@appport/sdk 1.0.1

package/node_modules/@appport/server/dist/server.d.ts

@@ -0,0 +1,83 @@
+import { type AppPortManifest, type AppResponse, type ClientEnvelope, type DiscoveryDocument, type Principal, type ServerEnvelope, type Session } from "@appport/protocol";
+import { type AppPortApplication } from "@appport/core/server-internal";
+import { AppPortConnection, type SendEnvelope } from "./connection.js";
+/** What a transport knows about a caller before any AppPort envelope is read. */
+export interface AuthenticationRequest {
+    transport: string;
+    /** Session identifier supplied by the transport (header, IPC attribute, …). */
+    sessionId?: string;
+    /** Raw transport credentials. Opaque to AppPort; interpreted by the hook. */
+    headers?: Readonly<Record<string, string | undefined>>;
+    origin?: string;
+    /** Transport-specific caller detail (an Electron `WebContents` id, …). */
+    peer?: unknown;
+}
+export interface Identity {
+    session?: Session;
+    principal?: Principal;
+}
+/**
+ * Resolves an identity from transport-supplied credentials.
+ *
+ * AppPort deliberately does not authenticate: it represents the resulting
+ * identity (§35). Returning `{}` means anonymous — which is not the same as
+ * trusted, on any transport (§37, §38).
+ */
+export type Authenticate = (request: AuthenticationRequest) => Identity | undefined | Promise<Identity | undefined>;
+export interface ServerOptions {
+    application: AppPortApplication;
+    authenticate?: Authenticate;
+    maxEnvelopeBytes?: number;
+    /** Endpoint paths advertised through discovery (§39, §40). */
+    endpoints?: {
+        request?: string;
+        websocket?: string;
+        manifest?: string;
+    };
+}
+/**
+ * The server-side protocol runtime.
+ *
+ * It turns envelopes into dispatches and results back into envelopes, and owns
+ * discovery. It is transport-agnostic: HTTP, WebSocket and IPC bindings are
+ * thin adapters over this class.
+ */
+export declare class AppPortServer {
+    #private;
+    readonly application: AppPortApplication;
+    readonly endpoints: {
+        request: string;
+        websocket: string;
+        manifest: string;
+    };
+    constructor(options: ServerOptions);
+    get connectionCount(): number;
+    manifest(): AppPortManifest;
+    /** The `.well-known` discovery document (§39). */
+    discovery(): DiscoveryDocument;
+    identify(request: AuthenticationRequest): Promise<Identity>;
+    /** Opens a duplex connection (WebSocket, IPC, in-process). */
+    createConnection(options: {
+        transport: string;
+        send: SendEnvelope;
+        identity?: Identity;
+        allowedCapabilities?: ReadonlySet<string>;
+    }): AppPortConnection;
+    releaseConnection(connection: AppPortConnection): void;
+    /**
+     * Handles a single request envelope without a persistent connection — the
+     * shape plain HTTP needs.
+     */
+    handleUnary(value: unknown, context: {
+        identity?: Identity;
+        transport: string;
+        allowedCapabilities?: ReadonlySet<string>;
+    }): Promise<AppResponse>;
+    /** Decodes a text frame into a validated client envelope. */
+    parseText(raw: string): ClientEnvelope;
+    errorEnvelope(requestId: string | undefined, error: unknown, traceId?: string): ServerEnvelope;
+    /** Closes every open connection. */
+    close(): Promise<void>;
+}
+export declare function createServer(options: ServerOptions): AppPortServer;
+//# sourceMappingURL=server.d.ts.map

package/node_modules/@appport/server/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAWL,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,OAAO,EACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAe,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEvE,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;AAEpH,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,kBAAkB,CAAC;IAChC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,SAAS,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED;;;;;;GAMG;AACH,qBAAa,aAAa;;IACxB,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IAGzC,QAAQ,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;gBAGjE,OAAO,EAAE,aAAa;IAWlC,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,QAAQ,IAAI,eAAe;IAI3B,kDAAkD;IAClD,SAAS,IAAI,iBAAiB;IAexB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKjE,8DAA8D;IAC9D,gBAAgB,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,YAAY,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAC,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,iBAAiB;IAcvJ,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAKtD;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBvJ,6DAA6D;IAC7D,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc;IAMtC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc;IAQ9F,oCAAoC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CAElE"}

package/node_modules/@appport/server/dist/server.js

@@ -0,0 +1,114 @@
+import { createErrorResponse, DEFAULT_HTTP_ENDPOINT, DEFAULT_MANIFEST_PATH, DEFAULT_WS_ENDPOINT, decodeEnvelopeText, errors, parseClientEnvelope, peekRequestId, peekTraceId, PROTOCOL_ID } from "@appport/protocol";
+import { toWireError } from "@appport/core/server-internal";
+import { AppPortConnection } from "./connection.js";
+/**
+ * The server-side protocol runtime.
+ *
+ * It turns envelopes into dispatches and results back into envelopes, and owns
+ * discovery. It is transport-agnostic: HTTP, WebSocket and IPC bindings are
+ * thin adapters over this class.
+ */
+export class AppPortServer {
+    application;
+    #authenticate;
+    #maxEnvelopeBytes;
+    endpoints;
+    #connections = new Set();
+    constructor(options) {
+        this.application = options.application;
+        this.#authenticate = options.authenticate;
+        this.#maxEnvelopeBytes = options.maxEnvelopeBytes;
+        this.endpoints = {
+            request: options.endpoints?.request ?? DEFAULT_HTTP_ENDPOINT,
+            websocket: options.endpoints?.websocket ?? DEFAULT_WS_ENDPOINT,
+            manifest: options.endpoints?.manifest ?? DEFAULT_MANIFEST_PATH
+        };
+    }
+    get connectionCount() {
+        return this.#connections.size;
+    }
+    manifest() {
+        return this.application.manifest();
+    }
+    /** The `.well-known` discovery document (§39). */
+    discovery() {
+        const manifest = this.manifest();
+        return {
+            protocol: PROTOCOL_ID,
+            manifest: this.endpoints.manifest,
+            endpoint: this.endpoints.request,
+            application: {
+                id: manifest.application.id,
+                name: manifest.application.name,
+                version: manifest.application.version
+            },
+            transports: manifest.transports
+        };
+    }
+    async identify(request) {
+        if (!this.#authenticate)
+            return {};
+        return (await this.#authenticate(request)) ?? {};
+    }
+    /** Opens a duplex connection (WebSocket, IPC, in-process). */
+    createConnection(options) {
+        const connection = new AppPortConnection({
+            application: this.application,
+            transport: options.transport,
+            send: options.send,
+            ...(options.identity?.session ? { session: options.identity.session } : {}),
+            ...(options.identity?.principal ? { principal: options.identity.principal } : {}),
+            ...(options.allowedCapabilities ? { allowedCapabilities: options.allowedCapabilities } : {}),
+            ...(this.#maxEnvelopeBytes !== undefined ? { maxEnvelopeBytes: this.#maxEnvelopeBytes } : {})
+        });
+        this.#connections.add(connection);
+        return connection;
+    }
+    releaseConnection(connection) {
+        connection.close();
+        this.#connections.delete(connection);
+    }
+    /**
+     * Handles a single request envelope without a persistent connection — the
+     * shape plain HTTP needs.
+     */
+    async handleUnary(value, context) {
+        const requestId = peekRequestId(value);
+        const traceId = peekTraceId(value);
+        try {
+            const envelope = parseClientEnvelope(value);
+            if (envelope.type !== "request") {
+                throw errors.invalidRequest(`Envelope type "${envelope.type}" requires a duplex transport`);
+            }
+            if (context.allowedCapabilities && envelope.capability.name !== "appport.manifest" && envelope.capability.name !== "appport.ping" && !context.allowedCapabilities.has(envelope.capability.name)) {
+                throw errors.forbidden(`${envelope.capability.name} is not exposed to this surface`);
+            }
+            return await this.application.handleRequest(envelope, {
+                ...(context.identity?.session ? { session: context.identity.session } : {}),
+                ...(context.identity?.principal ? { principal: context.identity.principal } : {}),
+                transport: context.transport
+            });
+        }
+        catch (error) {
+            return createErrorResponse(requestId ?? "req_unknown", toWireError(error, this.application.mode), traceId ? { traceId } : {});
+        }
+    }
+    /** Decodes a text frame into a validated client envelope. */
+    parseText(raw) {
+        return parseClientEnvelope(decodeEnvelopeText(raw, this.#maxEnvelopeBytes ? { maxBytes: this.#maxEnvelopeBytes } : {}));
+    }
+    errorEnvelope(requestId, error, traceId) {
+        return createErrorResponse(requestId ?? "req_unknown", toWireError(error, this.application.mode), traceId ? { traceId } : {});
+    }
+    /** Closes every open connection. */
+    async close() {
+        for (const connection of this.#connections)
+            connection.close();
+        this.#connections.clear();
+        await this.application.close();
+    }
+}
+export function createServer(options) {
+    return new AppPortServer(options);
+}
+//# sourceMappingURL=server.js.map

package/node_modules/@appport/server/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,WAAW,EAQZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAA2B,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAqB,MAAM,iBAAiB,CAAC;AAoCvE;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACf,WAAW,CAAqB;IAChC,aAAa,CAA2B;IACxC,iBAAiB,CAAqB;IACtC,SAAS,CAA2D;IACpE,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAErD,YAAY,OAAsB;QAChC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG;YACf,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,IAAI,qBAAqB;YAC5D,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,mBAAmB;YAC9D,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,IAAI,qBAAqB;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;IAChC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,kDAAkD;IAClD,SAAS;QACP,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;YACjC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO;YAChC,WAAW,EAAE;gBACX,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE;gBAC3B,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI;gBAC/B,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO;aACtC;YACD,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA8B;QAC3C,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,8DAA8D;IAC9D,gBAAgB,CAAC,OAAkH;QACjI,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC;YACvC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9F,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,iBAAiB,CAAC,UAA6B;QAC7C,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,KAAc,EAAE,OAA8F;QAC9H,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,CAAC,cAAc,CAAC,kBAAkB,QAAQ,CAAC,IAAI,+BAA+B,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,OAAO,CAAC,mBAAmB,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChM,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,iCAAiC,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE;gBACpD,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,mBAAmB,CACxB,SAAS,IAAI,aAAa,EAC1B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EACzC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,SAAS,CAAC,GAAW;QACnB,OAAO,mBAAmB,CACxB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5F,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,SAA6B,EAAE,KAAc,EAAE,OAAgB;QAC3E,OAAO,mBAAmB,CACxB,SAAS,IAAI,aAAa,EAC1B,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EACzC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3B,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,YAAY;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/node_modules/@appport/server/dist/websocket.d.ts

@@ -0,0 +1,25 @@
+import type { Duplex } from "node:stream";
+import type { IncomingMessage } from "node:http";
+export declare const DEFAULT_MAX_MESSAGE_BYTES: number;
+export interface WebSocketPeerOptions {
+    maxMessageBytes?: number;
+}
+export type CloseListener = (code: number, reason: string) => void;
+/** True when an HTTP request is a WebSocket upgrade. */
+export declare function isWebSocketUpgrade(request: IncomingMessage): boolean;
+export declare function acceptKey(key: string): string;
+/** One accepted WebSocket connection. */
+export declare class WebSocketPeer {
+    #private;
+    onMessage: ((data: string) => void) | undefined;
+    onClose: CloseListener | undefined;
+    onError: ((error: Error) => void) | undefined;
+    private constructor();
+    get closed(): boolean;
+    /** Completes the handshake and returns the peer, or null when it is not one. */
+    static accept(request: IncomingMessage, socket: Duplex, head: Buffer | undefined, options?: WebSocketPeerOptions): WebSocketPeer | null;
+    send(text: string): void;
+    ping(): void;
+    close(code?: number, reason?: string): void;
+}
+//# sourceMappingURL=websocket.d.ts.map

package/node_modules/@appport/server/dist/websocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../src/websocket.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAqBjD,eAAO,MAAM,yBAAyB,QAAkB,CAAC;AAEzD,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;AAEnE,wDAAwD;AACxD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAGpE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,yCAAyC;AACzC,qBAAa,aAAa;;IAQxB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAChD,OAAO,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAE9C,OAAO;IAYP,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,gFAAgF;IAChF,MAAM,CAAC,MAAM,CACX,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,GAAE,oBAAyB,GACjC,aAAa,GAAG,IAAI;IAsBvB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKxB,IAAI,IAAI,IAAI;IAKZ,KAAK,CAAC,IAAI,SAAO,EAAE,MAAM,SAAK,GAAG,IAAI;CAqEtC"}

package/node_modules/@appport/server/dist/websocket.js

@@ -0,0 +1,221 @@
+import { createHash } from "node:crypto";
+/**
+ * A dependency-free RFC 6455 server endpoint.
+ *
+ * AppPort's WebSocket binding (§27) treats the socket as a pure carrier: every
+ * message is exactly one AppPort envelope. Implementing the framing here keeps
+ * `@appport/server` free of runtime dependencies and keeps the binding honest —
+ * nothing about the application semantics lives in the transport.
+ */
+const GUID = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
+const OPCODE = {
+    continuation: 0x0,
+    text: 0x1,
+    binary: 0x2,
+    close: 0x8,
+    ping: 0x9,
+    pong: 0xa
+};
+export const DEFAULT_MAX_MESSAGE_BYTES = 4 * 1024 * 1024;
+/** True when an HTTP request is a WebSocket upgrade. */
+export function isWebSocketUpgrade(request) {
+    const upgrade = request.headers["upgrade"];
+    return typeof upgrade === "string" && upgrade.toLowerCase() === "websocket";
+}
+export function acceptKey(key) {
+    return createHash("sha1").update(key + GUID).digest("base64");
+}
+/** One accepted WebSocket connection. */
+export class WebSocketPeer {
+    #socket;
+    #maxMessageBytes;
+    #buffer = Buffer.alloc(0);
+    #fragments = [];
+    #fragmentOpcode = 0;
+    #closed = false;
+    onMessage;
+    onClose;
+    onError;
+    constructor(socket, options) {
+        this.#socket = socket;
+        this.#maxMessageBytes = options.maxMessageBytes ?? DEFAULT_MAX_MESSAGE_BYTES;
+        socket.on("data", (chunk) => this.#ingest(chunk));
+        socket.on("error", (error) => {
+            this.onError?.(error);
+            this.#finish(1006, "socket error");
+        });
+        socket.on("close", () => this.#finish(1006, "socket closed"));
+    }
+    get closed() {
+        return this.#closed;
+    }
+    /** Completes the handshake and returns the peer, or null when it is not one. */
+    static accept(request, socket, head, options = {}) {
+        const key = request.headers["sec-websocket-key"];
+        const version = request.headers["sec-websocket-version"];
+        if (!isWebSocketUpgrade(request) || typeof key !== "string" || version !== "13") {
+            socket.end("HTTP/1.1 400 Bad Request\r\n\r\n");
+            return null;
+        }
+        socket.write([
+            "HTTP/1.1 101 Switching Protocols",
+            "Upgrade: websocket",
+            "Connection: Upgrade",
+            `Sec-WebSocket-Accept: ${acceptKey(key)}`,
+            "\r\n"
+        ].join("\r\n"));
+        socket.setNoDelay?.(true);
+        const peer = new WebSocketPeer(socket, options);
+        if (head?.length)
+            peer.#ingest(head);
+        return peer;
+    }
+    send(text) {
+        if (this.#closed)
+            return;
+        this.#socket.write(encodeFrame(OPCODE.text, Buffer.from(text, "utf8")));
+    }
+    ping() {
+        if (this.#closed)
+            return;
+        this.#socket.write(encodeFrame(OPCODE.ping, Buffer.alloc(0)));
+    }
+    close(code = 1000, reason = "") {
+        if (this.#closed)
+            return;
+        const payload = Buffer.alloc(2 + Buffer.byteLength(reason));
+        payload.writeUInt16BE(code, 0);
+        payload.write(reason, 2);
+        try {
+            this.#socket.write(encodeFrame(OPCODE.close, payload));
+        }
+        catch {
+            // The socket may already be gone; the close listener still fires.
+        }
+        this.#socket.end();
+        this.#finish(code, reason);
+    }
+    #finish(code, reason) {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        this.onClose?.(code, reason);
+    }
+    #ingest(chunk) {
+        this.#buffer = this.#buffer.length === 0 ? chunk : Buffer.concat([this.#buffer, chunk]);
+        for (;;) {
+            const frame = decodeFrame(this.#buffer);
+            if (!frame)
+                return;
+            this.#buffer = this.#buffer.subarray(frame.consumed);
+            this.#dispatch(frame);
+            if (this.#closed)
+                return;
+        }
+    }
+    #dispatch(frame) {
+        switch (frame.opcode) {
+            case OPCODE.ping:
+                this.#socket.write(encodeFrame(OPCODE.pong, frame.payload));
+                return;
+            case OPCODE.pong:
+                return;
+            case OPCODE.close: {
+                const code = frame.payload.length >= 2 ? frame.payload.readUInt16BE(0) : 1005;
+                this.close(code === 1005 ? 1000 : code);
+                return;
+            }
+            case OPCODE.binary:
+                // AppPort v1 is UTF-8 JSON on the wire (§50); binary uses blob refs (§51).
+                this.close(1003, "binary frames are not accepted");
+                return;
+            case OPCODE.text:
+            case OPCODE.continuation: {
+                if (frame.opcode === OPCODE.text) {
+                    this.#fragments = [];
+                    this.#fragmentOpcode = OPCODE.text;
+                }
+                this.#fragments.push(frame.payload);
+                const size = this.#fragments.reduce((total, part) => total + part.length, 0);
+                if (size > this.#maxMessageBytes) {
+                    this.close(1009, "message too large");
+                    return;
+                }
+                if (!frame.fin)
+                    return;
+                const message = Buffer.concat(this.#fragments).toString("utf8");
+                this.#fragments = [];
+                if (this.#fragmentOpcode === OPCODE.text)
+                    this.onMessage?.(message);
+                return;
+            }
+            default:
+                this.close(1002, "unsupported opcode");
+        }
+    }
+}
+function decodeFrame(buffer) {
+    if (buffer.length < 2)
+        return null;
+    const first = buffer[0];
+    const second = buffer[1];
+    const fin = (first & 0x80) !== 0;
+    const opcode = first & 0x0f;
+    const masked = (second & 0x80) !== 0;
+    let length = second & 0x7f;
+    let offset = 2;
+    if (length === 126) {
+        if (buffer.length < offset + 2)
+            return null;
+        length = buffer.readUInt16BE(offset);
+        offset += 2;
+    }
+    else if (length === 127) {
+        if (buffer.length < offset + 8)
+            return null;
+        const big = buffer.readBigUInt64BE(offset);
+        if (big > BigInt(Number.MAX_SAFE_INTEGER))
+            throw new Error("frame too large");
+        length = Number(big);
+        offset += 8;
+    }
+    let mask;
+    if (masked) {
+        if (buffer.length < offset + 4)
+            return null;
+        mask = buffer.subarray(offset, offset + 4);
+        offset += 4;
+    }
+    if (buffer.length < offset + length)
+        return null;
+    const raw = buffer.subarray(offset, offset + length);
+    const payload = mask ? unmask(raw, mask) : Buffer.from(raw);
+    return { fin, opcode, payload, consumed: offset + length };
+}
+function unmask(payload, mask) {
+    const out = Buffer.allocUnsafe(payload.length);
+    for (let i = 0; i < payload.length; i += 1)
+        out[i] = payload[i] ^ mask[i % 4];
+    return out;
+}
+function encodeFrame(opcode, payload) {
+    const length = payload.length;
+    let header;
+    if (length < 126) {
+        header = Buffer.alloc(2);
+        header[1] = length;
+    }
+    else if (length < 65536) {
+        header = Buffer.alloc(4);
+        header[1] = 126;
+        header.writeUInt16BE(length, 2);
+    }
+    else {
+        header = Buffer.alloc(10);
+        header[1] = 127;
+        header.writeBigUInt64BE(BigInt(length), 2);
+    }
+    header[0] = 0x80 | opcode;
+    return Buffer.concat([header, payload]);
+}
+//# sourceMappingURL=websocket.js.map

package/node_modules/@appport/server/dist/websocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.js","sourceRoot":"","sources":["../src/websocket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;GAOG;AACH,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,MAAM,MAAM,GAAG;IACb,YAAY,EAAE,GAAG;IACjB,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAQzD,wDAAwD;AACxD,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,yCAAyC;AACzC,MAAM,OAAO,aAAa;IACf,OAAO,CAAS;IAChB,gBAAgB,CAAS;IAClC,OAAO,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,UAAU,GAAa,EAAE,CAAC;IAC1B,eAAe,GAAG,CAAC,CAAC;IACpB,OAAO,GAAG,KAAK,CAAC;IAEhB,SAAS,CAAuC;IAChD,OAAO,CAA4B;IACnC,OAAO,CAAuC;IAE9C,YAAoB,MAAc,EAAE,OAA6B;QAC/D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;QAE7E,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YAClC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,MAAM,CACX,OAAwB,EACxB,MAAc,EACd,IAAwB,EACxB,UAAgC,EAAE;QAElC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACzD,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,KAAK,CACV;YACE,kCAAkC;YAClC,oBAAoB;YACpB,qBAAqB;YACrB,yBAAyB,SAAS,CAAC,GAAG,CAAC,EAAE;YACzC,MAAM;SACP,CAAC,IAAI,CAAC,MAAM,CAAC,CACf,CAAC;QACD,MAA6D,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,EAAE,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAY;QACf,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,MAAM,GAAG,EAAE;QAC5B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,MAAc;QAClC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACxF,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO;QAC3B,CAAC;IACH,CAAC;IAED,SAAS,CAAC,KAAmB;QAC3B,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI;gBACd,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,KAAK,MAAM,CAAC,IAAI;gBACd,OAAO;YACT,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,MAAM;gBAChB,2EAA2E;gBAC3E,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;gBACnD,OAAO;YACT,KAAK,MAAM,CAAC,IAAI,CAAC;YACjB,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACzB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;oBACrB,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC;gBACrC,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC7E,IAAI,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,GAAG;oBAAE,OAAO;gBACvB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAChE,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;gBACrB,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,IAAI;oBAAE,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD;gBACE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;CACF;AASD,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9E,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IAED,IAAI,IAAwB,CAAC;IAC7B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM;QAAE,OAAO,IAAI,CAAC;IAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM,CAAC,OAAe,EAAE,IAAY;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,OAAe;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAc,CAAC;IACnB,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;IACrB,CAAC;SAAM,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QAChB,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QAChB,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/node_modules/@appport/server/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@appport/server",
+  "version": "1.0.0",
+  "description": "Server-side AppPort protocol runtime with HTTP and WebSocket bindings.",
+  "license": "Apache-2.0",
+  "repository": "github:rkendel1/appport",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./node": {
+      "types": "./dist/node-entry.d.ts",
+      "import": "./dist/node-entry.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean"
+  },
+  "dependencies": {
+    "@appport/protocol": "1.0.0",
+    "@appport/core": "1.0.0",
+    "@appport/authorization": "1.0.0"
+  },
+  "private": true
+}

package/node_modules/@appport/transport-electron/README.md

@@ -0,0 +1,56 @@
+# @appport/transport-electron
+
+The Electron IPC transport: main-process binding, preload bridge and renderer
+transport, over a single generic channel.
+
+```js
+// main process
+import { ipcMain } from "electron";
+import { serveElectronIpc } from "@appport/transport-electron";
+
+serveElectronIpc({
+  server,
+  ipcMain,
+  validateSender: (event) => event.senderFrame?.url?.startsWith("file://") ?? false,
+  identify: (event) => resolveIdentity(event)
+});
+```
+
+```js
+// preload.cjs
+const { contextBridge, ipcRenderer } = require("electron");
+const { exposeAppPort } = require("@appport/transport-electron/preload");
+
+exposeAppPort(contextBridge, ipcRenderer);
+```
+
+```ts
+// renderer
+import { createElectronTransport } from "@appport/transport-electron";
+
+const transport = createElectronTransport(); // uses window.appport
+```
+
+## Why one channel
+
+The AppPort envelope identifies the capability, so there is one IPC channel,
+`appport:message`, not one per operation. Channels named `save-document` and
+`open-document` would put the application API into the transport, which is what
+the protocol exists to prevent.
+
+## Why a bridge, not ipcRenderer
+
+Electron's guidance is to expose narrowly scoped context-bridge APIs; exposing
+`ipcRenderer` grants arbitrary message access. The bridge here is two functions:
+send an envelope, receive envelopes.
+
+## Trust
+
+IPC is not identity. `validateSender` decides whether a frame may speak AppPort
+at all, `identify` resolves the session, and every capability is still
+authorized. Envelopes queue behind identity resolution, so the first request is
+never dispatched as anonymous.
+
+The package depends on structural types rather than on `electron`, so the same
+build works in the main process, the preload script and the renderer — and so
+the transport can be tested without launching a browser.

package/node_modules/@appport/transport-electron/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `@appport/transport-electron` — the Electron IPC transport (§23, §28).
+ *
+ * Main-process binding, preload bridge and renderer transport, over a single
+ * generic IPC channel.
+ */
+export * from "./types.js";
+export * from "./main.js";
+export * from "./preload.js";
+export * from "./renderer.js";
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@appport/transport-electron/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC"}

package/node_modules/@appport/transport-electron/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * `@appport/transport-electron` — the Electron IPC transport (§23, §28).
+ *
+ * Main-process binding, preload bridge and renderer transport, over a single
+ * generic IPC channel.
+ */
+export * from "./types.js";
+export * from "./main.js";
+export * from "./preload.js";
+export * from "./renderer.js";
+//# sourceMappingURL=index.js.map

package/node_modules/@appport/transport-electron/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC"}

package/node_modules/@appport/transport-electron/dist/main.d.ts

@@ -0,0 +1,31 @@
+import type { AppPortServer, Identity } from "@appport/server";
+import { type IpcMainEventLike, type IpcMainLike } from "./types.js";
+export interface ElectronMainOptions {
+    server: AppPortServer;
+    ipcMain: IpcMainLike;
+    /** IPC channel name. One channel carries every capability (§28). */
+    channel?: string;
+    /**
+     * Decides whether a renderer may speak AppPort at all.
+     *
+     * Electron recommends validating the sender rather than trusting any frame
+     * that can reach IPC. Returning false drops the message silently.
+     */
+    validateSender?: (event: IpcMainEventLike) => boolean;
+    /** Resolves an identity for a renderer. IPC is not identity (§37). */
+    identify?: (event: IpcMainEventLike) => Identity | Promise<Identity>;
+}
+export interface ElectronMainBinding {
+    /** Stops listening and releases every renderer connection. */
+    dispose(): void;
+    readonly connectionCount: number;
+}
+/**
+ * Serves AppPort over Electron IPC from the main process (§28).
+ *
+ * One generic channel carries every capability; the envelope identifies the
+ * capability. Generating a channel per operation would put the application API
+ * into the transport, which is the mistake the protocol exists to prevent.
+ */
+export declare function serveElectronIpc(options: ElectronMainOptions): ElectronMainBinding;
+//# sourceMappingURL=main.d.ts.map

package/node_modules/@appport/transport-electron/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAqB,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAmB,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACtD,sEAAsE;IACtE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,OAAO,IAAI,IAAI,CAAC;IAChB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAYD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,mBAAmB,CAoDlF"}