@heddleagent/execution-host-client 6.2.0 → 6.4.0

package/dist/node/http-utils.js

@@ -0,0 +1,109 @@
+import { z } from 'zod';
+const REDACTED_HEADER_VALUE = '[REDACTED]';
+const MAX_AUTHORIZATION_CHARACTERS = 8_192;
+export const NodeHttpPathSchema = z.string().min(1).max(256).regex(/^\/(?:[^?#\s]*)$/, 'must be an absolute path without query, fragment, or whitespace');
+export class NodeHttpRequestError extends Error {
+    statusCode;
+    name = 'NodeHttpRequestError';
+    constructor(statusCode) {
+        super('Invalid Node HTTP request.');
+        this.statusCode = statusCode;
+    }
+}
+export function readPathname(rawUrl) {
+    try {
+        return new URL(rawUrl ?? '/', 'http://localhost').pathname;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function takeAuthorization(request) {
+    const occurrences = request.rawHeaders.reduce((count, headerName, index) => count
+        + (index % 2 === 0 && headerName.toLowerCase() === 'authorization'
+            ? 1
+            : 0), 0);
+    const raw = request.headers.authorization;
+    request.headers.authorization = raw === undefined
+        ? undefined
+        : REDACTED_HEADER_VALUE;
+    for (let index = 0; index < request.rawHeaders.length; index += 2) {
+        if (request.rawHeaders[index]?.toLowerCase() === 'authorization') {
+            request.rawHeaders[index + 1] = REDACTED_HEADER_VALUE;
+        }
+    }
+    if (occurrences > 1 || Array.isArray(raw)) {
+        throw new NodeHttpRequestError(400);
+    }
+    if (raw && raw.length > MAX_AUTHORIZATION_CHARACTERS) {
+        throw new NodeHttpRequestError(400);
+    }
+    return raw;
+}
+export async function readJsonBody(request, maxBodyBytes, signal) {
+    const contentType = request.headers['content-type']
+        ?.split(';', 1)[0]
+        ?.trim()
+        .toLowerCase();
+    if (contentType !== 'application/json') {
+        request.resume();
+        throw new NodeHttpRequestError(415);
+    }
+    const contentLength = request.headers['content-length'];
+    if (contentLength !== undefined) {
+        const declaredLength = Number(contentLength);
+        if (!Number.isSafeInteger(declaredLength) || declaredLength < 0) {
+            request.resume();
+            throw new NodeHttpRequestError(400);
+        }
+        if (declaredLength > maxBodyBytes) {
+            request.resume();
+            throw new NodeHttpRequestError(413);
+        }
+    }
+    const chunks = [];
+    let receivedBytes = 0;
+    for await (const chunk of request) {
+        signal.throwIfAborted();
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        receivedBytes += buffer.byteLength;
+        if (receivedBytes > maxBodyBytes) {
+            request.resume();
+            throw new NodeHttpRequestError(413);
+        }
+        chunks.push(buffer);
+    }
+    if (!request.complete || receivedBytes === 0) {
+        throw new NodeHttpRequestError(400);
+    }
+    try {
+        return JSON.parse(Buffer.concat(chunks, receivedBytes).toString('utf8'));
+    }
+    catch {
+        throw new NodeHttpRequestError(400);
+    }
+}
+export function writeJsonError(response, statusCode, message, headers = {}) {
+    writeJson(response, statusCode, { error: { message } }, {
+        'Cache-Control': 'no-store',
+        ...headers,
+    });
+}
+export function writeJson(response, statusCode, value, headers = {}) {
+    if (response.headersSent || response.destroyed) {
+        return;
+    }
+    const body = JSON.stringify(value);
+    response.writeHead(statusCode, {
+        'Cache-Control': 'no-store',
+        'Content-Length': Buffer.byteLength(body),
+        'Content-Type': 'application/json; charset=utf-8',
+        'X-Content-Type-Options': 'nosniff',
+        ...headers,
+    });
+    response.end(body);
+}
+export function errorType(error) {
+    return error instanceof Error ? error.name : 'unknown';
+}
+//# sourceMappingURL=http-utils.js.map

package/dist/node/http-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-utils.js","sourceRoot":"","sources":["../../src/node/http-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAC3C,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAChE,kBAAkB,EAClB,iEAAiE,CAClE,CAAC;AAEF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAGxB;IAFZ,IAAI,GAAG,sBAAsB,CAAC;IAEvC,YAAqB,UAA2B;QAC9C,KAAK,CAAC,4BAA4B,CAAC,CAAC;QADjB,eAAU,GAAV,UAAU,CAAiB;IAEhD,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAwB;IAExB,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK;UAC/B,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,eAAe;YAChE,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,CAAC,EACR,CAAC,CACF,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC1C,OAAO,CAAC,OAAO,CAAC,aAAa,GAAG,GAAG,KAAK,SAAS;QAC/C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,qBAAqB,CAAC;IAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;YACjE,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,qBAAqB,CAAC;QACxD,CAAC;IACH,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QACrD,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAwB,EACxB,YAAoB,EACpB,MAAmB;IAEnB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QACjD,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,EAAE,IAAI,EAAE;SACP,WAAW,EAAE,CAAC;IACjB,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,cAAc,GAAG,YAAY,EAAE,CAAC;YAClC,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC;QACnC,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3C,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAAwB,EACxB,UAAkB,EAClB,OAAe,EACf,UAAkC,EAAE;IAEpC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,eAAe,EAAE,UAAU;QAC3B,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,QAAwB,EACxB,UAAkB,EAClB,KAAc,EACd,UAAkC,EAAE;IAEpC,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;QAC7B,eAAe,EAAE,UAAU;QAC3B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,cAAc,EAAE,iCAAiC;QACjD,wBAAwB,EAAE,SAAS;QACnC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from 'node:http';\nimport { z } from 'zod';\n\nconst REDACTED_HEADER_VALUE = '[REDACTED]';\nconst MAX_AUTHORIZATION_CHARACTERS = 8_192;\n\nexport const NodeHttpPathSchema = z.string().min(1).max(256).regex(\n  /^\\/(?:[^?#\\s]*)$/,\n  'must be an absolute path without query, fragment, or whitespace',\n);\n\nexport class NodeHttpRequestError extends Error {\n  readonly name = 'NodeHttpRequestError';\n\n  constructor(readonly statusCode: 400 | 413 | 415) {\n    super('Invalid Node HTTP request.');\n  }\n}\n\nexport function readPathname(rawUrl: string | undefined): string | undefined {\n  try {\n    return new URL(rawUrl ?? '/', 'http://localhost').pathname;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function takeAuthorization(\n  request: IncomingMessage,\n): string | undefined {\n  const occurrences = request.rawHeaders.reduce(\n    (count, headerName, index) => count\n      + (index % 2 === 0 && headerName.toLowerCase() === 'authorization'\n        ? 1\n        : 0),\n    0,\n  );\n  const raw = request.headers.authorization;\n  request.headers.authorization = raw === undefined\n    ? undefined\n    : REDACTED_HEADER_VALUE;\n  for (let index = 0; index < request.rawHeaders.length; index += 2) {\n    if (request.rawHeaders[index]?.toLowerCase() === 'authorization') {\n      request.rawHeaders[index + 1] = REDACTED_HEADER_VALUE;\n    }\n  }\n  if (occurrences > 1 || Array.isArray(raw)) {\n    throw new NodeHttpRequestError(400);\n  }\n  if (raw && raw.length > MAX_AUTHORIZATION_CHARACTERS) {\n    throw new NodeHttpRequestError(400);\n  }\n  return raw;\n}\n\nexport async function readJsonBody(\n  request: IncomingMessage,\n  maxBodyBytes: number,\n  signal: AbortSignal,\n): Promise<unknown> {\n  const contentType = request.headers['content-type']\n    ?.split(';', 1)[0]\n    ?.trim()\n    .toLowerCase();\n  if (contentType !== 'application/json') {\n    request.resume();\n    throw new NodeHttpRequestError(415);\n  }\n  const contentLength = request.headers['content-length'];\n  if (contentLength !== undefined) {\n    const declaredLength = Number(contentLength);\n    if (!Number.isSafeInteger(declaredLength) || declaredLength < 0) {\n      request.resume();\n      throw new NodeHttpRequestError(400);\n    }\n    if (declaredLength > maxBodyBytes) {\n      request.resume();\n      throw new NodeHttpRequestError(413);\n    }\n  }\n\n  const chunks: Buffer[] = [];\n  let receivedBytes = 0;\n  for await (const chunk of request) {\n    signal.throwIfAborted();\n    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n    receivedBytes += buffer.byteLength;\n    if (receivedBytes > maxBodyBytes) {\n      request.resume();\n      throw new NodeHttpRequestError(413);\n    }\n    chunks.push(buffer);\n  }\n  if (!request.complete || receivedBytes === 0) {\n    throw new NodeHttpRequestError(400);\n  }\n  try {\n    return JSON.parse(\n      Buffer.concat(chunks, receivedBytes).toString('utf8'),\n    ) as unknown;\n  } catch {\n    throw new NodeHttpRequestError(400);\n  }\n}\n\nexport function writeJsonError(\n  response: ServerResponse,\n  statusCode: number,\n  message: string,\n  headers: Record<string, string> = {},\n): void {\n  writeJson(response, statusCode, { error: { message } }, {\n    'Cache-Control': 'no-store',\n    ...headers,\n  });\n}\n\nexport function writeJson(\n  response: ServerResponse,\n  statusCode: number,\n  value: unknown,\n  headers: Record<string, string> = {},\n): void {\n  if (response.headersSent || response.destroyed) {\n    return;\n  }\n  const body = JSON.stringify(value);\n  response.writeHead(statusCode, {\n    'Cache-Control': 'no-store',\n    'Content-Length': Buffer.byteLength(body),\n    'Content-Type': 'application/json; charset=utf-8',\n    'X-Content-Type-Options': 'nosniff',\n    ...headers,\n  });\n  response.end(body);\n}\n\nexport function errorType(error: unknown): string {\n  return error instanceof Error ? error.name : 'unknown';\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heddleagent/execution-host-client",
-  "version": "6.2.0",
+  "version": "6.4.0",
   "description": "Backend contracts, execution authority, lifecycle services, and clients for compatible Heddle Execution Hosts",
   "author": "Jay / Fienna Liang <roackb2@gmail.com>",
   "license": "MIT",
@@ -46,6 +46,14 @@
       "types": "./dist/heartbeat/index.d.ts",
       "import": "./dist/heartbeat/index.js"
     },
+    "./coordinator": {
+      "types": "./dist/coordinator/index.d.ts",
+      "import": "./dist/coordinator/index.js"
+    },
+    "./coordinator/node": {
+      "types": "./dist/coordinator/node/index.d.ts",
+      "import": "./dist/coordinator/node/index.js"
+    },
     "./mcp": {
       "types": "./dist/mcp/index.d.ts",
       "import": "./dist/mcp/index.js"