@replit/river 0.23.14 → 0.23.16

package/dist/transport/impls/uds/server.js

@@ -1,13 +1,13 @@
 import {
   ServerTransport
-} from "../../../chunk-WUL63FR6.js";
+} from "../../../chunk-MQCGG6KL.js";
 import {
   UdsConnection
-} from "../../../chunk-YCLZWES2.js";
-import "../../../chunk-OTVTKAN6.js";
+} from "../../../chunk-UDXM64QK.js";
+import "../../../chunk-WN77AT67.js";
 import "../../../chunk-6LCL2ZZF.js";
-import "../../../chunk-O2AVDJCQ.js";
-import "../../../chunk-GCCRVSMR.js";
+import "../../../chunk-YXDAOVP7.js";
+import "../../../chunk-TXSQRTZB.js";
 import "../../../chunk-4PVU7J25.js";
 
 // transport/impls/uds/server.ts

package/dist/transport/impls/ws/client.cjs

@@ -374,7 +374,7 @@ var import_nanoid2 = require("nanoid");
 var import_api = require("@opentelemetry/api");
 
 // package.json
-var version = "0.23.14";
+var version = "0.23.16";
 
 // tracing/index.ts
 function getPropagationContext(ctx) {
@@ -694,6 +694,18 @@ var Session = class {
   get nextExpectedSeq() {
     return this.ack;
   }
+  /**
+   * Check that the peer's next expected seq number matches something that is in our send buffer
+   * _or_ matches our actual next seq.
+   */
+  nextExpectedSeqInRange(nextExpectedSeq) {
+    for (const msg of this.sendBuffer) {
+      if (nextExpectedSeq === msg.seq) {
+        return true;
+      }
+    }
+    return nextExpectedSeq === this.seq;
+  }
   // This is only used in tests to make the session misbehave.
   /* @internal */
   advanceAckForTesting(by) {
@@ -802,6 +814,20 @@ var Transport = class {
     if (this.log) {
       session.bindLogger(this.log);
     }
+    const currentSession = this.sessions.get(session.to);
+    if (currentSession) {
+      this.log?.warn(
+        `session ${session.id} from ${session.to} surreptitiously replacing ${currentSession.id}`,
+        {
+          ...currentSession.loggingMetadata,
+          tags: ["invariant-violation"]
+        }
+      );
+      this.deleteSession({
+        session: currentSession,
+        closeHandshakingConnection: false
+      });
+    }
     this.sessions.set(session.to, session);
     this.eventDispatcher.dispatchEvent("sessionStatus", {
       status: "connect",
@@ -841,7 +867,7 @@ var Transport = class {
     if (
       // reject this request if there was no previous session to replace
       session === void 0 || // or if both parties do not agree about the next expected sequence number
-      session.nextExpectedAck < nextExpectedSeq || // or if both parties do not agree on the advertised session id
+      !session.nextExpectedSeqInRange(nextExpectedSeq) || // or if both parties do not agree on the advertised session id
       session.advertisedSessionId !== sessionId
     ) {
       return false;
@@ -900,6 +926,17 @@ var Transport = class {
     }
     session.close();
     session.telemetry.span.end();
+    const currentSession = this.sessions.get(session.to);
+    if (currentSession && currentSession.id !== session.id) {
+      this.log?.warn(
+        `session ${session.id} disconnect from ${session.to}, mismatch with ${currentSession.id}`,
+        {
+          ...session.loggingMetadata,
+          tags: ["invariant-violation"]
+        }
+      );
+      return;
+    }
     this.sessions.delete(session.to);
     this.log?.info(
       `session ${session.id} disconnect from ${session.to}`,