@dokebi/sse 0.4.4 → 0.4.5

package/AI.md

@@ -135,7 +135,7 @@ events.close(); events.reconnect();
 
 ## 5a. Seal hosts (D-0062)
 
-On streams of a seal host (@dokebi/app `domains.<host>.seal: true`) or of a `seal: true` web route, **the data of every event** (including `dokebi-open`, `dokebi-reload` and `dokebi-restart`) is sealed with that stream's path (`E:<ts>:<b64>`, dokebi-web `sealOf`). Event names and ids stay plain. Plain streams share one buffer; only sealed streams seal per receiver. A failed seal ends that stream (`SEAL_ENCODE_FAILED`; never sent in plain text). Browser: `connectEvents({ ..., seal: currentSealBridge() })` (`@dokebi/seal/http`; undefined on plain pages, so the same code works). With a bridge, plain data is refused as `SEAL_FAILED`; without one, sealed data is refused as `SEAL_BRIDGE_MISSING` (neither reaches the handler).
+On streams of a seal host (@dokebi/app `domains.<host>.seal: true`) or of a `seal: true` web route, **the data of every event** (including `dokebi-open`, `dokebi-reload` and `dokebi-restart`) is sealed with that stream's path (`E:<ts>:<b64>`, dokebi-web `sealOf`). Event names and ids stay plain. Plain streams share one buffer; only sealed streams seal per receiver. A failed seal ends that stream (`SEAL_ENCODE_FAILED`; never sent in plain text); when it is the first frame (`dokebi-open`, `dokebi-reload`) that cannot be sealed, the request is refused with 500 `SEAL_FAILED` before the stream head. Browser: `connectEvents({ ..., seal: currentSealBridge() })` (`@dokebi/seal/http`; undefined on plain pages, so the same code works). With a bridge, plain data is refused as `SEAL_FAILED`; without one, sealed data is refused as `SEAL_BRIDGE_MISSING` (neither reaches the handler).
 
 ## 6. Several workers and servers
 

package/dist/gateway.js

@@ -341,6 +341,18 @@ export class Gateway {
         // D-0062: a stream of a seal host seals the data of every event, its first ones included.
         const seal = this.web.sealOf(request);
         const data = (json) => (seal ? seal.encode(json) : json);
+        // The first frame is made before the reply is hijacked: a seal that fails here still has a
+        // reply to refuse with. Made after the head (audit R9-g11-2), the exception left a hijacked
+        // response that was never ended: no stream entry, no ping, nothing drain could end.
+        const first = (event, value) => {
+            try {
+                return frame(undefined, event, data(JSON.stringify(value)));
+            }
+            catch (error) {
+                this.#throttle.log('error', 'SSE first frame seal failed; stream refused', 'SEAL_ENCODE_FAILED', error, { path: route.path, routeId: registered.id });
+                return undefined;
+            }
+        };
         if (route.version !== undefined) {
             const sent = single(query.dokebiVersion) ?? single(request.headers['x-dokebi-version']);
             if (sent !== route.version) {
@@ -349,12 +361,18 @@ export class Gateway {
                     expected: route.version,
                     received: typeof sent === 'string' ? sent.slice(0, 64) : null,
                 });
+                const reload = first(RELOAD_EVENT, { version: route.version });
+                if (reload === undefined)
+                    return refuse(500, { error: 'SEAL_FAILED' });
                 reply.hijack();
                 res.writeHead(200, headers);
-                res.end(`retry: ${this.options.reloadRetryMs}\n${frame(undefined, RELOAD_EVENT, data(JSON.stringify({ version: route.version })))}`);
+                res.end(`retry: ${this.options.reloadRetryMs}\n${reload}`);
                 return;
             }
         }
+        const opening = first(OPEN_EVENT, { retryMs: this.options.retryMs });
+        if (opening === undefined)
+            return refuse(500, { error: 'SEAL_FAILED' });
         const header = single(request.headers['last-event-id']);
         const asked = header ?? single(query.lastEventId);
         const lastEventId = typeof asked === 'string' && asked.length <= MAX_TEXT && isLine(asked) ? asked : undefined;
@@ -366,7 +384,7 @@ export class Gateway {
         res.writeHead(200, headers);
         // The reconnect hint first, and the same value as data for clients that manage reconnects
         // themselves (EventSource does not expose `retry:`).
-        res.write(`retry: ${this.options.retryMs}\n${frame(undefined, OPEN_EVENT, data(JSON.stringify({ retryMs: this.options.retryMs })))}`);
+        res.write(`retry: ${this.options.retryMs}\n${opening}`);
         const entry = this.#add(res, identity, route, rooms, lastEventId, seal);
         res.once('close', () => this.#closed(entry));
         if (identity.authorization) {

package/dist/plugin.js

@@ -109,7 +109,7 @@ class SseRuntime {
 /** Factory input: `{ app, options? }`. Options default to `app.config['dokebi-sse']`. */
 export const createPlugin = definePlugin({
     name: 'dokebi-sse',
-    version: '0.4.4',
+    version: '0.4.5',
     core: '^0.4.2',
     // The declaration (not parseOptions) so core logs OPTION_DEPRECATED for old keys (bus, closeTimeoutMs).
     options: declaration,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dokebi/sse",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Server-sent events for @dokebi/web: authenticated streams, rooms, cross-worker fan-out over @dokebi/event-bus, and a browser client",
   "keywords": [
     "dokebi",
@@ -69,11 +69,11 @@
   },
   "devDependencies": {
     "@dokebi/cluster": "0.4.2",
-    "@dokebi/config": "0.4.5",
-    "@dokebi/event-bus": "0.4.2",
+    "@dokebi/config": "0.4.6",
+    "@dokebi/event-bus": "0.4.3",
     "@dokebi/health": "0.4.1",
-    "@dokebi/nats": "0.4.1",
-    "@dokebi/web": "0.4.4",
+    "@dokebi/nats": "0.4.2",
+    "@dokebi/web": "0.4.7",
     "react": "19.3.0",
     "react-test-renderer": "19.3.0",
     "vite": "8.3.4",