statewire 0.16.0 → 0.17.0

package/dist/host/http.js

@@ -1,5 +1,5 @@
+import { negotiateProtocols } from "../wire/protocol.js";
 import { MAX_FRAME_BODY_BYTES } from "../wire/limits.js";
-import { VERSION_HEADER } from "../wire/version.js";
 import { CLIENT_ID_RE, PRINCIPAL_MISMATCH_MESSAGE, SUBSCRIBER_LIMIT_MESSAGE, admitFrame, atSubscriberLimit, authEquals, closeConn, flush, parseFrame, parseFrameValue, register, sendTo } from "./socket.js";
 //#region src/host/http.ts
 const CLIENT_ID_HEADER = "Statewire-Client-Id";
@@ -66,7 +66,7 @@ const mintLease = () => {
 	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
 	return btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 };
-const attachSse = (h, clientId, auth) => {
+const attachSse = (h, clientId, auth, selection) => {
 	let controller;
 	let connection = null;
 	let open = true;
@@ -109,7 +109,7 @@ const attachSse = (h, clientId, auth) => {
 				return;
 			}
 		}
-	}, false, auth);
+	}, false, auth, selection);
 	connection = registration?.connection ?? null;
 	if (!open) connection?.close();
 	return {
@@ -126,14 +126,13 @@ const streamResponse = (attachment, lease) => {
 		status: 200,
 		headers: {
 			"Content-Type": "text/event-stream",
-			[VERSION_HEADER]: "1",
 			...lease !== null && { [LEASE_HEADER]: lease }
 		}
 	});
 };
 const admitAttachFrame = (h, registration, frame) => {
 	if (frame.ctx.length === 0 && frame.cmd.length === 0) return;
-	const admission = admitFrame(h, registration.rec, frame, registration.conn.auth);
+	const admission = admitFrame(h, registration.rec, frame, registration.conn.auth, registration.conn.selection);
 	if (admission.type === "refused") sendTo(h, registration.conn, JSON.stringify(admission.syn));
 };
 const getStream = async (h, request) => {
@@ -144,7 +143,9 @@ const getStream = async (h, request) => {
 	const mismatch = principalMismatchResponse(h, client.clientId, authorized.auth);
 	if (mismatch !== null) return mismatch;
 	if (atSubscriberLimit(h)) return subscriberLimitResponse();
-	const attachment = attachSse(h, client.clientId, authorized.auth);
+	const selection = negotiateProtocols(request.headers, h.wireVersion, [h.protocol]);
+	if ("fin" in selection) return Response.json(selection, { status: selection.fin.status });
+	const attachment = attachSse(h, client.clientId, authorized.auth, selection);
 	const lease = attachment.registration === null ? null : mintLease();
 	if (attachment.registration !== null) attachment.registration.conn.lease = lease;
 	return streamResponse(attachment, lease);
@@ -175,11 +176,22 @@ const postStream = async (h, request) => {
 	const mismatch = principalMismatchResponse(h, client.clientId, authorized.auth);
 	if (mismatch !== null) return mismatch;
 	if (atSubscriberLimit(h)) return subscriberLimitResponse();
-	const attachment = attachSse(h, client.clientId, authorized.auth);
+	const selection = negotiateProtocols(request.headers, h.wireVersion, [h.protocol]);
+	if ("fin" in selection) return Response.json(selection, { status: selection.fin.status });
+	const attachment = attachSse(h, client.clientId, authorized.auth, selection);
 	if (attachment.registration === null) return streamResponse(attachment, null);
 	const lease = mintLease();
 	attachment.registration.conn.lease = lease;
-	admitAttachFrame(h, attachment.registration, frame);
+	try {
+		admitAttachFrame(h, attachment.registration, frame);
+	} catch (error) {
+		closeConn(h, attachment.registration.conn, 1008, "invalid-context");
+		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
+		return Response.json({ fin: {
+			reason: "protocol-error",
+			message: error.message
+		} }, { status: 400 });
+	}
 	return streamResponse(attachment, lease);
 };
 const stream = async (h, request) => {
@@ -221,7 +233,13 @@ const frames = async (h, request) => {
 		return violationResponse(h, clientId, error.message);
 	}
 	if (!leased.open || h.disposed || h.finished !== null) return Response.json({ error: "stale-lease" }, { status: 423 });
-	const admission = admitFrame(h, rec, frame, leased.auth);
+	let admission;
+	try {
+		admission = admitFrame(h, rec, frame, leased.auth, leased.selection);
+	} catch (error) {
+		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
+		return violationResponse(h, clientId, error.message);
+	}
 	if (admission.type === "refused") {
 		const retry = admission.syn.syn.retry;
 		return Response.json(admission.syn, {

package/dist/host/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","names":["StatewireHost","CLIENT_ID_RE","PRINCIPAL_MISMATCH_MESSAGE","SUBSCRIBER_LIMIT_MESSAGE","admitFrame","atSubscriberLimit","authEquals","closeConn","flush","parseFrame","parseFrameValue","register","sendTo","ParsedFrame","Registration","SocketHostState","MAX_FRAME_BODY_BYTES","PROTOCOL_VERSION","VERSION_HEADER","CLIENT_ID_HEADER","LEASE_HEADER","encoder","TextEncoder","laggardFin","encode","readFrameBody","request","Request","Promise","declared","headers","get","Number","body","cancel","catch","reader","getReader","chunks","Uint8Array","size","done","value","read","length","push","offset","chunk","set","TextDecoder","decode","invalidClientIdReason","clientId","test","clientIdResponse","response","Response","json","detail","status","reason","headersOf","Record","Object","fromEntries","authorize","h","auth","refused","error","subscriberLimitResponse","principalMismatchResponse","rec","clients","undefined","principal","mintLease","bytes","crypto","getRandomValues","btoa","String","fromCharCode","replaceAll","replace","SseAttachment","ReadableStream","registration","activateBackpressure","attachSse","controller","ReadableStreamDefaultController","connection","open","backpressureActive","start","next","close","highWaterMark","streamQueueSize","socket","send","data","desiredSize","enqueue","frame","streamResponse","attachment","lease","admitAttachFrame","ctx","cmd","admission","conn","type","JSON","stringify","syn","getStream","authorized","client","mismatch","postStream","raw","trim","parse","Error","name","message","stream","method","Allow","finClient","fin","Fin","conns","violationResponse","frames","leased","find","disposed","finished","retry","Math","ceil"],"sources":["../../src/host/http.ts"],"sourcesContent":["import type { StatewireHost } from \"../host\";\nimport {\n  CLIENT_ID_RE,\n  PRINCIPAL_MISMATCH_MESSAGE,\n  SUBSCRIBER_LIMIT_MESSAGE,\n  admitFrame,\n  atSubscriberLimit,\n  authEquals,\n  closeConn,\n  flush,\n  parseFrame,\n  parseFrameValue,\n  register,\n  sendTo,\n} from \"./socket\";\nimport type { ParsedFrame, Registration, SocketHostState } from \"./socket\";\nimport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\nimport { PROTOCOL_VERSION, VERSION_HEADER } from \"../wire/version\";\n\nexport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\n\nconst CLIENT_ID_HEADER = \"Statewire-Client-Id\";\nconst LEASE_HEADER = \"Statewire-Lease\";\nconst encoder = new TextEncoder();\nconst laggardFin = encoder.encode(\n  'data: {\"fin\":{\"reason\":\"reconnect\",\"code\":\"client-fell-behind\"}}\\n\\n',\n);\nconst readFrameBody = async (request: Request): Promise<string | null> => {\n  const declared = request.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_FRAME_BODY_BYTES) {\n    await request.body?.cancel(\"frame body too large\").catch(() => {});\n    return null;\n  }\n  if (request.body === null) return \"\";\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.length;\n    if (size > MAX_FRAME_BODY_BYTES) {\n      await reader.cancel(\"frame body too large\").catch(() => {});\n      return null;\n    }\n    chunks.push(value);\n  }\n  const body = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return new TextDecoder().decode(body);\n};\n\nconst invalidClientIdReason = (clientId: string): string | null => {\n  if (clientId === \"\") return \"id must be non-empty\";\n  if (clientId.length > 256) return \"id must be at most 256 characters\";\n  if (!CLIENT_ID_RE.test(clientId)) {\n    return \"id must contain only [A-Za-z0-9._~-]\";\n  }\n  return null;\n};\n\nconst clientIdResponse = (\n  request: Request,\n): { clientId: string } | { response: Response } => {\n  const clientId = request.headers.get(CLIENT_ID_HEADER);\n  if (clientId === null) {\n    return {\n      response: Response.json(\n        { detail: `missing ${CLIENT_ID_HEADER} header` },\n        { status: 400 },\n      ),\n    };\n  }\n  const reason = invalidClientIdReason(clientId);\n  if (reason !== null) {\n    return {\n      response: Response.json(\n        { detail: `invalid ${CLIENT_ID_HEADER}: ${reason}` },\n        { status: 400 },\n      ),\n    };\n  }\n  return { clientId };\n};\n\nconst headersOf = (request: Request): Record<string, string> =>\n  Object.fromEntries(request.headers);\n\nconst authorize = async (\n  h: SocketHostState,\n  headers: Record<string, string>,\n): Promise<{ auth: unknown } | { refused: Response }> => {\n  try {\n    return { auth: await h.authorize?.({ headers }) };\n  } catch (error) {\n    if (error instanceof Response) return { refused: error };\n    throw error;\n  }\n};\n\nconst subscriberLimitResponse = (): Response =>\n  Response.json({ detail: SUBSCRIBER_LIMIT_MESSAGE }, { status: 503 });\n\n// No awaits between this check and register: the binding cannot race.\nconst principalMismatchResponse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): Response | null => {\n  const rec = h.clients.get(clientId);\n  if (rec !== undefined && !authEquals(rec.principal, auth)) {\n    return Response.json(\n      { detail: PRINCIPAL_MISMATCH_MESSAGE },\n      { status: 403 },\n    );\n  }\n  return null;\n};\n\nconst mintLease = (): string => {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  return btoa(String.fromCharCode(...bytes))\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\ntype SseAttachment = {\n  body: ReadableStream<Uint8Array>;\n  registration: Registration | null;\n  activateBackpressure: () => void;\n};\n\nconst attachSse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): SseAttachment => {\n  let controller: ReadableStreamDefaultController<Uint8Array>;\n  let connection: Registration[\"connection\"] | null = null;\n  let open = true;\n  let backpressureActive = false;\n  const body = new ReadableStream(\n    {\n      start: (next) => {\n        controller = next;\n      },\n      cancel: () => {\n        open = false;\n        connection?.close();\n      },\n    },\n    { highWaterMark: h.streamQueueSize },\n  );\n  const socket = {\n    send: (data: string) => {\n      if (!open) return;\n      if (\n        backpressureActive &&\n        controller.desiredSize !== null &&\n        controller.desiredSize <= 0\n      ) {\n        open = false;\n        try {\n          controller.enqueue(laggardFin);\n          controller.close();\n        } catch {\n          /* stream already gone */\n        }\n        connection?.close();\n        return;\n      }\n      const frame = data === \"{}\" ? \": ping\\n\\n\" : `data: ${data}\\n\\n`;\n      try {\n        controller.enqueue(encoder.encode(frame));\n      } catch {\n        open = false;\n        connection?.close();\n      }\n    },\n    close: () => {\n      if (!open) return;\n      open = false;\n      try {\n        controller.close();\n      } catch {\n        return;\n      }\n    },\n  };\n  const registration = register(h, clientId, socket, false, auth);\n  connection = registration?.connection ?? null;\n  if (!open) connection?.close();\n  return {\n    body,\n    registration,\n    activateBackpressure: () => {\n      backpressureActive = true;\n    },\n  };\n};\n\nconst streamResponse = (\n  attachment: SseAttachment,\n  lease: string | null,\n): Response => {\n  attachment.activateBackpressure();\n  return new Response(attachment.body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      [VERSION_HEADER]: PROTOCOL_VERSION,\n      ...(lease !== null && { [LEASE_HEADER]: lease }),\n    },\n  });\n};\n\nconst admitAttachFrame = (\n  h: SocketHostState,\n  registration: Registration,\n  frame: ParsedFrame,\n) => {\n  if (frame.ctx.length === 0 && frame.cmd.length === 0) return;\n  const admission = admitFrame(\n    h,\n    registration.rec,\n    frame,\n    registration.conn.auth,\n  );\n  if (admission.type === \"refused\") {\n    sendTo(h, registration.conn, JSON.stringify(admission.syn));\n  }\n};\n\nconst getStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const attachment = attachSse(h, client.clientId, authorized.auth);\n  const lease = attachment.registration === null ? null : mintLease();\n  if (attachment.registration !== null)\n    attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nconst postStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ detail: \"frame body too large\" }, { status: 413 });\n  }\n  let body: unknown;\n  try {\n    body = raw.trim() ? JSON.parse(raw) : null;\n  } catch {\n    return Response.json({ detail: \"body must be JSON\" }, { status: 400 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame =\n      body === null && !raw.trim()\n        ? { ctx: [], cmd: [] }\n        : parseFrameValue(body);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return Response.json({ detail: error.message }, { status: 400 });\n  }\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const attachment = attachSse(h, client.clientId, authorized.auth);\n  if (attachment.registration === null) return streamResponse(attachment, null);\n  const lease = mintLease();\n  attachment.registration.conn.lease = lease;\n  admitAttachFrame(h, attachment.registration, frame);\n  return streamResponse(attachment, lease);\n};\n\nexport const stream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  if (request.method === \"GET\") return getStream(h, request);\n  if (request.method === \"POST\") return postStream(h, request);\n  return new Response(null, {\n    status: 405,\n    headers: { Allow: \"GET, POST\" },\n  });\n};\n\nconst finClient = (\n  h: SocketHostState,\n  clientId: string,\n  fin: StatewireHost.Fin,\n) => {\n  flush(h);\n  for (const conn of [...h.conns]) {\n    if (conn.clientId !== clientId) continue;\n    sendTo(h, conn, JSON.stringify({ fin }));\n    closeConn(h, conn);\n  }\n};\n\nconst violationResponse = (\n  h: SocketHostState,\n  clientId: string,\n  reason: string,\n) => {\n  finClient(h, clientId, {\n    reason: \"protocol-error\",\n    message: reason,\n  });\n  return Response.json({ error: reason }, { status: 400 });\n};\n\nexport const frames = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const lease = request.headers.get(LEASE_HEADER);\n  // A lease lives and dies with its attach: any live attach of the id accepts.\n  const leased =\n    lease === null\n      ? undefined\n      : [...h.conns].find((conn) => conn.open && conn.lease === lease);\n  if (h.disposed || h.finished !== null || leased === undefined) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const clientId = leased.clientId;\n  const rec = h.clients.get(clientId)!;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ error: \"frame body too large\" }, { status: 413 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrame(raw);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return violationResponse(h, clientId, error.message);\n  }\n  if (!leased.open || h.disposed || h.finished !== null) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const admission = admitFrame(h, rec, frame, leased.auth);\n  if (admission.type === \"refused\") {\n    const retry = admission.syn.syn.retry;\n    return Response.json(admission.syn, {\n      status: retry === undefined ? 409 : 429,\n      ...(retry !== undefined && {\n        headers: { \"Retry-After\": String(Math.ceil(retry / 1000)) },\n      }),\n    });\n  }\n  return Response.json({});\n};\n"],"mappings":";;;;AAqBA,MAAMmB,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,UAAU,IAAIC,YAAY;AAChC,MAAMC,aAAaF,QAAQG,OACzB,gFACF;AACA,MAAMC,gBAAgB,OAAOC,YAA6C;CACxE,MAAMG,WAAWH,QAAQI,QAAQC,IAAI,gBAAgB;CACrD,IAAIF,aAAa,QAAQG,OAAOH,QAAQ,IAAA,SAA0B;EAChE,MAAMH,QAAQO,MAAMC,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;EACjE,OAAO;CACT;CACA,IAAIT,QAAQO,SAAS,MAAM,OAAO;CAClC,MAAMG,SAASV,QAAQO,KAAKI,UAAU;CACtC,MAAMC,SAAuB,CAAA;CAC7B,IAAIE,OAAO;CACX,SAAS;EACP,MAAM,EAAEC,MAAMC,UAAU,MAAMN,OAAOO,KAAK;EAC1C,IAAIF,MAAM;EACVD,QAAQE,MAAME;EACd,IAAIJ,OAAAA,SAA6B;GAC/B,MAAMJ,OAAOF,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;GAC1D,OAAO;EACT;EACAG,OAAOO,KAAKH,KAAK;CACnB;CACA,MAAMT,OAAO,IAAIM,WAAWC,IAAI;CAChC,IAAIM,SAAS;CACb,KAAK,MAAMC,SAAST,QAAQ;EAC1BL,KAAKe,IAAID,OAAOD,MAAM;EACtBA,UAAUC,MAAMH;CAClB;CACA,OAAO,IAAIK,YAAY,CAAC,CAACC,OAAOjB,IAAI;AACtC;AAEA,MAAMkB,yBAAyBC,aAAoC;CACjE,IAAIA,aAAa,IAAI,OAAO;CAC5B,IAAIA,SAASR,SAAS,KAAK,OAAO;CAClC,IAAI,CAAC3C,aAAaoD,KAAKD,QAAQ,GAC7B,OAAO;CAET,OAAO;AACT;AAEA,MAAME,oBACJ5B,YACkD;CAClD,MAAM0B,WAAW1B,QAAQI,QAAQC,IAAIZ,gBAAgB;CACrD,IAAIiC,aAAa,MACf,OAAO,EACLG,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,SAAU,GAC/C,EAAEwC,QAAQ,IAAI,CAChB,EACF;CAEF,MAAMC,SAAST,sBAAsBC,QAAQ;CAC7C,IAAIQ,WAAW,MACb,OAAO,EACLL,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,IAAKyC,SAAS,GACnD,EAAED,QAAQ,IAAI,CAChB,EACF;CAEF,OAAO,EAAEP,SAAS;AACpB;AAEA,MAAMS,aAAanC,YACjBqC,OAAOC,YAAYtC,QAAQI,OAAO;AAEpC,MAAMmC,YAAY,OAChBC,GACApC,YACuD;CACvD,IAAI;EACF,OAAO,EAAEqC,MAAM,MAAMD,EAAED,YAAY,EAAEnC,QAAQ,CAAC,EAAE;CAClD,SAASuC,OAAO;EACd,IAAIA,iBAAiBb,UAAU,OAAO,EAAEY,SAASC,MAAM;EACvD,MAAMA;CACR;AACF;AAEA,MAAMC,gCACJd,SAASC,KAAK,EAAEC,QAAQvD,yBAAyB,GAAG,EAAEwD,QAAQ,IAAI,CAAC;AAGrE,MAAMY,6BACJL,GACAd,UACAe,SACoB;CACpB,MAAMK,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,IAAIoB,QAAQE,KAAAA,KAAa,CAACpE,WAAWkE,IAAIG,WAAWR,IAAI,GACtD,OAAOX,SAASC,KACd,EAAEC,QAAQxD,2BAA2B,GACrC,EAAEyD,QAAQ,IAAI,CAChB;CAEF,OAAO;AACT;AAEA,MAAMiB,kBAA0B;CAC9B,MAAMC,QAAQC,OAAOC,gCAAgB,IAAIxC,WAAW,EAAE,CAAC;CACvD,OAAOyC,KAAKC,OAAOC,aAAa,GAAGL,KAAK,CAAC,CAAC,CACvCM,WAAW,KAAK,GAAG,CAAC,CACpBA,WAAW,KAAK,GAAG,CAAC,CACpBC,QAAQ,OAAO,EAAE;AACtB;AAQA,MAAMK,aACJvB,GACAd,UACAe,SACkB;CAClB,IAAIuB;CACJ,IAAIE,aAAgD;CACpD,IAAIC,OAAO;CACX,IAAIC,qBAAqB;CACzB,MAAM7D,OAAO,IAAIqD,eACf;EACES,QAAQC,SAAS;GACfN,aAAaM;EACf;EACA9D,cAAc;GACZ2D,OAAO;GACPD,YAAYK,MAAM;EACpB;CACF,GACA,EAAEC,eAAehC,EAAEiC,gBAAgB,CACrC;CAqCA,MAAMZ,eAAe5E,SAASuD,GAAGd,UAAUgD;EAnCzCC,OAAOC,SAAiB;GACtB,IAAI,CAACT,MAAM;GACX,IACEC,sBACAJ,WAAWa,gBAAgB,QAC3Bb,WAAWa,eAAe,GAC1B;IACAV,OAAO;IACP,IAAI;KACFH,WAAWc,QAAQjF,UAAU;KAC7BmE,WAAWO,MAAM;IACnB,QAAQ,CACN;IAEFL,YAAYK,MAAM;IAClB;GACF;GACA,MAAMQ,QAAQH,SAAS,OAAO,eAAe,SAASA,KAAI;GAC1D,IAAI;IACFZ,WAAWc,QAAQnF,QAAQG,OAAOiF,KAAK,CAAC;GAC1C,QAAQ;IACNZ,OAAO;IACPD,YAAYK,MAAM;GACpB;EACF;EACAA,aAAa;GACX,IAAI,CAACJ,MAAM;GACXA,OAAO;GACP,IAAI;IACFH,WAAWO,MAAM;GACnB,QAAQ;IACN;GACF;EACF;CAEyCG,GAAQ,OAAOjC,IAAI;CAC9DyB,aAAaL,cAAcK,cAAc;CACzC,IAAI,CAACC,MAAMD,YAAYK,MAAM;CAC7B,OAAO;EACLhE;EACAsD;EACAC,4BAA4B;GAC1BM,qBAAqB;EACvB;CACF;AACF;AAEA,MAAMY,kBACJC,YACAC,UACa;CACbD,WAAWnB,qBAAqB;CAChC,OAAO,IAAIhC,SAASmD,WAAW1E,MAAM;EACnC0B,QAAQ;EACR7B,SAAS;GACP,gBAAgB;IACfZ,iBAAAA;GACD,GAAI0F,UAAU,QAAQ,GAAGxF,eAAewF,MAAM;EAChD;CACF,CAAC;AACH;AAEA,MAAMC,oBACJ3C,GACAqB,cACAkB,UACG;CACH,IAAIA,MAAMK,IAAIlE,WAAW,KAAK6D,MAAMM,IAAInE,WAAW,GAAG;CACtD,MAAMoE,YAAY5G,WAChB8D,GACAqB,aAAaf,KACbiC,OACAlB,aAAa0B,KAAK9C,IACpB;CACA,IAAI6C,UAAUE,SAAS,WACrBtG,OAAOsD,GAAGqB,aAAa0B,MAAME,KAAKC,UAAUJ,UAAUK,GAAG,CAAC;AAE9D;AAEA,MAAMC,YAAY,OAChBpD,GACAxC,YACsB;CACtB,MAAM6F,aAAa,MAAMtD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAa6F,YAAY,OAAOA,WAAWnD;CAC/C,MAAMoD,SAASlE,iBAAiB5B,OAAO;CACvC,IAAI,cAAc8F,QAAQ,OAAOA,OAAOjE;CACxC,MAAMkE,WAAWlD,0BACfL,GACAsD,OAAOpE,UACPmE,WAAWpD,IACb;CACA,IAAIsD,aAAa,MAAM,OAAOA;CAC9B,IAAIpH,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMqC,aAAalB,UAAUvB,GAAGsD,OAAOpE,UAAUmE,WAAWpD,IAAI;CAChE,MAAMyC,QAAQD,WAAWpB,iBAAiB,OAAO,OAAOX,UAAU;CAClE,IAAI+B,WAAWpB,iBAAiB,MAC9BoB,WAAWpB,aAAa0B,KAAKL,QAAQA;CACvC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAMc,aAAa,OACjBxD,GACAxC,YACsB;CACtB,MAAM8F,SAASlE,iBAAiB5B,OAAO;CACvC,IAAI,cAAc8F,QAAQ,OAAOA,OAAOjE;CACxC,MAAMoE,MAAM,MAAMlG,cAAcC,OAAO;CACvC,IAAIiG,QAAQ,MACV,OAAOnE,SAASC,KAAK,EAAEC,QAAQ,uBAAuB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CAE1E,IAAI1B;CACJ,IAAI;EACFA,OAAO0F,IAAIC,KAAK,IAAIT,KAAKU,MAAMF,GAAG,IAAI;CACxC,QAAQ;EACN,OAAOnE,SAASC,KAAK,EAAEC,QAAQ,oBAAoB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CACvE;CACA,IAAI8C;CACJ,IAAI;EACFA,QACExE,SAAS,QAAQ,CAAC0F,IAAIC,KAAK,IACvB;GAAEd,KAAK,CAAA;GAAIC,KAAK,CAAA;EAAG,IACnBrG,gBAAgBuB,IAAI;CAC5B,SAASoC,OAAO;EACd,IAAI,EAAEA,iBAAiByD,UAAUzD,MAAM0D,SAAS,sBAC9C,MAAM1D;EAER,OAAOb,SAASC,KAAK,EAAEC,QAAQW,MAAM2D,QAAQ,GAAG,EAAErE,QAAQ,IAAI,CAAC;CACjE;CACA,MAAM4D,aAAa,MAAMtD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAa6F,YAAY,OAAOA,WAAWnD;CAC/C,MAAMqD,WAAWlD,0BACfL,GACAsD,OAAOpE,UACPmE,WAAWpD,IACb;CACA,IAAIsD,aAAa,MAAM,OAAOA;CAC9B,IAAIpH,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMqC,aAAalB,UAAUvB,GAAGsD,OAAOpE,UAAUmE,WAAWpD,IAAI;CAChE,IAAIwC,WAAWpB,iBAAiB,MAAM,OAAOmB,eAAeC,YAAY,IAAI;CAC5E,MAAMC,QAAQhC,UAAU;CACxB+B,WAAWpB,aAAa0B,KAAKL,QAAQA;CACrCC,iBAAiB3C,GAAGyC,WAAWpB,cAAckB,KAAK;CAClD,OAAOC,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAaqB,SAAS,OACpB/D,GACAxC,YACsB;CACtB,IAAIA,QAAQwG,WAAW,OAAO,OAAOZ,UAAUpD,GAAGxC,OAAO;CACzD,IAAIA,QAAQwG,WAAW,QAAQ,OAAOR,WAAWxD,GAAGxC,OAAO;CAC3D,OAAO,IAAI8B,SAAS,MAAM;EACxBG,QAAQ;EACR7B,SAAS,EAAEqG,OAAO,YAAY;CAChC,CAAC;AACH;AAEA,MAAMC,aACJlE,GACAd,UACAiF,QACG;CACH7H,MAAM0D,CAAC;CACP,KAAK,MAAM+C,QAAQ,CAAC,GAAG/C,EAAEqE,KAAK,GAAG;EAC/B,IAAItB,KAAK7D,aAAaA,UAAU;EAChCxC,OAAOsD,GAAG+C,MAAME,KAAKC,UAAU,EAAEiB,IAAI,CAAC,CAAC;EACvC9H,UAAU2D,GAAG+C,IAAI;CACnB;AACF;AAEA,MAAMuB,qBACJtE,GACAd,UACAQ,WACG;CACHwE,UAAUlE,GAAGd,UAAU;EACrBQ,QAAQ;EACRoE,SAASpE;CACX,CAAC;CACD,OAAOJ,SAASC,KAAK,EAAEY,OAAOT,OAAO,GAAG,EAAED,QAAQ,IAAI,CAAC;AACzD;AAEA,MAAa8E,SAAS,OACpBvE,GACAxC,YACsB;CACtB,MAAMkF,QAAQlF,QAAQI,QAAQC,IAAIX,YAAY;CAE9C,MAAMsH,SACJ9B,UAAU,OACNlC,KAAAA,IACA,CAAC,GAAGR,EAAEqE,KAAK,CAAC,CAACI,MAAM1B,SAASA,KAAKpB,QAAQoB,KAAKL,UAAUA,KAAK;CACnE,IAAI1C,EAAE0E,YAAY1E,EAAE2E,aAAa,QAAQH,WAAWhE,KAAAA,GAClD,OAAOlB,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,MAAMP,WAAWsF,OAAOtF;CACxB,MAAMoB,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,MAAMuE,MAAM,MAAMlG,cAAcC,OAAO;CACvC,IAAIiG,QAAQ,MACV,OAAOnE,SAASC,KAAK,EAAEY,OAAO,uBAAuB,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEzE,IAAI8C;CACJ,IAAI;EACFA,QAAQhG,WAAWkH,GAAG;CACxB,SAAStD,OAAO;EACd,IAAI,EAAEA,iBAAiByD,UAAUzD,MAAM0D,SAAS,sBAC9C,MAAM1D;EAER,OAAOmE,kBAAkBtE,GAAGd,UAAUiB,MAAM2D,OAAO;CACrD;CACA,IAAI,CAACU,OAAO7C,QAAQ3B,EAAE0E,YAAY1E,EAAE2E,aAAa,MAC/C,OAAOrF,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,MAAMqD,YAAY5G,WAAW8D,GAAGM,KAAKiC,OAAOiC,OAAOvE,IAAI;CACvD,IAAI6C,UAAUE,SAAS,WAAW;EAChC,MAAM4B,QAAQ9B,UAAUK,IAAIA,IAAIyB;EAChC,OAAOtF,SAASC,KAAKuD,UAAUK,KAAK;GAClC1D,QAAQmF,UAAUpE,KAAAA,IAAY,MAAM;GACpC,GAAIoE,UAAUpE,KAAAA,KAAa,EACzB5C,SAAS,EAAE,eAAemD,OAAO8D,KAAKC,KAAKF,QAAQ,GAAI,CAAC,EAAE,EAC5D;EACF,CAAC;CACH;CACA,OAAOtF,SAASC,KAAK,CAAC,CAAC;AACzB"}
+{"version":3,"file":"http.js","names":["StatewireHost","CLIENT_ID_RE","PRINCIPAL_MISMATCH_MESSAGE","SUBSCRIBER_LIMIT_MESSAGE","admitFrame","atSubscriberLimit","authEquals","closeConn","flush","parseFrame","parseFrameValue","register","sendTo","ParsedFrame","Registration","SocketHostState","MAX_FRAME_BODY_BYTES","negotiateProtocols","StatewireProtocol","CLIENT_ID_HEADER","LEASE_HEADER","encoder","TextEncoder","laggardFin","encode","readFrameBody","request","Request","Promise","declared","headers","get","Number","body","cancel","catch","reader","getReader","chunks","Uint8Array","size","done","value","read","length","push","offset","chunk","set","TextDecoder","decode","invalidClientIdReason","clientId","test","clientIdResponse","response","Response","json","detail","status","reason","headersOf","Record","Object","fromEntries","authorize","h","auth","refused","error","subscriberLimitResponse","principalMismatchResponse","rec","clients","undefined","principal","mintLease","bytes","crypto","getRandomValues","btoa","String","fromCharCode","replaceAll","replace","SseAttachment","ReadableStream","registration","activateBackpressure","attachSse","selection","Selection","controller","ReadableStreamDefaultController","connection","open","backpressureActive","start","next","close","highWaterMark","streamQueueSize","socket","send","data","desiredSize","enqueue","frame","streamResponse","attachment","lease","admitAttachFrame","ctx","cmd","admission","conn","type","JSON","stringify","syn","getStream","authorized","client","mismatch","wireVersion","protocol","fin","postStream","raw","trim","parse","Error","name","message","stream","method","Allow","finClient","Fin","conns","violationResponse","frames","leased","find","disposed","finished","ReturnType","retry","Math","ceil"],"sources":["../../src/host/http.ts"],"sourcesContent":["import type { StatewireHost } from \"../host\";\nimport {\n  CLIENT_ID_RE,\n  PRINCIPAL_MISMATCH_MESSAGE,\n  SUBSCRIBER_LIMIT_MESSAGE,\n  admitFrame,\n  atSubscriberLimit,\n  authEquals,\n  closeConn,\n  flush,\n  parseFrame,\n  parseFrameValue,\n  register,\n  sendTo,\n} from \"./socket\";\nimport type { ParsedFrame, Registration, SocketHostState } from \"./socket\";\nimport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\nimport { negotiateProtocols } from \"../wire/protocol\";\nimport type { StatewireProtocol } from \"../wire/protocol\";\n\nexport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\n\nconst CLIENT_ID_HEADER = \"Statewire-Client-Id\";\nconst LEASE_HEADER = \"Statewire-Lease\";\nconst encoder = new TextEncoder();\nconst laggardFin = encoder.encode(\n  'data: {\"fin\":{\"reason\":\"reconnect\",\"code\":\"client-fell-behind\"}}\\n\\n',\n);\nconst readFrameBody = async (request: Request): Promise<string | null> => {\n  const declared = request.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_FRAME_BODY_BYTES) {\n    await request.body?.cancel(\"frame body too large\").catch(() => {});\n    return null;\n  }\n  if (request.body === null) return \"\";\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.length;\n    if (size > MAX_FRAME_BODY_BYTES) {\n      await reader.cancel(\"frame body too large\").catch(() => {});\n      return null;\n    }\n    chunks.push(value);\n  }\n  const body = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return new TextDecoder().decode(body);\n};\n\nconst invalidClientIdReason = (clientId: string): string | null => {\n  if (clientId === \"\") return \"id must be non-empty\";\n  if (clientId.length > 256) return \"id must be at most 256 characters\";\n  if (!CLIENT_ID_RE.test(clientId)) {\n    return \"id must contain only [A-Za-z0-9._~-]\";\n  }\n  return null;\n};\n\nconst clientIdResponse = (\n  request: Request,\n): { clientId: string } | { response: Response } => {\n  const clientId = request.headers.get(CLIENT_ID_HEADER);\n  if (clientId === null) {\n    return {\n      response: Response.json(\n        { detail: `missing ${CLIENT_ID_HEADER} header` },\n        { status: 400 },\n      ),\n    };\n  }\n  const reason = invalidClientIdReason(clientId);\n  if (reason !== null) {\n    return {\n      response: Response.json(\n        { detail: `invalid ${CLIENT_ID_HEADER}: ${reason}` },\n        { status: 400 },\n      ),\n    };\n  }\n  return { clientId };\n};\n\nconst headersOf = (request: Request): Record<string, string> =>\n  Object.fromEntries(request.headers);\n\nconst authorize = async (\n  h: SocketHostState,\n  headers: Record<string, string>,\n): Promise<{ auth: unknown } | { refused: Response }> => {\n  try {\n    return { auth: await h.authorize?.({ headers }) };\n  } catch (error) {\n    if (error instanceof Response) return { refused: error };\n    throw error;\n  }\n};\n\nconst subscriberLimitResponse = (): Response =>\n  Response.json({ detail: SUBSCRIBER_LIMIT_MESSAGE }, { status: 503 });\n\n// No awaits between this check and register: the binding cannot race.\nconst principalMismatchResponse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): Response | null => {\n  const rec = h.clients.get(clientId);\n  if (rec !== undefined && !authEquals(rec.principal, auth)) {\n    return Response.json(\n      { detail: PRINCIPAL_MISMATCH_MESSAGE },\n      { status: 403 },\n    );\n  }\n  return null;\n};\n\nconst mintLease = (): string => {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  return btoa(String.fromCharCode(...bytes))\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\ntype SseAttachment = {\n  body: ReadableStream<Uint8Array>;\n  registration: Registration | null;\n  activateBackpressure: () => void;\n};\n\nconst attachSse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n  selection: StatewireProtocol.Selection,\n): SseAttachment => {\n  let controller: ReadableStreamDefaultController<Uint8Array>;\n  let connection: Registration[\"connection\"] | null = null;\n  let open = true;\n  let backpressureActive = false;\n  const body = new ReadableStream(\n    {\n      start: (next) => {\n        controller = next;\n      },\n      cancel: () => {\n        open = false;\n        connection?.close();\n      },\n    },\n    { highWaterMark: h.streamQueueSize },\n  );\n  const socket = {\n    send: (data: string) => {\n      if (!open) return;\n      if (\n        backpressureActive &&\n        controller.desiredSize !== null &&\n        controller.desiredSize <= 0\n      ) {\n        open = false;\n        try {\n          controller.enqueue(laggardFin);\n          controller.close();\n        } catch {\n          /* stream already gone */\n        }\n        connection?.close();\n        return;\n      }\n      const frame = data === \"{}\" ? \": ping\\n\\n\" : `data: ${data}\\n\\n`;\n      try {\n        controller.enqueue(encoder.encode(frame));\n      } catch {\n        open = false;\n        connection?.close();\n      }\n    },\n    close: () => {\n      if (!open) return;\n      open = false;\n      try {\n        controller.close();\n      } catch {\n        return;\n      }\n    },\n  };\n  const registration = register(h, clientId, socket, false, auth, selection);\n  connection = registration?.connection ?? null;\n  if (!open) connection?.close();\n  return {\n    body,\n    registration,\n    activateBackpressure: () => {\n      backpressureActive = true;\n    },\n  };\n};\n\nconst streamResponse = (\n  attachment: SseAttachment,\n  lease: string | null,\n): Response => {\n  attachment.activateBackpressure();\n  return new Response(attachment.body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      ...(lease !== null && { [LEASE_HEADER]: lease }),\n    },\n  });\n};\n\nconst admitAttachFrame = (\n  h: SocketHostState,\n  registration: Registration,\n  frame: ParsedFrame,\n) => {\n  if (frame.ctx.length === 0 && frame.cmd.length === 0) return;\n  const admission = admitFrame(\n    h,\n    registration.rec,\n    frame,\n    registration.conn.auth,\n    registration.conn.selection,\n  );\n  if (admission.type === \"refused\") {\n    sendTo(h, registration.conn, JSON.stringify(admission.syn));\n  }\n};\n\nconst getStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const selection = negotiateProtocols(request.headers, h.wireVersion, [\n    h.protocol,\n  ]);\n  if (\"fin\" in selection)\n    return Response.json(selection, { status: selection.fin.status });\n  const attachment = attachSse(h, client.clientId, authorized.auth, selection);\n  const lease = attachment.registration === null ? null : mintLease();\n  if (attachment.registration !== null)\n    attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nconst postStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ detail: \"frame body too large\" }, { status: 413 });\n  }\n  let body: unknown;\n  try {\n    body = raw.trim() ? JSON.parse(raw) : null;\n  } catch {\n    return Response.json({ detail: \"body must be JSON\" }, { status: 400 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame =\n      body === null && !raw.trim()\n        ? { ctx: [], cmd: [] }\n        : parseFrameValue(body);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return Response.json({ detail: error.message }, { status: 400 });\n  }\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const selection = negotiateProtocols(request.headers, h.wireVersion, [\n    h.protocol,\n  ]);\n  if (\"fin\" in selection)\n    return Response.json(selection, { status: selection.fin.status });\n  const attachment = attachSse(h, client.clientId, authorized.auth, selection);\n  if (attachment.registration === null) return streamResponse(attachment, null);\n  const lease = mintLease();\n  attachment.registration.conn.lease = lease;\n  try {\n    admitAttachFrame(h, attachment.registration, frame);\n  } catch (error) {\n    closeConn(h, attachment.registration.conn, 1008, \"invalid-context\");\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\")\n      throw error;\n    return Response.json(\n      { fin: { reason: \"protocol-error\", message: error.message } },\n      { status: 400 },\n    );\n  }\n  return streamResponse(attachment, lease);\n};\n\nexport const stream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  if (request.method === \"GET\") return getStream(h, request);\n  if (request.method === \"POST\") return postStream(h, request);\n  return new Response(null, {\n    status: 405,\n    headers: { Allow: \"GET, POST\" },\n  });\n};\n\nconst finClient = (\n  h: SocketHostState,\n  clientId: string,\n  fin: StatewireHost.Fin,\n) => {\n  flush(h);\n  for (const conn of [...h.conns]) {\n    if (conn.clientId !== clientId) continue;\n    sendTo(h, conn, JSON.stringify({ fin }));\n    closeConn(h, conn);\n  }\n};\n\nconst violationResponse = (\n  h: SocketHostState,\n  clientId: string,\n  reason: string,\n) => {\n  finClient(h, clientId, {\n    reason: \"protocol-error\",\n    message: reason,\n  });\n  return Response.json({ error: reason }, { status: 400 });\n};\n\nexport const frames = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const lease = request.headers.get(LEASE_HEADER);\n  // A lease lives and dies with its attach: any live attach of the id accepts.\n  const leased =\n    lease === null\n      ? undefined\n      : [...h.conns].find((conn) => conn.open && conn.lease === lease);\n  if (h.disposed || h.finished !== null || leased === undefined) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const clientId = leased.clientId;\n  const rec = h.clients.get(clientId)!;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ error: \"frame body too large\" }, { status: 413 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrame(raw);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return violationResponse(h, clientId, error.message);\n  }\n  if (!leased.open || h.disposed || h.finished !== null) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  let admission: ReturnType<typeof admitFrame>;\n  try {\n    admission = admitFrame(h, rec, frame, leased.auth, leased.selection);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\")\n      throw error;\n    return violationResponse(h, clientId, error.message);\n  }\n  if (admission.type === \"refused\") {\n    const retry = admission.syn.syn.retry;\n    return Response.json(admission.syn, {\n      status: retry === undefined ? 409 : 429,\n      ...(retry !== undefined && {\n        headers: { \"Retry-After\": String(Math.ceil(retry / 1000)) },\n      }),\n    });\n  }\n  return Response.json({});\n};\n"],"mappings":";;;;AAsBA,MAAMmB,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,UAAU,IAAIC,YAAY;AAChC,MAAMC,aAAaF,QAAQG,OACzB,gFACF;AACA,MAAMC,gBAAgB,OAAOC,YAA6C;CACxE,MAAMG,WAAWH,QAAQI,QAAQC,IAAI,gBAAgB;CACrD,IAAIF,aAAa,QAAQG,OAAOH,QAAQ,IAAA,SAA0B;EAChE,MAAMH,QAAQO,MAAMC,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;EACjE,OAAO;CACT;CACA,IAAIT,QAAQO,SAAS,MAAM,OAAO;CAClC,MAAMG,SAASV,QAAQO,KAAKI,UAAU;CACtC,MAAMC,SAAuB,CAAA;CAC7B,IAAIE,OAAO;CACX,SAAS;EACP,MAAM,EAAEC,MAAMC,UAAU,MAAMN,OAAOO,KAAK;EAC1C,IAAIF,MAAM;EACVD,QAAQE,MAAME;EACd,IAAIJ,OAAAA,SAA6B;GAC/B,MAAMJ,OAAOF,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;GAC1D,OAAO;EACT;EACAG,OAAOO,KAAKH,KAAK;CACnB;CACA,MAAMT,OAAO,IAAIM,WAAWC,IAAI;CAChC,IAAIM,SAAS;CACb,KAAK,MAAMC,SAAST,QAAQ;EAC1BL,KAAKe,IAAID,OAAOD,MAAM;EACtBA,UAAUC,MAAMH;CAClB;CACA,OAAO,IAAIK,YAAY,CAAC,CAACC,OAAOjB,IAAI;AACtC;AAEA,MAAMkB,yBAAyBC,aAAoC;CACjE,IAAIA,aAAa,IAAI,OAAO;CAC5B,IAAIA,SAASR,SAAS,KAAK,OAAO;CAClC,IAAI,CAAC3C,aAAaoD,KAAKD,QAAQ,GAC7B,OAAO;CAET,OAAO;AACT;AAEA,MAAME,oBACJ5B,YACkD;CAClD,MAAM0B,WAAW1B,QAAQI,QAAQC,IAAIZ,gBAAgB;CACrD,IAAIiC,aAAa,MACf,OAAO,EACLG,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,SAAU,GAC/C,EAAEwC,QAAQ,IAAI,CAChB,EACF;CAEF,MAAMC,SAAST,sBAAsBC,QAAQ;CAC7C,IAAIQ,WAAW,MACb,OAAO,EACLL,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,IAAKyC,SAAS,GACnD,EAAED,QAAQ,IAAI,CAChB,EACF;CAEF,OAAO,EAAEP,SAAS;AACpB;AAEA,MAAMS,aAAanC,YACjBqC,OAAOC,YAAYtC,QAAQI,OAAO;AAEpC,MAAMmC,YAAY,OAChBC,GACApC,YACuD;CACvD,IAAI;EACF,OAAO,EAAEqC,MAAM,MAAMD,EAAED,YAAY,EAAEnC,QAAQ,CAAC,EAAE;CAClD,SAASuC,OAAO;EACd,IAAIA,iBAAiBb,UAAU,OAAO,EAAEY,SAASC,MAAM;EACvD,MAAMA;CACR;AACF;AAEA,MAAMC,gCACJd,SAASC,KAAK,EAAEC,QAAQvD,yBAAyB,GAAG,EAAEwD,QAAQ,IAAI,CAAC;AAGrE,MAAMY,6BACJL,GACAd,UACAe,SACoB;CACpB,MAAMK,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,IAAIoB,QAAQE,KAAAA,KAAa,CAACpE,WAAWkE,IAAIG,WAAWR,IAAI,GACtD,OAAOX,SAASC,KACd,EAAEC,QAAQxD,2BAA2B,GACrC,EAAEyD,QAAQ,IAAI,CAChB;CAEF,OAAO;AACT;AAEA,MAAMiB,kBAA0B;CAC9B,MAAMC,QAAQC,OAAOC,gCAAgB,IAAIxC,WAAW,EAAE,CAAC;CACvD,OAAOyC,KAAKC,OAAOC,aAAa,GAAGL,KAAK,CAAC,CAAC,CACvCM,WAAW,KAAK,GAAG,CAAC,CACpBA,WAAW,KAAK,GAAG,CAAC,CACpBC,QAAQ,OAAO,EAAE;AACtB;AAQA,MAAMK,aACJvB,GACAd,UACAe,MACAuB,cACkB;CAClB,IAAIE;CACJ,IAAIE,aAAgD;CACpD,IAAIC,OAAO;CACX,IAAIC,qBAAqB;CACzB,MAAM/D,OAAO,IAAIqD,eACf;EACEW,QAAQC,SAAS;GACfN,aAAaM;EACf;EACAhE,cAAc;GACZ6D,OAAO;GACPD,YAAYK,MAAM;EACpB;CACF,GACA,EAAEC,eAAelC,EAAEmC,gBAAgB,CACrC;CAqCA,MAAMd,eAAe5E,SAASuD,GAAGd,UAAUkD;EAnCzCC,OAAOC,SAAiB;GACtB,IAAI,CAACT,MAAM;GACX,IACEC,sBACAJ,WAAWa,gBAAgB,QAC3Bb,WAAWa,eAAe,GAC1B;IACAV,OAAO;IACP,IAAI;KACFH,WAAWc,QAAQnF,UAAU;KAC7BqE,WAAWO,MAAM;IACnB,QAAQ,CACN;IAEFL,YAAYK,MAAM;IAClB;GACF;GACA,MAAMQ,QAAQH,SAAS,OAAO,eAAe,SAASA,KAAI;GAC1D,IAAI;IACFZ,WAAWc,QAAQrF,QAAQG,OAAOmF,KAAK,CAAC;GAC1C,QAAQ;IACNZ,OAAO;IACPD,YAAYK,MAAM;GACpB;EACF;EACAA,aAAa;GACX,IAAI,CAACJ,MAAM;GACXA,OAAO;GACP,IAAI;IACFH,WAAWO,MAAM;GACnB,QAAQ;IACN;GACF;EACF;CAEyCG,GAAQ,OAAOnC,MAAMuB,SAAS;CACzEI,aAAaP,cAAcO,cAAc;CACzC,IAAI,CAACC,MAAMD,YAAYK,MAAM;CAC7B,OAAO;EACLlE;EACAsD;EACAC,4BAA4B;GAC1BQ,qBAAqB;EACvB;CACF;AACF;AAEA,MAAMY,kBACJC,YACAC,UACa;CACbD,WAAWrB,qBAAqB;CAChC,OAAO,IAAIhC,SAASqD,WAAW5E,MAAM;EACnC0B,QAAQ;EACR7B,SAAS;GACP,gBAAgB;GAChB,GAAIgF,UAAU,QAAQ,GAAG1F,eAAe0F,MAAM;EAChD;CACF,CAAC;AACH;AAEA,MAAMC,oBACJ7C,GACAqB,cACAoB,UACG;CACH,IAAIA,MAAMK,IAAIpE,WAAW,KAAK+D,MAAMM,IAAIrE,WAAW,GAAG;CACtD,MAAMsE,YAAY9G,WAChB8D,GACAqB,aAAaf,KACbmC,OACApB,aAAa4B,KAAKhD,MAClBoB,aAAa4B,KAAKzB,SACpB;CACA,IAAIwB,UAAUE,SAAS,WACrBxG,OAAOsD,GAAGqB,aAAa4B,MAAME,KAAKC,UAAUJ,UAAUK,GAAG,CAAC;AAE9D;AAEA,MAAMC,YAAY,OAChBtD,GACAxC,YACsB;CACtB,MAAM+F,aAAa,MAAMxD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAa+F,YAAY,OAAOA,WAAWrD;CAC/C,MAAMsD,SAASpE,iBAAiB5B,OAAO;CACvC,IAAI,cAAcgG,QAAQ,OAAOA,OAAOnE;CACxC,MAAMoE,WAAWpD,0BACfL,GACAwD,OAAOtE,UACPqE,WAAWtD,IACb;CACA,IAAIwD,aAAa,MAAM,OAAOA;CAC9B,IAAItH,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMoB,YAAYzE,mBAAmBS,QAAQI,SAASoC,EAAE0D,aAAa,CACnE1D,EAAE2D,QAAQ,CACX;CACD,IAAI,SAASnC,WACX,OAAOlC,SAASC,KAAKiC,WAAW,EAAE/B,QAAQ+B,UAAUoC,IAAInE,OAAO,CAAC;CAClE,MAAMkD,aAAapB,UAAUvB,GAAGwD,OAAOtE,UAAUqE,WAAWtD,MAAMuB,SAAS;CAC3E,MAAMoB,QAAQD,WAAWtB,iBAAiB,OAAO,OAAOX,UAAU;CAClE,IAAIiC,WAAWtB,iBAAiB,MAC9BsB,WAAWtB,aAAa4B,KAAKL,QAAQA;CACvC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAMiB,aAAa,OACjB7D,GACAxC,YACsB;CACtB,MAAMgG,SAASpE,iBAAiB5B,OAAO;CACvC,IAAI,cAAcgG,QAAQ,OAAOA,OAAOnE;CACxC,MAAMyE,MAAM,MAAMvG,cAAcC,OAAO;CACvC,IAAIsG,QAAQ,MACV,OAAOxE,SAASC,KAAK,EAAEC,QAAQ,uBAAuB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CAE1E,IAAI1B;CACJ,IAAI;EACFA,OAAO+F,IAAIC,KAAK,IAAIZ,KAAKa,MAAMF,GAAG,IAAI;CACxC,QAAQ;EACN,OAAOxE,SAASC,KAAK,EAAEC,QAAQ,oBAAoB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CACvE;CACA,IAAIgD;CACJ,IAAI;EACFA,QACE1E,SAAS,QAAQ,CAAC+F,IAAIC,KAAK,IACvB;GAAEjB,KAAK,CAAA;GAAIC,KAAK,CAAA;EAAG,IACnBvG,gBAAgBuB,IAAI;CAC5B,SAASoC,OAAO;EACd,IAAI,EAAEA,iBAAiB8D,UAAU9D,MAAM+D,SAAS,sBAC9C,MAAM/D;EAER,OAAOb,SAASC,KAAK,EAAEC,QAAQW,MAAMgE,QAAQ,GAAG,EAAE1E,QAAQ,IAAI,CAAC;CACjE;CACA,MAAM8D,aAAa,MAAMxD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAa+F,YAAY,OAAOA,WAAWrD;CAC/C,MAAMuD,WAAWpD,0BACfL,GACAwD,OAAOtE,UACPqE,WAAWtD,IACb;CACA,IAAIwD,aAAa,MAAM,OAAOA;CAC9B,IAAItH,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMoB,YAAYzE,mBAAmBS,QAAQI,SAASoC,EAAE0D,aAAa,CACnE1D,EAAE2D,QAAQ,CACX;CACD,IAAI,SAASnC,WACX,OAAOlC,SAASC,KAAKiC,WAAW,EAAE/B,QAAQ+B,UAAUoC,IAAInE,OAAO,CAAC;CAClE,MAAMkD,aAAapB,UAAUvB,GAAGwD,OAAOtE,UAAUqE,WAAWtD,MAAMuB,SAAS;CAC3E,IAAImB,WAAWtB,iBAAiB,MAAM,OAAOqB,eAAeC,YAAY,IAAI;CAC5E,MAAMC,QAAQlC,UAAU;CACxBiC,WAAWtB,aAAa4B,KAAKL,QAAQA;CACrC,IAAI;EACFC,iBAAiB7C,GAAG2C,WAAWtB,cAAcoB,KAAK;CACpD,SAAStC,OAAO;EACd9D,UAAU2D,GAAG2C,WAAWtB,aAAa4B,MAAM,MAAM,iBAAiB;EAClE,IAAI,EAAE9C,iBAAiB8D,UAAU9D,MAAM+D,SAAS,sBAC9C,MAAM/D;EACR,OAAOb,SAASC,KACd,EAAEqE,KAAK;GAAElE,QAAQ;GAAkByE,SAAShE,MAAMgE;EAAQ,EAAE,GAC5D,EAAE1E,QAAQ,IAAI,CAChB;CACF;CACA,OAAOiD,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAawB,SAAS,OACpBpE,GACAxC,YACsB;CACtB,IAAIA,QAAQ6G,WAAW,OAAO,OAAOf,UAAUtD,GAAGxC,OAAO;CACzD,IAAIA,QAAQ6G,WAAW,QAAQ,OAAOR,WAAW7D,GAAGxC,OAAO;CAC3D,OAAO,IAAI8B,SAAS,MAAM;EACxBG,QAAQ;EACR7B,SAAS,EAAE0G,OAAO,YAAY;CAChC,CAAC;AACH;AAEA,MAAMC,aACJvE,GACAd,UACA0E,QACG;CACHtH,MAAM0D,CAAC;CACP,KAAK,MAAMiD,QAAQ,CAAC,GAAGjD,EAAEyE,KAAK,GAAG;EAC/B,IAAIxB,KAAK/D,aAAaA,UAAU;EAChCxC,OAAOsD,GAAGiD,MAAME,KAAKC,UAAU,EAAEQ,IAAI,CAAC,CAAC;EACvCvH,UAAU2D,GAAGiD,IAAI;CACnB;AACF;AAEA,MAAMyB,qBACJ1E,GACAd,UACAQ,WACG;CACH6E,UAAUvE,GAAGd,UAAU;EACrBQ,QAAQ;EACRyE,SAASzE;CACX,CAAC;CACD,OAAOJ,SAASC,KAAK,EAAEY,OAAOT,OAAO,GAAG,EAAED,QAAQ,IAAI,CAAC;AACzD;AAEA,MAAakF,SAAS,OACpB3E,GACAxC,YACsB;CACtB,MAAMoF,QAAQpF,QAAQI,QAAQC,IAAIX,YAAY;CAE9C,MAAM0H,SACJhC,UAAU,OACNpC,KAAAA,IACA,CAAC,GAAGR,EAAEyE,KAAK,CAAC,CAACI,MAAM5B,SAASA,KAAKpB,QAAQoB,KAAKL,UAAUA,KAAK;CACnE,IAAI5C,EAAE8E,YAAY9E,EAAE+E,aAAa,QAAQH,WAAWpE,KAAAA,GAClD,OAAOlB,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,MAAMP,WAAW0F,OAAO1F;CACxB,MAAMoB,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,MAAM4E,MAAM,MAAMvG,cAAcC,OAAO;CACvC,IAAIsG,QAAQ,MACV,OAAOxE,SAASC,KAAK,EAAEY,OAAO,uBAAuB,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEzE,IAAIgD;CACJ,IAAI;EACFA,QAAQlG,WAAWuH,GAAG;CACxB,SAAS3D,OAAO;EACd,IAAI,EAAEA,iBAAiB8D,UAAU9D,MAAM+D,SAAS,sBAC9C,MAAM/D;EAER,OAAOuE,kBAAkB1E,GAAGd,UAAUiB,MAAMgE,OAAO;CACrD;CACA,IAAI,CAACS,OAAO/C,QAAQ7B,EAAE8E,YAAY9E,EAAE+E,aAAa,MAC/C,OAAOzF,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,IAAIuD;CACJ,IAAI;EACFA,YAAY9G,WAAW8D,GAAGM,KAAKmC,OAAOmC,OAAO3E,MAAM2E,OAAOpD,SAAS;CACrE,SAASrB,OAAO;EACd,IAAI,EAAEA,iBAAiB8D,UAAU9D,MAAM+D,SAAS,sBAC9C,MAAM/D;EACR,OAAOuE,kBAAkB1E,GAAGd,UAAUiB,MAAMgE,OAAO;CACrD;CACA,IAAInB,UAAUE,SAAS,WAAW;EAChC,MAAM+B,QAAQjC,UAAUK,IAAIA,IAAI4B;EAChC,OAAO3F,SAASC,KAAKyD,UAAUK,KAAK;GAClC5D,QAAQwF,UAAUzE,KAAAA,IAAY,MAAM;GACpC,GAAIyE,UAAUzE,KAAAA,KAAa,EACzB5C,SAAS,EAAE,eAAemD,OAAOmE,KAAKC,KAAKF,QAAQ,GAAI,CAAC,EAAE,EAC5D;EACF,CAAC;CACH;CACA,OAAO3F,SAASC,KAAK,CAAC,CAAC;AACzB"}

package/dist/host/socket.d.ts

@@ -1,3 +1,5 @@
+import { StatewireDocuments } from "../wire/documents.js";
+import { StatewireProtocol } from "../wire/protocol.js";
 import { CommandsHost } from "./host.js";
 import { StatewireHost } from "../host.js";
 import { StatewireCmd } from "../client/connection.js";
@@ -32,6 +34,7 @@ type ClientRec = {
   ctxSeq: number;
   touched: number;
   context: Record<string, unknown> | null;
+  contextDocuments: StatewireDocuments.State;
   results: Map<number, {
     ts: number;
     cmd: StatewireCmd;
@@ -41,6 +44,7 @@ type ClientRec = {
   principal: unknown;
 };
 type Conn = {
+  selection: StatewireProtocol.Selection;
   clientId: string;
   socket: StatewireHostInternal.Socket;
   open: boolean;
@@ -60,9 +64,10 @@ type PendingConn = {
 };
 type CtxStatement = {
   seq: number;
-  value: Record<string, unknown>;
+  ops: unknown[];
 };
 type CmdStatement = {
+  protocol: string;
   seq: number;
   method: string;
   params: unknown;
@@ -75,6 +80,8 @@ type ParsedFrame = {
 declare const parseFrameValue: (frame: unknown) => ParsedFrame;
 declare const parseFrame: (raw: string) => ParsedFrame;
 type SocketHostState = {
+  protocol: StatewireProtocol.Definition;
+  wireVersion: StatewireProtocol.Range;
   heartbeatMs: number;
   wsInitTimeoutMs: number;
   maxSubscribers: number;
@@ -121,13 +128,13 @@ type FrameAdmission = {
     };
   };
 };
-declare const admitFrame: (h: SocketHostState, rec: ClientRec, frame: ParsedFrame, auth: unknown) => FrameAdmission;
+declare const admitFrame: (h: SocketHostState, rec: ClientRec, frame: ParsedFrame, auth: unknown, selection?: StatewireProtocol.Selection) => FrameAdmission;
 type Registration = {
   rec: ClientRec;
   conn: Conn;
   connection: StatewireHostInternal.SocketConnection;
 };
-declare const register: (h: SocketHostState, clientId: string, socket: StatewireHostInternal.Socket, sawFrame?: boolean, auth?: unknown) => Registration | null;
+declare const register: (h: SocketHostState, clientId: string, socket: StatewireHostInternal.Socket, sawFrame?: boolean, auth?: unknown, selection?: StatewireProtocol.Selection) => Registration | null;
 /**
  * Transport-agnostic WS binding over a statewire/host transport:
  * feed it sockets (anything with `send`/`close`) and raw text frames, and it

package/dist/host/socket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket.d.ts","names":[],"sources":["../../src/host/socket.ts"],"mappings":";;;;;;;;;cAwBa,cAAY;cACZ;;;cAKA,aAAc,YAAY;cAoC1B;KAGR;EACH;EACA,OAAO;EACP;EACA,OAAO;;KAGJ;EACH;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;EACA;EACA;EACA,SAAS;EACT,SAAS;IAAc;IAAY,KAAK;;EACxC,UAAU,YAAY;;EAEtB;;KAGU;EACV;EACA,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA;;EAEA;;KAGG;EACH,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA,OAAO,kBAAkB;EACzB,YAAY,sBAAsB;;KAc/B;EAAiB;EAAa,OAAO;;KACrC;EACH;EACA;EACA;EACA;;KAGU;EACV,KAAK;EACL,KAAK;;cAkDM,kBAAmB,mBAAiB;cAmDpC,aAAc,gBAAc;KAiG7B;EACV;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,sBAAsB;EACjC,SAAS,YAAY;EACrB,OAAO,IAAI;EACX,cAAc,IAAI;EAClB,YAAY;EACZ,gBAAgB;EAChB,aAAa,YAAY;EACzB;EACA,UAAU,cAAc;EACxB;EACA;EACA,gBAAgB,kBAAkB;EAClC,WAAW,cAAc;EACzB,cAAc;EACd,SAAS;EACT,aAAa,sBAAsB;EACnC;EACA,UACE,kBACA,QAAQ,sBAAsB,QAC9B,UAAU,sBAAsB,yBAC7B,sBAAsB;EAC3B,SAAS,KAAK,cAAc;EAC5B,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,YAAY,QAAQ;;cA+C3B,YACX,GAAG,iBACH,MAAM,MACN,eACA;cAgBW,SAAU,GAAG,iBAAiB,MAAM,MAAM;cAU1C,oBAAqB,GAAG;cAkCxB,QAAS,GAAG,iBAAiB,MAAM,cAAc;KAkQlD;EACN;;EAEA;EACA;IACE;MAAO;MAAa;MAAgB;;;;cAI/B,aACX,GAAG,iBACH,KAAK,WACL,OAAO,aACP,kBACC;KA8XS;EACV,KAAK;EACL,MAAM;EACN,YAAY,sBAAsB;;cAGvB,WACX,GAAG,iBACH,kBACA,QAAQ,sBAAsB,QAC9B,oBACA,mBACC;;;;;;;;;cAyPU,sBACX,WAAW,gBAAgB,YAC3B,UAAU,sBAAsB,mBAChC,cAAc,sBAAsB,0BACnC,sBAAsB"}
+{"version":3,"file":"socket.d.ts","names":[],"sources":["../../src/host/socket.ts"],"mappings":";;;;;;;;;;;cAgCa,cAAY;cACZ;;;cAKA,aAAc,YAAY;cAoC1B;KAGR;EACH;EACA,OAAO;EACP;EACA,OAAO;;KAGJ;EACH;EACA;EACA;EACA;EACA;;KAGU;EACV;EACA;EACA;EACA;EACA,SAAS;EACT,kBAAkB,mBAAmB;EACrC,SAAS;IAAc;IAAY,KAAK;;EACxC,UAAU,YAAY;;EAEtB;;KAGU;EACV,WAAW,kBAAkB;EAC7B;EACA,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA;;EAEA;;KAGG;EACH,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA,OAAO,kBAAkB;EACzB,YAAY,sBAAsB;;KAc/B;EAAiB;EAAa;;KAC9B;EACH;EACA;EACA;EACA;EACA;;KAGU;EACV,KAAK;EACL,KAAK;;cA0BM,kBAAmB,mBAAiB;cAoDpC,aAAc,gBAAc;KAiG7B;EACV,UAAU,kBAAkB;EAC5B,aAAa,kBAAkB;EAC/B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,sBAAsB;EACjC,SAAS,YAAY;EACrB,OAAO,IAAI;EACX,cAAc,IAAI;EAClB,YAAY;EACZ,gBAAgB;EAChB,aAAa,YAAY;EACzB;EACA,UAAU,cAAc;EACxB;EACA;EACA,gBAAgB,kBAAkB;EAClC,WAAW,cAAc;EACzB,cAAc;EACd,SAAS;EACT,aAAa,sBAAsB;EACnC;EACA,UACE,kBACA,QAAQ,sBAAsB,QAC9B,UAAU,sBAAsB,yBAC7B,sBAAsB;EAC3B,SAAS,KAAK,cAAc;EAC5B,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,YAAY,QAAQ;;cA+C3B,YACX,GAAG,iBACH,MAAM,MACN,eACA;cAgBW,SAAU,GAAG,iBAAiB,MAAM,MAAM;cAU1C,oBAAqB,GAAG;cAkCxB,QAAS,GAAG,iBAAiB,MAAM,cAAc;KAsRlD;EACN;;EAEA;EACA;IACE;MAAO;MAAa;MAAgB;;;;cAI/B,aACX,GAAG,iBACH,KAAK,WACL,OAAO,aACP,eACA,YAAW,kBAAkB,cAI5B;KAsbS;EACV,KAAK;EACL,MAAM;EACN,YAAY,sBAAsB;;cAGvB,WACX,GAAG,iBACH,kBACA,QAAQ,sBAAsB,QAC9B,oBACA,gBACA,YAAW,kBAAkB,cAI5B;;;;;;;;;cA0QU,sBACX,WAAW,gBAAgB,YAC3B,UAAU,sBAAsB,mBAChC,cAAc,sBAAsB,0BACnC,sBAAsB"}

package/dist/host/socket.js

@@ -1,6 +1,8 @@
+import { DEFAULT_PROTOCOL, WIRE_VERSION, negotiateProtocols } from "../wire/protocol.js";
+import { encodeValue, reviveValue } from "../wire/meta.js";
+import { applyDocumentOps, mainDocument } from "../wire/documents.js";
 import { StatewireSendError } from "../types.js";
 import { getCommandsHost, getStateHost } from "./host.js";
-import { encodeValue, reviveValue } from "../wire/meta.js";
 import { COMMAND_CAPACITY_RETRY_MS, MAX_INFLIGHT_COMMANDS_PER_HOST } from "../wire/limits.js";
 import { createMacrotaskPoster } from "../util/macrotask.js";
 import { frames, stream } from "./http.js";
@@ -49,15 +51,6 @@ const parseLane = (value) => {
 	return statements;
 };
 const frameEncoder = new TextEncoder();
-/** v1 ctx statements state the context whole: one root replace with an object value. */
-const contextValue = (ops) => {
-	if (!Array.isArray(ops) || ops.length !== 1) throw new Error("context must be a single-op array");
-	const op = ops[0];
-	if (!isPlainObject(op) || op["op"] !== "replace" || !Array.isArray(op["path"]) || op["path"].length !== 0) throw new Error("context op must be a root replace");
-	const value = op["meta"] !== void 0 ? reviveValue(op["value"], op["meta"], { rejectUnknown: true }) : op["value"];
-	if (!isPlainObject(value)) throw new Error("context value must be an object");
-	return value;
-};
 const parseFrameValue = (frame) => {
 	if (!isPlainObject(frame)) return violation("malformed frame");
 	const keys = Object.keys(frame);
@@ -69,16 +62,12 @@ const parseFrameValue = (frame) => {
 		const lane = frame["ctx"];
 		if (Array.isArray(lane) && lane.length > 256) return violation("too many context statements");
 		for (const statement of parseLane(lane)) {
-			let value;
-			try {
-				value = contextValue(statement["ops"]);
-			} catch {
-				return violation("invalid-context");
-			}
-			if (frameEncoder.encode(JSON.stringify(value)).byteLength > 65536) return violation("oversized-context");
+			const ops = statement["ops"];
+			if (!Array.isArray(ops) || !ops.length) return violation("invalid-context");
+			if (frameEncoder.encode(JSON.stringify(ops)).byteLength > 65536) return violation("oversized-context");
 			ctx.push({
 				seq: statement["seq"],
-				value
+				ops
 			});
 		}
 	}
@@ -88,8 +77,9 @@ const parseFrameValue = (frame) => {
 		if (Array.isArray(lane) && lane.length > 256) return violation("too many commands");
 		for (const statement of parseLane(lane)) {
 			const method = statement["method"];
-			if (typeof method !== "string" || !("params" in statement)) return violation("malformed statement");
+			if (typeof method !== "string" || typeof statement["protocol"] !== "string" || !("params" in statement)) return violation("malformed statement");
 			cmd.push({
+				protocol: statement["protocol"],
 				seq: statement["seq"],
 				method,
 				params: statement["params"],
@@ -277,13 +267,16 @@ const flush = (h, fin) => {
 		}));
 		if (ops.length > 0) {
 			const packet = {
-				ops,
+				ops: conn.selection.protocols.some((p) => p.name === h.protocol.name) ? ops : [],
 				...appliedEntries.length > 0 && { cmd: appliedEntries },
 				...edge && { idle: level }
 			};
 			sendTo(h, conn, JSON.stringify(packet));
 		} else if (appliedEntries.length > 0) sendTo(h, conn, JSON.stringify({ cmd: appliedEntries }));
-		const verdicts = cmds.get(conn.clientId) ?? [];
+		const verdicts = (cmds.get(conn.clientId) ?? []).map((cmd) => conn.selection.protocols.some((p) => p.name === h.protocol.name) ? cmd : {
+			seq: cmd.seq,
+			...cmd.dur === void 0 ? {} : { dur: cmd.dur }
+		});
 		if (verdicts.length > 0) sendTo(h, conn, JSON.stringify({ cmd: verdicts }));
 		if (edge && ops.length === 0) sendTo(h, conn, JSON.stringify({ idle: level }));
 		if (fin !== void 0) {
@@ -311,6 +304,7 @@ const notifyClientRecords = (h) => {
 		ctxSeq: rec.ctxSeq,
 		touched: rec.touched,
 		context: rec.context,
+		contextDocuments: [...rec.contextDocuments.documents],
 		results: [...rec.results].map(([seq, entry]) => ({
 			seq,
 			ts: entry.ts,
@@ -380,7 +374,7 @@ const rejectStatement = (h, rec, adm, message) => settleCmd(h, rec, adm, {
 	code: "invalid-params",
 	message
 });
-const admitCmd = (h, rec, statement, auth) => {
+const admitCmd = (h, rec, statement, auth, selection) => {
 	const adm = {
 		seq: statement.seq,
 		method: statement.method,
@@ -390,6 +384,15 @@ const admitCmd = (h, rec, statement, auth) => {
 	};
 	rec.inflight.set(statement.seq, adm);
 	notifyClientRecords(h);
+	if (statement.protocol !== h.protocol.name || !selection.protocols.some((p) => p.name === statement.protocol)) {
+		settleCmd(h, rec, adm, {
+			seq: adm.seq,
+			type: "rejected",
+			code: "unsupported-protocol",
+			message: "command protocol was not negotiated"
+		});
+		return;
+	}
 	if (!Array.isArray(statement.params)) {
 		rejectStatement(h, rec, adm, "params must be an array");
 		return;
@@ -434,7 +437,13 @@ const admitCmd = (h, rec, statement, auth) => {
 		});
 	});
 };
-const admitFrame = (h, rec, frame, auth) => {
+const admitFrame = (h, rec, frame, auth, selection = {
+	version: h.wireVersion.version,
+	protocols: [{
+		name: h.protocol.name,
+		version: h.protocol.version
+	}]
+}) => {
 	rec.touched = Date.now();
 	const through = admittedThrough(rec);
 	for (const statement of frame.cmd) if (statement.seq <= through) reemit(h, rec, statement.seq);
@@ -476,11 +485,17 @@ const admitFrame = (h, rec, frame, auth) => {
 			};
 		}
 	}
-	for (const statement of ctxNew) {
-		rec.context = statement.value;
-		rec.ctxSeq = statement.seq;
+	let contextDocuments = rec.contextDocuments;
+	try {
+		for (const statement of ctxNew) contextDocuments = applyDocumentOps(contextDocuments, statement.ops, selection.protocols, true);
+		if (frameEncoder.encode(JSON.stringify([...contextDocuments.documents])).byteLength > 65536) return violation("oversized-context");
+	} catch {
+		return violation("invalid-context");
 	}
-	for (const statement of cmdNew) admitCmd(h, rec, statement, auth);
+	rec.contextDocuments = contextDocuments;
+	rec.context = mainDocument(contextDocuments, h.protocol.name)?.value ?? null;
+	if (ctxNew.length) rec.ctxSeq = ctxNew.at(-1).seq;
+	for (const statement of cmdNew) admitCmd(h, rec, statement, auth, selection);
 	if (cmdNew.length > 0) queueCmd(h, rec.id, {
 		seq: cmdNew.at(-1).seq,
 		dur: true
@@ -516,7 +531,19 @@ const message = (h, conn, data) => {
 	}
 	if (frame.ctx.length === 0 && frame.cmd.length === 0) return;
 	const rec = h.clients.get(conn.clientId);
-	const admission = admitFrame(h, rec, frame, conn.auth);
+	let admission;
+	try {
+		admission = admitFrame(h, rec, frame, conn.auth, conn.selection);
+	} catch (error) {
+		const reason = violationReason(error);
+		if (reason === null) throw error;
+		sendTo(h, conn, JSON.stringify({ fin: {
+			reason: "protocol-error",
+			message: reason
+		} }));
+		closeConn(h, conn, 1008, reason);
+		return;
+	}
 	if (admission.type === "refused") sendTo(h, conn, JSON.stringify(admission.syn));
 };
 const closePending = (h, pending, code, reason) => {
@@ -573,7 +600,7 @@ const normalizedHeaders = (headers) => {
 };
 const connectAuthorized = (h, clientId, socket, options) => {
 	const authorize = h.authorize;
-	if (options.authorized === true) return register(h, clientId, socket, options.authorized === true, options.auth)?.connection ?? null;
+	if (options.authorized === true) return register(h, clientId, socket, options.authorized === true, options.auth, options.selection)?.connection ?? null;
 	const refuse = (code, reason) => {
 		try {
 			socket.close(code, reason);
@@ -640,7 +667,10 @@ const connectAuthorized = (h, clientId, socket, options) => {
 			const frame = initial.frame;
 			let headers;
 			try {
-				headers = normalizedHeaders(initial.headers);
+				headers = {
+					...normalizedHeaders(initial.headers),
+					...normalizedHeaders(options.headers ?? {})
+				};
 			} catch {
 				sendPending(pending, JSON.stringify({ fin: {
 					reason: "protocol-error",
@@ -661,17 +691,23 @@ const connectAuthorized = (h, clientId, socket, options) => {
 			pending.authorizing = true;
 			Promise.resolve().then(() => authorize?.({ headers })).then((auth) => {
 				if (!pending.open || h.disposed || h.finished !== null) return;
-				options.onAuthorized?.(auth);
+				const selection = negotiateProtocols(new Headers(headers), h.wireVersion, [h.protocol]);
+				if ("fin" in selection) {
+					sendPending(pending, JSON.stringify(selection));
+					closePending(h, pending, 1008, selection.fin.message);
+					return;
+				}
+				options.onAuthorized?.(auth, selection);
 				pending.open = false;
 				h.pendingConns.delete(pending);
 				if (pending.timer !== null) clearTimeout(pending.timer);
-				const registration = register(h, clientId, socket, true, auth);
+				const registration = register(h, clientId, socket, true, auth, selection);
 				if (registration === null) return;
 				pending.connection = registration.connection;
-				if (frame.ctx.length || frame.cmd.length) {
-					const admission = admitFrame(h, registration.rec, frame, auth);
-					if (admission.type === "refused") sendTo(h, registration.conn, JSON.stringify(admission.syn));
-				}
+				if (frame.ctx.length || frame.cmd.length) message(h, registration.conn, JSON.stringify({
+					...frame.ctx.length ? { ctx: frame.ctx } : {},
+					...frame.cmd.length ? { cmd: frame.cmd } : {}
+				}));
 				for (const data of pending.queued.splice(0)) registration.connection.message(data);
 			}).catch((error) => {
 				if (pending.open) rejectPendingAuthorization(h, pending, error);
@@ -698,7 +734,13 @@ const gcClients = (h) => {
 	}
 	if (changed) notifyClientRecords(h);
 };
-const register = (h, clientId, socket, sawFrame = false, auth = void 0) => {
+const register = (h, clientId, socket, sawFrame = false, auth = void 0, selection = {
+	version: h.wireVersion.version,
+	protocols: [{
+		name: h.protocol.name,
+		version: h.protocol.version
+	}]
+}) => {
 	const refuse = (code, reason) => {
 		try {
 			socket.close(code, reason);
@@ -734,6 +776,10 @@ const register = (h, clientId, socket, sawFrame = false, auth = void 0) => {
 			ctxSeq: 0,
 			touched: Date.now(),
 			context: null,
+			contextDocuments: {
+				mode: "mounted",
+				documents: /* @__PURE__ */ new Map()
+			},
 			results: /* @__PURE__ */ new Map(),
 			inflight: /* @__PURE__ */ new Map(),
 			principal: auth
@@ -743,6 +789,7 @@ const register = (h, clientId, socket, sawFrame = false, auth = void 0) => {
 	})();
 	rec.touched = Date.now();
 	const conn = {
+		selection,
 		clientId,
 		socket,
 		open: true,
@@ -758,17 +805,20 @@ const register = (h, clientId, socket, sawFrame = false, auth = void 0) => {
 	const { value, meta } = encodeValue(h.stateHost.snapshot());
 	const hello = {
 		ops: [{
-			op: "replace",
-			path: [],
+			op: "mount",
+			protocol: h.protocol.name,
+			main: true,
 			value,
 			...meta !== void 0 && { meta }
 		}],
 		syn: {
+			...selection,
 			seq: admittedThrough(rec),
 			ctxSeq: rec.ctxSeq,
 			...h.idleWire && { idle: true }
 		}
 	};
+	if (!selection.protocols.some((p) => p.name === h.protocol.name)) hello.ops = [];
 	sendTo(h, conn, JSON.stringify(hello));
 	return {
 		rec,
@@ -808,6 +858,10 @@ const suspend = (h) => {
 };
 const restoreClientRecords = (records = []) => new Map(records.map((record) => [record.id, {
 	...record,
+	contextDocuments: {
+		mode: "mounted",
+		documents: new Map(record.contextDocuments ?? [])
+	},
 	results: new Map(record.results.map(({ seq, ts, cmd }) => [seq, {
 		ts,
 		cmd
@@ -817,6 +871,11 @@ const restoreClientRecords = (records = []) => new Map(records.map((record) => [
 const useSocketHost = (transport, options, persistence) => {
 	const [h] = useState(() => {
 		const host = {
+			protocol: {
+				name: DEFAULT_PROTOCOL,
+				version: WIRE_VERSION
+			},
+			wireVersion: { version: WIRE_VERSION },
 			heartbeatMs: 15e3,
 			wsInitTimeoutMs: 5e3,
 			maxSubscribers: MAX_SUBSCRIBERS,
@@ -852,6 +911,11 @@ const useSocketHost = (transport, options, persistence) => {
 		};
 		return host;
 	});
+	h.protocol = options?.protocol ?? {
+		name: "default",
+		version: "2026-09-07"
+	};
+	h.wireVersion = options?.wireVersion ?? { version: "2026-09-07" };
 	setHeartbeatMs(h, options?.heartbeatIntervalMs ?? 15e3);
 	h.pushback = options?.pushback;
 	h.wsInitTimeoutMs = options?.wsInitTimeoutMs ?? 5e3;