@aigne/aos 0.2.0-beta

package/dist/http/csrf.cjs

@@ -0,0 +1,50 @@
+
+//#region src/http/csrf.ts
+/**
+* Resolve the service's own origin (scheme://host[:port]) from a request.
+* Node: trust `x-forwarded-host` (+ `x-forwarded-proto`) when present, else
+* the `Host` header. CF: the request URL already carries the real origin.
+*/
+function resolveSelfOrigin(request) {
+	const url = (() => {
+		try {
+			return new URL(request.url);
+		} catch {
+			return null;
+		}
+	})();
+	const host = request.headers.get("x-forwarded-host") || request.headers.get("host") || url?.host;
+	if (!host) return null;
+	return `${request.headers.get("x-forwarded-proto") || url?.protocol.replace(/:$/, "") || "https"}://${host}`;
+}
+/**
+* Decide whether a cookie-authed mutating request must be rejected for CSRF.
+* Returns a reason string when it should be rejected, or null when allowed.
+*
+* Caller passes `isMutating` (the edge's best knowledge — for a wire `exec`
+* the edge treats it as potentially-mutating; reads/list/stat/search are not
+* routed here). The function itself only gates cookie-authed callers.
+*/
+function csrfRejection(request, caller, isMutating) {
+	if (!isMutating) return null;
+	if (caller?.authSource !== "cookie") return null;
+	const origin = request.headers.get("origin");
+	if (!origin) return "missing Origin header on a cookie-authenticated mutating request (use Authorization: Bearer for non-browser callers)";
+	const self = resolveSelfOrigin(request);
+	if (!self) return "could not resolve service origin to validate Origin header";
+	if (normalizeOrigin(origin) !== normalizeOrigin(self)) return `cross-origin mutating request rejected (Origin '${origin}' != '${self}')`;
+	return null;
+}
+/** Exported for reuse by the Node WS Upgrade CSRF check (server.ts). */
+function normalizeOrigin(origin) {
+	try {
+		const u = new URL(origin);
+		return `${u.protocol}//${u.host}`.toLowerCase();
+	} catch {
+		return origin.replace(/\/+$/, "").toLowerCase();
+	}
+}
+
+//#endregion
+exports.csrfRejection = csrfRejection;
+exports.normalizeOrigin = normalizeOrigin;

package/dist/http/csrf.d.cts

@@ -0,0 +1,8 @@
+import { CallerInfo } from "@aigne/afs";
+
+//#region src/http/csrf.d.ts
+/** Exported for reuse by the Node WS Upgrade CSRF check (server.ts). */
+declare function normalizeOrigin(origin: string): string;
+//#endregion
+export { normalizeOrigin };
+//# sourceMappingURL=csrf.d.cts.map

package/dist/http/csrf.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.cts","names":[],"sources":["../../src/http/csrf.ts"],"mappings":";;;;iBA+EgB,eAAA,CAAgB,MAAA"}

package/dist/http/csrf.d.mts

@@ -0,0 +1,8 @@
+import { CallerInfo } from "@aigne/afs";
+
+//#region src/http/csrf.d.ts
+/** Exported for reuse by the Node WS Upgrade CSRF check (server.ts). */
+declare function normalizeOrigin(origin: string): string;
+//#endregion
+export { normalizeOrigin };
+//# sourceMappingURL=csrf.d.mts.map

package/dist/http/csrf.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.d.mts","names":[],"sources":["../../src/http/csrf.ts"],"mappings":";;;;iBA+EgB,eAAA,CAAgB,MAAA"}

package/dist/http/csrf.mjs

@@ -0,0 +1,49 @@
+//#region src/http/csrf.ts
+/**
+* Resolve the service's own origin (scheme://host[:port]) from a request.
+* Node: trust `x-forwarded-host` (+ `x-forwarded-proto`) when present, else
+* the `Host` header. CF: the request URL already carries the real origin.
+*/
+function resolveSelfOrigin(request) {
+	const url = (() => {
+		try {
+			return new URL(request.url);
+		} catch {
+			return null;
+		}
+	})();
+	const host = request.headers.get("x-forwarded-host") || request.headers.get("host") || url?.host;
+	if (!host) return null;
+	return `${request.headers.get("x-forwarded-proto") || url?.protocol.replace(/:$/, "") || "https"}://${host}`;
+}
+/**
+* Decide whether a cookie-authed mutating request must be rejected for CSRF.
+* Returns a reason string when it should be rejected, or null when allowed.
+*
+* Caller passes `isMutating` (the edge's best knowledge — for a wire `exec`
+* the edge treats it as potentially-mutating; reads/list/stat/search are not
+* routed here). The function itself only gates cookie-authed callers.
+*/
+function csrfRejection(request, caller, isMutating) {
+	if (!isMutating) return null;
+	if (caller?.authSource !== "cookie") return null;
+	const origin = request.headers.get("origin");
+	if (!origin) return "missing Origin header on a cookie-authenticated mutating request (use Authorization: Bearer for non-browser callers)";
+	const self = resolveSelfOrigin(request);
+	if (!self) return "could not resolve service origin to validate Origin header";
+	if (normalizeOrigin(origin) !== normalizeOrigin(self)) return `cross-origin mutating request rejected (Origin '${origin}' != '${self}')`;
+	return null;
+}
+/** Exported for reuse by the Node WS Upgrade CSRF check (server.ts). */
+function normalizeOrigin(origin) {
+	try {
+		const u = new URL(origin);
+		return `${u.protocol}//${u.host}`.toLowerCase();
+	} catch {
+		return origin.replace(/\/+$/, "").toLowerCase();
+	}
+}
+
+//#endregion
+export { csrfRejection, normalizeOrigin };
+//# sourceMappingURL=csrf.mjs.map

package/dist/http/csrf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.mjs","names":[],"sources":["../../src/http/csrf.ts"],"sourcesContent":["/**\n * CSRF / same-origin guard for cookie-authenticated mutating exec\n * (exec-auth-gate §4.7). The effect gate (core) answers \"is the caller\n * authenticated\"; this edge guard answers \"did the user actually intend this\"\n * for cookie sessions, which the browser auto-attaches cross-site.\n *\n * Contract (design §4.7):\n *  - Triggers ONLY for cookie-authed callers (`authSource === \"cookie\"`).\n *    Bearer is exempt (non-browser, no ambient credential). Anonymous is\n *    exempt here (the effect gate handles it) and test-header callers\n *    (authSource undefined) are exempt — only real browser cookies qualify.\n *  - Same-origin = request `Origin` header equals the service's own origin.\n *  - Missing `Origin` on a cookie-authed mutating request → reject\n *    (fail-closed; non-browser callers should use Bearer).\n *  - `allowAnonymous` does NOT exempt CSRF — a cookie user hitting an open\n *    action cross-origin is still a CSRF vector.\n *\n * Edge-layer only: `Origin` is an HTTP request header, never visible to the\n * core `afs.exec` (which sees only `options.context`). HTTP afs-rpc +\n * `/api/aup/event` call this; WS checks at the HTTP Upgrade handshake (the\n * `join_session` frame has no Origin header).\n */\n\nimport type { CallerInfo } from \"@aigne/afs\";\n\n/**\n * Resolve the service's own origin (scheme://host[:port]) from a request.\n * Node: trust `x-forwarded-host` (+ `x-forwarded-proto`) when present, else\n * the `Host` header. CF: the request URL already carries the real origin.\n */\nexport function resolveSelfOrigin(request: Request): string | null {\n  const url = (() => {\n    try {\n      return new URL(request.url);\n    } catch {\n      return null;\n    }\n  })();\n  const fwdHost = request.headers.get(\"x-forwarded-host\");\n  const host = fwdHost || request.headers.get(\"host\") || url?.host;\n  if (!host) return null;\n  const fwdProto = request.headers.get(\"x-forwarded-proto\");\n  const scheme = fwdProto || url?.protocol.replace(/:$/, \"\") || \"https\";\n  return `${scheme}://${host}`;\n}\n\n/**\n * Decide whether a cookie-authed mutating request must be rejected for CSRF.\n * Returns a reason string when it should be rejected, or null when allowed.\n *\n * Caller passes `isMutating` (the edge's best knowledge — for a wire `exec`\n * the edge treats it as potentially-mutating; reads/list/stat/search are not\n * routed here). The function itself only gates cookie-authed callers.\n */\nexport function csrfRejection(\n  request: Request,\n  caller: CallerInfo | null,\n  isMutating: boolean,\n): string | null {\n  if (!isMutating) return null;\n  // Only real browser cookie sessions are CSRF-exposed. Bearer + anonymous +\n  // test-header (authSource undefined) are exempt.\n  if (caller?.authSource !== \"cookie\") return null;\n\n  const origin = request.headers.get(\"origin\");\n  if (!origin) {\n    return \"missing Origin header on a cookie-authenticated mutating request (use Authorization: Bearer for non-browser callers)\";\n  }\n  const self = resolveSelfOrigin(request);\n  if (!self) {\n    return \"could not resolve service origin to validate Origin header\";\n  }\n  if (normalizeOrigin(origin) !== normalizeOrigin(self)) {\n    return `cross-origin mutating request rejected (Origin '${origin}' != '${self}')`;\n  }\n  return null;\n}\n\n/** Exported for reuse by the Node WS Upgrade CSRF check (server.ts). */\nexport function normalizeOrigin(origin: string): string {\n  try {\n    const u = new URL(origin);\n    return `${u.protocol}//${u.host}`.toLowerCase();\n  } catch {\n    return origin.replace(/\\/+$/, \"\").toLowerCase();\n  }\n}\n"],"mappings":";;;;;;AA8BA,SAAgB,kBAAkB,SAAiC;CACjE,MAAM,aAAa;AACjB,MAAI;AACF,UAAO,IAAI,IAAI,QAAQ,IAAI;UACrB;AACN,UAAO;;KAEP;CAEJ,MAAM,OADU,QAAQ,QAAQ,IAAI,mBAAmB,IAC/B,QAAQ,QAAQ,IAAI,OAAO,IAAI,KAAK;AAC5D,KAAI,CAAC,KAAM,QAAO;AAGlB,QAAO,GAFU,QAAQ,QAAQ,IAAI,oBAAoB,IAC9B,KAAK,SAAS,QAAQ,MAAM,GAAG,IAAI,QAC7C,KAAK;;;;;;;;;;AAWxB,SAAgB,cACd,SACA,QACA,YACe;AACf,KAAI,CAAC,WAAY,QAAO;AAGxB,KAAI,QAAQ,eAAe,SAAU,QAAO;CAE5C,MAAM,SAAS,QAAQ,QAAQ,IAAI,SAAS;AAC5C,KAAI,CAAC,OACH,QAAO;CAET,MAAM,OAAO,kBAAkB,QAAQ;AACvC,KAAI,CAAC,KACH,QAAO;AAET,KAAI,gBAAgB,OAAO,KAAK,gBAAgB,KAAK,CACnD,QAAO,mDAAmD,OAAO,QAAQ,KAAK;AAEhF,QAAO;;;AAIT,SAAgB,gBAAgB,QAAwB;AACtD,KAAI;EACF,MAAM,IAAI,IAAI,IAAI,OAAO;AACzB,SAAO,GAAG,EAAE,SAAS,IAAI,EAAE,OAAO,aAAa;SACzC;AACN,SAAO,OAAO,QAAQ,QAAQ,GAAG,CAAC,aAAa"}

package/dist/http/handlers.cjs

@@ -0,0 +1,106 @@
+
+//#region src/http/handlers.ts
+const DEEP_HEALTH_TIMEOUT_MS = 3e3;
+const DEEP_HEALTH_MAX_CONCURRENCY = 8;
+function methodNotAllowed() {
+	return new Response(JSON.stringify({ error: "Method Not Allowed" }), {
+		status: 405,
+		headers: {
+			"Content-Type": "application/json",
+			Allow: "GET"
+		}
+	});
+}
+async function withTimeout(promise, timeoutMs) {
+	let timer;
+	try {
+		return await Promise.race([promise, new Promise((_, reject) => {
+			timer = setTimeout(() => reject(/* @__PURE__ */ new Error("timeout")), timeoutMs);
+		})]);
+	} finally {
+		if (timer) clearTimeout(timer);
+	}
+}
+async function mapWithConcurrency(items, concurrency, fn) {
+	const results = new Array(items.length);
+	let nextIndex = 0;
+	const workerCount = Math.min(Math.max(1, concurrency), items.length);
+	await Promise.all(Array.from({ length: workerCount }, async () => {
+		while (nextIndex < items.length) {
+			const index = nextIndex++;
+			results[index] = await fn(items[index], index);
+		}
+	}));
+	return results;
+}
+/**
+* Factory: `GET /.well-known/service/health`
+*
+* Returns `{ status: "ok", version, uptime, ts }`.
+* With `?deep`: also probes each mount via `stat("/")`.
+*/
+function healthHandler(afs, config) {
+	return async (request) => {
+		if (request.method !== "GET") return methodNotAllowed();
+		const url = new URL(request.url);
+		const body = {
+			status: "ok",
+			version: config.version,
+			uptime: Math.floor((Date.now() - config.startedAt) / 1e3),
+			ts: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		if (url.searchParams.has("deep")) body.mounts = await mapWithConcurrency(afs.getMounts(null), DEEP_HEALTH_MAX_CONCURRENCY, async (m) => {
+			try {
+				if (typeof m.module.stat === "function") await withTimeout(m.module.stat("/"), DEEP_HEALTH_TIMEOUT_MS);
+				return {
+					path: m.path,
+					status: "ok"
+				};
+			} catch (err) {
+				return {
+					path: m.path,
+					status: "error",
+					error: err instanceof Error ? err.message : String(err)
+				};
+			}
+		});
+		return Response.json(body);
+	};
+}
+/**
+* Factory: `GET /.well-known/service/info`
+*
+* Returns `{ name, version, mode, mounts: [{ path, provider, status }] }`.
+*/
+function infoHandler(afs, config) {
+	return async (request) => {
+		if (request.method !== "GET") return methodNotAllowed();
+		const mounts = afs.getMounts(null);
+		return Response.json({
+			name: config.name,
+			version: config.version,
+			mode: config.mode,
+			mounts: mounts.map((m) => ({
+				path: m.path,
+				provider: m.module.name,
+				status: m.status ?? "ok"
+			}))
+		});
+	};
+}
+/**
+* Factory: `GET /.well-known/service/api`
+*
+* Returns `{ endpoints: [{ method, path, description }] }`.
+*/
+function apiHandler(routes) {
+	return async (request) => {
+		if (request.method !== "GET") return methodNotAllowed();
+		return Response.json({ endpoints: routes });
+	};
+}
+
+//#endregion
+exports.apiHandler = apiHandler;
+exports.healthHandler = healthHandler;
+exports.infoHandler = infoHandler;

package/dist/http/handlers.d.cts

@@ -0,0 +1,39 @@
+import { AFS } from "@aigne/afs";
+
+//#region src/http/handlers.d.ts
+interface HealthConfig {
+  version: string;
+  startedAt: number;
+}
+interface InfoConfig {
+  name: string;
+  version: string;
+  mode: "serve" | "export";
+}
+interface RouteDescriptor {
+  method: string;
+  path: string;
+  description: string;
+}
+/**
+ * Factory: `GET /.well-known/service/health`
+ *
+ * Returns `{ status: "ok", version, uptime, ts }`.
+ * With `?deep`: also probes each mount via `stat("/")`.
+ */
+declare function healthHandler(afs: AFS, config: HealthConfig): (request: Request) => Promise<Response>;
+/**
+ * Factory: `GET /.well-known/service/info`
+ *
+ * Returns `{ name, version, mode, mounts: [{ path, provider, status }] }`.
+ */
+declare function infoHandler(afs: AFS, config: InfoConfig): (request: Request) => Promise<Response>;
+/**
+ * Factory: `GET /.well-known/service/api`
+ *
+ * Returns `{ endpoints: [{ method, path, description }] }`.
+ */
+declare function apiHandler(routes: RouteDescriptor[]): (request: Request) => Promise<Response>;
+//#endregion
+export { HealthConfig, InfoConfig, RouteDescriptor, apiHandler, healthHandler, infoHandler };
+//# sourceMappingURL=handlers.d.cts.map

package/dist/http/handlers.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.cts","names":[],"sources":["../../src/http/handlers.ts"],"mappings":";;;UAciB,YAAA;EACf,OAAA;EACA,SAAA;AAAA;AAAA,UAGe,UAAA;EACf,IAAA;EACA,OAAA;EACA,IAAA;AAAA;AAAA,UAGe,eAAA;EACf,MAAA;EACA,IAAA;EACA,WAAA;AAAA;;;;AA8DF;;;iBAAgB,aAAA,CACd,GAAA,EAAK,GAAA,EACL,MAAA,EAAQ,YAAA,IACN,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA;;;;;;iBA2CjB,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,MAAA,EAAQ,UAAA,IAAc,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA;;;;;;iBA2BzE,UAAA,CAAW,MAAA,EAAQ,eAAA,MAAqB,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA"}

package/dist/http/handlers.d.mts

@@ -0,0 +1,39 @@
+import { AFS } from "@aigne/afs";
+
+//#region src/http/handlers.d.ts
+interface HealthConfig {
+  version: string;
+  startedAt: number;
+}
+interface InfoConfig {
+  name: string;
+  version: string;
+  mode: "serve" | "export";
+}
+interface RouteDescriptor {
+  method: string;
+  path: string;
+  description: string;
+}
+/**
+ * Factory: `GET /.well-known/service/health`
+ *
+ * Returns `{ status: "ok", version, uptime, ts }`.
+ * With `?deep`: also probes each mount via `stat("/")`.
+ */
+declare function healthHandler(afs: AFS, config: HealthConfig): (request: Request) => Promise<Response>;
+/**
+ * Factory: `GET /.well-known/service/info`
+ *
+ * Returns `{ name, version, mode, mounts: [{ path, provider, status }] }`.
+ */
+declare function infoHandler(afs: AFS, config: InfoConfig): (request: Request) => Promise<Response>;
+/**
+ * Factory: `GET /.well-known/service/api`
+ *
+ * Returns `{ endpoints: [{ method, path, description }] }`.
+ */
+declare function apiHandler(routes: RouteDescriptor[]): (request: Request) => Promise<Response>;
+//#endregion
+export { HealthConfig, InfoConfig, RouteDescriptor, apiHandler, healthHandler, infoHandler };
+//# sourceMappingURL=handlers.d.mts.map

package/dist/http/handlers.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.mts","names":[],"sources":["../../src/http/handlers.ts"],"mappings":";;;UAciB,YAAA;EACf,OAAA;EACA,SAAA;AAAA;AAAA,UAGe,UAAA;EACf,IAAA;EACA,OAAA;EACA,IAAA;AAAA;AAAA,UAGe,eAAA;EACf,MAAA;EACA,IAAA;EACA,WAAA;AAAA;;;;AA8DF;;;iBAAgB,aAAA,CACd,GAAA,EAAK,GAAA,EACL,MAAA,EAAQ,YAAA,IACN,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA;;;;;;iBA2CjB,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,MAAA,EAAQ,UAAA,IAAc,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA;;;;;;iBA2BzE,UAAA,CAAW,MAAA,EAAQ,eAAA,MAAqB,OAAA,EAAS,OAAA,KAAY,OAAA,CAAQ,QAAA"}

package/dist/http/handlers.mjs

@@ -0,0 +1,104 @@
+//#region src/http/handlers.ts
+const DEEP_HEALTH_TIMEOUT_MS = 3e3;
+const DEEP_HEALTH_MAX_CONCURRENCY = 8;
+function methodNotAllowed() {
+	return new Response(JSON.stringify({ error: "Method Not Allowed" }), {
+		status: 405,
+		headers: {
+			"Content-Type": "application/json",
+			Allow: "GET"
+		}
+	});
+}
+async function withTimeout(promise, timeoutMs) {
+	let timer;
+	try {
+		return await Promise.race([promise, new Promise((_, reject) => {
+			timer = setTimeout(() => reject(/* @__PURE__ */ new Error("timeout")), timeoutMs);
+		})]);
+	} finally {
+		if (timer) clearTimeout(timer);
+	}
+}
+async function mapWithConcurrency(items, concurrency, fn) {
+	const results = new Array(items.length);
+	let nextIndex = 0;
+	const workerCount = Math.min(Math.max(1, concurrency), items.length);
+	await Promise.all(Array.from({ length: workerCount }, async () => {
+		while (nextIndex < items.length) {
+			const index = nextIndex++;
+			results[index] = await fn(items[index], index);
+		}
+	}));
+	return results;
+}
+/**
+* Factory: `GET /.well-known/service/health`
+*
+* Returns `{ status: "ok", version, uptime, ts }`.
+* With `?deep`: also probes each mount via `stat("/")`.
+*/
+function healthHandler(afs, config) {
+	return async (request) => {
+		if (request.method !== "GET") return methodNotAllowed();
+		const url = new URL(request.url);
+		const body = {
+			status: "ok",
+			version: config.version,
+			uptime: Math.floor((Date.now() - config.startedAt) / 1e3),
+			ts: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		if (url.searchParams.has("deep")) body.mounts = await mapWithConcurrency(afs.getMounts(null), DEEP_HEALTH_MAX_CONCURRENCY, async (m) => {
+			try {
+				if (typeof m.module.stat === "function") await withTimeout(m.module.stat("/"), DEEP_HEALTH_TIMEOUT_MS);
+				return {
+					path: m.path,
+					status: "ok"
+				};
+			} catch (err) {
+				return {
+					path: m.path,
+					status: "error",
+					error: err instanceof Error ? err.message : String(err)
+				};
+			}
+		});
+		return Response.json(body);
+	};
+}
+/**
+* Factory: `GET /.well-known/service/info`
+*
+* Returns `{ name, version, mode, mounts: [{ path, provider, status }] }`.
+*/
+function infoHandler(afs, config) {
+	return async (request) => {
+		if (request.method !== "GET") return methodNotAllowed();
+		const mounts = afs.getMounts(null);
+		return Response.json({
+			name: config.name,
+			version: config.version,
+			mode: config.mode,
+			mounts: mounts.map((m) => ({
+				path: m.path,
+				provider: m.module.name,
+				status: m.status ?? "ok"
+			}))
+		});
+	};
+}
+/**
+* Factory: `GET /.well-known/service/api`
+*
+* Returns `{ endpoints: [{ method, path, description }] }`.
+*/
+function apiHandler(routes) {
+	return async (request) => {
+		if (request.method !== "GET") return methodNotAllowed();
+		return Response.json({ endpoints: routes });
+	};
+}
+
+//#endregion
+export { apiHandler, healthHandler, infoHandler };
+//# sourceMappingURL=handlers.mjs.map

package/dist/http/handlers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.mjs","names":[],"sources":["../../src/http/handlers.ts"],"sourcesContent":["/**\n * AOS 标准 HTTP Handlers\n *\n * 每个 ARC 实例都应该提供的标准端点。\n * 这些是纯函数工厂 —— 接受 AFS + config，返回 handler 函数。\n * 各 runtime 自行注册到 ServiceRouter。\n */\n\nimport type { AFS } from \"@aigne/afs\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface HealthConfig {\n  version: string;\n  startedAt: number;\n}\n\nexport interface InfoConfig {\n  name: string;\n  version: string;\n  mode: \"serve\" | \"export\";\n}\n\nexport interface RouteDescriptor {\n  method: string;\n  path: string;\n  description: string;\n}\n\n// ---------------------------------------------------------------------------\n// Shared helpers\n// ---------------------------------------------------------------------------\n\nconst DEEP_HEALTH_TIMEOUT_MS = 3000;\nexport const DEEP_HEALTH_MAX_CONCURRENCY = 8;\n\nfunction methodNotAllowed(): Response {\n  return new Response(JSON.stringify({ error: \"Method Not Allowed\" }), {\n    status: 405,\n    headers: { \"Content-Type\": \"application/json\", Allow: \"GET\" },\n  });\n}\n\nasync function withTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<T>((_, reject) => {\n        timer = setTimeout(() => reject(new Error(\"timeout\")), timeoutMs);\n      }),\n    ]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n\nasync function mapWithConcurrency<T, R>(\n  items: T[],\n  concurrency: number,\n  fn: (item: T, index: number) => Promise<R>,\n): Promise<R[]> {\n  const results = new Array<R>(items.length);\n  let nextIndex = 0;\n  const workerCount = Math.min(Math.max(1, concurrency), items.length);\n\n  await Promise.all(\n    Array.from({ length: workerCount }, async () => {\n      while (nextIndex < items.length) {\n        const index = nextIndex++;\n        results[index] = await fn(items[index]!, index);\n      }\n    }),\n  );\n\n  return results;\n}\n\n// ---------------------------------------------------------------------------\n// healthHandler\n// ---------------------------------------------------------------------------\n\n/**\n * Factory: `GET /.well-known/service/health`\n *\n * Returns `{ status: \"ok\", version, uptime, ts }`.\n * With `?deep`: also probes each mount via `stat(\"/\")`.\n */\nexport function healthHandler(\n  afs: AFS,\n  config: HealthConfig,\n): (request: Request) => Promise<Response> {\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== \"GET\") return methodNotAllowed();\n\n    const url = new URL(request.url);\n    const body: Record<string, unknown> = {\n      status: \"ok\",\n      version: config.version,\n      uptime: Math.floor((Date.now() - config.startedAt) / 1000),\n      ts: new Date().toISOString(),\n    };\n\n    if (url.searchParams.has(\"deep\")) {\n      const mounts = afs.getMounts(null);\n      body.mounts = await mapWithConcurrency(mounts, DEEP_HEALTH_MAX_CONCURRENCY, async (m) => {\n        try {\n          if (typeof m.module.stat === \"function\") {\n            await withTimeout(m.module.stat(\"/\"), DEEP_HEALTH_TIMEOUT_MS);\n          }\n          return { path: m.path, status: \"ok\" as const };\n        } catch (err) {\n          return {\n            path: m.path,\n            status: \"error\" as const,\n            error: err instanceof Error ? err.message : String(err),\n          };\n        }\n      });\n    }\n\n    return Response.json(body);\n  };\n}\n\n// ---------------------------------------------------------------------------\n// infoHandler\n// ---------------------------------------------------------------------------\n\n/**\n * Factory: `GET /.well-known/service/info`\n *\n * Returns `{ name, version, mode, mounts: [{ path, provider, status }] }`.\n */\nexport function infoHandler(afs: AFS, config: InfoConfig): (request: Request) => Promise<Response> {\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== \"GET\") return methodNotAllowed();\n\n    const mounts = afs.getMounts(null);\n    return Response.json({\n      name: config.name,\n      version: config.version,\n      mode: config.mode,\n      mounts: mounts.map((m) => ({\n        path: m.path,\n        provider: m.module.name,\n        status: m.status ?? \"ok\",\n      })),\n    });\n  };\n}\n\n// ---------------------------------------------------------------------------\n// apiHandler\n// ---------------------------------------------------------------------------\n\n/**\n * Factory: `GET /.well-known/service/api`\n *\n * Returns `{ endpoints: [{ method, path, description }] }`.\n */\nexport function apiHandler(routes: RouteDescriptor[]): (request: Request) => Promise<Response> {\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== \"GET\") return methodNotAllowed();\n\n    return Response.json({ endpoints: routes });\n  };\n}\n"],"mappings":";AAmCA,MAAM,yBAAyB;AAC/B,MAAa,8BAA8B;AAE3C,SAAS,mBAA6B;AACpC,QAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,sBAAsB,CAAC,EAAE;EACnE,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,OAAO;GAAO;EAC9D,CAAC;;AAGJ,eAAe,YAAe,SAAqB,WAA+B;CAChF,IAAI;AACJ,KAAI;AACF,SAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAY,GAAG,WAAW;AAC5B,WAAQ,iBAAiB,uBAAO,IAAI,MAAM,UAAU,CAAC,EAAE,UAAU;IACjE,CACH,CAAC;WACM;AACR,MAAI,MAAO,cAAa,MAAM;;;AAIlC,eAAe,mBACb,OACA,aACA,IACc;CACd,MAAM,UAAU,IAAI,MAAS,MAAM,OAAO;CAC1C,IAAI,YAAY;CAChB,MAAM,cAAc,KAAK,IAAI,KAAK,IAAI,GAAG,YAAY,EAAE,MAAM,OAAO;AAEpE,OAAM,QAAQ,IACZ,MAAM,KAAK,EAAE,QAAQ,aAAa,EAAE,YAAY;AAC9C,SAAO,YAAY,MAAM,QAAQ;GAC/B,MAAM,QAAQ;AACd,WAAQ,SAAS,MAAM,GAAG,MAAM,QAAS,MAAM;;GAEjD,CACH;AAED,QAAO;;;;;;;;AAaT,SAAgB,cACd,KACA,QACyC;AACzC,QAAO,OAAO,YAAwC;AACpD,MAAI,QAAQ,WAAW,MAAO,QAAO,kBAAkB;EAEvD,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAChC,MAAM,OAAgC;GACpC,QAAQ;GACR,SAAS,OAAO;GAChB,QAAQ,KAAK,OAAO,KAAK,KAAK,GAAG,OAAO,aAAa,IAAK;GAC1D,qBAAI,IAAI,MAAM,EAAC,aAAa;GAC7B;AAED,MAAI,IAAI,aAAa,IAAI,OAAO,CAE9B,MAAK,SAAS,MAAM,mBADL,IAAI,UAAU,KAAK,EACa,6BAA6B,OAAO,MAAM;AACvF,OAAI;AACF,QAAI,OAAO,EAAE,OAAO,SAAS,WAC3B,OAAM,YAAY,EAAE,OAAO,KAAK,IAAI,EAAE,uBAAuB;AAE/D,WAAO;KAAE,MAAM,EAAE;KAAM,QAAQ;KAAe;YACvC,KAAK;AACZ,WAAO;KACL,MAAM,EAAE;KACR,QAAQ;KACR,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;KACxD;;IAEH;AAGJ,SAAO,SAAS,KAAK,KAAK;;;;;;;;AAa9B,SAAgB,YAAY,KAAU,QAA6D;AACjG,QAAO,OAAO,YAAwC;AACpD,MAAI,QAAQ,WAAW,MAAO,QAAO,kBAAkB;EAEvD,MAAM,SAAS,IAAI,UAAU,KAAK;AAClC,SAAO,SAAS,KAAK;GACnB,MAAM,OAAO;GACb,SAAS,OAAO;GAChB,MAAM,OAAO;GACb,QAAQ,OAAO,KAAK,OAAO;IACzB,MAAM,EAAE;IACR,UAAU,EAAE,OAAO;IACnB,QAAQ,EAAE,UAAU;IACrB,EAAE;GACJ,CAAC;;;;;;;;AAaN,SAAgB,WAAW,QAAoE;AAC7F,QAAO,OAAO,YAAwC;AACpD,MAAI,QAAQ,WAAW,MAAO,QAAO,kBAAkB;AAEvD,SAAO,SAAS,KAAK,EAAE,WAAW,QAAQ,CAAC"}

package/dist/http/index.d.mts

@@ -0,0 +1 @@
+import { HealthConfig, InfoConfig, RouteDescriptor, apiHandler, healthHandler, infoHandler } from "./handlers.mjs";