node-webpush 1.1.1 → 1.2.0

package/dist/index.es.js

@@ -1,331 +1,327 @@
-import m from "crypto";
-var b = /* @__PURE__ */ ((e) => (e.AES_GCM = "aesgcm", e.AES_128_GCM = "aes128gcm", e))(b || {}), R = /* @__PURE__ */ ((e) => (e.VERY_LOW = "very-low", e.LOW = "low", e.NORMAL = "normal", e.HIGH = "high", e))(R || {});
-const L = 2419200, N = 4096, k = 18, f = {
-  validate(e) {
-    return /^[A-Za-z0-9\-_]+$/.test(e);
-  },
-  toBuffer(e) {
-    return Buffer.from(e, "base64url");
-  },
-  toString(e) {
-    return (typeof e == "string" ? Buffer.from(e, "utf8") : Buffer.from(e)).toString("base64url");
-  },
-  toJSON(e) {
-    return this.toString(Buffer.from(JSON.stringify(e), "utf8"));
-  }
-}, _ = 720 * 60, M = 1440 * 60;
-function T(e) {
-  const t = /* @__PURE__ */ new Date();
-  return t.setSeconds(t.getSeconds() + e), Math.floor(t.getTime() / 1e3);
+import e from "crypto";
+//#region \0rolldown/runtime.js
+var t = Object.defineProperty, n = (e, n) => {
+	let r = {};
+	for (var i in e) t(r, i, {
+		get: e[i],
+		enumerable: !0
+	});
+	return n || t(r, Symbol.toStringTag, { value: "Module" }), r;
+}, r = /* @__PURE__ */ function(e) {
+	return e.AES_128_GCM = "aes128gcm", e;
+}({}), i = /* @__PURE__ */ function(e) {
+	return e.VERY_LOW = "very-low", e.LOW = "low", e.NORMAL = "normal", e.HIGH = "high", e;
+}({}), a = 2419200, o = 4096, s = 18, c = {
+	validate(e) {
+		return /^[A-Za-z0-9\-_]+$/.test(e);
+	},
+	toBuffer(e) {
+		return Buffer.from(e, "base64url");
+	},
+	toString(e) {
+		return (typeof e == "string" ? Buffer.from(e, "utf8") : Buffer.from(e)).toString("base64url");
+	},
+	toJSON(e) {
+		return this.toString(Buffer.from(JSON.stringify(e), "utf8"));
+	}
+}, l = /* @__PURE__ */ n({
+	GenerateHeaders: () => y,
+	GenerateKeys: () => m,
+	Validate: () => p
+}), u = 43200, d = 86400;
+function f(e) {
+	let t = /* @__PURE__ */ new Date();
+	return t.setSeconds(t.getSeconds() + e), Math.floor(t.getTime() / 1e3);
 }
-const E = {
-  subject(e) {
-    if (!e) throw new Error("No subject set in VAPID details.");
-    const t = typeof e == "string" ? new URL(e) : e;
-    if (!["https:", "mailto:"].includes(t.protocol))
-      throw new Error(`VAPID subject must be https: or mailto:. Got: ${t.toString()}`);
-    t.hostname === "localhost" && console.warn("VAPID subject points to localhost; some push services may reject this.");
-  },
-  publicKey(e) {
-    if (!e) throw new Error("No VAPID public key set.");
-    if (typeof e != "string" || !f.validate(e))
-      throw new Error('VAPID public key must be base64url without "=" padding.');
-    const t = f.toBuffer(e);
-    if (t.length !== 65 || t[0] !== 4)
-      throw new Error("VAPID public key must decode to 65-byte uncompressed P-256.");
-  },
-  privateKey(e) {
-    if (!e) throw new Error("No VAPID private key set.");
-    if (typeof e != "string" || !f.validate(e))
-      throw new Error('VAPID private key must be base64url without "=" padding.');
-    if (f.toBuffer(e).length !== 32) throw new Error("VAPID private key must decode to 32 bytes.");
-  },
-  expiration(e) {
-    if (!Number.isInteger(e)) throw new Error("VAPID expiration must be an integer.");
-    if (e < 0) throw new Error("VAPID expiration must be positive.");
-    const t = T(M);
-    if (e >= t) throw new Error("VAPID expiration exceeds 24 hours.");
-  },
-  audience(e) {
-    if (!e) throw new Error("No audience set for VAPID.");
-    const t = typeof e == "string" ? new URL(e) : e;
-    if (!t.origin || t.origin === "null")
-      throw new Error(`VAPID audience must be an origin. Got: ${t.toString()}`);
-  }
+var p = {
+	subject(e) {
+		if (!e) throw Error("No subject set in VAPID details.");
+		let t = typeof e == "string" ? new URL(e) : e;
+		if (!["https:", "mailto:"].includes(t.protocol)) throw Error(`VAPID subject must be https: or mailto:. Got: ${t.toString()}`);
+		t.hostname === "localhost" && console.warn("VAPID subject points to localhost; some push services may reject this.");
+	},
+	publicKey(e) {
+		if (!e) throw Error("No VAPID public key set.");
+		if (typeof e != "string" || !c.validate(e)) throw Error("VAPID public key must be base64url without \"=\" padding.");
+		let t = c.toBuffer(e);
+		if (t.length !== 65 || t[0] !== 4) throw Error("VAPID public key must decode to 65-byte uncompressed P-256.");
+	},
+	privateKey(e) {
+		if (!e) throw Error("No VAPID private key set.");
+		if (typeof e != "string" || !c.validate(e)) throw Error("VAPID private key must be base64url without \"=\" padding.");
+		if (c.toBuffer(e).length !== 32) throw Error("VAPID private key must decode to 32 bytes.");
+	},
+	expiration(e) {
+		if (!Number.isInteger(e)) throw Error("VAPID expiration must be an integer.");
+		if (e < 0) throw Error("VAPID expiration must be positive.");
+		if (e >= f(d)) throw Error("VAPID expiration exceeds 24 hours.");
+	},
+	audience(e) {
+		if (!e) throw Error("No audience set for VAPID.");
+		let t = typeof e == "string" ? new URL(e) : e;
+		if (!t.origin || t.origin === "null") throw Error(`VAPID audience must be an origin. Got: ${t.toString()}`);
+	}
 };
-function $() {
-  const e = m.createECDH("prime256v1");
-  e.generateKeys();
-  let t = e.getPublicKey(), r = e.getPrivateKey();
-  return r.length < 32 && (r = Buffer.concat([Buffer.alloc(32 - r.length, 0), r])), t.length < 65 && (t = Buffer.concat([Buffer.alloc(65 - t.length, 0), t])), { publicKey: f.toString(t), privateKey: f.toString(r) };
+function m() {
+	let t = e.createECDH("prime256v1");
+	t.generateKeys();
+	let n = t.getPublicKey(), r = t.getPrivateKey();
+	return r.length < 32 && (r = Buffer.concat([Buffer.alloc(32 - r.length, 0), r])), n.length < 65 && (n = Buffer.concat([Buffer.alloc(65 - n.length, 0), n])), {
+		publicKey: c.toString(n),
+		privateKey: c.toString(r)
+	};
 }
-function G(e) {
-  const t = f.toBuffer(e);
-  if (t.length !== 65 || t[0] !== 4) throw new Error("Invalid uncompressed P-256 public key.");
-  return { x: f.toString(t.subarray(1, 33)), y: f.toString(t.subarray(33, 65)) };
+function h(e) {
+	let t = c.toBuffer(e);
+	if (t.length !== 65 || t[0] !== 4) throw Error("Invalid uncompressed P-256 public key.");
+	return {
+		x: c.toString(t.subarray(1, 33)),
+		y: c.toString(t.subarray(33, 65))
+	};
 }
-function j(e) {
-  const t = f.toBuffer(e);
-  if (t.length !== 32) throw new Error("Invalid P-256 private key scalar.");
-  return f.toString(t);
-}
-function U(e, t = 32) {
-  let r = 0;
-  if (e[r++] !== 48) throw new Error("Invalid DER signature (expected SEQUENCE).");
-  let n = e[r++];
-  if (n & 128) {
-    const l = n & 127;
-    r += l;
-  }
-  if (e[r++] !== 2) throw new Error("Invalid DER signature (expected INTEGER r).");
-  const c = e[r++];
-  let o = e.subarray(r, r + c);
-  if (r += c, e[r++] !== 2) throw new Error("Invalid DER signature (expected INTEGER s).");
-  const i = e[r++];
-  let s = e.subarray(r, r + i);
-  if (o[0] === 0 && (o = o.subarray(1)), s[0] === 0 && (s = s.subarray(1)), o.length > t || s.length > t) throw new Error("Invalid DER signature size.");
-  const u = Buffer.concat([Buffer.alloc(t - o.length, 0), o]), d = Buffer.concat([Buffer.alloc(t - s.length, 0), s]);
-  return Buffer.concat([u, d]);
-}
-function O(e, t, r) {
-  const n = { typ: "JWT", alg: "ES256" }, c = f.toJSON(n), o = f.toJSON(e), i = `${c}.${o}`, { x: s, y: u } = G(r), d = j(t), l = m.createPrivateKey({
-    key: { kty: "EC", crv: "P-256", x: s, y: u, d },
-    format: "jwk"
-  }), y = m.sign("sha256", Buffer.from(i, "utf8"), {
-    key: l,
-    dsaEncoding: "der"
-  }), h = U(y, 32), g = f.toString(h);
-  return `${i}.${g}`;
-}
-function D(e) {
-  E.audience(e.audience), E.subject(e.subject), E.publicKey(e.publicKey), E.privateKey(e.privateKey);
-  const t = (typeof e.audience == "string" ? new URL(e.audience) : e.audience).origin, r = (typeof e.subject == "string" ? new URL(e.subject) : e.subject).toString(), n = e.expiration ?? T(_);
-  E.expiration(n);
-  const c = O({ aud: t, exp: n, sub: r }, e.privateKey, e.publicKey), o = new Headers();
-  if (e.contentEncoding === b.AES_128_GCM)
-    o.set("Authorization", `vapid t=${c}, k=${e.publicKey}`);
-  else if (e.contentEncoding === b.AES_GCM)
-    o.set("Authorization", `WebPush ${c}`), o.set("Crypto-Key", `p256ecdsa=${e.publicKey}`);
-  else
-    throw new Error(`Unsupported content encoding: ${e.contentEncoding}`);
-  return o;
-}
-const se = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
-  __proto__: null,
-  GenerateHeaders: D,
-  GenerateKeys: $,
-  Validate: E
-}, Symbol.toStringTag, { value: "Module" }));
-function V(e) {
-  const t = Buffer.alloc(2);
-  return t.writeUInt16BE(e, 0), t;
+function g(e) {
+	let t = c.toBuffer(e);
+	if (t.length !== 32) throw Error("Invalid P-256 private key scalar.");
+	return c.toString(t);
 }
-function H(e) {
-  const t = Buffer.alloc(4);
-  return t.writeUInt32BE(e >>> 0, 0), t;
+function _(e, t = 32) {
+	let n = 0;
+	if (e[n++] !== 48) throw Error("Invalid DER signature (expected SEQUENCE).");
+	let r = e[n++];
+	if (r & 128) {
+		let e = r & 127;
+		n += e;
+	}
+	if (e[n++] !== 2) throw Error("Invalid DER signature (expected INTEGER r).");
+	let i = e[n++], a = e.subarray(n, n + i);
+	if (n += i, e[n++] !== 2) throw Error("Invalid DER signature (expected INTEGER s).");
+	let o = e[n++], s = e.subarray(n, n + o);
+	if (a[0] === 0 && (a = a.subarray(1)), s[0] === 0 && (s = s.subarray(1)), a.length > t || s.length > t) throw Error("Invalid DER signature size.");
+	let c = Buffer.concat([Buffer.alloc(t - a.length, 0), a]), l = Buffer.concat([Buffer.alloc(t - s.length, 0), s]);
+	return Buffer.concat([c, l]);
 }
-function F(e, t) {
-  if (e.length !== t.length) throw new Error("xorBytes: length mismatch");
-  const r = Buffer.alloc(e.length);
-  for (let n = 0; n < e.length; n++) r[n] = e[n] ^ t[n];
-  return r;
+function v(t, n, r) {
+	let i = `${c.toJSON({
+		typ: "JWT",
+		alg: "ES256"
+	})}.${c.toJSON(t)}`, { x: a, y: o } = h(r), s = g(n), l = e.createPrivateKey({
+		key: {
+			kty: "EC",
+			crv: "P-256",
+			x: a,
+			y: o,
+			d: s
+		},
+		format: "jwk"
+	}), u = _(e.sign("sha256", Buffer.from(i, "utf8"), {
+		key: l,
+		dsaEncoding: "der"
+	}), 32);
+	return `${i}.${c.toString(u)}`;
 }
-function W(e) {
-  if (!Number.isSafeInteger(e) || e < 0) throw new Error("SEQ must be a non-negative safe integer");
-  const t = Buffer.alloc(12, 0), r = Math.floor(e / 4294967296), n = e >>> 0;
-  return t.writeUInt32BE(r >>> 0, 4), t.writeUInt32BE(n, 8), t;
+function y(e) {
+	p.audience(e.audience), p.subject(e.subject), p.publicKey(e.publicKey), p.privateKey(e.privateKey);
+	let t = (typeof e.audience == "string" ? new URL(e.audience) : e.audience).origin, n = (typeof e.subject == "string" ? new URL(e.subject) : e.subject).toString(), i = e.expiration ?? f(u);
+	p.expiration(i);
+	let a = v({
+		aud: t,
+		exp: i,
+		sub: n
+	}, e.privateKey, e.publicKey), o = new Headers();
+	if (e.contentEncoding !== r.AES_128_GCM) throw Error(`Unsupported content encoding: ${e.contentEncoding}`);
+	return o.set("Authorization", `vapid t=${a}, k=${e.publicKey}`), o;
 }
-function J(e) {
-  const { message: t, rs: r, allowMultipleRecords: n, finalRecordPadding: c } = e;
-  if (!Number.isInteger(r) || r < k)
-    throw new Error(`Invalid rs; must be an integer >= ${k}.`);
-  const o = r - 16;
-  if (o <= 1) throw new Error("Invalid rs (too small)");
-  const i = o - 1;
-  if (!n && t.length > i)
-    throw new Error(
-      `Payload too large for a single RFC8188 record: ${t.length} bytes. Max is ${i} bytes for rs=${r}.`
-    );
-  if (!Number.isInteger(c) || c < 0)
-    throw new Error("finalRecordPadding must be a non-negative integer");
-  const s = [];
-  let u = 0;
-  for (; u < t.length; ) {
-    const d = t.length - u, l = d <= i, y = l ? d : i, h = t.subarray(u, u + y);
-    u += y;
-    const g = Buffer.from([l ? 2 : 1]);
-    if (l)
-      s.push(Buffer.concat([h, g, Buffer.alloc(c, 0)]));
-    else {
-      const a = o - (h.length + 1);
-      s.push(Buffer.concat([h, g, Buffer.alloc(a, 0)]));
-    }
-  }
-  return t.length === 0 && s.push(Buffer.from([2])), s;
+//#endregion
+//#region src/utils/binary.ts
+function b(e) {
+	let t = Buffer.alloc(4);
+	return t.writeUInt32BE(e >>> 0, 0), t;
 }
-function z(e) {
-  const { cek: t, baseNonce: r, plaintextRecords: n } = e;
-  if (t.length !== 16) throw new Error("CEK must be 16 bytes");
-  if (r.length !== 12) throw new Error("baseNonce must be 12 bytes");
-  const c = [];
-  for (let o = 0; o < n.length; o++) {
-    const i = F(r, W(o)), s = m.createCipheriv("aes-128-gcm", t, i), u = Buffer.concat([s.update(n[o]), s.final()]);
-    c.push(Buffer.concat([u, s.getAuthTag()]));
-  }
-  return Buffer.concat(c);
+function x(e, t) {
+	if (e.length !== t.length) throw Error("xorBytes: length mismatch");
+	let n = Buffer.alloc(e.length);
+	for (let r = 0; r < e.length; r++) n[r] = e[r] ^ t[r];
+	return n;
 }
-function w(e, t) {
-  return m.createHmac("sha256", e).update(t).digest();
+function S(e) {
+	if (!Number.isSafeInteger(e) || e < 0) throw Error("SEQ must be a non-negative safe integer");
+	let t = Buffer.alloc(12, 0), n = Math.floor(e / 4294967296), r = e >>> 0;
+	return t.writeUInt32BE(n >>> 0, 4), t.writeUInt32BE(r, 8), t;
 }
-function x(e, t) {
-  if (!e || typeof e != "string") throw new Error("subscription.keys.p256dh must be a string");
-  if (!t || typeof t != "string") throw new Error("subscription.keys.auth must be a string");
-  const r = f.toBuffer(e);
-  if (r.length !== 65 || r[0] !== 4)
-    throw new Error("subscription.keys.p256dh must decode to a 65-byte uncompressed P-256 public key");
-  if (f.toBuffer(t).length < 16) throw new Error("subscription.keys.auth must decode to at least 16 bytes");
+//#endregion
+//#region src/crypto/rfc8188.ts
+function C(e) {
+	let { message: t, rs: n, allowMultipleRecords: r, finalRecordPadding: i } = e;
+	if (!Number.isInteger(n) || n < 18) throw Error("Invalid rs; must be an integer >= 18.");
+	let a = n - 16;
+	if (a <= 1) throw Error("Invalid rs (too small)");
+	let o = a - 1;
+	if (!r && t.length > o) throw Error(`Payload too large for a single RFC8188 record: ${t.length} bytes. Max is ${o} bytes for rs=${n}.`);
+	if (!Number.isInteger(i) || i < 0) throw Error("finalRecordPadding must be a non-negative integer");
+	let s = [], c = 0;
+	for (; c < t.length;) {
+		let e = t.length - c, n = e <= o, r = n ? e : o, l = t.subarray(c, c + r);
+		c += r;
+		let u = Buffer.from([n ? 2 : 1]);
+		if (n) s.push(Buffer.concat([
+			l,
+			u,
+			Buffer.alloc(i, 0)
+		]));
+		else {
+			let e = a - (l.length + 1);
+			s.push(Buffer.concat([
+				l,
+				u,
+				Buffer.alloc(e, 0)
+			]));
+		}
+	}
+	return t.length === 0 && s.push(Buffer.from([2])), s;
 }
-function X(e) {
-  x(e.p256dh, e.auth);
-  const t = f.toBuffer(e.p256dh), r = f.toBuffer(e.auth), n = m.createECDH("prime256v1");
-  n.generateKeys();
-  const c = n.getPublicKey(), o = n.computeSecret(t), i = m.randomBytes(16), s = w(r, o), u = Buffer.concat([Buffer.from("WebPush: info", "utf8"), Buffer.from([0]), t, c]), d = w(s, Buffer.concat([u, Buffer.from([1])])), l = w(i, d), y = Buffer.concat([Buffer.from("Content-Encoding: aes128gcm", "utf8"), Buffer.from([0])]), h = Buffer.concat([Buffer.from("Content-Encoding: nonce", "utf8"), Buffer.from([0])]), g = w(l, Buffer.concat([y, Buffer.from([1])])).subarray(0, 16), a = w(l, Buffer.concat([h, Buffer.from([1])])).subarray(0, 12), B = J({
-    message: e.payload,
-    rs: e.rs,
-    allowMultipleRecords: e.allowMultipleRecords,
-    finalRecordPadding: e.finalRecordPadding
-  }), P = z({ cek: g, baseNonce: a, plaintextRecords: B });
-  if (c.length !== 65) throw new Error("Sender public key must be 65 bytes");
-  return Buffer.concat([i, H(e.rs), Buffer.from([c.length]), c, P]);
+function w(t) {
+	let { cek: n, baseNonce: r, plaintextRecords: i } = t;
+	if (n.length !== 16) throw Error("CEK must be 16 bytes");
+	if (r.length !== 12) throw Error("baseNonce must be 12 bytes");
+	let a = [];
+	for (let t = 0; t < i.length; t++) {
+		let o = x(r, S(t)), s = e.createCipheriv("aes-128-gcm", n, o), c = Buffer.concat([s.update(i[t]), s.final()]);
+		a.push(Buffer.concat([c, s.getAuthTag()]));
+	}
+	return Buffer.concat(a);
 }
-function Q(e) {
-  x(e.p256dh, e.auth);
-  const t = f.toBuffer(e.p256dh), r = f.toBuffer(e.auth), n = m.createECDH("prime256v1");
-  n.generateKeys();
-  const c = n.getPublicKey(), o = n.computeSecret(t), i = m.randomBytes(16), s = w(r, o), u = Buffer.concat([Buffer.from("WebPush: info", "utf8"), Buffer.from([0]), t, c]), d = w(s, Buffer.concat([u, Buffer.from([1])])), l = w(i, d), y = Buffer.concat([Buffer.from("Content-Encoding: aesgcm", "utf8"), Buffer.from([0])]), h = Buffer.concat([Buffer.from("Content-Encoding: nonce", "utf8"), Buffer.from([0])]), g = w(l, Buffer.concat([y, Buffer.from([1])])).subarray(0, 16), a = w(l, Buffer.concat([h, Buffer.from([1])])).subarray(0, 12), B = 0, P = Buffer.concat([V(B), Buffer.alloc(B, 0), e.payload]), v = m.createCipheriv("aes-128-gcm", g, a), A = Buffer.concat([v.update(P), v.final()]), S = v.getAuthTag();
-  return { saltB64Url: f.toString(i), localPublicKey: c, ciphertext: Buffer.concat([A, S]) };
+//#endregion
+//#region src/crypto/webpush-encryption.ts
+function T(t, n) {
+	return e.createHmac("sha256", t).update(n).digest();
 }
-class Y extends Error {
-  constructor(t, r) {
-    super(t), this.response = r;
-  }
+function E(e, t) {
+	if (!e || typeof e != "string") throw Error("subscription.keys.p256dh must be a string");
+	if (!t || typeof t != "string") throw Error("subscription.keys.auth must be a string");
+	let n = c.toBuffer(e);
+	if (n.length !== 65 || n[0] !== 4) throw Error("subscription.keys.p256dh must decode to a 65-byte uncompressed P-256 public key");
+	if (c.toBuffer(t).length < 16) throw Error("subscription.keys.auth must decode to at least 16 bytes");
 }
-function q(e) {
-  if (!f.validate(e)) throw new Error("Topic contains invalid characters; must be URL-safe base64 chars.");
-  if (e.length > 32) throw new Error("Topic must be <= 32 characters.");
+function D(t) {
+	E(t.p256dh, t.auth);
+	let n = c.toBuffer(t.p256dh), r = c.toBuffer(t.auth), i = e.createECDH("prime256v1");
+	i.generateKeys();
+	let a = i.getPublicKey(), o = i.computeSecret(n), s = e.randomBytes(16), l = T(r, o), u = Buffer.concat([
+		Buffer.from("WebPush: info", "utf8"),
+		Buffer.from([0]),
+		n,
+		a
+	]), d = T(s, T(l, Buffer.concat([u, Buffer.from([1])]))), f = Buffer.concat([Buffer.from("Content-Encoding: aes128gcm", "utf8"), Buffer.from([0])]), p = Buffer.concat([Buffer.from("Content-Encoding: nonce", "utf8"), Buffer.from([0])]), m = w({
+		cek: T(d, Buffer.concat([f, Buffer.from([1])])).subarray(0, 16),
+		baseNonce: T(d, Buffer.concat([p, Buffer.from([1])])).subarray(0, 12),
+		plaintextRecords: C({
+			message: t.payload,
+			rs: t.rs,
+			allowMultipleRecords: t.allowMultipleRecords,
+			finalRecordPadding: t.finalRecordPadding
+		})
+	});
+	if (a.length !== 65) throw Error("Sender public key must be 65 bytes");
+	return Buffer.concat([
+		s,
+		b(t.rs),
+		Buffer.from([a.length]),
+		a,
+		m
+	]);
 }
-function Z(e) {
-  return e.startsWith("https://android.googleapis.com/gcm/send");
+//#endregion
+//#region src/webpush.ts
+var O = class extends Error {
+	constructor(e, t) {
+		super(e), this.response = t;
+	}
+};
+function k(e) {
+	if (!c.validate(e)) throw Error("Topic contains invalid characters; must be URL-safe base64 chars.");
+	if (e.length > 32) throw Error("Topic must be <= 32 characters.");
 }
-function ee(e) {
-  return e.startsWith("https://fcm.googleapis.com/fcm/send") || e.includes("fcm.googleapis.com");
+function A(e) {
+	return e.startsWith("https://android.googleapis.com/gcm/send");
 }
-function te(e) {
-  return new URL(e).origin;
+function j(e) {
+	return e.startsWith("https://fcm.googleapis.com/fcm/send") || e.includes("fcm.googleapis.com");
 }
-function re(e) {
-  if (!Object.values(b).includes(e)) throw new Error(`Unsupported content encoding: ${e}`);
+function M(e) {
+	return new URL(e).origin;
 }
-function ne(e) {
-  if (!Object.values(R).includes(e)) throw new Error(`Unsupported urgency: ${e}`);
+function N(e) {
+	if (!Object.values(r).includes(e)) throw Error(`Unsupported content encoding: ${e}`);
 }
-class ie {
-  constructor(t) {
-    if (this.config = t, E.subject(t.vapid.subject), E.privateKey(t.vapid.privateKey), E.publicKey(t.vapid.publicKey), t.gcm?.apiKey != null && t.gcm.apiKey.length === 0)
-      throw new Error("The GCM/FCM API Key should be a non-empty string, null, or undefined.");
-  }
-  /**
-   * Generate the request (endpoint + fetch init) to send a push message.
-   *
-   * - For `aes128gcm`, this produces an RFC8188 payload body (header block + encrypted records).
-   * - For Web Push, defaults to a single record per RFC8291; multi-record requires `allowMultipleRecords: true`.
-   */
-  generateRequest(t, r, n) {
-    if (!t?.endpoint || typeof t.endpoint != "string" || t.endpoint.length === 0)
-      throw new Error("You must pass a subscription with a valid endpoint URL.");
-    const c = n?.TTL ?? L;
-    if (!Number.isFinite(c) || c < 0) throw new Error("TTL must be a number >= 0.");
-    const o = n?.contentEncoding ?? b.AES_128_GCM;
-    re(o);
-    const i = n?.urgency ?? R.NORMAL;
-    ne(i);
-    const s = n?.topic;
-    s && q(s);
-    const u = n?.allowMultipleRecords ?? !1, d = n?.rs ?? N;
-    if (!Number.isInteger(d) || d < k) throw new Error(`rs must be an integer >= ${k}.`);
-    const l = n?.finalRecordPadding ?? 0, y = n?.headers ?? {}, h = n?.gcmAPIKey ?? this.config.gcm?.apiKey ?? null, g = n?.vapidDetails === void 0 ? this.config.vapid : n.vapidDetails, a = {
-      ...y,
-      // Keep protocol-critical defaults authoritative even when custom headers are supplied.
-      TTL: String(c),
-      Urgency: i
-    };
-    s && (a.Topic = s);
-    let B;
-    if (r != null && r !== "") {
-      if (!t.keys?.p256dh || !t.keys?.auth)
-        throw new Error("To send a payload, the subscription must include 'keys.p256dh' and 'keys.auth'.");
-      const I = Buffer.isBuffer(r) ? r : r instanceof Uint8Array ? Buffer.from(r) : Buffer.from(r, "utf8");
-      if (a["Content-Type"] = "application/octet-stream", o === b.AES_128_GCM) {
-        const p = X({
-          p256dh: t.keys.p256dh,
-          auth: t.keys.auth,
-          payload: I,
-          rs: d,
-          allowMultipleRecords: u,
-          finalRecordPadding: l
-        });
-        B = p, a["Content-Encoding"] = b.AES_128_GCM, a["Content-Length"] = String(p.length);
-      } else {
-        const p = Q({
-          p256dh: t.keys.p256dh,
-          auth: t.keys.auth,
-          payload: I
-        });
-        B = p.ciphertext, a["Content-Encoding"] = b.AES_GCM, a["Content-Length"] = String(p.ciphertext.length), a.Encryption = `salt=${p.saltB64Url}`, a["Crypto-Key"] = `dh=${f.toString(p.localPublicKey)}`;
-      }
-    } else
-      a["Content-Length"] = "0";
-    const v = t.endpoint, A = Z(v), S = ee(v);
-    if (A)
-      h ? a.Authorization = `key=${h}` : console.warn("GCM endpoint detected but no GCM API key provided.");
-    else if (g) {
-      const I = te(v), p = D({
-        audience: I,
-        subject: g.subject,
-        publicKey: g.publicKey,
-        privateKey: g.privateKey,
-        contentEncoding: o
-      }), C = p.get("Authorization");
-      C && (a.Authorization = C);
-      const K = p.get("Crypto-Key");
-      K && o === b.AES_GCM && (a["Crypto-Key"] = a["Crypto-Key"] ? `${a["Crypto-Key"]}; ${K}` : K);
-    } else S && h && (a.Authorization = `key=${h}`);
-    return { endpoint: v, init: {
-      method: "POST",
-      headers: a,
-      body: B
-    } };
-  }
-  /**
-   * Method to send notification to subscribed device
-   * @param subscription
-   * @param payload
-   * @param options
-   */
-  async notify(t, r, n) {
-    const { endpoint: c, init: o } = this.generateRequest(t, r, n), i = await fetch(c, o);
-    if (!i.ok && n?.throwOnInvalidResponse) throw new Y("Received unexpected response code", i);
-    return i;
-  }
+function P(e) {
+	if (!Object.values(i).includes(e)) throw Error(`Unsupported urgency: ${e}`);
 }
-export {
-  N as DEFAULT_RS,
-  L as DEFAULT_TTL,
-  k as MIN_RS,
-  b as SupportedContentEncoding,
-  R as SupportedUrgency,
-  se as VAPID,
-  ie as WebPush,
-  Y as WebPushError
+var F = class {
+	constructor(e) {
+		if (this.config = e, p.subject(e.vapid.subject), p.privateKey(e.vapid.privateKey), p.publicKey(e.vapid.publicKey), e.gcm?.apiKey != null && e.gcm.apiKey.length === 0) throw Error("The GCM/FCM API Key should be a non-empty string, null, or undefined.");
+		if (e.fetch != null && typeof e.fetch != "function") throw Error("config.fetch must be a function.");
+	}
+	generateRequest(e, t, n) {
+		if (!e?.endpoint || typeof e.endpoint != "string" || e.endpoint.length === 0) throw Error("You must pass a subscription with a valid endpoint URL.");
+		let a = n?.TTL ?? 2419200;
+		if (!Number.isFinite(a) || a < 0) throw Error("TTL must be a number >= 0.");
+		let o = n?.contentEncoding ?? r.AES_128_GCM;
+		N(o);
+		let s = n?.urgency ?? i.NORMAL;
+		P(s);
+		let c = n?.topic;
+		c && k(c);
+		let l = n?.allowMultipleRecords ?? !1, u = n?.rs ?? 4096;
+		if (!Number.isInteger(u) || u < 18) throw Error("rs must be an integer >= 18.");
+		let d = n?.finalRecordPadding ?? 0, f = n?.headers ?? {}, p = n?.gcmAPIKey ?? this.config.gcm?.apiKey ?? null, m = n?.vapidDetails === void 0 ? this.config.vapid : n.vapidDetails, h = {
+			...f,
+			TTL: String(a),
+			Urgency: s
+		};
+		c && (h.Topic = c);
+		let g;
+		if (t != null && t !== "") {
+			if (!e.keys?.p256dh || !e.keys?.auth) throw Error("To send a payload, the subscription must include 'keys.p256dh' and 'keys.auth'.");
+			let n = Buffer.isBuffer(t) ? t : t instanceof Uint8Array ? Buffer.from(t) : Buffer.from(t, "utf8");
+			h["Content-Type"] = "application/octet-stream";
+			let i = D({
+				p256dh: e.keys.p256dh,
+				auth: e.keys.auth,
+				payload: n,
+				rs: u,
+				allowMultipleRecords: l,
+				finalRecordPadding: d
+			});
+			g = i, h["Content-Encoding"] = r.AES_128_GCM, h["Content-Length"] = String(i.length);
+		} else h["Content-Length"] = "0";
+		let _ = e.endpoint, v = A(_), b = j(_);
+		if (v) p ? h.Authorization = `key=${p}` : console.warn("GCM endpoint detected but no GCM API key provided.");
+		else if (m) {
+			let e = y({
+				audience: M(_),
+				subject: m.subject,
+				publicKey: m.publicKey,
+				privateKey: m.privateKey,
+				contentEncoding: o
+			}).get("Authorization");
+			e && (h.Authorization = e);
+		} else b && p && (h.Authorization = `key=${p}`);
+		return {
+			endpoint: _,
+			init: {
+				method: "POST",
+				headers: h,
+				body: g
+			}
+		};
+	}
+	async notify(e, t, n) {
+		let { endpoint: r, init: i } = this.generateRequest(e, t, n), a = await (n?.fetch ?? this.config.fetch ?? fetch)(r, i);
+		if (!a.ok && n?.throwOnInvalidResponse) throw new O("Received unexpected response code", a);
+		return a;
+	}
 };
-//# sourceMappingURL=index.es.js.map
+//#endregion
+export { o as DEFAULT_RS, a as DEFAULT_TTL, s as MIN_RS, r as SupportedContentEncoding, i as SupportedUrgency, l as VAPID, F as WebPush, O as WebPushError };
+
+//# sourceMappingURL=index.es.js.map