agent-comms 8.2.1 → 8.3.0

package/dist/bridges/user/web/test/lan-web-server.integration.test.js

@@ -0,0 +1,245 @@
+/**
+ * The web server's LAN exposure end to end (agent-comms#346): loopback behaviour is unchanged by default, and a bind beyond loopback admits a non-loopback client only with the per-process token.
+ *
+ * A request to this machine's own LAN address arrives from that address, not from loopback, so it exercises the non-loopback path over a real socket. A machine with no external IPv4 address skips those cases; web-access.unit.test.ts covers the same gate without a network.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import * as http from "node:http";
+import * as os from "node:os";
+import WS from "ws";
+import { freeLocalPort, TeardownStack, unreachableHubUrl, } from "../../../../test/hub-helpers.js";
+import { createWebServer, getWebUrlStatus, } from "../server.js";
+import { accessCookieName, ownInterfaceAddresses, WEB_HOST_ENV, } from "../web-access.js";
+const HTTP_OK = 200;
+const HTTP_FOUND = 302;
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+const cleanups = new TeardownStack();
+beforeEach(() => {
+    vi.stubEnv(WEB_HOST_ENV, "");
+});
+afterEach(async () => {
+    vi.unstubAllEnvs();
+    vi.restoreAllMocks();
+    await cleanups.run();
+});
+function lanAddress() {
+    for (const addresses of Object.values(os.networkInterfaces())) {
+        for (const entry of addresses ?? []) {
+            if (!entry.internal && entry.family === "IPv4")
+                return entry.address;
+        }
+    }
+    return undefined;
+}
+const LAN = lanAddress();
+/** By default the server is told it has no interface addresses of its own, so a request to this machine's LAN address is treated as coming from a remote device: the real thing needs a second machine. */
+async function start(host, localClientAddresses = () => new Set()) {
+    const handle = await createWebServer({
+        host,
+        localClientAddresses,
+        coordinatorPort: await freeLocalPort(),
+        hubUrl: await unreachableHubUrl(),
+        beaconPort: await freeLocalPort(),
+    });
+    cleanups.push(async () => {
+        await new Promise((resolve) => {
+            handle.wss.close(() => {
+                resolve();
+            });
+        });
+        await new Promise((resolve) => {
+            handle.server.close(() => {
+                resolve();
+            });
+        });
+        await handle.controller.shutdown();
+    });
+    if (!handle.server.listening) {
+        await new Promise((resolve) => {
+            handle.server.once("listening", () => {
+                resolve();
+            });
+        });
+    }
+    const address = handle.server.address();
+    if (address === null || typeof address === "string") {
+        throw new Error("expected a TCP listen address");
+    }
+    return { handle, port: address.port };
+}
+async function call(target, port, options) {
+    return new Promise((resolve, reject) => {
+        const req = http.request({
+            host: target,
+            port,
+            method: options.method ?? "GET",
+            path: options.path ?? "/api/agents",
+            headers: options.headers ?? {},
+        }, (res) => {
+            const chunks = [];
+            res.on("data", (chunk) => {
+                chunks.push(chunk);
+            });
+            res.on("end", () => {
+                resolve({
+                    status: res.statusCode ?? 0,
+                    headers: res.headers,
+                    body: Buffer.concat(chunks).toString(),
+                });
+            });
+        });
+        req.on("error", reject);
+        req.end(options.body);
+    });
+}
+async function upgrade(target, port, headers) {
+    return new Promise((resolve) => {
+        const ws = new WS(`ws://${target}:${String(port)}/ws/mesh`, { headers });
+        ws.on("open", () => {
+            ws.close();
+            resolve("open");
+        });
+        ws.on("error", () => {
+            resolve("rejected");
+        });
+    });
+}
+describe("default bind", () => {
+    it("listens on loopback only, with no token, and serves without credentials", async () => {
+        const { handle, port } = await start(undefined);
+        expect(handle.host).toBe("127.0.0.1");
+        expect(handle.accessToken).toBeUndefined();
+        const reply = await call("127.0.0.1", port, {});
+        expect(reply.status).toBe(HTTP_OK);
+    });
+    it("reports its own loopback URL as the web_url", async () => {
+        const { handle, port } = await start(undefined);
+        expect(getWebUrlStatus(handle)).toEqual({
+            kind: "ready",
+            url: `http://127.0.0.1:${String(port)}`,
+        });
+    });
+});
+describe("Host check on loopback", () => {
+    it("rejects a loopback request whose Host names another domain, so a rebound name cannot reach the default bind", async () => {
+        const { port } = await start(undefined);
+        const reply = await call("127.0.0.1", port, {
+            headers: { host: `rebind.example:${String(port)}` },
+        });
+        expect(reply.status).toBe(HTTP_FORBIDDEN);
+    });
+    it("rejects a loopback request to a wildcard bind whose Host is the wildcard address", async () => {
+        const { port } = await start("0.0.0.0");
+        const reply = await call("127.0.0.1", port, {
+            headers: { host: `0.0.0.0:${String(port)}` },
+        });
+        expect(reply.status).toBe(HTTP_FORBIDDEN);
+    });
+});
+describe("bind beyond loopback", () => {
+    it("prints the token URL on stderr and never on stdout", async () => {
+        const stderr = vi.spyOn(console, "error").mockImplementation(() => { });
+        const stdout = vi.spyOn(console, "log").mockImplementation(() => { });
+        const { handle } = await start("0.0.0.0");
+        const token = handle.accessToken;
+        if (token === undefined)
+            throw new Error("expected an access token");
+        const printed = (spy) => spy.mock.calls.map((args) => args.join(" ")).join("\n");
+        expect(printed(stderr)).toContain(`token=${token}`);
+        expect(printed(stdout)).not.toContain(token);
+    });
+    it("leaves loopback clients unchanged: no token needed, and web_url stays loopback", async () => {
+        const { handle, port } = await start("0.0.0.0");
+        const reply = await call("127.0.0.1", port, {});
+        expect(reply.status).toBe(HTTP_OK);
+        expect(getWebUrlStatus(handle)).toEqual({
+            kind: "ready",
+            url: `http://127.0.0.1:${String(port)}`,
+        });
+    });
+    it.skipIf(LAN === undefined)("rejects a LAN client without the token, for reads, POST /api/action and the websocket", async () => {
+        const { port } = await start("0.0.0.0");
+        if (LAN === undefined)
+            throw new Error("unreachable");
+        expect((await call(LAN, port, {})).status).toBe(HTTP_UNAUTHORIZED);
+        const action = await call(LAN, port, {
+            method: "POST",
+            path: "/api/action",
+            body: JSON.stringify({ action: "list_rooms" }),
+        });
+        expect(action.status).toBe(HTTP_UNAUTHORIZED);
+        expect(await upgrade(LAN, port, {})).toBe("rejected");
+        const wrong = await call(LAN, port, {
+            headers: { authorization: "Bearer wrong" },
+        });
+        expect(wrong.status).toBe(HTTP_UNAUTHORIZED);
+    });
+    it.skipIf(LAN === undefined)("admits a LAN client with the bearer token, including a mutating action and the websocket", async () => {
+        const { handle, port } = await start("0.0.0.0");
+        if (LAN === undefined || handle.accessToken === undefined) {
+            throw new Error("unreachable");
+        }
+        const authorization = `Bearer ${handle.accessToken}`;
+        expect((await call(LAN, port, { headers: { authorization } })).status).toBe(HTTP_OK);
+        const action = await call(LAN, port, {
+            method: "POST",
+            path: "/api/action",
+            headers: { authorization },
+            body: JSON.stringify({ action: "list_rooms" }),
+        });
+        expect(action.status).toBe(HTTP_OK);
+        expect(await upgrade(LAN, port, { authorization })).toBe("open");
+    });
+    it.skipIf(LAN === undefined)("exchanges the one-time URL token for a cookie that then admits the websocket", async () => {
+        const { handle, port } = await start("0.0.0.0");
+        if (LAN === undefined || handle.accessToken === undefined) {
+            throw new Error("unreachable");
+        }
+        const exchange = await call(LAN, port, {
+            path: `/?token=${handle.accessToken}`,
+        });
+        expect(exchange.status).toBe(HTTP_FOUND);
+        expect(exchange.headers.location).toBe("/");
+        const cookie = `${accessCookieName(port)}=${handle.accessToken}`;
+        expect(String(exchange.headers["set-cookie"])).toContain(cookie);
+        expect(await upgrade(LAN, port, { cookie })).toBe("open");
+    });
+    it.skipIf(LAN === undefined)("rejects a LAN request whose Host names another domain even with the token", async () => {
+        const { handle, port } = await start("0.0.0.0");
+        if (LAN === undefined || handle.accessToken === undefined) {
+            throw new Error("unreachable");
+        }
+        const reply = await call(LAN, port, {
+            headers: {
+                host: `rebind.example:${String(port)}`,
+                authorization: `Bearer ${handle.accessToken}`,
+            },
+        });
+        expect(reply.status).toBe(HTTP_FORBIDDEN);
+    });
+    it.skipIf(LAN === undefined)("gives a specific-address bind a web_url that answers from this machine without the token", async () => {
+        if (LAN === undefined)
+            throw new Error("unreachable");
+        const { handle, port } = await start(LAN, ownInterfaceAddresses);
+        const status = getWebUrlStatus(handle);
+        expect(status).toEqual({
+            kind: "ready",
+            url: `http://${LAN}:${String(port)}`,
+        });
+        const reply = await call(LAN, port, {});
+        expect(reply.status).toBe(HTTP_OK);
+    });
+    it.skipIf(LAN === undefined)("treats a non-canonical wildcard spelling as a wildcard: a LAN client with the token is admitted", async () => {
+        const { handle, port } = await start("::0");
+        if (LAN === undefined || handle.accessToken === undefined) {
+            throw new Error("unreachable");
+        }
+        expect(handle.host).toBe("::");
+        const reply = await call(LAN, port, {
+            headers: { authorization: `Bearer ${handle.accessToken}` },
+        });
+        expect(reply.status).toBe(HTTP_OK);
+    });
+});
+//# sourceMappingURL=lan-web-server.integration.test.js.map

package/dist/bridges/user/web/test/lan-web-server.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lan-web-server.integration.test.js","sourceRoot":"","sources":["../../../../../src/bridges/user/web/test/lan-web-server.integration.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,eAAe,EACf,eAAe,GAEhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,GACb,MAAM,kBAAkB,CAAC;AAE1B,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;AAErC,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,SAAS,UAAU;IACjB,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;AAOzB,2MAA2M;AAC3M,KAAK,UAAU,KAAK,CAClB,IAAwB,EACxB,uBAAkD,GAAG,EAAE,CAAC,IAAI,GAAG,EAAE;IAEjE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,IAAI;QACJ,oBAAoB;QACpB,eAAe,EAAE,MAAM,aAAa,EAAE;QACtC,MAAM,EAAE,MAAM,iBAAiB,EAAE;QACjC,UAAU,EAAE,MAAM,aAAa,EAAE;KAClC,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACvB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;gBACnC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC;AAQD,KAAK,UAAU,IAAI,CACjB,MAAc,EACd,IAAY,EACZ,OAKC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,aAAa;YACnC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;SAC/B,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;iBACvC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,IAAY,EACZ,OAAyC;IAEzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,QAAQ,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,6GAA6G,EAAE,KAAK,IAAI,EAAE;QAC3H,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAU,EAAE,CAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAC1B,uFAAuF,EACvF,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YAClC,OAAO,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE;SAC3C,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAC1B,0FAA0F,EAC1F,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GAAG,UAAU,MAAM,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,CACJ,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,EAAE,aAAa,EAAE;YAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAC1B,8EAA8E,EAC9E,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YACrC,IAAI,EAAE,WAAW,MAAM,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAC1B,2EAA2E,EAC3E,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YAClC,OAAO,EAAE;gBACP,IAAI,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtC,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;aAC9C;SACF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAC1B,0FAA0F,EAC1F,KAAK,IAAI,EAAE;QACT,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE;SACrC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAC1B,iGAAiG,EACjG,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YAClC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/bridges/user/web/test/web-access.unit.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for the web server's network exposure gate (agent-comms#346): bind resolution, the constant-time token comparison, and the per-request decision for loopback and non-loopback clients.
+ */
+export {};
+//# sourceMappingURL=web-access.unit.test.d.ts.map

package/dist/bridges/user/web/test/web-access.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-access.unit.test.d.ts","sourceRoot":"","sources":["../../../../../src/bridges/user/web/test/web-access.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/bridges/user/web/test/web-access.unit.test.js

@@ -0,0 +1,271 @@
+/**
+ * Unit tests for the web server's network exposure gate (agent-comms#346): bind resolution, the constant-time token comparison, and the per-request decision for loopback and non-loopback clients.
+ */
+import { describe, expect, it } from "vitest";
+import * as os from "node:os";
+import { accessCookieName, authorise, canonicalAddress, generateAccessToken, isLoopbackAddress, isWildcardHost, localWebUrl, LOOPBACK_HOST, requiresAccessToken, resolveWebBindHost, tokensMatch, WEB_HOST_ENV, } from "../web-access.js";
+const HTTP_FOUND = 302;
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+const PORT = 41234;
+const LAN_CLIENT = "192.168.1.50";
+const BIND = "192.168.1.10";
+const HOST_HEADER = `${BIND}:${String(PORT)}`;
+const COOKIE_NAME = accessCookieName(PORT);
+/** A policy for a LAN bind whose machine has no interface addresses, so every non-loopback client is a remote device. */
+function policy(overrides = {}) {
+    return {
+        token: generateAccessToken(),
+        bindHost: BIND,
+        port: PORT,
+        localClientAddresses: () => new Set(),
+        ...overrides,
+    };
+}
+function request(overrides) {
+    return {
+        method: "GET",
+        url: "/",
+        remoteAddress: LAN_CLIENT,
+        headers: { host: HOST_HEADER },
+        ...overrides,
+    };
+}
+describe("resolveWebBindHost", () => {
+    it("defaults to loopback with no option and no environment variable", () => {
+        expect(resolveWebBindHost(undefined, {})).toBe(LOOPBACK_HOST);
+    });
+    it("takes the environment variable as the opt-in", () => {
+        expect(resolveWebBindHost(undefined, { [WEB_HOST_ENV]: "0.0.0.0" })).toBe("0.0.0.0");
+    });
+    it("prefers an explicit option over the environment", () => {
+        expect(resolveWebBindHost("::", { [WEB_HOST_ENV]: "0.0.0.0" })).toBe("::");
+    });
+    it.each(["::0", "0:0:0:0:0:0:0:0", "::ffff:0.0.0.0", "::ffff:0:0"])("canonicalises the wildcard spelling %s so it is classified as a wildcard", (spelling) => {
+        const host = resolveWebBindHost(spelling, {});
+        expect(isWildcardHost(host)).toBe(true);
+        expect(requiresAccessToken(host)).toBe(true);
+    });
+    it("rejects a value that is not an IP address instead of falling back", () => {
+        expect(() => resolveWebBindHost(undefined, { [WEB_HOST_ENV]: "lan" })).toThrow(WEB_HOST_ENV);
+    });
+});
+describe("canonicalAddress", () => {
+    it.each([
+        ["::0", "::"],
+        ["0:0:0:0:0:0:0:1", "::1"],
+        ["::ffff:127.0.0.1", "127.0.0.1"],
+        ["::ffff:7f00:1", "127.0.0.1"],
+        ["192.168.1.10", "192.168.1.10"],
+        ["fe80::1%en0", "fe80::1%en0"],
+    ])("spells %s as %s", (input, expected) => {
+        expect(canonicalAddress(input)).toBe(expected);
+    });
+});
+describe("isWildcardHost", () => {
+    it.each(["0.0.0.0", "::", "::0", "0:0:0:0:0:0:0:0", "::ffff:0.0.0.0"])("%s binds every interface", (host) => {
+        expect(isWildcardHost(host)).toBe(true);
+    });
+    it.each(["192.168.1.10", "127.0.0.1", "::1", "fe80::1%en0"])("%s binds one interface", (host) => {
+        expect(isWildcardHost(host)).toBe(false);
+    });
+});
+describe("localWebUrl", () => {
+    it("maps a wildcard bind to loopback and keeps a specific bind", () => {
+        expect(localWebUrl("0.0.0.0", PORT)).toBe(`http://127.0.0.1:${PORT}`);
+        expect(localWebUrl("::", PORT)).toBe(`http://127.0.0.1:${PORT}`);
+        expect(localWebUrl(BIND, PORT)).toBe(`http://${BIND}:${PORT}`);
+    });
+    it("brackets an IPv6 bind", () => {
+        expect(localWebUrl("::1", PORT)).toBe(`http://[::1]:${PORT}`);
+    });
+});
+describe("requiresAccessToken", () => {
+    it.each(["127.0.0.1", "127.0.0.5", "::1"])("%s needs no token", (host) => {
+        expect(requiresAccessToken(host)).toBe(false);
+    });
+    it.each(["0.0.0.0", "::", "192.168.1.10"])("%s needs a token", (host) => {
+        expect(requiresAccessToken(host)).toBe(true);
+    });
+});
+describe("isLoopbackAddress", () => {
+    it.each(["127.0.0.1", "::1", "::ffff:127.0.0.1"])("%s is loopback", (a) => {
+        expect(isLoopbackAddress(a)).toBe(true);
+    });
+    it.each(["192.168.1.50", "::ffff:192.168.1.50", "fe80::1"])("%s is not loopback", (a) => {
+        expect(isLoopbackAddress(a)).toBe(false);
+    });
+});
+describe("tokensMatch", () => {
+    it("accepts an identical token", () => {
+        const token = generateAccessToken();
+        expect(tokensMatch(token, token)).toBe(true);
+    });
+    it("rejects a prefix, an extension, a different token and the empty string without throwing on length", () => {
+        const token = generateAccessToken();
+        expect(tokensMatch(token.slice(0, -1), token)).toBe(false);
+        expect(tokensMatch(`${token}0`, token)).toBe(false);
+        expect(tokensMatch(generateAccessToken(), token)).toBe(false);
+        expect(tokensMatch("", token)).toBe(false);
+    });
+    it("generates distinct tokens", () => {
+        expect(generateAccessToken()).not.toBe(generateAccessToken());
+    });
+});
+describe("authorise", () => {
+    it("allows a loopback client with a loopback Host and no token, under a loopback bind", () => {
+        const loopbackBind = policy({ token: undefined, bindHost: LOOPBACK_HOST });
+        for (const host of ["localhost", LOOPBACK_HOST, "[::1]"]) {
+            expect(authorise(loopbackBind, request({
+                remoteAddress: "127.0.0.1",
+                headers: { host: `${host}:${String(PORT)}` },
+            }))).toEqual({ kind: "allow" });
+        }
+    });
+    it("rejects a rebound Host from a loopback client, under a loopback bind and under a LAN bind", () => {
+        for (const p of [
+            policy({ token: undefined, bindHost: LOOPBACK_HOST }),
+            policy(),
+        ]) {
+            expect(authorise(p, request({
+                remoteAddress: "127.0.0.1",
+                headers: { host: `rebind.example:${String(PORT)}` },
+            }))).toMatchObject({ kind: "deny", status: HTTP_FORBIDDEN });
+        }
+    });
+    it("rejects the wildcard address as a Host even from loopback, under a wildcard bind", () => {
+        expect(authorise(policy({ bindHost: "0.0.0.0" }), request({
+            remoteAddress: "127.0.0.1",
+            headers: { host: `0.0.0.0:${String(PORT)}` },
+        }))).toMatchObject({ kind: "deny", status: HTTP_FORBIDDEN });
+    });
+    it("allows a loopback client without a token under a LAN bind", () => {
+        const decision = authorise(policy(), request({
+            remoteAddress: "127.0.0.1",
+            headers: { host: `localhost:${String(PORT)}` },
+        }));
+        expect(decision).toEqual({ kind: "allow" });
+    });
+    it("allows a client connecting from one of this machine's own interface addresses without a token", () => {
+        const decision = authorise(policy({ localClientAddresses: () => new Set([BIND]) }), request({ remoteAddress: BIND }));
+        expect(decision).toEqual({ kind: "allow" });
+    });
+    it("answers 401 to a remote client under a loopback bind, which has no token to present", () => {
+        expect(authorise(policy({ token: undefined, bindHost: LOOPBACK_HOST }), request({ headers: { host: `localhost:${String(PORT)}` } }))).toMatchObject({ kind: "deny", status: HTTP_UNAUTHORIZED });
+    });
+    it("scopes the cookie to the server's port so two servers on one host keep separate cookies", () => {
+        const portA = 41001;
+        const portB = 41002;
+        const a = policy({ port: portA });
+        const b = policy({ port: portB });
+        const both = `${accessCookieName(portA)}=${a.token}; ${accessCookieName(portB)}=${b.token}`;
+        const via = (p, port, cookie) => authorise(p, request({ headers: { host: `${BIND}:${String(port)}`, cookie } }));
+        expect(via(a, portA, both)).toEqual({ kind: "allow" });
+        expect(via(b, portB, both)).toEqual({ kind: "allow" });
+        expect(accessCookieName(portA)).not.toBe(accessCookieName(portB));
+        expect(via(a, portA, `${accessCookieName(portB)}=${b.token}`)).toMatchObject({ kind: "deny", status: HTTP_UNAUTHORIZED });
+        expect(via(b, portB, `${accessCookieName(portA)}=${a.token}`)).toMatchObject({ kind: "deny", status: HTTP_UNAUTHORIZED });
+    });
+    it("answers 401 to a non-loopback client with no token", () => {
+        expect(authorise(policy(), request({}))).toMatchObject({
+            kind: "deny",
+            status: HTTP_UNAUTHORIZED,
+        });
+    });
+    it("answers 401 to a wrong bearer token", () => {
+        const decision = authorise(policy(), request({
+            headers: { host: HOST_HEADER, authorization: "Bearer wrong" },
+        }));
+        expect(decision).toMatchObject({ kind: "deny", status: HTTP_UNAUTHORIZED });
+    });
+    it("allows a correct bearer token", () => {
+        const p = policy();
+        const decision = authorise(p, request({
+            headers: { host: HOST_HEADER, authorization: `Bearer ${p.token}` },
+        }));
+        expect(decision).toEqual({ kind: "allow" });
+    });
+    it("allows a correct cookie and rejects a wrong one", () => {
+        const p = policy();
+        expect(authorise(p, request({
+            headers: {
+                host: HOST_HEADER,
+                cookie: `a=b; ${COOKIE_NAME}=${p.token}`,
+            },
+        }))).toEqual({ kind: "allow" });
+        expect(authorise(p, request({
+            headers: {
+                host: HOST_HEADER,
+                cookie: `${COOKIE_NAME}=wrong`,
+            },
+        }))).toMatchObject({ kind: "deny", status: HTTP_UNAUTHORIZED });
+    });
+    it("exchanges a correct ?token= on a GET for a cookie and a redirect without the token", () => {
+        const p = policy();
+        const decision = authorise(p, request({ url: `/room?x=1&token=${p.token}` }));
+        expect(decision).toEqual({
+            kind: "exchange",
+            status: HTTP_FOUND,
+            cookie: `${COOKIE_NAME}=${p.token}; HttpOnly; SameSite=Strict; Path=/`,
+            location: "/room?x=1",
+        });
+    });
+    it("does not exchange a wrong ?token=, nor any ?token= on a POST", () => {
+        const p = policy();
+        expect(authorise(p, request({ url: "/?token=wrong" }))).toMatchObject({
+            kind: "deny",
+            status: HTTP_UNAUTHORIZED,
+        });
+        expect(authorise(p, request({ method: "POST", url: `/api/action?token=${p.token}` }))).toMatchObject({ kind: "deny", status: HTTP_UNAUTHORIZED });
+    });
+    it("rejects a Host naming another domain with 403 even when the token is right (DNS rebinding)", () => {
+        const p = policy();
+        const decision = authorise(p, request({
+            headers: {
+                host: `rebind.example:${String(PORT)}`,
+                authorization: `Bearer ${p.token}`,
+            },
+        }));
+        expect(decision).toMatchObject({ kind: "deny", status: HTTP_FORBIDDEN });
+    });
+    it("rejects a Host on the right address but the wrong port, and a missing Host", () => {
+        const p = policy();
+        const authorization = `Bearer ${p.token}`;
+        expect(authorise(p, request({ headers: { host: `${BIND}:1`, authorization } }))).toMatchObject({ kind: "deny", status: HTTP_FORBIDDEN });
+        expect(authorise(p, request({ headers: { authorization } }))).toMatchObject({ kind: "deny", status: HTTP_FORBIDDEN });
+    });
+    it("accepts this machine's own hostname as the Host", () => {
+        const p = policy();
+        const machine = os.hostname().replace(/\.local$/i, "");
+        const decision = authorise(p, request({
+            headers: {
+                host: `${machine}.local:${String(PORT)}`,
+                authorization: `Bearer ${p.token}`,
+            },
+        }));
+        expect(decision).toEqual({ kind: "allow" });
+    });
+    it("rejects a cross-origin request carrying a valid cookie", () => {
+        const p = policy();
+        const decision = authorise(p, request({
+            headers: {
+                host: HOST_HEADER,
+                cookie: `${COOKIE_NAME}=${p.token}`,
+                origin: `http://${BIND}:9999`,
+            },
+        }));
+        expect(decision).toMatchObject({ kind: "deny", status: HTTP_FORBIDDEN });
+    });
+    it("allows a same-origin request carrying a valid cookie", () => {
+        const p = policy();
+        const decision = authorise(p, request({
+            headers: {
+                host: HOST_HEADER,
+                cookie: `${COOKIE_NAME}=${p.token}`,
+                origin: `http://${HOST_HEADER}`,
+            },
+        }));
+        expect(decision).toEqual({ kind: "allow" });
+    });
+});
+//# sourceMappingURL=web-access.unit.test.js.map

package/dist/bridges/user/web/test/web-access.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-access.unit.test.js","sourceRoot":"","sources":["../../../../../src/bridges/user/web/test/web-access.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,GAGb,MAAM,kBAAkB,CAAC;AAE1B,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,IAAI,GAAG,KAAK,CAAC;AACnB,MAAM,UAAU,GAAG,cAAc,CAAC;AAClC,MAAM,IAAI,GAAG,cAAc,CAAC;AAC5B,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAE9C,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAE3C,yHAAyH;AACzH,SAAS,MAAM,CAAC,YAA6C,EAAE;IAC7D,OAAO;QACL,KAAK,EAAE,mBAAmB,EAAE;QAC5B,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,IAAI;QACV,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,EAAE;QACrC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,SAAiC;IAChD,OAAO;QACL,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,GAAG;QACR,aAAa,EAAE,UAAU;QACzB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;QAC9B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACvE,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC,CACjE,0EAA0E,EAC1E,CAAC,QAAQ,EAAE,EAAE;QACX,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CACzD,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,KAAK,EAAE,IAAI,CAAC;QACb,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAC1B,CAAC,kBAAkB,EAAE,WAAW,CAAC;QACjC,CAAC,eAAe,EAAE,WAAW,CAAC;QAC9B,CAAC,cAAc,EAAE,cAAc,CAAC;QAChC,CAAC,aAAa,EAAE,aAAa,CAAC;KAC/B,CAAC,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CACpE,0BAA0B,EAC1B,CAAC,IAAI,EAAE,EAAE;QACP,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAC1D,wBAAwB,EACxB,CAAC,IAAI,EAAE,EAAE;QACP,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE;QACvE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE;QACtE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;QACxE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC,CACzD,oBAAoB,EACpB,CAAC,CAAC,EAAE,EAAE;QACJ,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,GAAG,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,CACJ,SAAS,CACP,YAAY,EACZ,OAAO,CAAC;gBACN,aAAa,EAAE,WAAW;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;aAC7C,CAAC,CACH,CACF,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,KAAK,MAAM,CAAC,IAAI;YACd,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;YACrD,MAAM,EAAE;SACT,EAAE,CAAC;YACF,MAAM,CACJ,SAAS,CACP,CAAC,EACD,OAAO,CAAC;gBACN,aAAa,EAAE,WAAW;gBAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;aACpD,CAAC,CACH,CACF,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CACJ,SAAS,CACP,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAC/B,OAAO,CAAC;YACN,aAAa,EAAE,WAAW;YAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;SAC7C,CAAC,CACH,CACF,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,SAAS,CACxB,MAAM,EAAE,EACR,OAAO,CAAC;YACN,aAAa,EAAE,WAAW;YAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;SAC/C,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,MAAM,QAAQ,GAAG,SAAS,CACxB,MAAM,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EACvD,OAAO,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CACjC,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CACJ,SAAS,CACP,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,EACrD,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAC5D,CACF,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAC5F,MAAM,GAAG,GAAG,CAAC,CAAyB,EAAE,IAAY,EAAE,MAAc,EAAE,EAAE,CACtE,SAAS,CACP,CAAC,EACD,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAClE,CAAC;QACJ,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,MAAM,CACJ,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CACvD,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC7D,MAAM,CACJ,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CACvD,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACrD,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAG,SAAS,CACxB,MAAM,EAAE,EACR,OAAO,CAAC;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE;SAC9D,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CACxB,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;SACnE,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,CACJ,SAAS,CACP,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,QAAQ,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE;aACzC;SACF,CAAC,CACH,CACF,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7B,MAAM,CACJ,SAAS,CACP,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,GAAG,WAAW,QAAQ;aAC/B;SACF,CAAC,CACH,CACF,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CACxB,CAAC,EACD,OAAO,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC/C,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,GAAG,WAAW,IAAI,CAAC,CAAC,KAAK,qCAAqC;YACtE,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACpE,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,MAAM,CACJ,SAAS,CACP,CAAC,EACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACjE,CACF,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CACxB,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtC,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE;aACnC;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,CACJ,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CACzE,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CACzE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,SAAS,CACxB,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAE,GAAG,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,EAAE;gBACxC,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE;aACnC;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CACxB,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,GAAG,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE;gBACnC,MAAM,EAAE,UAAU,IAAI,OAAO;aAC9B;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CACxB,CAAC,EACD,OAAO,CAAC;YACN,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,GAAG,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE;gBACnC,MAAM,EAAE,UAAU,WAAW,EAAE;aAChC;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/bridges/user/web/test/web-beacon.unit.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * The LAN beacon advertises the web UI's host (by source address) and port, and never the access token (agent-comms#346).
+ */
+export {};
+//# sourceMappingURL=web-beacon.unit.test.d.ts.map

package/dist/bridges/user/web/test/web-beacon.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-beacon.unit.test.d.ts","sourceRoot":"","sources":["../../../../../src/bridges/user/web/test/web-beacon.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/bridges/user/web/test/web-beacon.unit.test.js

@@ -0,0 +1,40 @@
+/**
+ * The LAN beacon advertises the web UI's host (by source address) and port, and never the access token (agent-comms#346).
+ */
+import { afterEach, expect, it } from "vitest";
+import * as dgram from "node:dgram";
+import { freeLocalPort, TeardownStack } from "../../../../test/hub-helpers.js";
+import { startWebBeacon, WEB_BEACON_TYPE } from "../web-beacon.js";
+const cleanups = new TeardownStack();
+afterEach(async () => {
+    await cleanups.run();
+});
+it("sends one datagram naming the peer and the web port, with nothing else", async () => {
+    const port = await freeLocalPort();
+    const received = new Promise((resolve) => {
+        const listener = dgram.createSocket("udp4");
+        cleanups.push(async () => {
+            listener.close();
+        });
+        listener.on("message", (message) => {
+            resolve(message.toString());
+        });
+        listener.bind(port, "127.0.0.1");
+    });
+    const beacon = startWebBeacon({
+        peerId: "peer-1",
+        webPort: 4321,
+        port,
+        address: "127.0.0.1",
+    });
+    cleanups.push(async () => {
+        beacon.stop();
+    });
+    const payload = JSON.parse(await received);
+    expect(payload).toEqual({
+        type: WEB_BEACON_TYPE,
+        peerId: "peer-1",
+        webPort: 4321,
+    });
+});
+//# sourceMappingURL=web-beacon.unit.test.js.map

package/dist/bridges/user/web/test/web-beacon.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-beacon.unit.test.js","sourceRoot":"","sources":["../../../../../src/bridges/user/web/test/web-beacon.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;AAErC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACjC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,cAAc,CAAC;QAC5B,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,MAAM,CAAC,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACtB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}