@jsenv/server 17.3.0 → 17.4.0

package/dist/client/route_inspector/route_inspector.html

@@ -1187,30 +1187,30 @@ label .filter_text {
       });
     </script>
     <script type="module">/* esm.sh - preact@10.23.1 */
-var M$2,h$1,X,ie,x$2,J$1,Y,R,j,$,O,T$1={},ee=[],le=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,I=Array.isArray;function b$3(_,e){for(var t in e)_[t]=e[t];return _}function _e(_){var e=_.parentNode;e&&e.removeChild(_);}function se(_,e,t){var i,n,r,l={};for(r in e)r=="key"?i=e[r]:r=="ref"?n=e[r]:l[r]=e[r];if(arguments.length>2&&(l.children=arguments.length>3?M$2.call(arguments,2):t),typeof _=="function"&&_.defaultProps!=null)for(r in _.defaultProps)l[r]===void 0&&(l[r]=_.defaultProps[r]);return U(_,l,i,n,null)}function U(_,e,t,i,n){var r={type:_,props:e,key:t,ref:i,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,constructor:void 0,__v:n??++X,__i:-1,__u:0};return n==null&&h$1.vnode!=null&&h$1.vnode(r),r}function N(_){return _.children}function F$1(_,e){this.props=_,this.context=e;}function C$3(_,e){if(e==null)return _.__?C$3(_.__,_.__i+1):null;for(var t;e<_.__k.length;e++)if((t=_.__k[e])!=null&&t.__e!=null)return t.__e;return typeof _.type=="function"?C$3(_):null}function te(_){var e,t;if((_=_.__)!=null&&_.__c!=null){for(_.__e=_.__c.base=null,e=0;e<_.__k.length;e++)if((t=_.__k[e])!=null&&t.__e!=null){_.__e=_.__c.base=t.__e;break}return te(_)}}function B(_){(!_.__d&&(_.__d=true)&&x$2.push(_)&&!H$1.__r++||J$1!==h$1.debounceRendering)&&((J$1=h$1.debounceRendering)||Y)(H$1);}function H$1(){var _,e,t,i,n,r,l,s;for(x$2.sort(R);_=x$2.shift();)_.__d&&(e=x$2.length,i=void 0,r=(n=(t=_).__v).__e,l=[],s=[],t.__P&&((i=b$3({},n)).__v=n.__v+1,h$1.vnode&&h$1.vnode(i),z$1(t.__P,i,n,t.__n,t.__P.namespaceURI,32&n.__u?[r]:null,l,r??C$3(n),!!(32&n.__u),s),i.__v=n.__v,i.__.__k[i.__i]=i,re(l,i,s),i.__e!=r&&te(i)),x$2.length>e&&x$2.sort(R));H$1.__r=0;}function ne(_,e,t,i,n,r,l,s,c,u,p){var o,m,f,v,g,y=i&&i.__k||ee,a=e.length;for(t.__d=c,ue(t,e,y),c=t.__d,o=0;o<a;o++)(f=t.__k[o])!=null&&typeof f!="boolean"&&typeof f!="function"&&(m=f.__i===-1?T$1:y[f.__i]||T$1,f.__i=o,z$1(_,f,m,n,r,l,s,c,u,p),v=f.__e,f.ref&&m.ref!=f.ref&&(m.ref&&q$1(m.ref,null,f),p.push(f.ref,f.__c||v,f)),g==null&&v!=null&&(g=v),65536&f.__u||m.__k===f.__k?c=oe(f,c,_):typeof f.type=="function"&&f.__d!==void 0?c=f.__d:v&&(c=v.nextSibling),f.__d=void 0,f.__u&=-196609);t.__d=c,t.__e=g;}function ue(_,e,t){var i,n,r,l,s,c=e.length,u=t.length,p=u,o=0;for(_.__k=[],i=0;i<c;i++)l=i+o,(n=_.__k[i]=(n=e[i])==null||typeof n=="boolean"||typeof n=="function"?null:typeof n=="string"||typeof n=="number"||typeof n=="bigint"||n.constructor==String?U(null,n,null,null,null):I(n)?U(N,{children:n},null,null,null):n.constructor===void 0&&n.__b>0?U(n.type,n.props,n.key,n.ref?n.ref:null,n.__v):n)!=null?(n.__=_,n.__b=_.__b+1,s=ce(n,t,l,p),n.__i=s,r=null,s!==-1&&(p--,(r=t[s])&&(r.__u|=131072)),r==null||r.__v===null?(s==-1&&o--,typeof n.type!="function"&&(n.__u|=65536)):s!==l&&(s==l-1?o=s-l:s==l+1?o++:s>l?p>c-l?o+=s-l:o--:s<l&&o++,s!==i+o&&(n.__u|=65536))):(r=t[l])&&r.key==null&&r.__e&&(131072&r.__u)==0&&(r.__e==_.__d&&(_.__d=C$3(r)),V(r,r,false),t[l]=null,p--);if(p)for(i=0;i<u;i++)(r=t[i])!=null&&(131072&r.__u)==0&&(r.__e==_.__d&&(_.__d=C$3(r)),V(r,r));}function oe(_,e,t){var i,n;if(typeof _.type=="function"){for(i=_.__k,n=0;i&&n<i.length;n++)i[n]&&(i[n].__=_,e=oe(i[n],e,t));return e}_.__e!=e&&(e&&_.type&&!t.contains(e)&&(e=C$3(_)),t.insertBefore(_.__e,e||null),e=_.__e);do e=e&&e.nextSibling;while(e!=null&&e.nodeType===8);return e}function ce(_,e,t,i){var n=_.key,r=_.type,l=t-1,s=t+1,c=e[t];if(c===null||c&&n==c.key&&r===c.type&&(131072&c.__u)==0)return t;if(i>(c!=null&&(131072&c.__u)==0?1:0))for(;l>=0||s<e.length;){if(l>=0){if((c=e[l])&&(131072&c.__u)==0&&n==c.key&&r===c.type)return l;l--;}if(s<e.length){if((c=e[s])&&(131072&c.__u)==0&&n==c.key&&r===c.type)return s;s++;}}return  -1}function K(_,e,t){e[0]==="-"?_.setProperty(e,t??""):_[e]=t==null?"":typeof t!="number"||le.test(e)?t:t+"px";}function W$2(_,e,t,i,n){var r;e:if(e==="style")if(typeof t=="string")_.style.cssText=t;else {if(typeof i=="string"&&(_.style.cssText=i=""),i)for(e in i)t&&e in t||K(_.style,e,"");if(t)for(e in t)i&&t[e]===i[e]||K(_.style,e,t[e]);}else if(e[0]==="o"&&e[1]==="n")r=e!==(e=e.replace(/(PointerCapture)$|Capture$/i,"$1")),e=e.toLowerCase()in _||e==="onFocusOut"||e==="onFocusIn"?e.toLowerCase().slice(2):e.slice(2),_.l||(_.l={}),_.l[e+r]=t,t?i?t.u=i.u:(t.u=j,_.addEventListener(e,r?O:$,r)):_.removeEventListener(e,r?O:$,r);else {if(n=="http://www.w3.org/2000/svg")e=e.replace(/xlink(H|:h)/,"h").replace(/sName$/,"s");else if(e!="width"&&e!="height"&&e!="href"&&e!="list"&&e!="form"&&e!="tabIndex"&&e!="download"&&e!="rowSpan"&&e!="colSpan"&&e!="role"&&e!="popover"&&e in _)try{_[e]=t??"";break e}catch{}typeof t=="function"||(t==null||t===false&&e[4]!=="-"?_.removeAttribute(e):_.setAttribute(e,e=="popover"&&t==1?"":t));}}function Q(_){return function(e){if(this.l){var t=this.l[e.type+_];if(e.t==null)e.t=j++;else if(e.t<t.u)return;return t(h$1.event?h$1.event(e):e)}}}function z$1(_,e,t,i,n,r,l,s,c,u){var p,o,m,f,v,g,y,a,d,P,w,D,S,G,E,A,k=e.type;if(e.constructor!==void 0)return null;128&t.__u&&(c=!!(32&t.__u),r=[s=e.__e=t.__e]),(p=h$1.__b)&&p(e);e:if(typeof k=="function")try{if(a=e.props,d="prototype"in k&&k.prototype.render,P=(p=k.contextType)&&i[p.__c],w=p?P?P.props.value:p.__:i,t.__c?y=(o=e.__c=t.__c).__=o.__E:(d?e.__c=o=new k(a,w):(e.__c=o=new F$1(a,w),o.constructor=k,o.render=ae),P&&P.sub(o),o.props=a,o.state||(o.state={}),o.context=w,o.__n=i,m=o.__d=!0,o.__h=[],o._sb=[]),d&&o.__s==null&&(o.__s=o.state),d&&k.getDerivedStateFromProps!=null&&(o.__s==o.state&&(o.__s=b$3({},o.__s)),b$3(o.__s,k.getDerivedStateFromProps(a,o.__s))),f=o.props,v=o.state,o.__v=e,m)d&&k.getDerivedStateFromProps==null&&o.componentWillMount!=null&&o.componentWillMount(),d&&o.componentDidMount!=null&&o.__h.push(o.componentDidMount);else {if(d&&k.getDerivedStateFromProps==null&&a!==f&&o.componentWillReceiveProps!=null&&o.componentWillReceiveProps(a,w),!o.__e&&(o.shouldComponentUpdate!=null&&o.shouldComponentUpdate(a,o.__s,w)===!1||e.__v===t.__v)){for(e.__v!==t.__v&&(o.props=a,o.state=o.__s,o.__d=!1),e.__e=t.__e,e.__k=t.__k,e.__k.forEach(function(L){L&&(L.__=e);}),D=0;D<o._sb.length;D++)o.__h.push(o._sb[D]);o._sb=[],o.__h.length&&l.push(o);break e}o.componentWillUpdate!=null&&o.componentWillUpdate(a,o.__s,w),d&&o.componentDidUpdate!=null&&o.__h.push(function(){o.componentDidUpdate(f,v,g);});}if(o.context=w,o.props=a,o.__P=_,o.__e=!1,S=h$1.__r,G=0,d){for(o.state=o.__s,o.__d=!1,S&&S(e),p=o.render(o.props,o.state,o.context),E=0;E<o._sb.length;E++)o.__h.push(o._sb[E]);o._sb=[];}else do o.__d=!1,S&&S(e),p=o.render(o.props,o.state,o.context),o.state=o.__s;while(o.__d&&++G<25);o.state=o.__s,o.getChildContext!=null&&(i=b$3(b$3({},i),o.getChildContext())),d&&!m&&o.getSnapshotBeforeUpdate!=null&&(g=o.getSnapshotBeforeUpdate(f,v)),ne(_,I(A=p!=null&&p.type===N&&p.key==null?p.props.children:p)?A:[A],e,t,i,n,r,l,s,c,u),o.base=e.__e,e.__u&=-161,o.__h.length&&l.push(o),y&&(o.__E=o.__=null);}catch(L){if(e.__v=null,c||r!=null){for(e.__u|=c?160:32;s&&s.nodeType===8&&s.nextSibling;)s=s.nextSibling;r[r.indexOf(s)]=null,e.__e=s;}else e.__e=t.__e,e.__k=t.__k;h$1.__e(L,e,t);}else r==null&&e.__v===t.__v?(e.__k=t.__k,e.__e=t.__e):e.__e=pe(t.__e,e,t,i,n,r,l,c,u);(p=h$1.diffed)&&p(e);}function re(_,e,t){e.__d=void 0;for(var i=0;i<t.length;i++)q$1(t[i],t[++i],t[++i]);h$1.__c&&h$1.__c(e,_),_.some(function(n){try{_=n.__h,n.__h=[],_.some(function(r){r.call(n);});}catch(r){h$1.__e(r,n.__v);}});}function pe(_,e,t,i,n,r,l,s,c){var u,p,o,m,f,v,g,y=t.props,a=e.props,d=e.type;if(d==="svg"?n="http://www.w3.org/2000/svg":d==="math"?n="http://www.w3.org/1998/Math/MathML":n||(n="http://www.w3.org/1999/xhtml"),r!=null){for(u=0;u<r.length;u++)if((f=r[u])&&"setAttribute"in f==!!d&&(d?f.localName===d:f.nodeType===3)){_=f,r[u]=null;break}}if(_==null){if(d===null)return document.createTextNode(a);_=document.createElementNS(n,d,a.is&&a),r=null,s=false;}if(d===null)y===a||s&&_.data===a||(_.data=a);else {if(r=r&&M$2.call(_.childNodes),y=t.props||T$1,!s&&r!=null)for(y={},u=0;u<_.attributes.length;u++)y[(f=_.attributes[u]).name]=f.value;for(u in y)if(f=y[u],u!="children"){if(u=="dangerouslySetInnerHTML")o=f;else if(u!=="key"&&!(u in a)){if(u=="value"&&"defaultValue"in a||u=="checked"&&"defaultChecked"in a)continue;W$2(_,u,null,f,n);}}for(u in a)f=a[u],u=="children"?m=f:u=="dangerouslySetInnerHTML"?p=f:u=="value"?v=f:u=="checked"?g=f:u==="key"||s&&typeof f!="function"||y[u]===f||W$2(_,u,f,y[u],n);if(p)s||o&&(p.__html===o.__html||p.__html===_.innerHTML)||(_.innerHTML=p.__html),e.__k=[];else if(o&&(_.innerHTML=""),ne(_,I(m)?m:[m],e,t,i,d==="foreignObject"?"http://www.w3.org/1999/xhtml":n,r,l,r?r[0]:t.__k&&C$3(t,0),s,c),r!=null)for(u=r.length;u--;)r[u]!=null&&_e(r[u]);s||(u="value",v!==void 0&&(v!==_[u]||d==="progress"&&!v||d==="option"&&v!==y[u])&&W$2(_,u,v,y[u],n),u="checked",g!==void 0&&g!==_[u]&&W$2(_,u,g,y[u],n));}return _}function q$1(_,e,t){try{if(typeof _=="function"){var i=typeof _.__u=="function";i&&_.__u(),i&&e==null||(_.__u=_(e));}else _.current=e;}catch(n){h$1.__e(n,t);}}function V(_,e,t){var i,n;if(h$1.unmount&&h$1.unmount(_),(i=_.ref)&&(i.current&&i.current!==_.__e||q$1(i,null,e)),(i=_.__c)!=null){if(i.componentWillUnmount)try{i.componentWillUnmount();}catch(r){h$1.__e(r,e);}i.base=i.__P=null;}if(i=_.__k)for(n=0;n<i.length;n++)i[n]&&V(i[n],e,t||typeof _.type!="function");t||_.__e==null||_e(_.__e),_.__c=_.__=_.__e=_.__d=void 0;}function ae(_,e,t){return this.constructor(_,t)}function de(_,e,t){var i,n,r,l;h$1.__&&h$1.__(_,e),n=(i="undefined"=="function")?null:e.__k,r=[],l=[],z$1(e,_=(e).__k=se(N,null,[_]),n||T$1,T$1,e.namespaceURI,n?null:e.firstChild?M$2.call(e.childNodes):null,r,n?n.__e:e.firstChild,i,l),re(r,_,l);}M$2=ee.slice,h$1={__e:function(_,e,t,i){for(var n,r,l;e=e.__;)if((n=e.__c)&&!n.__)try{if((r=n.constructor)&&r.getDerivedStateFromError!=null&&(n.setState(r.getDerivedStateFromError(_)),l=n.__d),n.componentDidCatch!=null&&(n.componentDidCatch(_,i||{}),l=n.__d),l)return n.__E=n}catch(s){_=s;}throw _}},X=0,ie=function(_){return _!=null&&_.constructor==null},F$1.prototype.setState=function(_,e){var t;t=this.__s!=null&&this.__s!==this.state?this.__s:this.__s=b$3({},this.state),typeof _=="function"&&(_=_(b$3({},t),this.props)),_&&b$3(t,_),_!=null&&this.__v&&(e&&this._sb.push(e),B(this));},F$1.prototype.forceUpdate=function(_){this.__v&&(this.__e=true,_&&this.__h.push(_),B(this));},F$1.prototype.render=N,x$2=[],Y=typeof Promise=="function"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,R=function(_,e){return _.__v.__b-e.__v.__b},H$1.__r=0,j=0,$=Q(false),O=Q(true);
+var M$3,h$1,X,ie,x$2,J,Y,R,j$1,$,O$1,T$2={},ee=[],le=/acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i,I=Array.isArray;function b$3(_,e){for(var t in e)_[t]=e[t];return _}function _e(_){var e=_.parentNode;e&&e.removeChild(_);}function se(_,e,t){var i,n,r,l={};for(r in e)r=="key"?i=e[r]:r=="ref"?n=e[r]:l[r]=e[r];if(arguments.length>2&&(l.children=arguments.length>3?M$3.call(arguments,2):t),typeof _=="function"&&_.defaultProps!=null)for(r in _.defaultProps)l[r]===void 0&&(l[r]=_.defaultProps[r]);return U$1(_,l,i,n,null)}function U$1(_,e,t,i,n){var r={type:_,props:e,key:t,ref:i,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,constructor:void 0,__v:n??++X,__i:-1,__u:0};return n==null&&h$1.vnode!=null&&h$1.vnode(r),r}function N(_){return _.children}function F$1(_,e){this.props=_,this.context=e;}function C$2(_,e){if(e==null)return _.__?C$2(_.__,_.__i+1):null;for(var t;e<_.__k.length;e++)if((t=_.__k[e])!=null&&t.__e!=null)return t.__e;return typeof _.type=="function"?C$2(_):null}function te(_){var e,t;if((_=_.__)!=null&&_.__c!=null){for(_.__e=_.__c.base=null,e=0;e<_.__k.length;e++)if((t=_.__k[e])!=null&&t.__e!=null){_.__e=_.__c.base=t.__e;break}return te(_)}}function B(_){(!_.__d&&(_.__d=true)&&x$2.push(_)&&!H$1.__r++||J!==h$1.debounceRendering)&&((J=h$1.debounceRendering)||Y)(H$1);}function H$1(){var _,e,t,i,n,r,l,s;for(x$2.sort(R);_=x$2.shift();)_.__d&&(e=x$2.length,i=void 0,r=(n=(t=_).__v).__e,l=[],s=[],t.__P&&((i=b$3({},n)).__v=n.__v+1,h$1.vnode&&h$1.vnode(i),z$1(t.__P,i,n,t.__n,t.__P.namespaceURI,32&n.__u?[r]:null,l,r??C$2(n),!!(32&n.__u),s),i.__v=n.__v,i.__.__k[i.__i]=i,re(l,i,s),i.__e!=r&&te(i)),x$2.length>e&&x$2.sort(R));H$1.__r=0;}function ne(_,e,t,i,n,r,l,s,c,u,p){var o,m,f,v,g,y=i&&i.__k||ee,a=e.length;for(t.__d=c,ue(t,e,y),c=t.__d,o=0;o<a;o++)(f=t.__k[o])!=null&&typeof f!="boolean"&&typeof f!="function"&&(m=f.__i===-1?T$2:y[f.__i]||T$2,f.__i=o,z$1(_,f,m,n,r,l,s,c,u,p),v=f.__e,f.ref&&m.ref!=f.ref&&(m.ref&&q$1(m.ref,null,f),p.push(f.ref,f.__c||v,f)),g==null&&v!=null&&(g=v),65536&f.__u||m.__k===f.__k?c=oe(f,c,_):typeof f.type=="function"&&f.__d!==void 0?c=f.__d:v&&(c=v.nextSibling),f.__d=void 0,f.__u&=-196609);t.__d=c,t.__e=g;}function ue(_,e,t){var i,n,r,l,s,c=e.length,u=t.length,p=u,o=0;for(_.__k=[],i=0;i<c;i++)l=i+o,(n=_.__k[i]=(n=e[i])==null||typeof n=="boolean"||typeof n=="function"?null:typeof n=="string"||typeof n=="number"||typeof n=="bigint"||n.constructor==String?U$1(null,n,null,null,null):I(n)?U$1(N,{children:n},null,null,null):n.constructor===void 0&&n.__b>0?U$1(n.type,n.props,n.key,n.ref?n.ref:null,n.__v):n)!=null?(n.__=_,n.__b=_.__b+1,s=ce(n,t,l,p),n.__i=s,r=null,s!==-1&&(p--,(r=t[s])&&(r.__u|=131072)),r==null||r.__v===null?(s==-1&&o--,typeof n.type!="function"&&(n.__u|=65536)):s!==l&&(s==l-1?o=s-l:s==l+1?o++:s>l?p>c-l?o+=s-l:o--:s<l&&o++,s!==i+o&&(n.__u|=65536))):(r=t[l])&&r.key==null&&r.__e&&(131072&r.__u)==0&&(r.__e==_.__d&&(_.__d=C$2(r)),V(r,r,false),t[l]=null,p--);if(p)for(i=0;i<u;i++)(r=t[i])!=null&&(131072&r.__u)==0&&(r.__e==_.__d&&(_.__d=C$2(r)),V(r,r));}function oe(_,e,t){var i,n;if(typeof _.type=="function"){for(i=_.__k,n=0;i&&n<i.length;n++)i[n]&&(i[n].__=_,e=oe(i[n],e,t));return e}_.__e!=e&&(e&&_.type&&!t.contains(e)&&(e=C$2(_)),t.insertBefore(_.__e,e||null),e=_.__e);do e=e&&e.nextSibling;while(e!=null&&e.nodeType===8);return e}function ce(_,e,t,i){var n=_.key,r=_.type,l=t-1,s=t+1,c=e[t];if(c===null||c&&n==c.key&&r===c.type&&(131072&c.__u)==0)return t;if(i>(c!=null&&(131072&c.__u)==0?1:0))for(;l>=0||s<e.length;){if(l>=0){if((c=e[l])&&(131072&c.__u)==0&&n==c.key&&r===c.type)return l;l--;}if(s<e.length){if((c=e[s])&&(131072&c.__u)==0&&n==c.key&&r===c.type)return s;s++;}}return  -1}function K(_,e,t){e[0]==="-"?_.setProperty(e,t??""):_[e]=t==null?"":typeof t!="number"||le.test(e)?t:t+"px";}function W$2(_,e,t,i,n){var r;e:if(e==="style")if(typeof t=="string")_.style.cssText=t;else {if(typeof i=="string"&&(_.style.cssText=i=""),i)for(e in i)t&&e in t||K(_.style,e,"");if(t)for(e in t)i&&t[e]===i[e]||K(_.style,e,t[e]);}else if(e[0]==="o"&&e[1]==="n")r=e!==(e=e.replace(/(PointerCapture)$|Capture$/i,"$1")),e=e.toLowerCase()in _||e==="onFocusOut"||e==="onFocusIn"?e.toLowerCase().slice(2):e.slice(2),_.l||(_.l={}),_.l[e+r]=t,t?i?t.u=i.u:(t.u=j$1,_.addEventListener(e,r?O$1:$,r)):_.removeEventListener(e,r?O$1:$,r);else {if(n=="http://www.w3.org/2000/svg")e=e.replace(/xlink(H|:h)/,"h").replace(/sName$/,"s");else if(e!="width"&&e!="height"&&e!="href"&&e!="list"&&e!="form"&&e!="tabIndex"&&e!="download"&&e!="rowSpan"&&e!="colSpan"&&e!="role"&&e!="popover"&&e in _)try{_[e]=t??"";break e}catch{}typeof t=="function"||(t==null||t===false&&e[4]!=="-"?_.removeAttribute(e):_.setAttribute(e,e=="popover"&&t==1?"":t));}}function Q(_){return function(e){if(this.l){var t=this.l[e.type+_];if(e.t==null)e.t=j$1++;else if(e.t<t.u)return;return t(h$1.event?h$1.event(e):e)}}}function z$1(_,e,t,i,n,r,l,s,c,u){var p,o,m,f,v,g,y,a,d,P,w,D,S,G,E,A,k=e.type;if(e.constructor!==void 0)return null;128&t.__u&&(c=!!(32&t.__u),r=[s=e.__e=t.__e]),(p=h$1.__b)&&p(e);e:if(typeof k=="function")try{if(a=e.props,d="prototype"in k&&k.prototype.render,P=(p=k.contextType)&&i[p.__c],w=p?P?P.props.value:p.__:i,t.__c?y=(o=e.__c=t.__c).__=o.__E:(d?e.__c=o=new k(a,w):(e.__c=o=new F$1(a,w),o.constructor=k,o.render=ae),P&&P.sub(o),o.props=a,o.state||(o.state={}),o.context=w,o.__n=i,m=o.__d=!0,o.__h=[],o._sb=[]),d&&o.__s==null&&(o.__s=o.state),d&&k.getDerivedStateFromProps!=null&&(o.__s==o.state&&(o.__s=b$3({},o.__s)),b$3(o.__s,k.getDerivedStateFromProps(a,o.__s))),f=o.props,v=o.state,o.__v=e,m)d&&k.getDerivedStateFromProps==null&&o.componentWillMount!=null&&o.componentWillMount(),d&&o.componentDidMount!=null&&o.__h.push(o.componentDidMount);else {if(d&&k.getDerivedStateFromProps==null&&a!==f&&o.componentWillReceiveProps!=null&&o.componentWillReceiveProps(a,w),!o.__e&&(o.shouldComponentUpdate!=null&&o.shouldComponentUpdate(a,o.__s,w)===!1||e.__v===t.__v)){for(e.__v!==t.__v&&(o.props=a,o.state=o.__s,o.__d=!1),e.__e=t.__e,e.__k=t.__k,e.__k.forEach(function(L){L&&(L.__=e);}),D=0;D<o._sb.length;D++)o.__h.push(o._sb[D]);o._sb=[],o.__h.length&&l.push(o);break e}o.componentWillUpdate!=null&&o.componentWillUpdate(a,o.__s,w),d&&o.componentDidUpdate!=null&&o.__h.push(function(){o.componentDidUpdate(f,v,g);});}if(o.context=w,o.props=a,o.__P=_,o.__e=!1,S=h$1.__r,G=0,d){for(o.state=o.__s,o.__d=!1,S&&S(e),p=o.render(o.props,o.state,o.context),E=0;E<o._sb.length;E++)o.__h.push(o._sb[E]);o._sb=[];}else do o.__d=!1,S&&S(e),p=o.render(o.props,o.state,o.context),o.state=o.__s;while(o.__d&&++G<25);o.state=o.__s,o.getChildContext!=null&&(i=b$3(b$3({},i),o.getChildContext())),d&&!m&&o.getSnapshotBeforeUpdate!=null&&(g=o.getSnapshotBeforeUpdate(f,v)),ne(_,I(A=p!=null&&p.type===N&&p.key==null?p.props.children:p)?A:[A],e,t,i,n,r,l,s,c,u),o.base=e.__e,e.__u&=-161,o.__h.length&&l.push(o),y&&(o.__E=o.__=null);}catch(L){if(e.__v=null,c||r!=null){for(e.__u|=c?160:32;s&&s.nodeType===8&&s.nextSibling;)s=s.nextSibling;r[r.indexOf(s)]=null,e.__e=s;}else e.__e=t.__e,e.__k=t.__k;h$1.__e(L,e,t);}else r==null&&e.__v===t.__v?(e.__k=t.__k,e.__e=t.__e):e.__e=pe(t.__e,e,t,i,n,r,l,c,u);(p=h$1.diffed)&&p(e);}function re(_,e,t){e.__d=void 0;for(var i=0;i<t.length;i++)q$1(t[i],t[++i],t[++i]);h$1.__c&&h$1.__c(e,_),_.some(function(n){try{_=n.__h,n.__h=[],_.some(function(r){r.call(n);});}catch(r){h$1.__e(r,n.__v);}});}function pe(_,e,t,i,n,r,l,s,c){var u,p,o,m,f,v,g,y=t.props,a=e.props,d=e.type;if(d==="svg"?n="http://www.w3.org/2000/svg":d==="math"?n="http://www.w3.org/1998/Math/MathML":n||(n="http://www.w3.org/1999/xhtml"),r!=null){for(u=0;u<r.length;u++)if((f=r[u])&&"setAttribute"in f==!!d&&(d?f.localName===d:f.nodeType===3)){_=f,r[u]=null;break}}if(_==null){if(d===null)return document.createTextNode(a);_=document.createElementNS(n,d,a.is&&a),r=null,s=false;}if(d===null)y===a||s&&_.data===a||(_.data=a);else {if(r=r&&M$3.call(_.childNodes),y=t.props||T$2,!s&&r!=null)for(y={},u=0;u<_.attributes.length;u++)y[(f=_.attributes[u]).name]=f.value;for(u in y)if(f=y[u],u!="children"){if(u=="dangerouslySetInnerHTML")o=f;else if(u!=="key"&&!(u in a)){if(u=="value"&&"defaultValue"in a||u=="checked"&&"defaultChecked"in a)continue;W$2(_,u,null,f,n);}}for(u in a)f=a[u],u=="children"?m=f:u=="dangerouslySetInnerHTML"?p=f:u=="value"?v=f:u=="checked"?g=f:u==="key"||s&&typeof f!="function"||y[u]===f||W$2(_,u,f,y[u],n);if(p)s||o&&(p.__html===o.__html||p.__html===_.innerHTML)||(_.innerHTML=p.__html),e.__k=[];else if(o&&(_.innerHTML=""),ne(_,I(m)?m:[m],e,t,i,d==="foreignObject"?"http://www.w3.org/1999/xhtml":n,r,l,r?r[0]:t.__k&&C$2(t,0),s,c),r!=null)for(u=r.length;u--;)r[u]!=null&&_e(r[u]);s||(u="value",v!==void 0&&(v!==_[u]||d==="progress"&&!v||d==="option"&&v!==y[u])&&W$2(_,u,v,y[u],n),u="checked",g!==void 0&&g!==_[u]&&W$2(_,u,g,y[u],n));}return _}function q$1(_,e,t){try{if(typeof _=="function"){var i=typeof _.__u=="function";i&&_.__u(),i&&e==null||(_.__u=_(e));}else _.current=e;}catch(n){h$1.__e(n,t);}}function V(_,e,t){var i,n;if(h$1.unmount&&h$1.unmount(_),(i=_.ref)&&(i.current&&i.current!==_.__e||q$1(i,null,e)),(i=_.__c)!=null){if(i.componentWillUnmount)try{i.componentWillUnmount();}catch(r){h$1.__e(r,e);}i.base=i.__P=null;}if(i=_.__k)for(n=0;n<i.length;n++)i[n]&&V(i[n],e,t||typeof _.type!="function");t||_.__e==null||_e(_.__e),_.__c=_.__=_.__e=_.__d=void 0;}function ae(_,e,t){return this.constructor(_,t)}function de(_,e,t){var i,n,r,l;h$1.__&&h$1.__(_,e),n=(i="undefined"=="function")?null:e.__k,r=[],l=[],z$1(e,_=(e).__k=se(N,null,[_]),n||T$2,T$2,e.namespaceURI,n?null:e.firstChild?M$3.call(e.childNodes):null,r,n?n.__e:e.firstChild,i,l),re(r,_,l);}M$3=ee.slice,h$1={__e:function(_,e,t,i){for(var n,r,l;e=e.__;)if((n=e.__c)&&!n.__)try{if((r=n.constructor)&&r.getDerivedStateFromError!=null&&(n.setState(r.getDerivedStateFromError(_)),l=n.__d),n.componentDidCatch!=null&&(n.componentDidCatch(_,i||{}),l=n.__d),l)return n.__E=n}catch(s){_=s;}throw _}},X=0,ie=function(_){return _!=null&&_.constructor==null},F$1.prototype.setState=function(_,e){var t;t=this.__s!=null&&this.__s!==this.state?this.__s:this.__s=b$3({},this.state),typeof _=="function"&&(_=_(b$3({},t),this.props)),_&&b$3(t,_),_!=null&&this.__v&&(e&&this._sb.push(e),B(this));},F$1.prototype.forceUpdate=function(_){this.__v&&(this.__e=true,_&&this.__h.push(_),B(this));},F$1.prototype.render=N,x$2=[],Y=typeof Promise=="function"?Promise.prototype.then.bind(Promise.resolve()):setTimeout,R=function(_,e){return _.__v.__b-e.__v.__b},H$1.__r=0,j$1=0,$=Q(false),O$1=Q(true);
 
 /* esm.sh - htm@3.1.1 */
-var a$2=function(p,f,c,n){var l;f[0]=0;for(var u=1;u<f.length;u++){var g=f[u++],o=f[u]?(f[0]|=g?1:2,c[f[u++]]):f[++u];g===3?n[0]=o:g===4?n[1]=Object.assign(n[1]||{},o):g===5?(n[1]=n[1]||{})[f[++u]]=o:g===6?n[1][f[++u]]+=o+"":g?(l=p.apply(o,a$2(p,o,c,["",null])),n.push(l),o[0]?f[0]|=2:(f[u-2]=0,f[u]=l)):n.push(o);}return n},M$1=new Map;function b$2(p){var f=M$1.get(this);return f||(f=new Map,M$1.set(this,f)),(f=a$2(this,f.get(p)||(f.set(p,f=(function(c){for(var n,l,u=1,g="",o="",i=[0],s=function(v){u===1&&(v||(g=g.replace(/^\s*\n\s*|\s*\n\s*$/g,"")))?i.push(0,v,g):u===3&&(v||g)?(i.push(3,v,g),u=2):u===2&&g==="..."&&v?i.push(4,v,0):u===2&&g&&!v?i.push(5,0,true,g):u>=5&&((g||!v&&u===5)&&(i.push(u,0,g,l),u=6),v&&(i.push(u,v,0,l),u=6)),g="";},t=0;t<c.length;t++){t&&(u===1&&s(),s(t));for(var w=0;w<c[t].length;w++)n=c[t][w],u===1?n==="<"?(s(),i=[i],u=3):g+=n:u===4?g==="--"&&n===">"?(u=1,g=""):g=n+g[0]:o?n===o?o="":g+=n:n==='"'||n==="'"?o=n:n===">"?(s(),u=1):u&&(n==="="?(u=5,l=g,g=""):n==="/"&&(u<5||c[t][w+1]===">")?(s(),u===3&&(i=i[0]),u=i,(i=i[0]).push(2,0,u),u=0):n===" "||n==="	"||n===`
+var a$1=function(p,f,c,n){var l;f[0]=0;for(var u=1;u<f.length;u++){var g=f[u++],o=f[u]?(f[0]|=g?1:2,c[f[u++]]):f[++u];g===3?n[0]=o:g===4?n[1]=Object.assign(n[1]||{},o):g===5?(n[1]=n[1]||{})[f[++u]]=o:g===6?n[1][f[++u]]+=o+"":g?(l=p.apply(o,a$1(p,o,c,["",null])),n.push(l),o[0]?f[0]|=2:(f[u-2]=0,f[u]=l)):n.push(o);}return n},M$2=new Map;function b$2(p){var f=M$2.get(this);return f||(f=new Map,M$2.set(this,f)),(f=a$1(this,f.get(p)||(f.set(p,f=(function(c){for(var n,l,u=1,g="",o="",i=[0],s=function(v){u===1&&(v||(g=g.replace(/^\s*\n\s*|\s*\n\s*$/g,"")))?i.push(0,v,g):u===3&&(v||g)?(i.push(3,v,g),u=2):u===2&&g==="..."&&v?i.push(4,v,0):u===2&&g&&!v?i.push(5,0,true,g):u>=5&&((g||!v&&u===5)&&(i.push(u,0,g,l),u=6),v&&(i.push(u,v,0,l),u=6)),g="";},t=0;t<c.length;t++){t&&(u===1&&s(),s(t));for(var w=0;w<c[t].length;w++)n=c[t][w],u===1?n==="<"?(s(),i=[i],u=3):g+=n:u===4?g==="--"&&n===">"?(u=1,g=""):g=n+g[0]:o?n===o?o="":g+=n:n==='"'||n==="'"?o=n:n===">"?(s(),u=1):u&&(n==="="?(u=5,l=g,g=""):n==="/"&&(u<5||c[t][w+1]===">")?(s(),u===3&&(i=i[0]),u=i,(i=i[0]).push(2,0,u),u=0):n===" "||n==="	"||n===`
 `||n==="\r"?(s(),u=2):g+=n),u===3&&g==="!--"&&(u=4,i=i[0]);}return s(),i})(p)),f),arguments,[])).length>1?f:f[0]}
 
 /* esm.sh - htm@3.1.1/preact */
 var p$3=b$2.bind(se);
 
-/* esm.sh - @preact/signals-core@1.14.1 */
-var C$2=Symbol.for("preact-signals");function p$2(){if(h>1)h--;else {var t,i=false;for((function(){var f=d$1;for(d$1=void 0;f!==void 0;)f.S.v===f.v&&(f.S.i=f.i),f=f.o;})();a$1!==void 0;){var o=a$1;for(a$1=void 0,c$2++;o!==void 0;){var r=o.u;if(o.u=void 0,o.f&=-3,!(8&o.f)&&b$1(o))try{o.c();}catch(f){i||(t=f,i=true);}o=r;}}if(c$2=0,h--,i)throw t}}var n=void 0;function S$2(t){var i=n;n=void 0;try{return t()}finally{n=i;}}var a$1=void 0,h=0,c$2=0,y=0,d$1=void 0,l$1=0;function m(t){if(n!==void 0){var i=t.n;if(i===void 0||i.t!==n)return i={i:0,S:t,p:n.s,n:void 0,t:n,e:void 0,x:void 0,r:i},n.s!==void 0&&(n.s.n=i),n.s=i,t.n=i,32&n.f&&t.S(i),i;if(i.i===-1)return i.i=0,i.n!==void 0&&(i.n.p=i.p,i.p!==void 0&&(i.p.n=i.n),i.p=n.s,i.n=void 0,n.s.n=i,n.s=i),i}}function s(t,i){this.v=t,this.i=0,this.n=void 0,this.t=void 0,this.l=0,this.W=i?.watched,this.Z=i?.unwatched,this.name=i?.name;}s.prototype.brand=C$2;s.prototype.h=function(){return  true};s.prototype.S=function(t){var i=this,o=this.t;o!==t&&t.e===void 0&&(t.x=o,this.t=t,o!==void 0?o.e=t:S$2(function(){var r;(r=i.W)==null||r.call(i);}));};s.prototype.U=function(t){var i=this;if(this.t!==void 0){var o=t.e,r=t.x;o!==void 0&&(o.x=r,t.e=void 0),r!==void 0&&(r.e=o,t.x=void 0),t===this.t&&(this.t=r,r===void 0&&S$2(function(){var f;(f=i.Z)==null||f.call(i);}));}};s.prototype.subscribe=function(t){var i=this;return W$1(function(){var o=i.value,r=n;n=void 0;try{t(o);}finally{n=r;}},{name:"sub"})};s.prototype.valueOf=function(){return this.value};s.prototype.toString=function(){return this.value+""};s.prototype.toJSON=function(){return this.value};s.prototype.peek=function(){var t=n;n=void 0;try{return this.value}finally{n=t;}};Object.defineProperty(s.prototype,"value",{get:function(){var t=m(this);return t!==void 0&&(t.i=this.i),this.v},set:function(t){if(t!==this.v){if(c$2>100)throw new Error("Cycle detected");((function(o){h!==0&&c$2===0&&o.l!==y&&(o.l=y,d$1={S:o,v:o.v,i:o.i,o:d$1});}))(this),this.v=t,this.i++,l$1++,h++;try{for(var i=this.t;i!==void 0;i=i.x)i.t.N();}finally{p$2();}}}});function P(t,i){return new s(t,i)}function b$1(t){for(var i=t.s;i!==void 0;i=i.n)if(i.S.i!==i.i||!i.S.h()||i.S.i!==i.i)return  true;return  false}function x$1(t){for(var i=t.s;i!==void 0;i=i.n){var o=i.S.n;if(o!==void 0&&(i.r=o),i.S.n=i,i.i=-1,i.n===void 0){t.s=i;break}}}function g$1(t){for(var i=t.s,o=void 0;i!==void 0;){var r=i.p;i.i===-1?(i.S.U(i),r!==void 0&&(r.n=i.n),i.n!==void 0&&(i.n.p=r)):o=i,i.S.n=i.r,i.r!==void 0&&(i.r=void 0),i=r;}t.s=o;}function v$1(t,i){s.call(this,void 0),this.x=t,this.s=void 0,this.g=l$1-1,this.f=4,this.W=i?.watched,this.Z=i?.unwatched,this.name=i?.name;}v$1.prototype=new s;v$1.prototype.h=function(){if(this.f&=-3,1&this.f)return  false;if((36&this.f)==32||(this.f&=-5,this.g===l$1))return  true;if(this.g=l$1,this.f|=1,this.i>0&&!b$1(this))return this.f&=-2,true;var t=n;try{x$1(this),n=this;var i=this.x();(16&this.f||this.v!==i||this.i===0)&&(this.v=i,this.f&=-17,this.i++);}catch(o){this.v=o,this.f|=16,this.i++;}return n=t,g$1(this),this.f&=-2,true};v$1.prototype.S=function(t){if(this.t===void 0){this.f|=36;for(var i=this.s;i!==void 0;i=i.n)i.S.S(i);}s.prototype.S.call(this,t);};v$1.prototype.U=function(t){if(this.t!==void 0&&(s.prototype.U.call(this,t),this.t===void 0)){this.f&=-33;for(var i=this.s;i!==void 0;i=i.n)i.S.U(i);}};v$1.prototype.N=function(){if(!(2&this.f)){this.f|=6;for(var t=this.t;t!==void 0;t=t.x)t.t.N();}};Object.defineProperty(v$1.prototype,"value",{get:function(){if(1&this.f)throw new Error("Cycle detected");var t=m(this);if(this.h(),t!==void 0&&(t.i=this.i),16&this.f)throw this.v;return this.v}});function J(t,i){return new v$1(t,i)}function E$1(t){var i=t.m;if(t.m=void 0,typeof i=="function"){h++;var o=n;n=void 0;try{i();}catch(r){throw t.f&=-2,t.f|=8,w$1(t),r}finally{n=o,p$2();}}}function w$1(t){for(var i=t.s;i!==void 0;i=i.n)i.S.U(i);t.x=void 0,t.s=void 0,E$1(t);}function k$1(t){if(n!==this)throw new Error("Out-of-order effect");g$1(this),n=t,this.f&=-2,8&this.f&&w$1(this),p$2();}function u(t,i){this.x=t,this.m=void 0,this.s=void 0,this.u=void 0,this.f=32,this.name=i?.name;}u.prototype.c=function(){var t=this.S();try{if(8&this.f||this.x===void 0)return;var i=this.x();typeof i=="function"&&(this.m=i);}finally{t();}};u.prototype.S=function(){if(1&this.f)throw new Error("Cycle detected");this.f|=1,this.f&=-9,E$1(this),x$1(this),h++;var t=n;return n=this,k$1.bind(this,t)};u.prototype.N=function(){2&this.f||(this.f|=2,this.u=a$1,a$1=this);};u.prototype.d=function(){this.f|=8,1&this.f||w$1(this);};u.prototype.dispose=function(){this.d();};function W$1(t,i){var o=new u(t,i);try{o.c();}catch(f){throw o.d(),f}var r=o.d.bind(o);return r[Symbol.dispose]=r,r}
+/* esm.sh - @preact/signals-core@1.14.4 */
+var j=Symbol.for("preact-signals");function S$2(){if(v$1>1)v$1--;else {var t,i=false;for((function(){var f=p$2;for(p$2=void 0;f!==void 0;){var w=f.S;if(w.v===f.v)for(var a=w.t;a!==void 0;a=a.x)a.i===f.i&&(a.i=w.i);f=f.o;}})();c$2!==void 0;){var o=c$2;for(c$2=void 0,l$1++;o!==void 0;){var r=o.u;if(o.u=void 0,o.f&=-3,!(8&o.f)&&g$1(o))try{o.c();}catch(f){i||(t=f,i=true);}o=r;}}if(l$1=0,v$1--,i)throw t}}var e,n=void 0;function d$1(t){var i=n,o=e;n=void 0,e=void 0;try{return t()}finally{n=i,e=o;}}var c$2=void 0,v$1=0,l$1=0,m=0,p$2=void 0,y=0;function x$1(t){if(n!==void 0){var i=t.n;if(i===void 0||i.t!==n)return i={i:0,S:t,p:n.s,n:void 0,t:n,e:void 0,x:void 0,r:i},n.s!==void 0&&(n.s.n=i),n.s=i,t.n=i,32&n.f&&t.S(i),i;if(i.i===-1)return i.i=0,i.n!==void 0&&(i.n.p=i.p,i.p!==void 0&&(i.p.n=i.n),i.p=n.s,i.n=void 0,n.s.n=i,n.s=i),i}}function s(t,i){this.v=t,this.i=0,this.n=void 0,this.t=void 0,this.l=0,this.W=i?.watched,this.Z=i?.unwatched,this.name=i?.name;}s.prototype.brand=j;s.prototype.h=function(){return  true};s.prototype.S=function(t){var i=this,o=this.t;o!==t&&t.e===void 0&&(t.x=o,this.t=t,o!==void 0?o.e=t:d$1(function(){var r;(r=i.W)==null||r.call(i);}));};s.prototype.U=function(t){var i=this;if(this.t!==void 0){var o=t.e,r=t.x;o!==void 0&&(o.x=r,t.e=void 0),r!==void 0&&(r.e=o,t.x=void 0),t===this.t&&(this.t=r,r===void 0&&d$1(function(){var f;(f=i.Z)==null||f.call(i);}));}};s.prototype.subscribe=function(t){var i=this;return Z(function(){var o=i.value;d$1(function(){return t(o)});},{name:"sub"})};s.prototype.valueOf=function(){return this.value};s.prototype.toString=function(){return this.value+""};s.prototype.toJSON=function(){return this.value};s.prototype.peek=function(){var t=this;return d$1(function(){return t.value})};Object.defineProperty(s.prototype,"value",{get:function(){var t=x$1(this);return t!==void 0&&(t.i=this.i),this.v},set:function(t){if(t!==this.v){if(l$1>100)throw new Error("Cycle detected");((function(o){v$1!==0&&l$1===0&&o.l!==m&&(o.l=m,p$2={S:o,v:o.v,i:o.i,o:p$2});}))(this),this.v=t,this.i++,y++,v$1++;try{for(var i=this.t;i!==void 0;i=i.x)i.t.N();}finally{S$2();}}}});function M$1(t,i){return new s(t,i)}function g$1(t){for(var i=t.s;i!==void 0;i=i.n)if(i.S.i!==i.i||!i.S.h()||i.S.i!==i.i)return  true;return  false}function E$1(t){for(var i=t.s;i!==void 0;i=i.n){var o=i.S.n;if(o!==void 0&&(i.r=o),i.S.n=i,i.i=-1,i.n===void 0){t.s=i;break}}}function O(t){for(var i=t.s,o=void 0;i!==void 0;){var r=i.p;i.i===-1?(i.S.U(i),r!==void 0&&(r.n=i.n),i.n!==void 0&&(i.n.p=r)):o=i,i.S.n=i.r,i.r!==void 0&&(i.r=void 0),i=r;}t.s=o;}function h(t,i){s.call(this,void 0,i),this.x=t,this.s=void 0,this.g=y-1,this.f=4;}h.prototype=new s;h.prototype.h=function(){if(this.f&=-3,1&this.f)return  false;if((36&this.f)==32||(this.f&=-5,this.g===y))return  true;if(this.g=y,this.f|=1,this.i>0&&!g$1(this))return this.f&=-2,true;var t=n;try{E$1(this),n=this;var i=this.x();(16&this.f||this.v!==i||this.i===0)&&(this.v=i,this.f&=-17,this.i++);}catch(o){this.v=o,this.f|=16,this.i++;}return n=t,O(this),this.f&=-2,true};h.prototype.S=function(t){if(this.t===void 0){this.f|=36;for(var i=this.s;i!==void 0;i=i.n)i.S.S(i);}s.prototype.S.call(this,t);};h.prototype.U=function(t){if(this.t!==void 0&&(s.prototype.U.call(this,t),this.t===void 0)){this.f&=-33;for(var i=this.s;i!==void 0;i=i.n)i.S.U(i);}};h.prototype.N=function(){if(!(2&this.f)){this.f|=6;for(var t=this.t;t!==void 0;t=t.x)t.t.N();}};Object.defineProperty(h.prototype,"value",{get:function(){if(1&this.f)throw new Error("Cycle detected");var t=x$1(this);if(this.h(),t!==void 0&&(t.i=this.i),16&this.f)throw this.v;return this.v}});function T$1(t,i){return new h(t,i)}function U(t){var i=t.m;if(t.m=void 0,typeof i=="function"){v$1++;var o=n;n=void 0;try{i();}catch(r){throw t.f&=-2,t.f|=8,b$1(t),r}finally{n=o,S$2();}}}function b$1(t){for(var i=t.s;i!==void 0;i=i.n)i.S.U(i);t.x=void 0,t.s=void 0,U(t);}function W$1(t){if(n!==this)throw new Error("Out-of-order effect");O(this),n=t,this.f&=-2,8&this.f&&b$1(this),S$2();}function u(t,i){this.x=t,this.m=void 0,this.s=void 0,this.u=void 0,this.f=32,this.name=i?.name,e&&e.push(this);}u.prototype.c=function(){var t=this.S();try{if(8&this.f||this.x===void 0)return;var i=this.x();typeof i=="function"&&(this.m=i);}finally{t();}};u.prototype.S=function(){if(1&this.f)throw new Error("Cycle detected");this.f|=1,this.f&=-9,U(this),E$1(this),v$1++;var t=n;return n=this,W$1.bind(this,t)};u.prototype.N=function(){2&this.f||(this.f|=2,this.u=c$2,c$2=this);};u.prototype.d=function(){this.f|=8,1&this.f||b$1(this);};u.prototype.dispose=function(){this.d();};function Z(t,i){var o=new u(t,i);try{o.c();}catch(f){throw o.d(),f}var r=o.d.bind(o);return r[Symbol.dispose]=r,r}
 
 /* esm.sh - preact@10.23.1/hooks */
 var c$1,r,d,b,v=0,x=[],o=h$1,g=o.__b,C$1=o.__r,A=o.diffed,D=o.__c,F=o.unmount,k=o.__;function l(t,_){o.__h&&o.__h(r,t,v||_),v=0;var u=r.__H||(r.__H={__:[],__h:[]});return t>=u.__.length&&u.__.push({}),u.__[t]}function z(t){return v=5,T(function(){return {current:t}},[])}function T(t,_){var u=l(c$1++,7);return E(u.__H,_)&&(u.__=t(),u.__H=_,u.__h=t),u.__}function M(t,_){return v=8,T(function(){return t},_)}function S$1(){for(var t;t=x.shift();)if(t.__P&&t.__H)try{t.__H.__h.forEach(p$1),t.__H.__h.forEach(H),t.__H.__h=[];}catch(_){t.__H.__h=[],o.__e(_,t.__v);}}o.__b=function(t){r=null,g&&g(t);},o.__=function(t,_){t&&_.__k&&_.__k.__m&&(t.__m=_.__k.__m),k&&k(t,_);},o.__r=function(t){C$1&&C$1(t),c$1=0;var _=(r=t.__c).__H;_&&(d===r?(_.__h=[],r.__h=[],_.__.forEach(function(u){u.__N&&(u.__=u.__N),u.i=u.__N=void 0;})):(_.__h.forEach(p$1),_.__h.forEach(H),_.__h=[],c$1=0)),d=r;},o.diffed=function(t){A&&A(t);var _=t.__c;_&&_.__H&&(_.__H.__h.length&&(x.push(_)!==1&&b===o.requestAnimationFrame||((b=o.requestAnimationFrame)||W)(S$1)),_.__H.__.forEach(function(u){u.i&&(u.__H=u.i),u.i=void 0;})),d=r=null;},o.__c=function(t,_){_.some(function(u){try{u.__h.forEach(p$1),u.__h=u.__h.filter(function(n){return !n.__||H(n)});}catch(n){_.some(function(i){i.__h&&(i.__h=[]);}),_=[],o.__e(n,u.__v);}}),D&&D(t,_);},o.unmount=function(t){F&&F(t);var _,u=t.__c;u&&u.__H&&(u.__H.__.forEach(function(n){try{p$1(n);}catch(i){_=i;}}),u.__H=void 0,_&&o.__e(_,u.__v));};var q=typeof requestAnimationFrame=="function";function W(t){var _,u=function(){clearTimeout(n),q&&cancelAnimationFrame(_),setTimeout(t);},n=setTimeout(u,100);q&&(_=requestAnimationFrame(u));}function p$1(t){var _=r,u=t.__c;typeof u=="function"&&(t.__c=void 0,u()),r=_;}function H(t){var _=r;t.__c=t.__(),r=_;}function E(t,_){return !t||t.length!==_.length||_.some(function(u,n){return u!==t[n]})}
 
 /* esm.sh - @preact/signals@1.3.0 */
-var p;function a(e,n){h$1[e]=n.bind(null,h$1[e]||function(){});}function c(e){p&&p(),p=e&&e.S();}function S(e){var n=this,t=e.data,i=w(t);i.value=t;var u=T(function(){for(var r=n.__v;r=r.__;)if(r.__c){r.__c.__$f|=4;break}return n.__$u.c=function(){var f;!ie(u.peek())&&((f=n.base)==null?void 0:f.nodeType)===3?n.base.data=u.peek():(n.__$f|=1,n.setState({}));},J(function(){var f=i.value.value;return f===0?0:f===true?"":f||""})},[]);return u.value}S.displayName="_st";Object.defineProperties(s.prototype,{constructor:{configurable:true,value:void 0},type:{configurable:true,value:S},props:{configurable:true,get:function(){return {data:this}}},__b:{configurable:true,value:1}});a("__b",function(e,n){if(typeof n.type=="string"){var t,i=n.props;for(var u in i)if(u!=="children"){var r=i[u];r instanceof s&&(t||(n.__np=t={}),t[u]=r,i[u]=r.peek());}}e(n);});a("__r",function(e,n){c();var t,i=n.__c;i&&(i.__$f&=-2,(t=i.__$u)===void 0&&(i.__$u=t=(function(u){var r;return W$1(function(){r=this;}),r.c=function(){i.__$f|=1,i.setState({});},r})())),c(t),e(n);});a("__e",function(e,n,t,i){c(),e(n,t,i);});a("diffed",function(e,n){c();var t;if(typeof n.type=="string"&&(t=n.__e)){var i=n.__np,u=n.props;if(i){var r=t.U;if(r)for(var f in r){var o=r[f];o!==void 0&&!(f in i)&&(o.d(),r[f]=void 0);}else t.U=r={};for(var _ in i){var v=r[_],m=i[_];v===void 0?(v=C(t,_,m,u),r[_]=v):v.o(m,u);}}}e(n);});function C(e,n,t,i){var u=n in e&&e.ownerSVGElement===void 0,r=P(t);return {o:function(f,o){r.value=f,i=o;},d:W$1(function(){var f=r.value.value;i[n]!==f&&(i[n]=f,u?e[n]=f:f?e.setAttribute(n,f):e.removeAttribute(n));})}}a("unmount",function(e,n){if(typeof n.type=="string"){var t=n.__e;if(t){var i=t.U;if(i){t.U=void 0;for(var u in i){var r=i[u];r&&r.d();}}}}else {var f=n.__c;if(f){var o=f.__$u;o&&(f.__$u=void 0,o.d());}}e(n);});a("__h",function(e,n,t,i){(i<3||i===9)&&(n.__$f|=2),e(n,t,i);});F$1.prototype.shouldComponentUpdate=function(e,n){var t=this.__$u;if(!(t&&t.s!==void 0||4&this.__$f)||3&this.__$f)return  true;for(var i in n)return  true;for(var u in e)if(u!=="__source"&&e[u]!==this.props[u])return  true;for(var r in this.props)if(!(r in e))return  true;return  false};function w(e){return T(function(){return P(e)},[])}
+var p;function a(e,n){h$1[e]=n.bind(null,h$1[e]||function(){});}function c(e){p&&p(),p=e&&e.S();}function S(e){var n=this,t=e.data,i=w(t);i.value=t;var u=T(function(){for(var r=n.__v;r=r.__;)if(r.__c){r.__c.__$f|=4;break}return n.__$u.c=function(){var f;!ie(u.peek())&&((f=n.base)==null?void 0:f.nodeType)===3?n.base.data=u.peek():(n.__$f|=1,n.setState({}));},T$1(function(){var f=i.value.value;return f===0?0:f===true?"":f||""})},[]);return u.value}S.displayName="_st";Object.defineProperties(s.prototype,{constructor:{configurable:true,value:void 0},type:{configurable:true,value:S},props:{configurable:true,get:function(){return {data:this}}},__b:{configurable:true,value:1}});a("__b",function(e,n){if(typeof n.type=="string"){var t,i=n.props;for(var u in i)if(u!=="children"){var r=i[u];r instanceof s&&(t||(n.__np=t={}),t[u]=r,i[u]=r.peek());}}e(n);});a("__r",function(e,n){c();var t,i=n.__c;i&&(i.__$f&=-2,(t=i.__$u)===void 0&&(i.__$u=t=(function(u){var r;return Z(function(){r=this;}),r.c=function(){i.__$f|=1,i.setState({});},r})())),c(t),e(n);});a("__e",function(e,n,t,i){c(),e(n,t,i);});a("diffed",function(e,n){c();var t;if(typeof n.type=="string"&&(t=n.__e)){var i=n.__np,u=n.props;if(i){var r=t.U;if(r)for(var f in r){var o=r[f];o!==void 0&&!(f in i)&&(o.d(),r[f]=void 0);}else t.U=r={};for(var _ in i){var v=r[_],m=i[_];v===void 0?(v=C(t,_,m,u),r[_]=v):v.o(m,u);}}}e(n);});function C(e,n,t,i){var u=n in e&&e.ownerSVGElement===void 0,r=M$1(t);return {o:function(f,o){r.value=f,i=o;},d:Z(function(){var f=r.value.value;i[n]!==f&&(i[n]=f,u?e[n]=f:f?e.setAttribute(n,f):e.removeAttribute(n));})}}a("unmount",function(e,n){if(typeof n.type=="string"){var t=n.__e;if(t){var i=t.U;if(i){t.U=void 0;for(var u in i){var r=i[u];r&&r.d();}}}}else {var f=n.__c;if(f){var o=f.__$u;o&&(f.__$u=void 0,o.d());}}e(n);});a("__h",function(e,n,t,i){(i<3||i===9)&&(n.__$f|=2),e(n,t,i);});F$1.prototype.shouldComponentUpdate=function(e,n){var t=this.__$u;if(!(t&&t.s!==void 0||4&this.__$f)||3&this.__$f)return  true;for(var i in n)return  true;for(var u in e)if(u!=="__source"&&e[u]!==this.props[u])return  true;for(var r in this.props)if(!(r in e))return  true;return  false};function w(e){return T(function(){return M$1(e)},[])}
 
-const routesLoadingSignal = P(false);
-      const routeLoadingErrorSignal = P(null);
-      const routesSignal = P([]);
+const routesLoadingSignal = M$1(false);
+      const routeLoadingErrorSignal = M$1(null);
+      const routesSignal = M$1([]);
       const NO_PACKAGE_NAME = "unknown";
 
-      const repartitionsSignal = J(() => {
+      const repartitionsSignal = T$1(() => {
         const routes = routesSignal.value;
         const methodRepartition = {};
         const packageRepartition = {};
@@ -1232,16 +1232,16 @@ const routesLoadingSignal = P(false);
           packageRepartition,
         };
       });
-      const methodRepartitionSignal = J(() => {
+      const methodRepartitionSignal = T$1(() => {
         return repartitionsSignal.value.methodRepartition;
       });
-      const packageRepartitionSignal = J(() => {
+      const packageRepartitionSignal = T$1(() => {
         return repartitionsSignal.value.packageRepartition;
       });
-      const availableMethodNamesSignal = J(() => {
+      const availableMethodNamesSignal = T$1(() => {
         return Object.keys(methodRepartitionSignal.value);
       });
-      const availablePackageNamesSignal = J(() => {
+      const availablePackageNamesSignal = T$1(() => {
         return Object.keys(packageRepartitionSignal.value);
       });
 
@@ -1390,7 +1390,7 @@ const routesLoadingSignal = P(false);
           </div>`;
       };
 
-      const documentUrlSignal = P(window.location.href);
+      const documentUrlSignal = M$1(window.location.href);
       window.addEventListener("popstate", async (popstateEvent) => {
         documentUrlSignal.value = popstateEvent.target.location.href;
       });
@@ -1456,7 +1456,7 @@ const routesLoadingSignal = P(false);
           if (existingSignal) {
             return existingSignal;
           }
-          const signalForFirstCall = J(() => {
+          const signalForFirstCall = T$1(() => {
             const url = documentUrlSignal.value;
             const valueInUrl = getter(url);
             return valueInUrl;

package/dist/formidable_index/jsenv_server_node_modules.js

@@ -297,41 +297,41 @@ var hasRequiredUtils;
 function requireUtils () {
 	if (hasRequiredUtils) return utils;
 	hasRequiredUtils = 1;
-	(function (exports$1) {
+	(function (exports) {
 		/**
 		 * Utilities for hex, bytes, CSPRNG.
 		 * @module
 		 */
 		/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-		Object.defineProperty(exports$1, "__esModule", { value: true });
-		exports$1.wrapXOFConstructorWithOpts = exports$1.wrapConstructorWithOpts = exports$1.wrapConstructor = exports$1.Hash = exports$1.nextTick = exports$1.swap32IfBE = exports$1.byteSwapIfBE = exports$1.swap8IfBE = exports$1.isLE = void 0;
-		exports$1.isBytes = isBytes;
-		exports$1.anumber = anumber;
-		exports$1.abytes = abytes;
-		exports$1.ahash = ahash;
-		exports$1.aexists = aexists;
-		exports$1.aoutput = aoutput;
-		exports$1.u8 = u8;
-		exports$1.u32 = u32;
-		exports$1.clean = clean;
-		exports$1.createView = createView;
-		exports$1.rotr = rotr;
-		exports$1.rotl = rotl;
-		exports$1.byteSwap = byteSwap;
-		exports$1.byteSwap32 = byteSwap32;
-		exports$1.bytesToHex = bytesToHex;
-		exports$1.hexToBytes = hexToBytes;
-		exports$1.asyncLoop = asyncLoop;
-		exports$1.utf8ToBytes = utf8ToBytes;
-		exports$1.bytesToUtf8 = bytesToUtf8;
-		exports$1.toBytes = toBytes;
-		exports$1.kdfInputToBytes = kdfInputToBytes;
-		exports$1.concatBytes = concatBytes;
-		exports$1.checkOpts = checkOpts;
-		exports$1.createHasher = createHasher;
-		exports$1.createOptHasher = createOptHasher;
-		exports$1.createXOFer = createXOFer;
-		exports$1.randomBytes = randomBytes;
+		Object.defineProperty(exports, "__esModule", { value: true });
+		exports.wrapXOFConstructorWithOpts = exports.wrapConstructorWithOpts = exports.wrapConstructor = exports.Hash = exports.nextTick = exports.swap32IfBE = exports.byteSwapIfBE = exports.swap8IfBE = exports.isLE = void 0;
+		exports.isBytes = isBytes;
+		exports.anumber = anumber;
+		exports.abytes = abytes;
+		exports.ahash = ahash;
+		exports.aexists = aexists;
+		exports.aoutput = aoutput;
+		exports.u8 = u8;
+		exports.u32 = u32;
+		exports.clean = clean;
+		exports.createView = createView;
+		exports.rotr = rotr;
+		exports.rotl = rotl;
+		exports.byteSwap = byteSwap;
+		exports.byteSwap32 = byteSwap32;
+		exports.bytesToHex = bytesToHex;
+		exports.hexToBytes = hexToBytes;
+		exports.asyncLoop = asyncLoop;
+		exports.utf8ToBytes = utf8ToBytes;
+		exports.bytesToUtf8 = bytesToUtf8;
+		exports.toBytes = toBytes;
+		exports.kdfInputToBytes = kdfInputToBytes;
+		exports.concatBytes = concatBytes;
+		exports.checkOpts = checkOpts;
+		exports.createHasher = createHasher;
+		exports.createOptHasher = createOptHasher;
+		exports.createXOFer = createXOFer;
+		exports.randomBytes = randomBytes;
 		// We use WebCrypto aka globalThis.crypto, which exists in browsers and node.js 16+.
 		// node.js versions earlier than v19 don't declare it in global scope.
 		// For node.js, package.json#exports field mapping rewrites import
@@ -404,7 +404,7 @@ function requireUtils () {
 		    return (word << shift) | ((word >>> (32 - shift)) >>> 0);
 		}
 		/** Is current platform little-endian? Most are. Big-Endian platform: IBM */
-		exports$1.isLE = (() => new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44)();
+		exports.isLE = (() => new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44)();
 		/** The byte swap operation for uint32 */
 		function byteSwap(word) {
 		    return (((word << 24) & 0xff000000) |
@@ -413,11 +413,11 @@ function requireUtils () {
 		        ((word >>> 24) & 0xff));
 		}
 		/** Conditionally byte swap if on a big-endian platform */
-		exports$1.swap8IfBE = exports$1.isLE
+		exports.swap8IfBE = exports.isLE
 		    ? (n) => n
 		    : (n) => byteSwap(n);
 		/** @deprecated */
-		exports$1.byteSwapIfBE = exports$1.swap8IfBE;
+		exports.byteSwapIfBE = exports.swap8IfBE;
 		/** In place byte swap for Uint32Array */
 		function byteSwap32(arr) {
 		    for (let i = 0; i < arr.length; i++) {
@@ -425,7 +425,7 @@ function requireUtils () {
 		    }
 		    return arr;
 		}
-		exports$1.swap32IfBE = exports$1.isLE
+		exports.swap32IfBE = exports.isLE
 		    ? (u) => u
 		    : byteSwap32;
 		// Built-in hex conversion https://caniuse.com/mdn-javascript_builtins_uint8array_fromhex
@@ -493,7 +493,7 @@ function requireUtils () {
 		 * next scheduler queue processing step and this is exactly what we need.
 		 */
 		const nextTick = async () => { };
-		exports$1.nextTick = nextTick;
+		exports.nextTick = nextTick;
 		/** Returns control to thread each 'tick' ms to avoid blocking. */
 		async function asyncLoop(iters, tick, cb) {
 		    let ts = Date.now();
@@ -503,7 +503,7 @@ function requireUtils () {
 		        const diff = Date.now() - ts;
 		        if (diff >= 0 && diff < tick)
 		            continue;
-		        await (0, exports$1.nextTick)();
+		        await (0, exports.nextTick)();
 		        ts += diff;
 		    }
 		}
@@ -569,7 +569,7 @@ function requireUtils () {
 		/** For runtime check if class implements interface */
 		class Hash {
 		}
-		exports$1.Hash = Hash;
+		exports.Hash = Hash;
 		/** Wraps hash function, creating an interface on top of it */
 		function createHasher(hashCons) {
 		    const hashC = (msg) => hashCons().update(toBytes(msg)).digest();
@@ -595,9 +595,9 @@ function requireUtils () {
 		    hashC.create = (opts) => hashCons(opts);
 		    return hashC;
 		}
-		exports$1.wrapConstructor = createHasher;
-		exports$1.wrapConstructorWithOpts = createOptHasher;
-		exports$1.wrapXOFConstructorWithOpts = createXOFer;
+		exports.wrapConstructor = createHasher;
+		exports.wrapConstructorWithOpts = createOptHasher;
+		exports.wrapXOFConstructorWithOpts = createXOFer;
 		/** Cryptographically secure PRNG. Uses internal OS-level `crypto.getRandomValues`. */
 		function randomBytes(bytesLength = 32) {
 		    if (crypto_1.crypto && typeof crypto_1.crypto.getRandomValues === 'function') {

package/dist/jsenv_server.js

@@ -2907,6 +2907,30 @@ const trackHttp1ServerPendingRequests = (nodeServer) => {
  * But we don't really need a class so we are just returning a regular object under the hood
  */
 
+/**
+ * Return this from a route `fetch` to accept a websocket upgrade on that
+ * endpoint.
+ *
+ * @param {(websocket: import("ws").WebSocket) => void | (() => void)} webSocketHandler
+ *   Called with the raw `ws` socket once the upgrade completes. Use
+ *   `websocket.on("message", …)` / `websocket.send(…)`. If it returns a
+ *   function, that function runs as cleanup when the socket closes.
+ * @param {object} [init]
+ * @param {number} [init.status=101]
+ * @param {string} [init.statusText]
+ * @param {object} [init.headers]
+ *
+ * @example
+ * {
+ *   endpoint: "GET /chat.websocket",
+ *   fetch: () => new WebSocketResponse((websocket) => {
+ *     websocket.on("message", (data) => websocket.send(data));
+ *     return () => {
+ *       // socket closed
+ *     };
+ *   }),
+ * }
+ */
 class WebSocketResponse {
   constructor(
     webSocketHandler,
@@ -2986,7 +3010,7 @@ const getWebSocketHandler = (responseProperties) => {
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => serverEvents.fetch(request)
+ *   fetch: (request) => serverEvents.fetch(request)
  * }
  */
 class ServerEvents {
@@ -3044,7 +3068,7 @@ class ServerEvents {
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => events.fetch(request)
+ *   fetch: (request) => events.fetch(request)
  * }
  */
 class LazyServerEvents {
@@ -3930,6 +3954,24 @@ const pathnameToParentPathname = (pathname) => {
   return pathname.slice(0, slashLastIndex + 1);
 };
 
+const urlIsOrIsInsideOf = (url, otherUrl) => {
+  const urlObject = new URL(url);
+  const otherUrlObject = new URL(otherUrl);
+
+  if (urlObject.origin !== otherUrlObject.origin) {
+    return false;
+  }
+
+  const urlPathname = urlObject.pathname;
+  const otherUrlPathname = otherUrlObject.pathname;
+  if (urlPathname === otherUrlPathname) {
+    return true;
+  }
+
+  const isInside = urlPathname.startsWith(otherUrlPathname);
+  return isInside;
+};
+
 const urlToFileSystemPath = (url) => {
   const urlObject = new URL(url);
   let { origin, pathname, hash } = urlObject;
@@ -8734,8 +8776,14 @@ const fetchFileSystem = async (
   } else {
     resource = request.resource.slice(1);
   }
-  const filesystemUrl = new URL(resource, directoryUrl);
+  const filesystemUrl = new URL(resource, directoryUrlString);
   const urlString = asUrlString(filesystemUrl);
+  if (!urlIsOrIsInsideOf(urlString, directoryUrlString)) {
+    return {
+      status: 403,
+      statusText: "not allowed to read outside root directory",
+    };
+  }
 
   if (cacheControl === undefined) {
     cacheControl = isVersioned(request)

package/dist/ws/ws.js

@@ -9,6 +9,8 @@ import require$$7 from "node:url";
 import require$$0 from "node:zlib";
 import require$$0$1 from "node:buffer";
 
+var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
+
 function getDefaultExportFromCjs (x) {
 	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
 }
@@ -987,6 +989,10 @@ function requireReceiver () {
 	   *     extensions
 	   * @param {Boolean} [options.isServer=false] Specifies whether to operate in
 	   *     client or server mode
+	   * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=0] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=0] The maximum allowed message length
 	   * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
 	   *     not to skip UTF-8 validation for text and close messages
@@ -1001,6 +1007,8 @@ function requireReceiver () {
 	    this._binaryType = options.binaryType || BINARY_TYPES[0];
 	    this._extensions = options.extensions || {};
 	    this._isServer = !!options.isServer;
+	    this._maxBufferedChunks = options.maxBufferedChunks | 0;
+	    this._maxFragments = options.maxFragments | 0;
 	    this._maxPayload = options.maxPayload | 0;
 	    this._skipUTF8Validation = !!options.skipUTF8Validation;
 	    this[kWebSocket] = undefined;
@@ -1018,6 +1026,7 @@ function requireReceiver () {
 
 	    this._totalPayloadLength = 0;
 	    this._messageLength = 0;
+	    this._numFragments = 0;
 	    this._fragments = [];
 
 	    this._errored = false;
@@ -1036,6 +1045,22 @@ function requireReceiver () {
 	  _write(chunk, encoding, cb) {
 	    if (this._opcode === 0x08 && this._state == GET_INFO) return cb();
 
+	    if (
+	      this._maxBufferedChunks > 0 &&
+	      this._buffers.length >= this._maxBufferedChunks
+	    ) {
+	      cb(
+	        this.createError(
+	          RangeError,
+	          'Too many buffered chunks',
+	          false,
+	          1008,
+	          'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	        )
+	      );
+	      return;
+	    }
+
 	    this._bufferedBytes += chunk.length;
 	    this._buffers.push(chunk);
 	    this.startLoop(cb);
@@ -1425,6 +1450,19 @@ function requireReceiver () {
 	      return;
 	    }
 
+	    if (this._maxFragments > 0 && ++this._numFragments > this._maxFragments) {
+	      const error = this.createError(
+	        RangeError,
+	        'Too many message fragments',
+	        false,
+	        1008,
+	        'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	      );
+
+	      cb(error);
+	      return;
+	    }
+
 	    if (this._compressed) {
 	      this._state = INFLATING;
 	      this.decompress(data, cb);
@@ -1497,6 +1535,7 @@ function requireReceiver () {
 	    this._totalPayloadLength = 0;
 	    this._messageLength = 0;
 	    this._fragmented = 0;
+	    this._numFragments = 0;
 	    this._fragments = [];
 
 	    if (this._opcode === 2) {
@@ -1654,6 +1693,664 @@ function requireReceiver () {
 	return receiver$1;
 }
 
+var util = {};
+
+var isBuffer;
+var hasRequiredIsBuffer;
+
+function requireIsBuffer () {
+	if (hasRequiredIsBuffer) return isBuffer;
+	hasRequiredIsBuffer = 1;
+	isBuffer = function isBuffer(arg) {
+	  return arg instanceof Buffer;
+	};
+	return isBuffer;
+}
+
+var inherits = {exports: {}};
+
+var inherits_browser = {exports: {}};
+
+var hasRequiredInherits_browser;
+
+function requireInherits_browser () {
+	if (hasRequiredInherits_browser) return inherits_browser.exports;
+	hasRequiredInherits_browser = 1;
+	if (typeof Object.create === 'function') {
+	  // implementation from standard node.js 'util' module
+	  inherits_browser.exports = function inherits(ctor, superCtor) {
+	    ctor.super_ = superCtor;
+	    ctor.prototype = Object.create(superCtor.prototype, {
+	      constructor: {
+	        value: ctor,
+	        enumerable: false,
+	        writable: true,
+	        configurable: true
+	      }
+	    });
+	  };
+	} else {
+	  // old school shim for old browsers
+	  inherits_browser.exports = function inherits(ctor, superCtor) {
+	    ctor.super_ = superCtor;
+	    var TempCtor = function () {};
+	    TempCtor.prototype = superCtor.prototype;
+	    ctor.prototype = new TempCtor();
+	    ctor.prototype.constructor = ctor;
+	  };
+	}
+	return inherits_browser.exports;
+}
+
+var hasRequiredInherits;
+
+function requireInherits () {
+	if (hasRequiredInherits) return inherits.exports;
+	hasRequiredInherits = 1;
+	try {
+	  var util = requireUtil();
+	  if (typeof util.inherits !== 'function') throw '';
+	  inherits.exports = util.inherits;
+	} catch (e) {
+	  inherits.exports = requireInherits_browser();
+	}
+	return inherits.exports;
+}
+
+var hasRequiredUtil;
+
+function requireUtil () {
+	if (hasRequiredUtil) return util;
+	hasRequiredUtil = 1;
+	(function (exports) {
+		// Copyright Joyent, Inc. and other Node contributors.
+		//
+		// Permission is hereby granted, free of charge, to any person obtaining a
+		// copy of this software and associated documentation files (the
+		// "Software"), to deal in the Software without restriction, including
+		// without limitation the rights to use, copy, modify, merge, publish,
+		// distribute, sublicense, and/or sell copies of the Software, and to permit
+		// persons to whom the Software is furnished to do so, subject to the
+		// following conditions:
+		//
+		// The above copyright notice and this permission notice shall be included
+		// in all copies or substantial portions of the Software.
+		//
+		// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+		// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+		// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
+		// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+		// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+		// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+		// USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+		var formatRegExp = /%[sdj%]/g;
+		exports.format = function(f) {
+		  if (!isString(f)) {
+		    var objects = [];
+		    for (var i = 0; i < arguments.length; i++) {
+		      objects.push(inspect(arguments[i]));
+		    }
+		    return objects.join(' ');
+		  }
+
+		  var i = 1;
+		  var args = arguments;
+		  var len = args.length;
+		  var str = String(f).replace(formatRegExp, function(x) {
+		    if (x === '%%') return '%';
+		    if (i >= len) return x;
+		    switch (x) {
+		      case '%s': return String(args[i++]);
+		      case '%d': return Number(args[i++]);
+		      case '%j':
+		        try {
+		          return JSON.stringify(args[i++]);
+		        } catch (_) {
+		          return '[Circular]';
+		        }
+		      default:
+		        return x;
+		    }
+		  });
+		  for (var x = args[i]; i < len; x = args[++i]) {
+		    if (isNull(x) || !isObject(x)) {
+		      str += ' ' + x;
+		    } else {
+		      str += ' ' + inspect(x);
+		    }
+		  }
+		  return str;
+		};
+
+
+		// Mark that a method should not be used.
+		// Returns a modified function which warns once by default.
+		// If --no-deprecation is set, then it is a no-op.
+		exports.deprecate = function(fn, msg) {
+		  // Allow for deprecating things in the process of starting up.
+		  if (isUndefined(commonjsGlobal.process)) {
+		    return function() {
+		      return exports.deprecate(fn, msg).apply(this, arguments);
+		    };
+		  }
+
+		  if (process.noDeprecation === true) {
+		    return fn;
+		  }
+
+		  var warned = false;
+		  function deprecated() {
+		    if (!warned) {
+		      if (process.throwDeprecation) {
+		        throw new Error(msg);
+		      } else if (process.traceDeprecation) {
+		        console.trace(msg);
+		      } else {
+		        console.error(msg);
+		      }
+		      warned = true;
+		    }
+		    return fn.apply(this, arguments);
+		  }
+
+		  return deprecated;
+		};
+
+
+		var debugs = {};
+		var debugEnviron;
+		exports.debuglog = function(set) {
+		  if (isUndefined(debugEnviron))
+		    debugEnviron = process.env.NODE_DEBUG || '';
+		  set = set.toUpperCase();
+		  if (!debugs[set]) {
+		    if (new RegExp('\\b' + set + '\\b', 'i').test(debugEnviron)) {
+		      var pid = process.pid;
+		      debugs[set] = function() {
+		        var msg = exports.format.apply(exports, arguments);
+		        console.error('%s %d: %s', set, pid, msg);
+		      };
+		    } else {
+		      debugs[set] = function() {};
+		    }
+		  }
+		  return debugs[set];
+		};
+
+
+		/**
+		 * Echos the value of a value. Trys to print the value out
+		 * in the best way possible given the different types.
+		 *
+		 * @param {Object} obj The object to print out.
+		 * @param {Object} opts Optional options object that alters the output.
+		 */
+		/* legacy: obj, showHidden, depth, colors*/
+		function inspect(obj, opts) {
+		  // default options
+		  var ctx = {
+		    seen: [],
+		    stylize: stylizeNoColor
+		  };
+		  // legacy...
+		  if (arguments.length >= 3) ctx.depth = arguments[2];
+		  if (arguments.length >= 4) ctx.colors = arguments[3];
+		  if (isBoolean(opts)) {
+		    // legacy...
+		    ctx.showHidden = opts;
+		  } else if (opts) {
+		    // got an "options" object
+		    exports._extend(ctx, opts);
+		  }
+		  // set default options
+		  if (isUndefined(ctx.showHidden)) ctx.showHidden = false;
+		  if (isUndefined(ctx.depth)) ctx.depth = 2;
+		  if (isUndefined(ctx.colors)) ctx.colors = false;
+		  if (isUndefined(ctx.customInspect)) ctx.customInspect = true;
+		  if (ctx.colors) ctx.stylize = stylizeWithColor;
+		  return formatValue(ctx, obj, ctx.depth);
+		}
+		exports.inspect = inspect;
+
+
+		// http://en.wikipedia.org/wiki/ANSI_escape_code#graphics
+		inspect.colors = {
+		  'bold' : [1, 22],
+		  'italic' : [3, 23],
+		  'underline' : [4, 24],
+		  'inverse' : [7, 27],
+		  'white' : [37, 39],
+		  'grey' : [90, 39],
+		  'black' : [30, 39],
+		  'blue' : [34, 39],
+		  'cyan' : [36, 39],
+		  'green' : [32, 39],
+		  'magenta' : [35, 39],
+		  'red' : [31, 39],
+		  'yellow' : [33, 39]
+		};
+
+		// Don't use 'blue' not visible on cmd.exe
+		inspect.styles = {
+		  'special': 'cyan',
+		  'number': 'yellow',
+		  'boolean': 'yellow',
+		  'undefined': 'grey',
+		  'null': 'bold',
+		  'string': 'green',
+		  'date': 'magenta',
+		  // "name": intentionally not styling
+		  'regexp': 'red'
+		};
+
+
+		function stylizeWithColor(str, styleType) {
+		  var style = inspect.styles[styleType];
+
+		  if (style) {
+		    return '\u001b[' + inspect.colors[style][0] + 'm' + str +
+		           '\u001b[' + inspect.colors[style][1] + 'm';
+		  } else {
+		    return str;
+		  }
+		}
+
+
+		function stylizeNoColor(str, styleType) {
+		  return str;
+		}
+
+
+		function arrayToHash(array) {
+		  var hash = {};
+
+		  array.forEach(function(val, idx) {
+		    hash[val] = true;
+		  });
+
+		  return hash;
+		}
+
+
+		function formatValue(ctx, value, recurseTimes) {
+		  // Provide a hook for user-specified inspect functions.
+		  // Check that value is an object with an inspect function on it
+		  if (ctx.customInspect &&
+		      value &&
+		      isFunction(value.inspect) &&
+		      // Filter out the util module, it's inspect function is special
+		      value.inspect !== exports.inspect &&
+		      // Also filter out any prototype objects using the circular check.
+		      !(value.constructor && value.constructor.prototype === value)) {
+		    var ret = value.inspect(recurseTimes, ctx);
+		    if (!isString(ret)) {
+		      ret = formatValue(ctx, ret, recurseTimes);
+		    }
+		    return ret;
+		  }
+
+		  // Primitive types cannot have properties
+		  var primitive = formatPrimitive(ctx, value);
+		  if (primitive) {
+		    return primitive;
+		  }
+
+		  // Look up the keys of the object.
+		  var keys = Object.keys(value);
+		  var visibleKeys = arrayToHash(keys);
+
+		  if (ctx.showHidden) {
+		    keys = Object.getOwnPropertyNames(value);
+		  }
+
+		  // IE doesn't make error fields non-enumerable
+		  // http://msdn.microsoft.com/en-us/library/ie/dww52sbt(v=vs.94).aspx
+		  if (isError(value)
+		      && (keys.indexOf('message') >= 0 || keys.indexOf('description') >= 0)) {
+		    return formatError(value);
+		  }
+
+		  // Some type of object without properties can be shortcutted.
+		  if (keys.length === 0) {
+		    if (isFunction(value)) {
+		      var name = value.name ? ': ' + value.name : '';
+		      return ctx.stylize('[Function' + name + ']', 'special');
+		    }
+		    if (isRegExp(value)) {
+		      return ctx.stylize(RegExp.prototype.toString.call(value), 'regexp');
+		    }
+		    if (isDate(value)) {
+		      return ctx.stylize(Date.prototype.toString.call(value), 'date');
+		    }
+		    if (isError(value)) {
+		      return formatError(value);
+		    }
+		  }
+
+		  var base = '', array = false, braces = ['{', '}'];
+
+		  // Make Array say that they are Array
+		  if (isArray(value)) {
+		    array = true;
+		    braces = ['[', ']'];
+		  }
+
+		  // Make functions say that they are functions
+		  if (isFunction(value)) {
+		    var n = value.name ? ': ' + value.name : '';
+		    base = ' [Function' + n + ']';
+		  }
+
+		  // Make RegExps say that they are RegExps
+		  if (isRegExp(value)) {
+		    base = ' ' + RegExp.prototype.toString.call(value);
+		  }
+
+		  // Make dates with properties first say the date
+		  if (isDate(value)) {
+		    base = ' ' + Date.prototype.toUTCString.call(value);
+		  }
+
+		  // Make error with message first say the error
+		  if (isError(value)) {
+		    base = ' ' + formatError(value);
+		  }
+
+		  if (keys.length === 0 && (!array || value.length == 0)) {
+		    return braces[0] + base + braces[1];
+		  }
+
+		  if (recurseTimes < 0) {
+		    if (isRegExp(value)) {
+		      return ctx.stylize(RegExp.prototype.toString.call(value), 'regexp');
+		    } else {
+		      return ctx.stylize('[Object]', 'special');
+		    }
+		  }
+
+		  ctx.seen.push(value);
+
+		  var output;
+		  if (array) {
+		    output = formatArray(ctx, value, recurseTimes, visibleKeys, keys);
+		  } else {
+		    output = keys.map(function(key) {
+		      return formatProperty(ctx, value, recurseTimes, visibleKeys, key, array);
+		    });
+		  }
+
+		  ctx.seen.pop();
+
+		  return reduceToSingleString(output, base, braces);
+		}
+
+
+		function formatPrimitive(ctx, value) {
+		  if (isUndefined(value))
+		    return ctx.stylize('undefined', 'undefined');
+		  if (isString(value)) {
+		    var simple = '\'' + JSON.stringify(value).replace(/^"|"$/g, '')
+		                                             .replace(/'/g, "\\'")
+		                                             .replace(/\\"/g, '"') + '\'';
+		    return ctx.stylize(simple, 'string');
+		  }
+		  if (isNumber(value))
+		    return ctx.stylize('' + value, 'number');
+		  if (isBoolean(value))
+		    return ctx.stylize('' + value, 'boolean');
+		  // For some reason typeof null is "object", so special case here.
+		  if (isNull(value))
+		    return ctx.stylize('null', 'null');
+		}
+
+
+		function formatError(value) {
+		  return '[' + Error.prototype.toString.call(value) + ']';
+		}
+
+
+		function formatArray(ctx, value, recurseTimes, visibleKeys, keys) {
+		  var output = [];
+		  for (var i = 0, l = value.length; i < l; ++i) {
+		    if (hasOwnProperty(value, String(i))) {
+		      output.push(formatProperty(ctx, value, recurseTimes, visibleKeys,
+		          String(i), true));
+		    } else {
+		      output.push('');
+		    }
+		  }
+		  keys.forEach(function(key) {
+		    if (!key.match(/^\d+$/)) {
+		      output.push(formatProperty(ctx, value, recurseTimes, visibleKeys,
+		          key, true));
+		    }
+		  });
+		  return output;
+		}
+
+
+		function formatProperty(ctx, value, recurseTimes, visibleKeys, key, array) {
+		  var name, str, desc;
+		  desc = Object.getOwnPropertyDescriptor(value, key) || { value: value[key] };
+		  if (desc.get) {
+		    if (desc.set) {
+		      str = ctx.stylize('[Getter/Setter]', 'special');
+		    } else {
+		      str = ctx.stylize('[Getter]', 'special');
+		    }
+		  } else {
+		    if (desc.set) {
+		      str = ctx.stylize('[Setter]', 'special');
+		    }
+		  }
+		  if (!hasOwnProperty(visibleKeys, key)) {
+		    name = '[' + key + ']';
+		  }
+		  if (!str) {
+		    if (ctx.seen.indexOf(desc.value) < 0) {
+		      if (isNull(recurseTimes)) {
+		        str = formatValue(ctx, desc.value, null);
+		      } else {
+		        str = formatValue(ctx, desc.value, recurseTimes - 1);
+		      }
+		      if (str.indexOf('\n') > -1) {
+		        if (array) {
+		          str = str.split('\n').map(function(line) {
+		            return '  ' + line;
+		          }).join('\n').substr(2);
+		        } else {
+		          str = '\n' + str.split('\n').map(function(line) {
+		            return '   ' + line;
+		          }).join('\n');
+		        }
+		      }
+		    } else {
+		      str = ctx.stylize('[Circular]', 'special');
+		    }
+		  }
+		  if (isUndefined(name)) {
+		    if (array && key.match(/^\d+$/)) {
+		      return str;
+		    }
+		    name = JSON.stringify('' + key);
+		    if (name.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)) {
+		      name = name.substr(1, name.length - 2);
+		      name = ctx.stylize(name, 'name');
+		    } else {
+		      name = name.replace(/'/g, "\\'")
+		                 .replace(/\\"/g, '"')
+		                 .replace(/(^"|"$)/g, "'");
+		      name = ctx.stylize(name, 'string');
+		    }
+		  }
+
+		  return name + ': ' + str;
+		}
+
+
+		function reduceToSingleString(output, base, braces) {
+		  var length = output.reduce(function(prev, cur) {
+		    if (cur.indexOf('\n') >= 0) ;
+		    return prev + cur.replace(/\u001b\[\d\d?m/g, '').length + 1;
+		  }, 0);
+
+		  if (length > 60) {
+		    return braces[0] +
+		           (base === '' ? '' : base + '\n ') +
+		           ' ' +
+		           output.join(',\n  ') +
+		           ' ' +
+		           braces[1];
+		  }
+
+		  return braces[0] + base + ' ' + output.join(', ') + ' ' + braces[1];
+		}
+
+
+		// NOTE: These type checking functions intentionally don't use `instanceof`
+		// because it is fragile and can be easily faked with `Object.create()`.
+		function isArray(ar) {
+		  return Array.isArray(ar);
+		}
+		exports.isArray = isArray;
+
+		function isBoolean(arg) {
+		  return typeof arg === 'boolean';
+		}
+		exports.isBoolean = isBoolean;
+
+		function isNull(arg) {
+		  return arg === null;
+		}
+		exports.isNull = isNull;
+
+		function isNullOrUndefined(arg) {
+		  return arg == null;
+		}
+		exports.isNullOrUndefined = isNullOrUndefined;
+
+		function isNumber(arg) {
+		  return typeof arg === 'number';
+		}
+		exports.isNumber = isNumber;
+
+		function isString(arg) {
+		  return typeof arg === 'string';
+		}
+		exports.isString = isString;
+
+		function isSymbol(arg) {
+		  return typeof arg === 'symbol';
+		}
+		exports.isSymbol = isSymbol;
+
+		function isUndefined(arg) {
+		  return arg === void 0;
+		}
+		exports.isUndefined = isUndefined;
+
+		function isRegExp(re) {
+		  return isObject(re) && objectToString(re) === '[object RegExp]';
+		}
+		exports.isRegExp = isRegExp;
+
+		function isObject(arg) {
+		  return typeof arg === 'object' && arg !== null;
+		}
+		exports.isObject = isObject;
+
+		function isDate(d) {
+		  return isObject(d) && objectToString(d) === '[object Date]';
+		}
+		exports.isDate = isDate;
+
+		function isError(e) {
+		  return isObject(e) &&
+		      (objectToString(e) === '[object Error]' || e instanceof Error);
+		}
+		exports.isError = isError;
+
+		function isFunction(arg) {
+		  return typeof arg === 'function';
+		}
+		exports.isFunction = isFunction;
+
+		function isPrimitive(arg) {
+		  return arg === null ||
+		         typeof arg === 'boolean' ||
+		         typeof arg === 'number' ||
+		         typeof arg === 'string' ||
+		         typeof arg === 'symbol' ||  // ES6 symbol
+		         typeof arg === 'undefined';
+		}
+		exports.isPrimitive = isPrimitive;
+
+		exports.isBuffer = requireIsBuffer();
+
+		function objectToString(o) {
+		  return Object.prototype.toString.call(o);
+		}
+
+
+		function pad(n) {
+		  return n < 10 ? '0' + n.toString(10) : n.toString(10);
+		}
+
+
+		var months = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep',
+		              'Oct', 'Nov', 'Dec'];
+
+		// 26 Feb 16:19:34
+		function timestamp() {
+		  var d = new Date();
+		  var time = [pad(d.getHours()),
+		              pad(d.getMinutes()),
+		              pad(d.getSeconds())].join(':');
+		  return [d.getDate(), months[d.getMonth()], time].join(' ');
+		}
+
+
+		// log is just a thin wrapper to console.log that prepends a timestamp
+		exports.log = function() {
+		  console.log('%s - %s', timestamp(), exports.format.apply(exports, arguments));
+		};
+
+
+		/**
+		 * Inherit the prototype methods from one constructor into another.
+		 *
+		 * The Function.prototype.inherits from lang.js rewritten as a standalone
+		 * function (not on Function.prototype). NOTE: If this file is to be loaded
+		 * during bootstrapping this function needs to be rewritten using some native
+		 * functions as prototype setup using normal JavaScript does not work as
+		 * expected during bootstrapping (see mirror.js in r114903).
+		 *
+		 * @param {function} ctor Constructor function which needs to inherit the
+		 *     prototype.
+		 * @param {function} superCtor Constructor function to inherit prototype from.
+		 */
+		exports.inherits = requireInherits();
+
+		exports._extend = function(origin, add) {
+		  // Don't do anything if add isn't an object
+		  if (!add || !isObject(add)) return origin;
+
+		  var keys = Object.keys(add);
+		  var i = keys.length;
+		  while (i--) {
+		    origin[keys[i]] = add[keys[i]];
+		  }
+		  return origin;
+		};
+
+		function hasOwnProperty(obj, prop) {
+		  return Object.prototype.hasOwnProperty.call(obj, prop);
+		} 
+	} (util));
+	return util;
+}
+
 /* eslint no-unused-vars: ["error", { "varsIgnorePattern": "^Duplex" }] */
 
 var sender$1;
@@ -1665,6 +2362,9 @@ function requireSender () {
 
 	const { Duplex } = require$$0$2;
 	const { randomFillSync } = require$$1;
+	const {
+	  types: { isUint8Array }
+	} = requireUtil();
 
 	const PerMessageDeflate = requirePermessageDeflate();
 	const { EMPTY_BUFFER, kWebSocket, NOOP } = requireConstants();
@@ -1861,8 +2561,10 @@ function requireSender () {
 
 	      if (typeof data === 'string') {
 	        buf.write(data, 2);
-	      } else {
+	      } else if (isUint8Array(data)) {
 	        buf.set(data, 2);
+	      } else {
+	        throw new TypeError('Second argument must be a string or a Uint8Array');
 	      }
 	    }
 
@@ -2983,6 +3685,10 @@ function requireWebsocket () {
 	   *     multiple times in the same tick
 	   * @param {Function} [options.generateMask] The function used to generate the
 	   *     masking key
+	   * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=0] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=0] The maximum allowed message size
 	   * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
 	   *     not to skip UTF-8 validation for text and close messages
@@ -2994,6 +3700,8 @@ function requireWebsocket () {
 	      binaryType: this.binaryType,
 	      extensions: this._extensions,
 	      isServer: this._isServer,
+	      maxBufferedChunks: options.maxBufferedChunks,
+	      maxFragments: options.maxFragments,
 	      maxPayload: options.maxPayload,
 	      skipUTF8Validation: options.skipUTF8Validation
 	    });
@@ -3422,6 +4130,10 @@ function requireWebsocket () {
 	 *     masking key
 	 * @param {Number} [options.handshakeTimeout] Timeout in milliseconds for the
 	 *     handshake request
+	 * @param {Number} [options.maxBufferedChunks=262144] The maximum number of
+	 *     buffered data chunks
+	 * @param {Number} [options.maxFragments=16384] The maximum number of message
+	 *     fragments
 	 * @param {Number} [options.maxPayload=104857600] The maximum allowed message
 	 *     size
 	 * @param {Number} [options.maxRedirects=10] The maximum number of redirects
@@ -3442,6 +4154,8 @@ function requireWebsocket () {
 	    autoPong: true,
 	    closeTimeout: CLOSE_TIMEOUT,
 	    protocolVersion: protocolVersions[1],
+	    maxBufferedChunks: 256 * 1024,
+	    maxFragments: 16 * 1024,
 	    maxPayload: 100 * 1024 * 1024,
 	    skipUTF8Validation: false,
 	    perMessageDeflate: true,
@@ -3799,6 +4513,8 @@ function requireWebsocket () {
 	    websocket.setSocket(socket, head, {
 	      allowSynchronousEvents: opts.allowSynchronousEvents,
 	      generateMask: opts.generateMask,
+	      maxBufferedChunks: opts.maxBufferedChunks,
+	      maxFragments: opts.maxFragments,
 	      maxPayload: opts.maxPayload,
 	      skipUTF8Validation: opts.skipUTF8Validation
 	    });
@@ -4480,6 +5196,10 @@ function requireWebsocketServer () {
 	   *     called
 	   * @param {Function} [options.handleProtocols] A hook to handle protocols
 	   * @param {String} [options.host] The hostname where to bind the server
+	   * @param {Number} [options.maxBufferedChunks=262144] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=16384] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=104857600] The maximum allowed message
 	   *     size
 	   * @param {Boolean} [options.noServer=false] Enable no server mode
@@ -4502,6 +5222,8 @@ function requireWebsocketServer () {
 	    options = {
 	      allowSynchronousEvents: true,
 	      autoPong: true,
+	      maxBufferedChunks: 256 * 1024,
+	      maxFragments: 16 * 1024,
 	      maxPayload: 100 * 1024 * 1024,
 	      skipUTF8Validation: false,
 	      perMessageDeflate: false,
@@ -4861,6 +5583,8 @@ function requireWebsocketServer () {
 
 	    ws.setSocket(socket, head, {
 	      allowSynchronousEvents: this.options.allowSynchronousEvents,
+	      maxBufferedChunks: this.options.maxBufferedChunks,
+	      maxFragments: this.options.maxFragments,
 	      maxPayload: this.options.maxPayload,
 	      skipUTF8Validation: this.options.skipUTF8Validation
 	    });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsenv/server",
-  "version": "17.3.0",
+  "version": "17.4.0",
   "type": "module",
   "description": "A modern Node.js HTTP server with declarative routing, content negotiation, and WebSocket support",
   "repository": {
@@ -36,7 +36,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "launch-editor": "2.13.2"
+    "launch-editor": "2.14.1"
   },
   "devDependencies": {
     "@jsenv/abort": "../../tooling/abort",
@@ -56,9 +56,9 @@
     "@jsenv/utils": "../../tooling/utils",
     "eventsource": "4.1.0",
     "formidable": "3.5.4",
-    "playwright": "1.58.1",
-    "undici": "7.24.2",
-    "ws": "8.20.0"
+    "playwright": "1.61.1",
+    "undici": "8.8.0",
+    "ws": "8.21.1"
   },
   "publishConfig": {
     "access": "public"

package/src/plugins/filesystem/fetch_file.js

@@ -4,7 +4,11 @@
  * It is meant to be used inside "requestToResponse"
  */
 
-import { urlToExtension, urlToPathname } from "@jsenv/urls";
+import {
+  urlIsOrIsInsideOf,
+  urlToExtension,
+  urlToPathname,
+} from "@jsenv/urls";
 import { CONTENT_TYPE } from "@jsenv/utils/src/content_type/content_type.js";
 import { createReadStream, readFile, statSync } from "node:fs";
 
@@ -62,8 +66,14 @@ export const fetchFileSystem = async (
   } else {
     resource = request.resource.slice(1);
   }
-  const filesystemUrl = new URL(resource, directoryUrl);
+  const filesystemUrl = new URL(resource, directoryUrlString);
   const urlString = asUrlString(filesystemUrl);
+  if (!urlIsOrIsInsideOf(urlString, directoryUrlString)) {
+    return {
+      status: 403,
+      statusText: "not allowed to read outside root directory",
+    };
+  }
 
   if (cacheControl === undefined) {
     cacheControl = isVersioned(request)

package/src/server_events.js

@@ -49,7 +49,7 @@ import { WebSocketResponse } from "./web_socket_response.js";
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => serverEvents.fetch(request)
+ *   fetch: (request) => serverEvents.fetch(request)
  * }
  */
 export class ServerEvents {
@@ -107,7 +107,7 @@ export class ServerEvents {
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => events.fetch(request)
+ *   fetch: (request) => events.fetch(request)
  * }
  */
 export class LazyServerEvents {

package/src/web_socket_response.js

@@ -14,6 +14,30 @@
  * But we don't really need a class so we are just returning a regular object under the hood
  */
 
+/**
+ * Return this from a route `fetch` to accept a websocket upgrade on that
+ * endpoint.
+ *
+ * @param {(websocket: import("ws").WebSocket) => void | (() => void)} webSocketHandler
+ *   Called with the raw `ws` socket once the upgrade completes. Use
+ *   `websocket.on("message", …)` / `websocket.send(…)`. If it returns a
+ *   function, that function runs as cleanup when the socket closes.
+ * @param {object} [init]
+ * @param {number} [init.status=101]
+ * @param {string} [init.statusText]
+ * @param {object} [init.headers]
+ *
+ * @example
+ * {
+ *   endpoint: "GET /chat.websocket",
+ *   fetch: () => new WebSocketResponse((websocket) => {
+ *     websocket.on("message", (data) => websocket.send(data));
+ *     return () => {
+ *       // socket closed
+ *     };
+ *   }),
+ * }
+ */
 export class WebSocketResponse {
   constructor(
     webSocketHandler,