@gjsify/https 0.52.0 → 0.53.0

package/README.md

@@ -1,6 +1,7 @@
 # @gjsify/https
 
-GJS partial implementation of the Node.js `https` module. Provides Agent with stub request/get.
+GJS partial implementation of the Node.js `https` module: `request`/`get` over Soup.Session, a stub
+`Agent`, and `createServer`, whose server terminates TLS with the certificate you pass.
 
 Part of the [gjsify](https://github.com/gjsify/gjsify) project — Node.js and Web APIs for GJS (GNOME JavaScript).
 
@@ -22,6 +23,24 @@ import { Agent } from '@gjsify/https';
 const agent = new Agent({ keepAlive: true });
 ```
 
+### HTTPS server
+
+```typescript
+import { createServer } from 'node:https';
+
+const server = createServer({ key: keyPem, cert: certPem }, (req, res) => {
+    res.end('hello over TLS');
+});
+server.listen(8443);
+```
+
+libsoup performs the handshake. `key`/`cert` take PEM strings or Buffers (a chain may follow the
+leaf in `cert`). For client certificates, set `requestCert: true` and `ca` to the anchors they must
+chain to; `rejectUnauthorized: false` lets unverified clients through, as on Node. Not yet
+supported on GJS: `pfx`, an encrypted `key` with `passphrase`, and `SNICallback`. A `key` that does
+not match its `cert` is not rejected at construction as it is on Node — libsoup only fails the
+handshake. Without a certificate `listen()` emits `'error'` instead of serving plain text.
+
 ## License
 
 MIT

package/lib/esm/index.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";import{Server as e,get as t,request as n}from"node:http";import{TLSSocket as r,createSecureContext as i}from"node:tls";import{URL as a}from"node:url";var Agent=class{defaultPort=443;protocol=`https:`;maxSockets=1/0;maxFreeSockets=256;constructor(e){}destroy(){}};const o=new Agent;function request(e,t,r){if(typeof e==`string`){if(e.startsWith(`https://`)||e.startsWith(`http://`))return n(e,t,r);let i={hostname:e,protocol:`https:`,port:443};return typeof t==`object`&&Object.assign(i,t),typeof t==`function`&&(r=t),n(i,r)}if(e instanceof a)return n(e,t,r);let i={protocol:`https:`,port:443,...e};return typeof t==`function`&&(r=t),n(i,r)}function get(e,n,r){if(typeof e==`string`){if(e.startsWith(`https://`)||e.startsWith(`http://`))return t(e,n,r);let i={hostname:e,protocol:`https:`,port:443};return typeof n==`object`&&Object.assign(i,n),typeof n==`function`&&(r=n),t(i,r)}if(e instanceof a)return t(e,n,r);let i={protocol:`https:`,port:443,...e,method:`GET`};return typeof n==`function`&&(r=n),t(i,r)}var Server=class extends e{constructor(e,t){super(t)}};function createServer(e,t){return typeof e==`function`?new Server(void 0,e):new Server(e,t)}var s={Agent,globalAgent:o,Server,request,get,createServer,TLSSocket:r,createSecureContext:i};export{Agent,Server,r as TLSSocket,i as createSecureContext,createServer,s as default,get,o as globalAgent,request};
+import"./_virtual/_rolldown/runtime.js";import{Agent as e,Server as t,request as n}from"node:http";import{TLSSocket as r,createSecureContext as i}from"node:tls";import{URL as a}from"node:url";var Agent=class extends e{defaultPort=443;protocol=`https:`;constructor(e){super(e)}};const o=new Agent;function withDefaultAgent(e){return{...e,_defaultAgent:o}}function request(e,t,r){return typeof t==`function`&&(r=t,t=void 0),typeof e==`string`?e.startsWith(`https://`)||e.startsWith(`http://`)?n(e,withDefaultAgent(t),r):n(withDefaultAgent({hostname:e,protocol:`https:`,port:443,...t}),r):e instanceof a?n(e,withDefaultAgent(t),r):n(withDefaultAgent({protocol:`https:`,port:443,...e,...t}),r)}function get(e,t,n){let r=request(e,t,n);return r.end(),r}var Server=class extends t{constructor(e,t){let n=typeof e==`function`?{}:e??{};super(typeof e==`function`?e:t),this._useTls(n)}};function createServer(e,t){return typeof e==`function`?new Server(e):new Server(e,t)}var s={Agent,globalAgent:o,Server,request,get,createServer,TLSSocket:r,createSecureContext:i};export{Agent,Server,r as TLSSocket,i as createSecureContext,createServer,s as default,get,o as globalAgent,request};

package/lib/types/client-tls.spec.d.ts

@@ -0,0 +1,2 @@
+declare const _default: () => Promise<void>;
+export default _default;

package/lib/types/index.d.ts

@@ -1,6 +1,6 @@
-import type { ClientRequest, IncomingMessage } from 'node:http';
-import { Server as HttpServer } from 'node:http';
-import { TLSSocket, createSecureContext } from 'node:tls';
+import type { ClientRequest, IncomingMessage, ServerResponse } from 'node:http';
+import { Server as HttpServer, Agent as HttpAgent, type AgentOptions as HttpAgentOptions } from 'node:http';
+import { TLSSocket, createSecureContext, type PeerCertificate, type SecureContext } from 'node:tls';
 import { URL } from 'node:url';
 export { TLSSocket, createSecureContext };
 export interface RequestOptions {
@@ -17,18 +17,21 @@ export interface RequestOptions {
     ca?: string | Buffer | Array<string | Buffer>;
     cert?: string | Buffer | Array<string | Buffer>;
     key?: string | Buffer | Array<string | Buffer>;
+    passphrase?: string;
     rejectUnauthorized?: boolean;
+    servername?: string;
+    checkServerIdentity?: (host: string, cert: PeerCertificate) => Error | undefined;
+    secureContext?: SecureContext;
 }
+export type AgentOptions = HttpAgentOptions & Pick<RequestOptions, 'ca' | 'cert' | 'key' | 'passphrase' | 'rejectUnauthorized' | 'servername' | 'checkServerIdentity' | 'secureContext'>;
 /**
- * HTTPS Agent for connection pooling (stub — Soup.Session handles TLS internally).
+ * HTTPS Agent. Pooling is Soup.Session's; what the agent contributes is its TLS options
+ * (`ca`, `cert`/`key`, `rejectUnauthorized`, …), which override each request's, as in Node.
  */
-export declare class Agent {
+export declare class Agent extends HttpAgent {
     defaultPort: number;
     protocol: string;
-    maxSockets: number;
-    maxFreeSockets: number;
-    constructor(_options?: Record<string, unknown>);
-    destroy(): void;
+    constructor(options?: AgentOptions);
 }
 export declare const globalAgent: Agent;
 /**
@@ -43,22 +46,21 @@ export declare function get(url: string | URL | RequestOptions, options?: Reques
 export interface HttpsServerOptions extends RequestOptions {
     requestCert?: boolean;
 }
+type HttpsRequestListener = (req: IncomingMessage, res: ServerResponse) => void;
 /**
- * HTTPS Server — wraps TLS server with HTTP request handling.
- * Uses tls.createServer for the TLS layer and processes HTTP
- * requests on top.
+ * HTTPS Server — an http.Server whose listener terminates TLS with `options.key`/`options.cert`.
+ * Reference: Node.js lib/https.js. The Gio side (certificate, client-certificate verification,
+ * the HTTPS listener) lives in @gjsify/http, so this package stays a layer over `node:http`.
  */
 export declare class Server extends HttpServer {
-    constructor(options?: HttpsServerOptions, requestListener?: (req: IncomingMessage, res: unknown) => void);
+    constructor(options?: HttpsServerOptions, requestListener?: HttpsRequestListener);
+    constructor(requestListener?: HttpsRequestListener);
 }
 /**
- * Create an HTTPS server.
- * In GJS, Soup.Server can handle HTTPS natively if configured with
- * a TLS certificate. For API compatibility, this wraps the TLS server
- * infrastructure.
+ * Create an HTTPS server that presents `options.key`/`options.cert`.
  */
-export declare function createServer(options?: HttpsServerOptions, requestListener?: (req: IncomingMessage, res: unknown) => void): Server;
-export declare function createServer(requestListener?: (req: IncomingMessage, res: unknown) => void): Server;
+export declare function createServer(options?: HttpsServerOptions, requestListener?: HttpsRequestListener): Server;
+export declare function createServer(requestListener?: HttpsRequestListener): Server;
 declare const _default: {
     Agent: typeof Agent;
     globalAgent: Agent;

package/lib/types/server-tls.spec.d.ts

@@ -0,0 +1,2 @@
+declare const _default: () => Promise<void>;
+export default _default;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/https",
-    "version": "0.52.0",
+    "version": "0.53.0",
     "description": "Node.js https module for Gjs",
     "type": "module",
     "module": "lib/esm/index.js",
@@ -40,14 +40,15 @@
         "https"
     ],
     "devDependencies": {
-        "@gjsify/cli": "^0.52.0",
-        "@gjsify/unit": "^0.52.0",
+        "@gjsify/cli": "^0.53.0",
+        "@gjsify/runtime": "^0.53.0",
+        "@gjsify/unit": "^0.53.0",
         "@types/node": "^25.9.2",
         "typescript": "^6.0.3"
     },
     "dependencies": {
-        "@gjsify/http": "^0.52.0",
-        "@gjsify/tls": "^0.52.0"
+        "@gjsify/http": "^0.53.0",
+        "@gjsify/tls": "^0.53.0"
     },
     "gjsify": {
         "runtimes": {