@graftland/plugin-remote 0.0.0-stage → 0.2.0-beta.2

package/dist/internal/socketChannel.js

@@ -0,0 +1,24 @@
+import { TransportError } from "../Errors.js";
+import { FrameError, decoder, encode, isCompleteFrame } from "./runner/Framing.js";
+import { Cause, Effect, Exit, Sink, Stream } from "effect";
+import { Socket } from "effect/socket";
+// src/internal/socketChannel.ts
+/** WebSocket boundaries are a wire compatibility detail, not Channel chunk boundaries. */
+const fromSocket = Effect.fnUntraced(function* (socket) {
+	const reader = yield* socket.reader;
+	const writer = yield* socket.writer;
+	return {
+		input: Stream.fromEffectRepeat(reader.pull).pipe(Stream.catchTag("SocketError", (error) => error.reason._tag === "SocketCloseError" && error.reason.code === 1e3 ? Stream.empty : Stream.fail(error)), Stream.flattenIterable, Stream.mapEffect((bytes) => {
+			if (typeof bytes === "string") return Effect.fail(FrameError.make({ detail: "Runner WebSocket messages must be binary" }));
+			if (!isCompleteFrame(bytes)) return Effect.fail(FrameError.make({ detail: "Invalid runner frame header or payload length" }));
+			return Effect.succeed(bytes);
+		}), Stream.mapError((error) => TransportError.make({ cause: Cause.fail(error) }))),
+		output: Sink.suspend(() => {
+			const frames = decoder();
+			return Sink.forEach((bytes) => Effect.fromResult(frames.decode(bytes)).pipe(Effect.flatMap((values) => Effect.forEach(values, (frame) => encode(frame).pipe(Effect.flatMap(writer.write)), { discard: true })))).pipe(Sink.onExit((exit) => Exit.isSuccess(exit) ? frames.finish.pipe(Effect.andThen(writer.write(new Socket.CloseEvent(1e3)))) : Effect.void), Sink.mapError((error) => TransportError.make({ cause: Cause.fail(error) })));
+		})
+	};
+});
+export { fromSocket };
+
+//# sourceMappingURL=socketChannel.js.map

package/dist/internal/socketChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socketChannel.js","names":[],"sources":["../../src/internal/socketChannel.ts"],"sourcesContent":["import { Cause, Effect, Exit, Sink, Stream } from \"effect\"\nimport { Socket } from \"effect/socket\"\nimport { TransportError } from \"../Errors\"\nimport { FrameError, isCompleteFrame, decoder, encode } from \"./runner/Framing\"\n\n/** WebSocket boundaries are a wire compatibility detail, not Channel chunk boundaries. */\nexport const fromSocket = Effect.fnUntraced(function* (socket: Socket.Socket) {\n\tconst reader = yield* socket.reader\n\tconst writer = yield* socket.writer\n\treturn {\n\t\tinput: Stream.fromEffectRepeat(reader.pull).pipe(\n\t\t\tStream.catchTag(\"SocketError\", (error) =>\n\t\t\t\terror.reason._tag === \"SocketCloseError\" && error.reason.code === 1000\n\t\t\t\t\t? Stream.empty\n\t\t\t\t\t: Stream.fail(error),\n\t\t\t),\n\t\t\tStream.flattenIterable,\n\t\t\tStream.mapEffect((bytes) => {\n\t\t\t\tif (typeof bytes === \"string\")\n\t\t\t\t\treturn Effect.fail(\n\t\t\t\t\t\tFrameError.make({\n\t\t\t\t\t\t\tdetail: \"Runner WebSocket messages must be binary\",\n\t\t\t\t\t\t}),\n\t\t\t\t\t)\n\t\t\t\t// WebSocket messages preserve one complete framing frame, including its header.\n\t\t\t\tif (!isCompleteFrame(bytes))\n\t\t\t\t\treturn Effect.fail(\n\t\t\t\t\t\tFrameError.make({\n\t\t\t\t\t\t\tdetail: \"Invalid runner frame header or payload length\",\n\t\t\t\t\t\t}),\n\t\t\t\t\t)\n\t\t\t\treturn Effect.succeed(bytes)\n\t\t\t}),\n\t\t\tStream.mapError((error) =>\n\t\t\t\tTransportError.make({ cause: Cause.fail(error) }),\n\t\t\t),\n\t\t),\n\t\toutput: Sink.suspend(() => {\n\t\t\tconst frames = decoder()\n\t\t\treturn Sink.forEach((bytes: Uint8Array) =>\n\t\t\t\tEffect.fromResult(frames.decode(bytes)).pipe(\n\t\t\t\t\tEffect.flatMap((values) =>\n\t\t\t\t\t\tEffect.forEach(\n\t\t\t\t\t\t\tvalues,\n\t\t\t\t\t\t\t(frame) => encode(frame).pipe(Effect.flatMap(writer.write)),\n\t\t\t\t\t\t\t{ discard: true },\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t).pipe(\n\t\t\t\tSink.onExit((exit) =>\n\t\t\t\t\tExit.isSuccess(exit)\n\t\t\t\t\t\t? frames.finish.pipe(\n\t\t\t\t\t\t\t\tEffect.andThen(writer.write(new Socket.CloseEvent(1000))),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: Effect.void,\n\t\t\t\t),\n\t\t\t\tSink.mapError((error) =>\n\t\t\t\t\tTransportError.make({ cause: Cause.fail(error) }),\n\t\t\t\t),\n\t\t\t)\n\t\t}),\n\t}\n})\n"],"mappings":";;;;;;AAMA,MAAa,aAAa,OAAO,WAAW,WAAW,QAAuB;CAC7E,MAAM,SAAS,OAAO,OAAO;CAC7B,MAAM,SAAS,OAAO,OAAO;CAC7B,OAAO;EACN,OAAO,OAAO,iBAAiB,OAAO,IAAI,CAAC,CAAC,KAC3C,OAAO,SAAS,gBAAgB,UAC/B,MAAM,OAAO,SAAS,sBAAsB,MAAM,OAAO,SAAS,MAC/D,OAAO,QACP,OAAO,KAAK,KAAK,CACrB,GACA,OAAO,iBACP,OAAO,WAAW,UAAU;GAC3B,IAAI,OAAO,UAAU,UACpB,OAAO,OAAO,KACb,WAAW,KAAK,EACf,QAAQ,2CACT,CAAC,CACF;GAED,IAAI,CAAC,gBAAgB,KAAK,GACzB,OAAO,OAAO,KACb,WAAW,KAAK,EACf,QAAQ,gDACT,CAAC,CACF;GACD,OAAO,OAAO,QAAQ,KAAK;EAC5B,CAAC,GACD,OAAO,UAAU,UAChB,eAAe,KAAK,EAAE,OAAO,MAAM,KAAK,KAAK,EAAE,CAAC,CACjD,CACD;EACA,QAAQ,KAAK,cAAc;GAC1B,MAAM,SAAS,QAAQ;GACvB,OAAO,KAAK,SAAS,UACpB,OAAO,WAAW,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,KACvC,OAAO,SAAS,WACf,OAAO,QACN,SACC,UAAU,OAAO,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,KAAK,CAAC,GAC1D,EAAE,SAAS,KAAK,CACjB,CACD,CACD,CACD,CAAC,CAAC,KACD,KAAK,QAAQ,SACZ,KAAK,UAAU,IAAI,IAChB,OAAO,OAAO,KACd,OAAO,QAAQ,OAAO,MAAM,IAAI,OAAO,WAAW,GAAI,CAAC,CAAC,CACzD,IACC,OAAO,IACX,GACA,KAAK,UAAU,UACd,eAAe,KAAK,EAAE,OAAO,MAAM,KAAK,KAAK,EAAE,CAAC,CACjD,CACD;EACD,CAAC;CACF;AACD,CAAC"}

package/dist/internal/stdioChannel.js

@@ -0,0 +1,23 @@
+import { TransportError } from "../Errors.js";
+import { Cause, Effect, Stdio, Stream } from "effect";
+import { NodeSink } from "@effect/platform-node";
+import { createWriteStream } from "node:fs";
+// src/internal/stdioChannel.ts
+const bytes = Effect.gen(function* () {
+	const stdio = yield* Stdio.Stdio;
+	const output = yield* Effect.sync(() => createWriteStream("", {
+		fd: 3,
+		autoClose: false
+	}));
+	return {
+		input: stdio.stdin.pipe(Stream.mapError((error) => TransportError.make({ cause: Cause.fail(error) }))),
+		output: NodeSink.fromWritable({
+			evaluate: () => output,
+			onError: (cause) => TransportError.make({ cause: Cause.die(cause) }),
+			endOnDone: false
+		})
+	};
+});
+export { bytes };
+
+//# sourceMappingURL=stdioChannel.js.map

package/dist/internal/stdioChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdioChannel.js","names":[],"sources":["../../src/internal/stdioChannel.ts"],"sourcesContent":["import { NodeSink } from \"@effect/platform-node\"\nimport { Cause, Effect, Stdio, Stream } from \"effect\"\n// @effect-diagnostics-next-line nodeBuiltinImport:off -- Node's extra inherited descriptor carries protocol output separately from console output.\nimport { createWriteStream } from \"node:fs\"\nimport { TransportError } from \"../Errors\"\nimport type * as Port from \"./port\"\n\nexport const bytes = Effect.gen(function* () {\n\tconst stdio = yield* Stdio.Stdio\n\tconst output = yield* Effect.sync(() =>\n\t\tcreateWriteStream(\"\", { fd: 3, autoClose: false }),\n\t)\n\treturn {\n\t\tinput: stdio.stdin.pipe(\n\t\t\tStream.mapError((error) =>\n\t\t\t\tTransportError.make({ cause: Cause.fail(error) }),\n\t\t\t),\n\t\t),\n\t\toutput: NodeSink.fromWritable({\n\t\t\tevaluate: () => output,\n\t\t\tonError: (cause) => TransportError.make({ cause: Cause.die(cause) }),\n\t\t\tendOnDone: false,\n\t\t}),\n\t} satisfies Port.Channel\n})\n"],"mappings":";;;;;AAOA,MAAa,QAAQ,OAAO,IAAI,aAAa;CAC5C,MAAM,QAAQ,OAAO,MAAM;CAC3B,MAAM,SAAS,OAAO,OAAO,WAC5B,kBAAkB,IAAI;EAAE,IAAI;EAAG,WAAW;CAAM,CAAC,CAClD;CACA,OAAO;EACN,OAAO,MAAM,MAAM,KAClB,OAAO,UAAU,UAChB,eAAe,KAAK,EAAE,OAAO,MAAM,KAAK,KAAK,EAAE,CAAC,CACjD,CACD;EACA,QAAQ,SAAS,aAAa;GAC7B,gBAAgB;GAChB,UAAU,UAAU,eAAe,KAAK,EAAE,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC;GACnE,WAAW;EACZ,CAAC;CACF;AACD,CAAC"}

package/dist/internal/supervisorPlugin.js

@@ -0,0 +1 @@
+export { t as Config, n as default } from "../supervisorPlugin-Inb1S5IV.js";

package/dist/internal/supervisorPlugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisorPlugin.js","names":["Lifecycle.ServeLifecycle","resources","Lifecycle.resources","Lock.acquire","Engine.layer","Stores.layerDirectory","Execution.layer","Engine.Supervisor","Execution.Channels"],"sources":["../../src/internal/supervisorPlugin.ts"],"sourcesContent":["import { Graft, Plugin } from \"@graftland/graft\"\nimport {\n\tContext,\n\tEffect,\n\tFileSystem,\n\tLayer,\n\tOption,\n\tPath,\n\tSchema,\n\tScope,\n} from \"effect\"\nimport { Digest, SecureRandom } from \"effect/crypto\"\nimport { ChildProcessSpawner } from \"effect/process\"\nimport { Supervisor } from \"./Supervisor\"\nimport { PositiveDuration } from \"./config\"\nimport { ConfigDirectory } from \"@graftland/loader\"\nimport * as Lock from \"./runner/Lock\"\nimport * as Stores from \"./runner/Store\"\nimport * as Execution from \"./runner/Execution\"\nimport * as Engine from \"./runner/Supervisor\"\nimport { accept } from \"./runner/accept\"\nimport * as Lifecycle from \"./ServeLifecycle\"\n\nexport const Config = Schema.Struct({\n\troot: Schema.String,\n\tstate: Schema.String,\n\tlease: Schema.optionalKey(PositiveDuration),\n\tgrace: Schema.optionalKey(PositiveDuration),\n})\nexport default Plugin.make({\n\tname: \"remote-supervisor\",\n\tconfig: Config,\n\tinject: [\n\t\tPlugin.optional(Lifecycle.ServeLifecycle),\n\t\tFileSystem.FileSystem,\n\t\tPath.Path,\n\t\tChildProcessSpawner.ChildProcessSpawner,\n\t\tSecureRandom.SecureRandom,\n\t\tDigest.Digest,\n\t],\n\tapply: Effect.fnUntraced(function* (options) {\n\t\tconst lifecycle = yield* Effect.serviceOption(Lifecycle.ServeLifecycle)\n\t\tconst resources = yield* Lifecycle.resources(lifecycle)\n\t\tconst path = yield* Path.Path\n\t\tconst directory = yield* ConfigDirectory.pipe(\n\t\t\tEffect.map(Option.getOrElse(() => \".\")),\n\t\t)\n\t\tconst state = path.resolve(directory, options.state)\n\t\tyield* Lock.acquire(state).pipe(Scope.provide(resources))\n\t\tconst services = yield* Layer.build(\n\t\t\tEngine.layer(options).pipe(\n\t\t\t\tLayer.provideMerge(\n\t\t\t\t\tLayer.merge(\n\t\t\t\t\t\tStores.layerDirectory(state),\n\t\t\t\t\t\tExecution.layer(path.resolve(directory, options.root)),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t),\n\t\t).pipe(Scope.provide(resources))\n\t\tconst engine = Context.get(services, Engine.Supervisor)\n\t\tconst execution = Context.get(services, Execution.Channels)\n\t\tyield* Plugin.fork(engine.await)\n\t\tyield* Graft.provide(Supervisor, {\n\t\t\taccept: (channel) => accept(engine, execution, channel),\n\t\t})\n\t}),\n})\n"],"mappings":";;;;;;;;;;;;;;AAuBA,MAAa,SAAS,OAAO,OAAO;CACnC,MAAM,OAAO;CACb,OAAO,OAAO;CACd,OAAO,OAAO,YAAY,gBAAgB;CAC1C,OAAO,OAAO,YAAY,gBAAgB;AAC3C,CAAC;AACD,IAAA,2BAAe,OAAO,KAAK;CAC1B,MAAM;CACN,QAAQ;CACR,QAAQ;EACP,OAAO,SAASA,cAAwB;EACxC,WAAW;EACX,KAAK;EACL,oBAAoB;EACpB,aAAa;EACb,OAAO;CACR;CACA,OAAO,OAAO,WAAW,WAAW,SAAS;EAC5C,MAAM,YAAY,OAAO,OAAO,cAAcA,cAAwB;EACtE,MAAMC,cAAY,OAAOC,UAAoB,SAAS;EACtD,MAAM,OAAO,OAAO,KAAK;EACzB,MAAM,YAAY,OAAO,gBAAgB,KACxC,OAAO,IAAI,OAAO,gBAAgB,GAAG,CAAC,CACvC;EACA,MAAM,QAAQ,KAAK,QAAQ,WAAW,QAAQ,KAAK;EACnD,OAAOC,QAAa,KAAK,CAAC,CAAC,KAAK,MAAM,QAAQF,WAAS,CAAC;EACxD,MAAM,WAAW,OAAO,MAAM,MAC7BG,QAAa,OAAO,CAAC,CAAC,KACrB,MAAM,aACL,MAAM,MACLC,eAAsB,KAAK,GAC3BC,MAAgB,KAAK,QAAQ,WAAW,QAAQ,IAAI,CAAC,CACtD,CACD,CACD,CACD,CAAC,CAAC,KAAK,MAAM,QAAQL,WAAS,CAAC;EAC/B,MAAM,SAAS,QAAQ,IAAI,UAAUM,YAAiB;EACtD,MAAM,YAAY,QAAQ,IAAI,UAAUC,QAAkB;EAC1D,OAAO,OAAO,KAAK,OAAO,KAAK;EAC/B,OAAO,MAAM,QAAQ,YAAY,EAChC,SAAS,YAAY,OAAO,QAAQ,WAAW,OAAO,EACvD,CAAC;CACF,CAAC;AACF,CAAC"}

package/dist/internal/transportOptions.d.ts

@@ -0,0 +1,18 @@
+import { Duration } from "effect";
+export interface WebsocketOptions {
+  readonly url: string;
+  readonly tls?: {
+    readonly ca?: string;
+    readonly servername?: string;
+  };
+  readonly openTimeout?: Duration.Input;
+}
+export interface UnixOptions {
+  readonly path: string;
+}
+export interface CommandOptions {
+  readonly argv: readonly [string, ...string[]];
+  readonly cwd?: string;
+  readonly env?: Readonly<Record<string, string>>;
+}
+//# sourceMappingURL=transportOptions.d.ts.map

package/dist/internal/transportOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transportOptions.d.ts","names":[],"sources":["../../src/internal/transportOptions.ts"],"mappings":";iBACiB;WACP;WACA;aACC;aACA;;WAED,cAAc,SAAS;;iBAEhB;WACP;;iBAEO;WACP;WACA;WACA,MAAM,SAAS"}

package/dist/internal/watchdogMain.d.ts

@@ -0,0 +1 @@
+export {}

package/dist/internal/watchdogMain.js

@@ -0,0 +1,55 @@
+import { n as Notice, t as CommandJson } from "../WatchdogProtocol-BZmVxrBP.js";
+import { Effect, FiberHandle, Ref, Schema, Stream } from "effect";
+import { NodeRuntime, NodeStream } from "@effect/platform-node";
+import process from "node:process";
+import { parentPort } from "node:worker_threads";
+import { Socket } from "node:net";
+// packages/remote/src/internal/watchdogMain.ts
+/** Executable worker: fd 4 and the lease timer remain independent of the plugin thread. */
+const die = Effect.sync(() => process.kill(process.pid, "SIGKILL")).pipe(Effect.andThen(Effect.never));
+const notify = (notice) => Schema.encodeEffect(Notice)(notice).pipe(Effect.flatMap((message) => Effect.sync(() => parentPort?.postMessage(message))));
+const now = Effect.sync(() => performance.now());
+const expire = (deadline) => Effect.gen(function* () {
+	const remaining = deadline - (yield* now);
+	if (remaining <= 0) return yield* die;
+	yield* Effect.sleep(Math.min(remaining, 2147483647));
+	return yield* expire(deadline);
+});
+const main = Effect.scoped(Effect.gen(function* () {
+	const lease = yield* Ref.make({
+		deadline: (yield* now) + 3e4,
+		stopped: false
+	});
+	const timer = yield* FiberHandle.make();
+	yield* FiberHandle.run(timer, expire((yield* Ref.get(lease)).deadline));
+	const input = yield* Effect.acquireRelease(Effect.sync(() => new Socket({
+		fd: 4,
+		readable: true,
+		writable: false
+	})), (socket) => Effect.sync(() => {
+		socket.destroy();
+	}));
+	yield* notify("ready");
+	yield* NodeStream.fromReadable({ evaluate: () => input }).pipe(Stream.decodeText(), Stream.splitLines, Stream.mapEffect((line) => Schema.decodeEffect(CommandJson)(line)), Stream.runForEach((command) => Effect.gen(function* () {
+		if (command.kind === "start") return yield* notify("start");
+		if (command.kind === "stop") {
+			yield* Ref.update(lease, (state) => ({
+				...state,
+				stopped: true
+			}));
+			return yield* notify("stop");
+		}
+		const current = yield* Ref.get(lease);
+		const time = yield* now;
+		if (current.stopped || time >= current.deadline) return yield* die;
+		const deadline = time + command.millis;
+		yield* Ref.set(lease, {
+			deadline,
+			stopped: false
+		});
+		yield* FiberHandle.run(timer, expire(deadline));
+	})));
+	return yield* die;
+})).pipe(Effect.catchCause((cause) => Effect.logError("Watchdog failed", cause).pipe(Effect.andThen(die))));
+NodeRuntime.runMain(main);
+export {};

package/dist/internal/watchdogMain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdogMain.js","names":[],"sources":["../../src/internal/watchdogMain.ts"],"sourcesContent":["/** Executable worker: fd 4 and the lease timer remain independent of the plugin thread. */\nimport { NodeRuntime, NodeStream } from \"@effect/platform-node\"\nimport { Effect, FiberHandle, Ref, Schema, Stream } from \"effect\"\nimport { Socket } from \"node:net\"\nimport { parentPort } from \"node:worker_threads\"\nimport process from \"node:process\"\nimport { CommandJson, Notice } from \"./runner/WatchdogProtocol\"\n\n// The runner machine is trusted. A suspended machine cannot enforce a deadline until it resumes.\n// Killing this live process has no PID lookup; external supervisor kills retain a small PID reuse window.\nconst die = Effect.sync(() => process.kill(process.pid, \"SIGKILL\")).pipe(\n\tEffect.andThen(Effect.never),\n)\nconst notify = (notice: typeof Notice.Type) =>\n\tSchema.encodeEffect(Notice)(notice).pipe(\n\t\tEffect.flatMap((message) =>\n\t\t\tEffect.sync(() => parentPort?.postMessage(message)),\n\t\t),\n\t)\nconst now = Effect.sync(() => performance.now())\nconst expire = (deadline: number): Effect.Effect<never> =>\n\tEffect.gen(function* () {\n\t\tconst remaining = deadline - (yield* now)\n\t\tif (remaining <= 0) return yield* die\n\t\tyield* Effect.sleep(Math.min(remaining, 2147483647))\n\t\treturn yield* expire(deadline)\n\t})\nconst main = Effect.scoped(\n\tEffect.gen(function* () {\n\t\tconst lease = yield* Ref.make({\n\t\t\tdeadline: (yield* now) + 30000,\n\t\t\tstopped: false,\n\t\t})\n\t\tconst timer = yield* FiberHandle.make<never, never>()\n\t\tyield* FiberHandle.run(timer, expire((yield* Ref.get(lease)).deadline))\n\t\tconst input = yield* Effect.acquireRelease(\n\t\t\tEffect.sync(() => new Socket({ fd: 4, readable: true, writable: false })),\n\t\t\t(socket) =>\n\t\t\t\tEffect.sync(() => {\n\t\t\t\t\tsocket.destroy()\n\t\t\t\t}),\n\t\t)\n\t\tyield* notify(\"ready\")\n\t\tyield* NodeStream.fromReadable({ evaluate: () => input }).pipe(\n\t\t\tStream.decodeText(),\n\t\t\tStream.splitLines,\n\t\t\tStream.mapEffect((line) => Schema.decodeEffect(CommandJson)(line)),\n\t\t\tStream.runForEach((command) =>\n\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\tif (command.kind === \"start\") return yield* notify(\"start\")\n\t\t\t\t\tif (command.kind === \"stop\") {\n\t\t\t\t\t\tyield* Ref.update(lease, (state) => ({ ...state, stopped: true }))\n\t\t\t\t\t\treturn yield* notify(\"stop\")\n\t\t\t\t\t}\n\t\t\t\t\tconst current = yield* Ref.get(lease)\n\t\t\t\t\tconst time = yield* now\n\t\t\t\t\tif (current.stopped || time >= current.deadline) return yield* die\n\t\t\t\t\tconst deadline = time + command.millis\n\t\t\t\t\tyield* Ref.set(lease, { deadline, stopped: false })\n\t\t\t\t\tyield* FiberHandle.run(timer, expire(deadline))\n\t\t\t\t}),\n\t\t\t),\n\t\t)\n\t\treturn yield* die\n\t}),\n).pipe(\n\tEffect.catchCause((cause) =>\n\t\tEffect.logError(\"Watchdog failed\", cause).pipe(Effect.andThen(die)),\n\t),\n)\n\nNodeRuntime.runMain(main)\n"],"mappings":";;;;;;;;AAUA,MAAM,MAAM,OAAO,WAAW,QAAQ,KAAK,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KACnE,OAAO,QAAQ,OAAO,KAAK,CAC5B;AACA,MAAM,UAAU,WACf,OAAO,aAAa,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KACnC,OAAO,SAAS,YACf,OAAO,WAAW,YAAY,YAAY,OAAO,CAAC,CACnD,CACD;AACD,MAAM,MAAM,OAAO,WAAW,YAAY,IAAI,CAAC;AAC/C,MAAM,UAAU,aACf,OAAO,IAAI,aAAa;CACvB,MAAM,YAAY,YAAY,OAAO;CACrC,IAAI,aAAa,GAAG,OAAO,OAAO;CAClC,OAAO,OAAO,MAAM,KAAK,IAAI,WAAW,UAAU,CAAC;CACnD,OAAO,OAAO,OAAO,QAAQ;AAC9B,CAAC;AACF,MAAM,OAAO,OAAO,OACnB,OAAO,IAAI,aAAa;CACvB,MAAM,QAAQ,OAAO,IAAI,KAAK;EAC7B,WAAW,OAAO,OAAO;EACzB,SAAS;CACV,CAAC;CACD,MAAM,QAAQ,OAAO,YAAY,KAAmB;CACpD,OAAO,YAAY,IAAI,OAAO,QAAQ,OAAO,IAAI,IAAI,KAAK,EAAA,CAAG,QAAQ,CAAC;CACtE,MAAM,QAAQ,OAAO,OAAO,eAC3B,OAAO,WAAW,IAAI,OAAO;EAAE,IAAI;EAAG,UAAU;EAAM,UAAU;CAAM,CAAC,CAAC,IACvE,WACA,OAAO,WAAW;EACjB,OAAO,QAAQ;CAChB,CAAC,CACH;CACA,OAAO,OAAO,OAAO;CACrB,OAAO,WAAW,aAAa,EAAE,gBAAgB,MAAM,CAAC,CAAC,CAAC,KACzD,OAAO,WAAW,GAClB,OAAO,YACP,OAAO,WAAW,SAAS,OAAO,aAAa,WAAW,CAAC,CAAC,IAAI,CAAC,GACjE,OAAO,YAAY,YAClB,OAAO,IAAI,aAAa;EACvB,IAAI,QAAQ,SAAS,SAAS,OAAO,OAAO,OAAO,OAAO;EAC1D,IAAI,QAAQ,SAAS,QAAQ;GAC5B,OAAO,IAAI,OAAO,QAAQ,WAAW;IAAE,GAAG;IAAO,SAAS;GAAK,EAAE;GACjE,OAAO,OAAO,OAAO,MAAM;EAC5B;EACA,MAAM,UAAU,OAAO,IAAI,IAAI,KAAK;EACpC,MAAM,OAAO,OAAO;EACpB,IAAI,QAAQ,WAAW,QAAQ,QAAQ,UAAU,OAAO,OAAO;EAC/D,MAAM,WAAW,OAAO,QAAQ;EAChC,OAAO,IAAI,IAAI,OAAO;GAAE;GAAU,SAAS;EAAM,CAAC;EAClD,OAAO,YAAY,IAAI,OAAO,OAAO,QAAQ,CAAC;CAC/C,CAAC,CACF,CACD;CACA,OAAO,OAAO;AACf,CAAC,CACF,CAAC,CAAC,KACD,OAAO,YAAY,UAClB,OAAO,SAAS,mBAAmB,KAAK,CAAC,CAAC,KAAK,OAAO,QAAQ,GAAG,CAAC,CACnE,CACD;AAEA,YAAY,QAAQ,IAAI"}

package/dist/internal/websocket.js

@@ -0,0 +1,46 @@
+import { maxPayload } from "./runner/Framing.js";
+import { Array, Effect, Layer, Redacted, Schema } from "effect";
+import { Socket } from "effect/socket";
+import WS from "ws";
+// src/internal/websocket.ts
+const protocol = "graft-remote.v1";
+const path = "/graft";
+const payloadLimit = maxPayload + 8;
+const Url = Schema.URLFromString.check(Schema.makeFilter((url) => url.protocol === "wss:" || url.protocol === "ws:", { expected: "a ws:// or wss:// URL" }));
+const constructor = (tls, credentials = {}) => Layer.succeed(Socket.WebSocketConstructor, (url, options) => {
+	const settings = typeof options === "object" && !Array.isArray(options) ? options : { protocols: options };
+	return new WS(url, settings.protocols, {
+		...tls,
+		...credentials.certificate === void 0 ? {} : {
+			cert: credentials.certificate.cert,
+			key: Redacted.value(credentials.certificate.key)
+		},
+		headers: {
+			...settings.headers,
+			...credentials.authorization === void 0 ? {} : { authorization: Redacted.value(credentials.authorization) }
+		},
+		perMessageDeflate: false,
+		maxPayload: payloadLimit,
+		rejectUnauthorized: true,
+		minVersion: "TLSv1.3"
+	});
+});
+const open = Effect.fnUntraced(function* (options, credentials = {}) {
+	const url = yield* Schema.decodeEffect(Url)(options.url);
+	if (credentials.certificate !== void 0 && url.protocol !== "wss:") yield* Schema.decodeEffect(Url.check(Schema.makeFilter((url) => url.protocol === "wss:", { expected: "wss:// for mutual TLS" })))(options.url);
+	const address = url.pathname === "/" ? new URL(path, url).href : url.href;
+	const services = yield* Layer.build(constructor(options.tls, credentials));
+	return yield* Socket.makeWebSocket(address, {
+		protocols: protocol,
+		openTimeout: options.openTimeout ?? "10 seconds"
+	}).pipe(Effect.provideContext(services));
+});
+const properties = (url) => ({
+	protocol: url.protocol === "wss:" ? "wss" : "ws",
+	encrypted: url.protocol === "wss:",
+	network: true,
+	carries: url.protocol === "wss:" ? ["header", "certificate"] : ["header"]
+});
+export { Url, constructor, open, path, payloadLimit, properties, protocol };
+
+//# sourceMappingURL=websocket.js.map

package/dist/internal/websocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.js","names":[],"sources":["../../src/internal/websocket.ts"],"sourcesContent":["import { Array, Effect, Layer, Redacted, Schema } from \"effect\"\nimport { Socket } from \"effect/socket\"\nimport WS from \"ws\"\nimport type { ClientCertificate } from \"../Auth\"\nimport type { Properties } from \"../Transport\"\ninterface PreparedCredentials {\n\treadonly certificate?: ClientCertificate\n\treadonly authorization?: Redacted.Redacted<string>\n}\nimport type { WebsocketOptions } from \"./transportOptions\"\nimport { headerSize, maxPayload } from \"./runner/Framing\"\n\nexport const protocol = \"graft-remote.v1\"\nexport const path = \"/graft\"\nexport const payloadLimit = maxPayload + headerSize\nexport const Url = Schema.URLFromString.check(\n\tSchema.makeFilter(\n\t\t(url) => url.protocol === \"wss:\" || url.protocol === \"ws:\",\n\t\t{\n\t\t\texpected: \"a ws:// or wss:// URL\",\n\t\t},\n\t),\n)\n\nexport const constructor = (\n\ttls: WebsocketOptions[\"tls\"],\n\tcredentials: PreparedCredentials = {},\n) =>\n\tLayer.succeed(Socket.WebSocketConstructor, (url, options) => {\n\t\tconst settings =\n\t\t\ttypeof options === \"object\" && !Array.isArray(options)\n\t\t\t\t? options\n\t\t\t\t: { protocols: options }\n\t\treturn new WS(url, settings.protocols, {\n\t\t\t...tls,\n\t\t\t...(credentials.certificate === undefined\n\t\t\t\t? {}\n\t\t\t\t: {\n\t\t\t\t\t\tcert: credentials.certificate.cert,\n\t\t\t\t\t\tkey: Redacted.value(credentials.certificate.key),\n\t\t\t\t\t}),\n\t\t\theaders: {\n\t\t\t\t...settings.headers,\n\t\t\t\t...(credentials.authorization === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { authorization: Redacted.value(credentials.authorization) }),\n\t\t\t},\n\t\t\tperMessageDeflate: false,\n\t\t\tmaxPayload: payloadLimit,\n\t\t\trejectUnauthorized: true,\n\t\t\tminVersion: \"TLSv1.3\",\n\t\t})\n\t})\n\nexport const open = Effect.fnUntraced(function* (\n\toptions: WebsocketOptions,\n\tcredentials: PreparedCredentials = {},\n) {\n\tconst url = yield* Schema.decodeEffect(Url)(options.url)\n\tif (credentials.certificate !== undefined && url.protocol !== \"wss:\")\n\t\tyield* Schema.decodeEffect(\n\t\t\tUrl.check(\n\t\t\t\tSchema.makeFilter((url) => url.protocol === \"wss:\", {\n\t\t\t\t\texpected: \"wss:// for mutual TLS\",\n\t\t\t\t}),\n\t\t\t),\n\t\t)(options.url)\n\tconst address = url.pathname === \"/\" ? new URL(path, url).href : url.href\n\tconst services = yield* Layer.build(constructor(options.tls, credentials))\n\treturn yield* Socket.makeWebSocket(address, {\n\t\tprotocols: protocol,\n\t\topenTimeout: options.openTimeout ?? \"10 seconds\",\n\t}).pipe(Effect.provideContext(services))\n})\n\nexport const properties = (url: URL): Properties => ({\n\tprotocol: url.protocol === \"wss:\" ? \"wss\" : \"ws\",\n\tencrypted: url.protocol === \"wss:\",\n\tnetwork: true,\n\tcarries: url.protocol === \"wss:\" ? [\"header\", \"certificate\"] : [\"header\"],\n})\n"],"mappings":";;;;;AAYA,MAAa,WAAW;AACxB,MAAa,OAAO;AACpB,MAAa,eAAe,aAAA;AAC5B,MAAa,MAAM,OAAO,cAAc,MACvC,OAAO,YACL,QAAQ,IAAI,aAAa,UAAU,IAAI,aAAa,OACrD,EACC,UAAU,wBACX,CACD,CACD;AAEA,MAAa,eACZ,KACA,cAAmC,CAAC,MAEpC,MAAM,QAAQ,OAAO,uBAAuB,KAAK,YAAY;CAC5D,MAAM,WACL,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,IAClD,UACA,EAAE,WAAW,QAAQ;CACzB,OAAO,IAAI,GAAG,KAAK,SAAS,WAAW;EACtC,GAAG;EACH,GAAI,YAAY,gBAAgB,KAAA,IAC7B,CAAC,IACD;GACA,MAAM,YAAY,YAAY;GAC9B,KAAK,SAAS,MAAM,YAAY,YAAY,GAAG;EAChD;EACF,SAAS;GACR,GAAG,SAAS;GACZ,GAAI,YAAY,kBAAkB,KAAA,IAC/B,CAAC,IACD,EAAE,eAAe,SAAS,MAAM,YAAY,aAAa,EAAE;EAC/D;EACA,mBAAmB;EACnB,YAAY;EACZ,oBAAoB;EACpB,YAAY;CACb,CAAC;AACF,CAAC;AAEF,MAAa,OAAO,OAAO,WAAW,WACrC,SACA,cAAmC,CAAC,GACnC;CACD,MAAM,MAAM,OAAO,OAAO,aAAa,GAAG,CAAC,CAAC,QAAQ,GAAG;CACvD,IAAI,YAAY,gBAAgB,KAAA,KAAa,IAAI,aAAa,QAC7D,OAAO,OAAO,aACb,IAAI,MACH,OAAO,YAAY,QAAQ,IAAI,aAAa,QAAQ,EACnD,UAAU,wBACX,CAAC,CACF,CACD,CAAC,CAAC,QAAQ,GAAG;CACd,MAAM,UAAU,IAAI,aAAa,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI;CACrE,MAAM,WAAW,OAAO,MAAM,MAAM,YAAY,QAAQ,KAAK,WAAW,CAAC;CACzE,OAAO,OAAO,OAAO,cAAc,SAAS;EAC3C,WAAW;EACX,aAAa,QAAQ,eAAe;CACrC,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,QAAQ,CAAC;AACxC,CAAC;AAED,MAAa,cAAc,SAA0B;CACpD,UAAU,IAAI,aAAa,SAAS,QAAQ;CAC5C,WAAW,IAAI,aAAa;CAC5B,SAAS;CACT,SAAS,IAAI,aAAa,SAAS,CAAC,UAAU,aAAa,IAAI,CAAC,QAAQ;AACzE"}

package/dist/internal/websocketServer.js

@@ -0,0 +1,61 @@
+import { TransportError } from "../Errors.js";
+import { fromSocket } from "./socketChannel.js";
+import { payloadLimit, protocol } from "./websocket.js";
+import { Array, Cause, Deferred, Effect, Option, Redacted, Scope, String } from "effect";
+import { NodeHttpServer, NodeHttpServerRequest } from "@effect/platform-node";
+import { HttpServerRequest, HttpServerResponse } from "effect/http";
+import { TLSSocket } from "node:tls";
+// src/internal/websocketServer.ts
+const rejection = (error) => Effect.logWarning("Remote host authentication failed", { reason: error.reason }, ...error.cause === void 0 ? [] : [error.cause]).pipe(Effect.as(HttpServerResponse.empty({
+	status: 401,
+	headers: error.challenge === void 0 ? {} : { "www-authenticate": error.challenge }
+})));
+const handshake = Effect.gen(function* () {
+	const request = yield* HttpServerRequest.HttpServerRequest;
+	const { socket } = NodeHttpServerRequest.toIncomingMessage(request);
+	const peer = socket instanceof TLSSocket && socket.authorized ? Option.some(socket.getPeerCertificate()) : Option.none();
+	return {
+		authorization: Option.map(Option.fromUndefinedOr(request.headers["authorization"]), Redacted.make),
+		certificate: Option.map(peer, (certificate) => ({
+			der: certificate.raw,
+			subjectAltName: Option.fromUndefinedOr(certificate.subjectaltname)
+		}))
+	};
+});
+const open = Effect.fnUntraced(function* (createServer, options) {
+	const resources = yield* Effect.acquireRelease(Scope.make(), Scope.close);
+	const ready = yield* Deferred.make();
+	const server = yield* NodeHttpServer.make(createServer, {
+		...options,
+		disablePreemptiveShutdown: true,
+		websocket: {
+			perMessageDeflate: false,
+			maxPayload: payloadLimit,
+			handleProtocols: (protocols) => protocols.has("graft-remote.v1") ? protocol : false
+		}
+	}).pipe(Scope.provide(resources));
+	return {
+		address: server.address,
+		ready: Deferred.await(ready),
+		run: (accept) => server.serve(Effect.gen(function* () {
+			const request = yield* HttpServerRequest.HttpServerRequest;
+			if (request.url !== "/graft") return HttpServerResponse.empty({ status: 404 });
+			if (String.toLowerCase(request.headers["upgrade"] ?? "") !== "websocket" || !Array.some(String.split(request.headers["sec-websocket-protocol"] ?? "", ","), (value) => String.trim(value) === "graft-remote.v1")) return HttpServerResponse.empty({ status: 400 });
+			const session = yield* Effect.result(accept);
+			if (session._tag === "Failure") return yield* rejection(session.failure);
+			yield* request.upgrade.pipe(Effect.flatMap(session.success), Effect.interruptible, Effect.scoped);
+			return HttpServerResponse.empty();
+		})).pipe(Effect.andThen(Deferred.succeed(ready, void 0)), Effect.andThen(Effect.never))
+	};
+});
+const bind = Effect.fnUntraced(function* (createServer, options) {
+	const server = yield* open(createServer, options);
+	return {
+		address: server.address,
+		ready: server.ready,
+		serve: (accept) => server.run(handshake.pipe(Effect.flatMap(accept), Effect.map((session) => (socket) => fromSocket(socket).pipe(Effect.flatMap(session))))).pipe(Effect.mapError((error) => TransportError.make({ cause: Cause.fail(error) })))
+	};
+});
+export { bind };
+
+//# sourceMappingURL=websocketServer.js.map

package/dist/internal/websocketServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocketServer.js","names":["Channel.fromSocket"],"sources":["../../src/internal/websocketServer.ts"],"sourcesContent":["import { NodeHttpServer, NodeHttpServerRequest } from \"@effect/platform-node\"\nimport {\n\tArray,\n\tCause,\n\tDeferred,\n\tEffect,\n\tOption,\n\tRedacted,\n\tScope,\n\tString,\n} from \"effect\"\nimport { HttpServerRequest, HttpServerResponse } from \"effect/http\"\nimport type { Socket } from \"effect/socket\"\nimport { TLSSocket } from \"node:tls\"\nimport { AuthenticationFailed, TransportError } from \"../Errors\"\nimport type { Accept, Handshake, Serving } from \"../Transport\"\nimport * as Channel from \"./socketChannel\"\nimport { path, protocol, payloadLimit } from \"./websocket\"\n\nconst rejection = (error: AuthenticationFailed) =>\n\tEffect.logWarning(\n\t\t\"Remote host authentication failed\",\n\t\t{\n\t\t\treason: error.reason,\n\t\t},\n\t\t...(error.cause === undefined ? [] : [error.cause]),\n\t).pipe(\n\t\tEffect.as(\n\t\t\tHttpServerResponse.empty({\n\t\t\t\tstatus: 401,\n\t\t\t\theaders:\n\t\t\t\t\terror.challenge === undefined\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: { \"www-authenticate\": error.challenge },\n\t\t\t}),\n\t\t),\n\t)\n\nconst handshake: Effect.Effect<\n\tHandshake,\n\tnever,\n\tHttpServerRequest.HttpServerRequest\n> = Effect.gen(function* () {\n\tconst request = yield* HttpServerRequest.HttpServerRequest\n\tconst { socket } = NodeHttpServerRequest.toIncomingMessage(request)\n\t// Only a TLS-verified peer is certificate evidence; forwarded headers are not.\n\tconst peer =\n\t\tsocket instanceof TLSSocket && socket.authorized\n\t\t\t? Option.some(socket.getPeerCertificate())\n\t\t\t: Option.none()\n\treturn {\n\t\tauthorization: Option.map(\n\t\t\tOption.fromUndefinedOr(request.headers[\"authorization\"]),\n\t\t\tRedacted.make,\n\t\t),\n\t\tcertificate: Option.map(peer, (certificate) => ({\n\t\t\tder: certificate.raw,\n\t\t\tsubjectAltName: Option.fromUndefinedOr(certificate.subjectaltname),\n\t\t})),\n\t}\n})\n\nconst open = Effect.fnUntraced(function* (\n\tcreateServer: Parameters<typeof NodeHttpServer.make>[0],\n\toptions: Pick<NodeHttpServer.Options, \"host\" | \"port\" | \"path\">,\n) {\n\t// The lazily created ws server belongs here, so serving scopes close before ws.close waits.\n\tconst resources = yield* Effect.acquireRelease(Scope.make(), Scope.close)\n\tconst ready = yield* Deferred.make<void>()\n\tconst server = yield* NodeHttpServer.make(createServer, {\n\t\t...options,\n\t\tdisablePreemptiveShutdown: true,\n\t\twebsocket: {\n\t\t\tperMessageDeflate: false,\n\t\t\tmaxPayload: payloadLimit,\n\t\t\thandleProtocols: (protocols) =>\n\t\t\t\tprotocols.has(protocol) ? protocol : false,\n\t\t},\n\t}).pipe(Scope.provide(resources))\n\treturn {\n\t\taddress: server.address,\n\t\tready: Deferred.await(ready),\n\t\trun: <A, E, R>(\n\t\t\taccept: Effect.Effect<\n\t\t\t\t(socket: Socket.Socket) => Effect.Effect<A, E, R>,\n\t\t\t\tAuthenticationFailed,\n\t\t\t\tHttpServerRequest.HttpServerRequest\n\t\t\t>,\n\t\t) =>\n\t\t\tserver\n\t\t\t\t.serve(\n\t\t\t\t\tEffect.gen(function* () {\n\t\t\t\t\t\tconst request = yield* HttpServerRequest.HttpServerRequest\n\t\t\t\t\t\tif (request.url !== path)\n\t\t\t\t\t\t\treturn HttpServerResponse.empty({ status: 404 })\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tString.toLowerCase(request.headers[\"upgrade\"] ?? \"\") !==\n\t\t\t\t\t\t\t\t\"websocket\" ||\n\t\t\t\t\t\t\t!Array.some(\n\t\t\t\t\t\t\t\tString.split(\n\t\t\t\t\t\t\t\t\trequest.headers[\"sec-websocket-protocol\"] ?? \"\",\n\t\t\t\t\t\t\t\t\t\",\",\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t\t\t(value) => String.trim(value) === protocol,\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t)\n\t\t\t\t\t\t\treturn HttpServerResponse.empty({ status: 400 })\n\t\t\t\t\t\tconst session = yield* Effect.result(accept)\n\t\t\t\t\t\tif (session._tag === \"Failure\")\n\t\t\t\t\t\t\treturn yield* rejection(session.failure)\n\t\t\t\t\t\t// Authentication finishes before upgrade; session work is owned by the request scope.\n\t\t\t\t\t\tyield* request.upgrade.pipe(\n\t\t\t\t\t\t\tEffect.flatMap(session.success),\n\t\t\t\t\t\t\tEffect.interruptible,\n\t\t\t\t\t\t\tEffect.scoped,\n\t\t\t\t\t\t)\n\t\t\t\t\t\treturn HttpServerResponse.empty()\n\t\t\t\t\t}),\n\t\t\t\t)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.andThen(Deferred.succeed(ready, undefined)),\n\t\t\t\t\tEffect.andThen(Effect.never),\n\t\t\t\t),\n\t}\n})\n\nexport const bind = Effect.fnUntraced(function* (\n\tcreateServer: Parameters<typeof NodeHttpServer.make>[0],\n\toptions: Pick<NodeHttpServer.Options, \"host\" | \"port\" | \"path\">,\n) {\n\tconst server = yield* open(createServer, options)\n\treturn {\n\t\taddress: server.address,\n\t\tready: server.ready,\n\t\tserve: (accept: Accept) =>\n\t\t\tserver\n\t\t\t\t.run(\n\t\t\t\t\thandshake.pipe(\n\t\t\t\t\t\tEffect.flatMap(accept),\n\t\t\t\t\t\tEffect.map(\n\t\t\t\t\t\t\t(session) => (socket: Socket.Socket) =>\n\t\t\t\t\t\t\t\tChannel.fromSocket(socket).pipe(Effect.flatMap(session)),\n\t\t\t\t\t\t),\n\t\t\t\t\t),\n\t\t\t\t)\n\t\t\t\t.pipe(\n\t\t\t\t\tEffect.mapError((error) =>\n\t\t\t\t\t\tTransportError.make({ cause: Cause.fail(error) }),\n\t\t\t\t\t),\n\t\t\t\t),\n\t} satisfies Serving & { readonly address: typeof server.address }\n})\n"],"mappings":";;;;;;;;AAmBA,MAAM,aAAa,UAClB,OAAO,WACN,qCACA,EACC,QAAQ,MAAM,OACf,GACA,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAClD,CAAC,CAAC,KACD,OAAO,GACN,mBAAmB,MAAM;CACxB,QAAQ;CACR,SACC,MAAM,cAAc,KAAA,IACjB,CAAC,IACD,EAAE,oBAAoB,MAAM,UAAU;AAC3C,CAAC,CACF,CACD;AAED,MAAM,YAIF,OAAO,IAAI,aAAa;CAC3B,MAAM,UAAU,OAAO,kBAAkB;CACzC,MAAM,EAAE,WAAW,sBAAsB,kBAAkB,OAAO;CAElE,MAAM,OACL,kBAAkB,aAAa,OAAO,aACnC,OAAO,KAAK,OAAO,mBAAmB,CAAC,IACvC,OAAO,KAAK;CAChB,OAAO;EACN,eAAe,OAAO,IACrB,OAAO,gBAAgB,QAAQ,QAAQ,gBAAgB,GACvD,SAAS,IACV;EACA,aAAa,OAAO,IAAI,OAAO,iBAAiB;GAC/C,KAAK,YAAY;GACjB,gBAAgB,OAAO,gBAAgB,YAAY,cAAc;EAClE,EAAE;CACH;AACD,CAAC;AAED,MAAM,OAAO,OAAO,WAAW,WAC9B,cACA,SACC;CAED,MAAM,YAAY,OAAO,OAAO,eAAe,MAAM,KAAK,GAAG,MAAM,KAAK;CACxE,MAAM,QAAQ,OAAO,SAAS,KAAW;CACzC,MAAM,SAAS,OAAO,eAAe,KAAK,cAAc;EACvD,GAAG;EACH,2BAA2B;EAC3B,WAAW;GACV,mBAAmB;GACnB,YAAY;GACZ,kBAAkB,cACjB,UAAU,IAAA,iBAAY,IAAI,WAAW;EACvC;CACD,CAAC,CAAC,CAAC,KAAK,MAAM,QAAQ,SAAS,CAAC;CAChC,OAAO;EACN,SAAS,OAAO;EAChB,OAAO,SAAS,MAAM,KAAK;EAC3B,MACC,WAMA,OACE,MACA,OAAO,IAAI,aAAa;GACvB,MAAM,UAAU,OAAO,kBAAkB;GACzC,IAAI,QAAQ,QAAA,UACX,OAAO,mBAAmB,MAAM,EAAE,QAAQ,IAAI,CAAC;GAChD,IACC,OAAO,YAAY,QAAQ,QAAQ,cAAc,EAAE,MAClD,eACD,CAAC,MAAM,KACN,OAAO,MACN,QAAQ,QAAQ,6BAA6B,IAC7C,GACD,IACC,UAAU,OAAO,KAAK,KAAK,MAAA,iBAC7B,GAEA,OAAO,mBAAmB,MAAM,EAAE,QAAQ,IAAI,CAAC;GAChD,MAAM,UAAU,OAAO,OAAO,OAAO,MAAM;GAC3C,IAAI,QAAQ,SAAS,WACpB,OAAO,OAAO,UAAU,QAAQ,OAAO;GAExC,OAAO,QAAQ,QAAQ,KACtB,OAAO,QAAQ,QAAQ,OAAO,GAC9B,OAAO,eACP,OAAO,MACR;GACA,OAAO,mBAAmB,MAAM;EACjC,CAAC,CACF,CAAC,CACA,KACA,OAAO,QAAQ,SAAS,QAAQ,OAAO,KAAA,CAAS,CAAC,GACjD,OAAO,QAAQ,OAAO,KAAK,CAC5B;CACH;AACD,CAAC;AAED,MAAa,OAAO,OAAO,WAAW,WACrC,cACA,SACC;CACD,MAAM,SAAS,OAAO,KAAK,cAAc,OAAO;CAChD,OAAO;EACN,SAAS,OAAO;EAChB,OAAO,OAAO;EACd,QAAQ,WACP,OACE,IACA,UAAU,KACT,OAAO,QAAQ,MAAM,GACrB,OAAO,KACL,aAAa,WACbA,WAAmB,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,OAAO,CAAC,CACzD,CACD,CACD,CAAC,CACA,KACA,OAAO,UAAU,UAChB,eAAe,KAAK,EAAE,OAAO,MAAM,KAAK,KAAK,EAAE,CAAC,CACjD,CACD;CACH;AACD,CAAC"}

package/dist/internal/workerBootstrap.js

@@ -0,0 +1,9 @@
+import { Schema } from "effect";
+// src/internal/workerBootstrap.ts
+const Bootstrap = Schema.Struct({
+	contractModule: Schema.String,
+	session: Schema.String
+});
+export { Bootstrap };
+
+//# sourceMappingURL=workerBootstrap.js.map

package/dist/internal/workerBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerBootstrap.js","names":[],"sources":["../../src/internal/workerBootstrap.ts"],"sourcesContent":["import { Schema } from \"effect\"\n\nexport const Bootstrap = Schema.Struct({\n\tcontractModule: Schema.String,\n\tsession: Schema.String,\n})\n"],"mappings":";;AAEA,MAAa,YAAY,OAAO,OAAO;CACtC,gBAAgB,OAAO;CACvB,SAAS,OAAO;AACjB,CAAC"}

package/dist/internal/workerChannel.js

@@ -0,0 +1,24 @@
+import { TransportError } from "../Errors.js";
+import { Cause, Effect, FiberSet, Queue, Sink, Stream } from "effect";
+// src/internal/workerChannel.ts
+const make = Effect.fnUntraced(function* (endpoint) {
+	const input = yield* Queue.unbounded();
+	const callbacks = yield* FiberSet.make();
+	const run = yield* FiberSet.runtime(callbacks)();
+	const receive = (value) => run(value === null ? Queue.end(input) : Queue.offer(input, new Uint8Array(value)));
+	yield* Effect.acquireRelease(Effect.sync(() => endpoint.on("message", receive)), () => Effect.sync(() => endpoint.off("message", receive)).pipe(Effect.andThen(Queue.shutdown(input))));
+	const send = (bytes) => Effect.try({
+		try: () => {
+			const buffer = bytes === null ? null : new Uint8Array(bytes).buffer;
+			endpoint.postMessage(buffer, buffer === null ? [] : [buffer]);
+		},
+		catch: (cause) => TransportError.make({ cause: Cause.die(cause) })
+	});
+	return {
+		input: Stream.fromQueue(input),
+		output: Sink.forEach((bytes) => send(bytes)).pipe(Sink.ensuring(send(null)))
+	};
+});
+export { make };
+
+//# sourceMappingURL=workerChannel.js.map

package/dist/internal/workerChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerChannel.js","names":[],"sources":["../../src/internal/workerChannel.ts"],"sourcesContent":["import { Cause, Effect, FiberSet, Queue, Sink, Stream } from \"effect\"\nimport { TransportError } from \"../Errors\"\nimport type { Channel } from \"./port\"\n\n/** Both ends send owned ArrayBuffers; null is the byte stream's EOF. */\nexport interface Endpoint {\n\treadonly postMessage: (\n\t\tvalue: ArrayBuffer | null,\n\t\ttransferList: ArrayBuffer[],\n\t) => void\n\treadonly on: (\n\t\tevent: \"message\",\n\t\tlistener: (value: ArrayBuffer | null) => void,\n\t) => unknown\n\treadonly off: (\n\t\tevent: \"message\",\n\t\tlistener: (value: ArrayBuffer | null) => void,\n\t) => unknown\n}\nexport const make = Effect.fnUntraced(function* (endpoint: Endpoint) {\n\t// Port owns admission and RPC chunk backpressure; this queue only bridges message events.\n\tconst input = yield* Queue.unbounded<Uint8Array, Cause.Done>()\n\tconst callbacks = yield* FiberSet.make()\n\tconst run = yield* FiberSet.runtime(callbacks)()\n\tconst receive = (value: ArrayBuffer | null) =>\n\t\trun(\n\t\t\tvalue === null\n\t\t\t\t? Queue.end(input)\n\t\t\t\t: Queue.offer(input, new Uint8Array(value)),\n\t\t)\n\tyield* Effect.acquireRelease(\n\t\tEffect.sync(() => endpoint.on(\"message\", receive)),\n\t\t() =>\n\t\t\tEffect.sync(() => endpoint.off(\"message\", receive)).pipe(\n\t\t\t\tEffect.andThen(Queue.shutdown(input)),\n\t\t\t),\n\t)\n\tconst send = (bytes: Uint8Array | null) =>\n\t\tEffect.try({\n\t\t\ttry: () => {\n\t\t\t\t// Copy even Buffer slices: only this fresh, exact-sized backing store is transferable.\n\t\t\t\tconst buffer = bytes === null ? null : new Uint8Array(bytes).buffer\n\t\t\t\tendpoint.postMessage(buffer, buffer === null ? [] : [buffer])\n\t\t\t},\n\t\t\tcatch: (cause) => TransportError.make({ cause: Cause.die(cause) }),\n\t\t})\n\treturn {\n\t\tinput: Stream.fromQueue(input),\n\t\toutput: Sink.forEach((bytes: Uint8Array) => send(bytes)).pipe(\n\t\t\t// Closing the output half always sends EOF, including when its writer is interrupted.\n\t\t\tSink.ensuring(send(null)),\n\t\t),\n\t} satisfies Channel\n})\n"],"mappings":";;;AAmBA,MAAa,OAAO,OAAO,WAAW,WAAW,UAAoB;CAEpE,MAAM,QAAQ,OAAO,MAAM,UAAkC;CAC7D,MAAM,YAAY,OAAO,SAAS,KAAK;CACvC,MAAM,MAAM,OAAO,SAAS,QAAQ,SAAS,CAAC,CAAC;CAC/C,MAAM,WAAW,UAChB,IACC,UAAU,OACP,MAAM,IAAI,KAAK,IACf,MAAM,MAAM,OAAO,IAAI,WAAW,KAAK,CAAC,CAC5C;CACD,OAAO,OAAO,eACb,OAAO,WAAW,SAAS,GAAG,WAAW,OAAO,CAAC,SAEhD,OAAO,WAAW,SAAS,IAAI,WAAW,OAAO,CAAC,CAAC,CAAC,KACnD,OAAO,QAAQ,MAAM,SAAS,KAAK,CAAC,CACrC,CACF;CACA,MAAM,QAAQ,UACb,OAAO,IAAI;EACV,WAAW;GAEV,MAAM,SAAS,UAAU,OAAO,OAAO,IAAI,WAAW,KAAK,CAAC,CAAC;GAC7D,SAAS,YAAY,QAAQ,WAAW,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;EAC7D;EACA,QAAQ,UAAU,eAAe,KAAK,EAAE,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC;CAClE,CAAC;CACF,OAAO;EACN,OAAO,OAAO,UAAU,KAAK;EAC7B,QAAQ,KAAK,SAAS,UAAsB,KAAK,KAAK,CAAC,CAAC,CAAC,KAExD,KAAK,SAAS,KAAK,IAAI,CAAC,CACzB;CACD;AACD,CAAC"}

package/dist/internal/workerMain.d.ts

@@ -0,0 +1 @@
+export {}

package/dist/internal/workerMain.js

@@ -0,0 +1,18 @@
+import { r as layer } from "../Graft-BsYq3F-J.js";
+import { n as run, r as platform, t as load } from "../childRuntime-DSqtFN9o.js";
+import { n as Bootstrap, t as make } from "../workerChannel-P82YdNjh.js";
+import { Effect, Layer, Schema } from "effect";
+import { NodeRuntime } from "@effect/platform-node";
+import { parentPort, workerData } from "node:worker_threads";
+// packages/remote/src/internal/workerMain.ts
+/** Executable entry for a direct worker; platform services belong to this thread. */
+const main = Effect.scoped(Effect.gen(function* () {
+	const port = yield* Effect.fromNullishOr(parentPort);
+	yield* Effect.addFinalizer(() => Effect.sync(() => port.close()));
+	const bootstrap = yield* Schema.decodeUnknownEffect(Bootstrap)(workerData);
+	const channel = yield* make(port);
+	const contract = yield* load(bootstrap.contractModule);
+	yield* run(contract, channel, bootstrap.session);
+}));
+NodeRuntime.runMain(main.pipe(Effect.provide(layer.pipe(Layer.provide(platform)))));
+export {};

package/dist/internal/workerMain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerMain.js","names":["Channel.make"],"sources":["../../src/internal/workerMain.ts"],"sourcesContent":["/** Executable entry for a direct worker; platform services belong to this thread. */\nimport { Graft } from \"@graftland/graft\"\nimport { NodeRuntime } from \"@effect/platform-node\"\nimport { Effect, Layer, Schema } from \"effect\"\nimport { parentPort, workerData } from \"node:worker_threads\"\nimport { load, run } from \"./childRuntime\"\nimport { Bootstrap } from \"./workerBootstrap\"\nimport * as Channel from \"./workerChannel\"\nimport { platform } from \"./platform\"\n\nconst main = Effect.scoped(\n\tEffect.gen(function* () {\n\t\tconst port = yield* Effect.fromNullishOr(parentPort)\n\t\tyield* Effect.addFinalizer(() => Effect.sync(() => port.close()))\n\t\tconst bootstrap = yield* Schema.decodeUnknownEffect(Bootstrap)(workerData)\n\t\tconst channel = yield* Channel.make(port)\n\t\tconst contract = yield* load(bootstrap.contractModule)\n\t\tyield* run(contract, channel, bootstrap.session)\n\t}),\n)\nNodeRuntime.runMain(\n\tmain.pipe(Effect.provide(Graft.layer.pipe(Layer.provide(platform)))),\n)\n"],"mappings":";;;;;;;;;;AAUA,MAAM,OAAO,OAAO,OACnB,OAAO,IAAI,aAAa;CACvB,MAAM,OAAO,OAAO,OAAO,cAAc,UAAU;CACnD,OAAO,OAAO,mBAAmB,OAAO,WAAW,KAAK,MAAM,CAAC,CAAC;CAChE,MAAM,YAAY,OAAO,OAAO,oBAAoB,SAAS,CAAC,CAAC,UAAU;CACzE,MAAM,UAAU,OAAOA,KAAa,IAAI;CACxC,MAAM,WAAW,OAAO,KAAK,UAAU,cAAc;CACrD,OAAO,IAAI,UAAU,SAAS,UAAU,OAAO;AAChD,CAAC,CACF;AACA,YAAY,QACX,KAAK,KAAK,OAAO,QAAQ,MAAM,MAAM,KAAK,MAAM,QAAQ,QAAQ,CAAC,CAAC,CAAC,CACpE"}