Something went wrong. Try again.
Monorepo for Aesthetic.Computer aesthetic.computer
Something went wrong. Try again.
JavaScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443// push, 26.06.11// Vendor-free push delivery for aesthetic.computer. Replaces Firebase Cloud// Messaging with two open channels://// 1. Standard Web Push — RFC 8030 (protocol), RFC 8291 (aes128gcm payload// encryption), RFC 8292 (VAPID) — for browsers and installed PWAs,// including iOS home-screen PWAs (16.4+).// 2. Direct APNs over HTTP/2 with ES256 token auth — for the native iOS// app's WKWebView wrapper, which cannot use Web Push.//// Zero dependencies: node:crypto + node:http2 + global fetch only, so this// module runs unchanged on lith, the session-server droplet, and nanos// without touching any package.json.//// Device documents live in the Mongo `push-tokens` collection:// { user, deviceId, label, kind: "webpush"|"apns", platform, token,// subscription: { endpoint, keys: { p256dh, auth } } | null,// topics: ["scream", "mood", ...], updatedAt }// Legacy FCM-era docs (no `kind` field) are ignored by every query here.//// Env: VAPID_PUBLIC_KEY, VAPID_PRIVATE_KEY, VAPID_SUBJECT (web push)// APNS_TEAM_ID, APNS_KEY_ID, APNS_KEY (base64 .p8), APNS_BUNDLE_ID (apns)
import crypto from "node:crypto";import http2 from "node:http2";
const PUSH_COLLECTION = "push-tokens";const ICON = "https://aesthetic.computer/api/logo.png";const SEND_CONCURRENCY = 16;
const b64u = (buf) => Buffer.from(buf).toString("base64url");const fromB64u = (s) => Buffer.from(s, "base64url");
// 🔌 Configuration checks — senders no-op gracefully when keys are absent// (e.g. local dev without the vault).
export function webPushConfigured() { return !!(process.env.VAPID_PUBLIC_KEY && process.env.VAPID_PRIVATE_KEY);}
export function apnsConfigured() { return !!( process.env.APNS_TEAM_ID && process.env.APNS_KEY_ID && process.env.APNS_KEY );}
// 🕸️ Web Push
function vapidPrivateKey() { const pub = fromB64u(process.env.VAPID_PUBLIC_KEY); // 65B: 0x04 || x || y return crypto.createPrivateKey({ key: { kty: "EC", crv: "P-256", x: b64u(pub.subarray(1, 33)), y: b64u(pub.subarray(33, 65)), d: process.env.VAPID_PRIVATE_KEY, }, format: "jwk", });}
const vapidJwtCache = {}; // audience → { token, exp }
function vapidJWT(audience) { const now = Math.floor(Date.now() / 1000); const cached = vapidJwtCache[audience]; if (cached && cached.exp - now > 600) return cached.token; const header = b64u(JSON.stringify({ typ: "JWT", alg: "ES256" })); const exp = now + 12 * 3600; const claims = b64u( JSON.stringify({ aud: audience, exp, sub: process.env.VAPID_SUBJECT || "mailto:mail@aesthetic.computer", }), ); const unsigned = header + "." + claims; const sig = crypto.sign("sha256", Buffer.from(unsigned), { key: vapidPrivateKey(), dsaEncoding: "ieee-p1363", }); const token = unsigned + "." + b64u(sig); vapidJwtCache[audience] = { token, exp }; return token;}
// Encrypt a payload for one subscription per RFC 8291 (aes128gcm).// `testVector` injects { asJwk, salt } so the RFC's Appendix A vector can// verify this implementation byte-for-byte — never used in production.export function encryptWebPush(plaintext, p256dh, auth, testVector) { const uaPublic = fromB64u(p256dh); // user agent's 65-byte P-256 point const authSecret = fromB64u(auth); // 16-byte shared auth secret
let asPrivateKey, asPublicRaw; if (testVector?.asJwk) { asPrivateKey = crypto.createPrivateKey({ key: testVector.asJwk, format: "jwk", }); asPublicRaw = Buffer.concat([ Buffer.from([4]), fromB64u(testVector.asJwk.x), fromB64u(testVector.asJwk.y), ]); } else { const pair = crypto.generateKeyPairSync("ec", { namedCurve: "prime256v1", }); asPrivateKey = pair.privateKey; const jwk = pair.publicKey.export({ format: "jwk" }); asPublicRaw = Buffer.concat([ Buffer.from([4]), fromB64u(jwk.x), fromB64u(jwk.y), ]); }
const uaPublicKey = crypto.createPublicKey({ key: { kty: "EC", crv: "P-256", x: b64u(uaPublic.subarray(1, 33)), y: b64u(uaPublic.subarray(33, 65)), }, format: "jwk", });
const ecdhSecret = crypto.diffieHellman({ privateKey: asPrivateKey, publicKey: uaPublicKey, });
const keyInfo = Buffer.concat([ Buffer.from("WebPush: info\0"), uaPublic, asPublicRaw, ]); const ikm = Buffer.from( crypto.hkdfSync("sha256", ecdhSecret, authSecret, keyInfo, 32), ); const salt = testVector?.salt ?? crypto.randomBytes(16); const cek = Buffer.from( crypto.hkdfSync( "sha256", ikm, salt, Buffer.from("Content-Encoding: aes128gcm\0"), 16, ), ); const nonce = Buffer.from( crypto.hkdfSync( "sha256", ikm, salt, Buffer.from("Content-Encoding: nonce\0"), 12, ), );
// Single record: plaintext || 0x02 delimiter (last record marker). const record = Buffer.concat([Buffer.from(plaintext), Buffer.from([2])]); const cipher = crypto.createCipheriv("aes-128-gcm", cek, nonce); const ciphertext = Buffer.concat([ cipher.update(record), cipher.final(), cipher.getAuthTag(), ]);
// Body: salt(16) || record-size(4) || keyid-len(1) || as-public(65) || ct const header = Buffer.alloc(21); salt.copy(header, 0); header.writeUInt32BE(4096, 16); header.writeUInt8(65, 20); return Buffer.concat([header, asPublicRaw, ciphertext]);}
async function sendWebPush(subscription, payload, { ttl = 60, urgent } = {}) { const endpoint = subscription?.endpoint; const keys = subscription?.keys; if (!endpoint || !keys?.p256dh || !keys?.auth) { return { ok: false, gone: true, detail: "malformed subscription" }; } try { const body = encryptWebPush(payload, keys.p256dh, keys.auth); const jwt = vapidJWT(new URL(endpoint).origin); const res = await fetch(endpoint, { method: "POST", headers: { "Content-Encoding": "aes128gcm", "Content-Type": "application/octet-stream", TTL: String(ttl), Urgency: urgent ? "high" : "normal", Authorization: `vapid t=${jwt}, k=${process.env.VAPID_PUBLIC_KEY}`, }, body, }); if (res.status >= 200 && res.status < 300) return { ok: true }; return { ok: false, gone: res.status === 404 || res.status === 410, status: res.status, detail: (await res.text().catch(() => "")).slice(0, 200), }; } catch (err) { return { ok: false, gone: false, detail: err?.message || String(err) }; }}
// 🍎 APNs (direct, token-based ES256 auth — no Firebase relay)
let apnsJwtCache = null; // { token, iat }
function apnsKey() { const raw = process.env.APNS_KEY || ""; // Accept either a literal PEM or base64-of-the-.p8-file. const pem = raw.includes("-----BEGIN") ? raw.replace(/\\n/g, "\n") : Buffer.from(raw, "base64").toString("utf8"); return crypto.createPrivateKey(pem);}
function apnsJWT() { const now = Math.floor(Date.now() / 1000); // APNs rejects tokens older than 1h and refreshes faster than 20min; // re-sign every ~50 minutes. if (apnsJwtCache && now - apnsJwtCache.iat < 3000) return apnsJwtCache.token; const header = b64u( JSON.stringify({ alg: "ES256", kid: process.env.APNS_KEY_ID }), ); const claims = b64u(JSON.stringify({ iss: process.env.APNS_TEAM_ID, iat: now })); const unsigned = header + "." + claims; const sig = crypto.sign("sha256", Buffer.from(unsigned), { key: apnsKey(), dsaEncoding: "ieee-p1363", }); apnsJwtCache = { token: unsigned + "." + b64u(sig), iat: now }; return apnsJwtCache.token;}
const APNS_HOST = process.env.APNS_HOST || "https://api.push.apple.com";
function apnsRequest(session, deviceToken, payload, headers) { return new Promise((resolve) => { const req = session.request({ ":method": "POST", ":path": `/3/device/${deviceToken}`, "content-type": "application/json", ...headers, }); let status = 0; const chunks = []; req.on("response", (h) => (status = h[":status"])); req.on("data", (c) => chunks.push(c)); req.on("end", () => { let reason; try { reason = JSON.parse(Buffer.concat(chunks).toString()).reason; } catch {} resolve({ ok: status === 200, gone: status === 410 || reason === "BadDeviceToken" || reason === "Unregistered" || reason === "DeviceTokenNotForTopic", status, detail: reason, }); }); req.on("error", (err) => resolve({ ok: false, gone: false, detail: err?.message }), ); // Stream closed without a response (e.g. session timeout) — don't hang // the batch; double-resolve after a normal "end" is a harmless no-op. req.on("close", () => resolve({ ok: false, gone: false, status, detail: "stream closed" }), ); req.setTimeout(10_000, () => req.close()); req.end(payload); });}
// Send to many APNs tokens over a single HTTP/2 session.async function sendAPNsBatch(tokens, note) { if (!apnsConfigured() || tokens.length === 0) { return tokens.map(() => ({ ok: false, detail: "apns not configured" })); } const aps = { alert: { title: note.title, body: note.body }, sound: "default", "mutable-content": 1, }; if (note.urgent) aps["interruption-level"] = "time-sensitive"; const payload = JSON.stringify({ aps, ...(note.data || {}) }); const headers = { authorization: `bearer ${apnsJWT()}`, "apns-topic": process.env.APNS_BUNDLE_ID || "aesthetic.computer", "apns-push-type": "alert", "apns-priority": "10", "apns-expiration": "0", };
return new Promise((resolve) => { const session = http2.connect(APNS_HOST); session.on("error", (err) => { resolve(tokens.map(() => ({ ok: false, detail: err?.message }))); }); session.once("connect", async () => { const results = await Promise.all( tokens.map((t) => apnsRequest(session, t, payload, headers)), ); session.close(); resolve(results); }); session.setTimeout(15_000, () => session.close()); });}
// 📦 Notification shape// note = { title, body, icon?, image?, data? (flat string map, e.g. { piece }),// urgent?, ttl? }// `icon` is the small badge the OS draws beside the text. It defaults to the// aesthetic.computer mark, but a sender with its own face — sotce.net's// cookie — passes one and keeps it.
function webPayload(note) { return JSON.stringify({ title: note.title, body: note.body, icon: note.icon || ICON, image: note.image, data: note.data || {}, });}
async function pool(items, limit, work) { const results = new Array(items.length); let i = 0; async function lane() { while (i < items.length) { const idx = i++; results[idx] = await work(items[idx], idx); } } await Promise.all( Array.from({ length: Math.min(limit, items.length) }, lane), ); return results;}
// 🚚 Fan-out to a list of push-token documents, pruning dead ones.export async function sendToDevices(db, docs, note, log = console.log) { const webDocs = docs.filter( (d) => d.kind === "webpush" && d.subscription?.endpoint, ); const apnsDocs = docs.filter((d) => d.kind === "apns" && d.token);
const summary = { attempted: webDocs.length + apnsDocs.length, succeeded: 0, failed: 0, pruned: 0, }; if (summary.attempted === 0) return summary;
const goneIds = []; const payload = webPayload(note);
const webResults = webPushConfigured() ? await pool(webDocs, SEND_CONCURRENCY, (doc) => sendWebPush(doc.subscription, payload, { ttl: note.ttl ?? 60, urgent: note.urgent, }), ) : webDocs.map(() => ({ ok: false, detail: "vapid not configured" }));
const apnsResults = await sendAPNsBatch( apnsDocs.map((d) => d.token), note, );
[...webResults, ...apnsResults].forEach((res, i) => { const doc = i < webResults.length ? webDocs[i] : apnsDocs[i - webResults.length]; if (res.ok) { summary.succeeded++; } else { summary.failed++; if (res.gone) goneIds.push(doc._id); else if (res.detail) { log(`🔔 push failed (${doc.kind} ${doc.label || doc.deviceId || ""}):`, res.status || "", res.detail); } } });
if (goneIds.length && db) { await db .collection(PUSH_COLLECTION) .deleteMany({ _id: { $in: goneIds } }) .then(() => { summary.pruned = goneIds.length; log(`🧹 Pruned ${goneIds.length} dead push registrations.`); }) .catch((err) => log("🔴 push prune failed:", err?.message)); }
return summary;}
// 📣 Broadcast to every device subscribed to a topic ("scream", "mood",// "chat-system", ...).export async function broadcastToTopic(db, topic, note, log = console.log) { const docs = await db .collection(PUSH_COLLECTION) .find({ topics: topic, kind: { $in: ["webpush", "apns"] } }) .toArray(); const summary = await sendToDevices(db, docs, note, log); log(`🔔 "${topic}" broadcast:`, JSON.stringify(summary)); return summary;}
// 🎯 Send to one user's devices — all of them, or a single device addressed// by deviceId (exact) or label (case-insensitive substring).export async function sendToUser(db, userSub, note, { device } = {}, log = console.log) { let docs = await db .collection(PUSH_COLLECTION) .find({ user: userSub, kind: { $in: ["webpush", "apns"] } }) .toArray(); if (device) { const needle = String(device).toLowerCase(); docs = docs.filter( (d) => d.deviceId === device || (d.label || "").toLowerCase().includes(needle), ); } return sendToDevices(db, docs, note, log);}