relayclient

type Client ¶

type Client struct {
	BaseURL    string // relay origin, e.g. https://relay.lph.id.vn
	Credential string // bearer access credential, daemon_id-bound (from pairing/consume)
	DaemonID   string // this daemon's id, sent in register
	HTTP       *http.Client
}

Client submits E2E alert envelopes (and, later, Live Activity updates) to the publisher APNs relay over its §3 HTTPS API. It carries the daemon's bearer credential and maps relay responses to a retry-classifiable SubmitResult.

This is the daemon counterpart to the relay server (agent/internal/apnsrelay). It is intentionally transport-only: it does not know the alert plaintext's origin or the device registry — the caller (eventually fireAPNsForHook) hands it built envelopes. All identifiers travel in request bodies, never the URL path (the audit log writes r.URL.Path verbatim).

func New(baseURL, credential, daemonID string) *Client

func (c *Client) Register(ctx context.Context, installationID, deviceToken string, e2ePubKey []byte, keyID, laToken string, env apns.Env) (apns.Env, error)

func (c *Client) SubmitActivities(ctx context.Context, installationID, laToken, mode string, u apns.LiveActivityUpdate) SubmitResult

func (c *Client) SubmitAlerts(ctx context.Context, installationID, collapseHint string, expiresAt int64, envelopes []hpke.Envelope) SubmitResult

type EnvelopeContext ¶

type EnvelopeContext struct {
	KeyID     string
	EventID   string
	Sequence  uint64
	CreatedAt int64 // unix seconds, sender clock (informational)
	ExpiresAt int64 // unix seconds; authoritative TTL is re-stamped by the relay
	Silent    bool  // relay omits aps.sound without learning encrypted alert content
}

EnvelopeContext is the per-message binding an envelope is sealed against. The receiver reconstructs the AAD from these fields (plus installationID) and the AEAD rejects any mismatch — so a ciphertext sealed for one event/sequence/ expiry cannot be replayed against another.

type SubmitResult ¶

type SubmitResult struct {
	Status     SubmitStatus
	RetryAfter time.Duration // meaningful only for SubmitRetryAfter
	RequestID  string        // relay-assigned; empty on hard failures before accept
	// Err is the underlying cause for SubmitRejected and SubmitRetryAfter
	// (network/HTTP errors); nil for SubmitAccepted/SubmitDeduplicated.
	Err error
}

SubmitResult is the outcome of a SubmitAlerts/SubmitActivities call.

type SubmitStatus ¶

type SubmitStatus int

SubmitStatus is the retry classification of a relay submission (contract §15). It replaces the plain-error send seam so the daemon can distinguish retryable backpressure from permanent rejection.

const (
	// SubmitAccepted: the relay enqueued the envelopes for delivery.
	SubmitAccepted SubmitStatus = iota
	// SubmitDeduplicated: every envelope was a duplicate of one already queued
	// (collapse/idempotency hit); nothing new was sent. Not an error.
	SubmitDeduplicated
	// SubmitRetryAfter: transient — the relay is applying admission control
	// (429), had a network/5xx blip, or asked the client to back off. Retry after
	// RetryAfter with jitter.
	SubmitRetryAfter
	// SubmitRejected: permanent — 401/403/409/400 or an unrecoverable payload
	// problem. Do not retry without a change (re-pair, fix env, rotate key).
	SubmitRejected
)

func (s SubmitStatus) String() string