@openclaw/crabline 0.1.11 → 0.1.12

package/dist/src/servers/http.d.ts

@@ -14,29 +14,40 @@ export type HttpJsonHandlerResult = Response | {
 };
 export declare const ADMIN_TOKEN_HEADER = "x-crabline-admin-token";
 export declare const DEFAULT_MAX_REQUEST_BODY_BYTES: number;
+export declare const DEFAULT_MAX_RESPONSE_BODY_BYTES: number;
 export declare const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;
 export declare class InvalidJsonBodyError extends Error {
-    constructor(cause: unknown);
+    constructor(cause: unknown, message?: string);
 }
 export declare class RequestBodyTooLargeError extends Error {
     readonly maxBytes: number;
     constructor(maxBytes: number);
 }
+export declare class ResponseBodyTooLargeError extends Error {
+    readonly maxBytes: number;
+    constructor(maxBytes: number);
+}
 export declare function jsonResponse(value: unknown, status?: number): Response;
 export declare function drainRequestBody(request: IncomingMessage): void;
 export declare function readBody(request: IncomingMessage, maxBytes?: number): Promise<Buffer>;
 export declare function parseUnknownRequestBody(request: IncomingMessage, maxBytes?: number): Promise<unknown>;
+export declare function isJsonMediaType(value: string): boolean;
 export declare function parseRequestBody(request: IncomingMessage): Promise<Record<string, unknown>>;
 export declare function isJsonObject(value: unknown): value is Record<string, unknown>;
 export declare function queryRecord(url: URL): Record<string, string>;
 export declare function formatUrlHost(host: string): string;
+export declare function isLoopbackAddress(address: string): boolean;
 export declare function isLoopbackHost(host: string): boolean;
-export declare function writeResponse(response: ServerResponse, fetchResponse: Response): Promise<void>;
+export declare function advertisedHostForBindAddress(host: string, boundAddress: string): string;
+export declare function assertLoopbackBindAddress(configuredHost: string, boundAddress: string, serverName: string): void;
+export declare function writeFetchResponseHeaders(response: ServerResponse, fetchResponse: Response): void;
+export declare function writeResponse(response: ServerResponse, fetchResponse: Response, maxBytes?: number): Promise<void>;
 export declare function closeServer(server: Server, graceMs?: number): Promise<void>;
 export declare function startHttpJsonServer(params: {
     handle: (request: IncomingMessage, response: ServerResponse) => Promise<HttpJsonHandlerResult>;
     handleError?: (error: unknown, request: IncomingMessage) => Response | undefined;
     host: string;
+    maxResponseBodyBytes?: number | undefined;
     port: number;
     serverName: string;
 }): Promise<{
@@ -47,5 +58,6 @@ export declare function startHttpJsonServer(params: {
 export declare function readString(value: unknown): string | undefined;
 export declare function readTrimmedString(value: unknown): string | undefined;
 export declare function readInteger(value: unknown): number | undefined;
+export declare function constantTimeTokenEqual(providedToken: string, expectedToken: string): boolean;
 export declare function hasAdminToken(request: IncomingMessage, expectedToken: string): boolean;
 export declare function adminAuthError(): Response;

package/dist/src/servers/http.js

@@ -1,12 +1,33 @@
 import { createServer } from "node:http";
-import { timingSafeEqual } from "node:crypto";
+import { createHash, timingSafeEqual } from "node:crypto";
+import { BlockList, isIP } from "node:net";
 import { CrablineError } from "../core/errors.js";
 export const ADMIN_TOKEN_HEADER = "x-crabline-admin-token";
 export const DEFAULT_MAX_REQUEST_BODY_BYTES = 1024 * 1024;
+export const DEFAULT_MAX_RESPONSE_BODY_BYTES = 8 * 1024 * 1024;
 export const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;
+const DRAINING_REQUESTS = new WeakSet();
+const LOOPBACK_ADDRESSES = new BlockList();
+LOOPBACK_ADDRESSES.addSubnet("127.0.0.0", 8, "ipv4");
+LOOPBACK_ADDRESSES.addAddress("::1", "ipv6");
+LOOPBACK_ADDRESSES.addSubnet("::ffff:127.0.0.0", 104, "ipv6");
+const UNSPECIFIED_ADDRESSES = new BlockList();
+UNSPECIFIED_ADDRESSES.addAddress("0.0.0.0", "ipv4");
+UNSPECIFIED_ADDRESSES.addAddress("::", "ipv6");
+const HOP_BY_HOP_RESPONSE_HEADERS = new Set([
+    "connection",
+    "keep-alive",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "proxy-connection",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+]);
 export class InvalidJsonBodyError extends Error {
-    constructor(cause) {
-        super("Request body is not valid JSON.", { cause });
+    constructor(cause, message = "Request body is not valid JSON.") {
+        super(message, { cause });
         this.name = "InvalidJsonBodyError";
     }
 }
@@ -18,16 +39,30 @@ export class RequestBodyTooLargeError extends Error {
         this.name = "RequestBodyTooLargeError";
     }
 }
+export class ResponseBodyTooLargeError extends Error {
+    maxBytes;
+    constructor(maxBytes) {
+        super(`Response body exceeds the ${maxBytes} byte limit.`);
+        this.maxBytes = maxBytes;
+        this.name = "ResponseBodyTooLargeError";
+    }
+}
 export function jsonResponse(value, status = 200) {
     return Response.json(value, { status });
 }
 export function drainRequestBody(request) {
+    if (request.readableEnded || DRAINING_REQUESTS.has(request)) {
+        return;
+    }
+    DRAINING_REQUESTS.add(request);
     const ignoreError = () => { };
     request.on("error", ignoreError);
-    if (request.destroyed || request.readableEnded) {
+    if (request.destroyed) {
+        // IncomingMessage may emit its terminal error after destroyed becomes true.
         return;
     }
     const cleanup = () => {
+        DRAINING_REQUESTS.delete(request);
         request.off("close", cleanup);
         request.off("end", cleanup);
         request.off("error", ignoreError);
@@ -37,6 +72,10 @@ export function drainRequestBody(request) {
     request.resume();
 }
 export async function readBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES) {
+    requirePositiveSafeInteger(maxBytes, "maxBytes");
+    if (request.aborted) {
+        throw new Error("Request body stream was aborted.");
+    }
     const contentLengthHeader = request.headers["content-length"];
     const contentLengthValue = Array.isArray(contentLengthHeader)
         ? contentLengthHeader[0]
@@ -90,6 +129,9 @@ export async function readBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTE
         request.on("data", onData);
         request.on("end", onEnd);
         request.on("error", onError);
+        if (request.aborted) {
+            onAborted();
+        }
     });
 }
 export async function parseUnknownRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES) {
@@ -98,10 +140,10 @@ export async function parseUnknownRequestBody(request, maxBytes = DEFAULT_MAX_RE
         return {};
     }
     const contentType = request.headers["content-type"] ?? "";
-    const includesJson = Array.isArray(contentType)
-        ? contentType.some((entry) => entry.toLowerCase().includes("json"))
-        : contentType.toLowerCase().includes("json");
-    if (includesJson) {
+    const isJson = Array.isArray(contentType)
+        ? contentType.some(isJsonMediaType)
+        : isJsonMediaType(contentType);
+    if (isJson) {
         try {
             return JSON.parse(body.toString("utf8"));
         }
@@ -112,8 +154,17 @@ export async function parseUnknownRequestBody(request, maxBytes = DEFAULT_MAX_RE
     const params = new URLSearchParams(body.toString("utf8"));
     return Object.fromEntries(params.entries());
 }
+export function isJsonMediaType(value) {
+    const mediaType = value.split(";", 1)[0]?.trim().toLowerCase();
+    return (mediaType === "application/json" ||
+        /^[a-z0-9!#$%&'*+.^_`|~-]+\/[a-z0-9!#$%&'*+.^_`|~-]+\+json$/u.test(mediaType ?? ""));
+}
 export async function parseRequestBody(request) {
-    return (await parseUnknownRequestBody(request, Number.MAX_SAFE_INTEGER));
+    const body = await parseUnknownRequestBody(request);
+    if (!isJsonObject(body)) {
+        throw new InvalidJsonBodyError(undefined, "Request body must be a JSON object.");
+    }
+    return body;
 }
 export function isJsonObject(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -124,71 +175,171 @@ export function queryRecord(url) {
 export function formatUrlHost(host) {
     return host.includes(":") ? `[${host}]` : host;
 }
-export function isLoopbackHost(host) {
-    const normalized = host
+function normalizeHost(host) {
+    return host
         .trim()
         .replace(/^\[(.*)\]$/u, "$1")
-        .toLowerCase();
-    return (normalized === "localhost" ||
-        normalized.endsWith(".localhost") ||
-        normalized === "::1" ||
-        normalized.startsWith("::ffff:127.") ||
-        /^127(?:\.\d{1,3}){3}$/u.test(normalized));
+        .toLowerCase()
+        .replace(/\.$/u, "");
+}
+export function isLoopbackAddress(address) {
+    const normalized = normalizeHost(address);
+    const family = isIP(normalized);
+    return family === 4
+        ? LOOPBACK_ADDRESSES.check(normalized, "ipv4")
+        : family === 6
+            ? LOOPBACK_ADDRESSES.check(normalized, "ipv6")
+            : false;
+}
+export function isLoopbackHost(host) {
+    const normalized = normalizeHost(host);
+    if (normalized === "localhost" || normalized.endsWith(".localhost")) {
+        return true;
+    }
+    return isLoopbackAddress(normalized);
+}
+export function advertisedHostForBindAddress(host, boundAddress) {
+    const normalizedBoundAddress = normalizeHost(boundAddress);
+    const boundFamily = isIP(normalizedBoundAddress);
+    if (boundFamily === 4 && UNSPECIFIED_ADDRESSES.check(normalizedBoundAddress, "ipv4")) {
+        return "127.0.0.1";
+    }
+    if (boundFamily === 6 && UNSPECIFIED_ADDRESSES.check(normalizedBoundAddress, "ipv6")) {
+        return "::1";
+    }
+    return isLoopbackHost(host) && isLoopbackAddress(boundAddress) ? boundAddress : host;
 }
-export async function writeResponse(response, fetchResponse) {
-    response.statusCode = fetchResponse.status;
+export function assertLoopbackBindAddress(configuredHost, boundAddress, serverName) {
+    if (isLoopbackHost(configuredHost) && !isLoopbackAddress(boundAddress)) {
+        throw new CrablineError(`${serverName} resolved a loopback hostname to non-loopback address ${boundAddress}.`, { kind: "connectivity" });
+    }
+}
+export function writeFetchResponseHeaders(response, fetchResponse) {
+    const preserveRepresentationLength = response.req?.method === "HEAD" || fetchResponse.status === 304;
+    const connectionHeaders = new Set((fetchResponse.headers.get("connection") ?? "")
+        .split(",")
+        .map((name) => name.trim().toLowerCase())
+        .filter(Boolean));
+    if (connectionHeaders.has("close")) {
+        response.shouldKeepAlive = false;
+    }
     for (const [name, value] of fetchResponse.headers) {
-        if (name.toLowerCase() === "set-cookie") {
+        const normalizedName = name.toLowerCase();
+        if (normalizedName === "set-cookie" ||
+            HOP_BY_HOP_RESPONSE_HEADERS.has(normalizedName) ||
+            connectionHeaders.has(normalizedName) ||
+            (normalizedName === "content-length" && !preserveRepresentationLength)) {
             continue;
         }
         response.setHeader(name, value);
     }
     const setCookies = fetchResponse.headers.getSetCookie();
-    if (setCookies.length > 0) {
+    if (setCookies.length > 0 && !connectionHeaders.has("set-cookie")) {
         response.setHeader("set-cookie", setCookies);
     }
-    const body = Buffer.from(await fetchResponse.arrayBuffer());
-    await new Promise((resolve, reject) => {
+}
+export async function writeResponse(response, fetchResponse, maxBytes = DEFAULT_MAX_RESPONSE_BODY_BYTES) {
+    requirePositiveSafeInteger(maxBytes, "maxResponseBodyBytes");
+    const reader = fetchResponse.body?.getReader();
+    let cancellation;
+    let rejectStopped;
+    let stoppedError;
+    const stopped = new Promise((_, reject) => {
+        rejectStopped = reject;
+    });
+    void stopped.catch(() => { });
+    const cancelBody = (reason) => {
+        if (!reader || cancellation) {
+            return;
+        }
+        cancellation = reader.cancel(reason).catch(() => { });
+    };
+    const stop = (error) => {
+        if (stoppedError) {
+            return;
+        }
+        stoppedError = error;
+        cancelBody(error);
+        rejectStopped(error);
+    };
+    const onClose = () => {
+        if (!response.writableFinished) {
+            stop(new Error("HTTP response closed before delivery completed."));
+        }
+    };
+    const onError = (error) => stop(error);
+    const onRequestAborted = () => stop(new Error("HTTP response request was aborted."));
+    response.once("close", onClose);
+    response.once("error", onError);
+    response.req?.once("aborted", onRequestAborted);
+    try {
         if (response.destroyed ||
             response.req?.aborted ||
             response.req?.socket.destroyed ||
             response.socket?.destroyed) {
-            reject(new Error("HTTP response closed before delivery completed."));
+            throw new Error("HTTP response closed before delivery completed.");
+        }
+        if (response.req?.method === "HEAD") {
+            cancelBody(new Error("HEAD response body is not transferred."));
+            response.statusCode = fetchResponse.status;
+            writeFetchResponseHeaders(response, fetchResponse);
+            let onFinish;
+            const finished = new Promise((resolve) => {
+                onFinish = resolve;
+                response.once("finish", onFinish);
+            });
+            try {
+                response.end();
+                await Promise.race([finished, stopped]);
+            }
+            finally {
+                response.off("finish", onFinish);
+            }
             return;
         }
-        const cleanup = () => {
-            response.off("close", onClose);
-            response.off("error", onError);
-            response.off("finish", onFinish);
-        };
-        const onClose = () => {
-            if (response.writableFinished) {
-                cleanup();
-                resolve();
-                return;
+        const chunks = [];
+        let bodyLength = 0;
+        if (reader) {
+            while (true) {
+                const chunk = await Promise.race([reader.read(), stopped]);
+                if (chunk.done) {
+                    break;
+                }
+                if (chunk.value.byteLength > 0) {
+                    if (bodyLength + chunk.value.byteLength > maxBytes) {
+                        throw new ResponseBodyTooLargeError(maxBytes);
+                    }
+                    const buffer = Buffer.from(chunk.value);
+                    chunks.push(buffer);
+                    bodyLength += buffer.length;
+                }
             }
-            cleanup();
-            reject(new Error("HTTP response closed before delivery completed."));
-        };
-        const onError = (error) => {
-            cleanup();
-            reject(error);
-        };
-        const onFinish = () => {
-            cleanup();
-            resolve();
-        };
-        response.once("close", onClose);
-        response.once("error", onError);
-        response.once("finish", onFinish);
+        }
+        const body = Buffer.concat(chunks, bodyLength);
+        response.statusCode = fetchResponse.status;
+        writeFetchResponseHeaders(response, fetchResponse);
+        let onFinish;
+        const finished = new Promise((resolve) => {
+            onFinish = resolve;
+            response.once("finish", onFinish);
+        });
         try {
             response.end(body);
+            await Promise.race([finished, stopped]);
         }
-        catch (error) {
-            cleanup();
-            reject(error);
+        finally {
+            response.off("finish", onFinish);
         }
-    });
+    }
+    catch (error) {
+        cancelBody(error instanceof Error ? error : new Error(String(error)));
+        throw error;
+    }
+    finally {
+        response.off("close", onClose);
+        response.off("error", onError);
+        response.req?.off("aborted", onRequestAborted);
+    }
 }
 export function closeServer(server, graceMs = DEFAULT_SERVER_SHUTDOWN_GRACE_MS) {
     return new Promise((resolve, reject) => {
@@ -211,12 +362,14 @@ export function closeServer(server, graceMs = DEFAULT_SERVER_SHUTDOWN_GRACE_MS)
     });
 }
 export async function startHttpJsonServer(params) {
+    const maxResponseBodyBytes = requirePositiveSafeInteger(params.maxResponseBodyBytes ?? DEFAULT_MAX_RESPONSE_BODY_BYTES, "maxResponseBodyBytes");
     const handleRequest = async (request, response) => {
         try {
             const result = await params.handle(request, response);
+            drainRequestBody(request);
             const handled = result instanceof Response ? { response: result } : result;
             try {
-                await writeResponse(response, handled.response);
+                await writeResponse(response, handled.response, maxResponseBodyBytes);
             }
             catch (error) {
                 await handled.onWriteFailure?.();
@@ -230,6 +383,7 @@ export async function startHttpJsonServer(params) {
             }
         }
         catch (error) {
+            drainRequestBody(request);
             let handled;
             try {
                 handled = params.handleError?.(error, request);
@@ -242,7 +396,7 @@ export async function startHttpJsonServer(params) {
                     jsonResponse({
                         error: "internal server error",
                         ok: false,
-                    }, 500));
+                    }, 500), maxResponseBodyBytes);
             }
             catch {
                 response.destroy();
@@ -265,14 +419,28 @@ export async function startHttpJsonServer(params) {
             kind: "connectivity",
         });
     }
+    try {
+        assertLoopbackBindAddress(params.host, address.address, params.serverName);
+    }
+    catch (error) {
+        await closeServer(server);
+        throw error;
+    }
+    const advertisedHost = advertisedHostForBindAddress(params.host, address.address);
     return {
-        baseUrl: `http://${formatUrlHost(params.host)}:${address.port}`,
+        baseUrl: `http://${formatUrlHost(advertisedHost)}:${address.port}`,
         async close() {
             await closeServer(server);
         },
         server,
     };
 }
+function requirePositiveSafeInteger(value, name) {
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new RangeError(`${name} must be a positive safe integer.`);
+    }
+    return value;
+}
 export function readString(value) {
     if (typeof value === "string" && value.length > 0) {
         return value;
@@ -304,6 +472,11 @@ function readBearerToken(authorization) {
     }
     return trimmed.slice(7);
 }
+export function constantTimeTokenEqual(providedToken, expectedToken) {
+    const provided = createHash("sha256").update(providedToken).digest();
+    const expected = createHash("sha256").update(expectedToken).digest();
+    return timingSafeEqual(provided, expected);
+}
 export function hasAdminToken(request, expectedToken) {
     const header = request.headers[ADMIN_TOKEN_HEADER];
     const directToken = Array.isArray(header) ? header[0] : header;
@@ -311,9 +484,7 @@ export function hasAdminToken(request, expectedToken) {
     if (!providedToken) {
         return false;
     }
-    const provided = Buffer.from(providedToken);
-    const expected = Buffer.from(expectedToken);
-    return provided.length === expected.length && timingSafeEqual(provided, expected);
+    return constantTimeTokenEqual(providedToken, expectedToken);
 }
 export function adminAuthError() {
     return new Response("unauthorized", {

package/dist/src/servers/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/servers/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAmBlD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,KAAc;QACxB,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B,QAAQ;IAA7B,YAAqB,QAAgB;QACnC,KAAK,CAAC,4BAA4B,QAAQ,cAAc,CAAC,CAAC;wBADvC,QAAQ;QAE3B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACvD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,MAAM,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,QAAQ,GAAG,8BAA8B;IAEzC,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC3D,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,mBAAmB,CAAC;IACxB,IAAI,kBAAkB,IAAI,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,QAAQ,EAAE,CAAC;YACrE,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAwB,EACxB,QAAQ,GAAG,8BAA8B;IAEzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwB;IAC7D,OAAO,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAGtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;SAC5B,WAAW,EAAE,CAAC;IACjB,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,KAAK,KAAK;QACpB,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;QACpC,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,aAAuB;IAEvB,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACxD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IACE,QAAQ,CAAC,SAAS;YAClB,QAAQ,CAAC,GAAG,EAAE,OAAO;YACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS;YAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,EAC1B,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,OAAO,GAAG,gCAAgC;IAE1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACjC,YAAY,CAAC,eAAe,CAAC,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAMzC;IACC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,uFAAuF;YACzF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,QAAQ,EACR,OAAO;oBACL,YAAY,CACV;wBACE,KAAK,EAAE,uBAAuB;wBAC9B,EAAE,EAAE,KAAK;qBACV,EACD,GAAG,CACJ,CACJ,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,KAAK,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,qBAAqB,MAAM,CAAC,UAAU,wBAAwB,EAAE;YACtF,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE;QAC/D,KAAK,CAAC,KAAK;YACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,WAAW,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE;QAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;QACzC,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\nimport { timingSafeEqual } from \"node:crypto\";\nimport { CrablineError } from \"../core/errors.js\";\n\nexport type ServerRequestEvent = {\n  at: string;\n  body?: unknown;\n  method: string;\n  path: string;\n  query: Record<string, string>;\n  type: \"admin\" | \"api\";\n};\n\nexport type HttpJsonHandlerResult =\n  | Response\n  | {\n      onWriteFailure?(): Promise<void> | void;\n      onWriteSuccess?(): Promise<void> | void;\n      response: Response;\n    };\n\nexport const ADMIN_TOKEN_HEADER = \"x-crabline-admin-token\";\nexport const DEFAULT_MAX_REQUEST_BODY_BYTES = 1024 * 1024;\nexport const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;\n\nexport class InvalidJsonBodyError extends Error {\n  constructor(cause: unknown) {\n    super(\"Request body is not valid JSON.\", { cause });\n    this.name = \"InvalidJsonBodyError\";\n  }\n}\n\nexport class RequestBodyTooLargeError extends Error {\n  constructor(readonly maxBytes: number) {\n    super(`Request body exceeds the ${maxBytes} byte limit.`);\n    this.name = \"RequestBodyTooLargeError\";\n  }\n}\n\nexport function jsonResponse(value: unknown, status = 200): Response {\n  return Response.json(value, { status });\n}\n\nexport function drainRequestBody(request: IncomingMessage): void {\n  const ignoreError = () => {};\n  request.on(\"error\", ignoreError);\n  if (request.destroyed || request.readableEnded) {\n    return;\n  }\n  const cleanup = () => {\n    request.off(\"close\", cleanup);\n    request.off(\"end\", cleanup);\n    request.off(\"error\", ignoreError);\n  };\n\n  request.once(\"close\", cleanup);\n  request.once(\"end\", cleanup);\n  request.resume();\n}\n\nexport async function readBody(\n  request: IncomingMessage,\n  maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES,\n): Promise<Buffer> {\n  const contentLengthHeader = request.headers[\"content-length\"];\n  const contentLengthValue = Array.isArray(contentLengthHeader)\n    ? contentLengthHeader[0]\n    : contentLengthHeader;\n  if (contentLengthValue && /^\\d+$/u.test(contentLengthValue)) {\n    const contentLength = Number(contentLengthValue);\n    if (!Number.isSafeInteger(contentLength) || contentLength > maxBytes) {\n      drainRequestBody(request);\n      throw new RequestBodyTooLargeError(maxBytes);\n    }\n  }\n\n  return await new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let length = 0;\n    let settled = false;\n\n    const cleanup = () => {\n      request.off(\"aborted\", onAborted);\n      request.off(\"data\", onData);\n      request.off(\"end\", onEnd);\n      request.off(\"error\", onError);\n    };\n    const fail = (error: Error) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      drainRequestBody(request);\n      cleanup();\n      reject(error);\n    };\n    const onAborted = () => fail(new Error(\"Request body stream was aborted.\"));\n    const onData = (chunk: Buffer | string) => {\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      length += buffer.length;\n      if (length > maxBytes) {\n        fail(new RequestBodyTooLargeError(maxBytes));\n        return;\n      }\n      chunks.push(buffer);\n    };\n    const onEnd = () => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve(Buffer.concat(chunks, length));\n    };\n    const onError = (error: Error) => fail(error);\n\n    request.on(\"aborted\", onAborted);\n    request.on(\"data\", onData);\n    request.on(\"end\", onEnd);\n    request.on(\"error\", onError);\n  });\n}\n\nexport async function parseUnknownRequestBody(\n  request: IncomingMessage,\n  maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES,\n): Promise<unknown> {\n  const body = await readBody(request, maxBytes);\n  if (body.length === 0) {\n    return {};\n  }\n  const contentType = request.headers[\"content-type\"] ?? \"\";\n  const includesJson = Array.isArray(contentType)\n    ? contentType.some((entry) => entry.toLowerCase().includes(\"json\"))\n    : contentType.toLowerCase().includes(\"json\");\n  if (includesJson) {\n    try {\n      return JSON.parse(body.toString(\"utf8\")) as unknown;\n    } catch (error) {\n      throw new InvalidJsonBodyError(error);\n    }\n  }\n  const params = new URLSearchParams(body.toString(\"utf8\"));\n  return Object.fromEntries(params.entries());\n}\n\nexport async function parseRequestBody(request: IncomingMessage): Promise<Record<string, unknown>> {\n  return (await parseUnknownRequestBody(request, Number.MAX_SAFE_INTEGER)) as Record<\n    string,\n    unknown\n  >;\n}\n\nexport function isJsonObject(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function queryRecord(url: URL): Record<string, string> {\n  return Object.fromEntries(url.searchParams.entries());\n}\n\nexport function formatUrlHost(host: string): string {\n  return host.includes(\":\") ? `[${host}]` : host;\n}\n\nexport function isLoopbackHost(host: string): boolean {\n  const normalized = host\n    .trim()\n    .replace(/^\\[(.*)\\]$/u, \"$1\")\n    .toLowerCase();\n  return (\n    normalized === \"localhost\" ||\n    normalized.endsWith(\".localhost\") ||\n    normalized === \"::1\" ||\n    normalized.startsWith(\"::ffff:127.\") ||\n    /^127(?:\\.\\d{1,3}){3}$/u.test(normalized)\n  );\n}\n\nexport async function writeResponse(\n  response: ServerResponse,\n  fetchResponse: Response,\n): Promise<void> {\n  response.statusCode = fetchResponse.status;\n  for (const [name, value] of fetchResponse.headers) {\n    if (name.toLowerCase() === \"set-cookie\") {\n      continue;\n    }\n    response.setHeader(name, value);\n  }\n  const setCookies = fetchResponse.headers.getSetCookie();\n  if (setCookies.length > 0) {\n    response.setHeader(\"set-cookie\", setCookies);\n  }\n  const body = Buffer.from(await fetchResponse.arrayBuffer());\n  await new Promise<void>((resolve, reject) => {\n    if (\n      response.destroyed ||\n      response.req?.aborted ||\n      response.req?.socket.destroyed ||\n      response.socket?.destroyed\n    ) {\n      reject(new Error(\"HTTP response closed before delivery completed.\"));\n      return;\n    }\n    const cleanup = () => {\n      response.off(\"close\", onClose);\n      response.off(\"error\", onError);\n      response.off(\"finish\", onFinish);\n    };\n    const onClose = () => {\n      if (response.writableFinished) {\n        cleanup();\n        resolve();\n        return;\n      }\n      cleanup();\n      reject(new Error(\"HTTP response closed before delivery completed.\"));\n    };\n    const onError = (error: Error) => {\n      cleanup();\n      reject(error);\n    };\n    const onFinish = () => {\n      cleanup();\n      resolve();\n    };\n    response.once(\"close\", onClose);\n    response.once(\"error\", onError);\n    response.once(\"finish\", onFinish);\n    try {\n      response.end(body);\n    } catch (error) {\n      cleanup();\n      reject(error);\n    }\n  });\n}\n\nexport function closeServer(\n  server: Server,\n  graceMs = DEFAULT_SERVER_SHUTDOWN_GRACE_MS,\n): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const closeIdleInterval = setInterval(() => server.closeIdleConnections(), 25);\n    closeIdleInterval.unref();\n    const forceCloseTimer = setTimeout(() => {\n      server.closeAllConnections();\n    }, graceMs);\n    forceCloseTimer.unref();\n    server.close((error) => {\n      clearInterval(closeIdleInterval);\n      clearTimeout(forceCloseTimer);\n      if (error) {\n        reject(error);\n        return;\n      }\n      resolve();\n    });\n    server.closeIdleConnections();\n  });\n}\n\nexport async function startHttpJsonServer(params: {\n  handle: (request: IncomingMessage, response: ServerResponse) => Promise<HttpJsonHandlerResult>;\n  handleError?: (error: unknown, request: IncomingMessage) => Response | undefined;\n  host: string;\n  port: number;\n  serverName: string;\n}): Promise<{ baseUrl: string; close(): Promise<void>; server: Server }> {\n  const handleRequest = async (request: IncomingMessage, response: ServerResponse) => {\n    try {\n      const result = await params.handle(request, response);\n      const handled = result instanceof Response ? { response: result } : result;\n      try {\n        await writeResponse(response, handled.response);\n      } catch (error) {\n        await handled.onWriteFailure?.();\n        throw error;\n      }\n      try {\n        await handled.onWriteSuccess?.();\n      } catch {\n        // Delivery is already committed; lifecycle failures must not trigger another response.\n      }\n    } catch (error) {\n      let handled: Response | undefined;\n      try {\n        handled = params.handleError?.(error, request);\n      } catch {\n        handled = undefined;\n      }\n      try {\n        await writeResponse(\n          response,\n          handled ??\n            jsonResponse(\n              {\n                error: \"internal server error\",\n                ok: false,\n              },\n              500,\n            ),\n        );\n      } catch {\n        response.destroy();\n      }\n    }\n  };\n  const server = createServer((request, response) => {\n    void handleRequest(request, response);\n  });\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(params.port, params.host, () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n  const address = server.address();\n  if (!address || typeof address === \"string\") {\n    throw new CrablineError(`Unable to resolve ${params.serverName} local server address.`, {\n      kind: \"connectivity\",\n    });\n  }\n  return {\n    baseUrl: `http://${formatUrlHost(params.host)}:${address.port}`,\n    async close() {\n      await closeServer(server);\n    },\n    server,\n  };\n}\n\nexport function readString(value: unknown): string | undefined {\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n  if (typeof value === \"number\" || typeof value === \"bigint\") {\n    return value.toString();\n  }\n  return undefined;\n}\n\nexport function readTrimmedString(value: unknown): string | undefined {\n  const stringValue = readString(value)?.trim();\n  return stringValue ? stringValue : undefined;\n}\n\nexport function readInteger(value: unknown): number | undefined {\n  const stringValue = readTrimmedString(value);\n  if (!stringValue || !/^-?\\d+$/u.test(stringValue)) {\n    return undefined;\n  }\n  const parsed = Number(stringValue);\n  return Number.isSafeInteger(parsed) ? parsed : undefined;\n}\n\nfunction readBearerToken(authorization: string | undefined): string | undefined {\n  if (!authorization) {\n    return undefined;\n  }\n  const trimmed = authorization.trimStart();\n  if (trimmed.slice(0, 7).toLowerCase() !== \"bearer \") {\n    return undefined;\n  }\n  return trimmed.slice(7);\n}\n\nexport function hasAdminToken(request: IncomingMessage, expectedToken: string): boolean {\n  const header = request.headers[ADMIN_TOKEN_HEADER];\n  const directToken = Array.isArray(header) ? header[0] : header;\n  const providedToken = directToken ?? readBearerToken(request.headers.authorization);\n  if (!providedToken) {\n    return false;\n  }\n\n  const provided = Buffer.from(providedToken);\n  const expected = Buffer.from(expectedToken);\n  return provided.length === expected.length && timingSafeEqual(provided, expected);\n}\n\nexport function adminAuthError(): Response {\n  return new Response(\"unauthorized\", {\n    headers: { \"www-authenticate\": \"Bearer\" },\n    status: 401,\n  });\n}\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/servers/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAmBlD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AACpD,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAmB,CAAC;AACzD,MAAM,kBAAkB,GAAG,IAAI,SAAS,EAAE,CAAC;AAC3C,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACrD,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC7C,kBAAkB,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC9D,MAAM,qBAAqB,GAAG,IAAI,SAAS,EAAE,CAAC;AAC9C,qBAAqB,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACpD,qBAAqB,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/C,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,KAAc,EAAE,OAAO,GAAG,iCAAiC;QACrE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B,QAAQ;IAA7B,YAAqB,QAAgB;QACnC,KAAK,CAAC,4BAA4B,QAAQ,cAAc,CAAC,CAAC;wBADvC,QAAQ;QAE3B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC7B,QAAQ;IAA7B,YAAqB,QAAgB;QACnC,KAAK,CAAC,6BAA6B,QAAQ,cAAc,CAAC,CAAC;wBADxC,QAAQ;QAE3B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACvD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,IAAI,OAAO,CAAC,aAAa,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,4EAA4E;QAC5E,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,QAAQ,GAAG,8BAA8B;IAEzC,0BAA0B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC3D,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,mBAAmB,CAAC;IACxB,IAAI,kBAAkB,IAAI,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,QAAQ,EAAE,CAAC;YACrE,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAwB,EACxB,QAAQ,GAAG,8BAA8B;IAEzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QACvC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC;QACnC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,CACL,SAAS,KAAK,kBAAkB;QAChC,6DAA6D,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwB;IAC7D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,IAAI,EAAE;SACN,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;SAC5B,WAAW,EAAE;SACb,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,OAAO,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC;QAC9C,CAAC,CAAC,MAAM,KAAK,CAAC;YACZ,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC;YAC9C,CAAC,CAAC,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,YAAoB;IAC7E,MAAM,sBAAsB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACjD,IAAI,WAAW,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,WAAW,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,cAAsB,EACtB,YAAoB,EACpB,UAAkB;IAElB,IAAI,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,aAAa,CACrB,GAAG,UAAU,yDAAyD,YAAY,GAAG,EACrF,EAAE,IAAI,EAAE,cAAc,EAAE,CACzB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAwB,EAAE,aAAuB;IACzF,MAAM,4BAA4B,GAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG,CAAC;IAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;SAC5C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,eAAe,GAAG,KAAK,CAAC;IACnC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,IACE,cAAc,KAAK,YAAY;YAC/B,2BAA2B,CAAC,GAAG,CAAC,cAAc,CAAC;YAC/C,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC;YACrC,CAAC,cAAc,KAAK,gBAAgB,IAAI,CAAC,4BAA4B,CAAC,EACtE,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACxD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,aAAuB,EACvB,QAAQ,GAAG,+BAA+B;IAE1C,0BAA0B,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/C,IAAI,YAAuC,CAAC;IAC5C,IAAI,aAAsC,CAAC;IAC3C,IAAI,YAA+B,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE7B,MAAM,UAAU,GAAG,CAAC,MAAa,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;QAC5B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,YAAY,GAAG,KAAK,CAAC;QACrB,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,IACE,QAAQ,CAAC,SAAS;YAClB,QAAQ,CAAC,GAAG,EAAE,OAAO;YACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS;YAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,EAC1B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAChE,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;YAC3C,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnD,IAAI,QAAqB,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC7C,QAAQ,GAAG,OAAO,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,CAAC;oBAAS,CAAC;gBACT,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC3D,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM;gBACR,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;oBAC/B,IAAI,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;wBACnD,MAAM,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAC;oBAChD,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpB,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/C,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;QAC3C,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,QAAqB,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7C,QAAQ,GAAG,OAAO,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,OAAO,GAAG,gCAAgC;IAE1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACjC,YAAY,CAAC,eAAe,CAAC,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAOzC;IACC,MAAM,oBAAoB,GAAG,0BAA0B,CACrD,MAAM,CAAC,oBAAoB,IAAI,+BAA+B,EAC9D,sBAAsB,CACvB,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtD,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,uFAAuF;YACzF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,OAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,QAAQ,EACR,OAAO;oBACL,YAAY,CACV;wBACE,KAAK,EAAE,uBAAuB;wBAC9B,EAAE,EAAE,KAAK;qBACV,EACD,GAAG,CACJ,EACH,oBAAoB,CACrB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,KAAK,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,qBAAqB,MAAM,CAAC,UAAU,wBAAwB,EAAE;YACtF,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO;QACL,OAAO,EAAE,UAAU,aAAa,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE;QAClE,KAAK,CAAC,KAAK;YACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,IAAY;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,aAAqB,EAAE,aAAqB;IACjF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,OAAO,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,WAAW,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,sBAAsB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE;QAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;QACzC,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\nimport { createHash, timingSafeEqual } from \"node:crypto\";\nimport { BlockList, isIP } from \"node:net\";\nimport { CrablineError } from \"../core/errors.js\";\n\nexport type ServerRequestEvent = {\n  at: string;\n  body?: unknown;\n  method: string;\n  path: string;\n  query: Record<string, string>;\n  type: \"admin\" | \"api\";\n};\n\nexport type HttpJsonHandlerResult =\n  | Response\n  | {\n      onWriteFailure?(): Promise<void> | void;\n      onWriteSuccess?(): Promise<void> | void;\n      response: Response;\n    };\n\nexport const ADMIN_TOKEN_HEADER = \"x-crabline-admin-token\";\nexport const DEFAULT_MAX_REQUEST_BODY_BYTES = 1024 * 1024;\nexport const DEFAULT_MAX_RESPONSE_BODY_BYTES = 8 * 1024 * 1024;\nexport const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;\nconst DRAINING_REQUESTS = new WeakSet<IncomingMessage>();\nconst LOOPBACK_ADDRESSES = new BlockList();\nLOOPBACK_ADDRESSES.addSubnet(\"127.0.0.0\", 8, \"ipv4\");\nLOOPBACK_ADDRESSES.addAddress(\"::1\", \"ipv6\");\nLOOPBACK_ADDRESSES.addSubnet(\"::ffff:127.0.0.0\", 104, \"ipv6\");\nconst UNSPECIFIED_ADDRESSES = new BlockList();\nUNSPECIFIED_ADDRESSES.addAddress(\"0.0.0.0\", \"ipv4\");\nUNSPECIFIED_ADDRESSES.addAddress(\"::\", \"ipv6\");\nconst HOP_BY_HOP_RESPONSE_HEADERS = new Set([\n  \"connection\",\n  \"keep-alive\",\n  \"proxy-authenticate\",\n  \"proxy-authorization\",\n  \"proxy-connection\",\n  \"te\",\n  \"trailer\",\n  \"transfer-encoding\",\n  \"upgrade\",\n]);\n\nexport class InvalidJsonBodyError extends Error {\n  constructor(cause: unknown, message = \"Request body is not valid JSON.\") {\n    super(message, { cause });\n    this.name = \"InvalidJsonBodyError\";\n  }\n}\n\nexport class RequestBodyTooLargeError extends Error {\n  constructor(readonly maxBytes: number) {\n    super(`Request body exceeds the ${maxBytes} byte limit.`);\n    this.name = \"RequestBodyTooLargeError\";\n  }\n}\n\nexport class ResponseBodyTooLargeError extends Error {\n  constructor(readonly maxBytes: number) {\n    super(`Response body exceeds the ${maxBytes} byte limit.`);\n    this.name = \"ResponseBodyTooLargeError\";\n  }\n}\n\nexport function jsonResponse(value: unknown, status = 200): Response {\n  return Response.json(value, { status });\n}\n\nexport function drainRequestBody(request: IncomingMessage): void {\n  if (request.readableEnded || DRAINING_REQUESTS.has(request)) {\n    return;\n  }\n  DRAINING_REQUESTS.add(request);\n  const ignoreError = () => {};\n  request.on(\"error\", ignoreError);\n  if (request.destroyed) {\n    // IncomingMessage may emit its terminal error after destroyed becomes true.\n    return;\n  }\n  const cleanup = () => {\n    DRAINING_REQUESTS.delete(request);\n    request.off(\"close\", cleanup);\n    request.off(\"end\", cleanup);\n    request.off(\"error\", ignoreError);\n  };\n\n  request.once(\"close\", cleanup);\n  request.once(\"end\", cleanup);\n  request.resume();\n}\n\nexport async function readBody(\n  request: IncomingMessage,\n  maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES,\n): Promise<Buffer> {\n  requirePositiveSafeInteger(maxBytes, \"maxBytes\");\n  if (request.aborted) {\n    throw new Error(\"Request body stream was aborted.\");\n  }\n  const contentLengthHeader = request.headers[\"content-length\"];\n  const contentLengthValue = Array.isArray(contentLengthHeader)\n    ? contentLengthHeader[0]\n    : contentLengthHeader;\n  if (contentLengthValue && /^\\d+$/u.test(contentLengthValue)) {\n    const contentLength = Number(contentLengthValue);\n    if (!Number.isSafeInteger(contentLength) || contentLength > maxBytes) {\n      drainRequestBody(request);\n      throw new RequestBodyTooLargeError(maxBytes);\n    }\n  }\n\n  return await new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let length = 0;\n    let settled = false;\n\n    const cleanup = () => {\n      request.off(\"aborted\", onAborted);\n      request.off(\"data\", onData);\n      request.off(\"end\", onEnd);\n      request.off(\"error\", onError);\n    };\n    const fail = (error: Error) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      drainRequestBody(request);\n      cleanup();\n      reject(error);\n    };\n    const onAborted = () => fail(new Error(\"Request body stream was aborted.\"));\n    const onData = (chunk: Buffer | string) => {\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      length += buffer.length;\n      if (length > maxBytes) {\n        fail(new RequestBodyTooLargeError(maxBytes));\n        return;\n      }\n      chunks.push(buffer);\n    };\n    const onEnd = () => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve(Buffer.concat(chunks, length));\n    };\n    const onError = (error: Error) => fail(error);\n\n    request.on(\"aborted\", onAborted);\n    request.on(\"data\", onData);\n    request.on(\"end\", onEnd);\n    request.on(\"error\", onError);\n    if (request.aborted) {\n      onAborted();\n    }\n  });\n}\n\nexport async function parseUnknownRequestBody(\n  request: IncomingMessage,\n  maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES,\n): Promise<unknown> {\n  const body = await readBody(request, maxBytes);\n  if (body.length === 0) {\n    return {};\n  }\n  const contentType = request.headers[\"content-type\"] ?? \"\";\n  const isJson = Array.isArray(contentType)\n    ? contentType.some(isJsonMediaType)\n    : isJsonMediaType(contentType);\n  if (isJson) {\n    try {\n      return JSON.parse(body.toString(\"utf8\")) as unknown;\n    } catch (error) {\n      throw new InvalidJsonBodyError(error);\n    }\n  }\n  const params = new URLSearchParams(body.toString(\"utf8\"));\n  return Object.fromEntries(params.entries());\n}\n\nexport function isJsonMediaType(value: string): boolean {\n  const mediaType = value.split(\";\", 1)[0]?.trim().toLowerCase();\n  return (\n    mediaType === \"application/json\" ||\n    /^[a-z0-9!#$%&'*+.^_`|~-]+\\/[a-z0-9!#$%&'*+.^_`|~-]+\\+json$/u.test(mediaType ?? \"\")\n  );\n}\n\nexport async function parseRequestBody(request: IncomingMessage): Promise<Record<string, unknown>> {\n  const body = await parseUnknownRequestBody(request);\n  if (!isJsonObject(body)) {\n    throw new InvalidJsonBodyError(undefined, \"Request body must be a JSON object.\");\n  }\n  return body;\n}\n\nexport function isJsonObject(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function queryRecord(url: URL): Record<string, string> {\n  return Object.fromEntries(url.searchParams.entries());\n}\n\nexport function formatUrlHost(host: string): string {\n  return host.includes(\":\") ? `[${host}]` : host;\n}\n\nfunction normalizeHost(host: string): string {\n  return host\n    .trim()\n    .replace(/^\\[(.*)\\]$/u, \"$1\")\n    .toLowerCase()\n    .replace(/\\.$/u, \"\");\n}\n\nexport function isLoopbackAddress(address: string): boolean {\n  const normalized = normalizeHost(address);\n  const family = isIP(normalized);\n  return family === 4\n    ? LOOPBACK_ADDRESSES.check(normalized, \"ipv4\")\n    : family === 6\n      ? LOOPBACK_ADDRESSES.check(normalized, \"ipv6\")\n      : false;\n}\n\nexport function isLoopbackHost(host: string): boolean {\n  const normalized = normalizeHost(host);\n  if (normalized === \"localhost\" || normalized.endsWith(\".localhost\")) {\n    return true;\n  }\n  return isLoopbackAddress(normalized);\n}\n\nexport function advertisedHostForBindAddress(host: string, boundAddress: string): string {\n  const normalizedBoundAddress = normalizeHost(boundAddress);\n  const boundFamily = isIP(normalizedBoundAddress);\n  if (boundFamily === 4 && UNSPECIFIED_ADDRESSES.check(normalizedBoundAddress, \"ipv4\")) {\n    return \"127.0.0.1\";\n  }\n  if (boundFamily === 6 && UNSPECIFIED_ADDRESSES.check(normalizedBoundAddress, \"ipv6\")) {\n    return \"::1\";\n  }\n  return isLoopbackHost(host) && isLoopbackAddress(boundAddress) ? boundAddress : host;\n}\n\nexport function assertLoopbackBindAddress(\n  configuredHost: string,\n  boundAddress: string,\n  serverName: string,\n): void {\n  if (isLoopbackHost(configuredHost) && !isLoopbackAddress(boundAddress)) {\n    throw new CrablineError(\n      `${serverName} resolved a loopback hostname to non-loopback address ${boundAddress}.`,\n      { kind: \"connectivity\" },\n    );\n  }\n}\n\nexport function writeFetchResponseHeaders(response: ServerResponse, fetchResponse: Response): void {\n  const preserveRepresentationLength =\n    response.req?.method === \"HEAD\" || fetchResponse.status === 304;\n  const connectionHeaders = new Set(\n    (fetchResponse.headers.get(\"connection\") ?? \"\")\n      .split(\",\")\n      .map((name) => name.trim().toLowerCase())\n      .filter(Boolean),\n  );\n  if (connectionHeaders.has(\"close\")) {\n    response.shouldKeepAlive = false;\n  }\n\n  for (const [name, value] of fetchResponse.headers) {\n    const normalizedName = name.toLowerCase();\n    if (\n      normalizedName === \"set-cookie\" ||\n      HOP_BY_HOP_RESPONSE_HEADERS.has(normalizedName) ||\n      connectionHeaders.has(normalizedName) ||\n      (normalizedName === \"content-length\" && !preserveRepresentationLength)\n    ) {\n      continue;\n    }\n    response.setHeader(name, value);\n  }\n\n  const setCookies = fetchResponse.headers.getSetCookie();\n  if (setCookies.length > 0 && !connectionHeaders.has(\"set-cookie\")) {\n    response.setHeader(\"set-cookie\", setCookies);\n  }\n}\n\nexport async function writeResponse(\n  response: ServerResponse,\n  fetchResponse: Response,\n  maxBytes = DEFAULT_MAX_RESPONSE_BODY_BYTES,\n): Promise<void> {\n  requirePositiveSafeInteger(maxBytes, \"maxResponseBodyBytes\");\n  const reader = fetchResponse.body?.getReader();\n  let cancellation: Promise<void> | undefined;\n  let rejectStopped!: (error: Error) => void;\n  let stoppedError: Error | undefined;\n  const stopped = new Promise<never>((_, reject) => {\n    rejectStopped = reject;\n  });\n  void stopped.catch(() => {});\n\n  const cancelBody = (reason: Error) => {\n    if (!reader || cancellation) {\n      return;\n    }\n    cancellation = reader.cancel(reason).catch(() => {});\n  };\n  const stop = (error: Error) => {\n    if (stoppedError) {\n      return;\n    }\n    stoppedError = error;\n    cancelBody(error);\n    rejectStopped(error);\n  };\n  const onClose = () => {\n    if (!response.writableFinished) {\n      stop(new Error(\"HTTP response closed before delivery completed.\"));\n    }\n  };\n  const onError = (error: Error) => stop(error);\n  const onRequestAborted = () => stop(new Error(\"HTTP response request was aborted.\"));\n  response.once(\"close\", onClose);\n  response.once(\"error\", onError);\n  response.req?.once(\"aborted\", onRequestAborted);\n\n  try {\n    if (\n      response.destroyed ||\n      response.req?.aborted ||\n      response.req?.socket.destroyed ||\n      response.socket?.destroyed\n    ) {\n      throw new Error(\"HTTP response closed before delivery completed.\");\n    }\n\n    if (response.req?.method === \"HEAD\") {\n      cancelBody(new Error(\"HEAD response body is not transferred.\"));\n      response.statusCode = fetchResponse.status;\n      writeFetchResponseHeaders(response, fetchResponse);\n      let onFinish!: () => void;\n      const finished = new Promise<void>((resolve) => {\n        onFinish = resolve;\n        response.once(\"finish\", onFinish);\n      });\n      try {\n        response.end();\n        await Promise.race([finished, stopped]);\n      } finally {\n        response.off(\"finish\", onFinish);\n      }\n      return;\n    }\n\n    const chunks: Buffer[] = [];\n    let bodyLength = 0;\n    if (reader) {\n      while (true) {\n        const chunk = await Promise.race([reader.read(), stopped]);\n        if (chunk.done) {\n          break;\n        }\n        if (chunk.value.byteLength > 0) {\n          if (bodyLength + chunk.value.byteLength > maxBytes) {\n            throw new ResponseBodyTooLargeError(maxBytes);\n          }\n          const buffer = Buffer.from(chunk.value);\n          chunks.push(buffer);\n          bodyLength += buffer.length;\n        }\n      }\n    }\n\n    const body = Buffer.concat(chunks, bodyLength);\n    response.statusCode = fetchResponse.status;\n    writeFetchResponseHeaders(response, fetchResponse);\n    let onFinish!: () => void;\n    const finished = new Promise<void>((resolve) => {\n      onFinish = resolve;\n      response.once(\"finish\", onFinish);\n    });\n    try {\n      response.end(body);\n      await Promise.race([finished, stopped]);\n    } finally {\n      response.off(\"finish\", onFinish);\n    }\n  } catch (error) {\n    cancelBody(error instanceof Error ? error : new Error(String(error)));\n    throw error;\n  } finally {\n    response.off(\"close\", onClose);\n    response.off(\"error\", onError);\n    response.req?.off(\"aborted\", onRequestAborted);\n  }\n}\n\nexport function closeServer(\n  server: Server,\n  graceMs = DEFAULT_SERVER_SHUTDOWN_GRACE_MS,\n): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const closeIdleInterval = setInterval(() => server.closeIdleConnections(), 25);\n    closeIdleInterval.unref();\n    const forceCloseTimer = setTimeout(() => {\n      server.closeAllConnections();\n    }, graceMs);\n    forceCloseTimer.unref();\n    server.close((error) => {\n      clearInterval(closeIdleInterval);\n      clearTimeout(forceCloseTimer);\n      if (error) {\n        reject(error);\n        return;\n      }\n      resolve();\n    });\n    server.closeIdleConnections();\n  });\n}\n\nexport async function startHttpJsonServer(params: {\n  handle: (request: IncomingMessage, response: ServerResponse) => Promise<HttpJsonHandlerResult>;\n  handleError?: (error: unknown, request: IncomingMessage) => Response | undefined;\n  host: string;\n  maxResponseBodyBytes?: number | undefined;\n  port: number;\n  serverName: string;\n}): Promise<{ baseUrl: string; close(): Promise<void>; server: Server }> {\n  const maxResponseBodyBytes = requirePositiveSafeInteger(\n    params.maxResponseBodyBytes ?? DEFAULT_MAX_RESPONSE_BODY_BYTES,\n    \"maxResponseBodyBytes\",\n  );\n  const handleRequest = async (request: IncomingMessage, response: ServerResponse) => {\n    try {\n      const result = await params.handle(request, response);\n      drainRequestBody(request);\n      const handled = result instanceof Response ? { response: result } : result;\n      try {\n        await writeResponse(response, handled.response, maxResponseBodyBytes);\n      } catch (error) {\n        await handled.onWriteFailure?.();\n        throw error;\n      }\n      try {\n        await handled.onWriteSuccess?.();\n      } catch {\n        // Delivery is already committed; lifecycle failures must not trigger another response.\n      }\n    } catch (error) {\n      drainRequestBody(request);\n      let handled: Response | undefined;\n      try {\n        handled = params.handleError?.(error, request);\n      } catch {\n        handled = undefined;\n      }\n      try {\n        await writeResponse(\n          response,\n          handled ??\n            jsonResponse(\n              {\n                error: \"internal server error\",\n                ok: false,\n              },\n              500,\n            ),\n          maxResponseBodyBytes,\n        );\n      } catch {\n        response.destroy();\n      }\n    }\n  };\n  const server = createServer((request, response) => {\n    void handleRequest(request, response);\n  });\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(params.port, params.host, () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n  const address = server.address();\n  if (!address || typeof address === \"string\") {\n    throw new CrablineError(`Unable to resolve ${params.serverName} local server address.`, {\n      kind: \"connectivity\",\n    });\n  }\n  try {\n    assertLoopbackBindAddress(params.host, address.address, params.serverName);\n  } catch (error) {\n    await closeServer(server);\n    throw error;\n  }\n  const advertisedHost = advertisedHostForBindAddress(params.host, address.address);\n  return {\n    baseUrl: `http://${formatUrlHost(advertisedHost)}:${address.port}`,\n    async close() {\n      await closeServer(server);\n    },\n    server,\n  };\n}\n\nfunction requirePositiveSafeInteger(value: number, name: string): number {\n  if (!Number.isSafeInteger(value) || value <= 0) {\n    throw new RangeError(`${name} must be a positive safe integer.`);\n  }\n  return value;\n}\n\nexport function readString(value: unknown): string | undefined {\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n  if (typeof value === \"number\" || typeof value === \"bigint\") {\n    return value.toString();\n  }\n  return undefined;\n}\n\nexport function readTrimmedString(value: unknown): string | undefined {\n  const stringValue = readString(value)?.trim();\n  return stringValue ? stringValue : undefined;\n}\n\nexport function readInteger(value: unknown): number | undefined {\n  const stringValue = readTrimmedString(value);\n  if (!stringValue || !/^-?\\d+$/u.test(stringValue)) {\n    return undefined;\n  }\n  const parsed = Number(stringValue);\n  return Number.isSafeInteger(parsed) ? parsed : undefined;\n}\n\nfunction readBearerToken(authorization: string | undefined): string | undefined {\n  if (!authorization) {\n    return undefined;\n  }\n  const trimmed = authorization.trimStart();\n  if (trimmed.slice(0, 7).toLowerCase() !== \"bearer \") {\n    return undefined;\n  }\n  return trimmed.slice(7);\n}\n\nexport function constantTimeTokenEqual(providedToken: string, expectedToken: string): boolean {\n  const provided = createHash(\"sha256\").update(providedToken).digest();\n  const expected = createHash(\"sha256\").update(expectedToken).digest();\n  return timingSafeEqual(provided, expected);\n}\n\nexport function hasAdminToken(request: IncomingMessage, expectedToken: string): boolean {\n  const header = request.headers[ADMIN_TOKEN_HEADER];\n  const directToken = Array.isArray(header) ? header[0] : header;\n  const providedToken = directToken ?? readBearerToken(request.headers.authorization);\n  if (!providedToken) {\n    return false;\n  }\n\n  return constantTimeTokenEqual(providedToken, expectedToken);\n}\n\nexport function adminAuthError(): Response {\n  return new Response(\"unauthorized\", {\n    headers: { \"www-authenticate\": \"Bearer\" },\n    status: 401,\n  });\n}\n"]}

package/dist/src/servers/matrix.d.ts

@@ -29,6 +29,9 @@ export type StartMatrixServerParams = {
     botUserId?: string | undefined;
     deviceId?: string | undefined;
     host?: string | undefined;
+    maxCommittedRooms?: number | undefined;
+    maxCommittedUsers?: number | undefined;
+    maxSyncResponseBytes?: number | undefined;
     onEvent?: ServerEventObserver | undefined;
     port?: number | undefined;
     recorderPath?: string | undefined;