@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/admin-monitor/http.js

@@ -0,0 +1,219 @@
+import { Effect, SynchronizedRef } from "effect";
+import { makeNodeRuntimeError, NodeRuntimeError } from "../runtime/errors.js";
+import { ADMIN_MONITOR_CONTENT_SECURITY_POLICY } from "./assets.js";
+import { digest, MAX_BODY_CHUNKS, MAX_HEADER_BYTES, MAX_HEADER_COUNT, MAX_URL_BYTES, TOKEN_LENGTH, } from "./model.js";
+import { ADMIN_MONITOR_MAX_REQUEST_BYTES } from "./projection.js";
+export const failRequest = (code, message) => makeNodeRuntimeError(code, message);
+export const headerValues = (request, name) => Array.from({ length: request.rawHeaders.length / 2 }, (_, index) => index * 2).flatMap((index) => {
+    const value = request.rawHeaders[index + 1];
+    return request.rawHeaders[index]?.toLowerCase() === name &&
+        value !== undefined
+        ? [value]
+        : [];
+});
+export const setSecurityHeaders = (response, staticAsset = false) => {
+    response.setHeader("Cache-Control", "no-store");
+    response.setHeader("Cross-Origin-Resource-Policy", "same-origin");
+    response.setHeader("Referrer-Policy", "no-referrer");
+    response.setHeader("X-Content-Type-Options", "nosniff");
+    response.setHeader("X-Frame-Options", "DENY");
+    if (staticAsset) {
+        response.setHeader("Content-Security-Policy", ADMIN_MONITOR_CONTENT_SECURITY_POLICY);
+    }
+};
+export const send = (response, options) => {
+    if (response.destroyed || response.writableEnded)
+        return;
+    response.setHeader("Content-Length", Buffer.byteLength(options.body, "utf8"));
+    response.setHeader("Content-Type", options.contentType ?? "application/json; charset=utf-8");
+    response.writeHead(options.status);
+    response.end(options.body);
+};
+const statusForError = (error) => new Map([
+    ["authentication_failed", 401],
+    ["deadline_exceeded", 504],
+    ["frame_invalid", 400],
+    ["frame_too_large", 413],
+    ["saturated", 429],
+]).get(error.code) ?? 500;
+export const sendError = (response, error) => {
+    send(response, {
+        body: JSON.stringify({ error: error.code }),
+        status: statusForError(error),
+    });
+};
+const validateHeaderBounds = (request) => {
+    const headerBytes = request.rawHeaders.reduce((sum, value) => sum + Buffer.byteLength(value, "latin1"), 0);
+    if (headerBytes > MAX_HEADER_BYTES) {
+        throw failRequest("frame_too_large", "Request headers are too large.");
+    }
+    if (request.rawHeaders.length / 2 > MAX_HEADER_COUNT) {
+        throw failRequest("frame_too_large", "There are too many request headers.");
+    }
+};
+const validateRequestTarget = (request) => {
+    const url = request.url;
+    if (url === undefined || Buffer.byteLength(url, "utf8") > MAX_URL_BYTES) {
+        throw failRequest("frame_too_large", "The request target is too large.");
+    }
+    if (!url.startsWith("/") || url.startsWith("//") || url.includes("?")) {
+        throw failRequest("frame_invalid", "The request target is invalid.");
+    }
+};
+const validateAuthorityHeaders = (request, listener) => {
+    const hosts = headerValues(request, "host");
+    if (hosts.length !== 1 || hosts[0] !== `127.0.0.1:${String(listener.port)}`) {
+        throw failRequest("authentication_failed", "Host validation failed.");
+    }
+    const duplicated = [
+        "authorization",
+        "content-length",
+        "content-type",
+        "cookie",
+        "origin",
+        "transfer-encoding",
+    ].find((name) => headerValues(request, name).length > 1);
+    if (duplicated !== undefined) {
+        throw failRequest("frame_invalid", `Duplicate ${duplicated} header.`);
+    }
+};
+const validateBodyFraming = (request) => {
+    if (headerValues(request, "content-length").length === 1 &&
+        headerValues(request, "transfer-encoding").length === 1) {
+        throw failRequest("frame_invalid", "Content-Length and Transfer-Encoding cannot be combined.");
+    }
+};
+const invalidRequest = (cause) => cause instanceof NodeRuntimeError
+    ? cause
+    : makeNodeRuntimeError("frame_invalid", "The HTTP request is invalid.");
+export const validateCommonRequest = (request, listener) => Effect.try({
+    catch: invalidRequest,
+    try: () => {
+        validateHeaderBounds(request);
+        validateRequestTarget(request);
+        validateAuthorityHeaders(request, listener);
+        validateBodyFraming(request);
+    },
+});
+export const validateSameOriginPost = (request, listener) => Effect.try({
+    catch: invalidRequest,
+    try: () => {
+        const origins = headerValues(request, "origin");
+        if (origins.length !== 1 || origins[0] !== listener.origin) {
+            throw failRequest("authentication_failed", "Origin validation failed.");
+        }
+        const fetchSite = headerValues(request, "sec-fetch-site");
+        if (fetchSite.length > 1 ||
+            (fetchSite[0] !== undefined && fetchSite[0] !== "same-origin")) {
+            throw failRequest("authentication_failed", "Fetch metadata validation failed.");
+        }
+    },
+});
+export const requireNoBody = (request) => Effect.try({
+    catch: invalidRequest,
+    try: () => {
+        const contentLength = headerValues(request, "content-length");
+        if ((contentLength.length === 1 && contentLength[0] !== "0") ||
+            headerValues(request, "transfer-encoding").length > 0) {
+            throw failRequest("frame_invalid", "This route accepts no request body.");
+        }
+    },
+});
+const detachBodyHandlers = (state) => {
+    const handlers = state.handlers;
+    if (handlers === undefined)
+        return;
+    state.request.off("data", handlers.onData);
+    state.request.off("end", handlers.onEnd);
+    state.request.off("error", handlers.onError);
+    state.request.off("aborted", handlers.onAborted);
+};
+const rejectBody = (state, error) => {
+    detachBodyHandlers(state);
+    state.reject(error);
+};
+const acceptBodyChunk = (state, chunk) => {
+    state.chunkCount += 1;
+    state.byteCount += chunk.byteLength;
+    if (state.byteCount > ADMIN_MONITOR_MAX_REQUEST_BYTES ||
+        state.chunkCount > MAX_BODY_CHUNKS) {
+        state.request.destroy();
+        rejectBody(state, failRequest("frame_too_large", "The request body is too large."));
+        return;
+    }
+    state.chunks.push(chunk);
+};
+const makeBodyReadHandlers = (state) => ({
+    onAborted: () => {
+        rejectBody(state, makeNodeRuntimeError("transport_failed", "The request body was aborted."));
+    },
+    onData: (chunk) => {
+        acceptBodyChunk(state, chunk);
+    },
+    onEnd: () => {
+        detachBodyHandlers(state);
+        state.resolve(Buffer.concat(state.chunks, state.byteCount));
+    },
+    onError: () => {
+        rejectBody(state, makeNodeRuntimeError("transport_failed", "The request body failed."));
+    },
+});
+const collectBody = (request, settle) => {
+    const state = {
+        byteCount: 0,
+        chunkCount: 0,
+        chunks: [],
+        reject: settle.reject,
+        request,
+        resolve: settle.resolve,
+    };
+    state.handlers = makeBodyReadHandlers(state);
+    request.on("data", state.handlers.onData);
+    request.once("end", state.handlers.onEnd);
+    request.once("error", state.handlers.onError);
+    request.once("aborted", state.handlers.onAborted);
+};
+export const readBoundedBody = (request) => Effect.tryPromise({
+    catch: (cause) => cause instanceof NodeRuntimeError
+        ? cause
+        : makeNodeRuntimeError("transport_failed", "The request body failed."),
+    try: () => new Promise((resolve, reject) => {
+        collectBody(request, { reject, resolve });
+    }),
+});
+const bearerTokenFromRequest = (request) => {
+    const authorization = headerValues(request, "authorization");
+    const value = authorization.length === 1 ? authorization[0] : undefined;
+    const raw = value?.startsWith("Bearer ") ? value.slice(7) : undefined;
+    return raw?.length === TOKEN_LENGTH && /^[\w-]+$/.test(raw) ? raw : undefined;
+};
+const authenticateCurrentSession = (current, input) => {
+    const session = current.sessions.get(input.key);
+    if (current.closed ||
+        current.listener !== input.listener ||
+        session?.listenerGeneration !== input.listener.generation ||
+        session?.listenerPort !== input.listener.port ||
+        session?.absoluteExpiresAt <= input.now ||
+        session.lastUsedAt + input.sessionIdleTtlMs <= input.now) {
+        if (session !== undefined)
+            current.sessions.delete(input.key);
+        return Effect.fail(failRequest("authentication_failed", "The browser session is invalid."));
+    }
+    current.sessions.set(input.key, { ...session, lastUsedAt: input.now });
+    current.idleSince = undefined;
+    return Effect.succeed([input.key, current]);
+};
+export const authenticateSession = (state, request, input) => {
+    const raw = bearerTokenFromRequest(request);
+    if (raw === undefined) {
+        return Effect.fail(failRequest("authentication_failed", "A browser session is required."));
+    }
+    const authentication = {
+        key: digest(raw).toString("hex"),
+        listener: input.listener,
+        now: Date.now(),
+        sessionIdleTtlMs: input.sessionIdleTtlMs,
+    };
+    return SynchronizedRef.modifyEffect(state, (current) => authenticateCurrentSession(current, authentication));
+};
+//# sourceMappingURL=http.js.map

package/dist/admin-monitor/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/admin-monitor/http.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,qCAAqC,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,MAAM,EAEN,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EAEb,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAElE,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,IAC6E,EAC7E,OAAe,EACG,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAAwB,EACxB,IAAY,EACF,EAAE,CACZ,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACzC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CACxB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;IAClB,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI;QACtD,KAAK,KAAK,SAAS;QACnB,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,CAAC,EAAE,CAAC;AACT,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,QAAwB,EACxB,WAAW,GAAG,KAAK,EACb,EAAE;IACR,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,WAAW,EAAE,CAAC;QAChB,QAAQ,CAAC,SAAS,CAChB,yBAAyB,EACzB,qCAAqC,CACtC,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,QAAwB,EACxB,OAIC,EACK,EAAE;IACR,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa;QAAE,OAAO;IACzD,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,QAAQ,CAAC,SAAS,CAChB,cAAc,EACd,OAAO,CAAC,WAAW,IAAI,iCAAiC,CACzD,CAAC;IACF,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAuB,EAAU,EAAE,CACzD,IAAI,GAAG,CAAmC;IACxC,CAAC,uBAAuB,EAAE,GAAG,CAAC;IAC9B,CAAC,mBAAmB,EAAE,GAAG,CAAC;IAC1B,CAAC,eAAe,EAAE,GAAG,CAAC;IACtB,CAAC,iBAAiB,EAAE,GAAG,CAAC;IACxB,CAAC,WAAW,EAAE,GAAG,CAAC;CACnB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAE5B,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAwB,EACxB,KAAuB,EACjB,EAAE;IACR,IAAI,CAAC,QAAQ,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,OAAwB,EAAQ,EAAE;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EACxD,CAAC,CACF,CAAC;IACF,IAAI,WAAW,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,WAAW,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACrD,MAAM,WAAW,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,OAAwB,EAAQ,EAAE;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,aAAa,EAAE,CAAC;QACxE,MAAM,WAAW,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,WAAW,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,OAAwB,EACxB,QAAkB,EACZ,EAAE;IACR,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC5E,MAAM,WAAW,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAG;QACjB,eAAe;QACf,gBAAgB;QAChB,cAAc;QACd,QAAQ;QACR,QAAQ;QACR,mBAAmB;KACpB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,WAAW,CAAC,eAAe,EAAE,aAAa,UAAU,UAAU,CAAC,CAAC;IACxE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,OAAwB,EAAQ,EAAE;IAC7D,IACE,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,MAAM,KAAK,CAAC;QACpD,YAAY,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,MAAM,KAAK,CAAC,EACvD,CAAC;QACD,MAAM,WAAW,CACf,eAAe,EACf,0DAA0D,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAoB,EAAE,CAC1D,KAAK,YAAY,gBAAgB;IAC/B,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,oBAAoB,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,OAAwB,EACxB,QAAkB,EACqB,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC;IACT,KAAK,EAAE,cAAc;IACrB,GAAG,EAAE,GAAG,EAAE;QACR,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9B,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5C,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,OAAwB,EACxB,QAAkB,EACqB,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC;IACT,KAAK,EAAE,cAAc;IACrB,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,WAAW,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC1D,IACE,SAAS,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,EAC9D,CAAC;YACD,MAAM,WAAW,CACf,uBAAuB,EACvB,mCAAmC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,OAAwB,EACe,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC;IACT,KAAK,EAAE,cAAc;IACrB,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IACE,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YACxD,YAAY,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,EACrD,CAAC;YACD,MAAM,WAAW,CACf,eAAe,EACf,qCAAqC,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAmBL,MAAM,kBAAkB,GAAG,CAAC,KAAoB,EAAQ,EAAE;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,KAAoB,EAAE,KAAuB,EAAQ,EAAE;IACzE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAoB,EAAE,KAAa,EAAQ,EAAE;IACpE,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACtB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC;IACpC,IACE,KAAK,CAAC,SAAS,GAAG,+BAA+B;QACjD,KAAK,CAAC,UAAU,GAAG,eAAe,EAClC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,UAAU,CACR,KAAK,EACL,WAAW,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CACjE,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAoB,EAAoB,EAAE,CAAC,CAAC;IACxE,SAAS,EAAE,GAAG,EAAE;QACd,UAAU,CACR,KAAK,EACL,oBAAoB,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChB,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,EAAE,GAAG,EAAE;QACV,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE;QACZ,UAAU,CACR,KAAK,EACL,oBAAoB,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,CACrE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAClB,OAAwB,EACxB,MAGC,EACK,EAAE;IACR,MAAM,KAAK,GAAkB;QAC3B,SAAS,EAAE,CAAC;QACZ,UAAU,EAAE,CAAC;QACb,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;IACF,KAAK,CAAC,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAwB,EACqB,EAAE,CAC/C,MAAM,CAAC,UAAU,CAAC;IAChB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,gBAAgB;QAC/B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;IAC1E,GAAG,EAAE,GAAG,EAAE,CACR,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;CACL,CAAC,CAAC;AAEL,MAAM,sBAAsB,GAAG,CAC7B,OAAwB,EACJ,EAAE;IACtB,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,GAAG,GAAG,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,GAAG,EAAE,MAAM,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC,CAAC;AASF,MAAM,0BAA0B,GAAG,CACjC,OAAqB,EACrB,KAA4B,EACsC,EAAE;IACpE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IACE,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QACnC,OAAO,EAAE,kBAAkB,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU;QACzD,OAAO,EAAE,YAAY,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI;QAC7C,OAAO,EAAE,iBAAiB,IAAI,KAAK,CAAC,GAAG;QACvC,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,GAAG,EACxD,CAAC;QACD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAChB,WAAW,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAU,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAoD,EACpD,OAAwB,EACxB,KAAyE,EAChC,EAAE;IAC3C,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,IAAI,CAChB,WAAW,CAAC,uBAAuB,EAAE,gCAAgC,CAAC,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAA0B;QAC5C,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACf,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC;IACF,OAAO,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACrD,0BAA0B,CAAC,OAAO,EAAE,cAAc,CAAC,CACpD,CAAC;AACJ,CAAC,CAAC"}

package/dist/admin-monitor/listener.d.ts

@@ -0,0 +1,9 @@
+import { type IncomingMessage, type ServerResponse } from "node:http";
+import { Effect } from "effect";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+import { type AdminMonitorPolicy, type Listener } from "./model.js";
+export type AdminMonitorRoute = (listener: Listener, request: IncomingMessage, response: ServerResponse) => Effect.Effect<void>;
+export type AdminMonitorFork = (effect: Effect.Effect<unknown>) => unknown;
+export declare const createListener: (runFork: AdminMonitorFork, route: AdminMonitorRoute, policy: AdminMonitorPolicy) => Effect.Effect<Listener, NodeRuntimeError>;
+export declare const closeListener: (listener: Listener, closeGraceMs: number) => Effect.Effect<void, NodeRuntimeError>;
+//# sourceMappingURL=listener.d.ts.map

package/dist/admin-monitor/listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener.d.ts","sourceRoot":"","sources":["../../src/admin-monitor/listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EAId,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,CAC9B,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,KACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAEzB,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;AAiG3E,eAAO,MAAM,cAAc,GACzB,SAAS,gBAAgB,EACzB,OAAO,iBAAiB,EACxB,QAAQ,kBAAkB,KACzB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAmBvC,CAAC;AAwDL,eAAO,MAAM,aAAa,GACxB,UAAU,QAAQ,EAClB,cAAc,MAAM,KACnB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAwBtC,CAAC"}

package/dist/admin-monitor/listener.js

@@ -0,0 +1,118 @@
+import { createServer, } from "node:http";
+import { Effect } from "effect";
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+import { send, setSecurityHeaders } from "./http.js";
+import { MAX_HEADER_BYTES, MAX_HEADER_COUNT, token, } from "./model.js";
+const serveRequest = (holder, input) => {
+    const listener = holder.listener;
+    if (listener === undefined) {
+        setSecurityHeaders(input.response);
+        send(input.response, {
+            body: JSON.stringify({ error: "unavailable" }),
+            status: 503,
+        });
+        return;
+    }
+    input.runFork(input.route(listener, input.request, input.response));
+};
+const configureServer = (server, policy, sockets) => {
+    server.maxConnections = policy.maximumConnections;
+    server.maxHeadersCount = MAX_HEADER_COUNT;
+    server.maxRequestsPerSocket = 32;
+    server.headersTimeout = policy.requestTimeoutMs;
+    server.keepAliveTimeout = 1000;
+    server.on("connection", (socket) => {
+        sockets.add(socket);
+        socket.setNoDelay(true);
+        socket.once("close", () => sockets.delete(socket));
+    });
+};
+const validateBoundAddress = (server) => {
+    const address = server.address();
+    if (address !== null &&
+        typeof address !== "string" &&
+        address.address === "127.0.0.1") {
+        return Effect.succeed(address.port);
+    }
+    server.close();
+    return Effect.fail(makeNodeRuntimeError("transport_failed", "The admin monitor listener did not bind exact IPv4 loopback."));
+};
+const listenLoopback = (server) => Effect.callback((resume) => {
+    const onError = () => {
+        resume(Effect.fail(makeNodeRuntimeError("transport_failed", "The admin monitor loopback listener failed to start.")));
+    };
+    server.once("error", onError);
+    server.listen({ exclusive: true, host: "127.0.0.1", port: 0 }, () => {
+        server.off("error", onError);
+        resume(validateBoundAddress(server));
+    });
+    return Effect.sync(() => server.close());
+});
+const makeListener = (port, server, sockets) => ({
+    generation: token(),
+    origin: `http://127.0.0.1:${String(port)}`,
+    port,
+    server,
+    sockets,
+    streams: new Map(),
+});
+export const createListener = (runFork, route, policy) => Effect.gen(function* () {
+    const holder = {};
+    const server = createServer({
+        insecureHTTPParser: false,
+        maxHeaderSize: MAX_HEADER_BYTES,
+        requestTimeout: policy.requestTimeoutMs,
+    }, (request, response) => {
+        serveRequest(holder, { request, response, route, runFork });
+    });
+    const sockets = new Set();
+    configureServer(server, policy, sockets);
+    const port = yield* listenLoopback(server);
+    const listener = makeListener(port, server, sockets);
+    holder.listener = listener;
+    return listener;
+});
+const destroyListenerSockets = (listener) => {
+    listener.sockets.forEach((socket) => {
+        socket.destroy();
+    });
+    listener.server.closeAllConnections();
+};
+const listenerCloseResult = (error) => error === undefined
+    ? Effect.undefined
+    : Effect.fail(makeNodeRuntimeError("resource_cleanup_failed", "The admin monitor listener did not close cleanly."));
+const armListenerClose = (listener, closeGraceMs, resume) => {
+    let completed = false;
+    const finish = (effect) => {
+        if (completed)
+            return;
+        completed = true;
+        clearTimeout(timer);
+        resume(effect);
+    };
+    const timer = setTimeout(() => {
+        destroyListenerSockets(listener);
+    }, closeGraceMs);
+    listener.server.close((error) => {
+        finish(listenerCloseResult(error));
+    });
+    listener.server.closeIdleConnections();
+    return () => {
+        clearTimeout(timer);
+        destroyListenerSockets(listener);
+    };
+};
+const waitForListenerClose = (listener, closeGraceMs) => Effect.callback((resume) => Effect.sync(armListenerClose(listener, closeGraceMs, resume)));
+export const closeListener = (listener, closeGraceMs) => {
+    listener.streams.forEach((_, response) => {
+        response.end();
+    });
+    listener.streams.clear();
+    return waitForListenerClose(listener, closeGraceMs).pipe(Effect.timeoutOrElse({
+        duration: closeGraceMs + 500,
+        orElse: () => Effect.sync(() => {
+            destroyListenerSockets(listener);
+        }).pipe(Effect.andThen(Effect.fail(makeNodeRuntimeError("resource_cleanup_failed", "The admin monitor listener cleanup outcome is unknown.")))),
+    }), Effect.asVoid);
+};
+//# sourceMappingURL=listener.js.map

package/dist/admin-monitor/listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener.js","sourceRoot":"","sources":["../../src/admin-monitor/listener.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAGL,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,GACN,MAAM,YAAY,CAAC;AAYpB,MAAM,YAAY,GAAG,CACnB,MAAsB,EACtB,KAKC,EACK,EAAE;IACR,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,MAAc,EACd,MAA0B,EAC1B,OAAoB,EACd,EAAE;IACR,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAClD,MAAM,CAAC,eAAe,GAAG,gBAAgB,CAAC;IAC1C,MAAM,CAAC,oBAAoB,GAAG,EAAE,CAAC;IACjC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAChD,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,MAAc,EAC2B,EAAE;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,OAAO,KAAK,WAAW,EAC/B,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,MAAM,CAAC,IAAI,CAChB,oBAAoB,CAClB,kBAAkB,EAClB,8DAA8D,CAC/D,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,MAAc,EAC2B,EAAE,CAC3C,MAAM,CAAC,QAAQ,CAA2B,CAAC,MAAM,EAAE,EAAE;IACnD,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,MAAM,CACJ,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,kBAAkB,EAClB,sDAAsD,CACvD,CACF,CACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,IAAY,EACZ,MAAc,EACd,OAAoB,EACV,EAAE,CAAC,CAAC;IACd,UAAU,EAAE,KAAK,EAAE;IACnB,MAAM,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,EAAE;IAC1C,IAAI;IACJ,MAAM;IACN,OAAO;IACP,OAAO,EAAE,IAAI,GAAG,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAyB,EACzB,KAAwB,EACxB,MAA0B,EACiB,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CACzB;QACE,kBAAkB,EAAE,KAAK;QACzB,aAAa,EAAE,gBAAgB;QAC/B,cAAc,EAAE,MAAM,CAAC,gBAAgB;KACxC,EACD,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACpB,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,MAAM,sBAAsB,GAAG,CAAC,QAAkB,EAAQ,EAAE;IAC1D,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAClC,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;AACxC,CAAC,CAAC;AAIF,MAAM,mBAAmB,GAAG,CAC1B,KAAwB,EACoB,EAAE,CAC9C,KAAK,KAAK,SAAS;IACjB,CAAC,CAAC,MAAM,CAAC,SAAS;IAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,yBAAyB,EACzB,mDAAmD,CACpD,CACF,CAAC;AAER,MAAM,gBAAgB,GAAG,CACvB,QAAkB,EAClB,YAAoB,EACpB,MAAmB,EACL,EAAE;IAChB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,MAAM,GAAG,CAAC,MAAkD,EAAQ,EAAE;QAC1E,IAAI,SAAS;YAAE,OAAO;QACtB,SAAS,GAAG,IAAI,CAAC;QACjB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,EAAE,YAAY,CAAC,CAAC;IACjB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;QACtC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;IACvC,OAAO,GAAG,EAAE;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,QAAkB,EAClB,YAAoB,EACwB,EAAE,CAC9C,MAAM,CAAC,QAAQ,CAA8B,CAAC,MAAM,EAAE,EAAE,CACtD,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAC9D,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,QAAkB,EAClB,YAAoB,EACmB,EAAE;IACzC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE;QACvC,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,OAAO,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,YAAY,GAAG,GAAG;QAC5B,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,yBAAyB,EACzB,wDAAwD,CACzD,CACF,CACF,CACF;KACJ,CAAC,EACF,MAAM,CAAC,MAAM,CACd,CAAC;AACJ,CAAC,CAAC"}

package/dist/admin-monitor/model.d.ts

@@ -0,0 +1,71 @@
+import type { Server, ServerResponse } from "node:http";
+import type { Socket } from "node:net";
+import type { MonitorBootstrapCreateResult } from "@maiaos/protocol";
+import type { Effect } from "effect";
+import type { NodeRuntimeError } from "../runtime/errors.js";
+import type { AdminMonitorSnapshotReader } from "./projection.js";
+export declare const MAX_HEADER_BYTES: number;
+export declare const MAX_HEADER_COUNT = 32;
+export declare const MAX_URL_BYTES = 1024;
+export declare const MAX_BODY_CHUNKS = 32;
+export declare const TOKEN_LENGTH = 43;
+export type AdminMonitorPolicy = {
+    readonly bootstrapTtlMs: number;
+    readonly closeGraceMs: number;
+    readonly housekeepingIntervalMs: number;
+    readonly idleCloseMs: number;
+    readonly maximumConnections: number;
+    readonly maximumSessions: number;
+    readonly refreshIntervalMs: number;
+    readonly requestTimeoutMs: number;
+    readonly sessionAbsoluteTtlMs: number;
+    readonly sessionIdleTtlMs: number;
+    readonly snapshotTimeoutMs: number;
+};
+export type BootstrapAuthority = {
+    readonly digest: Buffer;
+    readonly expiresAt: number;
+};
+export type BrowserSession = {
+    readonly absoluteExpiresAt: number;
+    readonly lastUsedAt: number;
+    readonly listenerGeneration: string;
+    readonly listenerPort: number;
+    readonly sseActive: boolean;
+};
+export type Listener = {
+    readonly generation: string;
+    readonly origin: string;
+    readonly port: number;
+    readonly server: Server;
+    readonly sockets: Set<Socket>;
+    readonly streams: Map<ServerResponse, string>;
+};
+export type MonitorState = {
+    activeRequests: number;
+    bootstrap?: BootstrapAuthority;
+    closed: boolean;
+    idleSince?: number;
+    listener?: Listener;
+    readonly sessions: Map<string, BrowserSession>;
+};
+export type AdminMonitorBootstrap = MonitorBootstrapCreateResult;
+export type AdminMonitorService = {
+    readonly close: Effect.Effect<void, NodeRuntimeError>;
+    readonly createBootstrap: Effect.Effect<AdminMonitorBootstrap, NodeRuntimeError>;
+};
+export type AdminMonitorServiceOptions = {
+    readonly instanceId: string;
+    readonly readSnapshot: AdminMonitorSnapshotReader;
+    /** Deterministic lifecycle seams for focused ownership tests. */
+    readonly testOnlyHooks?: {
+        readonly afterListenerBind?: (listener: Listener) => Effect.Effect<void>;
+        readonly beforeListenerRelease?: (reason: "idle" | "service", listener: Listener) => Effect.Effect<void>;
+    };
+    /** Test timing and capacity reductions; product composition must omit it. */
+    readonly testOnlyPolicy?: Partial<AdminMonitorPolicy>;
+};
+export declare const digest: (value: string) => Buffer;
+export declare const token: () => string;
+export declare const normalizePolicy: (override: Partial<AdminMonitorPolicy> | undefined) => AdminMonitorPolicy;
+//# sourceMappingURL=model.d.ts.map

package/dist/admin-monitor/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/admin-monitor/model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAElE,eAAO,MAAM,gBAAgB,QAAW,CAAC;AACzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,aAAa,OAAO,CAAC;AAClC,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,YAAY,KAAK,CAAC;AAG/B,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,CAAC;AAgBF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAEjE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACtD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CACrC,qBAAqB,EACrB,gBAAgB,CACjB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,iEAAiE;IACjE,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,QAAQ,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KAC1B,CAAC;IACF,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvD,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,OAAO,MAAM,KAAG,MACc,CAAC;AAEtD,eAAO,MAAM,KAAK,QAAO,MACuB,CAAC;AAEjD,eAAO,MAAM,eAAe,GAC1B,UAAU,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,KAChD,kBASF,CAAC"}

package/dist/admin-monitor/model.js

@@ -0,0 +1,31 @@
+import { createHash, randomBytes } from "node:crypto";
+export const MAX_HEADER_BYTES = 8 * 1024;
+export const MAX_HEADER_COUNT = 32;
+export const MAX_URL_BYTES = 1024;
+export const MAX_BODY_CHUNKS = 32;
+export const TOKEN_LENGTH = 43;
+const TOKEN_BYTES = 32;
+const PRODUCTION_POLICY = {
+    bootstrapTtlMs: 60_000,
+    closeGraceMs: 2000,
+    housekeepingIntervalMs: 1000,
+    idleCloseMs: 30_000,
+    maximumConnections: 8,
+    maximumSessions: 2,
+    refreshIntervalMs: 2000,
+    requestTimeoutMs: 5000,
+    sessionAbsoluteTtlMs: 30 * 60_000,
+    sessionIdleTtlMs: 5 * 60_000,
+    snapshotTimeoutMs: 5000,
+};
+export const digest = (value) => createHash("sha256").update(value, "utf8").digest();
+export const token = () => randomBytes(TOKEN_BYTES).toString("base64url");
+export const normalizePolicy = (override) => {
+    const policy = { ...PRODUCTION_POLICY, ...override };
+    const invalid = Object.entries(policy).find(([, value]) => !Number.isSafeInteger(value) || value <= 0);
+    if (invalid !== undefined) {
+        throw new TypeError(`Admin monitor policy ${invalid[0]} must be positive.`);
+    }
+    return policy;
+};
+//# sourceMappingURL=model.js.map

package/dist/admin-monitor/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/admin-monitor/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAWtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,WAAW,GAAG,EAAE,CAAC;AAgBvB,MAAM,iBAAiB,GAAuB;IAC5C,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,IAAI;IAClB,sBAAsB,EAAE,IAAI;IAC5B,WAAW,EAAE,MAAM;IACnB,kBAAkB,EAAE,CAAC;IACrB,eAAe,EAAE,CAAC;IAClB,iBAAiB,EAAE,IAAI;IACvB,gBAAgB,EAAE,IAAI;IACtB,oBAAoB,EAAE,EAAE,GAAG,MAAM;IACjC,gBAAgB,EAAE,CAAC,GAAG,MAAM;IAC5B,iBAAiB,EAAE,IAAI;CACxB,CAAC;AA0DF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAC9C,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAEtD,MAAM,CAAC,MAAM,KAAK,GAAG,GAAW,EAAE,CAChC,WAAW,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,QAAiD,EAC7B,EAAE;IACtB,MAAM,MAAM,GAAG,EAAE,GAAG,iBAAiB,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAC1D,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,wBAAwB,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/admin-monitor/projection.d.ts

@@ -0,0 +1,10 @@
+import type { Effect } from "effect";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+export declare const ADMIN_MONITOR_SCHEMA_VERSION = "maia.admin-monitor/v1";
+export declare const ADMIN_MONITOR_MAX_REQUEST_BYTES: number;
+export declare const ADMIN_MONITOR_MAX_RESPONSE_BYTES: number;
+export type AdminMonitorSnapshotRequest = Record<string, never>;
+export type AdminMonitorSnapshotReader = (request: AdminMonitorSnapshotRequest) => Effect.Effect<unknown, NodeRuntimeError>;
+export declare const decodeAdminMonitorSnapshotRequest: (bytes: Uint8Array) => AdminMonitorSnapshotRequest;
+export declare const encodeAdminMonitorSnapshot: (projection: unknown, observedAt?: string) => string;
+//# sourceMappingURL=projection.d.ts.map

package/dist/admin-monitor/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/admin-monitor/projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AACpE,eAAO,MAAM,+BAA+B,QAAW,CAAC;AACxD,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAE3D,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhE,MAAM,MAAM,0BAA0B,GAAG,CACvC,OAAO,EAAE,2BAA2B,KACjC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAa9C,eAAO,MAAM,iCAAiC,GAC5C,OAAO,UAAU,KAChB,2BAsBF,CAAC;AAmBF,eAAO,MAAM,0BAA0B,GACrC,YAAY,OAAO,EACnB,mBAAqC,KACpC,MASF,CAAC"}

package/dist/admin-monitor/projection.js

@@ -0,0 +1,48 @@
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+export const ADMIN_MONITOR_SCHEMA_VERSION = "maia.admin-monitor/v1";
+export const ADMIN_MONITOR_MAX_REQUEST_BYTES = 4 * 1024;
+export const ADMIN_MONITOR_MAX_RESPONSE_BYTES = 256 * 1024;
+const parseJson = (bytes) => {
+    try {
+        return JSON.parse(Buffer.from(bytes).toString("utf8"));
+    }
+    catch {
+        throw makeNodeRuntimeError("frame_invalid", "The admin monitor snapshot request is not valid JSON.");
+    }
+};
+export const decodeAdminMonitorSnapshotRequest = (bytes) => {
+    if (bytes.byteLength > ADMIN_MONITOR_MAX_REQUEST_BYTES) {
+        throw makeNodeRuntimeError("frame_too_large", "The admin monitor snapshot request exceeds its byte limit.");
+    }
+    const value = parseJson(bytes);
+    if (value === null ||
+        typeof value !== "object" ||
+        Array.isArray(value) ||
+        Object.keys(value).length > 0) {
+        throw makeNodeRuntimeError("frame_invalid", "The admin monitor snapshot request must be an empty object.");
+    }
+    return {};
+};
+const serializeSnapshot = (projection, observedAt) => {
+    try {
+        const encoded = JSON.stringify({
+            observedAt,
+            projection,
+            schemaVersion: ADMIN_MONITOR_SCHEMA_VERSION,
+        });
+        if (encoded !== undefined)
+            return encoded;
+    }
+    catch {
+        // The single owned error below intentionally covers every JSON failure.
+    }
+    throw makeNodeRuntimeError("internal_error", "The admin monitor snapshot is not JSON serializable.");
+};
+export const encodeAdminMonitorSnapshot = (projection, observedAt = new Date().toISOString()) => {
+    const encoded = serializeSnapshot(projection, observedAt);
+    if (Buffer.byteLength(encoded, "utf8") > ADMIN_MONITOR_MAX_RESPONSE_BYTES) {
+        throw makeNodeRuntimeError("frame_too_large", "The admin monitor snapshot exceeds its byte limit.");
+    }
+    return encoded;
+};
+//# sourceMappingURL=projection.js.map

package/dist/admin-monitor/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/admin-monitor/projection.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AACpE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAAG,IAAI,CAAC;AACxD,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,GAAG,IAAI,CAAC;AAQ3D,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAW,EAAE;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,oBAAoB,CACxB,eAAe,EACf,uDAAuD,CACxD,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAC/C,KAAiB,EACY,EAAE;IAC/B,IAAI,KAAK,CAAC,UAAU,GAAG,+BAA+B,EAAE,CAAC;QACvD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAC7B,CAAC;QACD,MAAM,oBAAoB,CACxB,eAAe,EACf,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,UAAmB,EAAE,UAAkB,EAAU,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,UAAU;YACV,UAAU;YACV,aAAa,EAAE,4BAA4B;SAC5C,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,sDAAsD,CACvD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,UAAmB,EACnB,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC7B,EAAE;IACV,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,gCAAgC,EAAE,CAAC;QAC1E,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}

package/dist/admin-monitor/routes.d.ts

@@ -0,0 +1,13 @@
+import { type Semaphore, SynchronizedRef } from "effect";
+import type { AdminMonitorFork, AdminMonitorRoute } from "./listener.js";
+import { type AdminMonitorPolicy, type MonitorState } from "./model.js";
+import { type AdminMonitorSnapshotReader } from "./projection.js";
+export type AdminMonitorRouteContext = {
+    readonly policy: AdminMonitorPolicy;
+    readonly readSnapshot: AdminMonitorSnapshotReader;
+    readonly runFork: AdminMonitorFork;
+    readonly snapshotPermits: Semaphore.Semaphore;
+    readonly state: SynchronizedRef.SynchronizedRef<MonitorState>;
+};
+export declare const makeAdminMonitorRoute: (context: AdminMonitorRouteContext) => AdminMonitorRoute;
+//# sourceMappingURL=routes.d.ts.map

package/dist/admin-monitor/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/admin-monitor/routes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,SAAS,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAiBzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EACL,KAAK,kBAAkB,EAIvB,KAAK,YAAY,EAGlB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,0BAA0B,EAGhC,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;CAC/D,CAAC;AAucF,eAAO,MAAM,qBAAqB,GAChC,SAAS,wBAAwB,KAChC,iBAoBC,CAAC"}