@lumencast/server 0.1.0

package/dist/server.js

@@ -0,0 +1,279 @@
+// HTTP + WebSocket server kit for LSDP/1.
+//
+// Single-scene at a time, single-process. The active scene is mutable so the
+// interop test control plane can swap it via /test/setup without restarting
+// the server.
+//
+// LSDP/1 spec compliance highlights:
+//   - WebSocket subprotocol negotiation: `lsdp.v1`
+//   - subscribe → snapshot(seq=1) → delta(seq=2,...)
+//   - input frames validated against `authenticate()` decision + canWritePath()
+//   - error frames carry codes from the closed taxonomy
+//   - heartbeat: ping → pong
+import { createServer } from "node:http";
+import { WebSocketServer } from "ws";
+import { delta as deltaFrame, decodeClientFrame, encodeFrame, errorFrame, isProtocolErrorCode, LumencastError, pong, snapshot as snapshotFrame, WS_SUBPROTOCOL, WS_SUBPROTOCOL_V1_1, } from "@lumencast/protocol";
+import { canWritePath, defaultAuthenticate } from "./auth.js";
+export async function startServer(config) {
+    const host = config.host ?? "127.0.0.1";
+    const wsPath = config.wsPath ?? "/lsdp/v1";
+    const bundlePathPrefix = config.bundlePathPrefix ?? "/lsdp/v1/scenes";
+    const authenticate = config.authenticate ?? defaultAuthenticate;
+    // Mutable refs — swappable via setActiveScene / setBundleProvider.
+    let activeScene = config.scene;
+    let bundleProvider = config.bundleProvider;
+    const httpServer = createServer((req, res) => handleHttp(req, res));
+    await new Promise((resolve, reject) => {
+        httpServer.once("error", reject);
+        httpServer.listen(config.port ?? 0, host, () => {
+            httpServer.off("error", reject);
+            resolve();
+        });
+    });
+    const address = httpServer.address();
+    if (!address || typeof address === "string") {
+        throw new Error("server: failed to bind HTTP");
+    }
+    const port = address.port;
+    const wss = new WebSocketServer({
+        server: httpServer,
+        path: wsPath,
+        handleProtocols: (offered) => {
+            // LSDP/1.1 preferred, 1.0 fallback. Anything else → reject upgrade.
+            if (offered.has(WS_SUBPROTOCOL_V1_1))
+                return WS_SUBPROTOCOL_V1_1;
+            if (offered.has(WS_SUBPROTOCOL))
+                return WS_SUBPROTOCOL;
+            return false;
+        },
+    });
+    const subscribers = new Set();
+    wss.on("connection", (ws) => {
+        const sub = { ws, decision: null, unsubscribePatches: null };
+        subscribers.add(sub);
+        ws.on("message", (data) => handleMessage(sub, String(data)).catch(() => undefined));
+        ws.on("close", () => {
+            sub.unsubscribePatches?.();
+            subscribers.delete(sub);
+        });
+    });
+    async function handleMessage(sub, raw) {
+        let frame;
+        try {
+            frame = decodeClientFrame(raw);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "decode error";
+            // LSDP/1 §13: envelope.v mismatch → close with code 1002 directly,
+            // no error frame (the v != 1 client wouldn't grok our v: 1 envelope).
+            if (message.includes("envelope.v")) {
+                sub.ws.close(1002, "VERSION_MISMATCH");
+                return;
+            }
+            const code = err instanceof LumencastError ? err.code : "INVALID_VALUE";
+            const recoverable = err instanceof LumencastError ? err.recoverable : false;
+            const path = err instanceof LumencastError ? err.path : undefined;
+            sendError(sub, code, message, recoverable, path !== undefined ? { path } : undefined);
+            // Recoverable decode errors (e.g. forbidden object value in a single
+            // patch per §3.2.1) MUST keep the connection open ; only fatal
+            // structural errors close.
+            if (!recoverable) {
+                sub.ws.close(1002, code);
+            }
+            return;
+        }
+        if (frame === null)
+            return; // forward-compat ignore
+        switch (frame.type) {
+            case "subscribe": {
+                await handleSubscribe(sub, frame.token, frame.since_sequence);
+                return;
+            }
+            case "input": {
+                await handleInput(sub, frame.patches, frame.client_msg_id);
+                return;
+            }
+            case "ping": {
+                // LSDP/1.1 §3.5 — echo nonce verbatim in pong (omit if absent).
+                sendFrame(sub, pong(frame.nonce));
+                return;
+            }
+            case "unsubscribe": {
+                // LSDP/1.1 §4.4 — clean teardown. Close WS within 1s, no error frame.
+                sub.ws.close(1000, "unsubscribe");
+                return;
+            }
+        }
+    }
+    async function handleSubscribe(sub, token, sinceSequence) {
+        let decision;
+        try {
+            decision = await authenticate(token);
+        }
+        catch (err) {
+            const code = err instanceof LumencastError && isProtocolErrorCode(err.code) ? err.code : "AUTH_DENIED";
+            sendError(sub, code, err instanceof Error ? err.message : "auth error", false);
+            sub.ws.close(1008, code);
+            return;
+        }
+        sub.decision = decision;
+        // LSDP/1.1 §4.1, §18 — honour since_sequence when the replay buffer
+        // covers the gap. Otherwise fall back to a fresh snapshot at the
+        // current scene seq.
+        const curSeq = activeScene.currentSeq();
+        let useReplay = false;
+        if (sinceSequence !== undefined && sinceSequence > 0 && sinceSequence <= curSeq) {
+            const { records, covered } = activeScene.replaySince(sinceSequence);
+            if (covered) {
+                useReplay = true;
+                for (const r of records) {
+                    sendFrame(sub, deltaFrame({ seq: r.seq, patches: r.patches, cause: r.cause }));
+                }
+            }
+        }
+        if (!useReplay) {
+            sendFrame(sub, snapshotFrame({
+                seq: curSeq,
+                scene_id: activeScene.sceneId,
+                scene_version: activeScene.sceneVersion,
+                state: activeScene.store.snapshot(),
+                ts: new Date().toISOString(),
+            }));
+        }
+        // Wire up delta forwarding from the *current* active scene. If the active
+        // scene swaps, this subscriber stays bound to the old one and is detached
+        // by setActiveScene(). Per-scene seq (§18.1.1) — the listener receives
+        // the seq directly from the scene.
+        sub.unsubscribePatches = activeScene.onPatches((seq, patches, cause) => {
+            sendFrame(sub, deltaFrame({ seq, patches, cause }));
+        });
+    }
+    async function handleInput(sub, patches, clientMsgId) {
+        if (!sub.decision) {
+            sendError(sub, "AUTH_DENIED", "input before subscribe", false);
+            return;
+        }
+        // 1. Role-based authorization (LSDP/1 §9).
+        for (const p of patches) {
+            if (!canWritePath(sub.decision, p.path)) {
+                sendError(sub, "WRITE_FORBIDDEN", `role ${sub.decision.role} cannot write ${p.path}`, true, { path: p.path });
+                return;
+            }
+        }
+        // 2. Schema validation against operator_inputs (LSDP/1 §4.2 + LSML §8).
+        //    Atomic: reject the whole frame on the first violation, no patches applied.
+        const validationError = activeScene.validateInput(patches);
+        if (validationError) {
+            sendError(sub, validationError.code, validationError.message, true, {
+                path: validationError.path,
+            });
+            return;
+        }
+        // LSDP/1.1 §3.2.3 — derive provenance metadata for the resulting delta.
+        // The `source` is conventionally `<role>:<subject>` ; when client_msg_id
+        // is provided, echo it verbatim into `input_id` for optimistic-UI
+        // correlation (§4.2). Cause is omitted entirely if neither yields data,
+        // so 1.0 wire shape is preserved when no client opts into 1.1.
+        const subject = sub.decision.subject ?? sub.decision.role;
+        const cause = clientMsgId
+            ? { source: `${sub.decision.role}:${subject}`, input_id: clientMsgId }
+            : undefined;
+        activeScene.update(patches, cause);
+    }
+    function handleHttp(req, res) {
+        const url = req.url ?? "/";
+        res.setHeader("access-control-allow-origin", "*");
+        res.setHeader("access-control-allow-methods", "GET, OPTIONS");
+        res.setHeader("access-control-allow-headers", "*");
+        if (req.method === "OPTIONS") {
+            res.statusCode = 204;
+            res.end();
+            return;
+        }
+        if (req.method === "GET" && url === `${wsPath}/health`) {
+            writeJson(res, 200, { status: "ok" });
+            return;
+        }
+        // GET /lsdp/v1/scenes/{id}/bundle?v=sha256:...
+        const escaped = bundlePathPrefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        const re = new RegExp(`^${escaped}/([^/?]+)/bundle(?:\\?v=([^&]+))?$`);
+        const match = url.match(re);
+        if (req.method === "GET" && match) {
+            const versionParam = match[2] ? decodeURIComponent(match[2]) : activeScene.sceneVersion;
+            Promise.resolve(bundleProvider(versionParam))
+                .then((bundle) => {
+                if (!bundle) {
+                    writeJson(res, 404, { error: "bundle_not_found" });
+                    return;
+                }
+                res.statusCode = 200;
+                res.setHeader("content-type", "application/json");
+                res.setHeader("cache-control", "public, max-age=31536000, immutable");
+                res.end(JSON.stringify(bundle));
+            })
+                .catch((err) => writeJson(res, 500, { error: String(err) }));
+            return;
+        }
+        writeJson(res, 404, { error: "not_found" });
+    }
+    function sendFrame(sub, frame) {
+        if (sub.ws.readyState !== sub.ws.OPEN)
+            return;
+        sub.ws.send(encodeFrame(frame));
+    }
+    function sendError(sub, code, message, recoverable, extras) {
+        // Errors are connection-scoped, not scene-scoped events
+        // (LSDP/1.1 §18.1.1) — they ride the current scene seq without
+        // advancing it.
+        sendFrame(sub, errorFrame({
+            seq: activeScene.currentSeq(),
+            code,
+            message,
+            recoverable,
+            ...(extras?.path !== undefined ? { path: extras.path } : {}),
+            ...(extras?.retry_after_ms !== undefined ? { retry_after_ms: extras.retry_after_ms } : {}),
+        }));
+    }
+    function detachAllSubscribers(closeCode = 1012, reason = "service restart") {
+        for (const sub of subscribers) {
+            sub.unsubscribePatches?.();
+            try {
+                sub.ws.close(closeCode, reason);
+            }
+            catch {
+                // ignore
+            }
+        }
+        subscribers.clear();
+    }
+    function setActiveScene(scene) {
+        detachAllSubscribers();
+        activeScene = scene;
+    }
+    function setBundleProvider(fn) {
+        bundleProvider = fn;
+    }
+    function reset() {
+        detachAllSubscribers();
+    }
+    async function close() {
+        detachAllSubscribers(1000, "shutdown");
+        await new Promise((resolve) => wss.close(() => resolve()));
+        await new Promise((resolve) => httpServer.close(() => resolve()));
+    }
+    return {
+        wsUrl: `ws://${host}:${port}${wsPath}`,
+        httpUrl: `http://${host}:${port}`,
+        setActiveScene,
+        setBundleProvider,
+        activeScene: () => activeScene,
+        reset,
+        close,
+    };
+}
+function writeJson(res, status, body) {
+    res.statusCode = status;
+    res.setHeader("content-type", "application/json");
+    res.end(JSON.stringify(body));
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,cAAc;AACd,EAAE;AACF,qCAAqC;AACrC,mDAAmD;AACnD,qDAAqD;AACrD,gFAAgF;AAChF,wDAAwD;AACxD,6BAA6B;AAE7B,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,eAAe,EAAkB,MAAM,IAAI,CAAC;AACrD,OAAO,EACL,KAAK,IAAI,UAAU,EACnB,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,IAAI,EACJ,QAAQ,IAAI,aAAa,EACzB,cAAc,EACd,mBAAmB,GAKpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAwC,MAAM,WAAW,CAAC;AA8CpG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IAC3C,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,iBAAiB,CAAC;IACtE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAEhE,mEAAmE;IACnE,IAAI,WAAW,GAAU,MAAM,CAAC,KAAK,CAAC;IACtC,IAAI,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAE3C,MAAM,UAAU,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAE5E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7C,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;QAC9B,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE,CAAC,OAAoB,EAAE,EAAE;YACxC,oEAAoE;YACpE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAAE,OAAO,mBAAmB,CAAC;YACjE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;gBAAE,OAAO,cAAc,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAc,CAAC;IAE1C,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACzE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErB,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACpF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC3B,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,aAAa,CAAC,GAAe,EAAE,GAAW;QACvD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,YAAY,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;YACxE,MAAM,WAAW,GAAG,GAAG,YAAY,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;YAC5E,MAAM,IAAI,GAAG,GAAG,YAAY,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACtF,qEAAqE;YACrE,+DAA+D;YAC/D,2BAA2B;YAC3B,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,wBAAwB;QAEpD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,gEAAgE;gBAChE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,sEAAsE;gBACtE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,GAAe,EACf,KAAa,EACb,aAAsB;QAEtB,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GACR,GAAG,YAAY,cAAc,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5F,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC/E,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAExB,oEAAoE;QACpE,iEAAiE;QACjE,qBAAqB;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;YAChF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,CACP,GAAG,EACH,aAAa,CAAC;gBACZ,GAAG,EAAE,MAAM;gBACX,QAAQ,EAAE,WAAW,CAAC,OAAO;gBAC7B,aAAa,EAAE,WAAW,CAAC,YAAY;gBACvC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE;gBACnC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,mCAAmC;QACnC,GAAG,CAAC,kBAAkB,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACrE,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,OAAgB,EAChB,WAAoB;QAEpB,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,2CAA2C;QAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,SAAS,CACP,GAAG,EACH,iBAAiB,EACjB,QAAQ,GAAG,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAClD,IAAI,EACJ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CACjB,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QACD,wEAAwE;QACxE,gFAAgF;QAChF,MAAM,eAAe,GAAG,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,eAAe,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE;gBAClE,IAAI,EAAE,eAAe,CAAC,IAAI;aAC3B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1D,MAAM,KAAK,GAAsB,WAAW;YAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;YACtE,CAAC,CAAC,SAAS,CAAC;QACd,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,SAAS,UAAU,CAAC,GAAoB,EAAE,GAAmB;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YACvD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,+CAA+C;QAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,oCAAoC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;YACxF,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;iBAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;gBACtE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS,SAAS,CAAC,GAAe,EAAE,KAAa;QAC/C,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI;YAAE,OAAO;QAC9C,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAA0C,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,SAAS,SAAS,CAChB,GAAe,EACf,IAAe,EACf,OAAe,EACf,WAAoB,EACpB,MAAmD;QAEnD,wDAAwD;QACxD,+DAA+D;QAC/D,gBAAgB;QAChB,SAAS,CACP,GAAG,EACH,UAAU,CAAC;YACT,GAAG,EAAE,WAAW,CAAC,UAAU,EAAE;YAC7B,IAAI;YACJ,OAAO;YACP,WAAW;YACX,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC,CACH,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAAC,SAAS,GAAG,IAAI,EAAE,MAAM,GAAG,iBAAiB;QACxE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,SAAS,cAAc,CAAC,KAAY;QAClC,oBAAoB,EAAE,CAAC;QACvB,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,SAAS,iBAAiB,CAAC,EAAyD;QAClF,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,SAAS,KAAK;QACZ,oBAAoB,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,KAAK,EAAE,QAAQ,IAAI,IAAI,IAAI,GAAG,MAAM,EAAE;QACtC,OAAO,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE;QACjC,cAAc;QACd,iBAAiB;QACjB,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW;QAC9B,KAAK;QACL,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/store.d.ts

@@ -0,0 +1,17 @@
+import type { Cause, LeafPath, LeafValue, Patch } from "@lumencast/protocol";
+export type LeafStoreListener = (patches: Patch[], cause?: Cause) => void;
+export declare class LeafStore {
+    private state;
+    private listeners;
+    constructor(initial?: Record<LeafPath, LeafValue>);
+    /** Snapshot of the full state (shallow copy). */
+    snapshot(): Record<LeafPath, LeafValue>;
+    /** Read a single leaf. */
+    get(path: LeafPath): LeafValue | undefined;
+    /** Apply patches and notify listeners. Returns the patches actually applied.
+     * Optional `cause` is forwarded to listeners so a downstream delta can carry
+     * provenance (LSDP/1.1 §3.2.3). */
+    apply(patches: Patch[], cause?: Cause): Patch[];
+    onPatches(listener: LeafStoreListener): () => void;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;AAE1E,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,SAAS,CAAgC;gBAErC,OAAO,GAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAM;IAIrD,iDAAiD;IACjD,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC;IAIvC,0BAA0B;IAC1B,GAAG,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS;IAI1C;;uCAEmC;IACnC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE;IAO/C,SAAS,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;CAInD"}

package/dist/store.js

@@ -0,0 +1,34 @@
+// LeafStore — a leaf-grain key/value map with an `onPatches` event.
+// Adapters write into the store; the Scene listens and rebroadcasts as deltas.
+export class LeafStore {
+    state = {};
+    listeners = new Set();
+    constructor(initial = {}) {
+        this.state = { ...initial };
+    }
+    /** Snapshot of the full state (shallow copy). */
+    snapshot() {
+        return { ...this.state };
+    }
+    /** Read a single leaf. */
+    get(path) {
+        return this.state[path];
+    }
+    /** Apply patches and notify listeners. Returns the patches actually applied.
+     * Optional `cause` is forwarded to listeners so a downstream delta can carry
+     * provenance (LSDP/1.1 §3.2.3). */
+    apply(patches, cause) {
+        if (patches.length === 0)
+            return [];
+        for (const p of patches)
+            this.state[p.path] = p.value;
+        for (const l of this.listeners)
+            l(patches, cause);
+        return patches;
+    }
+    onPatches(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,+EAA+E;AAM/E,MAAM,OAAO,SAAS;IACZ,KAAK,GAAgC,EAAE,CAAC;IACxC,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEjD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,iDAAiD;IACjD,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,0BAA0B;IAC1B,GAAG,CAAC,IAAc;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;uCAEmC;IACnC,KAAK,CAAC,OAAgB,EAAE,KAAa;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,QAA2B;QACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/test-control.d.ts

@@ -0,0 +1,22 @@
+import { type AuthDecision, type StaticTokens } from "./auth.js";
+import type { ServerHandle } from "./server.js";
+export interface TestControlOptions {
+    /** TCP port. 0 = random. */
+    port?: number;
+    host?: string;
+    /** The lumencast server the plane drives. */
+    server: ServerHandle;
+    /** The static-token authenticator the plane mutates on /test/setup. */
+    auth: StaticTokens;
+}
+export interface TestControlHandle {
+    readonly url: string;
+    close(): Promise<void>;
+}
+export declare function startTestControl(options: TestControlOptions): Promise<TestControlHandle>;
+/** Replace the StaticTokens contents with one entry per recognised
+ *  placeholder. $TOKEN_INVALID is intentionally NOT installed — the LSDP/1
+ *  conformance suite expects auth to reject it. */
+export declare function installTokens(auth: StaticTokens, tokens: Record<string, string>): void;
+export type { AuthDecision };
+//# sourceMappingURL=test-control.d.ts.map

package/dist/test-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-control.d.ts","sourceRoot":"","sources":["../src/test-control.ts"],"names":[],"mappings":"AASA,OAAO,EAAgB,KAAK,YAAY,EAAa,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAE1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,MAAM,EAAE,YAAY,CAAC;IACrB,uEAAuE;IACvE,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AA8BD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiK9F;AAED;;mDAEmD;AACnD,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAWtF;AA6CD,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/test-control.js

@@ -0,0 +1,225 @@
+// LSDP/1 interop test control plane.
+//
+// HTTP API spec: lumencast-protocol/interop/CONTROL.md
+// Reference impl: lumencast-go/interop/control/control.go (mirrored here)
+//
+// This module is for test infrastructure only. NEVER mount on a public-facing
+// port. The serve-scenario CLI is the only sanctioned consumer.
+import { createServer } from "node:http";
+import { canWritePath } from "./auth.js";
+import { createScene } from "./scene.js";
+const SERVER_NAME = "lumencast-js";
+const CONTROL_PLANE_VERSION = 1;
+const ROUTES = {
+    "/test/setup": { method: "POST" },
+    "/test/reset": { method: "POST" },
+    "/test/state": { method: "GET" },
+    "/test/emit": { method: "POST" },
+    "/test/health": { method: "GET" },
+};
+export async function startTestControl(options) {
+    const host = options.host ?? "127.0.0.1";
+    const httpServer = createServer((req, res) => handle(req, res));
+    await new Promise((resolve, reject) => {
+        httpServer.once("error", reject);
+        httpServer.listen(options.port ?? 0, host, () => {
+            httpServer.off("error", reject);
+            resolve();
+        });
+    });
+    const address = httpServer.address();
+    if (!address || typeof address === "string") {
+        throw new Error("test-control: failed to bind HTTP");
+    }
+    const port = address.port;
+    function handle(req, res) {
+        const url = req.url ?? "/";
+        const method = req.method ?? "";
+        const route = ROUTES[url];
+        if (!route) {
+            writeProblem(res, 404, "not-found", `unknown path ${url}`);
+            return;
+        }
+        if (method !== route.method) {
+            writeProblem(res, 405, "method-not-allowed", `${method} not allowed on ${url}`);
+            return;
+        }
+        switch (url) {
+            case "/test/setup":
+                return void onSetup(req, res);
+            case "/test/reset":
+                return void onReset(req, res);
+            case "/test/state":
+                return void onState(req, res);
+            case "/test/emit":
+                return void onEmit(req, res);
+            case "/test/health":
+                return void onHealth(req, res);
+        }
+    }
+    async function onSetup(req, res) {
+        let body;
+        try {
+            body = (await readJson(req));
+        }
+        catch (err) {
+            writeProblem(res, 400, "bad-body", `invalid JSON: ${err.message}`);
+            return;
+        }
+        if (!body || !Array.isArray(body.bundles) || body.bundles.length === 0) {
+            writeProblem(res, 400, "missing-bundle", "at least one bundle required");
+            return;
+        }
+        options.server.reset();
+        installTokens(options.auth, body.tokens ?? {});
+        const primary = body.bundles[0];
+        if (!primary || !primary.id) {
+            writeProblem(res, 400, "missing-bundle-id", "bundles[0].id required");
+            return;
+        }
+        const initialState = (body.initial_state ?? {});
+        // Prefer the inline LSML's `scene_id` over the bundle id (which is just
+        // the $BUNDLE.<id>.hash placeholder identifier). Fall back to the bundle id.
+        const inline = primary.inline && typeof primary.inline === "object" && primary.inline !== null
+            ? primary.inline
+            : undefined;
+        const inlineSceneId = inline?.scene_id;
+        const sceneId = typeof inlineSceneId === "string" ? inlineSceneId : primary.id;
+        const sceneVersion = primary.hash ?? "";
+        const operatorInputs = Array.isArray(inline?.operator_inputs)
+            ? inline.operator_inputs
+            : undefined;
+        const scene = createScene({
+            sceneId,
+            sceneVersion,
+            initialState,
+            ...(operatorInputs ? { operatorInputs } : {}),
+        });
+        options.server.setActiveScene(scene);
+        // The bundle provider serves the inline body of any registered bundle.
+        const bundleMap = new Map();
+        for (const b of body.bundles) {
+            if (b.hash && b.inline !== undefined)
+                bundleMap.set(b.hash, b.inline);
+        }
+        options.server.setBundleProvider((version) => bundleMap.get(version));
+        writeJson(res, 200, {
+            ws_url: options.server.wsUrl,
+            scene_id: sceneId,
+            scene_version: sceneVersion,
+        });
+    }
+    function onReset(_req, res) {
+        options.server.reset();
+        options.auth.reset();
+        res.statusCode = 204;
+        res.end();
+    }
+    function onState(_req, res) {
+        const scene = options.server.activeScene();
+        // The contract returns 409 if /test/setup wasn't called; we approximate
+        // that condition by checking whether the scene has been swapped from a
+        // synthetic initial scene. Since the kit always has an active scene, we
+        // expose whatever is current. Callers that need the 409 semantics call
+        // /test/reset first to drop everything.
+        writeJson(res, 200, {
+            scene_id: scene.sceneId,
+            scene_version: scene.sceneVersion,
+            state: scene.store.snapshot(),
+        });
+    }
+    async function onEmit(req, res) {
+        let body;
+        try {
+            body = (await readJson(req));
+        }
+        catch (err) {
+            writeProblem(res, 400, "bad-body", `invalid JSON: ${err.message}`);
+            return;
+        }
+        if (!body || !Array.isArray(body.patches) || body.patches.length === 0) {
+            writeProblem(res, 400, "empty-patches", "at least one patch required");
+            return;
+        }
+        const scene = options.server.activeScene();
+        try {
+            scene.update(body.patches);
+        }
+        catch (err) {
+            writeProblem(res, 400, "invalid", err.message);
+            return;
+        }
+        res.statusCode = 204;
+        res.end();
+    }
+    function onHealth(_req, res) {
+        writeJson(res, 200, {
+            status: "ok",
+            control_plane_version: CONTROL_PLANE_VERSION,
+            server: SERVER_NAME,
+        });
+    }
+    async function close() {
+        await new Promise((resolve) => httpServer.close(() => resolve()));
+    }
+    return {
+        url: `http://${host}:${port}`,
+        close,
+    };
+}
+/** Replace the StaticTokens contents with one entry per recognised
+ *  placeholder. $TOKEN_INVALID is intentionally NOT installed — the LSDP/1
+ *  conformance suite expects auth to reject it. */
+export function installTokens(auth, tokens) {
+    auth.reset();
+    for (const [placeholder, value] of Object.entries(tokens)) {
+        if (placeholder === "$TOKEN_INVALID" || !value)
+            continue;
+        const role = placeholderRole(placeholder);
+        if (!role)
+            continue;
+        auth.set(value, { role, subject: placeholder });
+    }
+    // canWritePath is referenced indirectly via the role we install — keep the
+    // import alive so the bundler doesn't drop it.
+    void canWritePath;
+}
+function placeholderRole(placeholder) {
+    switch (placeholder) {
+        case "$TOKEN_OPERATOR":
+            return "operator";
+        case "$TOKEN_VIEWER":
+            return "viewer";
+        case "$TOKEN_SERVICE":
+            return "service";
+        case "$TOKEN_TEST":
+            return "test";
+        default:
+            return null;
+    }
+}
+function writeJson(res, status, body) {
+    res.statusCode = status;
+    res.setHeader("content-type", "application/json");
+    res.end(JSON.stringify(body));
+}
+function writeProblem(res, status, code, detail) {
+    res.statusCode = status;
+    res.setHeader("content-type", "application/problem+json");
+    res.end(JSON.stringify({
+        type: "about:blank",
+        title: `control: ${code}`,
+        status,
+        detail,
+    }));
+}
+async function readJson(req) {
+    const chunks = [];
+    for await (const chunk of req)
+        chunks.push(chunk);
+    const body = Buffer.concat(chunks).toString("utf8");
+    if (body.length === 0)
+        return {};
+    return JSON.parse(body);
+}
+//# sourceMappingURL=test-control.js.map

package/dist/test-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-control.js","sourceRoot":"","sources":["../src/test-control.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,uDAAuD;AACvD,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,gEAAgE;AAEhE,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,YAAY,EAAmD,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAmCzC,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,MAAM,MAAM,GAAuC;IACjD,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;IACjC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;IACjC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;IAChC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;IAChC,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;CAClC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA2B;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,UAAU,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAExE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC9C,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,SAAS,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACvD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,aAAa;gBAChB,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChC,KAAK,aAAa;gBAChB,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChC,KAAK,aAAa;gBAChB,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChC,KAAK,YAAY;gBACf,OAAO,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/B,KAAK,cAAc;gBACjB,OAAO,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,GAAoB,EAAE,GAAmB;QAC9D,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAiB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAC5B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAA0B,CAAC;QACzE,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAC7E,CAAC,CAAE,OAAO,CAAC,MAA4D;YACvE,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,aAAa,GAAG,MAAM,EAAE,QAAQ,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC;YAC3D,CAAC,CAAE,MAAM,CAAC,eAAuE;YACjF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAErC,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAEtE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;YAC5B,QAAQ,EAAE,OAAO;YACjB,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,SAAS,OAAO,CAAC,IAAqB,EAAE,GAAmB;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,OAAO,CAAC,IAAqB,EAAE,GAAmB;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3C,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,wCAAwC;QACxC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,GAAoB,EAAE,GAAmB;QAC7D,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAgB,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,6BAA6B,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAA6C,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,QAAQ,CAAC,IAAqB,EAAE,GAAmB;QAC1D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,MAAM,EAAE,IAAI;YACZ,qBAAqB,EAAE,qBAAqB;YAC5C,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,GAAG,EAAE,UAAU,IAAI,IAAI,IAAI,EAAE;QAC7B,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;mDAEmD;AACnD,MAAM,UAAU,aAAa,CAAC,IAAkB,EAAE,MAA8B;IAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,WAAW,KAAK,gBAAgB,IAAI,CAAC,KAAK;YAAE,SAAS;QACzD,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,2EAA2E;IAC3E,+CAA+C;IAC/C,KAAK,YAAY,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB;IAC1C,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,iBAAiB;YACpB,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,QAAQ,CAAC;QAClB,KAAK,gBAAgB;YACnB,OAAO,SAAS,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY,EAAE,MAAc;IACrF,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,YAAY,IAAI,EAAE;QACzB,MAAM;QACN,MAAM;KACP,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}