easy-ping 0.1.0

package/dist/plugins/preferences-react.js

@@ -0,0 +1,101 @@
+"use client";
+"use client";
+
+// src/plugins/preferences/react.ts
+import { useCallback, useEffect, useMemo, useState } from "react";
+var matches = (row, key) => row.type === key.type && row.channel === key.channel;
+function usePreferences(options = {}) {
+  const { baseUrl = "/api/notifications", fetch: providedFetch } = options;
+  const doFetch = useMemo(
+    () => providedFetch ?? ((...args) => globalThis.fetch(...args)),
+    [providedFetch]
+  );
+  const [preferences, setPreferences] = useState([]);
+  const [defaultEnabled, setDefaultEnabled] = useState(true);
+  const [isLoading, setIsLoading] = useState(true);
+  const [error, setError] = useState(null);
+  const refresh = useCallback(async () => {
+    try {
+      const response = await doFetch(`${baseUrl}/preferences`);
+      if (!response.ok) throw new Error(`GET /preferences failed: ${response.status}`);
+      const body = await response.json();
+      setPreferences(body.preferences);
+      setDefaultEnabled(body.defaultEnabled);
+      setError(null);
+    } catch (caught) {
+      setError(caught instanceof Error ? caught : new Error(String(caught)));
+    } finally {
+      setIsLoading(false);
+    }
+  }, [baseUrl, doFetch]);
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+  const persist = useCallback(
+    async (input, optimistic) => {
+      const previous = preferences;
+      setPreferences((rows) => {
+        const existing = rows.find((row) => matches(row, input));
+        if (existing) {
+          return rows.map((row) => matches(row, input) ? { ...row, ...optimistic } : row);
+        }
+        return [
+          ...rows,
+          {
+            userId: "",
+            type: input.type,
+            channel: input.channel,
+            enabled: true,
+            frequency: "instant",
+            ...optimistic
+          }
+        ];
+      });
+      try {
+        const response = await doFetch(`${baseUrl}/preferences`, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify(input)
+        });
+        if (!response.ok) throw new Error(`POST /preferences failed: ${response.status}`);
+      } catch (caught) {
+        setPreferences(previous);
+        setError(caught instanceof Error ? caught : new Error(String(caught)));
+        throw caught;
+      }
+    },
+    [baseUrl, doFetch, preferences]
+  );
+  return {
+    preferences,
+    defaultEnabled,
+    isLoading,
+    error,
+    isEnabled: useCallback(
+      (key) => {
+        const row = preferences.find((candidate) => matches(candidate, key));
+        return row ? row.enabled && row.frequency !== "off" : defaultEnabled;
+      },
+      [preferences, defaultEnabled]
+    ),
+    setEnabled: useCallback(
+      (key, enabled) => persist(
+        { ...key, enabled, frequency: enabled ? "instant" : "off" },
+        { enabled, frequency: enabled ? "instant" : "off" }
+      ),
+      [persist]
+    ),
+    setFrequency: useCallback(
+      (key, frequency) => persist(
+        { ...key, enabled: frequency !== "off", frequency },
+        { enabled: frequency !== "off", frequency }
+      ),
+      [persist]
+    ),
+    refresh
+  };
+}
+export {
+  usePreferences
+};
+//# sourceMappingURL=preferences-react.js.map

package/dist/plugins/preferences-react.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/plugins/preferences/react.ts"],"sourcesContent":["\"use client\";\n\nimport { useCallback, useEffect, useMemo, useState } from \"react\";\nimport type { Channel, Frequency } from \"../../core/types\";\nimport type { PreferenceView, UpdatePreferenceInput } from \"./client\";\n\nexport type UsePreferencesOptions = {\n  baseUrl?: string | undefined;\n  fetch?: typeof globalThis.fetch | undefined;\n};\n\nexport type PreferenceKey = { type: string; channel: Channel };\n\nexport type UsePreferencesResult = {\n  preferences: readonly PreferenceView[];\n  defaultEnabled: boolean;\n  isLoading: boolean;\n  error: Error | null;\n  /** Resolved value for a cell, falling back to the configured default. */\n  isEnabled: (key: PreferenceKey) => boolean;\n  setEnabled: (key: PreferenceKey, enabled: boolean) => Promise<void>;\n  setFrequency: (key: PreferenceKey, frequency: Frequency) => Promise<void>;\n  refresh: () => Promise<void>;\n};\n\nconst matches = (row: PreferenceView, key: PreferenceKey) =>\n  row.type === key.type && row.channel === key.channel;\n\n/** Headless: state and persistence only, no markup. */\nexport function usePreferences(options: UsePreferencesOptions = {}): UsePreferencesResult {\n  const { baseUrl = \"/api/notifications\", fetch: providedFetch } = options;\n\n  const doFetch = useMemo(\n    () =>\n      providedFetch ??\n      ((...args: Parameters<typeof globalThis.fetch>) => globalThis.fetch(...args)),\n    [providedFetch],\n  );\n\n  const [preferences, setPreferences] = useState<readonly PreferenceView[]>([]);\n  const [defaultEnabled, setDefaultEnabled] = useState(true);\n  const [isLoading, setIsLoading] = useState(true);\n  const [error, setError] = useState<Error | null>(null);\n\n  const refresh = useCallback(async () => {\n    try {\n      const response = await doFetch(`${baseUrl}/preferences`);\n      if (!response.ok) throw new Error(`GET /preferences failed: ${response.status}`);\n\n      const body = (await response.json()) as {\n        preferences: PreferenceView[];\n        defaultEnabled: boolean;\n      };\n\n      setPreferences(body.preferences);\n      setDefaultEnabled(body.defaultEnabled);\n      setError(null);\n    } catch (caught) {\n      setError(caught instanceof Error ? caught : new Error(String(caught)));\n    } finally {\n      setIsLoading(false);\n    }\n  }, [baseUrl, doFetch]);\n\n  useEffect(() => {\n    void refresh();\n  }, [refresh]);\n\n  const persist = useCallback(\n    async (input: UpdatePreferenceInput, optimistic: Partial<PreferenceView>) => {\n      const previous = preferences;\n\n      // A preference toggle that lags behind the network feels broken, so\n      // apply immediately and revert if the write fails.\n      setPreferences((rows) => {\n        const existing = rows.find((row) => matches(row, input));\n        if (existing) {\n          return rows.map((row) => (matches(row, input) ? { ...row, ...optimistic } : row));\n        }\n        return [\n          ...rows,\n          {\n            userId: \"\",\n            type: input.type,\n            channel: input.channel,\n            enabled: true,\n            frequency: \"instant\" as Frequency,\n            ...optimistic,\n          },\n        ];\n      });\n\n      try {\n        const response = await doFetch(`${baseUrl}/preferences`, {\n          method: \"POST\",\n          headers: { \"content-type\": \"application/json\" },\n          body: JSON.stringify(input),\n        });\n        if (!response.ok) throw new Error(`POST /preferences failed: ${response.status}`);\n      } catch (caught) {\n        setPreferences(previous);\n        setError(caught instanceof Error ? caught : new Error(String(caught)));\n        throw caught;\n      }\n    },\n    [baseUrl, doFetch, preferences],\n  );\n\n  return {\n    preferences,\n    defaultEnabled,\n    isLoading,\n    error,\n\n    isEnabled: useCallback(\n      (key: PreferenceKey) => {\n        const row = preferences.find((candidate) => matches(candidate, key));\n        return row ? row.enabled && row.frequency !== \"off\" : defaultEnabled;\n      },\n      [preferences, defaultEnabled],\n    ),\n\n    setEnabled: useCallback(\n      (key: PreferenceKey, enabled: boolean) =>\n        persist(\n          { ...key, enabled, frequency: enabled ? \"instant\" : \"off\" },\n          { enabled, frequency: enabled ? \"instant\" : \"off\" },\n        ),\n      [persist],\n    ),\n\n    setFrequency: useCallback(\n      (key: PreferenceKey, frequency: Frequency) =>\n        persist(\n          { ...key, enabled: frequency !== \"off\", frequency },\n          { enabled: frequency !== \"off\", frequency },\n        ),\n      [persist],\n    ),\n\n    refresh,\n  };\n}\n\nexport type { PreferenceView, UpdatePreferenceInput } from \"./client\";\n"],"mappings":";;;;AAEA,SAAS,aAAa,WAAW,SAAS,gBAAgB;AAuB1D,IAAM,UAAU,CAAC,KAAqB,QACpC,IAAI,SAAS,IAAI,QAAQ,IAAI,YAAY,IAAI;AAGxC,SAAS,eAAe,UAAiC,CAAC,GAAyB;AACxF,QAAM,EAAE,UAAU,sBAAsB,OAAO,cAAc,IAAI;AAEjE,QAAM,UAAU;AAAA,IACd,MACE,kBACC,IAAI,SAA8C,WAAW,MAAM,GAAG,IAAI;AAAA,IAC7E,CAAC,aAAa;AAAA,EAChB;AAEA,QAAM,CAAC,aAAa,cAAc,IAAI,SAAoC,CAAC,CAAC;AAC5E,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,SAAS,IAAI;AACzD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAC/C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AAErD,QAAM,UAAU,YAAY,YAAY;AACtC,QAAI;AACF,YAAM,WAAW,MAAM,QAAQ,GAAG,OAAO,cAAc;AACvD,UAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,4BAA4B,SAAS,MAAM,EAAE;AAE/E,YAAM,OAAQ,MAAM,SAAS,KAAK;AAKlC,qBAAe,KAAK,WAAW;AAC/B,wBAAkB,KAAK,cAAc;AACrC,eAAS,IAAI;AAAA,IACf,SAAS,QAAQ;AACf,eAAS,kBAAkB,QAAQ,SAAS,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,IACvE,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,SAAS,OAAO,CAAC;AAErB,YAAU,MAAM;AACd,SAAK,QAAQ;AAAA,EACf,GAAG,CAAC,OAAO,CAAC;AAEZ,QAAM,UAAU;AAAA,IACd,OAAO,OAA8B,eAAwC;AAC3E,YAAM,WAAW;AAIjB,qBAAe,CAAC,SAAS;AACvB,cAAM,WAAW,KAAK,KAAK,CAAC,QAAQ,QAAQ,KAAK,KAAK,CAAC;AACvD,YAAI,UAAU;AACZ,iBAAO,KAAK,IAAI,CAAC,QAAS,QAAQ,KAAK,KAAK,IAAI,EAAE,GAAG,KAAK,GAAG,WAAW,IAAI,GAAI;AAAA,QAClF;AACA,eAAO;AAAA,UACL,GAAG;AAAA,UACH;AAAA,YACE,QAAQ;AAAA,YACR,MAAM,MAAM;AAAA,YACZ,SAAS,MAAM;AAAA,YACf,SAAS;AAAA,YACT,WAAW;AAAA,YACX,GAAG;AAAA,UACL;AAAA,QACF;AAAA,MACF,CAAC;AAED,UAAI;AACF,cAAM,WAAW,MAAM,QAAQ,GAAG,OAAO,gBAAgB;AAAA,UACvD,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,UAC9C,MAAM,KAAK,UAAU,KAAK;AAAA,QAC5B,CAAC;AACD,YAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,6BAA6B,SAAS,MAAM,EAAE;AAAA,MAClF,SAAS,QAAQ;AACf,uBAAe,QAAQ;AACvB,iBAAS,kBAAkB,QAAQ,SAAS,IAAI,MAAM,OAAO,MAAM,CAAC,CAAC;AACrE,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAC,SAAS,SAAS,WAAW;AAAA,EAChC;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IAEA,WAAW;AAAA,MACT,CAAC,QAAuB;AACtB,cAAM,MAAM,YAAY,KAAK,CAAC,cAAc,QAAQ,WAAW,GAAG,CAAC;AACnE,eAAO,MAAM,IAAI,WAAW,IAAI,cAAc,QAAQ;AAAA,MACxD;AAAA,MACA,CAAC,aAAa,cAAc;AAAA,IAC9B;AAAA,IAEA,YAAY;AAAA,MACV,CAAC,KAAoB,YACnB;AAAA,QACE,EAAE,GAAG,KAAK,SAAS,WAAW,UAAU,YAAY,MAAM;AAAA,QAC1D,EAAE,SAAS,WAAW,UAAU,YAAY,MAAM;AAAA,MACpD;AAAA,MACF,CAAC,OAAO;AAAA,IACV;AAAA,IAEA,cAAc;AAAA,MACZ,CAAC,KAAoB,cACnB;AAAA,QACE,EAAE,GAAG,KAAK,SAAS,cAAc,OAAO,UAAU;AAAA,QAClD,EAAE,SAAS,cAAc,OAAO,UAAU;AAAA,MAC5C;AAAA,MACF,CAAC,OAAO;AAAA,IACV;AAAA,IAEA;AAAA,EACF;AACF;","names":[]}

package/dist/plugins/preferences.cjs

@@ -0,0 +1,147 @@
+'use strict';
+
+// src/core/base64url.ts
+function encodeBase64Url(input) {
+  const bytes = typeof input === "string" ? new TextEncoder().encode(input) : input;
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+
+// src/core/tokens.ts
+var encoder = new TextEncoder();
+async function hmacKey(secret) {
+  return crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign", "verify"]
+  );
+}
+async function signToken(secret, claims) {
+  const body = encodeBase64Url(JSON.stringify(claims));
+  const signature = await crypto.subtle.sign("HMAC", await hmacKey(secret), encoder.encode(body));
+  return `${body}.${encodeBase64Url(new Uint8Array(signature))}`;
+}
+var DEFAULT_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;
+var expiresIn = (seconds, now = /* @__PURE__ */ new Date()) => Math.floor(now.getTime() / 1e3) + seconds;
+
+// src/plugins/preferences/index.ts
+var UNSUBSCRIBE_PURPOSE = "unsubscribe";
+var TABLE = "notification_preference";
+var key = (userId, type, channel) => `${userId} ${type} ${channel}`;
+function buildUnsubscribeToken(secret, userId, type, channel, ttlSeconds = DEFAULT_TOKEN_TTL_SECONDS) {
+  return signToken(secret, {
+    uid: userId,
+    purpose: UNSUBSCRIBE_PURPOSE,
+    exp: expiresIn(ttlSeconds),
+    data: { type, channel }
+  });
+}
+function preferences(options = {}) {
+  const defaultEnabled = options.defaultEnabled ?? true;
+  const alwaysSend = new Set(options.alwaysSend ?? []);
+  let ctx;
+  const isAllowed = (userId, type, channel, rows) => {
+    const row = rows.get(key(userId, type, channel));
+    return row ? row.enabled && row.frequency !== "off" : defaultEnabled;
+  };
+  const load = (userIds) => ctx.store.find(TABLE, { userId: { in: [...userIds] } });
+  const save = (row) => ctx.store.upsert(TABLE, [row], { onConflict: ["userId", "type", "channel"] });
+  return {
+    id: "preferences",
+    init: (context) => {
+      ctx = context;
+    },
+    schema: {
+      notificationPreference: {
+        tableName: TABLE,
+        fields: {
+          userId: { type: "string", required: true },
+          type: { type: "string", required: true },
+          channel: { type: "string", required: true },
+          enabled: { type: "boolean", required: true, default: true },
+          frequency: { type: "string", required: true, default: "instant" }
+        },
+        primaryKey: ["userId", "type", "channel"]
+      }
+    },
+    hooks: {
+      /** One query per send; doing this per recipient would be an N+1. */
+      prepare: async (context) => {
+        if (alwaysSend.has(context.type)) return /* @__PURE__ */ new Map();
+        const rows = await load(context.recipients.map((recipient) => recipient.userId));
+        return new Map(rows.map((row) => [key(row.userId, row.type, row.channel), row]));
+      },
+      resolveChannels: (context) => {
+        if (alwaysSend.has(context.type)) return context.decisions;
+        if (!(context.prepared instanceof Map)) {
+          return context.decisions.map((decision) => ({ ...decision, action: "skip" }));
+        }
+        const rows = context.prepared;
+        return context.decisions.map(
+          (decision) => isAllowed(context.recipient.userId, context.type, decision.channel, rows) ? decision : { ...decision, action: "skip" }
+        );
+      }
+    },
+    routes: [
+      {
+        path: "/preferences",
+        method: "GET",
+        scope: { type: "user" },
+        handler: async ({ userId }) => {
+          const rows = await load([userId ?? ""]);
+          return Response.json({ preferences: rows, defaultEnabled });
+        }
+      },
+      {
+        path: "/preferences",
+        method: "POST",
+        scope: { type: "user" },
+        handler: async ({ request, userId }) => {
+          const body = await request.json().catch(() => null);
+          if (!body?.type || !body.channel) {
+            return Response.json({ error: "type and channel are required" }, { status: 400 });
+          }
+          await save({
+            userId: userId ?? "",
+            type: body.type,
+            channel: body.channel,
+            enabled: body.enabled ?? true,
+            frequency: body.frequency ?? "instant"
+          });
+          return Response.json({ ok: true });
+        }
+      },
+      {
+        // Reached from a mail client with no session, so it is authenticated
+        // by the signature on the link itself.
+        path: "/unsubscribe",
+        method: "POST",
+        scope: { type: "signed", purpose: UNSUBSCRIBE_PURPOSE },
+        handler: async ({ claims }) => {
+          const type = claims?.data?.type;
+          const channel = claims?.data?.channel;
+          if (!claims || !type || !channel) {
+            return Response.json({ error: "invalid token" }, { status: 400 });
+          }
+          await save({
+            userId: claims.uid,
+            type,
+            channel,
+            enabled: false,
+            frequency: "off"
+          });
+          return Response.json({ ok: true, unsubscribed: { type, channel } });
+        }
+      }
+    ]
+  };
+}
+
+exports.UNSUBSCRIBE_PURPOSE = UNSUBSCRIBE_PURPOSE;
+exports.buildUnsubscribeToken = buildUnsubscribeToken;
+exports.preferences = preferences;
+//# sourceMappingURL=preferences.cjs.map
+//# sourceMappingURL=preferences.cjs.map

package/dist/plugins/preferences.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/base64url.ts","../../src/core/tokens.ts","../../src/plugins/preferences/index.ts"],"names":[],"mappings":";;;AAEO,SAAS,gBAAgB,KAAA,EAAoC;AAClE,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA,GAAI,KAAA;AAC5E,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,MAAA,IAAU,MAAA,CAAO,aAAa,IAAI,CAAA;AAC5D,EAAA,OAAO,IAAA,CAAK,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/E;;;ACMA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAEhC,eAAe,QAAQ,MAAA,EAAoC;AACzD,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACrB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,GACnB;AACF;AAEA,eAAsB,SAAA,CAAU,QAAgB,MAAA,EAAsC;AACpF,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AACnD,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAC9F,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,eAAA,CAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AAC9D;AA2CO,IAAM,yBAAA,GAA4B,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,EAAA;AAEjD,IAAM,SAAA,GAAY,CAAC,OAAA,EAAiB,GAAA,mBAAY,IAAI,IAAA,EAAK,KAC9D,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,EAAQ,GAAI,GAAI,CAAA,GAAI,OAAA;;;ACjE9B,IAAM,mBAAA,GAAsB;AAEnC,IAAM,KAAA,GAAQ,yBAAA;AAkBd,IAAM,GAAA,GAAM,CAAC,MAAA,EAAgB,IAAA,EAAc,OAAA,KAAoB,GAAG,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAIpF,SAAS,sBACd,MAAA,EACA,MAAA,EACA,IAAA,EACA,OAAA,EACA,aAAa,yBAAA,EACI;AACjB,EAAA,OAAO,UAAU,MAAA,EAAQ;AAAA,IACvB,GAAA,EAAK,MAAA;AAAA,IACL,OAAA,EAAS,mBAAA;AAAA,IACT,GAAA,EAAK,UAAU,UAAU,CAAA;AAAA,IACzB,IAAA,EAAM,EAAE,IAAA,EAAM,OAAA;AAAQ,GACvB,CAAA;AACH;AAEO,SAAS,WAAA,CAAY,OAAA,GAA8B,EAAC,EAAkC;AAC3F,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,IAAA;AACjD,EAAA,MAAM,aAAa,IAAI,GAAA,CAAI,OAAA,CAAQ,UAAA,IAAc,EAAE,CAAA;AAGnD,EAAA,IAAI,GAAA;AAEJ,EAAA,MAAM,SAAA,GAAY,CAAC,MAAA,EAAgB,IAAA,EAAc,SAAkB,IAAA,KAA8B;AAC/F,IAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,IAAI,MAAA,EAAQ,IAAA,EAAM,OAAO,CAAC,CAAA;AAC/C,IAAA,OAAO,GAAA,GAAM,GAAA,CAAI,OAAA,IAAW,GAAA,CAAI,cAAc,KAAA,GAAQ,cAAA;AAAA,EACxD,CAAA;AAEA,EAAA,MAAM,OAAO,CAAC,OAAA,KACZ,GAAA,CAAI,KAAA,CAAM,KAAoB,KAAA,EAAO,EAAE,MAAA,EAAQ,EAAE,IAAI,CAAC,GAAG,OAAO,CAAA,IAAK,CAAA;AAEvE,EAAA,MAAM,OAAO,CAAC,GAAA,KACZ,GAAA,CAAI,KAAA,CAAM,OAAO,KAAA,EAAO,CAAC,GAAG,CAAA,EAAG,EAAE,UAAA,EAAY,CAAC,UAAU,MAAA,EAAQ,SAAS,GAAG,CAAA;AAE9E,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,aAAA;AAAA,IAEJ,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,sBAAA,EAAwB;AAAA,QACtB,SAAA,EAAW,KAAA;AAAA,QACX,MAAA,EAAQ;AAAA,UACN,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,UACzC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,UACvC,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,UAC1C,SAAS,EAAE,IAAA,EAAM,WAAW,QAAA,EAAU,IAAA,EAAM,SAAS,IAAA,EAAK;AAAA,UAC1D,WAAW,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,SAAA;AAAU,SAClE;AAAA,QACA,UAAA,EAAY,CAAC,QAAA,EAAU,MAAA,EAAQ,SAAS;AAAA;AAC1C,KACF;AAAA,IAEA,KAAA,EAAO;AAAA;AAAA,MAEL,OAAA,EAAS,OAAO,OAAA,KAA0D;AACxE,QAAA,IAAI,WAAW,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,EAAG,2BAAW,GAAA,EAAI;AAEjD,QAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAC,SAAA,KAAc,SAAA,CAAU,MAAM,CAAC,CAAA;AAC/E,QAAA,OAAO,IAAI,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,CAAC,QAAQ,CAAC,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,IAAI,IAAA,EAAM,GAAA,CAAI,OAAO,CAAA,EAAG,GAAG,CAAC,CAAC,CAAA;AAAA,MACjF,CAAA;AAAA,MAEA,eAAA,EAAiB,CAAC,OAAA,KAAoC;AACpD,QAAA,IAAI,WAAW,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,SAAU,OAAA,CAAQ,SAAA;AAKjD,QAAA,IAAI,EAAE,OAAA,CAAQ,QAAA,YAAoB,GAAA,CAAA,EAAM;AACtC,UAAA,OAAO,OAAA,CAAQ,SAAA,CAAU,GAAA,CAAI,CAAC,QAAA,MAAc,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAgB,CAAE,CAAA;AAAA,QACvF;AAEA,QAAA,MAAM,OAAO,OAAA,CAAQ,QAAA;AAErB,QAAA,OAAO,QAAQ,SAAA,CAAU,GAAA;AAAA,UAAqB,CAAC,QAAA,KAC7C,SAAA,CAAU,OAAA,CAAQ,SAAA,CAAU,QAAQ,OAAA,CAAQ,IAAA,EAAM,QAAA,CAAS,OAAA,EAAS,IAAI,CAAA,GACpE,QAAA,GACA,EAAE,GAAG,QAAA,EAAU,QAAQ,MAAA;AAAO,SACpC;AAAA,MACF;AAAA,KACF;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN;AAAA,QACE,IAAA,EAAM,cAAA;AAAA,QACN,MAAA,EAAQ,KAAA;AAAA,QACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,QACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,UAAA,MAAM,OAAO,MAAM,IAAA,CAAK,CAAC,MAAA,IAAU,EAAE,CAAC,CAAA;AACtC,UAAA,OAAO,SAAS,IAAA,CAAK,EAAE,WAAA,EAAa,IAAA,EAAM,gBAAgB,CAAA;AAAA,QAC5D;AAAA,OACF;AAAA,MAEA;AAAA,QACE,IAAA,EAAM,cAAA;AAAA,QACN,MAAA,EAAQ,MAAA;AAAA,QACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,QACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,UAAA,MAAM,OAAQ,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAEnD,UAAA,IAAI,CAAC,IAAA,EAAM,IAAA,IAAQ,CAAC,KAAK,OAAA,EAAS;AAChC,YAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,iCAAgC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,UAClF;AAGA,UAAA,MAAM,IAAA,CAAK;AAAA,YACT,QAAQ,MAAA,IAAU,EAAA;AAAA,YAClB,MAAM,IAAA,CAAK,IAAA;AAAA,YACX,SAAS,IAAA,CAAK,OAAA;AAAA,YACd,OAAA,EAAS,KAAK,OAAA,IAAW,IAAA;AAAA,YACzB,SAAA,EAAW,KAAK,SAAA,IAAa;AAAA,WAC9B,CAAA;AAED,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,QACnC;AAAA,OACF;AAAA,MAEA;AAAA;AAAA;AAAA,QAGE,IAAA,EAAM,cAAA;AAAA,QACN,MAAA,EAAQ,MAAA;AAAA,QACR,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,mBAAA,EAAoB;AAAA,QACtD,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,UAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,EAAM,IAAA;AAC3B,UAAA,MAAM,OAAA,GAAU,QAAQ,IAAA,EAAM,OAAA;AAC9B,UAAA,IAAI,CAAC,MAAA,IAAU,CAAC,IAAA,IAAQ,CAAC,OAAA,EAAS;AAChC,YAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,iBAAgB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,UAClE;AAEA,UAAA,MAAM,IAAA,CAAK;AAAA,YACT,QAAQ,MAAA,CAAO,GAAA;AAAA,YACf,IAAA;AAAA,YACA,OAAA;AAAA,YACA,OAAA,EAAS,KAAA;AAAA,YACT,SAAA,EAAW;AAAA,WACZ,CAAA;AAID,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,IAAA,EAAM,cAAc,EAAE,IAAA,EAAM,OAAA,EAAQ,EAAG,CAAA;AAAA,QACpE;AAAA;AACF;AACF,GACF;AACF","file":"preferences.cjs","sourcesContent":["// Web APIs, not Buffer: this runs on Workers and Vercel Edge.\n\nexport function encodeBase64Url(input: string | Uint8Array): string {\n  const bytes = typeof input === \"string\" ? new TextEncoder().encode(input) : input;\n  let binary = \"\";\n  for (const byte of bytes) binary += String.fromCharCode(byte);\n  return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n// Uint8Array<ArrayBuffer>: bare Uint8Array widens and is not a BufferSource.\nexport function decodeBase64UrlBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  try {\n    const binary = atob(value.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    return Uint8Array.from(binary, (char) => char.charCodeAt(0));\n  } catch {\n    return null;\n  }\n}\n\nexport function decodeBase64Url(value: string): string | null {\n  const bytes = decodeBase64UrlBytes(value);\n  return bytes ? new TextDecoder().decode(bytes) : null;\n}\n","import { decodeBase64Url, decodeBase64UrlBytes, encodeBase64Url } from \"./base64url\";\n\nexport type TokenClaims = {\n  /** Subject — the user the token acts for. */\n  uid: string;\n  /** What the token is allowed to do. Verification requires an exact match. */\n  purpose: string;\n  /** Expiry, epoch seconds. */\n  exp: number;\n  /** Free-form, purpose-specific. */\n  data?: Record<string, string>;\n};\n\nconst encoder = new TextEncoder();\n\nasync function hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\nexport async function signToken(secret: string, claims: TokenClaims): Promise<string> {\n  const body = encodeBase64Url(JSON.stringify(claims));\n  const signature = await crypto.subtle.sign(\"HMAC\", await hmacKey(secret), encoder.encode(body));\n  return `${body}.${encodeBase64Url(new Uint8Array(signature))}`;\n}\n\n/** null for every failure mode. Distinguishing them tells an attacker which part to fix. */\nexport async function verifyToken(\n  secret: string,\n  token: string,\n  purpose: string,\n  now: Date = new Date(),\n): Promise<TokenClaims | null> {\n  const separator = token.lastIndexOf(\".\");\n  if (separator <= 0) return null;\n\n  const body = token.slice(0, separator);\n  const signature = decodeBase64UrlBytes(token.slice(separator + 1));\n  if (!signature) return null;\n\n  // crypto.subtle.verify is constant-time.\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    await hmacKey(secret),\n    signature,\n    encoder.encode(body),\n  );\n  if (!valid) return null;\n\n  const decoded = decodeBase64Url(body);\n  if (!decoded) return null;\n\n  let claims: TokenClaims;\n  try {\n    claims = JSON.parse(decoded) as TokenClaims;\n  } catch {\n    return null;\n  }\n\n  if (typeof claims?.uid !== \"string\" || typeof claims.exp !== \"number\") return null;\n  // Scoped so an unsubscribe token can never be replayed against another route.\n  if (claims.purpose !== purpose) return null;\n  if (claims.exp * 1000 <= now.getTime()) return null;\n\n  return claims;\n}\n\nexport const DEFAULT_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;\n\nexport const expiresIn = (seconds: number, now: Date = new Date()): number =>\n  Math.floor(now.getTime() / 1000) + seconds;\n","import type {\n  ChannelDecision,\n  EasyPingPlugin,\n  PluginInitContext,\n  PrepareContext,\n  ResolveChannelsContext,\n} from \"../../core/plugin\";\nimport { DEFAULT_TOKEN_TTL_SECONDS, expiresIn, signToken } from \"../../core/tokens\";\nimport type { Channel, Frequency } from \"../../core/types\";\n\nexport const UNSUBSCRIBE_PURPOSE = \"unsubscribe\";\n\nconst TABLE = \"notification_preference\";\n\nexport type PreferenceRow = {\n  userId: string;\n  type: string;\n  channel: Channel;\n  enabled: boolean;\n  frequency: Frequency;\n};\n\nexport type PreferencesOptions = {\n  /** What an absent row means. Flip to false for opt-in-only notifications. */\n  defaultEnabled?: boolean;\n  /** Types that ignore preferences entirely: receipts, security alerts. */\n  alwaysSend?: readonly string[];\n  unsubscribeTtlSeconds?: number;\n};\n\nconst key = (userId: string, type: string, channel: string) => `${userId} ${type} ${channel}`;\n\ntype PreparedPreferences = Map<string, PreferenceRow>;\n\nexport function buildUnsubscribeToken(\n  secret: string,\n  userId: string,\n  type: string,\n  channel: Channel,\n  ttlSeconds = DEFAULT_TOKEN_TTL_SECONDS,\n): Promise<string> {\n  return signToken(secret, {\n    uid: userId,\n    purpose: UNSUBSCRIBE_PURPOSE,\n    exp: expiresIn(ttlSeconds),\n    data: { type, channel },\n  });\n}\n\nexport function preferences(options: PreferencesOptions = {}): EasyPingPlugin<\"preferences\"> {\n  const defaultEnabled = options.defaultEnabled ?? true;\n  const alwaysSend = new Set(options.alwaysSend ?? []);\n\n  // Assigned by init(), which easyPing() runs before any hook or route.\n  let ctx: PluginInitContext;\n\n  const isAllowed = (userId: string, type: string, channel: Channel, rows: PreparedPreferences) => {\n    const row = rows.get(key(userId, type, channel));\n    return row ? row.enabled && row.frequency !== \"off\" : defaultEnabled;\n  };\n\n  const load = (userIds: readonly string[]) =>\n    ctx.store.find<PreferenceRow>(TABLE, { userId: { in: [...userIds] } });\n\n  const save = (row: PreferenceRow) =>\n    ctx.store.upsert(TABLE, [row], { onConflict: [\"userId\", \"type\", \"channel\"] });\n\n  return {\n    id: \"preferences\",\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    schema: {\n      notificationPreference: {\n        tableName: TABLE,\n        fields: {\n          userId: { type: \"string\", required: true },\n          type: { type: \"string\", required: true },\n          channel: { type: \"string\", required: true },\n          enabled: { type: \"boolean\", required: true, default: true },\n          frequency: { type: \"string\", required: true, default: \"instant\" },\n        },\n        primaryKey: [\"userId\", \"type\", \"channel\"],\n      },\n    },\n\n    hooks: {\n      /** One query per send; doing this per recipient would be an N+1. */\n      prepare: async (context: PrepareContext): Promise<PreparedPreferences> => {\n        if (alwaysSend.has(context.type)) return new Map();\n\n        const rows = await load(context.recipients.map((recipient) => recipient.userId));\n        return new Map(rows.map((row) => [key(row.userId, row.type, row.channel), row]));\n      },\n\n      resolveChannels: (context: ResolveChannelsContext) => {\n        if (alwaysSend.has(context.type)) return context.decisions;\n\n        // prepare() failing leaves this undefined. Fail closed rather than\n        // assuming everyone opted in: that is exactly how people who\n        // unsubscribed get emailed anyway.\n        if (!(context.prepared instanceof Map)) {\n          return context.decisions.map((decision) => ({ ...decision, action: \"skip\" as const }));\n        }\n\n        const rows = context.prepared as PreparedPreferences;\n\n        return context.decisions.map<ChannelDecision>((decision) =>\n          isAllowed(context.recipient.userId, context.type, decision.channel, rows)\n            ? decision\n            : { ...decision, action: \"skip\" },\n        );\n      },\n    },\n\n    routes: [\n      {\n        path: \"/preferences\",\n        method: \"GET\",\n        scope: { type: \"user\" },\n        handler: async ({ userId }) => {\n          const rows = await load([userId ?? \"\"]);\n          return Response.json({ preferences: rows, defaultEnabled });\n        },\n      },\n\n      {\n        path: \"/preferences\",\n        method: \"POST\",\n        scope: { type: \"user\" },\n        handler: async ({ request, userId }) => {\n          const body = (await request.json().catch(() => null)) as Partial<PreferenceRow> | null;\n\n          if (!body?.type || !body.channel) {\n            return Response.json({ error: \"type and channel are required\" }, { status: 400 });\n          }\n\n          // userId comes from the resolved session, never from the body.\n          await save({\n            userId: userId ?? \"\",\n            type: body.type,\n            channel: body.channel,\n            enabled: body.enabled ?? true,\n            frequency: body.frequency ?? \"instant\",\n          });\n\n          return Response.json({ ok: true });\n        },\n      },\n\n      {\n        // Reached from a mail client with no session, so it is authenticated\n        // by the signature on the link itself.\n        path: \"/unsubscribe\",\n        method: \"POST\",\n        scope: { type: \"signed\", purpose: UNSUBSCRIBE_PURPOSE },\n        handler: async ({ claims }) => {\n          const type = claims?.data?.type;\n          const channel = claims?.data?.channel as Channel | undefined;\n          if (!claims || !type || !channel) {\n            return Response.json({ error: \"invalid token\" }, { status: 400 });\n          }\n\n          await save({\n            userId: claims.uid,\n            type,\n            channel,\n            enabled: false,\n            frequency: \"off\",\n          });\n\n          // Gmail and Yahoo one-click requires the POST itself to unsubscribe,\n          // with no confirmation page.\n          return Response.json({ ok: true, unsubscribed: { type, channel } });\n        },\n      },\n    ],\n  };\n}\n"]}

package/dist/plugins/preferences.d.cts

@@ -0,0 +1,22 @@
+import { h as EasyPingPlugin } from '../plugin-Bqj9xAOS.cjs';
+import { C as Channel, F as Frequency } from '../adapter-f0OR2DhY.cjs';
+
+declare const UNSUBSCRIBE_PURPOSE = "unsubscribe";
+type PreferenceRow = {
+    userId: string;
+    type: string;
+    channel: Channel;
+    enabled: boolean;
+    frequency: Frequency;
+};
+type PreferencesOptions = {
+    /** What an absent row means. Flip to false for opt-in-only notifications. */
+    defaultEnabled?: boolean;
+    /** Types that ignore preferences entirely: receipts, security alerts. */
+    alwaysSend?: readonly string[];
+    unsubscribeTtlSeconds?: number;
+};
+declare function buildUnsubscribeToken(secret: string, userId: string, type: string, channel: Channel, ttlSeconds?: number): Promise<string>;
+declare function preferences(options?: PreferencesOptions): EasyPingPlugin<"preferences">;
+
+export { type PreferenceRow, type PreferencesOptions, UNSUBSCRIBE_PURPOSE, buildUnsubscribeToken, preferences };

package/dist/plugins/preferences.d.ts

@@ -0,0 +1,22 @@
+import { h as EasyPingPlugin } from '../plugin-bTJKmnlq.js';
+import { C as Channel, F as Frequency } from '../adapter-f0OR2DhY.js';
+
+declare const UNSUBSCRIBE_PURPOSE = "unsubscribe";
+type PreferenceRow = {
+    userId: string;
+    type: string;
+    channel: Channel;
+    enabled: boolean;
+    frequency: Frequency;
+};
+type PreferencesOptions = {
+    /** What an absent row means. Flip to false for opt-in-only notifications. */
+    defaultEnabled?: boolean;
+    /** Types that ignore preferences entirely: receipts, security alerts. */
+    alwaysSend?: readonly string[];
+    unsubscribeTtlSeconds?: number;
+};
+declare function buildUnsubscribeToken(secret: string, userId: string, type: string, channel: Channel, ttlSeconds?: number): Promise<string>;
+declare function preferences(options?: PreferencesOptions): EasyPingPlugin<"preferences">;
+
+export { type PreferenceRow, type PreferencesOptions, UNSUBSCRIBE_PURPOSE, buildUnsubscribeToken, preferences };

package/dist/plugins/preferences.js

@@ -0,0 +1,119 @@
+import { DEFAULT_TOKEN_TTL_SECONDS, signToken, expiresIn } from '../chunk-W3BMEPPQ.js';
+import '../chunk-PTGHMCCG.js';
+
+// src/plugins/preferences/index.ts
+var UNSUBSCRIBE_PURPOSE = "unsubscribe";
+var TABLE = "notification_preference";
+var key = (userId, type, channel) => `${userId} ${type} ${channel}`;
+function buildUnsubscribeToken(secret, userId, type, channel, ttlSeconds = DEFAULT_TOKEN_TTL_SECONDS) {
+  return signToken(secret, {
+    uid: userId,
+    purpose: UNSUBSCRIBE_PURPOSE,
+    exp: expiresIn(ttlSeconds),
+    data: { type, channel }
+  });
+}
+function preferences(options = {}) {
+  const defaultEnabled = options.defaultEnabled ?? true;
+  const alwaysSend = new Set(options.alwaysSend ?? []);
+  let ctx;
+  const isAllowed = (userId, type, channel, rows) => {
+    const row = rows.get(key(userId, type, channel));
+    return row ? row.enabled && row.frequency !== "off" : defaultEnabled;
+  };
+  const load = (userIds) => ctx.store.find(TABLE, { userId: { in: [...userIds] } });
+  const save = (row) => ctx.store.upsert(TABLE, [row], { onConflict: ["userId", "type", "channel"] });
+  return {
+    id: "preferences",
+    init: (context) => {
+      ctx = context;
+    },
+    schema: {
+      notificationPreference: {
+        tableName: TABLE,
+        fields: {
+          userId: { type: "string", required: true },
+          type: { type: "string", required: true },
+          channel: { type: "string", required: true },
+          enabled: { type: "boolean", required: true, default: true },
+          frequency: { type: "string", required: true, default: "instant" }
+        },
+        primaryKey: ["userId", "type", "channel"]
+      }
+    },
+    hooks: {
+      /** One query per send; doing this per recipient would be an N+1. */
+      prepare: async (context) => {
+        if (alwaysSend.has(context.type)) return /* @__PURE__ */ new Map();
+        const rows = await load(context.recipients.map((recipient) => recipient.userId));
+        return new Map(rows.map((row) => [key(row.userId, row.type, row.channel), row]));
+      },
+      resolveChannels: (context) => {
+        if (alwaysSend.has(context.type)) return context.decisions;
+        if (!(context.prepared instanceof Map)) {
+          return context.decisions.map((decision) => ({ ...decision, action: "skip" }));
+        }
+        const rows = context.prepared;
+        return context.decisions.map(
+          (decision) => isAllowed(context.recipient.userId, context.type, decision.channel, rows) ? decision : { ...decision, action: "skip" }
+        );
+      }
+    },
+    routes: [
+      {
+        path: "/preferences",
+        method: "GET",
+        scope: { type: "user" },
+        handler: async ({ userId }) => {
+          const rows = await load([userId ?? ""]);
+          return Response.json({ preferences: rows, defaultEnabled });
+        }
+      },
+      {
+        path: "/preferences",
+        method: "POST",
+        scope: { type: "user" },
+        handler: async ({ request, userId }) => {
+          const body = await request.json().catch(() => null);
+          if (!body?.type || !body.channel) {
+            return Response.json({ error: "type and channel are required" }, { status: 400 });
+          }
+          await save({
+            userId: userId ?? "",
+            type: body.type,
+            channel: body.channel,
+            enabled: body.enabled ?? true,
+            frequency: body.frequency ?? "instant"
+          });
+          return Response.json({ ok: true });
+        }
+      },
+      {
+        // Reached from a mail client with no session, so it is authenticated
+        // by the signature on the link itself.
+        path: "/unsubscribe",
+        method: "POST",
+        scope: { type: "signed", purpose: UNSUBSCRIBE_PURPOSE },
+        handler: async ({ claims }) => {
+          const type = claims?.data?.type;
+          const channel = claims?.data?.channel;
+          if (!claims || !type || !channel) {
+            return Response.json({ error: "invalid token" }, { status: 400 });
+          }
+          await save({
+            userId: claims.uid,
+            type,
+            channel,
+            enabled: false,
+            frequency: "off"
+          });
+          return Response.json({ ok: true, unsubscribed: { type, channel } });
+        }
+      }
+    ]
+  };
+}
+
+export { UNSUBSCRIBE_PURPOSE, buildUnsubscribeToken, preferences };
+//# sourceMappingURL=preferences.js.map
+//# sourceMappingURL=preferences.js.map

package/dist/plugins/preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/plugins/preferences/index.ts"],"names":[],"mappings":";;;;AAUO,IAAM,mBAAA,GAAsB;AAEnC,IAAM,KAAA,GAAQ,yBAAA;AAkBd,IAAM,GAAA,GAAM,CAAC,MAAA,EAAgB,IAAA,EAAc,OAAA,KAAoB,GAAG,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAIpF,SAAS,sBACd,MAAA,EACA,MAAA,EACA,IAAA,EACA,OAAA,EACA,aAAa,yBAAA,EACI;AACjB,EAAA,OAAO,UAAU,MAAA,EAAQ;AAAA,IACvB,GAAA,EAAK,MAAA;AAAA,IACL,OAAA,EAAS,mBAAA;AAAA,IACT,GAAA,EAAK,UAAU,UAAU,CAAA;AAAA,IACzB,IAAA,EAAM,EAAE,IAAA,EAAM,OAAA;AAAQ,GACvB,CAAA;AACH;AAEO,SAAS,WAAA,CAAY,OAAA,GAA8B,EAAC,EAAkC;AAC3F,EAAA,MAAM,cAAA,GAAiB,QAAQ,cAAA,IAAkB,IAAA;AACjD,EAAA,MAAM,aAAa,IAAI,GAAA,CAAI,OAAA,CAAQ,UAAA,IAAc,EAAE,CAAA;AAGnD,EAAA,IAAI,GAAA;AAEJ,EAAA,MAAM,SAAA,GAAY,CAAC,MAAA,EAAgB,IAAA,EAAc,SAAkB,IAAA,KAA8B;AAC/F,IAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,IAAI,MAAA,EAAQ,IAAA,EAAM,OAAO,CAAC,CAAA;AAC/C,IAAA,OAAO,GAAA,GAAM,GAAA,CAAI,OAAA,IAAW,GAAA,CAAI,cAAc,KAAA,GAAQ,cAAA;AAAA,EACxD,CAAA;AAEA,EAAA,MAAM,OAAO,CAAC,OAAA,KACZ,GAAA,CAAI,KAAA,CAAM,KAAoB,KAAA,EAAO,EAAE,MAAA,EAAQ,EAAE,IAAI,CAAC,GAAG,OAAO,CAAA,IAAK,CAAA;AAEvE,EAAA,MAAM,OAAO,CAAC,GAAA,KACZ,GAAA,CAAI,KAAA,CAAM,OAAO,KAAA,EAAO,CAAC,GAAG,CAAA,EAAG,EAAE,UAAA,EAAY,CAAC,UAAU,MAAA,EAAQ,SAAS,GAAG,CAAA;AAE9E,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,aAAA;AAAA,IAEJ,IAAA,EAAM,CAAC,OAAA,KAAY;AACjB,MAAA,GAAA,GAAM,OAAA;AAAA,IACR,CAAA;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN,sBAAA,EAAwB;AAAA,QACtB,SAAA,EAAW,KAAA;AAAA,QACX,MAAA,EAAQ;AAAA,UACN,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,UACzC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,UACvC,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,UAC1C,SAAS,EAAE,IAAA,EAAM,WAAW,QAAA,EAAU,IAAA,EAAM,SAAS,IAAA,EAAK;AAAA,UAC1D,WAAW,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,SAAA;AAAU,SAClE;AAAA,QACA,UAAA,EAAY,CAAC,QAAA,EAAU,MAAA,EAAQ,SAAS;AAAA;AAC1C,KACF;AAAA,IAEA,KAAA,EAAO;AAAA;AAAA,MAEL,OAAA,EAAS,OAAO,OAAA,KAA0D;AACxE,QAAA,IAAI,WAAW,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,EAAG,2BAAW,GAAA,EAAI;AAEjD,QAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAC,SAAA,KAAc,SAAA,CAAU,MAAM,CAAC,CAAA;AAC/E,QAAA,OAAO,IAAI,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,CAAC,QAAQ,CAAC,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,IAAI,IAAA,EAAM,GAAA,CAAI,OAAO,CAAA,EAAG,GAAG,CAAC,CAAC,CAAA;AAAA,MACjF,CAAA;AAAA,MAEA,eAAA,EAAiB,CAAC,OAAA,KAAoC;AACpD,QAAA,IAAI,WAAW,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,SAAU,OAAA,CAAQ,SAAA;AAKjD,QAAA,IAAI,EAAE,OAAA,CAAQ,QAAA,YAAoB,GAAA,CAAA,EAAM;AACtC,UAAA,OAAO,OAAA,CAAQ,SAAA,CAAU,GAAA,CAAI,CAAC,QAAA,MAAc,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAgB,CAAE,CAAA;AAAA,QACvF;AAEA,QAAA,MAAM,OAAO,OAAA,CAAQ,QAAA;AAErB,QAAA,OAAO,QAAQ,SAAA,CAAU,GAAA;AAAA,UAAqB,CAAC,QAAA,KAC7C,SAAA,CAAU,OAAA,CAAQ,SAAA,CAAU,QAAQ,OAAA,CAAQ,IAAA,EAAM,QAAA,CAAS,OAAA,EAAS,IAAI,CAAA,GACpE,QAAA,GACA,EAAE,GAAG,QAAA,EAAU,QAAQ,MAAA;AAAO,SACpC;AAAA,MACF;AAAA,KACF;AAAA,IAEA,MAAA,EAAQ;AAAA,MACN;AAAA,QACE,IAAA,EAAM,cAAA;AAAA,QACN,MAAA,EAAQ,KAAA;AAAA,QACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,QACtB,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,UAAA,MAAM,OAAO,MAAM,IAAA,CAAK,CAAC,MAAA,IAAU,EAAE,CAAC,CAAA;AACtC,UAAA,OAAO,SAAS,IAAA,CAAK,EAAE,WAAA,EAAa,IAAA,EAAM,gBAAgB,CAAA;AAAA,QAC5D;AAAA,OACF;AAAA,MAEA;AAAA,QACE,IAAA,EAAM,cAAA;AAAA,QACN,MAAA,EAAQ,MAAA;AAAA,QACR,KAAA,EAAO,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,QACtB,OAAA,EAAS,OAAO,EAAE,OAAA,EAAS,QAAO,KAAM;AACtC,UAAA,MAAM,OAAQ,MAAM,OAAA,CAAQ,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAEnD,UAAA,IAAI,CAAC,IAAA,EAAM,IAAA,IAAQ,CAAC,KAAK,OAAA,EAAS;AAChC,YAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,iCAAgC,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,UAClF;AAGA,UAAA,MAAM,IAAA,CAAK;AAAA,YACT,QAAQ,MAAA,IAAU,EAAA;AAAA,YAClB,MAAM,IAAA,CAAK,IAAA;AAAA,YACX,SAAS,IAAA,CAAK,OAAA;AAAA,YACd,OAAA,EAAS,KAAK,OAAA,IAAW,IAAA;AAAA,YACzB,SAAA,EAAW,KAAK,SAAA,IAAa;AAAA,WAC9B,CAAA;AAED,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,QACnC;AAAA,OACF;AAAA,MAEA;AAAA;AAAA;AAAA,QAGE,IAAA,EAAM,cAAA;AAAA,QACN,MAAA,EAAQ,MAAA;AAAA,QACR,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,mBAAA,EAAoB;AAAA,QACtD,OAAA,EAAS,OAAO,EAAE,MAAA,EAAO,KAAM;AAC7B,UAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,EAAM,IAAA;AAC3B,UAAA,MAAM,OAAA,GAAU,QAAQ,IAAA,EAAM,OAAA;AAC9B,UAAA,IAAI,CAAC,MAAA,IAAU,CAAC,IAAA,IAAQ,CAAC,OAAA,EAAS;AAChC,YAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,iBAAgB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,UAClE;AAEA,UAAA,MAAM,IAAA,CAAK;AAAA,YACT,QAAQ,MAAA,CAAO,GAAA;AAAA,YACf,IAAA;AAAA,YACA,OAAA;AAAA,YACA,OAAA,EAAS,KAAA;AAAA,YACT,SAAA,EAAW;AAAA,WACZ,CAAA;AAID,UAAA,OAAO,QAAA,CAAS,IAAA,CAAK,EAAE,EAAA,EAAI,IAAA,EAAM,cAAc,EAAE,IAAA,EAAM,OAAA,EAAQ,EAAG,CAAA;AAAA,QACpE;AAAA;AACF;AACF,GACF;AACF","file":"preferences.js","sourcesContent":["import type {\n  ChannelDecision,\n  EasyPingPlugin,\n  PluginInitContext,\n  PrepareContext,\n  ResolveChannelsContext,\n} from \"../../core/plugin\";\nimport { DEFAULT_TOKEN_TTL_SECONDS, expiresIn, signToken } from \"../../core/tokens\";\nimport type { Channel, Frequency } from \"../../core/types\";\n\nexport const UNSUBSCRIBE_PURPOSE = \"unsubscribe\";\n\nconst TABLE = \"notification_preference\";\n\nexport type PreferenceRow = {\n  userId: string;\n  type: string;\n  channel: Channel;\n  enabled: boolean;\n  frequency: Frequency;\n};\n\nexport type PreferencesOptions = {\n  /** What an absent row means. Flip to false for opt-in-only notifications. */\n  defaultEnabled?: boolean;\n  /** Types that ignore preferences entirely: receipts, security alerts. */\n  alwaysSend?: readonly string[];\n  unsubscribeTtlSeconds?: number;\n};\n\nconst key = (userId: string, type: string, channel: string) => `${userId} ${type} ${channel}`;\n\ntype PreparedPreferences = Map<string, PreferenceRow>;\n\nexport function buildUnsubscribeToken(\n  secret: string,\n  userId: string,\n  type: string,\n  channel: Channel,\n  ttlSeconds = DEFAULT_TOKEN_TTL_SECONDS,\n): Promise<string> {\n  return signToken(secret, {\n    uid: userId,\n    purpose: UNSUBSCRIBE_PURPOSE,\n    exp: expiresIn(ttlSeconds),\n    data: { type, channel },\n  });\n}\n\nexport function preferences(options: PreferencesOptions = {}): EasyPingPlugin<\"preferences\"> {\n  const defaultEnabled = options.defaultEnabled ?? true;\n  const alwaysSend = new Set(options.alwaysSend ?? []);\n\n  // Assigned by init(), which easyPing() runs before any hook or route.\n  let ctx: PluginInitContext;\n\n  const isAllowed = (userId: string, type: string, channel: Channel, rows: PreparedPreferences) => {\n    const row = rows.get(key(userId, type, channel));\n    return row ? row.enabled && row.frequency !== \"off\" : defaultEnabled;\n  };\n\n  const load = (userIds: readonly string[]) =>\n    ctx.store.find<PreferenceRow>(TABLE, { userId: { in: [...userIds] } });\n\n  const save = (row: PreferenceRow) =>\n    ctx.store.upsert(TABLE, [row], { onConflict: [\"userId\", \"type\", \"channel\"] });\n\n  return {\n    id: \"preferences\",\n\n    init: (context) => {\n      ctx = context;\n    },\n\n    schema: {\n      notificationPreference: {\n        tableName: TABLE,\n        fields: {\n          userId: { type: \"string\", required: true },\n          type: { type: \"string\", required: true },\n          channel: { type: \"string\", required: true },\n          enabled: { type: \"boolean\", required: true, default: true },\n          frequency: { type: \"string\", required: true, default: \"instant\" },\n        },\n        primaryKey: [\"userId\", \"type\", \"channel\"],\n      },\n    },\n\n    hooks: {\n      /** One query per send; doing this per recipient would be an N+1. */\n      prepare: async (context: PrepareContext): Promise<PreparedPreferences> => {\n        if (alwaysSend.has(context.type)) return new Map();\n\n        const rows = await load(context.recipients.map((recipient) => recipient.userId));\n        return new Map(rows.map((row) => [key(row.userId, row.type, row.channel), row]));\n      },\n\n      resolveChannels: (context: ResolveChannelsContext) => {\n        if (alwaysSend.has(context.type)) return context.decisions;\n\n        // prepare() failing leaves this undefined. Fail closed rather than\n        // assuming everyone opted in: that is exactly how people who\n        // unsubscribed get emailed anyway.\n        if (!(context.prepared instanceof Map)) {\n          return context.decisions.map((decision) => ({ ...decision, action: \"skip\" as const }));\n        }\n\n        const rows = context.prepared as PreparedPreferences;\n\n        return context.decisions.map<ChannelDecision>((decision) =>\n          isAllowed(context.recipient.userId, context.type, decision.channel, rows)\n            ? decision\n            : { ...decision, action: \"skip\" },\n        );\n      },\n    },\n\n    routes: [\n      {\n        path: \"/preferences\",\n        method: \"GET\",\n        scope: { type: \"user\" },\n        handler: async ({ userId }) => {\n          const rows = await load([userId ?? \"\"]);\n          return Response.json({ preferences: rows, defaultEnabled });\n        },\n      },\n\n      {\n        path: \"/preferences\",\n        method: \"POST\",\n        scope: { type: \"user\" },\n        handler: async ({ request, userId }) => {\n          const body = (await request.json().catch(() => null)) as Partial<PreferenceRow> | null;\n\n          if (!body?.type || !body.channel) {\n            return Response.json({ error: \"type and channel are required\" }, { status: 400 });\n          }\n\n          // userId comes from the resolved session, never from the body.\n          await save({\n            userId: userId ?? \"\",\n            type: body.type,\n            channel: body.channel,\n            enabled: body.enabled ?? true,\n            frequency: body.frequency ?? \"instant\",\n          });\n\n          return Response.json({ ok: true });\n        },\n      },\n\n      {\n        // Reached from a mail client with no session, so it is authenticated\n        // by the signature on the link itself.\n        path: \"/unsubscribe\",\n        method: \"POST\",\n        scope: { type: \"signed\", purpose: UNSUBSCRIBE_PURPOSE },\n        handler: async ({ claims }) => {\n          const type = claims?.data?.type;\n          const channel = claims?.data?.channel as Channel | undefined;\n          if (!claims || !type || !channel) {\n            return Response.json({ error: \"invalid token\" }, { status: 400 });\n          }\n\n          await save({\n            userId: claims.uid,\n            type,\n            channel,\n            enabled: false,\n            frequency: \"off\",\n          });\n\n          // Gmail and Yahoo one-click requires the POST itself to unsubscribe,\n          // with no confirmation page.\n          return Response.json({ ok: true, unsubscribed: { type, channel } });\n        },\n      },\n    ],\n  };\n}\n"]}

package/dist/plugins/push.cjs

@@ -0,0 +1,146 @@
+'use strict';
+
+// src/plugins/push/index.ts
+var DEVICE = "notification_push_device";
+function push(options) {
+  let ctx;
+  const staleAfterDays = options.staleAfterDays ?? 180;
+  return {
+    id: "push",
+    channels: ["push"],
+    init: (context) => {
+      ctx = context;
+    },
+    schema: {
+      pushDevice: {
+        tableName: DEVICE,
+        fields: {
+          id: { type: "string", required: true },
+          userId: { type: "string", required: true },
+          endpoint: { type: "string", required: true },
+          p256dh: { type: "string", required: true },
+          auth: { type: "string", required: true },
+          userAgent: { type: "string" },
+          createdAt: { type: "date", required: true, defaultNow: true },
+          lastSeenAt: { type: "date", required: true, defaultNow: true }
+        },
+        primaryKey: ["id"],
+        indexes: [
+          { on: ["userId"], name: "push_device_user_idx" },
+          // One row per endpoint: re-registering the same browser must update,
+          // not duplicate, or every send goes out N times to one device.
+          { on: ["endpoint"], unique: true, name: "push_device_endpoint_idx" }
+        ]
+      }
+    },
+    hooks: {
+      deliver: async (context) => {
+        const devices = await ctx.store.find(DEVICE, {
+          userId: context.notification.userId
+        });
+        if (devices.length === 0) {
+          return { result: "failed", error: "no registered devices", retryable: false };
+        }
+        const content = options.render({
+          type: context.notification.type,
+          payload: context.notification.payload
+        });
+        const expired = [];
+        let delivered = 0;
+        let retryable = false;
+        let lastError = "";
+        for (const device of devices) {
+          try {
+            const result = await options.provider.send({
+              subscription: {
+                endpoint: device.endpoint,
+                keys: { p256dh: device.p256dh, auth: device.auth }
+              },
+              ...content,
+              data: { notificationId: context.notification.id, type: context.notification.type },
+              signal: context.signal
+            });
+            if (result.expired) expired.push(device.id);
+            else {
+              delivered += 1;
+              if (result.retryable) retryable = true;
+            }
+          } catch (error) {
+            lastError = error instanceof Error ? error.message : String(error);
+            retryable = true;
+          }
+        }
+        if (expired.length > 0) await ctx.store.remove(DEVICE, { id: { in: expired } });
+        if (delivered > 0) return { result: "sent" };
+        if (expired.length === devices.length) {
+          return { result: "failed", error: "all devices expired", retryable: false };
+        }
+        return {
+          result: "failed",
+          error: lastError || "no device accepted the push",
+          retryable
+        };
+      }
+    },
+    routes: [
+      {
+        path: "/push/devices",
+        method: "POST",
+        scope: { type: "user" },
+        handler: async ({ request, userId }) => {
+          const body = await request.json().catch(() => null);
+          if (!body?.endpoint || !body.keys?.p256dh || !body.keys?.auth) {
+            return Response.json({ error: "endpoint and keys are required" }, { status: 400 });
+          }
+          await ctx.store.upsert(
+            DEVICE,
+            [
+              {
+                id: crypto.randomUUID(),
+                userId: userId ?? "",
+                endpoint: body.endpoint,
+                p256dh: body.keys.p256dh,
+                auth: body.keys.auth,
+                userAgent: request.headers.get("user-agent"),
+                createdAt: /* @__PURE__ */ new Date(),
+                lastSeenAt: /* @__PURE__ */ new Date()
+              }
+            ],
+            { onConflict: ["endpoint"] }
+          );
+          return Response.json({ ok: true });
+        }
+      },
+      {
+        path: "/push/devices/remove",
+        method: "POST",
+        scope: { type: "user" },
+        handler: async ({ request, userId }) => {
+          const body = await request.json().catch(() => null);
+          if (!body?.endpoint) {
+            return Response.json({ error: "endpoint is required" }, { status: 400 });
+          }
+          const removed = await ctx.store.remove(DEVICE, {
+            userId: userId ?? "",
+            endpoint: body.endpoint
+          });
+          return removed === 0 ? new Response(null, { status: 404 }) : Response.json({ ok: true });
+        }
+      },
+      {
+        path: "/push/prune",
+        method: "POST",
+        scope: { type: "machine" },
+        handler: async () => {
+          const cutoff = new Date(Date.now() - staleAfterDays * 864e5);
+          const removed = await ctx.store.remove(DEVICE, { lastSeenAt: { lt: cutoff } });
+          return Response.json({ removed });
+        }
+      }
+    ]
+  };
+}
+
+exports.push = push;
+//# sourceMappingURL=push.cjs.map
+//# sourceMappingURL=push.cjs.map