@earendil-works/chord 1.4.0 → 1.5.1

package/dist/node/http/router.js

@@ -0,0 +1,267 @@
+// The router (slice 10 §2, D1, D2, D8): the registry `Http` that plugins contribute routes, wraps, sockets, allowed
+// hosts, framers, relays and CSP sources to, and its `compose`, which builds the router every request reads: patterns
+// matched segment by segment (exact before `:name` before a trailing `*`), each route's wraps resolved in phase and
+// contributor order, conflicts reported with the first by plugin name winning.
+import { defineRegistry } from "../../registries/index.js";
+/** The registry the HTTP component defines and serves (`http.facet`, plugin `chord.http`). */
+export const Http = defineRegistry("chord.http", { version: 1 });
+/** A plugin socket's largest frame unless its contribution says otherwise: 1 MiB. */
+const DEFAULT_MAX_PAYLOAD = 1024 * 1024;
+/**
+ * The methods a Web `Request` cannot carry (the Fetch standard's forbidden methods): answered 501 at the wire, a route
+ * for one refused at compose.
+ */
+export const UNCARRIED = new Set(["CONNECT", "TRACE", "TRACK"]);
+/** Builds the router from `table` (the registry's `compose`): pure, conflicts reported, the first by plugin name wins. */
+export function composeRouter(table, { report }) {
+    const routes = new Map();
+    const sockets = emptyNode();
+    const entries = [];
+    const hosts = new Set();
+    const framers = new Set();
+    const relays = [];
+    const csp = new Map();
+    const scripts = [];
+    const socketHandlers = new Set();
+    for (const { plugin, value } of table) {
+        for (const host of value.hosts ?? [])
+            hosts.add(host.toLowerCase());
+        for (const framer of value.framers ?? [])
+            framers.add(framer);
+        relays.push(...(value.relays ?? []));
+        scripts.push(...(value.scripts ?? []));
+        for (const [directive, sources] of Object.entries(value.csp ?? {})) {
+            csp.set(directive, [...(csp.get(directive) ?? []), ...sources]);
+        }
+        for (const [key, route] of Object.entries(value.routes ?? {})) {
+            const parsed = parseRoute(key);
+            if (parsed === undefined) {
+                report({ message: `route "${key}" is no "METHOD /pattern"`, plugins: [plugin] });
+                continue;
+            }
+            if (UNCARRIED.has(parsed.method)) {
+                report({ message: `route "${key}": ${parsed.method} is served for no resource (501)`, plugins: [plugin] });
+                continue;
+            }
+            let tree = routes.get(parsed.method);
+            if (tree === undefined) {
+                tree = emptyNode();
+                routes.set(parsed.method, tree);
+            }
+            const options = typeof route === "function" ? { handler: route } : route;
+            const entry = {
+                pattern: key,
+                plugin,
+                handler: options.handler,
+                public: options.public === true || options.crossSite === true,
+                page: options.page === true,
+                crossSite: options.crossSite === true,
+                segments: parsed.segments,
+                wraps: [],
+            };
+            const taken = insert(tree, parsed.segments, entry);
+            if (taken === undefined)
+                entries.push(entry);
+            else
+                report({ message: `route "${key}" is contributed twice`, plugins: [taken.plugin, plugin] });
+        }
+        const maxPayload = value.maxPayload ?? DEFAULT_MAX_PAYLOAD;
+        for (const [pattern, socket] of Object.entries(value.sockets ?? {})) {
+            const segments = parsePattern(pattern);
+            if (segments === undefined) {
+                report({ message: `socket "${pattern}" is no pattern`, plugins: [plugin] });
+                continue;
+            }
+            const { handler, public: open } = typeof socket === "function" ? { handler: socket, public: undefined } : socket;
+            const entry = { pattern, plugin, handler, public: open === true, segments, maxPayload };
+            const taken = insert(sockets, segments, entry);
+            if (taken === undefined)
+                socketHandlers.add(handler);
+            else
+                report({ message: `socket "${pattern}" is contributed twice`, plugins: [taken.plugin, plugin] });
+        }
+    }
+    resolveWraps(table, entries, report);
+    const get = routes.get("GET");
+    const head = routes.get("HEAD");
+    return {
+        route: (method, path) => {
+            // `HEAD` falls back to `GET` per path: an explicit `HEAD` route elsewhere hides no `GET` route.
+            if (method === "HEAD")
+                return orElse(head === undefined ? undefined : lookup(head, path), get, path);
+            const tree = routes.get(method);
+            return tree === undefined ? undefined : lookup(tree, path);
+        },
+        socket: (path) => lookup(sockets, path),
+        hosts,
+        framers,
+        relays,
+        csp,
+        scripts,
+        socketHandlers,
+    };
+}
+function emptyNode() {
+    return { exact: new Map(), param: undefined, rest: undefined, entry: undefined };
+}
+/** `"GET /notes/:id"` as its method and segments; `undefined` when it is none. */
+function parseRoute(key) {
+    const space = key.indexOf(" ");
+    if (space <= 0)
+        return undefined;
+    const method = key.slice(0, space);
+    if (!/^[A-Z]+$/.test(method))
+        return undefined;
+    const segments = parsePattern(key.slice(space + 1));
+    return segments === undefined ? undefined : { method, segments };
+}
+/** A pattern's segments (`/files/*`, `/notes/:id`); `undefined` for one that is not a path or has `*` before its end. */
+function parsePattern(pattern) {
+    if (!pattern.startsWith("/"))
+        return undefined;
+    const parts = pattern.slice(1).split("/");
+    const segments = [];
+    for (const [index, part] of parts.entries()) {
+        if (part === "*") {
+            if (index !== parts.length - 1)
+                return undefined;
+            segments.push({ kind: "rest" });
+        }
+        else if (part.startsWith(":")) {
+            if (part.length === 1)
+                return undefined;
+            segments.push({ kind: "param", name: part.slice(1) });
+        }
+        else {
+            segments.push({ kind: "exact", text: part });
+        }
+    }
+    return segments;
+}
+/** Puts `entry` at `segments` in `tree`; returns the entry already there (the first by plugin name keeps it). */
+function insert(tree, segments, entry) {
+    let node = tree;
+    for (const segment of segments) {
+        if (segment.kind === "rest") {
+            if (node.rest !== undefined)
+                return node.rest;
+            node.rest = entry;
+            return undefined;
+        }
+        if (segment.kind === "exact") {
+            let next = node.exact.get(segment.text);
+            if (next === undefined) {
+                next = emptyNode();
+                node.exact.set(segment.text, next);
+            }
+            node = next;
+        }
+        else {
+            // `:a` and `:b` at one position share the node: one shape, so the same pattern twice is a conflict.
+            node.param ??= emptyNode();
+            node = node.param;
+        }
+    }
+    if (node.entry !== undefined)
+        return node.entry;
+    node.entry = entry;
+    return undefined;
+}
+/** `found`, or when it is no route the `GET` route for `path` (`HEAD`'s fallback). */
+function orElse(found, get, path) {
+    if (found !== undefined || get === undefined)
+        return found;
+    return lookup(get, path);
+}
+/**
+ * The entry `path` matches in `tree` with its params named by the entry's own pattern, the most specific segment by
+ * segment from the left (exact before `:name` before `*`); `bad_path` for a segment that does not decode, or a `:name`
+ * or rest segment decoding to one containing `/`, `\` or NUL, or to `.` or `..` (a param must never be a path).
+ */
+function lookup(tree, path) {
+    const raw = path.slice(1).split("/");
+    const decoded = [];
+    for (const part of raw) {
+        if (!part.includes("%")) {
+            decoded.push(part);
+            continue;
+        }
+        try {
+            decoded.push(decodeURIComponent(part));
+        }
+        catch {
+            return "bad_path";
+        }
+    }
+    const found = walk(tree, decoded, 0, []);
+    if (found === undefined)
+        return undefined;
+    const params = {};
+    let capture = 0;
+    for (const segment of found.entry.segments) {
+        if (segment.kind !== "param")
+            continue;
+        const value = found.captures[capture++];
+        if (!safe(value))
+            return "bad_path";
+        params[segment.name] = value;
+    }
+    if (found.rest !== undefined) {
+        const rest = decoded.slice(found.rest);
+        if (!rest.every(safe))
+            return "bad_path";
+        params["*"] = rest.join("/");
+    }
+    const { segments: _segments, ...entry } = found.entry;
+    return { ...entry, params };
+}
+/** Whether a decoded segment may be a param: no `/`, `\` or NUL, not `.` or `..`. */
+function safe(segment) {
+    return segment !== "." && segment !== ".." && !/[/\\\0]/.test(segment);
+}
+/** Depth first in precedence order: the first match found is the most specific from the left. */
+function walk(node, parts, index, captures) {
+    if (index === parts.length) {
+        if (node.entry !== undefined)
+            return { entry: node.entry, captures, rest: undefined };
+        // `/files/*` matches `/files`: the rest is empty.
+        return node.rest === undefined ? undefined : { entry: node.rest, captures, rest: index };
+    }
+    const part = parts[index];
+    const exact = node.exact.get(part);
+    const viaExact = exact === undefined ? undefined : walk(exact, parts, index + 1, captures);
+    if (viaExact !== undefined)
+        return viaExact;
+    if (node.param !== undefined && part !== "") {
+        const viaParam = walk(node.param, parts, index + 1, [...captures, part]);
+        if (viaParam !== undefined)
+            return viaParam;
+    }
+    return node.rest === undefined ? undefined : { entry: node.rest, captures, rest: index };
+}
+/** The wrap phases, outermost first. */
+const PHASES = ["observe", "headers", "transform"];
+/**
+ * Gives every route its wraps: by phase (outermost first), within a phase in contributor (table) order; `own` ones
+ * around their plugin's routes, `all` ones around every route; one naming a route nobody contributes is reported.
+ */
+function resolveWraps(table, routes, report) {
+    const all = [];
+    for (const { plugin, value } of table)
+        for (const wrap of value.wraps ?? [])
+            all.push({ wrap, plugin });
+    all.sort((a, b) => PHASES.indexOf(a.wrap.phase) - PHASES.indexOf(b.wrap.phase));
+    for (const { wrap, plugin } of all) {
+        if (wrap.route !== undefined && !routes.some((route) => route.pattern === wrap.route)) {
+            report({
+                message: `wrap "${wrap.name}" names route "${wrap.route}", which nobody contributes`,
+                plugins: [plugin],
+            });
+        }
+    }
+    for (const route of routes) {
+        route.wraps = all.filter(({ wrap, plugin }) => (wrap.scope === "all" || plugin === route.plugin) &&
+            (wrap.route === undefined || wrap.route === route.pattern));
+    }
+}
+//# sourceMappingURL=router.js.map

package/dist/node/http/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/node/http/router.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,sHAAsH;AACtH,oHAAoH;AACpH,+EAA+E;AAI/E,OAAO,EAAuB,cAAc,EAAsB,MAAM,2BAA2B,CAAC;AAiIpG,8FAA8F;AAC9F,MAAM,CAAC,MAAM,IAAI,GAAG,cAAc,CAA2B,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAE3F,qFAAqF;AACrF,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAErF,0HAA0H;AAC1H,MAAM,UAAU,aAAa,CAAC,KAAsC,EAAE,EAAE,MAAM,EAAkB;IAC/F,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,MAAM,OAAO,GAAsB,SAAS,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAc,CAAC;IAC7C,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,GAAG,2BAA2B,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACjF,SAAS;YACV,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,kCAAkC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3G,SAAS;YACV,CAAC;YACD,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,GAAG,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACzE,MAAM,KAAK,GAAe;gBACzB,OAAO,EAAE,GAAG;gBACZ,MAAM;gBACN,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;gBAC7D,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI;gBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,EAAE;aACT,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBACxC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,GAAG,wBAAwB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC3D,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,OAAO,iBAAiB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC5E,SAAS;YACV,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAC9B,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAChF,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,KAAK,KAAK,SAAS;gBAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;;gBAChD,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,OAAO,wBAAwB,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACF,CAAC;IACD,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO;QACN,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YACvB,gGAAgG;YAChG,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACrG,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;QACvC,KAAK;QACL,OAAO;QACP,MAAM;QACN,GAAG;QACH,OAAO;QACP,cAAc;KACd,CAAC;AACH,CAAC;AAuCD,SAAS,SAAS;IACjB,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAClF,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,GAAW;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAClE,CAAC;AAED,yHAAyH;AACzH,SAAS,YAAY,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,iHAAiH;AACjH,SAAS,MAAM,CAAI,IAAa,EAAE,QAA4B,EAAE,KAAQ;IACvE,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;YAC9C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAClB,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,GAAG,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,GAAG,IAAI,CAAC;QACb,CAAC;aAAM,CAAC;YACP,oGAAoG;YACpG,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;IACF,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAChD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,sFAAsF;AACtF,SAAS,MAAM,CACd,KAA0C,EAC1C,GAAiC,EACjC,IAAY;IAEZ,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CACd,IAAa,EACb,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,UAAU,CAAC;QACnB,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IACtD,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,qFAAqF;AACrF,SAAS,IAAI,CAAC,OAAe;IAC5B,OAAO,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAKD,iGAAiG;AACjG,SAAS,IAAI,CAAI,IAAa,EAAE,KAAwB,EAAE,KAAa,EAAE,QAAkB;IAC1F,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACtF,kDAAkD;QAClD,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3F,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED,wCAAwC;AACxC,MAAM,MAAM,GAAyB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAEzE;;;GAGG;AACH,SAAS,YAAY,CACpB,KAAsC,EACtC,MAAoB,EACpB,MAAgC;IAEhC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK;QAAE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC;gBACN,OAAO,EAAE,SAAS,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,KAAK,6BAA6B;gBACpF,OAAO,EAAE,CAAC,MAAM,CAAC;aACjB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CACvB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CACpB,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;YACjD,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,CAC3D,CAAC;IACH,CAAC;AACF,CAAC","sourcesContent":["// The router (slice 10 §2, D1, D2, D8): the registry `Http` that plugins contribute routes, wraps, sockets, allowed\n// hosts, framers, relays and CSP sources to, and its `compose`, which builds the router every request reads: patterns\n// matched segment by segment (exact before `:name` before a trailing `*`), each route's wraps resolved in phase and\n// contributor order, conflicts reported with the first by plugin name winning.\n\nimport type { WebSocket } from \"ws\";\nimport type { Ctx } from \"../../host/index.ts\";\nimport { type ComposeContext, defineRegistry, type RegistryTable } from \"../../registries/index.ts\";\nimport type { HttpRequest } from \"./request.ts\";\nimport type { HttpResponse } from \"./response.ts\";\n\n/** A route: answers a request with a response description, in the request's scope (`ctx.principal`, its signal). */\nexport type HttpRoute = (request: HttpRequest, ctx: Ctx) => Promise<HttpResponse>;\n\n/**\n * A route with its options: `public` serves it without a principal (deny by default: a route without one answers 401\n * to a request no authenticator recognized); `page` admits a top-level navigation from another site (a link to it)\n * with its authentication; `crossSite` admits any foreign request (a webhook), always anonymous, so public too.\n */\nexport type HttpRouteOptions = {\n\treadonly handler: HttpRoute;\n\treadonly public?: true;\n\treadonly page?: true;\n\treadonly crossSite?: true;\n};\n\n/** A wrap's phases, outermost first. */\nexport type WrapPhase = \"observe\" | \"headers\" | \"transform\";\n\n/** A wrap (D2): runs around routes in its phase, around its own plugin's routes unless `scope` is `\"all\"`. */\nexport type HttpWrap = {\n\treadonly name: string;\n\treadonly phase: WrapPhase;\n\t/** `\"own\"` (default): around the contributing plugin's routes; `\"all\"`: every route. */\n\treadonly scope?: \"own\" | \"all\";\n\t/** Only around this route (`\"GET /notes/:id\"`); a route nobody contributes is a reported conflict. */\n\treadonly route?: string;\n\treadonly wrap: (\n\t\trequest: HttpRequest,\n\t\tnext: (request: HttpRequest) => Promise<HttpResponse>,\n\t\tctx: Ctx,\n\t) => Promise<HttpResponse>;\n};\n\n/**\n * A plugin socket's handler (D6): a `ws` WebSocket after the checks and authentication, its `error` listener attached;\n * its scope lasts until the socket closes.\n */\nexport type HttpSocket = (socket: WebSocketHandle, request: HttpRequest, ctx: Ctx) => void | Promise<void>;\n\n/** A plugin socket with its options: `public` accepts it without a principal (else 401 before the handler runs). */\nexport type HttpSocketOptions = { readonly handler: HttpSocket; readonly public?: true };\n\n/** A plugin socket: `ws`'s WebSocket, for the plugin's own protocol. */\nexport type WebSocketHandle = WebSocket;\n\n/**\n * A relay (p2's Radius): a forwarder on loopback that sends forwarded headers. `verify` recognizes its requests (a\n * secret header, a signature) and names the origin the request came from and the origin allowed to frame it.\n */\nexport type HttpRelay = {\n\treadonly name: string;\n\treadonly verify: (request: Request) => { readonly origin: string; readonly framer?: string } | undefined;\n};\n\n/** What a plugin contributes to `Http`: a plain value, or a writable of one (its change recomposes the router). */\nexport type HttpContribution = {\n\t/** Routes by `\"METHOD /pattern\"`: exact segments, `:name`, a trailing `/*`. */\n\treadonly routes?: Readonly<Record<string, HttpRoute | HttpRouteOptions>>;\n\treadonly wraps?: readonly HttpWrap[];\n\t/** Plugin sockets by pattern (no method). */\n\treadonly sockets?: Readonly<Record<string, HttpSocket | HttpSocketOptions>>;\n\t/** The largest frame this contribution's sockets accept; 1 MiB by default. */\n\treadonly maxPayload?: number;\n\t/** Hosts allowed besides loopback, as the client names them (`notes.example.com`): requests through them are https. */\n\treadonly hosts?: readonly string[];\n\t/** Origins allowed to frame the app's pages (CSP `frame-ancestors`). */\n\treadonly framers?: readonly string[];\n\t/** Relays whose forwarded requests are admitted (verified) on loopback. */\n\treadonly relays?: readonly HttpRelay[];\n\t/** Extra CSP sources by directive (`{ \"img-src\": [\"https://cdn.example.com\"] }`). */\n\treadonly csp?: Readonly<Record<string, readonly string[]>>;\n\t/**\n\t * The paths scripts load from (`/_chord/web/`): with any, `script-src` is these paths of the request's origin and the\n\t * response's nonce instead of the whole origin, so no other same-origin response (an upload served as JavaScript)\n\t * runs as a script.\n\t */\n\treadonly scripts?: readonly string[];\n};\n\n/** The router a request uses: as it was when the request started. */\nexport type Router = {\n\t/** The route for `method` and `path`, with its params and wraps; `bad_path` for a malformed one. */\n\troute(method: string, path: string): RouteMatch | \"bad_path\" | undefined;\n\t/** The plugin socket for `path`. */\n\tsocket(path: string): SocketMatch | \"bad_path\" | undefined;\n\t/** The hosts contributions allow (lowercased). */\n\treadonly hosts: ReadonlySet<string>;\n\t/** The origins allowed to frame pages. */\n\treadonly framers: ReadonlySet<string>;\n\t/** The relays, in contributor order. */\n\treadonly relays: readonly HttpRelay[];\n\t/** Extra CSP sources by directive. */\n\treadonly csp: ReadonlyMap<string, readonly string[]>;\n\t/** The paths scripts load from; none: the whole origin. */\n\treadonly scripts: readonly string[];\n\t/** The socket handlers it serves: a socket handed out by one no longer here is closed. */\n\treadonly socketHandlers: ReadonlySet<HttpSocket>;\n};\n\n/** A matched route: its pattern, plugin, params, handler, options and wraps (outermost first). */\nexport type RouteMatch = {\n\treadonly pattern: string;\n\treadonly plugin: string;\n\treadonly params: Readonly<Record<string, string>>;\n\treadonly handler: HttpRoute;\n\t/** Served without a principal: marked `public`, or `crossSite` (always anonymous). */\n\treadonly public: boolean;\n\treadonly page: boolean;\n\treadonly crossSite: boolean;\n\treadonly wraps: readonly ResolvedWrap[];\n};\n\n/** A matched plugin socket. */\nexport type SocketMatch = {\n\treadonly pattern: string;\n\treadonly plugin: string;\n\treadonly params: Readonly<Record<string, string>>;\n\treadonly handler: HttpSocket;\n\treadonly public: boolean;\n\treadonly maxPayload: number;\n};\n\n/** A wrap as a route runs it, with its plugin. */\nexport type ResolvedWrap = { readonly wrap: HttpWrap; readonly plugin: string };\n\n/** The registry the HTTP component defines and serves (`http.facet`, plugin `chord.http`). */\nexport const Http = defineRegistry<HttpContribution, Router>(\"chord.http\", { version: 1 });\n\n/** A plugin socket's largest frame unless its contribution says otherwise: 1 MiB. */\nconst DEFAULT_MAX_PAYLOAD = 1024 * 1024;\n\n/**\n * The methods a Web `Request` cannot carry (the Fetch standard's forbidden methods): answered 501 at the wire, a route\n * for one refused at compose.\n */\nexport const UNCARRIED: ReadonlySet<string> = new Set([\"CONNECT\", \"TRACE\", \"TRACK\"]);\n\n/** Builds the router from `table` (the registry's `compose`): pure, conflicts reported, the first by plugin name wins. */\nexport function composeRouter(table: RegistryTable<HttpContribution>, { report }: ComposeContext): Router {\n\tconst routes = new Map<string, Node<RouteEntry>>();\n\tconst sockets: Node<SocketEntry> = emptyNode();\n\tconst entries: RouteEntry[] = [];\n\tconst hosts = new Set<string>();\n\tconst framers = new Set<string>();\n\tconst relays: HttpRelay[] = [];\n\tconst csp = new Map<string, string[]>();\n\tconst scripts: string[] = [];\n\tconst socketHandlers = new Set<HttpSocket>();\n\tfor (const { plugin, value } of table) {\n\t\tfor (const host of value.hosts ?? []) hosts.add(host.toLowerCase());\n\t\tfor (const framer of value.framers ?? []) framers.add(framer);\n\t\trelays.push(...(value.relays ?? []));\n\t\tscripts.push(...(value.scripts ?? []));\n\t\tfor (const [directive, sources] of Object.entries(value.csp ?? {})) {\n\t\t\tcsp.set(directive, [...(csp.get(directive) ?? []), ...sources]);\n\t\t}\n\t\tfor (const [key, route] of Object.entries(value.routes ?? {})) {\n\t\t\tconst parsed = parseRoute(key);\n\t\t\tif (parsed === undefined) {\n\t\t\t\treport({ message: `route \"${key}\" is no \"METHOD /pattern\"`, plugins: [plugin] });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (UNCARRIED.has(parsed.method)) {\n\t\t\t\treport({ message: `route \"${key}\": ${parsed.method} is served for no resource (501)`, plugins: [plugin] });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tlet tree = routes.get(parsed.method);\n\t\t\tif (tree === undefined) {\n\t\t\t\ttree = emptyNode();\n\t\t\t\troutes.set(parsed.method, tree);\n\t\t\t}\n\t\t\tconst options = typeof route === \"function\" ? { handler: route } : route;\n\t\t\tconst entry: RouteEntry = {\n\t\t\t\tpattern: key,\n\t\t\t\tplugin,\n\t\t\t\thandler: options.handler,\n\t\t\t\tpublic: options.public === true || options.crossSite === true,\n\t\t\t\tpage: options.page === true,\n\t\t\t\tcrossSite: options.crossSite === true,\n\t\t\t\tsegments: parsed.segments,\n\t\t\t\twraps: [],\n\t\t\t};\n\t\t\tconst taken = insert(tree, parsed.segments, entry);\n\t\t\tif (taken === undefined) entries.push(entry);\n\t\t\telse report({ message: `route \"${key}\" is contributed twice`, plugins: [taken.plugin, plugin] });\n\t\t}\n\t\tconst maxPayload = value.maxPayload ?? DEFAULT_MAX_PAYLOAD;\n\t\tfor (const [pattern, socket] of Object.entries(value.sockets ?? {})) {\n\t\t\tconst segments = parsePattern(pattern);\n\t\t\tif (segments === undefined) {\n\t\t\t\treport({ message: `socket \"${pattern}\" is no pattern`, plugins: [plugin] });\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst { handler, public: open } =\n\t\t\t\ttypeof socket === \"function\" ? { handler: socket, public: undefined } : socket;\n\t\t\tconst entry = { pattern, plugin, handler, public: open === true, segments, maxPayload };\n\t\t\tconst taken = insert(sockets, segments, entry);\n\t\t\tif (taken === undefined) socketHandlers.add(handler);\n\t\t\telse report({ message: `socket \"${pattern}\" is contributed twice`, plugins: [taken.plugin, plugin] });\n\t\t}\n\t}\n\tresolveWraps(table, entries, report);\n\tconst get = routes.get(\"GET\");\n\tconst head = routes.get(\"HEAD\");\n\treturn {\n\t\troute: (method, path) => {\n\t\t\t// `HEAD` falls back to `GET` per path: an explicit `HEAD` route elsewhere hides no `GET` route.\n\t\t\tif (method === \"HEAD\") return orElse(head === undefined ? undefined : lookup(head, path), get, path);\n\t\t\tconst tree = routes.get(method);\n\t\t\treturn tree === undefined ? undefined : lookup(tree, path);\n\t\t},\n\t\tsocket: (path) => lookup(sockets, path),\n\t\thosts,\n\t\tframers,\n\t\trelays,\n\t\tcsp,\n\t\tscripts,\n\t\tsocketHandlers,\n\t};\n}\n\n/** One pattern segment: an exact one, `:name`, or the trailing rest (`*`). */\ntype Segment =\n\t| { readonly kind: \"exact\"; readonly text: string }\n\t| { readonly kind: \"param\"; readonly name: string }\n\t| { readonly kind: \"rest\" };\n\n/** What a route contributes, with its wraps once resolved. */\ntype RouteEntry = {\n\treadonly pattern: string;\n\treadonly plugin: string;\n\treadonly handler: HttpRoute;\n\treadonly public: boolean;\n\treadonly page: boolean;\n\treadonly crossSite: boolean;\n\treadonly segments: readonly Segment[];\n\twraps: readonly ResolvedWrap[];\n};\n\n/** What a plugin socket contributes. */\ntype SocketEntry = {\n\treadonly pattern: string;\n\treadonly plugin: string;\n\treadonly handler: HttpSocket;\n\treadonly public: boolean;\n\treadonly segments: readonly Segment[];\n\treadonly maxPayload: number;\n};\n\n/** A node of a pattern tree: its children by kind, and the entry ending here. */\ntype Node<E> = {\n\treadonly exact: Map<string, Node<E>>;\n\t/** Any `:name` at this position (the names are each entry's own). */\n\tparam: Node<E> | undefined;\n\trest: E | undefined;\n\tentry: E | undefined;\n};\n\nfunction emptyNode<E>(): Node<E> {\n\treturn { exact: new Map(), param: undefined, rest: undefined, entry: undefined };\n}\n\n/** `\"GET /notes/:id\"` as its method and segments; `undefined` when it is none. */\nfunction parseRoute(key: string): { readonly method: string; readonly segments: readonly Segment[] } | undefined {\n\tconst space = key.indexOf(\" \");\n\tif (space <= 0) return undefined;\n\tconst method = key.slice(0, space);\n\tif (!/^[A-Z]+$/.test(method)) return undefined;\n\tconst segments = parsePattern(key.slice(space + 1));\n\treturn segments === undefined ? undefined : { method, segments };\n}\n\n/** A pattern's segments (`/files/*`, `/notes/:id`); `undefined` for one that is not a path or has `*` before its end. */\nfunction parsePattern(pattern: string): readonly Segment[] | undefined {\n\tif (!pattern.startsWith(\"/\")) return undefined;\n\tconst parts = pattern.slice(1).split(\"/\");\n\tconst segments: Segment[] = [];\n\tfor (const [index, part] of parts.entries()) {\n\t\tif (part === \"*\") {\n\t\t\tif (index !== parts.length - 1) return undefined;\n\t\t\tsegments.push({ kind: \"rest\" });\n\t\t} else if (part.startsWith(\":\")) {\n\t\t\tif (part.length === 1) return undefined;\n\t\t\tsegments.push({ kind: \"param\", name: part.slice(1) });\n\t\t} else {\n\t\t\tsegments.push({ kind: \"exact\", text: part });\n\t\t}\n\t}\n\treturn segments;\n}\n\n/** Puts `entry` at `segments` in `tree`; returns the entry already there (the first by plugin name keeps it). */\nfunction insert<E>(tree: Node<E>, segments: readonly Segment[], entry: E): E | undefined {\n\tlet node = tree;\n\tfor (const segment of segments) {\n\t\tif (segment.kind === \"rest\") {\n\t\t\tif (node.rest !== undefined) return node.rest;\n\t\t\tnode.rest = entry;\n\t\t\treturn undefined;\n\t\t}\n\t\tif (segment.kind === \"exact\") {\n\t\t\tlet next = node.exact.get(segment.text);\n\t\t\tif (next === undefined) {\n\t\t\t\tnext = emptyNode();\n\t\t\t\tnode.exact.set(segment.text, next);\n\t\t\t}\n\t\t\tnode = next;\n\t\t} else {\n\t\t\t// `:a` and `:b` at one position share the node: one shape, so the same pattern twice is a conflict.\n\t\t\tnode.param ??= emptyNode();\n\t\t\tnode = node.param;\n\t\t}\n\t}\n\tif (node.entry !== undefined) return node.entry;\n\tnode.entry = entry;\n\treturn undefined;\n}\n\n/** `found`, or when it is no route the `GET` route for `path` (`HEAD`'s fallback). */\nfunction orElse(\n\tfound: RouteMatch | \"bad_path\" | undefined,\n\tget: Node<RouteEntry> | undefined,\n\tpath: string,\n): RouteMatch | \"bad_path\" | undefined {\n\tif (found !== undefined || get === undefined) return found;\n\treturn lookup(get, path);\n}\n\n/**\n * The entry `path` matches in `tree` with its params named by the entry's own pattern, the most specific segment by\n * segment from the left (exact before `:name` before `*`); `bad_path` for a segment that does not decode, or a `:name`\n * or rest segment decoding to one containing `/`, `\\` or NUL, or to `.` or `..` (a param must never be a path).\n */\nfunction lookup<E extends { readonly segments: readonly Segment[] }>(\n\ttree: Node<E>,\n\tpath: string,\n): (Omit<E, \"segments\"> & { readonly params: Readonly<Record<string, string>> }) | \"bad_path\" | undefined {\n\tconst raw = path.slice(1).split(\"/\");\n\tconst decoded: string[] = [];\n\tfor (const part of raw) {\n\t\tif (!part.includes(\"%\")) {\n\t\t\tdecoded.push(part);\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tdecoded.push(decodeURIComponent(part));\n\t\t} catch {\n\t\t\treturn \"bad_path\";\n\t\t}\n\t}\n\tconst found = walk(tree, decoded, 0, []);\n\tif (found === undefined) return undefined;\n\tconst params: Record<string, string> = {};\n\tlet capture = 0;\n\tfor (const segment of found.entry.segments) {\n\t\tif (segment.kind !== \"param\") continue;\n\t\tconst value = found.captures[capture++]!;\n\t\tif (!safe(value)) return \"bad_path\";\n\t\tparams[segment.name] = value;\n\t}\n\tif (found.rest !== undefined) {\n\t\tconst rest = decoded.slice(found.rest);\n\t\tif (!rest.every(safe)) return \"bad_path\";\n\t\tparams[\"*\"] = rest.join(\"/\");\n\t}\n\tconst { segments: _segments, ...entry } = found.entry;\n\treturn { ...entry, params };\n}\n\n/** Whether a decoded segment may be a param: no `/`, `\\` or NUL, not `.` or `..`. */\nfunction safe(segment: string): boolean {\n\treturn segment !== \".\" && segment !== \"..\" && !/[/\\\\\\0]/.test(segment);\n}\n\n/** A match found by `walk`: its entry, its `:name` values in order, where the rest starts (for `*`). */\ntype Found<E> = { readonly entry: E; readonly captures: readonly string[]; readonly rest: number | undefined };\n\n/** Depth first in precedence order: the first match found is the most specific from the left. */\nfunction walk<E>(node: Node<E>, parts: readonly string[], index: number, captures: string[]): Found<E> | undefined {\n\tif (index === parts.length) {\n\t\tif (node.entry !== undefined) return { entry: node.entry, captures, rest: undefined };\n\t\t// `/files/*` matches `/files`: the rest is empty.\n\t\treturn node.rest === undefined ? undefined : { entry: node.rest, captures, rest: index };\n\t}\n\tconst part = parts[index]!;\n\tconst exact = node.exact.get(part);\n\tconst viaExact = exact === undefined ? undefined : walk(exact, parts, index + 1, captures);\n\tif (viaExact !== undefined) return viaExact;\n\tif (node.param !== undefined && part !== \"\") {\n\t\tconst viaParam = walk(node.param, parts, index + 1, [...captures, part]);\n\t\tif (viaParam !== undefined) return viaParam;\n\t}\n\treturn node.rest === undefined ? undefined : { entry: node.rest, captures, rest: index };\n}\n\n/** The wrap phases, outermost first. */\nconst PHASES: readonly WrapPhase[] = [\"observe\", \"headers\", \"transform\"];\n\n/**\n * Gives every route its wraps: by phase (outermost first), within a phase in contributor (table) order; `own` ones\n * around their plugin's routes, `all` ones around every route; one naming a route nobody contributes is reported.\n */\nfunction resolveWraps(\n\ttable: RegistryTable<HttpContribution>,\n\troutes: RouteEntry[],\n\treport: ComposeContext[\"report\"],\n): void {\n\tconst all: ResolvedWrap[] = [];\n\tfor (const { plugin, value } of table) for (const wrap of value.wraps ?? []) all.push({ wrap, plugin });\n\tall.sort((a, b) => PHASES.indexOf(a.wrap.phase) - PHASES.indexOf(b.wrap.phase));\n\tfor (const { wrap, plugin } of all) {\n\t\tif (wrap.route !== undefined && !routes.some((route) => route.pattern === wrap.route)) {\n\t\t\treport({\n\t\t\t\tmessage: `wrap \"${wrap.name}\" names route \"${wrap.route}\", which nobody contributes`,\n\t\t\t\tplugins: [plugin],\n\t\t\t});\n\t\t}\n\t}\n\tfor (const route of routes) {\n\t\troute.wraps = all.filter(\n\t\t\t({ wrap, plugin }) =>\n\t\t\t\t(wrap.scope === \"all\" || plugin === route.plugin) &&\n\t\t\t\t(wrap.route === undefined || wrap.route === route.pattern),\n\t\t);\n\t}\n}\n"]}

package/dist/node/http/upgrades.d.ts

@@ -0,0 +1,61 @@
+import type { IncomingMessage } from "node:http";
+import type { Duplex } from "node:stream";
+import { type WebSocket } from "ws";
+import { type Context } from "../../context/index.ts";
+import type { Principal } from "../../data/index.ts";
+import type { Host } from "../../host/index.ts";
+import { type PartLimits, type WebSocketLike } from "../../link/index.ts";
+import type { HttpRequest } from "./request.ts";
+import type { HttpRelay, Router, SocketMatch } from "./router.ts";
+/** What admitted an upgrade: the allowed host or the relay it came through (local: neither), and its principal. */
+export type Admission<P extends Principal> = {
+    readonly allowed: string | undefined;
+    readonly relay: HttpRelay | undefined;
+    readonly principal: P;
+};
+/** What the links endpoint gives one socket: its parts' limits and its largest frame (1 MiB by default). */
+export type LinkOptions = {
+    readonly limits?: PartLimits;
+    readonly maxPayload?: number;
+};
+/** A plugin socket's handler failed: reported, the socket closed (1011). */
+export type SocketFailure = {
+    readonly pattern: string;
+    readonly plugin: string;
+    readonly error: unknown;
+};
+/** The upgraded connections of one HTTP component. */
+export declare class Upgrades {
+    #private;
+    /**
+     * Upgrades `message` to the links endpoint: `host.accept` over the socket (its output capped) as the admitted
+     * principal, with `options`' limits; `context` is the parent of the work on the link. `opened` runs once the link
+     * is accepted; what it returns runs when its socket closes.
+     */
+    link<P extends Principal>(message: IncomingMessage, stream: Duplex, head: Buffer, admission: Admission<P> & LinkOptions, host: Host<P>, context: Context, opened: () => (() => void) | undefined): void;
+    /**
+     * Upgrades `message` to the plugin socket `match`: its handler gets the socket and `request` in a `host.root` scope
+     * acting as the admitted principal that lasts until the socket closes; a handler that throws is reported and closes
+     * it (1011).
+     */
+    socket<P extends Principal>(message: IncomingMessage, stream: Duplex, head: Buffer, admission: Omit<Admission<P>, "principal"> & {
+        /** Anonymous only for a public socket. */
+        readonly principal: P | undefined;
+        readonly match: SocketMatch;
+        readonly request: HttpRequest;
+    }, host: Host<P>, context: Context, failed: (failure: SocketFailure) => void): void;
+    /**
+     * The router changed: connections through a host or a relay no longer there, and plugin sockets whose handler left,
+     * are terminated at once and their scopes sealed (no close handshake a peer could ignore).
+     */
+    revoke(router: Router): void;
+    /** Closes every connection (1001, "going away"); those still open at `deadline` are terminated. */
+    close(deadline: Promise<void>): Promise<void>;
+}
+/**
+ * `socket` as the link sees it, its output capped (p2's `limitedSocket`): before each send, what is still buffered
+ * beyond the largest frame being sent must stay under 4 MiB, or the socket is terminated (the client reconnects from
+ * snapshots); Chord's flow control keeps a reading client far below it.
+ */
+export declare function limitedSocket(socket: WebSocket): WebSocketLike;
+//# sourceMappingURL=upgrades.d.ts.map

package/dist/node/http/upgrades.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrades.d.ts","sourceRoot":"","sources":["../../../src/node/http/upgrades.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,IAAI,CAAC;AACrD,OAAO,EAAE,KAAK,OAAO,EAAuC,MAAM,wBAAwB,CAAC;AAC3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAO,IAAI,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAiB,MAAM,qBAAqB,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAc,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE9E,mHAAmH;AACnH,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,SAAS,IAAI;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;CACtB,CAAC;AAEF,4GAA4G;AAC5G,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAgB3G,sDAAsD;AACtD,qBAAa,QAAQ;;IAGpB;;;;OAIG;IACH,IAAI,CAAC,CAAC,SAAS,SAAS,EACvB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,WAAW,EACrC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EACb,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GACpC,IAAI,CAeN;IAED;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,SAAS,EACzB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG;QAC5C,0CAA0C;QAC1C,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;KAC9B,EACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EACb,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,GACtC,IAAI,CAwBN;IAED;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAQ3B;IAED,mGAAmG;IAC7F,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAYlD;CAYD;AAwDD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,CAkC9D"}

package/dist/node/http/upgrades.js

@@ -0,0 +1,192 @@
+// Upgraded connections (slice 10 §2, D6, Q6): the links endpoint (`host.accept` over a WebSocket with a per-socket
+// output cap) and plugin sockets (a `ws` WebSocket handed to the contribution's handler for its own protocol, in a scope
+// lasting until it closes, kept alive by a heartbeat). Each connection is kept with what admitted it: when that leaves
+// (its allowed host, its relay, its socket handler) it is terminated at once and its scope sealed (decision "Slice 10
+// fix round, allowed hosts only through contributions"); the component's close closes all (1001), terminating at its
+// timeout those that never acknowledge.
+import { WebSocketServer } from "ws";
+import { withAbortSignal, withoutAbortSignal } from "../../context/index.js";
+import { webSocketLink } from "../../link/index.js";
+/** A link socket's largest frame unless `links.options` says otherwise: 1 MiB. */
+const DEFAULT_LINK_PAYLOAD = 1024 * 1024;
+/** The upgraded connections of one HTTP component. */
+export class Upgrades {
+    #open = new Set();
+    /**
+     * Upgrades `message` to the links endpoint: `host.accept` over the socket (its output capped) as the admitted
+     * principal, with `options`' limits; `context` is the parent of the work on the link. `opened` runs once the link
+     * is accepted; what it returns runs when its socket closes.
+     */
+    link(message, stream, head, admission, host, context, opened) {
+        const { principal, limits } = admission;
+        upgrade(message, stream, head, admission.maxPayload ?? DEFAULT_LINK_PAYLOAD, (socket) => {
+            const link = webSocketLink(limitedSocket(socket));
+            this.#keep({
+                socket,
+                allowed: admission.allowed,
+                relay: admission.relay,
+                handler: undefined,
+                seal: () => link.close(),
+            });
+            host.accept(link, { principal, ...(limits === undefined ? {} : { limits }) }, context);
+            const closed = opened();
+            if (closed !== undefined)
+                socket.once("close", closed);
+        });
+    }
+    /**
+     * Upgrades `message` to the plugin socket `match`: its handler gets the socket and `request` in a `host.root` scope
+     * acting as the admitted principal that lasts until the socket closes; a handler that throws is reported and closes
+     * it (1011).
+     */
+    socket(message, stream, head, admission, host, context, failed) {
+        const { principal, match, request } = admission;
+        upgrade(message, stream, head, match.maxPayload, (socket) => {
+            const closed = new AbortController();
+            const seal = () => closed.abort(new Error("http: the socket closed"));
+            socket.once("close", seal);
+            this.#keep({ socket, allowed: admission.allowed, relay: admission.relay, handler: match.handler, seal });
+            heartbeat(socket);
+            const scope = withAbortSignal(closed.signal, withoutAbortSignal(context));
+            const run = async (ctx) => {
+                try {
+                    await match.handler(socket, request, ctx);
+                }
+                catch (error) {
+                    failed({ pattern: match.pattern, plugin: match.plugin, error });
+                    socket.close(1011, "internal error");
+                    return;
+                }
+                if (!closed.signal.aborted) {
+                    await new Promise((resolve) => closed.signal.addEventListener("abort", resolve, { once: true }));
+                }
+            };
+            // The scope sealed (its socket closed, the host closing) is no failure of the handler.
+            void host.root(run, scope, { principal }).catch(() => { });
+        });
+    }
+    /**
+     * The router changed: connections through a host or a relay no longer there, and plugin sockets whose handler left,
+     * are terminated at once and their scopes sealed (no close handshake a peer could ignore).
+     */
+    revoke(router) {
+        for (const upgraded of this.#open) {
+            const gone = (upgraded.allowed !== undefined && !router.hosts.has(upgraded.allowed)) ||
+                (upgraded.relay !== undefined && !router.relays.includes(upgraded.relay)) ||
+                (upgraded.handler !== undefined && !router.socketHandlers.has(upgraded.handler));
+            if (gone)
+                end(upgraded);
+        }
+    }
+    /** Closes every connection (1001, "going away"); those still open at `deadline` are terminated. */
+    async close(deadline) {
+        const open = [...this.#open];
+        const closed = open.map(({ socket }) => new Promise((resolve) => {
+            if (socket.readyState === socket.CLOSED)
+                resolve();
+            else
+                socket.once("close", () => resolve());
+        }));
+        for (const { socket } of open)
+            socket.close(1001, "going away");
+        await Promise.race([Promise.all(closed), deadline]);
+        for (const upgraded of this.#open)
+            end(upgraded);
+    }
+    /** Keeps `upgraded` until its socket closes, letting a protocol error finish its close handshake. */
+    #keep(upgraded) {
+        const { socket } = upgraded;
+        socket.on("error", () => {
+            // ws already sends the protocol close code (such as 1009); terminating now can discard that frame.
+            if (socket.readyState !== socket.CLOSING)
+                socket.terminate();
+        });
+        this.#open.add(upgraded);
+        socket.once("close", () => this.#open.delete(upgraded));
+    }
+}
+/**
+ * Completes the upgrade with a `ws` server of its own (no listener, no client tracking, no compression), dropped with
+ * the upgrade: nothing is kept per frame size.
+ */
+function upgrade(message, stream, head, maxPayload, then) {
+    const server = new WebSocketServer({ noServer: true, clientTracking: false, maxPayload, perMessageDeflate: false });
+    server.handleUpgrade(message, stream, head, then);
+}
+/** Terminates `upgraded` and seals its scope at once. */
+function end(upgraded) {
+    // Terminated first: a link's close would send a close frame.
+    upgraded.socket.terminate();
+    upgraded.seal();
+}
+/** Silence after which a plugin socket is pinged, and after the ping terminated: 15 s each (the link heartbeat's). */
+const SILENCE = 15_000;
+/**
+ * Keeps a plugin socket honest (decision "plugin sockets get a heartbeat"): after 15 s without a frame from the peer it
+ * is pinged, after 15 s more terminated; browsers and `ws` answer pings by themselves.
+ */
+function heartbeat(socket) {
+    let pinged = false;
+    const timer = setTimeout(() => {
+        if (pinged) {
+            socket.terminate();
+            return;
+        }
+        pinged = true;
+        socket.ping();
+        timer.refresh();
+    }, SILENCE);
+    timer.unref();
+    const heard = () => {
+        pinged = false;
+        timer.refresh();
+    };
+    socket.on("message", heard);
+    socket.on("pong", heard);
+    socket.on("ping", heard);
+    socket.once("close", () => clearTimeout(timer));
+}
+/** Unsent data beyond the frame being sent at which a link socket is cut off: a client that stopped reading. */
+const MAX_UNSENT_BYTES = 4 * 1024 * 1024;
+/**
+ * `socket` as the link sees it, its output capped (p2's `limitedSocket`): before each send, what is still buffered
+ * beyond the largest frame being sent must stay under 4 MiB, or the socket is terminated (the client reconnects from
+ * snapshots); Chord's flow control keeps a reading client far below it.
+ */
+export function limitedSocket(socket) {
+    const unsent = new Set();
+    return {
+        get readyState() {
+            return socket.readyState;
+        },
+        get binaryType() {
+            return socket.binaryType;
+        },
+        set binaryType(type) {
+            socket.binaryType = type;
+        },
+        send(data) {
+            if (socket.readyState !== socket.OPEN)
+                return;
+            let sending = 0;
+            for (const frame of unsent)
+                sending = Math.max(sending, frame.bytes);
+            if (socket.bufferedAmount - sending > MAX_UNSENT_BYTES) {
+                socket.terminate();
+                return;
+            }
+            // The largest server frame header is 10 bytes.
+            const frame = { bytes: data.byteLength + 10 };
+            unsent.add(frame);
+            socket.send(data, (error) => {
+                unsent.delete(frame);
+                if (error)
+                    socket.terminate();
+            });
+        },
+        close: () => socket.close(),
+        addEventListener: (type, listener) => socket.addEventListener(type, listener),
+        removeEventListener: (type, listener) => socket.removeEventListener(type, listener),
+    };
+}
+//# sourceMappingURL=upgrades.js.map

package/dist/node/http/upgrades.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrades.js","sourceRoot":"","sources":["../../../src/node/http/upgrades.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,yHAAyH;AACzH,uHAAuH;AACvH,sHAAsH;AACtH,qHAAqH;AACrH,wCAAwC;AAIxC,OAAO,EAAkB,eAAe,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,EAAgB,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAG3F,OAAO,EAAuC,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA4BzF,kFAAkF;AAClF,MAAM,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,sDAAsD;AACtD,MAAM,OAAO,QAAQ;IACX,KAAK,GAAG,IAAI,GAAG,EAAY,CAAC;IAErC;;;;OAIG;IACH,IAAI,CACH,OAAwB,EACxB,MAAc,EACd,IAAY,EACZ,SAAqC,EACrC,IAAa,EACb,OAAgB,EAChB,MAAsC;QAEtC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QACxC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,IAAI,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;YACvF,MAAM,IAAI,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC;gBACV,MAAM;gBACN,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,OAAO,EAAE,SAAS;gBAClB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACvF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;YACxB,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CACL,OAAwB,EACxB,MAAc,EACd,IAAY,EACZ,SAKC,EACD,IAAa,EACb,OAAgB,EAChB,MAAwC;QAExC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;QAChD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACzG,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;gBAChD,IAAI,CAAC;oBACJ,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;oBAChE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;oBACrC,OAAO;gBACR,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAClG,CAAC;YACF,CAAC,CAAC;YACF,uFAAuF;YACvF,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,MAAc;QACpB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,IAAI,GACT,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACvE,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACzE,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAClF,IAAI,IAAI;gBAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,KAAK,CAAC,QAAuB;QAClC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACtB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACd,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC;;gBAC9C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CACH,CAAC;QACF,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,QAAkB;QACvB,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,mGAAmG;YACnG,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,OAAO;gBAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;CACD;AAED;;;GAGG;AACH,SAAS,OAAO,CACf,OAAwB,EACxB,MAAc,EACd,IAAY,EACZ,UAAkB,EAClB,IAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IACpH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,yDAAyD;AACzD,SAAS,GAAG,CAAC,QAAkB;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,CAAC;AACjB,CAAC;AAED,sHAAsH;AACtH,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB;;;GAGG;AACH,SAAS,SAAS,CAAC,MAAiB;IACnC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC7B,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,KAAK,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,KAAK,GAAG,GAAS,EAAE;QACxB,MAAM,GAAG,KAAK,CAAC;QACf,KAAK,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,gHAAgH;AAChH,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,OAAO;QACN,IAAI,UAAU;YACb,OAAO,MAAM,CAAC,UAAU,CAAC;QAC1B,CAAC;QACD,IAAI,UAAU;YACb,OAAO,MAAM,CAAC,UAAU,CAAC;QAC1B,CAAC;QACD,IAAI,UAAU,CAAC,IAAY;YAC1B,MAAM,CAAC,UAAU,GAAG,IAA+B,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,IAAI;YACR,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO;YAC9C,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,MAAM,CAAC,cAAc,GAAG,OAAO,GAAG,gBAAgB,EAAE,CAAC;gBACxD,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,OAAO;YACR,CAAC;YACD,+CAA+C;YAC/C,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,IAAI,KAAK;oBAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/B,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,gBAAgB,EAAE,CAAC,IAAY,EAAE,QAAqD,EAAE,EAAE,CACzF,MAAM,CAAC,gBAAgB,CAAC,IAAiB,EAAE,QAAiB,CAAC;QAC9D,mBAAmB,EAAE,CAAC,IAAY,EAAE,QAAqD,EAAE,EAAE,CAC5F,MAAM,CAAC,mBAAmB,CAAC,IAAiB,EAAE,QAAiB,CAAC;KAChD,CAAC;AACpB,CAAC","sourcesContent":["// Upgraded connections (slice 10 §2, D6, Q6): the links endpoint (`host.accept` over a WebSocket with a per-socket\n// output cap) and plugin sockets (a `ws` WebSocket handed to the contribution's handler for its own protocol, in a scope\n// lasting until it closes, kept alive by a heartbeat). Each connection is kept with what admitted it: when that leaves\n// (its allowed host, its relay, its socket handler) it is terminated at once and its scope sealed (decision \"Slice 10\n// fix round, allowed hosts only through contributions\"); the component's close closes all (1001), terminating at its\n// timeout those that never acknowledge.\n\nimport type { IncomingMessage } from \"node:http\";\nimport type { Duplex } from \"node:stream\";\nimport { type WebSocket, WebSocketServer } from \"ws\";\nimport { type Context, withAbortSignal, withoutAbortSignal } from \"../../context/index.ts\";\nimport type { Principal } from \"../../data/index.ts\";\nimport type { Ctx, Host } from \"../../host/index.ts\";\nimport { type PartLimits, type WebSocketLike, webSocketLink } from \"../../link/index.ts\";\nimport type { HttpRequest } from \"./request.ts\";\nimport type { HttpRelay, HttpSocket, Router, SocketMatch } from \"./router.ts\";\n\n/** What admitted an upgrade: the allowed host or the relay it came through (local: neither), and its principal. */\nexport type Admission<P extends Principal> = {\n\treadonly allowed: string | undefined;\n\treadonly relay: HttpRelay | undefined;\n\treadonly principal: P;\n};\n\n/** What the links endpoint gives one socket: its parts' limits and its largest frame (1 MiB by default). */\nexport type LinkOptions = { readonly limits?: PartLimits; readonly maxPayload?: number };\n\n/** A plugin socket's handler failed: reported, the socket closed (1011). */\nexport type SocketFailure = { readonly pattern: string; readonly plugin: string; readonly error: unknown };\n\n/** One upgraded connection, with what admitted it and how to seal its scope. */\ntype Upgraded = {\n\treadonly socket: WebSocket;\n\treadonly allowed: string | undefined;\n\treadonly relay: HttpRelay | undefined;\n\t/** The handler that took it (plugin sockets only). */\n\treadonly handler: HttpSocket | undefined;\n\t/** Ends its work at once: the link closed, or the handler's scope sealed. */\n\treadonly seal: () => void;\n};\n\n/** A link socket's largest frame unless `links.options` says otherwise: 1 MiB. */\nconst DEFAULT_LINK_PAYLOAD = 1024 * 1024;\n\n/** The upgraded connections of one HTTP component. */\nexport class Upgrades {\n\treadonly #open = new Set<Upgraded>();\n\n\t/**\n\t * Upgrades `message` to the links endpoint: `host.accept` over the socket (its output capped) as the admitted\n\t * principal, with `options`' limits; `context` is the parent of the work on the link. `opened` runs once the link\n\t * is accepted; what it returns runs when its socket closes.\n\t */\n\tlink<P extends Principal>(\n\t\tmessage: IncomingMessage,\n\t\tstream: Duplex,\n\t\thead: Buffer,\n\t\tadmission: Admission<P> & LinkOptions,\n\t\thost: Host<P>,\n\t\tcontext: Context,\n\t\topened: () => (() => void) | undefined,\n\t): void {\n\t\tconst { principal, limits } = admission;\n\t\tupgrade(message, stream, head, admission.maxPayload ?? DEFAULT_LINK_PAYLOAD, (socket) => {\n\t\t\tconst link = webSocketLink(limitedSocket(socket));\n\t\t\tthis.#keep({\n\t\t\t\tsocket,\n\t\t\t\tallowed: admission.allowed,\n\t\t\t\trelay: admission.relay,\n\t\t\t\thandler: undefined,\n\t\t\t\tseal: () => link.close(),\n\t\t\t});\n\t\t\thost.accept(link, { principal, ...(limits === undefined ? {} : { limits }) }, context);\n\t\t\tconst closed = opened();\n\t\t\tif (closed !== undefined) socket.once(\"close\", closed);\n\t\t});\n\t}\n\n\t/**\n\t * Upgrades `message` to the plugin socket `match`: its handler gets the socket and `request` in a `host.root` scope\n\t * acting as the admitted principal that lasts until the socket closes; a handler that throws is reported and closes\n\t * it (1011).\n\t */\n\tsocket<P extends Principal>(\n\t\tmessage: IncomingMessage,\n\t\tstream: Duplex,\n\t\thead: Buffer,\n\t\tadmission: Omit<Admission<P>, \"principal\"> & {\n\t\t\t/** Anonymous only for a public socket. */\n\t\t\treadonly principal: P | undefined;\n\t\t\treadonly match: SocketMatch;\n\t\t\treadonly request: HttpRequest;\n\t\t},\n\t\thost: Host<P>,\n\t\tcontext: Context,\n\t\tfailed: (failure: SocketFailure) => void,\n\t): void {\n\t\tconst { principal, match, request } = admission;\n\t\tupgrade(message, stream, head, match.maxPayload, (socket) => {\n\t\t\tconst closed = new AbortController();\n\t\t\tconst seal = (): void => closed.abort(new Error(\"http: the socket closed\"));\n\t\t\tsocket.once(\"close\", seal);\n\t\t\tthis.#keep({ socket, allowed: admission.allowed, relay: admission.relay, handler: match.handler, seal });\n\t\t\theartbeat(socket);\n\t\t\tconst scope = withAbortSignal(closed.signal, withoutAbortSignal(context));\n\t\t\tconst run = async (ctx: Ctx<P>): Promise<void> => {\n\t\t\t\ttry {\n\t\t\t\t\tawait match.handler(socket, request, ctx);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tfailed({ pattern: match.pattern, plugin: match.plugin, error });\n\t\t\t\t\tsocket.close(1011, \"internal error\");\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (!closed.signal.aborted) {\n\t\t\t\t\tawait new Promise((resolve) => closed.signal.addEventListener(\"abort\", resolve, { once: true }));\n\t\t\t\t}\n\t\t\t};\n\t\t\t// The scope sealed (its socket closed, the host closing) is no failure of the handler.\n\t\t\tvoid host.root(run, scope, { principal }).catch(() => {});\n\t\t});\n\t}\n\n\t/**\n\t * The router changed: connections through a host or a relay no longer there, and plugin sockets whose handler left,\n\t * are terminated at once and their scopes sealed (no close handshake a peer could ignore).\n\t */\n\trevoke(router: Router): void {\n\t\tfor (const upgraded of this.#open) {\n\t\t\tconst gone =\n\t\t\t\t(upgraded.allowed !== undefined && !router.hosts.has(upgraded.allowed)) ||\n\t\t\t\t(upgraded.relay !== undefined && !router.relays.includes(upgraded.relay)) ||\n\t\t\t\t(upgraded.handler !== undefined && !router.socketHandlers.has(upgraded.handler));\n\t\t\tif (gone) end(upgraded);\n\t\t}\n\t}\n\n\t/** Closes every connection (1001, \"going away\"); those still open at `deadline` are terminated. */\n\tasync close(deadline: Promise<void>): Promise<void> {\n\t\tconst open = [...this.#open];\n\t\tconst closed = open.map(\n\t\t\t({ socket }) =>\n\t\t\t\tnew Promise<void>((resolve) => {\n\t\t\t\t\tif (socket.readyState === socket.CLOSED) resolve();\n\t\t\t\t\telse socket.once(\"close\", () => resolve());\n\t\t\t\t}),\n\t\t);\n\t\tfor (const { socket } of open) socket.close(1001, \"going away\");\n\t\tawait Promise.race([Promise.all(closed), deadline]);\n\t\tfor (const upgraded of this.#open) end(upgraded);\n\t}\n\n\t/** Keeps `upgraded` until its socket closes, letting a protocol error finish its close handshake. */\n\t#keep(upgraded: Upgraded): void {\n\t\tconst { socket } = upgraded;\n\t\tsocket.on(\"error\", () => {\n\t\t\t// ws already sends the protocol close code (such as 1009); terminating now can discard that frame.\n\t\t\tif (socket.readyState !== socket.CLOSING) socket.terminate();\n\t\t});\n\t\tthis.#open.add(upgraded);\n\t\tsocket.once(\"close\", () => this.#open.delete(upgraded));\n\t}\n}\n\n/**\n * Completes the upgrade with a `ws` server of its own (no listener, no client tracking, no compression), dropped with\n * the upgrade: nothing is kept per frame size.\n */\nfunction upgrade(\n\tmessage: IncomingMessage,\n\tstream: Duplex,\n\thead: Buffer,\n\tmaxPayload: number,\n\tthen: (socket: WebSocket) => void,\n): void {\n\tconst server = new WebSocketServer({ noServer: true, clientTracking: false, maxPayload, perMessageDeflate: false });\n\tserver.handleUpgrade(message, stream, head, then);\n}\n\n/** Terminates `upgraded` and seals its scope at once. */\nfunction end(upgraded: Upgraded): void {\n\t// Terminated first: a link's close would send a close frame.\n\tupgraded.socket.terminate();\n\tupgraded.seal();\n}\n\n/** Silence after which a plugin socket is pinged, and after the ping terminated: 15 s each (the link heartbeat's). */\nconst SILENCE = 15_000;\n\n/**\n * Keeps a plugin socket honest (decision \"plugin sockets get a heartbeat\"): after 15 s without a frame from the peer it\n * is pinged, after 15 s more terminated; browsers and `ws` answer pings by themselves.\n */\nfunction heartbeat(socket: WebSocket): void {\n\tlet pinged = false;\n\tconst timer = setTimeout(() => {\n\t\tif (pinged) {\n\t\t\tsocket.terminate();\n\t\t\treturn;\n\t\t}\n\t\tpinged = true;\n\t\tsocket.ping();\n\t\ttimer.refresh();\n\t}, SILENCE);\n\ttimer.unref();\n\tconst heard = (): void => {\n\t\tpinged = false;\n\t\ttimer.refresh();\n\t};\n\tsocket.on(\"message\", heard);\n\tsocket.on(\"pong\", heard);\n\tsocket.on(\"ping\", heard);\n\tsocket.once(\"close\", () => clearTimeout(timer));\n}\n\n/** Unsent data beyond the frame being sent at which a link socket is cut off: a client that stopped reading. */\nconst MAX_UNSENT_BYTES = 4 * 1024 * 1024;\n\n/**\n * `socket` as the link sees it, its output capped (p2's `limitedSocket`): before each send, what is still buffered\n * beyond the largest frame being sent must stay under 4 MiB, or the socket is terminated (the client reconnects from\n * snapshots); Chord's flow control keeps a reading client far below it.\n */\nexport function limitedSocket(socket: WebSocket): WebSocketLike {\n\tconst unsent = new Set<{ readonly bytes: number }>();\n\treturn {\n\t\tget readyState() {\n\t\t\treturn socket.readyState;\n\t\t},\n\t\tget binaryType() {\n\t\t\treturn socket.binaryType;\n\t\t},\n\t\tset binaryType(type: string) {\n\t\t\tsocket.binaryType = type as WebSocket[\"binaryType\"];\n\t\t},\n\t\tsend(data) {\n\t\t\tif (socket.readyState !== socket.OPEN) return;\n\t\t\tlet sending = 0;\n\t\t\tfor (const frame of unsent) sending = Math.max(sending, frame.bytes);\n\t\t\tif (socket.bufferedAmount - sending > MAX_UNSENT_BYTES) {\n\t\t\t\tsocket.terminate();\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// The largest server frame header is 10 bytes.\n\t\t\tconst frame = { bytes: data.byteLength + 10 };\n\t\t\tunsent.add(frame);\n\t\t\tsocket.send(data, (error) => {\n\t\t\t\tunsent.delete(frame);\n\t\t\t\tif (error) socket.terminate();\n\t\t\t});\n\t\t},\n\t\tclose: () => socket.close(),\n\t\taddEventListener: (type: string, listener: (event: { readonly data: unknown }) => void) =>\n\t\t\tsocket.addEventListener(type as \"message\", listener as never),\n\t\tremoveEventListener: (type: string, listener: (event: { readonly data: unknown }) => void) =>\n\t\t\tsocket.removeEventListener(type as \"message\", listener as never),\n\t} as WebSocketLike;\n}\n"]}

package/dist/node/plugins/base-inputs.d.ts

@@ -0,0 +1,14 @@
+import type { Plugin } from "esbuild";
+/** What a base artifact was built from: the hash of each file's bytes as read (`contentHash`), by absolute path. */
+export type BaseInputs = ReadonlyMap<string, string>;
+/** The hash of `bytes` a base record keeps (SHA-256, hex). */
+export declare function contentHash(bytes: Uint8Array): string;
+/** Reads `path` for a build, recording its bytes' hash in `inputs`: the one read of the file, its bytes for esbuild. */
+export declare function readRecorded(path: string, inputs: Map<string, string>): Promise<Buffer>;
+/**
+ * An esbuild plugin loading every file through `readRecorded`, with esbuild's own loader for its extension: what the
+ * build read, in `inputs`. The last of a build's plugins: an earlier `onLoad` returning contents reads (and records)
+ * the file itself.
+ */
+export declare function recordedSources(inputs: Map<string, string>): Plugin;
+//# sourceMappingURL=base-inputs.d.ts.map