@automattic/vip 4.1.5 → 4.1.8

package/node_modules/ejs/lib/esm/parseargs.js

@@ -19,118 +19,172 @@
 'use strict';
 
 let parseargs = {};
-let isOpt = function (arg) { return arg.indexOf('-') === 0; };
-let removeOptPrefix = function (opt) { return opt.replace(/^--/, '').replace(/^-/, ''); };
+
+let hasOwnProperty = Object.prototype.hasOwnProperty;
+let hasOwn = function (obj, key) { return hasOwnProperty.call(obj, key); };
+
+// A token is "option-like" if it begins with a dash. Such a token is never
+// consumed as an option-argument (a value that really starts with '-' must be
+// passed with '='), which turns the common "forgot the value" mistake into an
+// error instead of silently eating the next flag.
+let isOptionLike = function (s) {
+  return typeof s === 'string' && s.length > 0 && s.charAt(0) === '-';
+};
 
 /**
  * @constructor
- * Parses a list of command-line args into a key/value object of
- * options and an array of positional commands.
- * @param {Array} opts A list of options in the following format:
- * [{full: 'foo', abbr: 'f'}, {full: 'bar', abbr: 'b'}]]
+ * Parses command-line args into options and opaque operands.
+ *
+ * @param {Array} opts Option specs: `[{full, abbr, expectValue}]`. `expectValue`
+ *   truthy means the option takes a value; otherwise it is a boolean flag.
+ *
+ * `parse(argv)` returns `{opts, operands, errors}`:
+ *   - `opts`: null-prototype map of `full-name -> string | true` (last wins)
+ *   - `operands`: opaque positional args, in order (NOT split on '=')
+ *   - `errors`: `[{code, arg}]`, collected — never thrown. Codes:
+ *       'unknown-option', 'missing-value', 'unexpected-value'
+ *
+ * The parser is pure: no I/O, no exit, and it does not mutate `argv`.
  */
 parseargs.Parser = function (opts) {
-  // A key/value object of matching options parsed out of the args
-  this.opts = {};
-  this.taskNames = null;
-  this.envVars = null;
-
-  // Data structures used for parsing
-  this.reg = opts;
-  this.shortOpts = {};
-  this.longOpts = {};
-
+  // null-prototype lookup tables so inherited members ('constructor',
+  // 'toString', '__proto__', ...) can never resolve as a known option
+  this.short = Object.create(null);
+  this.long = Object.create(null);
   let self = this;
   [].forEach.call(opts, function (item) {
-    self.shortOpts[item.abbr] = item;
-    self.longOpts[item.full] = item;
+    self.short[item.abbr] = item;
+    self.long[item.full] = item;
   });
 };
 
-parseargs.Parser.prototype = new function () {
+parseargs.Parser.prototype.parse = function (argv) {
+  let opts = Object.create(null);
+  let operands = [];
+  let errors = [];
 
-  let _trueOrNextVal = function (argParts, args) {
-    if (argParts[1]) {
-      return argParts[1];
+  let self = this;
+  let longSpec = function (name) { return hasOwn(self.long, name) ? self.long[name] : null; };
+  let shortSpec = function (ch) { return hasOwn(self.short, ch) ? self.short[ch] : null; };
+
+  let i = 0;
+  let n = argv.length;
+  let endOfOpts = false;
+
+  while (i < n) {
+    let arg = argv[i];
+
+    // Everything after a bare '--' is an operand, even if it looks like an option.
+    if (endOfOpts) {
+      operands.push(arg);
+      i++;
+      continue;
     }
-    else {
-      return (!args[0] || isOpt(args[0])) ?
-        true : args.shift();
+    if (arg === '--') {
+      endOfOpts = true;
+      i++;
+      continue;
     }
-  };
 
-  /**
-   * Parses an array of arguments into options and positional commands
-   * @param {Array} args The command-line args to parse
-   */
-  this.parse = function (args) {
-    let cmds = [];
-    let cmd;
-    let envVars = {};
-    let opts = {};
-    let arg;
-    let argItem;
-    let argParts;
-    let cmdItems;
-    let taskNames = [];
-    let preempt;
-
-    while (args.length) {
-      arg = args.shift();
-
-      if (isOpt(arg)) {
-        arg = removeOptPrefix(arg);
-        argParts = arg.split('=');
-        argItem = this.longOpts[argParts[0]] || this.shortOpts[argParts[0]];
-        if (argItem) {
-          // First-encountered preemptive opt takes precedence -- no further opts
-          // or possibility of ambiguity, so just look for a value, or set to
-          // true and then bail
-          if (argItem.preempts) {
-            opts[argItem.full] = _trueOrNextVal(argParts, args);
-            preempt = true;
-            break;
-          }
-          // If the opt requires a value, see if we can get a value from the
-          // next arg, or infer true from no-arg -- if it's followed by another
-          // opt, throw an error
-          if (argItem.expectValue || argItem.allowValue) {
-            opts[argItem.full] = _trueOrNextVal(argParts, args);
-            if (argItem.expectValue && !opts[argItem.full]) {
-              throw new Error(argItem.full + ' option expects a value.');
-            }
+    // Long option: --name or --name=value  ('=' splits on the FIRST '=' only)
+    if (arg.slice(0, 2) === '--') {
+      let body = arg.slice(2);
+      let eq = body.indexOf('=');
+      let name = eq === -1 ? body : body.slice(0, eq);
+      let attached = eq === -1 ? null : body.slice(eq + 1);
+      let spec = longSpec(name);
+
+      if (!spec) {
+        errors.push({ code: 'unknown-option', arg: '--' + name });
+        i++;
+        continue;
+      }
+      if (spec.expectValue) {
+        if (attached !== null) {
+          opts[spec.full] = attached;
+          i++;
+        }
+        else {
+          let next = argv[i + 1];
+          if (next === undefined || isOptionLike(next)) {
+            errors.push({ code: 'missing-value', arg: '--' + name });
+            i++;
           }
           else {
-            opts[argItem.full] = true;
+            opts[spec.full] = next;
+            i += 2;
           }
         }
       }
       else {
-        cmds.unshift(arg);
+        if (attached !== null) {
+          errors.push({ code: 'unexpected-value', arg: '--' + name });
+        }
+        else {
+          opts[spec.full] = true;
+        }
+        i++;
       }
+      continue;
     }
 
-    if (!preempt) {
-      // Parse out any env-vars and task-name
-      while ((cmd = cmds.pop())) {
-        cmdItems = cmd.split('=');
-        if (cmdItems.length > 1) {
-          envVars[cmdItems[0]] = cmdItems[1];
+    // Short option(s): -x, -xyz (grouped), -xVALUE (attached), -x=VALUE
+    if (arg.charAt(0) === '-' && arg.length > 1) {
+      let j = 1;
+      let consumedNext = false;
+      while (j < arg.length) {
+        let ch = arg.charAt(j);
+        let spec = shortSpec(ch);
+        if (!spec) {
+          errors.push({ code: 'unknown-option', arg: '-' + ch });
+          break; // stop peeling this token on the first unknown char
         }
-        else {
-          taskNames.push(cmd);
+        if (spec.expectValue) {
+          // The rest of the token is the value; a single leading '=' is a
+          // separator (so -o=-weird.html -> '-weird.html', -m=| -> '|').
+          let rest = arg.slice(j + 1);
+          if (rest.length > 0) {
+            if (rest.charAt(0) === '=') {
+              rest = rest.slice(1);
+            }
+            opts[spec.full] = rest;
+          }
+          else {
+            let next = argv[i + 1];
+            if (next === undefined || isOptionLike(next)) {
+              errors.push({ code: 'missing-value', arg: '-' + ch });
+            }
+            else {
+              opts[spec.full] = next;
+              consumedNext = true;
+            }
+          }
+          break; // a value-taking option ends the group
         }
+        opts[spec.full] = true; // boolean flag; keep peeling
+        j++;
       }
+      i += consumedNext ? 2 : 1;
+      continue;
+    }
 
+    // A bare '-' is not an operand and not a valid value.
+    if (arg === '-') {
+      errors.push({ code: 'unknown-option', arg: '-' });
+      i++;
+      continue;
     }
 
-    return {
-      opts: opts,
-      envVars: envVars,
-      taskNames: taskNames
-    };
-  };
+    // Anything else is an opaque operand.
+    operands.push(arg);
+    i++;
+  }
 
+  return {
+    opts: opts,
+    operands: operands,
+    errors: errors
+  };
 };
 
 export default parseargs;

package/node_modules/ejs/lib/esm/utils.js

@@ -146,38 +146,6 @@ utils.shallowCopy = function (to, from) {
   return to;
 };
 
-/**
- * Naive copy of a list of key names, from one object to another.
- * Only copies property if it is actually defined
- * Does not recurse into non-scalar properties
- *
- * @param  {Object} to   Destination object
- * @param  {Object} from Source object
- * @param  {Array} list List of properties to copy
- * @return {Object}      Destination object
- * @static
- * @private
- */
-utils.shallowCopyFromList = function (to, from, list) {
-  list = list || [];
-  from = from || {};
-  if ((to !== null) && (to !== undefined)) {
-    for (var i = 0; i < list.length; i++) {
-      var p = list[i];
-      if (typeof from[p] != 'undefined') {
-        if (!hasOwn(from, p)) {
-          continue;
-        }
-        if (p === '__proto__' || p === 'constructor') {
-          continue;
-        }
-        to[p] = from[p];
-      }
-    }
-  }
-  return to;
-};
-
 /**
  * Simple in-process cache implementation. Does not implement limits of any
  * sort.

package/node_modules/ejs/package.json

@@ -7,7 +7,7 @@
     "engine",
     "ejs"
   ],
-  "version": "6.0.1",
+  "version": "7.0.2",
   "author": "Matthew Eernisse <matthew.eernisse@gmail.com>",
   "license": "Apache-2.0",
   "bin": {
@@ -17,6 +17,7 @@
   "module": "./lib/esm/ejs.js",
   "browser": "./ejs.min.js",
   "exports": {
+    "browser": "./ejs.min.js",
     "import": "./lib/esm/ejs.js",
     "require": "./lib/cjs/ejs.js"
   },
@@ -29,7 +30,7 @@
   "bugs": "https://github.com/mde/ejs/issues",
   "homepage": "https://github.com/mde/ejs",
   "devDependencies": {
-    "jake": "^12.10.1",
+    "jake": "^13.0.1",
     "typescript": "^5.4.5",
     "@babel/eslint-parser": "^7.24.5",
     "browserify": "^17.0.0",

package/node_modules/ejs/usage.txt

@@ -1,24 +1,24 @@
 EJS Embedded JavaScript templates
-{Usage}: ejs [options ...] template-file [data variables ...]
+Usage: ejs [options ...] template-file [data variables ...]
 
-{Options}:
+Options:
   -o,     --output-file FILE            Write the rendered output to FILE rather than stdout.
   -f,     --data-file FILE              Must be JSON-formatted. Use parsed input from FILE as data for rendering.
   -i,     --data-input STRING           Must be JSON-formatted and URI-encoded. Use parsed input from STRING as data for rendering.
   -m,     --delimiter CHARACTER         Use CHARACTER with angle brackets for open/close (defaults to %).
   -p,     --open-delimiter CHARACTER    Use CHARACTER instead of left angle bracket to open.
   -c,     --close-delimiter CHARACTER   Use CHARACTER instead of right angle bracket to close.
-  -s,     --strict                      When set to `true`, generated function is in strict mode
-  -n      --no-with                     Use 'locals' object for vars rather than using `with` (implies --strict).
-  -l      --locals-name                 Name to use for the object storing local variables when not using `with`.
-  -w      --rm-whitespace               Remove all safe-to-remove whitespace, including leading and trailing whitespace.
-  -d      --debug                       Outputs generated function body
+  -s,     --strict                      Generate the function in strict mode (implies --no-with).
+  -n,     --no-with                     Use 'locals' object for vars rather than using `with`.
+  -l,     --locals-name NAME            Name to use for the object storing local variables when not using `with`.
+  -w,     --rm-whitespace               Remove all safe-to-remove whitespace, including leading and trailing whitespace.
+  -d,     --debug                       Outputs generated function body
   -h,     --help                        Display this help message.
   -V/v,   --version                     Display the EJS version.
 
-{Examples}:
+Examples:
   ejs -m $ ./test/fixtures/user.ejs -f ./user_data.json
   ejs -m $ ./test/fixtures/user.ejs name=Lerxst
   ejs -p [ -c ] ./template_file.ejs -o ./output.html
   ejs -n -l _ ./some_template.ejs -f ./data_file.json
-  ejs -w ./template_with_whitspace.ejs -o ./output_file.html
+  ejs -w ./template_with_whitespace.ejs -o ./output_file.html

package/node_modules/follow-redirects/index.js

@@ -302,6 +302,15 @@ RedirectableRequest.prototype._sanitizeOptions = function (options) {
   if (!options.headers) {
     options.headers = {};
   }
+  // Convert [header1, value1, header2, value2, …] to object
+  else if (Array.isArray(options.headers)) {
+    var headerList = options.headers;
+    options.headers = {};
+    for (var i = 0; i < headerList.length; i += 2) {
+      options.headers[headerList[i]] = headerList[i + 1];
+    }
+  }
+  // Ensure sensitive headers are always present
   if (!isArray(options.sensitiveHeaders)) {
     options.sensitiveHeaders = [];
   }
@@ -701,7 +710,7 @@ function isURL(value) {
 }
 
 function escapeRegex(regex) {
-  return regex.replace(/[\]\\/()*+?.$]/g, "\\$&");
+  return regex.replace(/[[\]\\/()*+?.^$|]/g, "\\$&");
 }
 
 // Exports

package/node_modules/follow-redirects/package.json

@@ -1,6 +1,6 @@
 {
   "name": "follow-redirects",
-  "version": "1.16.0",
+  "version": "1.16.1",
   "description": "HTTP and HTTPS modules that follow redirects.",
   "license": "MIT",
   "main": "index.js",

package/node_modules/graphql-ws/dist/client.cjs

@@ -119,6 +119,7 @@ function createClient(options) {
         cb(event);
       })
     ];
+    return () => listening.forEach((unlisten) => unlisten());
   }
   let connecting, locks = 0, lazyCloseTimeout, retrying = false, retries = 0, disposed = false;
   async function connect() {
@@ -218,7 +219,8 @@ function createClient(options) {
                     } : {
                       type: common.MessageType.Pong
                       // payload is completely absent if not provided
-                    }
+                    },
+                    replacer
                   )
                 );
                 emitter.emit("pong", false, message.payload);
@@ -235,10 +237,12 @@ function createClient(options) {
             emitter.emit("connected", socket2, message.payload, retrying);
             retrying = false;
             retries = 0;
-            connected([
-              socket2,
-              new Promise((_, reject) => errorOrClosed(reject))
-            ]);
+            const throwOnClose2 = new Promise(
+              (_, reject) => errorOrClosed(reject)
+            );
+            throwOnClose2.catch(() => {
+            });
+            connected([socket2, throwOnClose2]);
           } catch (err) {
             socket2.onmessage = null;
             emitter.emit("error", err);
@@ -260,23 +264,30 @@ function createClient(options) {
     return [
       socket,
       release,
-      Promise.race([
-        // wait for
+      // resolves on release or rejects on error/close, whichever comes first.
+      // not racing with throwOnClose on purpose, it lives as long as the socket
+      // and every race would leak memory per operation
+      new Promise((resolve, reject) => {
+        const unlisten = errorOrClosed(reject);
+        if (socket.readyState !== WebSocketImpl.OPEN)
+          throwOnClose.catch(reject);
         released.then(() => {
+          unlisten();
           if (!locks) {
             const complete = () => socket.close(1e3, "Normal Closure");
             if (isFinite(lazyCloseTimeoutMs) && lazyCloseTimeoutMs > 0) {
+              clearTimeout(lazyCloseTimeout);
               lazyCloseTimeout = setTimeout(() => {
-                if (socket.readyState === WebSocketImpl.OPEN) complete();
+                if (!locks && socket.readyState === WebSocketImpl.OPEN)
+                  complete();
               }, lazyCloseTimeoutMs);
             } else {
               complete();
             }
           }
-        }),
-        // or
-        throwOnClose
-      ])
+          resolve();
+        });
+      })
     ];
   }
   function shouldRetryConnectOrThrow(errOrCloseEvent) {
@@ -330,7 +341,11 @@ function createClient(options) {
       for (; ; ) {
         try {
           const [socket, release, waitForReleaseOrThrowOnClose] = await connect();
-          if (done) return release();
+          if (done) {
+            waitForReleaseOrThrowOnClose.catch(() => {
+            });
+            return release();
+          }
           const unlisten = emitter.onMessage(id, (message) => {
             switch (message.type) {
               case common.MessageType.Next: {

package/node_modules/graphql-ws/dist/client.js

@@ -118,6 +118,7 @@ function createClient(options) {
         cb(event);
       })
     ];
+    return () => listening.forEach((unlisten) => unlisten());
   }
   let connecting, locks = 0, lazyCloseTimeout, retrying = false, retries = 0, disposed = false;
   async function connect() {
@@ -217,7 +218,8 @@ function createClient(options) {
                     } : {
                       type: MessageType.Pong
                       // payload is completely absent if not provided
-                    }
+                    },
+                    replacer
                   )
                 );
                 emitter.emit("pong", false, message.payload);
@@ -234,10 +236,12 @@ function createClient(options) {
             emitter.emit("connected", socket2, message.payload, retrying);
             retrying = false;
             retries = 0;
-            connected([
-              socket2,
-              new Promise((_, reject) => errorOrClosed(reject))
-            ]);
+            const throwOnClose2 = new Promise(
+              (_, reject) => errorOrClosed(reject)
+            );
+            throwOnClose2.catch(() => {
+            });
+            connected([socket2, throwOnClose2]);
           } catch (err) {
             socket2.onmessage = null;
             emitter.emit("error", err);
@@ -259,23 +263,30 @@ function createClient(options) {
     return [
       socket,
       release,
-      Promise.race([
-        // wait for
+      // resolves on release or rejects on error/close, whichever comes first.
+      // not racing with throwOnClose on purpose, it lives as long as the socket
+      // and every race would leak memory per operation
+      new Promise((resolve, reject) => {
+        const unlisten = errorOrClosed(reject);
+        if (socket.readyState !== WebSocketImpl.OPEN)
+          throwOnClose.catch(reject);
         released.then(() => {
+          unlisten();
           if (!locks) {
             const complete = () => socket.close(1e3, "Normal Closure");
             if (isFinite(lazyCloseTimeoutMs) && lazyCloseTimeoutMs > 0) {
+              clearTimeout(lazyCloseTimeout);
               lazyCloseTimeout = setTimeout(() => {
-                if (socket.readyState === WebSocketImpl.OPEN) complete();
+                if (!locks && socket.readyState === WebSocketImpl.OPEN)
+                  complete();
               }, lazyCloseTimeoutMs);
             } else {
               complete();
             }
           }
-        }),
-        // or
-        throwOnClose
-      ])
+          resolve();
+        });
+      })
     ];
   }
   function shouldRetryConnectOrThrow(errOrCloseEvent) {
@@ -329,7 +340,11 @@ function createClient(options) {
       for (; ; ) {
         try {
           const [socket, release, waitForReleaseOrThrowOnClose] = await connect();
-          if (done) return release();
+          if (done) {
+            waitForReleaseOrThrowOnClose.catch(() => {
+            });
+            return release();
+          }
           const unlisten = emitter.onMessage(id, (message) => {
             switch (message.type) {
               case MessageType.Next: {

package/node_modules/graphql-ws/dist/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var client = require('./client.cjs');
-var server = require('./server-DN5-9C2B.cjs');
+var server = require('./server-Ce-Z86Ys.cjs');
 var common = require('./common-DqFHi7oM.cjs');
 require('graphql');
 

package/node_modules/graphql-ws/dist/index.d.cts

@@ -1,4 +1,4 @@
 export { Client, ClientOptions, Event, EventClosed, EventClosedListener, EventConnected, EventConnectedListener, EventConnecting, EventConnectingListener, EventError, EventErrorListener, EventListener, EventMessage, EventMessageListener, EventOpened, EventOpenedListener, EventPing, EventPingListener, EventPong, EventPongListener, TerminatedCloseEvent, createClient } from './client.cjs';
-export { C as Context, G as GraphQLExecutionContextValue, O as OperationResult, a as Server, S as ServerOptions, W as WebSocket, b as areGraphQLErrors, h as handleProtocols, m as makeServer } from './server-ChpuX357.cjs';
+export { C as Context, G as GraphQLExecutionContextValue, O as OperationResult, a as Server, S as ServerOptions, W as WebSocket, b as areGraphQLErrors, h as handleProtocols, m as makeServer } from './server-u6zrlwzL.cjs';
 export { C as CloseCode, h as CompleteMessage, c as ConnectionAckMessage, b as ConnectionInitMessage, D as DEPRECATED_GRAPHQL_WS_PROTOCOL, a as Disposable, g as ErrorMessage, E as ExecutionResult, F as FormattedExecutionResult, G as GRAPHQL_TRANSPORT_WS_PROTOCOL, I as ID, j as JSONMessageReplacer, J as JSONMessageReviver, i as Message, M as MessageType, N as NextMessage, P as PingMessage, d as PongMessage, S as Sink, e as SubscribeMessage, f as SubscribePayload, p as parseMessage, s as stringifyMessage, v as validateMessage } from './common-DY-PBNYy.cjs';
 import 'graphql';

package/node_modules/graphql-ws/dist/index.d.ts

@@ -1,4 +1,4 @@
 export { Client, ClientOptions, Event, EventClosed, EventClosedListener, EventConnected, EventConnectedListener, EventConnecting, EventConnectingListener, EventError, EventErrorListener, EventListener, EventMessage, EventMessageListener, EventOpened, EventOpenedListener, EventPing, EventPingListener, EventPong, EventPongListener, TerminatedCloseEvent, createClient } from './client.js';
-export { C as Context, G as GraphQLExecutionContextValue, O as OperationResult, a as Server, S as ServerOptions, W as WebSocket, b as areGraphQLErrors, h as handleProtocols, m as makeServer } from './server-B8ZBs9OC.js';
+export { C as Context, G as GraphQLExecutionContextValue, O as OperationResult, a as Server, S as ServerOptions, W as WebSocket, b as areGraphQLErrors, h as handleProtocols, m as makeServer } from './server-BzBeHlSW.js';
 export { C as CloseCode, h as CompleteMessage, c as ConnectionAckMessage, b as ConnectionInitMessage, D as DEPRECATED_GRAPHQL_WS_PROTOCOL, a as Disposable, g as ErrorMessage, E as ExecutionResult, F as FormattedExecutionResult, G as GRAPHQL_TRANSPORT_WS_PROTOCOL, I as ID, j as JSONMessageReplacer, J as JSONMessageReviver, i as Message, M as MessageType, N as NextMessage, P as PingMessage, d as PongMessage, S as Sink, e as SubscribeMessage, f as SubscribePayload, p as parseMessage, s as stringifyMessage, v as validateMessage } from './common-DY-PBNYy.js';
 import 'graphql';

package/node_modules/graphql-ws/dist/index.js

@@ -1,4 +1,4 @@
 export { TerminatedCloseEvent, createClient } from './client.js';
-export { a as areGraphQLErrors, h as handleProtocols, m as makeServer } from './server-DHPI7HHW.js';
+export { a as areGraphQLErrors, h as handleProtocols, m as makeServer } from './server-zBhvXJ_Z.js';
 export { C as CloseCode, D as DEPRECATED_GRAPHQL_WS_PROTOCOL, G as GRAPHQL_TRANSPORT_WS_PROTOCOL, M as MessageType, p as parseMessage, s as stringifyMessage, v as validateMessage } from './common-CGW11Fyb.js';
 import 'graphql';

package/node_modules/graphql-ws/dist/{server-B8ZBs9OC.d.ts → server-BzBeHlSW.d.ts}

@@ -1,5 +1,5 @@
 import { GraphQLSchema, ExecutionArgs, OperationTypeNode, parse, validate, GraphQLError, GraphQLFormattedError, FormattedExecutionResult } from 'graphql';
-import { E as ExecutionResult, b as ConnectionInitMessage, I as ID, f as SubscribePayload, J as JSONMessageReviver, j as JSONMessageReplacer, P as PingMessage, d as PongMessage, G as GRAPHQL_TRANSPORT_WS_PROTOCOL } from './common-DY-PBNYy.js';
+import { E as ExecutionResult, b as ConnectionInitMessage, I as ID, f as SubscribePayload, P as PingMessage, d as PongMessage, J as JSONMessageReviver, j as JSONMessageReplacer, G as GRAPHQL_TRANSPORT_WS_PROTOCOL } from './common-DY-PBNYy.js';
 
 /**
  *
@@ -169,6 +169,31 @@ interface ServerOptions<P extends ConnectionInitMessage['payload'] = ConnectionI
      * of the connection state - consider using the `onClose` callback.
      */
     onDisconnect?: undefined | ((ctx: Context<P, E>, code?: number, reason?: string) => Promise<void> | void);
+    /**
+     * Called when the client sends a {@link MessageType.Ping} message, at any
+     * point after the connection is opened - before or after the connection
+     * initialisation phase.
+     *
+     * If the client sent the ping with a payload, it will be passed through the
+     * second argument. The first argument provides the {@link Context} of the
+     * connection.
+     *
+     * If this callback is implemented, the server will still automatically reply
+     * to the ping with a pong, right after the callback resolves. Use the
+     * low-level `onPing` listener on the websocket itself for full control over
+     * the response - implementing that listener disables the automatic pong.
+     */
+    onPing?: undefined | ((ctx: Context<P, E>, payload: PingMessage['payload']) => Promise<void> | void);
+    /**
+     * Called when the client sends a {@link MessageType.Pong} message, at any
+     * point after the connection is opened - before or after the connection
+     * initialisation phase.
+     *
+     * If the client sent the pong with a payload, it will be passed through the
+     * second argument. The first argument provides the {@link Context} of the
+     * connection.
+     */
+    onPong?: undefined | ((ctx: Context<P, E>, payload: PongMessage['payload']) => Promise<void> | void);
     /**
      * Called when the socket closes for whatever reason, at any
      * point in time. Provides the close event too. Beware