@yuneta/gobj-js 7.26.25 → 7.26.27

package/dist/gobj-js.iife.js

@@ -980,11 +980,14 @@ var gobjJs = (function(exports) {
 		if (DTP_IS_NUMBER(type)) return typeof value === "number" || typeof value === "boolean";
 		return true;
 	}
+	function is_int64_number(value) {
+		return value >= -0x8000000000000000 && value < 0x8000000000000000;
+	}
 	function shape_of_value(value) {
 		if (is_array(value)) return "an array";
 		if (is_object(value)) return "an object";
 		if (is_string(value)) return REFUSED_TEXT;
-		if (typeof value === "number") return Number.isInteger(value) && Math.abs(value) <= 0x8000000000000000 ? "an integer" : "a real";
+		if (typeof value === "number") return Number.isInteger(value) && is_int64_number(value) ? "an integer" : "a real";
 		if (typeof value === "boolean") return "a boolean";
 		return "null";
 	}
@@ -1005,7 +1008,7 @@ var gobjJs = (function(exports) {
 			value: value ? 1 : 0,
 			refused: null
 		};
-		if (!(value >= -0x8000000000000000 && value <= 0x8000000000000000)) return {
+		if (!is_int64_number(value)) return {
 			value: void 0,
 			refused: "a number out of its range"
 		};
@@ -1070,8 +1073,13 @@ var gobjJs = (function(exports) {
 				value: n !== 0n,
 				refused: null
 			};
+			const v = Number(n);
+			if (!is_int64_number(v)) return {
+				value: void 0,
+				refused: "a number out of its range"
+			};
 			return {
-				value: Number(n),
+				value: v,
 				refused: null
 			};
 		}
@@ -1130,6 +1138,16 @@ var gobjJs = (function(exports) {
 	*  undefined, or an empty text given to a number).
 	***************************************************************************/
 	function command_parameter_from_json(type, value) {
+		try {
+			return parameter_from_json(type, value);
+		} catch (e) {
+			return {
+				value: void 0,
+				refused: NO_JSON_TEXT
+			};
+		}
+	}
+	function parameter_from_json(type, value) {
 		if (value === void 0 || value === null) {
 			if (DTP_IS_JSON(type) && value === null) return {
 				value: null,
@@ -1188,31 +1206,63 @@ var gobjJs = (function(exports) {
 		data_type_t.DTP_LIST,
 		data_type_t.DTP_DICT
 	];
-	var LEAVE_NODE = Symbol("leave");
-	function is_json_value(value) {
-		const on_path = /* @__PURE__ */ new Set();
-		const stack = [value];
-		while (stack.length) {
-			const v = stack.pop();
-			if (v === LEAVE_NODE) {
-				on_path.delete(stack.pop());
-				continue;
+	function is_plain_object$1(v) {
+		const proto = Object.getPrototypeOf(v);
+		if (proto === Object.prototype || proto === null) return true;
+		if (Object.getPrototypeOf(proto) !== null || !Object.prototype.hasOwnProperty.call(proto, "constructor")) return false;
+		const ctor = proto.constructor;
+		return typeof ctor === "function" && ctor.name === "Object";
+	}
+	function json_scalar_or_container(v) {
+		switch (typeof v) {
+			case "string":
+			case "boolean": return true;
+			case "number": return Number.isFinite(v);
+			case "object": return v === null ? true : null;
+			default: return false;
+		}
+	}
+	function is_json_node(value) {
+		const top = json_scalar_or_container(value);
+		if (top !== null) return top;
+		const values = [value];
+		const levels = [1];
+		while (values.length) {
+			const v = values.pop();
+			const level = levels.pop() + 1;
+			let children;
+			if (Array.isArray(v)) {
+				if (typeof v.toJSON === "function") return false;
+				children = v;
+			} else {
+				if (!is_plain_object$1(v) || typeof v.toJSON === "function") return false;
+				children = [];
+				for (const key of Object.keys(v)) {
+					const x = v[key];
+					if (x === void 0 || typeof x === "function" || typeof x === "symbol") continue;
+					children.push(x);
+				}
 			}
-			if (typeof v === "bigint") return false;
-			if (v === null || typeof v !== "object") continue;
-			if (on_path.has(v)) return false;
-			const array = Array.isArray(v);
-			if (!array) {
-				const proto = Object.getPrototypeOf(v);
-				if (proto !== Object.prototype && proto !== null) return false;
+			if (children.length > 0 && level > JSON_MAX_DEPTH) return false;
+			for (let i = 0; i < children.length; i++) {
+				const x = children[i];
+				const r = json_scalar_or_container(x);
+				if (r === false) return false;
+				if (r === null) {
+					values.push(x);
+					levels.push(level);
+				}
 			}
-			on_path.add(v);
-			stack.push(v, LEAVE_NODE);
-			if (array) for (let i = 0; i < v.length; i++) stack.push(v[i]);
-			else for (const key of Object.keys(v)) stack.push(v[key]);
 		}
 		return true;
 	}
+	function is_json_value(value) {
+		try {
+			return is_json_node(value);
+		} catch (e) {
+			return false;
+		}
+	}
 	var NO_JSON_TEXT = "a value with no json text";
 	function json_text_of(value) {
 		if (!is_json_value(value)) return;
@@ -2343,11 +2393,13 @@ var gobjJs = (function(exports) {
 		let child;
 		if (walk_type & walk_type_t.WALK_LAST2FIRST) for (let i = iter.length; i > 0; i--) {
 			child = iter[i - 1];
+			if (gobj_is_destroying(child)) continue;
 			let ret = walk_ret(cb_walking(child, user_data, user_data2));
 			if (ret < 0) return ret;
 		}
 		else for (let i = 0; i < iter.length; i++) {
 			child = iter[i];
+			if (gobj_is_destroying(child)) continue;
 			let ret = walk_ret(cb_walking(child, user_data, user_data2));
 			if (ret < 0) return ret;
 		}
@@ -2362,18 +2414,21 @@ var gobjJs = (function(exports) {
 	*          or
 	*          WALK_LAST2FIRST
 	***************************************************************/
-	function rc_walk_by_level(iter, walk_type, cb_walking, user_data, user_data2) {
+	function rc_walk_by_level(iter_, walk_type, cb_walking, user_data, user_data2) {
+		let iter = [...iter_];
 		let ret = rc_walk_by_list(iter, walk_type, cb_walking, user_data, user_data2);
 		if (ret < 0) return ret;
 		let child;
 		if (walk_type & walk_type_t.WALK_LAST2FIRST) for (let i = iter.length; i > 0; i--) {
 			child = iter[i - 1];
-			ret = rc_walk_by_level([...child.dl_children], walk_type, cb_walking, user_data, user_data2);
+			if (gobj_is_destroying(child)) continue;
+			ret = rc_walk_by_level(child.dl_children, walk_type, cb_walking, user_data, user_data2);
 			if (ret < 0) return ret;
 		}
 		else for (let i = 0; i < iter.length; i++) {
 			child = iter[i];
-			ret = rc_walk_by_level([...child.dl_children], walk_type, cb_walking, user_data, user_data2);
+			if (gobj_is_destroying(child)) continue;
+			ret = rc_walk_by_level(child.dl_children, walk_type, cb_walking, user_data, user_data2);
 			if (ret < 0) return ret;
 		}
 		return ret;
@@ -2393,23 +2448,27 @@ var gobjJs = (function(exports) {
 	*          or
 	*          WALK_LAST2FIRST
 	***************************************************************/
-	function rc_walk_by_tree(iter, walk_type, cb_walking, user_data, user_data2) {
-		if (walk_type & walk_type_t.WALK_BYLEVEL) return rc_walk_by_level(iter, walk_type, cb_walking, user_data, user_data2);
+	function rc_walk_by_tree(iter_, walk_type, cb_walking, user_data, user_data2) {
+		if (walk_type & walk_type_t.WALK_BYLEVEL) return rc_walk_by_level(iter_, walk_type, cb_walking, user_data, user_data2);
+		let iter = [...iter_];
 		let ret;
 		let child;
 		if (walk_type & walk_type_t.WALK_BOTTOM2TOP) for (let i = iter.length; i > 0; i--) {
 			child = iter[i - 1];
-			ret = rc_walk_by_tree([...child.dl_children], walk_type, cb_walking, user_data, user_data2);
+			if (gobj_is_destroying(child)) continue;
+			ret = rc_walk_by_tree(child.dl_children, walk_type, cb_walking, user_data, user_data2);
 			if (ret < 0) return ret;
+			if (gobj_is_destroying(child)) continue;
 			ret = walk_ret(cb_walking(child, user_data, user_data2));
 			if (ret < 0) return ret;
 		}
 		else for (let i = 0; i < iter.length; i++) {
 			child = iter[i];
+			if (gobj_is_destroying(child)) continue;
 			ret = walk_ret(cb_walking(child, user_data, user_data2));
 			if (ret < 0) return ret;
-			else if (ret === 0) {
-				ret = rc_walk_by_tree([...child.dl_children], walk_type, cb_walking, user_data, user_data2);
+			else if (ret === 0 && !gobj_is_destroying(child)) {
+				ret = rc_walk_by_tree(child.dl_children, walk_type, cb_walking, user_data, user_data2);
 				if (ret < 0) return ret;
 			}
 		}
@@ -4726,6 +4785,7 @@ var gobjJs = (function(exports) {
 		mark_labels(str, marks);
 	}
 	var MASK_MAX_DECODINGS = 2;
+	var VIEW_CHUNK = 8192;
 	function encoded_ascii_at(str, p) {
 		if (p + 3 > str.length || str.charCodeAt(p) !== 37) return -1;
 		const hi = hex_digit_value(str.charCodeAt(p + 1));
@@ -4736,28 +4796,30 @@ var gobjJs = (function(exports) {
 	}
 	function mark_decoded_view(str, marks, decodings) {
 		if (decodings >= MASK_MAX_DECODINGS) return;
-		const pieces = [];
-		let last = 0;
-		let p = str.indexOf("%");
-		while (p >= 0) {
-			const c = encoded_ascii_at(str, p);
+		let first = str.indexOf("%");
+		while (first >= 0 && encoded_ascii_at(str, first) < 0) first = str.indexOf("%", first + 1);
+		if (first < 0) return;
+		const codes = new Uint16Array(str.length - first);
+		let n = 0;
+		for (let p = first; p < str.length; p++) {
+			const code = str.charCodeAt(p);
+			const c = code === 37 ? encoded_ascii_at(str, p) : -1;
 			if (c >= 0) {
-				pieces.push(str.substring(last, p), String.fromCharCode(c));
-				last = p + 3;
-				p = str.indexOf("%", last);
-			} else p = str.indexOf("%", p + 1);
-		}
-		if (pieces.length === 0) return;
-		pieces.push(str.substring(last));
-		const view = pieces.join("");
+				codes[n++] = c;
+				p += 2;
+			} else codes[n++] = code;
+		}
+		const chunks = [str.substring(0, first)];
+		for (let k = 0; k < n; k += VIEW_CHUNK) chunks.push(String.fromCharCode.apply(null, codes.subarray(k, Math.min(n, k + VIEW_CHUNK))));
+		const view = chunks.join("");
 		const view_marks = new Uint8Array(view.length);
 		mark_inline_rules_of_now(view, view_marks);
 		mark_decoded_view(view, view_marks, decodings + 1);
 		let q = 0;
 		for (let i = 0; i < view.length; i++) {
-			const n = encoded_ascii_at(str, q) >= 0 ? 3 : 1;
-			if (view_marks[i]) mark_range(marks, q, q + n);
-			q += n;
+			const n_from = encoded_ascii_at(str, q) >= 0 ? 3 : 1;
+			if (view_marks[i]) mark_range(marks, q, q + n_from);
+			q += n_from;
 		}
 	}
 	function mark_inline_secrets(str, marks) {
@@ -5991,21 +6053,88 @@ var gobjJs = (function(exports) {
 		return kw_clone;
 	}
 	/********************************************
+	*  The browser's localStorage, or null when there is none (outside a
+	*  browser).
+	*
+	*  With the site's data blocked (Chrome with cookies blocked, a sandboxed
+	*  iframe), READING the window.localStorage property already throws a
+	*  SecurityError, not only its getItem(): every app reads its locale at
+	*  start, so the app did not start. Such a store is answered as one whose
+	*  every call throws that error, so each helper fails as it fails for any
+	*  store that refuses it: a read gives the default, a write -1.
+	********************************************/
+	function local_store() {
+		if (typeof window === "undefined") return null;
+		let store;
+		try {
+			store = window.localStorage;
+		} catch (e) {
+			const refuse = () => {
+				throw e;
+			};
+			return {
+				getItem: refuse,
+				setItem: refuse,
+				removeItem: refuse
+			};
+		}
+		return store || null;
+	}
+	/********************************************
+	*  A failure of the store that would repeat on every read is warned
+	*  once per key, until a read of the key goes well again.
+	********************************************/
+	var local_storage_warned = /* @__PURE__ */ new Set();
+	function warn_local_storage_once(key, msg) {
+		if (local_storage_warned.has(key)) return;
+		local_storage_warned.add(key);
+		log_warning(msg);
+	}
+	/********************************************
 	*  Get a local attribute
+	*
+	*  The json the entry holds, or `default_value` when there is none
+	*  (written there too with `create`). A json null is no value, as
+	*  json_absent() in C: the default. An entry that is not json (a
+	*  corrupt or foreign write) is a WARNING and is REMOVED, so the
+	*  next read finds no entry: it used to console.warn on every read,
+	*  for ever; a new corrupt entry is a new WARNING. Its text is never
+	*  shown (JSON.parse() quotes it in its error, and an entry can hold a
+	*  token). A store that cannot be read (blocked) is warned once per
+	*  key, and the default is NOT written there. Outside a browser: the
+	*  default.
 	********************************************/
 	function kw_get_local_storage_value(key, default_value, create = false) {
-		if (typeof window === "undefined" || !window.localStorage) return;
+		const store = local_store();
+		if (!store) return default_value;
+		const where = `kw_get_local_storage_value(): localStorage key "${key}"`;
+		let text;
 		try {
-			let value = window.localStorage.getItem(key);
-			if (value === null) {
-				if (create) kw_set_local_storage_value(key, default_value);
-				return default_value;
-			}
-			return JSON.parse(value);
+			text = store.getItem(key);
 		} catch (e) {
-			window.console.warn(`Error reading localStorage key "${key}":`, e);
+			warn_local_storage_once(key, `${where} cannot be read (storage blocked?): the default is used`);
 			return default_value;
 		}
+		let value = null;
+		if (text !== null) try {
+			value = JSON.parse(text);
+		} catch (e) {
+			value = null;
+			try {
+				store.removeItem(key);
+				log_warning(`${where} does not hold json: removed, the default is used`);
+				local_storage_warned.delete(key);
+			} catch (e2) {
+				warn_local_storage_once(key, `${where} does not hold json and cannot be removed: the default is used`);
+			}
+			text = void 0;
+		}
+		if (text !== void 0) local_storage_warned.delete(key);
+		if (value === null) {
+			if (create) kw_set_local_storage_value(key, default_value);
+			return default_value;
+		}
+		return value;
 	}
 	/********************************************
 	*  Save a local attribute
@@ -6016,15 +6145,26 @@ var gobjJs = (function(exports) {
 	*  reported success on a store that had rejected the write: a full or blocked
 	*  localStorage (quota, private mode) silently discarded the change while the
 	*  UI showed it as saved.
+	*
+	*  A value with no json text is refused with an ERROR, as a typed writer
+	*  refuses it (json_text_of()): a function was stored as the text
+	*  "undefined", and a NaN, a Date or a Map as a text that reads back as
+	*  another value. Checked in Node.js too, where there is no store.
 	********************************************/
 	function kw_set_local_storage_value(key, value) {
-		if (typeof window === "undefined" || !window.localStorage) return 0;
-		if (!key || value === void 0) {
-			log_error(`kw_set_local_storage_value(): invalid key or value: key=${key}`);
+		if (!key) {
+			log_error(`kw_set_local_storage_value(): invalid key: key=${key}`);
 			return -1;
 		}
+		const text = json_text_of(value);
+		if (text === void 0) {
+			log_error(`kw_set_local_storage_value(): cannot save "${key}": a value with no json text`);
+			return -1;
+		}
+		const store = local_store();
+		if (!store) return 0;
 		try {
-			window.localStorage.setItem(key, JSON.stringify(value));
+			store.setItem(key, text);
 			return 0;
 		} catch (e) {
 			log_error(`kw_set_local_storage_value(): cannot save "${key}" (storage full or blocked?): ${e && e.message ? e.message : e}`);
@@ -6035,15 +6175,16 @@ var gobjJs = (function(exports) {
 	*  Remove local attribute
 	********************************************/
 	function kw_remove_local_storage_value(key) {
-		if (typeof window === "undefined" || !window.localStorage) return;
+		const store = local_store();
+		if (!store) return;
 		if (!key) {
-			window.console.warn(`Invalid key for localStorage removal: ${key}`);
+			log_error(`kw_remove_local_storage_value(): invalid key: key=${key}`);
 			return;
 		}
 		try {
-			window.localStorage.removeItem(key);
+			store.removeItem(key);
 		} catch (e) {
-			window.console.warn(`Error removing localStorage key "${key}":`, e);
+			log_warning(`kw_remove_local_storage_value(): cannot remove "${key}" (storage blocked?): ${e && e.message ? e.message : e}`);
 		}
 	}
 	/*************************************************************
@@ -7236,11 +7377,21 @@ var gobjJs = (function(exports) {
 	************************************************************/
 	function node_uuid() {
 		let uuid = "";
-		if (typeof window !== "undefined" && window.localStorage) {
-			uuid = window.localStorage.getItem("host_uuid");
+		const store = local_store();
+		if (store) {
+			try {
+				uuid = store.getItem("host_uuid");
+			} catch (e) {
+				uuid = null;
+				warn_local_storage_once("host_uuid", "node_uuid(): localStorage cannot be read (storage blocked?): a uuid of this page only");
+			}
 			if (!uuid && window.crypto?.randomUUID) {
 				uuid = window.crypto.randomUUID();
-				window.localStorage.setItem("host_uuid", uuid);
+				try {
+					store.setItem("host_uuid", uuid);
+				} catch (e) {
+					warn_local_storage_once("host_uuid", "node_uuid(): localStorage cannot be written (storage full or blocked?): a uuid of this page only");
+				}
 			}
 		} else if (typeof globalThis !== "undefined" && globalThis.crypto?.randomUUID) uuid = globalThis.crypto.randomUUID();
 		else uuid = "00000000-0000-0000-0000-000000000000";
@@ -8529,7 +8680,7 @@ var gobjJs = (function(exports) {
 		SDATA(data_type_t.DTP_STRING, "cert_pem", sdata_flag_t.SDF_PERSIST, "", "SSL server certification, PEM str format"),
 		SDATA(data_type_t.DTP_JSON, "extra_info", sdata_flag_t.SDF_RD, "{}", "dict data set by user, added to the identity card msg."),
 		SDATA(data_type_t.DTP_LIST, "required_services", sdata_flag_t.SDF_RD, "[]", "Services this LINK requires (identity card). Empty = the yuno's `required_services`, as before. A yuno with several links to DIFFERENT backends must set it per link: the yuno-wide list is the union, so every backend is told the service names of all the others."),
-		SDATA(data_type_t.DTP_INTEGER, "timeout_retry", sdata_flag_t.SDF_RD, "5000", "First reconnect delay (ms). It BACKS OFF from here, doubling up to timeout_retry_max, and resets when a session is reached"),
+		SDATA(data_type_t.DTP_INTEGER, "timeout_retry", sdata_flag_t.SDF_RD, "5000", "First reconnect delay (ms), at least 1000. It BACKS OFF from here, doubling up to timeout_retry_max, and resets when a session is reached"),
 		SDATA(data_type_t.DTP_INTEGER, "timeout_retry_max", sdata_flag_t.SDF_RD, "60000", "Cap of the reconnect backoff (ms). Set it equal to timeout_retry for the old fixed-interval behaviour"),
 		SDATA(data_type_t.DTP_INTEGER, "timeout_idack", sdata_flag_t.SDF_RD, "5000", "timeout waiting idAck"),
 		SDATA(data_type_t.DTP_POINTER, "subscriber", 0, 0, "subscriber of output-events. If null then subscriber is the parent"),
@@ -8553,7 +8704,9 @@ var gobjJs = (function(exports) {
 		websocket: null,
 		inside_on_open: false,
 		retry_ms: 0,
-		retry_ms_before_session: 0
+		retry_ms_before_session: 0,
+		session_since: 0,
+		retry_floor_warned: false
 	};
 	var __gclass__ = null;
 	/******************************
@@ -8812,15 +8965,22 @@ var gobjJs = (function(exports) {
 	*  protocol error, throws there), so it is 4002 -- and the server
 	*  echoes it, so EV_ON_CLOSE carries it.
 	*
-	*  And a session the server broke was not a session reached: the
-	*  backoff the ack reset is put back, or a server that breaks every
+	*  And a session the server broke at once was not a session reached:
+	*  the backoff the ack reset is put back, or a server that breaks every
 	*  session is reconnected at the first delay for ever, with an
-	*  EV_ON_OPEN and an EV_ON_CLOSE in the app per round.
+	*  EV_ON_OPEN and an EV_ON_CLOSE in the app per round. A session that
+	*  outlived the longest delay of the backoff (`timeout_retry_max`) was
+	*  served: its fault starts the backoff over, as a clean end does, or
+	*  one foreign message hours later is waited for with a delay escalated
+	*  by failures long gone.
 	***************************************************************/
 	var CLOSE_PEER_FAULT = 4002;
 	function close_for_peer_fault(gobj, reason) {
 		let priv = gobj.priv;
-		if (gobj_current_state(gobj) === "ST_SESSION") priv.retry_ms = priv.retry_ms_before_session;
+		if (gobj_current_state(gobj) === "ST_SESSION") {
+			if (performance.now() - priv.session_since < retry_bounds(gobj).max) priv.retry_ms = priv.retry_ms_before_session;
+			priv.retry_ms_before_session = 0;
+		}
 		close_websocket(gobj, CLOSE_PEER_FAULT, reason);
 	}
 	/***************************************************************
@@ -9090,6 +9250,32 @@ var gobjJs = (function(exports) {
 		return 0;
 	}
 	/***************************************************************
+	*  The first delay of the backoff and its cap.
+	*
+	*  A first delay below RETRY_FLOOR_MS is raised to it, with a WARNING
+	*  once: `timeout_retry` 0 never left 0 (0 doubled is 0), so a server
+	*  that closed before the ack was reconnected in a loop with no wait,
+	*  hundreds of connections a second.
+	***************************************************************/
+	var RETRY_FLOOR_MS = 1e3;
+	function retry_bounds(gobj) {
+		let priv = gobj.priv;
+		let base = gobj_read_integer_attr(gobj, "timeout_retry");
+		let max = gobj_read_integer_attr(gobj, "timeout_retry_max");
+		if (!(base >= RETRY_FLOOR_MS)) {
+			if (!priv.retry_floor_warned) {
+				priv.retry_floor_warned = true;
+				log_warning(`${gobj_short_name(gobj)}: timeout_retry ${base} ms is below ${RETRY_FLOOR_MS} ms: ${RETRY_FLOOR_MS} ms is used`);
+			}
+			base = RETRY_FLOOR_MS;
+		}
+		if (!(max >= base)) max = base;
+		return {
+			base,
+			max
+		};
+	}
+	/***************************************************************
 	*  How long to wait before the next reconnect attempt.
 	*
 	*  The delay used to be a constant (`timeout_retry`, 5s), for ever. A
@@ -9110,9 +9296,7 @@ var gobjJs = (function(exports) {
 	***************************************************************/
 	function next_retry(gobj) {
 		let priv = gobj.priv;
-		let base = gobj_read_integer_attr(gobj, "timeout_retry");
-		let max = gobj_read_integer_attr(gobj, "timeout_retry_max");
-		if (max < base) max = base;
+		const { base, max } = retry_bounds(gobj);
 		priv.retry_ms = priv.retry_ms ? Math.min(priv.retry_ms * 2, max) : base;
 		let jitter = priv.retry_ms * .2;
 		let ms = priv.retry_ms - jitter + Math.random() * 2 * jitter;
@@ -9158,6 +9342,7 @@ var gobjJs = (function(exports) {
 			priv.inside_on_open = true;
 			priv.retry_ms_before_session = priv.retry_ms;
 			priv.retry_ms = 0;
+			priv.session_since = performance.now();
 			if (!priv.inform_on_close) {
 				priv.inform_on_close = true;
 				gobj_publish_event(gobj, "EV_ON_OPEN", {
@@ -9255,16 +9440,30 @@ var gobjJs = (function(exports) {
 		return 0;
 	}
 	/***************************************************************************
+	*  The server asking this client for stats or a command. The C client
+	*  serves them (gobj_stats() / gobj_command() of the service named, and
+	*  an answer); a browser client does not run what its server asks, so it
+	*  is refused: a WARNING naming what was asked, masked (a command line
+	*  can carry a secret), and nothing else -- the protocol allows the ask,
+	*  so the session goes on. Up to 7.26.25 it was dropped without a trace.
+	***************************************************************************/
+	function refuse_asked_by_server(gobj, event, kw, key) {
+		const asked = kw && typeof kw[key] === "string" ? kw[key] : "";
+		const service = kw && typeof kw.service === "string" ? kw.service : "";
+		log_warning(`${gobj_short_name(gobj)}: ${event} not served by this client, DROPPED: ${key.replace(/_/g, "")} '${peer_text_shown(asked, PEER_NAME_SHOWN)}', service '${peer_text_shown(service, PEER_NAME_SHOWN)}'`);
+		return -1;
+	}
+	/***************************************************************************
 	*  remote asking for stats
 	***************************************************************************/
 	function ac_mt_stats(gobj, event, kw, src) {
-		return 0;
+		return refuse_asked_by_server(gobj, event, kw, "__stats__");
 	}
 	/***************************************************************************
 	*  remote asking for command
 	***************************************************************************/
 	function ac_mt_command(gobj, event, kw, src) {
-		return 0;
+		return refuse_asked_by_server(gobj, event, kw, "__command__");
 	}
 	/***************************
 	*          FSM
@@ -9595,6 +9794,7 @@ var gobjJs = (function(exports) {
 	exports.json_object_update_existing = json_object_update_existing;
 	exports.json_object_update_missing = json_object_update_missing;
 	exports.json_size = json_size;
+	exports.json_text_of = json_text_of;
 	exports.jwt2json = jwt2json;
 	exports.jwtDecode = jwtDecode;
 	exports.kw_clone_by_keys = kw_clone_by_keys;