@gjsify/http 0.51.1 → 0.53.0

package/lib/esm/client-request.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{IncomingMessage as e}from"./incoming-message.js";import{OutgoingMessage as t}from"./server.js";import n from"@girs/glib-2.0";import r from"@girs/soup-3.0";import i from"@girs/gio-2.0";import{Buffer as a}from"node:buffer";import{URL as o}from"node:url";import{readBytesAsync as s}from"@gjsify/utils";var ClientRequest=class extends t{method;path;protocol;host;hostname;port;aborted=!1;reusedSocket=!1;maxHeadersCount=2e3;_chunks=[];_session;_message;_cancellable;_timeout=0;_timeoutTimer=null;_responseCallback;constructor(e,t,s){super();let c;if(typeof e==`string`||e instanceof o){let n=typeof e==`string`?new o(e):e;c={protocol:n.protocol,hostname:n.hostname,port:n.port?Number(n.port):void 0,path:n.pathname+n.search,...typeof t==`object`?t:{}},typeof t==`function`&&(s=t)}else c=e,typeof t==`function`&&(s=t);if(this.method=(c.method||`GET`).toUpperCase(),this.protocol=c.protocol||`http:`,this.hostname=c.hostname||c.host?.split(`:`)[0]||`localhost`,this.port=Number(c.port)||(this.protocol===`https:`?443:80),this.path=c.path||`/`,this.host=c.host||`${this.hostname}:${this.port}`,this._timeout=c.timeout||0,s&&(this._responseCallback=s,this.once(`response`,s)),c.headers)for(let[e,t]of Object.entries(c.headers))this.setHeader(e,t);if(c.setHost!==!1&&!this._headers.has(`host`)){let e=this.protocol===`https:`?443:80,t=this.port===e?this.hostname:`${this.hostname}:${this.port}`;this.setHeader(`Host`,t)}c.auth&&!this._headers.has(`authorization`)&&this.setHeader(`Authorization`,`Basic `+a.from(c.auth).toString(`base64`)),c.signal&&(c.signal.aborted?this.abort():c.signal.addEventListener(`abort`,()=>this.abort(),{once:!0}));let l=n.Uri.parse(this._buildUrl(),n.UriFlags.NONE);this._session=new r.Session,this._message=new r.Message({method:this.method,uri:l}),this._cancellable=new i.Cancellable,this._timeout>0&&(this._session.timeout=Math.ceil(this._timeout/1e3),this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,this.emit(`timeout`)},this._timeout))}_buildUrl(){let e=this.protocol.endsWith(`:`)?this.protocol:this.protocol+`:`,t=e===`https:`?443:80,n=this.port===t?``:`:${this.port}`;return`${e}//${this.hostname}${n}${this.path}`}getRawHeaderNames(){return Array.from(this._headers.keys())}flushHeaders(){this.headersSent||this._applyHeaders()}setTimeout(e,t){return this._timeout=e,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),t&&this.once(`timeout`,t),e>0&&(this._session.timeout=Math.ceil(e/1e3),this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,this.emit(`timeout`)},e)),this}abort(){this.aborted||(this.aborted=!0,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),this._cancellable.cancel(),this.emit(`abort`),this.destroy())}_write(e,t,n){let r=a.isBuffer(e)?e:typeof e==`string`?a.from(e,t):a.from(e);this._chunks.push(r),n()}_final(e){this._sendRequest().then(()=>e()).catch(t=>e(t))}_applyHeaders(){if(this.headersSent)return;this.headersSent=!0;let e=this._message.get_request_headers();for(let[t,n]of this._headers)if(Array.isArray(n))for(let r of n)e.append(t,r);else e.replace(t,n)}async _sendRequest(){this._applyHeaders();let t=a.concat(this._chunks);if(t.length>0){let e=this._headers.get(`content-type`)||`application/octet-stream`;this._message.set_request_body_from_bytes(e,new n.Bytes(t))}try{let t=await new Promise((e,t)=>{this._session.send_async(this._message,n.PRIORITY_DEFAULT,this._cancellable,(n,r)=>{try{e(this._session.send_finish(r))}catch(e){t(e)}})}),r=[];try{let e;for(;(e=await s(t,4096,n.PRIORITY_DEFAULT,this._cancellable))!==null;)r.push(a.from(e))}catch{}let i=new e;i.statusCode=this._message.status_code,i.statusMessage=this._message.get_reason_phrase(),i.httpVersion=`1.1`,this._message.get_response_headers().foreach((e,t)=>{let n=e.toLowerCase();if(i.rawHeaders.push(e,t),n in i.headers){let e=i.headers[n];Array.isArray(e)?e.push(t):i.headers[n]=[e,t]}else i.headers[n]=t}),this.finished=!0,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),this.emit(`response`,i),setTimeout(()=>{for(let e of r)i.push(e);i.push(null),i.complete=!0},0)}catch(e){this.aborted?this.emit(`abort`):this.emit(`error`,e instanceof Error?e:Error(String(e)))}}};export{ClientRequest};
+import"./_virtual/_rolldown/runtime.js";import{IncomingMessage as e}from"./incoming-message.js";import{OutgoingMessage as t}from"./server.js";import n from"@girs/glib-2.0";import r from"@girs/soup-3.0";import i from"@girs/gio-2.0";import{Buffer as a}from"node:buffer";import{URL as o}from"node:url";import{readBytesAsync as s}from"@gjsify/utils";import{createPeerVerifier as c,createSecureContext as l}from"@gjsify/tls/verify";var ClientRequest=class extends t{method;path;protocol;host;hostname;port;aborted=!1;reusedSocket=!1;maxHeadersCount=2e3;_chunks=[];_session;_message;_cancellable;_timeout=0;_timeoutTimer=null;_responseCallback;_tlsRejection=null;constructor(e,t,s){super();let c;if(typeof e==`string`||e instanceof o){let n=typeof e==`string`?new o(e):e;c={protocol:n.protocol,hostname:n.hostname,port:n.port?Number(n.port):void 0,path:n.pathname+n.search,...typeof t==`object`?t:{}},typeof t==`function`&&(s=t)}else c=e,typeof t==`function`&&(s=t);if(this.method=(c.method||`GET`).toUpperCase(),this.protocol=c.protocol||`http:`,this.hostname=c.hostname||c.host?.split(`:`)[0]||`localhost`,this.port=Number(c.port)||(this.protocol===`https:`?443:80),this.path=c.path||`/`,this.host=c.host||`${this.hostname}:${this.port}`,this._timeout=c.timeout||0,s&&(this._responseCallback=s,this.once(`response`,s)),c.headers)for(let[e,t]of Object.entries(c.headers))this.setHeader(e,t);if(c.setHost!==!1&&!this._headers.has(`host`)){let e=this.protocol===`https:`?443:80,t=this.port===e?this.hostname:`${this.hostname}:${this.port}`;this.setHeader(`Host`,t)}c.auth&&!this._headers.has(`authorization`)&&this.setHeader(`Authorization`,`Basic `+a.from(c.auth).toString(`base64`)),c.signal&&(c.signal.aborted?this.abort():c.signal.addEventListener(`abort`,()=>this.abort(),{once:!0}));let l=n.Uri.parse(this._buildUrl(),n.UriFlags.NONE);this._session=new r.Session,this._message=new r.Message({method:this.method,uri:l}),this._cancellable=new i.Cancellable,this.protocol===`https:`&&this._setupTls(c),this._timeout>0&&(this._session.timeout=Math.ceil(this._timeout/1e3),this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,this.emit(`timeout`)},this._timeout))}_setupTls(e){let t=e.agent===void 0?e._defaultAgent:e.agent,n=t&&typeof t==`object`?t.options:void 0,r={...e,...n},i=r.secureContext??l(r),a=c({caCertificates:i.caCertificates,rejectUnauthorized:r.rejectUnauthorized,host:r.servername||this.hostname,checkServerIdentity:r.checkServerIdentity});this._session.set_tls_database(null),this._message.connect(`accept-certificate`,(e,t,n)=>{let r=a.accept(t);return this._tlsRejection=r?null:a.error,r}),i.certificate&&this._message.set_tls_client_certificate(i.certificate)}_buildUrl(){let e=this.protocol.endsWith(`:`)?this.protocol:this.protocol+`:`,t=e===`https:`?443:80,n=this.port===t?``:`:${this.port}`;return`${e}//${this.hostname}${n}${this.path}`}getRawHeaderNames(){return Array.from(this._headers.keys())}flushHeaders(){this.headersSent||this._applyHeaders()}setTimeout(e,t){return this._timeout=e,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),t&&this.once(`timeout`,t),e>0&&(this._session.timeout=Math.ceil(e/1e3),this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,this.emit(`timeout`)},e)),this}abort(){this.aborted||(this.aborted=!0,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),this._cancellable.cancel(),this.emit(`abort`),this.destroy())}_write(e,t,n){let r=a.isBuffer(e)?e:typeof e==`string`?a.from(e,t):a.from(e);this._chunks.push(r),n()}_final(e){this._sendRequest().then(()=>e()).catch(t=>e(t))}_applyHeaders(){if(this.headersSent)return;this.headersSent=!0;let e=this._message.get_request_headers();for(let[t,n]of this._headers)if(Array.isArray(n))for(let r of n)e.append(t,r);else e.replace(t,n)}async _sendRequest(){this._applyHeaders();let t=a.concat(this._chunks);if(t.length>0){let e=this._headers.get(`content-type`)||`application/octet-stream`;this._message.set_request_body_from_bytes(e,new n.Bytes(t))}try{let t=await new Promise((e,t)=>{this._session.send_async(this._message,n.PRIORITY_DEFAULT,this._cancellable,(n,r)=>{try{e(this._session.send_finish(r))}catch(e){t(e)}})}),r=[];try{let e;for(;(e=await s(t,4096,n.PRIORITY_DEFAULT,this._cancellable))!==null;)r.push(a.from(e))}catch{}let i=new e;i.statusCode=this._message.status_code,i.statusMessage=this._message.get_reason_phrase(),i.httpVersion=`1.1`,this._message.get_response_headers().foreach((e,t)=>{let n=e.toLowerCase();if(i.rawHeaders.push(e,t),n in i.headers){let e=i.headers[n];Array.isArray(e)?e.push(t):i.headers[n]=[e,t]}else i.headers[n]=t}),this.finished=!0,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),this.emit(`response`,i),setTimeout(()=>{for(let e of r)i.push(e);i.push(null),i.complete=!0},0)}catch(e){this.aborted?this.emit(`abort`):this._tlsRejection?this.emit(`error`,this._tlsRejection):this.emit(`error`,e instanceof Error?e:Error(String(e)))}}};export{ClientRequest};

package/lib/esm/index.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{validateHeaderName as e,validateHeaderValue as t}from"./validators.js";import{METHODS as n,STATUS_CODES as r}from"./constants.js";import{IncomingMessage as i}from"./incoming-message.js";import{OutgoingMessage as a,Server as o,ServerResponse as s}from"./server.js";import{ClientRequest as c}from"./client-request.js";import{URL as l}from"node:url";var Agent=class{defaultPort=80;protocol=`http:`;maxSockets;maxTotalSockets;maxFreeSockets;keepAliveMsecs;keepAlive;scheduling;requests={};sockets={};freeSockets={};constructor(e){this.keepAlive=e?.keepAlive??!1,this.keepAliveMsecs=e?.keepAliveMsecs??1e3,this.maxSockets=e?.maxSockets??1/0,this.maxTotalSockets=e?.maxTotalSockets??1/0,this.maxFreeSockets=e?.maxFreeSockets??256,this.scheduling=e?.scheduling??`lifo`}destroy(){}getName(e){let t=e.host||`localhost`;return e.port&&(t+=`:`+e.port),e.localAddress&&(t+=`:`+e.localAddress),(e.family===4||e.family===6)&&(t+=`:`+e.family),t}};const u=new Agent;function createServer(e,t){return typeof e==`function`?new o(e):new o(t)}function request(e,t,n){return new c(e,t,n)}function get(e,t,n){let r,i=n;typeof e==`string`||e instanceof l?(r=typeof t==`object`?{...t,method:`GET`}:{method:`GET`},typeof t==`function`&&(i=t)):(r={...e,method:`GET`},typeof t==`function`&&(i=t),e=r);let a=typeof e==`string`||e instanceof l?new c(e,{...r,method:`GET`},i):new c({...r,method:`GET`},i);return a.end(),a}const d=16384;function setMaxIdleHTTPParsers(e){}var f={STATUS_CODES:r,METHODS:n,Server:o,IncomingMessage:i,OutgoingMessage:a,ServerResponse:s,ClientRequest:c,Agent,globalAgent:u,createServer,request,get,validateHeaderName:e,validateHeaderValue:t,maxHeaderSize:d,setMaxIdleHTTPParsers};export{Agent,c as ClientRequest,i as IncomingMessage,n as METHODS,a as OutgoingMessage,r as STATUS_CODES,o as Server,s as ServerResponse,createServer,f as default,get,u as globalAgent,d as maxHeaderSize,request,setMaxIdleHTTPParsers,e as validateHeaderName,t as validateHeaderValue};
+import"./_virtual/_rolldown/runtime.js";import{validateHeaderName as e,validateHeaderValue as t}from"./validators.js";import{METHODS as n,STATUS_CODES as r}from"./constants.js";import{IncomingMessage as i}from"./incoming-message.js";import{OutgoingMessage as a,Server as o,ServerResponse as s}from"./server.js";import{ClientRequest as c}from"./client-request.js";import{URL as l}from"node:url";var Agent=class{defaultPort=80;protocol=`http:`;maxSockets;maxTotalSockets;maxFreeSockets;keepAliveMsecs;keepAlive;scheduling;requests={};sockets={};freeSockets={};options;constructor(e){this.options={...e},this.keepAlive=e?.keepAlive??!1,this.keepAliveMsecs=e?.keepAliveMsecs??1e3,this.maxSockets=e?.maxSockets??1/0,this.maxTotalSockets=e?.maxTotalSockets??1/0,this.maxFreeSockets=e?.maxFreeSockets??256,this.scheduling=e?.scheduling??`lifo`}destroy(){}getName(e){let t=e.host||`localhost`;return e.port&&(t+=`:`+e.port),e.localAddress&&(t+=`:`+e.localAddress),(e.family===4||e.family===6)&&(t+=`:`+e.family),t}};const u=new Agent;function createServer(e,t){return typeof e==`function`?new o(e):new o(t)}function request(e,t,n){return new c(e,t,n)}function get(e,t,n){let r,i=n;typeof e==`string`||e instanceof l?(r=typeof t==`object`?{...t,method:`GET`}:{method:`GET`},typeof t==`function`&&(i=t)):(r={...e,method:`GET`},typeof t==`function`&&(i=t),e=r);let a=typeof e==`string`||e instanceof l?new c(e,{...r,method:`GET`},i):new c({...r,method:`GET`},i);return a.end(),a}const d=16384;function setMaxIdleHTTPParsers(e){}var f={STATUS_CODES:r,METHODS:n,Server:o,IncomingMessage:i,OutgoingMessage:a,ServerResponse:s,ClientRequest:c,Agent,globalAgent:u,createServer,request,get,validateHeaderName:e,validateHeaderValue:t,maxHeaderSize:d,setMaxIdleHTTPParsers};export{Agent,c as ClientRequest,i as IncomingMessage,n as METHODS,a as OutgoingMessage,r as STATUS_CODES,o as Server,s as ServerResponse,createServer,f as default,get,u as globalAgent,d as maxHeaderSize,request,setMaxIdleHTTPParsers,e as validateHeaderName,t as validateHeaderValue};

package/lib/esm/server-tls.js

@@ -0,0 +1,2 @@
+import"./_virtual/_rolldown/runtime.js";import e from"@girs/gio-2.0";import{createSecureContext as t}from"@gjsify/tls";function resolveServerTls(n){let r=t(n);if(n.cert&&!r.certificate)throw Error(`https.Server: cannot parse the key/cert pair as PEM`);if(!r.certificate)return null;let i=e.TlsAuthenticationMode.NONE;return n.requestCert&&(i=n.rejectUnauthorized===!1?e.TlsAuthenticationMode.REQUESTED:e.TlsAuthenticationMode.REQUIRED),{certificate:r.certificate,authenticationMode:i,clientCa:n.requestCert?r.caCertificates:[]}}function createTrustDatabase(t){let[n,r]=e.File.new_tmp(`gjsify-https-ca-XXXXXX.pem`);try{let i=t.map(e=>e.certificate_pem).join(`
+`);return r.get_output_stream().write_all(new TextEncoder().encode(i),null),r.close(null),{database:e.TlsFileDatabase.new(n.get_path()),file:n}}catch(e){throw removeFile(n),e}}function removeFile(e){try{e.delete(null)}catch{}}export{createTrustDatabase,removeFile,resolveServerTls};

package/lib/esm/server.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{ServerRequestSocket as e}from"./server-request-socket.js";import{STATUS_CODES as t}from"./constants.js";import{IncomingMessage as n}from"./incoming-message.js";import{Buffer as r}from"node:buffer";import{EventEmitter as i}from"node:events";import{Writable as a}from"node:stream";import{Socket as o}from"@gjsify/net/socket";import{Server as s}from"@gjsify/http-soup-bridge";import{createNodeError as c,deferEmit as l,ensureMainLoop as u}from"@gjsify/utils/core";var OutgoingMessage=class extends a{headersSent=!1;sendDate=!0;finished=!1;socket=null;_headers=new Map;setHeader(e,t){return this._headers.set(e.toLowerCase(),typeof t==`number`?String(t):t),this}getHeader(e){return this._headers.get(e.toLowerCase())}removeHeader(e){this._headers.delete(e.toLowerCase())}hasHeader(e){return this._headers.has(e.toLowerCase())}getHeaderNames(){return Array.from(this._headers.keys())}getHeaders(){let e={};for(let[t,n]of this._headers)e[t]=n;return e}appendHeader(e,t){let n=e.toLowerCase(),r=this._headers.get(n);return r===void 0?this._headers.set(n,t):Array.isArray(r)?Array.isArray(t)?r.push(...t):r.push(t):Array.isArray(t)?this._headers.set(n,[r,...t]):this._headers.set(n,[r,t]),this}flushHeaders(){this.headersSent=!0}_write(e,t,n){n()}},ServerResponse=class extends OutgoingMessage{statusCode=200;statusMessage=``;_streaming=!1;_bridge;_timeoutTimer=null;constructor(e){super(),this._bridge=e,e.connect(`close`,()=>{this.emit(`close`)})}setTimeout(e,t){return this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),t&&this.once(`timeout`,t),e>0&&(this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,this.emit(`timeout`)},e)),this}writeHead(e,n,r){if(this.statusCode=e,typeof n==`object`&&(r=n,n=void 0),this.statusMessage=n||t[e]||``,r)for(let[e,t]of Object.entries(r))this.setHeader(e,t);return this}writeContinue(e){e&&Promise.resolve().then(e)}writeProcessing(e){e&&Promise.resolve().then(e)}flushHeaders(){this.headersSent||=!0}addTrailers(e){for(let[t,n]of Object.entries(e))this._headers.set(`trailer-`+t.toLowerCase(),n)}_startStreaming(){if(!this._streaming){this._streaming=!0,this.headersSent=!0,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null);for(let[e,t]of this._headers)if(Array.isArray(t))for(let n of t)this._bridge.append_header(e,n);else this._bridge.set_header(e,t);this._bridge.write_head(this.statusCode,this.statusMessage||null)}}_write(e,t,n){let i=r.isBuffer(e)?e:typeof e==`string`?r.from(e,t):r.from(e);this._startStreaming(),this._bridge.write_chunk(new Uint8Array(i.buffer,i.byteOffset,i.byteLength)),n()}_final(e){if(!this._streaming){for(let[e,t]of this._headers)if(Array.isArray(t))for(let n of t)this._bridge.append_header(e,n);else this._bridge.set_header(e,t);this._bridge.write_head(this.statusCode,this.statusMessage||null)}this._bridge.end(),this.finished=!0,e()}end(e,t,n){return typeof e==`function`?(n=e,e=void 0):typeof t==`function`&&(n=t,t=void 0),e!=null&&this.write(e,t),super.end(n),this}};const d=new Set;var Server=class extends i{listening=!1;maxHeadersCount=2e3;timeout=0;keepAliveTimeout=5e3;headersTimeout=6e4;requestTimeout=3e5;_bridge=null;_address=null;get soupServer(){return this._bridge?.soup_server??null}constructor(e,t){super();let n=typeof e==`function`?e:t;n&&this.on(`request`,n)}listen(...e){let t=0,n=`0.0.0.0`,r;for(let i of e)typeof i==`number`?t=i:typeof i==`string`?n=i:typeof i==`function`&&(r=i);r&&this.once(`listening`,r);try{this._bridge=new s,this._bridge.connect(`request-received`,(e,t,n)=>{this._handleRequest(t,n)}),this._bridge.connect(`upgrade`,(e,t,n,r)=>{this._handleUpgrade(t,n)}),this._bridge.connect(`error-occurred`,(e,t)=>{this.emit(`error`,Error(t))}),this._bridge.listen(t,n),u(),this.listening=!0,this._address={port:this._bridge.port,family:`IPv4`,address:this._bridge.address||n},d.add(this),l(this,`listening`)}catch(e){let r=c(e,`listen`,{address:n,port:t});l(this,`error`,r)}return this}_handleRequest(t,r){let i=new n,a=new ServerResponse(r);i.method=t.method,i.url=t.url,i.httpVersion=`1.1`;let o=t.header_pairs??[];for(let e=0;e+1<o.length;e+=2){let t=o[e],n=o[e+1],r=t.toLowerCase();if(i.rawHeaders.push(t,n),r in i.headers){let e=i.headers[r];Array.isArray(e)?e.push(n):i.headers[r]=[e,n]}else i.headers[r]=n}i.socket=new e(t.remote_address??`127.0.0.1`,t.remote_port??0,this._address?.address??`127.0.0.1`,this._address?.port??0,r);let s=t.get_body();s.length>0?i._pushBody(s):i._pushBody(null),t.connect(`aborted_signal`,()=>{i.aborted||(i.aborted=!0,i.emit(`aborted`))}),t.connect(`close`,()=>{i.emit(`close`)});try{let e=this.emit(`request`,i,a);(e instanceof Promise||typeof e==`object`&&e&&typeof e.then==`function`)&&e.catch(e=>{if(console.error(`[HTTP] Unhandled error in async request handler:`,e),!a.headersSent)try{a.writeHead(500),a.end(`Internal Server Error`)}catch{}})}catch(e){if(console.error(`[HTTP] Unhandled error in request handler:`,e),!a.headersSent)try{a.writeHead(500),a.end(`Internal Server Error`)}catch{}}}_handleUpgrade(e,t){let i=new n;i.method=e.method,i.url=e.url,i.httpVersion=`1.1`;let a=e.header_pairs??[];for(let e=0;e+1<a.length;e+=2){let t=a[e],n=a[e+1],r=t.toLowerCase();i.rawHeaders.push(t,n),i.headers[r]=n}if(this.listenerCount(`upgrade`)>0){let e=new o;e._attachOutputOnly(t),this.emit(`upgrade`,i,e,r.alloc(0))}}address(){return this._address}addWebSocketHandler(e,t){if(!this._bridge)throw Error(`Server must be listening before adding WebSocket handlers. Call listen() first.`);this._bridge.soup_server.add_websocket_handler(e,null,null,(e,n,r,i)=>{t(i)})}close(e){return e&&this.once(`close`,e),this._bridge&&=(this._bridge.close(),null),this.listening=!1,d.delete(this),l(this,`close`),this}setTimeout(e,t){return this.timeout=e,t&&this.on(`timeout`,t),this}};export{OutgoingMessage,Server,ServerResponse};
+import"./_virtual/_rolldown/runtime.js";import{ServerRequestSocket as e}from"./server-request-socket.js";import{STATUS_CODES as t}from"./constants.js";import{IncomingMessage as n}from"./incoming-message.js";import{createTrustDatabase as r,removeFile as i,resolveServerTls as a}from"./server-tls.js";import o from"@girs/soup-3.0";import s from"@girs/gio-2.0";import{Buffer as c}from"node:buffer";import{EventEmitter as l}from"node:events";import{Writable as u}from"node:stream";import{Socket as d}from"@gjsify/net/socket";import{Server as f}from"@gjsify/http-soup-bridge";import{createNodeError as p,deferEmit as m,ensureMainLoop as h}from"@gjsify/utils/core";var OutgoingMessage=class extends u{headersSent=!1;sendDate=!0;finished=!1;socket=null;_headers=new Map;setHeader(e,t){return this._headers.set(e.toLowerCase(),typeof t==`number`?String(t):t),this}getHeader(e){return this._headers.get(e.toLowerCase())}removeHeader(e){this._headers.delete(e.toLowerCase())}hasHeader(e){return this._headers.has(e.toLowerCase())}getHeaderNames(){return Array.from(this._headers.keys())}getHeaders(){let e={};for(let[t,n]of this._headers)e[t]=n;return e}appendHeader(e,t){let n=e.toLowerCase(),r=this._headers.get(n);return r===void 0?this._headers.set(n,t):Array.isArray(r)?Array.isArray(t)?r.push(...t):r.push(t):Array.isArray(t)?this._headers.set(n,[r,...t]):this._headers.set(n,[r,t]),this}flushHeaders(){this.headersSent=!0}_write(e,t,n){n()}},ServerResponse=class extends OutgoingMessage{statusCode=200;statusMessage=``;_streaming=!1;_bridge;_timeoutTimer=null;constructor(e){super(),this._bridge=e,e.connect(`close`,()=>{this.emit(`close`)})}setTimeout(e,t){return this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null),t&&this.once(`timeout`,t),e>0&&(this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,this.emit(`timeout`)},e)),this}writeHead(e,n,r){if(this.statusCode=e,typeof n==`object`&&(r=n,n=void 0),this.statusMessage=n||t[e]||``,r)for(let[e,t]of Object.entries(r))this.setHeader(e,t);return this}writeContinue(e){e&&Promise.resolve().then(e)}writeProcessing(e){e&&Promise.resolve().then(e)}flushHeaders(){this.headersSent||=!0}addTrailers(e){for(let[t,n]of Object.entries(e))this._headers.set(`trailer-`+t.toLowerCase(),n)}_startStreaming(){if(!this._streaming){this._streaming=!0,this.headersSent=!0,this._timeoutTimer&&=(clearTimeout(this._timeoutTimer),null);for(let[e,t]of this._headers)if(Array.isArray(t))for(let n of t)this._bridge.append_header(e,n);else this._bridge.set_header(e,t);this._bridge.write_head(this.statusCode,this.statusMessage||null)}}_write(e,t,n){let r=c.isBuffer(e)?e:typeof e==`string`?c.from(e,t):c.from(e);this._startStreaming(),this._bridge.write_chunk(new Uint8Array(r.buffer,r.byteOffset,r.byteLength)),n()}_final(e){if(!this._streaming){for(let[e,t]of this._headers)if(Array.isArray(t))for(let n of t)this._bridge.append_header(e,n);else this._bridge.set_header(e,t);this._bridge.write_head(this.statusCode,this.statusMessage||null)}this._bridge.end(),this.finished=!0,e()}end(e,t,n){return typeof e==`function`?(n=e,e=void 0):typeof t==`function`&&(n=t,t=void 0),e!=null&&this.write(e,t),super.end(n),this}};const g=new Set;var Server=class extends l{listening=!1;maxHeadersCount=2e3;timeout=0;keepAliveTimeout=5e3;headersTimeout=6e4;requestTimeout=3e5;_bridge=null;_tls=null;_tlsRequested=!1;_trustFile=null;_address=null;get soupServer(){return this._bridge?.soup_server??null}constructor(e,t){super();let n=typeof e==`function`?e:t;n&&this.on(`request`,n)}_useTls(e){this._tlsRequested=!0,this._tls=a(e)}listen(...e){let t=0,n=`0.0.0.0`,r;for(let i of e)typeof i==`number`?t=i:typeof i==`string`?n=i:typeof i==`function`&&(r=i);if(this._tlsRequested&&!this._tls)return m(this,`error`,Error(`https.Server: no certificate — pass key and cert (PEM)`)),this;r&&this.once(`listening`,r);try{this._bridge=new f,this._bridge.connect(`request-received`,(e,t,n)=>{this._handleRequest(t,n)}),this._bridge.connect(`upgrade`,(e,t,n,r)=>{this._handleUpgrade(t,n)}),this._bridge.connect(`error-occurred`,(e,t)=>{this.emit(`error`,Error(t))});let e=this._tls?this._listenTls(this._bridge,t):this._listenPlain(this._bridge,t,n);h(),this.listening=!0,this._address={port:e,family:`IPv4`,address:this._bridge.address||n},g.add(this),m(this,`listening`)}catch(e){let r=p(e,`listen`,{address:n,port:t});m(this,`error`,r)}return this}_listenPlain(e,t,n){return e.listen(t,n),e.port}_listenTls(e,t){let n=this._tls,a=e.soup_server;if(a.tls_certificate=n.certificate,a.tls_auth_mode=n.authenticationMode,n.clientCa.length>0){let e=r(n.clientCa);a.tls_database=e.database,this._trustFile&&i(this._trustFile),this._trustFile=e.file}if(n.authenticationMode!==s.TlsAuthenticationMode.NONE){let e=n.authenticationMode===s.TlsAuthenticationMode.REQUIRED;a.connect(`request-started`,(t,n)=>{n.connect(`accept-certificate`,(t,n,r)=>!e||r===s.TlsCertificateFlags.NO_FLAGS)})}try{a.listen_local(t,o.ServerListenOptions.IPV4_ONLY|o.ServerListenOptions.HTTPS)}catch(e){throw this._trustFile&&i(this._trustFile),this._trustFile=null,e}return(a.get_listeners()[0]?.get_local_address())?.get_port()??t}_handleRequest(t,r){let i=new n,a=new ServerResponse(r);i.method=t.method,i.url=t.url,i.httpVersion=`1.1`;let o=t.header_pairs??[];for(let e=0;e+1<o.length;e+=2){let t=o[e],n=o[e+1],r=t.toLowerCase();if(i.rawHeaders.push(t,n),r in i.headers){let e=i.headers[r];Array.isArray(e)?e.push(n):i.headers[r]=[e,n]}else i.headers[r]=n}i.socket=new e(t.remote_address??`127.0.0.1`,t.remote_port??0,this._address?.address??`127.0.0.1`,this._address?.port??0,r,this._tls!==null);let s=t.get_body();s.length>0?i._pushBody(s):i._pushBody(null),t.connect(`aborted_signal`,()=>{i.aborted||(i.aborted=!0,i.emit(`aborted`))}),t.connect(`close`,()=>{i.emit(`close`)});try{let e=this.emit(`request`,i,a);(e instanceof Promise||typeof e==`object`&&e&&typeof e.then==`function`)&&e.catch(e=>{if(console.error(`[HTTP] Unhandled error in async request handler:`,e),!a.headersSent)try{a.writeHead(500),a.end(`Internal Server Error`)}catch{}})}catch(e){if(console.error(`[HTTP] Unhandled error in request handler:`,e),!a.headersSent)try{a.writeHead(500),a.end(`Internal Server Error`)}catch{}}}_handleUpgrade(e,t){let r=new n;r.method=e.method,r.url=e.url,r.httpVersion=`1.1`;let i=e.header_pairs??[];for(let e=0;e+1<i.length;e+=2){let t=i[e],n=i[e+1],a=t.toLowerCase();r.rawHeaders.push(t,n),r.headers[a]=n}if(this.listenerCount(`upgrade`)>0){let n=new d;n._attachOutputOnly(t),r.socket=n,n.remoteAddress??=e.remote_address||void 0,n.remotePort??=e.remote_port??void 0,n.remoteFamily??=n.remoteAddress?.includes(`:`)?`IPv6`:`IPv4`,n.localAddress??=this._address?.address,n.localPort??=this._address?.port,this.emit(`upgrade`,r,n,c.alloc(0))}}address(){return this._address}addWebSocketHandler(e,t){if(!this._bridge)throw Error(`Server must be listening before adding WebSocket handlers. Call listen() first.`);this._bridge.soup_server.add_websocket_handler(e,null,null,(e,n,r,i)=>{t(i)})}close(e){return e&&this.once(`close`,e),this._bridge&&=(this._tls?this._bridge.soup_server.disconnect():this._bridge.close(),null),this._trustFile&&=(i(this._trustFile),null),this.listening=!1,g.delete(this),m(this,`close`),this}setTimeout(e,t){return this.timeout=e,t&&this.on(`timeout`,t),this}};export{OutgoingMessage,Server,ServerResponse};

package/lib/types/client-request.d.ts

@@ -1,8 +1,21 @@
+import { Buffer } from 'node:buffer';
 import { URL } from 'node:url';
+import { type PeerCertificate, type SecureContext } from '@gjsify/tls/verify';
 import { OutgoingMessage } from './server.js';
 import { IncomingMessage } from './incoming-message.js';
 import type { Agent } from 'node:http';
-export interface ClientRequestOptions {
+/** The `https:` options of Node's request / `https.Agent` (tls.connect's), honoured here. */
+export interface ClientTlsOptions {
+    ca?: string | Buffer | Uint8Array | Array<string | Buffer | Uint8Array>;
+    cert?: string | Buffer | Uint8Array | Array<string | Buffer | Uint8Array>;
+    key?: string | Buffer | Uint8Array | Array<string | Buffer | Uint8Array>;
+    passphrase?: string;
+    rejectUnauthorized?: boolean;
+    servername?: string;
+    checkServerIdentity?: (host: string, cert: PeerCertificate) => Error | undefined;
+    secureContext?: SecureContext;
+}
+export interface ClientRequestOptions extends ClientTlsOptions {
     protocol?: string;
     hostname?: string;
     host?: string;
@@ -12,6 +25,8 @@ export interface ClientRequestOptions {
     headers?: Record<string, string | number | string[]>;
     timeout?: number;
     agent?: Agent | boolean;
+    /** Agent used when `agent` is undefined — `https.request` passes `https.globalAgent` (Node's name). */
+    _defaultAgent?: Agent;
     setHost?: boolean;
     /** Basic authentication string in the format 'user:password'. */
     auth?: string;
@@ -47,7 +62,16 @@ export declare class ClientRequest extends OutgoingMessage {
     private _timeout;
     private _timeoutTimer;
     private _responseCallback?;
+    /** Set when the peer verifier refused the server certificate: the error Node reports. */
+    private _tlsRejection;
     constructor(url: string | URL | ClientRequestOptions, options?: ClientRequestOptions | ((res: IncomingMessage) => void), callback?: (res: IncomingMessage) => void);
+    /**
+     * Apply the TLS options, merged the way Node's Agent does (`{...request, ...agent.options}` —
+     * the agent's win). The session gets NO trust database so every peer reaches the shared
+     * Node-semantics verifier in @gjsify/tls (why: `verify.ts`); its verdict is the error a
+     * rejected request emits.
+     */
+    private _setupTls;
     private _buildUrl;
     /** Get raw header names and values as a flat array. */
     getRawHeaderNames(): string[];

package/lib/types/index.d.ts

@@ -1,6 +1,7 @@
 export { STATUS_CODES, METHODS } from './constants.js';
 export { IncomingMessage } from './incoming-message.js';
 export { OutgoingMessage, Server, ServerResponse } from './server.js';
+export type { ServerTlsOptions } from './server-tls.js';
 export { ClientRequest } from './client-request.js';
 export { validateHeaderName, validateHeaderValue } from './validators.js';
 import { validateHeaderName, validateHeaderValue } from './validators.js';
@@ -38,6 +39,11 @@ export declare class Agent {
     readonly sockets: Record<string, unknown[]>;
     /** Idle sockets per host (compatibility — Soup manages internally). */
     readonly freeSockets: Record<string, unknown[]>;
+    /**
+     * The constructor options, as Node keeps them: connection options (the TLS ones on an
+     * `https.Agent`) are merged over each request's by ClientRequest.
+     */
+    readonly options: AgentOptions & Record<string, unknown>;
     constructor(options?: AgentOptions);
     /** Destroy the agent and close idle connections. */
     destroy(): void;

package/lib/types/server-tls.d.ts

@@ -0,0 +1,41 @@
+import Gio from '@girs/gio-2.0';
+type PemInput = string | Uint8Array | Array<string | Uint8Array>;
+/**
+ * The `https.createServer()` options that shape the listener.
+ *
+ * No `passphrase`: `Gio.TlsCertificate.new_from_pem` takes no passphrase, so declaring one here
+ * would claim a decryption nobody performs. `secure-context.ts` accepts the field and ignores it
+ * for the same reason; the honest place to name the gap is the https README's list.
+ */
+export interface ServerTlsOptions {
+    key?: PemInput;
+    cert?: PemInput;
+    ca?: PemInput;
+    requestCert?: boolean;
+    rejectUnauthorized?: boolean;
+}
+/** What Soup.Server needs, derived from ServerTlsOptions. */
+export interface ServerTlsSettings {
+    certificate: Gio.TlsCertificate;
+    authenticationMode: Gio.TlsAuthenticationMode;
+    /** Anchors a client certificate must chain to (`ca` with `requestCert`); may be empty. */
+    clientCa: Gio.TlsCertificate[];
+}
+/**
+ * Translates Node's options. Returns null without a certificate; throws on PEM that does not
+ * parse, as Node's createSecureContext (and so its https.Server) does.
+ */
+export declare function resolveServerTls(options: ServerTlsOptions): ServerTlsSettings | null;
+/**
+ * Builds the database that verifies client certificates against `ca`. `Gio.TlsFileDatabase` is
+ * GIO's only public database constructor, and it reads its file when it verifies — not when it
+ * is created (measured: a file deleted right after `new()` makes every client certificate fail).
+ * So the anchors live in a temporary file for as long as the listener does; the caller removes
+ * it on close. The file holds only the public CA certificates.
+ */
+export declare function createTrustDatabase(anchors: Gio.TlsCertificate[]): {
+    database: Gio.TlsDatabase;
+    file: Gio.File;
+};
+export declare function removeFile(file: Gio.File): void;
+export {};

package/lib/types/server.d.ts

@@ -3,6 +3,7 @@ import { EventEmitter } from 'node:events';
 import { Writable } from 'node:stream';
 import { type Response as BridgeResponse } from '@gjsify/http-soup-bridge';
 import { IncomingMessage } from './incoming-message.js';
+import { type ServerTlsOptions } from './server-tls.js';
 /**
  * OutgoingMessage — Base class for ServerResponse and ClientRequest.
  * Reference: Node.js lib/_http_outgoing.js
@@ -85,6 +86,12 @@ export declare class Server extends EventEmitter {
     headersTimeout: number;
     requestTimeout: number;
     private _bridge;
+    /** Set through `_useTls()` by `https.Server`; null serves plain HTTP. */
+    private _tls;
+    /** An https.Server without a certificate must not fall back to plain HTTP. */
+    private _tlsRequested;
+    /** Backs the client-certificate database while listening; see createTrustDatabase. */
+    private _trustFile;
     private _address;
     /** Exposes the underlying Soup.Server so consumers (e.g. WebSocketServer
      *  in `@gjsify/ws`) can register additional handlers (websocket, path-
@@ -92,9 +99,24 @@ export declare class Server extends EventEmitter {
     get soupServer(): unknown;
     constructor(requestListener?: ((req: IncomingMessage, res: ServerResponse) => void) | Record<string, unknown>);
     constructor(options: Record<string, unknown>, requestListener?: (req: IncomingMessage, res: ServerResponse) => void);
+    /**
+     * @internal `https.Server`'s hand-off, not part of Node's http.Server: from now on
+     * `listen()` terminates TLS with these `https.createServer()` options.
+     */
+    _useTls(options: ServerTlsOptions): void;
     listen(port?: number, hostname?: string, backlog?: number, callback?: () => void): this;
     listen(port?: number, hostname?: string, callback?: () => void): this;
     listen(port?: number, callback?: () => void): this;
+    private _listenPlain;
+    /**
+     * Listens with TLS on the bridge's Soup.Server. The bridge's own `listen()` has no HTTPS
+     * option, so this drives the Soup.Server it exposes for exactly this kind of caller (see
+     * server.vala): Soup.Server is a GObject, and setting its TLS properties or listening on it
+     * passes no libsoup boxed type through JS — the GC race the bridge exists to avoid stays
+     * C-side, since requests still arrive through the bridge's handler. The client-certificate
+     * hook below sees each connection's first Soup.ServerMessage, which is a GObject as well.
+     */
+    private _listenTls;
     private _handleRequest;
     private _handleUpgrade;
     address(): {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/http",
-    "version": "0.51.1",
+    "version": "0.53.0",
     "description": "Node.js http module for Gjs",
     "module": "lib/esm/index.js",
     "types": "lib/types/index.d.ts",
@@ -42,22 +42,23 @@
         "http"
     ],
     "devDependencies": {
-        "@gjsify/cli": "^0.51.1",
-        "@gjsify/unit": "^0.51.1",
+        "@gjsify/cli": "^0.53.0",
+        "@gjsify/unit": "^0.53.0",
         "@types/node": "^25.9.2",
         "typescript": "^6.0.3"
     },
     "dependencies": {
-        "@girs/gio-2.0": "5.0.0",
-        "@girs/glib-2.0": "5.0.0",
-        "@girs/soup-3.0": "5.0.0",
-        "@gjsify/buffer": "^0.51.1",
-        "@gjsify/events": "^0.51.1",
-        "@gjsify/http-soup-bridge": "^0.51.1",
-        "@gjsify/net": "^0.51.1",
-        "@gjsify/stream": "^0.51.1",
-        "@gjsify/url": "^0.51.1",
-        "@gjsify/utils": "^0.51.1"
+        "@girs/gio-2.0": "5.4.0",
+        "@girs/glib-2.0": "5.4.0",
+        "@girs/soup-3.0": "5.4.0",
+        "@gjsify/buffer": "^0.53.0",
+        "@gjsify/events": "^0.53.0",
+        "@gjsify/http-soup-bridge": "^0.53.0",
+        "@gjsify/net": "^0.53.0",
+        "@gjsify/stream": "^0.53.0",
+        "@gjsify/tls": "^0.53.0",
+        "@gjsify/url": "^0.53.0",
+        "@gjsify/utils": "^0.53.0"
     },
     "gjsify": {
         "runtimes": {