@coralreefventures/site-tools 0.1.0 → 0.2.0

package/dist/lighthouse.js

@@ -65,7 +65,7 @@ export const runLighthouse = async (options = {}) => {
     const log = options.log ?? console.log;
     const paths = options.paths?.length ? options.paths : await pagesFromSitemap(root);
     const chrome = options.chrome ?? (await playwrightChromium());
-    const { server, url: origin } = await serve({ root, port: options.port ?? 3160 });
+    const { server, url: origin } = await serve({ root, port: options.port ?? 0 });
     const results = [];
     try {
         await mkdir(reportDir, { recursive: true });

package/dist/lighthouse.js.map

@@ -1 +1 @@
-{"version":3,"file":"lighthouse.js","sourceRoot":"","sources":["../src/lighthouse.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,KAAK,CAAU,CAAC;AAgC7F,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAqB,EAAE;IACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACxG,CAAC,CAAC;AAEF,yGAAyG;AACzG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,CAChE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC;AAExF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,KAAK,IAAiC,EAAE;IACjE,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,kCAAC,SAAS,EAAC,CAAmD,CAAC;QAC/F,OAAO,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe,EAAE,MAA0B,EAAE,EAAE,CACvF,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACpC,MAAM,GAAG,GAAG,KAAK,CACf,MAAM,EACN;QACE,KAAK;QACL,cAAc,OAAO,EAAE;QACvB,GAAG;QACH,qBAAqB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC3C,eAAe;QACf,eAAe;QACf,iBAAiB,IAAI,EAAE;QACvB,4CAA4C;QAC5C,SAAS;KACV,EACD,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAC5G,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,UAA6B,EAAE,EAAyB,EAAE;IAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC,GAAG,MAAM,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,IAAI,cAAc,EAAE,MAAM,CAAC,CAAW,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CACtD,CAAC;YAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;gBAChC,MAAM,EAAE,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IACD,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,qBAAqB,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}
+{"version":3,"file":"lighthouse.js","sourceRoot":"","sources":["../src/lighthouse.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,KAAK,CAAU,CAAC;AAgC7F,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAqB,EAAE;IACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACxG,CAAC,CAAC;AAEF,yGAAyG;AACzG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,CAChE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC;AAExF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,KAAK,IAAiC,EAAE;IACjE,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,kCAAC,SAAS,EAAC,CAAmD,CAAC;QAC/F,OAAO,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe,EAAE,MAA0B,EAAE,EAAE,CACvF,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACpC,MAAM,GAAG,GAAG,KAAK,CACf,MAAM,EACN;QACE,KAAK;QACL,cAAc,OAAO,EAAE;QACvB,GAAG;QACH,qBAAqB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC3C,eAAe;QACf,eAAe;QACf,iBAAiB,IAAI,EAAE;QACvB,4CAA4C;QAC5C,SAAS;KACV,EACD,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAC5G,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,UAA6B,EAAE,EAAyB,EAAE;IAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC,GAAG,MAAM,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,IAAI,cAAc,EAAE,MAAM,CAAC,CAAW,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CACtD,CAAC;YAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;gBAChC,MAAM,EAAE,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IACD,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,qBAAqB,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}

package/dist/serve.d.ts

@@ -1,6 +1,31 @@
-import { type Server } from "node:http";
+import { type IncomingMessage, type OutgoingHttpHeaders, type Server, type ServerResponse } from "node:http";
+/** The Content-Type a file is served with, by its extension. */
+export declare const contentTypeOf: (file: string) => string;
 /** Brotli or gzip for text, as the browser accepts; images and fonts are already compressed. */
 export declare const encodingFor: (type: string, accepts: string) => "br" | "gzip" | undefined;
+/**
+ * What a decoded path names inside an export, the way Amplify Hosting maps one: a file, a directory's index.html
+ * when the path ends in a slash, a directory reached without its slash (the caller redirects), nothing, or a path
+ * outside the export altogether (the caller refuses it).
+ */
+export type StaticTarget = {
+    kind: "file";
+    file: string;
+} | {
+    kind: "directory";
+} | {
+    kind: "missing";
+    notFound: string;
+} | {
+    kind: "outside";
+};
+export declare const staticTarget: (root: string, decodedPath: string) => Promise<StaticTarget>;
+/**
+ * Streams one file, typed by its extension and compressed as the request accepts, with any extra headers the caller
+ * adds. A HEAD request gets the headers alone. A file that cannot be read after the headers are out ends the
+ * response rather than sending anything else.
+ */
+export declare const sendFile: (request: IncomingMessage, response: ServerResponse, file: string, status?: number, headers?: OutgoingHttpHeaders) => Promise<void>;
 /**
  * A server for a static export the way Amplify Hosting serves one, for screen tests and Lighthouse runs: a directory
  * answers with its index.html, a directory path without its slash redirects to it, anything else is the 404 page

package/dist/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAoBtD,gGAAgG;AAChG,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,EAAE,SAAS,MAAM,KAAG,IAAI,GAAG,MAAM,GAAG,SAK3E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,MAiCjD,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6BAA6B;AAC7B,eAAO,MAAM,KAAK,GAAU,kBAGzB,YAAiB,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAS7D,CAAC"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,MAAM,EACX,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AA4BnB,gEAAgE;AAChE,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAAiE,CAAC;AAK/G,gGAAgG;AAChG,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,EAAE,SAAS,MAAM,KAAG,IAAI,GAAG,MAAM,GAAG,SAK3E,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB,eAAO,MAAM,YAAY,GAAU,MAAM,MAAM,EAAE,aAAa,MAAM,KAAG,OAAO,CAAC,YAAY,CAkB1F,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GACnB,SAAS,eAAe,EACxB,UAAU,cAAc,EACxB,MAAM,MAAM,EACZ,eAAY,EACZ,UAAS,mBAAwB,KAChC,OAAO,CAAC,IAAI,CAqBd,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,MAoB9C,CAAC;AAEL,MAAM,MAAM,YAAY,GAAG;IACzB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6BAA6B;AAC7B,eAAO,MAAM,KAAK,GAAU,kBAGzB,YAAiB,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAS7D,CAAC"}

package/dist/serve.js

@@ -1,72 +1,117 @@
 import { createReadStream } from "node:fs";
 import { stat } from "node:fs/promises";
-import { createServer } from "node:http";
+import { createServer, } from "node:http";
 import path from "node:path";
 import { createBrotliCompress, createGzip } from "node:zlib";
+// This module is also part of the door gate's compute bundle (door/package.ts copies it), so it imports nothing but
+// Node's own modules.
 const types = {
     ".html": "text/html; charset=utf-8",
     ".js": "text/javascript; charset=utf-8",
+    ".mjs": "text/javascript; charset=utf-8",
     ".css": "text/css; charset=utf-8",
     ".json": "application/json",
+    ".webmanifest": "application/manifest+json",
     ".txt": "text/plain; charset=utf-8",
     ".xml": "application/xml",
     ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".avif": "image/avif",
     ".svg": "image/svg+xml",
+    ".woff": "font/woff",
     ".woff2": "font/woff2",
     ".ico": "image/x-icon",
 };
+/** The Content-Type a file is served with, by its extension. */
+export const contentTypeOf = (file) => types[path.extname(file)] ?? "application/octet-stream";
 const isFile = async (file) => (await stat(file).catch(() => null))?.isFile() ?? false;
 const isDirectory = async (file) => (await stat(file).catch(() => null))?.isDirectory() ?? false;
 /** Brotli or gzip for text, as the browser accepts; images and fonts are already compressed. */
 export const encodingFor = (type, accepts) => {
-    if (!/^(text\/|application\/(json|xml)|image\/svg)/.test(type)) {
+    if (!/^(text\/|application\/(json|xml|manifest\+json)|image\/svg)/.test(type)) {
         return undefined;
     }
     return accepts.includes("br") ? "br" : accepts.includes("gzip") ? "gzip" : undefined;
 };
+export const staticTarget = async (root, decodedPath) => {
+    const base = path.resolve(root);
+    const file = path.join(base, decodedPath);
+    if (file !== base && !file.startsWith(`${base}${path.sep}`)) {
+        return { kind: "outside" };
+    }
+    const notFound = path.join(base, "404.html");
+    if (await isFile(file)) {
+        return { kind: "file", file };
+    }
+    if (await isDirectory(file)) {
+        if (decodedPath.endsWith("/")) {
+            const index = path.join(file, "index.html");
+            return (await isFile(index)) ? { kind: "file", file: index } : { kind: "missing", notFound };
+        }
+        return { kind: "directory" };
+    }
+    return { kind: "missing", notFound };
+};
+/**
+ * Streams one file, typed by its extension and compressed as the request accepts, with any extra headers the caller
+ * adds. A HEAD request gets the headers alone. A file that cannot be read after the headers are out ends the
+ * response rather than sending anything else.
+ */
+export const sendFile = async (request, response, file, status = 200, headers = {}) => {
+    if (!(await isFile(file))) {
+        response.writeHead(status, { ...headers, "Content-Length": "0" }).end();
+        return;
+    }
+    const type = contentTypeOf(file);
+    const encoding = encodingFor(type, String(request.headers["accept-encoding"] ?? ""));
+    response.writeHead(status, {
+        ...headers,
+        "Content-Type": type,
+        Vary: "Accept-Encoding",
+        ...(encoding && { "Content-Encoding": encoding }),
+    });
+    if (request.method === "HEAD") {
+        response.end();
+        return;
+    }
+    const body = createReadStream(file);
+    const compressor = encoding === "br" ? createBrotliCompress() : encoding === "gzip" ? createGzip() : undefined;
+    body.on("error", () => response.destroy());
+    (compressor ? body.pipe(compressor) : body).pipe(response);
+};
 /**
  * A server for a static export the way Amplify Hosting serves one, for screen tests and Lighthouse runs: a directory
  * answers with its index.html, a directory path without its slash redirects to it, anything else is the 404 page
  * with status 404, and text is compressed (Brotli or gzip) as the CDN compresses it. Not started: `listen` it, or
  * call `serve`.
  */
-export const createStaticServer = (root) => {
-    const base = path.resolve(root);
-    return createServer(async (request, response) => {
-        const url = new URL(request.url ?? "/", "http://localhost");
-        const file = path.join(base, decodeURIComponent(url.pathname));
-        if (file !== base && !file.startsWith(`${base}${path.sep}`)) {
-            response.writeHead(400).end();
-            return;
-        }
-        const send = (target, status = 200) => {
-            const type = types[path.extname(target)] ?? "application/octet-stream";
-            const encoding = encodingFor(type, String(request.headers["accept-encoding"] ?? ""));
-            response.writeHead(status, {
-                "Content-Type": type,
-                Vary: "Accept-Encoding",
-                ...(encoding && { "Content-Encoding": encoding }),
-            });
-            const body = createReadStream(target);
-            const compressor = encoding === "br" ? createBrotliCompress() : encoding === "gzip" ? createGzip() : undefined;
-            (compressor ? body.pipe(compressor) : body).pipe(response);
-        };
-        if (await isFile(file)) {
-            send(file);
-        }
-        else if (await isDirectory(file)) {
-            if (url.pathname.endsWith("/")) {
-                send(path.join(file, "index.html"));
-            }
-            else {
-                response.writeHead(301, { Location: `${url.pathname}/${url.search}` }).end();
-            }
-        }
-        else {
-            send(path.join(base, "404.html"), 404);
-        }
-    });
-};
+export const createStaticServer = (root) => createServer(async (request, response) => {
+    const url = new URL(request.url ?? "/", "http://localhost");
+    let decoded;
+    try {
+        decoded = decodeURIComponent(url.pathname);
+    }
+    catch {
+        response.writeHead(400).end();
+        return;
+    }
+    const target = await staticTarget(root, decoded);
+    if (target.kind === "outside") {
+        response.writeHead(400).end();
+    }
+    else if (target.kind === "file") {
+        await sendFile(request, response, target.file);
+    }
+    else if (target.kind === "directory") {
+        response.writeHead(301, { Location: `${url.pathname}/${url.search}` }).end();
+    }
+    else {
+        await sendFile(request, response, target.notFound, 404);
+    }
+});
 /** The server, listening. */
 export const serve = async ({ root = "out", port = 3140, } = {}) => {
     const server = createStaticServer(root);

package/dist/serve.js.map

@@ -1 +1 @@
-{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7D,MAAM,KAAK,GAA2B;IACpC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,cAAc;CACvB,CAAC;AAEF,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC;AAC/F,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;AAEzG,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAe,EAA6B,EAAE;IACtF,IAAI,CAAC,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAU,EAAE;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC5D,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,0BAA0B,CAAC;YACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrF,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;gBACzB,cAAc,EAAE,IAAI;gBACpB,IAAI,EAAE,iBAAiB;gBACvB,GAAG,CAAC,QAAQ,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/G,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC,CAAC;QACF,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAC/E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AASF,6BAA6B;AAC7B,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,EAC1B,IAAI,GAAG,KAAK,EACZ,IAAI,GAAG,IAAI,MACK,EAAE,EAA4C,EAAE;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,KAAK,EAAE,EAAE,CAAC;AACtD,CAAC,CAAC"}
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EACL,YAAY,GAKb,MAAM,WAAW,CAAC;AACnB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7D,oHAAoH;AACpH,sBAAsB;AAEtB,MAAM,KAAK,GAA2B;IACpC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,kBAAkB;IAC3B,cAAc,EAAE,2BAA2B;IAC3C,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,cAAc;CACvB,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B,CAAC;AAE/G,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC;AAC/F,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;AAEzG,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAe,EAA6B,EAAE;IACtF,IAAI,CAAC,6DAA6D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC,CAAC;AAaF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,WAAmB,EAAyB,EAAE;IAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC5C,OAAO,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC/F,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAC3B,OAAwB,EACxB,QAAwB,EACxB,IAAY,EACZ,MAAM,GAAG,GAAG,EACZ,UAA+B,EAAE,EAClB,EAAE;IACjB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,GAAG,OAAO;QACV,cAAc,EAAE,IAAI;QACpB,IAAI,EAAE,iBAAiB;QACvB,GAAG,CAAC,QAAQ,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAU,EAAE,CACzD,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC5D,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACvC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC,CAAC,CAAC;AASL,6BAA6B;AAC7B,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,EAC1B,IAAI,GAAG,KAAK,EACZ,IAAI,GAAG,IAAI,MACK,EAAE,EAA4C,EAAE;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,KAAK,EAAE,EAAE,CAAC;AACtD,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@coralreefventures/site-tools",
-  "version": "0.1.0",
-  "description": "Command-line tools for a Coral Reef public site: serve the static export as the host does, and gate it with Lighthouse.",
+  "version": "0.2.0",
+  "description": "Command-line tools for a Coral Reef public site: serve the static export as the host does, gate it with Lighthouse, and lock it behind the door.",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -19,6 +19,7 @@
   "keywords": [
     "static-site",
     "lighthouse",
+    "amplify",
     "coral-reef"
   ],
   "files": [
@@ -28,7 +29,8 @@
   ],
   "bin": {
     "reef-serve": "./dist/bin/reef-serve.js",
-    "reef-lighthouse": "./dist/bin/reef-lighthouse.js"
+    "reef-lighthouse": "./dist/bin/reef-lighthouse.js",
+    "reef-door-bundle": "./dist/bin/reef-door-bundle.js"
   },
   "exports": {
     ".": {

package/src/bin/reef-door-bundle.ts

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+import { parseArgs } from "node:util";
+
+import { parseSignoutChain } from "../door/config.ts";
+import { bundleDoor } from "../door/package.ts";
+
+const usage = `reef-door-bundle --site <id> [--out out] [--dest .amplify-hosting] --door-url <url> --hosts <h1,h2>
+                 --jwks-url <url> [--signout-chain id=host,id=host] [--host-header host|x-forwarded-host]
+
+Locks a static export behind the door: writes .amplify-hosting with the export inside the gate's compute bundle and
+one route, /* to Compute. --door-url, --hosts, --jwks-url, --signout-chain and --host-header fall back to
+CRV_DOOR_URL, CRV_DOOR_HOSTS, CRV_DOOR_JWKS_URL, CRV_DOOR_SIGNOUT_CHAIN and CRV_DOOR_HOST_HEADER.`;
+
+const { values } = parseArgs({
+  options: {
+    site: { type: "string" },
+    out: { type: "string", default: "out" },
+    dest: { type: "string", default: ".amplify-hosting" },
+    "door-url": { type: "string" },
+    hosts: { type: "string" },
+    "jwks-url": { type: "string" },
+    "signout-chain": { type: "string" },
+    "host-header": { type: "string" },
+    help: { type: "boolean", short: "h" },
+  },
+});
+
+if (values.help) {
+  console.log(usage);
+  process.exit(0);
+}
+
+const env = process.env;
+const doorUrl = values["door-url"] ?? env.CRV_DOOR_URL;
+const hosts = values.hosts ?? env.CRV_DOOR_HOSTS;
+const jwksUrl = values["jwks-url"] ?? env.CRV_DOOR_JWKS_URL;
+const hostHeader = values["host-header"] ?? env.CRV_DOOR_HOST_HEADER ?? "host";
+
+try {
+  if (!values.site || !doorUrl || !hosts || !jwksUrl) {
+    throw new Error("--site, --door-url, --hosts and --jwks-url are required (or their CRV_DOOR_* variables)");
+  }
+  if (hostHeader !== "host" && hostHeader !== "x-forwarded-host") {
+    throw new Error(`--host-header must be host or x-forwarded-host: ${hostHeader}`);
+  }
+  const manifest = await bundleDoor({
+    site: values.site,
+    out: values.out,
+    dest: values.dest,
+    doorUrl,
+    hosts: hosts.split(","),
+    jwksUrl,
+    signout: parseSignoutChain(values["signout-chain"] ?? env.CRV_DOOR_SIGNOUT_CHAIN),
+    hostHeader,
+  });
+  console.log(`reef-door-bundle: ${values.dest} written for ${values.site}, gate ${manifest.framework.version}`);
+} catch (error) {
+  console.error(`reef-door-bundle: ${error instanceof Error ? error.message : String(error)}`);
+  process.exit(1);
+}

package/src/bin/reef-lighthouse.ts

@@ -4,9 +4,10 @@ import { parseArgs } from "node:util";
 import { runLighthouse } from "../lighthouse.ts";
 
 /**
- * reef-lighthouse [--root out] [--reports lighthouse] [--port 3160] [--threshold 90] [--chrome <path>] [path ...]
+ * reef-lighthouse [--root out] [--reports lighthouse] [--port N] [--threshold 90] [--chrome <path>] [path ...]
  *
- * Lighthouse on every page in the export's sitemap, or the paths given, each category at the threshold or above.
+ * Lighthouse on every page in the export's sitemap, or the paths given, each category at the threshold or above. The
+ * export is served on a free port unless --port pins one (Streamlane's run met EADDRINUSE on a fixed 3160).
  * Exits 1 with the failing pages named when one is under, and leaves their reports in --reports.
  */
 const { values, positionals } = parseArgs({
@@ -14,7 +15,7 @@ const { values, positionals } = parseArgs({
   options: {
     root: { type: "string", default: "out" },
     reports: { type: "string", default: "lighthouse" },
-    port: { type: "string", default: "3160" },
+    port: { type: "string" },
     threshold: { type: "string", default: "90" },
     chrome: { type: "string" },
     "lighthouse-version": { type: "string", default: "13.5.0" },
@@ -24,7 +25,7 @@ const { values, positionals } = parseArgs({
 
 if (values.help) {
   console.log(
-    "reef-lighthouse [--root out] [--reports lighthouse] [--port 3160] [--threshold 90] [--chrome <path>] [path ...]",
+    "reef-lighthouse [--root out] [--reports lighthouse] [--port N] [--threshold 90] [--chrome <path>] [path ...]",
   );
   process.exit(0);
 }
@@ -33,7 +34,7 @@ const threshold = Number(values.threshold) / 100;
 const results = await runLighthouse({
   root: values.root,
   reportDir: values.reports,
-  port: Number(values.port),
+  ...(values.port !== undefined && { port: Number(values.port) }),
   threshold,
   paths: positionals,
   lighthouseVersion: values["lighthouse-version"],

package/src/door/config.ts

@@ -0,0 +1,112 @@
+import { readFile } from "node:fs/promises";
+
+import { type Jwks, parseJwks } from "./verify.ts";
+
+/** One stop on the sign-out walk: a site behind the door, by id, and the host its gate answers on. */
+export type SignoutStop = { id: string; host: string };
+
+/** gate.config.json, as reef-door-bundle writes it beside the gate. Data only: it names no product. */
+export type GateConfigFile = {
+  version: 1;
+  /** This site's id at the door, which the door's redirect names as `?site=`. */
+  site: string;
+  /** The door's origin, `https://` and nothing after the host. Tickets name it as `iss`. */
+  door: string;
+  /** The hosts this gate answers on, each exactly as the Host header carries it. Any other gets 403. */
+  hosts: string[];
+  /** Which header names the host: `host`, or `x-forwarded-host` if the platform rewrites Host. */
+  hostHeader: "host" | "x-forwarded-host";
+  /** The fixed sign-out walk, in order: the same list the door's own site registry holds. */
+  signout: SignoutStop[];
+  /** The door's public keys. */
+  jwks: { keys: unknown[] };
+};
+
+export type GateConfig = Omit<GateConfigFile, "jwks"> & { keys: Jwks; issuer: string };
+
+const siteId = /^[a-z0-9][a-z0-9-]{0,31}$/;
+const hostName = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*(:\d{1,5})?$/;
+
+export const isSiteId = (value: unknown): value is string => typeof value === "string" && siteId.test(value);
+export const isHost = (value: unknown): value is string =>
+  typeof value === "string" && value.length <= 253 && hostName.test(value);
+
+/** The door's origin from its URL: https only, with no path, query, fragment or credentials. */
+export const doorOrigin = (door: unknown): string => {
+  if (typeof door !== "string") throw new Error("the door URL is missing");
+  let url: URL;
+  try {
+    url = new URL(door);
+  } catch {
+    throw new Error(`the door URL is not a URL: ${door}`);
+  }
+  if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) {
+    throw new Error(`the door URL must be an https origin: ${door}`);
+  }
+  if (url.pathname !== "/") throw new Error(`the door URL must be an origin, with no path: ${door}`);
+  return url.origin;
+};
+
+/** The sign-out walk: unique site ids, each with a host, and nothing else (no URL, so no redirect from data). */
+const checkSignout = (signout: unknown): SignoutStop[] => {
+  if (!Array.isArray(signout)) throw new Error("the sign-out walk is not a list");
+  const seen = new Set<string>();
+  for (const stop of signout as Partial<SignoutStop>[]) {
+    if (!isSiteId(stop?.id) || !isHost(stop?.host) || seen.has(stop.id)) {
+      throw new Error(`a sign-out stop is not a unique id and a host: ${JSON.stringify(stop)}`);
+    }
+    seen.add(stop.id);
+  }
+  return (signout as SignoutStop[]).map(({ id, host }) => ({ id, host }));
+};
+
+/**
+ * Checks a gate configuration and returns it ready to use, or throws naming what is wrong. The gate calls this as it
+ * starts and refuses to start on a bad file; the bundler calls it before it writes one.
+ */
+export const parseGateConfig = (value: unknown): GateConfig => {
+  if (typeof value !== "object" || value === null) throw new Error("the gate configuration is not an object");
+  const file = value as Partial<GateConfigFile>;
+  if (file.version !== 1) throw new Error("the gate configuration has an unknown version");
+  if (!isSiteId(file.site)) throw new Error(`the site id is not lowercase letters, digits and hyphens: ${file.site}`);
+  const issuer = doorOrigin(file.door);
+  if (!Array.isArray(file.hosts) || file.hosts.length === 0) throw new Error("the gate answers on no host");
+  for (const host of file.hosts) {
+    if (!isHost(host)) throw new Error(`not a lowercase host name: ${host}`);
+  }
+  if (file.hostHeader !== "host" && file.hostHeader !== "x-forwarded-host") {
+    throw new Error(`the host header must be host or x-forwarded-host: ${file.hostHeader}`);
+  }
+  const signout = checkSignout(file.signout ?? []);
+  const keys = parseJwks(file.jwks);
+  return {
+    version: 1,
+    site: file.site,
+    door: issuer,
+    issuer,
+    hosts: [...file.hosts],
+    hostHeader: file.hostHeader,
+    signout,
+    keys,
+  };
+};
+
+/** Reads and checks gate.config.json. */
+export const readGateConfig = async (file: string | URL): Promise<GateConfig> =>
+  parseGateConfig(JSON.parse(await readFile(file, "utf8")));
+
+/**
+ * `id=host,id=host` as the bin's --signout-chain takes it, in walk order.
+ */
+export const parseSignoutChain = (value: string | undefined): SignoutStop[] =>
+  (value ?? "")
+    .split(",")
+    .map((entry) => entry.trim())
+    .filter(Boolean)
+    .map((entry) => {
+      const [id = "", host = "", ...rest] = entry.split("=");
+      if (rest.length > 0 || !isSiteId(id) || !isHost(host)) {
+        throw new Error(`a sign-out stop must be id=host: ${entry}`);
+      }
+      return { id, host };
+    });

package/src/door/next.ts

@@ -0,0 +1,35 @@
+/** A backslash or any control character (U+0000 to U+001F, U+007F), which a browser's URL parser reads as something else. */
+export const unsafe = (value: string): boolean => [...value].some((c) => c === "\\" || c <= "\u001f" || c === "\u007f");
+
+/**
+ * *Canonical next*: the same-origin path and query `next` names on `https://<host>`, re-serialised, or null when it
+ * names anything else. "Starts with / and not //" is not enough on its own: browsers resolve `/\evil.com` and
+ * `/<TAB>/evil.com` to the host evil.com, `/.//evil.com` normalises to `//evil.com`, and Node's setHeader accepts a
+ * tab. So the value is refused on sight if it is long or carries a backslash or control character, parsed against the
+ * origin, required to stay on it, and re-serialised; only the re-serialised value is ever used. The door and the
+ * ticket issuer run the same steps on the same cases.
+ */
+export const canonicalNext = (next: unknown, host: string): string | null => {
+  if (typeof next !== "string" || next.length === 0 || next.length > 512 || unsafe(next)) {
+    return null;
+  }
+  if (!next.startsWith("/") || next.startsWith("//")) {
+    return null;
+  }
+  let origin: string;
+  let url: URL;
+  try {
+    origin = new URL(`https://${host}`).origin;
+    url = new URL(next, origin);
+  } catch {
+    return null;
+  }
+  if (url.origin !== origin) {
+    return null;
+  }
+  const path = url.pathname + url.search;
+  if (path.startsWith("//") || unsafe(path)) {
+    return null;
+  }
+  return path;
+};