nterminal 1.2.79 → 1.2.81

package/dist/server/routes/terminalSocketMessage.js

@@ -0,0 +1,188 @@
+import { terminalInputDedupRetentionMs } from '../../shared/protocol.js';
+export const terminalSocketMaxMessageBytes = 16 * 1024 * 1024;
+export const terminalInputDedupEntriesPerTerminal = 1024;
+export const terminalInputDedupUnconfirmedTtlMs = terminalInputDedupRetentionMs;
+export const terminalInputDedupConfirmedTtlMs = terminalInputDedupRetentionMs;
+export class TerminalInputDeduplicator {
+    maxEntriesPerTerminal;
+    maxTerminals;
+    options;
+    terminals = new Map();
+    constructor(maxEntriesPerTerminal = terminalInputDedupEntriesPerTerminal, 
+    // Buckets can only be created through an authenticated socket for a real
+    // terminal and are cleared when that terminal exits. TerminalManager, not
+    // this delivery helper, owns the number of live terminals.
+    maxTerminals = Number.POSITIVE_INFINITY, options = {}) {
+        this.maxEntriesPerTerminal = maxEntriesPerTerminal;
+        this.maxTerminals = maxTerminals;
+        this.options = options;
+    }
+    async deliver(terminalId, messageId, write) {
+        if (messageId === undefined) {
+            return {
+                accepted: await write(),
+                duplicate: false,
+                saturated: false
+            };
+        }
+        const now = this.now();
+        const bucket = this.getOrCreateBucket(terminalId, now);
+        if (!bucket) {
+            return { accepted: false, duplicate: false, saturated: true };
+        }
+        if (bucket.tombstones.has(messageId)) {
+            return { accepted: true, duplicate: true, saturated: false };
+        }
+        const existing = bucket.entries.get(messageId);
+        if (existing) {
+            return {
+                accepted: await existing.promise,
+                duplicate: true,
+                saturated: false
+            };
+        }
+        if (!this.makeEntryRoom(bucket)) {
+            return { accepted: false, duplicate: false, saturated: true };
+        }
+        let resolveDelivery;
+        let rejectDelivery;
+        const promise = new Promise((resolve, reject) => {
+            resolveDelivery = resolve;
+            rejectDelivery = reject;
+        });
+        const entry = { promise, settled: false, expiresAt: null };
+        bucket.entries.set(messageId, entry);
+        try {
+            Promise.resolve(write()).then((accepted) => {
+                entry.settled = true;
+                entry.expiresAt = accepted
+                    ? this.now() + this.unconfirmedTtlMs()
+                    : null;
+                if (!accepted && bucket.entries.get(messageId) === entry) {
+                    bucket.entries.delete(messageId);
+                    this.deleteBucketIfEmpty(terminalId, bucket);
+                }
+                resolveDelivery(accepted);
+            }, (error) => {
+                entry.settled = true;
+                if (bucket.entries.get(messageId) === entry) {
+                    bucket.entries.delete(messageId);
+                    this.deleteBucketIfEmpty(terminalId, bucket);
+                }
+                rejectDelivery(error);
+            });
+        }
+        catch (error) {
+            entry.settled = true;
+            bucket.entries.delete(messageId);
+            this.deleteBucketIfEmpty(terminalId, bucket);
+            rejectDelivery(error);
+        }
+        return {
+            accepted: await promise,
+            duplicate: false,
+            saturated: false
+        };
+    }
+    confirm(terminalId, messageId) {
+        const bucket = this.terminals.get(terminalId);
+        if (!bucket) {
+            return false;
+        }
+        this.pruneExpired(bucket, this.now());
+        if (bucket.tombstones.has(messageId)) {
+            return true;
+        }
+        const entry = bucket?.entries.get(messageId);
+        if (!entry?.settled) {
+            return false;
+        }
+        bucket.entries.delete(messageId);
+        this.addTombstone(bucket, messageId);
+        return true;
+    }
+    clear(terminalId) {
+        this.terminals.delete(terminalId);
+    }
+    deleteBucketIfEmpty(terminalId, bucket) {
+        if (bucket.entries.size === 0 &&
+            bucket.tombstones.size === 0 &&
+            this.terminals.get(terminalId) === bucket) {
+            this.terminals.delete(terminalId);
+        }
+    }
+    getOrCreateBucket(terminalId, now) {
+        const existing = this.terminals.get(terminalId);
+        if (existing) {
+            this.pruneExpired(existing, now);
+            this.terminals.delete(terminalId);
+            this.terminals.set(terminalId, existing);
+            return existing;
+        }
+        this.pruneExpiredBuckets(now);
+        if (Number.isFinite(this.maxTerminals) &&
+            this.terminals.size >= this.maxTerminals) {
+            return null;
+        }
+        const bucket = {
+            entries: new Map(),
+            tombstones: new Map()
+        };
+        this.terminals.set(terminalId, bucket);
+        return bucket;
+    }
+    makeEntryRoom(bucket) {
+        return bucket.entries.size < this.maxEntriesPerTerminal;
+    }
+    addTombstone(bucket, messageId) {
+        bucket.tombstones.delete(messageId);
+        bucket.tombstones.set(messageId, this.now() + this.confirmedTtlMs());
+        while (bucket.tombstones.size > this.maxEntriesPerTerminal) {
+            const oldest = bucket.tombstones.keys().next().value;
+            if (oldest === undefined) {
+                break;
+            }
+            bucket.tombstones.delete(oldest);
+        }
+    }
+    pruneExpired(bucket, now) {
+        for (const [messageId, entry] of bucket.entries) {
+            if (entry.settled && entry.expiresAt !== null && entry.expiresAt <= now) {
+                bucket.entries.delete(messageId);
+            }
+        }
+        for (const [messageId, expiresAt] of bucket.tombstones) {
+            if (expiresAt <= now) {
+                bucket.tombstones.delete(messageId);
+            }
+        }
+    }
+    pruneExpiredBuckets(now) {
+        for (const [terminalId, bucket] of this.terminals) {
+            this.pruneExpired(bucket, now);
+            this.deleteBucketIfEmpty(terminalId, bucket);
+        }
+    }
+    now() {
+        return this.options.now?.() ?? Date.now();
+    }
+    unconfirmedTtlMs() {
+        return this.options.unconfirmedTtlMs ?? terminalInputDedupUnconfirmedTtlMs;
+    }
+    confirmedTtlMs() {
+        return this.options.confirmedTtlMs ?? terminalInputDedupConfirmedTtlMs;
+    }
+}
+export function terminalSocketMessageTooLarge(data) {
+    return rawDataByteLength(data) > terminalSocketMaxMessageBytes;
+}
+function rawDataByteLength(data) {
+    if (Buffer.isBuffer(data)) {
+        return data.byteLength;
+    }
+    if (Array.isArray(data)) {
+        return data.reduce((total, chunk) => total + chunk.byteLength, 0);
+    }
+    return data.byteLength;
+}
+//# sourceMappingURL=terminalSocketMessage.js.map

package/dist/server/routes/terminalSocketMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalSocketMessage.js","sourceRoot":"","sources":["../../../src/server/routes/terminalSocketMessage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,MAAM,CAAC,MAAM,oCAAoC,GAAG,IAAI,CAAC;AACzD,MAAM,CAAC,MAAM,kCAAkC,GAAG,6BAA6B,CAAC;AAChF,MAAM,CAAC,MAAM,gCAAgC,GAAG,6BAA6B,CAAC;AAmB9E,MAAM,OAAO,yBAAyB;IAIjB;IAIA;IACA;IARF,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEpE,YACmB,wBAAwB,oCAAoC;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,2DAA2D;IAC1C,eAAe,MAAM,CAAC,iBAAiB,EACvC,UAIb,EAAE;QATW,0BAAqB,GAArB,qBAAqB,CAAuC;QAI5D,iBAAY,GAAZ,YAAY,CAA2B;QACvC,YAAO,GAAP,OAAO,CAIlB;IACL,CAAC;IAEJ,KAAK,CAAC,OAAO,CACX,UAAkB,EAClB,SAA6B,EAC7B,KAAuC;QAEvC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,QAAQ,EAAE,MAAM,KAAK,EAAE;gBACvB,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,MAAM,QAAQ,CAAC,OAAO;gBAChC,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,eAA6C,CAAC;QAClD,IAAI,cAAyC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACvD,eAAe,GAAG,OAAO,CAAC;YAC1B,cAAc,GAAG,MAAM,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAC3B,CAAC,QAAQ,EAAE,EAAE;gBACX,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrB,KAAK,CAAC,SAAS,GAAG,QAAQ;oBACxB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,EAAE;oBACtC,CAAC,CAAC,IAAI,CAAC;gBACT,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;oBACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/C,CAAC;gBACD,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gBACR,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrB,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACjC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/C,CAAC;gBACD,cAAc,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM,OAAO;YACvB,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,UAAkB,EAAE,SAAiB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAkB;QACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAEO,mBAAmB,CAAC,UAAkB,EAAE,MAA2B;QACzE,IACE,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YACzB,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EACzC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,UAAkB,EAAE,GAAW;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACzC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC9B,IACE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAwB;YAClC,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,UAAU,EAAE,IAAI,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,MAA2B;QAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC1D,CAAC;IAEO,YAAY,CAAC,MAA2B,EAAE,SAAiB;QACjE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YAC3E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM;YACR,CAAC;YACD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAA2B,EAAE,GAAW;QAC3D,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACxE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACvD,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,GAAW;QACrC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,kCAAkC,CAAC;IAC7E,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,gCAAgC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAuB;IACnE,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,6BAA6B,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAuB;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC,UAAU,CAAC;AACzB,CAAC"}

package/dist/server/routes/terminalWebSocket.d.ts

@@ -2,8 +2,10 @@ import type { FastifyInstance } from 'fastify';
 import { type AppConfig } from '../config.js';
 import type { AuthService } from '../auth/authService.js';
 import type { TerminalManager } from '../terminal/TerminalManager.js';
+import type { AuthenticatedSocketRegistry } from './authenticatedSocketRegistry.js';
+export declare const terminalSocketProcessInstanceId: `${string}-${string}-${string}-${string}-${string}`;
 export interface TerminalWebSocketServices {
     authService: AuthService;
     terminalManager: TerminalManager;
 }
-export declare function registerTerminalWebSocket(app: FastifyInstance, config: AppConfig, services: TerminalWebSocketServices): Promise<void>;
+export declare function registerTerminalWebSocket(app: FastifyInstance, config: AppConfig, services: TerminalWebSocketServices, authenticatedSocketRegistry: AuthenticatedSocketRegistry): Promise<void>;

package/dist/server/routes/terminalWebSocket.js

@@ -2,138 +2,213 @@ import WebSocket from 'ws';
 import { isAllowedOrigin } from '../config.js';
 import { parseClientTerminalMessage } from '../../shared/protocol.js';
 import { authenticateTerminalRequest } from './terminalRoutes.js';
-import { SocketBackpressure } from './socketBackpressure.js';
-// Bytes pending in this socket's outbound buffer before we ask the PTY to
-// pause. 1 MB is enough to absorb normal interactive spikes but small enough
-// that a stalled client can't grow it unbounded.
-const PAUSE_HIGH_WATER_BYTES = 1 << 20;
-// Resume once the buffer drains back below this — gives the socket headroom
-// before the next pause/resume cycle.
-const PAUSE_LOW_WATER_BYTES = 64 << 10;
-// How often to poll bufferedAmount while paused. ws doesn't emit a drain
-// event we can hook here, so we sample on a coarse interval.
-const DRAIN_POLL_MS = 50;
-export async function registerTerminalWebSocket(app, config, services) {
-    app.get('/api/terminals/:id/ws', { websocket: true }, async (socket, request) => {
-        if (!request.headers.origin) {
-            request.log.warn({ event: 'terminal_ws_rejected', terminalId: request.params.id, reason: 'origin_required' }, 'terminal websocket rejected');
-            socket.close(1008, 'origin required');
-            return;
-        }
-        if (!isAllowedOrigin(config, request.headers.origin)) {
-            request.log.warn({ event: 'terminal_ws_rejected', terminalId: request.params.id, reason: 'origin_not_allowed' }, 'terminal websocket rejected');
-            socket.close(1008, 'origin not allowed');
-            return;
-        }
-        const auth = await authenticateTerminalRequest(services.authService, request);
-        if (!auth) {
-            request.log.warn({ event: 'terminal_ws_rejected', terminalId: request.params.id, reason: 'auth_failed' }, 'terminal websocket rejected');
-            socket.close(1008, 'unauthorized');
-            return;
-        }
-        const terminalId = request.params.id;
-        let snapshotSent = false;
-        const pendingMessages = [];
-        // Forward-declared so the subscriber closure (registered below) and the
-        // backpressure sink can both reference it. Assigned exactly once before
-        // any send occurs, so the optional chains in the sink stay null-safe
-        // without ever actually hitting null in practice.
-        let attachment = null;
-        const backpressure = new SocketBackpressure({
-            get bufferedAmount() {
-                return socket.bufferedAmount;
-            },
-            isOpen: () => socket.readyState === WebSocket.OPEN
-        }, {
-            pause: () => attachment?.pause(),
-            resume: () => attachment?.resume()
-        }, {
-            highWaterBytes: PAUSE_HIGH_WATER_BYTES,
-            lowWaterBytes: PAUSE_LOW_WATER_BYTES,
-            pollMs: DRAIN_POLL_MS
-        });
-        const sendWithBackpressure = (message) => {
-            sendJson(socket, message);
-            backpressure.observe();
-        };
-        attachment = services.terminalManager.attachTerminal(terminalId, (message) => {
-            if (!snapshotSent) {
-                pendingMessages.push(message);
-                return;
-            }
-            sendWithBackpressure(message);
-        }, { replay: false });
-        if (!attachment) {
-            backpressure.dispose();
-            socket.close(1008, 'terminal not found');
-            return;
-        }
-        sendWithBackpressure({ type: 'snapshot', terminal: attachment.terminal, output: attachment.output, history: attachment.history });
-        snapshotSent = true;
-        for (const message of pendingMessages) {
-            sendWithBackpressure(message);
-        }
-        pendingMessages.length = 0;
-        let isAlive = true;
-        const heartbeat = setInterval(() => {
-            if (socket.readyState !== WebSocket.OPEN) {
+import { SocketBackpressure, terminalSocketBackpressureOptions } from './socketBackpressure.js';
+import { TerminalInputDeduplicator, terminalSocketMessageTooLarge } from './terminalSocketMessage.js';
+import { pauseWebSocketDuringSetup } from './webSocketRelay.js';
+import { preValidateBrowserWebSocketUpgrade } from './webSocketUpgradeAuth.js';
+export const terminalSocketProcessInstanceId = crypto.randomUUID();
+export async function registerTerminalWebSocket(app, config, services, authenticatedSocketRegistry) {
+    const inputDeduplicator = new TerminalInputDeduplicator();
+    app.get('/api/terminals/:id/ws', {
+        websocket: true,
+        preValidation: (request, reply) => preValidateBrowserWebSocketUpgrade(config, services.authService, request, reply)
+    }, async (socket, request) => {
+        const resumeSetup = pauseWebSocketDuringSetup(socket);
+        try {
+            if (!request.headers.origin) {
+                request.log.warn({ event: 'terminal_ws_rejected', terminalId: request.params.id, reason: 'origin_required' }, 'terminal websocket rejected');
+                socket.close(1008, 'origin required');
                 return;
             }
-            if (!isAlive) {
-                socket.terminate();
+            if (!isAllowedOrigin(config, request.headers.origin)) {
+                request.log.warn({ event: 'terminal_ws_rejected', terminalId: request.params.id, reason: 'origin_not_allowed' }, 'terminal websocket rejected');
+                socket.close(1008, 'origin not allowed');
                 return;
             }
-            isAlive = false;
-            socket.ping();
-        }, 30_000);
-        socket.on('pong', () => {
-            isAlive = true;
-        });
-        socket.on('message', (raw) => {
-            const message = parseClientTerminalMessage(raw.toString());
-            if (!message) {
-                sendJson(socket, { type: 'error', message: 'invalid terminal message' });
+            const auth = await authenticateTerminalRequest(services.authService, request);
+            if (!auth) {
+                request.log.warn({ event: 'terminal_ws_rejected', terminalId: request.params.id, reason: 'auth_failed' }, 'terminal websocket rejected');
+                socket.close(1008, 'unauthorized');
                 return;
             }
-            if (message.type === 'ping') {
-                sendJson(socket, { type: 'pong', nonce: message.nonce });
+            const socketRegistration = authenticatedSocketRegistry.register(socket, auth);
+            if (!socketRegistration) {
+                socket.close(1008, 'unauthorized');
                 return;
             }
-            if (message.terminalId !== terminalId) {
-                sendJson(socket, { type: 'error', message: 'terminal id mismatch' });
-                return;
-            }
-            if (message.type === 'refresh_cwd') {
-                void services.terminalManager.refreshTerminalCwd(message.terminalId);
-                return;
-            }
-            if (message.type === 'scrollback_scroll') {
-                if (!services.terminalManager.scrollTerminalScrollback(message.terminalId, message.lines)) {
-                    sendJson(socket, { type: 'error', message: 'terminal scrollback is unavailable' });
+            const terminalId = request.params.id;
+            let snapshotSent = false;
+            const pendingMessages = [];
+            // Forward-declared so the subscriber closure (registered below) and the
+            // backpressure sink can both reference it. Assigned exactly once before
+            // any send occurs, so the optional chains in the sink stay null-safe
+            // without ever actually hitting null in practice.
+            let attachment = null;
+            const backpressure = new SocketBackpressure({
+                get bufferedAmount() {
+                    return socket.bufferedAmount;
+                },
+                isOpen: () => socket.readyState === WebSocket.OPEN
+            }, {
+                pause: () => {
+                    // A terminal can have multiple viewers. Pausing the shared PTY for
+                    // one slow browser would freeze every viewer and eventually the
+                    // child process itself, so isolate this consumer and let it
+                    // reconnect from the retained output snapshot.
+                    socketRegistration.unregister();
+                    attachment?.dispose();
+                    if (socket.readyState === WebSocket.OPEN) {
+                        socket.close(1013, 'terminal client too slow');
+                    }
+                },
+                resume: () => undefined
+            }, terminalSocketBackpressureOptions);
+            const sendWithBackpressure = (message) => {
+                if (!socketRegistration.isActive() || socket.readyState !== WebSocket.OPEN) {
+                    return;
                 }
-                return;
-            }
-            if (message.type === 'cancel_scrollback') {
-                if (!services.terminalManager.cancelTerminalScrollbackMode(message.terminalId)) {
-                    sendJson(socket, { type: 'error', message: 'terminal scrollback is unavailable' });
+                sendJson(socket, message);
+                backpressure.observe();
+            };
+            attachment = await services.terminalManager.attachTerminalAsync(terminalId, (message) => {
+                if (message.type === 'exit') {
+                    inputDeduplicator.clear(terminalId);
+                }
+                if (!snapshotSent) {
+                    pendingMessages.push(message);
+                    return;
                 }
+                sendWithBackpressure(message);
+            }, { replay: false });
+            if (!attachment) {
+                inputDeduplicator.clear(terminalId);
+                backpressure.dispose();
+                socketRegistration.unregister();
+                socket.close(1008, 'terminal not found');
                 return;
             }
-            if (message.type === 'input') {
-                if (!services.terminalManager.writeToTerminal(message.terminalId, message.data, { cancelScrollbackMode: message.cancelScrollbackMode === true })) {
-                    sendJson(socket, { type: 'error', message: 'terminal is not writable' });
+            let isAlive = true;
+            const heartbeat = setInterval(() => {
+                if (socket.readyState !== WebSocket.OPEN) {
+                    return;
+                }
+                if (!isAlive) {
+                    socket.terminate();
+                    return;
                 }
+                isAlive = false;
+                socket.ping();
+            }, 30_000);
+            socket.on('pong', () => {
+                isAlive = true;
+            });
+            let cleanedUp = false;
+            let removeInvalidationListener = () => undefined;
+            const cleanup = () => {
+                if (cleanedUp) {
+                    return;
+                }
+                cleanedUp = true;
+                removeInvalidationListener();
+                socketRegistration.unregister();
+                clearInterval(heartbeat);
+                backpressure.dispose();
+                attachment?.dispose();
+            };
+            socket.on('message', (raw) => {
+                if (!socketRegistration.isActive()) {
+                    return;
+                }
+                if (terminalSocketMessageTooLarge(raw)) {
+                    cleanup();
+                    socket.close(1009, 'terminal message too large');
+                    return;
+                }
+                const message = parseClientTerminalMessage(raw.toString());
+                if (!message) {
+                    sendWithBackpressure({ type: 'error', message: 'invalid terminal message' });
+                    return;
+                }
+                if (message.type === 'ping') {
+                    sendWithBackpressure({ type: 'pong', nonce: message.nonce });
+                    return;
+                }
+                if (message.terminalId !== terminalId) {
+                    sendWithBackpressure({ type: 'error', message: 'terminal id mismatch' });
+                    return;
+                }
+                if (message.type === 'input_ack_received') {
+                    inputDeduplicator.confirm(message.terminalId, message.messageId);
+                    sendWithBackpressure({
+                        type: 'input_ack_confirmed',
+                        terminalId: message.terminalId,
+                        messageId: message.messageId
+                    });
+                    return;
+                }
+                if (message.type === 'refresh_cwd') {
+                    void services.terminalManager.refreshTerminalCwd(message.terminalId);
+                    return;
+                }
+                if (message.type === 'scrollback_scroll') {
+                    void services.terminalManager.scrollTerminalScrollback(message.terminalId, message.lines, { canExecute: socketRegistration.isActive }).then((ok) => {
+                        if (!ok)
+                            sendWithBackpressure({ type: 'error', message: 'terminal scrollback is unavailable' });
+                    }, () => sendWithBackpressure({ type: 'error', message: 'terminal scrollback is unavailable' }));
+                    return;
+                }
+                if (message.type === 'cancel_scrollback') {
+                    void services.terminalManager.cancelTerminalScrollbackMode(message.terminalId, { canExecute: socketRegistration.isActive }).then((ok) => {
+                        if (!ok)
+                            sendWithBackpressure({ type: 'error', message: 'terminal scrollback is unavailable' });
+                    }, () => sendWithBackpressure({ type: 'error', message: 'terminal scrollback is unavailable' }));
+                    return;
+                }
+                if (message.type === 'input') {
+                    void inputDeduplicator.deliver(message.terminalId, message.messageId, () => services.terminalManager.writeToTerminal(message.terminalId, message.data, {
+                        cancelScrollbackMode: message.cancelScrollbackMode === true,
+                        canExecute: socketRegistration.isActive
+                    })).then((result) => {
+                        if (!result.accepted) {
+                            sendWithBackpressure({ type: 'error', message: 'terminal is not writable' });
+                            return;
+                        }
+                        if (message.messageId) {
+                            sendWithBackpressure({
+                                type: 'input_ack',
+                                terminalId: message.terminalId,
+                                messageId: message.messageId
+                            });
+                        }
+                    }, () => sendWithBackpressure({ type: 'error', message: 'terminal is not writable' }));
+                    return;
+                }
+                if (!services.terminalManager.resizeTerminal(message.terminalId, message.cols, message.rows)) {
+                    sendWithBackpressure({ type: 'error', message: 'terminal is not resizable' });
+                }
+            });
+            removeInvalidationListener = socketRegistration.onInvalidated(cleanup);
+            socket.on('close', cleanup);
+            socket.on('error', cleanup);
+            if (!socketRegistration.isActive() || socket.readyState !== WebSocket.OPEN) {
                 return;
             }
-            if (!services.terminalManager.resizeTerminal(message.terminalId, message.cols, message.rows)) {
-                sendJson(socket, { type: 'error', message: 'terminal is not resizable' });
+            sendWithBackpressure({
+                type: 'terminal_protocol',
+                inputAck: true,
+                instanceId: terminalSocketProcessInstanceId
+            });
+            resumeSetup();
+            sendWithBackpressure({ type: 'snapshot', terminal: attachment.terminal, output: attachment.output, history: attachment.history });
+            snapshotSent = true;
+            for (const message of pendingMessages) {
+                sendWithBackpressure(message);
             }
-        });
-        socket.on('close', () => {
-            clearInterval(heartbeat);
-            backpressure.dispose();
-            attachment?.dispose();
-        });
+            pendingMessages.length = 0;
+        }
+        finally {
+            resumeSetup();
+        }
     });
 }
 function sendJson(socket, payload) {

package/dist/server/routes/terminalWebSocket.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminalWebSocket.js","sourceRoot":"","sources":["../../../src/server/routes/terminalWebSocket.ts"],"names":[],"mappings":"AACA,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAkB,MAAM,cAAc,CAAC;AAG/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAO7D,0EAA0E;AAC1E,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,CAAC;AACvC,4EAA4E;AAC5E,sCAAsC;AACtC,MAAM,qBAAqB,GAAG,EAAE,IAAI,EAAE,CAAC;AACvC,yEAAyE;AACzE,6DAA6D;AAC7D,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAoB,EACpB,MAAiB,EACjB,QAAmC;IAEnC,GAAG,CAAC,GAAG,CAA6B,uBAAuB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAC1G,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAC3F,6BAA6B,CAC9B,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAC9F,6BAA6B,CAC9B,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EACvF,6BAA6B,CAC9B,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,eAAe,GAA4B,EAAE,CAAC;QACpD,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,kDAAkD;QAClD,IAAI,UAAU,GAA8B,IAAI,CAAC;QAEjD,MAAM,YAAY,GAAG,IAAI,kBAAkB,CACzC;YACE,IAAI,cAAc;gBAChB,OAAO,MAAM,CAAC,cAAc,CAAC;YAC/B,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;SACnD,EACD;YACE,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE;YAChC,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE;SACnC,EACD;YACE,cAAc,EAAE,sBAAsB;YACtC,aAAa,EAAE,qBAAqB;YACpC,MAAM,EAAE,aAAa;SACtB,CACF,CAAC;QAEF,MAAM,oBAAoB,GAAG,CAAC,OAA8B,EAAE,EAAE;YAC9D,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1B,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC,CAAC;QAEF,UAAU,GAAG,QAAQ,CAAC,eAAe,CAAC,cAAc,CAClD,UAAU,EACV,CAAC,OAAO,EAAE,EAAE;YACV,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,YAAY,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,oBAAoB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAClI,YAAY,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QAE3B,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,SAAS,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACtC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,KAAK,QAAQ,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,wBAAwB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1F,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;gBACrF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACzC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,4BAA4B,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/E,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;gBACrF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;oBACjJ,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7F,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,YAAY,CAAC,OAAO,EAAE,CAAC;YACvB,UAAU,EAAE,OAAO,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,MAAiB,EAAE,OAAgB;IACnD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}
+{"version":3,"file":"terminalWebSocket.js","sourceRoot":"","sources":["../../../src/server/routes/terminalWebSocket.ts"],"names":[],"mappings":"AACA,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAkB,MAAM,cAAc,CAAC;AAG/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAEhG,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAE/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;AAOnE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAoB,EACpB,MAAiB,EACjB,QAAmC,EACnC,2BAAwD;IAExD,MAAM,iBAAiB,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC1D,GAAG,CAAC,GAAG,CACL,uBAAuB,EACvB;QACE,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,kCAAkC,CACnE,MAAM,EACN,QAAQ,CAAC,WAAW,EACpB,OAAO,EACP,KAAK,CACN;KACF,EACD,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC;YACL,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAC3F,6BAA6B,CAC9B,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAC9F,6BAA6B,CAC9B,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EACvF,6BAA6B,CAC9B,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9E,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,MAAM,eAAe,GAA4B,EAAE,CAAC;YACpD,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,kDAAkD;YAClD,IAAI,UAAU,GAA8B,IAAI,CAAC;YAEjD,MAAM,YAAY,GAAG,IAAI,kBAAkB,CACzC;gBACE,IAAI,cAAc;oBAChB,OAAO,MAAM,CAAC,cAAc,CAAC;gBAC/B,CAAC;gBACD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;aACnD,EACD;gBACE,KAAK,EAAE,GAAG,EAAE;oBACV,mEAAmE;oBACnE,gEAAgE;oBAChE,4DAA4D;oBAC5D,+CAA+C;oBAC/C,kBAAkB,CAAC,UAAU,EAAE,CAAC;oBAChC,UAAU,EAAE,OAAO,EAAE,CAAC;oBACtB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;wBACzC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;gBACD,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS;aACxB,EACD,iCAAiC,CAClC,CAAC;YAEF,MAAM,oBAAoB,GAAG,CAAC,OAA8B,EAAE,EAAE;gBAC9D,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1B,YAAY,CAAC,OAAO,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,UAAU,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,mBAAmB,CAC7D,UAAU,EACV,CAAC,OAAO,EAAE,EAAE;gBACV,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC5B,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBACD,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpC,YAAY,CAAC,OAAO,EAAE,CAAC;gBACvB,kBAAkB,CAAC,UAAU,EAAE,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,IAAI,OAAO,GAAG,IAAI,CAAC;YACnB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBACjC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;oBACzC,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACrB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,0BAA0B,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;YAC7D,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC;gBACjB,0BAA0B,EAAE,CAAC;gBAC7B,kBAAkB,CAAC,UAAU,EAAE,CAAC;gBAChC,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzB,YAAY,CAAC,OAAO,EAAE,CAAC;gBACvB,UAAU,EAAE,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC;YAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3B,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD,IAAI,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvC,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;oBACjD,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC5B,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC7D,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACtC,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACzE,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;oBACjE,oBAAoB,CAAC;wBACnB,IAAI,EAAE,qBAAqB;wBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACnC,KAAK,QAAQ,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;oBACrE,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;oBACzC,KAAK,QAAQ,CAAC,eAAe,CAAC,wBAAwB,CACpD,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,KAAK,EACb,EAAE,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;wBACZ,IAAI,CAAC,EAAE;4BAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;oBAClG,CAAC,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;oBACjG,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;oBACzC,KAAK,QAAQ,CAAC,eAAe,CAAC,4BAA4B,CACxD,OAAO,CAAC,UAAU,EAClB,EAAE,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAC5C,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;wBACZ,IAAI,CAAC,EAAE;4BAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;oBAClG,CAAC,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;oBACjG,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,KAAK,iBAAiB,CAAC,OAAO,CAC5B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,SAAS,EACjB,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE;wBAC/E,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,KAAK,IAAI;wBAC3D,UAAU,EAAE,kBAAkB,CAAC,QAAQ;qBACxC,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;4BACrB,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;4BAC7E,OAAO;wBACT,CAAC;wBACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;4BACtB,oBAAoB,CAAC;gCACnB,IAAI,EAAE,WAAW;gCACjB,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;6BAC7B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;oBACvF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7F,oBAAoB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,0BAA0B,GAAG,kBAAkB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACvE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,oBAAoB,CAAC;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,+BAA+B;aAC5C,CAAC,CAAC;YACH,WAAW,EAAE,CAAC;YACd,oBAAoB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YAClI,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,WAAW,EAAE,CAAC;QAChB,CAAC;IACD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAAiB,EAAE,OAAgB;IACnD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/server/routes/webSocketRelay.d.ts

@@ -5,8 +5,22 @@ interface WebSocketRelayOptions {
     pendingMessageOverflowCode?: number;
     pendingByteOverflowCode?: number;
     pendingOverflowReason?: string;
+    isClientActive?: () => boolean;
+    onClientInvalidated?: (listener: (code: number, reason: string) => void) => () => void;
     onClientMessage?: () => void;
     onUpstreamMessage?: () => void;
+    maxClientMessageBytes?: number;
+    maxUpstreamMessageBytes?: number;
+    mapUpstreamClose?: (code: number, reason: string) => {
+        code: number;
+        reason: string;
+    };
+    mapUpstreamUnexpectedResponse?: (statusCode: number) => {
+        code: number;
+        reason: string;
+    };
 }
+export declare const outboundWebSocketMaxPayloadBytes: number;
+export declare function pauseWebSocketDuringSetup(socket: WebSocket): () => void;
 export declare function relayWebSocketPair(clientSocket: WebSocket, upstreamSocket: WebSocket, options?: WebSocketRelayOptions): void;
 export {};