@appport/sdk 1.1.19 → 1.1.20

package/vendor/@appport/server/dist/connection.js

@@ -0,0 +1,217 @@
+import { AppPortError, createErrorResponse, createStreamChunk, createStreamEnd, createStreamStart, createSuccessResponse, decodeEnvelopeText, errors, parseClientEnvelope, peekRequestId, peekTraceId } from "../../protocol/dist/index.js";
+import { grantsPermission } from "../../authorization/dist/index.js";
+import { toWireError } from "../../core/dist/server-internal.js";
+/**
+ * One duplex client connection.
+ *
+ * Connections exist for transports that can push (WebSocket, IPC, in-process).
+ * They own the subscription and stream bookkeeping the protocol requires:
+ * unsubscribe releases resources (§18), cancellation terminates the underlying
+ * operation (§21).
+ */
+export class AppPortConnection {
+    transport;
+    #application;
+    #send;
+    #subscriptions = new Map();
+    #streams = new Map();
+    #maxEnvelopeBytes;
+    #allowedCapabilities;
+    #session;
+    #principal;
+    #closed = false;
+    constructor(options) {
+        this.#application = options.application;
+        this.transport = options.transport;
+        this.#send = options.send;
+        this.#session = options.session;
+        this.#principal = options.principal;
+        this.#maxEnvelopeBytes = options.maxEnvelopeBytes;
+        this.#allowedCapabilities = options.allowedCapabilities;
+    }
+    get session() {
+        return this.#session;
+    }
+    get closed() {
+        return this.#closed;
+    }
+    get openStreamCount() {
+        return this.#streams.size;
+    }
+    get subscriptionCount() {
+        return this.#subscriptions.size;
+    }
+    /** Binds an authenticated identity to this connection. */
+    authenticate(identity) {
+        this.#session = identity.session;
+        this.#principal = identity.principal ?? identity.session?.principal;
+    }
+    /** Accepts a raw text frame. */
+    async accept(raw) {
+        let value;
+        try {
+            value = decodeEnvelopeText(raw, this.#maxEnvelopeBytes ? { maxBytes: this.#maxEnvelopeBytes } : {});
+        }
+        catch (error) {
+            await this.#fail(undefined, undefined, error);
+            return;
+        }
+        await this.acceptValue(value);
+    }
+    /** Accepts an already-decoded envelope value (IPC and in-process transports). */
+    async acceptValue(value) {
+        const requestId = peekRequestId(value);
+        const traceId = peekTraceId(value);
+        let envelope;
+        try {
+            envelope = parseClientEnvelope(value);
+        }
+        catch (error) {
+            await this.#fail(requestId, traceId, error);
+            return;
+        }
+        await this.handle(envelope);
+    }
+    /** Routes a validated client envelope. */
+    async handle(envelope) {
+        if (this.#closed)
+            return;
+        const target = envelope.type === "request" || envelope.type === "stream.request"
+            ? envelope.capability.name
+            : envelope.type === "subscribe"
+                ? envelope.event.name
+                : undefined;
+        if (target && this.#allowedCapabilities && target !== "appport.manifest" && target !== "appport.ping" && !this.#allowedCapabilities.has(target)) {
+            await this.#emit(createErrorResponse(peekRequestId(envelope) ?? "req_unknown", errors.forbidden(`${target} is not exposed to this surface`).toErrorObject()));
+            return;
+        }
+        switch (envelope.type) {
+            case "request": {
+                const response = await this.#application.handleRequest(envelope, this.#dispatchOptions());
+                await this.#emit(response);
+                return;
+            }
+            case "stream.request": {
+                await this.#startStream(envelope);
+                return;
+            }
+            case "subscribe": {
+                await this.#subscribe(envelope);
+                return;
+            }
+            case "unsubscribe": {
+                const release = this.#subscriptions.get(envelope.subscriptionId);
+                release?.();
+                this.#subscriptions.delete(envelope.subscriptionId);
+                await this.#emit(createSuccessResponse(envelope.requestId, { subscriptionId: envelope.subscriptionId, active: false }));
+                return;
+            }
+            case "stream.cancel": {
+                const active = this.#streams.get(envelope.streamId);
+                active?.execution.cancel(envelope.reason);
+                active?.abort.abort();
+                return;
+            }
+        }
+    }
+    /** Releases every subscription and stream held by this connection. */
+    close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        for (const release of this.#subscriptions.values())
+            release();
+        this.#subscriptions.clear();
+        for (const active of this.#streams.values()) {
+            active.execution.cancel("Connection closed");
+            active.abort.abort();
+        }
+        this.#streams.clear();
+    }
+    #dispatchOptions() {
+        return {
+            ...(this.#session ? { session: this.#session } : {}),
+            ...(this.#principal ? { principal: this.#principal } : {}),
+            transport: this.transport
+        };
+    }
+    async #subscribe(envelope) {
+        const name = envelope.event.name;
+        const definition = name === "*" ? undefined : this.#application.registry.getEvent(name, envelope.event.version);
+        const required = definition?.authorization ?? [];
+        const granted = this.#session?.permissions ?? [];
+        if (required.length > 0 && !required.every((permission) => grantsPermission(granted, permission))) {
+            const error = this.#principal
+                ? errors.forbidden(`Missing permission to observe ${name}`)
+                : errors.unauthorized();
+            await this.#emit(createErrorResponse(envelope.requestId, error.toErrorObject()));
+            return;
+        }
+        if (this.#subscriptions.has(envelope.subscriptionId)) {
+            await this.#emit(createErrorResponse(envelope.requestId, errors.conflict(`Subscription ${envelope.subscriptionId} already exists`).toErrorObject()));
+            return;
+        }
+        const release = this.#application.subscribe(envelope.event.version === undefined ? { name } : { name, version: envelope.event.version }, (event) => {
+            void this.#emit({ ...event, subscriptionId: envelope.subscriptionId });
+        }, envelope.subscriptionId);
+        this.#subscriptions.set(envelope.subscriptionId, release);
+        await this.#emit(createSuccessResponse(envelope.requestId, { subscriptionId: envelope.subscriptionId, active: true }));
+    }
+    async #startStream(envelope) {
+        const abort = new AbortController();
+        let execution;
+        try {
+            execution = await this.#application.handleStreamRequest(envelope, {
+                ...this.#dispatchOptions(),
+                signal: abort.signal
+            });
+        }
+        catch (error) {
+            await this.#fail(envelope.requestId, envelope.traceId, error);
+            return;
+        }
+        const streamId = execution.streamId;
+        this.#streams.set(streamId, { execution, abort });
+        await this.#emit(createStreamStart(envelope.requestId, streamId, envelope.traceId));
+        void (async () => {
+            let sequence = 0;
+            try {
+                for await (const chunk of execution.chunks) {
+                    if (this.#closed)
+                        break;
+                    await this.#emit(createStreamChunk(streamId, sequence, chunk));
+                    sequence += 1;
+                }
+                await this.#emit(createStreamEnd(streamId));
+            }
+            catch (error) {
+                await this.#emit(createStreamEnd(streamId, toWireError(error, this.#application.mode)));
+            }
+            finally {
+                this.#streams.delete(streamId);
+            }
+        })();
+    }
+    async #fail(requestId, traceId, error) {
+        const wire = toWireError(error, this.#application.mode);
+        await this.#emit(createErrorResponse(requestId ?? "req_unknown", wire, traceId ? { traceId } : {}));
+        if (!AppPortError.is(error)) {
+            this.#application.logger.error("connection failed to handle an envelope", { transport: this.transport });
+        }
+    }
+    async #emit(envelope) {
+        if (this.#closed)
+            return;
+        try {
+            await this.#send(envelope);
+        }
+        catch (error) {
+            this.#application.logger.warn("failed to deliver an envelope", {
+                transport: this.transport,
+                type: envelope.type,
+                reason: error instanceof Error ? error.name : "unknown"
+            });
+        }
+    }
+}
+//# sourceMappingURL=connection.js.map

package/vendor/@appport/server/dist/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,MAAM,EACN,mBAAmB,EACnB,aAAa,EACb,WAAW,EAMZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAiD,MAAM,+BAA+B,CAAC;AAqB3G;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAS;IAClB,YAAY,CAAqB;IACjC,KAAK,CAAe;IACpB,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,iBAAiB,CAAqB;IACtC,oBAAoB,CAAkC;IAC/D,QAAQ,CAAsB;IAC9B,UAAU,CAAwB;IAClC,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,OAA0B;QACpC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAClD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,YAAY,CAAC,QAAsD;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IACtE,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,WAAW,CAAC,KAAc;QAC9B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,MAAM,CAAC,QAAwB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB;YAC9E,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI;YAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW;gBAC7B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;gBACrB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,MAAM,IAAI,IAAI,CAAC,oBAAoB,IAAI,MAAM,KAAK,kBAAkB,IAAI,MAAM,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChJ,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,iCAAiC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YAC9J,OAAO;QACT,CAAC;QACD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACjE,OAAO,EAAE,EAAE,CAAC;gBACZ,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACpD,MAAM,IAAI,CAAC,KAAK,CACd,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACtG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9D,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,gBAAgB;QACd,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAwD;QACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChH,MAAM,QAAQ,GAAG,UAAU,EAAE,aAAa,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU;gBAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iCAAiC,IAAI,EAAE,CAAC;gBAC3D,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,KAAK,CACd,mBAAmB,CACjB,QAAQ,CAAC,SAAS,EAClB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,QAAQ,CAAC,cAAc,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAC1F,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CACzC,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAC3F,CAAC,KAAuB,EAAE,EAAE;YAC1B,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QACzE,CAAC,EACD,QAAQ,CAAC,cAAc,CACxB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,KAAK,CACd,qBAAqB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CACrG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAA6D;QAC9E,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,SAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,QAAQ,EAAE;gBAChE,GAAG,IAAI,CAAC,gBAAgB,EAAE;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAEpF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBAC3C,IAAI,IAAI,CAAC,OAAO;wBAAE,MAAM;oBACxB,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC/D,QAAQ,IAAI,CAAC,CAAC;gBAChB,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1F,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAA6B,EAAE,OAA2B,EAAE,KAAc;QACpF,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,KAAK,CACd,mBAAmB,CAAC,SAAS,IAAI,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClF,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAwB;QAClC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/vendor/@appport/server/dist/fetch.d.ts

@@ -0,0 +1,10 @@
+import { HttpBinding } from "./http.js";
+/**
+ * A WHATWG `fetch` handler for the HTTP binding.
+ *
+ * Works anywhere `Request`/`Response` exist — Deno, Bun, Cloudflare Workers,
+ * Node's `node:http` via an adapter — which keeps the HTTP binding portable
+ * without dragging a server framework into the protocol (§73).
+ */
+export declare function createFetchHandler(binding: HttpBinding): (request: Request) => Promise<Response>;
+//# sourceMappingURL=fetch.d.ts.map

package/vendor/@appport/server/dist/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,WAAW,CAAC;AAE9D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA4ChG"}

package/vendor/@appport/server/dist/fetch.js

@@ -0,0 +1,50 @@
+import { HttpBinding } from "./http.js";
+/**
+ * A WHATWG `fetch` handler for the HTTP binding.
+ *
+ * Works anywhere `Request`/`Response` exist — Deno, Bun, Cloudflare Workers,
+ * Node's `node:http` via an adapter — which keeps the HTTP binding portable
+ * without dragging a server framework into the protocol (§73).
+ */
+export function createFetchHandler(binding) {
+    return async (request) => {
+        const url = new URL(request.url);
+        const headers = {};
+        request.headers.forEach((value, key) => {
+            headers[key.toLowerCase()] = value;
+        });
+        const httpRequest = {
+            method: request.method,
+            path: url.pathname,
+            query: url.searchParams,
+            headers,
+            body: request.method === "POST" ? await request.text() : "",
+            signal: request.signal
+        };
+        const outcome = await binding.route(httpRequest);
+        if (outcome.kind === "json") {
+            return new Response(JSON.stringify(outcome.body), { status: outcome.status, headers: outcome.headers });
+        }
+        if (outcome.kind === "text") {
+            return new Response(outcome.body, { status: outcome.status, headers: outcome.headers });
+        }
+        const encoder = new TextEncoder();
+        const iterator = outcome.frames[Symbol.asyncIterator]();
+        const body = new ReadableStream({
+            async pull(controller) {
+                const next = await iterator.next();
+                if (next.done) {
+                    controller.close();
+                    return;
+                }
+                controller.enqueue(encoder.encode(next.value));
+            },
+            cancel() {
+                outcome.cancel();
+                void iterator.return?.();
+            }
+        });
+        return new Response(body, { status: outcome.status, headers: outcome.headers });
+    };
+}
+//# sourceMappingURL=fetch.js.map

package/vendor/@appport/server/dist/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAwB,MAAM,WAAW,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACrD,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,GAAuC,EAAE,CAAC;QACvD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAoB;YACnC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,KAAK,EAAE,GAAG,CAAC,YAAY;YACvB,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,cAAc,CAAa;YAC1C,KAAK,CAAC,IAAI,CAAC,UAAU;gBACnB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,MAAM;gBACJ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC;AACJ,CAAC"}

package/vendor/@appport/server/dist/http.d.ts

@@ -0,0 +1,80 @@
+import { type ErrorCode } from "../../protocol/dist/index.d.ts";
+import type { AppPortServer } from "./server.js";
+/**
+ * HTTP binding (specification §25, §26).
+ *
+ * One endpoint, `POST /appport`, carries every capability. Streams are answered
+ * as newline-delimited envelopes and events as Server-Sent Events, so a plain
+ * HTTP deployment still reaches conformance level 3 without WebSocket.
+ */
+export declare const APPPORT_CONTENT_TYPE = "application/json";
+export declare const NDJSON_CONTENT_TYPE = "application/x-ndjson";
+export declare const SSE_CONTENT_TYPE = "text/event-stream";
+/** Header carrying a session identifier. Deployments may use cookies instead. */
+export declare const SESSION_HEADER = "x-appport-session";
+export declare function originMatches(origin: string, allowed: string): boolean;
+/**
+ * Recommended AppPort → HTTP status mapping (§26).
+ *
+ * `mapped` follows the table. `protocol` answers 200 for every well-formed
+ * envelope and reserves non-2xx for transport-level failures, which keeps
+ * application status strictly separate from transport status.
+ */
+export type StatusMode = "mapped" | "protocol";
+export declare function statusForError(code: ErrorCode, mode?: StatusMode): number;
+export interface HttpRequestLike {
+    method: string;
+    /** Path without query string. */
+    path: string;
+    query?: URLSearchParams;
+    headers?: Readonly<Record<string, string | undefined>>;
+    /** Raw request body, already decoded as UTF-8 text. */
+    body?: string;
+    /** Aborted when the client disconnects. */
+    signal?: AbortSignal;
+}
+export type HttpOutcome = {
+    kind: "json";
+    status: number;
+    headers: Record<string, string>;
+    body: unknown;
+} | {
+    kind: "text";
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+} | {
+    kind: "stream";
+    status: number;
+    headers: Record<string, string>;
+    /** Encoded frames, ready to write. */
+    frames: AsyncIterable<string>;
+    cancel(): void;
+};
+export interface HttpBindingOptions {
+    server: AppPortServer;
+    statusMode?: StatusMode;
+    /** Allowed origins for browser clients. Omit to send no CORS headers. */
+    cors?: {
+        origins: readonly string[] | "*";
+        credentials?: boolean;
+    };
+    /** Maximum accepted request body size in bytes. */
+    maxBodyBytes?: number;
+    /** Reject browser origins outside this list. Supports localhost `:*` patterns. */
+    allowedOrigins?: readonly string[];
+    /** Capability and event names exposed through this binding. */
+    allowedCapabilities?: readonly string[];
+}
+export declare class HttpBinding {
+    #private;
+    readonly server: AppPortServer;
+    readonly statusMode: StatusMode;
+    constructor(options: HttpBindingOptions);
+    /** True when this binding serves the given path. */
+    handles(path: string): boolean;
+    corsHeaders(origin: string | undefined): Record<string, string>;
+    route(request: HttpRequestLike): Promise<HttpOutcome>;
+}
+export declare function createHttpBinding(options: HttpBindingOptions): HttpBinding;
+//# sourceMappingURL=http.d.ts.map

package/vendor/@appport/server/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAYL,KAAK,SAAS,EAEf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAY,MAAM,aAAa,CAAC;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AAEpD,iFAAiF;AACjF,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAElD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAUtE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AA+B/C,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,GAAE,UAAqB,GAAG,MAAM,CAGnF;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACvD,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/E;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,sCAAsC;IACtC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,IAAI,IAAI,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,yEAAyE;IACzE,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACnE,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,qBAAa,WAAW;;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;gBAMpB,OAAO,EAAE,kBAAkB;IASvC,oDAAoD;IACpD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU9B,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAkBzD,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;CAkO5D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAE1E"}