easy-ping 0.8.1 → 0.10.0

package/dist/providers/expo-push.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/expo-push/index.ts"],"names":[],"mappings":";AA0DO,IAAM,eAAA,GAAkB,CAAC,KAAA,KAC9B,6CAAA,CAA8C,KAAK,KAAK;AAGnD,IAAM,eAAA,GAAkB;AAExB,IAAM,kBAAA,GAAqB;AAGlC,IAAM,IAAA,mBAAO,IAAI,GAAA,CAAI,CAAC,qBAAqB,CAAC,CAAA;AAC5C,IAAM,4BAAY,IAAI,GAAA,CAAI,CAAC,qBAAA,EAAuB,eAAA,EAAiB,WAAW,CAAC,CAAA;AAE/E,IAAM,QAAA,GAAW,CACf,IAAA,EACA,OAAA,MAC0D;AAAA,EAC1D,KAAA,EAAO,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,WAAW,EAAE,CAAA,CAAA,CAAG,IAAA,EAAK,GAAK,OAAA,IAAW,kBAAA;AAAA,EAC/D,IAAA,EAAM,IAAA,KAAS,MAAA,IAAa,IAAA,CAAK,IAAI,IAAI,CAAA;AAAA,EACzC,SAAA,EAAW,IAAA,KAAS,MAAA,IAAa,SAAA,CAAU,IAAI,IAAI;AACrD,CAAA,CAAA;AAGO,SAAS,QAAA,CAAS,OAAA,GAA2B,EAAC,EAAuB;AAC1E,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,QAAQ,OAAA,CAAQ,OAAA,IAAW,kBAAA,EAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtE,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,GAAA;AACvC,EAAA,MAAM,MAAA,GAAS,CAAC,IAAA,KACd,OAAA,CAAQ,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,CAAE,IAAA,CAAK,SAAS,CAAA,GAAI,IAAA;AAE1E,EAAA,eAAe,IAAA,CAAQ,IAAA,EAAc,IAAA,EAAe,MAAA,EAAkC;AACpF,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,OAAA,CAAQ,SAAS,CAAA;AAC7C,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,MAAA,EAAQ,kBAAA;AAAA,MACR,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,IAAI,QAAQ,WAAA,EAAa,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,QAAQ,WAAW,CAAA,CAAA;AAC9E,IAAA,MAAM,WAAW,MAAM,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MAC/C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,MAAA,EAAQ,SAAS,WAAA,CAAY,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA,GAAI;AAAA,KACvD,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAA,CAAA,CAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA,EAAG,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,CAAA,UAAA,EAAa,IAAI,CAAA,cAAA,EAAiB,QAAA,CAAS,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAG,IAAA,EAAM,CAAA;AAC1F,MAAC,KAAA,CAA8B,SAAS,QAAA,CAAS,MAAA;AACjD,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAC9B;AAEA,EAAA,MAAM,gBAAA,GAAmB,CAAC,KAAA,KAAqC;AAC7D,IAAA,MAAM,SAAU,KAAA,EAA+B,MAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,OAAO,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAE7E,IAAA,MAAM,SAAA,GAAY,MAAA,KAAW,MAAA,IAAa,MAAA,KAAW,OAAO,MAAA,IAAU,GAAA;AACtE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,OAAA,EAAS,IAAA,EAAM,OAAO,SAAA,EAAU;AAAA,EAC7D,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,WAAA;AAAA,IACN,YAAA,EAAc,eAAA;AAAA,IAEd,MAAM,IAAA,CAAK,QAAA,EAAU,MAAA,EAAQ;AAC3B,MAAA,MAAM,UAA8B,EAAC;AACrC,MAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,QAAA,CAAS,MAAA,EAAQ,SAAS,eAAA,EAAiB;AACrE,QAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,QAAQ,eAAe,CAAA;AAC3D,QAAA,IAAI,OAAA;AACJ,QAAA,IAAI;AACF,UAAA,MAAM,WAAW,MAAM,IAAA;AAAA,YACrB,sBAAA;AAAA,YACA,KAAA,CAAM,GAAA,CAAI,CAAC,OAAA,MAAa;AAAA,cACtB,IAAI,OAAA,CAAQ,KAAA;AAAA,cACZ,OAAO,OAAA,CAAQ,KAAA;AAAA,cACf,MAAM,OAAA,CAAQ,IAAA;AAAA,cACd,GAAI,QAAQ,IAAA,GAAO,EAAE,MAAM,OAAA,CAAQ,IAAA,KAAS,EAAC;AAAA,cAC7C,GAAI,QAAQ,KAAA,KAAU,KAAA,CAAA,GAAY,EAAC,GAAI,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM;AAAA,cAC9D,GAAI,OAAA,CAAQ,KAAA,KAAU,KAAA,CAAA,GAAY,EAAE,KAAA,EAAO,SAAA,EAAU,GAAI,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM;AAAA,cAChF,GAAI,QAAQ,SAAA,GAAY,EAAE,WAAW,OAAA,CAAQ,SAAA,KAAc;AAAC,aAC9D,CAAE,CAAA;AAAA,YACF;AAAA,WACF;AACA,UAAA,OAAA,GAAU,QAAA,CAAS,IAAA;AAAA,QACrB,SAAS,KAAA,EAAO;AACd,UAAA,MAAM,OAAA,GAAU,iBAAiB,KAAK,CAAA;AACtC,UAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,OAAO,CAAA;AAC3C,UAAA;AAAA,QACF;AACA,QAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,KAAA,KAAU;AAC1B,UAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,UAAA,IAAI,CAAC,MAAA,EAAQ;AACX,YAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,sBAAsB,IAAA,EAAM,KAAA,EAAO,SAAA,EAAW,IAAA,EAAM,CAAA;AAAA,UACvF,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,KAAW,IAAA,EAAM;AACjC,YAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,IAAA,EAAM,UAAU,MAAA,CAAO,EAAA,IAAM,MAAM,CAAA;AAAA,UACxD,CAAA,MAAO;AACL,YAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,KAAA,EAAO,GAAG,QAAA,CAAS,MAAA,CAAO,OAAA,EAAS,KAAA,EAAO,MAAA,CAAO,OAAO,CAAA,EAAG,CAAA;AAAA,UAChF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,QAAA,CAAS,SAAA,EAAW,MAAA,EAAQ;AAChC,MAAA,MAAM,MAA2B,EAAC;AAClC,MAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,SAAA,CAAU,MAAA,EAAQ,SAAS,kBAAA,EAAoB;AACzE,QAAA,MAAM,GAAA,GAAM,SAAA,CAAU,KAAA,CAAM,KAAA,EAAO,QAAQ,kBAAkB,CAAA;AAC7D,QAAA,MAAM,WAAW,MAAM,IAAA;AAAA,UACrB,6BAAA;AAAA,UACA,EAAE,GAAA,EAAI;AAAA,UACN;AAAA,SACF;AACA,QAAA,KAAA,MAAW,CAAC,QAAA,EAAU,OAAO,CAAA,IAAK,MAAA,CAAO,QAAQ,QAAA,CAAS,IAAA,IAAQ,EAAE,CAAA,EAAG;AACrE,UAAA,IAAI,OAAA,CAAQ,WAAW,IAAA,EAAM,GAAA,CAAI,KAAK,EAAE,QAAA,EAAU,EAAA,EAAI,IAAA,EAAM,CAAA;AAAA,eACvD;AACH,YAAA,MAAM,EAAE,OAAO,IAAA,EAAK,GAAI,SAAS,OAAA,CAAQ,OAAA,EAAS,KAAA,EAAO,OAAA,CAAQ,OAAO,CAAA;AACxE,YAAA,GAAA,CAAI,KAAK,EAAE,QAAA,EAAU,IAAI,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAAA,UAC/C;AAAA,QACF;AAAA,MACF;AACA,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,GACF;AACF","file":"expo-push.js","sourcesContent":["export type MobilePushMessage = {\n  /** The device's push token as the app registered it. */\n  token: string;\n  title: string;\n  body: string;\n  data?: Record<string, unknown> | undefined;\n  badge?: number | undefined;\n  /** \"default\" plays the platform sound; null is silent. */\n  sound?: \"default\" | null | undefined;\n  /** Android notification channel id. */\n  channelId?: string | undefined;\n};\n\nexport type MobilePushTicket =\n  | { ok: true; ticketId: string | null }\n  | {\n      ok: false;\n      error: string;\n      /** The token will never work again (app uninstalled, token rotated). Prune it. */\n      gone: boolean;\n      retryable: boolean;\n    };\n\nexport type MobilePushReceipt =\n  | { ticketId: string; ok: true }\n  | { ticketId: string; ok: false; error: string; gone: boolean };\n\nexport type MobilePushProvider = {\n  name: string;\n  /** True for a token this provider can deliver to. Rejected at registration otherwise. */\n  isValidToken(token: string): boolean;\n  /** One result per message, in order. Never throws for a per-token failure. */\n  send(messages: readonly MobilePushMessage[], signal?: AbortSignal): Promise<MobilePushTicket[]>;\n  /**\n   * Some services (Expo) accept a message, then learn from APNs/FCM later\n   * that the device is gone. Receipts carry that late verdict.\n   */\n  receipts?(ticketIds: readonly string[], signal?: AbortSignal): Promise<MobilePushReceipt[]>;\n};\n\nexport type ExpoPushOptions = {\n  /** Expo \"enhanced security\" access token. Optional; when set, requests without it are refused by Expo. */\n  accessToken?: string | undefined;\n  fetch?: typeof globalThis.fetch | undefined;\n  /** Default https://exp.host. A local fake for tests. */\n  apiBase?: string | undefined;\n  timeoutMs?: number | undefined;\n};\n\ntype ExpoTicket =\n  | { status: \"ok\"; id: string }\n  | { status: \"error\"; message?: string; details?: { error?: string } };\n\ntype ExpoReceipt =\n  | { status: \"ok\" }\n  | { status: \"error\"; message?: string; details?: { error?: string } };\n\n/** Expo tokens look like ExponentPushToken[xxxxxxxxxxxxxxxxxxxxxx] or ExpoPushToken[...]. */\nexport const isExpoPushToken = (token: string): boolean =>\n  /^Expo(nent)?PushToken\\[[A-Za-z0-9_-]{8,}\\]$/.test(token);\n\n/** Expo's send endpoint takes at most this many messages per request. */\nexport const EXPO_SEND_BATCH = 100;\n/** And its receipts endpoint at most this many ids. */\nexport const EXPO_RECEIPT_BATCH = 1000;\n\n// Expo's error codes, per https://docs.expo.dev/push-notifications/sending-notifications/#individual-errors\nconst GONE = new Set([\"DeviceNotRegistered\"]);\nconst RETRYABLE = new Set([\"MessageRateExceeded\", \"ProviderError\", \"ExpoError\"]);\n\nconst classify = (\n  code: string | undefined,\n  message: string | undefined,\n): { error: string; gone: boolean; retryable: boolean } => ({\n  error: code ? `${code}: ${message ?? \"\"}`.trim() : (message ?? \"expo push failed\"),\n  gone: code !== undefined && GONE.has(code),\n  retryable: code !== undefined && RETRYABLE.has(code),\n});\n\n/** Expo Push over fetch, so it runs on edge runtimes. Batches, classifies, never throws per token. */\nexport function expoPush(options: ExpoPushOptions = {}): MobilePushProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const base = (options.apiBase ?? \"https://exp.host\").replace(/\\/$/, \"\");\n  const timeoutMs = options.timeoutMs ?? 10_000;\n  const redact = (text: string) =>\n    options.accessToken ? text.split(options.accessToken).join(\"<token>\") : text;\n\n  async function post<T>(path: string, body: unknown, signal?: AbortSignal): Promise<T> {\n    const timeout = AbortSignal.timeout(timeoutMs);\n    const headers: Record<string, string> = {\n      accept: \"application/json\",\n      \"content-type\": \"application/json\",\n    };\n    if (options.accessToken) headers.authorization = `Bearer ${options.accessToken}`;\n    const response = await doFetch(`${base}${path}`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(body),\n      signal: signal ? AbortSignal.any([signal, timeout]) : timeout,\n    });\n    if (!response.ok) {\n      const text = redact((await response.text().catch(() => \"\")).slice(0, 200));\n      const error = new Error(`expo push ${path} failed: HTTP ${response.status} ${text}`.trim());\n      (error as { status?: number }).status = response.status;\n      throw error;\n    }\n    return (await response.json()) as T;\n  }\n\n  const transportFailure = (error: unknown): MobilePushTicket => {\n    const status = (error as { status?: number })?.status;\n    const message = redact(error instanceof Error ? error.message : String(error));\n    // 4xx from the service itself (bad access token, malformed request) cannot be fixed by retrying.\n    const retryable = status === undefined || status === 429 || status >= 500;\n    return { ok: false, error: message, gone: false, retryable };\n  };\n\n  return {\n    name: \"expo-push\",\n    isValidToken: isExpoPushToken,\n\n    async send(messages, signal) {\n      const results: MobilePushTicket[] = [];\n      for (let start = 0; start < messages.length; start += EXPO_SEND_BATCH) {\n        const batch = messages.slice(start, start + EXPO_SEND_BATCH);\n        let tickets: ExpoTicket[];\n        try {\n          const response = await post<{ data: ExpoTicket[] }>(\n            \"/--/api/v2/push/send\",\n            batch.map((message) => ({\n              to: message.token,\n              title: message.title,\n              body: message.body,\n              ...(message.data ? { data: message.data } : {}),\n              ...(message.badge === undefined ? {} : { badge: message.badge }),\n              ...(message.sound === undefined ? { sound: \"default\" } : { sound: message.sound }),\n              ...(message.channelId ? { channelId: message.channelId } : {}),\n            })),\n            signal,\n          );\n          tickets = response.data;\n        } catch (error) {\n          const failure = transportFailure(error);\n          for (const _ of batch) results.push(failure);\n          continue;\n        }\n        batch.forEach((_, index) => {\n          const ticket = tickets[index];\n          if (!ticket) {\n            results.push({ ok: false, error: \"no ticket returned\", gone: false, retryable: true });\n          } else if (ticket.status === \"ok\") {\n            results.push({ ok: true, ticketId: ticket.id ?? null });\n          } else {\n            results.push({ ok: false, ...classify(ticket.details?.error, ticket.message) });\n          }\n        });\n      }\n      return results;\n    },\n\n    async receipts(ticketIds, signal) {\n      const out: MobilePushReceipt[] = [];\n      for (let start = 0; start < ticketIds.length; start += EXPO_RECEIPT_BATCH) {\n        const ids = ticketIds.slice(start, start + EXPO_RECEIPT_BATCH);\n        const response = await post<{ data: Record<string, ExpoReceipt> }>(\n          \"/--/api/v2/push/getReceipts\",\n          { ids },\n          signal,\n        );\n        for (const [ticketId, receipt] of Object.entries(response.data ?? {})) {\n          if (receipt.status === \"ok\") out.push({ ticketId, ok: true });\n          else {\n            const { error, gone } = classify(receipt.details?.error, receipt.message);\n            out.push({ ticketId, ok: false, error, gone });\n          }\n        }\n      }\n      return out;\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../../src/providers/expo-push/index.ts"],"names":[],"mappings":";AA0DO,IAAM,eAAA,GAAkB,CAAC,KAAA,KAC9B,+CAAA,CAAgD,KAAK,KAAK;AAGrD,IAAM,eAAA,GAAkB;AAExB,IAAM,kBAAA,GAAqB;AAGlC,IAAM,IAAA,mBAAO,IAAI,GAAA,CAAI,CAAC,qBAAqB,CAAC,CAAA;AAC5C,IAAM,4BAAY,IAAI,GAAA,CAAI,CAAC,qBAAA,EAAuB,eAAA,EAAiB,WAAW,CAAC,CAAA;AAE/E,IAAM,QAAA,GAAW,CACf,IAAA,EACA,OAAA,MAC0D;AAAA,EAC1D,KAAA,EAAO,IAAA,GAAO,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,WAAW,EAAE,CAAA,CAAA,CAAG,IAAA,EAAK,GAAK,OAAA,IAAW,kBAAA;AAAA,EAC/D,IAAA,EAAM,IAAA,KAAS,MAAA,IAAa,IAAA,CAAK,IAAI,IAAI,CAAA;AAAA,EACzC,SAAA,EAAW,IAAA,KAAS,MAAA,IAAa,SAAA,CAAU,IAAI,IAAI;AACrD,CAAA,CAAA;AAGO,SAAS,QAAA,CAAS,OAAA,GAA2B,EAAC,EAAuB;AAC1E,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,QAAQ,OAAA,CAAQ,OAAA,IAAW,kBAAA,EAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtE,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,GAAA;AACvC,EAAA,MAAM,MAAA,GAAS,CAAC,IAAA,KACd,OAAA,CAAQ,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,CAAE,IAAA,CAAK,SAAS,CAAA,GAAI,IAAA;AAE1E,EAAA,eAAe,IAAA,CAAQ,IAAA,EAAc,IAAA,EAAe,MAAA,EAAkC;AACpF,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,OAAA,CAAQ,SAAS,CAAA;AAC7C,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,MAAA,EAAQ,kBAAA;AAAA,MACR,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,IAAI,QAAQ,WAAA,EAAa,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,QAAQ,WAAW,CAAA,CAAA;AAC9E,IAAA,MAAM,WAAW,MAAM,OAAA,CAAQ,GAAG,IAAI,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI;AAAA,MAC/C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,MAAA,EAAQ,SAAS,WAAA,CAAY,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA,GAAI;AAAA,KACvD,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAA,CAAA,CAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA,EAAG,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,CAAA,UAAA,EAAa,IAAI,CAAA,cAAA,EAAiB,QAAA,CAAS,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAG,IAAA,EAAM,CAAA;AAC1F,MAAC,KAAA,CAA8B,SAAS,QAAA,CAAS,MAAA;AACjD,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAC9B;AAEA,EAAA,MAAM,gBAAA,GAAmB,CAAC,KAAA,KAAqC;AAC7D,IAAA,MAAM,SAAU,KAAA,EAA+B,MAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,OAAO,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAE7E,IAAA,MAAM,SAAA,GAAY,MAAA,KAAW,MAAA,IAAa,MAAA,KAAW,OAAO,MAAA,IAAU,GAAA;AACtE,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,OAAA,EAAS,IAAA,EAAM,OAAO,SAAA,EAAU;AAAA,EAC7D,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,WAAA;AAAA,IACN,YAAA,EAAc,eAAA;AAAA,IAEd,MAAM,IAAA,CAAK,QAAA,EAAU,MAAA,EAAQ;AAC3B,MAAA,MAAM,UAA8B,EAAC;AACrC,MAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,QAAA,CAAS,MAAA,EAAQ,SAAS,eAAA,EAAiB;AACrE,QAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,KAAA,EAAO,QAAQ,eAAe,CAAA;AAC3D,QAAA,IAAI,OAAA;AACJ,QAAA,IAAI;AACF,UAAA,MAAM,WAAW,MAAM,IAAA;AAAA,YACrB,sBAAA;AAAA,YACA,KAAA,CAAM,GAAA,CAAI,CAAC,OAAA,MAAa;AAAA,cACtB,IAAI,OAAA,CAAQ,KAAA;AAAA,cACZ,OAAO,OAAA,CAAQ,KAAA;AAAA,cACf,MAAM,OAAA,CAAQ,IAAA;AAAA,cACd,GAAI,QAAQ,IAAA,GAAO,EAAE,MAAM,OAAA,CAAQ,IAAA,KAAS,EAAC;AAAA,cAC7C,GAAI,QAAQ,KAAA,KAAU,KAAA,CAAA,GAAY,EAAC,GAAI,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM;AAAA,cAC9D,GAAI,OAAA,CAAQ,KAAA,KAAU,KAAA,CAAA,GAAY,EAAE,KAAA,EAAO,SAAA,EAAU,GAAI,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM;AAAA,cAChF,GAAI,QAAQ,SAAA,GAAY,EAAE,WAAW,OAAA,CAAQ,SAAA,KAAc;AAAC,aAC9D,CAAE,CAAA;AAAA,YACF;AAAA,WACF;AACA,UAAA,OAAA,GAAU,QAAA,CAAS,IAAA;AAAA,QACrB,SAAS,KAAA,EAAO;AACd,UAAA,MAAM,OAAA,GAAU,iBAAiB,KAAK,CAAA;AACtC,UAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,OAAO,CAAA;AAC3C,UAAA;AAAA,QACF;AACA,QAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,KAAA,KAAU;AAC1B,UAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,UAAA,IAAI,CAAC,MAAA,EAAQ;AACX,YAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,sBAAsB,IAAA,EAAM,KAAA,EAAO,SAAA,EAAW,IAAA,EAAM,CAAA;AAAA,UACvF,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,KAAW,IAAA,EAAM;AACjC,YAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,IAAA,EAAM,UAAU,MAAA,CAAO,EAAA,IAAM,MAAM,CAAA;AAAA,UACxD,CAAA,MAAO;AACL,YAAA,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,KAAA,EAAO,GAAG,QAAA,CAAS,MAAA,CAAO,OAAA,EAAS,KAAA,EAAO,MAAA,CAAO,OAAO,CAAA,EAAG,CAAA;AAAA,UAChF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AACA,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,QAAA,CAAS,SAAA,EAAW,MAAA,EAAQ;AAChC,MAAA,MAAM,MAA2B,EAAC;AAClC,MAAA,KAAA,IAAS,QAAQ,CAAA,EAAG,KAAA,GAAQ,SAAA,CAAU,MAAA,EAAQ,SAAS,kBAAA,EAAoB;AACzE,QAAA,MAAM,GAAA,GAAM,SAAA,CAAU,KAAA,CAAM,KAAA,EAAO,QAAQ,kBAAkB,CAAA;AAC7D,QAAA,MAAM,WAAW,MAAM,IAAA;AAAA,UACrB,6BAAA;AAAA,UACA,EAAE,GAAA,EAAI;AAAA,UACN;AAAA,SACF;AACA,QAAA,KAAA,MAAW,CAAC,QAAA,EAAU,OAAO,CAAA,IAAK,MAAA,CAAO,QAAQ,QAAA,CAAS,IAAA,IAAQ,EAAE,CAAA,EAAG;AACrE,UAAA,IAAI,OAAA,CAAQ,WAAW,IAAA,EAAM,GAAA,CAAI,KAAK,EAAE,QAAA,EAAU,EAAA,EAAI,IAAA,EAAM,CAAA;AAAA,eACvD;AACH,YAAA,MAAM,EAAE,OAAO,IAAA,EAAK,GAAI,SAAS,OAAA,CAAQ,OAAA,EAAS,KAAA,EAAO,OAAA,CAAQ,OAAO,CAAA;AACxE,YAAA,GAAA,CAAI,KAAK,EAAE,QAAA,EAAU,IAAI,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA;AAAA,UAC/C;AAAA,QACF;AAAA,MACF;AACA,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,GACF;AACF","file":"expo-push.js","sourcesContent":["export type MobilePushMessage = {\n  /** The device's push token as the app registered it. */\n  token: string;\n  title: string;\n  body: string;\n  data?: Record<string, unknown> | undefined;\n  badge?: number | undefined;\n  /** \"default\" plays the platform sound; null is silent. */\n  sound?: \"default\" | null | undefined;\n  /** Android notification channel id. */\n  channelId?: string | undefined;\n};\n\nexport type MobilePushTicket =\n  | { ok: true; ticketId: string | null }\n  | {\n      ok: false;\n      error: string;\n      /** The token will never work again (app uninstalled, token rotated). Prune it. */\n      gone: boolean;\n      retryable: boolean;\n    };\n\nexport type MobilePushReceipt =\n  | { ticketId: string; ok: true }\n  | { ticketId: string; ok: false; error: string; gone: boolean };\n\nexport type MobilePushProvider = {\n  name: string;\n  /** True for a token this provider can deliver to. Rejected at registration otherwise. */\n  isValidToken(token: string): boolean;\n  /** One result per message, in order. Never throws for a per-token failure. */\n  send(messages: readonly MobilePushMessage[], signal?: AbortSignal): Promise<MobilePushTicket[]>;\n  /**\n   * Some services (Expo) accept a message, then learn from APNs/FCM later\n   * that the device is gone. Receipts carry that late verdict.\n   */\n  receipts?(ticketIds: readonly string[], signal?: AbortSignal): Promise<MobilePushReceipt[]>;\n};\n\nexport type ExpoPushOptions = {\n  /** Expo \"enhanced security\" access token. Optional; when set, requests without it are refused by Expo. */\n  accessToken?: string | undefined;\n  fetch?: typeof globalThis.fetch | undefined;\n  /** Default https://exp.host. A local fake for tests. */\n  apiBase?: string | undefined;\n  timeoutMs?: number | undefined;\n};\n\ntype ExpoTicket =\n  | { status: \"ok\"; id: string }\n  | { status: \"error\"; message?: string; details?: { error?: string } };\n\ntype ExpoReceipt =\n  | { status: \"ok\" }\n  | { status: \"error\"; message?: string; details?: { error?: string } };\n\n/** Expo tokens look like ExponentPushToken[xxxxxxxxxxxxxxxxxxxxxx] or ExpoPushToken[...]. */\nexport const isExpoPushToken = (token: string): boolean =>\n  /^Expo(nent)?PushToken\\[[A-Za-z0-9_-]{8,64}\\]$/.test(token);\n\n/** Expo's send endpoint takes at most this many messages per request. */\nexport const EXPO_SEND_BATCH = 100;\n/** And its receipts endpoint at most this many ids. */\nexport const EXPO_RECEIPT_BATCH = 1000;\n\n// Expo's error codes, per https://docs.expo.dev/push-notifications/sending-notifications/#individual-errors\nconst GONE = new Set([\"DeviceNotRegistered\"]);\nconst RETRYABLE = new Set([\"MessageRateExceeded\", \"ProviderError\", \"ExpoError\"]);\n\nconst classify = (\n  code: string | undefined,\n  message: string | undefined,\n): { error: string; gone: boolean; retryable: boolean } => ({\n  error: code ? `${code}: ${message ?? \"\"}`.trim() : (message ?? \"expo push failed\"),\n  gone: code !== undefined && GONE.has(code),\n  retryable: code !== undefined && RETRYABLE.has(code),\n});\n\n/** Expo Push over fetch, so it runs on edge runtimes. Batches, classifies, never throws per token. */\nexport function expoPush(options: ExpoPushOptions = {}): MobilePushProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const base = (options.apiBase ?? \"https://exp.host\").replace(/\\/$/, \"\");\n  const timeoutMs = options.timeoutMs ?? 10_000;\n  const redact = (text: string) =>\n    options.accessToken ? text.split(options.accessToken).join(\"<token>\") : text;\n\n  async function post<T>(path: string, body: unknown, signal?: AbortSignal): Promise<T> {\n    const timeout = AbortSignal.timeout(timeoutMs);\n    const headers: Record<string, string> = {\n      accept: \"application/json\",\n      \"content-type\": \"application/json\",\n    };\n    if (options.accessToken) headers.authorization = `Bearer ${options.accessToken}`;\n    const response = await doFetch(`${base}${path}`, {\n      method: \"POST\",\n      headers,\n      body: JSON.stringify(body),\n      signal: signal ? AbortSignal.any([signal, timeout]) : timeout,\n    });\n    if (!response.ok) {\n      const text = redact((await response.text().catch(() => \"\")).slice(0, 200));\n      const error = new Error(`expo push ${path} failed: HTTP ${response.status} ${text}`.trim());\n      (error as { status?: number }).status = response.status;\n      throw error;\n    }\n    return (await response.json()) as T;\n  }\n\n  const transportFailure = (error: unknown): MobilePushTicket => {\n    const status = (error as { status?: number })?.status;\n    const message = redact(error instanceof Error ? error.message : String(error));\n    // 4xx from the service itself (bad access token, malformed request) cannot be fixed by retrying.\n    const retryable = status === undefined || status === 429 || status >= 500;\n    return { ok: false, error: message, gone: false, retryable };\n  };\n\n  return {\n    name: \"expo-push\",\n    isValidToken: isExpoPushToken,\n\n    async send(messages, signal) {\n      const results: MobilePushTicket[] = [];\n      for (let start = 0; start < messages.length; start += EXPO_SEND_BATCH) {\n        const batch = messages.slice(start, start + EXPO_SEND_BATCH);\n        let tickets: ExpoTicket[];\n        try {\n          const response = await post<{ data: ExpoTicket[] }>(\n            \"/--/api/v2/push/send\",\n            batch.map((message) => ({\n              to: message.token,\n              title: message.title,\n              body: message.body,\n              ...(message.data ? { data: message.data } : {}),\n              ...(message.badge === undefined ? {} : { badge: message.badge }),\n              ...(message.sound === undefined ? { sound: \"default\" } : { sound: message.sound }),\n              ...(message.channelId ? { channelId: message.channelId } : {}),\n            })),\n            signal,\n          );\n          tickets = response.data;\n        } catch (error) {\n          const failure = transportFailure(error);\n          for (const _ of batch) results.push(failure);\n          continue;\n        }\n        batch.forEach((_, index) => {\n          const ticket = tickets[index];\n          if (!ticket) {\n            results.push({ ok: false, error: \"no ticket returned\", gone: false, retryable: true });\n          } else if (ticket.status === \"ok\") {\n            results.push({ ok: true, ticketId: ticket.id ?? null });\n          } else {\n            results.push({ ok: false, ...classify(ticket.details?.error, ticket.message) });\n          }\n        });\n      }\n      return results;\n    },\n\n    async receipts(ticketIds, signal) {\n      const out: MobilePushReceipt[] = [];\n      for (let start = 0; start < ticketIds.length; start += EXPO_RECEIPT_BATCH) {\n        const ids = ticketIds.slice(start, start + EXPO_RECEIPT_BATCH);\n        const response = await post<{ data: Record<string, ExpoReceipt> }>(\n          \"/--/api/v2/push/getReceipts\",\n          { ids },\n          signal,\n        );\n        for (const [ticketId, receipt] of Object.entries(response.data ?? {})) {\n          if (receipt.status === \"ok\") out.push({ ticketId, ok: true });\n          else {\n            const { error, gone } = classify(receipt.details?.error, receipt.message);\n            out.push({ ticketId, ok: false, error, gone });\n          }\n        }\n      }\n      return out;\n    },\n  };\n}\n"]}

package/dist/providers/web-push.cjs

@@ -67,13 +67,9 @@ async function encryptPayload(plaintext, userAgentPublicKey, authSecret, overrid
   const serverPublic = new Uint8Array(
     await crypto.subtle.exportKey("raw", serverKeys.publicKey)
   );
-  const uaKey = await crypto.subtle.importKey(
-    "raw",
-    uaPublic,
-    { name: "ECDH", namedCurve: "P-256" },
-    false,
-    []
-  );
+  const uaKey = await crypto.subtle.importKey("raw", uaPublic, { name: "ECDH", namedCurve: "P-256" }, false, []).catch(() => {
+    throw new InvalidSubscriptionError("p256dh is not a valid P-256 public key");
+  });
   const shared = new Uint8Array(
     await crypto.subtle.deriveBits({ name: "ECDH", public: uaKey }, serverKeys.privateKey, 256)
   );

package/dist/providers/web-push.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/base64url.ts","../../src/providers/web-push/crypto.ts","../../src/providers/web-push/index.ts"],"names":[],"mappings":";;;AAEO,SAAS,gBAAgB,KAAA,EAAoC;AAClE,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA,GAAI,KAAA;AAC5E,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,MAAA,IAAU,MAAA,CAAO,aAAa,IAAI,CAAA;AAC5D,EAAA,OAAO,IAAA,CAAK,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/E;AAGO,SAAS,qBAAqB,KAAA,EAA+C;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA;AAC/D,IAAA,OAAO,UAAA,CAAW,KAAK,MAAA,EAAQ,CAAC,SAAS,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;ACbA,IAAM,OAAO,CAAC,KAAA,KAAkB,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAE9D,SAAS,UAAU,KAAA,EAA8C;AAC/D,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAC,KAAK,IAAA,KAAS,GAAA,GAAM,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAC9D,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAK,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,GAAA,CAAI,GAAA,CAAI,MAAM,MAAM,CAAA;AACpB,IAAA,MAAA,IAAU,IAAA,CAAK,MAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAGO,IAAM,wBAAA,GAAN,cAAuC,KAAA,CAAM;AAAA,EAClD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAA,CACP,KAAA,EACA,KAAA,EACA,MAAA,EACA,UAA0C,KAAA,EACjB;AACzB,EAAA,MAAM,KAAA,GAAQ,qBAAqB,KAAK,CAAA;AACxC,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,OAAA,CAAQ,CAAA,EAAG,KAAK,CAAA,uBAAA,CAAyB,CAAA;AAC/D,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,MAAA,EAAQ;AACnD,IAAA,MAAM,IAAI,QAAQ,CAAA,EAAG,KAAK,YAAY,MAAM,CAAA,YAAA,EAAe,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,KAAA;AACT;AAGA,eAAe,IAAA,CAEb,IAAA,EACA,GAAA,EACA,IAAA,EACA,MAAA,EACkC;AAClC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AACnF,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,IAC/B,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,MAAM,IAAA,EAAK;AAAA,IAC5C,GAAA;AAAA,IACA,MAAA,GAAS;AAAA,GACX;AACA,EAAA,OAAO,IAAI,WAAW,IAAI,CAAA;AAC5B;AAEO,IAAM,WAAA,GAAc,IAAA;AAEpB,IAAM,oBAAoB,WAAA,GAAc;AAS/C,eAAsB,cAAA,CACpB,SAAA,EACA,kBAAA,EACA,UAAA,EACA,SAAA,EACwB;AACxB,EAAA,IAAI,SAAA,CAAU,SAAS,iBAAA,EAAmB;AACxC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,UAAU,MAAM,CAAA,qBAAA,EAAwB,iBAAiB,CAAA,CAAE,CAAA;AAAA,EAChG;AAEA,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,kBAAA,EAAoB,QAAA,EAAU,IAAI,wBAAwB,CAAA;AACxF,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,UAAA,EAAY,MAAA,EAAQ,IAAI,wBAAwB,CAAA;AAC1E,EAAA,IAAI,QAAA,CAAS,CAAC,CAAA,KAAM,CAAA,EAAM;AACxB,IAAA,MAAM,IAAI,yBAAyB,yCAAyC,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,IAAA,GAAO,SAAA,EAAW,IAAA,GACpB,IAAI,UAAA,CAAW,SAAA,CAAU,IAAI,CAAA,GAC7B,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AAE7C,EAAA,MAAM,aAEH,MAAM,MAAA,CAAO,OAAO,WAAA,CAAY,EAAE,IAAA,EAAM,MAAA,EAAQ,YAAY,OAAA,EAAQ,EAAG,IAAA,EAAM,CAAC,YAAY,CAAC,CAAA;AAE9F,EAAA,MAAM,eAAe,IAAI,UAAA;AAAA,IACvB,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,WAAW,SAAS;AAAA,GAC3D;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,IAChC,KAAA;AAAA,IACA,QAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAQ;AAAA,IACpC,KAAA;AAAA,IACA;AAAC,GACH;AAEA,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,KAAA,EAAM,EAAG,UAAA,CAAW,UAAA,EAAY,GAAG;AAAA,GAC5F;AAGA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAA,EAAG,QAAA,EAAU,YAAY,CAAA;AACzF,EAAA,MAAM,MAAM,MAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAE,CAAA;AAEhD,EAAA,MAAM,MAAM,MAAM,IAAA;AAAA,IAChB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,6BAA6B,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACA,EAAA,MAAM,QAAQ,MAAM,IAAA;AAAA,IAClB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,yBAAyB,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC3D;AAAA,GACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,SAAA,EAAW,KAAA,EAAO,CAAC,SAAS,CAAC,CAAA;AAGtF,EAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAAW,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AACpD,EAAA,MAAM,aAAa,IAAI,UAAA;AAAA,IACrB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAI,KAAA,EAAM,EAAG,MAAA,EAAQ,MAAM;AAAA,GAC5E;AAGA,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,EAAA,GAAK,aAAa,MAAM,CAAA;AACtD,EAAA,MAAA,CAAO,GAAA,CAAI,MAAM,CAAC,CAAA;AAClB,EAAA,IAAI,SAAS,MAAA,CAAO,MAAM,EAAE,SAAA,CAAU,EAAA,EAAI,aAAa,KAAK,CAAA;AAC5D,EAAA,MAAA,CAAO,EAAE,IAAI,YAAA,CAAa,MAAA;AAC1B,EAAA,MAAA,CAAO,GAAA,CAAI,cAAc,EAAE,CAAA;AAE3B,EAAA,OAAO,EAAE,MAAM,MAAA,CAAO,MAAA,EAAQ,UAAU,CAAA,EAAG,IAAA,EAAM,iBAAiB,YAAA,EAAa;AACjF;AAKA,eAAsB,iBAAA,GAAwC;AAC5D,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ,EAAG,IAAA,EAAM;AAAA,IACzF,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,IAAA,CAAK,SAAS,CAAC,CAAA;AACrF,EAAA,MAAM,MAAM,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,KAAK,UAAU,CAAA;AAEhE,EAAA,IAAI,CAAC,GAAA,CAAI,CAAA,EAAG,MAAM,IAAI,MAAM,wCAAwC,CAAA;AACpE,EAAA,OAAO,EAAE,SAAA,EAAW,eAAA,CAAgB,SAAS,CAAA,EAAG,UAAA,EAAY,IAAI,CAAA,EAAE;AACpE;AAGA,eAAe,eAAe,IAAA,EAAqC;AACjE,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,IAAA,CAAK,SAAA,EAAW,mBAAmB,EAAE,CAAA;AACpE,EAAA,IAAI,UAAU,CAAC,CAAA,KAAM,GAAM,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAE7F,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA;AAAA,MACE,GAAA,EAAK,IAAA;AAAA,MACL,GAAA,EAAK,OAAA;AAAA,MACL,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,MACzC,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,MAC1C,GAAG,IAAA,CAAK,UAAA;AAAA,MACR,GAAA,EAAK;AAAA,KACP;AAAA,IACA,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ;AAAA,IACrC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACF;AAWA,eAAsB,kBAAA,CAAmB,UAAkB,OAAA,EAAwC;AACjG,EAAA,IAAI,CAAC,mBAAA,CAAoB,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC9C,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,oBAAO,IAAI,IAAA,EAAK;AACpC,EAAA,MAAM,MAAA,GAAS,EAAE,GAAA,EAAK,KAAA,EAAO,KAAK,OAAA,EAAQ;AAC1C,EAAA,MAAM,MAAA,GAAS;AAAA;AAAA,IAEb,GAAA,EAAK,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,MAAA;AAAA,IACvB,GAAA,EAAK,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,KAAY,GAAI,CAAA,IAAK,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA,CAAA;AAAA,IACpE,KAAK,OAAA,CAAQ;AAAA,GACf;AAEA,EAAA,MAAM,YAAA,GAAe,GAAG,eAAA,CAAgB,IAAA,CAAK,UAAU,MAAM,CAAC,CAAC,CAAA,CAAA,EAAI,eAAA;AAAA,IACjE,IAAA,CAAK,UAAU,MAAM;AAAA,GACtB,CAAA,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA;AAAA,IACpC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,MAAM,cAAA,CAAe,OAAA,CAAQ,IAAI,CAAA;AAAA,IACjC,KAAK,YAAY;AAAA,GACnB;AAGA,EAAA,MAAM,GAAA,GAAM,GAAG,YAAY,CAAA,CAAA,EAAI,gBAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AACzE,EAAA,OAAO,CAAA,QAAA,EAAW,GAAG,CAAA,IAAA,EAAO,OAAA,CAAQ,KAAK,SAAS,CAAA,CAAA;AACpD;;;ACjMO,SAAS,QAAQ,OAAA,EAAuC;AAC7D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA;AAEvC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IAEN,MAAM,KAAK,OAAA,EAA+C;AACxD,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,MAAA;AAAA,QAChC,KAAK,SAAA,CAAU;AAAA,UACb,OAAO,OAAA,CAAQ,KAAA;AAAA,UACf,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,IAAA,EAAM,OAAA,CAAQ,IAAA,IAAQ;AAAC,SACxB;AAAA,OACH;AAEA,MAAA,IAAI,OAAA,CAAQ,SAAS,iBAAA,EAAmB;AAEtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,gBAAA,EAAmB,OAAA,CAAQ,MAAM,CAAA,iBAAA,EAAoB,iBAAiB,CAAA,WAAA;AAAA,SACxE;AAAA,MACF;AAGA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,YAAA,CAAa,QAAQ,CAAA;AAAA,MAClD,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AACA,MAAA,MAAM,MAAA,GAAS,SAAS,QAAA,KAAa,QAAA;AACrC,MAAA,IAAI,CAAC,MAAA,IAAU,EAAE,QAAQ,sBAAA,IAA0B,QAAA,CAAS,aAAa,OAAA,CAAA,EAAU;AACjF,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AAEA,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI;AACF,QAAA,SAAA,GAAY,MAAM,cAAA;AAAA,UAChB,OAAA;AAAA,UACA,OAAA,CAAQ,aAAa,IAAA,CAAK,MAAA;AAAA,UAC1B,OAAA,CAAQ,aAAa,IAAA,CAAK;AAAA,SAC5B;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,wBAAA,EAA0B,OAAO,EAAE,SAAS,IAAA,EAAK;AACtE,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,MAAM,aAAA,GAAgB,MAAM,kBAAA,CAAmB,QAAA,CAAS,IAAA,EAAM;AAAA,QAC5D,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,MAAM,OAAA,CAAQ;AAAA,OACf,CAAA;AAED,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,QAAA,EAAU;AAAA,UACtD,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,aAAA;AAAA,YACf,kBAAA,EAAoB,WAAA;AAAA,YACpB,cAAA,EAAgB,0BAAA;AAAA,YAChB,GAAA,EAAK,OAAO,GAAG,CAAA;AAAA,YACf,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY;AAAC,WACxD;AAAA,UACA,MAAM,SAAA,CAAU,IAAA;AAAA,UAChB,GAAI,QAAQ,MAAA,GAAS,EAAE,QAAQ,OAAA,CAAQ,MAAA,KAAW;AAAC,SACpD,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AAEd,QAAA,MAAM,IAAI,MAAM,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MACxE;AAGA,MAAA,IAAI,QAAA,CAAS,EAAA,EAAI,OAAO,EAAC;AAGzB,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK,OAAO,EAAE,OAAA,EAAS,IAAA,EAAK;AAE/E,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,UAAU,GAAA,EAAK;AAChF,QAAA,OAAO,EAAE,WAAW,IAAA,EAAK;AAAA,MAC3B;AAEA,MAAA,MAAM,SAAS,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACnD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,EAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,OACvF;AAAA,IACF;AAAA,GACF;AACF","file":"web-push.cjs","sourcesContent":["// Web APIs, not Buffer: this runs on Workers and Vercel Edge.\n\nexport function encodeBase64Url(input: string | Uint8Array): string {\n  const bytes = typeof input === \"string\" ? new TextEncoder().encode(input) : input;\n  let binary = \"\";\n  for (const byte of bytes) binary += String.fromCharCode(byte);\n  return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n// Uint8Array<ArrayBuffer>: bare Uint8Array widens and is not a BufferSource.\nexport function decodeBase64UrlBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  try {\n    const binary = atob(value.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    return Uint8Array.from(binary, (char) => char.charCodeAt(0));\n  } catch {\n    return null;\n  }\n}\n\nexport function decodeBase64Url(value: string): string | null {\n  const bytes = decodeBase64UrlBytes(value);\n  return bytes ? new TextDecoder().decode(bytes) : null;\n}\n","import { decodeBase64UrlBytes, encodeBase64Url } from \"../../core/base64url\";\n\n/** VAPID (RFC 8292) and aes128gcm (RFC 8291 over RFC 8188) on Web Crypto, so it runs on Workers and Edge. */\n\nconst utf8 = (value: string) => new TextEncoder().encode(value);\n\nfunction concat(...parts: Uint8Array[]): Uint8Array<ArrayBuffer> {\n  const total = parts.reduce((sum, part) => sum + part.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\n/** The subscription itself is unusable. Distinct from a transport failure so the plugin prunes rather than retries. */\nexport class InvalidSubscriptionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidSubscriptionError\";\n  }\n}\n\nfunction requireBytes(\n  value: string,\n  label: string,\n  length?: number,\n  Failure: new (message: string) => Error = Error,\n): Uint8Array<ArrayBuffer> {\n  const bytes = decodeBase64UrlBytes(value);\n  if (!bytes) throw new Failure(`${label} is not valid base64url`);\n  if (length !== undefined && bytes.length !== length) {\n    throw new Failure(`${label} must be ${length} bytes, got ${bytes.length}`);\n  }\n  return bytes;\n}\n\n/** Web Crypto's HKDF does extract and expand in one call. */\nasync function hkdf(\n  // Uint8Array<ArrayBuffer>: a bare Uint8Array is not a BufferSource.\n  salt: Uint8Array<ArrayBuffer>,\n  ikm: Uint8Array<ArrayBuffer>,\n  info: Uint8Array<ArrayBuffer>,\n  length: number,\n): Promise<Uint8Array<ArrayBuffer>> {\n  const key = await crypto.subtle.importKey(\"raw\", ikm, \"HKDF\", false, [\"deriveBits\"]);\n  const bits = await crypto.subtle.deriveBits(\n    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n    key,\n    length * 8,\n  );\n  return new Uint8Array(bits);\n}\n\nexport const RECORD_SIZE = 4096;\n/** One record: record size less the padding delimiter and the GCM tag. */\nexport const MAX_PAYLOAD_BYTES = RECORD_SIZE - 17;\n\nexport type EncryptedPush = {\n  body: Uint8Array<ArrayBuffer>;\n  salt: Uint8Array<ArrayBuffer>;\n  serverPublicKey: Uint8Array<ArrayBuffer>;\n};\n\n/** RFC 8291 §3.4 then RFC 8188 §2. `salt` and `serverKeys` are injectable for tests only. */\nexport async function encryptPayload(\n  plaintext: Uint8Array<ArrayBuffer>,\n  userAgentPublicKey: string,\n  authSecret: string,\n  overrides?: { salt?: Uint8Array<ArrayBuffer>; serverKeys?: CryptoKeyPair },\n): Promise<EncryptedPush> {\n  if (plaintext.length > MAX_PAYLOAD_BYTES) {\n    throw new Error(`push payload is ${plaintext.length} bytes; the limit is ${MAX_PAYLOAD_BYTES}`);\n  }\n\n  const uaPublic = requireBytes(userAgentPublicKey, \"p256dh\", 65, InvalidSubscriptionError);\n  const auth = requireBytes(authSecret, \"auth\", 16, InvalidSubscriptionError);\n  if (uaPublic[0] !== 0x04) {\n    throw new InvalidSubscriptionError(\"p256dh must be an uncompressed EC point\");\n  }\n\n  const salt = overrides?.salt\n    ? new Uint8Array(overrides.salt)\n    : crypto.getRandomValues(new Uint8Array(16));\n\n  const serverKeys =\n    overrides?.serverKeys ??\n    (await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve: \"P-256\" }, true, [\"deriveBits\"]));\n\n  const serverPublic = new Uint8Array(\n    await crypto.subtle.exportKey(\"raw\", serverKeys.publicKey),\n  ) as Uint8Array<ArrayBuffer>;\n\n  const uaKey = await crypto.subtle.importKey(\n    \"raw\",\n    uaPublic,\n    { name: \"ECDH\", namedCurve: \"P-256\" },\n    false,\n    [],\n  );\n\n  const shared = new Uint8Array(\n    await crypto.subtle.deriveBits({ name: \"ECDH\", public: uaKey }, serverKeys.privateKey, 256),\n  );\n\n  // Receiver's key first, or the browser cannot derive the key.\n  const keyInfo = concat(utf8(\"WebPush: info\"), new Uint8Array([0]), uaPublic, serverPublic);\n  const ikm = await hkdf(auth, shared, keyInfo, 32);\n\n  const cek = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: aes128gcm\"), new Uint8Array([0])),\n    16,\n  );\n  const nonce = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: nonce\"), new Uint8Array([0])),\n    12,\n  );\n\n  const aesKey = await crypto.subtle.importKey(\"raw\", cek, \"AES-GCM\", false, [\"encrypt\"]);\n\n  // 0x02 marks the final record.\n  const padded = concat(plaintext, new Uint8Array([2]));\n  const ciphertext = new Uint8Array(\n    await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce }, aesKey, padded),\n  );\n\n  // RFC 8188 header: salt(16) | rs(4, big endian) | idlen(1) | keyid\n  const header = new Uint8Array(21 + serverPublic.length);\n  header.set(salt, 0);\n  new DataView(header.buffer).setUint32(16, RECORD_SIZE, false);\n  header[20] = serverPublic.length;\n  header.set(serverPublic, 21);\n\n  return { body: concat(header, ciphertext), salt, serverPublicKey: serverPublic };\n}\n\nexport type VapidKeys = { publicKey: string; privateKey: string };\n\n/** A VAPID keypair in the base64url form every push library uses. */\nexport async function generateVapidKeys(): Promise<VapidKeys> {\n  const keys = await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve: \"P-256\" }, true, [\n    \"sign\",\n    \"verify\",\n  ]);\n\n  const publicKey = new Uint8Array(await crypto.subtle.exportKey(\"raw\", keys.publicKey));\n  const jwk = await crypto.subtle.exportKey(\"jwk\", keys.privateKey);\n\n  if (!jwk.d) throw new Error(\"generated key has no private component\");\n  return { publicKey: encodeBase64Url(publicKey), privateKey: jwk.d };\n}\n\n/** Web Crypto imports a private EC key only as JWK, so x and y are recovered from the public point. */\nasync function importVapidKey(keys: VapidKeys): Promise<CryptoKey> {\n  const publicKey = requireBytes(keys.publicKey, \"vapid publicKey\", 65);\n  if (publicKey[0] !== 0x04) throw new Error(\"vapid publicKey must be an uncompressed EC point\");\n\n  return crypto.subtle.importKey(\n    \"jwk\",\n    {\n      kty: \"EC\",\n      crv: \"P-256\",\n      x: encodeBase64Url(publicKey.slice(1, 33)),\n      y: encodeBase64Url(publicKey.slice(33, 65)),\n      d: keys.privateKey,\n      ext: true,\n    },\n    { name: \"ECDSA\", namedCurve: \"P-256\" },\n    false,\n    [\"sign\"],\n  );\n}\n\nexport type VapidOptions = {\n  subject: string;\n  keys: VapidKeys;\n  /** Injectable for tests; VAPID tokens are short-lived. */\n  now?: Date;\n  ttlSeconds?: number;\n};\n\n/** RFC 8292 §2: an ES256 JWT scoped to the push service origin. */\nexport async function vapidAuthorization(endpoint: string, options: VapidOptions): Promise<string> {\n  if (!/^(mailto:|https:)/.test(options.subject)) {\n    throw new Error('vapid subject must be a \"mailto:\" or \"https:\" URL');\n  }\n\n  const now = options.now ?? new Date();\n  const header = { typ: \"JWT\", alg: \"ES256\" };\n  const claims = {\n    // Origin only: a token scoped to the full endpoint is rejected.\n    aud: new URL(endpoint).origin,\n    exp: Math.floor(now.getTime() / 1000) + (options.ttlSeconds ?? 12 * 3600),\n    sub: options.subject,\n  };\n\n  const signingInput = `${encodeBase64Url(JSON.stringify(header))}.${encodeBase64Url(\n    JSON.stringify(claims),\n  )}`;\n\n  const signature = await crypto.subtle.sign(\n    { name: \"ECDSA\", hash: \"SHA-256\" },\n    await importVapidKey(options.keys),\n    utf8(signingInput),\n  );\n\n  // Web Crypto emits raw r||s, which is what JWS ES256 wants — no DER unwrap.\n  const jwt = `${signingInput}.${encodeBase64Url(new Uint8Array(signature))}`;\n  return `vapid t=${jwt}, k=${options.keys.publicKey}`;\n}\n","import type { PushMessage, PushProvider, PushSendResult } from \"../../plugins/push\";\nimport {\n  encryptPayload,\n  InvalidSubscriptionError,\n  MAX_PAYLOAD_BYTES,\n  type VapidKeys,\n  vapidAuthorization,\n} from \"./crypto\";\n\nexport type WebPushOptions = {\n  /** \"mailto:you@example.com\" or an https URL. Push services require it. */\n  subject: string;\n  vapid: VapidKeys;\n  /** How long the service should hold an undelivered message. */\n  ttlSeconds?: number;\n  urgency?: \"very-low\" | \"low\" | \"normal\" | \"high\";\n  fetch?: typeof globalThis.fetch;\n  /** Lets an http endpoint through. For a local fake push service only; never in production. */\n  allowInsecureEndpoints?: boolean;\n};\n\n/** Web push over Web Crypto. Gone endpoints surface as `expired`; transport failures as `retryable`. */\nexport function webPush(options: WebPushOptions): PushProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const ttl = options.ttlSeconds ?? 12 * 3600;\n\n  return {\n    name: \"web-push\",\n\n    async send(message: PushMessage): Promise<PushSendResult> {\n      const payload = new TextEncoder().encode(\n        JSON.stringify({\n          title: message.title,\n          body: message.body,\n          data: message.data ?? {},\n        }),\n      );\n\n      if (payload.length > MAX_PAYLOAD_BYTES) {\n        // Truncating would deliver a broken notification; retrying cannot help.\n        throw new Error(\n          `push payload is ${payload.length} bytes, over the ${MAX_PAYLOAD_BYTES} byte limit`,\n        );\n      }\n\n      // Unusable subscription: report invalid so it is pruned, not retried.\n      let endpoint: URL;\n      try {\n        endpoint = new URL(message.subscription.endpoint);\n      } catch {\n        return { invalid: true };\n      }\n      const secure = endpoint.protocol === \"https:\";\n      if (!secure && !(options.allowInsecureEndpoints && endpoint.protocol === \"http:\")) {\n        return { invalid: true };\n      }\n\n      let encrypted: Awaited<ReturnType<typeof encryptPayload>>;\n      try {\n        encrypted = await encryptPayload(\n          payload,\n          message.subscription.keys.p256dh,\n          message.subscription.keys.auth,\n        );\n      } catch (error) {\n        if (error instanceof InvalidSubscriptionError) return { invalid: true };\n        throw error;\n      }\n\n      const authorization = await vapidAuthorization(endpoint.href, {\n        subject: options.subject,\n        keys: options.vapid,\n      });\n\n      let response: Response;\n      try {\n        response = await doFetch(message.subscription.endpoint, {\n          method: \"POST\",\n          headers: {\n            Authorization: authorization,\n            \"Content-Encoding\": \"aes128gcm\",\n            \"Content-Type\": \"application/octet-stream\",\n            TTL: String(ttl),\n            ...(options.urgency ? { Urgency: options.urgency } : {}),\n          },\n          body: encrypted.body,\n          ...(message.signal ? { signal: message.signal } : {}),\n        });\n      } catch (error) {\n        // Never reached the service: DNS, socket, timeout.\n        throw new Error(error instanceof Error ? error.message : String(error));\n      }\n\n      // 201 is the documented success; 200/202 appear in the wild.\n      if (response.ok) return {};\n\n      // The subscription is permanently gone and must be pruned.\n      if (response.status === 404 || response.status === 410) return { expired: true };\n\n      if (response.status === 429 || response.status === 408 || response.status >= 500) {\n        return { retryable: true };\n      }\n\n      const detail = await response.text().catch(() => \"\");\n      throw new Error(\n        `push service responded ${response.status}${detail ? `: ${detail.slice(0, 300)}` : \"\"}`,\n      );\n    },\n  };\n}\n\nexport type { VapidKeys } from \"./crypto\";\nexport { generateVapidKeys, InvalidSubscriptionError, MAX_PAYLOAD_BYTES } from \"./crypto\";\n"]}
+{"version":3,"sources":["../../src/core/base64url.ts","../../src/providers/web-push/crypto.ts","../../src/providers/web-push/index.ts"],"names":[],"mappings":";;;AAEO,SAAS,gBAAgB,KAAA,EAAoC;AAClE,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,KAAU,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA,GAAI,KAAA;AAC5E,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,MAAA,IAAU,MAAA,CAAO,aAAa,IAAI,CAAA;AAC5D,EAAA,OAAO,IAAA,CAAK,MAAM,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/E;AAGO,SAAS,qBAAqB,KAAA,EAA+C;AAClF,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA;AAC/D,IAAA,OAAO,UAAA,CAAW,KAAK,MAAA,EAAQ,CAAC,SAAS,IAAA,CAAK,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EAC7D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;ACbA,IAAM,OAAO,CAAC,KAAA,KAAkB,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAE9D,SAAS,UAAU,KAAA,EAA8C;AAC/D,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAC,KAAK,IAAA,KAAS,GAAA,GAAM,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAC9D,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAK,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,GAAA,CAAI,GAAA,CAAI,MAAM,MAAM,CAAA;AACpB,IAAA,MAAA,IAAU,IAAA,CAAK,MAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAGO,IAAM,wBAAA,GAAN,cAAuC,KAAA,CAAM;AAAA,EAClD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAA,CACP,KAAA,EACA,KAAA,EACA,MAAA,EACA,UAA0C,KAAA,EACjB;AACzB,EAAA,MAAM,KAAA,GAAQ,qBAAqB,KAAK,CAAA;AACxC,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,OAAA,CAAQ,CAAA,EAAG,KAAK,CAAA,uBAAA,CAAyB,CAAA;AAC/D,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,MAAA,EAAQ;AACnD,IAAA,MAAM,IAAI,QAAQ,CAAA,EAAG,KAAK,YAAY,MAAM,CAAA,YAAA,EAAe,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,KAAA;AACT;AAGA,eAAe,IAAA,CAEb,IAAA,EACA,GAAA,EACA,IAAA,EACA,MAAA,EACkC;AAClC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AACnF,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,IAC/B,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,MAAM,IAAA,EAAK;AAAA,IAC5C,GAAA;AAAA,IACA,MAAA,GAAS;AAAA,GACX;AACA,EAAA,OAAO,IAAI,WAAW,IAAI,CAAA;AAC5B;AAEO,IAAM,WAAA,GAAc,IAAA;AAEpB,IAAM,oBAAoB,WAAA,GAAc;AAS/C,eAAsB,cAAA,CACpB,SAAA,EACA,kBAAA,EACA,UAAA,EACA,SAAA,EACwB;AACxB,EAAA,IAAI,SAAA,CAAU,SAAS,iBAAA,EAAmB;AACxC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,UAAU,MAAM,CAAA,qBAAA,EAAwB,iBAAiB,CAAA,CAAE,CAAA;AAAA,EAChG;AAEA,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,kBAAA,EAAoB,QAAA,EAAU,IAAI,wBAAwB,CAAA;AACxF,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,UAAA,EAAY,MAAA,EAAQ,IAAI,wBAAwB,CAAA;AAC1E,EAAA,IAAI,QAAA,CAAS,CAAC,CAAA,KAAM,CAAA,EAAM;AACxB,IAAA,MAAM,IAAI,yBAAyB,yCAAyC,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,IAAA,GAAO,SAAA,EAAW,IAAA,GACpB,IAAI,UAAA,CAAW,SAAA,CAAU,IAAI,CAAA,GAC7B,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AAE7C,EAAA,MAAM,aAEH,MAAM,MAAA,CAAO,OAAO,WAAA,CAAY,EAAE,IAAA,EAAM,MAAA,EAAQ,YAAY,OAAA,EAAQ,EAAG,IAAA,EAAM,CAAC,YAAY,CAAC,CAAA;AAE9F,EAAA,MAAM,eAAe,IAAI,UAAA;AAAA,IACvB,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,WAAW,SAAS;AAAA,GAC3D;AAEA,EAAA,MAAM,QAAQ,MAAM,MAAA,CAAO,OACxB,SAAA,CAAU,KAAA,EAAO,UAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,SAAQ,EAAG,KAAA,EAAO,EAAE,CAAA,CAC3E,MAAM,MAAM;AACX,IAAA,MAAM,IAAI,yBAAyB,wCAAwC,CAAA;AAAA,EAC7E,CAAC,CAAA;AAEH,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,KAAA,EAAM,EAAG,UAAA,CAAW,UAAA,EAAY,GAAG;AAAA,GAC5F;AAGA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAA,EAAG,QAAA,EAAU,YAAY,CAAA;AACzF,EAAA,MAAM,MAAM,MAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAE,CAAA;AAEhD,EAAA,MAAM,MAAM,MAAM,IAAA;AAAA,IAChB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,6BAA6B,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACA,EAAA,MAAM,QAAQ,MAAM,IAAA;AAAA,IAClB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,yBAAyB,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC3D;AAAA,GACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,SAAA,EAAW,KAAA,EAAO,CAAC,SAAS,CAAC,CAAA;AAGtF,EAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAAW,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AACpD,EAAA,MAAM,aAAa,IAAI,UAAA;AAAA,IACrB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAI,KAAA,EAAM,EAAG,MAAA,EAAQ,MAAM;AAAA,GAC5E;AAGA,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,EAAA,GAAK,aAAa,MAAM,CAAA;AACtD,EAAA,MAAA,CAAO,GAAA,CAAI,MAAM,CAAC,CAAA;AAClB,EAAA,IAAI,SAAS,MAAA,CAAO,MAAM,EAAE,SAAA,CAAU,EAAA,EAAI,aAAa,KAAK,CAAA;AAC5D,EAAA,MAAA,CAAO,EAAE,IAAI,YAAA,CAAa,MAAA;AAC1B,EAAA,MAAA,CAAO,GAAA,CAAI,cAAc,EAAE,CAAA;AAE3B,EAAA,OAAO,EAAE,MAAM,MAAA,CAAO,MAAA,EAAQ,UAAU,CAAA,EAAG,IAAA,EAAM,iBAAiB,YAAA,EAAa;AACjF;AAKA,eAAsB,iBAAA,GAAwC;AAC5D,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ,EAAG,IAAA,EAAM;AAAA,IACzF,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,IAAA,CAAK,SAAS,CAAC,CAAA;AACrF,EAAA,MAAM,MAAM,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,KAAK,UAAU,CAAA;AAEhE,EAAA,IAAI,CAAC,GAAA,CAAI,CAAA,EAAG,MAAM,IAAI,MAAM,wCAAwC,CAAA;AACpE,EAAA,OAAO,EAAE,SAAA,EAAW,eAAA,CAAgB,SAAS,CAAA,EAAG,UAAA,EAAY,IAAI,CAAA,EAAE;AACpE;AAGA,eAAe,eAAe,IAAA,EAAqC;AACjE,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,IAAA,CAAK,SAAA,EAAW,mBAAmB,EAAE,CAAA;AACpE,EAAA,IAAI,UAAU,CAAC,CAAA,KAAM,GAAM,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAE7F,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA;AAAA,MACE,GAAA,EAAK,IAAA;AAAA,MACL,GAAA,EAAK,OAAA;AAAA,MACL,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,MACzC,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,MAC1C,GAAG,IAAA,CAAK,UAAA;AAAA,MACR,GAAA,EAAK;AAAA,KACP;AAAA,IACA,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ;AAAA,IACrC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACF;AAWA,eAAsB,kBAAA,CAAmB,UAAkB,OAAA,EAAwC;AACjG,EAAA,IAAI,CAAC,mBAAA,CAAoB,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC9C,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,oBAAO,IAAI,IAAA,EAAK;AACpC,EAAA,MAAM,MAAA,GAAS,EAAE,GAAA,EAAK,KAAA,EAAO,KAAK,OAAA,EAAQ;AAC1C,EAAA,MAAM,MAAA,GAAS;AAAA;AAAA,IAEb,GAAA,EAAK,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,MAAA;AAAA,IACvB,GAAA,EAAK,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,KAAY,GAAI,CAAA,IAAK,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA,CAAA;AAAA,IACpE,KAAK,OAAA,CAAQ;AAAA,GACf;AAEA,EAAA,MAAM,YAAA,GAAe,GAAG,eAAA,CAAgB,IAAA,CAAK,UAAU,MAAM,CAAC,CAAC,CAAA,CAAA,EAAI,eAAA;AAAA,IACjE,IAAA,CAAK,UAAU,MAAM;AAAA,GACtB,CAAA,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA;AAAA,IACpC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,MAAM,cAAA,CAAe,OAAA,CAAQ,IAAI,CAAA;AAAA,IACjC,KAAK,YAAY;AAAA,GACnB;AAGA,EAAA,MAAM,GAAA,GAAM,GAAG,YAAY,CAAA,CAAA,EAAI,gBAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AACzE,EAAA,OAAO,CAAA,QAAA,EAAW,GAAG,CAAA,IAAA,EAAO,OAAA,CAAQ,KAAK,SAAS,CAAA,CAAA;AACpD;;;AC/LO,SAAS,QAAQ,OAAA,EAAuC;AAC7D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA;AAEvC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IAEN,MAAM,KAAK,OAAA,EAA+C;AACxD,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,MAAA;AAAA,QAChC,KAAK,SAAA,CAAU;AAAA,UACb,OAAO,OAAA,CAAQ,KAAA;AAAA,UACf,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,IAAA,EAAM,OAAA,CAAQ,IAAA,IAAQ;AAAC,SACxB;AAAA,OACH;AAEA,MAAA,IAAI,OAAA,CAAQ,SAAS,iBAAA,EAAmB;AAEtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,gBAAA,EAAmB,OAAA,CAAQ,MAAM,CAAA,iBAAA,EAAoB,iBAAiB,CAAA,WAAA;AAAA,SACxE;AAAA,MACF;AAGA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,YAAA,CAAa,QAAQ,CAAA;AAAA,MAClD,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AACA,MAAA,MAAM,MAAA,GAAS,SAAS,QAAA,KAAa,QAAA;AACrC,MAAA,IAAI,CAAC,MAAA,IAAU,EAAE,QAAQ,sBAAA,IAA0B,QAAA,CAAS,aAAa,OAAA,CAAA,EAAU;AACjF,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AAEA,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI;AACF,QAAA,SAAA,GAAY,MAAM,cAAA;AAAA,UAChB,OAAA;AAAA,UACA,OAAA,CAAQ,aAAa,IAAA,CAAK,MAAA;AAAA,UAC1B,OAAA,CAAQ,aAAa,IAAA,CAAK;AAAA,SAC5B;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,wBAAA,EAA0B,OAAO,EAAE,SAAS,IAAA,EAAK;AACtE,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,MAAM,aAAA,GAAgB,MAAM,kBAAA,CAAmB,QAAA,CAAS,IAAA,EAAM;AAAA,QAC5D,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,MAAM,OAAA,CAAQ;AAAA,OACf,CAAA;AAED,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,QAAA,EAAU;AAAA,UACtD,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,aAAA;AAAA,YACf,kBAAA,EAAoB,WAAA;AAAA,YACpB,cAAA,EAAgB,0BAAA;AAAA,YAChB,GAAA,EAAK,OAAO,GAAG,CAAA;AAAA,YACf,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY;AAAC,WACxD;AAAA,UACA,MAAM,SAAA,CAAU,IAAA;AAAA,UAChB,GAAI,QAAQ,MAAA,GAAS,EAAE,QAAQ,OAAA,CAAQ,MAAA,KAAW;AAAC,SACpD,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AAEd,QAAA,MAAM,IAAI,MAAM,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MACxE;AAGA,MAAA,IAAI,QAAA,CAAS,EAAA,EAAI,OAAO,EAAC;AAGzB,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK,OAAO,EAAE,OAAA,EAAS,IAAA,EAAK;AAE/E,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,UAAU,GAAA,EAAK;AAChF,QAAA,OAAO,EAAE,WAAW,IAAA,EAAK;AAAA,MAC3B;AAEA,MAAA,MAAM,SAAS,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACnD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,EAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,OACvF;AAAA,IACF;AAAA,GACF;AACF","file":"web-push.cjs","sourcesContent":["// Web APIs, not Buffer: this runs on Workers and Vercel Edge.\n\nexport function encodeBase64Url(input: string | Uint8Array): string {\n  const bytes = typeof input === \"string\" ? new TextEncoder().encode(input) : input;\n  let binary = \"\";\n  for (const byte of bytes) binary += String.fromCharCode(byte);\n  return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n// Uint8Array<ArrayBuffer>: bare Uint8Array widens and is not a BufferSource.\nexport function decodeBase64UrlBytes(value: string): Uint8Array<ArrayBuffer> | null {\n  try {\n    const binary = atob(value.replace(/-/g, \"+\").replace(/_/g, \"/\"));\n    return Uint8Array.from(binary, (char) => char.charCodeAt(0));\n  } catch {\n    return null;\n  }\n}\n\nexport function decodeBase64Url(value: string): string | null {\n  const bytes = decodeBase64UrlBytes(value);\n  return bytes ? new TextDecoder().decode(bytes) : null;\n}\n","import { decodeBase64UrlBytes, encodeBase64Url } from \"../../core/base64url\";\n\n/** VAPID (RFC 8292) and aes128gcm (RFC 8291 over RFC 8188) on Web Crypto, so it runs on Workers and Edge. */\n\nconst utf8 = (value: string) => new TextEncoder().encode(value);\n\nfunction concat(...parts: Uint8Array[]): Uint8Array<ArrayBuffer> {\n  const total = parts.reduce((sum, part) => sum + part.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\n/** The subscription itself is unusable. Distinct from a transport failure so the plugin prunes rather than retries. */\nexport class InvalidSubscriptionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidSubscriptionError\";\n  }\n}\n\nfunction requireBytes(\n  value: string,\n  label: string,\n  length?: number,\n  Failure: new (message: string) => Error = Error,\n): Uint8Array<ArrayBuffer> {\n  const bytes = decodeBase64UrlBytes(value);\n  if (!bytes) throw new Failure(`${label} is not valid base64url`);\n  if (length !== undefined && bytes.length !== length) {\n    throw new Failure(`${label} must be ${length} bytes, got ${bytes.length}`);\n  }\n  return bytes;\n}\n\n/** Web Crypto's HKDF does extract and expand in one call. */\nasync function hkdf(\n  // Uint8Array<ArrayBuffer>: a bare Uint8Array is not a BufferSource.\n  salt: Uint8Array<ArrayBuffer>,\n  ikm: Uint8Array<ArrayBuffer>,\n  info: Uint8Array<ArrayBuffer>,\n  length: number,\n): Promise<Uint8Array<ArrayBuffer>> {\n  const key = await crypto.subtle.importKey(\"raw\", ikm, \"HKDF\", false, [\"deriveBits\"]);\n  const bits = await crypto.subtle.deriveBits(\n    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n    key,\n    length * 8,\n  );\n  return new Uint8Array(bits);\n}\n\nexport const RECORD_SIZE = 4096;\n/** One record: record size less the padding delimiter and the GCM tag. */\nexport const MAX_PAYLOAD_BYTES = RECORD_SIZE - 17;\n\nexport type EncryptedPush = {\n  body: Uint8Array<ArrayBuffer>;\n  salt: Uint8Array<ArrayBuffer>;\n  serverPublicKey: Uint8Array<ArrayBuffer>;\n};\n\n/** RFC 8291 §3.4 then RFC 8188 §2. `salt` and `serverKeys` are injectable for tests only. */\nexport async function encryptPayload(\n  plaintext: Uint8Array<ArrayBuffer>,\n  userAgentPublicKey: string,\n  authSecret: string,\n  overrides?: { salt?: Uint8Array<ArrayBuffer>; serverKeys?: CryptoKeyPair },\n): Promise<EncryptedPush> {\n  if (plaintext.length > MAX_PAYLOAD_BYTES) {\n    throw new Error(`push payload is ${plaintext.length} bytes; the limit is ${MAX_PAYLOAD_BYTES}`);\n  }\n\n  const uaPublic = requireBytes(userAgentPublicKey, \"p256dh\", 65, InvalidSubscriptionError);\n  const auth = requireBytes(authSecret, \"auth\", 16, InvalidSubscriptionError);\n  if (uaPublic[0] !== 0x04) {\n    throw new InvalidSubscriptionError(\"p256dh must be an uncompressed EC point\");\n  }\n\n  const salt = overrides?.salt\n    ? new Uint8Array(overrides.salt)\n    : crypto.getRandomValues(new Uint8Array(16));\n\n  const serverKeys =\n    overrides?.serverKeys ??\n    (await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve: \"P-256\" }, true, [\"deriveBits\"]));\n\n  const serverPublic = new Uint8Array(\n    await crypto.subtle.exportKey(\"raw\", serverKeys.publicKey),\n  ) as Uint8Array<ArrayBuffer>;\n\n  const uaKey = await crypto.subtle\n    .importKey(\"raw\", uaPublic, { name: \"ECDH\", namedCurve: \"P-256\" }, false, [])\n    .catch(() => {\n      throw new InvalidSubscriptionError(\"p256dh is not a valid P-256 public key\");\n    });\n\n  const shared = new Uint8Array(\n    await crypto.subtle.deriveBits({ name: \"ECDH\", public: uaKey }, serverKeys.privateKey, 256),\n  );\n\n  // Receiver's key first, or the browser cannot derive the key.\n  const keyInfo = concat(utf8(\"WebPush: info\"), new Uint8Array([0]), uaPublic, serverPublic);\n  const ikm = await hkdf(auth, shared, keyInfo, 32);\n\n  const cek = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: aes128gcm\"), new Uint8Array([0])),\n    16,\n  );\n  const nonce = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: nonce\"), new Uint8Array([0])),\n    12,\n  );\n\n  const aesKey = await crypto.subtle.importKey(\"raw\", cek, \"AES-GCM\", false, [\"encrypt\"]);\n\n  // 0x02 marks the final record.\n  const padded = concat(plaintext, new Uint8Array([2]));\n  const ciphertext = new Uint8Array(\n    await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce }, aesKey, padded),\n  );\n\n  // RFC 8188 header: salt(16) | rs(4, big endian) | idlen(1) | keyid\n  const header = new Uint8Array(21 + serverPublic.length);\n  header.set(salt, 0);\n  new DataView(header.buffer).setUint32(16, RECORD_SIZE, false);\n  header[20] = serverPublic.length;\n  header.set(serverPublic, 21);\n\n  return { body: concat(header, ciphertext), salt, serverPublicKey: serverPublic };\n}\n\nexport type VapidKeys = { publicKey: string; privateKey: string };\n\n/** A VAPID keypair in the base64url form every push library uses. */\nexport async function generateVapidKeys(): Promise<VapidKeys> {\n  const keys = await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve: \"P-256\" }, true, [\n    \"sign\",\n    \"verify\",\n  ]);\n\n  const publicKey = new Uint8Array(await crypto.subtle.exportKey(\"raw\", keys.publicKey));\n  const jwk = await crypto.subtle.exportKey(\"jwk\", keys.privateKey);\n\n  if (!jwk.d) throw new Error(\"generated key has no private component\");\n  return { publicKey: encodeBase64Url(publicKey), privateKey: jwk.d };\n}\n\n/** Web Crypto imports a private EC key only as JWK, so x and y are recovered from the public point. */\nasync function importVapidKey(keys: VapidKeys): Promise<CryptoKey> {\n  const publicKey = requireBytes(keys.publicKey, \"vapid publicKey\", 65);\n  if (publicKey[0] !== 0x04) throw new Error(\"vapid publicKey must be an uncompressed EC point\");\n\n  return crypto.subtle.importKey(\n    \"jwk\",\n    {\n      kty: \"EC\",\n      crv: \"P-256\",\n      x: encodeBase64Url(publicKey.slice(1, 33)),\n      y: encodeBase64Url(publicKey.slice(33, 65)),\n      d: keys.privateKey,\n      ext: true,\n    },\n    { name: \"ECDSA\", namedCurve: \"P-256\" },\n    false,\n    [\"sign\"],\n  );\n}\n\nexport type VapidOptions = {\n  subject: string;\n  keys: VapidKeys;\n  /** Injectable for tests; VAPID tokens are short-lived. */\n  now?: Date;\n  ttlSeconds?: number;\n};\n\n/** RFC 8292 §2: an ES256 JWT scoped to the push service origin. */\nexport async function vapidAuthorization(endpoint: string, options: VapidOptions): Promise<string> {\n  if (!/^(mailto:|https:)/.test(options.subject)) {\n    throw new Error('vapid subject must be a \"mailto:\" or \"https:\" URL');\n  }\n\n  const now = options.now ?? new Date();\n  const header = { typ: \"JWT\", alg: \"ES256\" };\n  const claims = {\n    // Origin only: a token scoped to the full endpoint is rejected.\n    aud: new URL(endpoint).origin,\n    exp: Math.floor(now.getTime() / 1000) + (options.ttlSeconds ?? 12 * 3600),\n    sub: options.subject,\n  };\n\n  const signingInput = `${encodeBase64Url(JSON.stringify(header))}.${encodeBase64Url(\n    JSON.stringify(claims),\n  )}`;\n\n  const signature = await crypto.subtle.sign(\n    { name: \"ECDSA\", hash: \"SHA-256\" },\n    await importVapidKey(options.keys),\n    utf8(signingInput),\n  );\n\n  // Web Crypto emits raw r||s, which is what JWS ES256 wants — no DER unwrap.\n  const jwt = `${signingInput}.${encodeBase64Url(new Uint8Array(signature))}`;\n  return `vapid t=${jwt}, k=${options.keys.publicKey}`;\n}\n","import type { PushMessage, PushProvider, PushSendResult } from \"../../plugins/push\";\nimport {\n  encryptPayload,\n  InvalidSubscriptionError,\n  MAX_PAYLOAD_BYTES,\n  type VapidKeys,\n  vapidAuthorization,\n} from \"./crypto\";\n\nexport type WebPushOptions = {\n  /** \"mailto:you@example.com\" or an https URL. Push services require it. */\n  subject: string;\n  vapid: VapidKeys;\n  /** How long the service should hold an undelivered message. */\n  ttlSeconds?: number;\n  urgency?: \"very-low\" | \"low\" | \"normal\" | \"high\";\n  fetch?: typeof globalThis.fetch;\n  /** Lets an http endpoint through. For a local fake push service only; never in production. */\n  allowInsecureEndpoints?: boolean;\n};\n\n/** Web push over Web Crypto. Gone endpoints surface as `expired`; transport failures as `retryable`. */\nexport function webPush(options: WebPushOptions): PushProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const ttl = options.ttlSeconds ?? 12 * 3600;\n\n  return {\n    name: \"web-push\",\n\n    async send(message: PushMessage): Promise<PushSendResult> {\n      const payload = new TextEncoder().encode(\n        JSON.stringify({\n          title: message.title,\n          body: message.body,\n          data: message.data ?? {},\n        }),\n      );\n\n      if (payload.length > MAX_PAYLOAD_BYTES) {\n        // Truncating would deliver a broken notification; retrying cannot help.\n        throw new Error(\n          `push payload is ${payload.length} bytes, over the ${MAX_PAYLOAD_BYTES} byte limit`,\n        );\n      }\n\n      // Unusable subscription: report invalid so it is pruned, not retried.\n      let endpoint: URL;\n      try {\n        endpoint = new URL(message.subscription.endpoint);\n      } catch {\n        return { invalid: true };\n      }\n      const secure = endpoint.protocol === \"https:\";\n      if (!secure && !(options.allowInsecureEndpoints && endpoint.protocol === \"http:\")) {\n        return { invalid: true };\n      }\n\n      let encrypted: Awaited<ReturnType<typeof encryptPayload>>;\n      try {\n        encrypted = await encryptPayload(\n          payload,\n          message.subscription.keys.p256dh,\n          message.subscription.keys.auth,\n        );\n      } catch (error) {\n        if (error instanceof InvalidSubscriptionError) return { invalid: true };\n        throw error;\n      }\n\n      const authorization = await vapidAuthorization(endpoint.href, {\n        subject: options.subject,\n        keys: options.vapid,\n      });\n\n      let response: Response;\n      try {\n        response = await doFetch(message.subscription.endpoint, {\n          method: \"POST\",\n          headers: {\n            Authorization: authorization,\n            \"Content-Encoding\": \"aes128gcm\",\n            \"Content-Type\": \"application/octet-stream\",\n            TTL: String(ttl),\n            ...(options.urgency ? { Urgency: options.urgency } : {}),\n          },\n          body: encrypted.body,\n          ...(message.signal ? { signal: message.signal } : {}),\n        });\n      } catch (error) {\n        // Never reached the service: DNS, socket, timeout.\n        throw new Error(error instanceof Error ? error.message : String(error));\n      }\n\n      // 201 is the documented success; 200/202 appear in the wild.\n      if (response.ok) return {};\n\n      // The subscription is permanently gone and must be pruned.\n      if (response.status === 404 || response.status === 410) return { expired: true };\n\n      if (response.status === 429 || response.status === 408 || response.status >= 500) {\n        return { retryable: true };\n      }\n\n      const detail = await response.text().catch(() => \"\");\n      throw new Error(\n        `push service responded ${response.status}${detail ? `: ${detail.slice(0, 300)}` : \"\"}`,\n      );\n    },\n  };\n}\n\nexport type { VapidKeys } from \"./crypto\";\nexport { generateVapidKeys, InvalidSubscriptionError, MAX_PAYLOAD_BYTES } from \"./crypto\";\n"]}

package/dist/providers/web-push.d.cts

@@ -1,5 +1,5 @@
 import { PushProvider } from '../plugins/push.cjs';
-import '../plugin-6S8tpH0n.cjs';
+import '../plugin-p4HS8yjS.cjs';
 import '../adapter-CV5Yt2c6.cjs';
 
 /** The subscription itself is unusable. Distinct from a transport failure so the plugin prunes rather than retries. */

package/dist/providers/web-push.d.ts

@@ -1,5 +1,5 @@
 import { PushProvider } from '../plugins/push.js';
-import '../plugin-C4fikLl7.js';
+import '../plugin-Bp68CCnd.js';
 import '../adapter-CV5Yt2c6.js';
 
 /** The subscription itself is unusable. Distinct from a transport failure so the plugin prunes rather than retries. */

package/dist/providers/web-push.js

@@ -51,13 +51,9 @@ async function encryptPayload(plaintext, userAgentPublicKey, authSecret, overrid
   const serverPublic = new Uint8Array(
     await crypto.subtle.exportKey("raw", serverKeys.publicKey)
   );
-  const uaKey = await crypto.subtle.importKey(
-    "raw",
-    uaPublic,
-    { name: "ECDH", namedCurve: "P-256" },
-    false,
-    []
-  );
+  const uaKey = await crypto.subtle.importKey("raw", uaPublic, { name: "ECDH", namedCurve: "P-256" }, false, []).catch(() => {
+    throw new InvalidSubscriptionError("p256dh is not a valid P-256 public key");
+  });
   const shared = new Uint8Array(
     await crypto.subtle.deriveBits({ name: "ECDH", public: uaKey }, serverKeys.privateKey, 256)
   );

package/dist/providers/web-push.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/web-push/crypto.ts","../../src/providers/web-push/index.ts"],"names":[],"mappings":";;;AAIA,IAAM,OAAO,CAAC,KAAA,KAAkB,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAE9D,SAAS,UAAU,KAAA,EAA8C;AAC/D,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAC,KAAK,IAAA,KAAS,GAAA,GAAM,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAC9D,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAK,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,GAAA,CAAI,GAAA,CAAI,MAAM,MAAM,CAAA;AACpB,IAAA,MAAA,IAAU,IAAA,CAAK,MAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAGO,IAAM,wBAAA,GAAN,cAAuC,KAAA,CAAM;AAAA,EAClD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAA,CACP,KAAA,EACA,KAAA,EACA,MAAA,EACA,UAA0C,KAAA,EACjB;AACzB,EAAA,MAAM,KAAA,GAAQ,qBAAqB,KAAK,CAAA;AACxC,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,OAAA,CAAQ,CAAA,EAAG,KAAK,CAAA,uBAAA,CAAyB,CAAA;AAC/D,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,MAAA,EAAQ;AACnD,IAAA,MAAM,IAAI,QAAQ,CAAA,EAAG,KAAK,YAAY,MAAM,CAAA,YAAA,EAAe,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,KAAA;AACT;AAGA,eAAe,IAAA,CAEb,IAAA,EACA,GAAA,EACA,IAAA,EACA,MAAA,EACkC;AAClC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AACnF,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,IAC/B,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,MAAM,IAAA,EAAK;AAAA,IAC5C,GAAA;AAAA,IACA,MAAA,GAAS;AAAA,GACX;AACA,EAAA,OAAO,IAAI,WAAW,IAAI,CAAA;AAC5B;AAEO,IAAM,WAAA,GAAc,IAAA;AAEpB,IAAM,oBAAoB,WAAA,GAAc;AAS/C,eAAsB,cAAA,CACpB,SAAA,EACA,kBAAA,EACA,UAAA,EACA,SAAA,EACwB;AACxB,EAAA,IAAI,SAAA,CAAU,SAAS,iBAAA,EAAmB;AACxC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,UAAU,MAAM,CAAA,qBAAA,EAAwB,iBAAiB,CAAA,CAAE,CAAA;AAAA,EAChG;AAEA,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,kBAAA,EAAoB,QAAA,EAAU,IAAI,wBAAwB,CAAA;AACxF,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,UAAA,EAAY,MAAA,EAAQ,IAAI,wBAAwB,CAAA;AAC1E,EAAA,IAAI,QAAA,CAAS,CAAC,CAAA,KAAM,CAAA,EAAM;AACxB,IAAA,MAAM,IAAI,yBAAyB,yCAAyC,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,IAAA,GAAO,SAAA,EAAW,IAAA,GACpB,IAAI,UAAA,CAAW,SAAA,CAAU,IAAI,CAAA,GAC7B,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AAE7C,EAAA,MAAM,aAEH,MAAM,MAAA,CAAO,OAAO,WAAA,CAAY,EAAE,IAAA,EAAM,MAAA,EAAQ,YAAY,OAAA,EAAQ,EAAG,IAAA,EAAM,CAAC,YAAY,CAAC,CAAA;AAE9F,EAAA,MAAM,eAAe,IAAI,UAAA;AAAA,IACvB,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,WAAW,SAAS;AAAA,GAC3D;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,IAChC,KAAA;AAAA,IACA,QAAA;AAAA,IACA,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAQ;AAAA,IACpC,KAAA;AAAA,IACA;AAAC,GACH;AAEA,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,KAAA,EAAM,EAAG,UAAA,CAAW,UAAA,EAAY,GAAG;AAAA,GAC5F;AAGA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAA,EAAG,QAAA,EAAU,YAAY,CAAA;AACzF,EAAA,MAAM,MAAM,MAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAE,CAAA;AAEhD,EAAA,MAAM,MAAM,MAAM,IAAA;AAAA,IAChB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,6BAA6B,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACA,EAAA,MAAM,QAAQ,MAAM,IAAA;AAAA,IAClB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,yBAAyB,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC3D;AAAA,GACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,SAAA,EAAW,KAAA,EAAO,CAAC,SAAS,CAAC,CAAA;AAGtF,EAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAAW,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AACpD,EAAA,MAAM,aAAa,IAAI,UAAA;AAAA,IACrB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAI,KAAA,EAAM,EAAG,MAAA,EAAQ,MAAM;AAAA,GAC5E;AAGA,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,EAAA,GAAK,aAAa,MAAM,CAAA;AACtD,EAAA,MAAA,CAAO,GAAA,CAAI,MAAM,CAAC,CAAA;AAClB,EAAA,IAAI,SAAS,MAAA,CAAO,MAAM,EAAE,SAAA,CAAU,EAAA,EAAI,aAAa,KAAK,CAAA;AAC5D,EAAA,MAAA,CAAO,EAAE,IAAI,YAAA,CAAa,MAAA;AAC1B,EAAA,MAAA,CAAO,GAAA,CAAI,cAAc,EAAE,CAAA;AAE3B,EAAA,OAAO,EAAE,MAAM,MAAA,CAAO,MAAA,EAAQ,UAAU,CAAA,EAAG,IAAA,EAAM,iBAAiB,YAAA,EAAa;AACjF;AAKA,eAAsB,iBAAA,GAAwC;AAC5D,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ,EAAG,IAAA,EAAM;AAAA,IACzF,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,IAAA,CAAK,SAAS,CAAC,CAAA;AACrF,EAAA,MAAM,MAAM,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,KAAK,UAAU,CAAA;AAEhE,EAAA,IAAI,CAAC,GAAA,CAAI,CAAA,EAAG,MAAM,IAAI,MAAM,wCAAwC,CAAA;AACpE,EAAA,OAAO,EAAE,SAAA,EAAW,eAAA,CAAgB,SAAS,CAAA,EAAG,UAAA,EAAY,IAAI,CAAA,EAAE;AACpE;AAGA,eAAe,eAAe,IAAA,EAAqC;AACjE,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,IAAA,CAAK,SAAA,EAAW,mBAAmB,EAAE,CAAA;AACpE,EAAA,IAAI,UAAU,CAAC,CAAA,KAAM,GAAM,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAE7F,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA;AAAA,MACE,GAAA,EAAK,IAAA;AAAA,MACL,GAAA,EAAK,OAAA;AAAA,MACL,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,MACzC,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,MAC1C,GAAG,IAAA,CAAK,UAAA;AAAA,MACR,GAAA,EAAK;AAAA,KACP;AAAA,IACA,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ;AAAA,IACrC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACF;AAWA,eAAsB,kBAAA,CAAmB,UAAkB,OAAA,EAAwC;AACjG,EAAA,IAAI,CAAC,mBAAA,CAAoB,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC9C,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,oBAAO,IAAI,IAAA,EAAK;AACpC,EAAA,MAAM,MAAA,GAAS,EAAE,GAAA,EAAK,KAAA,EAAO,KAAK,OAAA,EAAQ;AAC1C,EAAA,MAAM,MAAA,GAAS;AAAA;AAAA,IAEb,GAAA,EAAK,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,MAAA;AAAA,IACvB,GAAA,EAAK,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,KAAY,GAAI,CAAA,IAAK,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA,CAAA;AAAA,IACpE,KAAK,OAAA,CAAQ;AAAA,GACf;AAEA,EAAA,MAAM,YAAA,GAAe,GAAG,eAAA,CAAgB,IAAA,CAAK,UAAU,MAAM,CAAC,CAAC,CAAA,CAAA,EAAI,eAAA;AAAA,IACjE,IAAA,CAAK,UAAU,MAAM;AAAA,GACtB,CAAA,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA;AAAA,IACpC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,MAAM,cAAA,CAAe,OAAA,CAAQ,IAAI,CAAA;AAAA,IACjC,KAAK,YAAY;AAAA,GACnB;AAGA,EAAA,MAAM,GAAA,GAAM,GAAG,YAAY,CAAA,CAAA,EAAI,gBAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AACzE,EAAA,OAAO,CAAA,QAAA,EAAW,GAAG,CAAA,IAAA,EAAO,OAAA,CAAQ,KAAK,SAAS,CAAA,CAAA;AACpD;;;ACjMO,SAAS,QAAQ,OAAA,EAAuC;AAC7D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA;AAEvC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IAEN,MAAM,KAAK,OAAA,EAA+C;AACxD,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,MAAA;AAAA,QAChC,KAAK,SAAA,CAAU;AAAA,UACb,OAAO,OAAA,CAAQ,KAAA;AAAA,UACf,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,IAAA,EAAM,OAAA,CAAQ,IAAA,IAAQ;AAAC,SACxB;AAAA,OACH;AAEA,MAAA,IAAI,OAAA,CAAQ,SAAS,iBAAA,EAAmB;AAEtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,gBAAA,EAAmB,OAAA,CAAQ,MAAM,CAAA,iBAAA,EAAoB,iBAAiB,CAAA,WAAA;AAAA,SACxE;AAAA,MACF;AAGA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,YAAA,CAAa,QAAQ,CAAA;AAAA,MAClD,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AACA,MAAA,MAAM,MAAA,GAAS,SAAS,QAAA,KAAa,QAAA;AACrC,MAAA,IAAI,CAAC,MAAA,IAAU,EAAE,QAAQ,sBAAA,IAA0B,QAAA,CAAS,aAAa,OAAA,CAAA,EAAU;AACjF,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AAEA,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI;AACF,QAAA,SAAA,GAAY,MAAM,cAAA;AAAA,UAChB,OAAA;AAAA,UACA,OAAA,CAAQ,aAAa,IAAA,CAAK,MAAA;AAAA,UAC1B,OAAA,CAAQ,aAAa,IAAA,CAAK;AAAA,SAC5B;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,wBAAA,EAA0B,OAAO,EAAE,SAAS,IAAA,EAAK;AACtE,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,MAAM,aAAA,GAAgB,MAAM,kBAAA,CAAmB,QAAA,CAAS,IAAA,EAAM;AAAA,QAC5D,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,MAAM,OAAA,CAAQ;AAAA,OACf,CAAA;AAED,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,QAAA,EAAU;AAAA,UACtD,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,aAAA;AAAA,YACf,kBAAA,EAAoB,WAAA;AAAA,YACpB,cAAA,EAAgB,0BAAA;AAAA,YAChB,GAAA,EAAK,OAAO,GAAG,CAAA;AAAA,YACf,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY;AAAC,WACxD;AAAA,UACA,MAAM,SAAA,CAAU,IAAA;AAAA,UAChB,GAAI,QAAQ,MAAA,GAAS,EAAE,QAAQ,OAAA,CAAQ,MAAA,KAAW;AAAC,SACpD,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AAEd,QAAA,MAAM,IAAI,MAAM,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MACxE;AAGA,MAAA,IAAI,QAAA,CAAS,EAAA,EAAI,OAAO,EAAC;AAGzB,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK,OAAO,EAAE,OAAA,EAAS,IAAA,EAAK;AAE/E,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,UAAU,GAAA,EAAK;AAChF,QAAA,OAAO,EAAE,WAAW,IAAA,EAAK;AAAA,MAC3B;AAEA,MAAA,MAAM,SAAS,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACnD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,EAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,OACvF;AAAA,IACF;AAAA,GACF;AACF","file":"web-push.js","sourcesContent":["import { decodeBase64UrlBytes, encodeBase64Url } from \"../../core/base64url\";\n\n/** VAPID (RFC 8292) and aes128gcm (RFC 8291 over RFC 8188) on Web Crypto, so it runs on Workers and Edge. */\n\nconst utf8 = (value: string) => new TextEncoder().encode(value);\n\nfunction concat(...parts: Uint8Array[]): Uint8Array<ArrayBuffer> {\n  const total = parts.reduce((sum, part) => sum + part.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\n/** The subscription itself is unusable. Distinct from a transport failure so the plugin prunes rather than retries. */\nexport class InvalidSubscriptionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidSubscriptionError\";\n  }\n}\n\nfunction requireBytes(\n  value: string,\n  label: string,\n  length?: number,\n  Failure: new (message: string) => Error = Error,\n): Uint8Array<ArrayBuffer> {\n  const bytes = decodeBase64UrlBytes(value);\n  if (!bytes) throw new Failure(`${label} is not valid base64url`);\n  if (length !== undefined && bytes.length !== length) {\n    throw new Failure(`${label} must be ${length} bytes, got ${bytes.length}`);\n  }\n  return bytes;\n}\n\n/** Web Crypto's HKDF does extract and expand in one call. */\nasync function hkdf(\n  // Uint8Array<ArrayBuffer>: a bare Uint8Array is not a BufferSource.\n  salt: Uint8Array<ArrayBuffer>,\n  ikm: Uint8Array<ArrayBuffer>,\n  info: Uint8Array<ArrayBuffer>,\n  length: number,\n): Promise<Uint8Array<ArrayBuffer>> {\n  const key = await crypto.subtle.importKey(\"raw\", ikm, \"HKDF\", false, [\"deriveBits\"]);\n  const bits = await crypto.subtle.deriveBits(\n    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n    key,\n    length * 8,\n  );\n  return new Uint8Array(bits);\n}\n\nexport const RECORD_SIZE = 4096;\n/** One record: record size less the padding delimiter and the GCM tag. */\nexport const MAX_PAYLOAD_BYTES = RECORD_SIZE - 17;\n\nexport type EncryptedPush = {\n  body: Uint8Array<ArrayBuffer>;\n  salt: Uint8Array<ArrayBuffer>;\n  serverPublicKey: Uint8Array<ArrayBuffer>;\n};\n\n/** RFC 8291 §3.4 then RFC 8188 §2. `salt` and `serverKeys` are injectable for tests only. */\nexport async function encryptPayload(\n  plaintext: Uint8Array<ArrayBuffer>,\n  userAgentPublicKey: string,\n  authSecret: string,\n  overrides?: { salt?: Uint8Array<ArrayBuffer>; serverKeys?: CryptoKeyPair },\n): Promise<EncryptedPush> {\n  if (plaintext.length > MAX_PAYLOAD_BYTES) {\n    throw new Error(`push payload is ${plaintext.length} bytes; the limit is ${MAX_PAYLOAD_BYTES}`);\n  }\n\n  const uaPublic = requireBytes(userAgentPublicKey, \"p256dh\", 65, InvalidSubscriptionError);\n  const auth = requireBytes(authSecret, \"auth\", 16, InvalidSubscriptionError);\n  if (uaPublic[0] !== 0x04) {\n    throw new InvalidSubscriptionError(\"p256dh must be an uncompressed EC point\");\n  }\n\n  const salt = overrides?.salt\n    ? new Uint8Array(overrides.salt)\n    : crypto.getRandomValues(new Uint8Array(16));\n\n  const serverKeys =\n    overrides?.serverKeys ??\n    (await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve: \"P-256\" }, true, [\"deriveBits\"]));\n\n  const serverPublic = new Uint8Array(\n    await crypto.subtle.exportKey(\"raw\", serverKeys.publicKey),\n  ) as Uint8Array<ArrayBuffer>;\n\n  const uaKey = await crypto.subtle.importKey(\n    \"raw\",\n    uaPublic,\n    { name: \"ECDH\", namedCurve: \"P-256\" },\n    false,\n    [],\n  );\n\n  const shared = new Uint8Array(\n    await crypto.subtle.deriveBits({ name: \"ECDH\", public: uaKey }, serverKeys.privateKey, 256),\n  );\n\n  // Receiver's key first, or the browser cannot derive the key.\n  const keyInfo = concat(utf8(\"WebPush: info\"), new Uint8Array([0]), uaPublic, serverPublic);\n  const ikm = await hkdf(auth, shared, keyInfo, 32);\n\n  const cek = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: aes128gcm\"), new Uint8Array([0])),\n    16,\n  );\n  const nonce = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: nonce\"), new Uint8Array([0])),\n    12,\n  );\n\n  const aesKey = await crypto.subtle.importKey(\"raw\", cek, \"AES-GCM\", false, [\"encrypt\"]);\n\n  // 0x02 marks the final record.\n  const padded = concat(plaintext, new Uint8Array([2]));\n  const ciphertext = new Uint8Array(\n    await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce }, aesKey, padded),\n  );\n\n  // RFC 8188 header: salt(16) | rs(4, big endian) | idlen(1) | keyid\n  const header = new Uint8Array(21 + serverPublic.length);\n  header.set(salt, 0);\n  new DataView(header.buffer).setUint32(16, RECORD_SIZE, false);\n  header[20] = serverPublic.length;\n  header.set(serverPublic, 21);\n\n  return { body: concat(header, ciphertext), salt, serverPublicKey: serverPublic };\n}\n\nexport type VapidKeys = { publicKey: string; privateKey: string };\n\n/** A VAPID keypair in the base64url form every push library uses. */\nexport async function generateVapidKeys(): Promise<VapidKeys> {\n  const keys = await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve: \"P-256\" }, true, [\n    \"sign\",\n    \"verify\",\n  ]);\n\n  const publicKey = new Uint8Array(await crypto.subtle.exportKey(\"raw\", keys.publicKey));\n  const jwk = await crypto.subtle.exportKey(\"jwk\", keys.privateKey);\n\n  if (!jwk.d) throw new Error(\"generated key has no private component\");\n  return { publicKey: encodeBase64Url(publicKey), privateKey: jwk.d };\n}\n\n/** Web Crypto imports a private EC key only as JWK, so x and y are recovered from the public point. */\nasync function importVapidKey(keys: VapidKeys): Promise<CryptoKey> {\n  const publicKey = requireBytes(keys.publicKey, \"vapid publicKey\", 65);\n  if (publicKey[0] !== 0x04) throw new Error(\"vapid publicKey must be an uncompressed EC point\");\n\n  return crypto.subtle.importKey(\n    \"jwk\",\n    {\n      kty: \"EC\",\n      crv: \"P-256\",\n      x: encodeBase64Url(publicKey.slice(1, 33)),\n      y: encodeBase64Url(publicKey.slice(33, 65)),\n      d: keys.privateKey,\n      ext: true,\n    },\n    { name: \"ECDSA\", namedCurve: \"P-256\" },\n    false,\n    [\"sign\"],\n  );\n}\n\nexport type VapidOptions = {\n  subject: string;\n  keys: VapidKeys;\n  /** Injectable for tests; VAPID tokens are short-lived. */\n  now?: Date;\n  ttlSeconds?: number;\n};\n\n/** RFC 8292 §2: an ES256 JWT scoped to the push service origin. */\nexport async function vapidAuthorization(endpoint: string, options: VapidOptions): Promise<string> {\n  if (!/^(mailto:|https:)/.test(options.subject)) {\n    throw new Error('vapid subject must be a \"mailto:\" or \"https:\" URL');\n  }\n\n  const now = options.now ?? new Date();\n  const header = { typ: \"JWT\", alg: \"ES256\" };\n  const claims = {\n    // Origin only: a token scoped to the full endpoint is rejected.\n    aud: new URL(endpoint).origin,\n    exp: Math.floor(now.getTime() / 1000) + (options.ttlSeconds ?? 12 * 3600),\n    sub: options.subject,\n  };\n\n  const signingInput = `${encodeBase64Url(JSON.stringify(header))}.${encodeBase64Url(\n    JSON.stringify(claims),\n  )}`;\n\n  const signature = await crypto.subtle.sign(\n    { name: \"ECDSA\", hash: \"SHA-256\" },\n    await importVapidKey(options.keys),\n    utf8(signingInput),\n  );\n\n  // Web Crypto emits raw r||s, which is what JWS ES256 wants — no DER unwrap.\n  const jwt = `${signingInput}.${encodeBase64Url(new Uint8Array(signature))}`;\n  return `vapid t=${jwt}, k=${options.keys.publicKey}`;\n}\n","import type { PushMessage, PushProvider, PushSendResult } from \"../../plugins/push\";\nimport {\n  encryptPayload,\n  InvalidSubscriptionError,\n  MAX_PAYLOAD_BYTES,\n  type VapidKeys,\n  vapidAuthorization,\n} from \"./crypto\";\n\nexport type WebPushOptions = {\n  /** \"mailto:you@example.com\" or an https URL. Push services require it. */\n  subject: string;\n  vapid: VapidKeys;\n  /** How long the service should hold an undelivered message. */\n  ttlSeconds?: number;\n  urgency?: \"very-low\" | \"low\" | \"normal\" | \"high\";\n  fetch?: typeof globalThis.fetch;\n  /** Lets an http endpoint through. For a local fake push service only; never in production. */\n  allowInsecureEndpoints?: boolean;\n};\n\n/** Web push over Web Crypto. Gone endpoints surface as `expired`; transport failures as `retryable`. */\nexport function webPush(options: WebPushOptions): PushProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const ttl = options.ttlSeconds ?? 12 * 3600;\n\n  return {\n    name: \"web-push\",\n\n    async send(message: PushMessage): Promise<PushSendResult> {\n      const payload = new TextEncoder().encode(\n        JSON.stringify({\n          title: message.title,\n          body: message.body,\n          data: message.data ?? {},\n        }),\n      );\n\n      if (payload.length > MAX_PAYLOAD_BYTES) {\n        // Truncating would deliver a broken notification; retrying cannot help.\n        throw new Error(\n          `push payload is ${payload.length} bytes, over the ${MAX_PAYLOAD_BYTES} byte limit`,\n        );\n      }\n\n      // Unusable subscription: report invalid so it is pruned, not retried.\n      let endpoint: URL;\n      try {\n        endpoint = new URL(message.subscription.endpoint);\n      } catch {\n        return { invalid: true };\n      }\n      const secure = endpoint.protocol === \"https:\";\n      if (!secure && !(options.allowInsecureEndpoints && endpoint.protocol === \"http:\")) {\n        return { invalid: true };\n      }\n\n      let encrypted: Awaited<ReturnType<typeof encryptPayload>>;\n      try {\n        encrypted = await encryptPayload(\n          payload,\n          message.subscription.keys.p256dh,\n          message.subscription.keys.auth,\n        );\n      } catch (error) {\n        if (error instanceof InvalidSubscriptionError) return { invalid: true };\n        throw error;\n      }\n\n      const authorization = await vapidAuthorization(endpoint.href, {\n        subject: options.subject,\n        keys: options.vapid,\n      });\n\n      let response: Response;\n      try {\n        response = await doFetch(message.subscription.endpoint, {\n          method: \"POST\",\n          headers: {\n            Authorization: authorization,\n            \"Content-Encoding\": \"aes128gcm\",\n            \"Content-Type\": \"application/octet-stream\",\n            TTL: String(ttl),\n            ...(options.urgency ? { Urgency: options.urgency } : {}),\n          },\n          body: encrypted.body,\n          ...(message.signal ? { signal: message.signal } : {}),\n        });\n      } catch (error) {\n        // Never reached the service: DNS, socket, timeout.\n        throw new Error(error instanceof Error ? error.message : String(error));\n      }\n\n      // 201 is the documented success; 200/202 appear in the wild.\n      if (response.ok) return {};\n\n      // The subscription is permanently gone and must be pruned.\n      if (response.status === 404 || response.status === 410) return { expired: true };\n\n      if (response.status === 429 || response.status === 408 || response.status >= 500) {\n        return { retryable: true };\n      }\n\n      const detail = await response.text().catch(() => \"\");\n      throw new Error(\n        `push service responded ${response.status}${detail ? `: ${detail.slice(0, 300)}` : \"\"}`,\n      );\n    },\n  };\n}\n\nexport type { VapidKeys } from \"./crypto\";\nexport { generateVapidKeys, InvalidSubscriptionError, MAX_PAYLOAD_BYTES } from \"./crypto\";\n"]}
+{"version":3,"sources":["../../src/providers/web-push/crypto.ts","../../src/providers/web-push/index.ts"],"names":[],"mappings":";;;AAIA,IAAM,OAAO,CAAC,KAAA,KAAkB,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAE9D,SAAS,UAAU,KAAA,EAA8C;AAC/D,EAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAC,KAAK,IAAA,KAAS,GAAA,GAAM,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAC9D,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAK,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,GAAA,CAAI,GAAA,CAAI,MAAM,MAAM,CAAA;AACpB,IAAA,MAAA,IAAU,IAAA,CAAK,MAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAGO,IAAM,wBAAA,GAAN,cAAuC,KAAA,CAAM;AAAA,EAClD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAA,CACP,KAAA,EACA,KAAA,EACA,MAAA,EACA,UAA0C,KAAA,EACjB;AACzB,EAAA,MAAM,KAAA,GAAQ,qBAAqB,KAAK,CAAA;AACxC,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,OAAA,CAAQ,CAAA,EAAG,KAAK,CAAA,uBAAA,CAAyB,CAAA;AAC/D,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,MAAA,EAAQ;AACnD,IAAA,MAAM,IAAI,QAAQ,CAAA,EAAG,KAAK,YAAY,MAAM,CAAA,YAAA,EAAe,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,KAAA;AACT;AAGA,eAAe,IAAA,CAEb,IAAA,EACA,GAAA,EACA,IAAA,EACA,MAAA,EACkC;AAClC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,YAAY,CAAC,CAAA;AACnF,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,IAC/B,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,MAAM,IAAA,EAAK;AAAA,IAC5C,GAAA;AAAA,IACA,MAAA,GAAS;AAAA,GACX;AACA,EAAA,OAAO,IAAI,WAAW,IAAI,CAAA;AAC5B;AAEO,IAAM,WAAA,GAAc,IAAA;AAEpB,IAAM,oBAAoB,WAAA,GAAc;AAS/C,eAAsB,cAAA,CACpB,SAAA,EACA,kBAAA,EACA,UAAA,EACA,SAAA,EACwB;AACxB,EAAA,IAAI,SAAA,CAAU,SAAS,iBAAA,EAAmB;AACxC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,UAAU,MAAM,CAAA,qBAAA,EAAwB,iBAAiB,CAAA,CAAE,CAAA;AAAA,EAChG;AAEA,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,kBAAA,EAAoB,QAAA,EAAU,IAAI,wBAAwB,CAAA;AACxF,EAAA,MAAM,IAAA,GAAO,YAAA,CAAa,UAAA,EAAY,MAAA,EAAQ,IAAI,wBAAwB,CAAA;AAC1E,EAAA,IAAI,QAAA,CAAS,CAAC,CAAA,KAAM,CAAA,EAAM;AACxB,IAAA,MAAM,IAAI,yBAAyB,yCAAyC,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,IAAA,GAAO,SAAA,EAAW,IAAA,GACpB,IAAI,UAAA,CAAW,SAAA,CAAU,IAAI,CAAA,GAC7B,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AAE7C,EAAA,MAAM,aAEH,MAAM,MAAA,CAAO,OAAO,WAAA,CAAY,EAAE,IAAA,EAAM,MAAA,EAAQ,YAAY,OAAA,EAAQ,EAAG,IAAA,EAAM,CAAC,YAAY,CAAC,CAAA;AAE9F,EAAA,MAAM,eAAe,IAAI,UAAA;AAAA,IACvB,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,WAAW,SAAS;AAAA,GAC3D;AAEA,EAAA,MAAM,QAAQ,MAAM,MAAA,CAAO,OACxB,SAAA,CAAU,KAAA,EAAO,UAAU,EAAE,IAAA,EAAM,MAAA,EAAQ,UAAA,EAAY,SAAQ,EAAG,KAAA,EAAO,EAAE,CAAA,CAC3E,MAAM,MAAM;AACX,IAAA,MAAM,IAAI,yBAAyB,wCAAwC,CAAA;AAAA,EAC7E,CAAC,CAAA;AAEH,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,KAAA,EAAM,EAAG,UAAA,CAAW,UAAA,EAAY,GAAG;AAAA,GAC5F;AAGA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,eAAe,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAA,EAAG,QAAA,EAAU,YAAY,CAAA;AACzF,EAAA,MAAM,MAAM,MAAM,IAAA,CAAK,IAAA,EAAM,MAAA,EAAQ,SAAS,EAAE,CAAA;AAEhD,EAAA,MAAM,MAAM,MAAM,IAAA;AAAA,IAChB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,6BAA6B,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC/D;AAAA,GACF;AACA,EAAA,MAAM,QAAQ,MAAM,IAAA;AAAA,IAClB,IAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA,CAAO,KAAK,yBAAyB,CAAA,EAAG,IAAI,UAAA,CAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAAA,IAC3D;AAAA,GACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,GAAA,EAAK,SAAA,EAAW,KAAA,EAAO,CAAC,SAAS,CAAC,CAAA;AAGtF,EAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAAW,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AACpD,EAAA,MAAM,aAAa,IAAI,UAAA;AAAA,IACrB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA,CAAQ,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAI,KAAA,EAAM,EAAG,MAAA,EAAQ,MAAM;AAAA,GAC5E;AAGA,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,EAAA,GAAK,aAAa,MAAM,CAAA;AACtD,EAAA,MAAA,CAAO,GAAA,CAAI,MAAM,CAAC,CAAA;AAClB,EAAA,IAAI,SAAS,MAAA,CAAO,MAAM,EAAE,SAAA,CAAU,EAAA,EAAI,aAAa,KAAK,CAAA;AAC5D,EAAA,MAAA,CAAO,EAAE,IAAI,YAAA,CAAa,MAAA;AAC1B,EAAA,MAAA,CAAO,GAAA,CAAI,cAAc,EAAE,CAAA;AAE3B,EAAA,OAAO,EAAE,MAAM,MAAA,CAAO,MAAA,EAAQ,UAAU,CAAA,EAAG,IAAA,EAAM,iBAAiB,YAAA,EAAa;AACjF;AAKA,eAAsB,iBAAA,GAAwC;AAC5D,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,WAAA,CAAY,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ,EAAG,IAAA,EAAM;AAAA,IACzF,MAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,IAAA,CAAK,SAAS,CAAC,CAAA;AACrF,EAAA,MAAM,MAAM,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,KAAK,UAAU,CAAA;AAEhE,EAAA,IAAI,CAAC,GAAA,CAAI,CAAA,EAAG,MAAM,IAAI,MAAM,wCAAwC,CAAA;AACpE,EAAA,OAAO,EAAE,SAAA,EAAW,eAAA,CAAgB,SAAS,CAAA,EAAG,UAAA,EAAY,IAAI,CAAA,EAAE;AACpE;AAGA,eAAe,eAAe,IAAA,EAAqC;AACjE,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,IAAA,CAAK,SAAA,EAAW,mBAAmB,EAAE,CAAA;AACpE,EAAA,IAAI,UAAU,CAAC,CAAA,KAAM,GAAM,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAE7F,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,KAAA;AAAA,IACA;AAAA,MACE,GAAA,EAAK,IAAA;AAAA,MACL,GAAA,EAAK,OAAA;AAAA,MACL,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA;AAAA,MACzC,GAAG,eAAA,CAAgB,SAAA,CAAU,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA;AAAA,MAC1C,GAAG,IAAA,CAAK,UAAA;AAAA,MACR,GAAA,EAAK;AAAA,KACP;AAAA,IACA,EAAE,IAAA,EAAM,OAAA,EAAS,UAAA,EAAY,OAAA,EAAQ;AAAA,IACrC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACF;AAWA,eAAsB,kBAAA,CAAmB,UAAkB,OAAA,EAAwC;AACjG,EAAA,IAAI,CAAC,mBAAA,CAAoB,IAAA,CAAK,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC9C,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,oBAAO,IAAI,IAAA,EAAK;AACpC,EAAA,MAAM,MAAA,GAAS,EAAE,GAAA,EAAK,KAAA,EAAO,KAAK,OAAA,EAAQ;AAC1C,EAAA,MAAM,MAAA,GAAS;AAAA;AAAA,IAEb,GAAA,EAAK,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,MAAA;AAAA,IACvB,GAAA,EAAK,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,OAAA,KAAY,GAAI,CAAA,IAAK,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA,CAAA;AAAA,IACpE,KAAK,OAAA,CAAQ;AAAA,GACf;AAEA,EAAA,MAAM,YAAA,GAAe,GAAG,eAAA,CAAgB,IAAA,CAAK,UAAU,MAAM,CAAC,CAAC,CAAA,CAAA,EAAI,eAAA;AAAA,IACjE,IAAA,CAAK,UAAU,MAAM;AAAA,GACtB,CAAA,CAAA;AAED,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA;AAAA,IACpC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,MAAM,cAAA,CAAe,OAAA,CAAQ,IAAI,CAAA;AAAA,IACjC,KAAK,YAAY;AAAA,GACnB;AAGA,EAAA,MAAM,GAAA,GAAM,GAAG,YAAY,CAAA,CAAA,EAAI,gBAAgB,IAAI,UAAA,CAAW,SAAS,CAAC,CAAC,CAAA,CAAA;AACzE,EAAA,OAAO,CAAA,QAAA,EAAW,GAAG,CAAA,IAAA,EAAO,OAAA,CAAQ,KAAK,SAAS,CAAA,CAAA;AACpD;;;AC/LO,SAAS,QAAQ,OAAA,EAAuC;AAC7D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,UAAA,IAAc,EAAA,GAAK,IAAA;AAEvC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IAEN,MAAM,KAAK,OAAA,EAA+C;AACxD,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,MAAA;AAAA,QAChC,KAAK,SAAA,CAAU;AAAA,UACb,OAAO,OAAA,CAAQ,KAAA;AAAA,UACf,MAAM,OAAA,CAAQ,IAAA;AAAA,UACd,IAAA,EAAM,OAAA,CAAQ,IAAA,IAAQ;AAAC,SACxB;AAAA,OACH;AAEA,MAAA,IAAI,OAAA,CAAQ,SAAS,iBAAA,EAAmB;AAEtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,gBAAA,EAAmB,OAAA,CAAQ,MAAM,CAAA,iBAAA,EAAoB,iBAAiB,CAAA,WAAA;AAAA,SACxE;AAAA,MACF;AAGA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,IAAI,GAAA,CAAI,OAAA,CAAQ,YAAA,CAAa,QAAQ,CAAA;AAAA,MAClD,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AACA,MAAA,MAAM,MAAA,GAAS,SAAS,QAAA,KAAa,QAAA;AACrC,MAAA,IAAI,CAAC,MAAA,IAAU,EAAE,QAAQ,sBAAA,IAA0B,QAAA,CAAS,aAAa,OAAA,CAAA,EAAU;AACjF,QAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,MACzB;AAEA,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI;AACF,QAAA,SAAA,GAAY,MAAM,cAAA;AAAA,UAChB,OAAA;AAAA,UACA,OAAA,CAAQ,aAAa,IAAA,CAAK,MAAA;AAAA,UAC1B,OAAA,CAAQ,aAAa,IAAA,CAAK;AAAA,SAC5B;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,KAAA,YAAiB,wBAAA,EAA0B,OAAO,EAAE,SAAS,IAAA,EAAK;AACtE,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,MAAM,aAAA,GAAgB,MAAM,kBAAA,CAAmB,QAAA,CAAS,IAAA,EAAM;AAAA,QAC5D,SAAS,OAAA,CAAQ,OAAA;AAAA,QACjB,MAAM,OAAA,CAAQ;AAAA,OACf,CAAA;AAED,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,QAAA,EAAU;AAAA,UACtD,MAAA,EAAQ,MAAA;AAAA,UACR,OAAA,EAAS;AAAA,YACP,aAAA,EAAe,aAAA;AAAA,YACf,kBAAA,EAAoB,WAAA;AAAA,YACpB,cAAA,EAAgB,0BAAA;AAAA,YAChB,GAAA,EAAK,OAAO,GAAG,CAAA;AAAA,YACf,GAAI,QAAQ,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY;AAAC,WACxD;AAAA,UACA,MAAM,SAAA,CAAU,IAAA;AAAA,UAChB,GAAI,QAAQ,MAAA,GAAS,EAAE,QAAQ,OAAA,CAAQ,MAAA,KAAW;AAAC,SACpD,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AAEd,QAAA,MAAM,IAAI,MAAM,KAAA,YAAiB,KAAA,GAAQ,MAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,MACxE;AAGA,MAAA,IAAI,QAAA,CAAS,EAAA,EAAI,OAAO,EAAC;AAGzB,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,EAAK,OAAO,EAAE,OAAA,EAAS,IAAA,EAAK;AAE/E,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,IAAO,QAAA,CAAS,UAAU,GAAA,EAAK;AAChF,QAAA,OAAO,EAAE,WAAW,IAAA,EAAK;AAAA,MAC3B;AAEA,MAAA,MAAM,SAAS,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACnD,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,EAAG,MAAA,GAAS,CAAA,EAAA,EAAK,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA,GAAK,EAAE,CAAA;AAAA,OACvF;AAAA,IACF;AAAA,GACF;AACF","file":"web-push.js","sourcesContent":["import { decodeBase64UrlBytes, encodeBase64Url } from \"../../core/base64url\";\n\n/** VAPID (RFC 8292) and aes128gcm (RFC 8291 over RFC 8188) on Web Crypto, so it runs on Workers and Edge. */\n\nconst utf8 = (value: string) => new TextEncoder().encode(value);\n\nfunction concat(...parts: Uint8Array[]): Uint8Array<ArrayBuffer> {\n  const total = parts.reduce((sum, part) => sum + part.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const part of parts) {\n    out.set(part, offset);\n    offset += part.length;\n  }\n  return out;\n}\n\n/** The subscription itself is unusable. Distinct from a transport failure so the plugin prunes rather than retries. */\nexport class InvalidSubscriptionError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidSubscriptionError\";\n  }\n}\n\nfunction requireBytes(\n  value: string,\n  label: string,\n  length?: number,\n  Failure: new (message: string) => Error = Error,\n): Uint8Array<ArrayBuffer> {\n  const bytes = decodeBase64UrlBytes(value);\n  if (!bytes) throw new Failure(`${label} is not valid base64url`);\n  if (length !== undefined && bytes.length !== length) {\n    throw new Failure(`${label} must be ${length} bytes, got ${bytes.length}`);\n  }\n  return bytes;\n}\n\n/** Web Crypto's HKDF does extract and expand in one call. */\nasync function hkdf(\n  // Uint8Array<ArrayBuffer>: a bare Uint8Array is not a BufferSource.\n  salt: Uint8Array<ArrayBuffer>,\n  ikm: Uint8Array<ArrayBuffer>,\n  info: Uint8Array<ArrayBuffer>,\n  length: number,\n): Promise<Uint8Array<ArrayBuffer>> {\n  const key = await crypto.subtle.importKey(\"raw\", ikm, \"HKDF\", false, [\"deriveBits\"]);\n  const bits = await crypto.subtle.deriveBits(\n    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n    key,\n    length * 8,\n  );\n  return new Uint8Array(bits);\n}\n\nexport const RECORD_SIZE = 4096;\n/** One record: record size less the padding delimiter and the GCM tag. */\nexport const MAX_PAYLOAD_BYTES = RECORD_SIZE - 17;\n\nexport type EncryptedPush = {\n  body: Uint8Array<ArrayBuffer>;\n  salt: Uint8Array<ArrayBuffer>;\n  serverPublicKey: Uint8Array<ArrayBuffer>;\n};\n\n/** RFC 8291 §3.4 then RFC 8188 §2. `salt` and `serverKeys` are injectable for tests only. */\nexport async function encryptPayload(\n  plaintext: Uint8Array<ArrayBuffer>,\n  userAgentPublicKey: string,\n  authSecret: string,\n  overrides?: { salt?: Uint8Array<ArrayBuffer>; serverKeys?: CryptoKeyPair },\n): Promise<EncryptedPush> {\n  if (plaintext.length > MAX_PAYLOAD_BYTES) {\n    throw new Error(`push payload is ${plaintext.length} bytes; the limit is ${MAX_PAYLOAD_BYTES}`);\n  }\n\n  const uaPublic = requireBytes(userAgentPublicKey, \"p256dh\", 65, InvalidSubscriptionError);\n  const auth = requireBytes(authSecret, \"auth\", 16, InvalidSubscriptionError);\n  if (uaPublic[0] !== 0x04) {\n    throw new InvalidSubscriptionError(\"p256dh must be an uncompressed EC point\");\n  }\n\n  const salt = overrides?.salt\n    ? new Uint8Array(overrides.salt)\n    : crypto.getRandomValues(new Uint8Array(16));\n\n  const serverKeys =\n    overrides?.serverKeys ??\n    (await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve: \"P-256\" }, true, [\"deriveBits\"]));\n\n  const serverPublic = new Uint8Array(\n    await crypto.subtle.exportKey(\"raw\", serverKeys.publicKey),\n  ) as Uint8Array<ArrayBuffer>;\n\n  const uaKey = await crypto.subtle\n    .importKey(\"raw\", uaPublic, { name: \"ECDH\", namedCurve: \"P-256\" }, false, [])\n    .catch(() => {\n      throw new InvalidSubscriptionError(\"p256dh is not a valid P-256 public key\");\n    });\n\n  const shared = new Uint8Array(\n    await crypto.subtle.deriveBits({ name: \"ECDH\", public: uaKey }, serverKeys.privateKey, 256),\n  );\n\n  // Receiver's key first, or the browser cannot derive the key.\n  const keyInfo = concat(utf8(\"WebPush: info\"), new Uint8Array([0]), uaPublic, serverPublic);\n  const ikm = await hkdf(auth, shared, keyInfo, 32);\n\n  const cek = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: aes128gcm\"), new Uint8Array([0])),\n    16,\n  );\n  const nonce = await hkdf(\n    salt,\n    ikm,\n    concat(utf8(\"Content-Encoding: nonce\"), new Uint8Array([0])),\n    12,\n  );\n\n  const aesKey = await crypto.subtle.importKey(\"raw\", cek, \"AES-GCM\", false, [\"encrypt\"]);\n\n  // 0x02 marks the final record.\n  const padded = concat(plaintext, new Uint8Array([2]));\n  const ciphertext = new Uint8Array(\n    await crypto.subtle.encrypt({ name: \"AES-GCM\", iv: nonce }, aesKey, padded),\n  );\n\n  // RFC 8188 header: salt(16) | rs(4, big endian) | idlen(1) | keyid\n  const header = new Uint8Array(21 + serverPublic.length);\n  header.set(salt, 0);\n  new DataView(header.buffer).setUint32(16, RECORD_SIZE, false);\n  header[20] = serverPublic.length;\n  header.set(serverPublic, 21);\n\n  return { body: concat(header, ciphertext), salt, serverPublicKey: serverPublic };\n}\n\nexport type VapidKeys = { publicKey: string; privateKey: string };\n\n/** A VAPID keypair in the base64url form every push library uses. */\nexport async function generateVapidKeys(): Promise<VapidKeys> {\n  const keys = await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve: \"P-256\" }, true, [\n    \"sign\",\n    \"verify\",\n  ]);\n\n  const publicKey = new Uint8Array(await crypto.subtle.exportKey(\"raw\", keys.publicKey));\n  const jwk = await crypto.subtle.exportKey(\"jwk\", keys.privateKey);\n\n  if (!jwk.d) throw new Error(\"generated key has no private component\");\n  return { publicKey: encodeBase64Url(publicKey), privateKey: jwk.d };\n}\n\n/** Web Crypto imports a private EC key only as JWK, so x and y are recovered from the public point. */\nasync function importVapidKey(keys: VapidKeys): Promise<CryptoKey> {\n  const publicKey = requireBytes(keys.publicKey, \"vapid publicKey\", 65);\n  if (publicKey[0] !== 0x04) throw new Error(\"vapid publicKey must be an uncompressed EC point\");\n\n  return crypto.subtle.importKey(\n    \"jwk\",\n    {\n      kty: \"EC\",\n      crv: \"P-256\",\n      x: encodeBase64Url(publicKey.slice(1, 33)),\n      y: encodeBase64Url(publicKey.slice(33, 65)),\n      d: keys.privateKey,\n      ext: true,\n    },\n    { name: \"ECDSA\", namedCurve: \"P-256\" },\n    false,\n    [\"sign\"],\n  );\n}\n\nexport type VapidOptions = {\n  subject: string;\n  keys: VapidKeys;\n  /** Injectable for tests; VAPID tokens are short-lived. */\n  now?: Date;\n  ttlSeconds?: number;\n};\n\n/** RFC 8292 §2: an ES256 JWT scoped to the push service origin. */\nexport async function vapidAuthorization(endpoint: string, options: VapidOptions): Promise<string> {\n  if (!/^(mailto:|https:)/.test(options.subject)) {\n    throw new Error('vapid subject must be a \"mailto:\" or \"https:\" URL');\n  }\n\n  const now = options.now ?? new Date();\n  const header = { typ: \"JWT\", alg: \"ES256\" };\n  const claims = {\n    // Origin only: a token scoped to the full endpoint is rejected.\n    aud: new URL(endpoint).origin,\n    exp: Math.floor(now.getTime() / 1000) + (options.ttlSeconds ?? 12 * 3600),\n    sub: options.subject,\n  };\n\n  const signingInput = `${encodeBase64Url(JSON.stringify(header))}.${encodeBase64Url(\n    JSON.stringify(claims),\n  )}`;\n\n  const signature = await crypto.subtle.sign(\n    { name: \"ECDSA\", hash: \"SHA-256\" },\n    await importVapidKey(options.keys),\n    utf8(signingInput),\n  );\n\n  // Web Crypto emits raw r||s, which is what JWS ES256 wants — no DER unwrap.\n  const jwt = `${signingInput}.${encodeBase64Url(new Uint8Array(signature))}`;\n  return `vapid t=${jwt}, k=${options.keys.publicKey}`;\n}\n","import type { PushMessage, PushProvider, PushSendResult } from \"../../plugins/push\";\nimport {\n  encryptPayload,\n  InvalidSubscriptionError,\n  MAX_PAYLOAD_BYTES,\n  type VapidKeys,\n  vapidAuthorization,\n} from \"./crypto\";\n\nexport type WebPushOptions = {\n  /** \"mailto:you@example.com\" or an https URL. Push services require it. */\n  subject: string;\n  vapid: VapidKeys;\n  /** How long the service should hold an undelivered message. */\n  ttlSeconds?: number;\n  urgency?: \"very-low\" | \"low\" | \"normal\" | \"high\";\n  fetch?: typeof globalThis.fetch;\n  /** Lets an http endpoint through. For a local fake push service only; never in production. */\n  allowInsecureEndpoints?: boolean;\n};\n\n/** Web push over Web Crypto. Gone endpoints surface as `expired`; transport failures as `retryable`. */\nexport function webPush(options: WebPushOptions): PushProvider {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const ttl = options.ttlSeconds ?? 12 * 3600;\n\n  return {\n    name: \"web-push\",\n\n    async send(message: PushMessage): Promise<PushSendResult> {\n      const payload = new TextEncoder().encode(\n        JSON.stringify({\n          title: message.title,\n          body: message.body,\n          data: message.data ?? {},\n        }),\n      );\n\n      if (payload.length > MAX_PAYLOAD_BYTES) {\n        // Truncating would deliver a broken notification; retrying cannot help.\n        throw new Error(\n          `push payload is ${payload.length} bytes, over the ${MAX_PAYLOAD_BYTES} byte limit`,\n        );\n      }\n\n      // Unusable subscription: report invalid so it is pruned, not retried.\n      let endpoint: URL;\n      try {\n        endpoint = new URL(message.subscription.endpoint);\n      } catch {\n        return { invalid: true };\n      }\n      const secure = endpoint.protocol === \"https:\";\n      if (!secure && !(options.allowInsecureEndpoints && endpoint.protocol === \"http:\")) {\n        return { invalid: true };\n      }\n\n      let encrypted: Awaited<ReturnType<typeof encryptPayload>>;\n      try {\n        encrypted = await encryptPayload(\n          payload,\n          message.subscription.keys.p256dh,\n          message.subscription.keys.auth,\n        );\n      } catch (error) {\n        if (error instanceof InvalidSubscriptionError) return { invalid: true };\n        throw error;\n      }\n\n      const authorization = await vapidAuthorization(endpoint.href, {\n        subject: options.subject,\n        keys: options.vapid,\n      });\n\n      let response: Response;\n      try {\n        response = await doFetch(message.subscription.endpoint, {\n          method: \"POST\",\n          headers: {\n            Authorization: authorization,\n            \"Content-Encoding\": \"aes128gcm\",\n            \"Content-Type\": \"application/octet-stream\",\n            TTL: String(ttl),\n            ...(options.urgency ? { Urgency: options.urgency } : {}),\n          },\n          body: encrypted.body,\n          ...(message.signal ? { signal: message.signal } : {}),\n        });\n      } catch (error) {\n        // Never reached the service: DNS, socket, timeout.\n        throw new Error(error instanceof Error ? error.message : String(error));\n      }\n\n      // 201 is the documented success; 200/202 appear in the wild.\n      if (response.ok) return {};\n\n      // The subscription is permanently gone and must be pruned.\n      if (response.status === 404 || response.status === 410) return { expired: true };\n\n      if (response.status === 429 || response.status === 408 || response.status >= 500) {\n        return { retryable: true };\n      }\n\n      const detail = await response.text().catch(() => \"\");\n      throw new Error(\n        `push service responded ${response.status}${detail ? `: ${detail.slice(0, 300)}` : \"\"}`,\n      );\n    },\n  };\n}\n\nexport type { VapidKeys } from \"./crypto\";\nexport { generateVapidKeys, InvalidSubscriptionError, MAX_PAYLOAD_BYTES } from \"./crypto\";\n"]}

package/dist/react-native.cjs

@@ -478,7 +478,13 @@ function useNotifications(options = {}) {
     maxPollIntervalMs,
     safetyNetMs,
     activeWindowMs,
-    transport
+    transport,
+    scope,
+    locks,
+    channel,
+    serviceWorker,
+    activityTarget,
+    now
   } = options;
   const callbacksRef = (0, import_react.useRef)(options);
   callbacksRef.current = options;
@@ -491,6 +497,12 @@ function useNotifications(options = {}) {
       safetyNetMs,
       activeWindowMs,
       transport,
+      scope,
+      locks,
+      channel,
+      serviceWorker,
+      activityTarget,
+      now,
       fetch: (...args) => (callbacksRef.current.fetch ?? globalThis.fetch)(...args),
       isDocumentHidden: () => callbacksRef.current.isDocumentHidden?.() ?? (typeof document !== "undefined" && document.visibilityState === "hidden")
     }),
@@ -502,7 +514,13 @@ function useNotifications(options = {}) {
       maxPollIntervalMs,
       safetyNetMs,
       activeWindowMs,
-      transport
+      transport,
+      scope,
+      locks,
+      channel,
+      serviceWorker,
+      activityTarget,
+      now
     ]
   );
   const [state, setState] = (0, import_react.useState)(() => client.getState());

package/dist/react-native.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react-native/index.ts","../src/client/index.ts","../src/react/index.ts"],"sourcesContent":["import { useMemo, useRef } from \"react\";\nimport { AppState } from \"react-native\";\nimport { createNotifyClient, type NotifyClient, type NotifyClientOptions } from \"../client\";\nimport { type UseNotificationsResult, useNotifications as useClientNotifications } from \"../react\";\n\n/** The slice of React Native's AppState the client needs; injectable for tests. */\nexport type AppStateLike = {\n  currentState: string;\n  addEventListener(type: \"change\", handler: (state: string) => void): { remove(): void };\n};\n\nexport type NativeNotifyClientOptions = Omit<\n  NotifyClientOptions,\n  \"locks\" | \"channel\" | \"serviceWorker\" | \"activityTarget\" | \"isDocumentHidden\"\n> & {\n  /** Defaults to React Native's AppState. */\n  appState?: AppStateLike | undefined;\n};\n\ntype Listener = (event: { data?: unknown }) => void;\n\n/**\n * Turns AppState into the \"activity target\" the client listens on: coming\n * back to the foreground counts as focus, so the bell refreshes at once and\n * polls at the fast interval again.\n */\nfunction appStateTarget(appState: AppStateLike) {\n  const listeners = new Map<string, Set<Listener>>();\n  let subscription: { remove(): void } | undefined;\n  let last = appState.currentState;\n\n  const ensure = () => {\n    subscription ??= appState.addEventListener(\"change\", (state) => {\n      if (state === \"active\" && last !== \"active\") {\n        for (const listener of listeners.get(\"focus\") ?? []) listener({});\n      }\n      last = state;\n    });\n  };\n\n  return {\n    addEventListener(type: string, handler: Listener) {\n      listeners.set(type, (listeners.get(type) ?? new Set()).add(handler));\n      ensure();\n    },\n    removeEventListener(type: string, handler: Listener) {\n      listeners.get(type)?.delete(handler);\n      if ([...listeners.values()].every((set) => set.size === 0)) {\n        subscription?.remove();\n        subscription = undefined;\n      }\n    },\n  };\n}\n\n/**\n * The web client, wired for a phone: AppState decides hidden vs. active, one\n * app is one user so there is no tab leader to elect, and the event stream is\n * tried first. A fetch that cannot stream (React Native's built-in one) makes\n * the client fall back to polling on the first attempt; pass `fetch` from\n * `expo/fetch` to keep the live stream.\n */\nexport function createNativeNotifyClient(options: NativeNotifyClientOptions = {}): NotifyClient {\n  const { appState = AppState, ...rest } = options;\n  return createNotifyClient({\n    transport: \"sse\",\n    ...rest,\n    locks: null,\n    channel: null,\n    serviceWorker: null,\n    isDocumentHidden: () => appState.currentState !== \"active\",\n    activityTarget: appStateTarget(appState),\n  });\n}\n\n/** `useNotifications` for React Native. Same result shape as the web hook. */\nexport function useNotifications(\n  options: NativeNotifyClientOptions & { client?: NotifyClient } = {},\n): UseNotificationsResult {\n  const {\n    client: provided,\n    baseUrl,\n    limit,\n    pollIntervalMs,\n    maxPollIntervalMs,\n    safetyNetMs,\n    activeWindowMs,\n    transport,\n    scope,\n    appState,\n  } = options;\n\n  // Held in a ref so a new fetch identity per render does not rebuild the client.\n  const fetchRef = useRef(options.fetch);\n  fetchRef.current = options.fetch;\n\n  const client = useMemo(\n    () =>\n      provided ??\n      createNativeNotifyClient({\n        baseUrl,\n        limit,\n        pollIntervalMs,\n        maxPollIntervalMs,\n        safetyNetMs,\n        activeWindowMs,\n        transport,\n        scope,\n        appState,\n        fetch: (...args) => (fetchRef.current ?? globalThis.fetch)(...args),\n      }),\n    [\n      provided,\n      baseUrl,\n      limit,\n      pollIntervalMs,\n      maxPollIntervalMs,\n      safetyNetMs,\n      activeWindowMs,\n      transport,\n      scope,\n      appState,\n    ],\n  );\n\n  return useClientNotifications({ client });\n}\n\nexport type RegisterMobilePushOptions = {\n  /** The token from expo-notifications' getExpoPushTokenAsync(), or your provider's equivalent. */\n  token: string;\n  platform: \"ios\" | \"android\" | \"web\";\n  deviceName?: string | undefined;\n  baseUrl?: string | undefined;\n  /** Your authenticated fetch. */\n  fetch?: typeof globalThis.fetch | undefined;\n};\n\nconst post = async (\n  doFetch: typeof globalThis.fetch,\n  url: string,\n  body: unknown,\n): Promise<Response> =>\n  doFetch(url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify(body),\n  });\n\n/** Registers this device for the mobilePush channel. Idempotent: the same token refreshes its row. */\nexport async function registerMobilePushDevice(options: RegisterMobilePushOptions): Promise<void> {\n  const base = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const response = await post(doFetch, `${base}/mobile-push/devices`, {\n    token: options.token,\n    platform: options.platform,\n    deviceName: options.deviceName,\n  });\n  if (!response.ok) {\n    const detail = (await response.json().catch(() => ({}))) as { error?: string };\n    throw new Error(detail.error ?? `registering the device failed: ${response.status}`);\n  }\n}\n\n/** Removes this device. Resolves false when nothing was registered. */\nexport async function unregisterMobilePushDevice(\n  options: Pick<RegisterMobilePushOptions, \"token\" | \"baseUrl\" | \"fetch\">,\n): Promise<boolean> {\n  const base = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const response = await post(doFetch, `${base}/mobile-push/devices/remove`, {\n    token: options.token,\n  });\n  if (response.status === 404) return false;\n  if (!response.ok) throw new Error(`unregistering the device failed: ${response.status}`);\n  return true;\n}\n\nexport type { NotificationView, NotifyClient, NotifyClientOptions, NotifyState } from \"../client\";\nexport type { UseNotificationsResult } from \"../react\";\n","export type NotificationView = {\n  id: string;\n  userId: string;\n  type: string;\n  payload: unknown;\n  actorId: string | null;\n  groupKey: string | null;\n  seenAt: string | null;\n  readAt: string | null;\n  createdAt: string;\n};\n\nexport type NotifyState = {\n  notifications: readonly NotificationView[];\n  /** Badge count — cleared when the dropdown opens. Server-authoritative. */\n  unseenCount: number;\n  /** Items still bold. Derived from what is loaded, not a server total. */\n  unreadCount: number;\n  nextCursor: string | null;\n  isLoading: boolean;\n  error: Error | null;\n};\n\nexport type Transport = \"auto\" | \"sse\" | \"poll\";\n\nexport type TransportStatus = {\n  /** \"leader\" holds this browser's single connection; \"follower\" mirrors it; \"solo\" has no Web Locks. */\n  role: \"leader\" | \"follower\" | \"solo\";\n  /** What the leader is using right now. */\n  transport: \"sse\" | \"poll\";\n  /** True while the event stream has said `ready` and not since closed. */\n  connected: boolean;\n};\n\ntype LockManagerLike = {\n  request(\n    name: string,\n    options: { mode: \"exclusive\"; signal?: AbortSignal },\n    callback: () => Promise<void>,\n  ): Promise<void>;\n};\n\ntype ChannelLike = {\n  postMessage(message: unknown): void;\n  addEventListener(type: \"message\", handler: (event: { data: unknown }) => void): void;\n  removeEventListener(type: \"message\", handler: (event: { data: unknown }) => void): void;\n  close(): void;\n};\n\ntype MessageTargetLike = {\n  addEventListener(type: string, handler: (event: { data?: unknown }) => void): void;\n  removeEventListener(type: string, handler: (event: { data?: unknown }) => void): void;\n};\n\nexport type NotifyClientOptions = {\n  baseUrl?: string | undefined;\n  fetch?: typeof globalThis.fetch | undefined;\n  limit?: number | undefined;\n  /** Poll interval while the user is active and no stream is connected. Default 15 s. */\n  pollIntervalMs?: number | undefined;\n  /** Ceiling the idle backoff grows to. Default 10 min. */\n  maxPollIntervalMs?: number | undefined;\n  /** Poll interval while the event stream is connected: a safety net. Default 5 min. */\n  safetyNetMs?: number | undefined;\n  /** How long after user input polling stays at the base interval. Default 60 s. */\n  activeWindowMs?: number | undefined;\n  /** \"auto\" streams when a DOM is present, \"poll\" never streams, \"sse\" always tries. */\n  transport?: Transport | undefined;\n  /** Injectable so the poller can be tested without a DOM. */\n  isDocumentHidden?: (() => boolean) | undefined;\n  /** Web Locks, for one connection per browser. Defaults to navigator.locks; null disables. */\n  locks?: LockManagerLike | null | undefined;\n  /** Cross-tab channel factory. Defaults to BroadcastChannel; null disables. */\n  channel?: (() => ChannelLike) | null | undefined;\n  /** Where push relays arrive. Defaults to navigator.serviceWorker; null disables. */\n  serviceWorker?: MessageTargetLike | null | undefined;\n  /** Where user activity is observed. Defaults to window; null disables. */\n  activityTarget?: MessageTargetLike | null | undefined;\n  now?: (() => number) | undefined;\n  /**\n   * Separates browsers' tab groups when identity is not a cookie: pass the\n   * current user's id (or session id) so tabs signed in as different users\n   * never share a leader or mirror each other's inbox.\n   */\n  scope?: string | undefined;\n};\n\nconst INITIAL: NotifyState = {\n  notifications: [],\n  unseenCount: 0,\n  unreadCount: 0,\n  nextCursor: null,\n  isLoading: true,\n  error: null,\n};\n\nconst countUnread = (rows: readonly NotificationView[]) =>\n  rows.reduce((total, row) => (row.readAt === null ? total + 1 : total), 0);\n\n/** A stream that dies this fast, repeatedly, is being cut by the platform: stop trying. */\nconst SHORT_STREAM_MS = 15_000;\nconst SHORT_STREAMS_BEFORE_GIVING_UP = 3;\n\ntype TabMessage =\n  | { type: \"hello\" }\n  | { type: \"state\"; state: NotifyState }\n  | { type: \"mutated\" }\n  | { type: \"leader\" };\n\nexport function createNotifyClient(options: NotifyClientOptions = {}) {\n  const baseUrl = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n  const doFetch = options.fetch ?? ((...args) => globalThis.fetch(...args));\n  const limit = options.limit ?? 20;\n  const pollIntervalMs = options.pollIntervalMs ?? 15_000;\n  const maxPollIntervalMs = options.maxPollIntervalMs ?? 10 * 60_000;\n  const safetyNetMs = options.safetyNetMs ?? 5 * 60_000;\n  const activeWindowMs = options.activeWindowMs ?? 60_000;\n  const now = options.now ?? (() => Date.now());\n  const groupKey = options.scope ? `${baseUrl}#${options.scope}` : baseUrl;\n  const hasDom = typeof window !== \"undefined\" && typeof document !== \"undefined\";\n  const transport: Transport = options.transport ?? \"auto\";\n  const wantsStream = transport === \"sse\" || (transport === \"auto\" && hasDom);\n  const isHidden =\n    options.isDocumentHidden ??\n    (() => typeof document !== \"undefined\" && document.visibilityState === \"hidden\");\n\n  const locks =\n    options.locks === undefined\n      ? typeof navigator !== \"undefined\"\n        ? ((navigator as { locks?: LockManagerLike }).locks ?? null)\n        : null\n      : options.locks;\n  const makeChannel =\n    options.channel === undefined\n      ? typeof BroadcastChannel !== \"undefined\"\n        ? () => new BroadcastChannel(`easy-ping:${groupKey}`) as unknown as ChannelLike\n        : null\n      : options.channel;\n  const serviceWorker =\n    options.serviceWorker === undefined\n      ? typeof navigator !== \"undefined\"\n        ? ((navigator as { serviceWorker?: MessageTargetLike }).serviceWorker ?? null)\n        : null\n      : options.serviceWorker;\n  const activityTarget =\n    options.activityTarget === undefined\n      ? hasDom\n        ? (window as unknown as MessageTargetLike)\n        : null\n      : options.activityTarget;\n\n  let state: NotifyState = INITIAL;\n  const listeners = new Set<(state: NotifyState) => void>();\n\n  let role: TransportStatus[\"role\"] = \"solo\";\n  let running = false;\n  let channel: ChannelLike | undefined;\n  let releaseLock: (() => void) | undefined;\n  let lockAbort: AbortController | undefined;\n\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let consecutiveFailures = 0;\n  let idleTicks = 0;\n  let activeUntil = 0;\n  let lastRefreshAt = 0;\n  let refreshing: Promise<void> | undefined;\n  let refreshAgain = false;\n\n  let streamAbort: AbortController | undefined;\n  let streamConnected = false;\n  let streamDisabled = !wantsStream;\n  let shortStreams = 0;\n  let streamFailures = 0;\n\n  // Bumped per mutation so an in-flight poll cannot revert an optimistic update.\n  let generation = 0;\n\n  // A follower's own optimistic changes, kept until the leader's state reflects them.\n  const localReads = new Set<string>();\n  let localSeen = false;\n\n  const stamp = () => new Date().toISOString();\n\n  function emit() {\n    for (const listener of listeners) listener(state);\n  }\n\n  function set(patch: Partial<NotifyState>) {\n    state = { ...state, ...patch };\n    state = { ...state, unreadCount: countUnread(state.notifications) };\n    emit();\n    if (role === \"leader\") post({ type: \"state\", state });\n  }\n\n  function post(message: TabMessage) {\n    try {\n      channel?.postMessage(message);\n    } catch {\n      // channel closed\n    }\n  }\n\n  async function request<T>(path: string, init?: RequestInit): Promise<T> {\n    const response = await doFetch(`${baseUrl}${path}`, {\n      ...init,\n      headers: { \"content-type\": \"application/json\", ...init?.headers },\n    });\n    if (!response.ok)\n      throw new Error(`${init?.method ?? \"GET\"} ${path} failed: ${response.status}`);\n    return (await response.json()) as T;\n  }\n\n  async function fetchPage(): Promise<void> {\n    const startedAt = generation;\n\n    const page = await request<{\n      notifications: NotificationView[];\n      nextCursor: string | null;\n      unseenCount?: number;\n    }>(`/?limit=${limit}`);\n\n    const unseenCount = page.unseenCount ?? (await request<{ unseen: number }>(\"/count\")).unseen;\n\n    // A mutation landed while this was in flight; the response is stale.\n    if (generation !== startedAt) return;\n\n    set({\n      notifications: page.notifications,\n      nextCursor: page.nextCursor,\n      unseenCount,\n      isLoading: false,\n      error: null,\n    });\n  }\n\n  /** Coalesces overlapping calls: a second request while one is in flight runs once after it. */\n  function refresh(): Promise<void> {\n    if (refreshing) {\n      refreshAgain = true;\n      return refreshing;\n    }\n    refreshing = (async () => {\n      try {\n        do {\n          refreshAgain = false;\n          await fetchPage();\n          lastRefreshAt = now();\n        } while (refreshAgain);\n      } finally {\n        refreshing = undefined;\n      }\n    })();\n    return refreshing;\n  }\n\n  let loadingMore: Promise<void> | undefined;\n\n  async function loadMore(): Promise<void> {\n    if (!state.nextCursor) return;\n\n    // Share the in-flight request so two clicks cannot append the same page twice.\n    if (loadingMore) return loadingMore;\n\n    const cursor = state.nextCursor;\n\n    loadingMore = (async () => {\n      try {\n        const page = await request<{\n          notifications: NotificationView[];\n          nextCursor: string | null;\n        }>(`/?limit=${limit}&cursor=${encodeURIComponent(cursor)}`);\n\n        const known = new Set(state.notifications.map((row) => row.id));\n\n        set({\n          notifications: [\n            ...state.notifications,\n            ...page.notifications.filter((row) => !known.has(row.id)),\n          ],\n          nextCursor: page.nextCursor,\n        });\n      } finally {\n        loadingMore = undefined;\n      }\n    })();\n\n    return loadingMore;\n  }\n\n  /** Applies a patch immediately and reverts it if the request fails. */\n  async function optimistic(\n    apply: (rows: readonly NotificationView[]) => readonly NotificationView[],\n    patch: Partial<NotifyState>,\n    send: () => Promise<unknown>,\n  ): Promise<void> {\n    const previous = state;\n    generation += 1;\n    set({ notifications: apply(state.notifications), ...patch });\n\n    try {\n      await send();\n      if (role === \"follower\") post({ type: \"mutated\" });\n    } catch (error) {\n      generation += 1;\n      state = previous;\n      emit();\n      throw error;\n    }\n  }\n\n  async function markAsRead(id: string): Promise<void> {\n    if (role === \"follower\") localReads.add(id);\n    await optimistic(\n      (rows) =>\n        rows.map((row) => (row.id === id ? { ...row, readAt: row.readAt ?? stamp() } : row)),\n      {},\n      () => request(\"/read\", { method: \"POST\", body: JSON.stringify({ ids: [id] }) }),\n    ).catch((error) => {\n      localReads.delete(id);\n      throw error;\n    });\n  }\n\n  async function markAllRead(): Promise<void> {\n    if (role === \"follower\") for (const row of state.notifications) localReads.add(row.id);\n    await optimistic(\n      (rows) => rows.map((row) => ({ ...row, readAt: row.readAt ?? stamp() })),\n      {},\n      () => request(\"/read-all\", { method: \"POST\" }),\n    ).catch((error) => {\n      localReads.clear();\n      throw error;\n    });\n  }\n\n  async function markSeen(): Promise<void> {\n    // Only what the user could have seen: no cutoff would mark newer arrivals seen too.\n    const newest = state.notifications[0]?.createdAt;\n    if (role === \"follower\") localSeen = true;\n\n    await optimistic(\n      (rows) => rows.map((row) => ({ ...row, seenAt: row.seenAt ?? stamp() })),\n      { unseenCount: 0 },\n      () =>\n        request(\"/seen\", {\n          method: \"POST\",\n          body: JSON.stringify(newest ? { before: newest } : {}),\n        }),\n    ).catch((error) => {\n      localSeen = false;\n      throw error;\n    });\n  }\n\n  // ---- follower: mirror the leader, keep own optimistic changes until confirmed ----\n\n  function applyRemoteState(remote: NotifyState) {\n    const notifications = remote.notifications.map((row) => {\n      if (!localReads.has(row.id)) return row;\n      if (row.readAt) {\n        localReads.delete(row.id);\n        return row;\n      }\n      return { ...row, readAt: stamp() };\n    });\n    if (localSeen && remote.unseenCount === 0) localSeen = false;\n    state = {\n      ...remote,\n      notifications,\n      unseenCount: localSeen ? 0 : remote.unseenCount,\n      unreadCount: countUnread(notifications),\n    };\n    emit();\n  }\n\n  function onTabMessage(event: { data: unknown }) {\n    const message = event.data as TabMessage | null;\n    if (!message || typeof message !== \"object\") return;\n    if (role === \"leader\") {\n      if (message.type === \"hello\") post({ type: \"state\", state });\n      else if (message.type === \"mutated\") void refresh().catch(() => {});\n      return;\n    }\n    if (message.type === \"state\") applyRemoteState(message.state);\n  }\n\n  // ---- leader / solo: polling with activity-shaped backoff ----\n\n  function schedule(delay: number) {\n    clearTimeout(timer);\n    timer = setTimeout(tick, delay);\n  }\n\n  function nextDelay(): number {\n    if (consecutiveFailures > 0) {\n      return Math.min(pollIntervalMs * 2 ** consecutiveFailures, maxPollIntervalMs);\n    }\n    if (streamConnected) return safetyNetMs;\n    if (now() < activeUntil) return pollIntervalMs;\n    idleTicks += 1;\n    return Math.min(pollIntervalMs * 2 ** idleTicks, maxPollIntervalMs);\n  }\n\n  async function tick() {\n    if (!running) return;\n    // A hidden tab is not looking at the bell.\n    if (isHidden()) {\n      schedule(pollIntervalMs);\n      return;\n    }\n\n    try {\n      await refresh();\n      consecutiveFailures = 0;\n    } catch (error) {\n      consecutiveFailures += 1;\n      set({ isLoading: false, error: error instanceof Error ? error : new Error(String(error)) });\n    }\n\n    if (running) schedule(nextDelay());\n  }\n\n  /** User input or a returning tab: poll fast again, and catch up now if the last refresh is stale. */\n  function onActivity() {\n    if (!running || role === \"follower\") return;\n    activeUntil = now() + activeWindowMs;\n    idleTicks = 0;\n    if (!isHidden() && now() - lastRefreshAt > pollIntervalMs) {\n      void refresh().catch(() => {});\n      schedule(nextDelay());\n    }\n  }\n\n  const onVisibility = () => {\n    if (!isHidden()) onActivity();\n  };\n\n  const ACTIVITY_EVENTS = [\"focus\", \"pointerdown\", \"keydown\", \"online\"];\n\n  // ---- leader / solo: the event stream ----\n\n  function changed() {\n    if (!running) return;\n    void refresh().catch(() => {});\n  }\n\n  async function readStream(signal: AbortSignal): Promise<void> {\n    const openedAt = now();\n    const response = await doFetch(`${baseUrl}/events`, {\n      headers: { accept: \"text/event-stream\" },\n      signal,\n    });\n    if (!response.ok) throw new Error(`GET /events failed: ${response.status}`);\n    if (!response.body) {\n      // This fetch cannot stream a body (React Native's built-in one, some polyfills): poll instead.\n      streamDisabled = true;\n      schedule(nextDelay());\n      return;\n    }\n\n    const reader = response.body.getReader();\n    const decoder = new TextDecoder();\n    let buffer = \"\";\n    let eventName = \"\";\n\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        buffer += decoder.decode(value, { stream: true });\n        let newline = buffer.indexOf(\"\\n\");\n        while (newline >= 0) {\n          const line = buffer.slice(0, newline).replace(/\\r$/, \"\");\n          buffer = buffer.slice(newline + 1);\n          if (line === \"\") {\n            if (eventName === \"ready\") {\n              streamConnected = true;\n              streamFailures = 0;\n              schedule(nextDelay());\n            } else if (eventName === \"changed\") changed();\n            eventName = \"\";\n          } else if (line.startsWith(\"event:\")) eventName = line.slice(6).trim();\n          newline = buffer.indexOf(\"\\n\");\n        }\n      }\n    } finally {\n      streamConnected = false;\n      if (now() - openedAt < SHORT_STREAM_MS) shortStreams += 1;\n      else shortStreams = 0;\n    }\n  }\n\n  const isFollower = () => role === \"follower\";\n\n  async function streamLoop() {\n    while (running && !streamDisabled && !isFollower()) {\n      streamAbort = new AbortController();\n      try {\n        await readStream(streamAbort.signal);\n      } catch {\n        if (!running) return;\n        streamFailures += 1;\n      }\n      if (!running || isFollower() || streamDisabled) return;\n      if (shortStreams >= SHORT_STREAMS_BEFORE_GIVING_UP) {\n        // The platform cuts streams too fast for them to be worth it here.\n        streamDisabled = true;\n        schedule(nextDelay());\n        return;\n      }\n      await new Promise((resolve) =>\n        setTimeout(resolve, Math.min(3_000 * 2 ** streamFailures, 60_000)),\n      );\n    }\n  }\n\n  // ---- roles ----\n\n  function becomeLeader() {\n    role = \"leader\";\n    post({ type: \"leader\" });\n    post({ type: \"state\", state });\n    void tick();\n    if (!streamDisabled) void streamLoop();\n  }\n\n  function becomeFollower() {\n    role = \"follower\";\n    post({ type: \"hello\" });\n  }\n\n  function acquireLeadership() {\n    if (!locks || !channel) {\n      role = \"solo\";\n      void tick();\n      if (!streamDisabled) void streamLoop();\n      return;\n    }\n    becomeFollower();\n    lockAbort = new AbortController();\n    locks\n      .request(\n        `easy-ping:leader:${groupKey}`,\n        { mode: \"exclusive\", signal: lockAbort.signal },\n        () =>\n          new Promise<void>((resolve) => {\n            releaseLock = resolve;\n            if (running) becomeLeader();\n            else resolve();\n          }),\n      )\n      .catch(() => {\n        // aborted on stop, or Web Locks refused; either way no leadership here\n      });\n  }\n\n  function start() {\n    running = true;\n    channel = makeChannel ? makeChannel() : undefined;\n    channel?.addEventListener(\"message\", onTabMessage);\n    serviceWorker?.addEventListener(\"message\", onRelay);\n    if (activityTarget) {\n      for (const name of ACTIVITY_EVENTS) activityTarget.addEventListener(name, onActivity);\n    }\n    if (typeof document !== \"undefined\") {\n      document.addEventListener(\"visibilitychange\", onVisibility);\n    }\n    activeUntil = now() + activeWindowMs;\n    acquireLeadership();\n  }\n\n  function stop() {\n    running = false;\n    clearTimeout(timer);\n    timer = undefined;\n    streamAbort?.abort();\n    streamAbort = undefined;\n    lockAbort?.abort();\n    lockAbort = undefined;\n    releaseLock?.();\n    releaseLock = undefined;\n    channel?.removeEventListener(\"message\", onTabMessage);\n    channel?.close();\n    channel = undefined;\n    serviceWorker?.removeEventListener(\"message\", onRelay);\n    if (activityTarget) {\n      for (const name of ACTIVITY_EVENTS) activityTarget.removeEventListener(name, onActivity);\n    }\n    if (typeof document !== \"undefined\") {\n      document.removeEventListener(\"visibilitychange\", onVisibility);\n    }\n    role = \"solo\";\n  }\n\n  // ---- signals from outside: the service worker relay and the piggyback header ----\n\n  function onRelay(event: { data?: unknown }) {\n    const data = event.data as { source?: unknown; type?: unknown } | null;\n    if (data?.source === \"easy-ping\" && data.type === \"changed\") changed();\n  }\n\n  let lastInboxVersion: string | null = null;\n\n  // Only the app's own origin may steer the bell; a third-party response cannot.\n  const sameOrigin = (response: Response) => {\n    if (!response.url || typeof location === \"undefined\") return true;\n    try {\n      return new URL(response.url).origin === location.origin;\n    } catch {\n      return false;\n    }\n  };\n\n  /**\n   * Wraps your app's fetch so responses carrying the inbox-version header\n   * refresh the bell when the version moves. Active users then never need a\n   * dedicated poll. RFC 0006 idea 1.\n   */\n  function instrument(inner: typeof globalThis.fetch): typeof globalThis.fetch {\n    return (async (...args: Parameters<typeof globalThis.fetch>) => {\n      const response = await inner(...args);\n      const version = sameOrigin(response) ? response.headers.get(\"x-easy-ping-inbox\") : null;\n      if (version !== null && version !== lastInboxVersion) {\n        const first = lastInboxVersion === null;\n        lastInboxVersion = version;\n        if (!first && role !== \"follower\") changed();\n      }\n      return response;\n    }) as typeof globalThis.fetch;\n  }\n\n  function subscribe(listener: (state: NotifyState) => void): () => void {\n    listeners.add(listener);\n    listener(state);\n\n    // One transport regardless of how many components subscribe.\n    if (listeners.size === 1) start();\n\n    return () => {\n      listeners.delete(listener);\n      if (listeners.size === 0) stop();\n    };\n  }\n\n  return {\n    subscribe,\n    refresh,\n    loadMore,\n    markAsRead,\n    markAllRead,\n    markSeen,\n    instrument,\n    getState: () => state,\n    getTransport: (): TransportStatus => ({\n      role,\n      transport: streamDisabled ? \"poll\" : \"sse\",\n      connected: streamConnected,\n    }),\n  };\n}\n\nexport type NotifyClient = ReturnType<typeof createNotifyClient>;\n","\"use client\";\n\nimport { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport {\n  createNotifyClient,\n  type NotifyClient,\n  type NotifyClientOptions,\n  type NotifyState,\n} from \"../client\";\n\nexport type UseNotificationsResult = NotifyState & {\n  markAsRead: (id: string) => Promise<void>;\n  markAllRead: () => Promise<void>;\n  markSeen: () => Promise<void>;\n  loadMore: () => Promise<void>;\n  refresh: () => Promise<void>;\n};\n\n/** State lives in the framework-agnostic client; this only wires React's lifecycle. */\nexport function useNotifications(\n  options: NotifyClientOptions & { client?: NotifyClient } = {},\n): UseNotificationsResult {\n  const {\n    client: provided,\n    baseUrl,\n    limit,\n    pollIntervalMs,\n    maxPollIntervalMs,\n    safetyNetMs,\n    activeWindowMs,\n    transport,\n  } = options;\n\n  // Held in a ref so a new callback identity per render does not rebuild the client.\n  const callbacksRef = useRef(options);\n  callbacksRef.current = options;\n\n  const client = useMemo(\n    () =>\n      provided ??\n      createNotifyClient({\n        baseUrl,\n        limit,\n        pollIntervalMs,\n        maxPollIntervalMs,\n        safetyNetMs,\n        activeWindowMs,\n        transport,\n        fetch: (...args) => (callbacksRef.current.fetch ?? globalThis.fetch)(...args),\n        isDocumentHidden: () =>\n          callbacksRef.current.isDocumentHidden?.() ??\n          (typeof document !== \"undefined\" && document.visibilityState === \"hidden\"),\n      }),\n    [\n      provided,\n      baseUrl,\n      limit,\n      pollIntervalMs,\n      maxPollIntervalMs,\n      safetyNetMs,\n      activeWindowMs,\n      transport,\n    ],\n  );\n\n  const [state, setState] = useState<NotifyState>(() => client.getState());\n\n  useEffect(() => client.subscribe(setState), [client]);\n\n  return {\n    ...state,\n    markAsRead: useCallback((id: string) => client.markAsRead(id), [client]),\n    markAllRead: useCallback(() => client.markAllRead(), [client]),\n    markSeen: useCallback(() => client.markSeen(), [client]),\n    loadMore: useCallback(() => client.loadMore(), [client]),\n    refresh: useCallback(() => client.refresh(), [client]),\n  };\n}\n\nexport type {\n  NotificationView,\n  NotifyClient,\n  NotifyClientOptions,\n  NotifyState,\n} from \"../client\";\nexport { createNotifyClient } from \"../client\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAAAA;AAAA;AAAA;AAAA,IAAAC,gBAAgC;AAChC,0BAAyB;;;ACsFzB,IAAM,UAAuB;AAAA,EAC3B,eAAe,CAAC;AAAA,EAChB,aAAa;AAAA,EACb,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,OAAO;AACT;AAEA,IAAM,cAAc,CAAC,SACnB,KAAK,OAAO,CAAC,OAAO,QAAS,IAAI,WAAW,OAAO,QAAQ,IAAI,OAAQ,CAAC;AAG1E,IAAM,kBAAkB;AACxB,IAAM,iCAAiC;AAQhC,SAAS,mBAAmB,UAA+B,CAAC,GAAG;AACpE,QAAM,WAAW,QAAQ,WAAW,sBAAsB,QAAQ,OAAO,EAAE;AAC3E,QAAM,UAAU,QAAQ,UAAU,IAAI,SAAS,WAAW,MAAM,GAAG,IAAI;AACvE,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,oBAAoB,QAAQ,qBAAqB,KAAK;AAC5D,QAAM,cAAc,QAAQ,eAAe,IAAI;AAC/C,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,WAAW,QAAQ,QAAQ,GAAG,OAAO,IAAI,QAAQ,KAAK,KAAK;AACjE,QAAM,SAAS,OAAO,WAAW,eAAe,OAAO,aAAa;AACpE,QAAM,YAAuB,QAAQ,aAAa;AAClD,QAAM,cAAc,cAAc,SAAU,cAAc,UAAU;AACpE,QAAM,WACJ,QAAQ,qBACP,MAAM,OAAO,aAAa,eAAe,SAAS,oBAAoB;AAEzE,QAAM,QACJ,QAAQ,UAAU,SACd,OAAO,cAAc,cACjB,UAA0C,SAAS,OACrD,OACF,QAAQ;AACd,QAAM,cACJ,QAAQ,YAAY,SAChB,OAAO,qBAAqB,cAC1B,MAAM,IAAI,iBAAiB,aAAa,QAAQ,EAAE,IAClD,OACF,QAAQ;AACd,QAAM,gBACJ,QAAQ,kBAAkB,SACtB,OAAO,cAAc,cACjB,UAAoD,iBAAiB,OACvE,OACF,QAAQ;AACd,QAAM,iBACJ,QAAQ,mBAAmB,SACvB,SACG,SACD,OACF,QAAQ;AAEd,MAAI,QAAqB;AACzB,QAAM,YAAY,oBAAI,IAAkC;AAExD,MAAI,OAAgC;AACpC,MAAI,UAAU;AACd,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI;AACJ,MAAI,sBAAsB;AAC1B,MAAI,YAAY;AAChB,MAAI,cAAc;AAClB,MAAI,gBAAgB;AACpB,MAAI;AACJ,MAAI,eAAe;AAEnB,MAAI;AACJ,MAAI,kBAAkB;AACtB,MAAI,iBAAiB,CAAC;AACtB,MAAI,eAAe;AACnB,MAAI,iBAAiB;AAGrB,MAAI,aAAa;AAGjB,QAAM,aAAa,oBAAI,IAAY;AACnC,MAAI,YAAY;AAEhB,QAAM,QAAQ,OAAM,oBAAI,KAAK,GAAE,YAAY;AAE3C,WAAS,OAAO;AACd,eAAW,YAAY,UAAW,UAAS,KAAK;AAAA,EAClD;AAEA,WAAS,IAAI,OAA6B;AACxC,YAAQ,EAAE,GAAG,OAAO,GAAG,MAAM;AAC7B,YAAQ,EAAE,GAAG,OAAO,aAAa,YAAY,MAAM,aAAa,EAAE;AAClE,SAAK;AACL,QAAI,SAAS,SAAU,CAAAC,MAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAAA,EACtD;AAEA,WAASA,MAAK,SAAqB;AACjC,QAAI;AACF,eAAS,YAAY,OAAO;AAAA,IAC9B,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,QAAW,MAAc,MAAgC;AACtE,UAAM,WAAW,MAAM,QAAQ,GAAG,OAAO,GAAG,IAAI,IAAI;AAAA,MAClD,GAAG;AAAA,MACH,SAAS,EAAE,gBAAgB,oBAAoB,GAAG,MAAM,QAAQ;AAAA,IAClE,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,GAAG,MAAM,UAAU,KAAK,IAAI,IAAI,YAAY,SAAS,MAAM,EAAE;AAC/E,WAAQ,MAAM,SAAS,KAAK;AAAA,EAC9B;AAEA,iBAAe,YAA2B;AACxC,UAAM,YAAY;AAElB,UAAM,OAAO,MAAM,QAIhB,WAAW,KAAK,EAAE;AAErB,UAAM,cAAc,KAAK,gBAAgB,MAAM,QAA4B,QAAQ,GAAG;AAGtF,QAAI,eAAe,UAAW;AAE9B,QAAI;AAAA,MACF,eAAe,KAAK;AAAA,MACpB,YAAY,KAAK;AAAA,MACjB;AAAA,MACA,WAAW;AAAA,MACX,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAGA,WAAS,UAAyB;AAChC,QAAI,YAAY;AACd,qBAAe;AACf,aAAO;AAAA,IACT;AACA,kBAAc,YAAY;AACxB,UAAI;AACF,WAAG;AACD,yBAAe;AACf,gBAAM,UAAU;AAChB,0BAAgB,IAAI;AAAA,QACtB,SAAS;AAAA,MACX,UAAE;AACA,qBAAa;AAAA,MACf;AAAA,IACF,GAAG;AACH,WAAO;AAAA,EACT;AAEA,MAAI;AAEJ,iBAAe,WAA0B;AACvC,QAAI,CAAC,MAAM,WAAY;AAGvB,QAAI,YAAa,QAAO;AAExB,UAAM,SAAS,MAAM;AAErB,mBAAe,YAAY;AACzB,UAAI;AACF,cAAM,OAAO,MAAM,QAGhB,WAAW,KAAK,WAAW,mBAAmB,MAAM,CAAC,EAAE;AAE1D,cAAM,QAAQ,IAAI,IAAI,MAAM,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAE9D,YAAI;AAAA,UACF,eAAe;AAAA,YACb,GAAG,MAAM;AAAA,YACT,GAAG,KAAK,cAAc,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;AAAA,UAC1D;AAAA,UACA,YAAY,KAAK;AAAA,QACnB,CAAC;AAAA,MACH,UAAE;AACA,sBAAc;AAAA,MAChB;AAAA,IACF,GAAG;AAEH,WAAO;AAAA,EACT;AAGA,iBAAe,WACb,OACA,OACA,MACe;AACf,UAAM,WAAW;AACjB,kBAAc;AACd,QAAI,EAAE,eAAe,MAAM,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC;AAE3D,QAAI;AACF,YAAM,KAAK;AACX,UAAI,SAAS,WAAY,CAAAA,MAAK,EAAE,MAAM,UAAU,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,oBAAc;AACd,cAAQ;AACR,WAAK;AACL,YAAM;AAAA,IACR;AAAA,EACF;AAEA,iBAAe,WAAW,IAA2B;AACnD,QAAI,SAAS,WAAY,YAAW,IAAI,EAAE;AAC1C,UAAM;AAAA,MACJ,CAAC,SACC,KAAK,IAAI,CAAC,QAAS,IAAI,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,MAAM,EAAE,IAAI,GAAI;AAAA,MACrF,CAAC;AAAA,MACD,MAAM,QAAQ,SAAS,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,IAChF,EAAE,MAAM,CAAC,UAAU;AACjB,iBAAW,OAAO,EAAE;AACpB,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,iBAAe,cAA6B;AAC1C,QAAI,SAAS,WAAY,YAAW,OAAO,MAAM,cAAe,YAAW,IAAI,IAAI,EAAE;AACrF,UAAM;AAAA,MACJ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,MAAM,EAAE,EAAE;AAAA,MACvE,CAAC;AAAA,MACD,MAAM,QAAQ,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC/C,EAAE,MAAM,CAAC,UAAU;AACjB,iBAAW,MAAM;AACjB,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,iBAAe,WAA0B;AAEvC,UAAM,SAAS,MAAM,cAAc,CAAC,GAAG;AACvC,QAAI,SAAS,WAAY,aAAY;AAErC,UAAM;AAAA,MACJ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,MAAM,EAAE,EAAE;AAAA,MACvE,EAAE,aAAa,EAAE;AAAA,MACjB,MACE,QAAQ,SAAS;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,MACvD,CAAC;AAAA,IACL,EAAE,MAAM,CAAC,UAAU;AACjB,kBAAY;AACZ,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAIA,WAAS,iBAAiB,QAAqB;AAC7C,UAAM,gBAAgB,OAAO,cAAc,IAAI,CAAC,QAAQ;AACtD,UAAI,CAAC,WAAW,IAAI,IAAI,EAAE,EAAG,QAAO;AACpC,UAAI,IAAI,QAAQ;AACd,mBAAW,OAAO,IAAI,EAAE;AACxB,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,KAAK,QAAQ,MAAM,EAAE;AAAA,IACnC,CAAC;AACD,QAAI,aAAa,OAAO,gBAAgB,EAAG,aAAY;AACvD,YAAQ;AAAA,MACN,GAAG;AAAA,MACH;AAAA,MACA,aAAa,YAAY,IAAI,OAAO;AAAA,MACpC,aAAa,YAAY,aAAa;AAAA,IACxC;AACA,SAAK;AAAA,EACP;AAEA,WAAS,aAAa,OAA0B;AAC9C,UAAM,UAAU,MAAM;AACtB,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,QAAI,SAAS,UAAU;AACrB,UAAI,QAAQ,SAAS,QAAS,CAAAA,MAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAAA,eAClD,QAAQ,SAAS,UAAW,MAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAClE;AAAA,IACF;AACA,QAAI,QAAQ,SAAS,QAAS,kBAAiB,QAAQ,KAAK;AAAA,EAC9D;AAIA,WAAS,SAAS,OAAe;AAC/B,iBAAa,KAAK;AAClB,YAAQ,WAAW,MAAM,KAAK;AAAA,EAChC;AAEA,WAAS,YAAoB;AAC3B,QAAI,sBAAsB,GAAG;AAC3B,aAAO,KAAK,IAAI,iBAAiB,KAAK,qBAAqB,iBAAiB;AAAA,IAC9E;AACA,QAAI,gBAAiB,QAAO;AAC5B,QAAI,IAAI,IAAI,YAAa,QAAO;AAChC,iBAAa;AACb,WAAO,KAAK,IAAI,iBAAiB,KAAK,WAAW,iBAAiB;AAAA,EACpE;AAEA,iBAAe,OAAO;AACpB,QAAI,CAAC,QAAS;AAEd,QAAI,SAAS,GAAG;AACd,eAAS,cAAc;AACvB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,QAAQ;AACd,4BAAsB;AAAA,IACxB,SAAS,OAAO;AACd,6BAAuB;AACvB,UAAI,EAAE,WAAW,OAAO,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,EAAE,CAAC;AAAA,IAC5F;AAEA,QAAI,QAAS,UAAS,UAAU,CAAC;AAAA,EACnC;AAGA,WAAS,aAAa;AACpB,QAAI,CAAC,WAAW,SAAS,WAAY;AACrC,kBAAc,IAAI,IAAI;AACtB,gBAAY;AACZ,QAAI,CAAC,SAAS,KAAK,IAAI,IAAI,gBAAgB,gBAAgB;AACzD,WAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC7B,eAAS,UAAU,CAAC;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,eAAe,MAAM;AACzB,QAAI,CAAC,SAAS,EAAG,YAAW;AAAA,EAC9B;AAEA,QAAM,kBAAkB,CAAC,SAAS,eAAe,WAAW,QAAQ;AAIpE,WAAS,UAAU;AACjB,QAAI,CAAC,QAAS;AACd,SAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC/B;AAEA,iBAAe,WAAW,QAAoC;AAC5D,UAAM,WAAW,IAAI;AACrB,UAAM,WAAW,MAAM,QAAQ,GAAG,OAAO,WAAW;AAAA,MAClD,SAAS,EAAE,QAAQ,oBAAoB;AAAA,MACvC;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,uBAAuB,SAAS,MAAM,EAAE;AAC1E,QAAI,CAAC,SAAS,MAAM;AAElB,uBAAiB;AACjB,eAAS,UAAU,CAAC;AACpB;AAAA,IACF;AAEA,UAAM,SAAS,SAAS,KAAK,UAAU;AACvC,UAAM,UAAU,IAAI,YAAY;AAChC,QAAI,SAAS;AACb,QAAI,YAAY;AAEhB,QAAI;AACF,iBAAS;AACP,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,YAAI,KAAM;AACV,kBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,YAAI,UAAU,OAAO,QAAQ,IAAI;AACjC,eAAO,WAAW,GAAG;AACnB,gBAAM,OAAO,OAAO,MAAM,GAAG,OAAO,EAAE,QAAQ,OAAO,EAAE;AACvD,mBAAS,OAAO,MAAM,UAAU,CAAC;AACjC,cAAI,SAAS,IAAI;AACf,gBAAI,cAAc,SAAS;AACzB,gCAAkB;AAClB,+BAAiB;AACjB,uBAAS,UAAU,CAAC;AAAA,YACtB,WAAW,cAAc,UAAW,SAAQ;AAC5C,wBAAY;AAAA,UACd,WAAW,KAAK,WAAW,QAAQ,EAAG,aAAY,KAAK,MAAM,CAAC,EAAE,KAAK;AACrE,oBAAU,OAAO,QAAQ,IAAI;AAAA,QAC/B;AAAA,MACF;AAAA,IACF,UAAE;AACA,wBAAkB;AAClB,UAAI,IAAI,IAAI,WAAW,gBAAiB,iBAAgB;AAAA,UACnD,gBAAe;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,SAAS;AAElC,iBAAe,aAAa;AAC1B,WAAO,WAAW,CAAC,kBAAkB,CAAC,WAAW,GAAG;AAClD,oBAAc,IAAI,gBAAgB;AAClC,UAAI;AACF,cAAM,WAAW,YAAY,MAAM;AAAA,MACrC,QAAQ;AACN,YAAI,CAAC,QAAS;AACd,0BAAkB;AAAA,MACpB;AACA,UAAI,CAAC,WAAW,WAAW,KAAK,eAAgB;AAChD,UAAI,gBAAgB,gCAAgC;AAElD,yBAAiB;AACjB,iBAAS,UAAU,CAAC;AACpB;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QAAQ,CAAC,YACjB,WAAW,SAAS,KAAK,IAAI,MAAQ,KAAK,gBAAgB,GAAM,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAIA,WAAS,eAAe;AACtB,WAAO;AACP,IAAAA,MAAK,EAAE,MAAM,SAAS,CAAC;AACvB,IAAAA,MAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAC7B,SAAK,KAAK;AACV,QAAI,CAAC,eAAgB,MAAK,WAAW;AAAA,EACvC;AAEA,WAAS,iBAAiB;AACxB,WAAO;AACP,IAAAA,MAAK,EAAE,MAAM,QAAQ,CAAC;AAAA,EACxB;AAEA,WAAS,oBAAoB;AAC3B,QAAI,CAAC,SAAS,CAAC,SAAS;AACtB,aAAO;AACP,WAAK,KAAK;AACV,UAAI,CAAC,eAAgB,MAAK,WAAW;AACrC;AAAA,IACF;AACA,mBAAe;AACf,gBAAY,IAAI,gBAAgB;AAChC,UACG;AAAA,MACC,oBAAoB,QAAQ;AAAA,MAC5B,EAAE,MAAM,aAAa,QAAQ,UAAU,OAAO;AAAA,MAC9C,MACE,IAAI,QAAc,CAAC,YAAY;AAC7B,sBAAc;AACd,YAAI,QAAS,cAAa;AAAA,YACrB,SAAQ;AAAA,MACf,CAAC;AAAA,IACL,EACC,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL;AAEA,WAAS,QAAQ;AACf,cAAU;AACV,cAAU,cAAc,YAAY,IAAI;AACxC,aAAS,iBAAiB,WAAW,YAAY;AACjD,mBAAe,iBAAiB,WAAW,OAAO;AAClD,QAAI,gBAAgB;AAClB,iBAAW,QAAQ,gBAAiB,gBAAe,iBAAiB,MAAM,UAAU;AAAA,IACtF;AACA,QAAI,OAAO,aAAa,aAAa;AACnC,eAAS,iBAAiB,oBAAoB,YAAY;AAAA,IAC5D;AACA,kBAAc,IAAI,IAAI;AACtB,sBAAkB;AAAA,EACpB;AAEA,WAAS,OAAO;AACd,cAAU;AACV,iBAAa,KAAK;AAClB,YAAQ;AACR,iBAAa,MAAM;AACnB,kBAAc;AACd,eAAW,MAAM;AACjB,gBAAY;AACZ,kBAAc;AACd,kBAAc;AACd,aAAS,oBAAoB,WAAW,YAAY;AACpD,aAAS,MAAM;AACf,cAAU;AACV,mBAAe,oBAAoB,WAAW,OAAO;AACrD,QAAI,gBAAgB;AAClB,iBAAW,QAAQ,gBAAiB,gBAAe,oBAAoB,MAAM,UAAU;AAAA,IACzF;AACA,QAAI,OAAO,aAAa,aAAa;AACnC,eAAS,oBAAoB,oBAAoB,YAAY;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAIA,WAAS,QAAQ,OAA2B;AAC1C,UAAM,OAAO,MAAM;AACnB,QAAI,MAAM,WAAW,eAAe,KAAK,SAAS,UAAW,SAAQ;AAAA,EACvE;AAEA,MAAI,mBAAkC;AAGtC,QAAM,aAAa,CAAC,aAAuB;AACzC,QAAI,CAAC,SAAS,OAAO,OAAO,aAAa,YAAa,QAAO;AAC7D,QAAI;AACF,aAAO,IAAI,IAAI,SAAS,GAAG,EAAE,WAAW,SAAS;AAAA,IACnD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAOA,WAAS,WAAW,OAAyD;AAC3E,YAAQ,UAAU,SAA8C;AAC9D,YAAM,WAAW,MAAM,MAAM,GAAG,IAAI;AACpC,YAAM,UAAU,WAAW,QAAQ,IAAI,SAAS,QAAQ,IAAI,mBAAmB,IAAI;AACnF,UAAI,YAAY,QAAQ,YAAY,kBAAkB;AACpD,cAAM,QAAQ,qBAAqB;AACnC,2BAAmB;AACnB,YAAI,CAAC,SAAS,SAAS,WAAY,SAAQ;AAAA,MAC7C;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAEA,WAAS,UAAU,UAAoD;AACrE,cAAU,IAAI,QAAQ;AACtB,aAAS,KAAK;AAGd,QAAI,UAAU,SAAS,EAAG,OAAM;AAEhC,WAAO,MAAM;AACX,gBAAU,OAAO,QAAQ;AACzB,UAAI,UAAU,SAAS,EAAG,MAAK;AAAA,IACjC;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,cAAc,OAAwB;AAAA,MACpC;AAAA,MACA,WAAW,iBAAiB,SAAS;AAAA,MACrC,WAAW;AAAA,IACb;AAAA,EACF;AACF;;;ACjpBA,mBAAkE;AAiB3D,SAAS,iBACd,UAA2D,CAAC,GACpC;AACxB,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,mBAAe,qBAAO,OAAO;AACnC,eAAa,UAAU;AAEvB,QAAM,aAAS;AAAA,IACb,MACE,YACA,mBAAmB;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,IAAI,UAAU,aAAa,QAAQ,SAAS,WAAW,OAAO,GAAG,IAAI;AAAA,MAC5E,kBAAkB,MAChB,aAAa,QAAQ,mBAAmB,MACvC,OAAO,aAAa,eAAe,SAAS,oBAAoB;AAAA,IACrE,CAAC;AAAA,IACH;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAsB,MAAM,OAAO,SAAS,CAAC;AAEvE,8BAAU,MAAM,OAAO,UAAU,QAAQ,GAAG,CAAC,MAAM,CAAC;AAEpD,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAY,0BAAY,CAAC,OAAe,OAAO,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC;AAAA,IACvE,iBAAa,0BAAY,MAAM,OAAO,YAAY,GAAG,CAAC,MAAM,CAAC;AAAA,IAC7D,cAAU,0BAAY,MAAM,OAAO,SAAS,GAAG,CAAC,MAAM,CAAC;AAAA,IACvD,cAAU,0BAAY,MAAM,OAAO,SAAS,GAAG,CAAC,MAAM,CAAC;AAAA,IACvD,aAAS,0BAAY,MAAM,OAAO,QAAQ,GAAG,CAAC,MAAM,CAAC;AAAA,EACvD;AACF;;;AFnDA,SAAS,eAAe,UAAwB;AAC9C,QAAM,YAAY,oBAAI,IAA2B;AACjD,MAAI;AACJ,MAAI,OAAO,SAAS;AAEpB,QAAM,SAAS,MAAM;AACnB,qBAAiB,SAAS,iBAAiB,UAAU,CAAC,UAAU;AAC9D,UAAI,UAAU,YAAY,SAAS,UAAU;AAC3C,mBAAW,YAAY,UAAU,IAAI,OAAO,KAAK,CAAC,EAAG,UAAS,CAAC,CAAC;AAAA,MAClE;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,iBAAiB,MAAc,SAAmB;AAChD,gBAAU,IAAI,OAAO,UAAU,IAAI,IAAI,KAAK,oBAAI,IAAI,GAAG,IAAI,OAAO,CAAC;AACnE,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB,MAAc,SAAmB;AACnD,gBAAU,IAAI,IAAI,GAAG,OAAO,OAAO;AACnC,UAAI,CAAC,GAAG,UAAU,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,GAAG;AAC1D,sBAAc,OAAO;AACrB,uBAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AASO,SAAS,yBAAyB,UAAqC,CAAC,GAAiB;AAC9F,QAAM,EAAE,WAAW,8BAAU,GAAG,KAAK,IAAI;AACzC,SAAO,mBAAmB;AAAA,IACxB,WAAW;AAAA,IACX,GAAG;AAAA,IACH,OAAO;AAAA,IACP,SAAS;AAAA,IACT,eAAe;AAAA,IACf,kBAAkB,MAAM,SAAS,iBAAiB;AAAA,IAClD,gBAAgB,eAAe,QAAQ;AAAA,EACzC,CAAC;AACH;AAGO,SAASC,kBACd,UAAiE,CAAC,GAC1C;AACxB,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,eAAW,sBAAO,QAAQ,KAAK;AACrC,WAAS,UAAU,QAAQ;AAE3B,QAAM,aAAS;AAAA,IACb,MACE,YACA,yBAAyB;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,IAAI,UAAU,SAAS,WAAW,WAAW,OAAO,GAAG,IAAI;AAAA,IACpE,CAAC;AAAA,IACH;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,iBAAuB,EAAE,OAAO,CAAC;AAC1C;AAYA,IAAM,OAAO,OACX,SACA,KACA,SAEA,QAAQ,KAAK;AAAA,EACX,QAAQ;AAAA,EACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAC9C,MAAM,KAAK,UAAU,IAAI;AAC3B,CAAC;AAGH,eAAsB,yBAAyB,SAAmD;AAChG,QAAM,QAAQ,QAAQ,WAAW,sBAAsB,QAAQ,OAAO,EAAE;AACxE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,WAAW,MAAM,KAAK,SAAS,GAAG,IAAI,wBAAwB;AAAA,IAClE,OAAO,QAAQ;AAAA,IACf,UAAU,QAAQ;AAAA,IAClB,YAAY,QAAQ;AAAA,EACtB,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,SAAU,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACtD,UAAM,IAAI,MAAM,OAAO,SAAS,kCAAkC,SAAS,MAAM,EAAE;AAAA,EACrF;AACF;AAGA,eAAsB,2BACpB,SACkB;AAClB,QAAM,QAAQ,QAAQ,WAAW,sBAAsB,QAAQ,OAAO,EAAE;AACxE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,WAAW,MAAM,KAAK,SAAS,GAAG,IAAI,+BAA+B;AAAA,IACzE,OAAO,QAAQ;AAAA,EACjB,CAAC;AACD,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,oCAAoC,SAAS,MAAM,EAAE;AACvF,SAAO;AACT;","names":["useNotifications","import_react","post","useNotifications"]}
+{"version":3,"sources":["../src/react-native/index.ts","../src/client/index.ts","../src/react/index.ts"],"sourcesContent":["import { useMemo, useRef } from \"react\";\nimport { AppState } from \"react-native\";\nimport { createNotifyClient, type NotifyClient, type NotifyClientOptions } from \"../client\";\nimport { type UseNotificationsResult, useNotifications as useClientNotifications } from \"../react\";\n\n/** The slice of React Native's AppState the client needs; injectable for tests. */\nexport type AppStateLike = {\n  currentState: string;\n  addEventListener(type: \"change\", handler: (state: string) => void): { remove(): void };\n};\n\nexport type NativeNotifyClientOptions = Omit<\n  NotifyClientOptions,\n  \"locks\" | \"channel\" | \"serviceWorker\" | \"activityTarget\" | \"isDocumentHidden\"\n> & {\n  /** Defaults to React Native's AppState. */\n  appState?: AppStateLike | undefined;\n};\n\ntype Listener = (event: { data?: unknown }) => void;\n\n/**\n * Turns AppState into the \"activity target\" the client listens on: coming\n * back to the foreground counts as focus, so the bell refreshes at once and\n * polls at the fast interval again.\n */\nfunction appStateTarget(appState: AppStateLike) {\n  const listeners = new Map<string, Set<Listener>>();\n  let subscription: { remove(): void } | undefined;\n  let last = appState.currentState;\n\n  const ensure = () => {\n    subscription ??= appState.addEventListener(\"change\", (state) => {\n      if (state === \"active\" && last !== \"active\") {\n        for (const listener of listeners.get(\"focus\") ?? []) listener({});\n      }\n      last = state;\n    });\n  };\n\n  return {\n    addEventListener(type: string, handler: Listener) {\n      listeners.set(type, (listeners.get(type) ?? new Set()).add(handler));\n      ensure();\n    },\n    removeEventListener(type: string, handler: Listener) {\n      listeners.get(type)?.delete(handler);\n      if ([...listeners.values()].every((set) => set.size === 0)) {\n        subscription?.remove();\n        subscription = undefined;\n      }\n    },\n  };\n}\n\n/**\n * The web client, wired for a phone: AppState decides hidden vs. active, one\n * app is one user so there is no tab leader to elect, and the event stream is\n * tried first. A fetch that cannot stream (React Native's built-in one) makes\n * the client fall back to polling on the first attempt; pass `fetch` from\n * `expo/fetch` to keep the live stream.\n */\nexport function createNativeNotifyClient(options: NativeNotifyClientOptions = {}): NotifyClient {\n  const { appState = AppState, ...rest } = options;\n  return createNotifyClient({\n    transport: \"sse\",\n    ...rest,\n    locks: null,\n    channel: null,\n    serviceWorker: null,\n    isDocumentHidden: () => appState.currentState !== \"active\",\n    activityTarget: appStateTarget(appState),\n  });\n}\n\n/** `useNotifications` for React Native. Same result shape as the web hook. */\nexport function useNotifications(\n  options: NativeNotifyClientOptions & { client?: NotifyClient } = {},\n): UseNotificationsResult {\n  const {\n    client: provided,\n    baseUrl,\n    limit,\n    pollIntervalMs,\n    maxPollIntervalMs,\n    safetyNetMs,\n    activeWindowMs,\n    transport,\n    scope,\n    appState,\n  } = options;\n\n  // Held in a ref so a new fetch identity per render does not rebuild the client.\n  const fetchRef = useRef(options.fetch);\n  fetchRef.current = options.fetch;\n\n  const client = useMemo(\n    () =>\n      provided ??\n      createNativeNotifyClient({\n        baseUrl,\n        limit,\n        pollIntervalMs,\n        maxPollIntervalMs,\n        safetyNetMs,\n        activeWindowMs,\n        transport,\n        scope,\n        appState,\n        fetch: (...args) => (fetchRef.current ?? globalThis.fetch)(...args),\n      }),\n    [\n      provided,\n      baseUrl,\n      limit,\n      pollIntervalMs,\n      maxPollIntervalMs,\n      safetyNetMs,\n      activeWindowMs,\n      transport,\n      scope,\n      appState,\n    ],\n  );\n\n  return useClientNotifications({ client });\n}\n\nexport type RegisterMobilePushOptions = {\n  /** The token from expo-notifications' getExpoPushTokenAsync(), or your provider's equivalent. */\n  token: string;\n  platform: \"ios\" | \"android\" | \"web\";\n  deviceName?: string | undefined;\n  baseUrl?: string | undefined;\n  /** Your authenticated fetch. */\n  fetch?: typeof globalThis.fetch | undefined;\n};\n\nconst post = async (\n  doFetch: typeof globalThis.fetch,\n  url: string,\n  body: unknown,\n): Promise<Response> =>\n  doFetch(url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify(body),\n  });\n\n/** Registers this device for the mobilePush channel. Idempotent: the same token refreshes its row. */\nexport async function registerMobilePushDevice(options: RegisterMobilePushOptions): Promise<void> {\n  const base = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const response = await post(doFetch, `${base}/mobile-push/devices`, {\n    token: options.token,\n    platform: options.platform,\n    deviceName: options.deviceName,\n  });\n  if (!response.ok) {\n    const detail = (await response.json().catch(() => ({}))) as { error?: string };\n    throw new Error(detail.error ?? `registering the device failed: ${response.status}`);\n  }\n}\n\n/** Removes this device. Resolves false when nothing was registered. */\nexport async function unregisterMobilePushDevice(\n  options: Pick<RegisterMobilePushOptions, \"token\" | \"baseUrl\" | \"fetch\">,\n): Promise<boolean> {\n  const base = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const response = await post(doFetch, `${base}/mobile-push/devices/remove`, {\n    token: options.token,\n  });\n  if (response.status === 404) return false;\n  if (!response.ok) throw new Error(`unregistering the device failed: ${response.status}`);\n  return true;\n}\n\nexport type { NotificationView, NotifyClient, NotifyClientOptions, NotifyState } from \"../client\";\nexport type { UseNotificationsResult } from \"../react\";\n","export type NotificationView = {\n  id: string;\n  userId: string;\n  type: string;\n  payload: unknown;\n  actorId: string | null;\n  groupKey: string | null;\n  seenAt: string | null;\n  readAt: string | null;\n  createdAt: string;\n};\n\nexport type NotifyState = {\n  notifications: readonly NotificationView[];\n  /** Badge count — cleared when the dropdown opens. Server-authoritative. */\n  unseenCount: number;\n  /** Items still bold. Derived from what is loaded, not a server total. */\n  unreadCount: number;\n  nextCursor: string | null;\n  isLoading: boolean;\n  error: Error | null;\n};\n\nexport type Transport = \"auto\" | \"sse\" | \"poll\";\n\nexport type TransportStatus = {\n  /** \"leader\" holds this browser's single connection; \"follower\" mirrors it; \"solo\" has no Web Locks. */\n  role: \"leader\" | \"follower\" | \"solo\";\n  /** What the leader is using right now. */\n  transport: \"sse\" | \"poll\";\n  /** True while the event stream has said `ready` and not since closed. */\n  connected: boolean;\n};\n\ntype LockManagerLike = {\n  request(\n    name: string,\n    options: { mode: \"exclusive\"; signal?: AbortSignal },\n    callback: () => Promise<void>,\n  ): Promise<void>;\n};\n\ntype ChannelLike = {\n  postMessage(message: unknown): void;\n  addEventListener(type: \"message\", handler: (event: { data: unknown }) => void): void;\n  removeEventListener(type: \"message\", handler: (event: { data: unknown }) => void): void;\n  close(): void;\n};\n\ntype MessageTargetLike = {\n  addEventListener(type: string, handler: (event: { data?: unknown }) => void): void;\n  removeEventListener(type: string, handler: (event: { data?: unknown }) => void): void;\n};\n\nexport type NotifyClientOptions = {\n  baseUrl?: string | undefined;\n  fetch?: typeof globalThis.fetch | undefined;\n  limit?: number | undefined;\n  /** Poll interval while the user is active and no stream is connected. Default 15 s. */\n  pollIntervalMs?: number | undefined;\n  /** Ceiling the idle backoff grows to. Default 10 min. */\n  maxPollIntervalMs?: number | undefined;\n  /** Poll interval while the event stream is connected: a safety net. Default 5 min. */\n  safetyNetMs?: number | undefined;\n  /** How long after user input polling stays at the base interval. Default 60 s. */\n  activeWindowMs?: number | undefined;\n  /** \"auto\" streams when a DOM is present, \"poll\" never streams, \"sse\" always tries. */\n  transport?: Transport | undefined;\n  /** Injectable so the poller can be tested without a DOM. */\n  isDocumentHidden?: (() => boolean) | undefined;\n  /** Web Locks, for one connection per browser. Defaults to navigator.locks; null disables. */\n  locks?: LockManagerLike | null | undefined;\n  /** Cross-tab channel factory. Defaults to BroadcastChannel; null disables. */\n  channel?: (() => ChannelLike) | null | undefined;\n  /** Where push relays arrive. Defaults to navigator.serviceWorker; null disables. */\n  serviceWorker?: MessageTargetLike | null | undefined;\n  /** Where user activity is observed. Defaults to window; null disables. */\n  activityTarget?: MessageTargetLike | null | undefined;\n  now?: (() => number) | undefined;\n  /**\n   * Separates browsers' tab groups when identity is not a cookie: pass the\n   * current user's id (or session id) so tabs signed in as different users\n   * never share a leader or mirror each other's inbox.\n   */\n  scope?: string | undefined;\n};\n\nconst INITIAL: NotifyState = {\n  notifications: [],\n  unseenCount: 0,\n  unreadCount: 0,\n  nextCursor: null,\n  isLoading: true,\n  error: null,\n};\n\nconst countUnread = (rows: readonly NotificationView[]) =>\n  rows.reduce((total, row) => (row.readAt === null ? total + 1 : total), 0);\n\n/** A stream that dies this fast, repeatedly, is being cut by the platform: stop trying. */\nconst SHORT_STREAM_MS = 15_000;\nconst SHORT_STREAMS_BEFORE_GIVING_UP = 3;\n\ntype TabMessage =\n  | { type: \"hello\" }\n  | { type: \"state\"; state: NotifyState }\n  | { type: \"mutated\" }\n  | { type: \"leader\" };\n\nexport function createNotifyClient(options: NotifyClientOptions = {}) {\n  const baseUrl = (options.baseUrl ?? \"/api/notifications\").replace(/\\/$/, \"\");\n  const doFetch = options.fetch ?? ((...args) => globalThis.fetch(...args));\n  const limit = options.limit ?? 20;\n  const pollIntervalMs = options.pollIntervalMs ?? 15_000;\n  const maxPollIntervalMs = options.maxPollIntervalMs ?? 10 * 60_000;\n  const safetyNetMs = options.safetyNetMs ?? 5 * 60_000;\n  const activeWindowMs = options.activeWindowMs ?? 60_000;\n  const now = options.now ?? (() => Date.now());\n  const groupKey = options.scope ? `${baseUrl}#${options.scope}` : baseUrl;\n  const hasDom = typeof window !== \"undefined\" && typeof document !== \"undefined\";\n  const transport: Transport = options.transport ?? \"auto\";\n  const wantsStream = transport === \"sse\" || (transport === \"auto\" && hasDom);\n  const isHidden =\n    options.isDocumentHidden ??\n    (() => typeof document !== \"undefined\" && document.visibilityState === \"hidden\");\n\n  const locks =\n    options.locks === undefined\n      ? typeof navigator !== \"undefined\"\n        ? ((navigator as { locks?: LockManagerLike }).locks ?? null)\n        : null\n      : options.locks;\n  const makeChannel =\n    options.channel === undefined\n      ? typeof BroadcastChannel !== \"undefined\"\n        ? () => new BroadcastChannel(`easy-ping:${groupKey}`) as unknown as ChannelLike\n        : null\n      : options.channel;\n  const serviceWorker =\n    options.serviceWorker === undefined\n      ? typeof navigator !== \"undefined\"\n        ? ((navigator as { serviceWorker?: MessageTargetLike }).serviceWorker ?? null)\n        : null\n      : options.serviceWorker;\n  const activityTarget =\n    options.activityTarget === undefined\n      ? hasDom\n        ? (window as unknown as MessageTargetLike)\n        : null\n      : options.activityTarget;\n\n  let state: NotifyState = INITIAL;\n  const listeners = new Set<(state: NotifyState) => void>();\n\n  let role: TransportStatus[\"role\"] = \"solo\";\n  let running = false;\n  let channel: ChannelLike | undefined;\n  let releaseLock: (() => void) | undefined;\n  let lockAbort: AbortController | undefined;\n\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let consecutiveFailures = 0;\n  let idleTicks = 0;\n  let activeUntil = 0;\n  let lastRefreshAt = 0;\n  let refreshing: Promise<void> | undefined;\n  let refreshAgain = false;\n\n  let streamAbort: AbortController | undefined;\n  let streamConnected = false;\n  let streamDisabled = !wantsStream;\n  let shortStreams = 0;\n  let streamFailures = 0;\n\n  // Bumped per mutation so an in-flight poll cannot revert an optimistic update.\n  let generation = 0;\n\n  // A follower's own optimistic changes, kept until the leader's state reflects them.\n  const localReads = new Set<string>();\n  let localSeen = false;\n\n  const stamp = () => new Date().toISOString();\n\n  function emit() {\n    for (const listener of listeners) listener(state);\n  }\n\n  function set(patch: Partial<NotifyState>) {\n    state = { ...state, ...patch };\n    state = { ...state, unreadCount: countUnread(state.notifications) };\n    emit();\n    if (role === \"leader\") post({ type: \"state\", state });\n  }\n\n  function post(message: TabMessage) {\n    try {\n      channel?.postMessage(message);\n    } catch {\n      // channel closed\n    }\n  }\n\n  async function request<T>(path: string, init?: RequestInit): Promise<T> {\n    const response = await doFetch(`${baseUrl}${path}`, {\n      ...init,\n      headers: { \"content-type\": \"application/json\", ...init?.headers },\n    });\n    if (!response.ok)\n      throw new Error(`${init?.method ?? \"GET\"} ${path} failed: ${response.status}`);\n    return (await response.json()) as T;\n  }\n\n  async function fetchPage(): Promise<void> {\n    const startedAt = generation;\n\n    const page = await request<{\n      notifications: NotificationView[];\n      nextCursor: string | null;\n      unseenCount?: number;\n    }>(`/?limit=${limit}`);\n\n    const unseenCount = page.unseenCount ?? (await request<{ unseen: number }>(\"/count\")).unseen;\n\n    // A mutation landed while this was in flight; the response is stale.\n    if (generation !== startedAt) return;\n\n    set({\n      notifications: page.notifications,\n      nextCursor: page.nextCursor,\n      unseenCount,\n      isLoading: false,\n      error: null,\n    });\n  }\n\n  /** Coalesces overlapping calls: a second request while one is in flight runs once after it. */\n  function refresh(): Promise<void> {\n    if (refreshing) {\n      refreshAgain = true;\n      return refreshing;\n    }\n    refreshing = (async () => {\n      try {\n        do {\n          refreshAgain = false;\n          await fetchPage();\n          lastRefreshAt = now();\n        } while (refreshAgain);\n      } finally {\n        refreshing = undefined;\n      }\n    })();\n    return refreshing;\n  }\n\n  let loadingMore: Promise<void> | undefined;\n\n  async function loadMore(): Promise<void> {\n    if (!state.nextCursor) return;\n\n    // Share the in-flight request so two clicks cannot append the same page twice.\n    if (loadingMore) return loadingMore;\n\n    const cursor = state.nextCursor;\n\n    loadingMore = (async () => {\n      try {\n        const page = await request<{\n          notifications: NotificationView[];\n          nextCursor: string | null;\n        }>(`/?limit=${limit}&cursor=${encodeURIComponent(cursor)}`);\n\n        const known = new Set(state.notifications.map((row) => row.id));\n\n        set({\n          notifications: [\n            ...state.notifications,\n            ...page.notifications.filter((row) => !known.has(row.id)),\n          ],\n          nextCursor: page.nextCursor,\n        });\n      } finally {\n        loadingMore = undefined;\n      }\n    })();\n\n    return loadingMore;\n  }\n\n  /** Applies a patch immediately and reverts it if the request fails. */\n  async function optimistic(\n    apply: (rows: readonly NotificationView[]) => readonly NotificationView[],\n    patch: Partial<NotifyState>,\n    send: () => Promise<unknown>,\n  ): Promise<void> {\n    const previous = state;\n    generation += 1;\n    set({ notifications: apply(state.notifications), ...patch });\n\n    try {\n      await send();\n      if (role === \"follower\") post({ type: \"mutated\" });\n    } catch (error) {\n      generation += 1;\n      state = previous;\n      emit();\n      throw error;\n    }\n  }\n\n  async function markAsRead(id: string): Promise<void> {\n    if (role === \"follower\") localReads.add(id);\n    await optimistic(\n      (rows) =>\n        rows.map((row) => (row.id === id ? { ...row, readAt: row.readAt ?? stamp() } : row)),\n      {},\n      () => request(\"/read\", { method: \"POST\", body: JSON.stringify({ ids: [id] }) }),\n    ).catch((error) => {\n      localReads.delete(id);\n      throw error;\n    });\n  }\n\n  async function markAllRead(): Promise<void> {\n    if (role === \"follower\") for (const row of state.notifications) localReads.add(row.id);\n    await optimistic(\n      (rows) => rows.map((row) => ({ ...row, readAt: row.readAt ?? stamp() })),\n      {},\n      () => request(\"/read-all\", { method: \"POST\" }),\n    ).catch((error) => {\n      localReads.clear();\n      throw error;\n    });\n  }\n\n  async function markSeen(): Promise<void> {\n    // Only what the user could have seen: no cutoff would mark newer arrivals seen too.\n    const newest = state.notifications[0]?.createdAt;\n    if (role === \"follower\") localSeen = true;\n\n    await optimistic(\n      (rows) => rows.map((row) => ({ ...row, seenAt: row.seenAt ?? stamp() })),\n      { unseenCount: 0 },\n      () =>\n        request(\"/seen\", {\n          method: \"POST\",\n          body: JSON.stringify(newest ? { before: newest } : {}),\n        }),\n    ).catch((error) => {\n      localSeen = false;\n      throw error;\n    });\n  }\n\n  // ---- follower: mirror the leader, keep own optimistic changes until confirmed ----\n\n  function applyRemoteState(remote: NotifyState) {\n    const notifications = remote.notifications.map((row) => {\n      if (!localReads.has(row.id)) return row;\n      if (row.readAt) {\n        localReads.delete(row.id);\n        return row;\n      }\n      return { ...row, readAt: stamp() };\n    });\n    if (localSeen && remote.unseenCount === 0) localSeen = false;\n    state = {\n      ...remote,\n      notifications,\n      unseenCount: localSeen ? 0 : remote.unseenCount,\n      unreadCount: countUnread(notifications),\n    };\n    emit();\n  }\n\n  function onTabMessage(event: { data: unknown }) {\n    const message = event.data as TabMessage | null;\n    if (!message || typeof message !== \"object\") return;\n    if (role === \"leader\") {\n      if (message.type === \"hello\") post({ type: \"state\", state });\n      else if (message.type === \"mutated\") void refresh().catch(() => {});\n      return;\n    }\n    if (message.type === \"state\") applyRemoteState(message.state);\n  }\n\n  // ---- leader / solo: polling with activity-shaped backoff ----\n\n  function schedule(delay: number) {\n    clearTimeout(timer);\n    timer = setTimeout(tick, delay);\n  }\n\n  function nextDelay(): number {\n    if (consecutiveFailures > 0) {\n      return Math.min(pollIntervalMs * 2 ** consecutiveFailures, maxPollIntervalMs);\n    }\n    if (streamConnected) return safetyNetMs;\n    if (now() < activeUntil) return pollIntervalMs;\n    idleTicks += 1;\n    return Math.min(pollIntervalMs * 2 ** idleTicks, maxPollIntervalMs);\n  }\n\n  async function tick() {\n    if (!running) return;\n    // A hidden tab is not looking at the bell.\n    if (isHidden()) {\n      schedule(pollIntervalMs);\n      return;\n    }\n\n    try {\n      await refresh();\n      consecutiveFailures = 0;\n    } catch (error) {\n      consecutiveFailures += 1;\n      set({ isLoading: false, error: error instanceof Error ? error : new Error(String(error)) });\n    }\n\n    if (running) schedule(nextDelay());\n  }\n\n  /** User input or a returning tab: poll fast again, and catch up now if the last refresh is stale. */\n  function onActivity() {\n    if (!running || role === \"follower\") return;\n    activeUntil = now() + activeWindowMs;\n    idleTicks = 0;\n    if (!isHidden() && now() - lastRefreshAt > pollIntervalMs) {\n      void refresh().catch(() => {});\n      schedule(nextDelay());\n    }\n  }\n\n  const onVisibility = () => {\n    if (!isHidden()) onActivity();\n  };\n\n  const ACTIVITY_EVENTS = [\"focus\", \"pointerdown\", \"keydown\", \"online\"];\n\n  // ---- leader / solo: the event stream ----\n\n  function changed() {\n    if (!running) return;\n    void refresh().catch(() => {});\n  }\n\n  async function readStream(signal: AbortSignal): Promise<void> {\n    const openedAt = now();\n    const response = await doFetch(`${baseUrl}/events`, {\n      headers: { accept: \"text/event-stream\" },\n      signal,\n    });\n    if (!response.ok) throw new Error(`GET /events failed: ${response.status}`);\n    if (!response.body) {\n      // This fetch cannot stream a body (React Native's built-in one, some polyfills): poll instead.\n      streamDisabled = true;\n      schedule(nextDelay());\n      return;\n    }\n\n    const reader = response.body.getReader();\n    const decoder = new TextDecoder();\n    let buffer = \"\";\n    let eventName = \"\";\n\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        buffer += decoder.decode(value, { stream: true });\n        let newline = buffer.indexOf(\"\\n\");\n        while (newline >= 0) {\n          const line = buffer.slice(0, newline).replace(/\\r$/, \"\");\n          buffer = buffer.slice(newline + 1);\n          if (line === \"\") {\n            if (eventName === \"ready\") {\n              streamConnected = true;\n              streamFailures = 0;\n              schedule(nextDelay());\n            } else if (eventName === \"changed\") changed();\n            eventName = \"\";\n          } else if (line.startsWith(\"event:\")) eventName = line.slice(6).trim();\n          newline = buffer.indexOf(\"\\n\");\n        }\n      }\n    } finally {\n      streamConnected = false;\n      if (now() - openedAt < SHORT_STREAM_MS) shortStreams += 1;\n      else shortStreams = 0;\n    }\n  }\n\n  const isFollower = () => role === \"follower\";\n\n  async function streamLoop() {\n    while (running && !streamDisabled && !isFollower()) {\n      streamAbort = new AbortController();\n      try {\n        await readStream(streamAbort.signal);\n      } catch {\n        if (!running) return;\n        streamFailures += 1;\n      }\n      if (!running || isFollower() || streamDisabled) return;\n      if (shortStreams >= SHORT_STREAMS_BEFORE_GIVING_UP) {\n        // The platform cuts streams too fast for them to be worth it here.\n        streamDisabled = true;\n        schedule(nextDelay());\n        return;\n      }\n      await new Promise((resolve) =>\n        setTimeout(resolve, Math.min(3_000 * 2 ** streamFailures, 60_000)),\n      );\n    }\n  }\n\n  // ---- roles ----\n\n  function becomeLeader() {\n    role = \"leader\";\n    post({ type: \"leader\" });\n    post({ type: \"state\", state });\n    void tick();\n    if (!streamDisabled) void streamLoop();\n  }\n\n  function becomeFollower() {\n    role = \"follower\";\n    post({ type: \"hello\" });\n  }\n\n  function acquireLeadership() {\n    if (!locks || !channel) {\n      role = \"solo\";\n      void tick();\n      if (!streamDisabled) void streamLoop();\n      return;\n    }\n    becomeFollower();\n    lockAbort = new AbortController();\n    locks\n      .request(\n        `easy-ping:leader:${groupKey}`,\n        { mode: \"exclusive\", signal: lockAbort.signal },\n        () =>\n          new Promise<void>((resolve) => {\n            releaseLock = resolve;\n            if (running) becomeLeader();\n            else resolve();\n          }),\n      )\n      .catch(() => {\n        // aborted on stop, or Web Locks refused; either way no leadership here\n      });\n  }\n\n  function start() {\n    running = true;\n    channel = makeChannel ? makeChannel() : undefined;\n    channel?.addEventListener(\"message\", onTabMessage);\n    serviceWorker?.addEventListener(\"message\", onRelay);\n    if (activityTarget) {\n      for (const name of ACTIVITY_EVENTS) activityTarget.addEventListener(name, onActivity);\n    }\n    if (typeof document !== \"undefined\") {\n      document.addEventListener(\"visibilitychange\", onVisibility);\n    }\n    activeUntil = now() + activeWindowMs;\n    acquireLeadership();\n  }\n\n  function stop() {\n    running = false;\n    clearTimeout(timer);\n    timer = undefined;\n    streamAbort?.abort();\n    streamAbort = undefined;\n    lockAbort?.abort();\n    lockAbort = undefined;\n    releaseLock?.();\n    releaseLock = undefined;\n    channel?.removeEventListener(\"message\", onTabMessage);\n    channel?.close();\n    channel = undefined;\n    serviceWorker?.removeEventListener(\"message\", onRelay);\n    if (activityTarget) {\n      for (const name of ACTIVITY_EVENTS) activityTarget.removeEventListener(name, onActivity);\n    }\n    if (typeof document !== \"undefined\") {\n      document.removeEventListener(\"visibilitychange\", onVisibility);\n    }\n    role = \"solo\";\n  }\n\n  // ---- signals from outside: the service worker relay and the piggyback header ----\n\n  function onRelay(event: { data?: unknown }) {\n    const data = event.data as { source?: unknown; type?: unknown } | null;\n    if (data?.source === \"easy-ping\" && data.type === \"changed\") changed();\n  }\n\n  let lastInboxVersion: string | null = null;\n\n  // Only the app's own origin may steer the bell; a third-party response cannot.\n  const sameOrigin = (response: Response) => {\n    if (!response.url || typeof location === \"undefined\") return true;\n    try {\n      return new URL(response.url).origin === location.origin;\n    } catch {\n      return false;\n    }\n  };\n\n  /**\n   * Wraps your app's fetch so responses carrying the inbox-version header\n   * refresh the bell when the version moves. Active users then never need a\n   * dedicated poll. RFC 0006 idea 1.\n   */\n  function instrument(inner: typeof globalThis.fetch): typeof globalThis.fetch {\n    return (async (...args: Parameters<typeof globalThis.fetch>) => {\n      const response = await inner(...args);\n      const version = sameOrigin(response) ? response.headers.get(\"x-easy-ping-inbox\") : null;\n      if (version !== null && version !== lastInboxVersion) {\n        const first = lastInboxVersion === null;\n        lastInboxVersion = version;\n        if (!first && role !== \"follower\") changed();\n      }\n      return response;\n    }) as typeof globalThis.fetch;\n  }\n\n  function subscribe(listener: (state: NotifyState) => void): () => void {\n    listeners.add(listener);\n    listener(state);\n\n    // One transport regardless of how many components subscribe.\n    if (listeners.size === 1) start();\n\n    return () => {\n      listeners.delete(listener);\n      if (listeners.size === 0) stop();\n    };\n  }\n\n  return {\n    subscribe,\n    refresh,\n    loadMore,\n    markAsRead,\n    markAllRead,\n    markSeen,\n    instrument,\n    getState: () => state,\n    getTransport: (): TransportStatus => ({\n      role,\n      transport: streamDisabled ? \"poll\" : \"sse\",\n      connected: streamConnected,\n    }),\n  };\n}\n\nexport type NotifyClient = ReturnType<typeof createNotifyClient>;\n","\"use client\";\n\nimport { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport {\n  createNotifyClient,\n  type NotifyClient,\n  type NotifyClientOptions,\n  type NotifyState,\n} from \"../client\";\n\nexport type UseNotificationsResult = NotifyState & {\n  markAsRead: (id: string) => Promise<void>;\n  markAllRead: () => Promise<void>;\n  markSeen: () => Promise<void>;\n  loadMore: () => Promise<void>;\n  refresh: () => Promise<void>;\n};\n\n/** State lives in the framework-agnostic client; this only wires React's lifecycle. */\nexport function useNotifications(\n  options: NotifyClientOptions & { client?: NotifyClient } = {},\n): UseNotificationsResult {\n  const {\n    client: provided,\n    baseUrl,\n    limit,\n    pollIntervalMs,\n    maxPollIntervalMs,\n    safetyNetMs,\n    activeWindowMs,\n    transport,\n    scope,\n    locks,\n    channel,\n    serviceWorker,\n    activityTarget,\n    now,\n  } = options;\n\n  // Held in a ref so a new callback identity per render does not rebuild the client.\n  const callbacksRef = useRef(options);\n  callbacksRef.current = options;\n\n  const client = useMemo(\n    () =>\n      provided ??\n      createNotifyClient({\n        baseUrl,\n        limit,\n        pollIntervalMs,\n        maxPollIntervalMs,\n        safetyNetMs,\n        activeWindowMs,\n        transport,\n        scope,\n        locks,\n        channel,\n        serviceWorker,\n        activityTarget,\n        now,\n        fetch: (...args) => (callbacksRef.current.fetch ?? globalThis.fetch)(...args),\n        isDocumentHidden: () =>\n          callbacksRef.current.isDocumentHidden?.() ??\n          (typeof document !== \"undefined\" && document.visibilityState === \"hidden\"),\n      }),\n    [\n      provided,\n      baseUrl,\n      limit,\n      pollIntervalMs,\n      maxPollIntervalMs,\n      safetyNetMs,\n      activeWindowMs,\n      transport,\n      scope,\n      locks,\n      channel,\n      serviceWorker,\n      activityTarget,\n      now,\n    ],\n  );\n\n  const [state, setState] = useState<NotifyState>(() => client.getState());\n\n  useEffect(() => client.subscribe(setState), [client]);\n\n  return {\n    ...state,\n    markAsRead: useCallback((id: string) => client.markAsRead(id), [client]),\n    markAllRead: useCallback(() => client.markAllRead(), [client]),\n    markSeen: useCallback(() => client.markSeen(), [client]),\n    loadMore: useCallback(() => client.loadMore(), [client]),\n    refresh: useCallback(() => client.refresh(), [client]),\n  };\n}\n\nexport type {\n  NotificationView,\n  NotifyClient,\n  NotifyClientOptions,\n  NotifyState,\n} from \"../client\";\nexport { createNotifyClient } from \"../client\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0BAAAA;AAAA;AAAA;AAAA,IAAAC,gBAAgC;AAChC,0BAAyB;;;ACsFzB,IAAM,UAAuB;AAAA,EAC3B,eAAe,CAAC;AAAA,EAChB,aAAa;AAAA,EACb,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,OAAO;AACT;AAEA,IAAM,cAAc,CAAC,SACnB,KAAK,OAAO,CAAC,OAAO,QAAS,IAAI,WAAW,OAAO,QAAQ,IAAI,OAAQ,CAAC;AAG1E,IAAM,kBAAkB;AACxB,IAAM,iCAAiC;AAQhC,SAAS,mBAAmB,UAA+B,CAAC,GAAG;AACpE,QAAM,WAAW,QAAQ,WAAW,sBAAsB,QAAQ,OAAO,EAAE;AAC3E,QAAM,UAAU,QAAQ,UAAU,IAAI,SAAS,WAAW,MAAM,GAAG,IAAI;AACvE,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,oBAAoB,QAAQ,qBAAqB,KAAK;AAC5D,QAAM,cAAc,QAAQ,eAAe,IAAI;AAC/C,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,WAAW,QAAQ,QAAQ,GAAG,OAAO,IAAI,QAAQ,KAAK,KAAK;AACjE,QAAM,SAAS,OAAO,WAAW,eAAe,OAAO,aAAa;AACpE,QAAM,YAAuB,QAAQ,aAAa;AAClD,QAAM,cAAc,cAAc,SAAU,cAAc,UAAU;AACpE,QAAM,WACJ,QAAQ,qBACP,MAAM,OAAO,aAAa,eAAe,SAAS,oBAAoB;AAEzE,QAAM,QACJ,QAAQ,UAAU,SACd,OAAO,cAAc,cACjB,UAA0C,SAAS,OACrD,OACF,QAAQ;AACd,QAAM,cACJ,QAAQ,YAAY,SAChB,OAAO,qBAAqB,cAC1B,MAAM,IAAI,iBAAiB,aAAa,QAAQ,EAAE,IAClD,OACF,QAAQ;AACd,QAAM,gBACJ,QAAQ,kBAAkB,SACtB,OAAO,cAAc,cACjB,UAAoD,iBAAiB,OACvE,OACF,QAAQ;AACd,QAAM,iBACJ,QAAQ,mBAAmB,SACvB,SACG,SACD,OACF,QAAQ;AAEd,MAAI,QAAqB;AACzB,QAAM,YAAY,oBAAI,IAAkC;AAExD,MAAI,OAAgC;AACpC,MAAI,UAAU;AACd,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI;AACJ,MAAI,sBAAsB;AAC1B,MAAI,YAAY;AAChB,MAAI,cAAc;AAClB,MAAI,gBAAgB;AACpB,MAAI;AACJ,MAAI,eAAe;AAEnB,MAAI;AACJ,MAAI,kBAAkB;AACtB,MAAI,iBAAiB,CAAC;AACtB,MAAI,eAAe;AACnB,MAAI,iBAAiB;AAGrB,MAAI,aAAa;AAGjB,QAAM,aAAa,oBAAI,IAAY;AACnC,MAAI,YAAY;AAEhB,QAAM,QAAQ,OAAM,oBAAI,KAAK,GAAE,YAAY;AAE3C,WAAS,OAAO;AACd,eAAW,YAAY,UAAW,UAAS,KAAK;AAAA,EAClD;AAEA,WAAS,IAAI,OAA6B;AACxC,YAAQ,EAAE,GAAG,OAAO,GAAG,MAAM;AAC7B,YAAQ,EAAE,GAAG,OAAO,aAAa,YAAY,MAAM,aAAa,EAAE;AAClE,SAAK;AACL,QAAI,SAAS,SAAU,CAAAC,MAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAAA,EACtD;AAEA,WAASA,MAAK,SAAqB;AACjC,QAAI;AACF,eAAS,YAAY,OAAO;AAAA,IAC9B,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,QAAW,MAAc,MAAgC;AACtE,UAAM,WAAW,MAAM,QAAQ,GAAG,OAAO,GAAG,IAAI,IAAI;AAAA,MAClD,GAAG;AAAA,MACH,SAAS,EAAE,gBAAgB,oBAAoB,GAAG,MAAM,QAAQ;AAAA,IAClE,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,GAAG,MAAM,UAAU,KAAK,IAAI,IAAI,YAAY,SAAS,MAAM,EAAE;AAC/E,WAAQ,MAAM,SAAS,KAAK;AAAA,EAC9B;AAEA,iBAAe,YAA2B;AACxC,UAAM,YAAY;AAElB,UAAM,OAAO,MAAM,QAIhB,WAAW,KAAK,EAAE;AAErB,UAAM,cAAc,KAAK,gBAAgB,MAAM,QAA4B,QAAQ,GAAG;AAGtF,QAAI,eAAe,UAAW;AAE9B,QAAI;AAAA,MACF,eAAe,KAAK;AAAA,MACpB,YAAY,KAAK;AAAA,MACjB;AAAA,MACA,WAAW;AAAA,MACX,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AAGA,WAAS,UAAyB;AAChC,QAAI,YAAY;AACd,qBAAe;AACf,aAAO;AAAA,IACT;AACA,kBAAc,YAAY;AACxB,UAAI;AACF,WAAG;AACD,yBAAe;AACf,gBAAM,UAAU;AAChB,0BAAgB,IAAI;AAAA,QACtB,SAAS;AAAA,MACX,UAAE;AACA,qBAAa;AAAA,MACf;AAAA,IACF,GAAG;AACH,WAAO;AAAA,EACT;AAEA,MAAI;AAEJ,iBAAe,WAA0B;AACvC,QAAI,CAAC,MAAM,WAAY;AAGvB,QAAI,YAAa,QAAO;AAExB,UAAM,SAAS,MAAM;AAErB,mBAAe,YAAY;AACzB,UAAI;AACF,cAAM,OAAO,MAAM,QAGhB,WAAW,KAAK,WAAW,mBAAmB,MAAM,CAAC,EAAE;AAE1D,cAAM,QAAQ,IAAI,IAAI,MAAM,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;AAE9D,YAAI;AAAA,UACF,eAAe;AAAA,YACb,GAAG,MAAM;AAAA,YACT,GAAG,KAAK,cAAc,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;AAAA,UAC1D;AAAA,UACA,YAAY,KAAK;AAAA,QACnB,CAAC;AAAA,MACH,UAAE;AACA,sBAAc;AAAA,MAChB;AAAA,IACF,GAAG;AAEH,WAAO;AAAA,EACT;AAGA,iBAAe,WACb,OACA,OACA,MACe;AACf,UAAM,WAAW;AACjB,kBAAc;AACd,QAAI,EAAE,eAAe,MAAM,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC;AAE3D,QAAI;AACF,YAAM,KAAK;AACX,UAAI,SAAS,WAAY,CAAAA,MAAK,EAAE,MAAM,UAAU,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,oBAAc;AACd,cAAQ;AACR,WAAK;AACL,YAAM;AAAA,IACR;AAAA,EACF;AAEA,iBAAe,WAAW,IAA2B;AACnD,QAAI,SAAS,WAAY,YAAW,IAAI,EAAE;AAC1C,UAAM;AAAA,MACJ,CAAC,SACC,KAAK,IAAI,CAAC,QAAS,IAAI,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,MAAM,EAAE,IAAI,GAAI;AAAA,MACrF,CAAC;AAAA,MACD,MAAM,QAAQ,SAAS,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,IAChF,EAAE,MAAM,CAAC,UAAU;AACjB,iBAAW,OAAO,EAAE;AACpB,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,iBAAe,cAA6B;AAC1C,QAAI,SAAS,WAAY,YAAW,OAAO,MAAM,cAAe,YAAW,IAAI,IAAI,EAAE;AACrF,UAAM;AAAA,MACJ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,MAAM,EAAE,EAAE;AAAA,MACvE,CAAC;AAAA,MACD,MAAM,QAAQ,aAAa,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC/C,EAAE,MAAM,CAAC,UAAU;AACjB,iBAAW,MAAM;AACjB,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,iBAAe,WAA0B;AAEvC,UAAM,SAAS,MAAM,cAAc,CAAC,GAAG;AACvC,QAAI,SAAS,WAAY,aAAY;AAErC,UAAM;AAAA,MACJ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,QAAQ,IAAI,UAAU,MAAM,EAAE,EAAE;AAAA,MACvE,EAAE,aAAa,EAAE;AAAA,MACjB,MACE,QAAQ,SAAS;AAAA,QACf,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC,CAAC;AAAA,MACvD,CAAC;AAAA,IACL,EAAE,MAAM,CAAC,UAAU;AACjB,kBAAY;AACZ,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAIA,WAAS,iBAAiB,QAAqB;AAC7C,UAAM,gBAAgB,OAAO,cAAc,IAAI,CAAC,QAAQ;AACtD,UAAI,CAAC,WAAW,IAAI,IAAI,EAAE,EAAG,QAAO;AACpC,UAAI,IAAI,QAAQ;AACd,mBAAW,OAAO,IAAI,EAAE;AACxB,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,KAAK,QAAQ,MAAM,EAAE;AAAA,IACnC,CAAC;AACD,QAAI,aAAa,OAAO,gBAAgB,EAAG,aAAY;AACvD,YAAQ;AAAA,MACN,GAAG;AAAA,MACH;AAAA,MACA,aAAa,YAAY,IAAI,OAAO;AAAA,MACpC,aAAa,YAAY,aAAa;AAAA,IACxC;AACA,SAAK;AAAA,EACP;AAEA,WAAS,aAAa,OAA0B;AAC9C,UAAM,UAAU,MAAM;AACtB,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,QAAI,SAAS,UAAU;AACrB,UAAI,QAAQ,SAAS,QAAS,CAAAA,MAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAAA,eAClD,QAAQ,SAAS,UAAW,MAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAClE;AAAA,IACF;AACA,QAAI,QAAQ,SAAS,QAAS,kBAAiB,QAAQ,KAAK;AAAA,EAC9D;AAIA,WAAS,SAAS,OAAe;AAC/B,iBAAa,KAAK;AAClB,YAAQ,WAAW,MAAM,KAAK;AAAA,EAChC;AAEA,WAAS,YAAoB;AAC3B,QAAI,sBAAsB,GAAG;AAC3B,aAAO,KAAK,IAAI,iBAAiB,KAAK,qBAAqB,iBAAiB;AAAA,IAC9E;AACA,QAAI,gBAAiB,QAAO;AAC5B,QAAI,IAAI,IAAI,YAAa,QAAO;AAChC,iBAAa;AACb,WAAO,KAAK,IAAI,iBAAiB,KAAK,WAAW,iBAAiB;AAAA,EACpE;AAEA,iBAAe,OAAO;AACpB,QAAI,CAAC,QAAS;AAEd,QAAI,SAAS,GAAG;AACd,eAAS,cAAc;AACvB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,QAAQ;AACd,4BAAsB;AAAA,IACxB,SAAS,OAAO;AACd,6BAAuB;AACvB,UAAI,EAAE,WAAW,OAAO,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,EAAE,CAAC;AAAA,IAC5F;AAEA,QAAI,QAAS,UAAS,UAAU,CAAC;AAAA,EACnC;AAGA,WAAS,aAAa;AACpB,QAAI,CAAC,WAAW,SAAS,WAAY;AACrC,kBAAc,IAAI,IAAI;AACtB,gBAAY;AACZ,QAAI,CAAC,SAAS,KAAK,IAAI,IAAI,gBAAgB,gBAAgB;AACzD,WAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC7B,eAAS,UAAU,CAAC;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,eAAe,MAAM;AACzB,QAAI,CAAC,SAAS,EAAG,YAAW;AAAA,EAC9B;AAEA,QAAM,kBAAkB,CAAC,SAAS,eAAe,WAAW,QAAQ;AAIpE,WAAS,UAAU;AACjB,QAAI,CAAC,QAAS;AACd,SAAK,QAAQ,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC/B;AAEA,iBAAe,WAAW,QAAoC;AAC5D,UAAM,WAAW,IAAI;AACrB,UAAM,WAAW,MAAM,QAAQ,GAAG,OAAO,WAAW;AAAA,MAClD,SAAS,EAAE,QAAQ,oBAAoB;AAAA,MACvC;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,uBAAuB,SAAS,MAAM,EAAE;AAC1E,QAAI,CAAC,SAAS,MAAM;AAElB,uBAAiB;AACjB,eAAS,UAAU,CAAC;AACpB;AAAA,IACF;AAEA,UAAM,SAAS,SAAS,KAAK,UAAU;AACvC,UAAM,UAAU,IAAI,YAAY;AAChC,QAAI,SAAS;AACb,QAAI,YAAY;AAEhB,QAAI;AACF,iBAAS;AACP,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,YAAI,KAAM;AACV,kBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,YAAI,UAAU,OAAO,QAAQ,IAAI;AACjC,eAAO,WAAW,GAAG;AACnB,gBAAM,OAAO,OAAO,MAAM,GAAG,OAAO,EAAE,QAAQ,OAAO,EAAE;AACvD,mBAAS,OAAO,MAAM,UAAU,CAAC;AACjC,cAAI,SAAS,IAAI;AACf,gBAAI,cAAc,SAAS;AACzB,gCAAkB;AAClB,+BAAiB;AACjB,uBAAS,UAAU,CAAC;AAAA,YACtB,WAAW,cAAc,UAAW,SAAQ;AAC5C,wBAAY;AAAA,UACd,WAAW,KAAK,WAAW,QAAQ,EAAG,aAAY,KAAK,MAAM,CAAC,EAAE,KAAK;AACrE,oBAAU,OAAO,QAAQ,IAAI;AAAA,QAC/B;AAAA,MACF;AAAA,IACF,UAAE;AACA,wBAAkB;AAClB,UAAI,IAAI,IAAI,WAAW,gBAAiB,iBAAgB;AAAA,UACnD,gBAAe;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,SAAS;AAElC,iBAAe,aAAa;AAC1B,WAAO,WAAW,CAAC,kBAAkB,CAAC,WAAW,GAAG;AAClD,oBAAc,IAAI,gBAAgB;AAClC,UAAI;AACF,cAAM,WAAW,YAAY,MAAM;AAAA,MACrC,QAAQ;AACN,YAAI,CAAC,QAAS;AACd,0BAAkB;AAAA,MACpB;AACA,UAAI,CAAC,WAAW,WAAW,KAAK,eAAgB;AAChD,UAAI,gBAAgB,gCAAgC;AAElD,yBAAiB;AACjB,iBAAS,UAAU,CAAC;AACpB;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QAAQ,CAAC,YACjB,WAAW,SAAS,KAAK,IAAI,MAAQ,KAAK,gBAAgB,GAAM,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAIA,WAAS,eAAe;AACtB,WAAO;AACP,IAAAA,MAAK,EAAE,MAAM,SAAS,CAAC;AACvB,IAAAA,MAAK,EAAE,MAAM,SAAS,MAAM,CAAC;AAC7B,SAAK,KAAK;AACV,QAAI,CAAC,eAAgB,MAAK,WAAW;AAAA,EACvC;AAEA,WAAS,iBAAiB;AACxB,WAAO;AACP,IAAAA,MAAK,EAAE,MAAM,QAAQ,CAAC;AAAA,EACxB;AAEA,WAAS,oBAAoB;AAC3B,QAAI,CAAC,SAAS,CAAC,SAAS;AACtB,aAAO;AACP,WAAK,KAAK;AACV,UAAI,CAAC,eAAgB,MAAK,WAAW;AACrC;AAAA,IACF;AACA,mBAAe;AACf,gBAAY,IAAI,gBAAgB;AAChC,UACG;AAAA,MACC,oBAAoB,QAAQ;AAAA,MAC5B,EAAE,MAAM,aAAa,QAAQ,UAAU,OAAO;AAAA,MAC9C,MACE,IAAI,QAAc,CAAC,YAAY;AAC7B,sBAAc;AACd,YAAI,QAAS,cAAa;AAAA,YACrB,SAAQ;AAAA,MACf,CAAC;AAAA,IACL,EACC,MAAM,MAAM;AAAA,IAEb,CAAC;AAAA,EACL;AAEA,WAAS,QAAQ;AACf,cAAU;AACV,cAAU,cAAc,YAAY,IAAI;AACxC,aAAS,iBAAiB,WAAW,YAAY;AACjD,mBAAe,iBAAiB,WAAW,OAAO;AAClD,QAAI,gBAAgB;AAClB,iBAAW,QAAQ,gBAAiB,gBAAe,iBAAiB,MAAM,UAAU;AAAA,IACtF;AACA,QAAI,OAAO,aAAa,aAAa;AACnC,eAAS,iBAAiB,oBAAoB,YAAY;AAAA,IAC5D;AACA,kBAAc,IAAI,IAAI;AACtB,sBAAkB;AAAA,EACpB;AAEA,WAAS,OAAO;AACd,cAAU;AACV,iBAAa,KAAK;AAClB,YAAQ;AACR,iBAAa,MAAM;AACnB,kBAAc;AACd,eAAW,MAAM;AACjB,gBAAY;AACZ,kBAAc;AACd,kBAAc;AACd,aAAS,oBAAoB,WAAW,YAAY;AACpD,aAAS,MAAM;AACf,cAAU;AACV,mBAAe,oBAAoB,WAAW,OAAO;AACrD,QAAI,gBAAgB;AAClB,iBAAW,QAAQ,gBAAiB,gBAAe,oBAAoB,MAAM,UAAU;AAAA,IACzF;AACA,QAAI,OAAO,aAAa,aAAa;AACnC,eAAS,oBAAoB,oBAAoB,YAAY;AAAA,IAC/D;AACA,WAAO;AAAA,EACT;AAIA,WAAS,QAAQ,OAA2B;AAC1C,UAAM,OAAO,MAAM;AACnB,QAAI,MAAM,WAAW,eAAe,KAAK,SAAS,UAAW,SAAQ;AAAA,EACvE;AAEA,MAAI,mBAAkC;AAGtC,QAAM,aAAa,CAAC,aAAuB;AACzC,QAAI,CAAC,SAAS,OAAO,OAAO,aAAa,YAAa,QAAO;AAC7D,QAAI;AACF,aAAO,IAAI,IAAI,SAAS,GAAG,EAAE,WAAW,SAAS;AAAA,IACnD,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAOA,WAAS,WAAW,OAAyD;AAC3E,YAAQ,UAAU,SAA8C;AAC9D,YAAM,WAAW,MAAM,MAAM,GAAG,IAAI;AACpC,YAAM,UAAU,WAAW,QAAQ,IAAI,SAAS,QAAQ,IAAI,mBAAmB,IAAI;AACnF,UAAI,YAAY,QAAQ,YAAY,kBAAkB;AACpD,cAAM,QAAQ,qBAAqB;AACnC,2BAAmB;AACnB,YAAI,CAAC,SAAS,SAAS,WAAY,SAAQ;AAAA,MAC7C;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAEA,WAAS,UAAU,UAAoD;AACrE,cAAU,IAAI,QAAQ;AACtB,aAAS,KAAK;AAGd,QAAI,UAAU,SAAS,EAAG,OAAM;AAEhC,WAAO,MAAM;AACX,gBAAU,OAAO,QAAQ;AACzB,UAAI,UAAU,SAAS,EAAG,MAAK;AAAA,IACjC;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,cAAc,OAAwB;AAAA,MACpC;AAAA,MACA,WAAW,iBAAiB,SAAS;AAAA,MACrC,WAAW;AAAA,IACb;AAAA,EACF;AACF;;;ACjpBA,mBAAkE;AAiB3D,SAAS,iBACd,UAA2D,CAAC,GACpC;AACxB,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,mBAAe,qBAAO,OAAO;AACnC,eAAa,UAAU;AAEvB,QAAM,aAAS;AAAA,IACb,MACE,YACA,mBAAmB;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,IAAI,UAAU,aAAa,QAAQ,SAAS,WAAW,OAAO,GAAG,IAAI;AAAA,MAC5E,kBAAkB,MAChB,aAAa,QAAQ,mBAAmB,MACvC,OAAO,aAAa,eAAe,SAAS,oBAAoB;AAAA,IACrE,CAAC;AAAA,IACH;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,OAAO,QAAQ,QAAI,uBAAsB,MAAM,OAAO,SAAS,CAAC;AAEvE,8BAAU,MAAM,OAAO,UAAU,QAAQ,GAAG,CAAC,MAAM,CAAC;AAEpD,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAY,0BAAY,CAAC,OAAe,OAAO,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC;AAAA,IACvE,iBAAa,0BAAY,MAAM,OAAO,YAAY,GAAG,CAAC,MAAM,CAAC;AAAA,IAC7D,cAAU,0BAAY,MAAM,OAAO,SAAS,GAAG,CAAC,MAAM,CAAC;AAAA,IACvD,cAAU,0BAAY,MAAM,OAAO,SAAS,GAAG,CAAC,MAAM,CAAC;AAAA,IACvD,aAAS,0BAAY,MAAM,OAAO,QAAQ,GAAG,CAAC,MAAM,CAAC;AAAA,EACvD;AACF;;;AFrEA,SAAS,eAAe,UAAwB;AAC9C,QAAM,YAAY,oBAAI,IAA2B;AACjD,MAAI;AACJ,MAAI,OAAO,SAAS;AAEpB,QAAM,SAAS,MAAM;AACnB,qBAAiB,SAAS,iBAAiB,UAAU,CAAC,UAAU;AAC9D,UAAI,UAAU,YAAY,SAAS,UAAU;AAC3C,mBAAW,YAAY,UAAU,IAAI,OAAO,KAAK,CAAC,EAAG,UAAS,CAAC,CAAC;AAAA,MAClE;AACA,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,iBAAiB,MAAc,SAAmB;AAChD,gBAAU,IAAI,OAAO,UAAU,IAAI,IAAI,KAAK,oBAAI,IAAI,GAAG,IAAI,OAAO,CAAC;AACnE,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB,MAAc,SAAmB;AACnD,gBAAU,IAAI,IAAI,GAAG,OAAO,OAAO;AACnC,UAAI,CAAC,GAAG,UAAU,OAAO,CAAC,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,GAAG;AAC1D,sBAAc,OAAO;AACrB,uBAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AASO,SAAS,yBAAyB,UAAqC,CAAC,GAAiB;AAC9F,QAAM,EAAE,WAAW,8BAAU,GAAG,KAAK,IAAI;AACzC,SAAO,mBAAmB;AAAA,IACxB,WAAW;AAAA,IACX,GAAG;AAAA,IACH,OAAO;AAAA,IACP,SAAS;AAAA,IACT,eAAe;AAAA,IACf,kBAAkB,MAAM,SAAS,iBAAiB;AAAA,IAClD,gBAAgB,eAAe,QAAQ;AAAA,EACzC,CAAC;AACH;AAGO,SAASC,kBACd,UAAiE,CAAC,GAC1C;AACxB,QAAM;AAAA,IACJ,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAGJ,QAAM,eAAW,sBAAO,QAAQ,KAAK;AACrC,WAAS,UAAU,QAAQ;AAE3B,QAAM,aAAS;AAAA,IACb,MACE,YACA,yBAAyB;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,IAAI,UAAU,SAAS,WAAW,WAAW,OAAO,GAAG,IAAI;AAAA,IACpE,CAAC;AAAA,IACH;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,iBAAuB,EAAE,OAAO,CAAC;AAC1C;AAYA,IAAM,OAAO,OACX,SACA,KACA,SAEA,QAAQ,KAAK;AAAA,EACX,QAAQ;AAAA,EACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,EAC9C,MAAM,KAAK,UAAU,IAAI;AAC3B,CAAC;AAGH,eAAsB,yBAAyB,SAAmD;AAChG,QAAM,QAAQ,QAAQ,WAAW,sBAAsB,QAAQ,OAAO,EAAE;AACxE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,WAAW,MAAM,KAAK,SAAS,GAAG,IAAI,wBAAwB;AAAA,IAClE,OAAO,QAAQ;AAAA,IACf,UAAU,QAAQ;AAAA,IAClB,YAAY,QAAQ;AAAA,EACtB,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,SAAU,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACtD,UAAM,IAAI,MAAM,OAAO,SAAS,kCAAkC,SAAS,MAAM,EAAE;AAAA,EACrF;AACF;AAGA,eAAsB,2BACpB,SACkB;AAClB,QAAM,QAAQ,QAAQ,WAAW,sBAAsB,QAAQ,OAAO,EAAE;AACxE,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,WAAW,MAAM,KAAK,SAAS,GAAG,IAAI,+BAA+B;AAAA,IACzE,OAAO,QAAQ;AAAA,EACjB,CAAC;AACD,MAAI,SAAS,WAAW,IAAK,QAAO;AACpC,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,oCAAoC,SAAS,MAAM,EAAE;AACvF,SAAO;AACT;","names":["useNotifications","import_react","post","useNotifications"]}