
-  renderDdosInstallScript,
-  recursionBlockedResponse,
-  rateLimitKey,
-  rateLimitHeaders,
-  propagationHeaders,
-  planMitigation,
-  parseChain,
-  mergeControlsIntoConfig,
-  isValidCidr,
-  isSafePattern,
-  inspectInvocation,
-  globToRegex,
-  globMatches,
-  functionFingerprint,
-  escapeSecLang,
-  describePosture,
-  defaultRateLimitRules,
-  applyMitigationFactor,
-  applyControlsToRateLimits,
-  applyControlsToDdos,
-  TRACE_HEADER,
-  RecursionGuard,
-  RateLimiter,
-  RATE_LIMIT_KEY_SEPARATOR,
-  ProtectionControlStore,
-  PROTECTION_SETTING,
-  MAX_CONTROL_HOURS,
-  DEPTH_HEADER,
-  DEFAULT_RECURSION_LIMITS,
-  DEFAULT_DDOS_THRESHOLDS,
-  DEFAULT_ATTACK_MODE_HOURS,
-  CHAIN_HEADER
-};
+import{$k as H,Sk as y,Tk as z,Uk as A,Vk as B,Wk as C,Xk as D,Yk as E,Zk as F,_k as G,al as I,bl as J,cl as K,dl as L,el as M}from"../chunk-gnv3r2jg.js";import{fl as s,gl as t,hl as u,il as v,jl as w,kl as x}from"../chunk-cwkg37rs.js";import{ll as k,ml as l,nl as m,ol as n,pl as o,ql as p,rl as q,sl as r}from"../chunk-b8e5wzwn.js";import{Bs as a,Cs as b,Ds as c,Es as d,Fs as e,Gs as f,Hs as g,Is as h,Js as i,Ks as j}from"../chunk-dskvqt67.js";import"../chunk-xt3s24vr.js";export{x as wafEventTelemetry,m as sysctlHardening,A as ruleMatches,w as renderWafInstallScript,v as renderWafConfig,n as renderSysctlFile,o as renderNftablesRuleset,p as renderDdosInstallScript,j as recursionBlockedResponse,B as rateLimitKey,D as rateLimitHeaders,i as propagationHeaders,q as planMitigation,f as parseChain,M as mergeControlsIntoConfig,l as isValidCidr,t as isSafePattern,g as inspectInvocation,u as globToRegex,z as globMatches,d as functionFingerprint,s as escapeSecLang,J as describePosture,E as defaultRateLimitRules,r as applyMitigationFactor,K as applyControlsToRateLimits,L as applyControlsToDdos,c as TRACE_HEADER,h as RecursionGuard,C as RateLimiter,y as RATE_LIMIT_KEY_SEPARATOR,I as ProtectionControlStore,F as PROTECTION_SETTING,G as MAX_CONTROL_HOURS,a as DEPTH_HEADER,e as DEFAULT_RECURSION_LIMITS,k as DEFAULT_DDOS_THRESHOLDS,H as DEFAULT_ATTACK_MODE_HOURS,b as CHAIN_HEADER};

package/dist/push/index.js

@@ -1,509 +1 @@
-import"../chunk-v0bahtg2.js";
-
-// src/push/apns.ts
-import * as http2 from "node:http2";
-import { createSign } from "node:crypto";
-var APNS_PRODUCTION_HOST = "api.push.apple.com";
-var APNS_SANDBOX_HOST = "api.sandbox.push.apple.com";
-var TOKEN_EXPIRY_MS = 45 * 60 * 1000;
-
-class APNsClient {
-  config;
-  token = null;
-  tokenGeneratedAt = 0;
-  client = null;
-  host;
-  constructor(config) {
-    this.config = config;
-    this.host = config.production ? APNS_PRODUCTION_HOST : APNS_SANDBOX_HOST;
-  }
-  generateToken() {
-    const now = Math.floor(Date.now() / 1000);
-    if (this.token && Date.now() - this.tokenGeneratedAt < TOKEN_EXPIRY_MS) {
-      return this.token;
-    }
-    const header = {
-      alg: "ES256",
-      kid: this.config.keyId
-    };
-    const payload = {
-      iss: this.config.teamId,
-      iat: now
-    };
-    const encodedHeader = Buffer.from(JSON.stringify(header)).toString("base64url");
-    const encodedPayload = Buffer.from(JSON.stringify(payload)).toString("base64url");
-    const signatureInput = `${encodedHeader}.${encodedPayload}`;
-    const sign = createSign("SHA256");
-    sign.update(signatureInput);
-    const signature = sign.sign(this.config.privateKey);
-    const rawSignature = this.derToRaw(signature);
-    const encodedSignature = rawSignature.toString("base64url");
-    this.token = `${signatureInput}.${encodedSignature}`;
-    this.tokenGeneratedAt = Date.now();
-    return this.token;
-  }
-  derToRaw(derSignature) {
-    let offset = 2;
-    if (derSignature[offset] !== 2) {
-      throw new Error("Invalid DER signature: expected 0x02 for R");
-    }
-    offset++;
-    const rLength = derSignature[offset];
-    offset++;
-    let r = derSignature.subarray(offset, offset + rLength);
-    offset += rLength;
-    if (derSignature[offset] !== 2) {
-      throw new Error("Invalid DER signature: expected 0x02 for S");
-    }
-    offset++;
-    const sLength = derSignature[offset];
-    offset++;
-    let s = derSignature.subarray(offset, offset + sLength);
-    if (r[0] === 0 && r.length === 33) {
-      r = r.subarray(1);
-    }
-    if (s[0] === 0 && s.length === 33) {
-      s = s.subarray(1);
-    }
-    const result = Buffer.alloc(64);
-    r.copy(result, 32 - r.length);
-    s.copy(result, 64 - s.length);
-    return result;
-  }
-  async getClient() {
-    if (this.client && !this.client.destroyed) {
-      return this.client;
-    }
-    return new Promise((resolve, reject) => {
-      this.client = http2.connect(`https://${this.host}`);
-      this.client.on("error", (err) => {
-        reject(err);
-      });
-      this.client.on("connect", () => {
-        resolve(this.client);
-      });
-      this.client.on("close", () => {
-        this.client = null;
-      });
-    });
-  }
-  buildPayload(notification) {
-    const aps = {};
-    if (notification.title || notification.body || notification.subtitle) {
-      aps.alert = {};
-      if (notification.title)
-        aps.alert.title = notification.title;
-      if (notification.subtitle)
-        aps.alert.subtitle = notification.subtitle;
-      if (notification.body)
-        aps.alert.body = notification.body;
-    }
-    if (notification.badge !== undefined) {
-      aps.badge = notification.badge;
-    }
-    if (notification.sound !== undefined) {
-      aps.sound = notification.sound;
-    }
-    if (notification.category) {
-      aps.category = notification.category;
-    }
-    if (notification.threadId) {
-      aps["thread-id"] = notification.threadId;
-    }
-    if (notification.contentAvailable) {
-      aps["content-available"] = 1;
-    }
-    if (notification.mutableContent) {
-      aps["mutable-content"] = 1;
-    }
-    if (notification.targetContentId) {
-      aps["target-content-id"] = notification.targetContentId;
-    }
-    const payload = { aps };
-    if (notification.data) {
-      Object.assign(payload, notification.data);
-    }
-    return payload;
-  }
-  async send(notification) {
-    try {
-      const client = await this.getClient();
-      const token = this.generateToken();
-      const payload = JSON.stringify(this.buildPayload(notification));
-      const headers = {
-        ":method": "POST",
-        ":path": `/3/device/${notification.deviceToken}`,
-        authorization: `bearer ${token}`,
-        "apns-topic": this.config.bundleId,
-        "apns-push-type": notification.pushType || "alert",
-        "apns-priority": String(notification.priority || 10)
-      };
-      if (notification.expiration !== undefined) {
-        headers["apns-expiration"] = String(notification.expiration);
-      }
-      if (notification.collapseId) {
-        headers["apns-collapse-id"] = notification.collapseId;
-      }
-      return new Promise((resolve) => {
-        const req = client.request(headers);
-        let responseData = "";
-        let statusCode = 0;
-        let apnsId;
-        req.on("response", (headers2) => {
-          statusCode = headers2[":status"];
-          apnsId = headers2["apns-id"];
-        });
-        req.on("data", (chunk) => {
-          responseData += chunk.toString();
-        });
-        req.on("end", () => {
-          if (statusCode === 200) {
-            resolve({
-              success: true,
-              deviceToken: notification.deviceToken,
-              apnsId,
-              statusCode
-            });
-          } else {
-            let error = "Unknown error";
-            let reason;
-            let timestamp;
-            if (responseData) {
-              try {
-                const parsed = JSON.parse(responseData);
-                reason = parsed.reason;
-                timestamp = parsed.timestamp;
-                error = reason || error;
-              } catch {
-                error = responseData;
-              }
-            }
-            resolve({
-              success: false,
-              deviceToken: notification.deviceToken,
-              apnsId,
-              statusCode,
-              error,
-              reason,
-              timestamp
-            });
-          }
-        });
-        req.on("error", (err) => {
-          resolve({
-            success: false,
-            deviceToken: notification.deviceToken,
-            error: err.message
-          });
-        });
-        req.write(payload);
-        req.end();
-      });
-    } catch (error) {
-      return {
-        success: false,
-        deviceToken: notification.deviceToken,
-        error: error.message
-      };
-    }
-  }
-  async sendBatch(notifications, options) {
-    const concurrency = options?.concurrency || 10;
-    const results = [];
-    for (let i = 0;i < notifications.length; i += concurrency) {
-      const batch = notifications.slice(i, i + concurrency);
-      const batchResults = await Promise.all(batch.map((n) => this.send(n)));
-      results.push(...batchResults);
-    }
-    return {
-      sent: results.filter((r) => r.success).length,
-      failed: results.filter((r) => !r.success).length,
-      results
-    };
-  }
-  async sendSimple(deviceToken, title, body, data) {
-    return this.send({
-      deviceToken,
-      title,
-      body,
-      data
-    });
-  }
-  async sendSilent(deviceToken, data) {
-    return this.send({
-      deviceToken,
-      contentAvailable: true,
-      pushType: "background",
-      priority: 5,
-      data
-    });
-  }
-  close() {
-    if (this.client) {
-      this.client.close();
-      this.client = null;
-    }
-    this.token = null;
-    this.tokenGeneratedAt = 0;
-  }
-}
-// src/push/fcm.ts
-import { createSign as createSign2 } from "node:crypto";
-var FCM_API_URL = "https://fcm.googleapis.com/v1/projects";
-var GOOGLE_TOKEN_URL = "https://oauth2.googleapis.com/token";
-var TOKEN_EXPIRY_MS2 = 55 * 60 * 1000;
-
-class FCMClient {
-  config;
-  accessToken = null;
-  tokenExpiresAt = 0;
-  constructor(config) {
-    this.config = config;
-  }
-  static fromServiceAccount(serviceAccount) {
-    return new FCMClient({
-      projectId: serviceAccount.project_id,
-      clientEmail: serviceAccount.client_email,
-      privateKey: serviceAccount.private_key
-    });
-  }
-  generateJWT() {
-    const now = Math.floor(Date.now() / 1000);
-    const exp = now + 3600;
-    const header = {
-      alg: "RS256",
-      typ: "JWT"
-    };
-    const payload = {
-      iss: this.config.clientEmail,
-      sub: this.config.clientEmail,
-      aud: GOOGLE_TOKEN_URL,
-      iat: now,
-      exp,
-      scope: "https://www.googleapis.com/auth/firebase.messaging"
-    };
-    const encodedHeader = Buffer.from(JSON.stringify(header)).toString("base64url");
-    const encodedPayload = Buffer.from(JSON.stringify(payload)).toString("base64url");
-    const signatureInput = `${encodedHeader}.${encodedPayload}`;
-    const sign = createSign2("SHA256");
-    sign.update(signatureInput);
-    const signature = sign.sign(this.config.privateKey, "base64url");
-    return `${signatureInput}.${signature}`;
-  }
-  async getAccessToken() {
-    if (this.accessToken && Date.now() < this.tokenExpiresAt) {
-      return this.accessToken;
-    }
-    const jwt = this.generateJWT();
-    const response = await fetch(GOOGLE_TOKEN_URL, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded"
-      },
-      body: new URLSearchParams({
-        grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
-        assertion: jwt
-      }).toString()
-    });
-    if (!response.ok) {
-      const errorText = await response.text();
-      throw new Error(`Failed to get access token: ${errorText}`);
-    }
-    const data = await response.json();
-    this.accessToken = data.access_token;
-    this.tokenExpiresAt = Date.now() + TOKEN_EXPIRY_MS2;
-    return this.accessToken;
-  }
-  buildMessage(notification) {
-    const message = {};
-    if (notification.token) {
-      message.token = notification.token;
-    } else if (notification.topic) {
-      message.topic = notification.topic;
-    } else if (notification.condition) {
-      message.condition = notification.condition;
-    }
-    if (notification.title || notification.body || notification.imageUrl) {
-      message.notification = {};
-      if (notification.title)
-        message.notification.title = notification.title;
-      if (notification.body)
-        message.notification.body = notification.body;
-      if (notification.imageUrl)
-        message.notification.image = notification.imageUrl;
-    }
-    if (notification.data && Object.keys(notification.data).length > 0) {
-      message.data = notification.data;
-    }
-    if (notification.android) {
-      message.android = {
-        priority: notification.android.priority || "high"
-      };
-      if (notification.android.ttl) {
-        message.android.ttl = `${notification.android.ttl}s`;
-      }
-      if (notification.android.collapseKey) {
-        message.android.collapse_key = notification.android.collapseKey;
-      }
-      if (notification.android.directBootOk) {
-        message.android.direct_boot_ok = notification.android.directBootOk;
-      }
-      const androidNotification = {};
-      if (notification.android.channelId)
-        androidNotification.channel_id = notification.android.channelId;
-      if (notification.android.icon)
-        androidNotification.icon = notification.android.icon;
-      if (notification.android.color)
-        androidNotification.color = notification.android.color;
-      if (notification.android.sound)
-        androidNotification.sound = notification.android.sound;
-      if (notification.android.clickAction)
-        androidNotification.click_action = notification.android.clickAction;
-      if (notification.android.tag)
-        androidNotification.tag = notification.android.tag;
-      if (notification.android.visibility)
-        androidNotification.visibility = notification.android.visibility;
-      if (notification.android.notificationCount !== undefined) {
-        androidNotification.notification_count = notification.android.notificationCount;
-      }
-      if (Object.keys(androidNotification).length > 0) {
-        message.android.notification = androidNotification;
-      }
-    }
-    if (notification.webpush) {
-      message.webpush = notification.webpush;
-    }
-    if (notification.apns) {
-      message.apns = notification.apns;
-    }
-    if (notification.fcmOptions) {
-      message.fcm_options = notification.fcmOptions;
-    }
-    return { message };
-  }
-  async send(notification) {
-    try {
-      const accessToken = await this.getAccessToken();
-      const payload = this.buildMessage(notification);
-      const response = await fetch(`${FCM_API_URL}/${this.config.projectId}/messages:send`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${accessToken}`,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify(payload)
-      });
-      const data = await response.json();
-      if (response.ok) {
-        return {
-          success: true,
-          messageId: data.name
-        };
-      } else {
-        return {
-          success: false,
-          error: data.error?.message || "Unknown error",
-          errorCode: data.error?.status
-        };
-      }
-    } catch (error) {
-      return {
-        success: false,
-        error: error.message
-      };
-    }
-  }
-  async sendBatch(tokens, notification, options) {
-    const concurrency = options?.concurrency || 10;
-    const results = [];
-    for (let i = 0;i < tokens.length; i += concurrency) {
-      const batch = tokens.slice(i, i + concurrency);
-      const batchPromises = batch.map(async (token) => {
-        const result = await this.send({ ...notification, token });
-        return { ...result, token };
-      });
-      const batchResults = await Promise.all(batchPromises);
-      results.push(...batchResults);
-    }
-    return {
-      sent: results.filter((r) => r.success).length,
-      failed: results.filter((r) => !r.success).length,
-      results
-    };
-  }
-  async sendToTopic(topic, notification) {
-    return this.send({ ...notification, topic });
-  }
-  async sendToCondition(condition, notification) {
-    return this.send({ ...notification, condition });
-  }
-  async sendSimple(token, title, body, data) {
-    return this.send({
-      token,
-      title,
-      body,
-      data
-    });
-  }
-  async sendSilent(token, data) {
-    return this.send({
-      token,
-      data,
-      android: {
-        priority: "high"
-      }
-    });
-  }
-  async subscribeToTopic(tokens, topic) {
-    try {
-      const accessToken = await this.getAccessToken();
-      const response = await fetch(`https://iid.googleapis.com/iid/v1:batchAdd`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${accessToken}`,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify({
-          to: `/topics/${topic}`,
-          registration_tokens: tokens
-        })
-      });
-      if (response.ok) {
-        return { success: true };
-      } else {
-        const data = await response.json();
-        return { success: false, error: data.error?.message || "Failed to subscribe" };
-      }
-    } catch (error) {
-      return { success: false, error: error.message };
-    }
-  }
-  async unsubscribeFromTopic(tokens, topic) {
-    try {
-      const accessToken = await this.getAccessToken();
-      const response = await fetch(`https://iid.googleapis.com/iid/v1:batchRemove`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${accessToken}`,
-          "Content-Type": "application/json"
-        },
-        body: JSON.stringify({
-          to: `/topics/${topic}`,
-          registration_tokens: tokens
-        })
-      });
-      if (response.ok) {
-        return { success: true };
-      } else {
-        const data = await response.json();
-        return { success: false, error: data.error?.message || "Failed to unsubscribe" };
-      }
-    } catch (error) {
-      return { success: false, error: error.message };
-    }
-  }
-}
-export {
-  FCMClient,
-  APNsClient
-};
+import"../chunk-xt3s24vr.js";import*as K from"node:http2";import{createSign as U}from"node:crypto";var q="api.push.apple.com",D="api.sandbox.push.apple.com",M=2700000;class E{config;token=null;tokenGeneratedAt=0;client=null;host;constructor(z){this.config=z,this.host=z.production?q:D}generateToken(){let z=Math.floor(Date.now()/1000);if(this.token&&Date.now()-this.tokenGeneratedAt<M)return this.token;let J={alg:"ES256",kid:this.config.keyId},Q={iss:this.config.teamId,iat:z},V=Buffer.from(JSON.stringify(J)).toString("base64url"),W=Buffer.from(JSON.stringify(Q)).toString("base64url"),Z=`${V}.${W}`,$=U("SHA256");$.update(Z);let B=$.sign(this.config.privateKey),x=this.derToRaw(B).toString("base64url");return this.token=`${Z}.${x}`,this.tokenGeneratedAt=Date.now(),this.token}derToRaw(z){let J=2;if(z[J]!==2)throw Error("Invalid DER signature: expected 0x02 for R");J++;let Q=z[J];J++;let V=z.subarray(J,J+Q);if(J+=Q,z[J]!==2)throw Error("Invalid DER signature: expected 0x02 for S");J++;let W=z[J];J++;let Z=z.subarray(J,J+W);if(V[0]===0&&V.length===33)V=V.subarray(1);if(Z[0]===0&&Z.length===33)Z=Z.subarray(1);let $=Buffer.alloc(64);return V.copy($,32-V.length),Z.copy($,64-Z.length),$}async getClient(){if(this.client&&!this.client.destroyed)return this.client;return new Promise((z,J)=>{this.client=K.connect(`https://${this.host}`),this.client.on("error",(Q)=>{J(Q)}),this.client.on("connect",()=>{z(this.client)}),this.client.on("close",()=>{this.client=null})})}buildPayload(z){let J={};if(z.title||z.body||z.subtitle){if(J.alert={},z.title)J.alert.title=z.title;if(z.subtitle)J.alert.subtitle=z.subtitle;if(z.body)J.alert.body=z.body}if(z.badge!==void 0)J.badge=z.badge;if(z.sound!==void 0)J.sound=z.sound;if(z.category)J.category=z.category;if(z.threadId)J["thread-id"]=z.threadId;if(z.contentAvailable)J["content-available"]=1;if(z.mutableContent)J["mutable-content"]=1;if(z.targetContentId)J["target-content-id"]=z.targetContentId;let Q={aps:J};if(z.data)Object.assign(Q,z.data);return Q}async send(z){try{let J=await this.getClient(),Q=this.generateToken(),V=JSON.stringify(this.buildPayload(z)),W={":method":"POST",":path":`/3/device/${z.deviceToken}`,authorization:`bearer ${Q}`,"apns-topic":this.config.bundleId,"apns-push-type":z.pushType||"alert","apns-priority":String(z.priority||10)};if(z.expiration!==void 0)W["apns-expiration"]=String(z.expiration);if(z.collapseId)W["apns-collapse-id"]=z.collapseId;return new Promise((Z)=>{let $=J.request(W),B="",j=0,x;$.on("response",(Y)=>{j=Y[":status"],x=Y["apns-id"]}),$.on("data",(Y)=>{B+=Y.toString()}),$.on("end",()=>{if(j===200)Z({success:!0,deviceToken:z.deviceToken,apnsId:x,statusCode:j});else{let Y="Unknown error",X,w;if(B)try{let G=JSON.parse(B);X=G.reason,w=G.timestamp,Y=X||Y}catch{Y=B}Z({success:!1,deviceToken:z.deviceToken,apnsId:x,statusCode:j,error:Y,reason:X,timestamp:w})}}),$.on("error",(Y)=>{Z({success:!1,deviceToken:z.deviceToken,error:Y.message})}),$.write(V),$.end()})}catch(J){return{success:!1,deviceToken:z.deviceToken,error:J.message}}}async sendBatch(z,J){let Q=J?.concurrency||10,V=[];for(let W=0;W<z.length;W+=Q){let Z=z.slice(W,W+Q),$=await Promise.all(Z.map((B)=>this.send(B)));V.push(...$)}return{sent:V.filter((W)=>W.success).length,failed:V.filter((W)=>!W.success).length,results:V}}async sendSimple(z,J,Q,V){return this.send({deviceToken:z,title:J,body:Q,data:V})}async sendSilent(z,J){return this.send({deviceToken:z,contentAvailable:!0,pushType:"background",priority:5,data:J})}close(){if(this.client)this.client.close(),this.client=null;this.token=null,this.tokenGeneratedAt=0}}import{createSign as L}from"node:crypto";var R="https://fcm.googleapis.com/v1/projects",F="https://oauth2.googleapis.com/token",b=3300000;class H{config;accessToken=null;tokenExpiresAt=0;constructor(z){this.config=z}static fromServiceAccount(z){return new H({projectId:z.project_id,clientEmail:z.client_email,privateKey:z.private_key})}generateJWT(){let z=Math.floor(Date.now()/1000),J=z+3600,Q={alg:"RS256",typ:"JWT"},V={iss:this.config.clientEmail,sub:this.config.clientEmail,aud:F,iat:z,exp:J,scope:"https://www.googleapis.com/auth/firebase.messaging"},W=Buffer.from(JSON.stringify(Q)).toString("base64url"),Z=Buffer.from(JSON.stringify(V)).toString("base64url"),$=`${W}.${Z}`,B=L("SHA256");B.update($);let j=B.sign(this.config.privateKey,"base64url");return`${$}.${j}`}async getAccessToken(){if(this.accessToken&&Date.now()<this.tokenExpiresAt)return this.accessToken;let z=this.generateJWT(),J=await fetch(F,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:z}).toString()});if(!J.ok){let V=await J.text();throw Error(`Failed to get access token: ${V}`)}let Q=await J.json();return this.accessToken=Q.access_token,this.tokenExpiresAt=Date.now()+b,this.accessToken}buildMessage(z){let J={};if(z.token)J.token=z.token;else if(z.topic)J.topic=z.topic;else if(z.condition)J.condition=z.condition;if(z.title||z.body||z.imageUrl){if(J.notification={},z.title)J.notification.title=z.title;if(z.body)J.notification.body=z.body;if(z.imageUrl)J.notification.image=z.imageUrl}if(z.data&&Object.keys(z.data).length>0)J.data=z.data;if(z.android){if(J.android={priority:z.android.priority||"high"},z.android.ttl)J.android.ttl=`${z.android.ttl}s`;if(z.android.collapseKey)J.android.collapse_key=z.android.collapseKey;if(z.android.directBootOk)J.android.direct_boot_ok=z.android.directBootOk;let Q={};if(z.android.channelId)Q.channel_id=z.android.channelId;if(z.android.icon)Q.icon=z.android.icon;if(z.android.color)Q.color=z.android.color;if(z.android.sound)Q.sound=z.android.sound;if(z.android.clickAction)Q.click_action=z.android.clickAction;if(z.android.tag)Q.tag=z.android.tag;if(z.android.visibility)Q.visibility=z.android.visibility;if(z.android.notificationCount!==void 0)Q.notification_count=z.android.notificationCount;if(Object.keys(Q).length>0)J.android.notification=Q}if(z.webpush)J.webpush=z.webpush;if(z.apns)J.apns=z.apns;if(z.fcmOptions)J.fcm_options=z.fcmOptions;return{message:J}}async send(z){try{let J=await this.getAccessToken(),Q=this.buildMessage(z),V=await fetch(`${R}/${this.config.projectId}/messages:send`,{method:"POST",headers:{Authorization:`Bearer ${J}`,"Content-Type":"application/json"},body:JSON.stringify(Q)}),W=await V.json();if(V.ok)return{success:!0,messageId:W.name};else return{success:!1,error:W.error?.message||"Unknown error",errorCode:W.error?.status}}catch(J){return{success:!1,error:J.message}}}async sendBatch(z,J,Q){let V=Q?.concurrency||10,W=[];for(let Z=0;Z<z.length;Z+=V){let B=z.slice(Z,Z+V).map(async(x)=>{return{...await this.send({...J,token:x}),token:x}}),j=await Promise.all(B);W.push(...j)}return{sent:W.filter((Z)=>Z.success).length,failed:W.filter((Z)=>!Z.success).length,results:W}}async sendToTopic(z,J){return this.send({...J,topic:z})}async sendToCondition(z,J){return this.send({...J,condition:z})}async sendSimple(z,J,Q,V){return this.send({token:z,title:J,body:Q,data:V})}async sendSilent(z,J){return this.send({token:z,data:J,android:{priority:"high"}})}async subscribeToTopic(z,J){try{let Q=await this.getAccessToken(),V=await fetch("https://iid.googleapis.com/iid/v1:batchAdd",{method:"POST",headers:{Authorization:`Bearer ${Q}`,"Content-Type":"application/json"},body:JSON.stringify({to:`/topics/${J}`,registration_tokens:z})});if(V.ok)return{success:!0};else return{success:!1,error:(await V.json()).error?.message||"Failed to subscribe"}}catch(Q){return{success:!1,error:Q.message}}}async unsubscribeFromTopic(z,J){try{let Q=await this.getAccessToken(),V=await fetch("https://iid.googleapis.com/iid/v1:batchRemove",{method:"POST",headers:{Authorization:`Bearer ${Q}`,"Content-Type":"application/json"},body:JSON.stringify({to:`/topics/${J}`,registration_tokens:z})});if(V.ok)return{success:!0};else return{success:!1,error:(await V.json()).error?.message||"Failed to unsubscribe"}}catch(Q){return{success:!1,error:Q.message}}}}export{H as FCMClient,E as APNsClient};