@volter/tabnode 0.5.2 → 0.5.4

package/dist/assets/{runtime-worker-CqG62h2U.js → runtime-worker-DBtzjAkn.js}

@@ -17595,10 +17595,17 @@ var implementation$1 = function bind2(that) {
 var implementation = implementation$1;
 var functionBind = Function.prototype.bind || implementation;
 var functionCall = Function.prototype.call;
-var functionApply = Function.prototype.apply;
+var functionApply;
+var hasRequiredFunctionApply;
+function requireFunctionApply() {
+  if (hasRequiredFunctionApply) return functionApply;
+  hasRequiredFunctionApply = 1;
+  functionApply = Function.prototype.apply;
+  return functionApply;
+}
 var reflectApply = typeof Reflect !== "undefined" && Reflect && Reflect.apply;
 var bind$2 = functionBind;
-var $apply$1 = functionApply;
+var $apply$1 = requireFunctionApply();
 var $call$2 = functionCall;
 var $reflectApply = reflectApply;
 var actualApply = $reflectApply || bind$2.call($call$2, $apply$1);
@@ -17718,7 +17725,7 @@ var hasSymbols = requireHasSymbols()();
 var getProto = requireGetProto();
 var $ObjectGPO = requireObject_getPrototypeOf();
 var $ReflectGPO = requireReflect_getPrototypeOf();
-var $apply = functionApply;
+var $apply = requireFunctionApply();
 var $call = functionCall;
 var needsEval = {};
 var TypedArray = typeof Uint8Array === "undefined" || !getProto ? undefined$1 : getProto(Uint8Array);
@@ -18359,7 +18366,7 @@ function requireApplyBind() {
   if (hasRequiredApplyBind) return applyBind;
   hasRequiredApplyBind = 1;
   var bind3 = functionBind;
-  var $apply2 = functionApply;
+  var $apply2 = requireFunctionApply();
   var actualApply$1 = actualApply;
   applyBind = function applyBind2() {
     return actualApply$1(bind3, $apply2, arguments);
@@ -27123,6 +27130,10 @@ const stackOverrides = /* @__PURE__ */ new Map();
 const stackOverrideMap = {
   set(error, override) {
     stackOverrides.set(error, override);
+    const nativeSetTimeout = globalThis.__browserRuntimeNativeSetTimeout ?? setTimeout;
+    nativeSetTimeout.call(globalThis, () => {
+      if (stackOverrides.get(error) === override) stackOverrides.delete(error);
+    }, 0);
     return this;
   },
   get: (error) => stackOverrides.get(error),
@@ -75832,17 +75843,27 @@ function __substrateCallSiteFileNames() {
     }
     return namer;
   };
-  const overriding = (error, sites) => {
-    const override = error !== null && typeof error === "object" ? stackOverrides.get(error) : void 0;
-    if (override) {
-      stackOverrides.delete(error);
-      return override(error, sites.map(named));
-    }
-    if (typeof guestPrepare === "function") return namerFor(guestPrepare)(error, sites);
-    return `${Error.prototype.toString.call(error)}${sites.map((site) => `
+  const overridingFor = (guest) => {
+    const known = typeof guest === "function" ? overridings.get(guest) : overridingNone;
+    if (known) return known;
+    const overriding = (error, sites) => {
+      const override = error !== null && typeof error === "object" ? stackOverrides.get(error) : void 0;
+      if (override) {
+        stackOverrides.delete(error);
+        return override(error, sites.map(named));
+      }
+      if (typeof guest === "function") return namerFor(guest)(error, sites);
+      return `${Error.prototype.toString.call(error)}${sites.map((site) => `
     at ${String(site)}`).join("")}`;
+    };
+    guests.set(overriding, guest);
+    if (typeof guest === "function") overridings.set(guest, overriding);
+    else overridingNone = overriding;
+    return overriding;
   };
-  const get2 = () => stackOverrides.size > 0 ? overriding : typeof guestPrepare === "function" ? namerFor(guestPrepare) : guestPrepare;
+  const overridings = /* @__PURE__ */ new WeakMap();
+  let overridingNone;
+  const get2 = () => stackOverrides.size > 0 ? overridingFor(guestPrepare) : typeof guestPrepare === "function" ? namerFor(guestPrepare) : guestPrepare;
   get2.__substrateNamesFrames = true;
   defineOnHost(Error, "prepareStackTrace", {
     get: get2,

package/dist/index.mjs

@@ -27290,6 +27290,10 @@ const stackOverrides = /* @__PURE__ */ new Map();
 const stackOverrideMap = {
   set(error, override) {
     stackOverrides.set(error, override);
+    const nativeSetTimeout = globalThis.__browserRuntimeNativeSetTimeout ?? setTimeout;
+    nativeSetTimeout.call(globalThis, () => {
+      if (stackOverrides.get(error) === override) stackOverrides.delete(error);
+    }, 0);
     return this;
   },
   get: (error) => stackOverrides.get(error),
@@ -35513,17 +35517,27 @@ function __substrateCallSiteFileNames() {
     }
     return namer;
   };
-  const overriding = (error, sites) => {
-    const override = error !== null && typeof error === "object" ? stackOverrides.get(error) : void 0;
-    if (override) {
-      stackOverrides.delete(error);
-      return override(error, sites.map(named));
-    }
-    if (typeof guestPrepare === "function") return namerFor(guestPrepare)(error, sites);
-    return `${Error.prototype.toString.call(error)}${sites.map((site) => `
+  const overridingFor = (guest) => {
+    const known = typeof guest === "function" ? overridings.get(guest) : overridingNone;
+    if (known) return known;
+    const overriding = (error, sites) => {
+      const override = error !== null && typeof error === "object" ? stackOverrides.get(error) : void 0;
+      if (override) {
+        stackOverrides.delete(error);
+        return override(error, sites.map(named));
+      }
+      if (typeof guest === "function") return namerFor(guest)(error, sites);
+      return `${Error.prototype.toString.call(error)}${sites.map((site) => `
     at ${String(site)}`).join("")}`;
-  };
-  const get2 = () => stackOverrides.size > 0 ? overriding : typeof guestPrepare === "function" ? namerFor(guestPrepare) : guestPrepare;
+    };
+    guests.set(overriding, guest);
+    if (typeof guest === "function") overridings.set(guest, overriding);
+    else overridingNone = overriding;
+    return overriding;
+  };
+  const overridings = /* @__PURE__ */ new WeakMap();
+  let overridingNone;
+  const get2 = () => stackOverrides.size > 0 ? overridingFor(guestPrepare) : typeof guestPrepare === "function" ? namerFor(guestPrepare) : guestPrepare;
   get2.__substrateNamesFrames = true;
   defineOnHost(Error, "prepareStackTrace", {
     get: get2,
@@ -35548,7 +35562,7 @@ class WorkerRuntime {
     this.worker = new Worker(
       new URL(
         /* @vite-ignore */
-        "/assets/runtime-worker-CqG62h2U.js",
+        "/assets/runtime-worker-DBtzjAkn.js",
         import.meta.url
       ),
       { type: "module" }
@@ -37408,11 +37422,15 @@ function __substrateListenForUpgrades(bridge) {
       const key = uint8ToBase64(crypto.getRandomValues(new Uint8Array(16)));
       const protocols = Array.isArray(data2.protocols) ? data2.protocols : [];
       void __upgradeOverLoopback(port, "GET", url2.pathname + url2.search, {
-        Host: url2.host,
+        // Host is the authority the client addressed, as an HTTP request's is
+        Host: typeof data2.host === "string" && /^(?:\[[0-9a-f:.]+\]|[a-z0-9.-]+)(?::[0-9]{1,5})?$/iu.test(data2.host) ? data2.host : url2.host,
         Upgrade: "websocket",
         "Sec-WebSocket-Version": "13",
         "Sec-WebSocket-Key": key,
-        ...protocols.length ? { "Sec-WebSocket-Protocol": protocols.join(", ") } : {}
+        ...protocols.length ? { "Sec-WebSocket-Protocol": protocols.join(", ") } : {},
+        // A browser sends Origin on every WebSocket handshake, and a server's
+        // check of it is how it refuses sockets from pages it did not serve.
+        ...typeof data2.origin === "string" && /^https?:\/\/[^/]+$/u.test(data2.origin) ? { Origin: data2.origin } : {}
       }).then((result) => {
         if (result.statusCode !== 101 || !result.socket) {
           channel.postMessage({ type: "close", targetClient: data2.clientId, code: 1006, reason: "upgrade refused" });

package/dist/stack-overrides.d.ts

@@ -9,7 +9,7 @@
  * registration; `Error.prepareStackTrace` is the door it has. Every process's
  * `internal/errors` writes here, and the realm's hook reads here, so the
  * override reaches V8 whichever process set it. An entry is consumed by the
- * stack it formats, as Node's is.
+ * stack it formats, as Node's is, and lapses at the end of the task that set it.
  */
 export type StackOverride = (error: unknown, sites: unknown[]) => unknown;
 export declare const stackOverrides: Map<object, StackOverride>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/tabnode",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "description": "Node's own library, in a browser tab.",
   "type": "module",
   "license": "MIT",

package/src/runtime.ts

@@ -2942,13 +2942,25 @@ function __substrateCallSiteFileNames(): void {
   // override and every other error what it would have had: the guest's
   // function, else V8's own text, which is the error and one `at` line
   // per call site. Otherwise V8 is handed exactly what the guest set.
-  const overriding: Prepare = (error, sites) => {
-    const override = error !== null && typeof error === 'object' ? stackOverrides.get(error) : undefined;
-    if (override) { stackOverrides.delete(error as object); return override(error, sites.map(named)); }
-    if (typeof guestPrepare === 'function') return namerFor(guestPrepare as Prepare)(error, sites);
-    return `${Error.prototype.toString.call(error)}${sites.map(site => `\n    at ${String(site)}`).join('')}`;
+  const overridingFor = (guest: unknown): Prepare => {
+    const known = typeof guest === 'function' ? overridings.get(guest) : overridingNone;
+    if (known) return known;
+    const overriding: Prepare = (error, sites) => {
+      const override = error !== null && typeof error === 'object' ? stackOverrides.get(error) : undefined;
+      if (override) { stackOverrides.delete(error as object); return override(error, sites.map(named)); }
+      if (typeof guest === 'function') return namerFor(guest as Prepare)(error, sites);
+      return `${Error.prototype.toString.call(error)}${sites.map(site => `\n    at ${String(site)}`).join('')}`;
+    };
+    // A guest that saves the hook and restores it later restores the function
+    // it read; that stands for the guest's own, as a namer does.
+    guests.set(overriding, guest);
+    if (typeof guest === 'function') overridings.set(guest, overriding);
+    else overridingNone = overriding;
+    return overriding;
   };
-  const get = () => (stackOverrides.size > 0 ? overriding
+  const overridings = new WeakMap<object, Prepare>();
+  let overridingNone: Prepare | undefined;
+  const get = () => (stackOverrides.size > 0 ? overridingFor(guestPrepare)
     : typeof guestPrepare === 'function' ? namerFor(guestPrepare as Prepare) : guestPrepare);
   (get as { __substrateNamesFrames?: boolean }).__substrateNamesFrames = true;
   defineOnHost(Error, 'prepareStackTrace', {

package/src/server-bridge.ts

@@ -123,6 +123,10 @@ interface UpgradeSignal {
   protocols?: string[];
   /** `"none"` asks for a byte pipe; anything else, or nothing, is a WebSocket. */
   framing?: "websocket" | "none";
+  /** The origin of the page that opened the socket, which a browser sends on every handshake. */
+  origin?: string;
+  /** The authority the client addressed, its handshake's Host; the engine's own URL names the port. */
+  host?: string;
   payload?: string | ArrayBuffer;
   code?: number;
   reason?: string;
@@ -348,11 +352,15 @@ function __substrateListenForUpgrades(bridge: ServerBridge): BroadcastChannel |
       // with the socket, which is what the real `ws` takes over. What comes
       // back here is the client's end of that same connection.
       void __upgradeOverLoopback(port, "GET", url2.pathname + url2.search, {
-        Host: url2.host,
+        // Host is the authority the client addressed, as an HTTP request's is
+        Host: typeof data2.host === "string" && /^(?:\[[0-9a-f:.]+\]|[a-z0-9.-]+)(?::[0-9]{1,5})?$/iu.test(data2.host) ? data2.host : url2.host,
         Upgrade: "websocket",
         "Sec-WebSocket-Version": "13",
         "Sec-WebSocket-Key": key,
         ...(protocols.length ? { "Sec-WebSocket-Protocol": protocols.join(", ") } : {}),
+        // A browser sends Origin on every WebSocket handshake, and a server's
+        // check of it is how it refuses sockets from pages it did not serve.
+        ...(typeof data2.origin === "string" && /^https?:\/\/[^/]+$/u.test(data2.origin) ? { Origin: data2.origin } : {}),
       }).then((result) => {
         if (result.statusCode !== 101 || !result.socket) {
           channel.postMessage({ type: "close", targetClient: data2.clientId, code: 1006, reason: "upgrade refused" });

package/src/stack-overrides.ts

@@ -9,7 +9,7 @@
  * registration; `Error.prepareStackTrace` is the door it has. Every process's
  * `internal/errors` writes here, and the realm's hook reads here, so the
  * override reaches V8 whichever process set it. An entry is consumed by the
- * stack it formats, as Node's is.
+ * stack it formats, as Node's is, and lapses at the end of the task that set it.
  */
 export type StackOverride = (error: unknown, sites: unknown[]) => unknown;
 
@@ -17,7 +17,16 @@ export const stackOverrides = new Map<object, StackOverride>();
 
 /** A WeakMap-shaped view of the table, which is what `internal/errors` holds. */
 export const stackOverrideMap = {
-  set(this: object, error: object, override: StackOverride) { stackOverrides.set(error, override); return this; },
+  set(this: object, error: object, override: StackOverride) {
+    stackOverrides.set(error, override);
+    // Node's map is weak, so an override whose stack is never read costs nothing
+    // there. Here it would hold its error and keep every stack on the fallback
+    // formatter; Node's readers read in the same task, so it lapses after it.
+    // The realm's own timer: a guest's would count as that guest's work.
+    const nativeSetTimeout = (globalThis as { __browserRuntimeNativeSetTimeout?: typeof setTimeout }).__browserRuntimeNativeSetTimeout ?? setTimeout;
+    nativeSetTimeout.call(globalThis, () => { if (stackOverrides.get(error) === override) stackOverrides.delete(error); }, 0);
+    return this;
+  },
   get: (error: object) => stackOverrides.get(error),
   has: (error: object) => stackOverrides.has(error),
   delete: (error: object) => stackOverrides.delete(error),