easy-ping 0.1.0

package/dist/browser.js

@@ -0,0 +1,89 @@
+// src/browser/index.ts
+var PushUnsupportedError = class extends Error {
+  constructor(reason) {
+    super(`web push is unavailable: ${reason}`);
+    this.name = "PushUnsupportedError";
+  }
+};
+var PushPermissionError = class extends Error {
+  constructor(permission) {
+    super(`notification permission was ${permission}`);
+    this.permission = permission;
+    this.name = "PushPermissionError";
+  }
+  permission;
+};
+function isPushSupported() {
+  return typeof navigator !== "undefined" && "serviceWorker" in navigator && typeof PushManager !== "undefined" && typeof Notification !== "undefined";
+}
+function decodeVapidKey(publicKey) {
+  const padded = publicKey.padEnd(publicKey.length + (4 - publicKey.length % 4) % 4, "=");
+  let binary;
+  try {
+    binary = atob(padded.replace(/-/g, "+").replace(/_/g, "/"));
+  } catch {
+    throw new Error("VAPID publicKey is not valid base64url");
+  }
+  const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
+  if (bytes.length !== 65 || bytes[0] !== 4) {
+    throw new Error(
+      `VAPID publicKey must be a 65-byte uncompressed EC point, got ${bytes.length} bytes`
+    );
+  }
+  return bytes;
+}
+async function resolveRegistration(options) {
+  if (options.registration) return options.registration;
+  if (!isPushSupported()) throw new PushUnsupportedError("this browser has no PushManager");
+  const path = options.serviceWorkerPath ?? "/sw.js";
+  const registration = await navigator.serviceWorker.register(
+    path,
+    options.scope ? { scope: options.scope } : void 0
+  );
+  await navigator.serviceWorker.ready;
+  return registration;
+}
+async function subscribeToPush(options) {
+  const registration = await resolveRegistration(options);
+  if (typeof Notification !== "undefined") {
+    const permission = Notification.permission === "default" ? await Notification.requestPermission() : Notification.permission;
+    if (permission !== "granted") throw new PushPermissionError(permission);
+  }
+  const existing = await registration.pushManager.getSubscription();
+  const subscription = existing ?? await registration.pushManager.subscribe({
+    // Required by Chrome; a silent push is rejected outright.
+    userVisibleOnly: true,
+    applicationServerKey: decodeVapidKey(options.publicKey)
+  });
+  const payload = subscription.toJSON();
+  const doFetch = options.fetch ?? globalThis.fetch;
+  const baseUrl = (options.baseUrl ?? "/api/notifications").replace(/\/$/, "");
+  const response = await doFetch(`${baseUrl}/push/devices`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    credentials: "same-origin",
+    body: JSON.stringify({ endpoint: payload.endpoint, keys: payload.keys })
+  });
+  if (!response.ok) {
+    throw new Error(`registering the push device failed: ${response.status}`);
+  }
+  return payload;
+}
+async function unsubscribeFromPush(options) {
+  const registration = await resolveRegistration({ ...options});
+  const subscription = await registration.pushManager.getSubscription();
+  if (!subscription) return false;
+  const doFetch = options.fetch ?? globalThis.fetch;
+  const baseUrl = (options.baseUrl ?? "/api/notifications").replace(/\/$/, "");
+  await doFetch(`${baseUrl}/push/devices/remove`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    credentials: "same-origin",
+    body: JSON.stringify({ endpoint: subscription.endpoint })
+  }).catch(() => void 0);
+  return subscription.unsubscribe();
+}
+
+export { PushPermissionError, PushUnsupportedError, decodeVapidKey, isPushSupported, subscribeToPush, unsubscribeFromPush };
+//# sourceMappingURL=browser.js.map
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser/index.ts"],"names":[],"mappings":";AAuBO,IAAM,oBAAA,GAAN,cAAmC,KAAA,CAAM;AAAA,EAC9C,YAAY,MAAA,EAAgB;AAC1B,IAAA,KAAA,CAAM,CAAA,yBAAA,EAA4B,MAAM,CAAA,CAAE,CAAA;AAC1C,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAEO,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,YAAqB,UAAA,EAAoC;AACvD,IAAA,KAAA,CAAM,CAAA,4BAAA,EAA+B,UAAU,CAAA,CAAE,CAAA;AAD9B,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAEnB,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AAAA,EAHqB,UAAA;AAIvB;AAEO,SAAS,eAAA,GAA2B;AACzC,EAAA,OACE,OAAO,cAAc,WAAA,IACrB,eAAA,IAAmB,aACnB,OAAO,WAAA,KAAgB,WAAA,IACvB,OAAO,YAAA,KAAiB,WAAA;AAE5B;AAMO,SAAS,eAAe,SAAA,EAA4C;AACzE,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,MAAA,CAAO,SAAA,CAAU,MAAA,GAAA,CAAW,IAAK,SAAA,CAAU,MAAA,GAAS,CAAA,IAAM,CAAA,EAAI,GAAG,CAAA;AAE1F,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA;AAAA,EAC5D,CAAA,CAAA,MAAQ;AAGN,IAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,EAC1D;AAEA,EAAA,MAAM,KAAA,GAAQ,WAAW,IAAA,CAAK,MAAA,EAAQ,CAAC,IAAA,KAAS,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAClE,EAAA,IAAI,MAAM,MAAA,KAAW,EAAA,IAAM,KAAA,CAAM,CAAC,MAAM,CAAA,EAAM;AAC5C,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,6DAAA,EAAgE,MAAM,MAAM,CAAA,MAAA;AAAA,KAC9E;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAEA,eAAe,oBAAoB,OAAA,EAA+D;AAChG,EAAA,IAAI,OAAA,CAAQ,YAAA,EAAc,OAAO,OAAA,CAAQ,YAAA;AACzC,EAAA,IAAI,CAAC,eAAA,EAAgB,EAAG,MAAM,IAAI,qBAAqB,iCAAiC,CAAA;AAExF,EAAA,MAAM,IAAA,GAAO,QAAQ,iBAAA,IAAqB,QAAA;AAC1C,EAAA,MAAM,YAAA,GAAe,MAAM,SAAA,CAAU,aAAA,CAAc,QAAA;AAAA,IACjD,IAAA;AAAA,IACA,QAAQ,KAAA,GAAQ,EAAE,KAAA,EAAO,OAAA,CAAQ,OAAM,GAAI;AAAA,GAC7C;AAGA,EAAA,MAAM,UAAU,aAAA,CAAc,KAAA;AAC9B,EAAA,OAAO,YAAA;AACT;AAMA,eAAsB,gBAAgB,OAAA,EAA6D;AACjG,EAAA,MAAM,YAAA,GAAe,MAAM,mBAAA,CAAoB,OAAO,CAAA;AAEtD,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACvC,IAAA,MAAM,UAAA,GACJ,aAAa,UAAA,KAAe,SAAA,GACxB,MAAM,YAAA,CAAa,iBAAA,KACnB,YAAA,CAAa,UAAA;AAEnB,IAAA,IAAI,UAAA,KAAe,SAAA,EAAW,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAAA,EACxE;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,WAAA,CAAY,eAAA,EAAgB;AAChE,EAAA,MAAM,YAAA,GACJ,QAAA,IACC,MAAM,YAAA,CAAa,YAAY,SAAA,CAAU;AAAA;AAAA,IAExC,eAAA,EAAiB,IAAA;AAAA,IACjB,oBAAA,EAAsB,cAAA,CAAe,OAAA,CAAQ,SAAS;AAAA,GACvD,CAAA;AAEH,EAAA,MAAM,OAAA,GAAU,aAAa,MAAA,EAAO;AACpC,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,IAAW,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAE3E,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,CAAA,EAAG,OAAO,CAAA,aAAA,CAAA,EAAiB;AAAA,IACxD,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,QAAQ,QAAA,EAAU,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM;AAAA,GACxE,CAAA;AAED,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,EAC1E;AAEA,EAAA,OAAO,OAAA;AACT;AAGA,eAAsB,oBACpB,OAAA,EACkB;AAClB,EAAA,MAAM,YAAA,GAAe,MAAM,mBAAA,CAAoB,EAAE,GAAG,OAAuB,CAAC,CAAA;AAC5E,EAAA,MAAM,YAAA,GAAe,MAAM,YAAA,CAAa,WAAA,CAAY,eAAA,EAAgB;AACpE,EAAA,IAAI,CAAC,cAAc,OAAO,KAAA;AAE1B,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,IAAW,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAE3E,EAAA,MAAM,OAAA,CAAQ,CAAA,EAAG,OAAO,CAAA,oBAAA,CAAA,EAAwB;AAAA,IAC9C,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,WAAA,EAAa,aAAA;AAAA,IACb,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,YAAA,CAAa,UAAU;AAAA,GACzD,CAAA,CAAE,KAAA,CAAM,MAAM,MAAS,CAAA;AAExB,EAAA,OAAO,aAAa,WAAA,EAAY;AAClC","file":"browser.js","sourcesContent":["/**\n * The browser half of web push.\n *\n * Everything here is injectable so it can be tested in Node: the real\n * navigator, Notification and fetch are only reached through the defaults.\n */\n\nexport type PushSubscriptionPayload = {\n  endpoint: string;\n  keys: { p256dh: string; auth: string };\n};\n\nexport type SubscribeOptions = {\n  /** VAPID public key, base64url — the same one the server signs with. */\n  publicKey: string;\n  baseUrl?: string;\n  serviceWorkerPath?: string;\n  scope?: string;\n  fetch?: typeof globalThis.fetch;\n  /** Pre-resolved registration, so tests need no service worker. */\n  registration?: ServiceWorkerRegistration;\n};\n\nexport class PushUnsupportedError extends Error {\n  constructor(reason: string) {\n    super(`web push is unavailable: ${reason}`);\n    this.name = \"PushUnsupportedError\";\n  }\n}\n\nexport class PushPermissionError extends Error {\n  constructor(readonly permission: NotificationPermission) {\n    super(`notification permission was ${permission}`);\n    this.name = \"PushPermissionError\";\n  }\n}\n\nexport function isPushSupported(): boolean {\n  return (\n    typeof navigator !== \"undefined\" &&\n    \"serviceWorker\" in navigator &&\n    typeof PushManager !== \"undefined\" &&\n    typeof Notification !== \"undefined\"\n  );\n}\n\n/**\n * applicationServerKey must be raw bytes; handing the browser the base64url\n * string it came in as fails with an opaque InvalidCharacterError.\n */\nexport function decodeVapidKey(publicKey: string): Uint8Array<ArrayBuffer> {\n  const padded = publicKey.padEnd(publicKey.length + ((4 - (publicKey.length % 4)) % 4), \"=\");\n\n  let binary: string;\n  try {\n    binary = atob(padded.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n  } catch {\n    // atob throws a bare \"Invalid character\", which says nothing about which\n    // of the several keys in a push setup is wrong.\n    throw new Error(\"VAPID publicKey is not valid base64url\");\n  }\n\n  const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));\n  if (bytes.length !== 65 || bytes[0] !== 0x04) {\n    throw new Error(\n      `VAPID publicKey must be a 65-byte uncompressed EC point, got ${bytes.length} bytes`,\n    );\n  }\n  return bytes;\n}\n\nasync function resolveRegistration(options: SubscribeOptions): Promise<ServiceWorkerRegistration> {\n  if (options.registration) return options.registration;\n  if (!isPushSupported()) throw new PushUnsupportedError(\"this browser has no PushManager\");\n\n  const path = options.serviceWorkerPath ?? \"/sw.js\";\n  const registration = await navigator.serviceWorker.register(\n    path,\n    options.scope ? { scope: options.scope } : undefined,\n  );\n\n  // subscribe() before the worker is active rejects.\n  await navigator.serviceWorker.ready;\n  return registration;\n}\n\n/**\n * Registers the worker, asks permission, subscribes, and hands the\n * subscription to the server. Returns what was registered.\n */\nexport async function subscribeToPush(options: SubscribeOptions): Promise<PushSubscriptionPayload> {\n  const registration = await resolveRegistration(options);\n\n  if (typeof Notification !== \"undefined\") {\n    const permission =\n      Notification.permission === \"default\"\n        ? await Notification.requestPermission()\n        : Notification.permission;\n\n    if (permission !== \"granted\") throw new PushPermissionError(permission);\n  }\n\n  const existing = await registration.pushManager.getSubscription();\n  const subscription =\n    existing ??\n    (await registration.pushManager.subscribe({\n      // Required by Chrome; a silent push is rejected outright.\n      userVisibleOnly: true,\n      applicationServerKey: decodeVapidKey(options.publicKey),\n    }));\n\n  const payload = subscription.toJSON() as PushSubscriptionPayload;\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const baseUrl = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n\n  const response = await doFetch(`${baseUrl}/push/devices`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    credentials: \"same-origin\",\n    body: JSON.stringify({ endpoint: payload.endpoint, keys: payload.keys }),\n  });\n\n  if (!response.ok) {\n    throw new Error(`registering the push device failed: ${response.status}`);\n  }\n\n  return payload;\n}\n\n/** Tells the server first: a browser-only unsubscribe leaves a dead row behind. */\nexport async function unsubscribeFromPush(\n  options: Omit<SubscribeOptions, \"publicKey\">,\n): Promise<boolean> {\n  const registration = await resolveRegistration({ ...options, publicKey: \"\" });\n  const subscription = await registration.pushManager.getSubscription();\n  if (!subscription) return false;\n\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const baseUrl = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n\n  await doFetch(`${baseUrl}/push/devices/remove`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    credentials: \"same-origin\",\n    body: JSON.stringify({ endpoint: subscription.endpoint }),\n  }).catch(() => undefined);\n\n  return subscription.unsubscribe();\n}\n"]}

package/dist/chunk-BV3U542P.js

@@ -0,0 +1,11 @@
+// src/core/plugin.ts
+function definePlugin(plugin) {
+  return plugin;
+}
+function defineClientPlugin(plugin) {
+  return plugin;
+}
+
+export { defineClientPlugin, definePlugin };
+//# sourceMappingURL=chunk-BV3U542P.js.map
+//# sourceMappingURL=chunk-BV3U542P.js.map

package/dist/chunk-BV3U542P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/plugin.ts"],"names":[],"mappings":";AAgLO,SAAS,aACd,MAAA,EAC8B;AAC9B,EAAA,OAAO,MAAA;AACT;AAgBO,SAAS,mBACd,MAAA,EAC6B;AAC7B,EAAA,OAAO,MAAA;AACT","file":"chunk-BV3U542P.js","sourcesContent":["import type { DeliveryOutcome } from \"./adapter\";\nimport type { Logger } from \"./errors\";\nimport type { PluginStore } from \"./store\";\nimport type { Channel, Recipient } from \"./types\";\n\nexport type Promisable<T> = T | Promise<T>;\n\nexport type PrepareContext = {\n  type: string;\n  recipients: readonly Recipient[];\n};\n\nexport type BeforeSendContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  actorId: string | null;\n  dedupeKey: string | null;\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type BeforeSendResult =\n  | { action: \"continue\"; payload?: unknown; dedupeKey?: string }\n  | { action: \"cancel\"; reason: string };\n\nexport type ChannelDecision = {\n  channel: Channel;\n  action: \"send\" | \"skip\" | \"defer\";\n  /** defer only. Written to notification_delivery.not_before. */\n  notBefore?: Date | undefined;\n};\n\nexport type ResolveChannelsContext = {\n  type: string;\n  recipient: Recipient;\n  payload: unknown;\n  decisions: readonly ChannelDecision[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type DeliverContext = {\n  channel: Channel;\n  deliveryId: string;\n  attempt: number;\n  recipient: Recipient;\n  notification: { id: string; userId: string; type: string; payload: unknown };\n  /** Aborted on the runner's timeout. */\n  signal: AbortSignal;\n};\n\nexport type AfterSendContext = {\n  type: string;\n  payload: unknown;\n  /** Committed rows. Ids exist only at this point. */\n  notifications: readonly { id: string; userId: string }[];\n  /** Whatever this plugin's own prepare() returned for this send. */\n  prepared: unknown;\n};\n\nexport type AfterDeliverContext = {\n  deliveryId: string;\n  notificationId: string;\n  userId: string;\n  channel: Channel;\n  outcome: DeliveryOutcome;\n  attempt: number;\n  isTerminal: boolean;\n};\n\n/** beforeSend and resolveChannels fail closed; afterDeliver fails open. */\nexport type PluginHooks = {\n  /** Once per send, for bulk loading — the per-recipient hooks would be an N+1. */\n  prepare?: (ctx: PrepareContext) => Promisable<unknown>;\n  beforeSend?: (ctx: BeforeSendContext) => Promisable<BeforeSendResult>;\n  resolveChannels?: (ctx: ResolveChannelsContext) => Promisable<readonly ChannelDecision[]>;\n  /**\n   * Once per send, after the rows are committed. The only hook that sees\n   * notification ids, which digests needs to bucket an entry against one.\n   * Fails open: the notification is already written.\n   */\n  afterSend?: (ctx: AfterSendContext) => Promisable<void>;\n  /**\n   * Delivers one of the plugin's declared `channels`. Core carries inApp and\n   * email; everything else arrives here, which is how push, sms and slack are\n   * added without core learning about them.\n   */\n  deliver?: (ctx: DeliverContext) => Promisable<DeliveryOutcome>;\n  afterDeliver?: (ctx: AfterDeliverContext) => Promisable<void>;\n};\n\nexport type FieldType = \"string\" | \"number\" | \"boolean\" | \"date\" | \"json\";\n\nexport type FieldDeclaration = {\n  type: FieldType;\n  required?: boolean;\n  default?: string | number | boolean;\n  /** date fields only. Renders as defaultNow() / CURRENT_TIMESTAMP. */\n  defaultNow?: boolean;\n};\n\nexport type IndexDeclaration = {\n  on: readonly string[];\n  unique?: boolean;\n  name?: string;\n};\n\nexport type TableDeclaration = {\n  tableName: string;\n  fields: Record<string, FieldDeclaration>;\n  primaryKey?: readonly string[];\n  indexes?: readonly IndexDeclaration[];\n};\n\nexport type SchemaDeclaration = Record<string, TableDeclaration>;\n\nexport type RouteScope =\n  | { type: \"user\" }\n  | { type: \"machine\" }\n  | { type: \"signed\"; purpose: string }\n  | { type: \"custom\"; justification: string };\n\nexport type RouteContext = {\n  request: Request;\n  /** Resolved for user-scoped routes, so a handler cannot forget to scope. */\n  userId: string | null;\n  /** Verified before dispatch, so a handler cannot forget to check. */\n  claims: { uid: string; purpose: string; exp: number; data?: Record<string, string> } | null;\n  params: Record<string, string>;\n};\n\nexport type RouteDefinition = {\n  path: string;\n  method: \"GET\" | \"POST\";\n  scope: RouteScope;\n  handler: (ctx: RouteContext) => Promise<Response>;\n};\n\n/** Handed to a plugin at startup so it need not be given the database twice. */\nexport type PluginInitContext = {\n  /** Scoped to the tables this plugin declares in schema(). */\n  store: PluginStore;\n  /** The top-level signing secret, for plugins issuing signed links. */\n  secret: string;\n  logger: Logger;\n  /** The app's resolver, for plugins that need timezones or addresses. */\n  getRecipients: (userIds: readonly string[]) => Promise<readonly Recipient[]>;\n  /**\n   * The instance's own send(). A plugin composing a message (a digest, say)\n   * routes it back through the pipeline rather than reaching for a provider,\n   * so it inherits retry, backoff and idempotency for free.\n   */\n  send: (\n    type: string,\n    args: { to: string | readonly string[]; payload: unknown; dedupeKey?: string },\n  ) => Promise<unknown>;\n};\n\nexport type EasyPingPlugin<\n  TId extends string = string,\n  TSchema extends SchemaDeclaration = SchemaDeclaration,\n> = {\n  id: TId;\n  dependsOn?: readonly string[];\n  schema?: TSchema;\n  routes?: readonly RouteDefinition[];\n  hooks?: PluginHooks;\n  /** Channels this plugin delivers. Makes them usable in a notification. */\n  channels?: readonly Channel[];\n  /** Called once by easyPing() before any hook or route can run. */\n  init?: (ctx: PluginInitContext) => void;\n};\n\nexport type AnyPlugin = EasyPingPlugin<string, SchemaDeclaration>;\n\nexport function definePlugin<TId extends string, TSchema extends SchemaDeclaration>(\n  plugin: EasyPingPlugin<TId, TSchema>,\n): EasyPingPlugin<TId, TSchema> {\n  return plugin;\n}\n\nexport type ClientFetch = (path: string, init?: RequestInit) => Promise<unknown>;\n\nexport type ClientPlugin<\n  TId extends string = string,\n  TActions extends Record<string, unknown> = Record<string, unknown>,\n> = {\n  id: TId;\n  /** Phantom. Links client types to the server plugin so a mismatch is a type error. */\n  $InferServerPlugin?: AnyPlugin;\n  actions: (fetch: ClientFetch) => TActions;\n};\n\nexport type AnyClientPlugin = ClientPlugin<string, Record<string, unknown>>;\n\nexport function defineClientPlugin<TId extends string, TActions extends Record<string, unknown>>(\n  plugin: ClientPlugin<TId, TActions>,\n): ClientPlugin<TId, TActions> {\n  return plugin;\n}\n\nexport type UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (\n  k: infer I,\n) => void\n  ? I\n  : never;\n\n/** Naked type parameter, so the conditional distributes over the union. */\ntype ExtractActions<TPlugin> = TPlugin extends { actions: (fetch: never) => infer TActions }\n  ? TActions\n  : never;\n\n/** Indexes the tuple rather than recursing: a fold blows the instantiation depth limit. */\nexport type ActionsOf<TPlugins extends readonly AnyClientPlugin[]> = UnionToIntersection<\n  ExtractActions<TPlugins[number]>\n>;\n"]}

package/dist/chunk-NYDVNMKG.js

@@ -0,0 +1,62 @@
+// src/schema/declaration.ts
+var toSnakeCase = (value) => value.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);
+var coreSchema = {
+  notification: {
+    tableName: "notification",
+    fields: {
+      id: { type: "string", required: true },
+      userId: { type: "string", required: true },
+      type: { type: "string", required: true },
+      payload: { type: "json", required: true },
+      actorId: { type: "string" },
+      groupKey: { type: "string" },
+      dedupeKey: { type: "string" },
+      seenAt: { type: "date" },
+      readAt: { type: "date" },
+      archivedAt: { type: "date" },
+      createdAt: { type: "date", required: true, defaultNow: true }
+    },
+    primaryKey: ["id"],
+    indexes: [
+      { on: ["userId", "createdAt"], name: "notification_feed_idx" },
+      { on: ["userId", "groupKey"], name: "notification_group_idx" },
+      { on: ["userId", "dedupeKey"], unique: true, name: "notification_dedupe_idx" }
+    ]
+  },
+  notificationDelivery: {
+    tableName: "notification_delivery",
+    fields: {
+      id: { type: "string", required: true },
+      notificationId: { type: "string", required: true },
+      channel: { type: "string", required: true },
+      status: { type: "string", required: true, default: "pending" },
+      attempts: { type: "number", required: true, default: 0 },
+      maxAttempts: { type: "number", required: true, default: 5 },
+      notBefore: { type: "date", required: true, defaultNow: true },
+      claimedAt: { type: "date" },
+      claimedBy: { type: "string" },
+      lastError: { type: "string" },
+      updatedAt: { type: "date", required: true, defaultNow: true }
+    },
+    primaryKey: ["id"],
+    indexes: [
+      { on: ["status", "notBefore"], name: "delivery_claim_idx" },
+      { on: ["notificationId"], name: "delivery_notification_idx" }
+    ]
+  },
+  notificationPreference: {
+    tableName: "notification_preference",
+    fields: {
+      userId: { type: "string", required: true },
+      type: { type: "string", required: true },
+      channel: { type: "string", required: true },
+      enabled: { type: "boolean", required: true, default: true },
+      frequency: { type: "string", required: true, default: "instant" }
+    },
+    primaryKey: ["userId", "type", "channel"]
+  }
+};
+
+export { coreSchema, toSnakeCase };
+//# sourceMappingURL=chunk-NYDVNMKG.js.map
+//# sourceMappingURL=chunk-NYDVNMKG.js.map

package/dist/chunk-NYDVNMKG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema/declaration.ts"],"names":[],"mappings":";AAEO,IAAM,WAAA,GAAc,CAAC,KAAA,KAAkB,KAAA,CAAM,OAAA,CAAQ,QAAA,EAAU,CAAC,CAAA,KAAM,CAAA,CAAA,EAAI,CAAA,CAAE,WAAA,EAAa,CAAA,CAAE;AAO3F,IAAM,UAAA,GAAa;AAAA,EACxB,YAAA,EAAc;AAAA,IACZ,SAAA,EAAW,cAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACvC,OAAA,EAAS,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAU,IAAA,EAAK;AAAA,MACxC,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC1B,QAAA,EAAU,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC3B,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC5B,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACvB,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MACvB,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MAC3B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,UAAU,WAAW,CAAA,EAAG,MAAM,uBAAA,EAAwB;AAAA,MAC7D,EAAE,EAAA,EAAI,CAAC,UAAU,UAAU,CAAA,EAAG,MAAM,wBAAA,EAAyB;AAAA,MAC7D,EAAE,IAAI,CAAC,QAAA,EAAU,WAAW,CAAA,EAAG,MAAA,EAAQ,IAAA,EAAM,IAAA,EAAM,yBAAA;AAA0B;AAC/E,GACF;AAAA,EAEA,oBAAA,EAAsB;AAAA,IACpB,SAAA,EAAW,uBAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACrC,cAAA,EAAgB,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACjD,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC1C,QAAQ,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,SAAA,EAAU;AAAA,MAC7D,UAAU,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,CAAA,EAAE;AAAA,MACvD,aAAa,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,CAAA,EAAE;AAAA,MAC1D,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA,EAAK;AAAA,MAC5D,SAAA,EAAW,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,MAC1B,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC5B,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MAC5B,WAAW,EAAE,IAAA,EAAM,QAAQ,QAAA,EAAU,IAAA,EAAM,YAAY,IAAA;AAAK,KAC9D;AAAA,IACA,UAAA,EAAY,CAAC,IAAI,CAAA;AAAA,IACjB,OAAA,EAAS;AAAA,MACP,EAAE,EAAA,EAAI,CAAC,UAAU,WAAW,CAAA,EAAG,MAAM,oBAAA,EAAqB;AAAA,MAC1D,EAAE,EAAA,EAAI,CAAC,gBAAgB,CAAA,EAAG,MAAM,2BAAA;AAA4B;AAC9D,GACF;AAAA,EAEA,sBAAA,EAAwB;AAAA,IACtB,SAAA,EAAW,yBAAA;AAAA,IACX,MAAA,EAAQ;AAAA,MACN,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACzC,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MACvC,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,MAC1C,SAAS,EAAE,IAAA,EAAM,WAAW,QAAA,EAAU,IAAA,EAAM,SAAS,IAAA,EAAK;AAAA,MAC1D,WAAW,EAAE,IAAA,EAAM,UAAU,QAAA,EAAU,IAAA,EAAM,SAAS,SAAA;AAAU,KAClE;AAAA,IACA,UAAA,EAAY,CAAC,QAAA,EAAU,MAAA,EAAQ,SAAS;AAAA;AAE5C","file":"chunk-NYDVNMKG.js","sourcesContent":["import type { SchemaDeclaration } from \"../core/plugin\";\n\nexport const toSnakeCase = (value: string) => value.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);\n\n/**\n * Core tables in the format plugins use. Less expressive than the hand-written\n * Drizzle schema (no partial indexes, ordering or cascade) — a drift test\n * asserts the two agree on the fields they share.\n */\nexport const coreSchema = {\n  notification: {\n    tableName: \"notification\",\n    fields: {\n      id: { type: \"string\", required: true },\n      userId: { type: \"string\", required: true },\n      type: { type: \"string\", required: true },\n      payload: { type: \"json\", required: true },\n      actorId: { type: \"string\" },\n      groupKey: { type: \"string\" },\n      dedupeKey: { type: \"string\" },\n      seenAt: { type: \"date\" },\n      readAt: { type: \"date\" },\n      archivedAt: { type: \"date\" },\n      createdAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"userId\", \"createdAt\"], name: \"notification_feed_idx\" },\n      { on: [\"userId\", \"groupKey\"], name: \"notification_group_idx\" },\n      { on: [\"userId\", \"dedupeKey\"], unique: true, name: \"notification_dedupe_idx\" },\n    ],\n  },\n\n  notificationDelivery: {\n    tableName: \"notification_delivery\",\n    fields: {\n      id: { type: \"string\", required: true },\n      notificationId: { type: \"string\", required: true },\n      channel: { type: \"string\", required: true },\n      status: { type: \"string\", required: true, default: \"pending\" },\n      attempts: { type: \"number\", required: true, default: 0 },\n      maxAttempts: { type: \"number\", required: true, default: 5 },\n      notBefore: { type: \"date\", required: true, defaultNow: true },\n      claimedAt: { type: \"date\" },\n      claimedBy: { type: \"string\" },\n      lastError: { type: \"string\" },\n      updatedAt: { type: \"date\", required: true, defaultNow: true },\n    },\n    primaryKey: [\"id\"],\n    indexes: [\n      { on: [\"status\", \"notBefore\"], name: \"delivery_claim_idx\" },\n      { on: [\"notificationId\"], name: \"delivery_notification_idx\" },\n    ],\n  },\n\n  notificationPreference: {\n    tableName: \"notification_preference\",\n    fields: {\n      userId: { type: \"string\", required: true },\n      type: { type: \"string\", required: true },\n      channel: { type: \"string\", required: true },\n      enabled: { type: \"boolean\", required: true, default: true },\n      frequency: { type: \"string\", required: true, default: \"instant\" },\n    },\n    primaryKey: [\"userId\", \"type\", \"channel\"],\n  },\n} satisfies SchemaDeclaration;\n"]}

package/dist/chunk-OZSOIX23.js

@@ -0,0 +1,120 @@
+import { toSnakeCase } from './chunk-NYDVNMKG.js';
+
+// src/core/errors.ts
+var EasyPingError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "EasyPingError";
+  }
+};
+var ValidationError = class extends EasyPingError {
+  issues;
+  constructor(type, issues) {
+    super(`Payload for "${type}" failed validation: ${issues.map((i) => i.message).join("; ")}`);
+    this.name = "ValidationError";
+    this.issues = issues;
+  }
+};
+var ConfigError = class extends EasyPingError {
+  constructor(message) {
+    super(message);
+    this.name = "ConfigError";
+  }
+};
+var consoleLogger = {
+  warn: (message, meta) => console.warn(`[easy-ping] ${message}`, meta ?? ""),
+  error: (message, meta) => console.error(`[easy-ping] ${message}`, meta ?? "")
+};
+
+// src/core/store.ts
+var OPERATORS = ["in", "lt", "lte", "gt", "gte", "not"];
+var isOperator = (value) => typeof value === "object" && value !== null && !(value instanceof Date) && OPERATORS.some((op) => op in value);
+function createPluginStore(pluginId, schema, storage, prefix) {
+  const byTableName = /* @__PURE__ */ new Map();
+  for (const declaration of Object.values(schema ?? {})) {
+    byTableName.set(declaration.tableName, declaration);
+  }
+  function resolve(table) {
+    const declaration = byTableName.get(table);
+    if (!declaration) {
+      throw new ConfigError(
+        `plugin "${pluginId}" accessed table "${table}", which it does not declare in schema().`
+      );
+    }
+    return declaration;
+  }
+  function checkFields(table, fields, context) {
+    for (const field of fields) {
+      const spec = table.fields[field];
+      if (!spec) {
+        throw new ConfigError(
+          `plugin "${pluginId}" used unknown field "${field}" on "${table.tableName}" (${context}).`
+        );
+      }
+      if (context === "where" && spec.type === "json") {
+        throw new ConfigError(
+          `plugin "${pluginId}" cannot filter on json field "${field}"; a bare object value is indistinguishable from an operator.`
+        );
+      }
+    }
+  }
+  const qualified = (table) => prefix + table.tableName;
+  const column = (field) => storage.naming === "preserve" ? field : toSnakeCase(field);
+  const serialize = (table, row) => {
+    if (storage.serializesJson === false) return row;
+    const out = {};
+    for (const [field, value] of Object.entries(row)) {
+      out[field] = table.fields[field]?.type === "json" && value !== null && value !== void 0 ? JSON.stringify(value) : value;
+    }
+    return out;
+  };
+  return {
+    async find(table, where = {}, options = {}) {
+      const declaration = resolve(table);
+      checkFields(declaration, Object.keys(where), "where");
+      if (options.orderBy) checkFields(declaration, [options.orderBy.field], "orderBy");
+      const rows = await storage.queryTable(qualified(declaration), where, options);
+      return rows.map((row) => {
+        const mapped = {};
+        for (const field of Object.keys(declaration.fields)) {
+          const value = row[column(field)];
+          mapped[field] = declaration.fields[field]?.type === "json" && typeof value === "string" ? JSON.parse(value) : value;
+        }
+        return mapped;
+      });
+    },
+    async insert(table, rows) {
+      const declaration = resolve(table);
+      for (const row of rows) checkFields(declaration, Object.keys(row), "insert");
+      return storage.insertRows(
+        qualified(declaration),
+        rows.map((row) => serialize(declaration, row))
+      );
+    },
+    async upsert(table, rows, options) {
+      const declaration = resolve(table);
+      for (const row of rows) checkFields(declaration, Object.keys(row), "upsert");
+      checkFields(declaration, options.onConflict, "onConflict");
+      return storage.insertRows(
+        qualified(declaration),
+        rows.map((row) => serialize(declaration, row)),
+        options.onConflict
+      );
+    },
+    async update(table, where, set) {
+      const declaration = resolve(table);
+      checkFields(declaration, Object.keys(where), "where");
+      checkFields(declaration, Object.keys(set), "update");
+      return storage.updateRows(qualified(declaration), where, serialize(declaration, set));
+    },
+    async remove(table, where) {
+      const declaration = resolve(table);
+      checkFields(declaration, Object.keys(where), "where");
+      return storage.deleteRows(qualified(declaration), where);
+    }
+  };
+}
+
+export { ConfigError, EasyPingError, ValidationError, consoleLogger, createPluginStore, isOperator };
+//# sourceMappingURL=chunk-OZSOIX23.js.map
+//# sourceMappingURL=chunk-OZSOIX23.js.map

package/dist/chunk-OZSOIX23.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/errors.ts","../src/core/store.ts"],"names":[],"mappings":";;;AAAO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF;AAGO,IAAM,eAAA,GAAN,cAA8B,aAAA,CAAc;AAAA,EACxC,MAAA;AAAA,EAET,WAAA,CAAY,MAAc,MAAA,EAAuD;AAC/E,IAAA,KAAA,CAAM,CAAA,aAAA,EAAgB,IAAI,CAAA,qBAAA,EAAwB,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAC3F,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AACF;AAGO,IAAM,WAAA,GAAN,cAA0B,aAAA,CAAc;AAAA,EAC7C,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AAAA,EACd;AACF;AAOO,IAAM,aAAA,GAAwB;AAAA,EACnC,IAAA,EAAM,CAAC,OAAA,EAAS,IAAA,KAAS,OAAA,CAAQ,KAAK,CAAA,YAAA,EAAe,OAAO,CAAA,CAAA,EAAI,IAAA,IAAQ,EAAE,CAAA;AAAA,EAC1E,KAAA,EAAO,CAAC,OAAA,EAAS,IAAA,KAAS,OAAA,CAAQ,MAAM,CAAA,YAAA,EAAe,OAAO,CAAA,CAAA,EAAI,IAAA,IAAQ,EAAE;AAC9E;;;ACoCA,IAAM,YAAY,CAAC,IAAA,EAAM,MAAM,KAAA,EAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAEjD,IAAM,aAAa,CAAC,KAAA,KACzB,OAAO,KAAA,KAAU,YACjB,KAAA,KAAU,IAAA,IACV,EAAE,KAAA,YAAiB,SACnB,SAAA,CAAU,IAAA,CAAK,CAAC,EAAA,KAAO,MAAM,KAAK;AAO7B,SAAS,iBAAA,CACd,QAAA,EACA,MAAA,EACA,OAAA,EACA,MAAA,EACa;AACb,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAA8B;AACtD,EAAA,KAAA,MAAW,eAAe,MAAA,CAAO,MAAA,CAAO,MAAA,IAAU,EAAE,CAAA,EAAG;AACrD,IAAA,WAAA,CAAY,GAAA,CAAI,WAAA,CAAY,SAAA,EAAW,WAAW,CAAA;AAAA,EACpD;AAEA,EAAA,SAAS,QAAQ,KAAA,EAAiC;AAChD,IAAA,MAAM,WAAA,GAAc,WAAA,CAAY,GAAA,CAAI,KAAK,CAAA;AACzC,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,CAAA,QAAA,EAAW,QAAQ,CAAA,kBAAA,EAAqB,KAAK,CAAA,yCAAA;AAAA,OAC/C;AAAA,IACF;AACA,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,SAAS,WAAA,CAAY,KAAA,EAAyB,MAAA,EAA0B,OAAA,EAAiB;AACvF,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA;AAC/B,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,QAAQ,CAAA,sBAAA,EAAyB,KAAK,SAAS,KAAA,CAAM,SAAS,MAAM,OAAO,CAAA,EAAA;AAAA,SACxF;AAAA,MACF;AACA,MAAA,IAAI,OAAA,KAAY,OAAA,IAAW,IAAA,CAAK,IAAA,KAAS,MAAA,EAAQ;AAC/C,QAAA,MAAM,IAAI,WAAA;AAAA,UACR,CAAA,QAAA,EAAW,QAAQ,CAAA,+BAAA,EAAkC,KAAK,CAAA,6DAAA;AAAA,SAE5D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,KAA4B,MAAA,GAAS,KAAA,CAAM,SAAA;AAG9D,EAAA,MAAM,MAAA,GAAS,CAAC,KAAA,KAAmB,OAAA,CAAQ,WAAW,UAAA,GAAa,KAAA,GAAQ,YAAY,KAAK,CAAA;AAM5F,EAAA,MAAM,SAAA,GAAY,CAAC,KAAA,EAAyB,GAAA,KAAiC;AAC3E,IAAA,IAAI,OAAA,CAAQ,cAAA,KAAmB,KAAA,EAAO,OAAO,GAAA;AAE7C,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,KAAA,EAAO,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAChD,MAAA,GAAA,CAAI,KAAK,CAAA,GACP,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA,EAAG,IAAA,KAAS,MAAA,IAAU,KAAA,KAAU,QAAQ,KAAA,KAAU,MAAA,GAChE,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,GACpB,KAAA;AAAA,IACR;AACA,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,KAAK,KAAA,EAAO,KAAA,GAAQ,EAAC,EAAG,OAAA,GAAU,EAAC,EAAG;AAC1C,MAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,MAAA,WAAA,CAAY,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,KAAK,GAAG,OAAO,CAAA;AACpD,MAAA,IAAI,OAAA,CAAQ,SAAS,WAAA,CAAY,WAAA,EAAa,CAAC,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAA,EAAG,SAAS,CAAA;AAEhF,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,UAAA,CAAW,UAAU,WAAW,CAAA,EAAG,OAAO,OAAO,CAAA;AAK5E,MAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,KAAQ;AACvB,QAAA,MAAM,SAAkC,EAAC;AACzC,QAAA,KAAA,MAAW,KAAA,IAAS,MAAA,CAAO,IAAA,CAAK,WAAA,CAAY,MAAM,CAAA,EAAG;AACnD,UAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,KAAK,CAAC,CAAA;AAE/B,UAAA,MAAA,CAAO,KAAK,CAAA,GACV,WAAA,CAAY,MAAA,CAAO,KAAK,CAAA,EAAG,IAAA,KAAS,MAAA,IAAU,OAAO,KAAA,KAAU,QAAA,GAC3D,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA,GAChB,KAAA;AAAA,QACR;AACA,QAAA,OAAO,MAAA;AAAA,MACT,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,MAAA,KAAA,MAAW,GAAA,IAAO,MAAM,WAAA,CAAY,WAAA,EAAa,OAAO,IAAA,CAAK,GAAG,GAAG,QAAQ,CAAA;AAC3E,MAAA,OAAO,OAAA,CAAQ,UAAA;AAAA,QACb,UAAU,WAAW,CAAA;AAAA,QACrB,KAAK,GAAA,CAAI,CAAC,QAAQ,SAAA,CAAU,WAAA,EAAa,GAAG,CAAC;AAAA,OAC/C;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM,OAAA,EAAS;AACjC,MAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,MAAA,KAAA,MAAW,GAAA,IAAO,MAAM,WAAA,CAAY,WAAA,EAAa,OAAO,IAAA,CAAK,GAAG,GAAG,QAAQ,CAAA;AAC3E,MAAA,WAAA,CAAY,WAAA,EAAa,OAAA,CAAQ,UAAA,EAAY,YAAY,CAAA;AACzD,MAAA,OAAO,OAAA,CAAQ,UAAA;AAAA,QACb,UAAU,WAAW,CAAA;AAAA,QACrB,KAAK,GAAA,CAAI,CAAC,QAAQ,SAAA,CAAU,WAAA,EAAa,GAAG,CAAC,CAAA;AAAA,QAC7C,OAAA,CAAQ;AAAA,OACV;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,KAAA,EAAO,GAAA,EAAK;AAC9B,MAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,MAAA,WAAA,CAAY,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,KAAK,GAAG,OAAO,CAAA;AACpD,MAAA,WAAA,CAAY,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,GAAG,GAAG,QAAQ,CAAA;AACnD,MAAA,OAAO,OAAA,CAAQ,WAAW,SAAA,CAAU,WAAW,GAAG,KAAA,EAAO,SAAA,CAAU,WAAA,EAAa,GAAG,CAAC,CAAA;AAAA,IACtF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,KAAA,EAAO;AACzB,MAAA,MAAM,WAAA,GAAc,QAAQ,KAAK,CAAA;AACjC,MAAA,WAAA,CAAY,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,KAAK,GAAG,OAAO,CAAA;AACpD,MAAA,OAAO,OAAA,CAAQ,UAAA,CAAW,SAAA,CAAU,WAAW,GAAG,KAAK,CAAA;AAAA,IACzD;AAAA,GACF;AACF","file":"chunk-OZSOIX23.js","sourcesContent":["export class EasyPingError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"EasyPingError\";\n  }\n}\n\n/** Thrown when a payload fails its Standard Schema. Developer error. */\nexport class ValidationError extends EasyPingError {\n  readonly issues: readonly { message: string; path?: string }[];\n\n  constructor(type: string, issues: readonly { message: string; path?: string }[]) {\n    super(`Payload for \"${type}\" failed validation: ${issues.map((i) => i.message).join(\"; \")}`);\n    this.name = \"ValidationError\";\n    this.issues = issues;\n  }\n}\n\n/** Thrown at startup for a malformed config. Never at send time. */\nexport class ConfigError extends EasyPingError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"ConfigError\";\n  }\n}\n\nexport type Logger = {\n  warn: (message: string, meta?: Record<string, unknown>) => void;\n  error: (message: string, meta?: Record<string, unknown>) => void;\n};\n\nexport const consoleLogger: Logger = {\n  warn: (message, meta) => console.warn(`[easy-ping] ${message}`, meta ?? \"\"),\n  error: (message, meta) => console.error(`[easy-ping] ${message}`, meta ?? \"\"),\n};\n","import { toSnakeCase } from \"../schema/declaration\";\nimport { ConfigError } from \"./errors\";\nimport type { SchemaDeclaration, TableDeclaration } from \"./plugin\";\n\nexport type Scalar = string | number | boolean | Date | null;\n\n/**\n * One operator per condition. Operators are tagged objects so a bare value is\n * always an equality test; json columns therefore cannot be filtered, since an\n * object value would be ambiguous.\n */\nexport type WhereCondition =\n  | Scalar\n  | { in: readonly (string | number)[] }\n  | { lt: Date | number }\n  | { lte: Date | number }\n  | { gt: Date | number }\n  | { gte: Date | number }\n  | { not: Scalar };\n\nexport type WhereClause = Record<string, WhereCondition>;\n\nexport type QueryOptions = {\n  limit?: number;\n  orderBy?: { field: string; direction: \"asc\" | \"desc\" };\n};\n\nexport type UpsertOptions = { onConflict: readonly string[] };\n\n/**\n * Table access for plugins, scoped to the tables that plugin declared.\n *\n * Plugins could always declare tables via schema() but had no way to read\n * them, so preferences had to bolt its queries onto the core adapter. That\n * does not generalise to digests or push.\n */\nexport type PluginStore = {\n  find<T = Record<string, unknown>>(\n    table: string,\n    where?: WhereClause,\n    options?: QueryOptions,\n  ): Promise<T[]>;\n  insert(table: string, rows: readonly Record<string, unknown>[]): Promise<number>;\n  upsert(\n    table: string,\n    rows: readonly Record<string, unknown>[],\n    options: UpsertOptions,\n  ): Promise<number>;\n  update(table: string, where: WhereClause, set: Record<string, unknown>): Promise<number>;\n  remove(table: string, where: WhereClause): Promise<number>;\n};\n\nexport type TableStorage = {\n  readonly naming?: \"snake_case\" | \"preserve\";\n  readonly serializesJson?: boolean;\n\n  queryTable(\n    table: string,\n    where: WhereClause,\n    options: QueryOptions,\n  ): Promise<Record<string, unknown>[]>;\n  insertRows(\n    table: string,\n    rows: readonly Record<string, unknown>[],\n    onConflict?: readonly string[],\n  ): Promise<number>;\n  updateRows(table: string, where: WhereClause, set: Record<string, unknown>): Promise<number>;\n  deleteRows(table: string, where: WhereClause): Promise<number>;\n};\n\nconst OPERATORS = [\"in\", \"lt\", \"lte\", \"gt\", \"gte\", \"not\"] as const;\n\nexport const isOperator = (value: unknown): boolean =>\n  typeof value === \"object\" &&\n  value !== null &&\n  !(value instanceof Date) &&\n  OPERATORS.some((op) => op in value);\n\n/**\n * Every table and column a plugin touches is checked against its own\n * declaration. Without this a plugin could read the notification table, and\n * unvalidated identifiers would reach the SQL builder.\n */\nexport function createPluginStore(\n  pluginId: string,\n  schema: SchemaDeclaration | undefined,\n  storage: TableStorage,\n  prefix: string,\n): PluginStore {\n  const byTableName = new Map<string, TableDeclaration>();\n  for (const declaration of Object.values(schema ?? {})) {\n    byTableName.set(declaration.tableName, declaration);\n  }\n\n  function resolve(table: string): TableDeclaration {\n    const declaration = byTableName.get(table);\n    if (!declaration) {\n      throw new ConfigError(\n        `plugin \"${pluginId}\" accessed table \"${table}\", which it does not declare in schema().`,\n      );\n    }\n    return declaration;\n  }\n\n  function checkFields(table: TableDeclaration, fields: Iterable<string>, context: string) {\n    for (const field of fields) {\n      const spec = table.fields[field];\n      if (!spec) {\n        throw new ConfigError(\n          `plugin \"${pluginId}\" used unknown field \"${field}\" on \"${table.tableName}\" (${context}).`,\n        );\n      }\n      if (context === \"where\" && spec.type === \"json\") {\n        throw new ConfigError(\n          `plugin \"${pluginId}\" cannot filter on json field \"${field}\"; ` +\n            \"a bare object value is indistinguishable from an operator.\",\n        );\n      }\n    }\n  }\n\n  const qualified = (table: TableDeclaration) => prefix + table.tableName;\n\n  // A document store keeps the declared names; a SQL adapter wants columns.\n  const column = (field: string) => (storage.naming === \"preserve\" ? field : toSnakeCase(field));\n\n  /**\n   * json columns must be handed to the driver as text; postgres-js cannot bind\n   * a plain object and the insert fails outright.\n   */\n  const serialize = (table: TableDeclaration, row: Record<string, unknown>) => {\n    if (storage.serializesJson === false) return row;\n\n    const out: Record<string, unknown> = {};\n    for (const [field, value] of Object.entries(row)) {\n      out[field] =\n        table.fields[field]?.type === \"json\" && value !== null && value !== undefined\n          ? JSON.stringify(value)\n          : value;\n    }\n    return out;\n  };\n\n  return {\n    async find(table, where = {}, options = {}) {\n      const declaration = resolve(table);\n      checkFields(declaration, Object.keys(where), \"where\");\n      if (options.orderBy) checkFields(declaration, [options.orderBy.field], \"orderBy\");\n\n      const rows = await storage.queryTable(qualified(declaration), where, options);\n\n      // SELECT * returns snake_case columns; plugins declare camelCase fields\n      // and type their reads that way. Without this every property is\n      // undefined at runtime while typechecking perfectly.\n      return rows.map((row) => {\n        const mapped: Record<string, unknown> = {};\n        for (const field of Object.keys(declaration.fields)) {\n          const value = row[column(field)];\n          // Drivers differ: some hand back parsed jsonb, some raw text.\n          mapped[field] =\n            declaration.fields[field]?.type === \"json\" && typeof value === \"string\"\n              ? JSON.parse(value)\n              : value;\n        }\n        return mapped;\n      }) as never;\n    },\n\n    async insert(table, rows) {\n      const declaration = resolve(table);\n      for (const row of rows) checkFields(declaration, Object.keys(row), \"insert\");\n      return storage.insertRows(\n        qualified(declaration),\n        rows.map((row) => serialize(declaration, row)),\n      );\n    },\n\n    async upsert(table, rows, options) {\n      const declaration = resolve(table);\n      for (const row of rows) checkFields(declaration, Object.keys(row), \"upsert\");\n      checkFields(declaration, options.onConflict, \"onConflict\");\n      return storage.insertRows(\n        qualified(declaration),\n        rows.map((row) => serialize(declaration, row)),\n        options.onConflict,\n      );\n    },\n\n    async update(table, where, set) {\n      const declaration = resolve(table);\n      checkFields(declaration, Object.keys(where), \"where\");\n      checkFields(declaration, Object.keys(set), \"update\");\n      return storage.updateRows(qualified(declaration), where, serialize(declaration, set));\n    },\n\n    async remove(table, where) {\n      const declaration = resolve(table);\n      checkFields(declaration, Object.keys(where), \"where\");\n      return storage.deleteRows(qualified(declaration), where);\n    },\n  };\n}\n"]}

package/dist/chunk-PTGHMCCG.js

@@ -0,0 +1,23 @@
+// src/core/base64url.ts
+function encodeBase64Url(input) {
+  const bytes = typeof input === "string" ? new TextEncoder().encode(input) : input;
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function decodeBase64UrlBytes(value) {
+  try {
+    const binary = atob(value.replace(/-/g, "+").replace(/_/g, "/"));
+    return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+  } catch {
+    return null;
+  }
+}
+function decodeBase64Url(value) {
+  const bytes = decodeBase64UrlBytes(value);
+  return bytes ? new TextDecoder().decode(bytes) : null;
+}
+
+export { decodeBase64Url, decodeBase64UrlBytes, encodeBase64Url };
+//# sourceMappingURL=chunk-PTGHMCCG.js.map
+//# sourceMappingURL=chunk-PTGHMCCG.js.map

package/dist/chunk-PTGHMCCG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/base64url.ts"],"names":[],"mappings":";AAEO,SAAS,gBAAgB,KAAA,EAAoC;AAClE,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA,GAAI,KAAA;AAC5E,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,MAAA,IAAU,MAAA,CAAO,aAAa,IAAI,CAAA;AAC5D,EAAA,OAAO,IAAA,CAAK,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/E;AAGO,SAAS,qBAAqB,KAAA,EAA+C;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA;AAC/D,IAAA,OAAO,UAAA,CAAW,KAAK,MAAA,EAAQ,CAAC,SAAS,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,gBAAgB,KAAA,EAA8B;AAC5D,EAAA,MAAM,KAAA,GAAQ,qBAAqB,KAAK,CAAA;AACxC,EAAA,OAAO,QAAQ,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA,GAAI,IAAA;AACnD","file":"chunk-PTGHMCCG.js","sourcesContent":["// Web APIs, not Buffer: this runs on Workers and Vercel Edge.\n\nexport function encodeBase64Url(input: string | Uint8Array): string {\n  const bytes = typeof input === \"string\" ? new TextEncoder().encode(input) : input;\n  let binary = \"\";\n  for (const byte of bytes) binary += String.fromCharCode(byte);\n  return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n// Uint8Array<ArrayBuffer>: bare Uint8Array widens and is not a BufferSource.\nexport function decodeBase64UrlBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  try {\n    const binary = atob(value.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    return Uint8Array.from(binary, (char) => char.charCodeAt(0));\n  } catch {\n    return null;\n  }\n}\n\nexport function decodeBase64Url(value: string): string | null {\n  const bytes = decodeBase64UrlBytes(value);\n  return bytes ? new TextDecoder().decode(bytes) : null;\n}\n"]}

package/dist/chunk-W3BMEPPQ.js

@@ -0,0 +1,50 @@
+import { encodeBase64Url, decodeBase64UrlBytes, decodeBase64Url } from './chunk-PTGHMCCG.js';
+
+// src/core/tokens.ts
+var encoder = new TextEncoder();
+async function hmacKey(secret) {
+  return crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign", "verify"]
+  );
+}
+async function signToken(secret, claims) {
+  const body = encodeBase64Url(JSON.stringify(claims));
+  const signature = await crypto.subtle.sign("HMAC", await hmacKey(secret), encoder.encode(body));
+  return `${body}.${encodeBase64Url(new Uint8Array(signature))}`;
+}
+async function verifyToken(secret, token, purpose, now = /* @__PURE__ */ new Date()) {
+  const separator = token.lastIndexOf(".");
+  if (separator <= 0) return null;
+  const body = token.slice(0, separator);
+  const signature = decodeBase64UrlBytes(token.slice(separator + 1));
+  if (!signature) return null;
+  const valid = await crypto.subtle.verify(
+    "HMAC",
+    await hmacKey(secret),
+    signature,
+    encoder.encode(body)
+  );
+  if (!valid) return null;
+  const decoded = decodeBase64Url(body);
+  if (!decoded) return null;
+  let claims;
+  try {
+    claims = JSON.parse(decoded);
+  } catch {
+    return null;
+  }
+  if (typeof claims?.uid !== "string" || typeof claims.exp !== "number") return null;
+  if (claims.purpose !== purpose) return null;
+  if (claims.exp * 1e3 <= now.getTime()) return null;
+  return claims;
+}
+var DEFAULT_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;
+var expiresIn = (seconds, now = /* @__PURE__ */ new Date()) => Math.floor(now.getTime() / 1e3) + seconds;
+
+export { DEFAULT_TOKEN_TTL_SECONDS, expiresIn, signToken, verifyToken };
+//# sourceMappingURL=chunk-W3BMEPPQ.js.map
+//# sourceMappingURL=chunk-W3BMEPPQ.js.map

package/dist/chunk-W3BMEPPQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/tokens.ts"],"names":[],"mappings":";;;AAaA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAEhC,eAAe,QAAQ,MAAA,EAAoC;AACzD,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACrB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,GACnB;AACF;AAEA,eAAsB,SAAA,CAAU,QAAgB,MAAA,EAAsC;AACpF,EAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AACnD,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,MAAM,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAC9F,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,eAAA,CAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AAC9D;AAGA,eAAsB,YACpB,MAAA,EACA,KAAA,EACA,SACA,GAAA,mBAAY,IAAI,MAAK,EACQ;AAC7B,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,WAAA,CAAY,GAAG,CAAA;AACvC,EAAA,IAAI,SAAA,IAAa,GAAG,OAAO,IAAA;AAE3B,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,SAAS,CAAA;AACrC,EAAA,MAAM,YAAY,oBAAA,CAAqB,KAAA,CAAM,KAAA,CAAM,SAAA,GAAY,CAAC,CAAC,CAAA;AACjE,EAAA,IAAI,CAAC,WAAW,OAAO,IAAA;AAGvB,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA,CAAO,MAAA;AAAA,IAChC,MAAA;AAAA,IACA,MAAM,QAAQ,MAAM,CAAA;AAAA,IACpB,SAAA;AAAA,IACA,OAAA,CAAQ,OAAO,IAAI;AAAA,GACrB;AACA,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AAEnB,EAAA,MAAM,OAAA,GAAU,gBAAgB,IAAI,CAAA;AACpC,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,QAAQ,GAAA,KAAQ,QAAA,IAAY,OAAO,MAAA,CAAO,GAAA,KAAQ,UAAU,OAAO,IAAA;AAE9E,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,OAAA,EAAS,OAAO,IAAA;AACvC,EAAA,IAAI,OAAO,GAAA,GAAM,GAAA,IAAQ,GAAA,CAAI,OAAA,IAAW,OAAO,IAAA;AAE/C,EAAA,OAAO,MAAA;AACT;AAEO,IAAM,yBAAA,GAA4B,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK;AAEjD,IAAM,SAAA,GAAY,CAAC,OAAA,EAAiB,GAAA,mBAAY,IAAI,IAAA,EAAK,KAC9D,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,EAAQ,GAAI,GAAI,CAAA,GAAI","file":"chunk-W3BMEPPQ.js","sourcesContent":["import { decodeBase64Url, decodeBase64UrlBytes, encodeBase64Url } from \"./base64url\";\n\nexport type TokenClaims = {\n  /** Subject — the user the token acts for. */\n  uid: string;\n  /** What the token is allowed to do. Verification requires an exact match. */\n  purpose: string;\n  /** Expiry, epoch seconds. */\n  exp: number;\n  /** Free-form, purpose-specific. */\n  data?: Record<string, string>;\n};\n\nconst encoder = new TextEncoder();\n\nasync function hmacKey(secret: string): Promise<CryptoKey> {\n  return crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n}\n\nexport async function signToken(secret: string, claims: TokenClaims): Promise<string> {\n  const body = encodeBase64Url(JSON.stringify(claims));\n  const signature = await crypto.subtle.sign(\"HMAC\", await hmacKey(secret), encoder.encode(body));\n  return `${body}.${encodeBase64Url(new Uint8Array(signature))}`;\n}\n\n/** null for every failure mode. Distinguishing them tells an attacker which part to fix. */\nexport async function verifyToken(\n  secret: string,\n  token: string,\n  purpose: string,\n  now: Date = new Date(),\n): Promise<TokenClaims | null> {\n  const separator = token.lastIndexOf(\".\");\n  if (separator <= 0) return null;\n\n  const body = token.slice(0, separator);\n  const signature = decodeBase64UrlBytes(token.slice(separator + 1));\n  if (!signature) return null;\n\n  // crypto.subtle.verify is constant-time.\n  const valid = await crypto.subtle.verify(\n    \"HMAC\",\n    await hmacKey(secret),\n    signature,\n    encoder.encode(body),\n  );\n  if (!valid) return null;\n\n  const decoded = decodeBase64Url(body);\n  if (!decoded) return null;\n\n  let claims: TokenClaims;\n  try {\n    claims = JSON.parse(decoded) as TokenClaims;\n  } catch {\n    return null;\n  }\n\n  if (typeof claims?.uid !== \"string\" || typeof claims.exp !== \"number\") return null;\n  // Scoped so an unsubscribe token can never be replayed against another route.\n  if (claims.purpose !== purpose) return null;\n  if (claims.exp * 1000 <= now.getTime()) return null;\n\n  return claims;\n}\n\nexport const DEFAULT_TOKEN_TTL_SECONDS = 30 * 24 * 60 * 60;\n\nexport const expiresIn = (seconds: number, now: Date = new Date()): number =>\n  Math.floor(now.getTime() / 1000) + seconds;\n"]}

package/dist/client.cjs

@@ -0,0 +1,160 @@
+'use strict';
+
+// src/client/index.ts
+var INITIAL = {
+  notifications: [],
+  unseenCount: 0,
+  unreadCount: 0,
+  nextCursor: null,
+  isLoading: true,
+  error: null
+};
+var countUnread = (rows) => rows.reduce((total, row) => row.readAt === null ? total + 1 : total, 0);
+function createNotifyClient(options = {}) {
+  const baseUrl = (options.baseUrl ?? "/api/notifications").replace(/\/$/, "");
+  const doFetch = options.fetch ?? ((...args) => globalThis.fetch(...args));
+  const limit = options.limit ?? 20;
+  const pollIntervalMs = options.pollIntervalMs ?? 15e3;
+  const maxPollIntervalMs = options.maxPollIntervalMs ?? 5 * 6e4;
+  const isHidden = options.isDocumentHidden ?? (() => typeof document !== "undefined" && document.visibilityState === "hidden");
+  let state = INITIAL;
+  const listeners = /* @__PURE__ */ new Set();
+  let timer;
+  let consecutiveFailures = 0;
+  let generation = 0;
+  function set(patch) {
+    state = { ...state, ...patch };
+    state = { ...state, unreadCount: countUnread(state.notifications) };
+    for (const listener of listeners) listener(state);
+  }
+  async function request(path, init) {
+    const response = await doFetch(`${baseUrl}${path}`, {
+      ...init,
+      headers: { "content-type": "application/json", ...init?.headers }
+    });
+    if (!response.ok)
+      throw new Error(`${init?.method ?? "GET"} ${path} failed: ${response.status}`);
+    return await response.json();
+  }
+  async function refresh() {
+    const startedAt = generation;
+    const [page, count] = await Promise.all([
+      request(`/?limit=${limit}`),
+      request("/count")
+    ]);
+    if (generation !== startedAt) return;
+    set({
+      notifications: page.notifications,
+      nextCursor: page.nextCursor,
+      unseenCount: count.unseen,
+      isLoading: false,
+      error: null
+    });
+  }
+  let loadingMore;
+  async function loadMore() {
+    if (!state.nextCursor) return;
+    if (loadingMore) return loadingMore;
+    const cursor = state.nextCursor;
+    loadingMore = (async () => {
+      try {
+        const page = await request(`/?limit=${limit}&cursor=${encodeURIComponent(cursor)}`);
+        const known = new Set(state.notifications.map((row) => row.id));
+        set({
+          notifications: [
+            ...state.notifications,
+            ...page.notifications.filter((row) => !known.has(row.id))
+          ],
+          nextCursor: page.nextCursor
+        });
+      } finally {
+        loadingMore = void 0;
+      }
+    })();
+    return loadingMore;
+  }
+  async function optimistic(apply, patch, send) {
+    const previous = state;
+    generation += 1;
+    set({ notifications: apply(state.notifications), ...patch });
+    try {
+      await send();
+    } catch (error) {
+      generation += 1;
+      state = previous;
+      for (const listener of listeners) listener(state);
+      throw error;
+    }
+  }
+  const stamp = () => (/* @__PURE__ */ new Date()).toISOString();
+  async function markAsRead(id) {
+    await optimistic(
+      (rows) => rows.map((row) => row.id === id ? { ...row, readAt: row.readAt ?? stamp() } : row),
+      {},
+      () => request("/read", { method: "POST", body: JSON.stringify({ ids: [id] }) })
+    );
+  }
+  async function markAllRead() {
+    await optimistic(
+      (rows) => rows.map((row) => ({ ...row, readAt: row.readAt ?? stamp() })),
+      {},
+      () => request("/read-all", { method: "POST" })
+    );
+  }
+  async function markSeen() {
+    const newest = state.notifications[0]?.createdAt;
+    await optimistic(
+      (rows) => rows.map((row) => ({ ...row, seenAt: row.seenAt ?? stamp() })),
+      { unseenCount: 0 },
+      () => request("/seen", {
+        method: "POST",
+        body: JSON.stringify(newest ? { before: newest } : {})
+      })
+    );
+  }
+  function schedule(delay) {
+    clearTimeout(timer);
+    timer = setTimeout(tick, delay);
+  }
+  async function tick() {
+    if (isHidden()) {
+      schedule(pollIntervalMs);
+      return;
+    }
+    try {
+      await refresh();
+      consecutiveFailures = 0;
+    } catch (error) {
+      consecutiveFailures += 1;
+      set({ isLoading: false, error: error instanceof Error ? error : new Error(String(error)) });
+    }
+    schedule(
+      consecutiveFailures === 0 ? pollIntervalMs : Math.min(pollIntervalMs * 2 ** consecutiveFailures, maxPollIntervalMs)
+    );
+  }
+  function subscribe(listener) {
+    listeners.add(listener);
+    listener(state);
+    if (listeners.size === 1) void tick();
+    return () => {
+      listeners.delete(listener);
+      if (listeners.size === 0) {
+        clearTimeout(timer);
+        timer = void 0;
+      }
+    };
+  }
+  return {
+    subscribe,
+    refresh,
+    loadMore,
+    markAsRead,
+    markAllRead,
+    markSeen,
+    getState: () => state
+  };
+}
+
+exports.createNotifyClient = createNotifyClient;
+//# sourceMappingURL=client.cjs.map
+//# sourceMappingURL=client.cjs.map