@openclaw/crabline 0.1.9 → 0.1.10

package/dist/src/providers/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  FixtureDefinition,\n  FixtureMode,\n  InboundAuthor,\n  ProviderConfig,\n  ProviderPlatform,\n} from \"../config/schema.js\";\n\nexport type ProviderSupportStatus = \"bridge\" | \"planned\" | \"ready\";\n\nexport type InboundMatchConfig = {\n  author: InboundAuthor;\n  nonce: \"contains\" | \"exact\" | \"ignore\";\n  pattern?: string | undefined;\n  strategy: \"contains\" | \"exact\" | \"regex\";\n};\n\nexport type NormalizedTarget = {\n  channelId?: string | undefined;\n  id: string;\n  metadata: Record<string, string>;\n  threadId?: string | undefined;\n};\n\nexport type InboundEnvelope = {\n  author: Exclude<InboundAuthor, \"any\">;\n  id: string;\n  provider: string;\n  raw?: unknown;\n  sentAt: string;\n  text: string;\n  threadId: string;\n};\n\nexport type ProbeResult = {\n  details: string[];\n  healthy: boolean;\n};\n\nexport type SendResult = {\n  accepted: boolean;\n  messageId: string;\n  threadId: string;\n};\n\nexport type ProviderContext = {\n  config: ProviderConfig;\n  fixture: FixtureDefinition;\n  manifestPath: string;\n  providerId: string;\n  signal?: AbortSignal | undefined;\n  userName: string;\n};\n\nexport type SendContext = ProviderContext & {\n  mode: Extract<FixtureMode, \"agent\" | \"roundtrip\" | \"send\">;\n  nonce: string;\n  text: string;\n};\n\nexport type WaitContext = ProviderContext & {\n  excludeIds?: readonly string[] | undefined;\n  nonce: string;\n  since: string;\n  threadId?: string | undefined;\n  timeoutMs: number;\n};\n\nexport type WatchContext = ProviderContext & {\n  signal?: AbortSignal | undefined;\n  since?: string;\n};\n\nexport interface ProviderAdapter {\n  readonly id: string;\n  readonly platform: ProviderPlatform;\n  readonly status: ProviderSupportStatus;\n  readonly supports: readonly FixtureMode[];\n  normalizeTarget(target: FixtureDefinition[\"target\"]): NormalizedTarget;\n  probe(context: ProviderContext): Promise<ProbeResult>;\n  send(context: SendContext): Promise<SendResult>;\n  waitForInbound(context: WaitContext): Promise<InboundEnvelope | null>;\n  watch?(context: WatchContext): AsyncIterable<InboundEnvelope>;\n  /** Stops external admission synchronously before cleanup drains accepted work. */\n  beginCleanup?(): void;\n  cleanup?(): Promise<void>;\n}\n\nexport type LoopbackMessage = {\n  author: {\n    isMe: boolean;\n    userName: string;\n  };\n  formatted: string;\n  id: string;\n  metadata: {\n    dateSent: Date;\n    edited: boolean;\n    editedAt?: Date;\n  };\n  raw: {\n    author: \"assistant\" | \"user\";\n    id: string;\n    text: string;\n    threadId: string;\n    timestamp: string;\n  };\n  text: string;\n  threadId: string;\n};\n\nexport type LoopbackRawMessage = {\n  author: \"assistant\" | \"user\";\n  id: string;\n  text: string;\n  threadId: string;\n  timestamp: string;\n};\n"]}

package/dist/src/providers/webhook-server.d.ts

@@ -4,9 +4,11 @@ export type StartedWebhookServer = {
 };
 export declare function startWebhookServer(params: {
     handle(request: Request): Promise<Response>;
+    bodyTimeoutMs?: number | undefined;
     host: string;
     maxBodyBytes?: number;
     methods?: readonly string[] | undefined;
+    onError?: ((error: unknown) => void) | undefined;
     path: string;
     port: number;
 }): Promise<StartedWebhookServer>;

package/dist/src/providers/webhook-server.js

@@ -1,48 +1,69 @@
 import { createServer } from "node:http";
 const DEFAULT_MAX_BODY_BYTES = 1024 * 1024;
+const DEFAULT_BODY_TIMEOUT_MS = 5_000;
 class RequestBodyTooLargeError extends Error {
 }
-async function readRequestBody(request, maxBodyBytes) {
+class RequestBodyTimeoutError extends Error {
+}
+async function readRequestBody(request, maxBodyBytes, bodyTimeoutMs) {
     return await new Promise((resolve, reject) => {
         const chunks = [];
         let bodyBytes = 0;
         let settled = false;
-        request.on("data", (chunk) => {
+        const cleanup = (preserveErrorListener = false) => {
+            clearTimeout(timeout);
+            request.off("data", onData);
+            request.off("end", onEnd);
+            if (!preserveErrorListener) {
+                request.off("error", onError);
+            }
+            request.off("aborted", onAborted);
+        };
+        const fail = (error) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            cleanup(true);
+            reject(error);
+        };
+        const onData = (chunk) => {
             if (settled) {
                 return;
             }
             const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
             bodyBytes += buffer.length;
             if (bodyBytes > maxBodyBytes) {
-                settled = true;
                 request.resume();
-                reject(new RequestBodyTooLargeError());
+                fail(new RequestBodyTooLargeError());
                 return;
             }
             chunks.push(buffer);
-        });
-        request.once("end", () => {
+        };
+        const onEnd = () => {
             if (settled) {
                 return;
             }
             settled = true;
+            cleanup();
             resolve(Buffer.concat(chunks));
-        });
-        request.once("error", (error) => {
-            if (settled) {
-                return;
-            }
-            settled = true;
-            reject(error);
-        });
+        };
+        const onError = (error) => fail(error);
+        const onAborted = () => fail(new Error("request body aborted"));
+        const timeout = setTimeout(() => {
+            request.resume();
+            fail(new RequestBodyTimeoutError());
+        }, bodyTimeoutMs);
+        request.on("data", onData);
+        request.once("end", onEnd);
+        request.once("error", onError);
+        request.once("aborted", onAborted);
     });
 }
-async function toFetchRequest(request, maxBodyBytes) {
-    const host = request.headers.host ?? "127.0.0.1";
-    const url = new URL(request.url ?? "/", `http://${host}`);
+async function toFetchRequest(request, url, maxBodyBytes, bodyTimeoutMs) {
     const body = request.method === "GET" || request.method === "HEAD"
         ? undefined
-        : await readRequestBody(request, maxBodyBytes);
+        : await readRequestBody(request, maxBodyBytes, bodyTimeoutMs);
     const init = {
         headers: request.headers,
     };
@@ -76,25 +97,51 @@ function closeServer(server) {
             }
             resolve();
         });
+        server.closeAllConnections();
     });
 }
+function formatUrlHost(host) {
+    return host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+}
 export async function startWebhookServer(params) {
     const methods = new Set(params.methods ?? ["POST"]);
     const maxBodyBytes = params.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+    const bodyTimeoutMs = params.bodyTimeoutMs ?? DEFAULT_BODY_TIMEOUT_MS;
     const server = createServer(async (request, response) => {
         try {
-            const fetchRequest = await toFetchRequest(request, maxBodyBytes);
-            const pathname = new URL(fetchRequest.url).pathname;
-            if (!methods.has(fetchRequest.method) || pathname !== params.path) {
+            const method = request.method ?? "GET";
+            const host = request.headers.host ?? "127.0.0.1";
+            const url = new URL(request.url ?? "/", `http://${host}`);
+            if (!methods.has(method) || url.pathname !== params.path) {
+                request.resume();
                 await writeFetchResponse(response, new Response("not found", { status: 404 }));
                 return;
             }
+            const fetchRequest = await toFetchRequest(request, url, maxBodyBytes, bodyTimeoutMs);
             await writeFetchResponse(response, await params.handle(fetchRequest));
         }
         catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            const status = error instanceof RequestBodyTooLargeError ? 413 : 500;
-            await writeFetchResponse(response, new Response(status === 413 ? "request body too large" : message, { status }));
+            const status = error instanceof RequestBodyTooLargeError
+                ? 413
+                : error instanceof RequestBodyTimeoutError
+                    ? 408
+                    : 500;
+            if (status === 500) {
+                try {
+                    params.onError?.(error);
+                }
+                catch {
+                    // Error reporting must not change the public response.
+                }
+            }
+            await writeFetchResponse(response, new Response(status === 413
+                ? "request body too large"
+                : status === 408
+                    ? "request body timeout"
+                    : "internal server error", {
+                ...(status === 408 ? { headers: { connection: "close" } } : {}),
+                status,
+            }));
         }
     });
     await new Promise((resolve, reject) => {
@@ -112,7 +159,7 @@ export async function startWebhookServer(params) {
         async close() {
             await closeServer(server);
         },
-        endpointUrl: `http://${params.host}:${address.port}${params.path}`,
+        endpointUrl: `http://${formatUrlHost(params.host)}:${address.port}${params.path}`,
     };
 }
 //# sourceMappingURL=webhook-server.js.map

package/dist/src/providers/webhook-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-server.js","sourceRoot":"","sources":["../../../src/providers/webhook-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAOjG,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,MAAM,wBAAyB,SAAQ,KAAK;CAAG;AAE/C,KAAK,UAAU,eAAe,CAAC,OAAwB,EAAE,YAAoB;IAC3E,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;YAC3B,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAwB,EAAE,YAAoB;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAgB;QACxB,OAAO,EAAE,OAAO,CAAC,OAAiC;KACnD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAyC,EACzC,aAAuB;IAEvB,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAOxC;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClE,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YAED,MAAM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,KAAK,YAAY,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACrE,MAAM,kBAAkB,CACtB,QAAQ,EACR,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,WAAW,EAAE,UAAU,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE;KACnE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"webhook-server.js","sourceRoot":"","sources":["../../../src/providers/webhook-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAOjG,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,MAAM,wBAAyB,SAAQ,KAAK;CAAG;AAC/C,MAAM,uBAAwB,SAAQ,KAAK;CAAG;AAE9C,KAAK,UAAU,eAAe,CAC5B,OAAwB,EACxB,YAAoB,EACpB,aAAqB;IAErB,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,CAAC,qBAAqB,GAAG,KAAK,EAAE,EAAE;YAChD,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;YAC3B,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAC;QACtC,CAAC,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAwB,EACxB,GAAQ,EACR,YAAoB,EACpB,aAAqB;IAErB,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAElE,MAAM,IAAI,GAAgB;QACxB,OAAO,EAAE,OAAO,CAAC,OAAiC;KACnD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAyC,EACzC,aAAuB;IAEvB,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;IAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MASxC;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACnE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;YACvC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzD,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;YACrF,MAAM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GACV,KAAK,YAAY,wBAAwB;gBACvC,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,KAAK,YAAY,uBAAuB;oBACxC,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,GAAG,CAAC;YACZ,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;gBACzD,CAAC;YACH,CAAC;YACD,MAAM,kBAAkB,CACtB,QAAQ,EACR,IAAI,QAAQ,CACV,MAAM,KAAK,GAAG;gBACZ,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,MAAM,KAAK,GAAG;oBACd,CAAC,CAAC,sBAAsB;oBACxB,CAAC,CAAC,uBAAuB,EAC7B;gBACE,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM;aACP,CACF,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,WAAW,EAAE,UAAU,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE;KAClF,CAAC;AACJ,CAAC","sourcesContent":["import { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\n\nexport type StartedWebhookServer = {\n  close(): Promise<void>;\n  endpointUrl: string;\n};\n\nconst DEFAULT_MAX_BODY_BYTES = 1024 * 1024;\nconst DEFAULT_BODY_TIMEOUT_MS = 5_000;\n\nclass RequestBodyTooLargeError extends Error {}\nclass RequestBodyTimeoutError extends Error {}\n\nasync function readRequestBody(\n  request: IncomingMessage,\n  maxBodyBytes: number,\n  bodyTimeoutMs: number,\n): Promise<Buffer> {\n  return await new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let bodyBytes = 0;\n    let settled = false;\n\n    const cleanup = (preserveErrorListener = false) => {\n      clearTimeout(timeout);\n      request.off(\"data\", onData);\n      request.off(\"end\", onEnd);\n      if (!preserveErrorListener) {\n        request.off(\"error\", onError);\n      }\n      request.off(\"aborted\", onAborted);\n    };\n    const fail = (error: unknown) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup(true);\n      reject(error);\n    };\n    const onData = (chunk: Buffer | string) => {\n      if (settled) {\n        return;\n      }\n\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      bodyBytes += buffer.length;\n      if (bodyBytes > maxBodyBytes) {\n        request.resume();\n        fail(new RequestBodyTooLargeError());\n        return;\n      }\n      chunks.push(buffer);\n    };\n    const onEnd = () => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve(Buffer.concat(chunks));\n    };\n    const onError = (error: Error) => fail(error);\n    const onAborted = () => fail(new Error(\"request body aborted\"));\n    const timeout = setTimeout(() => {\n      request.resume();\n      fail(new RequestBodyTimeoutError());\n    }, bodyTimeoutMs);\n\n    request.on(\"data\", onData);\n    request.once(\"end\", onEnd);\n    request.once(\"error\", onError);\n    request.once(\"aborted\", onAborted);\n  });\n}\n\nasync function toFetchRequest(\n  request: IncomingMessage,\n  url: URL,\n  maxBodyBytes: number,\n  bodyTimeoutMs: number,\n): Promise<Request> {\n  const body =\n    request.method === \"GET\" || request.method === \"HEAD\"\n      ? undefined\n      : await readRequestBody(request, maxBodyBytes, bodyTimeoutMs);\n\n  const init: RequestInit = {\n    headers: request.headers as Record<string, string>,\n  };\n  if (request.method) {\n    init.method = request.method;\n  }\n  if (body) {\n    init.body = body;\n    init.duplex = \"half\";\n  }\n\n  return new Request(url, init);\n}\n\nasync function writeFetchResponse(\n  response: ServerResponse<IncomingMessage>,\n  fetchResponse: Response,\n): Promise<void> {\n  response.statusCode = fetchResponse.status;\n\n  for (const [name, value] of fetchResponse.headers) {\n    response.setHeader(name, value);\n  }\n\n  if (!fetchResponse.body) {\n    response.end();\n    return;\n  }\n\n  const body = Buffer.from(await fetchResponse.arrayBuffer());\n  response.end(body);\n}\n\nfunction closeServer(server: Server): Promise<void> {\n  return new Promise((resolve, reject) => {\n    server.close((error) => {\n      if (error) {\n        reject(error);\n        return;\n      }\n      resolve();\n    });\n    server.closeAllConnections();\n  });\n}\n\nfunction formatUrlHost(host: string): string {\n  return host.includes(\":\") && !host.startsWith(\"[\") ? `[${host}]` : host;\n}\n\nexport async function startWebhookServer(params: {\n  handle(request: Request): Promise<Response>;\n  bodyTimeoutMs?: number | undefined;\n  host: string;\n  maxBodyBytes?: number;\n  methods?: readonly string[] | undefined;\n  onError?: ((error: unknown) => void) | undefined;\n  path: string;\n  port: number;\n}): Promise<StartedWebhookServer> {\n  const methods = new Set(params.methods ?? [\"POST\"]);\n  const maxBodyBytes = params.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;\n  const bodyTimeoutMs = params.bodyTimeoutMs ?? DEFAULT_BODY_TIMEOUT_MS;\n  const server = createServer(async (request, response) => {\n    try {\n      const method = request.method ?? \"GET\";\n      const host = request.headers.host ?? \"127.0.0.1\";\n      const url = new URL(request.url ?? \"/\", `http://${host}`);\n      if (!methods.has(method) || url.pathname !== params.path) {\n        request.resume();\n        await writeFetchResponse(response, new Response(\"not found\", { status: 404 }));\n        return;\n      }\n\n      const fetchRequest = await toFetchRequest(request, url, maxBodyBytes, bodyTimeoutMs);\n      await writeFetchResponse(response, await params.handle(fetchRequest));\n    } catch (error) {\n      const status =\n        error instanceof RequestBodyTooLargeError\n          ? 413\n          : error instanceof RequestBodyTimeoutError\n            ? 408\n            : 500;\n      if (status === 500) {\n        try {\n          params.onError?.(error);\n        } catch {\n          // Error reporting must not change the public response.\n        }\n      }\n      await writeFetchResponse(\n        response,\n        new Response(\n          status === 413\n            ? \"request body too large\"\n            : status === 408\n              ? \"request body timeout\"\n              : \"internal server error\",\n          {\n            ...(status === 408 ? { headers: { connection: \"close\" } } : {}),\n            status,\n          },\n        ),\n      );\n    }\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(params.port, params.host, () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n\n  const address = server.address();\n  if (!address || typeof address === \"string\") {\n    throw new Error(\"Unable to resolve webhook server address.\");\n  }\n\n  return {\n    async close() {\n      await closeServer(server);\n    },\n    endpointUrl: `http://${formatUrlHost(params.host)}:${address.port}${params.path}`,\n  };\n}\n"]}

package/dist/src/servers/http.d.ts

@@ -7,15 +7,35 @@ export type ServerRequestEvent = {
     query: Record<string, string>;
     type: "admin" | "api";
 };
+export type HttpJsonHandlerResult = Response | {
+    onWriteFailure?(): Promise<void> | void;
+    onWriteSuccess?(): Promise<void> | void;
+    response: Response;
+};
 export declare const ADMIN_TOKEN_HEADER = "x-crabline-admin-token";
+export declare const DEFAULT_MAX_REQUEST_BODY_BYTES: number;
+export declare const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;
+export declare class InvalidJsonBodyError extends Error {
+    constructor(cause: unknown);
+}
+export declare class RequestBodyTooLargeError extends Error {
+    readonly maxBytes: number;
+    constructor(maxBytes: number);
+}
 export declare function jsonResponse(value: unknown, status?: number): Response;
-export declare function readBody(request: IncomingMessage): Promise<Buffer>;
+export declare function drainRequestBody(request: IncomingMessage): void;
+export declare function readBody(request: IncomingMessage, maxBytes?: number): Promise<Buffer>;
+export declare function parseUnknownRequestBody(request: IncomingMessage, maxBytes?: number): Promise<unknown>;
 export declare function parseRequestBody(request: IncomingMessage): Promise<Record<string, unknown>>;
+export declare function isJsonObject(value: unknown): value is Record<string, unknown>;
 export declare function queryRecord(url: URL): Record<string, string>;
+export declare function formatUrlHost(host: string): string;
+export declare function isLoopbackHost(host: string): boolean;
 export declare function writeResponse(response: ServerResponse, fetchResponse: Response): Promise<void>;
-export declare function closeServer(server: Server): Promise<void>;
+export declare function closeServer(server: Server, graceMs?: number): Promise<void>;
 export declare function startHttpJsonServer(params: {
-    handle: (request: IncomingMessage) => Promise<Response>;
+    handle: (request: IncomingMessage, response: ServerResponse) => Promise<HttpJsonHandlerResult>;
+    handleError?: (error: unknown, request: IncomingMessage) => Response | undefined;
     host: string;
     port: number;
     serverName: string;

package/dist/src/servers/http.js

@@ -2,63 +2,255 @@ import { createServer } from "node:http";
 import { timingSafeEqual } from "node:crypto";
 import { CrablineError } from "../core/errors.js";
 export const ADMIN_TOKEN_HEADER = "x-crabline-admin-token";
+export const DEFAULT_MAX_REQUEST_BODY_BYTES = 1024 * 1024;
+export const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;
+export class InvalidJsonBodyError extends Error {
+    constructor(cause) {
+        super("Request body is not valid JSON.", { cause });
+        this.name = "InvalidJsonBodyError";
+    }
+}
+export class RequestBodyTooLargeError extends Error {
+    maxBytes;
+    constructor(maxBytes) {
+        super(`Request body exceeds the ${maxBytes} byte limit.`);
+        this.maxBytes = maxBytes;
+        this.name = "RequestBodyTooLargeError";
+    }
+}
 export function jsonResponse(value, status = 200) {
     return Response.json(value, { status });
 }
-export async function readBody(request) {
-    const chunks = [];
-    for await (const chunk of request) {
-        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+export function drainRequestBody(request) {
+    const ignoreError = () => { };
+    request.on("error", ignoreError);
+    if (request.destroyed || request.readableEnded) {
+        return;
     }
-    return Buffer.concat(chunks);
+    const cleanup = () => {
+        request.off("close", cleanup);
+        request.off("end", cleanup);
+        request.off("error", ignoreError);
+    };
+    request.once("close", cleanup);
+    request.once("end", cleanup);
+    request.resume();
 }
-export async function parseRequestBody(request) {
-    const body = await readBody(request);
+export async function readBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES) {
+    const contentLengthHeader = request.headers["content-length"];
+    const contentLengthValue = Array.isArray(contentLengthHeader)
+        ? contentLengthHeader[0]
+        : contentLengthHeader;
+    if (contentLengthValue && /^\d+$/u.test(contentLengthValue)) {
+        const contentLength = Number(contentLengthValue);
+        if (!Number.isSafeInteger(contentLength) || contentLength > maxBytes) {
+            drainRequestBody(request);
+            throw new RequestBodyTooLargeError(maxBytes);
+        }
+    }
+    return await new Promise((resolve, reject) => {
+        const chunks = [];
+        let length = 0;
+        let settled = false;
+        const cleanup = () => {
+            request.off("aborted", onAborted);
+            request.off("data", onData);
+            request.off("end", onEnd);
+            request.off("error", onError);
+        };
+        const fail = (error) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            drainRequestBody(request);
+            cleanup();
+            reject(error);
+        };
+        const onAborted = () => fail(new Error("Request body stream was aborted."));
+        const onData = (chunk) => {
+            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            length += buffer.length;
+            if (length > maxBytes) {
+                fail(new RequestBodyTooLargeError(maxBytes));
+                return;
+            }
+            chunks.push(buffer);
+        };
+        const onEnd = () => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            cleanup();
+            resolve(Buffer.concat(chunks, length));
+        };
+        const onError = (error) => fail(error);
+        request.on("aborted", onAborted);
+        request.on("data", onData);
+        request.on("end", onEnd);
+        request.on("error", onError);
+    });
+}
+export async function parseUnknownRequestBody(request, maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES) {
+    const body = await readBody(request, maxBytes);
     if (body.length === 0) {
         return {};
     }
     const contentType = request.headers["content-type"] ?? "";
     const includesJson = Array.isArray(contentType)
-        ? contentType.some((entry) => entry.includes("json"))
-        : contentType.includes("json");
+        ? contentType.some((entry) => entry.toLowerCase().includes("json"))
+        : contentType.toLowerCase().includes("json");
     if (includesJson) {
-        return JSON.parse(body.toString("utf8"));
+        try {
+            return JSON.parse(body.toString("utf8"));
+        }
+        catch (error) {
+            throw new InvalidJsonBodyError(error);
+        }
     }
     const params = new URLSearchParams(body.toString("utf8"));
     return Object.fromEntries(params.entries());
 }
+export async function parseRequestBody(request) {
+    return (await parseUnknownRequestBody(request, Number.MAX_SAFE_INTEGER));
+}
+export function isJsonObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
 export function queryRecord(url) {
     return Object.fromEntries(url.searchParams.entries());
 }
+export function formatUrlHost(host) {
+    return host.includes(":") ? `[${host}]` : host;
+}
+export function isLoopbackHost(host) {
+    const normalized = host
+        .trim()
+        .replace(/^\[(.*)\]$/u, "$1")
+        .toLowerCase();
+    return (normalized === "localhost" ||
+        normalized.endsWith(".localhost") ||
+        normalized === "::1" ||
+        normalized.startsWith("::ffff:127.") ||
+        /^127(?:\.\d{1,3}){3}$/u.test(normalized));
+}
 export async function writeResponse(response, fetchResponse) {
     response.statusCode = fetchResponse.status;
     for (const [name, value] of fetchResponse.headers) {
+        if (name.toLowerCase() === "set-cookie") {
+            continue;
+        }
         response.setHeader(name, value);
     }
-    response.end(Buffer.from(await fetchResponse.arrayBuffer()));
+    const setCookies = fetchResponse.headers.getSetCookie();
+    if (setCookies.length > 0) {
+        response.setHeader("set-cookie", setCookies);
+    }
+    const body = Buffer.from(await fetchResponse.arrayBuffer());
+    await new Promise((resolve, reject) => {
+        if (response.destroyed ||
+            response.req?.aborted ||
+            response.req?.socket.destroyed ||
+            response.socket?.destroyed) {
+            reject(new Error("HTTP response closed before delivery completed."));
+            return;
+        }
+        const cleanup = () => {
+            response.off("close", onClose);
+            response.off("error", onError);
+            response.off("finish", onFinish);
+        };
+        const onClose = () => {
+            if (response.writableFinished) {
+                cleanup();
+                resolve();
+                return;
+            }
+            cleanup();
+            reject(new Error("HTTP response closed before delivery completed."));
+        };
+        const onError = (error) => {
+            cleanup();
+            reject(error);
+        };
+        const onFinish = () => {
+            cleanup();
+            resolve();
+        };
+        response.once("close", onClose);
+        response.once("error", onError);
+        response.once("finish", onFinish);
+        try {
+            response.end(body);
+        }
+        catch (error) {
+            cleanup();
+            reject(error);
+        }
+    });
 }
-export function closeServer(server) {
+export function closeServer(server, graceMs = DEFAULT_SERVER_SHUTDOWN_GRACE_MS) {
     return new Promise((resolve, reject) => {
+        const closeIdleInterval = setInterval(() => server.closeIdleConnections(), 25);
+        closeIdleInterval.unref();
+        const forceCloseTimer = setTimeout(() => {
+            server.closeAllConnections();
+        }, graceMs);
+        forceCloseTimer.unref();
         server.close((error) => {
+            clearInterval(closeIdleInterval);
+            clearTimeout(forceCloseTimer);
             if (error) {
                 reject(error);
                 return;
             }
             resolve();
         });
+        server.closeIdleConnections();
     });
 }
 export async function startHttpJsonServer(params) {
-    const server = createServer(async (request, response) => {
+    const handleRequest = async (request, response) => {
         try {
-            await writeResponse(response, await params.handle(request));
+            const result = await params.handle(request, response);
+            const handled = result instanceof Response ? { response: result } : result;
+            try {
+                await writeResponse(response, handled.response);
+            }
+            catch (error) {
+                await handled.onWriteFailure?.();
+                throw error;
+            }
+            try {
+                await handled.onWriteSuccess?.();
+            }
+            catch {
+                // Delivery is already committed; lifecycle failures must not trigger another response.
+            }
         }
         catch (error) {
-            await writeResponse(response, jsonResponse({
-                error: error instanceof Error ? error.message : String(error),
-                ok: false,
-            }, 500));
+            let handled;
+            try {
+                handled = params.handleError?.(error, request);
+            }
+            catch {
+                handled = undefined;
+            }
+            try {
+                await writeResponse(response, handled ??
+                    jsonResponse({
+                        error: "internal server error",
+                        ok: false,
+                    }, 500));
+            }
+            catch {
+                response.destroy();
+            }
         }
+    };
+    const server = createServer((request, response) => {
+        void handleRequest(request, response);
     });
     await new Promise((resolve, reject) => {
         server.once("error", reject);
@@ -74,7 +266,7 @@ export async function startHttpJsonServer(params) {
         });
     }
     return {
-        baseUrl: `http://${params.host.includes(":") ? `[${params.host}]` : params.host}:${address.port}`,
+        baseUrl: `http://${formatUrlHost(params.host)}:${address.port}`,
         async close() {
             await closeServer(server);
         },
@@ -99,7 +291,8 @@ export function readInteger(value) {
     if (!stringValue || !/^-?\d+$/u.test(stringValue)) {
         return undefined;
     }
-    return Number(stringValue);
+    const parsed = Number(stringValue);
+    return Number.isSafeInteger(parsed) ? parsed : undefined;
 }
 function readBearerToken(authorization) {
     if (!authorization) {

package/dist/src/servers/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/servers/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAWlD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAE3D,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACvD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwB;IAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,aAAuB;IAEvB,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAClD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAKzC;IACC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,aAAa,CACjB,QAAQ,EACR,YAAY,CACV;gBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,EAAE,EAAE,KAAK;aACV,EACD,GAAG,CACJ,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,qBAAqB,MAAM,CAAC,UAAU,wBAAwB,EAAE;YACtF,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;QACjG,KAAK,CAAC,KAAK;YACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,WAAW,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE;QAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;QACzC,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/servers/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAmBlD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAEpD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,KAAc;QACxB,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B,QAAQ;IAA7B,YAAqB,QAAgB;QACnC,KAAK,CAAC,4BAA4B,QAAQ,cAAc,CAAC,CAAC;wBADvC,QAAQ;QAE3B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,MAAM,GAAG,GAAG;IACvD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,MAAM,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,QAAQ,GAAG,8BAA8B;IAEzC,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC3D,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,mBAAmB,CAAC;IACxB,IAAI,kBAAkB,IAAI,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,QAAQ,EAAE,CAAC;YACrE,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;YAC5B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAwB,EACxB,QAAQ,GAAG,8BAA8B;IAEzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAwB;IAC7D,OAAO,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAGtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAQ;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;SAC5B,WAAW,EAAE,CAAC;IACjB,OAAO,CACL,UAAU,KAAK,WAAW;QAC1B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,KAAK,KAAK;QACpB,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;QACpC,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,aAAuB;IAEvB,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACxD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IACE,QAAQ,CAAC,SAAS;YAClB,QAAQ,CAAC,GAAG,EAAE,OAAO;YACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS;YAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,EAC1B,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,OAAO,GAAG,gCAAgC;IAE1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACjC,YAAY,CAAC,eAAe,CAAC,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAMzC;IACC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,uFAAuF;YACzF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,QAAQ,EACR,OAAO;oBACL,YAAY,CACV;wBACE,KAAK,EAAE,uBAAuB;wBAC9B,EAAE,EAAE,KAAK;qBACV,EACD,GAAG,CACJ,CACJ,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,KAAK,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,qBAAqB,MAAM,CAAC,UAAU,wBAAwB,EAAE;YACtF,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE;QAC/D,KAAK,CAAC,KAAK;YACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,WAAW,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE;QAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;QACzC,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\nimport { timingSafeEqual } from \"node:crypto\";\nimport { CrablineError } from \"../core/errors.js\";\n\nexport type ServerRequestEvent = {\n  at: string;\n  body?: unknown;\n  method: string;\n  path: string;\n  query: Record<string, string>;\n  type: \"admin\" | \"api\";\n};\n\nexport type HttpJsonHandlerResult =\n  | Response\n  | {\n      onWriteFailure?(): Promise<void> | void;\n      onWriteSuccess?(): Promise<void> | void;\n      response: Response;\n    };\n\nexport const ADMIN_TOKEN_HEADER = \"x-crabline-admin-token\";\nexport const DEFAULT_MAX_REQUEST_BODY_BYTES = 1024 * 1024;\nexport const DEFAULT_SERVER_SHUTDOWN_GRACE_MS = 250;\n\nexport class InvalidJsonBodyError extends Error {\n  constructor(cause: unknown) {\n    super(\"Request body is not valid JSON.\", { cause });\n    this.name = \"InvalidJsonBodyError\";\n  }\n}\n\nexport class RequestBodyTooLargeError extends Error {\n  constructor(readonly maxBytes: number) {\n    super(`Request body exceeds the ${maxBytes} byte limit.`);\n    this.name = \"RequestBodyTooLargeError\";\n  }\n}\n\nexport function jsonResponse(value: unknown, status = 200): Response {\n  return Response.json(value, { status });\n}\n\nexport function drainRequestBody(request: IncomingMessage): void {\n  const ignoreError = () => {};\n  request.on(\"error\", ignoreError);\n  if (request.destroyed || request.readableEnded) {\n    return;\n  }\n  const cleanup = () => {\n    request.off(\"close\", cleanup);\n    request.off(\"end\", cleanup);\n    request.off(\"error\", ignoreError);\n  };\n\n  request.once(\"close\", cleanup);\n  request.once(\"end\", cleanup);\n  request.resume();\n}\n\nexport async function readBody(\n  request: IncomingMessage,\n  maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES,\n): Promise<Buffer> {\n  const contentLengthHeader = request.headers[\"content-length\"];\n  const contentLengthValue = Array.isArray(contentLengthHeader)\n    ? contentLengthHeader[0]\n    : contentLengthHeader;\n  if (contentLengthValue && /^\\d+$/u.test(contentLengthValue)) {\n    const contentLength = Number(contentLengthValue);\n    if (!Number.isSafeInteger(contentLength) || contentLength > maxBytes) {\n      drainRequestBody(request);\n      throw new RequestBodyTooLargeError(maxBytes);\n    }\n  }\n\n  return await new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let length = 0;\n    let settled = false;\n\n    const cleanup = () => {\n      request.off(\"aborted\", onAborted);\n      request.off(\"data\", onData);\n      request.off(\"end\", onEnd);\n      request.off(\"error\", onError);\n    };\n    const fail = (error: Error) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      drainRequestBody(request);\n      cleanup();\n      reject(error);\n    };\n    const onAborted = () => fail(new Error(\"Request body stream was aborted.\"));\n    const onData = (chunk: Buffer | string) => {\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      length += buffer.length;\n      if (length > maxBytes) {\n        fail(new RequestBodyTooLargeError(maxBytes));\n        return;\n      }\n      chunks.push(buffer);\n    };\n    const onEnd = () => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve(Buffer.concat(chunks, length));\n    };\n    const onError = (error: Error) => fail(error);\n\n    request.on(\"aborted\", onAborted);\n    request.on(\"data\", onData);\n    request.on(\"end\", onEnd);\n    request.on(\"error\", onError);\n  });\n}\n\nexport async function parseUnknownRequestBody(\n  request: IncomingMessage,\n  maxBytes = DEFAULT_MAX_REQUEST_BODY_BYTES,\n): Promise<unknown> {\n  const body = await readBody(request, maxBytes);\n  if (body.length === 0) {\n    return {};\n  }\n  const contentType = request.headers[\"content-type\"] ?? \"\";\n  const includesJson = Array.isArray(contentType)\n    ? contentType.some((entry) => entry.toLowerCase().includes(\"json\"))\n    : contentType.toLowerCase().includes(\"json\");\n  if (includesJson) {\n    try {\n      return JSON.parse(body.toString(\"utf8\")) as unknown;\n    } catch (error) {\n      throw new InvalidJsonBodyError(error);\n    }\n  }\n  const params = new URLSearchParams(body.toString(\"utf8\"));\n  return Object.fromEntries(params.entries());\n}\n\nexport async function parseRequestBody(request: IncomingMessage): Promise<Record<string, unknown>> {\n  return (await parseUnknownRequestBody(request, Number.MAX_SAFE_INTEGER)) as Record<\n    string,\n    unknown\n  >;\n}\n\nexport function isJsonObject(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function queryRecord(url: URL): Record<string, string> {\n  return Object.fromEntries(url.searchParams.entries());\n}\n\nexport function formatUrlHost(host: string): string {\n  return host.includes(\":\") ? `[${host}]` : host;\n}\n\nexport function isLoopbackHost(host: string): boolean {\n  const normalized = host\n    .trim()\n    .replace(/^\\[(.*)\\]$/u, \"$1\")\n    .toLowerCase();\n  return (\n    normalized === \"localhost\" ||\n    normalized.endsWith(\".localhost\") ||\n    normalized === \"::1\" ||\n    normalized.startsWith(\"::ffff:127.\") ||\n    /^127(?:\\.\\d{1,3}){3}$/u.test(normalized)\n  );\n}\n\nexport async function writeResponse(\n  response: ServerResponse,\n  fetchResponse: Response,\n): Promise<void> {\n  response.statusCode = fetchResponse.status;\n  for (const [name, value] of fetchResponse.headers) {\n    if (name.toLowerCase() === \"set-cookie\") {\n      continue;\n    }\n    response.setHeader(name, value);\n  }\n  const setCookies = fetchResponse.headers.getSetCookie();\n  if (setCookies.length > 0) {\n    response.setHeader(\"set-cookie\", setCookies);\n  }\n  const body = Buffer.from(await fetchResponse.arrayBuffer());\n  await new Promise<void>((resolve, reject) => {\n    if (\n      response.destroyed ||\n      response.req?.aborted ||\n      response.req?.socket.destroyed ||\n      response.socket?.destroyed\n    ) {\n      reject(new Error(\"HTTP response closed before delivery completed.\"));\n      return;\n    }\n    const cleanup = () => {\n      response.off(\"close\", onClose);\n      response.off(\"error\", onError);\n      response.off(\"finish\", onFinish);\n    };\n    const onClose = () => {\n      if (response.writableFinished) {\n        cleanup();\n        resolve();\n        return;\n      }\n      cleanup();\n      reject(new Error(\"HTTP response closed before delivery completed.\"));\n    };\n    const onError = (error: Error) => {\n      cleanup();\n      reject(error);\n    };\n    const onFinish = () => {\n      cleanup();\n      resolve();\n    };\n    response.once(\"close\", onClose);\n    response.once(\"error\", onError);\n    response.once(\"finish\", onFinish);\n    try {\n      response.end(body);\n    } catch (error) {\n      cleanup();\n      reject(error);\n    }\n  });\n}\n\nexport function closeServer(\n  server: Server,\n  graceMs = DEFAULT_SERVER_SHUTDOWN_GRACE_MS,\n): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const closeIdleInterval = setInterval(() => server.closeIdleConnections(), 25);\n    closeIdleInterval.unref();\n    const forceCloseTimer = setTimeout(() => {\n      server.closeAllConnections();\n    }, graceMs);\n    forceCloseTimer.unref();\n    server.close((error) => {\n      clearInterval(closeIdleInterval);\n      clearTimeout(forceCloseTimer);\n      if (error) {\n        reject(error);\n        return;\n      }\n      resolve();\n    });\n    server.closeIdleConnections();\n  });\n}\n\nexport async function startHttpJsonServer(params: {\n  handle: (request: IncomingMessage, response: ServerResponse) => Promise<HttpJsonHandlerResult>;\n  handleError?: (error: unknown, request: IncomingMessage) => Response | undefined;\n  host: string;\n  port: number;\n  serverName: string;\n}): Promise<{ baseUrl: string; close(): Promise<void>; server: Server }> {\n  const handleRequest = async (request: IncomingMessage, response: ServerResponse) => {\n    try {\n      const result = await params.handle(request, response);\n      const handled = result instanceof Response ? { response: result } : result;\n      try {\n        await writeResponse(response, handled.response);\n      } catch (error) {\n        await handled.onWriteFailure?.();\n        throw error;\n      }\n      try {\n        await handled.onWriteSuccess?.();\n      } catch {\n        // Delivery is already committed; lifecycle failures must not trigger another response.\n      }\n    } catch (error) {\n      let handled: Response | undefined;\n      try {\n        handled = params.handleError?.(error, request);\n      } catch {\n        handled = undefined;\n      }\n      try {\n        await writeResponse(\n          response,\n          handled ??\n            jsonResponse(\n              {\n                error: \"internal server error\",\n                ok: false,\n              },\n              500,\n            ),\n        );\n      } catch {\n        response.destroy();\n      }\n    }\n  };\n  const server = createServer((request, response) => {\n    void handleRequest(request, response);\n  });\n  await new Promise<void>((resolve, reject) => {\n    server.once(\"error\", reject);\n    server.listen(params.port, params.host, () => {\n      server.off(\"error\", reject);\n      resolve();\n    });\n  });\n  const address = server.address();\n  if (!address || typeof address === \"string\") {\n    throw new CrablineError(`Unable to resolve ${params.serverName} local server address.`, {\n      kind: \"connectivity\",\n    });\n  }\n  return {\n    baseUrl: `http://${formatUrlHost(params.host)}:${address.port}`,\n    async close() {\n      await closeServer(server);\n    },\n    server,\n  };\n}\n\nexport function readString(value: unknown): string | undefined {\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n  if (typeof value === \"number\" || typeof value === \"bigint\") {\n    return value.toString();\n  }\n  return undefined;\n}\n\nexport function readTrimmedString(value: unknown): string | undefined {\n  const stringValue = readString(value)?.trim();\n  return stringValue ? stringValue : undefined;\n}\n\nexport function readInteger(value: unknown): number | undefined {\n  const stringValue = readTrimmedString(value);\n  if (!stringValue || !/^-?\\d+$/u.test(stringValue)) {\n    return undefined;\n  }\n  const parsed = Number(stringValue);\n  return Number.isSafeInteger(parsed) ? parsed : undefined;\n}\n\nfunction readBearerToken(authorization: string | undefined): string | undefined {\n  if (!authorization) {\n    return undefined;\n  }\n  const trimmed = authorization.trimStart();\n  if (trimmed.slice(0, 7).toLowerCase() !== \"bearer \") {\n    return undefined;\n  }\n  return trimmed.slice(7);\n}\n\nexport function hasAdminToken(request: IncomingMessage, expectedToken: string): boolean {\n  const header = request.headers[ADMIN_TOKEN_HEADER];\n  const directToken = Array.isArray(header) ? header[0] : header;\n  const providedToken = directToken ?? readBearerToken(request.headers.authorization);\n  if (!providedToken) {\n    return false;\n  }\n\n  const provided = Buffer.from(providedToken);\n  const expected = Buffer.from(expectedToken);\n  return provided.length === expected.length && timingSafeEqual(provided, expected);\n}\n\nexport function adminAuthError(): Response {\n  return new Response(\"unauthorized\", {\n    headers: { \"www-authenticate\": \"Bearer\" },\n    status: 401,\n  });\n}\n"]}