@statewalker/httpeers-share 0.0.0-stage → 0.2.0

package/dist/invite-link.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The Invite link: what the Sharer copies, and what the QR code holds.
+ *
+ * `https://tools.sandclaw.ai/peer-share/invite#join=<blob>&from=Dirk`
+ *
+ * The join blob is httpeers' own (`encodeJoinBlob`), so the existing join
+ * tooling can read it. But it travels in the FRAGMENT, not in httpeers'
+ * `?join=` query: a fragment never leaves the browser, so the page's server
+ * (and its logs, and any proxy) never sees an Invite, which is a bearer
+ * credential until it is spent.
+ */
+export interface InviteLink {
+    relayAddrs: string[];
+    sharerPeerId: string;
+    invitationId: string;
+    /** Shown before joining: "Dirk invited you". */
+    sharerName: string;
+}
+export declare function encodeInvite(pageUrl: string, invite: InviteLink): string;
+export declare function decodeInvite(link: string): InviteLink;
+//# sourceMappingURL=invite-link.d.ts.map

package/dist/invite-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-link.d.ts","sourceRoot":"","sources":["../src/invite-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAYxE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAWrD"}

package/dist/invite-link.js

@@ -0,0 +1,38 @@
+/**
+ * The Invite link: what the Sharer copies, and what the QR code holds.
+ *
+ * `https://tools.sandclaw.ai/peer-share/invite#join=<blob>&from=Dirk`
+ *
+ * The join blob is httpeers' own (`encodeJoinBlob`), so the existing join
+ * tooling can read it. But it travels in the FRAGMENT, not in httpeers'
+ * `?join=` query: a fragment never leaves the browser, so the page's server
+ * (and its logs, and any proxy) never sees an Invite, which is a bearer
+ * credential until it is spent.
+ */
+import { decodeJoinBlob, encodeJoinBlob } from "@statewalker/httpeers-member";
+export function encodeInvite(pageUrl, invite) {
+    const url = new URL(pageUrl);
+    const fragment = new URLSearchParams({
+        join: encodeJoinBlob({
+            relayAddrs: invite.relayAddrs,
+            hubPeerId: invite.sharerPeerId,
+            invitationId: invite.invitationId,
+        }),
+        from: invite.sharerName,
+    });
+    url.hash = fragment.toString();
+    return url.toString();
+}
+export function decodeInvite(link) {
+    const fragment = new URLSearchParams(new URL(link).hash.slice(1));
+    const join = fragment.get("join");
+    if (join == null)
+        throw new Error("This is not a PeerShare invite link: it has no #join=… part.");
+    const blob = decodeJoinBlob(join);
+    return {
+        relayAddrs: blob.relayAddrs,
+        sharerPeerId: blob.hubPeerId,
+        invitationId: blob.invitationId,
+        sharerName: fragment.get("from") ?? "Someone",
+    };
+}

package/dist/join-outcome.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The Guest's side of a membership: join, come back, Close session.
+ */
+export type JoinOutcome = "joined" | "invite-used" | "invite-expired" | "machine-offline";
+/**
+ * What a failed join means to the Guest, for the Join screen.
+ *
+ * Measured against httpeers-member 0.1.6: a used and an expired Invite are
+ * both `MemberJoinError("invitation-refused")`, told apart only by the hub's
+ * answer quoted inside the message (`{"error":"invitation already-redeemed"}`
+ * / `{"error":"invitation expired"}`). An offline Sharer is a plain `Error`:
+ * the relay holds no reservation for it (`NO_RESERVATION`). Reading text is
+ * fragile; httpeers should carry the hub's reason as a field (see README).
+ */
+export declare function joinOutcome(error: unknown): JoinOutcome;
+//# sourceMappingURL=join-outcome.d.ts.map

package/dist/join-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-outcome.d.ts","sourceRoot":"","sources":["../src/join-outcome.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAE1F;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAOvD"}

package/dist/join-outcome.js

@@ -0,0 +1,32 @@
+/**
+ * The Guest's side of a membership: join, come back, Close session.
+ */
+/**
+ * What a failed join means to the Guest, for the Join screen.
+ *
+ * Measured against httpeers-member 0.1.6: a used and an expired Invite are
+ * both `MemberJoinError("invitation-refused")`, told apart only by the hub's
+ * answer quoted inside the message (`{"error":"invitation already-redeemed"}`
+ * / `{"error":"invitation expired"}`). An offline Sharer is a plain `Error`:
+ * the relay holds no reservation for it (`NO_RESERVATION`). Reading text is
+ * fragile; httpeers should carry the hub's reason as a field (see README).
+ */
+export function joinOutcome(error) {
+    const text = describe(error);
+    if (/already-redeemed/.test(text))
+        return "invite-used";
+    if (/invitation expired/.test(text))
+        return "invite-expired";
+    // Everything else is the Sharer not being reachable: offline, tab closed,
+    // or the relay unable to find it. The Guest's next step is the same: wait.
+    return "machine-offline";
+}
+function describe(error) {
+    const parts = [];
+    for (let e = error; e != null; e = e.cause) {
+        parts.push(e instanceof Error ? e.message : String(e));
+        if (parts.length > 5)
+            break;
+    }
+    return parts.join(" | ");
+}

package/dist/lifecycle.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Stop, reload and Revoke, as the Sharer drives them and a Guest sees them.
+ */
+import type { Hub } from "@statewalker/httpeers-hub";
+/**
+ * Two writes, as the hub's own `DELETE /admin/members/{peerId}` does: the
+ * member record goes, AND a revocation is recorded, so the token the Guest
+ * still holds stops verifying on its next call instead of lasting until it
+ * expires.
+ */
+export declare function revokeGuest(hub: Pick<Hub, "members" | "revocations">, guestPeerId: string): void;
+/** Whether a Guest's failed request means "the Sharer is offline" (Stop, closed tab). */
+/**
+ * Measured: once the Sharer stops, a Guest's request comes back within tens
+ * of ms as `502 {"kind":"peer-unreachable"}` from the Guest's own member,
+ * never as a hang. The body is read from a clone, so the caller keeps it.
+ */
+export declare function isSharerOffline(response: Response): Promise<boolean>;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../src/lifecycle.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,aAAa,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAGhG;AAED,yFAAyF;AACzF;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1E"}

package/dist/lifecycle.js

@@ -0,0 +1,28 @@
+/**
+ * Stop, reload and Revoke, as the Sharer drives them and a Guest sees them.
+ */
+/**
+ * Two writes, as the hub's own `DELETE /admin/members/{peerId}` does: the
+ * member record goes, AND a revocation is recorded, so the token the Guest
+ * still holds stops verifying on its next call instead of lasting until it
+ * expires.
+ */
+export function revokeGuest(hub, guestPeerId) {
+    hub.members.remove(guestPeerId);
+    hub.revocations.revoke(guestPeerId);
+}
+/** Whether a Guest's failed request means "the Sharer is offline" (Stop, closed tab). */
+/**
+ * Measured: once the Sharer stops, a Guest's request comes back within tens
+ * of ms as `502 {"kind":"peer-unreachable"}` from the Guest's own member,
+ * never as a hang. The body is read from a clone, so the caller keeps it.
+ */
+export async function isSharerOffline(response) {
+    if (response.status !== 502)
+        return false;
+    const body = (await response
+        .clone()
+        .json()
+        .catch(() => null));
+    return body?.kind === "peer-unreachable";
+}

package/dist/policy.d.ts

@@ -0,0 +1,19 @@
+/**
+ * What can be shared in v1, and how.
+ *
+ * - **Bridged**: a service on the Sharer's machine or LAN, through the CORS
+ *   proxy on localhost (the Bridge). Its own target rules decide (rung 02).
+ * - **Direct**: a remote resource with a domain name, a certificate and its
+ *   own CORS headers. So: `https`, and a host NAME, never an address, and not
+ *   the Sharer's own machine or LAN (those go through the Bridge).
+ */
+export type ServiceKind = "bridged" | "direct";
+export type TargetRefusal = "not-a-url" | "not-http" | "needs-https" | "needs-domain-name" | "local-needs-bridge" | "remote-is-direct" | "not-local";
+export type TargetCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reason: TargetRefusal;
+};
+export declare function checkServiceTarget(kind: ServiceKind, target: string): TargetCheck;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/C,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,UAAU,GACV,aAAa,GACb,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,WAAW,CAAC;AAEhB,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAE9E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAsBjF"}

package/dist/policy.js

@@ -0,0 +1,40 @@
+/**
+ * What can be shared in v1, and how.
+ *
+ * - **Bridged**: a service on the Sharer's machine or LAN, through the CORS
+ *   proxy on localhost (the Bridge). Its own target rules decide (rung 02).
+ * - **Direct**: a remote resource with a domain name, a certificate and its
+ *   own CORS headers. So: `https`, and a host NAME, never an address, and not
+ *   the Sharer's own machine or LAN (those go through the Bridge).
+ */
+import { checkTarget } from "./targets.js";
+export function checkServiceTarget(kind, target) {
+    let url;
+    try {
+        url = new URL(target);
+    }
+    catch {
+        return refused("not-a-url");
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        return refused("not-http");
+    const host = url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+    const isAddress = /^\d+\.\d+\.\d+\.\d+$/.test(host) || host.includes(":");
+    const isLocalName = host === "localhost" || host.endsWith(".local");
+    if (kind === "bridged") {
+        if (checkTarget(target) !== "forbidden")
+            return { ok: true };
+        // A public https name is a remote resource: it is shared Direct.
+        return refused(url.protocol === "https:" && !isAddress ? "remote-is-direct" : "not-local");
+    }
+    if (isLocalName)
+        return refused("local-needs-bridge");
+    if (isAddress)
+        return refused("needs-domain-name");
+    if (url.protocol !== "https:")
+        return refused("needs-https");
+    return { ok: true };
+}
+function refused(reason) {
+    return { ok: false, reason };
+}

package/dist/probe.d.ts

@@ -0,0 +1,20 @@
+/**
+ * "Test again": one request through the same Upstream Guests use.
+ */
+import type { Upstream } from "@statewalker/webrun-http-proxy";
+export type Health = "ok" | "slow" | "down";
+export type ProbeCause = "service-down" | "bridge-down" | "cors-missing";
+export type ProbeWarning = "ws-needed" | "cookies-set";
+export interface ProbeReport {
+    health: Health;
+    cause?: ProbeCause;
+    warnings: ProbeWarning[];
+    ms: number;
+}
+/** What Guests notice: a page that takes longer than this feels broken. */
+export declare const SLOW_MS = 1500;
+export declare function probe(upstream: Upstream, opts?: {
+    slowMs?: number;
+    direct?: string;
+}): Promise<ProbeReport>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../src/probe.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAS/D,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,aAAa,GAAG,cAAc,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,2EAA2E;AAC3E,eAAO,MAAM,OAAO,OAAO,CAAC;AAE5B,wBAAsB,KAAK,CACzB,QAAQ,EAAE,QAAQ,EAClB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,OAAO,CAAC,WAAW,CAAC,CAyBtB"}

package/dist/probe.js

@@ -0,0 +1,60 @@
+/**
+ * "Test again": one request through the same Upstream Guests use.
+ */
+import { BRIDGE_COOKIES_KEPT_HEADER, BRIDGE_GUEST_HEADER, BRIDGE_SET_COOKIE_HEADER, PROBE_GUEST, unreachable, } from "./upstreams.js";
+/** What Guests notice: a page that takes longer than this feels broken. */
+export const SLOW_MS = 1500;
+export async function probe(upstream, opts = {}) {
+    const started = performance.now();
+    // As a Guest of its own: a Bridge with cookie jars treats the Probe like anyone else.
+    const response = await upstream(new Request("http://probe.peershare/", { headers: { [BRIDGE_GUEST_HEADER]: PROBE_GUEST } }));
+    const body = await response.text();
+    const ms = Math.round(performance.now() - started);
+    const down = unreachable(response);
+    if (down === "service" && opts.direct != null && (await answersWithoutCors(opts.direct))) {
+        return { health: "down", cause: "cors-missing", warnings: [], ms };
+    }
+    if (down != null)
+        return { health: "down", cause: `${down}-down`, warnings: [], ms };
+    // A 404 at `/` is an app that answers; a 5xx is one that does not work.
+    if (response.status >= 500)
+        return { health: "down", cause: "service-down", warnings: [], ms };
+    const health = ms >= (opts.slowMs ?? SLOW_MS) ? "slow" : "ok";
+    const warnings = [];
+    if (isHtml(response) && WEBSOCKET_CLIENTS.some((re) => re.test(body)))
+        warnings.push("ws-needed");
+    // Only the Bridge's marker: a page never sees `Set-Cookie` itself.
+    // A cookie login breaks for Guests only when nothing keeps the cookies for them.
+    const kept = response.headers.get(BRIDGE_COOKIES_KEPT_HEADER) === "kept";
+    if (response.headers.has(BRIDGE_SET_COOKIE_HEADER) && !kept)
+        warnings.push("cookies-set");
+    return { health, warnings, ms };
+}
+/**
+ * Pages whose scripts open a WebSocket: dev servers' hot-reload clients, and
+ * pages that do it themselves. Guests' traffic is HTTP only, so these break.
+ * Matched in script tags and code, not in prose.
+ */
+const WEBSOCKET_CLIENTS = [
+    /<script[^>]+src="[^"]*\/@vite\/client"/,
+    /<script[^>]+src="[^"]*webpack-dev-server/,
+    /<script[^>]+src="[^"]*\/_next\/webpack-hmr/,
+    /new\s+WebSocket\s*\(/,
+];
+function isHtml(response) {
+    return (response.headers.get("content-type") ?? "").includes("text/html");
+}
+/**
+ * In a browser a missing CORS header fails exactly like a dead server. A
+ * `no-cors` request is not subject to CORS: an (opaque) answer means the
+ * site is up, so what is missing is its permission for other origins.
+ */
+async function answersWithoutCors(target) {
+    try {
+        await fetch(target, { mode: "no-cors" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/service-table.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The Sharer's Services as Guests see them: a live catalog at `/s/`, and
+ * each Service at `/s/<id>/…`.
+ *
+ * The hub's own advertisements are posted once, when it is created (there is
+ * no way to update them), so they cannot carry a Service that was added or
+ * paused later. One static advertisement says "Dirk shares services"; what
+ * they are, and which are paused, is read here, per request.
+ */
+import type { FetchHandler, Upstream } from "@statewalker/webrun-http-proxy";
+export interface ServiceEntry {
+    id: string;
+    name: string;
+    upstream: Upstream;
+    /** The Service's WebSocket at `path` (M9); without it, sockets are refused. */
+    socket?: (path: string, protocols: string[]) => WebSocket;
+    enabled: boolean;
+    isDefault: boolean;
+}
+export interface CatalogEntry {
+    id: string;
+    name: string;
+    isDefault: boolean;
+    paused: boolean;
+}
+/** Marks the table's own answers (paused, unknown), so they are never taken for a Service's. */
+export declare const SERVICE_MARKER = "x-peershare-service";
+export declare function serviceTable(services: () => readonly ServiceEntry[], 
+/** `sharerName` may be a function: read per request, so a name set later shows. */
+opts?: {
+    sharerName?: string | (() => string);
+}): FetchHandler;
+//# sourceMappingURL=service-table.d.ts.map

package/dist/service-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-table.d.ts","sourceRoot":"","sources":["../src/service-table.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAK7E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,SAAS,CAAC;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,gGAAgG;AAChG,eAAO,MAAM,cAAc,wBAAwB,CAAC;AAEpD,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,SAAS,YAAY,EAAE;AACvC,mFAAmF;AACnF,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAA;CAAO,GAClD,YAAY,CAuCd"}

package/dist/service-table.js

@@ -0,0 +1,59 @@
+/**
+ * The Sharer's Services as Guests see them: a live catalog at `/s/`, and
+ * each Service at `/s/<id>/…`.
+ *
+ * The hub's own advertisements are posted once, when it is created (there is
+ * no way to update them), so they cannot carry a Service that was added or
+ * paused later. One static advertisement says "Dirk shares services"; what
+ * they are, and which are paused, is read here, per request.
+ */
+import { shareRouter } from "./share-router.js";
+import { SOCKET_HEADER } from "./socket-frames.js";
+import { sharerSocket } from "./socket-tunnel.js";
+/** Marks the table's own answers (paused, unknown), so they are never taken for a Service's. */
+export const SERVICE_MARKER = "x-peershare-service";
+export function serviceTable(services, 
+/** `sharerName` may be a function: read per request, so a name set later shows. */
+opts = {}) {
+    const nameOf = typeof opts.sharerName === "function"
+        ? opts.sharerName
+        : () => opts.sharerName;
+    const router = shareRouter({ services: () => services().filter((s) => s.enabled) });
+    return async (request) => {
+        const sharer = nameOf() || "The Sharer";
+        const { pathname } = new URL(request.url);
+        if (pathname === "/s/" || pathname === "/s") {
+            const catalog = [...services()]
+                .sort((a, b) => Number(b.isDefault) - Number(a.isDefault))
+                .map((s) => ({ id: s.id, name: s.name, isDefault: s.isDefault, paused: !s.enabled }));
+            return Response.json(catalog);
+        }
+        const id = pathname.split("/")[2] ?? "";
+        const service = services().find((s) => s.id === id);
+        if (service == null)
+            return own(404, "unknown", `There is no service "${id}" here.`);
+        if (!service.enabled) {
+            return own(503, "paused", `${sharer} paused ${service.name}. It is back when ${sharer} turns it on again.`);
+        }
+        const protocols = request.headers.get(SOCKET_HEADER);
+        if (protocols != null) {
+            if (service.socket == null)
+                return own(501, "no-socket", `${service.name} cannot carry live connections.`);
+            const url = new URL(request.url);
+            const rest = url.pathname.slice(`/s/${id}`.length) || "/";
+            const open = service.socket;
+            return sharerSocket(request, () => open(`${rest}${url.search}`, protocols.split(",").filter(Boolean)));
+        }
+        return router(request);
+    };
+}
+function own(status, marker, message) {
+    const body = `<!doctype html><meta charset="utf-8"><title>${escapeHtml(message)}</title><p>${escapeHtml(message)}</p>`;
+    return new Response(body, {
+        status,
+        headers: { "content-type": "text/html; charset=utf-8", [SERVICE_MARKER]: marker },
+    });
+}
+function escapeHtml(text) {
+    return text.replace(/[&<>"]/g, (c) => `&#${c.charCodeAt(0)};`);
+}

package/dist/share-router.d.ts

@@ -0,0 +1,15 @@
+/**
+ * What the Sharer's member mounts for Guests: `/s/<serviceId>/<path>`.
+ *
+ * The router knows nothing about upstream kinds: it strips the mount, hands
+ * the rest of the path to the Service's `Upstream`, and that is all.
+ */
+import type { FetchHandler, Upstream } from "@statewalker/webrun-http-proxy";
+export interface SharedService {
+    id: string;
+    upstream: Upstream;
+}
+export declare function shareRouter(init: {
+    services: () => readonly SharedService[];
+}): FetchHandler;
+//# sourceMappingURL=share-router.d.ts.map

package/dist/share-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-router.d.ts","sourceRoot":"","sources":["../src/share-router.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAG7E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,SAAS,aAAa,EAAE,CAAA;CAAE,GAAG,YAAY,CA0B5F"}

package/dist/share-router.js

@@ -0,0 +1,31 @@
+/**
+ * What the Sharer's member mounts for Guests: `/s/<serviceId>/<path>`.
+ *
+ * The router knows nothing about upstream kinds: it strips the mount, hands
+ * the rest of the path to the Service's `Upstream`, and that is all.
+ */
+import { bodyOf } from "@statewalker/httpeers-core";
+import { Hono } from "hono";
+export function shareRouter(init) {
+    const app = new Hono();
+    app.all("/s/:id/*", async (c) => {
+        const id = c.req.param("id");
+        // Read per request, so adding or pausing a Service needs no rebuild.
+        const service = init.services().find((s) => s.id === id);
+        if (service == null)
+            return c.notFound();
+        const url = new URL(c.req.url);
+        const rest = url.pathname.slice(`/s/${id}`.length) || "/";
+        // Through `bodyOf`, not `request.body`: Firefox has no `Request.body`,
+        // and a rewritten request silently lost its body there.
+        const body = await bodyOf(c.req.raw);
+        return service.upstream(new Request(new URL(`${rest}${url.search}`, url.origin), {
+            method: c.req.method,
+            headers: c.req.raw.headers,
+            body,
+            ...(body instanceof ReadableStream ? { duplex: "half" } : {}),
+            signal: c.req.raw.signal,
+        }));
+    });
+    return async (request) => app.fetch(request);
+}

package/dist/socket-frames.d.ts

@@ -0,0 +1,30 @@
+/**
+ * WebSocket messages inside one streaming HTTP request over the mesh (rung 15:
+ * a mesh request is full-duplex). Each frame: 1 byte type, 4 bytes length
+ * (big-endian), payload.
+ *
+ *   text   (1): UTF-8
+ *   binary (2): bytes
+ *   close  (3): 2 bytes code, then the reason in UTF-8
+ *   open   (4): the subprotocol the app accepted, in UTF-8 (first frame back)
+ */
+export type SocketFrame = {
+    type: "text";
+    data: string;
+} | {
+    type: "binary";
+    data: Uint8Array;
+} | {
+    type: "close";
+    code: number;
+    reason: string;
+} | {
+    type: "open";
+    protocol: string;
+};
+/** Asks a Service's upstream for a socket instead of a response: the header names the subprotocols. */
+export declare const SOCKET_HEADER = "x-peershare-websocket";
+export declare function encodeFrame(frame: SocketFrame): Uint8Array;
+/** Bytes, chunked any way, to frames. */
+export declare function decodeFrames(): TransformStream<Uint8Array, SocketFrame>;
+//# sourceMappingURL=socket-frames.d.ts.map

package/dist/socket-frames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-frames.d.ts","sourceRoot":"","sources":["../src/socket-frames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,uGAAuG;AACvG,eAAO,MAAM,aAAa,0BAA0B,CAAC;AAQrD,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,CA0B1D;AAED,yCAAyC;AACzC,wBAAgB,YAAY,IAAI,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CA2BvE"}

package/dist/socket-frames.js

@@ -0,0 +1,81 @@
+/**
+ * WebSocket messages inside one streaming HTTP request over the mesh (rung 15:
+ * a mesh request is full-duplex). Each frame: 1 byte type, 4 bytes length
+ * (big-endian), payload.
+ *
+ *   text   (1): UTF-8
+ *   binary (2): bytes
+ *   close  (3): 2 bytes code, then the reason in UTF-8
+ *   open   (4): the subprotocol the app accepted, in UTF-8 (first frame back)
+ */
+/** Asks a Service's upstream for a socket instead of a response: the header names the subprotocols. */
+export const SOCKET_HEADER = "x-peershare-websocket";
+const TEXT = 1;
+const BINARY = 2;
+const CLOSE = 3;
+const OPEN = 4;
+const HEAD = 5;
+export function encodeFrame(frame) {
+    const enc = new TextEncoder();
+    let type;
+    let payload;
+    if (frame.type === "text") {
+        type = TEXT;
+        payload = enc.encode(frame.data);
+    }
+    else if (frame.type === "binary") {
+        type = BINARY;
+        payload = frame.data;
+    }
+    else if (frame.type === "open") {
+        type = OPEN;
+        payload = enc.encode(frame.protocol);
+    }
+    else {
+        type = CLOSE;
+        const reason = enc.encode(frame.reason);
+        payload = new Uint8Array(2 + reason.length);
+        new DataView(payload.buffer).setUint16(0, frame.code);
+        payload.set(reason, 2);
+    }
+    const out = new Uint8Array(HEAD + payload.length);
+    const view = new DataView(out.buffer);
+    view.setUint8(0, type);
+    view.setUint32(1, payload.length);
+    out.set(payload, HEAD);
+    return out;
+}
+/** Bytes, chunked any way, to frames. */
+export function decodeFrames() {
+    let buffer = new Uint8Array(0);
+    const dec = new TextDecoder();
+    return new TransformStream({
+        transform(chunk, controller) {
+            const joined = new Uint8Array(buffer.length + chunk.length);
+            joined.set(buffer);
+            joined.set(chunk, buffer.length);
+            buffer = joined;
+            while (buffer.length >= HEAD) {
+                const view = new DataView(buffer.buffer, buffer.byteOffset, buffer.byteLength);
+                const length = view.getUint32(1);
+                if (buffer.length < HEAD + length)
+                    break;
+                const type = view.getUint8(0);
+                const payload = buffer.slice(HEAD, HEAD + length);
+                buffer = buffer.slice(HEAD + length);
+                if (type === TEXT)
+                    controller.enqueue({ type: "text", data: dec.decode(payload) });
+                else if (type === BINARY)
+                    controller.enqueue({ type: "binary", data: payload });
+                else if (type === CLOSE) {
+                    const code = new DataView(payload.buffer, payload.byteOffset).getUint16(0);
+                    controller.enqueue({ type: "close", code, reason: dec.decode(payload.slice(2)) });
+                }
+                else if (type === OPEN)
+                    controller.enqueue({ type: "open", protocol: dec.decode(payload) });
+                else
+                    controller.error(new Error(`unknown socket frame type ${type}`));
+            }
+        },
+    });
+}

package/dist/socket-tunnel.d.ts

@@ -0,0 +1,46 @@
+/**
+ * A WebSocket inside one request over the mesh (M9; rung 15 measured that a
+ * mesh request is full-duplex). The Guest's `openTunnel` sends frames in the
+ * request body and reads them from the response body; the Sharer's
+ * `sharerSocket` relays them to the Service's own socket.
+ */
+import type { FetchHandler } from "@statewalker/webrun-http-proxy";
+/** The Sharer's side: answer a tunnel request by relaying to `open()`'s socket. */
+export declare function sharerSocket(request: Request, open: () => WebSocket): Response;
+type Listener<E> = ((event: E) => void) | null;
+/** What a Guest holds: shaped like a browser WebSocket, carried over `fetch`. */
+export declare class TunnelSocket {
+    static readonly CONNECTING = 0;
+    static readonly OPEN = 1;
+    static readonly CLOSING = 2;
+    static readonly CLOSED = 3;
+    readyState: number;
+    protocol: string;
+    onopen: Listener<{
+        type: "open";
+    }>;
+    onmessage: Listener<{
+        type: "message";
+        data: string | ArrayBuffer;
+    }>;
+    onclose: Listener<{
+        type: "close";
+        code: number;
+        reason: string;
+        wasClean: boolean;
+    }>;
+    onerror: Listener<{
+        type: "error";
+    }>;
+    private out;
+    private sentClose;
+    constructor(fetch: FetchHandler, path: string, protocols: string[]);
+    send(data: string | ArrayBuffer | ArrayBufferView): void;
+    close(code?: number, reason?: string): void;
+    private endRequest;
+    private read;
+    private closed;
+}
+export declare function openTunnel(fetch: FetchHandler, path: string, protocols: string[]): TunnelSocket;
+export {};
+//# sourceMappingURL=socket-tunnel.d.ts.map

package/dist/socket-tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-tunnel.d.ts","sourceRoot":"","sources":["../src/socket-tunnel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAGnE,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,GAAG,QAAQ,CAsD9E;AAED,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;AAE/C,iFAAiF;AACjF,qBAAa,YAAY;IACvB,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK;IAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK;IACzB,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK;IAC5B,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK;IAE3B,UAAU,SAA2B;IACrC,QAAQ,SAAM;IACd,MAAM,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAQ;IAC1C,SAAS,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC,CAAQ;IAC5E,OAAO,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAQ;IAC7F,OAAO,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAQ;IAE5C,OAAO,CAAC,GAAG,CAA+C;IAC1D,OAAO,CAAC,SAAS,CAAS;IAE1B,YAAY,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAkBjE;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,IAAI,CAavD;IAED,KAAK,CAAC,IAAI,SAAO,EAAE,MAAM,SAAK,GAAG,IAAI,CAIpC;IAED,OAAO,CAAC,UAAU;YAWJ,IAAI;IAkBlB,OAAO,CAAC,MAAM;CAMf;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,YAAY,CAE/F"}