statewire 0.13.1 → 0.15.0

package/dist/host/http.d.ts

@@ -1,7 +1,8 @@
 import { SocketHostState } from "./socket.js";
+import { MAX_FRAME_BODY_BYTES } from "../wire/limits.js";
 //#region src/host/http.d.ts
 declare const stream: (h: SocketHostState, request: Request) => Promise<Response>;
 declare const frames: (h: SocketHostState, request: Request) => Promise<Response>;
 //#endregion
-export { frames, stream };
+export { MAX_FRAME_BODY_BYTES, frames, stream };
 //# sourceMappingURL=http.d.ts.map

package/dist/host/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","names":[],"sources":["../../src/host/http.ts"],"mappings":";;cAiNa,SACX,GAAG,iBACH,SAAS,YACR,QAAQ;cAkCE,SACX,GAAG,iBACH,SAAS,YACR,QAAQ"}
+{"version":3,"file":"http.d.ts","names":[],"sources":["../../src/host/http.ts"],"mappings":";;;cAiTa,SACX,GAAG,iBACH,SAAS,YACR,QAAQ;cAkCE,SACX,GAAG,iBACH,SAAS,YACR,QAAQ"}

package/dist/host/http.js

@@ -1,10 +1,39 @@
-import { CLIENT_ID_RE, admitFrame, closeConn, flush, parseFrame, parseFrameValue, register, sendTo } from "./socket.js";
+import { MAX_FRAME_BODY_BYTES } from "../wire/limits.js";
+import { VERSION_HEADER } from "../wire/version.js";
+import { CLIENT_ID_RE, PRINCIPAL_MISMATCH_MESSAGE, SUBSCRIBER_LIMIT_MESSAGE, admitFrame, atSubscriberLimit, authEquals, closeConn, flush, parseFrame, parseFrameValue, register, sendTo } from "./socket.js";
 //#region src/host/http.ts
 const CLIENT_ID_HEADER = "Statewire-Client-Id";
 const LEASE_HEADER = "Statewire-Lease";
-const VERSION_HEADER = "Statewire-Version";
-const VERSION = "1";
 const encoder = new TextEncoder();
+const laggardFin = encoder.encode("data: {\"fin\":{\"reason\":\"reconnect\",\"code\":\"client-fell-behind\"}}\n\n");
+const readFrameBody = async (request) => {
+	const declared = request.headers.get("content-length");
+	if (declared !== null && Number(declared) > 8388608) {
+		await request.body?.cancel("frame body too large").catch(() => {});
+		return null;
+	}
+	if (request.body === null) return "";
+	const reader = request.body.getReader();
+	const chunks = [];
+	let size = 0;
+	for (;;) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		size += value.length;
+		if (size > 8388608) {
+			await reader.cancel("frame body too large").catch(() => {});
+			return null;
+		}
+		chunks.push(value);
+	}
+	const body = new Uint8Array(size);
+	let offset = 0;
+	for (const chunk of chunks) {
+		body.set(chunk, offset);
+		offset += chunk.length;
+	}
+	return new TextDecoder().decode(body);
+};
 const invalidClientIdReason = (clientId) => {
 	if (clientId === "") return "id must be non-empty";
 	if (clientId.length > 256) return "id must be at most 256 characters";
@@ -19,28 +48,29 @@ const clientIdResponse = (request) => {
 	return { clientId };
 };
 const headersOf = (request) => Object.fromEntries(request.headers);
-const mergedHeaders = (request, extra) => {
-	const headers = headersOf(request);
-	for (const [name, value] of Object.entries(extra)) headers[name.toLowerCase()] = value;
-	return headers;
-};
 const authorize = async (h, headers) => {
 	try {
-		await h.authorize?.({ headers });
-		return null;
+		return { auth: await h.authorize?.({ headers }) };
 	} catch (error) {
-		if (error instanceof Response) return error;
+		if (error instanceof Response) return { refused: error };
 		throw error;
 	}
 };
+const subscriberLimitResponse = () => Response.json({ detail: SUBSCRIBER_LIMIT_MESSAGE }, { status: 503 });
+const principalMismatchResponse = (h, clientId, auth) => {
+	const rec = h.clients.get(clientId);
+	if (rec !== void 0 && !authEquals(rec.principal, auth)) return Response.json({ detail: PRINCIPAL_MISMATCH_MESSAGE }, { status: 403 });
+	return null;
+};
 const mintLease = () => {
 	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
 	return btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 };
-const attachSse = (h, clientId) => {
+const attachSse = (h, clientId, auth) => {
 	let controller;
 	let connection = null;
 	let open = true;
+	let backpressureActive = false;
 	const body = new ReadableStream({
 		start: (next) => {
 			controller = next;
@@ -49,10 +79,19 @@ const attachSse = (h, clientId) => {
 			open = false;
 			connection?.close();
 		}
-	});
+	}, { highWaterMark: h.streamQueueSize });
 	const registration = register(h, clientId, {
 		send: (data) => {
 			if (!open) return;
+			if (backpressureActive && controller.desiredSize !== null && controller.desiredSize <= 0) {
+				open = false;
+				try {
+					controller.enqueue(laggardFin);
+					controller.close();
+				} catch {}
+				connection?.close();
+				return;
+			}
 			const frame = data === "{}" ? ": ping\n\n" : `data: ${data}\n\n`;
 			try {
 				controller.enqueue(encoder.encode(frame));
@@ -70,33 +109,42 @@ const attachSse = (h, clientId) => {
 				return;
 			}
 		}
-	});
+	}, false, auth);
 	connection = registration?.connection ?? null;
 	if (!open) connection?.close();
 	return {
 		body,
-		registration
+		registration,
+		activateBackpressure: () => {
+			backpressureActive = true;
+		}
 	};
 };
-const streamResponse = (attachment, lease) => new Response(attachment.body, {
-	status: 200,
-	headers: {
-		"Content-Type": "text/event-stream",
-		[VERSION_HEADER]: VERSION,
-		...lease !== null && { [LEASE_HEADER]: lease }
-	}
-});
+const streamResponse = (attachment, lease) => {
+	attachment.activateBackpressure();
+	return new Response(attachment.body, {
+		status: 200,
+		headers: {
+			"Content-Type": "text/event-stream",
+			[VERSION_HEADER]: "1",
+			...lease !== null && { [LEASE_HEADER]: lease }
+		}
+	});
+};
 const admitAttachFrame = (h, registration, frame) => {
 	if (frame.ctx.length === 0 && frame.cmd.length === 0) return;
-	const admission = admitFrame(h, registration.rec, frame);
+	const admission = admitFrame(h, registration.rec, frame, registration.conn.auth);
 	if (admission.type === "refused") sendTo(h, registration.conn, JSON.stringify(admission.syn));
 };
 const getStream = async (h, request) => {
-	const refused = await authorize(h, headersOf(request));
-	if (refused !== null) return refused;
+	const authorized = await authorize(h, headersOf(request));
+	if ("refused" in authorized) return authorized.refused;
 	const client = clientIdResponse(request);
 	if ("response" in client) return client.response;
-	const attachment = attachSse(h, client.clientId);
+	const mismatch = principalMismatchResponse(h, client.clientId, authorized.auth);
+	if (mismatch !== null) return mismatch;
+	if (atSubscriberLimit(h)) return subscriberLimitResponse();
+	const attachment = attachSse(h, client.clientId, authorized.auth);
 	const lease = attachment.registration === null ? null : mintLease();
 	if (attachment.registration !== null) attachment.registration.conn.lease = lease;
 	return streamResponse(attachment, lease);
@@ -104,23 +152,30 @@ const getStream = async (h, request) => {
 const postStream = async (h, request) => {
 	const client = clientIdResponse(request);
 	if ("response" in client) return client.response;
+	const raw = await readFrameBody(request);
+	if (raw === null) return Response.json({ detail: "frame body too large" }, { status: 413 });
 	let body;
 	try {
-		body = JSON.parse(await request.text());
+		body = raw.trim() ? JSON.parse(raw) : null;
 	} catch {
 		return Response.json({ detail: "body must be JSON" }, { status: 400 });
 	}
 	let frame;
 	try {
-		frame = parseFrameValue(body, true);
+		frame = body === null && !raw.trim() ? {
+			ctx: [],
+			cmd: []
+		} : parseFrameValue(body);
 	} catch (error) {
 		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
 		return Response.json({ detail: error.message }, { status: 400 });
 	}
-	if (frame.headers === null) return Response.json({ detail: "first frame must carry headers" }, { status: 400 });
-	const refused = await authorize(h, mergedHeaders(request, frame.headers));
-	if (refused !== null) return refused;
-	const attachment = attachSse(h, client.clientId);
+	const authorized = await authorize(h, headersOf(request));
+	if ("refused" in authorized) return authorized.refused;
+	const mismatch = principalMismatchResponse(h, client.clientId, authorized.auth);
+	if (mismatch !== null) return mismatch;
+	if (atSubscriberLimit(h)) return subscriberLimitResponse();
+	const attachment = attachSse(h, client.clientId, authorized.auth);
 	if (attachment.registration === null) return streamResponse(attachment, null);
 	const lease = mintLease();
 	attachment.registration.conn.lease = lease;
@@ -145,32 +200,38 @@ const finClient = (h, clientId, fin) => {
 };
 const violationResponse = (h, clientId, reason) => {
 	finClient(h, clientId, {
-		reason: "error",
-		message: `protocol violation: ${reason}`
+		reason: "protocol-error",
+		message: reason
 	});
 	return Response.json({ error: reason }, { status: 400 });
 };
 const frames = async (h, request) => {
-	const refused = await authorize(h, headersOf(request));
-	if (refused !== null) return refused;
-	const client = clientIdResponse(request);
-	if ("response" in client) return client.response;
-	const rec = h.clients.get(client.clientId);
 	const lease = request.headers.get(LEASE_HEADER);
-	const live = lease !== null && [...h.conns].some((conn) => conn.open && conn.clientId === client.clientId && conn.lease === lease);
-	if (h.disposed || h.finished !== null || rec === void 0 || !live) return Response.json({ error: "stale-lease" }, { status: 423 });
+	const leased = lease === null ? void 0 : [...h.conns].find((conn) => conn.open && conn.lease === lease);
+	if (h.disposed || h.finished !== null || leased === void 0) return Response.json({ error: "stale-lease" }, { status: 423 });
+	const clientId = leased.clientId;
+	const rec = h.clients.get(clientId);
+	const raw = await readFrameBody(request);
+	if (raw === null) return Response.json({ error: "frame body too large" }, { status: 413 });
 	let frame;
 	try {
-		frame = parseFrame(await request.text(), false);
+		frame = parseFrame(raw);
 	} catch (error) {
 		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
-		return violationResponse(h, client.clientId, error.message);
+		return violationResponse(h, clientId, error.message);
+	}
+	if (!leased.open || h.disposed || h.finished !== null) return Response.json({ error: "stale-lease" }, { status: 423 });
+	const admission = admitFrame(h, rec, frame, leased.auth);
+	if (admission.type === "refused") {
+		const retry = admission.syn.syn.retry;
+		return Response.json(admission.syn, {
+			status: retry === void 0 ? 409 : 429,
+			...retry !== void 0 && { headers: { "Retry-After": String(Math.ceil(retry / 1e3)) } }
+		});
 	}
-	const admission = admitFrame(h, rec, frame);
-	if (admission.type === "refused") return Response.json(admission.syn, { status: 409 });
 	return Response.json({});
 };
 //#endregion
-export { frames, stream };
+export { MAX_FRAME_BODY_BYTES, frames, stream };
 
 //# sourceMappingURL=http.js.map

package/dist/host/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","names":["StatewireHost","CLIENT_ID_RE","admitFrame","closeConn","flush","parseFrame","parseFrameValue","register","sendTo","ParsedFrame","Registration","SocketHostState","CLIENT_ID_HEADER","LEASE_HEADER","VERSION_HEADER","VERSION","encoder","TextEncoder","invalidClientIdReason","clientId","length","test","clientIdResponse","request","Request","response","Response","headers","get","json","detail","status","reason","headersOf","Record","Object","fromEntries","mergedHeaders","extra","name","value","entries","toLowerCase","authorize","h","Promise","error","mintLease","bytes","crypto","getRandomValues","Uint8Array","btoa","String","fromCharCode","replaceAll","replace","SseAttachment","body","ReadableStream","registration","attachSse","controller","ReadableStreamDefaultController","connection","open","start","next","cancel","close","socket","send","data","frame","enqueue","encode","streamResponse","attachment","lease","admitAttachFrame","ctx","cmd","admission","rec","type","conn","JSON","stringify","syn","getStream","refused","client","postStream","parse","text","Error","message","stream","method","Allow","finClient","fin","Fin","conns","violationResponse","frames","clients","live","some","disposed","finished","undefined"],"sources":["../../src/host/http.ts"],"sourcesContent":["import type { StatewireHost } from \"../host\";\nimport {\n  CLIENT_ID_RE,\n  admitFrame,\n  closeConn,\n  flush,\n  parseFrame,\n  parseFrameValue,\n  register,\n  sendTo,\n} from \"./socket\";\nimport type { ParsedFrame, Registration, SocketHostState } from \"./socket\";\n\nconst CLIENT_ID_HEADER = \"Statewire-Client-Id\";\nconst LEASE_HEADER = \"Statewire-Lease\";\nconst VERSION_HEADER = \"Statewire-Version\";\nconst VERSION = \"1\";\nconst encoder = new TextEncoder();\n\nconst invalidClientIdReason = (clientId: string): string | null => {\n  if (clientId === \"\") return \"id must be non-empty\";\n  if (clientId.length > 256) return \"id must be at most 256 characters\";\n  if (!CLIENT_ID_RE.test(clientId)) {\n    return \"id must contain only [A-Za-z0-9._~-]\";\n  }\n  return null;\n};\n\nconst clientIdResponse = (\n  request: Request,\n): { clientId: string } | { response: Response } => {\n  const clientId = request.headers.get(CLIENT_ID_HEADER);\n  if (clientId === null) {\n    return {\n      response: Response.json(\n        { detail: `missing ${CLIENT_ID_HEADER} header` },\n        { status: 400 },\n      ),\n    };\n  }\n  const reason = invalidClientIdReason(clientId);\n  if (reason !== null) {\n    return {\n      response: Response.json(\n        { detail: `invalid ${CLIENT_ID_HEADER}: ${reason}` },\n        { status: 400 },\n      ),\n    };\n  }\n  return { clientId };\n};\n\nconst headersOf = (request: Request): Record<string, string> =>\n  Object.fromEntries(request.headers);\n\nconst mergedHeaders = (\n  request: Request,\n  extra: Record<string, string>,\n): Record<string, string> => {\n  const headers = headersOf(request);\n  for (const [name, value] of Object.entries(extra)) {\n    headers[name.toLowerCase()] = value;\n  }\n  return headers;\n};\n\nconst authorize = async (\n  h: SocketHostState,\n  headers: Record<string, string>,\n): Promise<Response | null> => {\n  try {\n    await h.authorize?.({ headers });\n    return null;\n  } catch (error) {\n    if (error instanceof Response) return error;\n    throw error;\n  }\n};\n\nconst mintLease = (): string => {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  return btoa(String.fromCharCode(...bytes))\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\ntype SseAttachment = {\n  body: ReadableStream<Uint8Array>;\n  registration: Registration | null;\n};\n\nconst attachSse = (h: SocketHostState, clientId: string): SseAttachment => {\n  let controller: ReadableStreamDefaultController<Uint8Array>;\n  let connection: Registration[\"connection\"] | null = null;\n  let open = true;\n  const body = new ReadableStream({\n    start: (next) => {\n      controller = next;\n    },\n    cancel: () => {\n      open = false;\n      connection?.close();\n    },\n  });\n  const socket = {\n    send: (data: string) => {\n      if (!open) return;\n      const frame = data === \"{}\" ? \": ping\\n\\n\" : `data: ${data}\\n\\n`;\n      try {\n        controller.enqueue(encoder.encode(frame));\n      } catch {\n        open = false;\n        connection?.close();\n      }\n    },\n    close: () => {\n      if (!open) return;\n      open = false;\n      try {\n        controller.close();\n      } catch {\n        return;\n      }\n    },\n  };\n  const registration = register(h, clientId, socket);\n  connection = registration?.connection ?? null;\n  if (!open) connection?.close();\n  return { body, registration };\n};\n\nconst streamResponse = (\n  attachment: SseAttachment,\n  lease: string | null,\n): Response =>\n  new Response(attachment.body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      [VERSION_HEADER]: VERSION,\n      ...(lease !== null && { [LEASE_HEADER]: lease }),\n    },\n  });\n\nconst admitAttachFrame = (\n  h: SocketHostState,\n  registration: Registration,\n  frame: ParsedFrame,\n) => {\n  if (frame.ctx.length === 0 && frame.cmd.length === 0) return;\n  const admission = admitFrame(h, registration.rec, frame);\n  if (admission.type === \"refused\") {\n    sendTo(h, registration.conn, JSON.stringify(admission.syn));\n  }\n};\n\nconst getStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const refused = await authorize(h, headersOf(request));\n  if (refused !== null) return refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const attachment = attachSse(h, client.clientId);\n  const lease = attachment.registration === null ? null : mintLease();\n  if (attachment.registration !== null)\n    attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nconst postStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  let body: unknown;\n  try {\n    body = JSON.parse(await request.text());\n  } catch {\n    return Response.json({ detail: \"body must be JSON\" }, { status: 400 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrameValue(body, true);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return Response.json({ detail: error.message }, { status: 400 });\n  }\n  if (frame.headers === null) {\n    return Response.json(\n      { detail: \"first frame must carry headers\" },\n      { status: 400 },\n    );\n  }\n  const refused = await authorize(h, mergedHeaders(request, frame.headers));\n  if (refused !== null) return refused;\n  const attachment = attachSse(h, client.clientId);\n  if (attachment.registration === null) return streamResponse(attachment, null);\n  const lease = mintLease();\n  attachment.registration.conn.lease = lease;\n  admitAttachFrame(h, attachment.registration, frame);\n  return streamResponse(attachment, lease);\n};\n\nexport const stream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  if (request.method === \"GET\") return getStream(h, request);\n  if (request.method === \"POST\") return postStream(h, request);\n  return new Response(null, {\n    status: 405,\n    headers: { Allow: \"GET, POST\" },\n  });\n};\n\nconst finClient = (\n  h: SocketHostState,\n  clientId: string,\n  fin: StatewireHost.Fin,\n) => {\n  flush(h);\n  for (const conn of [...h.conns]) {\n    if (conn.clientId !== clientId) continue;\n    sendTo(h, conn, JSON.stringify({ fin }));\n    closeConn(h, conn);\n  }\n};\n\nconst violationResponse = (\n  h: SocketHostState,\n  clientId: string,\n  reason: string,\n) => {\n  finClient(h, clientId, {\n    reason: \"error\",\n    message: `protocol violation: ${reason}`,\n  });\n  return Response.json({ error: reason }, { status: 400 });\n};\n\nexport const frames = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const refused = await authorize(h, headersOf(request));\n  if (refused !== null) return refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const rec = h.clients.get(client.clientId);\n  const lease = request.headers.get(LEASE_HEADER);\n  // A lease lives and dies with its attach: any live attach of the id accepts.\n  const live =\n    lease !== null &&\n    [...h.conns].some(\n      (conn) =>\n        conn.open && conn.clientId === client.clientId && conn.lease === lease,\n    );\n  if (h.disposed || h.finished !== null || rec === undefined || !live) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrame(await request.text(), false);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return violationResponse(h, client.clientId, error.message);\n  }\n  const admission = admitFrame(h, rec, frame);\n  if (admission.type === \"refused\") {\n    return Response.json(admission.syn, { status: 409 });\n  }\n  return Response.json({});\n};\n"],"mappings":";;AAaA,MAAMY,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,iBAAiB;AACvB,MAAMC,UAAU;AAChB,MAAMC,UAAU,IAAIC,YAAY;AAEhC,MAAMC,yBAAyBC,aAAoC;CACjE,IAAIA,aAAa,IAAI,OAAO;CAC5B,IAAIA,SAASC,SAAS,KAAK,OAAO;CAClC,IAAI,CAACnB,aAAaoB,KAAKF,QAAQ,GAC7B,OAAO;CAET,OAAO;AACT;AAEA,MAAMG,oBACJC,YACkD;CAClD,MAAMJ,WAAWI,QAAQI,QAAQC,IAAIhB,gBAAgB;CACrD,IAAIO,aAAa,MACf,OAAO,EACLM,UAAUC,SAASG,KACjB,EAAEC,QAAQ,WAAWlB,iBAAgB,SAAU,GAC/C,EAAEmB,QAAQ,IAAI,CAChB,EACF;CAEF,MAAMC,SAASd,sBAAsBC,QAAQ;CAC7C,IAAIa,WAAW,MACb,OAAO,EACLP,UAAUC,SAASG,KACjB,EAAEC,QAAQ,WAAWlB,iBAAgB,IAAKoB,SAAS,GACnD,EAAED,QAAQ,IAAI,CAChB,EACF;CAEF,OAAO,EAAEZ,SAAS;AACpB;AAEA,MAAMc,aAAaV,YACjBY,OAAOC,YAAYb,QAAQI,OAAO;AAEpC,MAAMU,iBACJd,SACAe,UAC2B;CAC3B,MAAMX,UAAUM,UAAUV,OAAO;CACjC,KAAK,MAAM,CAACgB,MAAMC,UAAUL,OAAOM,QAAQH,KAAK,GAC9CX,QAAQY,KAAKG,YAAY,KAAKF;CAEhC,OAAOb;AACT;AAEA,MAAMgB,YAAY,OAChBC,GACAjB,YAC6B;CAC7B,IAAI;EACF,MAAMiB,EAAED,YAAY,EAAEhB,QAAQ,CAAC;EAC/B,OAAO;CACT,SAASmB,OAAO;EACd,IAAIA,iBAAiBpB,UAAU,OAAOoB;EACtC,MAAMA;CACR;AACF;AAEA,MAAMC,kBAA0B;CAC9B,MAAMC,QAAQC,OAAOC,gCAAgB,IAAIC,WAAW,EAAE,CAAC;CACvD,OAAOC,KAAKC,OAAOC,aAAa,GAAGN,KAAK,CAAC,CAAC,CACvCO,WAAW,KAAK,GAAG,CAAC,CACpBA,WAAW,KAAK,GAAG,CAAC,CACpBC,QAAQ,OAAO,EAAE;AACtB;AAOA,MAAMK,aAAajB,GAAoBzB,aAAoC;CACzE,IAAI2C;CACJ,IAAIE,aAAgD;CACpD,IAAIC,OAAO;CACX,MAAMP,OAAO,IAAIC,eAAe;EAC9BO,QAAQC,SAAS;GACfL,aAAaK;EACf;EACAC,cAAc;GACZH,OAAO;GACPD,YAAYK,MAAM;EACpB;CACF,CAAC;CAsBD,MAAMT,eAAerD,SAASqC,GAAGzB,UAAUmD;EApBzCC,OAAOC,SAAiB;GACtB,IAAI,CAACP,MAAM;GACX,MAAMQ,QAAQD,SAAS,OAAO,eAAe,SAASA,KAAI;GAC1D,IAAI;IACFV,WAAWY,QAAQ1D,QAAQ2D,OAAOF,KAAK,CAAC;GAC1C,QAAQ;IACNR,OAAO;IACPD,YAAYK,MAAM;GACpB;EACF;EACAA,aAAa;GACX,IAAI,CAACJ,MAAM;GACXA,OAAO;GACP,IAAI;IACFH,WAAWO,MAAM;GACnB,QAAQ;IACN;GACF;EACF;CAEyCC,CAAM;CACjDN,aAAaJ,cAAcI,cAAc;CACzC,IAAI,CAACC,MAAMD,YAAYK,MAAM;CAC7B,OAAO;EAAEX;EAAME;CAAa;AAC9B;AAEA,MAAMgB,kBACJC,YACAC,UAEA,IAAIpD,SAASmD,WAAWnB,MAAM;CAC5B3B,QAAQ;CACRJ,SAAS;EACP,gBAAgB;GACfb,iBAAiBC;EAClB,GAAI+D,UAAU,QAAQ,GAAGjE,eAAeiE,MAAM;CAChD;AACF,CAAC;AAEH,MAAMC,oBACJnC,GACAgB,cACAa,UACG;CACH,IAAIA,MAAMO,IAAI5D,WAAW,KAAKqD,MAAMQ,IAAI7D,WAAW,GAAG;CACtD,MAAM8D,YAAYhF,WAAW0C,GAAGgB,aAAauB,KAAKV,KAAK;CACvD,IAAIS,UAAUE,SAAS,WACrB5E,OAAOoC,GAAGgB,aAAayB,MAAMC,KAAKC,UAAUL,UAAUM,GAAG,CAAC;AAE9D;AAEA,MAAMC,YAAY,OAChB7C,GACArB,YACsB;CACtB,MAAMmE,UAAU,MAAM/C,UAAUC,GAAGX,UAAUV,OAAO,CAAC;CACrD,IAAImE,YAAY,MAAM,OAAOA;CAC7B,MAAMC,SAASrE,iBAAiBC,OAAO;CACvC,IAAI,cAAcoE,QAAQ,OAAOA,OAAOlE;CACxC,MAAMoD,aAAahB,UAAUjB,GAAG+C,OAAOxE,QAAQ;CAC/C,MAAM2D,QAAQD,WAAWjB,iBAAiB,OAAO,OAAOb,UAAU;CAClE,IAAI8B,WAAWjB,iBAAiB,MAC9BiB,WAAWjB,aAAayB,KAAKP,QAAQA;CACvC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAMc,aAAa,OACjBhD,GACArB,YACsB;CACtB,MAAMoE,SAASrE,iBAAiBC,OAAO;CACvC,IAAI,cAAcoE,QAAQ,OAAOA,OAAOlE;CACxC,IAAIiC;CACJ,IAAI;EACFA,OAAO4B,KAAKO,MAAM,MAAMtE,QAAQuE,KAAK,CAAC;CACxC,QAAQ;EACN,OAAOpE,SAASG,KAAK,EAAEC,QAAQ,oBAAoB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CACvE;CACA,IAAI0C;CACJ,IAAI;EACFA,QAAQnE,gBAAgBoD,MAAM,IAAI;CACpC,SAASZ,OAAO;EACd,IAAI,EAAEA,iBAAiBiD,UAAUjD,MAAMP,SAAS,sBAC9C,MAAMO;EAER,OAAOpB,SAASG,KAAK,EAAEC,QAAQgB,MAAMkD,QAAQ,GAAG,EAAEjE,QAAQ,IAAI,CAAC;CACjE;CACA,IAAI0C,MAAM9C,YAAY,MACpB,OAAOD,SAASG,KACd,EAAEC,QAAQ,iCAAiC,GAC3C,EAAEC,QAAQ,IAAI,CAChB;CAEF,MAAM2D,UAAU,MAAM/C,UAAUC,GAAGP,cAAcd,SAASkD,MAAM9C,OAAO,CAAC;CACxE,IAAI+D,YAAY,MAAM,OAAOA;CAC7B,MAAMb,aAAahB,UAAUjB,GAAG+C,OAAOxE,QAAQ;CAC/C,IAAI0D,WAAWjB,iBAAiB,MAAM,OAAOgB,eAAeC,YAAY,IAAI;CAC5E,MAAMC,QAAQ/B,UAAU;CACxB8B,WAAWjB,aAAayB,KAAKP,QAAQA;CACrCC,iBAAiBnC,GAAGiC,WAAWjB,cAAca,KAAK;CAClD,OAAOG,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAamB,SAAS,OACpBrD,GACArB,YACsB;CACtB,IAAIA,QAAQ2E,WAAW,OAAO,OAAOT,UAAU7C,GAAGrB,OAAO;CACzD,IAAIA,QAAQ2E,WAAW,QAAQ,OAAON,WAAWhD,GAAGrB,OAAO;CAC3D,OAAO,IAAIG,SAAS,MAAM;EACxBK,QAAQ;EACRJ,SAAS,EAAEwE,OAAO,YAAY;CAChC,CAAC;AACH;AAEA,MAAMC,aACJxD,GACAzB,UACAkF,QACG;CACHjG,MAAMwC,CAAC;CACP,KAAK,MAAMyC,QAAQ,CAAC,GAAGzC,EAAE2D,KAAK,GAAG;EAC/B,IAAIlB,KAAKlE,aAAaA,UAAU;EAChCX,OAAOoC,GAAGyC,MAAMC,KAAKC,UAAU,EAAEc,IAAI,CAAC,CAAC;EACvClG,UAAUyC,GAAGyC,IAAI;CACnB;AACF;AAEA,MAAMmB,qBACJ5D,GACAzB,UACAa,WACG;CACHoE,UAAUxD,GAAGzB,UAAU;EACrBa,QAAQ;EACRgE,SAAS,uBAAuBhE;CAClC,CAAC;CACD,OAAON,SAASG,KAAK,EAAEiB,OAAOd,OAAO,GAAG,EAAED,QAAQ,IAAI,CAAC;AACzD;AAEA,MAAa0E,SAAS,OACpB7D,GACArB,YACsB;CACtB,MAAMmE,UAAU,MAAM/C,UAAUC,GAAGX,UAAUV,OAAO,CAAC;CACrD,IAAImE,YAAY,MAAM,OAAOA;CAC7B,MAAMC,SAASrE,iBAAiBC,OAAO;CACvC,IAAI,cAAcoE,QAAQ,OAAOA,OAAOlE;CACxC,MAAM0D,MAAMvC,EAAE8D,QAAQ9E,IAAI+D,OAAOxE,QAAQ;CACzC,MAAM2D,QAAQvD,QAAQI,QAAQC,IAAIf,YAAY;CAE9C,MAAM8F,OACJ7B,UAAU,QACV,CAAC,GAAGlC,EAAE2D,KAAK,CAAC,CAACK,MACVvB,SACCA,KAAKpB,QAAQoB,KAAKlE,aAAawE,OAAOxE,YAAYkE,KAAKP,UAAUA,KACrE;CACF,IAAIlC,EAAEiE,YAAYjE,EAAEkE,aAAa,QAAQ3B,QAAQ4B,KAAAA,KAAa,CAACJ,MAC7D,OAAOjF,SAASG,KAAK,EAAEiB,OAAO,cAAc,GAAG,EAAEf,QAAQ,IAAI,CAAC;CAEhE,IAAI0C;CACJ,IAAI;EACFA,QAAQpE,WAAW,MAAMkB,QAAQuE,KAAK,GAAG,KAAK;CAChD,SAAShD,OAAO;EACd,IAAI,EAAEA,iBAAiBiD,UAAUjD,MAAMP,SAAS,sBAC9C,MAAMO;EAER,OAAO0D,kBAAkB5D,GAAG+C,OAAOxE,UAAU2B,MAAMkD,OAAO;CAC5D;CACA,MAAMd,YAAYhF,WAAW0C,GAAGuC,KAAKV,KAAK;CAC1C,IAAIS,UAAUE,SAAS,WACrB,OAAO1D,SAASG,KAAKqD,UAAUM,KAAK,EAAEzD,QAAQ,IAAI,CAAC;CAErD,OAAOL,SAASG,KAAK,CAAC,CAAC;AACzB"}
+{"version":3,"file":"http.js","names":["StatewireHost","CLIENT_ID_RE","PRINCIPAL_MISMATCH_MESSAGE","SUBSCRIBER_LIMIT_MESSAGE","admitFrame","atSubscriberLimit","authEquals","closeConn","flush","parseFrame","parseFrameValue","register","sendTo","ParsedFrame","Registration","SocketHostState","MAX_FRAME_BODY_BYTES","PROTOCOL_VERSION","VERSION_HEADER","CLIENT_ID_HEADER","LEASE_HEADER","encoder","TextEncoder","laggardFin","encode","readFrameBody","request","Request","Promise","declared","headers","get","Number","body","cancel","catch","reader","getReader","chunks","Uint8Array","size","done","value","read","length","push","offset","chunk","set","TextDecoder","decode","invalidClientIdReason","clientId","test","clientIdResponse","response","Response","json","detail","status","reason","headersOf","Record","Object","fromEntries","authorize","h","auth","refused","error","subscriberLimitResponse","principalMismatchResponse","rec","clients","undefined","principal","mintLease","bytes","crypto","getRandomValues","btoa","String","fromCharCode","replaceAll","replace","SseAttachment","ReadableStream","registration","activateBackpressure","attachSse","controller","ReadableStreamDefaultController","connection","open","backpressureActive","start","next","close","highWaterMark","streamQueueSize","socket","send","data","desiredSize","enqueue","frame","streamResponse","attachment","lease","admitAttachFrame","ctx","cmd","admission","conn","type","JSON","stringify","syn","getStream","authorized","client","mismatch","postStream","raw","trim","parse","Error","name","message","stream","method","Allow","finClient","fin","Fin","conns","violationResponse","frames","leased","find","disposed","finished","retry","Math","ceil"],"sources":["../../src/host/http.ts"],"sourcesContent":["import type { StatewireHost } from \"../host\";\nimport {\n  CLIENT_ID_RE,\n  PRINCIPAL_MISMATCH_MESSAGE,\n  SUBSCRIBER_LIMIT_MESSAGE,\n  admitFrame,\n  atSubscriberLimit,\n  authEquals,\n  closeConn,\n  flush,\n  parseFrame,\n  parseFrameValue,\n  register,\n  sendTo,\n} from \"./socket\";\nimport type { ParsedFrame, Registration, SocketHostState } from \"./socket\";\nimport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\nimport { PROTOCOL_VERSION, VERSION_HEADER } from \"../wire/version\";\n\nexport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\n\nconst CLIENT_ID_HEADER = \"Statewire-Client-Id\";\nconst LEASE_HEADER = \"Statewire-Lease\";\nconst encoder = new TextEncoder();\nconst laggardFin = encoder.encode(\n  'data: {\"fin\":{\"reason\":\"reconnect\",\"code\":\"client-fell-behind\"}}\\n\\n',\n);\nconst readFrameBody = async (request: Request): Promise<string | null> => {\n  const declared = request.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_FRAME_BODY_BYTES) {\n    await request.body?.cancel(\"frame body too large\").catch(() => {});\n    return null;\n  }\n  if (request.body === null) return \"\";\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.length;\n    if (size > MAX_FRAME_BODY_BYTES) {\n      await reader.cancel(\"frame body too large\").catch(() => {});\n      return null;\n    }\n    chunks.push(value);\n  }\n  const body = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return new TextDecoder().decode(body);\n};\n\nconst invalidClientIdReason = (clientId: string): string | null => {\n  if (clientId === \"\") return \"id must be non-empty\";\n  if (clientId.length > 256) return \"id must be at most 256 characters\";\n  if (!CLIENT_ID_RE.test(clientId)) {\n    return \"id must contain only [A-Za-z0-9._~-]\";\n  }\n  return null;\n};\n\nconst clientIdResponse = (\n  request: Request,\n): { clientId: string } | { response: Response } => {\n  const clientId = request.headers.get(CLIENT_ID_HEADER);\n  if (clientId === null) {\n    return {\n      response: Response.json(\n        { detail: `missing ${CLIENT_ID_HEADER} header` },\n        { status: 400 },\n      ),\n    };\n  }\n  const reason = invalidClientIdReason(clientId);\n  if (reason !== null) {\n    return {\n      response: Response.json(\n        { detail: `invalid ${CLIENT_ID_HEADER}: ${reason}` },\n        { status: 400 },\n      ),\n    };\n  }\n  return { clientId };\n};\n\nconst headersOf = (request: Request): Record<string, string> =>\n  Object.fromEntries(request.headers);\n\nconst authorize = async (\n  h: SocketHostState,\n  headers: Record<string, string>,\n): Promise<{ auth: unknown } | { refused: Response }> => {\n  try {\n    return { auth: await h.authorize?.({ headers }) };\n  } catch (error) {\n    if (error instanceof Response) return { refused: error };\n    throw error;\n  }\n};\n\nconst subscriberLimitResponse = (): Response =>\n  Response.json({ detail: SUBSCRIBER_LIMIT_MESSAGE }, { status: 503 });\n\n// No awaits between this check and register: the binding cannot race.\nconst principalMismatchResponse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): Response | null => {\n  const rec = h.clients.get(clientId);\n  if (rec !== undefined && !authEquals(rec.principal, auth)) {\n    return Response.json(\n      { detail: PRINCIPAL_MISMATCH_MESSAGE },\n      { status: 403 },\n    );\n  }\n  return null;\n};\n\nconst mintLease = (): string => {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  return btoa(String.fromCharCode(...bytes))\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\ntype SseAttachment = {\n  body: ReadableStream<Uint8Array>;\n  registration: Registration | null;\n  activateBackpressure: () => void;\n};\n\nconst attachSse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): SseAttachment => {\n  let controller: ReadableStreamDefaultController<Uint8Array>;\n  let connection: Registration[\"connection\"] | null = null;\n  let open = true;\n  let backpressureActive = false;\n  const body = new ReadableStream(\n    {\n      start: (next) => {\n        controller = next;\n      },\n      cancel: () => {\n        open = false;\n        connection?.close();\n      },\n    },\n    { highWaterMark: h.streamQueueSize },\n  );\n  const socket = {\n    send: (data: string) => {\n      if (!open) return;\n      if (\n        backpressureActive &&\n        controller.desiredSize !== null &&\n        controller.desiredSize <= 0\n      ) {\n        open = false;\n        try {\n          controller.enqueue(laggardFin);\n          controller.close();\n        } catch {\n          /* stream already gone */\n        }\n        connection?.close();\n        return;\n      }\n      const frame = data === \"{}\" ? \": ping\\n\\n\" : `data: ${data}\\n\\n`;\n      try {\n        controller.enqueue(encoder.encode(frame));\n      } catch {\n        open = false;\n        connection?.close();\n      }\n    },\n    close: () => {\n      if (!open) return;\n      open = false;\n      try {\n        controller.close();\n      } catch {\n        return;\n      }\n    },\n  };\n  const registration = register(h, clientId, socket, false, auth);\n  connection = registration?.connection ?? null;\n  if (!open) connection?.close();\n  return {\n    body,\n    registration,\n    activateBackpressure: () => {\n      backpressureActive = true;\n    },\n  };\n};\n\nconst streamResponse = (\n  attachment: SseAttachment,\n  lease: string | null,\n): Response => {\n  attachment.activateBackpressure();\n  return new Response(attachment.body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      [VERSION_HEADER]: PROTOCOL_VERSION,\n      ...(lease !== null && { [LEASE_HEADER]: lease }),\n    },\n  });\n};\n\nconst admitAttachFrame = (\n  h: SocketHostState,\n  registration: Registration,\n  frame: ParsedFrame,\n) => {\n  if (frame.ctx.length === 0 && frame.cmd.length === 0) return;\n  const admission = admitFrame(\n    h,\n    registration.rec,\n    frame,\n    registration.conn.auth,\n  );\n  if (admission.type === \"refused\") {\n    sendTo(h, registration.conn, JSON.stringify(admission.syn));\n  }\n};\n\nconst getStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const attachment = attachSse(h, client.clientId, authorized.auth);\n  const lease = attachment.registration === null ? null : mintLease();\n  if (attachment.registration !== null)\n    attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nconst postStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ detail: \"frame body too large\" }, { status: 413 });\n  }\n  let body: unknown;\n  try {\n    body = raw.trim() ? JSON.parse(raw) : null;\n  } catch {\n    return Response.json({ detail: \"body must be JSON\" }, { status: 400 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame =\n      body === null && !raw.trim()\n        ? { ctx: [], cmd: [] }\n        : parseFrameValue(body);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return Response.json({ detail: error.message }, { status: 400 });\n  }\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const attachment = attachSse(h, client.clientId, authorized.auth);\n  if (attachment.registration === null) return streamResponse(attachment, null);\n  const lease = mintLease();\n  attachment.registration.conn.lease = lease;\n  admitAttachFrame(h, attachment.registration, frame);\n  return streamResponse(attachment, lease);\n};\n\nexport const stream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  if (request.method === \"GET\") return getStream(h, request);\n  if (request.method === \"POST\") return postStream(h, request);\n  return new Response(null, {\n    status: 405,\n    headers: { Allow: \"GET, POST\" },\n  });\n};\n\nconst finClient = (\n  h: SocketHostState,\n  clientId: string,\n  fin: StatewireHost.Fin,\n) => {\n  flush(h);\n  for (const conn of [...h.conns]) {\n    if (conn.clientId !== clientId) continue;\n    sendTo(h, conn, JSON.stringify({ fin }));\n    closeConn(h, conn);\n  }\n};\n\nconst violationResponse = (\n  h: SocketHostState,\n  clientId: string,\n  reason: string,\n) => {\n  finClient(h, clientId, {\n    reason: \"protocol-error\",\n    message: reason,\n  });\n  return Response.json({ error: reason }, { status: 400 });\n};\n\nexport const frames = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const lease = request.headers.get(LEASE_HEADER);\n  // A lease lives and dies with its attach: any live attach of the id accepts.\n  const leased =\n    lease === null\n      ? undefined\n      : [...h.conns].find((conn) => conn.open && conn.lease === lease);\n  if (h.disposed || h.finished !== null || leased === undefined) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const clientId = leased.clientId;\n  const rec = h.clients.get(clientId)!;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ error: \"frame body too large\" }, { status: 413 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrame(raw);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return violationResponse(h, clientId, error.message);\n  }\n  if (!leased.open || h.disposed || h.finished !== null) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const admission = admitFrame(h, rec, frame, leased.auth);\n  if (admission.type === \"refused\") {\n    const retry = admission.syn.syn.retry;\n    return Response.json(admission.syn, {\n      status: retry === undefined ? 409 : 429,\n      ...(retry !== undefined && {\n        headers: { \"Retry-After\": String(Math.ceil(retry / 1000)) },\n      }),\n    });\n  }\n  return Response.json({});\n};\n"],"mappings":";;;;AAqBA,MAAMmB,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,UAAU,IAAIC,YAAY;AAChC,MAAMC,aAAaF,QAAQG,OACzB,gFACF;AACA,MAAMC,gBAAgB,OAAOC,YAA6C;CACxE,MAAMG,WAAWH,QAAQI,QAAQC,IAAI,gBAAgB;CACrD,IAAIF,aAAa,QAAQG,OAAOH,QAAQ,IAAA,SAA0B;EAChE,MAAMH,QAAQO,MAAMC,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;EACjE,OAAO;CACT;CACA,IAAIT,QAAQO,SAAS,MAAM,OAAO;CAClC,MAAMG,SAASV,QAAQO,KAAKI,UAAU;CACtC,MAAMC,SAAuB,CAAA;CAC7B,IAAIE,OAAO;CACX,SAAS;EACP,MAAM,EAAEC,MAAMC,UAAU,MAAMN,OAAOO,KAAK;EAC1C,IAAIF,MAAM;EACVD,QAAQE,MAAME;EACd,IAAIJ,OAAAA,SAA6B;GAC/B,MAAMJ,OAAOF,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;GAC1D,OAAO;EACT;EACAG,OAAOO,KAAKH,KAAK;CACnB;CACA,MAAMT,OAAO,IAAIM,WAAWC,IAAI;CAChC,IAAIM,SAAS;CACb,KAAK,MAAMC,SAAST,QAAQ;EAC1BL,KAAKe,IAAID,OAAOD,MAAM;EACtBA,UAAUC,MAAMH;CAClB;CACA,OAAO,IAAIK,YAAY,CAAC,CAACC,OAAOjB,IAAI;AACtC;AAEA,MAAMkB,yBAAyBC,aAAoC;CACjE,IAAIA,aAAa,IAAI,OAAO;CAC5B,IAAIA,SAASR,SAAS,KAAK,OAAO;CAClC,IAAI,CAAC3C,aAAaoD,KAAKD,QAAQ,GAC7B,OAAO;CAET,OAAO;AACT;AAEA,MAAME,oBACJ5B,YACkD;CAClD,MAAM0B,WAAW1B,QAAQI,QAAQC,IAAIZ,gBAAgB;CACrD,IAAIiC,aAAa,MACf,OAAO,EACLG,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,SAAU,GAC/C,EAAEwC,QAAQ,IAAI,CAChB,EACF;CAEF,MAAMC,SAAST,sBAAsBC,QAAQ;CAC7C,IAAIQ,WAAW,MACb,OAAO,EACLL,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,IAAKyC,SAAS,GACnD,EAAED,QAAQ,IAAI,CAChB,EACF;CAEF,OAAO,EAAEP,SAAS;AACpB;AAEA,MAAMS,aAAanC,YACjBqC,OAAOC,YAAYtC,QAAQI,OAAO;AAEpC,MAAMmC,YAAY,OAChBC,GACApC,YACuD;CACvD,IAAI;EACF,OAAO,EAAEqC,MAAM,MAAMD,EAAED,YAAY,EAAEnC,QAAQ,CAAC,EAAE;CAClD,SAASuC,OAAO;EACd,IAAIA,iBAAiBb,UAAU,OAAO,EAAEY,SAASC,MAAM;EACvD,MAAMA;CACR;AACF;AAEA,MAAMC,gCACJd,SAASC,KAAK,EAAEC,QAAQvD,yBAAyB,GAAG,EAAEwD,QAAQ,IAAI,CAAC;AAGrE,MAAMY,6BACJL,GACAd,UACAe,SACoB;CACpB,MAAMK,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,IAAIoB,QAAQE,KAAAA,KAAa,CAACpE,WAAWkE,IAAIG,WAAWR,IAAI,GACtD,OAAOX,SAASC,KACd,EAAEC,QAAQxD,2BAA2B,GACrC,EAAEyD,QAAQ,IAAI,CAChB;CAEF,OAAO;AACT;AAEA,MAAMiB,kBAA0B;CAC9B,MAAMC,QAAQC,OAAOC,gCAAgB,IAAIxC,WAAW,EAAE,CAAC;CACvD,OAAOyC,KAAKC,OAAOC,aAAa,GAAGL,KAAK,CAAC,CAAC,CACvCM,WAAW,KAAK,GAAG,CAAC,CACpBA,WAAW,KAAK,GAAG,CAAC,CACpBC,QAAQ,OAAO,EAAE;AACtB;AAQA,MAAMK,aACJvB,GACAd,UACAe,SACkB;CAClB,IAAIuB;CACJ,IAAIE,aAAgD;CACpD,IAAIC,OAAO;CACX,IAAIC,qBAAqB;CACzB,MAAM7D,OAAO,IAAIqD,eACf;EACES,QAAQC,SAAS;GACfN,aAAaM;EACf;EACA9D,cAAc;GACZ2D,OAAO;GACPD,YAAYK,MAAM;EACpB;CACF,GACA,EAAEC,eAAehC,EAAEiC,gBAAgB,CACrC;CAqCA,MAAMZ,eAAe5E,SAASuD,GAAGd,UAAUgD;EAnCzCC,OAAOC,SAAiB;GACtB,IAAI,CAACT,MAAM;GACX,IACEC,sBACAJ,WAAWa,gBAAgB,QAC3Bb,WAAWa,eAAe,GAC1B;IACAV,OAAO;IACP,IAAI;KACFH,WAAWc,QAAQjF,UAAU;KAC7BmE,WAAWO,MAAM;IACnB,QAAQ,CACN;IAEFL,YAAYK,MAAM;IAClB;GACF;GACA,MAAMQ,QAAQH,SAAS,OAAO,eAAe,SAASA,KAAI;GAC1D,IAAI;IACFZ,WAAWc,QAAQnF,QAAQG,OAAOiF,KAAK,CAAC;GAC1C,QAAQ;IACNZ,OAAO;IACPD,YAAYK,MAAM;GACpB;EACF;EACAA,aAAa;GACX,IAAI,CAACJ,MAAM;GACXA,OAAO;GACP,IAAI;IACFH,WAAWO,MAAM;GACnB,QAAQ;IACN;GACF;EACF;CAEyCG,GAAQ,OAAOjC,IAAI;CAC9DyB,aAAaL,cAAcK,cAAc;CACzC,IAAI,CAACC,MAAMD,YAAYK,MAAM;CAC7B,OAAO;EACLhE;EACAsD;EACAC,4BAA4B;GAC1BM,qBAAqB;EACvB;CACF;AACF;AAEA,MAAMY,kBACJC,YACAC,UACa;CACbD,WAAWnB,qBAAqB;CAChC,OAAO,IAAIhC,SAASmD,WAAW1E,MAAM;EACnC0B,QAAQ;EACR7B,SAAS;GACP,gBAAgB;IACfZ,iBAAAA;GACD,GAAI0F,UAAU,QAAQ,GAAGxF,eAAewF,MAAM;EAChD;CACF,CAAC;AACH;AAEA,MAAMC,oBACJ3C,GACAqB,cACAkB,UACG;CACH,IAAIA,MAAMK,IAAIlE,WAAW,KAAK6D,MAAMM,IAAInE,WAAW,GAAG;CACtD,MAAMoE,YAAY5G,WAChB8D,GACAqB,aAAaf,KACbiC,OACAlB,aAAa0B,KAAK9C,IACpB;CACA,IAAI6C,UAAUE,SAAS,WACrBtG,OAAOsD,GAAGqB,aAAa0B,MAAME,KAAKC,UAAUJ,UAAUK,GAAG,CAAC;AAE9D;AAEA,MAAMC,YAAY,OAChBpD,GACAxC,YACsB;CACtB,MAAM6F,aAAa,MAAMtD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAa6F,YAAY,OAAOA,WAAWnD;CAC/C,MAAMoD,SAASlE,iBAAiB5B,OAAO;CACvC,IAAI,cAAc8F,QAAQ,OAAOA,OAAOjE;CACxC,MAAMkE,WAAWlD,0BACfL,GACAsD,OAAOpE,UACPmE,WAAWpD,IACb;CACA,IAAIsD,aAAa,MAAM,OAAOA;CAC9B,IAAIpH,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMqC,aAAalB,UAAUvB,GAAGsD,OAAOpE,UAAUmE,WAAWpD,IAAI;CAChE,MAAMyC,QAAQD,WAAWpB,iBAAiB,OAAO,OAAOX,UAAU;CAClE,IAAI+B,WAAWpB,iBAAiB,MAC9BoB,WAAWpB,aAAa0B,KAAKL,QAAQA;CACvC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAMc,aAAa,OACjBxD,GACAxC,YACsB;CACtB,MAAM8F,SAASlE,iBAAiB5B,OAAO;CACvC,IAAI,cAAc8F,QAAQ,OAAOA,OAAOjE;CACxC,MAAMoE,MAAM,MAAMlG,cAAcC,OAAO;CACvC,IAAIiG,QAAQ,MACV,OAAOnE,SAASC,KAAK,EAAEC,QAAQ,uBAAuB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CAE1E,IAAI1B;CACJ,IAAI;EACFA,OAAO0F,IAAIC,KAAK,IAAIT,KAAKU,MAAMF,GAAG,IAAI;CACxC,QAAQ;EACN,OAAOnE,SAASC,KAAK,EAAEC,QAAQ,oBAAoB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CACvE;CACA,IAAI8C;CACJ,IAAI;EACFA,QACExE,SAAS,QAAQ,CAAC0F,IAAIC,KAAK,IACvB;GAAEd,KAAK,CAAA;GAAIC,KAAK,CAAA;EAAG,IACnBrG,gBAAgBuB,IAAI;CAC5B,SAASoC,OAAO;EACd,IAAI,EAAEA,iBAAiByD,UAAUzD,MAAM0D,SAAS,sBAC9C,MAAM1D;EAER,OAAOb,SAASC,KAAK,EAAEC,QAAQW,MAAM2D,QAAQ,GAAG,EAAErE,QAAQ,IAAI,CAAC;CACjE;CACA,MAAM4D,aAAa,MAAMtD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAa6F,YAAY,OAAOA,WAAWnD;CAC/C,MAAMqD,WAAWlD,0BACfL,GACAsD,OAAOpE,UACPmE,WAAWpD,IACb;CACA,IAAIsD,aAAa,MAAM,OAAOA;CAC9B,IAAIpH,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMqC,aAAalB,UAAUvB,GAAGsD,OAAOpE,UAAUmE,WAAWpD,IAAI;CAChE,IAAIwC,WAAWpB,iBAAiB,MAAM,OAAOmB,eAAeC,YAAY,IAAI;CAC5E,MAAMC,QAAQhC,UAAU;CACxB+B,WAAWpB,aAAa0B,KAAKL,QAAQA;CACrCC,iBAAiB3C,GAAGyC,WAAWpB,cAAckB,KAAK;CAClD,OAAOC,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAaqB,SAAS,OACpB/D,GACAxC,YACsB;CACtB,IAAIA,QAAQwG,WAAW,OAAO,OAAOZ,UAAUpD,GAAGxC,OAAO;CACzD,IAAIA,QAAQwG,WAAW,QAAQ,OAAOR,WAAWxD,GAAGxC,OAAO;CAC3D,OAAO,IAAI8B,SAAS,MAAM;EACxBG,QAAQ;EACR7B,SAAS,EAAEqG,OAAO,YAAY;CAChC,CAAC;AACH;AAEA,MAAMC,aACJlE,GACAd,UACAiF,QACG;CACH7H,MAAM0D,CAAC;CACP,KAAK,MAAM+C,QAAQ,CAAC,GAAG/C,EAAEqE,KAAK,GAAG;EAC/B,IAAItB,KAAK7D,aAAaA,UAAU;EAChCxC,OAAOsD,GAAG+C,MAAME,KAAKC,UAAU,EAAEiB,IAAI,CAAC,CAAC;EACvC9H,UAAU2D,GAAG+C,IAAI;CACnB;AACF;AAEA,MAAMuB,qBACJtE,GACAd,UACAQ,WACG;CACHwE,UAAUlE,GAAGd,UAAU;EACrBQ,QAAQ;EACRoE,SAASpE;CACX,CAAC;CACD,OAAOJ,SAASC,KAAK,EAAEY,OAAOT,OAAO,GAAG,EAAED,QAAQ,IAAI,CAAC;AACzD;AAEA,MAAa8E,SAAS,OACpBvE,GACAxC,YACsB;CACtB,MAAMkF,QAAQlF,QAAQI,QAAQC,IAAIX,YAAY;CAE9C,MAAMsH,SACJ9B,UAAU,OACNlC,KAAAA,IACA,CAAC,GAAGR,EAAEqE,KAAK,CAAC,CAACI,MAAM1B,SAASA,KAAKpB,QAAQoB,KAAKL,UAAUA,KAAK;CACnE,IAAI1C,EAAE0E,YAAY1E,EAAE2E,aAAa,QAAQH,WAAWhE,KAAAA,GAClD,OAAOlB,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,MAAMP,WAAWsF,OAAOtF;CACxB,MAAMoB,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,MAAMuE,MAAM,MAAMlG,cAAcC,OAAO;CACvC,IAAIiG,QAAQ,MACV,OAAOnE,SAASC,KAAK,EAAEY,OAAO,uBAAuB,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEzE,IAAI8C;CACJ,IAAI;EACFA,QAAQhG,WAAWkH,GAAG;CACxB,SAAStD,OAAO;EACd,IAAI,EAAEA,iBAAiByD,UAAUzD,MAAM0D,SAAS,sBAC9C,MAAM1D;EAER,OAAOmE,kBAAkBtE,GAAGd,UAAUiB,MAAM2D,OAAO;CACrD;CACA,IAAI,CAACU,OAAO7C,QAAQ3B,EAAE0E,YAAY1E,EAAE2E,aAAa,MAC/C,OAAOrF,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,MAAMqD,YAAY5G,WAAW8D,GAAGM,KAAKiC,OAAOiC,OAAOvE,IAAI;CACvD,IAAI6C,UAAUE,SAAS,WAAW;EAChC,MAAM4B,QAAQ9B,UAAUK,IAAIA,IAAIyB;EAChC,OAAOtF,SAASC,KAAKuD,UAAUK,KAAK;GAClC1D,QAAQmF,UAAUpE,KAAAA,IAAY,MAAM;GACpC,GAAIoE,UAAUpE,KAAAA,KAAa,EACzB5C,SAAS,EAAE,eAAemD,OAAO8D,KAAKC,KAAKF,QAAQ,GAAI,CAAC,EAAE,EAC5D;EACF,CAAC;CACH;CACA,OAAOtF,SAASC,KAAK,CAAC,CAAC;AACzB"}

package/dist/host/socket.d.ts

@@ -8,6 +8,11 @@ import { StatewireHostInternal } from "../host-internal.js";
 import { ResourceElement } from "@assistant-ui/tap";
 //#region src/host/socket.d.ts
 declare const CLIENT_ID_RE: RegExp;
+declare const PRINCIPAL_MISMATCH_MESSAGE = "client id is bound to another principal";
+/** Structural equality over auth values: primitives, Dates, arrays, and plain
+ * objects compare by value; anything else by identity. */
+declare const authEquals: (a: unknown, b: unknown) => boolean;
+declare const SUBSCRIBER_LIMIT_MESSAGE = "stream subscriber limit reached";
 type WireOp = {
   op: string;
   path?: StatewirePath;
@@ -32,6 +37,8 @@ type ClientRec = {
     cmd: StatewireCmd;
   }>;
   inflight: Map<number, Admission>;
+  /** The auth captured at the record's first attach; later attaches must match. */
+  principal: unknown;
 };
 type Conn = {
   clientId: string;
@@ -40,6 +47,16 @@ type Conn = {
   sawFrame: boolean;
   lastSentAt: number;
   lease: string | null;
+  /** The awaited `authorize` return captured at this attach's authorization. */
+  auth: unknown;
+};
+type PendingConn = {
+  socket: StatewireHostInternal.Socket;
+  open: boolean;
+  authorizing: boolean;
+  queued: string[];
+  timer: ReturnType<typeof setTimeout> | null;
+  connection: StatewireHostInternal.SocketConnection | null;
 };
 type CtxStatement = {
   seq: number;
@@ -52,19 +69,24 @@ type CmdStatement = {
   meta?: unknown;
 };
 type ParsedFrame = {
-  headers: Record<string, string> | null;
   ctx: CtxStatement[];
   cmd: CmdStatement[];
 };
-declare const parseFrameValue: (frame: unknown, first: boolean) => ParsedFrame;
-declare const parseFrame: (raw: string, first: boolean) => ParsedFrame;
+declare const parseFrameValue: (frame: unknown) => ParsedFrame;
+declare const parseFrame: (raw: string) => ParsedFrame;
 type SocketHostState = {
   heartbeatMs: number;
+  wsInitTimeoutMs: number;
+  maxSubscribers: number;
+  maxInflightCommands: number;
+  streamQueueSize: number;
   clientRecordLimit: number;
   finOnIdle: boolean;
+  pushback: (() => number | null) | undefined;
   authorize: StatewireHostInternal.SocketHostOptions["authorize"];
   clients: Map<string, ClientRec>;
   conns: Set<Conn>;
+  pendingConns: Set<PendingConn>;
   pendingOps: WireOp[];
   pendingApplied: Map<string, number[]>;
   pendingCmds: Map<string, StatewireCmd[]>;
@@ -76,14 +98,16 @@ type SocketHostState = {
   stateHost: StatewireHost.StateHost | null;
   commandsHost: CommandsHost | null;
   current: Statewire<unknown> | null;
+  persistence: StatewireHostInternal.SocketHostPersistence | undefined;
   post: () => void;
-  connect: (clientId: string, socket: StatewireHostInternal.Socket) => StatewireHostInternal.SocketConnection | null;
+  connect: (clientId: string, socket: StatewireHostInternal.Socket, options?: StatewireHostInternal.SocketConnectOptions) => StatewireHostInternal.SocketConnection | null;
   finish: (fin: StatewireHost.Fin) => void;
   stream: (request: Request) => Promise<Response>;
   frames: (request: Request) => Promise<Response>;
 };
 declare const closeConn: (h: SocketHostState, conn: Conn, code?: number, reason?: string) => void;
 declare const sendTo: (h: SocketHostState, conn: Conn, data: string) => void;
+declare const atSubscriberLimit: (h: SocketHostState) => boolean;
 declare const flush: (h: SocketHostState, fin?: StatewireHost.Fin) => void;
 type FrameAdmission = {
   type: "ok";
@@ -93,16 +117,17 @@ type FrameAdmission = {
     syn: {
       seq: number;
       ctxSeq: number;
+      retry?: number;
     };
   };
 };
-declare const admitFrame: (h: SocketHostState, rec: ClientRec, frame: ParsedFrame) => FrameAdmission;
+declare const admitFrame: (h: SocketHostState, rec: ClientRec, frame: ParsedFrame, auth: unknown) => FrameAdmission;
 type Registration = {
   rec: ClientRec;
   conn: Conn;
   connection: StatewireHostInternal.SocketConnection;
 };
-declare const register: (h: SocketHostState, clientId: string, socket: StatewireHostInternal.Socket) => Registration | null;
+declare const register: (h: SocketHostState, clientId: string, socket: StatewireHostInternal.Socket, sawFrame?: boolean, auth?: unknown) => Registration | null;
 /**
  * Transport-agnostic WS binding over a statewire/host transport:
  * feed it sockets (anything with `send`/`close`) and raw text frames, and it
@@ -111,7 +136,7 @@ declare const register: (h: SocketHostState, clientId: string, socket: Statewire
  * arrays fanned out to every attach of a client id, idle edges, and `fin` on
  * finish.
  */
-declare const StatewireSocketHost: (transport: ResourceElement<Statewire>, options?: StatewireHostInternal.SocketHostOptions) => StatewireHostInternal.SocketHost;
+declare const StatewireSocketHost: (transport: ResourceElement<Statewire>, options?: StatewireHostInternal.SocketHostOptions, persistence?: StatewireHostInternal.SocketHostPersistence) => StatewireHostInternal.SocketHost;
 //#endregion
-export { CLIENT_ID_RE, ClientRec, Conn, FrameAdmission, ParsedFrame, Registration, SocketHostState, StatewireSocketHost, admitFrame, closeConn, flush, parseFrame, parseFrameValue, register, sendTo };
+export { CLIENT_ID_RE, ClientRec, Conn, FrameAdmission, PRINCIPAL_MISMATCH_MESSAGE, ParsedFrame, Registration, SUBSCRIBER_LIMIT_MESSAGE, SocketHostState, StatewireSocketHost, admitFrame, atSubscriberLimit, authEquals, closeConn, flush, parseFrame, parseFrameValue, register, sendTo };
 //# sourceMappingURL=socket.d.ts.map

package/dist/host/socket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket.d.ts","names":[],"sources":["../../src/host/socket.ts"],"mappings":";;;;;;;;;cAgBa,cAAY;KAKpB;EACH;EACA,OAAO;EACP;EACA,OAAO;;KAGJ;EACH;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;EACA;EACA;EACA,SAAS;EACT,SAAS;IAAc;IAAY,KAAK;;EACxC,UAAU,YAAY;;KAGZ;EACV;EACA,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA;;KAcG;EAAiB;EAAa,OAAO;;KACrC;EACH;EACA;EACA;EACA;;KAGU;EACV,SAAS;EACT,KAAK;EACL,KAAK;;cAgDM,kBACX,gBACA,mBACC;cAoDU,aAAc,aAAa,mBAAiB;KAmE7C;EACV;EACA;EACA;EACA,WAAW,sBAAsB;EACjC,SAAS,YAAY;EACrB,OAAO,IAAI;EACX,YAAY;EACZ,gBAAgB;EAChB,aAAa,YAAY;EACzB;EACA,UAAU,cAAc;EACxB;EACA;EACA,gBAAgB,kBAAkB;EAClC,WAAW,cAAc;EACzB,cAAc;EACd,SAAS;EACT;EACA,UACE,kBACA,QAAQ,sBAAsB,WAC3B,sBAAsB;EAC3B,SAAS,KAAK,cAAc;EAC5B,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,YAAY,QAAQ;;cA+C3B,YACX,GAAG,iBACH,MAAM,MACN,eACA;cAgBW,SAAU,GAAG,iBAAiB,MAAM,MAAM;cAsC1C,QAAS,GAAG,iBAAiB,MAAM,cAAc;KAyOlD;EACN;;EACA;EAAiB;IAAO;MAAO;MAAa;;;;cAErC,aACX,GAAG,iBACH,KAAK,WACL,OAAO,gBACN;KAgES;EACV,KAAK;EACL,MAAM;EACN,YAAY,sBAAsB;;cAGvB,WACX,GAAG,iBACH,kBACA,QAAQ,sBAAsB,WAC7B;;;;;;;;;cAoKU,sBACX,WAAW,gBAAgB,YAC3B,UAAU,sBAAsB,sBAC/B,sBAAsB"}
+{"version":3,"file":"socket.d.ts","names":[],"sources":["../../src/host/socket.ts"],"mappings":";;;;;;;;;cAwBa,cAAY;cACZ;;;cAKA,aAAc,YAAY;cAoC1B;KAGR;EACH;EACA,OAAO;EACP;EACA,OAAO;;KAGJ;EACH;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;EACA;EACA;EACA,SAAS;EACT,SAAS;IAAc;IAAY,KAAK;;EACxC,UAAU,YAAY;;EAEtB;;KAGU;EACV;EACA,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA;;EAEA;;KAGG;EACH,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA,OAAO,kBAAkB;EACzB,YAAY,sBAAsB;;KAc/B;EAAiB;EAAa,OAAO;;KACrC;EACH;EACA;EACA;EACA;;KAGU;EACV,KAAK;EACL,KAAK;;cAkDM,kBAAmB,mBAAiB;cAmDpC,aAAc,gBAAc;KAiG7B;EACV;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,sBAAsB;EACjC,SAAS,YAAY;EACrB,OAAO,IAAI;EACX,cAAc,IAAI;EAClB,YAAY;EACZ,gBAAgB;EAChB,aAAa,YAAY;EACzB;EACA,UAAU,cAAc;EACxB;EACA;EACA,gBAAgB,kBAAkB;EAClC,WAAW,cAAc;EACzB,cAAc;EACd,SAAS;EACT,aAAa,sBAAsB;EACnC;EACA,UACE,kBACA,QAAQ,sBAAsB,QAC9B,UAAU,sBAAsB,yBAC7B,sBAAsB;EAC3B,SAAS,KAAK,cAAc;EAC5B,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,YAAY,QAAQ;;cA+C3B,YACX,GAAG,iBACH,MAAM,MACN,eACA;cAgBW,SAAU,GAAG,iBAAiB,MAAM,MAAM;cAU1C,oBAAqB,GAAG;cAkCxB,QAAS,GAAG,iBAAiB,MAAM,cAAc;KAkQlD;EACN;;EAEA;EACA;IACE;MAAO;MAAa;MAAgB;;;;cAI/B,aACX,GAAG,iBACH,KAAK,WACL,OAAO,aACP,kBACC;KA8XS;EACV,KAAK;EACL,MAAM;EACN,YAAY,sBAAsB;;cAGvB,WACX,GAAG,iBACH,kBACA,QAAQ,sBAAsB,QAC9B,oBACA,mBACC;;;;;;;;;cAyPU,sBACX,WAAW,gBAAgB,YAC3B,UAAU,sBAAsB,mBAChC,cAAc,sBAAsB,0BACnC,sBAAsB"}