@expofp/loader 1.0.78 → 1.0.91

package/dist/bundle/ImportHttpRuntime.node-B85BNHJG.js

@@ -0,0 +1,92 @@
+import { d as D } from "./bundle.js";
+import I from "node:crypto";
+import g from "node:fs/promises";
+import L from "node:os";
+import o from "node:path";
+import S from "node:url";
+const l = D("efp:loader:nodeImportHttpRuntime"), y = /* @__PURE__ */ new Map();
+function k(t) {
+  return I.createHash("sha256").update(t).digest("hex");
+}
+function T(t) {
+  const e = new URL(t), n = e.pathname, r = n.lastIndexOf("/");
+  return e.pathname = r >= 0 ? n.slice(0, r + 1) : "/", e.search = "", e.hash = "", e;
+}
+function H(t) {
+  if (!t || t.startsWith("/") || t.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(t)) return !1;
+  const e = o.posix.normalize(t.replace(/\\/g, "/"));
+  return !(e.startsWith("..") || e.includes("/../"));
+}
+async function U(t) {
+  await g.mkdir(t, { recursive: !0 });
+}
+async function j(t) {
+  try {
+    return await g.stat(t), !0;
+  } catch {
+    return !1;
+  }
+}
+async function N(t, e) {
+  const n = await t(e);
+  if (!n.ok) throw new Error(`Failed to fetch JSON ${e}: ${n.status} ${n.statusText}`);
+  return await n.json();
+}
+async function W(t, e, n) {
+  const r = await t(e);
+  if (!r.ok) throw new Error(`Failed to fetch ${e}: ${r.status} ${r.statusText}`);
+  const i = await r.arrayBuffer();
+  await U(o.dirname(n)), await g.writeFile(n, Buffer.from(i));
+}
+function v(t) {
+  return t.files.map((e) => e.file);
+}
+async function C(t, e, n) {
+  const r = t.slice(), i = Array.from({ length: Math.max(1, e) }, async () => {
+    for (; r.length; ) {
+      const s = r.shift();
+      await n(s);
+    }
+  });
+  await Promise.all(i);
+}
+async function q(t, e = {}) {
+  const {
+    cacheRootDir: n = o.join(L.tmpdir(), "efp-loader"),
+    concurrency: r = 8,
+    forceRedownload: i = !1,
+    fetchImpl: s = globalThis.fetch
+  } = e;
+  if (l("Cache root dir: '%s'", n), typeof s != "function")
+    throw new Error("No fetch() available. Use Node 18+ or pass fetchImpl (e.g. undici fetch).");
+  const u = T(t), c = u.toString();
+  if (!i && y.has(c))
+    return y.get(c);
+  const x = (async () => {
+    const F = k(c).slice(0, 16), f = o.join(n, F);
+    await U(f);
+    const h = new URL("bundle.json", u).toString();
+    l("Fetching bundle.json:", h);
+    const $ = await N(s, h), m = v($), w = o.posix.basename(new URL(t).pathname);
+    m.includes(w) || m.unshift(w);
+    const d = m.map((a) => a.replace(/\\/g, "/")).filter((a) => H(a));
+    if (d.length === 0)
+      throw new Error(`bundle.json from ${h} produced 0 safe files to download`);
+    l("Downloading files:", d.length, "->", f), await C(d, r, async (a) => {
+      const b = o.join(f, a.split("/").join(o.sep));
+      if (!i && await j(b)) return;
+      const E = new URL(a, u).toString();
+      await W(s, E, b);
+    });
+    const p = o.join(f, w.split("/").join(o.sep));
+    if (!await j(p))
+      throw new Error(`Entry file missing after download: ${p} (from ${t})`);
+    const R = S.pathToFileURL(p).toString();
+    return l("Importing local runtime entry:", R), await import(R);
+  })();
+  return y.set(c, x), x;
+}
+export {
+  q as nodeImportHttpRuntime
+};
+//# sourceMappingURL=ImportHttpRuntime.node-B85BNHJG.js.map

package/dist/bundle/ImportHttpRuntime.node-B85BNHJG.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ImportHttpRuntime.node-B85BNHJG.js","sources":["../../src/ImportHttpRuntime.node.ts"],"sourcesContent":["import debug from 'debug';\nimport crypto from 'node:crypto';\nimport fs from 'node:fs/promises';\nimport os from 'node:os';\nimport path from 'node:path';\nimport url from 'node:url';\n\nconst log = debug('efp:loader:nodeImportHttpRuntime');\n\ntype BundleJson = { files: { file: string }[] };\n\nexport type ImportHttpRuntimeOptions = {\n  /**\n   * Where to store downloaded runtime bundles.\n   * Default: <os.tmpdir()>/efp-loader\n   */\n  cacheRootDir?: string;\n\n  /**\n   * Max parallel downloads.\n   * Default: 8\n   */\n  concurrency?: number;\n\n  /**\n   * If true, will re-download files even if already present.\n   * Default: false\n   */\n  forceRedownload?: boolean;\n\n  /**\n   * Pass a custom fetch (useful for tests / node < 18).\n   * Default: global fetch\n   */\n  fetchImpl?: typeof fetch;\n};\n\nconst runtimeDirCache = new Map<string, Promise<any>>();\n\nfunction sha256Hex(input: string) {\n  return crypto.createHash('sha256').update(input).digest('hex');\n}\n\nfunction toRuntimeDirUrl(runtime: string): URL {\n  const u = new URL(runtime);\n  // Ensure we treat runtime as a file URL and strip the last segment\n  const pathname = u.pathname;\n  const idx = pathname.lastIndexOf('/');\n  u.pathname = idx >= 0 ? pathname.slice(0, idx + 1) : '/';\n  // Keep search/fragment off for directory identity\n  u.search = '';\n  u.hash = '';\n  return u;\n}\n\nfunction isSafeRelative(p: string) {\n  // Reject absolute paths, Windows drive paths, and parent traversal.\n  if (!p || p.startsWith('/') || p.startsWith('\\\\')) return false;\n  if (/^[a-zA-Z]:[\\\\/]/.test(p)) return false;\n  const norm = path.posix.normalize(p.replace(/\\\\/g, '/'));\n  if (norm.startsWith('..') || norm.includes('/../')) return false;\n  return true;\n}\n\nasync function ensureDir(dir: string) {\n  await fs.mkdir(dir, { recursive: true });\n}\n\nasync function fileExists(fp: string) {\n  try {\n    await fs.stat(fp);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function fetchJson(fetchImpl: typeof fetch, url: string): Promise<any> {\n  const res = await fetchImpl(url);\n  if (!res.ok) throw new Error(`Failed to fetch JSON ${url}: ${res.status} ${res.statusText}`);\n  return await res.json();\n}\n\nasync function fetchToFile(fetchImpl: typeof fetch, url: string, outPath: string) {\n  const res = await fetchImpl(url);\n  if (!res.ok) throw new Error(`Failed to fetch ${url}: ${res.status} ${res.statusText}`);\n  const ab = await res.arrayBuffer();\n  await ensureDir(path.dirname(outPath));\n  await fs.writeFile(outPath, Buffer.from(ab));\n}\n\nfunction extractFileList(bundle: BundleJson): string[] {\n  return bundle.files.map((f) => f.file);\n  // if (Array.isArray(bundle)) return bundle.slice();\n  // const fromKnown = bundle.files ?? bundle.assets ?? bundle.entries ?? undefined;\n\n  // if (Array.isArray(fromKnown)) return fromKnown.slice();\n\n  // // As a last resort, look for the first string[] field\n  // for (const v of Object.values(bundle)) {\n  //   if (Array.isArray(v) && v.every((x) => typeof x === 'string')) {\n  //     return (v as string[]).slice();\n  //   }\n  // }\n  // throw new Error(\n  //   'bundle.json has no recognizable file list (expected array or {files/assets/entries})'\n  // );\n}\n\nasync function runWithConcurrency<T>(\n  items: T[],\n  concurrency: number,\n  worker: (item: T) => Promise<void>\n) {\n  const queue = items.slice();\n  const workers = Array.from({ length: Math.max(1, concurrency) }, async () => {\n    while (queue.length) {\n      const item = queue.shift()!;\n      await worker(item);\n    }\n  });\n  await Promise.all(workers);\n}\n\n/**\n * Downloads an HTTP runtime bundle (bundle.json + all referenced files)\n * into a stable temp folder hashed by the runtime directory URL,\n * then imports expofp.js locally via file://.\n */\nexport async function nodeImportHttpRuntime<TModule = any>(\n  runtime: string,\n  opts: ImportHttpRuntimeOptions = {}\n): Promise<TModule> {\n  const {\n    cacheRootDir = path.join(os.tmpdir(), 'efp-loader'),\n    concurrency = 8,\n    forceRedownload = false,\n    fetchImpl = globalThis.fetch,\n  } = opts;\n\n  log(\"Cache root dir: '%s'\", cacheRootDir);\n\n  if (typeof fetchImpl !== 'function') {\n    throw new Error('No fetch() available. Use Node 18+ or pass fetchImpl (e.g. undici fetch).');\n  }\n\n  const runtimeDir = toRuntimeDirUrl(runtime);\n  const runtimeDirKey = runtimeDir.toString();\n\n  // One in-flight download/import per runtime dir\n  if (!forceRedownload && runtimeDirCache.has(runtimeDirKey)) {\n    return runtimeDirCache.get(runtimeDirKey)! as Promise<TModule>;\n  }\n\n  const task = (async () => {\n    const hash = sha256Hex(runtimeDirKey).slice(0, 16);\n    const localRoot = path.join(cacheRootDir, hash);\n\n    await ensureDir(localRoot);\n\n    const bundleUrl = new URL('bundle.json', runtimeDir).toString();\n    log('Fetching bundle.json:', bundleUrl);\n\n    const bundle = (await fetchJson(fetchImpl, bundleUrl)) as BundleJson;\n    const files = extractFileList(bundle);\n\n    // Always include the entry file (from runtime) even if bundle.json forgot it\n    const entryName = path.posix.basename(new URL(runtime).pathname);\n    if (!files.includes(entryName)) files.unshift(entryName);\n\n    // Sanitize + normalize\n    const safeFiles = files.map((f) => f.replace(/\\\\/g, '/')).filter((f) => isSafeRelative(f));\n\n    if (safeFiles.length === 0) {\n      throw new Error(`bundle.json from ${bundleUrl} produced 0 safe files to download`);\n    }\n\n    log('Downloading files:', safeFiles.length, '->', localRoot);\n\n    await runWithConcurrency(safeFiles, concurrency, async (rel) => {\n      const outPath = path.join(localRoot, rel.split('/').join(path.sep));\n\n      if (!forceRedownload && (await fileExists(outPath))) return;\n\n      const fileUrl = new URL(rel, runtimeDir).toString();\n      await fetchToFile(fetchImpl, fileUrl, outPath);\n    });\n\n    const localEntryPath = path.join(localRoot, entryName.split('/').join(path.sep));\n    if (!(await fileExists(localEntryPath))) {\n      throw new Error(`Entry file missing after download: ${localEntryPath} (from ${runtime})`);\n    }\n\n    const entryFileUrl = url.pathToFileURL(localEntryPath).toString();\n    log('Importing local runtime entry:', entryFileUrl);\n\n    // @ts-ignore - dynamic import URL string is fine in Node\n    const mod = (await import(entryFileUrl)) as TModule;\n    return mod;\n  })();\n\n  runtimeDirCache.set(runtimeDirKey, task);\n  return task;\n}\n"],"names":["log","debug","runtimeDirCache","sha256Hex","input","crypto","toRuntimeDirUrl","runtime","u","pathname","idx","isSafeRelative","p","norm","path","ensureDir","dir","fs","fileExists","fp","fetchJson","fetchImpl","url","res","fetchToFile","outPath","ab","extractFileList","bundle","f","runWithConcurrency","items","concurrency","worker","queue","workers","item","nodeImportHttpRuntime","opts","cacheRootDir","os","forceRedownload","runtimeDir","runtimeDirKey","task","hash","localRoot","bundleUrl","files","entryName","safeFiles","rel","fileUrl","localEntryPath","entryFileUrl"],"mappings":";;;;;;AAOA,MAAMA,IAAMC,EAAM,kCAAkC,GA8B9CC,wBAAsB,IAAA;AAE5B,SAASC,EAAUC,GAAe;AAChC,SAAOC,EAAO,WAAW,QAAQ,EAAE,OAAOD,CAAK,EAAE,OAAO,KAAK;AAC/D;AAEA,SAASE,EAAgBC,GAAsB;AAC7C,QAAMC,IAAI,IAAI,IAAID,CAAO,GAEnBE,IAAWD,EAAE,UACbE,IAAMD,EAAS,YAAY,GAAG;AACpC,SAAAD,EAAE,WAAWE,KAAO,IAAID,EAAS,MAAM,GAAGC,IAAM,CAAC,IAAI,KAErDF,EAAE,SAAS,IACXA,EAAE,OAAO,IACFA;AACT;AAEA,SAASG,EAAeC,GAAW;AAGjC,MADI,CAACA,KAAKA,EAAE,WAAW,GAAG,KAAKA,EAAE,WAAW,IAAI,KAC5C,kBAAkB,KAAKA,CAAC,EAAG,QAAO;AACtC,QAAMC,IAAOC,EAAK,MAAM,UAAUF,EAAE,QAAQ,OAAO,GAAG,CAAC;AACvD,SAAI,EAAAC,EAAK,WAAW,IAAI,KAAKA,EAAK,SAAS,MAAM;AAEnD;AAEA,eAAeE,EAAUC,GAAa;AACpC,QAAMC,EAAG,MAAMD,GAAK,EAAE,WAAW,IAAM;AACzC;AAEA,eAAeE,EAAWC,GAAY;AACpC,MAAI;AACF,iBAAMF,EAAG,KAAKE,CAAE,GACT;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAeC,EAAUC,GAAyBC,GAA2B;AAC3E,QAAMC,IAAM,MAAMF,EAAUC,CAAG;AAC/B,MAAI,CAACC,EAAI,GAAI,OAAM,IAAI,MAAM,wBAAwBD,CAAG,KAAKC,EAAI,MAAM,IAAIA,EAAI,UAAU,EAAE;AAC3F,SAAO,MAAMA,EAAI,KAAA;AACnB;AAEA,eAAeC,EAAYH,GAAyBC,GAAaG,GAAiB;AAChF,QAAMF,IAAM,MAAMF,EAAUC,CAAG;AAC/B,MAAI,CAACC,EAAI,GAAI,OAAM,IAAI,MAAM,mBAAmBD,CAAG,KAAKC,EAAI,MAAM,IAAIA,EAAI,UAAU,EAAE;AACtF,QAAMG,IAAK,MAAMH,EAAI,YAAA;AACrB,QAAMR,EAAUD,EAAK,QAAQW,CAAO,CAAC,GACrC,MAAMR,EAAG,UAAUQ,GAAS,OAAO,KAAKC,CAAE,CAAC;AAC7C;AAEA,SAASC,EAAgBC,GAA8B;AACrD,SAAOA,EAAO,MAAM,IAAI,CAACC,MAAMA,EAAE,IAAI;AAevC;AAEA,eAAeC,EACbC,GACAC,GACAC,GACA;AACA,QAAMC,IAAQH,EAAM,MAAA,GACdI,IAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAGH,CAAW,EAAA,GAAK,YAAY;AAC3E,WAAOE,EAAM,UAAQ;AACnB,YAAME,IAAOF,EAAM,MAAA;AACnB,YAAMD,EAAOG,CAAI;AAAA,IACnB;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,IAAID,CAAO;AAC3B;AAOA,eAAsBE,EACpB9B,GACA+B,IAAiC,IACf;AAClB,QAAM;AAAA,IACJ,cAAAC,IAAezB,EAAK,KAAK0B,EAAG,OAAA,GAAU,YAAY;AAAA,IAClD,aAAAR,IAAc;AAAA,IACd,iBAAAS,IAAkB;AAAA,IAClB,WAAApB,IAAY,WAAW;AAAA,EAAA,IACrBiB;AAIJ,MAFAtC,EAAI,wBAAwBuC,CAAY,GAEpC,OAAOlB,KAAc;AACvB,UAAM,IAAI,MAAM,2EAA2E;AAG7F,QAAMqB,IAAapC,EAAgBC,CAAO,GACpCoC,IAAgBD,EAAW,SAAA;AAGjC,MAAI,CAACD,KAAmBvC,EAAgB,IAAIyC,CAAa;AACvD,WAAOzC,EAAgB,IAAIyC,CAAa;AAG1C,QAAMC,KAAQ,YAAY;AACxB,UAAMC,IAAO1C,EAAUwC,CAAa,EAAE,MAAM,GAAG,EAAE,GAC3CG,IAAYhC,EAAK,KAAKyB,GAAcM,CAAI;AAE9C,UAAM9B,EAAU+B,CAAS;AAEzB,UAAMC,IAAY,IAAI,IAAI,eAAeL,CAAU,EAAE,SAAA;AACrD,IAAA1C,EAAI,yBAAyB+C,CAAS;AAEtC,UAAMnB,IAAU,MAAMR,EAAUC,GAAW0B,CAAS,GAC9CC,IAAQrB,EAAgBC,CAAM,GAG9BqB,IAAYnC,EAAK,MAAM,SAAS,IAAI,IAAIP,CAAO,EAAE,QAAQ;AAC/D,IAAKyC,EAAM,SAASC,CAAS,KAAGD,EAAM,QAAQC,CAAS;AAGvD,UAAMC,IAAYF,EAAM,IAAI,CAACnB,MAAMA,EAAE,QAAQ,OAAO,GAAG,CAAC,EAAE,OAAO,CAACA,MAAMlB,EAAekB,CAAC,CAAC;AAEzF,QAAIqB,EAAU,WAAW;AACvB,YAAM,IAAI,MAAM,oBAAoBH,CAAS,oCAAoC;AAGnF,IAAA/C,EAAI,sBAAsBkD,EAAU,QAAQ,MAAMJ,CAAS,GAE3D,MAAMhB,EAAmBoB,GAAWlB,GAAa,OAAOmB,MAAQ;AAC9D,YAAM1B,IAAUX,EAAK,KAAKgC,GAAWK,EAAI,MAAM,GAAG,EAAE,KAAKrC,EAAK,GAAG,CAAC;AAElE,UAAI,CAAC2B,KAAoB,MAAMvB,EAAWO,CAAO,EAAI;AAErD,YAAM2B,IAAU,IAAI,IAAID,GAAKT,CAAU,EAAE,SAAA;AACzC,YAAMlB,EAAYH,GAAW+B,GAAS3B,CAAO;AAAA,IAC/C,CAAC;AAED,UAAM4B,IAAiBvC,EAAK,KAAKgC,GAAWG,EAAU,MAAM,GAAG,EAAE,KAAKnC,EAAK,GAAG,CAAC;AAC/E,QAAI,CAAE,MAAMI,EAAWmC,CAAc;AACnC,YAAM,IAAI,MAAM,sCAAsCA,CAAc,UAAU9C,CAAO,GAAG;AAG1F,UAAM+C,IAAehC,EAAI,cAAc+B,CAAc,EAAE,SAAA;AACvD,WAAArD,EAAI,kCAAkCsD,CAAY,GAGrC,MAAM,OAAOA;AAAA,EAE5B,GAAA;AAEA,SAAApD,EAAgB,IAAIyC,GAAeC,CAAI,GAChCA;AACT;"}