@jsenv/server 17.3.1 → 17.4.0

package/dist/formidable_index/jsenv_server_node_modules.js

@@ -297,41 +297,41 @@ var hasRequiredUtils;
 function requireUtils () {
 	if (hasRequiredUtils) return utils;
 	hasRequiredUtils = 1;
-	(function (exports$1) {
+	(function (exports) {
 		/**
 		 * Utilities for hex, bytes, CSPRNG.
 		 * @module
 		 */
 		/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-		Object.defineProperty(exports$1, "__esModule", { value: true });
-		exports$1.wrapXOFConstructorWithOpts = exports$1.wrapConstructorWithOpts = exports$1.wrapConstructor = exports$1.Hash = exports$1.nextTick = exports$1.swap32IfBE = exports$1.byteSwapIfBE = exports$1.swap8IfBE = exports$1.isLE = void 0;
-		exports$1.isBytes = isBytes;
-		exports$1.anumber = anumber;
-		exports$1.abytes = abytes;
-		exports$1.ahash = ahash;
-		exports$1.aexists = aexists;
-		exports$1.aoutput = aoutput;
-		exports$1.u8 = u8;
-		exports$1.u32 = u32;
-		exports$1.clean = clean;
-		exports$1.createView = createView;
-		exports$1.rotr = rotr;
-		exports$1.rotl = rotl;
-		exports$1.byteSwap = byteSwap;
-		exports$1.byteSwap32 = byteSwap32;
-		exports$1.bytesToHex = bytesToHex;
-		exports$1.hexToBytes = hexToBytes;
-		exports$1.asyncLoop = asyncLoop;
-		exports$1.utf8ToBytes = utf8ToBytes;
-		exports$1.bytesToUtf8 = bytesToUtf8;
-		exports$1.toBytes = toBytes;
-		exports$1.kdfInputToBytes = kdfInputToBytes;
-		exports$1.concatBytes = concatBytes;
-		exports$1.checkOpts = checkOpts;
-		exports$1.createHasher = createHasher;
-		exports$1.createOptHasher = createOptHasher;
-		exports$1.createXOFer = createXOFer;
-		exports$1.randomBytes = randomBytes;
+		Object.defineProperty(exports, "__esModule", { value: true });
+		exports.wrapXOFConstructorWithOpts = exports.wrapConstructorWithOpts = exports.wrapConstructor = exports.Hash = exports.nextTick = exports.swap32IfBE = exports.byteSwapIfBE = exports.swap8IfBE = exports.isLE = void 0;
+		exports.isBytes = isBytes;
+		exports.anumber = anumber;
+		exports.abytes = abytes;
+		exports.ahash = ahash;
+		exports.aexists = aexists;
+		exports.aoutput = aoutput;
+		exports.u8 = u8;
+		exports.u32 = u32;
+		exports.clean = clean;
+		exports.createView = createView;
+		exports.rotr = rotr;
+		exports.rotl = rotl;
+		exports.byteSwap = byteSwap;
+		exports.byteSwap32 = byteSwap32;
+		exports.bytesToHex = bytesToHex;
+		exports.hexToBytes = hexToBytes;
+		exports.asyncLoop = asyncLoop;
+		exports.utf8ToBytes = utf8ToBytes;
+		exports.bytesToUtf8 = bytesToUtf8;
+		exports.toBytes = toBytes;
+		exports.kdfInputToBytes = kdfInputToBytes;
+		exports.concatBytes = concatBytes;
+		exports.checkOpts = checkOpts;
+		exports.createHasher = createHasher;
+		exports.createOptHasher = createOptHasher;
+		exports.createXOFer = createXOFer;
+		exports.randomBytes = randomBytes;
 		// We use WebCrypto aka globalThis.crypto, which exists in browsers and node.js 16+.
 		// node.js versions earlier than v19 don't declare it in global scope.
 		// For node.js, package.json#exports field mapping rewrites import
@@ -404,7 +404,7 @@ function requireUtils () {
 		    return (word << shift) | ((word >>> (32 - shift)) >>> 0);
 		}
 		/** Is current platform little-endian? Most are. Big-Endian platform: IBM */
-		exports$1.isLE = (() => new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44)();
+		exports.isLE = (() => new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44)();
 		/** The byte swap operation for uint32 */
 		function byteSwap(word) {
 		    return (((word << 24) & 0xff000000) |
@@ -413,11 +413,11 @@ function requireUtils () {
 		        ((word >>> 24) & 0xff));
 		}
 		/** Conditionally byte swap if on a big-endian platform */
-		exports$1.swap8IfBE = exports$1.isLE
+		exports.swap8IfBE = exports.isLE
 		    ? (n) => n
 		    : (n) => byteSwap(n);
 		/** @deprecated */
-		exports$1.byteSwapIfBE = exports$1.swap8IfBE;
+		exports.byteSwapIfBE = exports.swap8IfBE;
 		/** In place byte swap for Uint32Array */
 		function byteSwap32(arr) {
 		    for (let i = 0; i < arr.length; i++) {
@@ -425,7 +425,7 @@ function requireUtils () {
 		    }
 		    return arr;
 		}
-		exports$1.swap32IfBE = exports$1.isLE
+		exports.swap32IfBE = exports.isLE
 		    ? (u) => u
 		    : byteSwap32;
 		// Built-in hex conversion https://caniuse.com/mdn-javascript_builtins_uint8array_fromhex
@@ -493,7 +493,7 @@ function requireUtils () {
 		 * next scheduler queue processing step and this is exactly what we need.
 		 */
 		const nextTick = async () => { };
-		exports$1.nextTick = nextTick;
+		exports.nextTick = nextTick;
 		/** Returns control to thread each 'tick' ms to avoid blocking. */
 		async function asyncLoop(iters, tick, cb) {
 		    let ts = Date.now();
@@ -503,7 +503,7 @@ function requireUtils () {
 		        const diff = Date.now() - ts;
 		        if (diff >= 0 && diff < tick)
 		            continue;
-		        await (0, exports$1.nextTick)();
+		        await (0, exports.nextTick)();
 		        ts += diff;
 		    }
 		}
@@ -569,7 +569,7 @@ function requireUtils () {
 		/** For runtime check if class implements interface */
 		class Hash {
 		}
-		exports$1.Hash = Hash;
+		exports.Hash = Hash;
 		/** Wraps hash function, creating an interface on top of it */
 		function createHasher(hashCons) {
 		    const hashC = (msg) => hashCons().update(toBytes(msg)).digest();
@@ -595,9 +595,9 @@ function requireUtils () {
 		    hashC.create = (opts) => hashCons(opts);
 		    return hashC;
 		}
-		exports$1.wrapConstructor = createHasher;
-		exports$1.wrapConstructorWithOpts = createOptHasher;
-		exports$1.wrapXOFConstructorWithOpts = createXOFer;
+		exports.wrapConstructor = createHasher;
+		exports.wrapConstructorWithOpts = createOptHasher;
+		exports.wrapXOFConstructorWithOpts = createXOFer;
 		/** Cryptographically secure PRNG. Uses internal OS-level `crypto.getRandomValues`. */
 		function randomBytes(bytesLength = 32) {
 		    if (crypto_1.crypto && typeof crypto_1.crypto.getRandomValues === 'function') {

package/dist/jsenv_server.js

@@ -2907,6 +2907,30 @@ const trackHttp1ServerPendingRequests = (nodeServer) => {
  * But we don't really need a class so we are just returning a regular object under the hood
  */
 
+/**
+ * Return this from a route `fetch` to accept a websocket upgrade on that
+ * endpoint.
+ *
+ * @param {(websocket: import("ws").WebSocket) => void | (() => void)} webSocketHandler
+ *   Called with the raw `ws` socket once the upgrade completes. Use
+ *   `websocket.on("message", …)` / `websocket.send(…)`. If it returns a
+ *   function, that function runs as cleanup when the socket closes.
+ * @param {object} [init]
+ * @param {number} [init.status=101]
+ * @param {string} [init.statusText]
+ * @param {object} [init.headers]
+ *
+ * @example
+ * {
+ *   endpoint: "GET /chat.websocket",
+ *   fetch: () => new WebSocketResponse((websocket) => {
+ *     websocket.on("message", (data) => websocket.send(data));
+ *     return () => {
+ *       // socket closed
+ *     };
+ *   }),
+ * }
+ */
 class WebSocketResponse {
   constructor(
     webSocketHandler,
@@ -2986,7 +3010,7 @@ const getWebSocketHandler = (responseProperties) => {
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => serverEvents.fetch(request)
+ *   fetch: (request) => serverEvents.fetch(request)
  * }
  */
 class ServerEvents {
@@ -3044,7 +3068,7 @@ class ServerEvents {
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => events.fetch(request)
+ *   fetch: (request) => events.fetch(request)
  * }
  */
 class LazyServerEvents {

package/dist/ws/ws.js

@@ -9,6 +9,8 @@ import require$$7 from "node:url";
 import require$$0 from "node:zlib";
 import require$$0$1 from "node:buffer";
 
+var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
+
 function getDefaultExportFromCjs (x) {
 	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
 }
@@ -987,6 +989,10 @@ function requireReceiver () {
 	   *     extensions
 	   * @param {Boolean} [options.isServer=false] Specifies whether to operate in
 	   *     client or server mode
+	   * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=0] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=0] The maximum allowed message length
 	   * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
 	   *     not to skip UTF-8 validation for text and close messages
@@ -1001,6 +1007,8 @@ function requireReceiver () {
 	    this._binaryType = options.binaryType || BINARY_TYPES[0];
 	    this._extensions = options.extensions || {};
 	    this._isServer = !!options.isServer;
+	    this._maxBufferedChunks = options.maxBufferedChunks | 0;
+	    this._maxFragments = options.maxFragments | 0;
 	    this._maxPayload = options.maxPayload | 0;
 	    this._skipUTF8Validation = !!options.skipUTF8Validation;
 	    this[kWebSocket] = undefined;
@@ -1018,6 +1026,7 @@ function requireReceiver () {
 
 	    this._totalPayloadLength = 0;
 	    this._messageLength = 0;
+	    this._numFragments = 0;
 	    this._fragments = [];
 
 	    this._errored = false;
@@ -1036,6 +1045,22 @@ function requireReceiver () {
 	  _write(chunk, encoding, cb) {
 	    if (this._opcode === 0x08 && this._state == GET_INFO) return cb();
 
+	    if (
+	      this._maxBufferedChunks > 0 &&
+	      this._buffers.length >= this._maxBufferedChunks
+	    ) {
+	      cb(
+	        this.createError(
+	          RangeError,
+	          'Too many buffered chunks',
+	          false,
+	          1008,
+	          'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	        )
+	      );
+	      return;
+	    }
+
 	    this._bufferedBytes += chunk.length;
 	    this._buffers.push(chunk);
 	    this.startLoop(cb);
@@ -1425,6 +1450,19 @@ function requireReceiver () {
 	      return;
 	    }
 
+	    if (this._maxFragments > 0 && ++this._numFragments > this._maxFragments) {
+	      const error = this.createError(
+	        RangeError,
+	        'Too many message fragments',
+	        false,
+	        1008,
+	        'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	      );
+
+	      cb(error);
+	      return;
+	    }
+
 	    if (this._compressed) {
 	      this._state = INFLATING;
 	      this.decompress(data, cb);
@@ -1497,6 +1535,7 @@ function requireReceiver () {
 	    this._totalPayloadLength = 0;
 	    this._messageLength = 0;
 	    this._fragmented = 0;
+	    this._numFragments = 0;
 	    this._fragments = [];
 
 	    if (this._opcode === 2) {
@@ -1654,6 +1693,664 @@ function requireReceiver () {
 	return receiver$1;
 }
 
+var util = {};
+
+var isBuffer;
+var hasRequiredIsBuffer;
+
+function requireIsBuffer () {
+	if (hasRequiredIsBuffer) return isBuffer;
+	hasRequiredIsBuffer = 1;
+	isBuffer = function isBuffer(arg) {
+	  return arg instanceof Buffer;
+	};
+	return isBuffer;
+}
+
+var inherits = {exports: {}};
+
+var inherits_browser = {exports: {}};
+
+var hasRequiredInherits_browser;
+
+function requireInherits_browser () {
+	if (hasRequiredInherits_browser) return inherits_browser.exports;
+	hasRequiredInherits_browser = 1;
+	if (typeof Object.create === 'function') {
+	  // implementation from standard node.js 'util' module
+	  inherits_browser.exports = function inherits(ctor, superCtor) {
+	    ctor.super_ = superCtor;
+	    ctor.prototype = Object.create(superCtor.prototype, {
+	      constructor: {
+	        value: ctor,
+	        enumerable: false,
+	        writable: true,
+	        configurable: true
+	      }
+	    });
+	  };
+	} else {
+	  // old school shim for old browsers
+	  inherits_browser.exports = function inherits(ctor, superCtor) {
+	    ctor.super_ = superCtor;
+	    var TempCtor = function () {};
+	    TempCtor.prototype = superCtor.prototype;
+	    ctor.prototype = new TempCtor();
+	    ctor.prototype.constructor = ctor;
+	  };
+	}
+	return inherits_browser.exports;
+}
+
+var hasRequiredInherits;
+
+function requireInherits () {
+	if (hasRequiredInherits) return inherits.exports;
+	hasRequiredInherits = 1;
+	try {
+	  var util = requireUtil();
+	  if (typeof util.inherits !== 'function') throw '';
+	  inherits.exports = util.inherits;
+	} catch (e) {
+	  inherits.exports = requireInherits_browser();
+	}
+	return inherits.exports;
+}
+
+var hasRequiredUtil;
+
+function requireUtil () {
+	if (hasRequiredUtil) return util;
+	hasRequiredUtil = 1;
+	(function (exports) {
+		// Copyright Joyent, Inc. and other Node contributors.
+		//
+		// Permission is hereby granted, free of charge, to any person obtaining a
+		// copy of this software and associated documentation files (the
+		// "Software"), to deal in the Software without restriction, including
+		// without limitation the rights to use, copy, modify, merge, publish,
+		// distribute, sublicense, and/or sell copies of the Software, and to permit
+		// persons to whom the Software is furnished to do so, subject to the
+		// following conditions:
+		//
+		// The above copyright notice and this permission notice shall be included
+		// in all copies or substantial portions of the Software.
+		//
+		// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+		// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+		// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
+		// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+		// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
+		// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+		// USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+		var formatRegExp = /%[sdj%]/g;
+		exports.format = function(f) {
+		  if (!isString(f)) {
+		    var objects = [];
+		    for (var i = 0; i < arguments.length; i++) {
+		      objects.push(inspect(arguments[i]));
+		    }
+		    return objects.join(' ');
+		  }
+
+		  var i = 1;
+		  var args = arguments;
+		  var len = args.length;
+		  var str = String(f).replace(formatRegExp, function(x) {
+		    if (x === '%%') return '%';
+		    if (i >= len) return x;
+		    switch (x) {
+		      case '%s': return String(args[i++]);
+		      case '%d': return Number(args[i++]);
+		      case '%j':
+		        try {
+		          return JSON.stringify(args[i++]);
+		        } catch (_) {
+		          return '[Circular]';
+		        }
+		      default:
+		        return x;
+		    }
+		  });
+		  for (var x = args[i]; i < len; x = args[++i]) {
+		    if (isNull(x) || !isObject(x)) {
+		      str += ' ' + x;
+		    } else {
+		      str += ' ' + inspect(x);
+		    }
+		  }
+		  return str;
+		};
+
+
+		// Mark that a method should not be used.
+		// Returns a modified function which warns once by default.
+		// If --no-deprecation is set, then it is a no-op.
+		exports.deprecate = function(fn, msg) {
+		  // Allow for deprecating things in the process of starting up.
+		  if (isUndefined(commonjsGlobal.process)) {
+		    return function() {
+		      return exports.deprecate(fn, msg).apply(this, arguments);
+		    };
+		  }
+
+		  if (process.noDeprecation === true) {
+		    return fn;
+		  }
+
+		  var warned = false;
+		  function deprecated() {
+		    if (!warned) {
+		      if (process.throwDeprecation) {
+		        throw new Error(msg);
+		      } else if (process.traceDeprecation) {
+		        console.trace(msg);
+		      } else {
+		        console.error(msg);
+		      }
+		      warned = true;
+		    }
+		    return fn.apply(this, arguments);
+		  }
+
+		  return deprecated;
+		};
+
+
+		var debugs = {};
+		var debugEnviron;
+		exports.debuglog = function(set) {
+		  if (isUndefined(debugEnviron))
+		    debugEnviron = process.env.NODE_DEBUG || '';
+		  set = set.toUpperCase();
+		  if (!debugs[set]) {
+		    if (new RegExp('\\b' + set + '\\b', 'i').test(debugEnviron)) {
+		      var pid = process.pid;
+		      debugs[set] = function() {
+		        var msg = exports.format.apply(exports, arguments);
+		        console.error('%s %d: %s', set, pid, msg);
+		      };
+		    } else {
+		      debugs[set] = function() {};
+		    }
+		  }
+		  return debugs[set];
+		};
+
+
+		/**
+		 * Echos the value of a value. Trys to print the value out
+		 * in the best way possible given the different types.
+		 *
+		 * @param {Object} obj The object to print out.
+		 * @param {Object} opts Optional options object that alters the output.
+		 */
+		/* legacy: obj, showHidden, depth, colors*/
+		function inspect(obj, opts) {
+		  // default options
+		  var ctx = {
+		    seen: [],
+		    stylize: stylizeNoColor
+		  };
+		  // legacy...
+		  if (arguments.length >= 3) ctx.depth = arguments[2];
+		  if (arguments.length >= 4) ctx.colors = arguments[3];
+		  if (isBoolean(opts)) {
+		    // legacy...
+		    ctx.showHidden = opts;
+		  } else if (opts) {
+		    // got an "options" object
+		    exports._extend(ctx, opts);
+		  }
+		  // set default options
+		  if (isUndefined(ctx.showHidden)) ctx.showHidden = false;
+		  if (isUndefined(ctx.depth)) ctx.depth = 2;
+		  if (isUndefined(ctx.colors)) ctx.colors = false;
+		  if (isUndefined(ctx.customInspect)) ctx.customInspect = true;
+		  if (ctx.colors) ctx.stylize = stylizeWithColor;
+		  return formatValue(ctx, obj, ctx.depth);
+		}
+		exports.inspect = inspect;
+
+
+		// http://en.wikipedia.org/wiki/ANSI_escape_code#graphics
+		inspect.colors = {
+		  'bold' : [1, 22],
+		  'italic' : [3, 23],
+		  'underline' : [4, 24],
+		  'inverse' : [7, 27],
+		  'white' : [37, 39],
+		  'grey' : [90, 39],
+		  'black' : [30, 39],
+		  'blue' : [34, 39],
+		  'cyan' : [36, 39],
+		  'green' : [32, 39],
+		  'magenta' : [35, 39],
+		  'red' : [31, 39],
+		  'yellow' : [33, 39]
+		};
+
+		// Don't use 'blue' not visible on cmd.exe
+		inspect.styles = {
+		  'special': 'cyan',
+		  'number': 'yellow',
+		  'boolean': 'yellow',
+		  'undefined': 'grey',
+		  'null': 'bold',
+		  'string': 'green',
+		  'date': 'magenta',
+		  // "name": intentionally not styling
+		  'regexp': 'red'
+		};
+
+
+		function stylizeWithColor(str, styleType) {
+		  var style = inspect.styles[styleType];
+
+		  if (style) {
+		    return '\u001b[' + inspect.colors[style][0] + 'm' + str +
+		           '\u001b[' + inspect.colors[style][1] + 'm';
+		  } else {
+		    return str;
+		  }
+		}
+
+
+		function stylizeNoColor(str, styleType) {
+		  return str;
+		}
+
+
+		function arrayToHash(array) {
+		  var hash = {};
+
+		  array.forEach(function(val, idx) {
+		    hash[val] = true;
+		  });
+
+		  return hash;
+		}
+
+
+		function formatValue(ctx, value, recurseTimes) {
+		  // Provide a hook for user-specified inspect functions.
+		  // Check that value is an object with an inspect function on it
+		  if (ctx.customInspect &&
+		      value &&
+		      isFunction(value.inspect) &&
+		      // Filter out the util module, it's inspect function is special
+		      value.inspect !== exports.inspect &&
+		      // Also filter out any prototype objects using the circular check.
+		      !(value.constructor && value.constructor.prototype === value)) {
+		    var ret = value.inspect(recurseTimes, ctx);
+		    if (!isString(ret)) {
+		      ret = formatValue(ctx, ret, recurseTimes);
+		    }
+		    return ret;
+		  }
+
+		  // Primitive types cannot have properties
+		  var primitive = formatPrimitive(ctx, value);
+		  if (primitive) {
+		    return primitive;
+		  }
+
+		  // Look up the keys of the object.
+		  var keys = Object.keys(value);
+		  var visibleKeys = arrayToHash(keys);
+
+		  if (ctx.showHidden) {
+		    keys = Object.getOwnPropertyNames(value);
+		  }
+
+		  // IE doesn't make error fields non-enumerable
+		  // http://msdn.microsoft.com/en-us/library/ie/dww52sbt(v=vs.94).aspx
+		  if (isError(value)
+		      && (keys.indexOf('message') >= 0 || keys.indexOf('description') >= 0)) {
+		    return formatError(value);
+		  }
+
+		  // Some type of object without properties can be shortcutted.
+		  if (keys.length === 0) {
+		    if (isFunction(value)) {
+		      var name = value.name ? ': ' + value.name : '';
+		      return ctx.stylize('[Function' + name + ']', 'special');
+		    }
+		    if (isRegExp(value)) {
+		      return ctx.stylize(RegExp.prototype.toString.call(value), 'regexp');
+		    }
+		    if (isDate(value)) {
+		      return ctx.stylize(Date.prototype.toString.call(value), 'date');
+		    }
+		    if (isError(value)) {
+		      return formatError(value);
+		    }
+		  }
+
+		  var base = '', array = false, braces = ['{', '}'];
+
+		  // Make Array say that they are Array
+		  if (isArray(value)) {
+		    array = true;
+		    braces = ['[', ']'];
+		  }
+
+		  // Make functions say that they are functions
+		  if (isFunction(value)) {
+		    var n = value.name ? ': ' + value.name : '';
+		    base = ' [Function' + n + ']';
+		  }
+
+		  // Make RegExps say that they are RegExps
+		  if (isRegExp(value)) {
+		    base = ' ' + RegExp.prototype.toString.call(value);
+		  }
+
+		  // Make dates with properties first say the date
+		  if (isDate(value)) {
+		    base = ' ' + Date.prototype.toUTCString.call(value);
+		  }
+
+		  // Make error with message first say the error
+		  if (isError(value)) {
+		    base = ' ' + formatError(value);
+		  }
+
+		  if (keys.length === 0 && (!array || value.length == 0)) {
+		    return braces[0] + base + braces[1];
+		  }
+
+		  if (recurseTimes < 0) {
+		    if (isRegExp(value)) {
+		      return ctx.stylize(RegExp.prototype.toString.call(value), 'regexp');
+		    } else {
+		      return ctx.stylize('[Object]', 'special');
+		    }
+		  }
+
+		  ctx.seen.push(value);
+
+		  var output;
+		  if (array) {
+		    output = formatArray(ctx, value, recurseTimes, visibleKeys, keys);
+		  } else {
+		    output = keys.map(function(key) {
+		      return formatProperty(ctx, value, recurseTimes, visibleKeys, key, array);
+		    });
+		  }
+
+		  ctx.seen.pop();
+
+		  return reduceToSingleString(output, base, braces);
+		}
+
+
+		function formatPrimitive(ctx, value) {
+		  if (isUndefined(value))
+		    return ctx.stylize('undefined', 'undefined');
+		  if (isString(value)) {
+		    var simple = '\'' + JSON.stringify(value).replace(/^"|"$/g, '')
+		                                             .replace(/'/g, "\\'")
+		                                             .replace(/\\"/g, '"') + '\'';
+		    return ctx.stylize(simple, 'string');
+		  }
+		  if (isNumber(value))
+		    return ctx.stylize('' + value, 'number');
+		  if (isBoolean(value))
+		    return ctx.stylize('' + value, 'boolean');
+		  // For some reason typeof null is "object", so special case here.
+		  if (isNull(value))
+		    return ctx.stylize('null', 'null');
+		}
+
+
+		function formatError(value) {
+		  return '[' + Error.prototype.toString.call(value) + ']';
+		}
+
+
+		function formatArray(ctx, value, recurseTimes, visibleKeys, keys) {
+		  var output = [];
+		  for (var i = 0, l = value.length; i < l; ++i) {
+		    if (hasOwnProperty(value, String(i))) {
+		      output.push(formatProperty(ctx, value, recurseTimes, visibleKeys,
+		          String(i), true));
+		    } else {
+		      output.push('');
+		    }
+		  }
+		  keys.forEach(function(key) {
+		    if (!key.match(/^\d+$/)) {
+		      output.push(formatProperty(ctx, value, recurseTimes, visibleKeys,
+		          key, true));
+		    }
+		  });
+		  return output;
+		}
+
+
+		function formatProperty(ctx, value, recurseTimes, visibleKeys, key, array) {
+		  var name, str, desc;
+		  desc = Object.getOwnPropertyDescriptor(value, key) || { value: value[key] };
+		  if (desc.get) {
+		    if (desc.set) {
+		      str = ctx.stylize('[Getter/Setter]', 'special');
+		    } else {
+		      str = ctx.stylize('[Getter]', 'special');
+		    }
+		  } else {
+		    if (desc.set) {
+		      str = ctx.stylize('[Setter]', 'special');
+		    }
+		  }
+		  if (!hasOwnProperty(visibleKeys, key)) {
+		    name = '[' + key + ']';
+		  }
+		  if (!str) {
+		    if (ctx.seen.indexOf(desc.value) < 0) {
+		      if (isNull(recurseTimes)) {
+		        str = formatValue(ctx, desc.value, null);
+		      } else {
+		        str = formatValue(ctx, desc.value, recurseTimes - 1);
+		      }
+		      if (str.indexOf('\n') > -1) {
+		        if (array) {
+		          str = str.split('\n').map(function(line) {
+		            return '  ' + line;
+		          }).join('\n').substr(2);
+		        } else {
+		          str = '\n' + str.split('\n').map(function(line) {
+		            return '   ' + line;
+		          }).join('\n');
+		        }
+		      }
+		    } else {
+		      str = ctx.stylize('[Circular]', 'special');
+		    }
+		  }
+		  if (isUndefined(name)) {
+		    if (array && key.match(/^\d+$/)) {
+		      return str;
+		    }
+		    name = JSON.stringify('' + key);
+		    if (name.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)) {
+		      name = name.substr(1, name.length - 2);
+		      name = ctx.stylize(name, 'name');
+		    } else {
+		      name = name.replace(/'/g, "\\'")
+		                 .replace(/\\"/g, '"')
+		                 .replace(/(^"|"$)/g, "'");
+		      name = ctx.stylize(name, 'string');
+		    }
+		  }
+
+		  return name + ': ' + str;
+		}
+
+
+		function reduceToSingleString(output, base, braces) {
+		  var length = output.reduce(function(prev, cur) {
+		    if (cur.indexOf('\n') >= 0) ;
+		    return prev + cur.replace(/\u001b\[\d\d?m/g, '').length + 1;
+		  }, 0);
+
+		  if (length > 60) {
+		    return braces[0] +
+		           (base === '' ? '' : base + '\n ') +
+		           ' ' +
+		           output.join(',\n  ') +
+		           ' ' +
+		           braces[1];
+		  }
+
+		  return braces[0] + base + ' ' + output.join(', ') + ' ' + braces[1];
+		}
+
+
+		// NOTE: These type checking functions intentionally don't use `instanceof`
+		// because it is fragile and can be easily faked with `Object.create()`.
+		function isArray(ar) {
+		  return Array.isArray(ar);
+		}
+		exports.isArray = isArray;
+
+		function isBoolean(arg) {
+		  return typeof arg === 'boolean';
+		}
+		exports.isBoolean = isBoolean;
+
+		function isNull(arg) {
+		  return arg === null;
+		}
+		exports.isNull = isNull;
+
+		function isNullOrUndefined(arg) {
+		  return arg == null;
+		}
+		exports.isNullOrUndefined = isNullOrUndefined;
+
+		function isNumber(arg) {
+		  return typeof arg === 'number';
+		}
+		exports.isNumber = isNumber;
+
+		function isString(arg) {
+		  return typeof arg === 'string';
+		}
+		exports.isString = isString;
+
+		function isSymbol(arg) {
+		  return typeof arg === 'symbol';
+		}
+		exports.isSymbol = isSymbol;
+
+		function isUndefined(arg) {
+		  return arg === void 0;
+		}
+		exports.isUndefined = isUndefined;
+
+		function isRegExp(re) {
+		  return isObject(re) && objectToString(re) === '[object RegExp]';
+		}
+		exports.isRegExp = isRegExp;
+
+		function isObject(arg) {
+		  return typeof arg === 'object' && arg !== null;
+		}
+		exports.isObject = isObject;
+
+		function isDate(d) {
+		  return isObject(d) && objectToString(d) === '[object Date]';
+		}
+		exports.isDate = isDate;
+
+		function isError(e) {
+		  return isObject(e) &&
+		      (objectToString(e) === '[object Error]' || e instanceof Error);
+		}
+		exports.isError = isError;
+
+		function isFunction(arg) {
+		  return typeof arg === 'function';
+		}
+		exports.isFunction = isFunction;
+
+		function isPrimitive(arg) {
+		  return arg === null ||
+		         typeof arg === 'boolean' ||
+		         typeof arg === 'number' ||
+		         typeof arg === 'string' ||
+		         typeof arg === 'symbol' ||  // ES6 symbol
+		         typeof arg === 'undefined';
+		}
+		exports.isPrimitive = isPrimitive;
+
+		exports.isBuffer = requireIsBuffer();
+
+		function objectToString(o) {
+		  return Object.prototype.toString.call(o);
+		}
+
+
+		function pad(n) {
+		  return n < 10 ? '0' + n.toString(10) : n.toString(10);
+		}
+
+
+		var months = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep',
+		              'Oct', 'Nov', 'Dec'];
+
+		// 26 Feb 16:19:34
+		function timestamp() {
+		  var d = new Date();
+		  var time = [pad(d.getHours()),
+		              pad(d.getMinutes()),
+		              pad(d.getSeconds())].join(':');
+		  return [d.getDate(), months[d.getMonth()], time].join(' ');
+		}
+
+
+		// log is just a thin wrapper to console.log that prepends a timestamp
+		exports.log = function() {
+		  console.log('%s - %s', timestamp(), exports.format.apply(exports, arguments));
+		};
+
+
+		/**
+		 * Inherit the prototype methods from one constructor into another.
+		 *
+		 * The Function.prototype.inherits from lang.js rewritten as a standalone
+		 * function (not on Function.prototype). NOTE: If this file is to be loaded
+		 * during bootstrapping this function needs to be rewritten using some native
+		 * functions as prototype setup using normal JavaScript does not work as
+		 * expected during bootstrapping (see mirror.js in r114903).
+		 *
+		 * @param {function} ctor Constructor function which needs to inherit the
+		 *     prototype.
+		 * @param {function} superCtor Constructor function to inherit prototype from.
+		 */
+		exports.inherits = requireInherits();
+
+		exports._extend = function(origin, add) {
+		  // Don't do anything if add isn't an object
+		  if (!add || !isObject(add)) return origin;
+
+		  var keys = Object.keys(add);
+		  var i = keys.length;
+		  while (i--) {
+		    origin[keys[i]] = add[keys[i]];
+		  }
+		  return origin;
+		};
+
+		function hasOwnProperty(obj, prop) {
+		  return Object.prototype.hasOwnProperty.call(obj, prop);
+		} 
+	} (util));
+	return util;
+}
+
 /* eslint no-unused-vars: ["error", { "varsIgnorePattern": "^Duplex" }] */
 
 var sender$1;
@@ -1665,6 +2362,9 @@ function requireSender () {
 
 	const { Duplex } = require$$0$2;
 	const { randomFillSync } = require$$1;
+	const {
+	  types: { isUint8Array }
+	} = requireUtil();
 
 	const PerMessageDeflate = requirePermessageDeflate();
 	const { EMPTY_BUFFER, kWebSocket, NOOP } = requireConstants();
@@ -1861,8 +2561,10 @@ function requireSender () {
 
 	      if (typeof data === 'string') {
 	        buf.write(data, 2);
-	      } else {
+	      } else if (isUint8Array(data)) {
 	        buf.set(data, 2);
+	      } else {
+	        throw new TypeError('Second argument must be a string or a Uint8Array');
 	      }
 	    }
 
@@ -2983,6 +3685,10 @@ function requireWebsocket () {
 	   *     multiple times in the same tick
 	   * @param {Function} [options.generateMask] The function used to generate the
 	   *     masking key
+	   * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=0] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=0] The maximum allowed message size
 	   * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
 	   *     not to skip UTF-8 validation for text and close messages
@@ -2994,6 +3700,8 @@ function requireWebsocket () {
 	      binaryType: this.binaryType,
 	      extensions: this._extensions,
 	      isServer: this._isServer,
+	      maxBufferedChunks: options.maxBufferedChunks,
+	      maxFragments: options.maxFragments,
 	      maxPayload: options.maxPayload,
 	      skipUTF8Validation: options.skipUTF8Validation
 	    });
@@ -3422,6 +4130,10 @@ function requireWebsocket () {
 	 *     masking key
 	 * @param {Number} [options.handshakeTimeout] Timeout in milliseconds for the
 	 *     handshake request
+	 * @param {Number} [options.maxBufferedChunks=262144] The maximum number of
+	 *     buffered data chunks
+	 * @param {Number} [options.maxFragments=16384] The maximum number of message
+	 *     fragments
 	 * @param {Number} [options.maxPayload=104857600] The maximum allowed message
 	 *     size
 	 * @param {Number} [options.maxRedirects=10] The maximum number of redirects
@@ -3442,6 +4154,8 @@ function requireWebsocket () {
 	    autoPong: true,
 	    closeTimeout: CLOSE_TIMEOUT,
 	    protocolVersion: protocolVersions[1],
+	    maxBufferedChunks: 256 * 1024,
+	    maxFragments: 16 * 1024,
 	    maxPayload: 100 * 1024 * 1024,
 	    skipUTF8Validation: false,
 	    perMessageDeflate: true,
@@ -3799,6 +4513,8 @@ function requireWebsocket () {
 	    websocket.setSocket(socket, head, {
 	      allowSynchronousEvents: opts.allowSynchronousEvents,
 	      generateMask: opts.generateMask,
+	      maxBufferedChunks: opts.maxBufferedChunks,
+	      maxFragments: opts.maxFragments,
 	      maxPayload: opts.maxPayload,
 	      skipUTF8Validation: opts.skipUTF8Validation
 	    });
@@ -4480,6 +5196,10 @@ function requireWebsocketServer () {
 	   *     called
 	   * @param {Function} [options.handleProtocols] A hook to handle protocols
 	   * @param {String} [options.host] The hostname where to bind the server
+	   * @param {Number} [options.maxBufferedChunks=262144] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=16384] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=104857600] The maximum allowed message
 	   *     size
 	   * @param {Boolean} [options.noServer=false] Enable no server mode
@@ -4502,6 +5222,8 @@ function requireWebsocketServer () {
 	    options = {
 	      allowSynchronousEvents: true,
 	      autoPong: true,
+	      maxBufferedChunks: 256 * 1024,
+	      maxFragments: 16 * 1024,
 	      maxPayload: 100 * 1024 * 1024,
 	      skipUTF8Validation: false,
 	      perMessageDeflate: false,
@@ -4861,6 +5583,8 @@ function requireWebsocketServer () {
 
 	    ws.setSocket(socket, head, {
 	      allowSynchronousEvents: this.options.allowSynchronousEvents,
+	      maxBufferedChunks: this.options.maxBufferedChunks,
+	      maxFragments: this.options.maxFragments,
 	      maxPayload: this.options.maxPayload,
 	      skipUTF8Validation: this.options.skipUTF8Validation
 	    });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsenv/server",
-  "version": "17.3.1",
+  "version": "17.4.0",
   "type": "module",
   "description": "A modern Node.js HTTP server with declarative routing, content negotiation, and WebSocket support",
   "repository": {
@@ -56,9 +56,9 @@
     "@jsenv/utils": "../../tooling/utils",
     "eventsource": "4.1.0",
     "formidable": "3.5.4",
-    "playwright": "1.58.1",
-    "undici": "7.24.2",
-    "ws": "8.20.0"
+    "playwright": "1.61.1",
+    "undici": "8.8.0",
+    "ws": "8.21.1"
   },
   "publishConfig": {
     "access": "public"

package/src/server_events.js

@@ -49,7 +49,7 @@ import { WebSocketResponse } from "./web_socket_response.js";
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => serverEvents.fetch(request)
+ *   fetch: (request) => serverEvents.fetch(request)
  * }
  */
 export class ServerEvents {
@@ -107,7 +107,7 @@ export class ServerEvents {
  * // Use in server route
  * {
  *   endpoint: "GET /events",
- *   response: (request) => events.fetch(request)
+ *   fetch: (request) => events.fetch(request)
  * }
  */
 export class LazyServerEvents {

package/src/web_socket_response.js

@@ -14,6 +14,30 @@
  * But we don't really need a class so we are just returning a regular object under the hood
  */
 
+/**
+ * Return this from a route `fetch` to accept a websocket upgrade on that
+ * endpoint.
+ *
+ * @param {(websocket: import("ws").WebSocket) => void | (() => void)} webSocketHandler
+ *   Called with the raw `ws` socket once the upgrade completes. Use
+ *   `websocket.on("message", …)` / `websocket.send(…)`. If it returns a
+ *   function, that function runs as cleanup when the socket closes.
+ * @param {object} [init]
+ * @param {number} [init.status=101]
+ * @param {string} [init.statusText]
+ * @param {object} [init.headers]
+ *
+ * @example
+ * {
+ *   endpoint: "GET /chat.websocket",
+ *   fetch: () => new WebSocketResponse((websocket) => {
+ *     websocket.on("message", (data) => websocket.send(data));
+ *     return () => {
+ *       // socket closed
+ *     };
+ *   }),
+ * }
+ */
 export class WebSocketResponse {
   constructor(
     webSocketHandler,