@orkestrel/websocket 0.0.4 → 0.0.6

package/dist/src/server/index.cjs

@@ -17,6 +17,8 @@ var WEBSOCKET_VERSION = "13";
 var WEBSOCKET_OPCODE_TEXT = 1;
 /** Binary frame opcode — a raw byte payload (RFC 6455 §5.6). */
 var WEBSOCKET_OPCODE_BINARY = 2;
+/** Continuation frame opcode — the next fragment of an open data message (RFC 6455 §5.4). */
+var WEBSOCKET_OPCODE_CONTINUATION = 0;
 /** Close frame opcode — a control frame ending the connection (RFC 6455 §5.5.1). */
 var WEBSOCKET_OPCODE_CLOSE = 8;
 /** Ping frame opcode — a control frame the peer must answer with a pong (RFC 6455 §5.5.2). */
@@ -49,6 +51,8 @@ var WEBSOCKET_CLOSE_TIMEOUT_MS = 3e4;
 var WEBSOCKET_FAIL_TIMEOUT_MS = 1e3;
 /** The maximum control-frame payload length in bytes (RFC 6455 §5.5). */
 var WEBSOCKET_CONTROL_MAXLEN = 125;
+/** The maximum UTF-8 close-reason length after the two-byte status code. */
+var WEBSOCKET_CLOSE_REASON_MAXLEN = 123;
 //#endregion
 //#region src/server/helpers.ts
 /**
@@ -66,6 +70,46 @@ function computeWebSocketAccept(key) {
 	return (0, node_crypto.createHash)("sha1").update(key + WEBSOCKET_GUID).digest("base64");
 }
 /**
+* Whether a value is a canonical RFC 6455 `Sec-WebSocket-Key`.
+*
+* @remarks
+* A valid key is exactly 16 random bytes encoded as 24 characters of base64, ending
+* in `==` (RFC 6455 §4.1). This predicate is suitable at an HTTP upgrade boundary:
+* malformed or non-canonical encodings return `false`; nothing is thrown.
+*
+* @param key - The proposed `Sec-WebSocket-Key` header value
+* @returns `true` when `key` is the canonical base64 encoding of 16 bytes
+*
+* @example
+* ```ts
+* const key = request.headers['sec-websocket-key']
+* if (typeof key !== 'string' || !isWebSocketKey(key)) socket.destroy()
+* ```
+*/
+function isWebSocketKey(key) {
+	if (!/^[A-Za-z0-9+/]{22}==$/.test(key)) return false;
+	return Buffer.from(key, "base64").length === 16;
+}
+/**
+* Whether a value is one valid WebSocket subprotocol token.
+*
+* @remarks
+* Subprotocols use the HTTP `token` grammar. Whitespace, separators, commas, and
+* control characters are rejected, preventing an untrusted value from injecting a
+* second handshake header.
+*
+* @param protocol - The negotiated subprotocol to validate
+* @returns `true` when `protocol` is one non-empty HTTP token
+*
+* @example
+* ```ts
+* if (!isWebSocketProtocol(protocol)) throw new RangeError('invalid protocol')
+* ```
+*/
+function isWebSocketProtocol(protocol) {
+	return /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/.test(protocol);
+}
+/**
 * Decode a single RFC 6455 frame from the front of a buffer.
 *
 * @remarks
@@ -85,8 +129,8 @@ function computeWebSocketAccept(key) {
 */
 function parseWebSocketFrame(buffer) {
 	if (buffer.length < 2) return void 0;
-	const firstByte = buffer[0] ?? 0;
-	const secondByte = buffer[1] ?? 0;
+	const firstByte = buffer.readUInt8(0);
+	const secondByte = buffer.readUInt8(1);
 	const fin = (firstByte & 128) !== 0;
 	const rsv = (firstByte & 112) >> 4;
 	const opcode = firstByte & 15;
@@ -113,7 +157,7 @@ function parseWebSocketFrame(buffer) {
 	if (buffer.length < offset + length) return void 0;
 	const payload = Buffer.alloc(length);
 	buffer.copy(payload, 0, offset, offset + length);
-	if (mask !== void 0) for (let index = 0; index < length; index += 1) payload[index] = (payload[index] ?? 0) ^ (mask[index % 4] ?? 0);
+	if (mask !== void 0) for (let index = 0; index < length; index += 1) payload[index] = payload.readUInt8(index) ^ mask.readUInt8(index % 4);
 	return {
 		fin,
 		opcode,
@@ -145,7 +189,7 @@ function parseWebSocketFrame(buffer) {
 */
 function measureWebSocketFrame(buffer) {
 	if (buffer.length < 2) return void 0;
-	let length = (buffer[1] ?? 0) & 127;
+	let length = buffer.readUInt8(1) & 127;
 	const offset = 2;
 	if (length === 126) {
 		if (buffer.length < 4) return void 0;
@@ -159,6 +203,36 @@ function measureWebSocketFrame(buffer) {
 	return length;
 }
 /**
+* Whether the next frame uses the shortest valid RFC 6455 payload-length encoding.
+*
+* @remarks
+* Returns `undefined` until the complete length prefix is buffered. The 16-bit form
+* is canonical only for lengths at least 126; the 64-bit form only for lengths at
+* least 65,536 and with its most-significant bit clear (RFC 6455 §5.2).
+*
+* @param buffer - The accumulation buffer containing the next frame header
+* @returns Its canonicality, or `undefined` while the length prefix is incomplete
+*
+* @example
+* ```ts
+* if (isWebSocketFrameCanonical(buffer) === false) fail(WEBSOCKET_CLOSE_PROTOCOL)
+* ```
+*/
+function isWebSocketFrameCanonical(buffer) {
+	if (buffer.length < 2) return void 0;
+	const lengthCode = buffer.readUInt8(1) & 127;
+	if (lengthCode < 126) return true;
+	if (lengthCode === 126) {
+		if (buffer.length < 4) return void 0;
+		return buffer.readUInt16BE(2) >= 126;
+	}
+	if (buffer.length < 10) return void 0;
+	const high = buffer.readUInt32BE(2);
+	const low = buffer.readUInt32BE(6);
+	if ((high & 2147483648) !== 0) return false;
+	return high > 0 || low >= 65536;
+}
+/**
 * Decode a byte sequence as strict UTF-8, or signal it is malformed.
 *
 * @remarks
@@ -204,6 +278,7 @@ function parseUTF8(bytes) {
 * ```
 */
 function isCloseCode(code) {
+	if (!Number.isInteger(code)) return false;
 	if (code >= 1e3 && code <= 1003) return true;
 	if (code >= 1007 && code <= 1014) return true;
 	if (code >= 3e3 && code <= 4999) return true;
@@ -229,6 +304,9 @@ function isCloseCode(code) {
 * @returns The complete frame as wire bytes
 */
 function encodeWebSocketFrame(opcode, payload, options) {
+	if (!Number.isInteger(opcode) || opcode < 0 || opcode > 15) throw new RangeError("opcode must be an integer between 0 and 15");
+	if (options?.mask !== void 0 && options.mask.length !== 4) throw new RangeError("mask must contain exactly 4 bytes");
+	if (options?.mask !== void 0 && options.masked !== true) throw new RangeError("mask requires masked: true");
 	const body = typeof payload === "string" ? Buffer.from(payload, "utf-8") : payload;
 	const length = body.length;
 	const masked = options?.masked === true;
@@ -249,7 +327,7 @@ function encodeWebSocketFrame(opcode, payload, options) {
 	if (mask === void 0) return Buffer.concat([header, body]);
 	mask.copy(header, header.length - 4);
 	const maskedBody = Buffer.alloc(length);
-	for (let index = 0; index < length; index += 1) maskedBody[index] = (body[index] ?? 0) ^ (mask[index % 4] ?? 0);
+	for (let index = 0; index < length; index += 1) maskedBody[index] = body.readUInt8(index) ^ mask.readUInt8(index % 4);
 	return Buffer.concat([header, maskedBody]);
 }
 //#endregion
@@ -270,72 +348,71 @@ function encodeWebSocketFrame(opcode, payload, options) {
 * socket, emitting `close`. `send` writes a text frame, `ping` a ping, `close` a close
 * frame; `destroy` tears down immediately. It owns a typed `#emitter` (AGENTS §13) that
 * isolates a throwing listener and routes the error to its own `error` handler (the `error`
-* option) — the socket never crashes. The untyped socket `data` is narrowed to a `Buffer`
-* with a guard, never an assertion (AGENTS §14).
+* option) — the socket never crashes. An underlying socket error emits the domain
+* `error` event and terminates the wrapper. The untyped socket `data` is narrowed to a
+* `Buffer` with a guard, never an assertion (AGENTS §14).
 */
 var NodeWebSocket = class {
 	#emitter;
 	#socket;
-	#protocol;
 	#masked;
 	#payload;
 	#timeout;
-	#requireMask;
 	#signal;
+	#dataListener;
+	#closeListener;
+	#errorListener;
+	#abortListener;
 	#buffer = Buffer.alloc(0);
 	#readyState = 0;
-	#code = void 0;
-	#reason = void 0;
+	#code;
+	#reason;
 	#fragments = [];
-	#messageOpcode = void 0;
+	#messageOpcode;
 	#fragmentBytes = 0;
-	#closeTimer = void 0;
+	#closeTimer;
 	#destroyed = false;
 	#detached = false;
-	#onData = (chunk) => {
-		if (this.#readyState === 3) return;
-		const bytes = this.#bytes(chunk);
-		if (bytes === void 0) return;
-		this.#ingest(bytes);
-	};
-	#onClose = () => {
-		this.#finish();
-	};
-	#onError = (error) => {
-		this.#emitter.emit("error", error);
-	};
-	#onDetachedError = () => void 0;
-	#onAbort = () => {
-		this.destroy();
-	};
 	constructor(options) {
+		const payload = options.payload ?? 104857600;
+		if (!Number.isSafeInteger(payload) || payload < 0) throw new RangeError("payload must be a non-negative safe integer");
+		const timeout = options.timeout ?? 3e4;
+		if (!Number.isSafeInteger(timeout) || timeout < 0) throw new RangeError("timeout must be a non-negative safe integer");
+		if (options.key !== void 0 && !isWebSocketKey(options.key)) throw new RangeError("key must be the canonical base64 encoding of 16 bytes");
+		if (options.protocol !== void 0 && !isWebSocketProtocol(options.protocol)) throw new RangeError("protocol must be a valid WebSocket subprotocol token");
+		if (options.protocol !== void 0 && options.key === void 0) throw new RangeError("protocol requires a server key");
 		this.#emitter = new _orkestrel_emitter.Emitter({
-			on: options.on,
-			error: options.error
+			...options.on === void 0 ? {} : { on: options.on },
+			...options.error === void 0 ? {} : { error: options.error }
 		});
 		this.#socket = options.socket;
-		this.#protocol = options.protocol;
 		this.#masked = options.key === void 0;
-		this.#payload = options.payload ?? 104857600;
-		this.#timeout = options.timeout ?? 3e4;
-		this.#requireMask = !this.#masked;
+		this.#payload = payload;
+		this.#timeout = timeout;
 		this.#signal = options.signal;
+		this.#dataListener = this.#handleData.bind(this);
+		this.#closeListener = this.#finish.bind(this);
+		this.#errorListener = this.#handleError.bind(this);
+		this.#abortListener = this.destroy.bind(this);
 		if (options.key !== void 0) {
-			const protocol = this.#protocol === void 0 ? "" : `Sec-WebSocket-Protocol: ${this.#protocol}\r\n`;
-			this.#socket.write(`HTTP/1.1 101 Switching Protocols\r
-Upgrade: websocket\r
-Connection: Upgrade\r
-Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "\r\n");
+			const headers = [
+				"HTTP/1.1 101 Switching Protocols",
+				"Upgrade: websocket",
+				"Connection: Upgrade",
+				`Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}`
+			];
+			if (options.protocol !== void 0) headers.push(`Sec-WebSocket-Protocol: ${options.protocol}`);
+			this.#socket.write(`${headers.join("\r\n")}\r\n\r\n`);
 		}
 		this.#readyState = 1;
-		this.#socket.on("data", this.#onData);
-		this.#socket.on("close", this.#onClose);
-		this.#socket.on("error", this.#onError);
+		this.#socket.on("data", this.#dataListener);
+		this.#socket.on("close", this.#closeListener);
+		this.#socket.on("error", this.#errorListener);
 		this.#emitter.emit("open");
 		const head = options.head;
 		if (head !== void 0 && head.length > 0) this.#ingest(head);
 		if (this.#readyState !== 3) if (this.#signal?.aborted === true) this.destroy();
-		else this.#signal?.addEventListener("abort", this.#onAbort, { once: true });
+		else this.#signal?.addEventListener("abort", this.#abortListener, { once: true });
 	}
 	get emitter() {
 		return this.#emitter;
@@ -355,7 +432,7 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 	close(code, reason) {
 		if (this.#readyState === 2 || this.#readyState === 3) return;
 		if (code !== void 0 && !isCloseCode(code)) throw new RangeError("invalid close code");
-		if (reason !== void 0 && Buffer.byteLength(reason, "utf-8") > 123) throw new RangeError("close reason exceeds 123 bytes");
+		if (reason !== void 0 && Buffer.byteLength(reason, "utf-8") > 123) throw new RangeError(`close reason exceeds 123 bytes`);
 		this.#readyState = 2;
 		this.#code = code ?? 1e3;
 		this.#reason = reason === void 0 || reason.length === 0 ? void 0 : reason;
@@ -368,7 +445,7 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 		if (this.#destroyed) return;
 		this.#destroyed = true;
 		this.#detach();
-		this.#signal?.removeEventListener("abort", this.#onAbort);
+		this.#signal?.removeEventListener("abort", this.#abortListener);
 		clearTimeout(this.#closeTimer);
 		this.#closeTimer = void 0;
 		if (!this.#socket.destroyed) this.#socket.destroy();
@@ -377,6 +454,15 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 	}
 	#drain() {
 		for (;;) {
+			if (isWebSocketFrameCanonical(this.#buffer) === false) {
+				this.#fail(WEBSOCKET_CLOSE_PROTOCOL);
+				return;
+			}
+			const declared = measureWebSocketFrame(this.#buffer);
+			if (declared !== void 0 && declared > this.#payload) {
+				this.#fail(WEBSOCKET_CLOSE_TOOBIG);
+				return;
+			}
 			const frame = parseWebSocketFrame(this.#buffer);
 			if (frame === void 0) return;
 			this.#buffer = this.#buffer.subarray(frame.consumed);
@@ -389,7 +475,7 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 			this.#fail(WEBSOCKET_CLOSE_PROTOCOL);
 			return;
 		}
-		if (masked !== this.#requireMask) {
+		if (masked === this.#masked) {
 			this.#fail(WEBSOCKET_CLOSE_PROTOCOL);
 			return;
 		}
@@ -480,10 +566,10 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 	#detach() {
 		if (this.#detached) return;
 		this.#detached = true;
-		this.#socket.off("data", this.#onData);
-		this.#socket.off("close", this.#onClose);
-		this.#socket.off("error", this.#onError);
-		this.#socket.on("error", this.#onDetachedError);
+		this.#socket.off("data", this.#dataListener);
+		this.#socket.off("close", this.#closeListener);
+		this.#socket.off("error", this.#errorListener);
+		this.#socket.on("error", () => void 0);
 	}
 	#write(opcode, payload) {
 		if (this.#socket.destroyed) return;
@@ -512,7 +598,12 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 			this.#fail(WEBSOCKET_CLOSE_PROTOCOL);
 			return false;
 		}
-		const reason = payload.length > 2 ? parseUTF8(payload.subarray(2)) : "";
+		if (payload.length === 2) {
+			this.#code = code;
+			this.#reason = void 0;
+			return true;
+		}
+		const reason = parseUTF8(payload.subarray(2));
 		if (reason === void 0) {
 			this.#fail(WEBSOCKET_CLOSE_INVALID);
 			return false;
@@ -526,19 +617,24 @@ Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\r\n` + protocol + "
 		this.#detach();
 		clearTimeout(this.#closeTimer);
 		this.#closeTimer = void 0;
-		this.#signal?.removeEventListener("abort", this.#onAbort);
+		this.#signal?.removeEventListener("abort", this.#abortListener);
 		this.#readyState = 3;
 		this.#emitter.emit("close", this.#code, this.#reason);
 	}
 	#ingest(bytes) {
 		this.#buffer = Buffer.concat([this.#buffer, bytes]);
-		const declared = measureWebSocketFrame(this.#buffer);
-		if (declared !== void 0 && declared > this.#payload) {
-			this.#fail(WEBSOCKET_CLOSE_TOOBIG);
-			return;
-		}
 		this.#drain();
 	}
+	#handleData(chunk) {
+		if (this.#readyState === 3) return;
+		const bytes = this.#bytes(chunk);
+		if (bytes === void 0) return;
+		this.#ingest(bytes);
+	}
+	#handleError(error) {
+		this.#emitter.emit("error", error);
+		this.destroy();
+	}
 	#bytes(chunk) {
 		if (Buffer.isBuffer(chunk)) return chunk;
 		if (typeof chunk === "string") return Buffer.from(chunk, "utf-8");
@@ -585,6 +681,7 @@ exports.NodeWebSocket = NodeWebSocket;
 exports.WEBSOCKET_CLOSE_INVALID = WEBSOCKET_CLOSE_INVALID;
 exports.WEBSOCKET_CLOSE_NORMAL = WEBSOCKET_CLOSE_NORMAL;
 exports.WEBSOCKET_CLOSE_PROTOCOL = WEBSOCKET_CLOSE_PROTOCOL;
+exports.WEBSOCKET_CLOSE_REASON_MAXLEN = WEBSOCKET_CLOSE_REASON_MAXLEN;
 exports.WEBSOCKET_CLOSE_TIMEOUT_MS = WEBSOCKET_CLOSE_TIMEOUT_MS;
 exports.WEBSOCKET_CLOSE_TOOBIG = WEBSOCKET_CLOSE_TOOBIG;
 exports.WEBSOCKET_CLOSE_UNSUPPORTED = WEBSOCKET_CLOSE_UNSUPPORTED;
@@ -594,6 +691,7 @@ exports.WEBSOCKET_GUID = WEBSOCKET_GUID;
 exports.WEBSOCKET_MAX_PAYLOAD = WEBSOCKET_MAX_PAYLOAD;
 exports.WEBSOCKET_OPCODE_BINARY = WEBSOCKET_OPCODE_BINARY;
 exports.WEBSOCKET_OPCODE_CLOSE = WEBSOCKET_OPCODE_CLOSE;
+exports.WEBSOCKET_OPCODE_CONTINUATION = WEBSOCKET_OPCODE_CONTINUATION;
 exports.WEBSOCKET_OPCODE_PING = WEBSOCKET_OPCODE_PING;
 exports.WEBSOCKET_OPCODE_PONG = WEBSOCKET_OPCODE_PONG;
 exports.WEBSOCKET_OPCODE_TEXT = WEBSOCKET_OPCODE_TEXT;
@@ -606,6 +704,9 @@ exports.computeWebSocketAccept = computeWebSocketAccept;
 exports.createNodeWebSocket = createNodeWebSocket;
 exports.encodeWebSocketFrame = encodeWebSocketFrame;
 exports.isCloseCode = isCloseCode;
+exports.isWebSocketFrameCanonical = isWebSocketFrameCanonical;
+exports.isWebSocketKey = isWebSocketKey;
+exports.isWebSocketProtocol = isWebSocketProtocol;
 exports.measureWebSocketFrame = measureWebSocketFrame;
 exports.parseUTF8 = parseUTF8;
 exports.parseWebSocketFrame = parseWebSocketFrame;

package/dist/src/server/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["#emitter","#socket","#protocol","#masked","#payload","#timeout","#requireMask","#signal","#onData","#readyState","#bytes","#ingest","#onClose","#finish","#onError","#onDetachedError","#onAbort","#write","#code","#reason","#encodeClose","#closeTimer","#destroyed","#detach","#buffer","#dispatch","#fail","#close","#messageOpcode","#fragments","#fragmentBytes","#decodeClose","#detached","#drain"],"sources":["../../../src/server/constants.ts","../../../src/server/helpers.ts","../../../src/server/NodeWebSocket.ts","../../../src/server/factories.ts"],"sourcesContent":["import type { WebSocketReadyState } from './types.js'\n\n// The WebSocket wrapper's wire constants (AGENTS §5 constants file) — the RFC 6455\n// magic values the codec and the handshake are built on: the accept GUID, the\n// supported protocol version, the frame opcodes, the four ready states, and the\n// normal-closure status code. Every member is exported; the codec helpers and the\n// `NodeWebSocket` wrapper read them by name rather than re-spelling the bit values.\n\n/**\n * The RFC 6455 GUID concatenated to a client's `Sec-WebSocket-Key` before the SHA-1\n * hash that yields the `Sec-WebSocket-Accept` response value.\n *\n * @remarks\n * A fixed, spec-mandated constant (RFC 6455 §4.2.2) — read only by\n * {@link computeWebSocketAccept}.\n */\nexport const WEBSOCKET_GUID = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11'\n\n/** The WebSocket protocol version this wrapper speaks (`Sec-WebSocket-Version: 13`). */\nexport const WEBSOCKET_VERSION = '13'\n\n/** Text frame opcode — a UTF-8 payload (RFC 6455 §5.6). */\nexport const WEBSOCKET_OPCODE_TEXT = 0x01\n\n/** Binary frame opcode — a raw byte payload (RFC 6455 §5.6). */\nexport const WEBSOCKET_OPCODE_BINARY = 0x02\n\n/** Close frame opcode — a control frame ending the connection (RFC 6455 §5.5.1). */\nexport const WEBSOCKET_OPCODE_CLOSE = 0x08\n\n/** Ping frame opcode — a control frame the peer must answer with a pong (RFC 6455 §5.5.2). */\nexport const WEBSOCKET_OPCODE_PING = 0x09\n\n/** Pong frame opcode — a control frame answering a ping (RFC 6455 §5.5.3). */\nexport const WEBSOCKET_OPCODE_PONG = 0x0a\n\n/** Ready state for a connecting WebSocket (before the handshake completes). */\nexport const WEBSOCKET_READY_CONNECTING: WebSocketReadyState = 0\n\n/** Ready state for an open WebSocket (the handshake completed; frames flow). */\nexport const WEBSOCKET_READY_OPEN: WebSocketReadyState = 1\n\n/** Ready state for a closing WebSocket (a close frame was sent or received). */\nexport const WEBSOCKET_READY_CLOSING: WebSocketReadyState = 2\n\n/** Ready state for a closed WebSocket (the socket ended). */\nexport const WEBSOCKET_READY_CLOSED: WebSocketReadyState = 3\n\n/** Normal-closure status code (RFC 6455 §7.4.1) — the default `close` code. */\nexport const WEBSOCKET_CLOSE_NORMAL = 1000\n\n/** Protocol-error status code (RFC 6455 §7.4.1) — a framing/state rule was violated. */\nexport const WEBSOCKET_CLOSE_PROTOCOL = 1002\n\n/** Unsupported-data status code (RFC 6455 §7.4.1) — the endpoint received a data type it cannot accept (e.g. binary on a text-only endpoint). */\nexport const WEBSOCKET_CLOSE_UNSUPPORTED = 1003\n\n/** Invalid-frame-payload-data status code (RFC 6455 §7.4.1) — e.g. non-UTF-8 text or an unparseable close reason. */\nexport const WEBSOCKET_CLOSE_INVALID = 1007\n\n/** Message-too-big status code (RFC 6455 §7.4.1) — a reassembled message exceeded the payload cap. */\nexport const WEBSOCKET_CLOSE_TOOBIG = 1009\n\n/** The default maximum inbound single-frame length AND reassembled-message total byte count (100 MiB — the `ws` package default). */\nexport const WEBSOCKET_MAX_PAYLOAD = 104_857_600\n\n/** The default close-handshake timeout in milliseconds — how long `close()` waits for the peer's echo before tearing the socket down. */\nexport const WEBSOCKET_CLOSE_TIMEOUT_MS = 30_000\n\n/** The post-`#fail` flush grace in milliseconds — how long a validation-breach close frame is given to flush through the socket's write buffer before the hard `destroy()` fallback fires (the normal path destroys sooner, on the `end()` flush callback). */\nexport const WEBSOCKET_FAIL_TIMEOUT_MS = 1_000\n\n/** The maximum control-frame payload length in bytes (RFC 6455 §5.5). */\nexport const WEBSOCKET_CONTROL_MAXLEN = 125\n","import type { WebSocketEncodeOptions, WebSocketFrame } from './types.js'\nimport { createHash, randomBytes } from 'node:crypto'\nimport { WEBSOCKET_GUID } from './constants.js'\n\n// The RFC 6455 codec — three pure, exported, exhaustively unit-tested functions that\n// are the entire bit-level surface of the WebSocket wrapper (AGENTS §5: the codec\n// branches are exported helpers, not hidden privates). `computeWebSocketAccept`\n// derives the handshake token; `parseWebSocketFrame` decodes ONE frame off a buffer,\n// returning `undefined` when the buffer holds an incomplete frame so the caller\n// accumulates across `data` chunks (the same streaming-decoder contract as the core\n// `SSEParser`); `encodeWebSocketFrame` is the inverse — it builds the wire bytes for a\n// frame. `parse` and `encode` are exact inverses, proven by the round-trip tests.\n//\n// Numeric byte reads are narrowed with `?? 0` rather than `!` (AGENTS §14): a read\n// past the buffer is impossible once the length guards pass, and `?? 0` keeps the\n// arithmetic total without an assertion.\n\n/**\n * Compute the `Sec-WebSocket-Accept` response value for an RFC 6455 upgrade.\n *\n * @remarks\n * The base64-encoded SHA-1 of the client's `Sec-WebSocket-Key` concatenated with the\n * fixed {@link WEBSOCKET_GUID} (RFC 6455 §4.2.2) — the proof the server understood the\n * handshake. Pure and deterministic.\n *\n * @param key - The client's `Sec-WebSocket-Key` header value\n * @returns The base64 accept token to send back as `Sec-WebSocket-Accept`\n */\nexport function computeWebSocketAccept(key: string): string {\n\treturn createHash('sha1')\n\t\t.update(key + WEBSOCKET_GUID)\n\t\t.digest('base64')\n}\n\n/**\n * Decode a single RFC 6455 frame from the front of a buffer.\n *\n * @remarks\n * Reads the FIN bit and opcode (byte 0), the mask bit and 7-bit payload length (byte\n * 1) — extended to a 16-bit length when the 7-bit field is `126`, or a 64-bit length\n * when it is `127` — the optional 4-byte mask key, then the payload, XOR-unmasking it\n * against the key when the mask bit is set (client→server frames MUST be masked, RFC\n * 6455 §5.3; an unmasked frame still decodes, leaving the payload as-is, so the caller\n * can enforce policy). Returns `undefined` the moment the buffer is too short for the\n * part it is up to (the length prefix, the mask, or the full payload) — the signal to\n * the caller to read more bytes and retry, exactly like {@link SSEParser} on a partial\n * line. `consumed` is the total bytes the frame occupied, so the caller slices the\n * remainder. Pure; never throws on a short buffer.\n *\n * @param buffer - The accumulation buffer to decode the next frame from\n * @returns The parsed {@link WebSocketFrame}, or `undefined` when the buffer is incomplete\n */\nexport function parseWebSocketFrame(buffer: Buffer): WebSocketFrame | undefined {\n\tif (buffer.length < 2) return undefined\n\n\tconst firstByte = buffer[0] ?? 0\n\tconst secondByte = buffer[1] ?? 0\n\n\tconst fin = (firstByte & 0x80) !== 0\n\tconst rsv = (firstByte & 0x70) >> 4\n\tconst opcode = firstByte & 0x0f\n\tconst masked = (secondByte & 0x80) !== 0\n\tlet length = secondByte & 0x7f\n\tlet offset = 2\n\n\tif (length === 126) {\n\t\tif (buffer.length < offset + 2) return undefined\n\t\tlength = buffer.readUInt16BE(offset)\n\t\toffset += 2\n\t} else if (length === 127) {\n\t\tif (buffer.length < offset + 8) return undefined\n\t\t// Split into two 32-bit reads — a payload past 2^53 is beyond any real frame,\n\t\t// and this keeps the arithmetic in safe-integer range.\n\t\tconst high = buffer.readUInt32BE(offset)\n\t\tconst low = buffer.readUInt32BE(offset + 4)\n\t\tlength = high * 0x1_0000_0000 + low\n\t\toffset += 8\n\t}\n\n\tlet mask: Buffer | undefined\n\tif (masked) {\n\t\tif (buffer.length < offset + 4) return undefined\n\t\tmask = buffer.subarray(offset, offset + 4)\n\t\toffset += 4\n\t}\n\n\tif (buffer.length < offset + length) return undefined\n\n\tconst payload = Buffer.alloc(length)\n\tbuffer.copy(payload, 0, offset, offset + length)\n\n\tif (mask !== undefined) {\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tpayload[index] = (payload[index] ?? 0) ^ (mask[index % 4] ?? 0)\n\t\t}\n\t}\n\n\treturn { fin, opcode, payload, consumed: offset + length, masked, rsv }\n}\n\n/**\n * Read the declared payload length off the front of a buffer, without buffering or\n * reading the payload itself.\n *\n * @remarks\n * Decodes only byte 1's 7-bit length field, extended by the 16-bit (`126`) or 64-bit\n * (`127`) form exactly like {@link parseWebSocketFrame} — but stops there, so a caller\n * can reject an over-cap frame the moment its length is known, before the payload\n * bytes have even arrived. Returns `undefined` until the length field itself is fully\n * buffered (mirrors the parser's incomplete-buffer contract). Pure; never throws.\n *\n * @param buffer - The accumulation buffer to read the next frame's length from\n * @returns The declared payload length, or `undefined` when the buffer is too short to know it yet\n *\n * @example\n * ```ts\n * const declared = measureWebSocketFrame(buffer)\n * if (declared !== undefined && declared > limit) fail(WEBSOCKET_CLOSE_TOOBIG)\n * ```\n */\nexport function measureWebSocketFrame(buffer: Buffer): number | undefined {\n\tif (buffer.length < 2) return undefined\n\n\tconst secondByte = buffer[1] ?? 0\n\tlet length = secondByte & 0x7f\n\tconst offset = 2\n\n\tif (length === 126) {\n\t\tif (buffer.length < offset + 2) return undefined\n\t\tlength = buffer.readUInt16BE(offset)\n\t} else if (length === 127) {\n\t\tif (buffer.length < offset + 8) return undefined\n\t\tconst high = buffer.readUInt32BE(offset)\n\t\tconst low = buffer.readUInt32BE(offset + 4)\n\t\tlength = high * 0x1_0000_0000 + low\n\t}\n\n\treturn length\n}\n\n/**\n * Decode a byte sequence as strict UTF-8, or signal it is malformed.\n *\n * @remarks\n * Wraps `TextDecoder('utf-8', { fatal: true })` in a try/catch so a malformed sequence\n * returns `undefined` instead of throwing (AGENTS §14 — a guard-adjacent coercer never\n * throws on bad input). Pure.\n *\n * @param bytes - The raw bytes to decode\n * @returns The decoded string, or `undefined` when `bytes` is not valid UTF-8\n *\n * @example\n * ```ts\n * const text = parseUTF8(payload)\n * if (text === undefined) fail(WEBSOCKET_CLOSE_INVALID)\n * ```\n */\nexport function parseUTF8(bytes: Buffer): string | undefined {\n\ttry {\n\t\treturn new TextDecoder('utf-8', { fatal: true }).decode(bytes)\n\t} catch {\n\t\treturn undefined\n\t}\n}\n\n/**\n * Whether a numeric value is a valid RFC 6455 close status code to RECEIVE (§7.4.1).\n *\n * @remarks\n * True for `1000`–`1003`, `1007`–`1014`, and the application range `3000`–`4999`; false\n * for anything below `1000`, the reserved-for-local-use-only codes `1004`–`1006` and\n * `1015`, and the unassigned `1016`–`2999` range. The `1012`–`1014` extension of the\n * strict RFC 6455 receivable set is a deliberate IANA-interop choice: those three codes\n * (Service Restart, Try Again Later, Bad Gateway) are IANA-registered in the WebSocket\n * Close Code Number Registry and accepted by the `ws` ecosystem and modern conformance\n * suites, so a peer sending one is not treated as a protocol violation. Pure predicate,\n * never throws.\n *\n * @param code - The close status code to validate\n * @returns `true` when `code` is a valid RFC 6455 close code\n *\n * @example\n * ```ts\n * if (!isCloseCode(code)) fail(WEBSOCKET_CLOSE_PROTOCOL)\n * ```\n */\nexport function isCloseCode(code: number): boolean {\n\tif (code >= 1000 && code <= 1003) return true\n\tif (code >= 1007 && code <= 1014) return true\n\tif (code >= 3000 && code <= 4999) return true\n\treturn false\n}\n\n/**\n * Encode a single RFC 6455 frame to its wire bytes — the inverse of\n * {@link parseWebSocketFrame}.\n *\n * @remarks\n * Builds a final (FIN-set) frame: byte 0 is `0x80 | opcode`; the payload length uses\n * the 7-bit form below 126, the `126` + 16-bit form below 65 536, or the `127` +\n * 64-bit form beyond; when `masked` is set the mask bit is set, a 4-byte key (supplied\n * via `options.mask`, else random) is written, and the payload is XOR-masked. Server→\n * client frames are unmasked (the default); pass `masked: true` to encode a CLIENT\n * frame (e.g. to feed the parser in a test). A `string` payload is encoded as UTF-8.\n * Returns one contiguous `Buffer` (header + payload), so the wrapper writes it with a\n * single `socket.write`. Pure.\n *\n * @param opcode - The frame opcode (a `WEBSOCKET_OPCODE_*` value)\n * @param payload - The payload, a `Buffer` or a UTF-8 `string`\n * @param options - Masking control ({@link WebSocketEncodeOptions}); defaults to unmasked\n * @returns The complete frame as wire bytes\n */\nexport function encodeWebSocketFrame(\n\topcode: number,\n\tpayload: Buffer | string,\n\toptions?: WebSocketEncodeOptions,\n): Buffer {\n\tconst body = typeof payload === 'string' ? Buffer.from(payload, 'utf-8') : payload\n\tconst length = body.length\n\tconst masked = options?.masked === true\n\tconst mask = masked ? (options?.mask ?? randomBytes(4)) : undefined\n\tconst maskBit = masked ? 0x80 : 0\n\n\t// The header size: 2 base bytes + the extended-length bytes (0 / 2 / 8) + the mask\n\t// key (0 / 4). The length prefix and the mask key write into this header.\n\tconst extended = length < 126 ? 0 : length < 65_536 ? 2 : 8\n\tconst header = Buffer.alloc(2 + extended + (mask !== undefined ? 4 : 0))\n\theader[0] = 0x80 | opcode\n\n\tif (length < 126) {\n\t\theader[1] = maskBit | length\n\t} else if (length < 65_536) {\n\t\theader[1] = maskBit | 126\n\t\theader.writeUInt16BE(length, 2)\n\t} else {\n\t\theader[1] = maskBit | 127\n\t\theader.writeUInt32BE(Math.floor(length / 0x1_0000_0000), 2)\n\t\theader.writeUInt32BE(length % 0x1_0000_0000, 6)\n\t}\n\n\tif (mask === undefined) return Buffer.concat([header, body])\n\n\tmask.copy(header, header.length - 4)\n\tconst maskedBody = Buffer.alloc(length)\n\tfor (let index = 0; index < length; index += 1) {\n\t\tmaskedBody[index] = (body[index] ?? 0) ^ (mask[index % 4] ?? 0)\n\t}\n\treturn Buffer.concat([header, maskedBody])\n}\n","import type { Duplex } from 'node:stream'\nimport type {\n\tNodeWebSocketEventMap,\n\tNodeWebSocketInterface,\n\tNodeWebSocketOptions,\n\tWebSocketReadyState,\n} from './types.js'\nimport type { EmitterInterface } from '@orkestrel/emitter'\nimport { Emitter } from '@orkestrel/emitter'\nimport {\n\tcomputeWebSocketAccept,\n\tencodeWebSocketFrame,\n\tisCloseCode,\n\tmeasureWebSocketFrame,\n\tparseUTF8,\n\tparseWebSocketFrame,\n} from './helpers.js'\nimport {\n\tWEBSOCKET_CLOSE_INVALID,\n\tWEBSOCKET_CLOSE_NORMAL,\n\tWEBSOCKET_CLOSE_PROTOCOL,\n\tWEBSOCKET_CLOSE_TIMEOUT_MS,\n\tWEBSOCKET_CLOSE_TOOBIG,\n\tWEBSOCKET_CLOSE_UNSUPPORTED,\n\tWEBSOCKET_CONTROL_MAXLEN,\n\tWEBSOCKET_FAIL_TIMEOUT_MS,\n\tWEBSOCKET_MAX_PAYLOAD,\n\tWEBSOCKET_OPCODE_BINARY,\n\tWEBSOCKET_OPCODE_CLOSE,\n\tWEBSOCKET_OPCODE_PING,\n\tWEBSOCKET_OPCODE_PONG,\n\tWEBSOCKET_OPCODE_TEXT,\n\tWEBSOCKET_READY_CLOSED,\n\tWEBSOCKET_READY_CLOSING,\n\tWEBSOCKET_READY_CONNECTING,\n\tWEBSOCKET_READY_OPEN,\n} from './constants.js'\n\n/**\n * A server-native WebSocket over a raw upgraded `node:stream` Duplex — the lean\n * wrapper around the RFC 6455 wire protocol.\n *\n * @remarks\n * Created by `createNodeWebSocket`. When given a client `key` it runs in SERVER mode —\n * it writes the `101 Switching Protocols` handshake (`computeWebSocketAccept(key)`) and\n * emits `open`; given no key it runs in CLIENT mode (no handshake, frames masked). It\n * then listens on the socket's `data`, accumulating bytes in `#buffer` and decoding\n * every complete frame with {@link parseWebSocketFrame} (slicing `consumed` and\n * re-parsing the remainder): a TEXT frame — reassembling continuation fragments across\n * `fin: false` frames — decodes to UTF-8 and emits `message`; a PING is auto-answered\n * with a PONG and emits `ping`; a PONG emits `pong`; a CLOSE is echoed and ends the\n * socket, emitting `close`. `send` writes a text frame, `ping` a ping, `close` a close\n * frame; `destroy` tears down immediately. It owns a typed `#emitter` (AGENTS §13) that\n * isolates a throwing listener and routes the error to its own `error` handler (the `error`\n * option) — the socket never crashes. The untyped socket `data` is narrowed to a `Buffer`\n * with a guard, never an assertion (AGENTS §14).\n */\nexport class NodeWebSocket implements NodeWebSocketInterface {\n\treadonly #emitter: Emitter<NodeWebSocketEventMap>\n\treadonly #socket: Duplex\n\treadonly #protocol: string | undefined\n\treadonly #masked: boolean\n\treadonly #payload: number\n\treadonly #timeout: number\n\treadonly #requireMask: boolean\n\treadonly #signal: AbortSignal | undefined\n\t#buffer: Buffer = Buffer.alloc(0)\n\t#readyState: WebSocketReadyState = WEBSOCKET_READY_CONNECTING\n\t#code: number | undefined = undefined\n\t#reason: string | undefined = undefined\n\t#fragments: Buffer[] = []\n\t#messageOpcode: number | undefined = undefined\n\t#fragmentBytes = 0\n\t#closeTimer: ReturnType<typeof setTimeout> | undefined = undefined\n\t#destroyed = false\n\t#detached = false\n\n\t// The socket listeners are bound fields so `destroy` can detach exactly these.\n\treadonly #onData = (chunk: unknown): void => {\n\t\tif (this.#readyState === WEBSOCKET_READY_CLOSED) return\n\t\tconst bytes = this.#bytes(chunk)\n\t\tif (bytes === undefined) return\n\t\tthis.#ingest(bytes)\n\t}\n\n\treadonly #onClose = (): void => {\n\t\tthis.#finish()\n\t}\n\n\treadonly #onError = (error: unknown): void => {\n\t\tthis.#emitter.emit('error', error)\n\t}\n\n\t// Keep a terminal socket safe from late peer errors after the domain listener is gone.\n\treadonly #onDetachedError = (): void => undefined\n\n\t// Bound so `#finish` / `destroy` can detach exactly this listener from `#signal`.\n\treadonly #onAbort = (): void => {\n\t\tthis.destroy()\n\t}\n\n\tconstructor(options: NodeWebSocketOptions) {\n\t\tthis.#emitter = new Emitter({ on: options.on, error: options.error })\n\t\tthis.#socket = options.socket\n\t\tthis.#protocol = options.protocol\n\t\t// Server mode is identified by a client key (it writes the handshake + sends\n\t\t// unmasked frames); without one this is a client (no handshake, masked frames).\n\t\tthis.#masked = options.key === undefined\n\t\tthis.#payload = options.payload ?? WEBSOCKET_MAX_PAYLOAD\n\t\tthis.#timeout = options.timeout ?? WEBSOCKET_CLOSE_TIMEOUT_MS\n\t\t// A server (masked === false, i.e. this instance is unmasked outbound) requires\n\t\t// masked inbound frames from the client (RFC 6455 §5.1); a client instance accepts\n\t\t// unmasked frames from the server.\n\t\tthis.#requireMask = !this.#masked\n\t\tthis.#signal = options.signal\n\n\t\tif (options.key !== undefined) {\n\t\t\tconst protocol =\n\t\t\t\tthis.#protocol === undefined ? '' : `Sec-WebSocket-Protocol: ${this.#protocol}\\r\\n`\n\t\t\tthis.#socket.write(\n\t\t\t\t'HTTP/1.1 101 Switching Protocols\\r\\n' +\n\t\t\t\t\t'Upgrade: websocket\\r\\n' +\n\t\t\t\t\t'Connection: Upgrade\\r\\n' +\n\t\t\t\t\t`Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}\\r\\n` +\n\t\t\t\t\tprotocol +\n\t\t\t\t\t'\\r\\n',\n\t\t\t)\n\t\t}\n\n\t\tthis.#readyState = WEBSOCKET_READY_OPEN\n\t\tthis.#socket.on('data', this.#onData)\n\t\tthis.#socket.on('close', this.#onClose)\n\t\tthis.#socket.on('error', this.#onError)\n\t\tthis.#emitter.emit('open')\n\n\t\t// Replay any bytes buffered after the upgrade headers through the same ingest path\n\t\t// as `#onData`, so the pre-buffer cap check applies uniformly (AGENTS §5 dedup).\n\t\tconst head = options.head\n\t\tif (head !== undefined && head.length > 0) {\n\t\t\tthis.#ingest(head)\n\t\t}\n\n\t\t// The external cancellation seam (composes with `@orkestrel/abort` /\n\t\t// `@orkestrel/timeout`'s native AbortSignals) — wired last so an already-aborted\n\t\t// signal tears the socket down only after the rest of construction has run. The\n\t\t// head-replay above can itself synchronously terminate the socket (a complete\n\t\t// CLOSE frame or an RFC violation routes through `#fail`/`#close` -> `#finish`),\n\t\t// which flushes the close frame GRACEFULLY via `#socket.end()`. In that case skip\n\t\t// the seam entirely: forcing `destroy()` would discard that flushing frame (the\n\t\t// loss `#fail` is engineered to avoid), and there is no live socket to attach to.\n\t\tif (this.#readyState !== WEBSOCKET_READY_CLOSED) {\n\t\t\tif (this.#signal?.aborted === true) {\n\t\t\t\tthis.destroy()\n\t\t\t} else {\n\t\t\t\tthis.#signal?.addEventListener('abort', this.#onAbort, { once: true })\n\t\t\t}\n\t\t}\n\t}\n\n\tget emitter(): EmitterInterface<NodeWebSocketEventMap> {\n\t\treturn this.#emitter\n\t}\n\n\tget readyState(): WebSocketReadyState {\n\t\treturn this.#readyState\n\t}\n\n\tsend(data: string): void {\n\t\tif (this.#readyState !== WEBSOCKET_READY_OPEN) return\n\t\tthis.#write(WEBSOCKET_OPCODE_TEXT, Buffer.from(data, 'utf-8'))\n\t}\n\n\tping(data?: string): void {\n\t\tif (this.#readyState !== WEBSOCKET_READY_OPEN) return\n\t\tif (data !== undefined && Buffer.byteLength(data, 'utf-8') > WEBSOCKET_CONTROL_MAXLEN) {\n\t\t\tthrow new RangeError('ping payload exceeds 125 bytes')\n\t\t}\n\t\tthis.#write(\n\t\t\tWEBSOCKET_OPCODE_PING,\n\t\t\tdata === undefined ? Buffer.alloc(0) : Buffer.from(data, 'utf-8'),\n\t\t)\n\t}\n\n\tclose(code?: number, reason?: string): void {\n\t\tif (\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSING ||\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSED\n\t\t) {\n\t\t\treturn\n\t\t}\n\t\tif (code !== undefined && !isCloseCode(code)) throw new RangeError('invalid close code')\n\t\tif (reason !== undefined && Buffer.byteLength(reason, 'utf-8') > 123) {\n\t\t\tthrow new RangeError('close reason exceeds 123 bytes')\n\t\t}\n\t\tthis.#readyState = WEBSOCKET_READY_CLOSING\n\t\tthis.#code = code ?? WEBSOCKET_CLOSE_NORMAL\n\t\tthis.#reason = reason === undefined || reason.length === 0 ? undefined : reason\n\t\tthis.#write(WEBSOCKET_OPCODE_CLOSE, this.#encodeClose(this.#code, this.#reason))\n\t\t// End the writable side after the close frame; the peer's echo (or the socket\n\t\t// `close`) drives the final state transition through `#finish`.\n\t\tthis.#socket.end()\n\t\tthis.#closeTimer = setTimeout(() => this.destroy(), this.#timeout)\n\t\tthis.#closeTimer.unref()\n\t}\n\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\t// Detach before destroy so a destroy-time error reaches the terminal sink.\n\t\tthis.#detach()\n\t\tthis.#signal?.removeEventListener('abort', this.#onAbort)\n\t\t// `#finish` no-ops once already CLOSED (e.g. after `#fail` armed the hard-teardown\n\t\t// fallback), so the timer is cleared here unconditionally rather than relying on it.\n\t\tclearTimeout(this.#closeTimer)\n\t\tthis.#closeTimer = undefined\n\t\tif (!this.#socket.destroyed) this.#socket.destroy()\n\t\tthis.#finish()\n\t\tthis.#emitter.destroy()\n\t}\n\n\t// Decode every complete frame currently in the buffer, dispatching each and slicing\n\t// it off; stops when a partial frame remains (parse returns `undefined`).\n\t#drain(): void {\n\t\tfor (;;) {\n\t\t\tconst frame = parseWebSocketFrame(this.#buffer)\n\t\t\tif (frame === undefined) return\n\t\t\tthis.#buffer = this.#buffer.subarray(frame.consumed)\n\t\t\tthis.#dispatch(frame.fin, frame.opcode, frame.payload, frame.masked, frame.rsv)\n\t\t\tif (this.#readyState === WEBSOCKET_READY_CLOSED) return\n\t\t}\n\t}\n\n\t// Route one decoded frame through the RFC 6455 validation gauntlet, then the\n\t// fragmentation state machine. Any validity breach funnels through `#fail`, which\n\t// closes with the specified code and tears the socket down.\n\t#dispatch(fin: boolean, opcode: number, payload: Buffer, masked: boolean, rsv: number): void {\n\t\tif (rsv !== 0) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn\n\t\t}\n\t\tif (masked !== this.#requireMask) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn\n\t\t}\n\n\t\tif (\n\t\t\topcode === WEBSOCKET_OPCODE_CLOSE ||\n\t\t\topcode === WEBSOCKET_OPCODE_PING ||\n\t\t\topcode === WEBSOCKET_OPCODE_PONG\n\t\t) {\n\t\t\tif (!fin || payload.length > WEBSOCKET_CONTROL_MAXLEN) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (opcode === WEBSOCKET_OPCODE_PING) {\n\t\t\t\tthis.#write(WEBSOCKET_OPCODE_PONG, payload)\n\t\t\t\tthis.#emitter.emit('ping')\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (opcode === WEBSOCKET_OPCODE_PONG) {\n\t\t\t\tthis.#emitter.emit('pong')\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthis.#close(payload)\n\t\t\treturn\n\t\t}\n\n\t\tif (opcode === WEBSOCKET_OPCODE_TEXT || opcode === WEBSOCKET_OPCODE_BINARY) {\n\t\t\tif (this.#messageOpcode !== undefined) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthis.#messageOpcode = opcode\n\t\t} else if (opcode === 0x00) {\n\t\t\tif (this.#messageOpcode === undefined) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t} else {\n\t\t\t// Reserved data (0x3–0x7) or reserved control (0xB–0xF) opcodes.\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn\n\t\t}\n\n\t\tthis.#fragments.push(payload)\n\t\tthis.#fragmentBytes += payload.length\n\t\tif (this.#fragmentBytes > this.#payload) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_TOOBIG)\n\t\t\treturn\n\t\t}\n\t\tif (!fin) return\n\n\t\tif (this.#messageOpcode === WEBSOCKET_OPCODE_BINARY) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_UNSUPPORTED)\n\t\t\treturn\n\t\t}\n\t\tconst text = parseUTF8(Buffer.concat(this.#fragments))\n\t\tif (text === undefined) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_INVALID)\n\t\t\treturn\n\t\t}\n\t\tthis.#emitter.emit('message', text)\n\t\tthis.#messageOpcode = undefined\n\t\tthis.#fragments = []\n\t\tthis.#fragmentBytes = 0\n\t}\n\n\t// Handle a validated CLOSE frame: decode it (which itself may `#fail` on an invalid\n\t// code/reason), then — if still OPEN — echo the peer's payload verbatim and end.\n\t#close(payload: Buffer): void {\n\t\tconst valid = this.#decodeClose(payload)\n\t\tif (!valid) return\n\t\tif (this.#readyState === WEBSOCKET_READY_OPEN) {\n\t\t\t// Echo the peer's close frame before ending, per RFC 6455 §5.5.1.\n\t\t\tthis.#readyState = WEBSOCKET_READY_CLOSING\n\t\t\tthis.#write(WEBSOCKET_OPCODE_CLOSE, payload)\n\t\t}\n\t\t// The echo is queued; detach before `end()` can surface a socket error.\n\t\tthis.#detach()\n\t\tthis.#socket.end()\n\t\tthis.#finish()\n\t}\n\n\t// The single funnel for every RFC 6455 validation breach: close with `code`, `#detach`\n\t// the domain listeners (the connection is protocol-dead — RFC 6455 permits discarding\n\t// further input after sending close, and this also stops a post-fail socket `error`\n\t// emitting AFTER the terminal `close` event), write the close frame, then flush + half\n\t// -close via `end()` (never a synchronous `destroy()`, which can discard the buffered\n\t// close frame and leave the peer seeing 1006 instead of the intended code) before\n\t// finishing. The hard-teardown fallback is armed AFTER `#finish` so `#finish`'s\n\t// `clearTimeout` cannot kill it; the normal path destroys the moment the write buffer\n\t// flushes (the `end()` callback), the unref'd timer is only the malicious-peer backstop.\n\t#fail(code: number, reason?: string): void {\n\t\tif (\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSING ||\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSED\n\t\t) {\n\t\t\treturn\n\t\t}\n\t\tthis.#code = code\n\t\tthis.#reason = reason\n\t\tthis.#readyState = WEBSOCKET_READY_CLOSING\n\t\tthis.#detach()\n\t\tthis.#write(WEBSOCKET_OPCODE_CLOSE, this.#encodeClose(code, reason))\n\t\tthis.#socket.end(() => {\n\t\t\tif (!this.#socket.destroyed) this.#socket.destroy()\n\t\t\t// The normal flush path destroyed the socket already — clear the unref'd\n\t\t\t// fallback timer below so it doesn't linger `WEBSOCKET_FAIL_TIMEOUT_MS` holding\n\t\t\t// its closure alive for no reason.\n\t\t\tclearTimeout(this.#closeTimer)\n\t\t\tthis.#closeTimer = undefined\n\t\t})\n\t\tthis.#messageOpcode = undefined\n\t\tthis.#fragments = []\n\t\tthis.#fragmentBytes = 0\n\t\tthis.#finish()\n\t\tthis.#closeTimer = setTimeout(() => {\n\t\t\tif (!this.#socket.destroyed) this.#socket.destroy()\n\t\t}, WEBSOCKET_FAIL_TIMEOUT_MS)\n\t\tthis.#closeTimer.unref()\n\t}\n\n\t// Drop only this wrapper's domain listeners and arm one durable terminal error sink.\n\t#detach(): void {\n\t\tif (this.#detached) return\n\t\tthis.#detached = true\n\t\tthis.#socket.off('data', this.#onData)\n\t\tthis.#socket.off('close', this.#onClose)\n\t\tthis.#socket.off('error', this.#onError)\n\t\tthis.#socket.on('error', this.#onDetachedError)\n\t}\n\n\t// Write one frame to the socket — masked in client mode, unmasked in server mode.\n\t// A destroyed socket silently drops the write (the lifecycle is already ending).\n\t#write(opcode: number, payload: Buffer): void {\n\t\tif (this.#socket.destroyed) return\n\t\tthis.#socket.write(encodeWebSocketFrame(opcode, payload, { masked: this.#masked }))\n\t}\n\n\t// Build a close-frame payload: the 2-byte big-endian code, then the optional UTF-8\n\t// reason. An undefined code yields an empty payload (a bare close).\n\t#encodeClose(code: number | undefined, reason: string | undefined): Buffer {\n\t\tif (code === undefined) return Buffer.alloc(0)\n\t\tconst text = reason === undefined ? Buffer.alloc(0) : Buffer.from(reason, 'utf-8')\n\t\tconst payload = Buffer.alloc(2 + text.length)\n\t\tpayload.writeUInt16BE(code, 0)\n\t\ttext.copy(payload, 2)\n\t\treturn payload\n\t}\n\n\t// Validate and read a peer close-frame payload into `#code` / `#reason` (RFC 6455\n\t// §7.4.1). A bare close (0 bytes) is valid with no code/reason. A single stray byte\n\t// is a protocol error. 2+ bytes carry a code (must be a receivable close code) and\n\t// an optional UTF-8 reason. Returns `false` when a breach routed through `#fail`\n\t// (the caller must not also echo).\n\t#decodeClose(payload: Buffer): boolean {\n\t\tif (payload.length === 0) {\n\t\t\tthis.#code = undefined\n\t\t\tthis.#reason = undefined\n\t\t\treturn true\n\t\t}\n\t\tif (payload.length === 1) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn false\n\t\t}\n\t\tconst code = payload.readUInt16BE(0)\n\t\tif (!isCloseCode(code)) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn false\n\t\t}\n\t\tconst reason = payload.length > 2 ? parseUTF8(payload.subarray(2)) : ''\n\t\tif (reason === undefined) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_INVALID)\n\t\t\treturn false\n\t\t}\n\t\tthis.#code = code\n\t\tthis.#reason = reason.length === 0 ? undefined : reason\n\t\treturn true\n\t}\n\n\t// Transition to CLOSED once (idempotent), clear the close-handshake timer, and emit\n\t// the final `close` with the last known code/reason.\n\t#finish(): void {\n\t\tif (this.#readyState === WEBSOCKET_READY_CLOSED) return\n\t\tthis.#detach()\n\t\tclearTimeout(this.#closeTimer)\n\t\tthis.#closeTimer = undefined\n\t\tthis.#signal?.removeEventListener('abort', this.#onAbort)\n\t\tthis.#readyState = WEBSOCKET_READY_CLOSED\n\t\tthis.#emitter.emit('close', this.#code, this.#reason)\n\t}\n\n\t// Append `bytes` to the accumulation buffer, then reject an over-cap frame the moment\n\t// its declared length is known — before its payload is even buffered — else drain\n\t// every complete frame. Shared by `#onData` AND the constructor's head-replay so the\n\t// pre-buffer cap check applies uniformly on both ingest paths (AGENTS §5 dedup).\n\t#ingest(bytes: Buffer): void {\n\t\tthis.#buffer = Buffer.concat([this.#buffer, bytes])\n\t\tconst declared = measureWebSocketFrame(this.#buffer)\n\t\tif (declared !== undefined && declared > this.#payload) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_TOOBIG)\n\t\t\treturn\n\t\t}\n\t\tthis.#drain()\n\t}\n\n\t// Narrow an untyped socket `data` chunk to a `Buffer` (AGENTS §14) — a `node:net`\n\t// socket without an explicit encoding yields Buffers, but the listener parameter is\n\t// `unknown`, so it crosses through this guard, never an assertion. A non-Buffer\n\t// chunk (a string from a mis-encoded socket) is normalized; anything else is dropped.\n\t#bytes(chunk: unknown): Buffer | undefined {\n\t\tif (Buffer.isBuffer(chunk)) return chunk\n\t\tif (typeof chunk === 'string') return Buffer.from(chunk, 'utf-8')\n\t\treturn undefined\n\t}\n}\n","import type { NodeWebSocketInterface, NodeWebSocketOptions } from './types.js'\nimport { NodeWebSocket } from './NodeWebSocket.js'\n\n/**\n * Create a server-native WebSocket over a raw upgraded `node:stream` Duplex socket.\n *\n * @remarks\n * The construction entry point for the {@link NodeWebSocketInterface} (AGENTS §8). Pass\n * the upgraded `socket` plus the client's `Sec-WebSocket-Key` as `key` to run in SERVER\n * mode — the wrapper writes the `101 Switching Protocols` handshake and sends unmasked\n * frames; omit `key` for CLIENT mode (no handshake, masked frames). This is the\n * lean-native handle; it speaks only the WebSocket wire protocol — an MCP transport (the\n * later chunk) is built ON it. It is the WebSocket counterpart to\n * `createSQLiteDatabase` / `createIndexedDBDatabase`.\n *\n * @param options - The {@link NodeWebSocketOptions} (`socket`, optional `key` / `head` /\n *   `protocol` / `on`)\n * @returns A typed {@link NodeWebSocketInterface}\n *\n * @example\n * ```ts\n * import { createNodeWebSocket } from '@src/server'\n *\n * // In a node:http 'upgrade' handler — server mode, identified by the client key:\n * server.on('upgrade', (request, socket, head) => {\n * \tconst ws = createNodeWebSocket({\n * \t\tsocket,\n * \t\tkey: request.headers['sec-websocket-key'],\n * \t\thead,\n * \t\ton: { message: (text) => ws.send(`echo: ${text}`) },\n * \t})\n * })\n * ```\n */\nexport function createNodeWebSocket(options: NodeWebSocketOptions): NodeWebSocketInterface {\n\treturn new NodeWebSocket(options)\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,IAAa,iBAAiB;;AAG9B,IAAa,oBAAoB;;AAGjC,IAAa,wBAAwB;;AAGrC,IAAa,0BAA0B;;AAGvC,IAAa,yBAAyB;;AAGtC,IAAa,wBAAwB;;AAGrC,IAAa,wBAAwB;;AAGrC,IAAa,6BAAkD;;AAG/D,IAAa,uBAA4C;;AAGzD,IAAa,0BAA+C;;AAG5D,IAAa,yBAA8C;;AAG3D,IAAa,yBAAyB;;AAGtC,IAAa,2BAA2B;;AAGxC,IAAa,8BAA8B;;AAG3C,IAAa,0BAA0B;;AAGvC,IAAa,yBAAyB;;AAGtC,IAAa,wBAAwB;;AAGrC,IAAa,6BAA6B;;AAG1C,IAAa,4BAA4B;;AAGzC,IAAa,2BAA2B;;;;;;;;;;;;;;AC7CxC,SAAgB,uBAAuB,KAAqB;CAC3D,QAAA,GAAA,YAAA,WAAA,CAAkB,MAAM,CAAC,CACvB,OAAO,MAAM,cAAc,CAAC,CAC5B,OAAO,QAAQ;AAClB;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,oBAAoB,QAA4C;CAC/E,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAE9B,MAAM,YAAY,OAAO,MAAM;CAC/B,MAAM,aAAa,OAAO,MAAM;CAEhC,MAAM,OAAO,YAAY,SAAU;CACnC,MAAM,OAAO,YAAY,QAAS;CAClC,MAAM,SAAS,YAAY;CAC3B,MAAM,UAAU,aAAa,SAAU;CACvC,IAAI,SAAS,aAAa;CAC1B,IAAI,SAAS;CAEb,IAAI,WAAW,KAAK;EACnB,IAAI,OAAO,SAAS,SAAS,GAAG,OAAO,KAAA;EACvC,SAAS,OAAO,aAAa,MAAM;EACnC,UAAU;CACX,OAAO,IAAI,WAAW,KAAK;EAC1B,IAAI,OAAO,SAAS,SAAS,GAAG,OAAO,KAAA;EAGvC,MAAM,OAAO,OAAO,aAAa,MAAM;EACvC,MAAM,MAAM,OAAO,aAAa,SAAS,CAAC;EAC1C,SAAS,OAAO,aAAgB;EAChC,UAAU;CACX;CAEA,IAAI;CACJ,IAAI,QAAQ;EACX,IAAI,OAAO,SAAS,SAAS,GAAG,OAAO,KAAA;EACvC,OAAO,OAAO,SAAS,QAAQ,SAAS,CAAC;EACzC,UAAU;CACX;CAEA,IAAI,OAAO,SAAS,SAAS,QAAQ,OAAO,KAAA;CAE5C,MAAM,UAAU,OAAO,MAAM,MAAM;CACnC,OAAO,KAAK,SAAS,GAAG,QAAQ,SAAS,MAAM;CAE/C,IAAI,SAAS,KAAA,GACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAC5C,QAAQ,UAAU,QAAQ,UAAU,MAAM,KAAK,QAAQ,MAAM;CAI/D,OAAO;EAAE;EAAK;EAAQ;EAAS,UAAU,SAAS;EAAQ;EAAQ;CAAI;AACvE;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,sBAAsB,QAAoC;CACzE,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAG9B,IAAI,UADe,OAAO,MAAM,KACN;CAC1B,MAAM,SAAS;CAEf,IAAI,WAAW,KAAK;EACnB,IAAI,OAAO,SAAS,GAAY,OAAO,KAAA;EACvC,SAAS,OAAO,aAAa,MAAM;CACpC,OAAO,IAAI,WAAW,KAAK;EAC1B,IAAI,OAAO,SAAS,IAAY,OAAO,KAAA;EACvC,MAAM,OAAO,OAAO,aAAa,MAAM;EACvC,MAAM,MAAM,OAAO,aAAa,CAAU;EAC1C,SAAS,OAAO,aAAgB;CACjC;CAEA,OAAO;AACR;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,UAAU,OAAmC;CAC5D,IAAI;EACH,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;CAC9D,QAAQ;EACP;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,YAAY,MAAuB;CAClD,IAAI,QAAQ,OAAQ,QAAQ,MAAM,OAAO;CACzC,IAAI,QAAQ,QAAQ,QAAQ,MAAM,OAAO;CACzC,IAAI,QAAQ,OAAQ,QAAQ,MAAM,OAAO;CACzC,OAAO;AACR;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,qBACf,QACA,SACA,SACS;CACT,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO,KAAK,SAAS,OAAO,IAAI;CAC3E,MAAM,SAAS,KAAK;CACpB,MAAM,SAAS,SAAS,WAAW;CACnC,MAAM,OAAO,SAAU,SAAS,SAAA,GAAA,YAAA,YAAA,CAAoB,CAAC,IAAK,KAAA;CAC1D,MAAM,UAAU,SAAS,MAAO;CAIhC,MAAM,WAAW,SAAS,MAAM,IAAI,SAAS,QAAS,IAAI;CAC1D,MAAM,SAAS,OAAO,MAAM,IAAI,YAAY,SAAS,KAAA,IAAY,IAAI,EAAE;CACvE,OAAO,KAAK,MAAO;CAEnB,IAAI,SAAS,KACZ,OAAO,KAAK,UAAU;MAChB,IAAI,SAAS,OAAQ;EAC3B,OAAO,KAAK,UAAU;EACtB,OAAO,cAAc,QAAQ,CAAC;CAC/B,OAAO;EACN,OAAO,KAAK,UAAU;EACtB,OAAO,cAAc,KAAK,MAAM,SAAS,UAAa,GAAG,CAAC;EAC1D,OAAO,cAAc,SAAS,YAAe,CAAC;CAC/C;CAEA,IAAI,SAAS,KAAA,GAAW,OAAO,OAAO,OAAO,CAAC,QAAQ,IAAI,CAAC;CAE3D,KAAK,KAAK,QAAQ,OAAO,SAAS,CAAC;CACnC,MAAM,aAAa,OAAO,MAAM,MAAM;CACtC,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAC5C,WAAW,UAAU,KAAK,UAAU,MAAM,KAAK,QAAQ,MAAM;CAE9D,OAAO,OAAO,OAAO,CAAC,QAAQ,UAAU,CAAC;AAC1C;;;;;;;;;;;;;;;;;;;;;;AC/LA,IAAa,gBAAb,MAA6D;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,UAAkB,OAAO,MAAM,CAAC;CAChC,cAAA;CACA,QAA4B,KAAA;CAC5B,UAA8B,KAAA;CAC9B,aAAuB,CAAC;CACxB,iBAAqC,KAAA;CACrC,iBAAiB;CACjB,cAAyD,KAAA;CACzD,aAAa;CACb,YAAY;CAGZ,WAAoB,UAAyB;EAC5C,IAAI,KAAKS,gBAAAA,GAAwC;EACjD,MAAM,QAAQ,KAAKC,OAAO,KAAK;EAC/B,IAAI,UAAU,KAAA,GAAW;EACzB,KAAKC,QAAQ,KAAK;CACnB;CAEA,iBAAgC;EAC/B,KAAKE,QAAQ;CACd;CAEA,YAAqB,UAAyB;EAC7C,KAAKb,SAAS,KAAK,SAAS,KAAK;CAClC;CAGA,yBAAwC,KAAA;CAGxC,iBAAgC;EAC/B,KAAK,QAAQ;CACd;CAEA,YAAY,SAA+B;EAC1C,KAAKA,WAAW,IAAI,mBAAA,QAAQ;GAAE,IAAI,QAAQ;GAAI,OAAO,QAAQ;EAAM,CAAC;EACpE,KAAKC,UAAU,QAAQ;EACvB,KAAKC,YAAY,QAAQ;EAGzB,KAAKC,UAAU,QAAQ,QAAQ,KAAA;EAC/B,KAAKC,WAAW,QAAQ,WAAA;EACxB,KAAKC,WAAW,QAAQ,WAAA;EAIxB,KAAKC,eAAe,CAAC,KAAKH;EAC1B,KAAKI,UAAU,QAAQ;EAEvB,IAAI,QAAQ,QAAQ,KAAA,GAAW;GAC9B,MAAM,WACL,KAAKL,cAAc,KAAA,IAAY,KAAK,2BAA2B,KAAKA,UAAU;GAC/E,KAAKD,QAAQ,MACZ;;;wBAG0B,uBAAuB,QAAQ,GAAG,EAAE,QAC7D,WACA,MACF;EACD;EAEA,KAAKQ,cAAAA;EACL,KAAKR,QAAQ,GAAG,QAAQ,KAAKO,OAAO;EACpC,KAAKP,QAAQ,GAAG,SAAS,KAAKW,QAAQ;EACtC,KAAKX,QAAQ,GAAG,SAAS,KAAKa,QAAQ;EACtC,KAAKd,SAAS,KAAK,MAAM;EAIzB,MAAM,OAAO,QAAQ;EACrB,IAAI,SAAS,KAAA,KAAa,KAAK,SAAS,GACvC,KAAKW,QAAQ,IAAI;EAWlB,IAAI,KAAKF,gBAAAA,GACR,IAAI,KAAKF,SAAS,YAAY,MAC7B,KAAK,QAAQ;OAEb,KAAKA,SAAS,iBAAiB,SAAS,KAAKS,UAAU,EAAE,MAAM,KAAK,CAAC;CAGxE;CAEA,IAAI,UAAmD;EACtD,OAAO,KAAKhB;CACb;CAEA,IAAI,aAAkC;EACrC,OAAO,KAAKS;CACb;CAEA,KAAK,MAAoB;EACxB,IAAI,KAAKA,gBAAAA,GAAsC;EAC/C,KAAKQ,OAAAA,GAA8B,OAAO,KAAK,MAAM,OAAO,CAAC;CAC9D;CAEA,KAAK,MAAqB;EACzB,IAAI,KAAKR,gBAAAA,GAAsC;EAC/C,IAAI,SAAS,KAAA,KAAa,OAAO,WAAW,MAAM,OAAO,IAAA,KACxD,MAAM,IAAI,WAAW,gCAAgC;EAEtD,KAAKQ,OAAAA,GAEJ,SAAS,KAAA,IAAY,OAAO,MAAM,CAAC,IAAI,OAAO,KAAK,MAAM,OAAO,CACjE;CACD;CAEA,MAAM,MAAe,QAAuB;EAC3C,IACC,KAAKR,gBAAAA,KACL,KAAKA,gBAAAA,GAEL;EAED,IAAI,SAAS,KAAA,KAAa,CAAC,YAAY,IAAI,GAAG,MAAM,IAAI,WAAW,oBAAoB;EACvF,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,QAAQ,OAAO,IAAI,KAChE,MAAM,IAAI,WAAW,gCAAgC;EAEtD,KAAKA,cAAAA;EACL,KAAKS,QAAQ,QAAA;EACb,KAAKC,UAAU,WAAW,KAAA,KAAa,OAAO,WAAW,IAAI,KAAA,IAAY;EACzE,KAAKF,OAAAA,GAA+B,KAAKG,aAAa,KAAKF,OAAO,KAAKC,OAAO,CAAC;EAG/E,KAAKlB,QAAQ,IAAI;EACjB,KAAKoB,cAAc,iBAAiB,KAAK,QAAQ,GAAG,KAAKhB,QAAQ;EACjE,KAAKgB,YAAY,MAAM;CACxB;CAEA,UAAgB;EACf,IAAI,KAAKC,YAAY;EACrB,KAAKA,aAAa;EAElB,KAAKC,QAAQ;EACb,KAAKhB,SAAS,oBAAoB,SAAS,KAAKS,QAAQ;EAGxD,aAAa,KAAKK,WAAW;EAC7B,KAAKA,cAAc,KAAA;EACnB,IAAI,CAAC,KAAKpB,QAAQ,WAAW,KAAKA,QAAQ,QAAQ;EAClD,KAAKY,QAAQ;EACb,KAAKb,SAAS,QAAQ;CACvB;CAIA,SAAe;EACd,SAAS;GACR,MAAM,QAAQ,oBAAoB,KAAKwB,OAAO;GAC9C,IAAI,UAAU,KAAA,GAAW;GACzB,KAAKA,UAAU,KAAKA,QAAQ,SAAS,MAAM,QAAQ;GACnD,KAAKC,UAAU,MAAM,KAAK,MAAM,QAAQ,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG;GAC9E,IAAI,KAAKhB,gBAAAA,GAAwC;EAClD;CACD;CAKA,UAAU,KAAc,QAAgB,SAAiB,QAAiB,KAAmB;EAC5F,IAAI,QAAQ,GAAG;GACd,KAAKiB,MAAM,wBAAwB;GACnC;EACD;EACA,IAAI,WAAW,KAAKpB,cAAc;GACjC,KAAKoB,MAAM,wBAAwB;GACnC;EACD;EAEA,IACC,WAAA,KACA,WAAA,KACA,WAAA,IACC;GACD,IAAI,CAAC,OAAO,QAAQ,SAAA,KAAmC;IACtD,KAAKA,MAAM,wBAAwB;IACnC;GACD;GACA,IAAI,WAAA,GAAkC;IACrC,KAAKT,OAAAA,IAA8B,OAAO;IAC1C,KAAKjB,SAAS,KAAK,MAAM;IACzB;GACD;GACA,IAAI,WAAA,IAAkC;IACrC,KAAKA,SAAS,KAAK,MAAM;IACzB;GACD;GACA,KAAK2B,OAAO,OAAO;GACnB;EACD;EAEA,IAAI,WAAA,KAAoC,WAAA,GAAoC;GAC3E,IAAI,KAAKC,mBAAmB,KAAA,GAAW;IACtC,KAAKF,MAAM,wBAAwB;IACnC;GACD;GACA,KAAKE,iBAAiB;EACvB,OAAO,IAAI,WAAW;OACjB,KAAKA,mBAAmB,KAAA,GAAW;IACtC,KAAKF,MAAM,wBAAwB;IACnC;GACD;SACM;GAEN,KAAKA,MAAM,wBAAwB;GACnC;EACD;EAEA,KAAKG,WAAW,KAAK,OAAO;EAC5B,KAAKC,kBAAkB,QAAQ;EAC/B,IAAI,KAAKA,iBAAiB,KAAK1B,UAAU;GACxC,KAAKsB,MAAM,sBAAsB;GACjC;EACD;EACA,IAAI,CAAC,KAAK;EAEV,IAAI,KAAKE,mBAAAA,GAA4C;GACpD,KAAKF,MAAM,2BAA2B;GACtC;EACD;EACA,MAAM,OAAO,UAAU,OAAO,OAAO,KAAKG,UAAU,CAAC;EACrD,IAAI,SAAS,KAAA,GAAW;GACvB,KAAKH,MAAM,uBAAuB;GAClC;EACD;EACA,KAAK1B,SAAS,KAAK,WAAW,IAAI;EAClC,KAAK4B,iBAAiB,KAAA;EACtB,KAAKC,aAAa,CAAC;EACnB,KAAKC,iBAAiB;CACvB;CAIA,OAAO,SAAuB;EAE7B,IAAI,CADU,KAAKC,aAAa,OAC3B,GAAO;EACZ,IAAI,KAAKtB,gBAAAA,GAAsC;GAE9C,KAAKA,cAAAA;GACL,KAAKQ,OAAAA,GAA+B,OAAO;EAC5C;EAEA,KAAKM,QAAQ;EACb,KAAKtB,QAAQ,IAAI;EACjB,KAAKY,QAAQ;CACd;CAWA,MAAM,MAAc,QAAuB;EAC1C,IACC,KAAKJ,gBAAAA,KACL,KAAKA,gBAAAA,GAEL;EAED,KAAKS,QAAQ;EACb,KAAKC,UAAU;EACf,KAAKV,cAAAA;EACL,KAAKc,QAAQ;EACb,KAAKN,OAAAA,GAA+B,KAAKG,aAAa,MAAM,MAAM,CAAC;EACnE,KAAKnB,QAAQ,UAAU;GACtB,IAAI,CAAC,KAAKA,QAAQ,WAAW,KAAKA,QAAQ,QAAQ;GAIlD,aAAa,KAAKoB,WAAW;GAC7B,KAAKA,cAAc,KAAA;EACpB,CAAC;EACD,KAAKO,iBAAiB,KAAA;EACtB,KAAKC,aAAa,CAAC;EACnB,KAAKC,iBAAiB;EACtB,KAAKjB,QAAQ;EACb,KAAKQ,cAAc,iBAAiB;GACnC,IAAI,CAAC,KAAKpB,QAAQ,WAAW,KAAKA,QAAQ,QAAQ;EACnD,GAAG,yBAAyB;EAC5B,KAAKoB,YAAY,MAAM;CACxB;CAGA,UAAgB;EACf,IAAI,KAAKW,WAAW;EACpB,KAAKA,YAAY;EACjB,KAAK/B,QAAQ,IAAI,QAAQ,KAAKO,OAAO;EACrC,KAAKP,QAAQ,IAAI,SAAS,KAAKW,QAAQ;EACvC,KAAKX,QAAQ,IAAI,SAAS,KAAKa,QAAQ;EACvC,KAAKb,QAAQ,GAAG,SAAS,KAAKc,gBAAgB;CAC/C;CAIA,OAAO,QAAgB,SAAuB;EAC7C,IAAI,KAAKd,QAAQ,WAAW;EAC5B,KAAKA,QAAQ,MAAM,qBAAqB,QAAQ,SAAS,EAAE,QAAQ,KAAKE,QAAQ,CAAC,CAAC;CACnF;CAIA,aAAa,MAA0B,QAAoC;EAC1E,IAAI,SAAS,KAAA,GAAW,OAAO,OAAO,MAAM,CAAC;EAC7C,MAAM,OAAO,WAAW,KAAA,IAAY,OAAO,MAAM,CAAC,IAAI,OAAO,KAAK,QAAQ,OAAO;EACjF,MAAM,UAAU,OAAO,MAAM,IAAI,KAAK,MAAM;EAC5C,QAAQ,cAAc,MAAM,CAAC;EAC7B,KAAK,KAAK,SAAS,CAAC;EACpB,OAAO;CACR;CAOA,aAAa,SAA0B;EACtC,IAAI,QAAQ,WAAW,GAAG;GACzB,KAAKe,QAAQ,KAAA;GACb,KAAKC,UAAU,KAAA;GACf,OAAO;EACR;EACA,IAAI,QAAQ,WAAW,GAAG;GACzB,KAAKO,MAAM,wBAAwB;GACnC,OAAO;EACR;EACA,MAAM,OAAO,QAAQ,aAAa,CAAC;EACnC,IAAI,CAAC,YAAY,IAAI,GAAG;GACvB,KAAKA,MAAM,wBAAwB;GACnC,OAAO;EACR;EACA,MAAM,SAAS,QAAQ,SAAS,IAAI,UAAU,QAAQ,SAAS,CAAC,CAAC,IAAI;EACrE,IAAI,WAAW,KAAA,GAAW;GACzB,KAAKA,MAAM,uBAAuB;GAClC,OAAO;EACR;EACA,KAAKR,QAAQ;EACb,KAAKC,UAAU,OAAO,WAAW,IAAI,KAAA,IAAY;EACjD,OAAO;CACR;CAIA,UAAgB;EACf,IAAI,KAAKV,gBAAAA,GAAwC;EACjD,KAAKc,QAAQ;EACb,aAAa,KAAKF,WAAW;EAC7B,KAAKA,cAAc,KAAA;EACnB,KAAKd,SAAS,oBAAoB,SAAS,KAAKS,QAAQ;EACxD,KAAKP,cAAAA;EACL,KAAKT,SAAS,KAAK,SAAS,KAAKkB,OAAO,KAAKC,OAAO;CACrD;CAMA,QAAQ,OAAqB;EAC5B,KAAKK,UAAU,OAAO,OAAO,CAAC,KAAKA,SAAS,KAAK,CAAC;EAClD,MAAM,WAAW,sBAAsB,KAAKA,OAAO;EACnD,IAAI,aAAa,KAAA,KAAa,WAAW,KAAKpB,UAAU;GACvD,KAAKsB,MAAM,sBAAsB;GACjC;EACD;EACA,KAAKO,OAAO;CACb;CAMA,OAAO,OAAoC;EAC1C,IAAI,OAAO,SAAS,KAAK,GAAG,OAAO;EACnC,IAAI,OAAO,UAAU,UAAU,OAAO,OAAO,KAAK,OAAO,OAAO;CAEjE;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACraA,SAAgB,oBAAoB,SAAuD;CAC1F,OAAO,IAAI,cAAc,OAAO;AACjC"}
+{"version":3,"file":"index.cjs","names":["#emitter","#socket","#masked","#payload","#timeout","#signal","#dataListener","#closeListener","#errorListener","#abortListener","#handleData","#finish","#handleError","#readyState","#ingest","#write","#code","#reason","#encodeClose","#closeTimer","#destroyed","#detach","#buffer","#fail","#dispatch","#close","#messageOpcode","#fragments","#fragmentBytes","#decodeClose","#detached","#drain","#bytes"],"sources":["../../../src/server/constants.ts","../../../src/server/helpers.ts","../../../src/server/NodeWebSocket.ts","../../../src/server/factories.ts"],"sourcesContent":["import type { WebSocketReadyState } from './types.js'\n\n// The WebSocket wrapper's wire constants (AGENTS §5 constants file) — the RFC 6455\n// magic values the codec and the handshake are built on: the accept GUID, the\n// supported protocol version, the frame opcodes, the four ready states, and the\n// normal-closure status code. Every member is exported; the codec helpers and the\n// `NodeWebSocket` wrapper read them by name rather than re-spelling the bit values.\n\n/**\n * The RFC 6455 GUID concatenated to a client's `Sec-WebSocket-Key` before the SHA-1\n * hash that yields the `Sec-WebSocket-Accept` response value.\n *\n * @remarks\n * A fixed, spec-mandated constant (RFC 6455 §4.2.2) — read only by\n * {@link computeWebSocketAccept}.\n */\nexport const WEBSOCKET_GUID = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11'\n\n/** The WebSocket protocol version this wrapper speaks (`Sec-WebSocket-Version: 13`). */\nexport const WEBSOCKET_VERSION = '13'\n\n/** Text frame opcode — a UTF-8 payload (RFC 6455 §5.6). */\nexport const WEBSOCKET_OPCODE_TEXT = 0x01\n\n/** Binary frame opcode — a raw byte payload (RFC 6455 §5.6). */\nexport const WEBSOCKET_OPCODE_BINARY = 0x02\n\n/** Continuation frame opcode — the next fragment of an open data message (RFC 6455 §5.4). */\nexport const WEBSOCKET_OPCODE_CONTINUATION = 0x00\n\n/** Close frame opcode — a control frame ending the connection (RFC 6455 §5.5.1). */\nexport const WEBSOCKET_OPCODE_CLOSE = 0x08\n\n/** Ping frame opcode — a control frame the peer must answer with a pong (RFC 6455 §5.5.2). */\nexport const WEBSOCKET_OPCODE_PING = 0x09\n\n/** Pong frame opcode — a control frame answering a ping (RFC 6455 §5.5.3). */\nexport const WEBSOCKET_OPCODE_PONG = 0x0a\n\n/** Ready state for a connecting WebSocket (before the handshake completes). */\nexport const WEBSOCKET_READY_CONNECTING: WebSocketReadyState = 0\n\n/** Ready state for an open WebSocket (the handshake completed; frames flow). */\nexport const WEBSOCKET_READY_OPEN: WebSocketReadyState = 1\n\n/** Ready state for a closing WebSocket (a close frame was sent or received). */\nexport const WEBSOCKET_READY_CLOSING: WebSocketReadyState = 2\n\n/** Ready state for a closed WebSocket (the socket ended). */\nexport const WEBSOCKET_READY_CLOSED: WebSocketReadyState = 3\n\n/** Normal-closure status code (RFC 6455 §7.4.1) — the default `close` code. */\nexport const WEBSOCKET_CLOSE_NORMAL = 1000\n\n/** Protocol-error status code (RFC 6455 §7.4.1) — a framing/state rule was violated. */\nexport const WEBSOCKET_CLOSE_PROTOCOL = 1002\n\n/** Unsupported-data status code (RFC 6455 §7.4.1) — the endpoint received a data type it cannot accept (e.g. binary on a text-only endpoint). */\nexport const WEBSOCKET_CLOSE_UNSUPPORTED = 1003\n\n/** Invalid-frame-payload-data status code (RFC 6455 §7.4.1) — e.g. non-UTF-8 text or an unparseable close reason. */\nexport const WEBSOCKET_CLOSE_INVALID = 1007\n\n/** Message-too-big status code (RFC 6455 §7.4.1) — a reassembled message exceeded the payload cap. */\nexport const WEBSOCKET_CLOSE_TOOBIG = 1009\n\n/** The default maximum inbound single-frame length AND reassembled-message total byte count (100 MiB — the `ws` package default). */\nexport const WEBSOCKET_MAX_PAYLOAD = 104_857_600\n\n/** The default close-handshake timeout in milliseconds — how long `close()` waits for the peer's echo before tearing the socket down. */\nexport const WEBSOCKET_CLOSE_TIMEOUT_MS = 30_000\n\n/** The post-`#fail` flush grace in milliseconds — how long a validation-breach close frame is given to flush through the socket's write buffer before the hard `destroy()` fallback fires (the normal path destroys sooner, on the `end()` flush callback). */\nexport const WEBSOCKET_FAIL_TIMEOUT_MS = 1_000\n\n/** The maximum control-frame payload length in bytes (RFC 6455 §5.5). */\nexport const WEBSOCKET_CONTROL_MAXLEN = 125\n\n/** The maximum UTF-8 close-reason length after the two-byte status code. */\nexport const WEBSOCKET_CLOSE_REASON_MAXLEN = WEBSOCKET_CONTROL_MAXLEN - 2\n","import type { WebSocketEncodeOptions, WebSocketFrame } from './types.js'\nimport { createHash, randomBytes } from 'node:crypto'\nimport { WEBSOCKET_GUID } from './constants.js'\n\n// The RFC 6455 codec and boundary guards — pure, exported, and exhaustively tested.\n// `computeWebSocketAccept` derives the handshake token; the `isWebSocket*` guards\n// validate upgrade/header invariants; `measureWebSocketFrame` and\n// `parseWebSocketFrame` decode the next frame incrementally; `encodeWebSocketFrame`\n// builds the inverse wire representation.\n//\n/**\n * Compute the `Sec-WebSocket-Accept` response value for an RFC 6455 upgrade.\n *\n * @remarks\n * The base64-encoded SHA-1 of the client's `Sec-WebSocket-Key` concatenated with the\n * fixed {@link WEBSOCKET_GUID} (RFC 6455 §4.2.2) — the proof the server understood the\n * handshake. Pure and deterministic.\n *\n * @param key - The client's `Sec-WebSocket-Key` header value\n * @returns The base64 accept token to send back as `Sec-WebSocket-Accept`\n */\nexport function computeWebSocketAccept(key: string): string {\n\treturn createHash('sha1')\n\t\t.update(key + WEBSOCKET_GUID)\n\t\t.digest('base64')\n}\n\n/**\n * Whether a value is a canonical RFC 6455 `Sec-WebSocket-Key`.\n *\n * @remarks\n * A valid key is exactly 16 random bytes encoded as 24 characters of base64, ending\n * in `==` (RFC 6455 §4.1). This predicate is suitable at an HTTP upgrade boundary:\n * malformed or non-canonical encodings return `false`; nothing is thrown.\n *\n * @param key - The proposed `Sec-WebSocket-Key` header value\n * @returns `true` when `key` is the canonical base64 encoding of 16 bytes\n *\n * @example\n * ```ts\n * const key = request.headers['sec-websocket-key']\n * if (typeof key !== 'string' || !isWebSocketKey(key)) socket.destroy()\n * ```\n */\nexport function isWebSocketKey(key: string): boolean {\n\tif (!/^[A-Za-z0-9+/]{22}==$/.test(key)) return false\n\treturn Buffer.from(key, 'base64').length === 16\n}\n\n/**\n * Whether a value is one valid WebSocket subprotocol token.\n *\n * @remarks\n * Subprotocols use the HTTP `token` grammar. Whitespace, separators, commas, and\n * control characters are rejected, preventing an untrusted value from injecting a\n * second handshake header.\n *\n * @param protocol - The negotiated subprotocol to validate\n * @returns `true` when `protocol` is one non-empty HTTP token\n *\n * @example\n * ```ts\n * if (!isWebSocketProtocol(protocol)) throw new RangeError('invalid protocol')\n * ```\n */\nexport function isWebSocketProtocol(protocol: string): boolean {\n\treturn /^[!#$%&'*+\\-.^_`|~0-9A-Za-z]+$/.test(protocol)\n}\n\n/**\n * Decode a single RFC 6455 frame from the front of a buffer.\n *\n * @remarks\n * Reads the FIN bit and opcode (byte 0), the mask bit and 7-bit payload length (byte\n * 1) — extended to a 16-bit length when the 7-bit field is `126`, or a 64-bit length\n * when it is `127` — the optional 4-byte mask key, then the payload, XOR-unmasking it\n * against the key when the mask bit is set (client→server frames MUST be masked, RFC\n * 6455 §5.3; an unmasked frame still decodes, leaving the payload as-is, so the caller\n * can enforce policy). Returns `undefined` the moment the buffer is too short for the\n * part it is up to (the length prefix, the mask, or the full payload) — the signal to\n * the caller to read more bytes and retry, exactly like {@link SSEParser} on a partial\n * line. `consumed` is the total bytes the frame occupied, so the caller slices the\n * remainder. Pure; never throws on a short buffer.\n *\n * @param buffer - The accumulation buffer to decode the next frame from\n * @returns The parsed {@link WebSocketFrame}, or `undefined` when the buffer is incomplete\n */\nexport function parseWebSocketFrame(buffer: Buffer): WebSocketFrame | undefined {\n\tif (buffer.length < 2) return undefined\n\n\tconst firstByte = buffer.readUInt8(0)\n\tconst secondByte = buffer.readUInt8(1)\n\n\tconst fin = (firstByte & 0x80) !== 0\n\tconst rsv = (firstByte & 0x70) >> 4\n\tconst opcode = firstByte & 0x0f\n\tconst masked = (secondByte & 0x80) !== 0\n\tlet length = secondByte & 0x7f\n\tlet offset = 2\n\n\tif (length === 126) {\n\t\tif (buffer.length < offset + 2) return undefined\n\t\tlength = buffer.readUInt16BE(offset)\n\t\toffset += 2\n\t} else if (length === 127) {\n\t\tif (buffer.length < offset + 8) return undefined\n\t\t// Split into two 32-bit reads — a payload past 2^53 is beyond any real frame,\n\t\t// and this keeps the arithmetic in safe-integer range.\n\t\tconst high = buffer.readUInt32BE(offset)\n\t\tconst low = buffer.readUInt32BE(offset + 4)\n\t\tlength = high * 0x1_0000_0000 + low\n\t\toffset += 8\n\t}\n\n\tlet mask: Buffer | undefined\n\tif (masked) {\n\t\tif (buffer.length < offset + 4) return undefined\n\t\tmask = buffer.subarray(offset, offset + 4)\n\t\toffset += 4\n\t}\n\n\tif (buffer.length < offset + length) return undefined\n\n\tconst payload = Buffer.alloc(length)\n\tbuffer.copy(payload, 0, offset, offset + length)\n\n\tif (mask !== undefined) {\n\t\tfor (let index = 0; index < length; index += 1) {\n\t\t\tpayload[index] = payload.readUInt8(index) ^ mask.readUInt8(index % 4)\n\t\t}\n\t}\n\n\treturn { fin, opcode, payload, consumed: offset + length, masked, rsv }\n}\n\n/**\n * Read the declared payload length off the front of a buffer, without buffering or\n * reading the payload itself.\n *\n * @remarks\n * Decodes only byte 1's 7-bit length field, extended by the 16-bit (`126`) or 64-bit\n * (`127`) form exactly like {@link parseWebSocketFrame} — but stops there, so a caller\n * can reject an over-cap frame the moment its length is known, before the payload\n * bytes have even arrived. Returns `undefined` until the length field itself is fully\n * buffered (mirrors the parser's incomplete-buffer contract). Pure; never throws.\n *\n * @param buffer - The accumulation buffer to read the next frame's length from\n * @returns The declared payload length, or `undefined` when the buffer is too short to know it yet\n *\n * @example\n * ```ts\n * const declared = measureWebSocketFrame(buffer)\n * if (declared !== undefined && declared > limit) fail(WEBSOCKET_CLOSE_TOOBIG)\n * ```\n */\nexport function measureWebSocketFrame(buffer: Buffer): number | undefined {\n\tif (buffer.length < 2) return undefined\n\n\tconst secondByte = buffer.readUInt8(1)\n\tlet length = secondByte & 0x7f\n\tconst offset = 2\n\n\tif (length === 126) {\n\t\tif (buffer.length < offset + 2) return undefined\n\t\tlength = buffer.readUInt16BE(offset)\n\t} else if (length === 127) {\n\t\tif (buffer.length < offset + 8) return undefined\n\t\tconst high = buffer.readUInt32BE(offset)\n\t\tconst low = buffer.readUInt32BE(offset + 4)\n\t\tlength = high * 0x1_0000_0000 + low\n\t}\n\n\treturn length\n}\n\n/**\n * Whether the next frame uses the shortest valid RFC 6455 payload-length encoding.\n *\n * @remarks\n * Returns `undefined` until the complete length prefix is buffered. The 16-bit form\n * is canonical only for lengths at least 126; the 64-bit form only for lengths at\n * least 65,536 and with its most-significant bit clear (RFC 6455 §5.2).\n *\n * @param buffer - The accumulation buffer containing the next frame header\n * @returns Its canonicality, or `undefined` while the length prefix is incomplete\n *\n * @example\n * ```ts\n * if (isWebSocketFrameCanonical(buffer) === false) fail(WEBSOCKET_CLOSE_PROTOCOL)\n * ```\n */\nexport function isWebSocketFrameCanonical(buffer: Buffer): boolean | undefined {\n\tif (buffer.length < 2) return undefined\n\n\tconst lengthCode = buffer.readUInt8(1) & 0x7f\n\tif (lengthCode < 126) return true\n\tif (lengthCode === 126) {\n\t\tif (buffer.length < 4) return undefined\n\t\treturn buffer.readUInt16BE(2) >= 126\n\t}\n\tif (buffer.length < 10) return undefined\n\tconst high = buffer.readUInt32BE(2)\n\tconst low = buffer.readUInt32BE(6)\n\tif ((high & 0x8000_0000) !== 0) return false\n\treturn high > 0 || low >= 65_536\n}\n\n/**\n * Decode a byte sequence as strict UTF-8, or signal it is malformed.\n *\n * @remarks\n * Wraps `TextDecoder('utf-8', { fatal: true })` in a try/catch so a malformed sequence\n * returns `undefined` instead of throwing (AGENTS §14 — a guard-adjacent coercer never\n * throws on bad input). Pure.\n *\n * @param bytes - The raw bytes to decode\n * @returns The decoded string, or `undefined` when `bytes` is not valid UTF-8\n *\n * @example\n * ```ts\n * const text = parseUTF8(payload)\n * if (text === undefined) fail(WEBSOCKET_CLOSE_INVALID)\n * ```\n */\nexport function parseUTF8(bytes: Buffer): string | undefined {\n\ttry {\n\t\treturn new TextDecoder('utf-8', { fatal: true }).decode(bytes)\n\t} catch {\n\t\treturn undefined\n\t}\n}\n\n/**\n * Whether a numeric value is a valid RFC 6455 close status code to RECEIVE (§7.4.1).\n *\n * @remarks\n * True for `1000`–`1003`, `1007`–`1014`, and the application range `3000`–`4999`; false\n * for anything below `1000`, the reserved-for-local-use-only codes `1004`–`1006` and\n * `1015`, and the unassigned `1016`–`2999` range. The `1012`–`1014` extension of the\n * strict RFC 6455 receivable set is a deliberate IANA-interop choice: those three codes\n * (Service Restart, Try Again Later, Bad Gateway) are IANA-registered in the WebSocket\n * Close Code Number Registry and accepted by the `ws` ecosystem and modern conformance\n * suites, so a peer sending one is not treated as a protocol violation. Pure predicate,\n * never throws.\n *\n * @param code - The close status code to validate\n * @returns `true` when `code` is a valid RFC 6455 close code\n *\n * @example\n * ```ts\n * if (!isCloseCode(code)) fail(WEBSOCKET_CLOSE_PROTOCOL)\n * ```\n */\nexport function isCloseCode(code: number): boolean {\n\tif (!Number.isInteger(code)) return false\n\tif (code >= 1000 && code <= 1003) return true\n\tif (code >= 1007 && code <= 1014) return true\n\tif (code >= 3000 && code <= 4999) return true\n\treturn false\n}\n\n/**\n * Encode a single RFC 6455 frame to its wire bytes — the inverse of\n * {@link parseWebSocketFrame}.\n *\n * @remarks\n * Builds a final (FIN-set) frame: byte 0 is `0x80 | opcode`; the payload length uses\n * the 7-bit form below 126, the `126` + 16-bit form below 65 536, or the `127` +\n * 64-bit form beyond; when `masked` is set the mask bit is set, a 4-byte key (supplied\n * via `options.mask`, else random) is written, and the payload is XOR-masked. Server→\n * client frames are unmasked (the default); pass `masked: true` to encode a CLIENT\n * frame (e.g. to feed the parser in a test). A `string` payload is encoded as UTF-8.\n * Returns one contiguous `Buffer` (header + payload), so the wrapper writes it with a\n * single `socket.write`. Pure.\n *\n * @param opcode - The frame opcode (a `WEBSOCKET_OPCODE_*` value)\n * @param payload - The payload, a `Buffer` or a UTF-8 `string`\n * @param options - Masking control ({@link WebSocketEncodeOptions}); defaults to unmasked\n * @returns The complete frame as wire bytes\n */\nexport function encodeWebSocketFrame(\n\topcode: number,\n\tpayload: Buffer | string,\n\toptions?: WebSocketEncodeOptions,\n): Buffer {\n\tif (!Number.isInteger(opcode) || opcode < 0 || opcode > 0x0f) {\n\t\tthrow new RangeError('opcode must be an integer between 0 and 15')\n\t}\n\tif (options?.mask !== undefined && options.mask.length !== 4) {\n\t\tthrow new RangeError('mask must contain exactly 4 bytes')\n\t}\n\tif (options?.mask !== undefined && options.masked !== true) {\n\t\tthrow new RangeError('mask requires masked: true')\n\t}\n\tconst body = typeof payload === 'string' ? Buffer.from(payload, 'utf-8') : payload\n\tconst length = body.length\n\tconst masked = options?.masked === true\n\tconst mask = masked ? (options?.mask ?? randomBytes(4)) : undefined\n\tconst maskBit = masked ? 0x80 : 0\n\n\t// The header size: 2 base bytes + the extended-length bytes (0 / 2 / 8) + the mask\n\t// key (0 / 4). The length prefix and the mask key write into this header.\n\tconst extended = length < 126 ? 0 : length < 65_536 ? 2 : 8\n\tconst header = Buffer.alloc(2 + extended + (mask !== undefined ? 4 : 0))\n\theader[0] = 0x80 | opcode\n\n\tif (length < 126) {\n\t\theader[1] = maskBit | length\n\t} else if (length < 65_536) {\n\t\theader[1] = maskBit | 126\n\t\theader.writeUInt16BE(length, 2)\n\t} else {\n\t\theader[1] = maskBit | 127\n\t\theader.writeUInt32BE(Math.floor(length / 0x1_0000_0000), 2)\n\t\theader.writeUInt32BE(length % 0x1_0000_0000, 6)\n\t}\n\n\tif (mask === undefined) return Buffer.concat([header, body])\n\n\tmask.copy(header, header.length - 4)\n\tconst maskedBody = Buffer.alloc(length)\n\tfor (let index = 0; index < length; index += 1) {\n\t\tmaskedBody[index] = body.readUInt8(index) ^ mask.readUInt8(index % 4)\n\t}\n\treturn Buffer.concat([header, maskedBody])\n}\n","import type { Duplex } from 'node:stream'\nimport type {\n\tNodeWebSocketEventMap,\n\tNodeWebSocketInterface,\n\tNodeWebSocketOptions,\n\tWebSocketReadyState,\n} from './types.js'\nimport type { EmitterInterface } from '@orkestrel/emitter'\nimport { Emitter } from '@orkestrel/emitter'\nimport {\n\tcomputeWebSocketAccept,\n\tencodeWebSocketFrame,\n\tisCloseCode,\n\tisWebSocketFrameCanonical,\n\tisWebSocketKey,\n\tisWebSocketProtocol,\n\tmeasureWebSocketFrame,\n\tparseUTF8,\n\tparseWebSocketFrame,\n} from './helpers.js'\nimport {\n\tWEBSOCKET_CLOSE_INVALID,\n\tWEBSOCKET_CLOSE_NORMAL,\n\tWEBSOCKET_CLOSE_PROTOCOL,\n\tWEBSOCKET_CLOSE_REASON_MAXLEN,\n\tWEBSOCKET_CLOSE_TIMEOUT_MS,\n\tWEBSOCKET_CLOSE_TOOBIG,\n\tWEBSOCKET_CLOSE_UNSUPPORTED,\n\tWEBSOCKET_CONTROL_MAXLEN,\n\tWEBSOCKET_FAIL_TIMEOUT_MS,\n\tWEBSOCKET_MAX_PAYLOAD,\n\tWEBSOCKET_OPCODE_BINARY,\n\tWEBSOCKET_OPCODE_CLOSE,\n\tWEBSOCKET_OPCODE_CONTINUATION,\n\tWEBSOCKET_OPCODE_PING,\n\tWEBSOCKET_OPCODE_PONG,\n\tWEBSOCKET_OPCODE_TEXT,\n\tWEBSOCKET_READY_CLOSED,\n\tWEBSOCKET_READY_CLOSING,\n\tWEBSOCKET_READY_CONNECTING,\n\tWEBSOCKET_READY_OPEN,\n} from './constants.js'\n\n/**\n * A server-native WebSocket over a raw upgraded `node:stream` Duplex — the lean\n * wrapper around the RFC 6455 wire protocol.\n *\n * @remarks\n * Created by `createNodeWebSocket`. When given a client `key` it runs in SERVER mode —\n * it writes the `101 Switching Protocols` handshake (`computeWebSocketAccept(key)`) and\n * emits `open`; given no key it runs in CLIENT mode (no handshake, frames masked). It\n * then listens on the socket's `data`, accumulating bytes in `#buffer` and decoding\n * every complete frame with {@link parseWebSocketFrame} (slicing `consumed` and\n * re-parsing the remainder): a TEXT frame — reassembling continuation fragments across\n * `fin: false` frames — decodes to UTF-8 and emits `message`; a PING is auto-answered\n * with a PONG and emits `ping`; a PONG emits `pong`; a CLOSE is echoed and ends the\n * socket, emitting `close`. `send` writes a text frame, `ping` a ping, `close` a close\n * frame; `destroy` tears down immediately. It owns a typed `#emitter` (AGENTS §13) that\n * isolates a throwing listener and routes the error to its own `error` handler (the `error`\n * option) — the socket never crashes. An underlying socket error emits the domain\n * `error` event and terminates the wrapper. The untyped socket `data` is narrowed to a\n * `Buffer` with a guard, never an assertion (AGENTS §14).\n */\nexport class NodeWebSocket implements NodeWebSocketInterface {\n\treadonly #emitter: Emitter<NodeWebSocketEventMap>\n\treadonly #socket: Duplex\n\treadonly #masked: boolean\n\treadonly #payload: number\n\treadonly #timeout: number\n\treadonly #signal: AbortSignal | undefined\n\treadonly #dataListener: (chunk: unknown) => void\n\treadonly #closeListener: () => void\n\treadonly #errorListener: (error: unknown) => void\n\treadonly #abortListener: () => void\n\t#buffer: Buffer = Buffer.alloc(0)\n\t#readyState: WebSocketReadyState = WEBSOCKET_READY_CONNECTING\n\t#code: number | undefined\n\t#reason: string | undefined\n\t#fragments: Buffer[] = []\n\t#messageOpcode: number | undefined\n\t#fragmentBytes = 0\n\t#closeTimer: ReturnType<typeof setTimeout> | undefined\n\t#destroyed = false\n\t#detached = false\n\n\tconstructor(options: NodeWebSocketOptions) {\n\t\tconst payload = options.payload ?? WEBSOCKET_MAX_PAYLOAD\n\t\tif (!Number.isSafeInteger(payload) || payload < 0) {\n\t\t\tthrow new RangeError('payload must be a non-negative safe integer')\n\t\t}\n\t\tconst timeout = options.timeout ?? WEBSOCKET_CLOSE_TIMEOUT_MS\n\t\tif (!Number.isSafeInteger(timeout) || timeout < 0) {\n\t\t\tthrow new RangeError('timeout must be a non-negative safe integer')\n\t\t}\n\t\tif (options.key !== undefined && !isWebSocketKey(options.key)) {\n\t\t\tthrow new RangeError('key must be the canonical base64 encoding of 16 bytes')\n\t\t}\n\t\tif (options.protocol !== undefined && !isWebSocketProtocol(options.protocol)) {\n\t\t\tthrow new RangeError('protocol must be a valid WebSocket subprotocol token')\n\t\t}\n\t\tif (options.protocol !== undefined && options.key === undefined) {\n\t\t\tthrow new RangeError('protocol requires a server key')\n\t\t}\n\n\t\tthis.#emitter = new Emitter({\n\t\t\t...(options.on === undefined ? {} : { on: options.on }),\n\t\t\t...(options.error === undefined ? {} : { error: options.error }),\n\t\t})\n\t\tthis.#socket = options.socket\n\t\t// Server mode is identified by a client key (it writes the handshake + sends\n\t\t// unmasked frames); without one this is a client (no handshake, masked frames).\n\t\tthis.#masked = options.key === undefined\n\t\tthis.#payload = payload\n\t\tthis.#timeout = timeout\n\t\tthis.#signal = options.signal\n\t\t// Retain each bound listener so terminal paths detach only this wrapper's callbacks.\n\t\tthis.#dataListener = this.#handleData.bind(this)\n\t\tthis.#closeListener = this.#finish.bind(this)\n\t\tthis.#errorListener = this.#handleError.bind(this)\n\t\tthis.#abortListener = this.destroy.bind(this)\n\n\t\tif (options.key !== undefined) {\n\t\t\tconst headers = [\n\t\t\t\t'HTTP/1.1 101 Switching Protocols',\n\t\t\t\t'Upgrade: websocket',\n\t\t\t\t'Connection: Upgrade',\n\t\t\t\t`Sec-WebSocket-Accept: ${computeWebSocketAccept(options.key)}`,\n\t\t\t]\n\t\t\tif (options.protocol !== undefined) {\n\t\t\t\theaders.push(`Sec-WebSocket-Protocol: ${options.protocol}`)\n\t\t\t}\n\t\t\tthis.#socket.write(`${headers.join('\\r\\n')}\\r\\n\\r\\n`)\n\t\t}\n\n\t\tthis.#readyState = WEBSOCKET_READY_OPEN\n\t\tthis.#socket.on('data', this.#dataListener)\n\t\tthis.#socket.on('close', this.#closeListener)\n\t\tthis.#socket.on('error', this.#errorListener)\n\t\tthis.#emitter.emit('open')\n\n\t\t// Replay any bytes buffered after the upgrade headers through the same ingest path\n\t\t// as `#handleData`, so the pre-buffer cap check applies uniformly (AGENTS §5 dedup).\n\t\tconst head = options.head\n\t\tif (head !== undefined && head.length > 0) {\n\t\t\tthis.#ingest(head)\n\t\t}\n\n\t\t// The external cancellation seam (composes with `@orkestrel/abort` /\n\t\t// `@orkestrel/timeout`'s native AbortSignals) — wired last so an already-aborted\n\t\t// signal tears the socket down only after the rest of construction has run. The\n\t\t// head-replay above can itself synchronously terminate the socket (a complete\n\t\t// CLOSE frame or an RFC violation routes through `#fail`/`#close` -> `#finish`),\n\t\t// which flushes the close frame GRACEFULLY via `#socket.end()`. In that case skip\n\t\t// the seam entirely: forcing `destroy()` would discard that flushing frame (the\n\t\t// loss `#fail` is engineered to avoid), and there is no live socket to attach to.\n\t\tif (this.#readyState !== WEBSOCKET_READY_CLOSED) {\n\t\t\tif (this.#signal?.aborted === true) {\n\t\t\t\tthis.destroy()\n\t\t\t} else {\n\t\t\t\tthis.#signal?.addEventListener('abort', this.#abortListener, { once: true })\n\t\t\t}\n\t\t}\n\t}\n\n\tget emitter(): EmitterInterface<NodeWebSocketEventMap> {\n\t\treturn this.#emitter\n\t}\n\n\tget readyState(): WebSocketReadyState {\n\t\treturn this.#readyState\n\t}\n\n\tsend(data: string): void {\n\t\tif (this.#readyState !== WEBSOCKET_READY_OPEN) return\n\t\tthis.#write(WEBSOCKET_OPCODE_TEXT, Buffer.from(data, 'utf-8'))\n\t}\n\n\tping(data?: string): void {\n\t\tif (this.#readyState !== WEBSOCKET_READY_OPEN) return\n\t\tif (data !== undefined && Buffer.byteLength(data, 'utf-8') > WEBSOCKET_CONTROL_MAXLEN) {\n\t\t\tthrow new RangeError('ping payload exceeds 125 bytes')\n\t\t}\n\t\tthis.#write(\n\t\t\tWEBSOCKET_OPCODE_PING,\n\t\t\tdata === undefined ? Buffer.alloc(0) : Buffer.from(data, 'utf-8'),\n\t\t)\n\t}\n\n\tclose(code?: number, reason?: string): void {\n\t\tif (\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSING ||\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSED\n\t\t) {\n\t\t\treturn\n\t\t}\n\t\tif (code !== undefined && !isCloseCode(code)) throw new RangeError('invalid close code')\n\t\tif (\n\t\t\treason !== undefined &&\n\t\t\tBuffer.byteLength(reason, 'utf-8') > WEBSOCKET_CLOSE_REASON_MAXLEN\n\t\t) {\n\t\t\tthrow new RangeError(`close reason exceeds ${WEBSOCKET_CLOSE_REASON_MAXLEN} bytes`)\n\t\t}\n\t\tthis.#readyState = WEBSOCKET_READY_CLOSING\n\t\tthis.#code = code ?? WEBSOCKET_CLOSE_NORMAL\n\t\tthis.#reason = reason === undefined || reason.length === 0 ? undefined : reason\n\t\tthis.#write(WEBSOCKET_OPCODE_CLOSE, this.#encodeClose(this.#code, this.#reason))\n\t\t// End the writable side after the close frame; the peer's echo (or the socket\n\t\t// `close`) drives the final state transition through `#finish`.\n\t\tthis.#socket.end()\n\t\tthis.#closeTimer = setTimeout(() => this.destroy(), this.#timeout)\n\t\tthis.#closeTimer.unref()\n\t}\n\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\t// Detach before destroy so a destroy-time error reaches the terminal sink.\n\t\tthis.#detach()\n\t\tthis.#signal?.removeEventListener('abort', this.#abortListener)\n\t\t// `#finish` no-ops once already CLOSED (e.g. after `#fail` armed the hard-teardown\n\t\t// fallback), so the timer is cleared here unconditionally rather than relying on it.\n\t\tclearTimeout(this.#closeTimer)\n\t\tthis.#closeTimer = undefined\n\t\tif (!this.#socket.destroyed) this.#socket.destroy()\n\t\tthis.#finish()\n\t\tthis.#emitter.destroy()\n\t}\n\n\t// Decode every complete frame currently in the buffer, dispatching each and slicing\n\t// it off; stops when a partial frame remains (parse returns `undefined`).\n\t#drain(): void {\n\t\tfor (;;) {\n\t\t\tconst canonical = isWebSocketFrameCanonical(this.#buffer)\n\t\t\tif (canonical === false) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst declared = measureWebSocketFrame(this.#buffer)\n\t\t\tif (declared !== undefined && declared > this.#payload) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_TOOBIG)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst frame = parseWebSocketFrame(this.#buffer)\n\t\t\tif (frame === undefined) return\n\t\t\tthis.#buffer = this.#buffer.subarray(frame.consumed)\n\t\t\tthis.#dispatch(frame.fin, frame.opcode, frame.payload, frame.masked, frame.rsv)\n\t\t\tif (this.#readyState === WEBSOCKET_READY_CLOSED) return\n\t\t}\n\t}\n\n\t// Route one decoded frame through the RFC 6455 validation gauntlet, then the\n\t// fragmentation state machine. Any validity breach funnels through `#fail`, which\n\t// closes with the specified code and tears the socket down.\n\t#dispatch(fin: boolean, opcode: number, payload: Buffer, masked: boolean, rsv: number): void {\n\t\tif (rsv !== 0) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn\n\t\t}\n\t\t// Server mode sends unmasked and requires masked input; client mode is the inverse.\n\t\tif (masked === this.#masked) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn\n\t\t}\n\n\t\tif (\n\t\t\topcode === WEBSOCKET_OPCODE_CLOSE ||\n\t\t\topcode === WEBSOCKET_OPCODE_PING ||\n\t\t\topcode === WEBSOCKET_OPCODE_PONG\n\t\t) {\n\t\t\tif (!fin || payload.length > WEBSOCKET_CONTROL_MAXLEN) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (opcode === WEBSOCKET_OPCODE_PING) {\n\t\t\t\tthis.#write(WEBSOCKET_OPCODE_PONG, payload)\n\t\t\t\tthis.#emitter.emit('ping')\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (opcode === WEBSOCKET_OPCODE_PONG) {\n\t\t\t\tthis.#emitter.emit('pong')\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthis.#close(payload)\n\t\t\treturn\n\t\t}\n\n\t\tif (opcode === WEBSOCKET_OPCODE_TEXT || opcode === WEBSOCKET_OPCODE_BINARY) {\n\t\t\tif (this.#messageOpcode !== undefined) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t\tthis.#messageOpcode = opcode\n\t\t} else if (opcode === WEBSOCKET_OPCODE_CONTINUATION) {\n\t\t\tif (this.#messageOpcode === undefined) {\n\t\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\t\treturn\n\t\t\t}\n\t\t} else {\n\t\t\t// Reserved data (0x3–0x7) or reserved control (0xB–0xF) opcodes.\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn\n\t\t}\n\n\t\tthis.#fragments.push(payload)\n\t\tthis.#fragmentBytes += payload.length\n\t\tif (this.#fragmentBytes > this.#payload) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_TOOBIG)\n\t\t\treturn\n\t\t}\n\t\tif (!fin) return\n\n\t\tif (this.#messageOpcode === WEBSOCKET_OPCODE_BINARY) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_UNSUPPORTED)\n\t\t\treturn\n\t\t}\n\t\tconst text = parseUTF8(Buffer.concat(this.#fragments))\n\t\tif (text === undefined) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_INVALID)\n\t\t\treturn\n\t\t}\n\t\tthis.#emitter.emit('message', text)\n\t\tthis.#messageOpcode = undefined\n\t\tthis.#fragments = []\n\t\tthis.#fragmentBytes = 0\n\t}\n\n\t// Handle a validated CLOSE frame: decode it (which itself may `#fail` on an invalid\n\t// code/reason), then — if still OPEN — echo the peer's payload verbatim and end.\n\t#close(payload: Buffer): void {\n\t\tconst valid = this.#decodeClose(payload)\n\t\tif (!valid) return\n\t\tif (this.#readyState === WEBSOCKET_READY_OPEN) {\n\t\t\t// Echo the peer's close frame before ending, per RFC 6455 §5.5.1.\n\t\t\tthis.#readyState = WEBSOCKET_READY_CLOSING\n\t\t\tthis.#write(WEBSOCKET_OPCODE_CLOSE, payload)\n\t\t}\n\t\t// The echo is queued; detach before `end()` can surface a socket error.\n\t\tthis.#detach()\n\t\tthis.#socket.end()\n\t\tthis.#finish()\n\t}\n\n\t// The single funnel for every RFC 6455 validation breach: close with `code`, `#detach`\n\t// the domain listeners (the connection is protocol-dead — RFC 6455 permits discarding\n\t// further input after sending close, and this also stops a post-fail socket `error`\n\t// emitting AFTER the terminal `close` event), write the close frame, then flush + half\n\t// -close via `end()` (never a synchronous `destroy()`, which can discard the buffered\n\t// close frame and leave the peer seeing 1006 instead of the intended code) before\n\t// finishing. The hard-teardown fallback is armed AFTER `#finish` so `#finish`'s\n\t// `clearTimeout` cannot kill it; the normal path destroys the moment the write buffer\n\t// flushes (the `end()` callback), the unref'd timer is only the malicious-peer backstop.\n\t#fail(code: number, reason?: string): void {\n\t\tif (\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSING ||\n\t\t\tthis.#readyState === WEBSOCKET_READY_CLOSED\n\t\t) {\n\t\t\treturn\n\t\t}\n\t\tthis.#code = code\n\t\tthis.#reason = reason\n\t\tthis.#readyState = WEBSOCKET_READY_CLOSING\n\t\tthis.#detach()\n\t\tthis.#write(WEBSOCKET_OPCODE_CLOSE, this.#encodeClose(code, reason))\n\t\tthis.#socket.end(() => {\n\t\t\tif (!this.#socket.destroyed) this.#socket.destroy()\n\t\t\t// The normal flush path destroyed the socket already — clear the unref'd\n\t\t\t// fallback timer below so it doesn't linger `WEBSOCKET_FAIL_TIMEOUT_MS` holding\n\t\t\t// its closure alive for no reason.\n\t\t\tclearTimeout(this.#closeTimer)\n\t\t\tthis.#closeTimer = undefined\n\t\t})\n\t\tthis.#messageOpcode = undefined\n\t\tthis.#fragments = []\n\t\tthis.#fragmentBytes = 0\n\t\tthis.#finish()\n\t\tthis.#closeTimer = setTimeout(() => {\n\t\t\tif (!this.#socket.destroyed) this.#socket.destroy()\n\t\t}, WEBSOCKET_FAIL_TIMEOUT_MS)\n\t\tthis.#closeTimer.unref()\n\t}\n\n\t// Drop only this wrapper's domain listeners and arm one durable terminal error sink.\n\t#detach(): void {\n\t\tif (this.#detached) return\n\t\tthis.#detached = true\n\t\tthis.#socket.off('data', this.#dataListener)\n\t\tthis.#socket.off('close', this.#closeListener)\n\t\tthis.#socket.off('error', this.#errorListener)\n\t\t// Keep a terminal socket safe from late peer errors after the domain listener is gone.\n\t\tthis.#socket.on('error', () => undefined)\n\t}\n\n\t// Write one frame to the socket — masked in client mode, unmasked in server mode.\n\t// A destroyed socket silently drops the write (the lifecycle is already ending).\n\t#write(opcode: number, payload: Buffer): void {\n\t\tif (this.#socket.destroyed) return\n\t\tthis.#socket.write(encodeWebSocketFrame(opcode, payload, { masked: this.#masked }))\n\t}\n\n\t// Build a close-frame payload: the 2-byte big-endian code, then the optional UTF-8\n\t// reason. An undefined code yields an empty payload (a bare close).\n\t#encodeClose(code: number | undefined, reason: string | undefined): Buffer {\n\t\tif (code === undefined) return Buffer.alloc(0)\n\t\tconst text = reason === undefined ? Buffer.alloc(0) : Buffer.from(reason, 'utf-8')\n\t\tconst payload = Buffer.alloc(2 + text.length)\n\t\tpayload.writeUInt16BE(code, 0)\n\t\ttext.copy(payload, 2)\n\t\treturn payload\n\t}\n\n\t// Validate and read a peer close-frame payload into `#code` / `#reason` (RFC 6455\n\t// §7.4.1). A bare close (0 bytes) is valid with no code/reason. A single stray byte\n\t// is a protocol error. 2+ bytes carry a code (must be a receivable close code) and\n\t// an optional UTF-8 reason. Returns `false` when a breach routed through `#fail`\n\t// (the caller must not also echo).\n\t#decodeClose(payload: Buffer): boolean {\n\t\tif (payload.length === 0) {\n\t\t\tthis.#code = undefined\n\t\t\tthis.#reason = undefined\n\t\t\treturn true\n\t\t}\n\t\tif (payload.length === 1) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn false\n\t\t}\n\t\tconst code = payload.readUInt16BE(0)\n\t\tif (!isCloseCode(code)) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_PROTOCOL)\n\t\t\treturn false\n\t\t}\n\t\tif (payload.length === 2) {\n\t\t\tthis.#code = code\n\t\t\tthis.#reason = undefined\n\t\t\treturn true\n\t\t}\n\t\tconst reason = parseUTF8(payload.subarray(2))\n\t\tif (reason === undefined) {\n\t\t\tthis.#fail(WEBSOCKET_CLOSE_INVALID)\n\t\t\treturn false\n\t\t}\n\t\tthis.#code = code\n\t\tthis.#reason = reason.length === 0 ? undefined : reason\n\t\treturn true\n\t}\n\n\t// Transition to CLOSED once (idempotent), clear the close-handshake timer, and emit\n\t// the final `close` with the last known code/reason.\n\t#finish(): void {\n\t\tif (this.#readyState === WEBSOCKET_READY_CLOSED) return\n\t\tthis.#detach()\n\t\tclearTimeout(this.#closeTimer)\n\t\tthis.#closeTimer = undefined\n\t\tthis.#signal?.removeEventListener('abort', this.#abortListener)\n\t\tthis.#readyState = WEBSOCKET_READY_CLOSED\n\t\tthis.#emitter.emit('close', this.#code, this.#reason)\n\t}\n\n\t// Append `bytes` to the accumulation buffer, then drain every complete frame. `#drain`\n\t// preflights canonical encoding and the declared payload cap on EACH iteration, so\n\t// every coalesced frame receives the same validation. Shared by `#handleData` and head replay.\n\t#ingest(bytes: Buffer): void {\n\t\tthis.#buffer = Buffer.concat([this.#buffer, bytes])\n\t\tthis.#drain()\n\t}\n\n\t#handleData(chunk: unknown): void {\n\t\tif (this.#readyState === WEBSOCKET_READY_CLOSED) return\n\t\tconst bytes = this.#bytes(chunk)\n\t\tif (bytes === undefined) return\n\t\tthis.#ingest(bytes)\n\t}\n\n\t#handleError(error: unknown): void {\n\t\tthis.#emitter.emit('error', error)\n\t\tthis.destroy()\n\t}\n\n\t// Narrow an untyped socket `data` chunk to a `Buffer` (AGENTS §14) — a `node:net`\n\t// socket without an explicit encoding yields Buffers, but the listener parameter is\n\t// `unknown`, so it crosses through this guard, never an assertion. A non-Buffer\n\t// chunk (a string from a mis-encoded socket) is normalized; anything else is dropped.\n\t#bytes(chunk: unknown): Buffer | undefined {\n\t\tif (Buffer.isBuffer(chunk)) return chunk\n\t\tif (typeof chunk === 'string') return Buffer.from(chunk, 'utf-8')\n\t\treturn undefined\n\t}\n}\n","import type { NodeWebSocketInterface, NodeWebSocketOptions } from './types.js'\nimport { NodeWebSocket } from './NodeWebSocket.js'\n\n/**\n * Create a server-native WebSocket over a raw upgraded `node:stream` Duplex socket.\n *\n * @remarks\n * The construction entry point for the {@link NodeWebSocketInterface} (AGENTS §8). Pass\n * the upgraded `socket` plus the client's `Sec-WebSocket-Key` as `key` to run in SERVER\n * mode — the wrapper writes the `101 Switching Protocols` handshake and sends unmasked\n * frames; omit `key` for CLIENT mode (no handshake, masked frames). This is the\n * lean-native handle; it speaks only the WebSocket wire protocol — an MCP transport (the\n * later chunk) is built ON it. It is the WebSocket counterpart to\n * `createSQLiteDatabase` / `createIndexedDBDatabase`.\n *\n * @param options - The {@link NodeWebSocketOptions} (`socket`, optional `key` / `head` /\n *   `protocol` / `on`)\n * @returns A typed {@link NodeWebSocketInterface}\n *\n * @example\n * ```ts\n * import { createNodeWebSocket } from '@src/server'\n *\n * // In a node:http 'upgrade' handler — server mode, identified by the client key:\n * server.on('upgrade', (request, socket, head) => {\n * \tconst ws = createNodeWebSocket({\n * \t\tsocket,\n * \t\tkey: request.headers['sec-websocket-key'],\n * \t\thead,\n * \t\ton: { message: (text) => ws.send(`echo: ${text}`) },\n * \t})\n * })\n * ```\n */\nexport function createNodeWebSocket(options: NodeWebSocketOptions): NodeWebSocketInterface {\n\treturn new NodeWebSocket(options)\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,IAAa,iBAAiB;;AAG9B,IAAa,oBAAoB;;AAGjC,IAAa,wBAAwB;;AAGrC,IAAa,0BAA0B;;AAGvC,IAAa,gCAAgC;;AAG7C,IAAa,yBAAyB;;AAGtC,IAAa,wBAAwB;;AAGrC,IAAa,wBAAwB;;AAGrC,IAAa,6BAAkD;;AAG/D,IAAa,uBAA4C;;AAGzD,IAAa,0BAA+C;;AAG5D,IAAa,yBAA8C;;AAG3D,IAAa,yBAAyB;;AAGtC,IAAa,2BAA2B;;AAGxC,IAAa,8BAA8B;;AAG3C,IAAa,0BAA0B;;AAGvC,IAAa,yBAAyB;;AAGtC,IAAa,wBAAwB;;AAGrC,IAAa,6BAA6B;;AAG1C,IAAa,4BAA4B;;AAGzC,IAAa,2BAA2B;;AAGxC,IAAa,gCAAA;;;;;;;;;;;;;;AC1Db,SAAgB,uBAAuB,KAAqB;CAC3D,QAAA,GAAA,YAAA,WAAA,CAAkB,MAAM,CAAC,CACvB,OAAO,MAAM,cAAc,CAAC,CAC5B,OAAO,QAAQ;AAClB;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,eAAe,KAAsB;CACpD,IAAI,CAAC,wBAAwB,KAAK,GAAG,GAAG,OAAO;CAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,WAAW;AAC9C;;;;;;;;;;;;;;;;;AAkBA,SAAgB,oBAAoB,UAA2B;CAC9D,OAAO,iCAAiC,KAAK,QAAQ;AACtD;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,oBAAoB,QAA4C;CAC/E,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAE9B,MAAM,YAAY,OAAO,UAAU,CAAC;CACpC,MAAM,aAAa,OAAO,UAAU,CAAC;CAErC,MAAM,OAAO,YAAY,SAAU;CACnC,MAAM,OAAO,YAAY,QAAS;CAClC,MAAM,SAAS,YAAY;CAC3B,MAAM,UAAU,aAAa,SAAU;CACvC,IAAI,SAAS,aAAa;CAC1B,IAAI,SAAS;CAEb,IAAI,WAAW,KAAK;EACnB,IAAI,OAAO,SAAS,SAAS,GAAG,OAAO,KAAA;EACvC,SAAS,OAAO,aAAa,MAAM;EACnC,UAAU;CACX,OAAO,IAAI,WAAW,KAAK;EAC1B,IAAI,OAAO,SAAS,SAAS,GAAG,OAAO,KAAA;EAGvC,MAAM,OAAO,OAAO,aAAa,MAAM;EACvC,MAAM,MAAM,OAAO,aAAa,SAAS,CAAC;EAC1C,SAAS,OAAO,aAAgB;EAChC,UAAU;CACX;CAEA,IAAI;CACJ,IAAI,QAAQ;EACX,IAAI,OAAO,SAAS,SAAS,GAAG,OAAO,KAAA;EACvC,OAAO,OAAO,SAAS,QAAQ,SAAS,CAAC;EACzC,UAAU;CACX;CAEA,IAAI,OAAO,SAAS,SAAS,QAAQ,OAAO,KAAA;CAE5C,MAAM,UAAU,OAAO,MAAM,MAAM;CACnC,OAAO,KAAK,SAAS,GAAG,QAAQ,SAAS,MAAM;CAE/C,IAAI,SAAS,KAAA,GACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAC5C,QAAQ,SAAS,QAAQ,UAAU,KAAK,IAAI,KAAK,UAAU,QAAQ,CAAC;CAItE,OAAO;EAAE;EAAK;EAAQ;EAAS,UAAU,SAAS;EAAQ;EAAQ;CAAI;AACvE;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,sBAAsB,QAAoC;CACzE,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAG9B,IAAI,SADe,OAAO,UAAU,CACvB,IAAa;CAC1B,MAAM,SAAS;CAEf,IAAI,WAAW,KAAK;EACnB,IAAI,OAAO,SAAS,GAAY,OAAO,KAAA;EACvC,SAAS,OAAO,aAAa,MAAM;CACpC,OAAO,IAAI,WAAW,KAAK;EAC1B,IAAI,OAAO,SAAS,IAAY,OAAO,KAAA;EACvC,MAAM,OAAO,OAAO,aAAa,MAAM;EACvC,MAAM,MAAM,OAAO,aAAa,CAAU;EAC1C,SAAS,OAAO,aAAgB;CACjC;CAEA,OAAO;AACR;;;;;;;;;;;;;;;;;AAkBA,SAAgB,0BAA0B,QAAqC;CAC9E,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAE9B,MAAM,aAAa,OAAO,UAAU,CAAC,IAAI;CACzC,IAAI,aAAa,KAAK,OAAO;CAC7B,IAAI,eAAe,KAAK;EACvB,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;EAC9B,OAAO,OAAO,aAAa,CAAC,KAAK;CAClC;CACA,IAAI,OAAO,SAAS,IAAI,OAAO,KAAA;CAC/B,MAAM,OAAO,OAAO,aAAa,CAAC;CAClC,MAAM,MAAM,OAAO,aAAa,CAAC;CACjC,KAAK,OAAO,gBAAiB,GAAG,OAAO;CACvC,OAAO,OAAO,KAAK,OAAO;AAC3B;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,UAAU,OAAmC;CAC5D,IAAI;EACH,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;CAC9D,QAAQ;EACP;CACD;AACD;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,YAAY,MAAuB;CAClD,IAAI,CAAC,OAAO,UAAU,IAAI,GAAG,OAAO;CACpC,IAAI,QAAQ,OAAQ,QAAQ,MAAM,OAAO;CACzC,IAAI,QAAQ,QAAQ,QAAQ,MAAM,OAAO;CACzC,IAAI,QAAQ,OAAQ,QAAQ,MAAM,OAAO;CACzC,OAAO;AACR;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,qBACf,QACA,SACA,SACS;CACT,IAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,IACvD,MAAM,IAAI,WAAW,4CAA4C;CAElE,IAAI,SAAS,SAAS,KAAA,KAAa,QAAQ,KAAK,WAAW,GAC1D,MAAM,IAAI,WAAW,mCAAmC;CAEzD,IAAI,SAAS,SAAS,KAAA,KAAa,QAAQ,WAAW,MACrD,MAAM,IAAI,WAAW,4BAA4B;CAElD,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO,KAAK,SAAS,OAAO,IAAI;CAC3E,MAAM,SAAS,KAAK;CACpB,MAAM,SAAS,SAAS,WAAW;CACnC,MAAM,OAAO,SAAU,SAAS,SAAA,GAAA,YAAA,YAAA,CAAoB,CAAC,IAAK,KAAA;CAC1D,MAAM,UAAU,SAAS,MAAO;CAIhC,MAAM,WAAW,SAAS,MAAM,IAAI,SAAS,QAAS,IAAI;CAC1D,MAAM,SAAS,OAAO,MAAM,IAAI,YAAY,SAAS,KAAA,IAAY,IAAI,EAAE;CACvE,OAAO,KAAK,MAAO;CAEnB,IAAI,SAAS,KACZ,OAAO,KAAK,UAAU;MAChB,IAAI,SAAS,OAAQ;EAC3B,OAAO,KAAK,UAAU;EACtB,OAAO,cAAc,QAAQ,CAAC;CAC/B,OAAO;EACN,OAAO,KAAK,UAAU;EACtB,OAAO,cAAc,KAAK,MAAM,SAAS,UAAa,GAAG,CAAC;EAC1D,OAAO,cAAc,SAAS,YAAe,CAAC;CAC/C;CAEA,IAAI,SAAS,KAAA,GAAW,OAAO,OAAO,OAAO,CAAC,QAAQ,IAAI,CAAC;CAE3D,KAAK,KAAK,QAAQ,OAAO,SAAS,CAAC;CACnC,MAAM,aAAa,OAAO,MAAM,MAAM;CACtC,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAC5C,WAAW,SAAS,KAAK,UAAU,KAAK,IAAI,KAAK,UAAU,QAAQ,CAAC;CAErE,OAAO,OAAO,OAAO,CAAC,QAAQ,UAAU,CAAC;AAC1C;;;;;;;;;;;;;;;;;;;;;;;ACtQA,IAAa,gBAAb,MAA6D;CAC5D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,UAAkB,OAAO,MAAM,CAAC;CAChC,cAAA;CACA;CACA;CACA,aAAuB,CAAC;CACxB;CACA,iBAAiB;CACjB;CACA,aAAa;CACb,YAAY;CAEZ,YAAY,SAA+B;EAC1C,MAAM,UAAU,QAAQ,WAAA;EACxB,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAC/C,MAAM,IAAI,WAAW,6CAA6C;EAEnE,MAAM,UAAU,QAAQ,WAAA;EACxB,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAC/C,MAAM,IAAI,WAAW,6CAA6C;EAEnE,IAAI,QAAQ,QAAQ,KAAA,KAAa,CAAC,eAAe,QAAQ,GAAG,GAC3D,MAAM,IAAI,WAAW,uDAAuD;EAE7E,IAAI,QAAQ,aAAa,KAAA,KAAa,CAAC,oBAAoB,QAAQ,QAAQ,GAC1E,MAAM,IAAI,WAAW,sDAAsD;EAE5E,IAAI,QAAQ,aAAa,KAAA,KAAa,QAAQ,QAAQ,KAAA,GACrD,MAAM,IAAI,WAAW,gCAAgC;EAGtD,KAAKA,WAAW,IAAI,mBAAA,QAAQ;GAC3B,GAAI,QAAQ,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;GACrD,GAAI,QAAQ,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;EAC/D,CAAC;EACD,KAAKC,UAAU,QAAQ;EAGvB,KAAKC,UAAU,QAAQ,QAAQ,KAAA;EAC/B,KAAKC,WAAW;EAChB,KAAKC,WAAW;EAChB,KAAKC,UAAU,QAAQ;EAEvB,KAAKC,gBAAgB,KAAKI,YAAY,KAAK,IAAI;EAC/C,KAAKH,iBAAiB,KAAKI,QAAQ,KAAK,IAAI;EAC5C,KAAKH,iBAAiB,KAAKI,aAAa,KAAK,IAAI;EACjD,KAAKH,iBAAiB,KAAK,QAAQ,KAAK,IAAI;EAE5C,IAAI,QAAQ,QAAQ,KAAA,GAAW;GAC9B,MAAM,UAAU;IACf;IACA;IACA;IACA,yBAAyB,uBAAuB,QAAQ,GAAG;GAC5D;GACA,IAAI,QAAQ,aAAa,KAAA,GACxB,QAAQ,KAAK,2BAA2B,QAAQ,UAAU;GAE3D,KAAKR,QAAQ,MAAM,GAAG,QAAQ,KAAK,MAAM,EAAE,SAAS;EACrD;EAEA,KAAKY,cAAAA;EACL,KAAKZ,QAAQ,GAAG,QAAQ,KAAKK,aAAa;EAC1C,KAAKL,QAAQ,GAAG,SAAS,KAAKM,cAAc;EAC5C,KAAKN,QAAQ,GAAG,SAAS,KAAKO,cAAc;EAC5C,KAAKR,SAAS,KAAK,MAAM;EAIzB,MAAM,OAAO,QAAQ;EACrB,IAAI,SAAS,KAAA,KAAa,KAAK,SAAS,GACvC,KAAKc,QAAQ,IAAI;EAWlB,IAAI,KAAKD,gBAAAA,GACR,IAAI,KAAKR,SAAS,YAAY,MAC7B,KAAK,QAAQ;OAEb,KAAKA,SAAS,iBAAiB,SAAS,KAAKI,gBAAgB,EAAE,MAAM,KAAK,CAAC;CAG9E;CAEA,IAAI,UAAmD;EACtD,OAAO,KAAKT;CACb;CAEA,IAAI,aAAkC;EACrC,OAAO,KAAKa;CACb;CAEA,KAAK,MAAoB;EACxB,IAAI,KAAKA,gBAAAA,GAAsC;EAC/C,KAAKE,OAAAA,GAA8B,OAAO,KAAK,MAAM,OAAO,CAAC;CAC9D;CAEA,KAAK,MAAqB;EACzB,IAAI,KAAKF,gBAAAA,GAAsC;EAC/C,IAAI,SAAS,KAAA,KAAa,OAAO,WAAW,MAAM,OAAO,IAAA,KACxD,MAAM,IAAI,WAAW,gCAAgC;EAEtD,KAAKE,OAAAA,GAEJ,SAAS,KAAA,IAAY,OAAO,MAAM,CAAC,IAAI,OAAO,KAAK,MAAM,OAAO,CACjE;CACD;CAEA,MAAM,MAAe,QAAuB;EAC3C,IACC,KAAKF,gBAAAA,KACL,KAAKA,gBAAAA,GAEL;EAED,IAAI,SAAS,KAAA,KAAa,CAAC,YAAY,IAAI,GAAG,MAAM,IAAI,WAAW,oBAAoB;EACvF,IACC,WAAW,KAAA,KACX,OAAO,WAAW,QAAQ,OAAO,IAAA,KAEjC,MAAM,IAAI,WAAW,gCAA6D;EAEnF,KAAKA,cAAAA;EACL,KAAKG,QAAQ,QAAA;EACb,KAAKC,UAAU,WAAW,KAAA,KAAa,OAAO,WAAW,IAAI,KAAA,IAAY;EACzE,KAAKF,OAAAA,GAA+B,KAAKG,aAAa,KAAKF,OAAO,KAAKC,OAAO,CAAC;EAG/E,KAAKhB,QAAQ,IAAI;EACjB,KAAKkB,cAAc,iBAAiB,KAAK,QAAQ,GAAG,KAAKf,QAAQ;EACjE,KAAKe,YAAY,MAAM;CACxB;CAEA,UAAgB;EACf,IAAI,KAAKC,YAAY;EACrB,KAAKA,aAAa;EAElB,KAAKC,QAAQ;EACb,KAAKhB,SAAS,oBAAoB,SAAS,KAAKI,cAAc;EAG9D,aAAa,KAAKU,WAAW;EAC7B,KAAKA,cAAc,KAAA;EACnB,IAAI,CAAC,KAAKlB,QAAQ,WAAW,KAAKA,QAAQ,QAAQ;EAClD,KAAKU,QAAQ;EACb,KAAKX,SAAS,QAAQ;CACvB;CAIA,SAAe;EACd,SAAS;GAER,IADkB,0BAA0B,KAAKsB,OAC7C,MAAc,OAAO;IACxB,KAAKC,MAAM,wBAAwB;IACnC;GACD;GACA,MAAM,WAAW,sBAAsB,KAAKD,OAAO;GACnD,IAAI,aAAa,KAAA,KAAa,WAAW,KAAKnB,UAAU;IACvD,KAAKoB,MAAM,sBAAsB;IACjC;GACD;GACA,MAAM,QAAQ,oBAAoB,KAAKD,OAAO;GAC9C,IAAI,UAAU,KAAA,GAAW;GACzB,KAAKA,UAAU,KAAKA,QAAQ,SAAS,MAAM,QAAQ;GACnD,KAAKE,UAAU,MAAM,KAAK,MAAM,QAAQ,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG;GAC9E,IAAI,KAAKX,gBAAAA,GAAwC;EAClD;CACD;CAKA,UAAU,KAAc,QAAgB,SAAiB,QAAiB,KAAmB;EAC5F,IAAI,QAAQ,GAAG;GACd,KAAKU,MAAM,wBAAwB;GACnC;EACD;EAEA,IAAI,WAAW,KAAKrB,SAAS;GAC5B,KAAKqB,MAAM,wBAAwB;GACnC;EACD;EAEA,IACC,WAAA,KACA,WAAA,KACA,WAAA,IACC;GACD,IAAI,CAAC,OAAO,QAAQ,SAAA,KAAmC;IACtD,KAAKA,MAAM,wBAAwB;IACnC;GACD;GACA,IAAI,WAAA,GAAkC;IACrC,KAAKR,OAAAA,IAA8B,OAAO;IAC1C,KAAKf,SAAS,KAAK,MAAM;IACzB;GACD;GACA,IAAI,WAAA,IAAkC;IACrC,KAAKA,SAAS,KAAK,MAAM;IACzB;GACD;GACA,KAAKyB,OAAO,OAAO;GACnB;EACD;EAEA,IAAI,WAAA,KAAoC,WAAA,GAAoC;GAC3E,IAAI,KAAKC,mBAAmB,KAAA,GAAW;IACtC,KAAKH,MAAM,wBAAwB;IACnC;GACD;GACA,KAAKG,iBAAiB;EACvB,OAAO,IAAI,WAAA;OACN,KAAKA,mBAAmB,KAAA,GAAW;IACtC,KAAKH,MAAM,wBAAwB;IACnC;GACD;SACM;GAEN,KAAKA,MAAM,wBAAwB;GACnC;EACD;EAEA,KAAKI,WAAW,KAAK,OAAO;EAC5B,KAAKC,kBAAkB,QAAQ;EAC/B,IAAI,KAAKA,iBAAiB,KAAKzB,UAAU;GACxC,KAAKoB,MAAM,sBAAsB;GACjC;EACD;EACA,IAAI,CAAC,KAAK;EAEV,IAAI,KAAKG,mBAAAA,GAA4C;GACpD,KAAKH,MAAM,2BAA2B;GACtC;EACD;EACA,MAAM,OAAO,UAAU,OAAO,OAAO,KAAKI,UAAU,CAAC;EACrD,IAAI,SAAS,KAAA,GAAW;GACvB,KAAKJ,MAAM,uBAAuB;GAClC;EACD;EACA,KAAKvB,SAAS,KAAK,WAAW,IAAI;EAClC,KAAK0B,iBAAiB,KAAA;EACtB,KAAKC,aAAa,CAAC;EACnB,KAAKC,iBAAiB;CACvB;CAIA,OAAO,SAAuB;EAE7B,IAAI,CADU,KAAKC,aAAa,OAC3B,GAAO;EACZ,IAAI,KAAKhB,gBAAAA,GAAsC;GAE9C,KAAKA,cAAAA;GACL,KAAKE,OAAAA,GAA+B,OAAO;EAC5C;EAEA,KAAKM,QAAQ;EACb,KAAKpB,QAAQ,IAAI;EACjB,KAAKU,QAAQ;CACd;CAWA,MAAM,MAAc,QAAuB;EAC1C,IACC,KAAKE,gBAAAA,KACL,KAAKA,gBAAAA,GAEL;EAED,KAAKG,QAAQ;EACb,KAAKC,UAAU;EACf,KAAKJ,cAAAA;EACL,KAAKQ,QAAQ;EACb,KAAKN,OAAAA,GAA+B,KAAKG,aAAa,MAAM,MAAM,CAAC;EACnE,KAAKjB,QAAQ,UAAU;GACtB,IAAI,CAAC,KAAKA,QAAQ,WAAW,KAAKA,QAAQ,QAAQ;GAIlD,aAAa,KAAKkB,WAAW;GAC7B,KAAKA,cAAc,KAAA;EACpB,CAAC;EACD,KAAKO,iBAAiB,KAAA;EACtB,KAAKC,aAAa,CAAC;EACnB,KAAKC,iBAAiB;EACtB,KAAKjB,QAAQ;EACb,KAAKQ,cAAc,iBAAiB;GACnC,IAAI,CAAC,KAAKlB,QAAQ,WAAW,KAAKA,QAAQ,QAAQ;EACnD,GAAG,yBAAyB;EAC5B,KAAKkB,YAAY,MAAM;CACxB;CAGA,UAAgB;EACf,IAAI,KAAKW,WAAW;EACpB,KAAKA,YAAY;EACjB,KAAK7B,QAAQ,IAAI,QAAQ,KAAKK,aAAa;EAC3C,KAAKL,QAAQ,IAAI,SAAS,KAAKM,cAAc;EAC7C,KAAKN,QAAQ,IAAI,SAAS,KAAKO,cAAc;EAE7C,KAAKP,QAAQ,GAAG,eAAe,KAAA,CAAS;CACzC;CAIA,OAAO,QAAgB,SAAuB;EAC7C,IAAI,KAAKA,QAAQ,WAAW;EAC5B,KAAKA,QAAQ,MAAM,qBAAqB,QAAQ,SAAS,EAAE,QAAQ,KAAKC,QAAQ,CAAC,CAAC;CACnF;CAIA,aAAa,MAA0B,QAAoC;EAC1E,IAAI,SAAS,KAAA,GAAW,OAAO,OAAO,MAAM,CAAC;EAC7C,MAAM,OAAO,WAAW,KAAA,IAAY,OAAO,MAAM,CAAC,IAAI,OAAO,KAAK,QAAQ,OAAO;EACjF,MAAM,UAAU,OAAO,MAAM,IAAI,KAAK,MAAM;EAC5C,QAAQ,cAAc,MAAM,CAAC;EAC7B,KAAK,KAAK,SAAS,CAAC;EACpB,OAAO;CACR;CAOA,aAAa,SAA0B;EACtC,IAAI,QAAQ,WAAW,GAAG;GACzB,KAAKc,QAAQ,KAAA;GACb,KAAKC,UAAU,KAAA;GACf,OAAO;EACR;EACA,IAAI,QAAQ,WAAW,GAAG;GACzB,KAAKM,MAAM,wBAAwB;GACnC,OAAO;EACR;EACA,MAAM,OAAO,QAAQ,aAAa,CAAC;EACnC,IAAI,CAAC,YAAY,IAAI,GAAG;GACvB,KAAKA,MAAM,wBAAwB;GACnC,OAAO;EACR;EACA,IAAI,QAAQ,WAAW,GAAG;GACzB,KAAKP,QAAQ;GACb,KAAKC,UAAU,KAAA;GACf,OAAO;EACR;EACA,MAAM,SAAS,UAAU,QAAQ,SAAS,CAAC,CAAC;EAC5C,IAAI,WAAW,KAAA,GAAW;GACzB,KAAKM,MAAM,uBAAuB;GAClC,OAAO;EACR;EACA,KAAKP,QAAQ;EACb,KAAKC,UAAU,OAAO,WAAW,IAAI,KAAA,IAAY;EACjD,OAAO;CACR;CAIA,UAAgB;EACf,IAAI,KAAKJ,gBAAAA,GAAwC;EACjD,KAAKQ,QAAQ;EACb,aAAa,KAAKF,WAAW;EAC7B,KAAKA,cAAc,KAAA;EACnB,KAAKd,SAAS,oBAAoB,SAAS,KAAKI,cAAc;EAC9D,KAAKI,cAAAA;EACL,KAAKb,SAAS,KAAK,SAAS,KAAKgB,OAAO,KAAKC,OAAO;CACrD;CAKA,QAAQ,OAAqB;EAC5B,KAAKK,UAAU,OAAO,OAAO,CAAC,KAAKA,SAAS,KAAK,CAAC;EAClD,KAAKS,OAAO;CACb;CAEA,YAAY,OAAsB;EACjC,IAAI,KAAKlB,gBAAAA,GAAwC;EACjD,MAAM,QAAQ,KAAKmB,OAAO,KAAK;EAC/B,IAAI,UAAU,KAAA,GAAW;EACzB,KAAKlB,QAAQ,KAAK;CACnB;CAEA,aAAa,OAAsB;EAClC,KAAKd,SAAS,KAAK,SAAS,KAAK;EACjC,KAAK,QAAQ;CACd;CAMA,OAAO,OAAoC;EAC1C,IAAI,OAAO,SAAS,KAAK,GAAG,OAAO;EACnC,IAAI,OAAO,UAAU,UAAU,OAAO,OAAO,KAAK,OAAO,OAAO;CAEjE;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACpcA,SAAgB,oBAAoB,SAAuD;CAC1F,OAAO,IAAI,cAAc,OAAO;AACjC"}