@undefineds.co/xpod 0.3.67 → 0.3.68

package/dist/api/handlers/DeviceNotificationTicketHandler.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceNotificationTicketHandler = exports.DeviceNotificationTicketStore = void 0;
+const node_crypto_1 = require("node:crypto");
+class DeviceNotificationTicketStore {
+    constructor() {
+        this.records = new Map();
+    }
+    mint(input) {
+        const ticket = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+        this.records.set(this.digest(ticket), {
+            digest: this.digest(ticket),
+            identity: input.identity,
+            deviceSessionId: input.deviceSessionId,
+            origin: new URL(input.origin).origin,
+            expiresAt: Date.now() + input.ttlMs,
+        });
+        return ticket;
+    }
+    consume(ticket) {
+        const digest = this.digest(ticket);
+        const record = this.records.get(digest);
+        this.records.delete(digest);
+        if (!record || record.expiresAt < Date.now()) {
+            return undefined;
+        }
+        return record;
+    }
+    size() {
+        return this.records.size;
+    }
+    clear() {
+        this.records.clear();
+    }
+    digest(ticket) {
+        return (0, node_crypto_1.createHash)('sha256').update(ticket).digest('hex');
+    }
+}
+exports.DeviceNotificationTicketStore = DeviceNotificationTicketStore;
+class DeviceNotificationTicketHandler {
+    constructor(options) {
+        this.webSocketEndpoint = options.webSocketEndpoint;
+        this.origin = new URL(options.origin).origin;
+        this.ticketTtlMs = options.ticketTtlMs ?? 60_000;
+        this.ticketStore = options.ticketStore ?? new DeviceNotificationTicketStore();
+    }
+    async handle(request, response) {
+        const identity = this.extractIdentity(request);
+        if (!identity) {
+            this.sendJson(response, 401, { error: 'Unauthorized' });
+            return;
+        }
+        const body = await this.readJson(request);
+        const deviceSessionId = typeof body.deviceSessionId === 'string'
+            ? body.deviceSessionId
+            : typeof body.sessionId === 'string'
+                ? body.sessionId
+                : undefined;
+        const origin = typeof body.origin === 'string' ? body.origin : undefined;
+        if (!deviceSessionId || !origin) {
+            this.sendJson(response, 400, { error: 'deviceSessionId and origin are required' });
+            return;
+        }
+        try {
+            if (new URL(origin).origin !== this.origin) {
+                this.sendJson(response, 400, { error: 'origin must match the notification service origin' });
+                return;
+            }
+        }
+        catch {
+            this.sendJson(response, 400, { error: 'origin must be a valid URL' });
+            return;
+        }
+        const ticket = this.ticketStore.mint({
+            identity,
+            deviceSessionId,
+            origin: this.origin,
+            ttlMs: this.ticketTtlMs,
+        });
+        this.sendJson(response, 201, {
+            protocol: 'xpod.notifications.v1',
+            ticket,
+            webSocketEndpoint: this.webSocketEndpoint,
+            expiresInMs: this.ticketTtlMs,
+        });
+    }
+    extractIdentity(request) {
+        const auth = request.auth;
+        const webId = auth && 'webId' in auth && typeof auth.webId === 'string' ? auth.webId : undefined;
+        if (!webId) {
+            return undefined;
+        }
+        return {
+            webId,
+            localPart: auth && 'localPart' in auth && typeof auth.localPart === 'string'
+                ? auth.localPart
+                : deriveLocalPart(webId),
+        };
+    }
+    async readJson(request) {
+        const chunks = [];
+        await new Promise((resolve, reject) => {
+            request.on('data', (chunk) => chunks.push(chunk));
+            request.on('end', () => resolve());
+            request.on('error', reject);
+        });
+        const body = Buffer.concat(chunks).toString('utf8');
+        return body.length > 0 ? JSON.parse(body) : {};
+    }
+    sendJson(response, status, body) {
+        const encoded = JSON.stringify(body);
+        response.writeHead(status, {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(encoded),
+        });
+        response.end(encoded);
+    }
+}
+exports.DeviceNotificationTicketHandler = DeviceNotificationTicketHandler;
+function deriveLocalPart(webId) {
+    try {
+        const url = new URL(webId);
+        const parts = url.pathname.split('/').filter(Boolean);
+        return parts[0] ?? 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+//# sourceMappingURL=DeviceNotificationTicketHandler.js.map

package/dist/api/handlers/DeviceNotificationTicketHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceNotificationTicketHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/DeviceNotificationTicketHandler.ts"],"names":[],"mappings":";;;AAAA,6CAAsD;AAiBtD,MAAa,6BAA6B;IAA1C;QACmB,YAAO,GAAG,IAAI,GAAG,EAA0C,CAAC;IAwC/E,CAAC;IAtCQ,IAAI,CAAC,KAKX;QACC,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM;YACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK;SACpC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,OAAO,CAAC,MAAc;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;CACF;AAzCD,sEAyCC;AAaD,MAAa,+BAA+B;IAM1C,YAAmB,OAA+C;QAChE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,6BAA6B,EAAE,CAAC;IAChF,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE,QAAwB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;YAC9D,CAAC,CAAC,IAAI,CAAC,eAAe;YACtB,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;gBAClC,CAAC,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC,CAAC;gBAC7F,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACnC,QAAQ;YACR,eAAe;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,WAAW;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC3B,QAAQ,EAAE,uBAAuB;YACjC,MAAM;YACN,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,OAAsB;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,WAAW,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;gBAC1E,CAAC,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;SAC3B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAwB;QAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,CAAC;IAEO,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;YACzB,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;SAC7C,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;CACF;AAtFD,0EAsFC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["import { createHash, randomBytes } from 'node:crypto';\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport type { AuthContext } from '../auth/AuthContext';\n\nexport interface DeviceNotificationIdentity {\n  webId: string;\n  localPart: string;\n}\n\nexport interface DeviceNotificationTicketRecord {\n  digest: string;\n  identity: DeviceNotificationIdentity;\n  deviceSessionId: string;\n  origin: string;\n  expiresAt: number;\n}\n\nexport class DeviceNotificationTicketStore {\n  private readonly records = new Map<string, DeviceNotificationTicketRecord>();\n\n  public mint(input: {\n    identity: DeviceNotificationIdentity;\n    deviceSessionId: string;\n    origin: string;\n    ttlMs: number;\n  }): string {\n    const ticket = randomBytes(32).toString('base64url');\n    this.records.set(this.digest(ticket), {\n      digest: this.digest(ticket),\n      identity: input.identity,\n      deviceSessionId: input.deviceSessionId,\n      origin: new URL(input.origin).origin,\n      expiresAt: Date.now() + input.ttlMs,\n    });\n    return ticket;\n  }\n\n  public consume(ticket: string): DeviceNotificationTicketRecord | undefined {\n    const digest = this.digest(ticket);\n    const record = this.records.get(digest);\n    this.records.delete(digest);\n    if (!record || record.expiresAt < Date.now()) {\n      return undefined;\n    }\n    return record;\n  }\n\n  public size(): number {\n    return this.records.size;\n  }\n\n  public clear(): void {\n    this.records.clear();\n  }\n\n  private digest(ticket: string): string {\n    return createHash('sha256').update(ticket).digest('hex');\n  }\n}\n\nexport interface DeviceNotificationTicketHandlerOptions {\n  webSocketEndpoint: string;\n  origin: string;\n  ticketTtlMs?: number;\n  ticketStore?: DeviceNotificationTicketStore;\n}\n\ntype TicketRequest = IncomingMessage & {\n  auth?: AuthContext | { webId?: string; localPart?: string };\n};\n\nexport class DeviceNotificationTicketHandler {\n  public readonly ticketStore: DeviceNotificationTicketStore;\n  private readonly webSocketEndpoint: string;\n  private readonly origin: string;\n  private readonly ticketTtlMs: number;\n\n  public constructor(options: DeviceNotificationTicketHandlerOptions) {\n    this.webSocketEndpoint = options.webSocketEndpoint;\n    this.origin = new URL(options.origin).origin;\n    this.ticketTtlMs = options.ticketTtlMs ?? 60_000;\n    this.ticketStore = options.ticketStore ?? new DeviceNotificationTicketStore();\n  }\n\n  public async handle(request: TicketRequest, response: ServerResponse): Promise<void> {\n    const identity = this.extractIdentity(request);\n    if (!identity) {\n      this.sendJson(response, 401, { error: 'Unauthorized' });\n      return;\n    }\n    const body = await this.readJson(request);\n    const deviceSessionId = typeof body.deviceSessionId === 'string'\n      ? body.deviceSessionId\n      : typeof body.sessionId === 'string'\n        ? body.sessionId\n        : undefined;\n    const origin = typeof body.origin === 'string' ? body.origin : undefined;\n    if (!deviceSessionId || !origin) {\n      this.sendJson(response, 400, { error: 'deviceSessionId and origin are required' });\n      return;\n    }\n    try {\n      if (new URL(origin).origin !== this.origin) {\n        this.sendJson(response, 400, { error: 'origin must match the notification service origin' });\n        return;\n      }\n    } catch {\n      this.sendJson(response, 400, { error: 'origin must be a valid URL' });\n      return;\n    }\n    const ticket = this.ticketStore.mint({\n      identity,\n      deviceSessionId,\n      origin: this.origin,\n      ttlMs: this.ticketTtlMs,\n    });\n    this.sendJson(response, 201, {\n      protocol: 'xpod.notifications.v1',\n      ticket,\n      webSocketEndpoint: this.webSocketEndpoint,\n      expiresInMs: this.ticketTtlMs,\n    });\n  }\n\n  private extractIdentity(request: TicketRequest): DeviceNotificationIdentity | undefined {\n    const auth = request.auth;\n    const webId = auth && 'webId' in auth && typeof auth.webId === 'string' ? auth.webId : undefined;\n    if (!webId) {\n      return undefined;\n    }\n    return {\n      webId,\n      localPart: auth && 'localPart' in auth && typeof auth.localPart === 'string'\n        ? auth.localPart\n        : deriveLocalPart(webId),\n    };\n  }\n\n  private async readJson(request: IncomingMessage): Promise<Record<string, unknown>> {\n    const chunks: Buffer[] = [];\n    await new Promise<void>((resolve, reject) => {\n      request.on('data', (chunk: Buffer) => chunks.push(chunk));\n      request.on('end', () => resolve());\n      request.on('error', reject);\n    });\n    const body = Buffer.concat(chunks).toString('utf8');\n    return body.length > 0 ? JSON.parse(body) : {};\n  }\n\n  private sendJson(response: ServerResponse, status: number, body: unknown): void {\n    const encoded = JSON.stringify(body);\n    response.writeHead(status, {\n      'Content-Type': 'application/json',\n      'Content-Length': Buffer.byteLength(encoded),\n    });\n    response.end(encoded);\n  }\n}\n\nfunction deriveLocalPart(webId: string): string {\n  try {\n    const url = new URL(webId);\n    const parts = url.pathname.split('/').filter(Boolean);\n    return parts[0] ?? 'unknown';\n  } catch {\n    return 'unknown';\n  }\n}\n"]}

package/dist/api/handlers/DeviceNotificationTicketHandler.jsonld

@@ -0,0 +1,117 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler",
+      "@type": "Class",
+      "requireElement": "DeviceNotificationTicketHandler",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_webSocketEndpoint",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_origin",
+          "range": "xsd:string"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketTtlMs",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "xsd:number",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketStore",
+          "range": {
+            "@type": "ParameterRangeUnion",
+            "parameterRangeElements": [
+              "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketStore",
+              {
+                "@type": "ParameterRangeUndefined"
+              }
+            ]
+          }
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_ticketStore",
+          "memberFieldName": "ticketStore",
+          "range": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketStore"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_webSocketEndpoint",
+          "memberFieldName": "webSocketEndpoint"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_origin",
+          "memberFieldName": "origin"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_ticketTtlMs",
+          "memberFieldName": "ticketTtlMs"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_handle",
+          "memberFieldName": "handle"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_extractIdentity",
+          "memberFieldName": "extractIdentity"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_readJson",
+          "memberFieldName": "readJson"
+        },
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler__member_sendJson",
+          "memberFieldName": "sendJson"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options__constructorArgument",
+          "fields": [
+            {
+              "keyRaw": "webSocketEndpoint",
+              "value": {
+                "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_webSocketEndpoint"
+              }
+            },
+            {
+              "keyRaw": "origin",
+              "value": {
+                "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_origin"
+              }
+            },
+            {
+              "keyRaw": "ticketTtlMs",
+              "value": {
+                "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketTtlMs"
+              }
+            },
+            {
+              "keyRaw": "ticketStore",
+              "value": {
+                "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketStore"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

package/dist/api/runs/InngestRunExecutionBackend.d.ts

@@ -156,7 +156,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         readonly event: "xpod/run.continue_requested";
     }], Omit<Omit<import("inngest").BaseContext<Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "event" | "attempt" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<Inngest<import("inngest").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest").StepOptionsOrId, opts: {
@@ -337,7 +337,7 @@ export declare class InngestRunExecutionBackend implements RunExecutionBackend {
         readonly event: "xpod/run.continue_requested";
     }], Omit<Omit<import("inngest").BaseContext<Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "event" | "attempt" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<Inngest<import("inngest").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest").StepOptionsOrId, opts: {

package/dist/api/tasks/InngestTaskScheduler.d.ts

@@ -133,7 +133,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.materialize_due";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "event" | "attempt" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {
@@ -311,7 +311,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.materialize_due";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "event" | "attempt" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {
@@ -494,7 +494,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.event";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "event" | "attempt" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {
@@ -670,7 +670,7 @@ export declare class InngestTaskScheduler<TContext = StoreContext> {
         readonly event: "xpod/task.event";
     }], Omit<Omit<import("inngest/types").BaseContext<import("inngest").Inngest.Any>, never> & Record<never, never> & {
         logger: import("inngest").Logger;
-    }, "group" | "requestId" | "attempt" | "event" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
+    }, "group" | "requestId" | "event" | "attempt" | "events" | "runId" | "step" | "defer" | "jobId" | "maxAttempts"> & import("inngest/types").FailureEventArgs<EventPayload<any>> & {
         step: {
             sendEvent: (idOrOptions: import("inngest/types").StepOptionsOrId, payload: import("inngest").SendEventPayload) => Promise<import("inngest/types").SendEventOutput<import("inngest").ClientOptionsFromInngest<import("inngest").Inngest<import("inngest/types").ClientOptions>>>>;
             waitForSignal: <TData>(idOrOptions: import("inngest/types").StepOptionsOrId, opts: {

package/dist/components/components.jsonld

@@ -44,6 +44,10 @@
     "undefineds:dist/http/TracingHandler.jsonld",
     "undefineds:dist/http/admin/EdgeNodeCertificateHttpHandler.jsonld",
     "undefineds:dist/http/terminal/TerminalHttpHandler.jsonld",
+    "undefineds:dist/notifications/DeviceNotificationHub.jsonld",
+    "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld",
+    "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld",
+    "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld",
     "undefineds:dist/pods/ReservedSuffixIdentifierGenerator.jsonld",
     "undefineds:dist/identity/drizzle/DrizzleIndexedStorage.jsonld",
     "undefineds:dist/identity/ValidatingIdentityProviderHttpHandler.jsonld",
@@ -128,6 +132,7 @@
     "undefineds:dist/edge/reachability/TcpP2PSignalingSession.jsonld",
     "undefineds:dist/edge/reachability/ManagedClientFetch.jsonld",
     "undefineds:dist/edge/reachability/ManagedClientP2PSmoke.jsonld",
-    "undefineds:dist/edge/reachability/P2PRealnetAcceptance.jsonld"
+    "undefineds:dist/edge/reachability/P2PRealnetAcceptance.jsonld",
+    "undefineds:dist/notifications/device-notification-protocol.jsonld"
   ]
 }

package/dist/components/context.jsonld

@@ -1393,6 +1393,123 @@
           }
         }
       },
+      "DeviceNotificationHub": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationHub.jsonld#DeviceNotificationHub",
+        "@prefix": true,
+        "@context": {
+          "options": {
+            "@id": "undefineds:dist/notifications/DeviceNotificationHub.jsonld#DeviceNotificationHub_options"
+          }
+        }
+      },
+      "DeviceNotificationHubOptions": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationHub.jsonld#DeviceNotificationHubOptions",
+        "@prefix": true,
+        "@context": {}
+      },
+      "OpenDeviceNotificationConnectionInput": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationHub.jsonld#OpenDeviceNotificationConnectionInput",
+        "@prefix": true,
+        "@context": {}
+      },
+      "DeviceNotificationConnectionHandle": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationHub.jsonld#DeviceNotificationConnectionHandle",
+        "@prefix": true,
+        "@context": {}
+      },
+      "DeviceNotificationPublishInput": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationHub.jsonld#DeviceNotificationPublishInput",
+        "@prefix": true,
+        "@context": {}
+      },
+      "DeviceNotificationResourceListener": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourceListener",
+        "@prefix": true,
+        "@context": {
+          "options_origin": {
+            "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourceListener_options_origin"
+          },
+          "options_hub": {
+            "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourceListener_options_hub"
+          },
+          "origin": {
+            "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourceListener_options_origin"
+          },
+          "hub": {
+            "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourceListener_options_hub"
+          }
+        }
+      },
+      "DeviceNotificationResourcePublisher": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourcePublisher",
+        "@prefix": true,
+        "@context": {}
+      },
+      "DeviceNotificationResourceListenerOptions": {
+        "@id": "undefineds:dist/notifications/DeviceNotificationResourceListener.jsonld#DeviceNotificationResourceListenerOptions",
+        "@prefix": true,
+        "@context": {}
+      },
+      "DeviceNotificationWebSocketServer": {
+        "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer",
+        "@prefix": true,
+        "@context": {
+          "options_hub": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_hub"
+          },
+          "options_ticketStore": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_ticketStore"
+          },
+          "options_path": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_path"
+          },
+          "options_heartbeatIntervalMs": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_heartbeatIntervalMs"
+          },
+          "hub": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_hub"
+          },
+          "ticketStore": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_ticketStore"
+          },
+          "path": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_path"
+          },
+          "heartbeatIntervalMs": {
+            "@id": "undefineds:dist/http/DeviceNotificationWebSocketServer.jsonld#DeviceNotificationWebSocketServer_options_heartbeatIntervalMs"
+          }
+        }
+      },
+      "DeviceNotificationTicketHandler": {
+        "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler",
+        "@prefix": true,
+        "@context": {
+          "options_webSocketEndpoint": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_webSocketEndpoint"
+          },
+          "options_origin": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_origin"
+          },
+          "options_ticketTtlMs": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketTtlMs"
+          },
+          "options_ticketStore": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketStore"
+          },
+          "webSocketEndpoint": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_webSocketEndpoint"
+          },
+          "origin": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_origin"
+          },
+          "ticketTtlMs": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketTtlMs"
+          },
+          "ticketStore": {
+            "@id": "undefineds:dist/api/handlers/DeviceNotificationTicketHandler.jsonld#DeviceNotificationTicketHandler_options_ticketStore"
+          }
+        }
+      },
       "ReservedSuffixIdentifierGenerator": {
         "@id": "undefineds:dist/pods/ReservedSuffixIdentifierGenerator.jsonld#ReservedSuffixIdentifierGenerator",
         "@prefix": true,
@@ -3813,6 +3930,11 @@
         "@id": "undefineds:dist/edge/reachability/P2PRealnetAcceptance.jsonld#P2PRealnetAcceptanceVerification",
         "@prefix": true,
         "@context": {}
+      },
+      "ParseClientFrameOptions": {
+        "@id": "undefineds:dist/notifications/device-notification-protocol.jsonld#ParseClientFrameOptions",
+        "@prefix": true,
+        "@context": {}
       }
     }
   ]

package/dist/http/DeviceNotificationWebSocketServer.d.ts

@@ -0,0 +1,29 @@
+import type { IncomingMessage, Server } from 'node:http';
+import type { Duplex } from 'node:stream';
+import type { DeviceNotificationTicketStore } from '../api/handlers/DeviceNotificationTicketHandler';
+import { DeviceNotificationHub } from '../notifications/DeviceNotificationHub';
+export interface DeviceNotificationWebSocketServerOptions {
+    hub: DeviceNotificationHub;
+    ticketStore: DeviceNotificationTicketStore;
+    path?: string;
+    heartbeatIntervalMs?: number;
+}
+export declare class DeviceNotificationWebSocketServer {
+    private readonly hub;
+    private readonly ticketStore;
+    private readonly path;
+    private readonly heartbeatIntervalMs;
+    private readonly wss;
+    private readonly sockets;
+    private readonly socketConnections;
+    private readonly alive;
+    private heartbeatTimer?;
+    constructor(options: DeviceNotificationWebSocketServerOptions);
+    attach(server: Server): void;
+    handleUpgrade(request: IncomingMessage, socket: Duplex, head: Buffer): void;
+    stop(): void;
+    private handleFrame;
+    private reject;
+    private startHeartbeat;
+    private cleanupSocket;
+}

package/dist/http/DeviceNotificationWebSocketServer.js

@@ -0,0 +1,138 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceNotificationWebSocketServer = void 0;
+const ws_1 = require("ws");
+const device_notification_protocol_1 = require("../notifications/device-notification-protocol");
+class DeviceNotificationWebSocketServer {
+    constructor(options) {
+        this.wss = new ws_1.WebSocketServer({ noServer: true });
+        this.sockets = new Set();
+        this.socketConnections = new Map();
+        this.alive = new Map();
+        this.hub = options.hub;
+        this.ticketStore = options.ticketStore;
+        this.path = options.path ?? '/v1/notifications/ws';
+        this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? 30_000;
+        this.startHeartbeat();
+    }
+    attach(server) {
+        server.on('upgrade', (request, socket, head) => {
+            this.handleUpgrade(request, socket, head);
+        });
+    }
+    handleUpgrade(request, socket, head) {
+        const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);
+        if (url.pathname !== this.path) {
+            return;
+        }
+        const { protocolAccepted, ticket } = (0, device_notification_protocol_1.parseDeviceNotificationSubprotocols)(request.headers['sec-websocket-protocol']);
+        if (!protocolAccepted || !ticket) {
+            this.reject(socket, 401, 'Missing notification subprotocol');
+            return;
+        }
+        const record = this.ticketStore.consume(ticket);
+        if (!record) {
+            this.reject(socket, 401, 'Invalid notification ticket');
+            return;
+        }
+        this.wss.handleUpgrade(request, socket, head, (ws) => {
+            this.sockets.add(ws);
+            const connection = this.hub.openConnection({
+                identity: record.identity,
+                deviceSessionId: record.deviceSessionId,
+                send: (frame) => {
+                    if (ws.readyState !== ws_1.WebSocket.OPEN) {
+                        return false;
+                    }
+                    ws.send((0, device_notification_protocol_1.serializeServerFrame)(frame));
+                    return true;
+                },
+                close: (code, reason) => {
+                    ws.close(code, reason);
+                },
+            });
+            this.socketConnections.set(ws, connection.connectionId);
+            this.alive.set(ws, true);
+            ws.on('pong', () => {
+                this.alive.set(ws, true);
+            });
+            ws.on('message', (data) => {
+                void (async () => {
+                    try {
+                        const frame = (0, device_notification_protocol_1.parseClientFrame)(JSON.parse(data.toString()), {
+                            origin: record.origin,
+                        });
+                        await this.handleFrame(connection.connectionId, frame);
+                    }
+                    catch (error) {
+                        ws.send((0, device_notification_protocol_1.serializeServerFrame)((0, device_notification_protocol_1.createProtocolErrorFrame)('bad-frame', error.message)));
+                    }
+                })();
+            });
+            ws.on('close', () => {
+                this.cleanupSocket(ws);
+            });
+            ws.on('error', () => {
+                this.cleanupSocket(ws);
+            });
+        });
+    }
+    stop() {
+        for (const socket of this.sockets) {
+            socket.close();
+        }
+        this.sockets.clear();
+        this.socketConnections.clear();
+        this.alive.clear();
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = undefined;
+        }
+        this.wss.close();
+    }
+    async handleFrame(connectionId, frame) {
+        switch (frame.type) {
+            case 'hello':
+                this.hub.hello(connectionId, frame.resumeFrom);
+                break;
+            case 'register':
+                await this.hub.registerTopics(connectionId, frame.requestId, frame.topics);
+                break;
+            case 'unregister':
+                await this.hub.unregisterTopics(connectionId, frame.requestId, frame.topics);
+                break;
+            case 'ack':
+                this.hub.ack(connectionId, frame.sequence);
+                break;
+        }
+    }
+    reject(socket, status, message) {
+        socket.write(`HTTP/1.1 ${status} ${message}\r\nConnection: close\r\n\r\n`);
+        socket.end();
+    }
+    startHeartbeat() {
+        this.heartbeatTimer = setInterval(() => {
+            for (const socket of this.sockets) {
+                if (this.alive.get(socket) === false) {
+                    this.cleanupSocket(socket);
+                    socket.close();
+                    continue;
+                }
+                this.alive.set(socket, false);
+                socket.ping();
+            }
+        }, this.heartbeatIntervalMs);
+        this.heartbeatTimer.unref?.();
+    }
+    cleanupSocket(socket) {
+        this.sockets.delete(socket);
+        this.alive.delete(socket);
+        const connectionId = this.socketConnections.get(socket);
+        this.socketConnections.delete(socket);
+        if (connectionId) {
+            this.hub.closeConnection(connectionId);
+        }
+    }
+}
+exports.DeviceNotificationWebSocketServer = DeviceNotificationWebSocketServer;
+//# sourceMappingURL=DeviceNotificationWebSocketServer.js.map