@meekojs/meeko 0.0.3 → 0.0.4

package/dist/framework-server/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/framework-server/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAWxF,SAAS,KAAK,CAAC,QAAgB;IAC7B,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClE,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;YACrF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtO,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,SAAiB;IACpC,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IACpE,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACjG,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;aACrD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY;IACrC,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAY;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAe,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChI,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAY;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACnH,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC/E,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAkB,EAAE;QACpE,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,2BAA2B,CAAC,CAAC;QAC1H,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,QAAQ,QAAQ,CAAC,IAAI,oBAAoB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7H,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,QAAQ,QAAQ,CAAC,IAAI,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAClH,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,QAAQ,QAAQ,CAAC,IAAI,kBAAkB,GAAG,EAAE,CAAC,CAAC;QACxH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,QAAQ,QAAQ,CAAC,IAAI,oBAAoB,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAChH,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAwC,EAAE,IAAI,GAAuC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAqB;IAChM,MAAM,QAAQ,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,4CAA4C,CAAC,CAAC;QACnJ,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAI,MAA+B,CAAC,OAAO,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,SAAS,KAAK,CAAC,QAAgB,EAAE,OAAe;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjD,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;YACpB,MAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9F,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,IAAI,CAAC,QAAqB;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,UAAU,CAAC,CAAc,EAAE,CAAc;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AASD,SAAS,kBAAkB,CAAC,MAAe;IACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;QAAE,OAAQ,MAA+B,CAAC,OAAO,CAAC;IACjH,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CAAI,OAA2E;IACvG,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAqB,CAAC,CAAC;IAC5G,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC/C,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;gBACrF,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACpD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;oBAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;gBAC7E,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAqC,CAAC;gBACrG,OAAO,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO,GAAgB,EAAE,CAAC;YAC9B,KAAK,MAAM,QAAQ,IAAI,GAAG,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACpF,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAA0G,CAAC;gBAC1K,OAAO,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC3F,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;IACrE,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAI,OAAmC;IAC3E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,SAAS,GAAW,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAO,OAAO,CAAC,QAAiD,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvJ,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAC9B,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAI,OAA2E;IACnH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC/D,OAAO,aAAa,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,OAAO,aAAa,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAuB,CAAC;QACvG,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { readdir } from \"node:fs/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { join, relative, resolve, sep } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport { createRequestContext } from \"./context.js\";\nimport type { RequestContext, ServerFetch } from \"./context.js\";\nimport { ApiError, dispatchApiRoute, dispatchRpc, errorResponse } from \"./contracts.js\";\nimport type { ApiRouteDefinition, RpcDefinition, Schema } from \"./contracts.js\";\nimport type { SessionManager } from \"./sessions.js\";\n\nexport type ApiMethod = \"GET\" | \"POST\" | \"PUT\" | \"PATCH\" | \"DELETE\";\nexport interface ApiEndpoint { readonly kind: \"api\"; readonly file: string; readonly pathname: string; readonly method: ApiMethod; readonly clientKey: string; }\nexport interface RpcEndpoint { readonly kind: \"rpc\"; readonly file: string; readonly pathname: string; readonly id: string; }\nexport interface SocketEndpoint { readonly kind: \"socket\"; readonly file: string; readonly name: string; readonly pathname: string; }\nexport interface ServerManifest { readonly api: readonly ApiEndpoint[]; readonly rpc: readonly RpcEndpoint[]; readonly socket?: readonly SocketEndpoint[]; }\ntype PatternPart = { kind: \"static\" | \"param\" | \"rest\"; value: string };\n\nfunction parts(pathname: string): PatternPart[] {\n  return pathname.split(\"/\").filter(Boolean).map((part, index, all) => {\n    if (/^\\[\\.\\.\\.[A-Za-z_$][\\w$]*\\]$/.test(part)) {\n      if (index !== all.length - 1) throw new Error(`Catch-all must be last: ${pathname}`);\n      return { kind: \"rest\", value: part.slice(4, -1) };\n    }\n    if (/^\\[[A-Za-z_$][\\w$]*\\]$/.test(part)) return { kind: \"param\", value: part.slice(1, -1) };\n    if (!/^[A-Za-z0-9_-]+$/.test(part)) throw new Error(`Invalid server route segment: ${part}`);\n    return { kind: \"static\", value: part };\n  });\n}\n\nfunction collisionKey(pathname: string): string {\n  return parts(pathname).map((part) => part.kind === \"static\" ? part.value : part.kind === \"param\" ? \"[]\" : \"[...]\").join(\"/\");\n}\n\nfunction clientKey(pathname: string): string {\n  return parts(pathname).map((part) => part.kind === \"static\" ? part.value : part.kind === \"param\" ? `by${part.value[0]!.toUpperCase()}${part.value.slice(1)}` : `by${part.value[0]!.toUpperCase()}${part.value.slice(1)}`).join(\".\");\n}\n\nasync function files(directory: string): Promise<string[]> {\n  let entries;\n  try { entries = await readdir(directory, { withFileTypes: true }); }\n  catch (error) { if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return []; throw error; }\n  const found: string[] = [];\n  for (const entry of entries) {\n    if (entry.name.startsWith(\".\") || entry.name === \"node_modules\") continue;\n    const file = join(directory, entry.name);\n    if (entry.isDirectory()) found.push(...await files(file));\n    else if (entry.isFile() && /\\.(?:ts|js|mts|mjs)$/.test(entry.name) && !/\\.(?:test|spec|d)\\.(?:ts|js|mts|mjs)$/.test(entry.name)) found.push(file);\n  }\n  return found.sort();\n}\n\nfunction rel(root: string, file: string): string {\n  return relative(root, file).split(sep).join(\"/\").replace(/\\.(?:ts|js|mts|mjs)$/, \"\");\n}\n\nfunction apiEndpoint(directory: string, file: string): ApiEndpoint {\n  const path = rel(directory, file);\n  const match = /^(.*)\\.(get|post|put|patch|delete)$/.exec(path);\n  if (!match) throw new Error(`API handler requires a method suffix: ${file}`);\n  const route = match[1]!.split(\"/\");\n  if (route.at(-1) === \"index\") route.pop();\n  const pathname = `/api${route.length ? `/${route.join(\"/\")}` : \"\"}`;\n  parts(pathname);\n  return { kind: \"api\", file, pathname, method: match[2]!.toUpperCase() as ApiMethod, clientKey: clientKey(pathname.slice(4)) };\n}\n\nfunction rpcEndpoint(directory: string, file: string): RpcEndpoint {\n  const path = rel(directory, file);\n  const route = path.split(\"/\");\n  if (route.some((part) => !/^[A-Za-z_$][\\w$]*$/.test(part))) throw new Error(`Invalid RPC procedure name: ${file}`);\n  const id = route.join(\".\");\n  return { kind: \"rpc\", file, id, pathname: `/_meeko/rpc/${route.join(\"/\")}` };\n}\n\n/** Static discovery is shared by development and production; no handler is executed here. */\nexport async function discoverServerManifest(projectRoot: string): Promise<ServerManifest> {\n  const root = resolve(projectRoot);\n  const apiRoot = join(root, \"server\", \"api\");\n  const rpcRoot = join(root, \"server\", \"rpc\");\n  const socketRoot = join(root, \"server\", \"socket\");\n  const api = (await files(apiRoot)).map((file) => apiEndpoint(apiRoot, file));\n  const rpc = (await files(rpcRoot)).map((file) => rpcEndpoint(rpcRoot, file));\n  const socket = (await files(socketRoot)).map((file): SocketEndpoint => {\n    const name = rel(socketRoot, file);\n    if (!/^[A-Za-z_$][\\w$-]*$/.test(name)) throw new Error(`Invalid Socket channel name in ${file}; use a single named file`);\n    return { kind: \"socket\", file, name, pathname: `/_meeko/socket/${name}` };\n  });\n  const socketNames = new Map<string, string>();\n  for (const endpoint of socket) {\n    const previous = socketNames.get(endpoint.name);\n    if (previous) throw new Error(`Socket channel collision: ${previous} and ${endpoint.file} both resolve to ${endpoint.name}`);\n    socketNames.set(endpoint.name, endpoint.file);\n  }\n  const paths = new Map<string, string>();\n  const keys = new Map<string, string>();\n  for (const endpoint of api) {\n    const pathKey = `${endpoint.method} ${collisionKey(endpoint.pathname)}`;\n    const previous = paths.get(pathKey);\n    if (previous) throw new Error(`API route collision: ${previous} and ${endpoint.file} both resolve to ${pathKey}`);\n    paths.set(pathKey, endpoint.file);\n    const key = `${endpoint.method} ${endpoint.clientKey}`;\n    const keyPrevious = keys.get(key);\n    if (keyPrevious) throw new Error(`API client name collision: ${keyPrevious} and ${endpoint.file} both generate ${key}`);\n    keys.set(key, endpoint.file);\n  }\n  const ids = new Map<string, string>();\n  for (const endpoint of rpc) {\n    const previous = ids.get(endpoint.id);\n    if (previous) throw new Error(`RPC collision: ${previous} and ${endpoint.file} both resolve to ${endpoint.id}`);\n    ids.set(endpoint.id, endpoint.file);\n  }\n  return Object.freeze({ api: Object.freeze(api), rpc: Object.freeze(rpc), socket: Object.freeze(socket) });\n}\n\n/** Loads server-only channel definitions; callers pass the result to createSocketHub. */\nexport async function loadSocketChannels(manifest: Pick<ServerManifest, \"socket\">, load: (file: string) => Promise<unknown> = async (file) => import(pathToFileURL(file).href) as Promise<unknown>): Promise<Readonly<Record<string, unknown>>> {\n  const channels: Record<string, unknown> = Object.create(null);\n  for (const endpoint of manifest.socket ?? []) {\n    const module = await load(endpoint.file);\n    if (!module || typeof module !== \"object\" || !(\"default\" in module)) throw new Error(`${endpoint.file}: Socket channel requires a default export`);\n    channels[endpoint.name] = (module as { default: unknown }).default;\n  }\n  return channels;\n}\n\nfunction decode(part: string): string | undefined {\n  try {\n    const value = decodeURIComponent(part);\n    return value && value !== \".\" && value !== \"..\" && !value.includes(\"/\") && !value.includes(\"\\\\\") ? value : undefined;\n  } catch { return undefined; }\n}\n\nfunction match(pathname: string, pattern: string): Record<string, string> | undefined {\n  const raw = pathname.split(\"/\").filter(Boolean);\n  const path = raw.map(decode);\n  if (path.some((part) => part === undefined)) return undefined;\n  const patternParts = parts(pattern);\n  const params: Record<string, string> = Object.create(null);\n  let index = 0;\n  for (const part of patternParts) {\n    if (part.kind === \"rest\") {\n      if (index >= path.length) return undefined;\n      params[part.value] = path.slice(index).join(\"/\");\n      index = path.length;\n      break;\n    }\n    const value = path[index++];\n    if (value === undefined || (part.kind === \"static\" && part.value !== value)) return undefined;\n    if (part.kind === \"param\") params[part.value] = value;\n  }\n  return index === path.length ? params : undefined;\n}\n\nfunction rank(endpoint: ApiEndpoint): number[] {\n  return parts(endpoint.pathname).map((part) => part.kind === \"static\" ? 3 : part.kind === \"param\" ? 2 : 1);\n}\n\nfunction compareApi(a: ApiEndpoint, b: ApiEndpoint): number {\n  const left = rank(a);\n  const right = rank(b);\n  for (let index = 0; index < Math.max(left.length, right.length); index++) {\n    const score = (right[index] ?? 0) - (left[index] ?? 0);\n    if (score) return score;\n  }\n  return a.pathname.localeCompare(b.pathname);\n}\n\nexport interface ServerDispatcherOptions<S = unknown> {\n  manifest: ServerManifest;\n  sessions: SessionManager;\n  services: S | ((request: Request) => S | Promise<S>);\n  load?: (file: string) => Promise<unknown>;\n}\n\nfunction exportedDefinition(module: unknown): unknown {\n  if (module && typeof module === \"object\" && \"default\" in module) return (module as { default: unknown }).default;\n  throw new ApiError(\"INVALID_HANDLER\", 500);\n}\n\n/** Dispatches API and RPC through the same request context and security pipeline. */\nfunction requestDispatcher<S>(options: Pick<ServerDispatcherOptions<S>, \"manifest\" | \"sessions\" | \"load\">): (context: RequestContext<S>) => Promise<Response> {\n  const api = [...options.manifest.api].sort(compareApi);\n  const load = options.load ?? (async (file: string) => import(pathToFileURL(file).href) as Promise<unknown>);\n  return async (context) => {\n    const request = context.request;\n    try {\n      const pathname = new URL(request.url).pathname;\n      if (pathname.startsWith(\"/_meeko/rpc/\")) {\n        const endpoint = options.manifest.rpc.find((record) => record.pathname === pathname);\n        if (!endpoint) throw new ApiError(\"NOT_FOUND\", 404);\n        if (request.method !== \"POST\") throw new ApiError(\"METHOD_NOT_ALLOWED\", 405);\n        const definition = exportedDefinition(await load(endpoint.file)) as RpcDefinition<Schema, Schema, S>;\n        return dispatchRpc(definition, context, options.sessions);\n      }\n      let allowed: ApiMethod[] = [];\n      for (const endpoint of api) {\n        const params = match(pathname, endpoint.pathname);\n        if (!params) continue;\n        if (request.method !== endpoint.method) { allowed.push(endpoint.method); continue; }\n        const definition = exportedDefinition(await load(endpoint.file)) as ApiRouteDefinition<Schema | undefined, Schema | undefined, Schema | undefined, Schema | undefined, S>;\n        return dispatchApiRoute(definition, context, options.sessions, params);\n      }\n      if (allowed.length) {\n        const response = errorResponse(new ApiError(\"METHOD_NOT_ALLOWED\", 405), context.requestId);\n        response.headers.set(\"allow\", [...new Set(allowed)].join(\", \"));\n        return response;\n      }\n      throw new ApiError(\"NOT_FOUND\", 404);\n    } catch (error) { return errorResponse(error, context.requestId); }\n  };\n}\n\nexport function createServerDispatcher<S>(options: ServerDispatcherOptions<S>): (request: Request) => Promise<Response> {\n  const dispatch = requestDispatcher(options);\n  return async (request) => {\n    let requestId: string = randomUUID();\n    try {\n      const session = await options.sessions.load(request);\n      const services = typeof options.services === \"function\" ? await (options.services as (request: Request) => S | Promise<S>)(request) : options.services;\n      const context = createRequestContext(request, services, session);\n      requestId = context.requestId;\n      return dispatch(context);\n    } catch (error) { return errorResponse(error, requestId); }\n  };\n}\n\n/** SSR dispatch reuses the original session, services, state and request ID. */\nexport function createLocalServerFetch<S>(options: Pick<ServerDispatcherOptions<S>, \"manifest\" | \"sessions\" | \"load\">): ServerFetch {\n  const dispatch = requestDispatcher(options);\n  return async (request, active) => {\n    const source = active.request;\n    if (new URL(request.url).origin !== new URL(source.url).origin) {\n      return errorResponse(new ApiError(\"INVALID_ORIGIN\", 403), active.requestId);\n    }\n    for (const name of [\"cookie\", \"authorization\"]) {\n      if (request.headers.get(name) !== source.headers.get(name)) {\n        return errorResponse(new ApiError(\"INVALID_CREDENTIALS\", 403), active.requestId);\n      }\n    }\n    const context: RequestContext<S> = { ...active, request, signal: request.signal } as RequestContext<S>;\n    return dispatch(context);\n  };\n}\n"]}

package/dist/framework-server/local.d.ts

@@ -0,0 +1,19 @@
+import type { RequestContext } from "./context.js";
+import type { ApiMethod, ServerManifest } from "./discovery.js";
+import type { SessionManager } from "./sessions.js";
+export interface LocalCallOptions<S> {
+    manifest: ServerManifest;
+    context: RequestContext<S>;
+    sessions: SessionManager;
+    load?: (file: string) => Promise<unknown>;
+}
+export interface LocalApiInput {
+    params?: Readonly<Record<string, string>>;
+    query?: Readonly<Record<string, string | number | boolean | readonly string[] | null | undefined>>;
+    body?: unknown;
+}
+/** Local calls use in-memory Request objects, never a network fetch or global context. */
+export declare function createLocalCalls<S>(options: LocalCallOptions<S>): {
+    api(clientKey: string, method: ApiMethod, input?: LocalApiInput): Promise<Response>;
+    rpc(id: string, input: unknown): Promise<Response>;
+};

package/dist/framework-server/local.js

@@ -0,0 +1,98 @@
+import { pathToFileURL } from "node:url";
+import { ApiError, dispatchApiRoute, dispatchRpc, errorResponse } from "./contracts.js";
+import { serializeJson } from "../server.js";
+function publicHeaders(request) {
+    const headers = new Headers();
+    for (const name of ["cookie", "origin", "x-meeko-csrf", "authorization"]) {
+        const value = request.headers.get(name);
+        if (value !== null)
+            headers.set(name, value);
+    }
+    return headers;
+}
+function resolvePath(pattern, params) {
+    const used = new Set();
+    const path = pattern.split("/").map((part) => {
+        const match = /^\[([A-Za-z_$][\w$]*)\]$/.exec(part);
+        const rest = /^\[\.\.\.([A-Za-z_$][\w$]*)\]$/.exec(part);
+        if (!match && !rest)
+            return part;
+        const key = (match ?? rest)[1];
+        const value = params[key];
+        if (!value)
+            throw new ApiError("INVALID_PARAMS", 400);
+        used.add(key);
+        if (rest) {
+            const segments = value.split("/");
+            if (segments.some((segment) => !segment || segment === "." || segment === ".."))
+                throw new ApiError("INVALID_PARAMS", 400);
+            return segments.map(encodeURIComponent).join("/");
+        }
+        if (value.includes("/") || value === "." || value === "..")
+            throw new ApiError("INVALID_PARAMS", 400);
+        return encodeURIComponent(value);
+    }).join("/");
+    for (const key of Object.keys(params))
+        if (!used.has(key))
+            throw new ApiError("INVALID_PARAMS", 400);
+    return path;
+}
+function routeModule(module) {
+    if (module && typeof module === "object" && "default" in module)
+        return module.default;
+    throw new ApiError("INVALID_HANDLER", 500);
+}
+/** Local calls use in-memory Request objects, never a network fetch or global context. */
+export function createLocalCalls(options) {
+    const load = options.load ?? (async (file) => import(pathToFileURL(file).href));
+    const derived = (request) => ({ ...options.context, request });
+    return {
+        async api(clientKey, method, input = {}) {
+            try {
+                const endpoint = options.manifest.api.find((entry) => entry.clientKey === clientKey && entry.method === method);
+                if (!endpoint)
+                    throw new ApiError("NOT_FOUND", 404);
+                const url = new URL(resolvePath(endpoint.pathname, input.params ?? {}), options.context.request.url);
+                for (const [key, value] of Object.entries(input.query ?? {})) {
+                    if (value === undefined || value === null)
+                        continue;
+                    if (Array.isArray(value))
+                        for (const item of value)
+                            url.searchParams.append(key, item);
+                    else
+                        url.searchParams.set(key, String(value));
+                }
+                const headers = publicHeaders(options.context.request);
+                if ((method === "GET") && Object.hasOwn(input, "body"))
+                    throw new ApiError("INVALID_BODY", 400);
+                const body = Object.hasOwn(input, "body") ? serializeJson(input.body) : undefined;
+                if (body !== undefined)
+                    headers.set("content-type", "application/json");
+                const request = new Request(url, { method, headers, signal: options.context.signal, ...(body === undefined ? {} : { body }) });
+                const definition = routeModule(await load(endpoint.file));
+                return dispatchApiRoute(definition, derived(request), options.sessions, input.params ?? {});
+            }
+            catch (error) {
+                return errorResponse(error, options.context.requestId);
+            }
+        },
+        async rpc(id, input) {
+            try {
+                const endpoint = options.manifest.rpc.find((entry) => entry.id === id);
+                if (!endpoint)
+                    throw new ApiError("NOT_FOUND", 404);
+                const headers = publicHeaders(options.context.request);
+                headers.set("content-type", "application/json");
+                const request = new Request(new URL(endpoint.pathname, options.context.request.url), {
+                    method: "POST", headers, signal: options.context.signal, body: serializeJson(input),
+                });
+                const definition = routeModule(await load(endpoint.file));
+                return dispatchRpc(definition, derived(request), options.sessions);
+            }
+            catch (error) {
+                return errorResponse(error, options.context.requestId);
+            }
+        },
+    };
+}
+//# sourceMappingURL=local.js.map

package/dist/framework-server/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/framework-server/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAKxF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAe7C,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,MAAwC;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAE,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC3H,OAAO,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACtG,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACrG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;QAAE,OAAQ,MAA+B,CAAC,OAAO,CAAC;IACjH,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAI,OAA4B;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAqB,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAqB,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3F,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAiB,EAAE,KAAK,GAAkB,EAAE;YACvE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;gBAChH,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;wBAAE,SAAS;oBACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,KAAK,MAAM,IAAI,IAAI,KAAK;4BAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;;wBAClF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvD,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAChG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClF,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/H,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAA0G,CAAC;gBACnK,OAAO,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,KAAc;YAClC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;oBACnF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC;iBACpF,CAAC,CAAC;gBACH,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAqC,CAAC;gBAC9F,OAAO,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAC7E,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { pathToFileURL } from \"node:url\";\nimport { ApiError, dispatchApiRoute, dispatchRpc, errorResponse } from \"./contracts.js\";\nimport type { ApiRouteDefinition, RpcDefinition, Schema } from \"./contracts.js\";\nimport type { RequestContext } from \"./context.js\";\nimport type { ApiMethod, ServerManifest } from \"./discovery.js\";\nimport type { SessionManager } from \"./sessions.js\";\nimport { serializeJson } from \"../server.js\";\n\nexport interface LocalCallOptions<S> {\n  manifest: ServerManifest;\n  context: RequestContext<S>;\n  sessions: SessionManager;\n  load?: (file: string) => Promise<unknown>;\n}\n\nexport interface LocalApiInput {\n  params?: Readonly<Record<string, string>>;\n  query?: Readonly<Record<string, string | number | boolean | readonly string[] | null | undefined>>;\n  body?: unknown;\n}\n\nfunction publicHeaders(request: Request): Headers {\n  const headers = new Headers();\n  for (const name of [\"cookie\", \"origin\", \"x-meeko-csrf\", \"authorization\"]) {\n    const value = request.headers.get(name);\n    if (value !== null) headers.set(name, value);\n  }\n  return headers;\n}\n\nfunction resolvePath(pattern: string, params: Readonly<Record<string, string>>): string {\n  const used = new Set<string>();\n  const path = pattern.split(\"/\").map((part) => {\n    const match = /^\\[([A-Za-z_$][\\w$]*)\\]$/.exec(part);\n    const rest = /^\\[\\.\\.\\.([A-Za-z_$][\\w$]*)\\]$/.exec(part);\n    if (!match && !rest) return part;\n    const key = (match ?? rest)![1]!;\n    const value = params[key];\n    if (!value) throw new ApiError(\"INVALID_PARAMS\", 400);\n    used.add(key);\n    if (rest) {\n      const segments = value.split(\"/\");\n      if (segments.some((segment) => !segment || segment === \".\" || segment === \"..\")) throw new ApiError(\"INVALID_PARAMS\", 400);\n      return segments.map(encodeURIComponent).join(\"/\");\n    }\n    if (value.includes(\"/\") || value === \".\" || value === \"..\") throw new ApiError(\"INVALID_PARAMS\", 400);\n    return encodeURIComponent(value);\n  }).join(\"/\");\n  for (const key of Object.keys(params)) if (!used.has(key)) throw new ApiError(\"INVALID_PARAMS\", 400);\n  return path;\n}\n\nfunction routeModule(module: unknown): unknown {\n  if (module && typeof module === \"object\" && \"default\" in module) return (module as { default: unknown }).default;\n  throw new ApiError(\"INVALID_HANDLER\", 500);\n}\n\n/** Local calls use in-memory Request objects, never a network fetch or global context. */\nexport function createLocalCalls<S>(options: LocalCallOptions<S>) {\n  const load = options.load ?? (async (file: string) => import(pathToFileURL(file).href) as Promise<unknown>);\n  const derived = (request: Request): RequestContext<S> => ({ ...options.context, request });\n  return {\n    async api(clientKey: string, method: ApiMethod, input: LocalApiInput = {}): Promise<Response> {\n      try {\n        const endpoint = options.manifest.api.find((entry) => entry.clientKey === clientKey && entry.method === method);\n        if (!endpoint) throw new ApiError(\"NOT_FOUND\", 404);\n        const url = new URL(resolvePath(endpoint.pathname, input.params ?? {}), options.context.request.url);\n        for (const [key, value] of Object.entries(input.query ?? {})) {\n          if (value === undefined || value === null) continue;\n          if (Array.isArray(value)) for (const item of value) url.searchParams.append(key, item);\n          else url.searchParams.set(key, String(value));\n        }\n        const headers = publicHeaders(options.context.request);\n        if ((method === \"GET\") && Object.hasOwn(input, \"body\")) throw new ApiError(\"INVALID_BODY\", 400);\n        const body = Object.hasOwn(input, \"body\") ? serializeJson(input.body) : undefined;\n        if (body !== undefined) headers.set(\"content-type\", \"application/json\");\n        const request = new Request(url, { method, headers, signal: options.context.signal, ...(body === undefined ? {} : { body }) });\n        const definition = routeModule(await load(endpoint.file)) as ApiRouteDefinition<Schema | undefined, Schema | undefined, Schema | undefined, Schema | undefined, S>;\n        return dispatchApiRoute(definition, derived(request), options.sessions, input.params ?? {});\n      } catch (error) { return errorResponse(error, options.context.requestId); }\n    },\n    async rpc(id: string, input: unknown): Promise<Response> {\n      try {\n        const endpoint = options.manifest.rpc.find((entry) => entry.id === id);\n        if (!endpoint) throw new ApiError(\"NOT_FOUND\", 404);\n        const headers = publicHeaders(options.context.request);\n        headers.set(\"content-type\", \"application/json\");\n        const request = new Request(new URL(endpoint.pathname, options.context.request.url), {\n          method: \"POST\", headers, signal: options.context.signal, body: serializeJson(input),\n        });\n        const definition = routeModule(await load(endpoint.file)) as RpcDefinition<Schema, Schema, S>;\n        return dispatchRpc(definition, derived(request), options.sessions);\n      } catch (error) { return errorResponse(error, options.context.requestId); }\n    },\n  };\n}\n"]}

package/dist/framework-server/node-upgrade.d.ts

@@ -0,0 +1,23 @@
+import type { IncomingMessage } from "node:http";
+import type { Duplex } from "node:stream";
+import type { SocketHub, SocketPeer } from "./socket.js";
+/** A WebSocket server library owns framing and the HTTP 101 response. */
+export interface NodeAcceptedSocket {
+    peer: SocketPeer;
+    onMessage(listener: (message: string | Uint8Array) => void): void;
+    onClose(listener: () => void): void;
+}
+export interface NodeSocketUpgradeOptions {
+    hub: SocketHub;
+    /** Fixed public origin; never infer security policy from an untrusted Host header. */
+    publicOrigin: string;
+    pathnamePrefix?: string;
+    upgrade(incoming: IncomingMessage, socket: Duplex, head: Buffer): Promise<NodeAcceptedSocket> | NodeAcceptedSocket;
+    reject?(incoming: IncomingMessage, socket: Duplex, status: number): void;
+    onError?(error: unknown): void;
+}
+/**
+ * Handles the Node `upgrade` event after policy preflight. The host supplies a
+ * WebSocket implementation; this adapter does not implement wire framing.
+ */
+export declare function createNodeSocketUpgradeHandler(options: NodeSocketUpgradeOptions): (incoming: IncomingMessage, socket: Duplex, head: Buffer) => Promise<boolean>;

package/dist/framework-server/node-upgrade.js

@@ -0,0 +1,78 @@
+import { ApiError } from "./contracts.js";
+/**
+ * Handles the Node `upgrade` event after policy preflight. The host supplies a
+ * WebSocket implementation; this adapter does not implement wire framing.
+ */
+export function createNodeSocketUpgradeHandler(options) {
+    const origin = new URL(options.publicOrigin);
+    if (origin.protocol !== "http:" && origin.protocol !== "https:")
+        throw new TypeError("Socket publicOrigin must use HTTP or HTTPS");
+    const prefix = options.pathnamePrefix ?? "/_meeko/socket";
+    if (!prefix.startsWith("/") || prefix.endsWith("/"))
+        throw new TypeError("Invalid socket pathname prefix");
+    return async (incoming, socket, head) => {
+        let url;
+        try {
+            url = new URL(incoming.url ?? "", origin);
+        }
+        catch {
+            return false;
+        }
+        if (!url.pathname.startsWith(`${prefix}/`))
+            return false;
+        const reject = (status) => { if (options.reject)
+            options.reject(incoming, socket, status);
+        else
+            socket.destroy(); };
+        const name = url.pathname.slice(prefix.length + 1);
+        if (url.origin !== origin.origin || !/^[A-Za-z_$][\w$-]*$/.test(name)) {
+            reject(400);
+            return true;
+        }
+        if (incoming.method !== "GET" || incoming.headers.upgrade?.toLowerCase() !== "websocket") {
+            reject(400);
+            return true;
+        }
+        const headers = new Headers();
+        for (const [key, value] of Object.entries(incoming.headers)) {
+            if (value !== undefined)
+                headers.set(key, Array.isArray(value) ? value.join(", ") : value);
+        }
+        const request = new Request(url, { headers });
+        const roomId = url.searchParams.get("room") ?? undefined;
+        try {
+            await options.hub.preflight(name, request, roomId);
+        }
+        catch (error) {
+            reject(error instanceof ApiError ? error.status : 500);
+            options.onError?.(error);
+            return true;
+        }
+        let accepted;
+        try {
+            accepted = await options.upgrade(incoming, socket, head);
+        }
+        catch (error) {
+            socket.destroy();
+            options.onError?.(error);
+            return true;
+        }
+        try {
+            const connection = await options.hub.accept(name, request, accepted.peer, roomId);
+            let delivery = Promise.resolve();
+            accepted.onMessage((message) => {
+                delivery = delivery.then(() => connection.receive(message)).catch((error) => {
+                    options.onError?.(error);
+                    connection.close(error instanceof ApiError && error.status < 500 ? 1008 : 1011);
+                });
+            });
+            accepted.onClose(() => connection.close());
+        }
+        catch (error) {
+            accepted.peer.close(1008, "Unauthorized");
+            options.onError?.(error);
+        }
+        return true;
+    };
+}
+//# sourceMappingURL=node-upgrade.js.map

package/dist/framework-server/node-upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-upgrade.js","sourceRoot":"","sources":["../../src/framework-server/node-upgrade.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAmB1C;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAiC;IAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACnI,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC3G,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAClD,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;;YAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACvH,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QACzD,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC3D,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChH,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACjE,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClF,IAAI,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACnF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;oBACzB,UAAU,CAAC,KAAK,CAAC,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClF,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC1C,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { IncomingMessage } from \"node:http\";\nimport type { Duplex } from \"node:stream\";\nimport type { SocketHub, SocketPeer } from \"./socket.js\";\nimport { ApiError } from \"./contracts.js\";\n\n/** A WebSocket server library owns framing and the HTTP 101 response. */\nexport interface NodeAcceptedSocket {\n  peer: SocketPeer;\n  onMessage(listener: (message: string | Uint8Array) => void): void;\n  onClose(listener: () => void): void;\n}\n\nexport interface NodeSocketUpgradeOptions {\n  hub: SocketHub;\n  /** Fixed public origin; never infer security policy from an untrusted Host header. */\n  publicOrigin: string;\n  pathnamePrefix?: string;\n  upgrade(incoming: IncomingMessage, socket: Duplex, head: Buffer): Promise<NodeAcceptedSocket> | NodeAcceptedSocket;\n  reject?(incoming: IncomingMessage, socket: Duplex, status: number): void;\n  onError?(error: unknown): void;\n}\n\n/**\n * Handles the Node `upgrade` event after policy preflight. The host supplies a\n * WebSocket implementation; this adapter does not implement wire framing.\n */\nexport function createNodeSocketUpgradeHandler(options: NodeSocketUpgradeOptions): (incoming: IncomingMessage, socket: Duplex, head: Buffer) => Promise<boolean> {\n  const origin = new URL(options.publicOrigin);\n  if (origin.protocol !== \"http:\" && origin.protocol !== \"https:\") throw new TypeError(\"Socket publicOrigin must use HTTP or HTTPS\");\n  const prefix = options.pathnamePrefix ?? \"/_meeko/socket\";\n  if (!prefix.startsWith(\"/\") || prefix.endsWith(\"/\")) throw new TypeError(\"Invalid socket pathname prefix\");\n  return async (incoming, socket, head) => {\n    let url: URL;\n    try { url = new URL(incoming.url ?? \"\", origin); }\n    catch { return false; }\n    if (!url.pathname.startsWith(`${prefix}/`)) return false;\n    const reject = (status: number) => { if (options.reject) options.reject(incoming, socket, status); else socket.destroy(); };\n    const name = url.pathname.slice(prefix.length + 1);\n    if (url.origin !== origin.origin || !/^[A-Za-z_$][\\w$-]*$/.test(name)) { reject(400); return true; }\n    if (incoming.method !== \"GET\" || incoming.headers.upgrade?.toLowerCase() !== \"websocket\") { reject(400); return true; }\n    const headers = new Headers();\n    for (const [key, value] of Object.entries(incoming.headers)) {\n      if (value !== undefined) headers.set(key, Array.isArray(value) ? value.join(\", \") : value);\n    }\n    const request = new Request(url, { headers });\n    const roomId = url.searchParams.get(\"room\") ?? undefined;\n    try { await options.hub.preflight(name, request, roomId); }\n    catch (error) { reject(error instanceof ApiError ? error.status : 500); options.onError?.(error); return true; }\n    let accepted: NodeAcceptedSocket;\n    try { accepted = await options.upgrade(incoming, socket, head); }\n    catch (error) { socket.destroy(); options.onError?.(error); return true; }\n    try {\n      const connection = await options.hub.accept(name, request, accepted.peer, roomId);\n      let delivery = Promise.resolve();\n      accepted.onMessage((message) => {\n        delivery = delivery.then(() => connection.receive(message)).catch((error: unknown) => {\n          options.onError?.(error);\n          connection.close(error instanceof ApiError && error.status < 500 ? 1008 : 1011);\n        });\n      });\n      accepted.onClose(() => connection.close());\n    } catch (error) {\n      accepted.peer.close(1008, \"Unauthorized\");\n      options.onError?.(error);\n    }\n    return true;\n  };\n}\n"]}

package/dist/framework-server/node-websocket.d.ts

@@ -0,0 +1,16 @@
+import { type Server as HttpServer } from "node:http";
+import type { NodeSocketUpgradeOptions } from "./node-upgrade.js";
+export interface NodeWebSocketOptions extends Omit<NodeSocketUpgradeOptions, "upgrade" | "reject"> {
+    /** The same HTTP server used by the Fetch handler. */
+    server: HttpServer;
+    /** Maximum WebSocket frame payload, enforced before decoding. Defaults to 64 KiB. */
+    maxMessageBytes?: number;
+    /** Ping interval and idle timeout. Defaults to 30 seconds. */
+    heartbeatMs?: number;
+}
+export interface NodeWebSocketServer {
+    /** Detaches the upgrade listener and closes all peers. The HTTP server remains owned by its caller. */
+    close(): Promise<void>;
+}
+/** Attach Meeko channels to a Node HTTP server using ws for protocol framing. */
+export declare function attachNodeWebSocketServer(options: NodeWebSocketOptions): NodeWebSocketServer;

package/dist/framework-server/node-websocket.js

@@ -0,0 +1,125 @@
+import { STATUS_CODES } from "node:http";
+import { createRequire } from "node:module";
+import { createNodeSocketUpgradeHandler } from "./node-upgrade.js";
+/** Attach Meeko channels to a Node HTTP server using ws for protocol framing. */
+export function attachNodeWebSocketServer(options) {
+    const maxPayload = options.maxMessageBytes ?? 64 * 1024;
+    const heartbeatMs = options.heartbeatMs ?? 30_000;
+    if (!Number.isSafeInteger(maxPayload) || maxPayload <= 0)
+        throw new RangeError("Invalid socket message limit");
+    if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs <= 0)
+        throw new RangeError("Invalid socket heartbeat interval");
+    // Keep the optional server transport out of engine-only and HTTP-only imports.
+    const { WebSocket: WebSocketClass, WebSocketServer } = createRequire(import.meta.url)("ws");
+    const webSockets = new WebSocketServer({ noServer: true, maxPayload, perMessageDeflate: false });
+    const alive = new WeakMap();
+    let closing = false;
+    let closePromise;
+    const upgrade = (incoming, socket, head) => new Promise((resolve, reject) => {
+        try {
+            webSockets.handleUpgrade(incoming, socket, head, (peer) => {
+                alive.set(peer, true);
+                peer.on("pong", () => alive.set(peer, true));
+                peer.on("error", (error) => options.onError?.(error));
+                const pending = [];
+                let pendingBytes = 0;
+                let messageListener;
+                let closeListener;
+                let didClose = false;
+                peer.on("message", (data, isBinary) => {
+                    if (isBinary) {
+                        peer.close(1003, "Text messages required");
+                        return;
+                    }
+                    const bytes = Array.isArray(data) ? Buffer.concat(data) : Buffer.isBuffer(data) ? data : Buffer.from(data);
+                    if (messageListener) {
+                        messageListener(bytes);
+                        return;
+                    }
+                    pendingBytes += bytes.byteLength;
+                    if (pendingBytes > maxPayload) {
+                        peer.close(1009, "Message buffer exceeded");
+                        return;
+                    }
+                    pending.push(bytes);
+                });
+                peer.once("close", () => { didClose = true; closeListener?.(); });
+                resolve({
+                    peer: {
+                        send(message) {
+                            if (peer.readyState !== WebSocketClass.OPEN)
+                                throw new Error("Socket is disconnected");
+                            peer.send(message);
+                        },
+                        close(code, reason) { if (peer.readyState === WebSocketClass.OPEN)
+                            peer.close(code, reason); },
+                        get bufferedAmount() { return peer.bufferedAmount; },
+                    },
+                    onMessage(listener) {
+                        messageListener = listener;
+                        for (const message of pending)
+                            listener(message);
+                        pending.length = 0;
+                        pendingBytes = 0;
+                    },
+                    onClose(listener) { closeListener = listener; if (didClose)
+                        listener(); },
+                });
+            });
+        }
+        catch (error) {
+            reject(error);
+        }
+    });
+    const bridge = createNodeSocketUpgradeHandler({
+        hub: options.hub,
+        publicOrigin: options.publicOrigin,
+        ...(options.pathnamePrefix ? { pathnamePrefix: options.pathnamePrefix } : {}),
+        upgrade,
+        reject(_incoming, socket, status) {
+            if (!socket.destroyed)
+                socket.end(`HTTP/1.1 ${status} ${STATUS_CODES[status] ?? "Error"}\r\nConnection: close\r\nContent-Length: 0\r\n\r\n`);
+        },
+        ...(options.onError ? { onError: options.onError } : {}),
+    });
+    const onUpgrade = (incoming, socket, head) => {
+        if (closing) {
+            socket.destroy();
+            return;
+        }
+        void bridge(incoming, socket, head).then((handled) => {
+            if (!handled)
+                socket.destroy();
+        }).catch((error) => {
+            options.onError?.(error);
+            socket.destroy();
+        });
+    };
+    options.server.on("upgrade", onUpgrade);
+    const heartbeat = setInterval(() => {
+        for (const peer of webSockets.clients) {
+            if (alive.get(peer) === false) {
+                peer.terminate();
+                continue;
+            }
+            alive.set(peer, false);
+            if (peer.readyState === WebSocketClass.OPEN)
+                peer.ping();
+        }
+    }, heartbeatMs);
+    heartbeat.unref();
+    return {
+        close() {
+            if (closePromise)
+                return closePromise;
+            closing = true;
+            options.server.off("upgrade", onUpgrade);
+            clearInterval(heartbeat);
+            for (const peer of webSockets.clients)
+                peer.terminate();
+            closePromise = new Promise((resolve, reject) => webSockets.close((error) => error ? reject(error) : resolve()));
+            return closePromise;
+        },
+    };
+}
+//# sourceMappingURL=node-websocket.js.map

package/dist/framework-server/node-websocket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-websocket.js","sourceRoot":"","sources":["../../src/framework-server/node-websocket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAmD,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAiBnE,iFAAiF;AACjF,MAAM,UAAU,yBAAyB,CAAC,OAA6B;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;IAC/G,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IACtH,+EAA+E;IAC/E,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAwB,CAAC;IACnH,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAI,OAAO,EAAsB,CAAC;IAChD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAuC,CAAC;IAE5C,MAAM,OAAO,GAAG,CAAC,QAAyB,EAAE,MAAc,EAAE,IAAY,EAA+B,EAAE,CACvG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,UAAU,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACtB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;gBACjC,IAAI,YAAY,GAAG,CAAC,CAAC;gBACrB,IAAI,eAAqE,CAAC;gBAC1E,IAAI,aAAuC,CAAC;gBAC5C,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;oBACpC,IAAI,QAAQ,EAAE,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC3G,IAAI,eAAe,EAAE,CAAC;wBAAC,eAAe,CAAC,KAAK,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACxD,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC;oBACjC,IAAI,YAAY,GAAG,UAAU,EAAE,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACvF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClE,OAAO,CAAC;oBACN,IAAI,EAAE;wBACJ,IAAI,CAAC,OAAO;4BACV,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI;gCAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;4BACvF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrB,CAAC;wBACD,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI;4BAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;wBAC9F,IAAI,cAAc,KAAK,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;qBACrD;oBACD,SAAS,CAAC,QAAQ;wBAChB,eAAe,GAAG,QAAQ,CAAC;wBAC3B,KAAK,MAAM,OAAO,IAAI,OAAO;4BAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;wBACjD,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;wBACnB,YAAY,GAAG,CAAC,CAAC;oBACnB,CAAC;oBACD,OAAO,CAAC,QAAQ,IAAI,aAAa,GAAG,QAAQ,CAAC,CAAC,IAAI,QAAQ;wBAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;iBAC1E,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,8BAA8B,CAAC;QAC5C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO;QACP,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM;YAC9B,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,YAAY,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,OAAO,oDAAoD,CAAC,CAAC;QAC/I,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,QAAyB,EAAE,MAAc,EAAE,IAAY,EAAQ,EAAE;QAClF,IAAI,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACnD,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,UAAU,KAAK,cAAc,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC,EAAE,WAAW,CAAC,CAAC;IAChB,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,OAAO;QACL,KAAK;YACH,IAAI,YAAY;gBAAE,OAAO,YAAY,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACzC,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,OAAO;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YACxD,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtH,OAAO,YAAY,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { STATUS_CODES, type IncomingMessage, type Server as HttpServer } from \"node:http\";\nimport { createRequire } from \"node:module\";\nimport type { Duplex } from \"node:stream\";\nimport type WebSocket from \"ws\";\nimport { createNodeSocketUpgradeHandler } from \"./node-upgrade.js\";\nimport type { NodeAcceptedSocket, NodeSocketUpgradeOptions } from \"./node-upgrade.js\";\n\nexport interface NodeWebSocketOptions extends Omit<NodeSocketUpgradeOptions, \"upgrade\" | \"reject\"> {\n  /** The same HTTP server used by the Fetch handler. */\n  server: HttpServer;\n  /** Maximum WebSocket frame payload, enforced before decoding. Defaults to 64 KiB. */\n  maxMessageBytes?: number;\n  /** Ping interval and idle timeout. Defaults to 30 seconds. */\n  heartbeatMs?: number;\n}\n\nexport interface NodeWebSocketServer {\n  /** Detaches the upgrade listener and closes all peers. The HTTP server remains owned by its caller. */\n  close(): Promise<void>;\n}\n\n/** Attach Meeko channels to a Node HTTP server using ws for protocol framing. */\nexport function attachNodeWebSocketServer(options: NodeWebSocketOptions): NodeWebSocketServer {\n  const maxPayload = options.maxMessageBytes ?? 64 * 1024;\n  const heartbeatMs = options.heartbeatMs ?? 30_000;\n  if (!Number.isSafeInteger(maxPayload) || maxPayload <= 0) throw new RangeError(\"Invalid socket message limit\");\n  if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs <= 0) throw new RangeError(\"Invalid socket heartbeat interval\");\n  // Keep the optional server transport out of engine-only and HTTP-only imports.\n  const { WebSocket: WebSocketClass, WebSocketServer } = createRequire(import.meta.url)(\"ws\") as typeof import(\"ws\");\n  const webSockets = new WebSocketServer({ noServer: true, maxPayload, perMessageDeflate: false });\n  const alive = new WeakMap<WebSocket, boolean>();\n  let closing = false;\n  let closePromise: Promise<void> | undefined;\n\n  const upgrade = (incoming: IncomingMessage, socket: Duplex, head: Buffer): Promise<NodeAcceptedSocket> =>\n    new Promise((resolve, reject) => {\n      try {\n        webSockets.handleUpgrade(incoming, socket, head, (peer) => {\n          alive.set(peer, true);\n          peer.on(\"pong\", () => alive.set(peer, true));\n          peer.on(\"error\", (error) => options.onError?.(error));\n          const pending: Uint8Array[] = [];\n          let pendingBytes = 0;\n          let messageListener: ((message: string | Uint8Array) => void) | undefined;\n          let closeListener: (() => void) | undefined;\n          let didClose = false;\n          peer.on(\"message\", (data, isBinary) => {\n            if (isBinary) { peer.close(1003, \"Text messages required\"); return; }\n            const bytes = Array.isArray(data) ? Buffer.concat(data) : Buffer.isBuffer(data) ? data : Buffer.from(data);\n            if (messageListener) { messageListener(bytes); return; }\n            pendingBytes += bytes.byteLength;\n            if (pendingBytes > maxPayload) { peer.close(1009, \"Message buffer exceeded\"); return; }\n            pending.push(bytes);\n          });\n          peer.once(\"close\", () => { didClose = true; closeListener?.(); });\n          resolve({\n            peer: {\n              send(message) {\n                if (peer.readyState !== WebSocketClass.OPEN) throw new Error(\"Socket is disconnected\");\n                peer.send(message);\n              },\n              close(code, reason) { if (peer.readyState === WebSocketClass.OPEN) peer.close(code, reason); },\n              get bufferedAmount() { return peer.bufferedAmount; },\n            },\n            onMessage(listener) {\n              messageListener = listener;\n              for (const message of pending) listener(message);\n              pending.length = 0;\n              pendingBytes = 0;\n            },\n            onClose(listener) { closeListener = listener; if (didClose) listener(); },\n          });\n        });\n      } catch (error) { reject(error); }\n    });\n\n  const bridge = createNodeSocketUpgradeHandler({\n    hub: options.hub,\n    publicOrigin: options.publicOrigin,\n    ...(options.pathnamePrefix ? { pathnamePrefix: options.pathnamePrefix } : {}),\n    upgrade,\n    reject(_incoming, socket, status) {\n      if (!socket.destroyed) socket.end(`HTTP/1.1 ${status} ${STATUS_CODES[status] ?? \"Error\"}\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n`);\n    },\n    ...(options.onError ? { onError: options.onError } : {}),\n  });\n  const onUpgrade = (incoming: IncomingMessage, socket: Duplex, head: Buffer): void => {\n    if (closing) { socket.destroy(); return; }\n    void bridge(incoming, socket, head).then((handled) => {\n      if (!handled) socket.destroy();\n    }).catch((error: unknown) => {\n      options.onError?.(error);\n      socket.destroy();\n    });\n  };\n  options.server.on(\"upgrade\", onUpgrade);\n  const heartbeat = setInterval(() => {\n    for (const peer of webSockets.clients) {\n      if (alive.get(peer) === false) { peer.terminate(); continue; }\n      alive.set(peer, false);\n      if (peer.readyState === WebSocketClass.OPEN) peer.ping();\n    }\n  }, heartbeatMs);\n  heartbeat.unref();\n\n  return {\n    close() {\n      if (closePromise) return closePromise;\n      closing = true;\n      options.server.off(\"upgrade\", onUpgrade);\n      clearInterval(heartbeat);\n      for (const peer of webSockets.clients) peer.terminate();\n      closePromise = new Promise<void>((resolve, reject) => webSockets.close((error) => error ? reject(error) : resolve()));\n      return closePromise;\n    },\n  };\n}\n"]}

package/dist/framework-server/openapi.d.ts

@@ -0,0 +1,17 @@
+import type { Schema } from "./contracts.js";
+import type { ServerManifest } from "./discovery.js";
+export interface OpenApiOptions {
+    manifest: ServerManifest;
+    info: {
+        title: string;
+        version: string;
+    };
+    /** Only schemas explicitly exported from shared/schemas belong here. */
+    publicSchemas: Readonly<Record<string, Schema>>;
+    /** For Valibot, supply a converter from @valibot/to-json-schema. */
+    toJsonSchema(schema: Schema): unknown;
+    load?: (file: string) => Promise<unknown>;
+    cookieName?: string;
+}
+/** Generates OpenAPI only from a caller-provided public schema registry. */
+export declare function generateOpenApi(options: OpenApiOptions): Promise<Record<string, unknown>>;

package/dist/framework-server/openapi.js

@@ -0,0 +1,118 @@
+import { pathToFileURL } from "node:url";
+import { serializeJson } from "../server.js";
+function asSchema(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error(`OpenAPI schema ${name} is not representable as JSON Schema`);
+    serializeJson(value);
+    return value;
+}
+function properties(value, name) {
+    if (value.type !== "object" || !value.properties || typeof value.properties !== "object" || Array.isArray(value.properties))
+        throw new Error(`OpenAPI ${name} must convert to an object schema with properties`);
+    const entries = Object.entries(value.properties);
+    const result = {};
+    for (const [key, schema] of entries)
+        result[key] = asSchema(schema, `${name}.${key}`);
+    const required = new Set(Array.isArray(value.required) ? value.required.filter((key) => typeof key === "string") : []);
+    return { properties: result, required };
+}
+function publicPath(pathname) {
+    return pathname.replace(/\[\.\.\.[^\]]+\]/g, () => { throw new Error(`OpenAPI cannot represent catch-all route ${pathname}`); })
+        .replace(/\[([A-Za-z_$][\w$]*)\]/g, "{$1}");
+}
+/** Generates OpenAPI only from a caller-provided public schema registry. */
+export async function generateOpenApi(options) {
+    const load = options.load ?? (async (file) => import(pathToFileURL(file).href));
+    const registry = new Map();
+    for (const [name, schema] of Object.entries(options.publicSchemas)) {
+        if (!/^[A-Za-z_$][\w$]*$/.test(name))
+            throw new Error(`Invalid public schema name: ${name}`);
+        if (registry.has(schema))
+            throw new Error(`Duplicate public schema instance: ${name}`);
+        registry.set(schema, name);
+    }
+    const schemas = {};
+    const ref = (schema, label) => {
+        if (!schema)
+            throw new Error(`OpenAPI ${label} requires a schema`);
+        const name = registry.get(schema);
+        if (!name)
+            throw new Error(`OpenAPI ${label} uses a schema outside publicSchemas`);
+        if (!schemas[name]) {
+            let converted;
+            try {
+                converted = options.toJsonSchema(schema);
+            }
+            catch (error) {
+                throw new Error(`OpenAPI schema ${name} cannot be converted: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            schemas[name] = asSchema(converted, name);
+        }
+        return { $ref: `#/components/schemas/${name}` };
+    };
+    const paths = {};
+    const usePath = (path) => paths[path] ??= {};
+    const requireDefinition = async (file) => {
+        const module = await load(file);
+        if (!module || typeof module !== "object" || !("default" in module) || !module.default || typeof module.default !== "object")
+            throw new Error(`OpenAPI handler has no default definition: ${file}`);
+        return module.default;
+    };
+    for (const endpoint of options.manifest.api) {
+        const definition = await requireDefinition(endpoint.file);
+        if (definition.contentType === "response")
+            throw new Error(`OpenAPI non-JSON response requires an explicit representation: ${endpoint.file}`);
+        const operation = { operationId: `${endpoint.clientKey.replaceAll(".", "_")}_${endpoint.method.toLowerCase()}`, responses: { "200": { description: "OK", content: { "application/json": { schema: ref(definition.response, `${endpoint.file} response`) } } } } };
+        const parameters = [];
+        const routeParams = [...endpoint.pathname.matchAll(/\[([A-Za-z_$][\w$]*)\]/g)].map((match) => match[1]);
+        if (routeParams.length) {
+            const { $ref } = ref(definition.params, `${endpoint.file} params`);
+            const converted = schemas[$ref.slice("#/components/schemas/".length)];
+            const object = properties(converted, `${endpoint.file} params`);
+            for (const name of routeParams) {
+                const schema = object.properties[name];
+                if (!schema)
+                    throw new Error(`OpenAPI path parameter ${name} is missing from ${endpoint.file} params schema`);
+                parameters.push({ in: "path", name, required: true, schema });
+            }
+        }
+        if (definition.query) {
+            const { $ref } = ref(definition.query, `${endpoint.file} query`);
+            const converted = schemas[$ref.slice("#/components/schemas/".length)];
+            const object = properties(converted, `${endpoint.file} query`);
+            for (const [name, schema] of Object.entries(object.properties))
+                parameters.push({ in: "query", name, required: object.required.has(name), schema });
+        }
+        if (parameters.length)
+            operation.parameters = parameters;
+        if (definition.body)
+            operation.requestBody = { required: true, content: { "application/json": { schema: ref(definition.body, `${endpoint.file} body`) } } };
+        if (definition.auth === "required")
+            operation.security = [{ sessionCookie: [] }];
+        const path = publicPath(endpoint.pathname);
+        const item = usePath(path);
+        const method = endpoint.method.toLowerCase();
+        if (item[method])
+            throw new Error(`OpenAPI duplicate operation: ${endpoint.method} ${path}`);
+        item[method] = operation;
+    }
+    for (const endpoint of options.manifest.rpc) {
+        const definition = await requireDefinition(endpoint.file);
+        const item = usePath(endpoint.pathname);
+        if (item.post)
+            throw new Error(`OpenAPI duplicate operation: POST ${endpoint.pathname}`);
+        item.post = {
+            operationId: `rpc_${endpoint.id.replaceAll(".", "_")}`,
+            requestBody: { required: true, content: { "application/json": { schema: ref(definition.input, `${endpoint.file} input`) } } },
+            responses: { "200": { description: "OK", content: { "application/json": { schema: ref(definition.output, `${endpoint.file} output`) } } } },
+            ...(definition.auth === "required" ? { security: [{ sessionCookie: [] }] } : {}),
+        };
+    }
+    return {
+        openapi: "3.1.0",
+        info: options.info,
+        paths,
+        components: { schemas, securitySchemes: { sessionCookie: { type: "apiKey", in: "cookie", name: options.cookieName ?? "__Host-meeko.sid" } } },
+    };
+}
+//# sourceMappingURL=openapi.js.map