@tienne/gestalt 0.108.0 → 0.110.0

package/dist/src/peer/viewer.js

@@ -0,0 +1,249 @@
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+import { createServer } from 'node:http';
+import { renderViewerHtml } from './viewer-html.js';
+import { errMessage } from './errors.js';
+const PAGE_PATH = /^\/s\/([A-Za-z0-9_-]{1,64})\/?$/;
+const EVENTS_PATH = /^\/s\/([A-Za-z0-9_-]{1,64})\/events$/;
+/** SSE 연결이 프록시나 OS에서 놀다 끊기지 않게 보내는 빈 주석 간격 */
+const KEEPALIVE_MS = 15_000;
+/**
+ * 공유 하나에 동시에 붙는 뷰어 상한. 넘으면 429. 뷰어 하나가 붙잡는 메모리는 소켓 버퍼로
+ * 묶여 있지만 연결마다 소켓과 타이머가 생기니 토큰을 아는 쪽이 끝없이 열지 못하게 한다.
+ * 사람이 보는 숫자로는 넉넉하다.
+ */
+export const MAX_VIEWERS_PER_SHARE = 16;
+/**
+ * 실시간 프레임을 쓰기 전에 소켓 버퍼에 이만큼 넘게 밀려 있으면 그 뷰어를 끊는다. 안 읽는
+ * 뷰어 하나가 데몬 메모리를 끝없이 붙잡지 못하게 한다. 이보다 큰 이벤트 하나는 들어가지만
+ * 소켓으로 다 빠지기 전에 다음 프레임이 오면 그때 끊는다. 앞부분은 소켓이 비는 만큼만 꺼내
+ * 보내서 여기에 안 쌓인다. 브라우저는 다시 붙어 Last-Event-ID부터 받는다.
+ */
+export const MAX_LIVE_BACKLOG_BYTES = 8 * 1024 * 1024;
+/** 앞부분을 공유에서 한 번에 꺼내는 양. 소켓이 차면 그 자리에서 멈추므로 대략이면 된다 */
+export const REPLAY_CHUNK_BYTES = 256 * 1024;
+/**
+ * 로컬 뷰어 HTTP 서버. `127.0.0.1`에만 붙는다.
+ *
+ * 같은 머신의 다른 프로세스나 브라우저에 열린 남의 웹페이지도 이 포트에 닿을 수 있다.
+ * 그래서 공유마다 토큰을 주소에 붙이고 없거나 틀리면 401이다. 모르는 공유 id도 401로
+ * 돌려준다 — 404와 401을 나누면 토큰 없이 공유 id가 살아 있는지 떠볼 수 있다.
+ *
+ * Routes:
+ *   GET /s/:id?t=TOKEN          → 뷰어 HTML
+ *   GET /s/:id/events?t=TOKEN   → SSE (line, trimmed, stats, state, closed). 뷰어 상한을 넘으면 429.
+ *                                 closed의 missed는 따라잡는 중에 공유가 종료돼 못 보낸 이벤트 수
+ *   *                           → 404
+ */
+export class ViewerServer {
+    hooks;
+    server = null;
+    open = new Set();
+    viewers = new Map();
+    maxLiveBacklogBytes;
+    constructor(hooks, options = {}) {
+        this.hooks = hooks;
+        this.maxLiveBacklogBytes = options.maxLiveBacklogBytes ?? MAX_LIVE_BACKLOG_BYTES;
+    }
+    start(port = 0) {
+        return new Promise((resolve, reject) => {
+            this.server = createServer((req, res) => {
+                // 핸들러가 던지면 uncaughtException으로 데몬이 죽는다. 요청 대상이 `//[`처럼 URL로
+                // 안 읽히면 new URL이 던지는데 이 포트에 닿는 누구나 그런 요청을 보낼 수 있다
+                try {
+                    this.handle(req, res);
+                }
+                catch (err) {
+                    process.stderr.write(`[peer-viewer] request failed: ${errMessage(err)}\n`);
+                    if (!res.headersSent)
+                        res.writeHead(500, { 'Content-Type': 'text/plain; charset=utf-8' });
+                    res.end('Internal Server Error');
+                }
+            });
+            this.server.once('error', reject);
+            this.server.listen(port, '127.0.0.1', () => {
+                this.server.off('error', reject);
+                this.server.on('error', (err) => {
+                    process.stderr.write(`[peer-viewer] server error: ${err.message}\n`);
+                });
+                resolve(this.port);
+            });
+        });
+    }
+    get port() {
+        const addr = this.server?.address();
+        return addr && typeof addr === 'object' ? addr.port : undefined;
+    }
+    stop() {
+        for (const res of this.open)
+            res.end();
+        this.open.clear();
+        return new Promise((resolve) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            this.server.closeAllConnections?.();
+            this.server.close(() => {
+                this.server = null;
+                resolve();
+            });
+        });
+    }
+    handle(req, res) {
+        if (req.method !== 'GET')
+            return plain(res, 405, 'Method Not Allowed');
+        // DNS 리바인딩으로 남의 도메인이 이 포트를 가리키게 해도 Host가 달라서 막힌다
+        if (!this.hostAllowed(req.headers.host))
+            return plain(res, 403, 'Forbidden');
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const page = PAGE_PATH.exec(url.pathname);
+        const events = page ? null : EVENTS_PATH.exec(url.pathname);
+        const id = page?.[1] ?? events?.[1];
+        if (!id)
+            return plain(res, 404, 'Not Found');
+        const share = this.hooks.lookup(id);
+        if (!share || !tokenMatches(url.searchParams.get('t'), share.token)) {
+            return plain(res, 401, 'Unauthorized');
+        }
+        if (page)
+            return this.page(res);
+        if ((this.viewers.get(id) ?? 0) >= MAX_VIEWERS_PER_SHARE) {
+            return plain(res, 429, 'Too Many Viewers');
+        }
+        return this.stream(req, res, share.stream);
+    }
+    hostAllowed(host) {
+        if (!host)
+            return false;
+        const port = this.port;
+        return host === `127.0.0.1:${port}` || host === `localhost:${port}`;
+    }
+    page(res) {
+        const nonce = randomBytes(16).toString('base64');
+        res.writeHead(200, {
+            'Content-Type': 'text/html; charset=utf-8',
+            'Content-Security-Policy': [
+                "default-src 'none'",
+                `script-src 'nonce-${nonce}'`,
+                `style-src 'nonce-${nonce}'`,
+                "connect-src 'self'",
+                "base-uri 'none'",
+                "form-action 'none'",
+                "frame-ancestors 'none'",
+            ].join('; '),
+            ...PRIVATE_HEADERS,
+        });
+        res.end(renderViewerHtml(nonce, MAX_VIEWERS_PER_SHARE));
+    }
+    stream(req, res, stream) {
+        const lastId = Number.parseInt(String(req.headers['last-event-id'] ?? '0'), 10);
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream; charset=utf-8',
+            Connection: 'keep-alive',
+            ...PRIVATE_HEADERS,
+        });
+        res.write(': connected\n\n');
+        this.open.add(res);
+        this.viewers.set(stream.id, (this.viewers.get(stream.id) ?? 0) + 1);
+        this.hooks.onConnect?.(stream.id);
+        const keepalive = setInterval(() => res.write(': ping\n\n'), KEEPALIVE_MS);
+        keepalive.unref();
+        let detached = false;
+        let unsubscribe = () => { };
+        const detach = () => {
+            if (detached)
+                return;
+            detached = true;
+            clearInterval(keepalive);
+            unsubscribe();
+            this.open.delete(res);
+            const left = (this.viewers.get(stream.id) ?? 1) - 1;
+            if (left > 0)
+                this.viewers.set(stream.id, left);
+            else
+                this.viewers.delete(stream.id);
+            this.hooks.onDisconnect?.(stream.id);
+        };
+        req.on('close', detach);
+        res.on('close', detach);
+        const onFrame = (frame) => {
+            if (detached)
+                return;
+            if (res.writableLength > this.maxLiveBacklogBytes) {
+                res.destroy();
+                detach();
+                return;
+            }
+            res.write(sseFrame(frame));
+            if (frame.type === 'closed') {
+                res.end();
+                detach();
+            }
+        };
+        // 앞부분은 소켓이 비는 만큼씩 꺼내 쓴다. 다 따라잡으면 이벤트 루프로 돌아가지 않고 바로
+        // subscribe로 붙어서 그 사이에 poll이 끼지 않는다. subscribe가 상태와 통계를 다시 보내
+        // 따라잡는 동안 바뀐 것도 맞춘다. 기다리는 사이 공유가 종료되면 subscribe가 못 보낸 개수를
+        // closed에 실어 보낸다
+        let cursor = Number.isFinite(lastId) && lastId > 0 ? lastId : 0;
+        const pump = () => {
+            if (detached)
+                return;
+            while (!stream.isClosed) {
+                const { dropped, items } = stream.backlogAfter(cursor, REPLAY_CHUNK_BYTES);
+                if (dropped > 0) {
+                    res.write(sseFrame({ type: 'trimmed', dropped }));
+                    cursor += dropped;
+                }
+                if (items.length === 0)
+                    break;
+                for (const item of items) {
+                    cursor = item.seq;
+                    if (!res.write(sseFrame({ type: 'event', ...item }))) {
+                        res.once('drain', pump);
+                        return;
+                    }
+                }
+            }
+            unsubscribe = stream.subscribe(onFrame, cursor);
+            if (detached)
+                unsubscribe();
+        };
+        res.write(sseFrame({ type: 'state', status: stream.currentStatus }));
+        res.write(sseFrame({ type: 'stats', unknownLines: stream.unknownLines }));
+        pump();
+    }
+}
+/**
+ * 뷰어는 디스크에 아무것도 남기지 않아야 한다. 브라우저 캐시도 디스크다.
+ */
+const PRIVATE_HEADERS = {
+    'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
+    'X-Content-Type-Options': 'nosniff',
+};
+function plain(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'text/plain; charset=utf-8', ...PRIVATE_HEADERS });
+    res.end(body);
+}
+function tokenMatches(given, expected) {
+    if (!given)
+        return false;
+    const a = Buffer.from(given);
+    const b = Buffer.from(expected);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+function sseFrame(frame) {
+    switch (frame.type) {
+        case 'event':
+            return `id: ${frame.seq}\nevent: line\ndata: ${frame.json}\n\n`;
+        case 'stats':
+            return `event: stats\ndata: ${JSON.stringify({ unknownLines: frame.unknownLines })}\n\n`;
+        case 'state':
+            return `event: state\ndata: ${JSON.stringify({ status: frame.status })}\n\n`;
+        case 'closed':
+            return `event: closed\ndata: ${JSON.stringify({ reason: frame.reason, missed: frame.missed })}\n\n`;
+        case 'trimmed':
+            return `event: trimmed\ndata: ${JSON.stringify({ dropped: frame.dropped })}\n\n`;
+    }
+}
+//# sourceMappingURL=viewer.js.map

package/dist/src/peer/viewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer.js","sourceRoot":"","sources":["../../../src/peer/viewer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAE3D,8CAA8C;AAC9C,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,uDAAuD;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,CAAC;AAO7C;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IAOJ;IANX,MAAM,GAAkB,IAAI,CAAC;IAC7B,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3B,mBAAmB,CAAS;IAE7C,YACmB,KAAkB,EACnC,UAA+B,EAAE;QADhB,UAAK,GAAL,KAAK,CAAa;QAGnC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,IAAI,GAAG,CAAC;QACZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,4DAA4D;gBAC5D,kDAAkD;gBAClD,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3E,IAAI,CAAC,GAAG,CAAC,WAAW;wBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;oBAC1F,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;gBACvE,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACpC,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAED,IAAI;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAEvE,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE7E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEO,WAAW,CAAC,IAAwB;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,OAAO,IAAI,KAAK,aAAa,IAAI,EAAE,IAAI,IAAI,KAAK,aAAa,IAAI,EAAE,CAAC;IACtE,CAAC;IAEO,IAAI,CAAC,GAAmB;QAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,0BAA0B;YAC1C,yBAAyB,EAAE;gBACzB,oBAAoB;gBACpB,qBAAqB,KAAK,GAAG;gBAC7B,oBAAoB,KAAK,GAAG;gBAC5B,oBAAoB;gBACpB,iBAAiB;gBACjB,oBAAoB;gBACpB,wBAAwB;aACzB,CAAC,IAAI,CAAC,IAAI,CAAC;YACZ,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,MAAiB;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,kCAAkC;YAClD,UAAU,EAAE,YAAY;YACxB,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAC3E,SAAS,CAAC,KAAK,EAAE,CAAC;QAElB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,WAAW,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,IAAI,GAAG,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAQ,EAAE;YAC1C,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAClD,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC;QAEF,oDAAoD;QACpD,8DAA8D;QAC9D,0DAA0D;QAC1D,iBAAiB;QACjB,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,QAAQ;gBAAE,OAAO;YACrB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBAC3E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;oBAClD,MAAM,IAAI,OAAO,CAAC;gBACpB,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM;gBAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;oBAClB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;wBACrD,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;wBACxB,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;YACD,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,QAAQ;gBAAE,WAAW,EAAE,CAAC;QAC9B,CAAC,CAAC;QAEF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,EAAE,CAAC;IACT,CAAC;CACF;AAED;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,aAAa;IAChC,wBAAwB,EAAE,SAAS;CAC3B,CAAC;AAEX,SAAS,KAAK,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY;IAC9D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB,EAAE,QAAgB;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,OAAO;YACV,OAAO,OAAO,KAAK,CAAC,GAAG,wBAAwB,KAAK,CAAC,IAAI,MAAM,CAAC;QAClE,KAAK,OAAO;YACV,OAAO,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC;QAC3F,KAAK,OAAO;YACV,OAAO,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QAC/E,KAAK,QAAQ;YACX,OAAO,wBAAwB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QACtG,KAAK,SAAS;YACZ,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/src/peer/wire.d.ts

@@ -0,0 +1,90 @@
+import type { SignedRoster } from './roster.js';
+/**
+ * 데몬과 릴레이 사이 프레임. 한 WebSocket 글자 메시지가 JSON 하나다.
+ *
+ * 릴레이가 보는 건 보낸 기기, 받는 기기, 공유 id, 크기, 시각이다. `data`는 데몬끼리
+ * 봉인한 바이트를 base64url로 쓴 것이라 릴레이는 못 연다.
+ */
+export type HelloMode = 'member' | 'join';
+export type ClientFrame = {
+    t: 'hello';
+    team: string;
+    key: string;
+    mode: HelloMode;
+    sig: string;
+    roster?: SignedRoster;
+}
+/** ack가 false면 릴레이가 답을 안 보낸다. 공유 스트림 프레임처럼 자주 가는 것에 쓴다 */
+ | {
+    t: 'send';
+    id: number;
+    to: string;
+    data: string;
+    ack?: false;
+} | {
+    t: 'resolve';
+    id: number;
+    share: string;
+}
+/** 이 기기가 지금 연 공유 id 전부. 받을 때마다 통째로 바꾼다 */
+ | {
+    t: 'announce';
+    shares: string[];
+} | {
+    t: 'roster';
+    roster: SignedRoster;
+}
+/** join 모드 전용. 초대한 관리자에게 봉인한 요청 */
+ | {
+    t: 'join';
+    to: string;
+    data: string;
+};
+export type ServerFrame = {
+    t: 'challenge';
+    nonce: string;
+} | {
+    t: 'welcome';
+    roster: SignedRoster;
+    online: string[];
+}
+/** join 모드로 붙어 명단에 오르기를 기다리는 중 */
+ | {
+    t: 'pending';
+} | {
+    t: 'error';
+    code: RelayErrorCode;
+    message: string;
+} | {
+    t: 'recv';
+    from: string;
+    data: string;
+} | {
+    t: 'ack';
+    id: number;
+    ok: boolean;
+    error?: string;
+} | {
+    t: 'resolved';
+    id: number;
+    owner: string | null;
+} | {
+    t: 'roster';
+    roster: SignedRoster;
+} | {
+    t: 'presence';
+    key: string;
+    online: boolean;
+} | {
+    t: 'join';
+    from: string;
+    data: string;
+};
+export type RelayErrorCode = 'bad_frame' | 'bad_signature' | 'wrong_team' | 'not_member' | 'no_roster' | 'rate_limited';
+/** 명단에서 빠진 기기를 끊을 때 쓰는 WebSocket close 코드 */
+export declare const CLOSE_REMOVED = 4003;
+/** 핸드셰이크 실패 */
+export declare const CLOSE_REJECTED = 4001;
+/** hello에 서명할 글자. 릴레이가 준 nonce를 넣어 다른 접속의 서명을 다시 못 쓰게 한다 */
+export declare function helloSigned(team: string, nonce: string, mode: HelloMode): string;
+//# sourceMappingURL=wire.d.ts.map

package/dist/src/peer/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../src/peer/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD;;;;;GAKG;AAEH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE1C,MAAM,MAAM,WAAW,GACnB;IAAE,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,YAAY,CAAA;CAAE;AAChG,0DAA0D;GACxD;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,KAAK,CAAA;CAAE,GAChE;IAAE,CAAC,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC7C,0CAA0C;GACxC;IAAE,CAAC,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GACnC;IAAE,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AACvC,mCAAmC;GACjC;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,MAAM,WAAW,GACnB;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,CAAC,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE;AAC1D,kCAAkC;GAChC;IAAE,CAAC,EAAE,SAAS,CAAA;CAAE,GAChB;IAAE,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,CAAC,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnD;IAAE,CAAC,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACrC;IAAE,CAAC,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC/C;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,eAAe,GACf,YAAY,GACZ,YAAY,GACZ,WAAW,GACX,cAAc,CAAC;AAEnB,6CAA6C;AAC7C,eAAO,MAAM,aAAa,OAAO,CAAC;AAClC,eAAe;AACf,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAEhF"}

package/dist/src/peer/wire.js

@@ -0,0 +1,10 @@
+import { canonical } from './seal.js';
+/** 명단에서 빠진 기기를 끊을 때 쓰는 WebSocket close 코드 */
+export const CLOSE_REMOVED = 4003;
+/** 핸드셰이크 실패 */
+export const CLOSE_REJECTED = 4001;
+/** hello에 서명할 글자. 릴레이가 준 nonce를 넣어 다른 접속의 서명을 다시 못 쓰게 한다 */
+export function helloSigned(team, nonce, mode) {
+    return `gestalt-peer-relay-hello-v1\n${canonical({ team, nonce, mode })}`;
+}
+//# sourceMappingURL=wire.js.map

package/dist/src/peer/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../src/peer/wire.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA2CtC,6CAA6C;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAClC,eAAe;AACf,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,IAAe;IACtE,OAAO,gCAAgC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC5E,CAAC"}

package/dist/src/peer/ws.d.ts

@@ -0,0 +1,47 @@
+import { EventEmitter } from 'node:events';
+import type { IncomingMessage } from 'node:http';
+import type { Duplex } from 'node:stream';
+/** 메시지 하나의 상한. 넘으면 1009로 닫는다 */
+export declare const DEFAULT_MAX_MESSAGE_BYTES: number;
+export interface WsOptions {
+    /** 클라이언트는 보내는 프레임을 가리고(mask) 서버는 가린 프레임만 받는다 */
+    client: boolean;
+    maxMessageBytes?: number;
+}
+/**
+ * 연결 하나. 이벤트는 `message`(글자), `close`(코드, 이유), `pong`이다.
+ * `error`는 내보내지 않는다 — 소켓 오류는 1006 close로 바꿔 한 길로만 끝나게 한다.
+ */
+export declare class WsConnection extends EventEmitter {
+    private readonly socket;
+    private readonly options;
+    private buf;
+    private fragments;
+    private fragmentBytes;
+    private closed;
+    private closeSent;
+    private readonly maxMessageBytes;
+    constructor(socket: Duplex, options: WsOptions, head?: Buffer);
+    /** 소켓 버퍼에 밀려 있는 바이트 */
+    get bufferedAmount(): number;
+    get isOpen(): boolean;
+    send(text: string): boolean;
+    ping(): void;
+    close(code?: number, reason?: string): void;
+    /** 상대에게 알리지 않고 끊는다. 안 읽는 상대를 떼어낼 때 쓴다 */
+    terminate(code?: number, reason?: string): void;
+    private finish;
+    private writeFrame;
+    private onData;
+    private readFrame;
+    private onFrame;
+}
+/**
+ * http(s) 서버의 `upgrade` 이벤트에서 부른다. 핸드셰이크가 틀리면 400으로 닫고 null.
+ */
+export declare function acceptUpgrade(req: IncomingMessage, socket: Duplex, head: Buffer, options?: Omit<WsOptions, 'client'>): WsConnection | null;
+/** `ws://` 또는 `wss://`로 붙는다 */
+export declare function connectWs(url: string, options?: Omit<WsOptions, 'client'> & {
+    timeoutMs?: number;
+}): Promise<WsConnection>;
+//# sourceMappingURL=ws.d.ts.map

package/dist/src/peer/ws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../../../src/peer/ws.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAY1C,gCAAgC;AAChC,eAAO,MAAM,yBAAyB,QAAkB,CAAC;AASzD,MAAM,WAAW,SAAS;IACxB,gDAAgD;IAChD,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,qBAAa,YAAa,SAAQ,YAAY;IAS1C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B,OAAO,CAAC,GAAG,CAA2B;IACtC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAGtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,EACnC,IAAI,CAAC,EAAE,MAAM;IAgBf,uBAAuB;IACvB,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAK3B,IAAI,IAAI,IAAI;IAIZ,KAAK,CAAC,IAAI,SAAO,EAAE,MAAM,SAAK,GAAG,IAAI;IAiBrC,yCAAyC;IACzC,SAAS,CAAC,IAAI,SAAO,EAAE,MAAM,SAAK,GAAG,IAAI;IAKzC,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,MAAM;IAUd,OAAO,CAAC,SAAS;IA8CjB,OAAO,CAAC,OAAO;CAiDhB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAM,GACtC,YAAY,GAAG,IAAI,CAoBrB;AAED,+BAA+B;AAC/B,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,OAAO,CAAC,YAAY,CAAC,CA2CvB"}