@lzpong/httpm 1.2.0 → 1.2.2

package/README.md

@@ -139,8 +139,9 @@ app.use((err, req, res, next) => {
 | `res.redirect([code,] url)` | 重定向，兼容 Express 签名：`redirect(url)` 默认 302，`redirect(status, url)` 指定状态码 |
 | `res.cookie(name, value, opts)` | 设置 Cookie |
 | `res.clearCookie(name, opts)` | 清除 Cookie |
-| `res.set(name, value)` / `res.setHeader()` | 设置响应头（set 支持对象批量） |
-| `res.get(name)` / `res.getHeader()` | 获取响应头 |
+| `res.set(name, value)` / `res.setHeader()` | 设置响应头（set 支持对象批量；setHeader 为底层方法，功能相同） |
+| `res.get(name)` / `res.getHeader()` | 获取响应头（get 为 Express 兼容方法，功能相同） |
+| `res.removeHeader(name)` | 移除已设置的响应头 |
 | `res.type(type)` | 设置 Content-Type（支持简写：html→text/html） |
 | `res.on(event, fn)` | 监听响应事件（finish/close 等） |
 | `res.sse()` | 创建 SSE 实例 |
@@ -224,6 +225,7 @@ app.ws('/chat/:room', (ws, req) => {
 ```javascript
 app.wss.broadcast('/chat', 'Hello everyone');       // 按路径分组广播
 app.wss.broadcast('/chat', 'Hello', ws);            // 排除指定连接（传 ws 对象）
+app.wss.broadcastAll('Hello everyone');              // 全局广播
 app.wss.getConnections();                            // 获取所有连接
 ```
 
@@ -237,6 +239,13 @@ app.wss.getConnections();                            // 获取所有连接
 | `close` | 连接关闭，回调参数 `(code, reason)` |
 | `error` | 连接错误 |
 
+### WebSocket 方法
+
+| 方法 | 说明 |
+|------|------|
+| `ws.send(data)` | 发送消息（自动区分文本/JSON/二进制） |
+| `ws.close(code, reason)` | 关闭连接，可选状态码和原因 |
+
 ### data 事件使用
 
 ```javascript
@@ -382,6 +391,15 @@ const app = httpm({
 });
 ```
 
+## 关闭服务
+
+```javascript
+// 关闭 HTTP/HTTPS 服务器并断开所有 WebSocket 连接
+app.close(() => {
+  console.log('Server closed');
+});
+```
+
 ## 导出接口
 
 ```javascript

package/httpm.js

@@ -2,7 +2,7 @@
  * httpm - 基于 Node.js 原生模块的单文件、零依赖 HTTP 服务库
  *
  * @name        httpm
- * @version     1.2.0
+ * @version     1.2.2
  * @description 兼容 Express API，内置路由、中间件、静态文件服务、
  *              WebSocket、SSE、流式上传、日志系统等功能
  * @license     MIT
@@ -1045,8 +1045,6 @@ class WebSocket {
     this._handlers = {};
     // 最大帧负载大小（默认 100MB，防止恶意超大帧耗尽内存）
     this._maxPayload = options.maxPayload || 100 * 1024 * 1024;
-    // 写入背压标记
-    this._writeBacklogged = false;
     // 帧解析状态：缓存不完整帧数据
     this._frameBuffer = Buffer.alloc(0);
     // 分片帧状态
@@ -1090,7 +1088,7 @@ class WebSocket {
     while (this._frameBuffer.length >= 2) {
       const result = this._decodeFrame(this._frameBuffer);
       if (result === null) break; // 数据不完整，等待更多数据
-      this._frameBuffer = this._frameBuffer.slice(result.bytesConsumed);
+      this._frameBuffer = this._frameBuffer.subarray(result.bytesConsumed);
       this._processFrame(result.opcode, result.payload, result.fin, result.oversize);
     }
   }
@@ -1129,7 +1127,7 @@ class WebSocket {
     let mask = null;
     if (isMasked) {
       if (buf.length < offset + 4) return null;
-      mask = buf.slice(offset, offset + 4);
+      mask = buf.subarray(offset, offset + 4);
       offset += 4;
     }
 
@@ -1142,7 +1140,7 @@ class WebSocket {
     }
 
     // 提取负载
-    let payload = buf.slice(offset, offset + payloadLength);
+    let payload = buf.subarray(offset, offset + payloadLength);
     if (isMasked && mask) {
       for (let i = 0; i < payload.length; i++) {
         payload[i] ^= mask[i % 4];
@@ -1174,7 +1172,7 @@ class WebSocket {
         code = payload.readUInt16BE(0);
         // RFC 6455 Section 7.4: 状态码 0-999 为非法，1005 表示无状态码
         if (code < 1000) code = 1005;
-        reason = payload.length > 2 ? payload.slice(2).toString('utf8') : '';
+        reason = payload.length > 2 ? payload.subarray(2).toString('utf8') : '';
       }
       // 如果正在关闭握手中，对端已回复 Close 帧，完成握手
       if (this._closing) {
@@ -1282,11 +1280,7 @@ class WebSocket {
     frames.push(payload);
     const frame = Buffer.concat(frames);
     try {
-      const canWrite = this.socket.write(frame);
-      // 写入缓冲区满时记录警告（WebSocket 不像 HTTP 可暂停请求流，只能记录）
-      if (!canWrite) {
-        this._writeBacklogged = true;
-      }
+      this.socket.write(frame);
     } catch (e) {
       this.connected = false;
       // 发送失败时触发 error 事件，便于用户感知和处理
@@ -1705,14 +1699,14 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
         if (idx === -1) {
           // 保留尾部回看字节，防止分隔符跨 chunk 截断
           if (buffer.length > lookBehind) {
-            buffer = buffer.slice(buffer.length - lookBehind);
+            buffer = buffer.subarray(buffer.length - lookBehind);
           }
           break;
         }
-        buffer = buffer.slice(idx + delimiter.length);
+        buffer = buffer.subarray(idx + delimiter.length);
         // 跳过 \r\n
         if (buffer.length >= 2 && buffer[0] === 0x0D && buffer[1] === 0x0A) {
-          buffer = buffer.slice(2);
+          buffer = buffer.subarray(2);
         }
         state = 'HEADERS';
         partHeadersBuf = Buffer.alloc(0);
@@ -1725,8 +1719,8 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
           buffer = Buffer.alloc(0);
           break;
         }
-        partHeadersBuf = Buffer.concat([partHeadersBuf, buffer.slice(0, headerEnd)]);
-        buffer = buffer.slice(headerEnd + 4);
+        partHeadersBuf = Buffer.concat([partHeadersBuf, buffer.subarray(0, headerEnd)]);
+        buffer = buffer.subarray(headerEnd + 4);
         const partHeaders = partHeadersBuf.toString('utf8');
 
         // 解析 Content-Disposition
@@ -1761,7 +1755,7 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
           // 保留尾部回看字节，防止分隔符跨 chunk 截断
           const safeLen = Math.max(0, buffer.length - lookBehind);
           const chunk = buffer.toString('utf8', 0, safeLen);
-          fieldSize += chunk.length;
+          fieldSize += safeLen;
           if (fieldSize > maxFieldSize) {
             const err = new Error(`Field exceeds maximum size of ${fmtSize(maxFieldSize)}`, { cause: { actual: fieldSize, maxSize: maxFieldSize } });
             err.status = 413;
@@ -1769,12 +1763,12 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
             return;
           }
           currentField.value += chunk;
-          buffer = buffer.slice(safeLen);
+          buffer = buffer.subarray(safeLen);
           break;
         }
         // 字段结束
         const chunk = buffer.toString('utf8', 0, idx);
-        fieldSize += chunk.length;
+        fieldSize += idx;
         if (fieldSize > maxFieldSize) {
           const err = new Error(`Field exceeds maximum size of ${fmtSize(maxFieldSize)}`, { cause: { actual: fieldSize, maxSize: maxFieldSize } });
           err.status = 413;
@@ -1787,10 +1781,10 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
           currentField.value = currentField.value.slice(0, -2);
         }
         req.formData.fields[currentField.name] = currentField.value;
-        buffer = buffer.slice(idx + delimiter.length);
+        buffer = buffer.subarray(idx + delimiter.length);
         // 跳过 \r\n
         if (buffer.length >= 2 && buffer[0] === 0x0D && buffer[1] === 0x0A) {
-          buffer = buffer.slice(2);
+          buffer = buffer.subarray(2);
         }
         state = 'HEADERS';
         partHeadersBuf = Buffer.alloc(0);
@@ -1801,7 +1795,7 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
           // 还没结束，写入临时文件
           // 保留尾部回看字节，防止分隔符跨 chunk 截断
           const safeLen = Math.max(0, buffer.length - lookBehind);
-          const writeData = buffer.slice(0, safeLen);
+          const writeData = buffer.subarray(0, safeLen);
           if (!currentFile.stream) {
             currentFile.stream = fs.createWriteStream(currentFile.path);
             // 背压处理：写入流满时暂停请求读取，drain 后恢复
@@ -1827,14 +1821,14 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
             next(err);
             return;
           }
-          buffer = buffer.slice(safeLen);
+          buffer = buffer.subarray(safeLen);
           break;
         }
         // 文件结束
-        const fileData = buffer.slice(0, idx);
+        const fileData = buffer.subarray(0, idx);
         // 去掉文件数据前的 \r\n
         const trimmedData = fileData.length >= 2 && fileData.at(-2) === 0x0D && fileData.at(-1) === 0x0A
-          ? fileData.slice(0, -2)
+          ? fileData.subarray(0, -2)
           : fileData;
 
         if (!currentFile.stream) {
@@ -1862,10 +1856,10 @@ function _parseMultipart(req, boundary, maxFileSize, maxFieldSize, next) {
 
         // 清理上传进度条目
         cleanupOnError = false;
-        buffer = buffer.slice(idx + delimiter.length);
+        buffer = buffer.subarray(idx + delimiter.length);
         // 跳过 \r\n
         if (buffer.length >= 2 && buffer[0] === 0x0D && buffer[1] === 0x0A) {
-          buffer = buffer.slice(2);
+          buffer = buffer.subarray(2);
         }
         state = 'HEADERS';
         partHeadersBuf = Buffer.alloc(0);
@@ -2191,6 +2185,8 @@ class Application extends Router {
    * 错误处理：查找错误处理中间件（4 个参数）
    */
   _handleError(err, req, res, stack, startIdx) {
+    // 无错误时直接返回（错误处理中间件调用 next() 无参数表示错误已处理）
+    if (!err) return;
     // 从当前栈中查找错误处理中间件
     for (let i = startIdx; i < stack.length; i++) {
       const handler = stack[i].handler;
@@ -2347,35 +2343,37 @@ class Application extends Router {
         return;
       }
 
-      const items = entries.map(entry => {
-        try {
-          // 目录只需名称和类型，文件需要额外 stat 获取大小和修改时间
-          if (entry.isDirectory()) {
-            return { name: entry.name, isDirectory: true, size: 0, modified: '' };
-          }
-          const stat = fs.statSync(path.join(dirPath, entry.name));
-          return {
+      // 异步获取文件信息，避免同步阻塞事件循环
+      const tasks = entries.map(entry => {
+        if (entry.isDirectory()) {
+          return Promise.resolve({ name: entry.name, isDirectory: true, size: 0, modified: '' });
+        }
+        return fs.promises.stat(path.join(dirPath, entry.name))
+          .then(stat => ({
             name: entry.name,
             isDirectory: false,
             size: stat.size,
             modified: stat.mtime.toISOString()
-          };
-        } catch (e) {
-          return null;
-        }
-      }).filter(Boolean);
-
-      // 排序：目录在前
-      items.sort((a, b) => {
-        if (a.isDirectory && !b.isDirectory) return -1;
-        if (!a.isDirectory && b.isDirectory) return 1;
-        return a.name.localeCompare(b.name);
+          }))
+          .catch(() => null);
       });
 
-      // 生成 HTML 目录列表
-      const html = this._renderDirectoryHTML(requestPath, items);
-      res.setHeader('Content-Type', 'text/html; charset=utf-8');
-      res.send(html);
+      Promise.all(tasks).then(results => {
+        const items = results.filter(Boolean);
+        // 排序：目录在前
+        items.sort((a, b) => {
+          if (a.isDirectory && !b.isDirectory) return -1;
+          if (!a.isDirectory && b.isDirectory) return 1;
+          return a.name.localeCompare(b.name);
+        });
+
+        // 生成 HTML 目录列表
+        const html = this._renderDirectoryHTML(requestPath, items);
+        res.setHeader('Content-Type', 'text/html; charset=utf-8');
+        res.send(html);
+      }).catch(() => {
+        res.status(500).send('Internal Server Error');
+      });
     });
   }
 
@@ -2384,23 +2382,20 @@ class Application extends Router {
    */
   _renderDirectoryHTML(requestPath, items) {
     // requestPath 已去掉前导 /，空字符串表示根目录
-    // path.dirname('subdir') 返回 '.'，应映射为根目录 ''
-    let parentPath = requestPath ? path.dirname(requestPath) : '/';
-    if (parentPath === '.') parentPath = '';
     // 根目录时显示 '/'，否则显示请求路径
     const displayPath = requestPath || '/';
     let html = `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Directory: ${escapeHtml(displayPath)}</title>`;
     html += `<style>body{font-family:-apple-system,sans-serif;margin:20px;background:#f5f5f5}h1{font-size:18px;color:#333}table{width:100%;border-collapse:collapse;background:#fff;box-shadow:0 1px 3px rgba(0,0,0,.1)}th{text-align:left;padding:10px 12px;background:#f8f8f8;border-bottom:2px solid #ddd;font-size:13px;color:#666}td{padding:8px 12px;border-bottom:1px solid #eee;font-size:13px}a{color:#0066cc;text-decoration:none}a:hover{text-decoration:underline}.dir{font-weight:bold}.size{color:#999}</style>`;
     html += `</head><body><h1>Directory: ${escapeHtml(displayPath)}</h1><table><tr><th>Name</th><th>Size</th><th>Modified</th></tr>`;
 
-    // 父目录链接（根目录时不显示）
+    // 父目录链接：使用相对路径 .. 返回上一级（根目录时不显示）
     if (requestPath && requestPath !== '/') {
-      html += `<tr><td><a href="${escapeHtml(parentPath)}" class="dir">../</a></td><td class="size">-</td><td>-</td></tr>`;
+      html += `<tr><td><a href=".." class="dir">../</a></td><td class="size">-</td><td>-</td></tr>`;
     }
 
     for (const item of items) {
-      // 使用 '/' 拼接路径，防止 Windows 上 path.join 产生反斜杠导致 href 失效
-      const href = requestPath ? requestPath + '/' + item.name : item.name;
+      // 仅使用文件名作为相对 href，页面 URL 本身已包含目录路径
+      const href = item.name;
       const name = item.isDirectory ? item.name + '/' : item.name;
       const size = item.isDirectory ? '-' : fmtSize(item.size);
       const cls = item.isDirectory ? 'dir' : '';
@@ -2415,6 +2410,11 @@ class Application extends Router {
    * 处理 WebSocket 升级请求
    */
   _handleUpgrade(req, socket, head) {
+    // 防御性检查：_wss 在 listen() 中初始化，正常流程不会为 null
+    if (!this._wss) {
+      socket.destroy();
+      return;
+    }
     const ws = this._wss.handleUpgrade(req, socket, head);
     if (!ws) return;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lzpong/httpm",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "基于 Node.js 原生模块的单文件、零依赖 HTTP 服务库，兼容 Express API",
   "main": "httpm.js",
   "files": [