@jsbot-tellus/core 2.3.0 → 2.5.0

package/dist/core/web/http.d.ts

@@ -0,0 +1,39 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export declare const CSRF_HEADER = "x-requested-with";
+export declare const CSRF_VALUE = "jsbot-webui";
+export interface CookieOptions {
+    maxAgeSeconds?: number | undefined;
+    secure?: boolean | undefined;
+}
+interface SendHeaders {
+    [key: string]: string | undefined;
+}
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly details: unknown;
+    constructor(status: number, message: string, details?: unknown);
+}
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function readJsonBody(req: IncomingMessage, limitBytes?: number): Promise<unknown>;
+export interface URLSearchParamsLike {
+    get(name: string): string | null;
+}
+export declare function sendData(res: ServerResponse, status: number, data: unknown, headers?: SendHeaders): void;
+export declare function sendJson(res: ServerResponse, status: number, data: unknown, headers?: SendHeaders): void;
+export declare function sendError(res: ServerResponse, status: number, message: string, details?: unknown, headers?: SendHeaders): void;
+export declare function respondWithError(res: ServerResponse, error: unknown): void;
+export declare function parseCookies(header: string | undefined): Record<string, string>;
+export declare function serializeCookie(name: string, value: string | null, options?: CookieOptions): string;
+export declare function clearCookie(name: string): string;
+export declare function clientIp(req: IncomingMessage, trustProxy: boolean): string;
+export declare function isLoopbackHost(host: string): boolean;
+export declare function sameOrigin(req: IncomingMessage, trustProxy: boolean): boolean;
+export declare function assertSameOrigin(req: IncomingMessage, trustProxy: boolean): void;
+export declare function csrfHeader(req: IncomingMessage): string | undefined;
+export declare function assertCsrf(req: IncomingMessage): void;
+export declare function safeStringify(value: unknown): string;
+export declare function mimeType(filePath: string): string;
+export declare function isImmutableAsset(pathname: string): boolean;
+export declare function withTimeout<T>(promise: Promise<T>, timeoutMs: number): Promise<T>;
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/core/web/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/core/web/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAC7C,eAAO,MAAM,UAAU,gBAAgB,CAAA;AAEvC,MAAM,WAAW,aAAa;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC/B;AAED,UAAU,WAAW;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CACpC;AAED,qBAAa,SAAU,SAAQ,KAAK;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IAEzB,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAK7D;CACJ;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAsB,YAAY,CAC9B,GAAG,EAAE,eAAe,EACpB,UAAU,SAAY,GACvB,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED,MAAM,WAAW,mBAAmB;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,wBAAgB,QAAQ,CACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,WAAgB,GAC1B,IAAI,CAEN;AAED,wBAAgB,QAAQ,CACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,WAAgB,GAC1B,IAAI,CAON;AAED,wBAAgB,SAAS,CACrB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,EACjB,OAAO,GAAE,WAAgB,GAC1B,IAAI,CAON;AAQD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAgB1E;AAED,wBAAgB,YAAY,CACxB,MAAM,EAAE,MAAM,GAAG,SAAS,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuBxB;AAED,wBAAgB,eAAe,CAC3B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,OAAO,GAAE,aAAkB,GAC5B,MAAM,CAoBR;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAeD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,CAc1E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAapD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAiB7E;AAED,wBAAgB,gBAAgB,CAC5B,GAAG,EAAE,eAAe,EACpB,UAAU,EAAE,OAAO,GACpB,IAAI,CAIN;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAInE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAMrD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcpD;AAqBD,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CASjD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,WAAW,CAAC,CAAC,EACzB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,CAAC,CAAC,CAiBZ"}

package/dist/core/web/http.js

@@ -0,0 +1,233 @@
+export const CSRF_HEADER = 'x-requested-with';
+export const CSRF_VALUE = 'jsbot-webui';
+export class HttpError extends Error {
+    status;
+    details;
+    constructor(status, message, details) {
+        super(message);
+        this.name = 'HttpError';
+        this.status = status;
+        this.details = details;
+    }
+}
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export async function readJsonBody(req, limitBytes = 1_048_576) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        const buffer = chunk;
+        size += buffer.length;
+        if (size > limitBytes) {
+            throw new HttpError(413, 'request body too large');
+        }
+        chunks.push(buffer);
+    }
+    const text = Buffer.concat(chunks).toString('utf8').trim();
+    if (text.length === 0)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new HttpError(400, 'request body must be valid JSON');
+    }
+}
+export function sendData(res, status, data, headers = {}) {
+    sendJson(res, status, { data }, headers);
+}
+export function sendJson(res, status, data, headers = {}) {
+    res.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'cache-control': 'no-store',
+        ...headers,
+    });
+    res.end(safeStringify(data));
+}
+export function sendError(res, status, message, details, headers = {}) {
+    sendJson(res, status, { error: details === undefined ? { message } : { message, details } }, headers);
+}
+function detailsOf(error) {
+    if (error instanceof HttpError)
+        return error.details;
+    return undefined;
+}
+export function respondWithError(res, error) {
+    if (error instanceof HttpError) {
+        if (!res.headersSent) {
+            sendError(res, error.status, error.message, detailsOf(error));
+            return;
+        }
+    }
+    else if (!res.headersSent) {
+        sendError(res, 500, 'internal server error');
+        return;
+    }
+    try {
+        res.end();
+    }
+    catch {
+        // Socket already destroyed.
+    }
+}
+export function parseCookies(header) {
+    const result = {};
+    if (!header)
+        return result;
+    for (const part of header.split(';')) {
+        const separator = part.indexOf('=');
+        if (separator <= 0)
+            continue;
+        const key = part.slice(0, separator).trim();
+        const value = part.slice(separator + 1).trim();
+        if (key.length === 0)
+            continue;
+        try {
+            result[key] = decodeURIComponent(value);
+        }
+        catch {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+export function serializeCookie(name, value, options = {}) {
+    const parts = [`${name}=`];
+    if (value === null) {
+        parts.push('; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT');
+    }
+    else {
+        parts.push(value);
+        if (options.maxAgeSeconds !== undefined) {
+            parts.push(`; Max-Age=${Math.max(Math.trunc(options.maxAgeSeconds), 0)}`);
+        }
+    }
+    parts.push('; Path=/; HttpOnly; SameSite=Strict');
+    if (options.secure === true)
+        parts.push('; Secure');
+    return parts.join('');
+}
+export function clearCookie(name) {
+    return serializeCookie(name, null);
+}
+function forwardedHost(req, trustProxy) {
+    if (!trustProxy)
+        return undefined;
+    const value = req.headers['x-forwarded-host'];
+    if (typeof value !== 'string' || value.length === 0)
+        return undefined;
+    return value.split(',')[0]?.trim();
+}
+export function clientIp(req, trustProxy) {
+    if (trustProxy) {
+        const forwarded = req.headers['x-forwarded-for'];
+        if (typeof forwarded === 'string' && forwarded.length > 0) {
+            const first = forwarded.split(',')[0]?.trim();
+            if (first)
+                return first;
+        }
+    }
+    const address = req.socket.remoteAddress ?? 'unknown';
+    return address.startsWith('::ffff:') ? address.slice(7) : address;
+}
+export function isLoopbackHost(host) {
+    try {
+        const url = new URL(`http://${host}`);
+        return (url.hostname === '127.0.0.1' ||
+            url.hostname === '[::1]' ||
+            url.hostname === '::1' ||
+            url.hostname === 'localhost');
+    }
+    catch {
+        return false;
+    }
+}
+export function sameOrigin(req, trustProxy) {
+    const origin = req.headers.origin;
+    if (typeof origin !== 'string')
+        return true;
+    if (origin.length === 0 || origin === 'null')
+        return false;
+    try {
+        const originUrl = new URL(origin);
+        const host = forwardedHost(req, trustProxy) ?? req.headers.host;
+        if (host === undefined)
+            return false;
+        return originUrl.host.toLowerCase() === host.trim().toLowerCase();
+    }
+    catch {
+        return false;
+    }
+}
+export function assertSameOrigin(req, trustProxy) {
+    if (sameOrigin(req, trustProxy))
+        return;
+    throw new HttpError(403, 'cross-origin request rejected');
+}
+export function csrfHeader(req) {
+    const value = req.headers[CSRF_HEADER];
+    return typeof value === 'string' ? value : undefined;
+}
+export function assertCsrf(req) {
+    const value = csrfHeader(req);
+    if (value?.toLowerCase() === CSRF_VALUE)
+        return;
+    throw new HttpError(403, `missing ${CSRF_HEADER}: ${CSRF_VALUE} header`);
+}
+export function safeStringify(value) {
+    const seen = new WeakSet();
+    return JSON.stringify(value, (_key, item) => {
+        if (typeof item === 'bigint')
+            return item.toString();
+        if (typeof item !== 'object' || item === null)
+            return item;
+        if (seen.has(item))
+            return '[Circular]';
+        seen.add(item);
+        return item;
+    });
+}
+const MIME_TYPES = {
+    '.css': 'text/css; charset=utf-8',
+    '.gif': 'image/gif',
+    '.html': 'text/html; charset=utf-8',
+    '.ico': 'image/x-icon',
+    '.jpeg': 'image/jpeg',
+    '.jpg': 'image/jpeg',
+    '.js': 'text/javascript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.map': 'application/json',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.txt': 'text/plain; charset=utf-8',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+};
+export function mimeType(filePath) {
+    const separator = filePath.lastIndexOf('.');
+    if (separator < 0)
+        return 'application/octet-stream';
+    return (MIME_TYPES[filePath.slice(separator).toLowerCase()] ??
+        'application/octet-stream');
+}
+export function isImmutableAsset(pathname) {
+    return pathname.startsWith('/assets/');
+}
+export function withTimeout(promise, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            reject(new Error(`timeout after ${timeoutMs}ms`));
+        }, timeoutMs);
+        promise.then((value) => {
+            clearTimeout(timer);
+            resolve(value);
+        }, (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/core/web/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/core/web/http.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AAWvC,MAAM,OAAO,SAAU,SAAQ,KAAK;IACvB,MAAM,CAAQ;IACd,OAAO,CAAS;IAEzB,YAAY,MAAc,EAAE,OAAe,EAAE,OAAiB;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IAC1B,CAAC;CACJ;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,GAAoB,EACpB,UAAU,GAAG,SAAS;IAEtB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAe,CAAA;QAE9B,IAAI,IAAI,MAAM,CAAC,MAAM,CAAA;QAErB,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;QACtD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAE1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEhC,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAA;IAC/D,CAAC;AACL,CAAC;AAMD,MAAM,UAAU,QAAQ,CACpB,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,OAAO,GAAgB,EAAE;IAEzB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,QAAQ,CACpB,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,OAAO,GAAgB,EAAE;IAEzB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QAClB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,GAAG,OAAO;KACb,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,SAAS,CACrB,GAAmB,EACnB,MAAc,EACd,OAAe,EACf,OAAiB,EACjB,OAAO,GAAgB,EAAE;IAEzB,QAAQ,CACJ,GAAG,EACH,MAAM,EACN,EAAE,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EACrE,OAAO,CACV,CAAA;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC7B,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC,OAAO,CAAA;IAEpD,OAAO,SAAS,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAmB,EAAE,KAAc;IAChE,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACnB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;YAC7D,OAAM;QACV,CAAC;IACL,CAAC;SAAM,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC1B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAA;QAC5C,OAAM;IACV,CAAC;IAED,IAAI,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACL,4BAA4B;IAChC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CACxB,MAA0B;IAE1B,MAAM,MAAM,GAA2B,EAAE,CAAA;IAEzC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IAE1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAEnC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAQ;QAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAE9C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAE9B,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACvB,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAC3B,IAAY,EACZ,KAAoB,EACpB,OAAO,GAAkB,EAAE;IAE3B,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;IAE1B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;IACpE,CAAC;SAAM,CAAC;QACJ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEjB,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACN,aAAa,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,CAChE,CAAA;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IAEjD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEnD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,aAAa,CAClB,GAAoB,EACpB,UAAmB;IAEnB,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IAEjC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAE7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAErE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAoB,EAAE,UAAmB;IAC9D,IAAI,UAAU,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAEhD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;YAE7C,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;QAC3B,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAA;IAErD,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;QAErC,OAAO,CACH,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,GAAG,CAAC,QAAQ,KAAK,KAAK;YACtB,GAAG,CAAC,QAAQ,KAAK,WAAW,CAC/B,CAAA;IACL,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAoB,EAAE,UAAmB;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IAEjC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAE3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IAE1D,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAA;QAE/D,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QAEpC,OAAO,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACrE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC5B,GAAoB,EACpB,UAAmB;IAEnB,IAAI,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC;QAAE,OAAM;IAEvC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAoB;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAEtC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAoB;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAE7B,IAAI,KAAK,EAAE,WAAW,EAAE,KAAK,UAAU;QAAE,OAAM;IAE/C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,WAAW,KAAK,UAAU,SAAS,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAA;IAElC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAa,EAAE,EAAE;QACjD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;QAEpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAE1D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,YAAY,CAAA;QAEvC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEd,OAAO,IAAI,CAAA;IACf,CAAC,CAAC,CAAA;AACN,CAAC;AAED,MAAM,UAAU,GAA2B;IACvC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACzB,CAAA;AAED,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAE3C,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,0BAA0B,CAAA;IAEpD,OAAO,CACH,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,0BAA0B,CAC7B,CAAA;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,WAAW,CACvB,OAAmB,EACnB,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,CAAA;QACrD,CAAC,EAAE,SAAS,CAAC,CAAA;QAEb,OAAO,CAAC,IAAI,CACR,CAAC,KAAK,EAAE,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC,CACJ,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/core/web/index.d.ts

@@ -0,0 +1,11 @@
+export type { FeedEvent, FeedEventType, FeedFilter } from './event-feed.js';
+export { EventFeed } from './event-feed.js';
+export type { AuthSession } from './auth.js';
+export { AuthManager } from './auth.js';
+export type { MaskedConfig } from './config-store.js';
+export { ConfigStore, ConfigStoreError, maskConfig, mergeSecrets, } from './config-store.js';
+export type { ConfigApplyResult, ConfigDocument, ConfigValidationIssue, ConfigValidationResult, WebUiAddress, WebUiDeps, WebUiPaths, WebUiRuntime, WebUiServerOptions, } from './types.js';
+export type { WebUiConfig } from '../config/schema.js';
+export { WebUiServer } from './server.js';
+export { CSRF_HEADER, CSRF_VALUE, HttpError } from './http.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/web/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EACH,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,YAAY,GACf,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACR,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,kBAAkB,GACrB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA"}

package/dist/core/web/index.js

@@ -0,0 +1,6 @@
+export { EventFeed } from './event-feed.js';
+export { AuthManager } from './auth.js';
+export { ConfigStore, ConfigStoreError, maskConfig, mergeSecrets, } from './config-store.js';
+export { WebUiServer } from './server.js';
+export { CSRF_HEADER, CSRF_VALUE, HttpError } from './http.js';
+//# sourceMappingURL=index.js.map

package/dist/core/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/web/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAEvC,OAAO,EACH,WAAW,EACX,gBAAgB,EAChB,UAAU,EACV,YAAY,GACf,MAAM,mBAAmB,CAAA;AAa1B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA"}

package/dist/core/web/server.d.ts

@@ -0,0 +1,30 @@
+import type { WebUiAddress, WebUiServerOptions } from './types.js';
+export declare class WebUiServer {
+    private readonly deps;
+    private readonly maxSseClients;
+    private readonly bodyLimit;
+    private readonly loginMaxFailures;
+    private readonly loginWindowMs;
+    private readonly auth;
+    private readonly sse;
+    private readonly fallbackBody;
+    private httpServer;
+    private listening;
+    private cspCache;
+    constructor(options: WebUiServerOptions);
+    get address(): WebUiAddress | null;
+    start(config: WebUiServerOptions['config']): Promise<WebUiAddress | null>;
+    get requiresRestart(): boolean;
+    stop(): Promise<void>;
+    invalidateSessions(): void;
+    private applySecurityHeaders;
+    private handleRequest;
+    private authenticate;
+    private handleAuth;
+    private tokenOf;
+    private isSecure;
+    private openSse;
+    private serveStatic;
+    private statOrNull;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/core/web/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/core/web/server.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAa,kBAAkB,EAAE,MAAM,YAAY,CAAA;AA6H7E,qBAAa,WAAW;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAW;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2B;IAC/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IAErC,OAAO,CAAC,UAAU,CAAsB;IACxC,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,QAAQ,CAAsB;IAEtC,YAAY,OAAO,EAAE,kBAAkB,EAoBtC;IAED,IAAI,OAAO,IAAI,YAAY,GAAG,IAAI,CAEjC;IAEK,KAAK,CACP,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GACrC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CA0C9B;IAED,IAAI,eAAe,IAAI,OAAO,CAE7B;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAgB1B;IAED,kBAAkB,IAAI,IAAI,CAEzB;IAED,OAAO,CAAC,oBAAoB;YAkBd,aAAa;IAoF3B,OAAO,CAAC,YAAY;YAMN,UAAU;IAwFxB,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,OAAO;YAyDD,WAAW;YA0EX,UAAU;CAS3B"}