@stim-cli/core 1.27.0 → 1.29.0

package/dist/{core-B_w6CiKQ.mjs → core-Hohf5Wnt.mjs}

@@ -3,12 +3,12 @@ import { projectNodeBin } from "./toolchain.mjs";
 import fs, { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, utimesSync, writeFileSync } from "node:fs";
 import os from "node:os";
 import path, { basename, dirname, isAbsolute, join, normalize, relative, sep } from "node:path";
-import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { mkdir, rm } from "node:fs/promises";
 import { spawnSync } from "node:child_process";
-import { connect, createServer, isIP } from "node:net";
+import { createServer } from "node:net";
 //#region dir-lock.ts
 const DEFAULT_LOCK_WAIT_MS = 12e3;
 const DEFAULT_LOCK_POLL_MS = 25;
@@ -629,25 +629,69 @@ function reusableDependencies(area, project, lockfile, env = process.env) {
 }
 //#endregion
 //#region metro-bridge.ts
-function port(value) {
-	if (!Number.isInteger(value) || value < 1 || value > 65535) throw new Error("Invalid Metro bridge port.");
-}
-function credential(secret) {
-	if (!/^[a-f0-9]{64}$/.test(secret)) throw new Error("A Metro bridge needs a 256-bit secret.");
-	return Buffer.from(`${secret}\n`, "ascii");
+const METRO_LINK_LIMIT = 16;
+const METRO_LINK_WAIT_MS = 1e4;
+function createMetroLinks() {
+	const idle = [];
+	const waiting = [];
+	let closed = false;
+	return {
+		add: (link) => {
+			if (closed) return false;
+			const waiter = waiting.shift();
+			if (waiter) {
+				waiter(link);
+				return true;
+			}
+			if (idle.length >= METRO_LINK_LIMIT) idle.shift()?.close();
+			idle.push(link);
+			return true;
+		},
+		remove: (link) => {
+			const index = idle.indexOf(link);
+			if (index >= 0) idle.splice(index, 1);
+		},
+		take: (waitMs) => {
+			const link = idle.pop();
+			if (link || closed) return Promise.resolve(link ?? null);
+			return new Promise((resolve) => {
+				const waiter = (taken) => {
+					clearTimeout(timer);
+					resolve(taken);
+				};
+				const timer = setTimeout(() => {
+					waiting.splice(waiting.indexOf(waiter), 1);
+					resolve(null);
+				}, waitMs);
+				waiting.push(waiter);
+			});
+		},
+		close: () => {
+			closed = true;
+			for (const link of idle.splice(0)) link.close();
+			for (const waiter of waiting.splice(0)) waiter(null);
+		}
+	};
 }
-function trackedServer(accept) {
+/** Bind this endpoint only to worker loopback; each accepted connection rides one link its client opened. */
+function createMetroBridge(links, waitMs = METRO_LINK_WAIT_MS) {
 	const sockets = /* @__PURE__ */ new Set();
 	let closing;
-	const track = (socket) => {
+	const server = createServer((socket) => {
+		if (closing || sockets.size >= 128) return void socket.destroy();
 		sockets.add(socket);
 		socket.once("close", () => sockets.delete(socket));
 		socket.on("error", () => socket.destroy());
-	};
-	const server = createServer((socket) => {
-		if (closing || sockets.size >= 128) return void socket.destroy();
-		track(socket);
-		accept(socket, track);
+		socket.pause();
+		(async () => {
+			const deadline = Date.now() + waitMs;
+			for (;;) {
+				const link = await links.take(Math.max(0, deadline - Date.now()));
+				if (!link) return void socket.destroy();
+				if (socket.destroyed) return void (links.add(link) || link.close());
+				if (link.open(socket)) return;
+			}
+		})();
 	});
 	return {
 		server,
@@ -661,63 +705,6 @@ function trackedServer(accept) {
 		}
 	};
 }
-function forward(source, target) {
-	source.once("close", () => target.destroy());
-	target.once("close", () => source.destroy());
-	source.pipe(target).pipe(source);
-}
-/** Bind this gateway only to the client's own Tailscale address; `peer` is the pinned worker's literal address. */
-function createMetroGateway({ metroPort, peer, secret }) {
-	port(metroPort);
-	if (!isIP(peer)) throw new Error("The Metro gateway requires a pinned peer address.");
-	const expected = credential(secret);
-	return trackedServer((socket, track) => {
-		if (socket.remoteAddress?.replace(/^::ffff:/, "") !== peer) return void socket.destroy();
-		const deadline = setTimeout(() => socket.destroy(), 5e3);
-		socket.once("close", () => clearTimeout(deadline));
-		let prefix = Buffer.alloc(0);
-		const authenticate = (chunk) => {
-			const needed = expected.length - prefix.length;
-			prefix = Buffer.concat([prefix, chunk.subarray(0, needed)]);
-			if (prefix.length < expected.length) return;
-			socket.removeListener("data", authenticate);
-			socket.pause();
-			if (!timingSafeEqual(prefix, expected)) return void socket.destroy();
-			clearTimeout(deadline);
-			const upstream = connect({
-				host: "127.0.0.1",
-				port: metroPort
-			});
-			track(upstream);
-			if (chunk.length > needed) socket.unshift(chunk.subarray(needed));
-			forward(socket, upstream);
-		};
-		socket.on("data", authenticate);
-	});
-}
-/** Bind this endpoint only to worker loopback; `peer` comes from the approved client's authenticated connection. */
-function createMetroBridge({ gatewayPort, peer, secret }) {
-	port(gatewayPort);
-	if (!isIP(peer)) throw new Error("The Metro bridge requires an authenticated peer address.");
-	const prefix = credential(secret);
-	return trackedServer((socket, track) => {
-		socket.pause();
-		const upstream = connect({
-			host: peer,
-			port: gatewayPort,
-			timeout: 5e3
-		});
-		track(upstream);
-		upstream.once("timeout", () => upstream.destroy());
-		upstream.once("close", () => socket.destroy());
-		upstream.once("connect", () => {
-			upstream.setTimeout(0);
-			upstream.write(prefix);
-			forward(socket, upstream);
-		});
-		socket.once("close", () => upstream.destroy());
-	});
-}
 //#endregion
 //#region react-native-artifact.ts
 const text$1 = (value) => typeof value === "string" && value.length > 0 && value.length <= 256 && !/[\0\r\n]/.test(value);
@@ -1098,4 +1085,4 @@ function matchesCache(cache, match) {
 	return match.layout === void 0 || cache.layout === match.layout;
 }
 //#endregion
-export { withDirLockAsync as $, createMetroGateway as A, unitLines as B, workspaceName as C, reactNativeArtifactIdentity as D, swiftpmArtifactQuery as E, storeArtifactAsync as F, ambientWrite as G, validMacosResourceDestination as H, artifactIn as I, readJsonFile as J, withAmbientContext as K, resolveArtifact as L, dependencyLockfile as M, reusableDependencies as N, reactNativeArtifactQuery as O, compiledHelper as P, withDirLock as Q, storeArtifact as R, workspaceLogDir as S, workspaceStateDir as T, ambientContext as U, unitWords as V, ambientEnv as W, readStateFile as X, readJsonObject as Y, withStateReadCache as Z, rotatedLogPath as _, buildCacheRoot as a, updateCacheManifest as b, cacheNameSegment as c, ensurePrivateDir as d, withDirLockTransaction as et, hostSimulatorArch as f, rotateLog as g, registerCache as h, buildCacheKey as i, dependencyInstall as j, createMetroBridge as k, cachePathSetting as l, readCacheManifest as m, METRO_NAMED_CACHE_LAYOUT as n, cacheDirRefusal as o, metroCacheRoot as p, isJsonObject as q, STORE_ROOT_TAG as r, cacheManifestLockPath as s, LOG_ROTATE_BYTES as t, configDir as u, sharedStoreRoot as v, workspaceSlug as w, workspaceId as x, tagSharedStore as y, quoteUnitWord as z };
+export { withDirLockAsync as $, createMetroLinks as A, unitLines as B, workspaceName as C, reactNativeArtifactIdentity as D, swiftpmArtifactQuery as E, storeArtifactAsync as F, ambientWrite as G, validMacosResourceDestination as H, artifactIn as I, readJsonFile as J, withAmbientContext as K, resolveArtifact as L, dependencyLockfile as M, reusableDependencies as N, reactNativeArtifactQuery as O, compiledHelper as P, withDirLock as Q, storeArtifact as R, workspaceLogDir as S, workspaceStateDir as T, ambientContext as U, unitWords as V, ambientEnv as W, readStateFile as X, readJsonObject as Y, withStateReadCache as Z, rotatedLogPath as _, buildCacheRoot as a, updateCacheManifest as b, cacheNameSegment as c, ensurePrivateDir as d, withDirLockTransaction as et, hostSimulatorArch as f, rotateLog as g, registerCache as h, buildCacheKey as i, dependencyInstall as j, createMetroBridge as k, cachePathSetting as l, readCacheManifest as m, METRO_NAMED_CACHE_LAYOUT as n, cacheDirRefusal as o, metroCacheRoot as p, isJsonObject as q, STORE_ROOT_TAG as r, cacheManifestLockPath as s, LOG_ROTATE_BYTES as t, configDir as u, sharedStoreRoot as v, workspaceSlug as w, workspaceId as x, tagSharedStore as y, quoteUnitWord as z };