@tonalisk-labs/kit 1.0.1 → 1.0.6

package/dist/testing/src/stack/socks.js

@@ -0,0 +1,195 @@
+// The host's end of the Linux image's shared browsers: a SOCKS5 server on the host's address on
+// their network. Playwright's launch server, unlike its run server, carries no tunnel to the host's
+// loopback (exposeNetwork), so each browser is launched with this server as its proxy. With a SOCKS
+// proxy, Playwright's Chromium resolves no name itself, so every request a browser makes, its
+// page's and its context's own, comes here: the loopback's go to the host's, and the rest out, as
+// a contained browser's went out before.
+import { once } from 'node:events';
+import { connect, createServer, isIP } from 'node:net';
+import { codeOf } from '../unknown.js';
+const VERSION = 5;
+const NO_AUTHENTICATION = 0;
+const NO_ACCEPTABLE_METHOD = 255;
+const CONNECT = 1;
+const TYPE = { ipv4: 1, name: 3, ipv6: 4 };
+const REPLY = {
+    succeeded: 0,
+    failed: 1,
+    networkUnreachable: 3,
+    hostUnreachable: 4,
+    refused: 5,
+    commandUnsupported: 7,
+    addressUnsupported: 8,
+};
+/** IPv6's loopback, as `ipv6Of` writes it. */
+const IPV6_LOOPBACK = '0:0:0:0:0:0:0:1';
+/** The names and addresses the host's loopback answers: Playwright's `<loopback>`, and all of
+ *  127.0.0.0/8, which is the loopback too. */
+export const onLoopback = (host) => host === 'localhost' ||
+    host.endsWith('.localhost') ||
+    (isIP(host) === 4 && host.startsWith('127.')) ||
+    host === '::1' ||
+    host === IPV6_LOOPBACK;
+/** Where a request goes from the host: a name on the loopback to 127.0.0.1, where every edge
+ *  listens and macOS puts names under localhost; any other as it was asked. Behind a SOCKS proxy
+ *  Playwright launches Chromium with `--host-resolver-rules=MAP * ~NOTFOUND`, so nothing else
+ *  reaches out but through here, and the Stripe sandbox's journeys go to checkout.stripe.com. */
+export const routeOf = ({ host, port }) => onLoopback(host) && isIP(host) === 0 ? { host: '127.0.0.1', port } : { host, port };
+/** A reply with no bound address, which a browser never reads. */
+const reply = (code) => Buffer.from([VERSION, code, 0, TYPE.ipv4, 0, 0, 0, 0, 0, 0]);
+/** Resolves once `socket` has more to read, or is gone. */
+const stirred = async (socket) => {
+    const { promise, resolve } = Promise.withResolvers();
+    const done = () => {
+        socket.off('readable', done).off('close', done);
+        resolve(true);
+    };
+    socket.on('readable', done).on('close', done);
+    return promise;
+};
+/** The next `count` bytes from `socket`, once they have come; a failure if it ends first. */
+const bytesOf = async (socket, count) => {
+    if (count === 0) {
+        return Buffer.alloc(0);
+    }
+    const chunk = socket.read(count);
+    if (Buffer.isBuffer(chunk) && chunk.length === count) {
+        return chunk;
+    }
+    if (Buffer.isBuffer(chunk) || socket.readableEnded || socket.destroyed) {
+        throw new Error('the client ended its SOCKS message part way');
+    }
+    await stirred(socket);
+    return bytesOf(socket, count);
+};
+/** The client's greeting, answered: it must offer to go without authentication. */
+const greet = async (client) => {
+    const [version, count = 0] = await bytesOf(client, 2);
+    if (version !== VERSION) {
+        throw new Error(`a SOCKS${String(version)} greeting, not SOCKS5`);
+    }
+    const methods = await bytesOf(client, count);
+    if (!methods.includes(NO_AUTHENTICATION)) {
+        client.end(Buffer.from([VERSION, NO_ACCEPTABLE_METHOD]));
+        throw new Error('the client offered no way without authentication');
+    }
+    client.write(Buffer.from([VERSION, NO_AUTHENTICATION]));
+};
+/** Sixteen bytes as an IPv6 address's eight groups, written out whole. */
+const ipv6Of = (bytes) => Array.from({ length: 8 }, (_unused, group) => bytes.readUInt16BE(group * 2).toString(16)).join(':');
+/** The address a request names, by its type; undefined for a type SOCKS5 lacks. */
+const hostOf = async (client, type) => {
+    if (type === TYPE.ipv4) {
+        const octets = await bytesOf(client, 4);
+        return [...octets].join('.');
+    }
+    if (type === TYPE.ipv6) {
+        return ipv6Of(await bytesOf(client, 16));
+    }
+    if (type === TYPE.name) {
+        const [length = 0] = await bytesOf(client, 1);
+        const name = await bytesOf(client, length);
+        return name.toString('latin1');
+    }
+    return undefined;
+};
+/** The destination of the client's CONNECT; any other command, or address type, is refused. */
+const destinationOf = async (client) => {
+    const [, command, , type] = await bytesOf(client, 4);
+    if (command !== CONNECT) {
+        client.end(reply(REPLY.commandUnsupported));
+        throw new Error(`SOCKS command ${String(command)}, which this server doesn't serve`);
+    }
+    const host = await hostOf(client, type);
+    if (host === undefined) {
+        client.end(reply(REPLY.addressUnsupported));
+        throw new Error(`SOCKS address type ${String(type)}`);
+    }
+    const port = await bytesOf(client, 2);
+    return { host, port: port.readUInt16BE(0) };
+};
+/** The reply for a connection that failed, by its error's code. */
+const failureOf = (error) => {
+    const code = codeOf(error);
+    if (code === 'ECONNREFUSED') {
+        return REPLY.refused;
+    }
+    if (code === 'ENETUNREACH') {
+        return REPLY.networkUnreachable;
+    }
+    return code === 'EHOSTUNREACH' || code === 'ENOTFOUND' ? REPLY.hostUnreachable : REPLY.failed;
+};
+/** Each side's end ends the other's writing, through the pipes, and a side closed or broken
+ *  closes the other, so neither outlives its pair. */
+const joined = (client, upstream) => {
+    for (const [one, other] of [
+        [client, upstream],
+        [upstream, client],
+    ]) {
+        const end = () => {
+            other.destroy();
+        };
+        one.on('error', end).on('close', end);
+    }
+    client.pipe(upstream);
+    upstream.pipe(client);
+};
+/** Serves one client: its greeting, its CONNECT, then its bytes both ways. */
+const serve = async (client) => {
+    await greet(client);
+    const destination = routeOf(await destinationOf(client));
+    const upstream = connect({ port: destination.port, host: destination.host, allowHalfOpen: true });
+    // A browser that gives up first leaves no connection waiting on the operating system's timeout.
+    client.once('close', () => {
+        upstream.destroy();
+    });
+    try {
+        await once(upstream, 'connect');
+    }
+    catch (error) {
+        client.end(reply(failureOf(error)));
+        return;
+    }
+    client.write(reply(REPLY.succeeded));
+    joined(client, upstream);
+};
+/** A SOCKS5 server on `host`, serving only clients from `peer`, the browsers' own address: any
+ *  other is closed unanswered, as it may reach the host's loopback through it. */
+export const startSocks = async ({ host, peer, }) => {
+    const open = new Set();
+    // Half open, so a side that has said all it will still hears the other's answer.
+    const server = createServer({ allowHalfOpen: true }, (client) => {
+        if (client.remoteAddress !== peer) {
+            client.destroy();
+            return;
+        }
+        open.add(client);
+        // A client that resets part way is closed, never an error the host's process throws.
+        client
+            .on('error', () => {
+            client.destroy();
+        })
+            .once('close', () => {
+            open.delete(client);
+        });
+        // A broken greeting or a client gone part way ends that client alone.
+        serve(client).catch(() => {
+            client.destroy();
+        });
+    });
+    server.listen(0, host);
+    await once(server, 'listening');
+    const address = server.address();
+    const port = typeof address === 'object' && address !== null ? address.port : 0;
+    return {
+        port,
+        stop: async () => {
+            for (const client of open) {
+                client.destroy();
+            }
+            server.close();
+            await once(server, 'close');
+        },
+    };
+};
+//# sourceMappingURL=socks.js.map

package/dist/testing/src/stack/socks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socks.js","sourceRoot":"","sources":["../../../../testing/src/stack/socks.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,oGAAoG;AACpG,oGAAoG;AACpG,8FAA8F;AAC9F,kGAAkG;AAClG,yCAAyC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAe,MAAM,UAAU,CAAC;AAEpE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AASvC,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAC;AACpD,MAAM,KAAK,GAAG;IACZ,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;IACT,kBAAkB,EAAE,CAAC;IACrB,eAAe,EAAE,CAAC;IAClB,OAAO,EAAE,CAAC;IACV,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,CAAC;CACb,CAAC;AAEX,8CAA8C;AAC9C,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC;8CAC8C;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAClD,IAAI,KAAK,WAAW;IACpB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK;IACd,IAAI,KAAK,aAAa,CAAC;AAEzB;;;iGAGiG;AACjG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAe,EAAe,EAAE,CAClE,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAEtF,kEAAkE;AAClE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CACrC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAE/D,2DAA2D;AAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAoB,EAAE;IACzD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,aAAa,EAAW,CAAC;IAC9D,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,6FAA6F;AAC7F,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,KAAa,EAAmB,EAAE;IACvE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,KAAK,GAAY,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;IACpD,MAAM,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CACvC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5F,GAAG,CACJ,CAAC;AAEJ,mFAAmF;AACnF,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAE,IAAwB,EAA+B,EAAE;IAC7F,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,aAAa,GAAG,KAAK,EAAE,MAAc,EAAwB,EAAE;IACnE,MAAM,CAAC,EAAE,OAAO,EAAE,AAAD,EAAG,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC,CAAC;AAEF,mEAAmE;AACnE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,kBAAkB,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AAChG,CAAC,CAAC;AAEF;sDACsD;AACtD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAQ,EAAE;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;QACzB,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClB,CAAC,QAAQ,EAAE,MAAM,CAAC;KACV,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,GAAS,EAAE;YACrB,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;IACpD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,gGAAgG;IAChG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACxB,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3B,CAAC,CAAC;AAOF;kFACkF;AAClF,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,EAC/B,IAAI,EACJ,IAAI,GAIL,EAAkB,EAAE;IACnB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,iFAAiF;IACjF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;QAC9D,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,qFAAqF;QACrF,MAAM;aACH,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAChB,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC;aACD,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACL,sEAAsE;QACtE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACvB,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/testing/src/stack/stall.d.ts

@@ -0,0 +1,36 @@
+/** The clock a stall is read on, and its alarm, which `after`'s answer cancels; a test's is its
+ *  own. */
+export interface Clock {
+    readonly now: () => number;
+    readonly after: (ms: number, ring: () => void) => () => void;
+}
+/** How waits are bounded: the stillness they fail after, on its clock. */
+export interface Stillness {
+    readonly stall: number;
+    readonly clock: Clock;
+}
+export declare const STILLNESS: Stillness;
+/** What a stalled wait says: what stood still, and who held and waited for it. */
+export interface Still {
+    readonly what: string;
+    readonly named: () => string;
+}
+/** One resource's watch over its waits: its moves, and its waits, bounded by them. */
+export interface Watch {
+    /** A grant or a give: the resource changed hands. */
+    readonly moved: () => void;
+    /** Counts a wait from now, which `fail` ends should the resource stand still; the answer is
+     *  called once the wait ends, granted or not. */
+    readonly waiting: (fail: (error: Error) => void) => () => void;
+    /** Counts a holder, by its test's deadline, until it lets go; its test may move the deadline. */
+    readonly holding: (deadline: number | undefined) => Held;
+}
+/** A holder the watch counts: its deadline moved, or let go. */
+export interface Held {
+    readonly renew: (deadline: number | undefined) => void;
+    readonly release: () => void;
+}
+/** A resource's watch: one alarm while any wait is pending, measuring from the later of its last
+ *  move and when its waits began. A wait costs a set entry, so thousands queue as cheaply as one. */
+export declare const watchOf: (stillness: Stillness, still: Still) => Watch;
+//# sourceMappingURL=stall.d.ts.map

package/dist/testing/src/stack/stall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall.d.ts","sourceRoot":"","sources":["../../../../testing/src/stack/stall.ts"],"names":[],"mappings":"AASA;WACW;AACX,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CAC9D;AAeD,0EAA0E;AAC1E,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,eAAO,MAAM,SAAS,EAAE,SAA4C,CAAC;AAErE,kFAAkF;AAClF,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED,sFAAsF;AACtF,MAAM,WAAW,KAAK;IACpB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B;qDACiD;IACjD,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IAC/D,iGAAiG;IACjG,QAAQ,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;CAC1D;AAED,gEAAgE;AAChE,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAsCD;qGACqG;AACrG,eAAO,MAAM,OAAO,cAAe,SAAS,SAAS,KAAK,KAAG,KA8C5D,CAAC"}

package/dist/testing/src/stack/stall.js

@@ -0,0 +1,93 @@
+// The bound on every hold's wait: a CPU turn, a stack lock, a seat. Waits fail once nothing they
+// wait among has changed hands for a while and every holder is past its test's deadline, naming
+// who holds what and by when: a queue that moves, or a long test inside its own timeout, never
+// trips it, and a holder that outlives its test is a leak.
+/** How long a hold's wait may see nothing change hands; and for a holder that names no deadline,
+ *  as a hold outside a test, how long it may keep it still. */
+const STALL_MS = 600_000;
+/** Wall-clock time, as a holder's deadline is: its test's start, plus the hold waits it isn't
+ *  charged, plus its timeout (control.ts). */
+const WALL = {
+    now: () => Date.now(),
+    after: (ms, ring) => {
+        // An alarm never holds its process open: a wait still pending keeps it open itself.
+        const timer = setTimeout(ring, ms).unref();
+        return () => {
+            clearTimeout(timer);
+        };
+    },
+};
+export const STILLNESS = { stall: STALL_MS, clock: WALL };
+/** When the resource's waits may fail: once still for the stall, and past every holder's deadline,
+ *  a holder that names none keeping it still for the stall alone. */
+const dueOf = ({ stall }, alarm) => Math.max(alarm.at + stall, ...[...alarm.holders].map(({ deadline }) => deadline ?? alarm.at + stall));
+/** Rings the stall: re-armed for the rest while the resource moved, or a holder is inside its
+ *  deadline, else every pending wait fails, as all wait on the same stillness. */
+const ringOf = (stillness, still, alarm) => () => {
+    const { stall, clock } = stillness;
+    alarm.cancel = undefined;
+    if (alarm.failing.size === 0) {
+        return;
+    }
+    const left = dueOf(stillness, alarm) - clock.now();
+    if (left > 0) {
+        alarm.cancel = clock.after(left, ringOf(stillness, still, alarm));
+        return;
+    }
+    const seconds = String(Math.round(stall / 1000));
+    const past = `${still.what} changed hands in ${seconds} s, every holder past its deadline`;
+    const error = new Error(`${past}: ${still.named()}`);
+    for (const fail of alarm.failing) {
+        fail(error);
+    }
+};
+/** A resource's watch: one alarm while any wait is pending, measuring from the later of its last
+ *  move and when its waits began. A wait costs a set entry, so thousands queue as cheaply as one. */
+export const watchOf = (stillness, still) => {
+    const { stall, clock } = stillness;
+    const alarm = {
+        at: clock.now(),
+        cancel: undefined,
+        failing: new Set(),
+        holders: new Set(),
+    };
+    const ring = ringOf(stillness, still, alarm);
+    return {
+        moved: () => {
+            alarm.at = clock.now();
+        },
+        holding: (deadline) => {
+            const holder = { deadline };
+            alarm.holders.add(holder);
+            return {
+                renew: (moved) => {
+                    holder.deadline = moved;
+                    // An earlier deadline brings the stall's check forward; a later one the check re-arms for.
+                    if (alarm.cancel !== undefined) {
+                        alarm.cancel();
+                        alarm.cancel = undefined;
+                        ring();
+                    }
+                },
+                release: () => {
+                    alarm.holders.delete(holder);
+                },
+            };
+        },
+        waiting: (fail) => {
+            if (alarm.failing.size === 0) {
+                alarm.at = clock.now();
+            }
+            alarm.failing.add(fail);
+            alarm.cancel ??= clock.after(stall, ring);
+            return () => {
+                alarm.failing.delete(fail);
+                if (alarm.failing.size === 0 && alarm.cancel !== undefined) {
+                    alarm.cancel();
+                    alarm.cancel = undefined;
+                }
+            };
+        },
+    };
+};
+//# sourceMappingURL=stall.js.map

package/dist/testing/src/stack/stall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall.js","sourceRoot":"","sources":["../../../../testing/src/stack/stall.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gGAAgG;AAChG,+FAA+F;AAC/F,2DAA2D;AAE3D;+DAC+D;AAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC;AASzB;8CAC8C;AAC9C,MAAM,IAAI,GAAU;IAClB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QAClB,oFAAoF;QACpF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3C,OAAO,GAAG,EAAE;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;IACJ,CAAC;CACF,CAAC;AAQF,MAAM,CAAC,MAAM,SAAS,GAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAgCrE;qEACqE;AACrE,MAAM,KAAK,GAAG,CAAC,EAAE,KAAK,EAAa,EAAE,KAAY,EAAU,EAAE,CAC3D,IAAI,CAAC,GAAG,CACN,KAAK,CAAC,EAAE,GAAG,KAAK,EAChB,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,CAC1E,CAAC;AAEJ;kFACkF;AAClF,MAAM,MAAM,GAAG,CAAC,SAAoB,EAAE,KAAY,EAAE,KAAY,EAAE,EAAE,CAAC,GAAS,EAAE;IAC9E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IACnC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IACnD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,qBAAqB,OAAO,oCAAoC,CAAC;IAC3F,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;qGACqG;AACrG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,SAAoB,EAAE,KAAY,EAAS,EAAE;IACnE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IACnC,MAAM,KAAK,GAAU;QACnB,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,OAAO,EAAE,IAAI,GAAG,EAAE;KACnB,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YACpB,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC;YAC5B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO;gBACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;oBACf,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;oBACxB,2FAA2F;oBAC3F,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC/B,KAAK,CAAC,MAAM,EAAE,CAAC;wBACf,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;wBACzB,IAAI,EAAE,CAAC;oBACT,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE;oBACZ,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACzB,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,GAAG,EAAE;gBACV,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC3D,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tonalisk-labs/kit",
-  "version": "1.0.1",
+  "version": "1.0.6",
   "description": "The shared base of the tonalisk-labs sites: the E2E harness, the theme, and the rules every repo extends.",
   "keywords": [
     "astro",
@@ -86,10 +86,10 @@
   "dependencies": {
     "@tailwindcss/node": "4.3.3",
     "axe-core": "4.14.0",
-    "lighthouse": "13.5.0",
+    "lighthouse": "13.6.0",
     "oxc-parser": "0.153.0",
     "parse5": "8.0.1",
-    "puppeteer-core": "25.14.0",
+    "puppeteer-core": "25.16.0",
     "robots-parser": "3.0.1",
     "satteri": "0.10.5",
     "sax": "1.6.1",
@@ -102,7 +102,7 @@
     "@types/hast": "3.0.5",
     "@types/node": "26.6.4",
     "@types/sax": "1.2.7",
-    "astro": "7.3.8",
+    "astro": "7.4.9",
     "knip": "6.41.0",
     "oxfmt": "0.72.0",
     "oxlint": "1.87.0",

package/testing/src/config-coverage.ts

@@ -2,8 +2,9 @@ import { readFileSync } from 'node:fs';
 
 import { isObject } from './unknown.ts';
 
-/** A header line of a spec naming the configuration keys it proves, comma separated. */
-const COVERS = /^\s*(?:\/\/|\*)\s*Covers:\s*(?<keys>.+)$/gmu;
+/** A header line of a spec naming the configuration keys it proves, comma separated. Its blanks
+ *  are spaces and tabs only, so it never reaches the next line, and it reads in linear time. */
+const COVERS = /^[ \t]*(?:\/\/|\*)[ \t]*Covers:[ \t]*(?<keys>\S.*)$/gmu;
 
 /** The keys a spec's header claims, as dotted paths: `limits.max_open_notes`. */
 export const claimsIn = (source: string): string[] =>