@argentic/chest-sdk 0.4.0 → 0.5.0

package/dist/src/sealed.js

@@ -0,0 +1,121 @@
+import { ask as chest, errorCode, json, refusal } from "./api.js";
+import { CapabilityNotGranted, ChestError, MemberRequired, NotAllowed, SealedInvalid, SealedLocked, SealedLost, Unavailable } from "./errors.js";
+// The bounds of a Chest: one value, a context, the roles a tool declares.
+// No count bounds a call: a page of values goes in one, 4 MiB at most.
+const maxValue = 512 << 10, maxContext = 256, maxRoles = 16;
+const rolePattern = /^[a-z][a-z0-9-]{0,47}$/u;
+// A sealed value: its format, the roles it was sealed for, its sealed bytes.
+const sealedPattern = /^chest:sealed:1:(?:[a-z][a-z0-9-]{0,47}(?:,[a-z][a-z0-9-]{0,47}){0,15})?:[A-Za-z0-9_-]+$/u;
+const maxSealed = 1 << 20;
+const bytes = (s) => Buffer.byteLength(s, "utf8");
+// isSealed says text is a sealed value of a Chest (its shape only: whether
+// it opens is the Chest's to say).
+export function isSealed(text) {
+    return typeof text === "string" && text.length <= maxSealed && sealedPattern.test(text);
+}
+// The ticket of the member of a request, as the Chest's front sends it
+// (Chest-Opener); null without one.
+function ticketOf(request) {
+    const headers = request.headers;
+    const value = typeof headers.get === "function" ? headers.get("chest-opener") : headers["chest-opener"];
+    return typeof value === "string" && value.length > 0 && value.length <= 256 ? value : null;
+}
+function checkContext(context) {
+    if (context === undefined)
+        return "";
+    if (typeof context !== "string" || bytes(context) > maxContext)
+        throw new ChestError("invalid_body", 400, `a context is text of ${maxContext} bytes at most`);
+    return context;
+}
+function checkItem(item) {
+    if (typeof item?.value !== "string" || bytes(item.value) > maxValue)
+        throw new ChestError("invalid_body", 400, `a sealed value is text of ${maxValue >> 10} KiB at most`);
+    const context = checkContext(item.context);
+    if (item.roles !== undefined && (!Array.isArray(item.roles) || item.roles.length === 0 || item.roles.length > maxRoles || !item.roles.every(r => typeof r === "string" && rolePattern.test(r)) || new Set(item.roles).size !== item.roles.length))
+        throw new ChestError("invalid_role", 400, "roles are 1 to 16 distinct roles the tool declares");
+    return { value: item.value, ...(item.roles ? { roles: [...item.roles] } : {}), ...(context ? { context } : {}) };
+}
+// failed turns an answer that is not a success into what the tool tests.
+async function failed(response) {
+    if (response.status === 401)
+        return new MemberRequired();
+    if (response.status !== 403 && response.status !== 503)
+        return refusal(response, "sealed");
+    switch (await errorCode(response)) {
+        case "access_removed": return new NotAllowed();
+        case "capability_not_granted": return new CapabilityNotGranted("sealed");
+        case "sealed_locked": return new SealedLocked();
+        case "sealed_lost": return new SealedLost();
+        default: return new Unavailable();
+    }
+}
+async function call(path, ticket, body) {
+    const response = await chest("sealed", "POST", path, { body: JSON.stringify(body), type: "application/json", ...(ticket === null ? {} : { headers: { "Chest-Opener": ticket } }) });
+    if (response.status === 200)
+        return json(response);
+    if (response.status < 400) {
+        await response.body?.cancel();
+        throw new Unavailable();
+    }
+    throw await failed(response);
+}
+// sealMany seals values, each with its options, in one call: their sealed
+// texts, in the order given.
+export async function sealMany(items) {
+    const checked = items.map(checkItem);
+    const answer = await call("/sealed/seal", null, { items: checked });
+    if (!Array.isArray(answer?.sealed) || answer.sealed.length !== checked.length || !answer.sealed.every(isSealed))
+        throw new Unavailable();
+    return answer.sealed;
+}
+// seal seals one value: its sealed text, to store.
+export async function seal(value, options = {}) {
+    return (await sealMany([{ value, ...options }]))[0];
+}
+// openMany opens values for the member of request, in one call: each
+// value's text, or null for one this member may not open (sealed for roles
+// they do not hold), or that is not a value of this tool in that context.
+export async function openMany(request, items) {
+    const ticket = ticketOf(request);
+    if (ticket === null)
+        throw new MemberRequired();
+    const checked = items.map(item => {
+        if (typeof item?.sealed !== "string" || item.sealed.length > maxSealed)
+            throw new ChestError("invalid_body", 400, "a sealed value is the text seal returned");
+        const context = checkContext(item.context);
+        return { sealed: item.sealed, ...(context ? { context } : {}) };
+    });
+    const answer = await call("/sealed/open", ticket, { items: checked });
+    const values = answer?.values;
+    if (!Array.isArray(values) || values.length !== checked.length)
+        throw new Unavailable();
+    return values.map(v => {
+        const item = v;
+        if (typeof item?.value === "string")
+            return item.value;
+        if (item?.refused === "role" || item?.refused === "invalid")
+            return null;
+        throw new Unavailable();
+    });
+}
+// open opens one value for the member of request: its text. A value sealed
+// for roles the member does not hold is NotAllowed; one altered, of another
+// tool or another context, SealedInvalid.
+export async function open(request, sealed, options = {}) {
+    const ticket = ticketOf(request);
+    if (ticket === null)
+        throw new MemberRequired();
+    const context = checkContext(options.context);
+    if (typeof sealed !== "string" || sealed.length > maxSealed)
+        throw new ChestError("invalid_body", 400, "a sealed value is the text seal returned");
+    const answer = await call("/sealed/open", ticket, { items: [{ sealed, ...(context ? { context } : {}) }] });
+    const item = (Array.isArray(answer?.values) && answer.values.length === 1 ? answer.values[0] : null);
+    if (typeof item?.value === "string")
+        return item.value;
+    if (item?.refused === "role")
+        throw new NotAllowed();
+    if (item?.refused === "invalid")
+        throw new SealedInvalid();
+    throw new Unavailable();
+}
+//# sourceMappingURL=sealed.js.map

package/dist/src/sealed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealed.js","sourceRoot":"","sources":["../../client/src/sealed.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,IAAI,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8CjJ,0EAA0E;AAC1E,uEAAuE;AACvE,MAAM,QAAQ,GAAG,GAAG,IAAI,EAAE,EAAE,UAAU,GAAG,GAAG,EAAE,QAAQ,GAAG,EAAE,CAAC;AAC5D,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,6EAA6E;AAC7E,MAAM,aAAa,GAAG,2FAA2F,CAAC;AAClH,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC;AAC1B,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAElE,2EAA2E;AAC3E,mCAAmC;AACnC,MAAM,UAAU,QAAQ,CAAC,IAAa;IACpC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,uEAAuE;AACvE,oCAAoC;AACpC,SAAS,QAAQ,CAAC,OAAkC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAA+C,CAAC;IACxE,MAAM,KAAK,GAAG,OAAQ,OAAmB,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAE,OAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,OAAsC,CAAC,cAAc,CAAC,CAAC;IAClK,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,UAAU;QAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,wBAAwB,UAAU,gBAAgB,CAAC,CAAC;IAC9J,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,6BAA6B,QAAQ,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1K,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,oDAAoD,CAAC,CAAC;IACnV,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,yEAAyE;AACzE,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,cAAc,EAAE,CAAC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3F,QAAQ,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,KAAK,gBAAgB,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC;QAC/C,KAAK,wBAAwB,EAAE,OAAO,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACzE,KAAK,eAAe,EAAE,OAAO,IAAI,YAAY,EAAE,CAAC;QAChD,KAAK,aAAa,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC;QAC5C,SAAS,OAAO,IAAI,WAAW,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAqB,EAAE,IAAa;IACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACpL,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,WAAW,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAiB;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAyB,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,WAAW,EAAE,CAAC;IACzI,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAa,EAAE,OAAO,GAAgB,EAAE;IACjE,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;AACvD,CAAC;AAED,qEAAqE;AACrE,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAkC,EAAE,KAAiB;IAClF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,cAAc,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/B,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,0CAA0C,CAAC,CAAC;QAC9J,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAyB,CAAC;IAC9F,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,EAAE,CAAC;IACxF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACpB,MAAM,IAAI,GAAG,CAAkD,CAAC;QAChE,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QACvD,IAAI,IAAI,EAAE,OAAO,KAAK,MAAM,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzE,MAAM,IAAI,WAAW,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,4EAA4E;AAC5E,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAkC,EAAE,MAAc,EAAE,OAAO,GAAyB,EAAE;IAC/G,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,cAAc,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,0CAA0C,CAAC,CAAC;IACnJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAyB,CAAC;IACpI,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAkD,CAAC;IACtJ,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IACvD,IAAI,IAAI,EAAE,OAAO,KAAK,MAAM;QAAE,MAAM,IAAI,UAAU,EAAE,CAAC;IACrD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,EAAE,CAAC;IAC3D,MAAM,IAAI,WAAW,EAAE,CAAC;AAC1B,CAAC"}

package/dist/src/signed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signed.d.ts","sourceRoot":"","sources":["../../client/src/signed.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAqBjD,MAAM,MAAM,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAGrF,eAAO,MAAM,YAAY,EAAE,OAA0G,CAAC;AAEtI,eAAO,MAAM,eAAe,EAAE,OAA4G,CAAC;AAQ3I,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAErE;AACD,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMzC;AAED,eAAO,MAAM,OAAO,MAAO,OAAO,KAAG,CAAC,IAAI,MAAiF,CAAC;AAK5H,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9G;AAOD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAmBhG;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhG;AA6BD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAYjI;AAID,wBAAgB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAGjH;AAYD,MAAM,MAAM,IAAI,GAAG;IAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAI1G,wBAAgB,UAAU,CAAC,KAAK,SAAQ,GAAG,IAAI,CAU9C"}
+{"version":3,"file":"signed.d.ts","sourceRoot":"","sources":["../../client/src/signed.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAqBjD,MAAM,MAAM,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAOrF,eAAO,MAAM,YAAY,EAAE,OAAyH,CAAC;AAErJ,eAAO,MAAM,eAAe,EAAE,OAA4G,CAAC;AAQ3I,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAErE;AACD,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMzC;AAED,eAAO,MAAM,OAAO,MAAO,OAAO,KAAG,CAAC,IAAI,MAAiF,CAAC;AAK5H,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9G;AAOD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAmBhG;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhG;AA6BD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAYjI;AAID,wBAAgB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAGjH;AAYD,MAAM,MAAM,IAAI,GAAG;IAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAI1G,wBAAgB,UAAU,CAAC,KAAK,SAAQ,GAAG,IAAI,CAU9C"}

package/dist/src/signed.js

@@ -1,6 +1,10 @@
 import { createHash, createHmac, timingSafeEqual } from "node:crypto";
-// The events of the members (events): POST /chest-events.
-export const eventChannel = { header: "Chest-Event", label: "Chest-Event v1", id: /^evt_[a-z2-7]{26}$/u, maxBody: 64 << 10 };
+// The events of the members and of other tools (events): POST /chest-events.
+// A tool event names the members who may see it, up to a whole team: its
+// body is bounded by the team's capacity — a full team's policy, 32 MiB —
+// and its 64 KiB of envelope and data. Only the Chest makes a tool read that
+// much: delivery reads no body before its signature holds.
+export const eventChannel = { header: "Chest-Event", label: "Chest-Event v1", id: /^evt_[a-z2-7]{26}$/u, maxBody: (32 << 20) + (64 << 10) };
 // The runs of the schedules (schedules): POST /chest-schedules.
 export const scheduleChannel = { header: "Chest-Schedule", label: "Chest-Schedule v1", id: /^run_[a-z2-7]{26}$/u, maxBody: 1024 };
 const claims = ["aud", "iat", "exp", "jti", "digest"];

package/dist/src/signed.js.map

@@ -1 +1 @@
-{"version":3,"file":"signed.js","sourceRoot":"","sources":["../../client/src/signed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAwBtE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,YAAY,GAAY,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;AACtI,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAE3I,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAC/D,gFAAgF;AAChF,MAAM,IAAI,GAAG,CAAC,CAAC;AACf,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,OAAO,GAAG,yDAAyD,CAAC;AAE1E,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxH,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AACD,gDAAgD;AAChD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5H,0EAA0E;AAC1E,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,OAAkC,EAAE,IAAY,EAAE,SAAiB;IAC7F,MAAM,OAAO,GAAG,OAAO,CAAC,OAA+C,CAAC;IACxE,MAAM,KAAK,GAAG,OAAQ,OAAmB,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAE,OAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,OAAsC,CAAC,IAAI,CAAC,CAAC;IAC9I,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,KAAoB,EAAE,KAAa;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,aAAa,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,EAAE,gBAAgB,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrH,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC;IACjG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9I,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,4EAA4E;AAC5E,4BAA4B;AAC5B,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,MAA+B,EAAE,KAAa;IACtF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,OAAO,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,0EAA0E;AAC1E,gBAAgB;AAChB,KAAK,UAAU,MAAM,CAAC,OAAkC,EAAE,KAAa;IACrE,IAAI,CAAC;QACH,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,OAAO,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,wEAAwE;AACxE,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAkC,EAAE,OAAgB;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9G,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClI,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,yEAAyE;AACzE,wDAAwD;AACxD,MAAM,UAAU,IAAI,CAAC,OAAgB,EAAE,EAAU,EAAE,IAAY,EAAE,OAAwC;IACvG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AACrK,CAAC;AAcD,0EAA0E;AAC1E,0DAA0D;AAC1D,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,KAAK;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO;QACL,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,GAAG,EAAE,EAAE,CAAC,EAAE;YACR,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACf,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO,GAAG,CAAC,IAAI,GAAG,KAAK;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"signed.js","sourceRoot":"","sources":["../../client/src/signed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAwBtE,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,6EAA6E;AAC7E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAY,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACrJ,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAE3I,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAC/D,gFAAgF;AAChF,MAAM,IAAI,GAAG,CAAC,CAAC;AACf,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,OAAO,GAAG,yDAAyD,CAAC;AAE1E,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxH,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AACD,gDAAgD;AAChD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5H,0EAA0E;AAC1E,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,OAAkC,EAAE,IAAY,EAAE,SAAiB;IAC7F,MAAM,OAAO,GAAG,OAAO,CAAC,OAA+C,CAAC;IACxE,MAAM,KAAK,GAAG,OAAQ,OAAmB,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAE,OAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,OAAsC,CAAC,IAAI,CAAC,CAAC;IAC9I,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,KAAoB,EAAE,KAAa;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,aAAa,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,EAAE,gBAAgB,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrH,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC;IACjG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9I,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,4EAA4E;AAC5E,4BAA4B;AAC5B,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,MAA+B,EAAE,KAAa;IACtF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,OAAO,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,0EAA0E;AAC1E,gBAAgB;AAChB,KAAK,UAAU,MAAM,CAAC,OAAkC,EAAE,KAAa;IACrE,IAAI,CAAC;QACH,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,OAAO,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;YACjC,IAAI,IAAI,GAAG,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,wEAAwE;AACxE,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAkC,EAAE,OAAgB;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9G,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClI,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,yEAAyE;AACzE,wDAAwD;AACxD,MAAM,UAAU,IAAI,CAAC,OAAgB,EAAE,EAAU,EAAE,IAAY,EAAE,OAAwC;IACvG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AACrK,CAAC;AAcD,0EAA0E;AAC1E,0DAA0D;AAC1D,MAAM,UAAU,UAAU,CAAC,KAAK,GAAG,KAAK;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO;QACL,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,GAAG,EAAE,EAAE,CAAC,EAAE;YACR,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACf,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO,GAAG,CAAC,IAAI,GAAG,KAAK;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/testing-realtime.d.ts

@@ -0,0 +1,54 @@
+import { type IncomingMessage, type ServerResponse } from "node:http";
+import type { Duplex } from "node:stream";
+export type FakeChannelRule = {
+    name: string;
+    join?: string[] | {
+        table: string;
+        key: string;
+        member: string;
+    };
+    send?: boolean;
+    presence?: boolean;
+};
+export type FakeFeed = {
+    table: string;
+    channel: string;
+    columns: string[];
+};
+export type FakeRealtimeOptions = {
+    channels?: FakeChannelRule[];
+    feeds?: FakeFeed[];
+    membership?: (table: string, key: string, member: string) => boolean;
+};
+export type FakePublished = {
+    channel: string;
+    event: string;
+    payload: unknown;
+    seq: number;
+};
+export type FakeSent = {
+    members: string[];
+    event: string;
+    payload: unknown;
+};
+export type FakeRealtime = {
+    published: FakePublished[];
+    sent: FakeSent[];
+    renewals: number;
+    url(memberId: string): string;
+    commit(table: string, op: "insert" | "update" | "delete", row: Record<string, unknown>): number[];
+    removed(table: string, key: string, member: string): void;
+    drop(memberId: string, code?: number, reason?: string): void;
+    revoke(memberId: string): void;
+    signOut(memberId: string): void;
+    full(seconds: number, what?: "connections" | "joins"): void;
+    advance(ms: number): void;
+};
+export declare function fakeRealtime(options: FakeRealtimeOptions, origin: () => string, roleOf: (member: string) => string | null | undefined): {
+    realtime: FakeRealtime;
+    api: (request: IncomingMessage, response: ServerResponse, url: URL, read: (request: IncomingMessage, limit: number) => Promise<Buffer | null>, send: (response: ServerResponse, status: number, value?: unknown) => void) => Promise<void>;
+    probe: (response: ServerResponse, url: URL, send: (response: ServerResponse, status: number, value?: unknown, headers?: Record<string, string>) => void) => void;
+    upgrade: (request: IncomingMessage, socket: Duplex, url: URL) => void;
+    close: () => void;
+};
+//# sourceMappingURL=testing-realtime.d.ts.map

package/dist/src/testing-realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing-realtime.d.ts","sourceRoot":"","sources":["../../client/src/testing-realtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgB1C,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAErJ,MAAM,MAAM,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAI7E,MAAM,MAAM,mBAAmB,GAAG;IAAE,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,CAAC;AAE7J,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9F,MAAM,MAAM,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,IAAI,EAAE,QAAQ,EAAE,CAAC;IAIjB,QAAQ,EAAE,MAAM,CAAC;IAGjB,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAO9B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;IAGlG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAI1D,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7D,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAKhC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,GAAG,IAAI,CAAC;IAG5D,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AA8BF,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS;;mBAqFxG,eAAe,YAAY,cAAc,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,KAAG,OAAO,CAAC,IAAI,CAAC;sBA2C5N,cAAc,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,KAAG,IAAI;uBAO3I,eAAe,UAAU,MAAM,OAAO,GAAG,KAAG,IAAI;;EAiI3E"}

package/dist/src/testing-realtime.js

@@ -0,0 +1,376 @@
+import { createHash, randomBytes } from "node:crypto";
+import { STATUS_CODES } from "node:http";
+import { memberIdPattern } from "./member.js";
+import { channelPattern, eventPattern } from "./realtime.js";
+import { peerEventPattern } from "./realtime-client.js";
+const protocol = "chest-realtime.v1", maxPayload = 64 << 10, maxSend = 4 << 10, maxState = 1 << 10;
+// How long the Chest keeps a channel's frames in memory, and the tool's
+// committed rows in its change log.
+const memoryFor = 2 * 60 * 1000, logFor = 7 * 24 * 60 * 60 * 1000;
+// prefixOf splits a pattern into its fixed part and its variable last
+// segment ("" for an exact name).
+function prefixOf(name) {
+    const at = name.lastIndexOf(":");
+    const last = name.slice(at + 1);
+    return last === "*" || /^\{[a-z_][a-z0-9_]*\}$/u.test(last) ? [name.slice(0, at + 1), last] : [name, ""];
+}
+function matches(rule, name, member) {
+    const [prefix, variable] = prefixOf(rule.name);
+    if (!variable)
+        return name === prefix;
+    const last = name.startsWith(prefix) ? name.slice(prefix.length) : "";
+    return /^[a-z0-9_-]{1,64}$/u.test(last) && (variable !== "{member}" || last === member);
+}
+export function fakeRealtime(options, origin, roleOf) {
+    const channels = new Map();
+    const pages = new Set();
+    const epoch = randomBytes(9).toString("base64url");
+    // The change log: its rows, the last position given, the last one no
+    // longer kept. The clock: the test's advance on top of the real one.
+    const log = [], signedOut = new Set();
+    let head = 0, logForgotten = 0, skew = 0, fullUntil = 0, joinsFullUntil = 0;
+    const now = () => Date.now() + skew;
+    const realtime = {
+        published: [], sent: [], renewals: 0,
+        url: member => origin().replace(/^http/u, "ws") + "/_chest/realtime?member=" + encodeURIComponent(member),
+        commit(table, op, row) {
+            const positions = [];
+            for (const feed of options.feeds ?? []) {
+                if (feed.table !== table)
+                    continue;
+                const [prefix, variable] = prefixOf(feed.channel);
+                const suffix = variable ? row[variable.slice(1, -1)] : "";
+                if (suffix === null || suffix === undefined)
+                    continue;
+                const channel = prefix + String(suffix), event = table + "." + op, payload = Object.fromEntries(feed.columns.map(c => [c, row[c] ?? null]));
+                const pos = ++head;
+                log.push({ pos, at: now(), channel, frame: { op: "msg", ch: channel, event, payload, pos } });
+                publish(channel, event, payload, pos);
+                positions.push(pos);
+            }
+            return positions;
+        },
+        removed(table, key, member) {
+            for (const rule of options.channels ?? []) {
+                if (typeof rule.join !== "object" || Array.isArray(rule.join) || rule.join.table !== table)
+                    continue;
+                const name = prefixOf(rule.name)[0] + key;
+                for (const page of pages)
+                    if (page.member === member && page.joined.has(name))
+                        kick(page, name);
+            }
+        },
+        drop(member, code, reason = "") { for (const page of [...pages])
+            if (page.member === member)
+                code === undefined ? page.cut() : page.close(code, reason); },
+        revoke(member) { for (const page of [...pages])
+            if (page.member === member)
+                page.close(1008, "access_removed"); },
+        signOut(member) { signedOut.add(member); },
+        full(seconds, what = "connections") {
+            if (what === "joins")
+                joinsFullUntil = now() + seconds * 1000;
+            else
+                fullUntil = now() + seconds * 1000;
+        },
+        advance(ms) { skew += ms; },
+    };
+    const rule = (name, member) => name.length <= 128 && channelPattern.test(name) ? (options.channels ?? []).find(r => matches(r, name, member)) : undefined;
+    const declared = (name) => rule(name, name.slice(name.lastIndexOf(":") + 1)) !== undefined;
+    const allows = (r, member) => !Array.isArray(r.join) || r.join.includes(roleOf(member) ?? "");
+    // fed says whether a feed's rows go to the channel.
+    const fed = (name) => (options.feeds ?? []).some(f => {
+        const [prefix, variable] = prefixOf(f.channel);
+        return variable ? name.startsWith(prefix) && !name.slice(prefix.length).includes(":") : name === prefix;
+    });
+    // state is a channel, its memory and the change log aged to now.
+    const state = (name) => {
+        let ch = channels.get(name);
+        if (!ch)
+            channels.set(name, ch = { seq: 0, kept: [], forgotten: 0, present: new Map() });
+        while (ch.kept[0] && ch.kept[0].at <= now() - memoryFor)
+            ch.forgotten = ch.kept.shift().seq;
+        while (log[0] && log[0].at <= now() - logFor)
+            logForgotten = log.shift().pos;
+        return ch;
+    };
+    function publish(channel, event, payload, pos) {
+        const ch = state(channel);
+        const frame = { op: "msg", ch: channel, event, payload, seq: ++ch.seq, ...(pos === undefined ? {} : { pos }) };
+        ch.kept.push({ seq: ch.seq, at: now(), frame });
+        realtime.published.push({ channel, event, payload, seq: ch.seq });
+        for (const page of pages)
+            if (page.joined.has(channel))
+                page.write(frame);
+        return ch.seq;
+    }
+    function untrack(page, name) {
+        const ch = channels.get(name), p = ch?.present.get(page.member);
+        if (!ch || !p || !page.tracked.delete(name) || --p.tracked > 0)
+            return;
+        ch.present.delete(page.member);
+        for (const other of pages)
+            if (other.joined.has(name) && other.member !== page.member)
+                other.write({ op: "presence", ch: name, joins: [], leaves: [page.member] });
+    }
+    // part takes a page out of a channel, and forgets its focus there.
+    function part(page, name) {
+        untrack(page, name);
+        page.joined.delete(name);
+        if (page.focus === name)
+            page.focus = "";
+    }
+    function kick(page, name) {
+        part(page, name);
+        page.write({ op: "kicked", ch: name });
+    }
+    // The tool's API: what the Chest's answers, with its errors.
+    async function api(request, response, url, read, send) {
+        if (request.method === "GET" && url.pathname === "/realtime/presence") {
+            const name = url.searchParams.get("channel") ?? "";
+            if (!declared(name))
+                return send(response, 400, { error: "invalid_channel" });
+            return send(response, 200, { members: [...(channels.get(name)?.present ?? [])].map(([id, p]) => ({ id, state: p.state })) });
+        }
+        if (request.method !== "POST" || !["/realtime/publish", "/realtime/send", "/realtime/online"].includes(url.pathname))
+            return send(response, 404, { error: "not_found" });
+        const raw = await read(request, maxPayload + 1024 + 64 * 1000);
+        let command;
+        try {
+            command = JSON.parse(raw?.toString() ?? "");
+        }
+        catch {
+            return send(response, 400, { error: "invalid_body" });
+        }
+        if (command === null || typeof command !== "object")
+            return send(response, 400, { error: "invalid_body" });
+        const payload = command["payload"] ?? null;
+        if (Buffer.byteLength(JSON.stringify(payload)) > maxPayload)
+            return send(response, 413, { error: "too_large" });
+        const members = command["members"];
+        if (url.pathname !== "/realtime/publish" && (!Array.isArray(members) || members.length === 0 || !members.every(m => typeof m === "string" && memberIdPattern.test(m))))
+            return send(response, 400, { error: Array.isArray(members) && members.length > 0 ? "invalid_id" : "invalid_body" });
+        const online = (ids, focus) => [...new Set(ids)].filter(id => [...pages].some(p => p.member === id && (focus === undefined || p.focus === focus)));
+        if (url.pathname === "/realtime/online") {
+            const channel = command["channel"];
+            if (channel !== undefined && (typeof channel !== "string" || channel.length > 128 || !channelPattern.test(channel)))
+                return send(response, 400, { error: "invalid_channel" });
+            return send(response, 200, { online: online(members), watching: channel === undefined ? [] : online(members, channel) });
+        }
+        const event = command["event"];
+        if (typeof event !== "string" || !eventPattern.test(event))
+            return send(response, 400, { error: "invalid_event" });
+        if (url.pathname === "/realtime/send") {
+            realtime.sent.push({ members: [...members], event, payload });
+            for (const page of pages)
+                if (members.includes(page.member))
+                    page.write({ op: "direct", event, payload });
+            return send(response, 200, { reached: online(members) });
+        }
+        const channel = command["channel"];
+        if (typeof channel !== "string" || !declared(channel))
+            return send(response, 400, { error: "invalid_channel" });
+        send(response, 200, { seq: publish(channel, event, payload) });
+    }
+    // refusal is why a member's page may not connect now: no access (403),
+    // a session ended (401), no room (503, and in how many seconds).
+    const refusal = (member) => {
+        if (roleOf(member) === undefined)
+            return { status: 403 };
+        if (signedOut.has(member))
+            return { status: 401 };
+        if (fullUntil > now())
+            return { status: 503, retryAfter: Math.ceil((fullUntil - now()) / 1000) };
+        return undefined;
+    };
+    // A page's question without upgrading, which renews its member's session:
+    // may they connect now?
+    function probe(response, url, send) {
+        realtime.renewals++;
+        const refused = refusal(url.searchParams.get("member") ?? "");
+        send(response, refused?.status ?? 204, undefined, refused?.retryAfter ? { "Retry-After": String(refused.retryAfter) } : {});
+    }
+    // A page's connection: the handshake, then the protocol's frames.
+    function upgrade(request, socket, url) {
+        const member = url.searchParams.get("member") ?? "";
+        const key = request.headers["sec-websocket-key"];
+        const offered = String(request.headers["sec-websocket-protocol"] ?? "").split(",").map(s => s.trim());
+        const status = typeof key !== "string" || !offered.includes(protocol) ? 403 : refusal(member)?.status;
+        if (status !== undefined) {
+            socket.end(`HTTP/1.1 ${status} ${STATUS_CODES[status]}\r\nContent-Length: 0\r\n\r\n`);
+            return;
+        }
+        const accept = createHash("sha1").update(key + "258EAFA5-E914-47DA-95CA-C5AB0DC85B11").digest("base64");
+        socket.write(`HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: ${accept}\r\nSec-WebSocket-Protocol: ${protocol}\r\n\r\n`);
+        const frame = (op, data) => {
+            const head = data.length < 126 ? Buffer.from([0x80 | op, data.length]) : data.length <= 0xffff ? Buffer.from([0x80 | op, 126, data.length >> 8, data.length & 0xff]) : Buffer.concat([Buffer.from([0x80 | op, 127]), (() => { const b = Buffer.alloc(8); b.writeBigUInt64BE(BigInt(data.length)); return b; })()]);
+            return Buffer.concat([head, data]);
+        };
+        const page = {
+            member, joined: new Set(), tracked: new Set(), focus: "",
+            write: value => { if (!socket.destroyed)
+                socket.write(frame(0x1, Buffer.from(JSON.stringify(value)))); },
+            close: (code, reason) => {
+                const data = Buffer.alloc(2 + Buffer.byteLength(reason));
+                data.writeUInt16BE(code);
+                data.write(reason, 2);
+                if (!socket.destroyed)
+                    socket.end(frame(0x8, data));
+            },
+            cut: () => socket.destroy(),
+        };
+        pages.add(page);
+        const forget = () => {
+            if (!pages.delete(page))
+                return;
+            for (const name of [...page.tracked])
+                untrack(page, name);
+        };
+        socket.on("close", forget);
+        socket.on("error", forget);
+        page.write({ op: "hello", epoch, member });
+        let pending = Buffer.alloc(0), message = [];
+        socket.on("data", (chunk) => {
+            pending = Buffer.concat([pending, chunk]);
+            for (;;) {
+                if (pending.length < 2)
+                    return;
+                const fin = (pending[0] & 0x80) !== 0, op = pending[0] & 0x0f;
+                let length = pending[1] & 0x7f, at = 2;
+                if (length === 126) {
+                    if (pending.length < 4)
+                        return;
+                    length = pending.readUInt16BE(2);
+                    at = 4;
+                }
+                else if (length === 127) {
+                    if (pending.length < 10)
+                        return;
+                    length = Number(pending.readBigUInt64BE(2));
+                    at = 10;
+                }
+                if (pending.length < at + 4 + length)
+                    return;
+                const mask = pending.subarray(at, at + 4), data = Buffer.from(pending.subarray(at + 4, at + 4 + length));
+                for (let i = 0; i < data.length; i++)
+                    data[i] ^= mask[i & 3];
+                pending = pending.subarray(at + 4 + length);
+                if (op === 0x8)
+                    return page.close(1000, "");
+                if (op === 0x9) {
+                    socket.write(frame(0xa, data));
+                    continue;
+                }
+                if (op !== 0x1 && op !== 0x0)
+                    continue;
+                message.push(data);
+                if (!fin)
+                    continue;
+                const text = Buffer.concat(message).toString();
+                message = [];
+                let q;
+                try {
+                    q = JSON.parse(text);
+                }
+                catch {
+                    page.write({ op: "error", ref: 0, code: "invalid_request" });
+                    continue;
+                }
+                handle(page, q);
+            }
+        });
+    }
+    function handle(page, q) {
+        const ref = typeof q["ref"] === "number" ? q["ref"] : 0, name = typeof q["ch"] === "string" ? q["ch"] : "";
+        const answer = (code, extra = {}) => { if (ref !== 0 || code === "invalid_request")
+            page.write(code ? { op: "error", ref, code } : { op: "ok", ref, ...extra }); };
+        const r = rule(name, page.member);
+        switch (q["op"]) {
+            case "ping":
+                return answer();
+            case "join": {
+                if (!r)
+                    return answer("invalid_channel");
+                if (!allows(r, page.member))
+                    return answer("forbidden");
+                const table = typeof r.join === "object" && !Array.isArray(r.join) ? r.join : undefined;
+                if (table && !(options.membership?.(table.table, name.slice(prefixOf(r.name)[0].length), page.member) ?? false))
+                    return answer("forbidden");
+                if (joinsFullUntil > now())
+                    return answer("full");
+                page.joined.add(name);
+                // A re-join is given what it missed: from the memory when it keeps
+                // all of it (the tool's events too), else from the change log (the
+                // feeds' rows), else told resync. A channel fed by a feed says the
+                // position the page is at: the one it gave, or the head.
+                const ch = state(name), since = q["since"];
+                let missed = [], resync = false, pos = fed(name) ? head : undefined;
+                if (since !== undefined) {
+                    const seq = Number(since.seq), given = Number(since.pos ?? 0);
+                    if (since.epoch === epoch && seq >= ch.forgotten && seq <= ch.seq)
+                        missed = ch.kept.filter(k => k.seq > seq).map(k => k.frame);
+                    else if (pos !== undefined && given > 0 && given >= logForgotten && given <= head)
+                        missed = log.filter(l => l.channel === name && l.pos > given).map(l => l.frame);
+                    else
+                        resync = true;
+                    if (!resync && pos !== undefined)
+                        pos = given;
+                }
+                answer(undefined, { seq: ch.seq, ...(pos === undefined ? {} : { pos }), ...(r.presence ? { presence: [...ch.present].map(([id, p]) => ({ id, state: p.state })) } : {}), ...(resync ? { resync } : {}) });
+                for (const frame of missed)
+                    page.write(frame);
+                return;
+            }
+            case "leave":
+                part(page, name);
+                return answer();
+            case "focus":
+                if (name !== "" && !page.joined.has(name))
+                    return answer("forbidden");
+                page.focus = name;
+                return answer();
+            // A member's message is a peer frame, its name never dotted: never
+            // taken for the feeds' rows or the tool's events.
+            case "send": {
+                const payload = q["payload"] ?? null;
+                if (typeof q["event"] !== "string" || !peerEventPattern.test(q["event"]))
+                    return answer("invalid_event");
+                if (Buffer.byteLength(JSON.stringify(payload)) > maxSend)
+                    return answer("invalid_body");
+                if (!r || !page.joined.has(name) || !r.send || !allows(r, page.member))
+                    return answer("forbidden");
+                for (const other of pages)
+                    if (other.member !== page.member && other.joined.has(name))
+                        other.write({ op: "peer", ch: name, event: q["event"], payload, from: page.member });
+                return answer();
+            }
+            case "track": {
+                const value = q["state"];
+                if (value === null || typeof value !== "object" || Array.isArray(value) || Buffer.byteLength(JSON.stringify(value)) > maxState)
+                    return answer("invalid_body");
+                if (!r || !page.joined.has(name) || !r.presence)
+                    return answer("forbidden");
+                const ch = state(name);
+                let p = ch.present.get(page.member);
+                if (!p)
+                    ch.present.set(page.member, p = { state: value, tracked: 0 });
+                if (!page.tracked.has(name)) {
+                    page.tracked.add(name);
+                    p.tracked++;
+                }
+                p.state = value;
+                for (const other of pages)
+                    if (other.member !== page.member && other.joined.has(name))
+                        other.write({ op: "presence", ch: name, joins: [{ id: page.member, state: value }], leaves: [] });
+                return answer();
+            }
+            default:
+                return answer("invalid_request");
+        }
+    }
+    // close closes every page, as the Chest stopping would.
+    const close = () => { for (const page of pages)
+        page.close(1001, ""); };
+    return { realtime, api, probe, upgrade, close };
+}
+//# sourceMappingURL=testing-realtime.js.map