@blamejs/blamejs-shop 0.4.101 → 0.4.102

package/lib/vendor/blamejs/test/layer-0-primitives/ws-client.test.js

@@ -21,6 +21,60 @@ function rejects(label, fn, pattern) {
 
 function _sleep(ms) { return helpers.passiveObserve(ms, "ws-client: handshake/echo/close real-time observation"); }
 
+// Every wsClient dialed in the test holds a client socket. A client that
+// errors, times out, or schedules a reconnect never reaches a graceful
+// close(), so its socket finalizes its async destroy past the forked worker's
+// post-run grace window. Track every live client here so the drain can retire
+// each one (cancel reconnect + destroy the socket) and then poll until the TCP
+// handles release inside run().
+var _liveClients = [];
+function _trackedConnect(url, opts) {
+  var c = b.wsClient.connect(url, opts);
+  _liveClients.push(c);
+  return c;
+}
+
+// The in-process fixture servers keep their accepted upgrade sockets open (the
+// flood / stub / hold-open scenarios never send FIN), so server.close() alone
+// stops listening but leaves those sockets — and their TCPSocketWrap handles —
+// alive. Track every server so the drain can force its live connections shut.
+var _liveServers = [];
+function _trackServer(server) {
+  _liveServers.push(server);
+  return server;
+}
+
+async function _drainTcpHandles() {
+  _liveClients.forEach(function (c) {
+    try { c.cancelReconnect(); } catch (_e) { /* best-effort */ }
+    try { c.close(); } catch (_e) { /* best-effort */ }
+    // Force the socket down NOW — close()'s graceful path defers the socket
+    // teardown behind a 1s timer, which would itself outlive run().
+    try { c._teardown(b.wsClient.CLOSE_NORMAL, "", false); } catch (_e) { /* best-effort */ }
+  });
+  _liveServers.forEach(function (s) {
+    // Destroy any accepted upgrade / hold-open sockets the server is keeping
+    // alive (these are detached from the HTTP server's connection tracking, so
+    // closeAllConnections can't see them), then stop listening.
+    if (Array.isArray(s._wsSockets)) {
+      s._wsSockets.forEach(function (sock) {
+        try { if (sock && !sock.destroyed) sock.destroy(); } catch (_e) { /* best-effort */ }
+      });
+      s._wsSockets = [];
+    }
+    try { if (typeof s.closeAllConnections === "function") s.closeAllConnections(); } catch (_e) { /* best-effort */ }
+    try { s.close(); } catch (_e) { /* best-effort */ }
+  });
+  _liveClients = [];
+  _liveServers = [];
+  if (typeof process.getActiveResourcesInfo !== "function") return;
+  await helpers.waitUntil(function () {
+    return process.getActiveResourcesInfo().filter(function (t) {
+      return t === "TCPSocketWrap" || t === "TCPServerWrap";
+    }).length === 0;
+  }, { timeoutMs: 5000, label: "ws-client: TCP handle drain after client teardown" });
+}
+
 // Minimal in-process WebSocket server using lib/websocket primitives.
 function _makeServer(opts) {
   opts = opts || {};
@@ -28,7 +82,12 @@ function _makeServer(opts) {
     res.writeHead(404);
     res.end();
   });
+  // Upgrade hands socket ownership to this handler, so the HTTP server no
+  // longer tracks it — closeAllConnections() can't reach it. Record each one
+  // so the drain can destroy them directly.
+  server._wsSockets = [];
   server.on("upgrade", function (req, socket /*, head */) {
+    server._wsSockets.push(socket);
     var key = req.headers["sec-websocket-key"];
     if (!key) {
       socket.write("HTTP/1.1 400 Bad Request\r\n\r\n");
@@ -92,12 +151,20 @@ function _makeServer(opts) {
   });
   return new Promise(function (resolve) {
     server.listen(0, "127.0.0.1", function () {
-      resolve(server);
+      resolve(_trackServer(server));
     });
   });
 }
 
 async function run() {
+  try {
+    await _runTests();
+  } finally {
+    await _drainTcpHandles();
+  }
+}
+
+async function _runTests() {
   // ---- shape ----
   check("b.wsClient is object",                   typeof b.wsClient === "object");
   check("b.wsClient.connect is fn",               typeof b.wsClient.connect === "function");
@@ -141,7 +208,7 @@ async function run() {
   // ---- happy path: connect + send + echo ----
   var server = await _makeServer({});
   var port = server.address().port;
-  var client = b.wsClient.connect("ws://127.0.0.1:" + port + "/", {
+  var client = _trackedConnect("ws://127.0.0.1:" + port + "/", {
     reconnect: false,
     audit: false,
     allowInternal: true,
@@ -189,7 +256,7 @@ async function run() {
   // ---- send before open ----
   var server2 = await _makeServer({});
   var port2 = server2.address().port;
-  var c2 = b.wsClient.connect("ws://127.0.0.1:" + port2, { reconnect: false, audit: false, allowInternal: true });
+  var c2 = _trackedConnect("ws://127.0.0.1:" + port2, { reconnect: false, audit: false, allowInternal: true });
   rejects("send: not open yet",
     function () { c2.send("data"); }, /not open/);
   c2.close();
@@ -199,7 +266,7 @@ async function run() {
   // ---- bad accept hash ----
   var server3 = await _makeServer({ tamperKey: true });
   var port3 = server3.address().port;
-  var c3 = b.wsClient.connect("ws://127.0.0.1:" + port3, {
+  var c3 = _trackedConnect("ws://127.0.0.1:" + port3, {
     reconnect: false, audit: false, allowInternal: true,
   });
   var c3Err = null;
@@ -211,7 +278,7 @@ async function run() {
   // ---- non-101 status ----
   var server4 = await _makeServer({ rejectStatus: 403 });
   var port4 = server4.address().port;
-  var c4 = b.wsClient.connect("ws://127.0.0.1:" + port4, {
+  var c4 = _trackedConnect("ws://127.0.0.1:" + port4, {
     reconnect: false, audit: false, allowInternal: true,
   });
   var c4Err = null;
@@ -229,7 +296,7 @@ async function run() {
   // bad-status code is split by the carried status, not re-derived by the caller.
   var server4b = await _makeServer({ rejectStatus: 503 });
   var port4b = server4b.address().port;
-  var c4b = b.wsClient.connect("ws://127.0.0.1:" + port4b, {
+  var c4b = _trackedConnect("ws://127.0.0.1:" + port4b, {
     reconnect: false, audit: false, allowInternal: true,
   });
   var c4bErr = null;
@@ -243,7 +310,7 @@ async function run() {
   // ---- subprotocol negotiation ----
   var server5 = await _makeServer({ subprotocol: "json-stream-v1" });
   var port5 = server5.address().port;
-  var c5 = b.wsClient.connect("ws://127.0.0.1:" + port5, {
+  var c5 = _trackedConnect("ws://127.0.0.1:" + port5, {
     subprotocols: ["json-stream-v1", "msgpack-stream"],
     reconnect: false, audit: false, allowInternal: true,
   });
@@ -259,7 +326,7 @@ async function run() {
   // ---- subprotocol-not-in-offer rejected ----
   var server6 = await _makeServer({ subprotocol: "ghost-protocol" });
   var port6 = server6.address().port;
-  var c6 = b.wsClient.connect("ws://127.0.0.1:" + port6, {
+  var c6 = _trackedConnect("ws://127.0.0.1:" + port6, {
     subprotocols: ["json-stream-v1"],
     reconnect: false, audit: false, allowInternal: true,
   });
@@ -274,7 +341,7 @@ async function run() {
   // is attempted (where the CRLF check fires).
   var server7a = await _makeServer({});
   var port7a = server7a.address().port;
-  var c7a = b.wsClient.connect("ws://127.0.0.1:" + port7a, {
+  var c7a = _trackedConnect("ws://127.0.0.1:" + port7a, {
     headers: { "X-Evil": "value\r\nX-Other: injected" },
     reconnect: false, audit: false, allowInternal: true,
   });
@@ -287,7 +354,7 @@ async function run() {
   // ---- maxMessageBytes guard on send ----
   var server7 = await _makeServer({});
   var port7 = server7.address().port;
-  var c7 = b.wsClient.connect("ws://127.0.0.1:" + port7, {
+  var c7 = _trackedConnect("ws://127.0.0.1:" + port7, {
     maxMessageBytes: 100,
     reconnect: false, audit: false, allowInternal: true,
   });
@@ -304,7 +371,7 @@ async function run() {
   // enforced on the running fragment total, not only at FIN (CWE-770).
   var serverFlood = await _makeServer({ floodFragments: { partBytes: 600, count: 4 } });
   var portFlood = serverFlood.address().port;
-  var cFlood = b.wsClient.connect("ws://127.0.0.1:" + portFlood, {
+  var cFlood = _trackedConnect("ws://127.0.0.1:" + portFlood, {
     maxMessageBytes: 1024,            // 600 + 600 = 1200 > 1024 before any FIN
     reconnect: false, audit: false, allowInternal: true,
   });
@@ -320,7 +387,7 @@ async function run() {
   // ---- url + readyState getters ----
   var server8 = await _makeServer({});
   var port8 = server8.address().port;
-  var c8 = b.wsClient.connect("ws://127.0.0.1:" + port8 + "/foo", {
+  var c8 = _trackedConnect("ws://127.0.0.1:" + port8 + "/foo", {
     reconnect: false, audit: false, allowInternal: true,
   });
   // Poll for handshake completion rather than a fixed-budget sleep — the
@@ -335,10 +402,14 @@ async function run() {
 
   // ---- handshake timeout ----
   // Connect to a TCP server that accepts then never responds.
-  var stubServer = net.createServer(function (sock) { /* accept and hold */ });
+  var stubServer = _trackServer(net.createServer(function (sock) {
+    // Accept and hold — record it so the drain destroys the held socket.
+    stubServer._wsSockets.push(sock);
+  }));
+  stubServer._wsSockets = [];
   await new Promise(function (r) { stubServer.listen(0, "127.0.0.1", r); });
   var stubPort = stubServer.address().port;
-  var c9 = b.wsClient.connect("ws://127.0.0.1:" + stubPort, {
+  var c9 = _trackedConnect("ws://127.0.0.1:" + stubPort, {
     handshakeTimeoutMs: 200,
     reconnect: false, audit: false, allowInternal: true,
   });
@@ -350,7 +421,7 @@ async function run() {
 
   // ---- reconnect: connection refused → schedules reconnect ----
   // Use a port we know nobody listens on.
-  var c10 = b.wsClient.connect("ws://127.0.0.1:1", {
+  var c10 = _trackedConnect("ws://127.0.0.1:1", {
     reconnect: { maxAttempts: 1, baseMs: 50, maxMs: 100 },
     handshakeTimeoutMs: 200,
     audit: false,
@@ -367,7 +438,7 @@ async function run() {
   // ---- permanent error: 4xx skips reconnect ----
   var server4xx = await _makeServer({ rejectStatus: 403 });
   var port4xx = server4xx.address().port;
-  var c11 = b.wsClient.connect("ws://127.0.0.1:" + port4xx, {
+  var c11 = _trackedConnect("ws://127.0.0.1:" + port4xx, {
     reconnect: { maxAttempts: 5, baseMs: 50, maxMs: 100 },
     audit: false,
     allowInternal: true,
@@ -385,7 +456,7 @@ async function run() {
   // alwaysPermanent → _isPermanentError always true → willReconnect always false).
   var server5xx = await _makeServer({ rejectStatus: 503 });
   var port5xx = server5xx.address().port;
-  var c12 = b.wsClient.connect("ws://127.0.0.1:" + port5xx, {
+  var c12 = _trackedConnect("ws://127.0.0.1:" + port5xx, {
     reconnect: { maxAttempts: 1, baseMs: 50, maxMs: 100 },
     audit: false,
     allowInternal: true,
@@ -401,7 +472,7 @@ async function run() {
   // ---- close() reason length cap (>123 bytes truncated) ----
   var serverCl = await _makeServer({});
   var portCl = serverCl.address().port;
-  var cCl = b.wsClient.connect("ws://127.0.0.1:" + portCl, { reconnect: false, audit: false, allowInternal: true });
+  var cCl = _trackedConnect("ws://127.0.0.1:" + portCl, { reconnect: false, audit: false, allowInternal: true });
   await _sleep(200);
   // Should not throw — close() truncates internally.
   cCl.close(1000, "x".repeat(500));
@@ -420,7 +491,7 @@ async function run() {
   // Custom GUID accepted at config time. Wire round-trip is exercised in the
   // ws-client integration test; here we only confirm config-time validation
   // does not refuse a valid string.
-  var cGuid = b.wsClient.connect("ws://127.0.0.1:1", {
+  var cGuid = _trackedConnect("ws://127.0.0.1:1", {
     handshakeGuid: "MY-CUSTOM-GUID-12345678",
     reconnect: false, audit: false, allowInternal: true,
     handshakeTimeoutMs: 100,
@@ -439,7 +510,7 @@ async function run() {
   function _onUnhandled(e) { sawUnhandled = e; }
   process.on("unhandledRejection", _onUnhandled);
   var ssrfErr = null;
-  var cSwap = b.wsClient.connect("ws://127.0.0.1:1", {
+  var cSwap = _trackedConnect("ws://127.0.0.1:1", {
     urlFor: function () { return "ws://169.254.169.254:1/"; },   // cloud-metadata — hard-deny
     reconnect: false, audit: false, allowInternal: true,        // allowInternal must NOT bypass metadata
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/blamejs-shop",
-  "version": "0.4.101",
+  "version": "0.4.102",
   "description": "Open-source framework built on blamejs. Vendored stack, zero npm runtime deps, PQC-first crypto, security-on by default.",
   "main": "lib/index.js",
   "scripts": {