@mokly/mokly 0.8.0

package/dist/server/confined_file.js

@@ -0,0 +1,49 @@
+/** Read regular files without following links inside a retained artifact root. */
+import fs from "node:fs";
+import path from "node:path";
+export function readConfinedFile(directory, relative) {
+    const root = path.resolve(directory);
+    const file = path.resolve(root, relative);
+    if (!file.startsWith(root + path.sep))
+        return undefined;
+    let descriptor;
+    try {
+        const ancestors = [root];
+        let parent = root;
+        for (const segment of path
+            .relative(root, file)
+            .split(path.sep)
+            .slice(0, -1)) {
+            parent = path.join(parent, segment);
+            ancestors.push(parent);
+        }
+        const directories = ancestors.map((candidate) => fs.lstatSync(candidate));
+        if (directories.some((stat) => !stat.isDirectory()))
+            return undefined;
+        const leaf = fs.lstatSync(file);
+        if (!leaf.isFile())
+            return undefined;
+        descriptor = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        const opened = fs.fstatSync(descriptor);
+        if (!opened.isFile() || opened.dev !== leaf.dev || opened.ino !== leaf.ino)
+            return undefined;
+        const content = fs.readFileSync(descriptor);
+        if (ancestors.some((candidate, index) => {
+            const current = fs.lstatSync(candidate);
+            const previous = directories[index];
+            return (!current.isDirectory() ||
+                current.dev !== previous.dev ||
+                current.ino !== previous.ino);
+        }))
+            return undefined;
+        return content;
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (descriptor !== undefined)
+            fs.closeSync(descriptor);
+    }
+}
+//# sourceMappingURL=confined_file.js.map

package/dist/server/confined_file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confined_file.js","sourceRoot":"","sources":["../../src/server/confined_file.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,OAAO,IAAI,IAAI;aACvB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;aACpB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;aACf,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1E,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACtE,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,SAAS,CAAC;QACrC,UAAU,GAAG,EAAE,CAAC,QAAQ,CACtB,IAAI,EACJ,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAC1E,CAAC;QACF,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;YACxE,OAAO,SAAS,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC5C,IACE,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAE,CAAC;YACrC,OAAO,CACL,CAAC,OAAO,CAAC,WAAW,EAAE;gBACtB,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;gBAC5B,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAC7B,CAAC;QACJ,CAAC,CAAC;YAEF,OAAO,SAAS,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/server/controls/http.d.ts

@@ -0,0 +1,6 @@
+/** Private same-origin admission and immutable sandboxed memory responses. */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { ComponentRenderService } from "./service.js";
+export declare function localHost(request: IncomingMessage): string | undefined;
+export declare function handleControls(request: IncomingMessage, response: ServerResponse, service: ComponentRenderService): Promise<void>;
+//# sourceMappingURL=http.d.ts.map

package/dist/server/controls/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/server/controls/http.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE3D,wBAAgB,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAMtE;AACD,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA6Ef"}

package/dist/server/controls/http.js

@@ -0,0 +1,86 @@
+import { ComponentRenderError, renderStatus, } from "../../components/render_types.js";
+import { safeDecodePath } from "../respond.js";
+export function localHost(request) {
+    const port = request.socket.localPort;
+    const host = request.headers.host;
+    return host === `127.0.0.1:${port}` || host === `localhost:${port}`
+        ? host
+        : undefined;
+}
+export async function handleControls(request, response, service) {
+    response.setHeader("cache-control", "no-store");
+    response.setHeader("x-content-type-options", "nosniff");
+    try {
+        const host = localHost(request);
+        if (!host)
+            throw new ComponentRenderError("forbidden", "This request is not allowed.");
+        const url = new URL(request.url, `http://${host}`);
+        if (url.pathname.startsWith("/__mokly/components/renders/")) {
+            if (request.method !== "GET" && request.method !== "HEAD")
+                throw new ComponentRenderError("method", "Use GET to open this preview.");
+            const [id, ...pieces] = url.pathname
+                .slice("/__mokly/components/renders/".length)
+                .split("/");
+            const route = safeDecodePath(pieces.join("/"));
+            const bundle = service.store.get(id ?? "");
+            const file = route && bundle.files.get(route);
+            if (!file)
+                throw new ComponentRenderError("unknown-entry", "Preview not found.");
+            response.setHeader("content-type", file.type);
+            if (file.type.startsWith("text/html"))
+                response.setHeader("content-security-policy", "sandbox allow-same-origin; frame-ancestors 'self'");
+            response.writeHead(200);
+            response.end(request.method === "HEAD" ? undefined : file.bytes);
+            return;
+        }
+        if (url.pathname !== "/__mokly/components/render")
+            throw new ComponentRenderError("unknown-entry", "Not found.");
+        if (request.method !== "POST")
+            throw new ComponentRenderError("method", "Use POST to update props.");
+        if (request.headers.origin !== `http://${host}` ||
+            request.headers["x-mokly-render-token"] !== service.token)
+            throw new ComponentRenderError("forbidden", "This request is not allowed. Reload the catalogue and try again.");
+        if (!/^application\/json(?:\s*;\s*charset=utf-8)?$/i.test(request.headers["content-type"] ?? ""))
+            throw new ComponentRenderError("invalid-input", "Send the prop values as JSON.");
+        const controller = new AbortController();
+        response.once("close", () => controller.abort());
+        const value = await readJson(request);
+        const result = await service.render(value, controller.signal);
+        json(response, 200, result, request.method);
+    }
+    catch (error) {
+        const failure = error instanceof ComponentRenderError
+            ? error
+            : new ComponentRenderError("render-failed", "The preview could not be rendered. Try again or reset the props.");
+        if (!response.destroyed)
+            json(response, renderStatus[failure.code], { code: failure.code, message: failure.message }, request.method);
+    }
+}
+function json(response, status, body, method) {
+    response.writeHead(status, {
+        "content-type": "application/json; charset=utf-8",
+    });
+    response.end(method === "HEAD" ? undefined : JSON.stringify(body));
+}
+async function readJson(request) {
+    if (Number(request.headers["content-length"] ?? 0) > 65536) {
+        request.resume();
+        throw new ComponentRenderError("too-large", "The prop values are too large.");
+    }
+    const chunks = [];
+    let length = 0;
+    for await (const data of request) {
+        const chunk = Buffer.from(data);
+        length += chunk.byteLength;
+        if (length > 65536)
+            throw new ComponentRenderError("too-large", "The prop values are too large.");
+        chunks.push(chunk);
+    }
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new ComponentRenderError("invalid-input", "The prop values could not be read. Try again.");
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/server/controls/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/server/controls/http.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,EACpB,YAAY,GACb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,MAAM,UAAU,SAAS,CAAC,OAAwB;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,OAAO,IAAI,KAAK,aAAa,IAAI,EAAE,IAAI,IAAI,KAAK,aAAa,IAAI,EAAE;QACjE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB,EACxB,QAAwB,EACxB,OAA+B;IAE/B,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,8BAA8B,CAC/B,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBACvD,MAAM,IAAI,oBAAoB,CAC5B,QAAQ,EACR,+BAA+B,CAChC,CAAC;YACJ,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ;iBACjC,KAAK,CAAC,8BAA8B,CAAC,MAAM,CAAC;iBAC5C,KAAK,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI;gBACP,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;YACxE,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBACnC,QAAQ,CAAC,SAAS,CAChB,yBAAyB,EACzB,mDAAmD,CACpD,CAAC;YACJ,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,4BAA4B;YAC/C,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAC3B,MAAM,IAAI,oBAAoB,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;QACxE,IACE,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE;YAC3C,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,OAAO,CAAC,KAAK;YAEzD,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,kEAAkE,CACnE,CAAC;QACJ,IACE,CAAC,+CAA+C,CAAC,IAAI,CACnD,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CACtC;YAED,MAAM,IAAI,oBAAoB,CAC5B,eAAe,EACf,+BAA+B,CAChC,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACX,KAAK,YAAY,oBAAoB;YACnC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,oBAAoB,CACtB,eAAe,EACf,kEAAkE,CACnE,CAAC;QACR,IAAI,CAAC,QAAQ,CAAC,SAAS;YACrB,IAAI,CACF,QAAQ,EACR,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAC1B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAChD,OAAO,CAAC,MAAM,CACf,CAAC;IACN,CAAC;AACH,CAAC;AACD,SAAS,IAAI,CACX,QAAwB,EACxB,MAAc,EACd,IAAa,EACb,MAAe;IAEf,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;KAClD,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,OAAwB;IAC9C,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;QAC3D,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC3B,IAAI,MAAM,GAAG,KAAK;YAChB,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,gCAAgC,CACjC,CAAC;QACJ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAC5B,eAAe,EACf,+CAA+C,CAChD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/server/controls/queue.d.ts

@@ -0,0 +1,19 @@
+/** One active job, eight queued pages, latest request per page, bounded termination. */
+import { type ComponentRenderRequest } from "../../components/render_types.js";
+import type { TransientRender } from "./transient_assets.js";
+import type { RenderWorkerFactory } from "./worker_client.js";
+export declare class RenderQueue {
+    private readonly factory;
+    private readonly timeoutMs;
+    private readonly pending;
+    private active;
+    private worker;
+    private draining;
+    private closed;
+    constructor(factory: RenderWorkerFactory, timeoutMs?: number);
+    render(request: ComponentRenderRequest, signal: AbortSignal): Promise<TransientRender>;
+    close(): Promise<void>;
+    private start;
+    private drain;
+}
+//# sourceMappingURL=queue.d.ts.map

package/dist/server/controls/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/server/controls/queue.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAgB,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAQ5E,qBAAa,WAAW;IAOpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAP5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,QAAQ,CAA4B;IAC5C,OAAO,CAAC,MAAM,CAAS;gBAEJ,OAAO,EAAE,mBAAmB,EAC5B,SAAS,SAAS;IAGrC,MAAM,CACJ,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,eAAe,CAAC;IA+CrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,OAAO,CAAC,KAAK;YAMC,KAAK;CAyCpB"}

package/dist/server/controls/queue.js

@@ -0,0 +1,107 @@
+/** One active job, eight queued pages, latest request per page, bounded termination. */
+import { ComponentRenderError, } from "../../components/render_types.js";
+export class RenderQueue {
+    factory;
+    timeoutMs;
+    pending = [];
+    active;
+    worker;
+    draining;
+    closed = false;
+    constructor(factory, timeoutMs = 10_000) {
+        this.factory = factory;
+        this.timeoutMs = timeoutMs;
+    }
+    render(request, signal) {
+        if (this.closed || signal.aborted)
+            return Promise.reject(cancelled());
+        for (const job of this.pending.filter((job) => job.request.pageId === request.pageId))
+            job.controller.abort();
+        if (this.active?.request.pageId === request.pageId)
+            this.active.controller.abort();
+        if (this.pending.length >= 8)
+            return Promise.reject(new ComponentRenderError("capacity", "The renderer is busy. Try again shortly."));
+        return new Promise((resolve, reject) => {
+            const controller = new AbortController();
+            const abort = () => controller.abort();
+            const cleanup = () => signal.removeEventListener("abort", abort);
+            const job = {
+                request,
+                controller,
+                resolve: (value) => {
+                    cleanup();
+                    resolve(value);
+                },
+                reject: (error) => {
+                    cleanup();
+                    reject(error);
+                },
+            };
+            controller.signal.addEventListener("abort", () => {
+                const index = this.pending.indexOf(job);
+                if (index >= 0) {
+                    this.pending.splice(index, 1);
+                    job.reject(cancelled());
+                }
+            }, { once: true });
+            signal.addEventListener("abort", abort, { once: true });
+            this.pending.push(job);
+            this.start();
+        });
+    }
+    async close() {
+        this.closed = true;
+        for (const job of [...this.pending])
+            job.controller.abort();
+        this.active?.controller.abort();
+        await this.draining;
+        await this.worker?.close();
+        this.worker = undefined;
+    }
+    start() {
+        this.draining ??= this.drain().finally(() => {
+            this.draining = undefined;
+            if (!this.closed && this.pending.length)
+                this.start();
+        });
+    }
+    async drain() {
+        while (!this.closed && this.pending.length) {
+            const job = this.pending.shift();
+            this.active = job;
+            let timer;
+            let abort = () => { };
+            try {
+                this.worker ??= this.factory.create();
+                const interrupted = new Promise((_resolve, reject) => {
+                    abort = () => reject(cancelled());
+                    job.controller.signal.addEventListener("abort", abort, {
+                        once: true,
+                    });
+                    timer = setTimeout(() => reject(new ComponentRenderError("render-failed", "The preview took too long. Try again or reset the props.")), this.timeoutMs);
+                });
+                const result = await Promise.race([
+                    this.worker.render(job.request),
+                    interrupted,
+                ]);
+                if (job.controller.signal.aborted)
+                    throw cancelled();
+                job.resolve(result);
+            }
+            catch (error) {
+                await this.worker?.close();
+                this.worker = undefined;
+                job.reject(error);
+            }
+            finally {
+                clearTimeout(timer);
+                job.controller.signal.removeEventListener("abort", abort);
+                this.active = undefined;
+            }
+        }
+    }
+}
+function cancelled() {
+    return new ComponentRenderError("cancelled", "This preview request was replaced.");
+}
+//# sourceMappingURL=queue.js.map

package/dist/server/controls/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../../src/server/controls/queue.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EACL,oBAAoB,GAErB,MAAM,kCAAkC,CAAC;AAU1C,MAAM,OAAO,WAAW;IAOH;IACA;IAPF,OAAO,GAAU,EAAE,CAAC;IAC7B,MAAM,CAAkB;IACxB,MAAM,CAA2B;IACjC,QAAQ,CAA4B;IACpC,MAAM,GAAG,KAAK,CAAC;IACvB,YACmB,OAA4B,EAC5B,YAAY,MAAM;QADlB,YAAO,GAAP,OAAO,CAAqB;QAC5B,cAAS,GAAT,SAAS,CAAS;IAClC,CAAC;IAEJ,MAAM,CACJ,OAA+B,EAC/B,MAAmB;QAEnB,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACtE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CACnC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAC/C;YACC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAChD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC;YAC1B,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,oBAAoB,CACtB,UAAU,EACV,0CAA0C,CAC3C,CACF,CAAC;QACJ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACjE,MAAM,GAAG,GAAQ;gBACf,OAAO;gBACP,UAAU;gBACV,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBAChB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;aACF,CAAC;YACF,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAChC,OAAO,EACP,GAAG,EAAE;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC9B,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,QAAQ,CAAC;QACpB,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;IACO,KAAK;QACX,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,KAAK;QACjB,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC;YAClC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;YAClB,IAAI,KAAgD,CAAC;YACrD,IAAI,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;oBAC1D,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;oBAClC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE;wBACrD,IAAI,EAAE,IAAI;qBACX,CAAC,CAAC;oBACH,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CACH,MAAM,CACJ,IAAI,oBAAoB,CACtB,eAAe,EACf,0DAA0D,CAC3D,CACF,EACH,IAAI,CAAC,SAAS,CACf,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;oBAC/B,WAAW;iBACZ,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,SAAS,EAAE,CAAC;gBACrD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC1D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AACD,SAAS,SAAS;IAChB,OAAO,IAAI,oBAAoB,CAC7B,WAAW,EACX,oCAAoC,CACrC,CAAC;AACJ,CAAC"}

package/dist/server/controls/runtime_ipc.d.ts

@@ -0,0 +1,27 @@
+/** Last-good runtime transfer over the watched child's private IPC channel. */
+import type { ComponentRuntime } from "../../build/component_runtime.js";
+import type { ResolvedConfig } from "../../config/types.js";
+/** Accepted configuration and manifest transferred before watched readiness. */
+export interface RuntimeStartupMessage {
+    config: ResolvedConfig;
+    manifest: ComponentRuntime["manifest"];
+    type: "component-runtime-startup";
+}
+/** Heavy retained fields not already supplied in the startup message. */
+export type TransferredComponentRuntime = Pick<ComponentRuntime, "bundle" | "generation" | "outputs">;
+export interface RuntimeMessage {
+    type: "component-runtime";
+    runtime: TransferredComponentRuntime;
+    /** Reserved update version published only after the runtime is attached. */
+    version?: number;
+}
+/** Strip startup data from a retained-runtime IPC response. */
+export declare function componentRuntimeMessage(runtime: ComponentRuntime, version?: number): RuntimeMessage;
+/** Ask the watched parent for its retained graph after server readiness. */
+export declare function requestComponentRuntime(): void;
+/** Live indexes need their small rendering graph attached before announcing readiness. */
+export declare function receiveRequestedRuntime(): Promise<RuntimeMessage>;
+/** Receive parent-validated metadata before the child checks its source inventory. */
+export declare function receiveComponentRuntimeStartup(): Promise<RuntimeStartupMessage>;
+export declare function parseRuntimeMessage(value: unknown): RuntimeMessage | undefined;
+//# sourceMappingURL=runtime_ipc.d.ts.map

package/dist/server/controls/runtime_ipc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime_ipc.d.ts","sourceRoot":"","sources":["../../../src/server/controls/runtime_ipc.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,EAAE,2BAA2B,CAAC;CACnC;AAED,yEAAyE;AACzE,MAAM,MAAM,2BAA2B,GAAG,IAAI,CAC5C,gBAAgB,EAChB,QAAQ,GAAG,YAAY,GAAG,SAAS,CACpC,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,2BAA2B,CAAC;IACrC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,MAAM,GACf,cAAc,CAUhB;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,0FAA0F;AAC1F,wBAAgB,uBAAuB,IAAI,OAAO,CAAC,cAAc,CAAC,CA0BjE;AAED,sFAAsF;AACtF,wBAAgB,8BAA8B,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAyB/E;AAgCD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,cAAc,GAAG,SAAS,CA6B5B"}

package/dist/server/controls/runtime_ipc.js

@@ -0,0 +1,122 @@
+/** Strip startup data from a retained-runtime IPC response. */
+export function componentRuntimeMessage(runtime, version) {
+    return {
+        runtime: {
+            bundle: runtime.bundle,
+            generation: runtime.generation,
+            outputs: runtime.outputs,
+        },
+        type: "component-runtime",
+        ...(version === undefined ? {} : { version }),
+    };
+}
+/** Ask the watched parent for its retained graph after server readiness. */
+export function requestComponentRuntime() {
+    process.send?.({ type: "component-runtime-request" });
+}
+/** Live indexes need their small rendering graph attached before announcing readiness. */
+export function receiveRequestedRuntime() {
+    return new Promise((resolve, reject) => {
+        const cleanup = () => {
+            clearTimeout(timer);
+            process.off("message", receive);
+            process.off("disconnect", disconnected);
+        };
+        const receive = (value) => {
+            const message = parseRuntimeMessage(value);
+            if (message) {
+                cleanup();
+                resolve(message);
+            }
+        };
+        const disconnected = () => {
+            cleanup();
+            reject(new Error("Parent disconnected during runtime transfer"));
+        };
+        const timer = setTimeout(() => {
+            cleanup();
+            reject(new Error("Consumer runtime transfer timed out"));
+        }, 10_000);
+        process.on("message", receive);
+        process.once("disconnect", disconnected);
+        requestComponentRuntime();
+    });
+}
+/** Receive parent-validated metadata before the child checks its source inventory. */
+export function receiveComponentRuntimeStartup() {
+    return new Promise((resolve, reject) => {
+        const cleanup = () => {
+            clearTimeout(timer);
+            process.off("message", onMessage);
+            process.off("disconnect", onDisconnect);
+        };
+        const onDisconnect = () => {
+            cleanup();
+            reject(new Error("Parent disconnected before startup transfer"));
+        };
+        const onMessage = (value) => {
+            const message = parseRuntimeStartupMessage(value);
+            if (!message)
+                return;
+            cleanup();
+            resolve(message);
+        };
+        const timer = setTimeout(() => {
+            cleanup();
+            reject(new Error("Consumer startup transfer timed out"));
+        }, 10_000);
+        process.on("message", onMessage);
+        process.once("disconnect", onDisconnect);
+        process.send?.({ type: "component-runtime-startup-request" });
+    });
+}
+function parseRuntimeStartupMessage(value) {
+    if (!value ||
+        typeof value !== "object" ||
+        !("type" in value) ||
+        value.type !== "component-runtime-startup" ||
+        !("config" in value) ||
+        !("manifest" in value))
+        return;
+    const config = value.config;
+    const manifest = value.manifest;
+    if (!config ||
+        typeof config.configPath !== "string" ||
+        typeof config.entriesDir !== "string" ||
+        typeof config.mockupsDir !== "string" ||
+        typeof config.repoRoot !== "string" ||
+        !manifest ||
+        !Array.isArray(manifest.entries) ||
+        (manifest.schemaVersion !== 5 &&
+            manifest.schemaVersion !== "live-index-1") ||
+        !Array.isArray(manifest.sourceFiles))
+        return;
+    return { config, manifest, type: "component-runtime-startup" };
+}
+export function parseRuntimeMessage(value) {
+    if (!value ||
+        typeof value !== "object" ||
+        !("type" in value) ||
+        value.type !== "component-runtime" ||
+        !("runtime" in value))
+        return;
+    const runtime = value.runtime;
+    const version = "version" in value ? value.version : undefined;
+    if (!runtime ||
+        typeof runtime.generation !== "string" ||
+        typeof runtime.bundle?.code !== "string" ||
+        !Array.isArray(runtime.outputs) ||
+        (version !== undefined &&
+            (!Number.isSafeInteger(version) || version <= 0)))
+        return;
+    return {
+        type: "component-runtime",
+        runtime: {
+            bundle: runtime.bundle,
+            generation: runtime.generation,
+            outputs: runtime.outputs,
+        },
+        ...(version === undefined ? {} : { version: version }),
+    };
+}
+//# sourceMappingURL=runtime_ipc.js.map

package/dist/server/controls/runtime_ipc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime_ipc.js","sourceRoot":"","sources":["../../../src/server/controls/runtime_ipc.ts"],"names":[],"mappings":"AAwBA,+DAA+D;AAC/D,MAAM,UAAU,uBAAuB,CACrC,OAAyB,EACzB,OAAgB;IAEhB,OAAO;QACL,OAAO,EAAE;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB;QACD,IAAI,EAAE,mBAAmB;QACzB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB;IACrC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,uBAAuB;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAC3D,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACzC,uBAAuB,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,8BAA8B;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,GAAS,EAAE;YAC9B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAQ,EAAE;YACzC,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAC3D,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAc;IAEd,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,KAAK,2BAA2B;QAC1C,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;QACpB,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QAEtB,OAAO;IACT,MAAM,MAAM,GAAG,KAAK,CAAC,MAAoC,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAoD,CAAC;IAC5E,IACE,CAAC,MAAM;QACP,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,CAAC,QAAQ;QACT,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChC,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC;YAC3B,QAAQ,CAAC,aAAa,KAAK,cAAc,CAAC;QAC5C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAEpC,OAAO;IACT,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAc;IAEd,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAClC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QAErB,OAAO;IACT,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkD,CAAC;IACzE,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,IACE,CAAC,OAAO;QACR,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;QACtC,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,CAAC,OAAO,KAAK,SAAS;YACpB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAK,OAAkB,IAAI,CAAC,CAAC,CAAC;QAE/D,OAAO;IACT,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB;QACD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAiB,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/dist/server/controls/service.d.ts

@@ -0,0 +1,17 @@
+import type { ComponentRuntime } from "../../build/component_runtime.js";
+import { type ComponentRenderSuccess, type RenderCapability } from "../../components/render_types.js";
+import { RenderStore } from "./store.js";
+export declare class ComponentRenderService {
+    private runtime;
+    readonly token: string;
+    readonly store: RenderStore;
+    private queue;
+    private replacement;
+    private closed;
+    constructor(runtime: ComponentRuntime);
+    capability(): RenderCapability;
+    replace(runtime: ComponentRuntime): void;
+    render(value: unknown, signal: AbortSignal): Promise<ComponentRenderSuccess>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/server/controls/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/server/controls/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,qBAAa,sBAAsB;IAMrB,OAAO,CAAC,OAAO;IAL3B,QAAQ,CAAC,KAAK,SAAmC;IACjD,QAAQ,CAAC,KAAK,cAAqB;IACnC,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,MAAM,CAAS;gBACH,OAAO,EAAE,gBAAgB;IAG7C,UAAU,IAAI,gBAAgB;IAG9B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IASlC,MAAM,CACV,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,sBAAsB,CAAC;IAyB5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B"}

package/dist/server/controls/service.js

@@ -0,0 +1,47 @@
+/** Local controls own generation, worker admission, and memory lifetime together. */
+import { randomBytes } from "node:crypto";
+import { validateRenderRequest } from "../../components/render_request.js";
+import { ComponentRenderError, } from "../../components/render_types.js";
+import { RenderQueue } from "./queue.js";
+import { RenderStore } from "./store.js";
+import { NodeRenderWorkerFactory } from "./worker_client.js";
+export class ComponentRenderService {
+    runtime;
+    token = randomBytes(32).toString("hex");
+    store = new RenderStore();
+    queue;
+    replacement = Promise.resolve();
+    closed = false;
+    constructor(runtime) {
+        this.runtime = runtime;
+        this.queue = new RenderQueue(new NodeRenderWorkerFactory(runtime));
+    }
+    capability() {
+        return { token: this.token, generation: this.runtime.generation };
+    }
+    replace(runtime) {
+        const previous = this.queue;
+        this.replacement = Promise.all([this.replacement, previous.close()]).then(() => { });
+        this.runtime = runtime;
+        this.store.clear();
+        this.queue = new RenderQueue(new NodeRenderWorkerFactory(runtime));
+    }
+    async render(value, signal) {
+        const { request } = validateRenderRequest(value, this.runtime.manifest, this.runtime.generation);
+        await this.replacement;
+        if (this.closed || signal.aborted)
+            throw new ComponentRenderError("cancelled", "The preview request was cancelled.");
+        if (request.generation !== this.runtime.generation)
+            throw new ComponentRenderError("stale-generation", "The catalogue changed. Reload to continue editing.");
+        const result = await this.queue.render(request, signal);
+        if (signal.aborted || request.generation !== this.runtime.generation)
+            throw new ComponentRenderError("cancelled", "The preview request was replaced.");
+        return this.store.put(result, request.generation);
+    }
+    async close() {
+        this.closed = true;
+        await Promise.all([this.replacement, this.queue.close()]);
+        this.store.clear();
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/server/controls/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/server/controls/service.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,oBAAoB,GAGrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,OAAO,sBAAsB;IAMb;IALX,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAC3B,KAAK,CAAc;IACnB,WAAW,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,GAAG,KAAK,CAAC;IACvB,YAAoB,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,UAAU;QACR,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,OAAyB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CACvE,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,MAAM,CACV,KAAc,EACd,MAAmB;QAEnB,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CACvC,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,IAAI,CAAC,OAAO,CAAC,UAAU,CACxB,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;YAC/B,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,oCAAoC,CACrC,CAAC;QACJ,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU;YAChD,MAAM,IAAI,oBAAoB,CAC5B,kBAAkB,EAClB,oDAAoD,CACrD,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU;YAClE,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,mCAAmC,CACpC,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/server/controls/store.d.ts

@@ -0,0 +1,19 @@
+import { type ComponentRenderSuccess } from "../../components/render_types.js";
+import { type TransientRender } from "./transient_assets.js";
+export declare class RenderStore {
+    private readonly now;
+    private readonly byteLimit;
+    private readonly countLimit;
+    private readonly ttl;
+    private readonly secret;
+    private readonly bundles;
+    private bytes;
+    constructor(now?: () => number, byteLimit?: number, countLimit?: number, ttl?: number);
+    put(value: TransientRender, generation: string): ComponentRenderSuccess;
+    get(id: string): TransientRender;
+    clear(): void;
+    private signature;
+    private expire;
+    private remove;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/server/controls/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/server/controls/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE3E,qBAAa,WAAW;IAQpB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG;IAVtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IACJ,OAAO,CAAC,KAAK,CAAK;gBAEC,GAAG,GAAE,MAAM,MAAiB,EAC5B,SAAS,SAAe,EACxB,UAAU,SAAK,EACf,GAAG,SAAa;IAEnC,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,sBAAsB;IAkCvE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe;IAmBhC,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,SAAS;IAGjB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,MAAM;CAKf"}

package/dist/server/controls/store.js

@@ -0,0 +1,73 @@
+/** Bounded immutable render storage with authenticated, expirable identifiers. */
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { ComponentRenderError, } from "../../components/render_types.js";
+import { RENDER_BYTES } from "./transient_assets.js";
+export class RenderStore {
+    now;
+    byteLimit;
+    countLimit;
+    ttl;
+    secret = randomBytes(32);
+    bundles = new Map();
+    bytes = 0;
+    constructor(now = Date.now, byteLimit = RENDER_BYTES, countLimit = 16, ttl = 5 * 60_000) {
+        this.now = now;
+        this.byteLimit = byteLimit;
+        this.countLimit = countLimit;
+        this.ttl = ttl;
+    }
+    put(value, generation) {
+        const size = [...value.files.values()].reduce((total, file) => total + file.bytes.byteLength, Buffer.byteLength(JSON.stringify({
+            props: value.props,
+            view: value.view,
+            route: value.route,
+        })));
+        if (size > this.byteLimit)
+            throw new ComponentRenderError("render-failed", "The preview is too large. Reduce its content and try again.");
+        this.expire();
+        while (this.bundles.size >= this.countLimit ||
+            this.bytes + size > this.byteLimit)
+            this.remove(this.bundles.keys().next().value);
+        const nonce = randomBytes(24).toString("hex");
+        const id = `${nonce}.${this.signature(nonce)}`;
+        this.bundles.set(id, { created: this.now(), size, value });
+        this.bytes += size;
+        return {
+            renderId: id,
+            generation,
+            props: value.props,
+            view: value.view,
+            previewUrl: `/__mokly/components/renders/${id}/${value.route.split("/").map(encodeURIComponent).join("/")}`,
+        };
+    }
+    get(id) {
+        const match = /^([a-f0-9]{48})\.([a-f0-9]{64})$/.exec(id);
+        if (!match ||
+            !timingSafeEqual(Buffer.from(match[2], "hex"), Buffer.from(this.signature(match[1]), "hex")))
+            throw new ComponentRenderError("unknown-entry", "Preview not found.");
+        this.expire();
+        const bundle = this.bundles.get(id);
+        if (!bundle)
+            throw new ComponentRenderError("expired", "This preview expired. Render it again to continue.");
+        return bundle.value;
+    }
+    clear() {
+        this.bundles.clear();
+        this.bytes = 0;
+    }
+    signature(nonce) {
+        return createHmac("sha256", this.secret).update(nonce).digest("hex");
+    }
+    expire() {
+        for (const [id, bundle] of this.bundles)
+            if (this.now() - bundle.created >= this.ttl)
+                this.remove(id);
+    }
+    remove(id) {
+        const bundle = this.bundles.get(id);
+        if (bundle)
+            this.bytes -= bundle.size;
+        this.bundles.delete(id);
+    }
+}
+//# sourceMappingURL=store.js.map