statewire 0.20.0 → 0.22.0

package/dist/host/http.js

@@ -1,7 +1,7 @@
-import { MAX_FRAME_BODY_BYTES } from "../wire/limits.js";
 import { negotiateProtocols } from "../wire/protocol.js";
-import { CLIENT_ID_RE, PRINCIPAL_MISMATCH_MESSAGE, SUBSCRIBER_LIMIT_MESSAGE, admitFrame, atSubscriberLimit, authEquals, closeConn, flush, parseFrame, parseFrameValue, register, sendTo } from "./socket.js";
-//#region src/host/http.ts
+import { MAX_FRAME_BODY_BYTES } from "../wire/limits.js";
+import { CLIENT_ID_RE, PRINCIPAL_MISMATCH_MESSAGE, SUBSCRIBER_LIMIT_MESSAGE, admitFrame, atSubscriberLimit, authEquals, closeConn, expireLease, flush, parseFrame, parseFrameValue, register, sendTo } from "./socket.js";
+// src/host/http.ts
 const CLIENT_ID_HEADER = "Statewire-Client-Id";
 const LEASE_HEADER = "Statewire-Lease";
 const encoder = new TextEncoder();
@@ -50,7 +50,10 @@ const clientIdResponse = (request) => {
 const headersOf = (request) => Object.fromEntries(request.headers);
 const authorize = async (h, headers) => {
 	try {
-		return { auth: await h.authorize?.({ headers }) };
+		return {
+			auth: await h.authorize?.({ headers }),
+			authorizedAt: Date.now()
+		};
 	} catch (error) {
 		if (error instanceof Response) return { refused: error };
 		throw error;
@@ -66,7 +69,7 @@ const mintLease = () => {
 	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
 	return btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 };
-const attachSse = (h, clientId, auth, selection, frame) => {
+const attachSse = (h, clientId, auth, authorizedAt, selection, frame) => {
 	let controller;
 	let connection = null;
 	let open = true;
@@ -109,7 +112,7 @@ const attachSse = (h, clientId, auth, selection, frame) => {
 				return;
 			}
 		}
-	}, false, auth, selection, frame);
+	}, false, auth, selection, frame, authorizedAt);
 	connection = registration?.connection ?? null;
 	if (!open) connection?.close();
 	return {
@@ -140,7 +143,7 @@ const getStream = async (h, request) => {
 	if (atSubscriberLimit(h)) return subscriberLimitResponse();
 	const selection = negotiateProtocols(request.headers, h.wireVersion, [h.protocol]);
 	if ("fin" in selection) return Response.json(selection, { status: selection.fin.status });
-	const attachment = attachSse(h, client.clientId, authorized.auth, selection);
+	const attachment = attachSse(h, client.clientId, authorized.auth, authorized.authorizedAt, selection);
 	const lease = attachment.registration === null ? null : mintLease();
 	if (attachment.registration !== null) attachment.registration.conn.lease = lease;
 	return streamResponse(attachment, lease);
@@ -172,7 +175,7 @@ const postStream = async (h, request) => {
 	if ("fin" in selection) return Response.json(selection, { status: selection.fin.status });
 	let attachment;
 	try {
-		attachment = attachSse(h, client.clientId, authorized.auth, selection, frame);
+		attachment = attachSse(h, client.clientId, authorized.auth, authorized.authorizedAt, selection, frame);
 	} catch (error) {
 		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
 		return Response.json({ fin: {
@@ -211,9 +214,10 @@ const violationResponse = (h, clientId, reason) => {
 const frames = async (h, request) => {
 	const lease = request.headers.get(LEASE_HEADER);
 	const leased = lease === null ? void 0 : [...h.conns].find((conn) => conn.open && conn.lease === lease);
-	if (h.disposed || h.finished !== null || leased === void 0) return Response.json({ error: "stale-lease" }, { status: 423 });
+	if (h.disposed || h.finished !== null || leased === void 0 || expireLease(h, leased)) return Response.json({ error: "stale-lease" }, { status: 423 });
 	const clientId = leased.clientId;
 	const raw = await readFrameBody(request);
+	if (!leased.open || h.disposed || h.finished !== null || expireLease(h, leased)) return Response.json({ error: "stale-lease" }, { status: 423 });
 	if (raw === null) return Response.json({ error: "frame body too large" }, { status: 413 });
 	let frame;
 	try {
@@ -222,7 +226,7 @@ const frames = async (h, request) => {
 		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
 		return violationResponse(h, clientId, error.message);
 	}
-	if (!leased.open || h.disposed || h.finished !== null) return Response.json({ error: "stale-lease" }, { status: 423 });
+	if (!leased.open || h.disposed || h.finished !== null || expireLease(h, leased)) return Response.json({ error: "stale-lease" }, { status: 423 });
 	let admission;
 	try {
 		admission = admitFrame(h, leased, frame);
@@ -230,6 +234,7 @@ const frames = async (h, request) => {
 		if (!(error instanceof Error) || error.name !== "StatewireViolation") throw error;
 		return violationResponse(h, clientId, error.message);
 	}
+	if (admission.type === "expired") return Response.json({ error: "stale-lease" }, { status: 423 });
 	if (admission.type === "refused") {
 		const retry = admission.syn.syn.retry;
 		return Response.json(admission.syn, {
@@ -239,7 +244,6 @@ const frames = async (h, request) => {
 	}
 	return Response.json({});
 };
-//#endregion
 export { MAX_FRAME_BODY_BYTES, frames, stream };
 
 //# sourceMappingURL=http.js.map

package/dist/host/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","names":["StatewireHost","CLIENT_ID_RE","PRINCIPAL_MISMATCH_MESSAGE","SUBSCRIBER_LIMIT_MESSAGE","admitFrame","atSubscriberLimit","authEquals","closeConn","flush","parseFrame","parseFrameValue","register","sendTo","ParsedFrame","Registration","SocketHostState","MAX_FRAME_BODY_BYTES","negotiateProtocols","StatewireProtocol","CLIENT_ID_HEADER","LEASE_HEADER","encoder","TextEncoder","laggardFin","encode","readFrameBody","request","Request","Promise","declared","headers","get","Number","body","cancel","catch","reader","getReader","chunks","Uint8Array","size","done","value","read","length","push","offset","chunk","set","TextDecoder","decode","invalidClientIdReason","clientId","test","clientIdResponse","response","Response","json","detail","status","reason","headersOf","Record","Object","fromEntries","authorize","h","auth","refused","error","subscriberLimitResponse","principalMismatchResponse","rec","clients","undefined","principal","mintLease","bytes","crypto","getRandomValues","btoa","String","fromCharCode","replaceAll","replace","SseAttachment","ReadableStream","registration","activateBackpressure","attachSse","selection","Selection","frame","controller","ReadableStreamDefaultController","connection","open","backpressureActive","start","next","close","highWaterMark","streamQueueSize","socket","send","data","desiredSize","enqueue","streamResponse","attachment","lease","getStream","authorized","client","mismatch","wireVersion","protocol","fin","conn","postStream","raw","trim","JSON","parse","cmd","Error","name","message","stream","method","Allow","finClient","Fin","conns","stringify","violationResponse","frames","leased","find","disposed","finished","admission","ReturnType","type","retry","syn","Math","ceil"],"sources":["../../src/host/http.ts"],"sourcesContent":["import type { StatewireHost } from \"../host\";\nimport {\n  CLIENT_ID_RE,\n  PRINCIPAL_MISMATCH_MESSAGE,\n  SUBSCRIBER_LIMIT_MESSAGE,\n  admitFrame,\n  atSubscriberLimit,\n  authEquals,\n  closeConn,\n  flush,\n  parseFrame,\n  parseFrameValue,\n  register,\n  sendTo,\n} from \"./socket\";\nimport type { ParsedFrame, Registration, SocketHostState } from \"./socket\";\nimport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\nimport { negotiateProtocols } from \"../wire/protocol\";\nimport type { StatewireProtocol } from \"../wire/protocol\";\n\nexport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\n\nconst CLIENT_ID_HEADER = \"Statewire-Client-Id\";\nconst LEASE_HEADER = \"Statewire-Lease\";\nconst encoder = new TextEncoder();\nconst laggardFin = encoder.encode(\n  'data: {\"fin\":{\"reason\":\"reconnect\",\"code\":\"client-fell-behind\"}}\\n\\n',\n);\nconst readFrameBody = async (request: Request): Promise<string | null> => {\n  const declared = request.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_FRAME_BODY_BYTES) {\n    await request.body?.cancel(\"frame body too large\").catch(() => {});\n    return null;\n  }\n  if (request.body === null) return \"\";\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.length;\n    if (size > MAX_FRAME_BODY_BYTES) {\n      await reader.cancel(\"frame body too large\").catch(() => {});\n      return null;\n    }\n    chunks.push(value);\n  }\n  const body = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return new TextDecoder().decode(body);\n};\n\nconst invalidClientIdReason = (clientId: string): string | null => {\n  if (clientId === \"\") return \"id must be non-empty\";\n  if (clientId.length > 256) return \"id must be at most 256 characters\";\n  if (!CLIENT_ID_RE.test(clientId)) {\n    return \"id must contain only [A-Za-z0-9._~-]\";\n  }\n  return null;\n};\n\nconst clientIdResponse = (\n  request: Request,\n): { clientId: string } | { response: Response } => {\n  const clientId = request.headers.get(CLIENT_ID_HEADER);\n  if (clientId === null) {\n    return {\n      response: Response.json(\n        { detail: `missing ${CLIENT_ID_HEADER} header` },\n        { status: 400 },\n      ),\n    };\n  }\n  const reason = invalidClientIdReason(clientId);\n  if (reason !== null) {\n    return {\n      response: Response.json(\n        { detail: `invalid ${CLIENT_ID_HEADER}: ${reason}` },\n        { status: 400 },\n      ),\n    };\n  }\n  return { clientId };\n};\n\nconst headersOf = (request: Request): Record<string, string> =>\n  Object.fromEntries(request.headers);\n\nconst authorize = async (\n  h: SocketHostState,\n  headers: Record<string, string>,\n): Promise<{ auth: unknown } | { refused: Response }> => {\n  try {\n    return { auth: await h.authorize?.({ headers }) };\n  } catch (error) {\n    if (error instanceof Response) return { refused: error };\n    throw error;\n  }\n};\n\nconst subscriberLimitResponse = (): Response =>\n  Response.json({ detail: SUBSCRIBER_LIMIT_MESSAGE }, { status: 503 });\n\n// No awaits between this check and register: the binding cannot race.\nconst principalMismatchResponse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): Response | null => {\n  const rec = h.clients.get(clientId);\n  if (rec !== undefined && !authEquals(rec.principal, auth)) {\n    return Response.json(\n      { detail: PRINCIPAL_MISMATCH_MESSAGE },\n      { status: 403 },\n    );\n  }\n  return null;\n};\n\nconst mintLease = (): string => {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  return btoa(String.fromCharCode(...bytes))\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\ntype SseAttachment = {\n  body: ReadableStream<Uint8Array>;\n  registration: Registration | null;\n  activateBackpressure: () => void;\n};\n\nconst attachSse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n  selection: StatewireProtocol.Selection,\n  frame?: ParsedFrame,\n): SseAttachment => {\n  let controller: ReadableStreamDefaultController<Uint8Array>;\n  let connection: Registration[\"connection\"] | null = null;\n  let open = true;\n  let backpressureActive = false;\n  const body = new ReadableStream(\n    {\n      start: (next) => {\n        controller = next;\n      },\n      cancel: () => {\n        open = false;\n        connection?.close();\n      },\n    },\n    { highWaterMark: h.streamQueueSize },\n  );\n  const socket = {\n    send: (data: string) => {\n      if (!open) return;\n      if (\n        backpressureActive &&\n        controller.desiredSize !== null &&\n        controller.desiredSize <= 0\n      ) {\n        open = false;\n        try {\n          controller.enqueue(laggardFin);\n          controller.close();\n        } catch {\n          /* stream already gone */\n        }\n        connection?.close();\n        return;\n      }\n      const frame = data === \"{}\" ? \": ping\\n\\n\" : `data: ${data}\\n\\n`;\n      try {\n        controller.enqueue(encoder.encode(frame));\n      } catch {\n        open = false;\n        connection?.close();\n      }\n    },\n    close: () => {\n      if (!open) return;\n      open = false;\n      try {\n        controller.close();\n      } catch {\n        return;\n      }\n    },\n  };\n  const registration = register(\n    h,\n    clientId,\n    socket,\n    false,\n    auth,\n    selection,\n    frame,\n  );\n  connection = registration?.connection ?? null;\n  if (!open) connection?.close();\n  return {\n    body,\n    registration,\n    activateBackpressure: () => {\n      backpressureActive = true;\n    },\n  };\n};\n\nconst streamResponse = (\n  attachment: SseAttachment,\n  lease: string | null,\n): Response => {\n  attachment.activateBackpressure();\n  return new Response(attachment.body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      ...(lease !== null && { [LEASE_HEADER]: lease }),\n    },\n  });\n};\n\nconst getStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const selection = negotiateProtocols(request.headers, h.wireVersion, [\n    h.protocol,\n  ]);\n  if (\"fin\" in selection)\n    return Response.json(selection, { status: selection.fin.status });\n  const attachment = attachSse(h, client.clientId, authorized.auth, selection);\n  const lease = attachment.registration === null ? null : mintLease();\n  if (attachment.registration !== null)\n    attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nconst postStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ detail: \"frame body too large\" }, { status: 413 });\n  }\n  let body: unknown;\n  try {\n    body = raw.trim() ? JSON.parse(raw) : null;\n  } catch {\n    return Response.json({ detail: \"body must be JSON\" }, { status: 400 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = body === null && !raw.trim() ? { cmd: [] } : parseFrameValue(body);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return Response.json({ detail: error.message }, { status: 400 });\n  }\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const selection = negotiateProtocols(request.headers, h.wireVersion, [\n    h.protocol,\n  ]);\n  if (\"fin\" in selection)\n    return Response.json(selection, { status: selection.fin.status });\n  let attachment: SseAttachment;\n  try {\n    attachment = attachSse(\n      h,\n      client.clientId,\n      authorized.auth,\n      selection,\n      frame,\n    );\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\")\n      throw error;\n    return Response.json(\n      { fin: { reason: \"protocol-error\", message: error.message } },\n      { status: 400 },\n    );\n  }\n  if (attachment.registration === null) return streamResponse(attachment, null);\n  const lease = mintLease();\n  attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nexport const stream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  if (request.method === \"GET\") return getStream(h, request);\n  if (request.method === \"POST\") return postStream(h, request);\n  return new Response(null, {\n    status: 405,\n    headers: { Allow: \"GET, POST\" },\n  });\n};\n\nconst finClient = (\n  h: SocketHostState,\n  clientId: string,\n  fin: StatewireHost.Fin,\n) => {\n  flush(h);\n  for (const conn of [...h.conns]) {\n    if (conn.clientId !== clientId) continue;\n    sendTo(h, conn, JSON.stringify({ fin }));\n    closeConn(h, conn);\n  }\n};\n\nconst violationResponse = (\n  h: SocketHostState,\n  clientId: string,\n  reason: string,\n) => {\n  finClient(h, clientId, {\n    reason: \"protocol-error\",\n    message: reason,\n  });\n  return Response.json({ error: reason }, { status: 400 });\n};\n\nexport const frames = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const lease = request.headers.get(LEASE_HEADER);\n  // A lease lives and dies with its attach: any live attach of the id accepts.\n  const leased =\n    lease === null\n      ? undefined\n      : [...h.conns].find((conn) => conn.open && conn.lease === lease);\n  if (h.disposed || h.finished !== null || leased === undefined) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const clientId = leased.clientId;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ error: \"frame body too large\" }, { status: 413 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrame(raw);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return violationResponse(h, clientId, error.message);\n  }\n  if (!leased.open || h.disposed || h.finished !== null) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  let admission: ReturnType<typeof admitFrame>;\n  try {\n    admission = admitFrame(h, leased, frame);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\")\n      throw error;\n    return violationResponse(h, clientId, error.message);\n  }\n  if (admission.type === \"refused\") {\n    const retry = admission.syn.syn.retry;\n    return Response.json(admission.syn, {\n      status: retry === undefined ? 409 : 429,\n      ...(retry !== undefined && {\n        headers: { \"Retry-After\": String(Math.ceil(retry / 1000)) },\n      }),\n    });\n  }\n  return Response.json({});\n};\n"],"mappings":";;;;AAsBA,MAAMmB,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,UAAU,IAAIC,YAAY;AAChC,MAAMC,aAAaF,QAAQG,OACzB,gFACF;AACA,MAAMC,gBAAgB,OAAOC,YAA6C;CACxE,MAAMG,WAAWH,QAAQI,QAAQC,IAAI,gBAAgB;CACrD,IAAIF,aAAa,QAAQG,OAAOH,QAAQ,IAAA,SAA0B;EAChE,MAAMH,QAAQO,MAAMC,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;EACjE,OAAO;CACT;CACA,IAAIT,QAAQO,SAAS,MAAM,OAAO;CAClC,MAAMG,SAASV,QAAQO,KAAKI,UAAU;CACtC,MAAMC,SAAuB,CAAA;CAC7B,IAAIE,OAAO;CACX,SAAS;EACP,MAAM,EAAEC,MAAMC,UAAU,MAAMN,OAAOO,KAAK;EAC1C,IAAIF,MAAM;EACVD,QAAQE,MAAME;EACd,IAAIJ,OAAAA,SAA6B;GAC/B,MAAMJ,OAAOF,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;GAC1D,OAAO;EACT;EACAG,OAAOO,KAAKH,KAAK;CACnB;CACA,MAAMT,OAAO,IAAIM,WAAWC,IAAI;CAChC,IAAIM,SAAS;CACb,KAAK,MAAMC,SAAST,QAAQ;EAC1BL,KAAKe,IAAID,OAAOD,MAAM;EACtBA,UAAUC,MAAMH;CAClB;CACA,OAAO,IAAIK,YAAY,CAAC,CAACC,OAAOjB,IAAI;AACtC;AAEA,MAAMkB,yBAAyBC,aAAoC;CACjE,IAAIA,aAAa,IAAI,OAAO;CAC5B,IAAIA,SAASR,SAAS,KAAK,OAAO;CAClC,IAAI,CAAC3C,aAAaoD,KAAKD,QAAQ,GAC7B,OAAO;CAET,OAAO;AACT;AAEA,MAAME,oBACJ5B,YACkD;CAClD,MAAM0B,WAAW1B,QAAQI,QAAQC,IAAIZ,gBAAgB;CACrD,IAAIiC,aAAa,MACf,OAAO,EACLG,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,SAAU,GAC/C,EAAEwC,QAAQ,IAAI,CAChB,EACF;CAEF,MAAMC,SAAST,sBAAsBC,QAAQ;CAC7C,IAAIQ,WAAW,MACb,OAAO,EACLL,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,IAAKyC,SAAS,GACnD,EAAED,QAAQ,IAAI,CAChB,EACF;CAEF,OAAO,EAAEP,SAAS;AACpB;AAEA,MAAMS,aAAanC,YACjBqC,OAAOC,YAAYtC,QAAQI,OAAO;AAEpC,MAAMmC,YAAY,OAChBC,GACApC,YACuD;CACvD,IAAI;EACF,OAAO,EAAEqC,MAAM,MAAMD,EAAED,YAAY,EAAEnC,QAAQ,CAAC,EAAE;CAClD,SAASuC,OAAO;EACd,IAAIA,iBAAiBb,UAAU,OAAO,EAAEY,SAASC,MAAM;EACvD,MAAMA;CACR;AACF;AAEA,MAAMC,gCACJd,SAASC,KAAK,EAAEC,QAAQvD,yBAAyB,GAAG,EAAEwD,QAAQ,IAAI,CAAC;AAGrE,MAAMY,6BACJL,GACAd,UACAe,SACoB;CACpB,MAAMK,MAAMN,EAAEO,QAAQ1C,IAAIqB,QAAQ;CAClC,IAAIoB,QAAQE,KAAAA,KAAa,CAACpE,WAAWkE,IAAIG,WAAWR,IAAI,GACtD,OAAOX,SAASC,KACd,EAAEC,QAAQxD,2BAA2B,GACrC,EAAEyD,QAAQ,IAAI,CAChB;CAEF,OAAO;AACT;AAEA,MAAMiB,kBAA0B;CAC9B,MAAMC,QAAQC,OAAOC,gCAAgB,IAAIxC,WAAW,EAAE,CAAC;CACvD,OAAOyC,KAAKC,OAAOC,aAAa,GAAGL,KAAK,CAAC,CAAC,CACvCM,WAAW,KAAK,GAAG,CAAC,CACpBA,WAAW,KAAK,GAAG,CAAC,CACpBC,QAAQ,OAAO,EAAE;AACtB;AAQA,MAAMK,aACJvB,GACAd,UACAe,MACAuB,WACAE,UACkB;CAClB,IAAIC;CACJ,IAAIE,aAAgD;CACpD,IAAIC,OAAO;CACX,IAAIC,qBAAqB;CACzB,MAAMhE,OAAO,IAAIqD,eACf;EACEY,QAAQC,SAAS;GACfN,aAAaM;EACf;EACAjE,cAAc;GACZ8D,OAAO;GACPD,YAAYK,MAAM;EACpB;CACF,GACA,EAAEC,eAAenC,EAAEoC,gBAAgB,CACrC;CAqCA,MAAMf,eAAe5E,SACnBuD,GACAd,UACAmD;EAtCAC,OAAOC,SAAiB;GACtB,IAAI,CAACT,MAAM;GACX,IACEC,sBACAJ,WAAWa,gBAAgB,QAC3Bb,WAAWa,eAAe,GAC1B;IACAV,OAAO;IACP,IAAI;KACFH,WAAWc,QAAQpF,UAAU;KAC7BsE,WAAWO,MAAM;IACnB,QAAQ,CACN;IAEFL,YAAYK,MAAM;IAClB;GACF;GACA,MAAMR,QAAQa,SAAS,OAAO,eAAe,SAASA,KAAI;GAC1D,IAAI;IACFZ,WAAWc,QAAQtF,QAAQG,OAAOoE,KAAK,CAAC;GAC1C,QAAQ;IACNI,OAAO;IACPD,YAAYK,MAAM;GACpB;EACF;EACAA,aAAa;GACX,IAAI,CAACJ,MAAM;GACXA,OAAO;GACP,IAAI;IACFH,WAAWO,MAAM;GACnB,QAAQ;IACN;GACF;EACF;CAKAG,GACA,OACApC,MACAuB,WACAE,KACF;CACAG,aAAaR,cAAcQ,cAAc;CACzC,IAAI,CAACC,MAAMD,YAAYK,MAAM;CAC7B,OAAO;EACLnE;EACAsD;EACAC,4BAA4B;GAC1BS,qBAAqB;EACvB;CACF;AACF;AAEA,MAAMW,kBACJC,YACAC,UACa;CACbD,WAAWrB,qBAAqB;CAChC,OAAO,IAAIhC,SAASqD,WAAW5E,MAAM;EACnC0B,QAAQ;EACR7B,SAAS;GACP,gBAAgB;GAChB,GAAIgF,UAAU,QAAQ,GAAG1F,eAAe0F,MAAM;EAChD;CACF,CAAC;AACH;AAEA,MAAMC,YAAY,OAChB7C,GACAxC,YACsB;CACtB,MAAMsF,aAAa,MAAM/C,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAasF,YAAY,OAAOA,WAAW5C;CAC/C,MAAM6C,SAAS3D,iBAAiB5B,OAAO;CACvC,IAAI,cAAcuF,QAAQ,OAAOA,OAAO1D;CACxC,MAAM2D,WAAW3C,0BACfL,GACA+C,OAAO7D,UACP4D,WAAW7C,IACb;CACA,IAAI+C,aAAa,MAAM,OAAOA;CAC9B,IAAI7G,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMoB,YAAYzE,mBAAmBS,QAAQI,SAASoC,EAAEiD,aAAa,CACnEjD,EAAEkD,QAAQ,CACX;CACD,IAAI,SAAS1B,WACX,OAAOlC,SAASC,KAAKiC,WAAW,EAAE/B,QAAQ+B,UAAU2B,IAAI1D,OAAO,CAAC;CAClE,MAAMkD,aAAapB,UAAUvB,GAAG+C,OAAO7D,UAAU4D,WAAW7C,MAAMuB,SAAS;CAC3E,MAAMoB,QAAQD,WAAWtB,iBAAiB,OAAO,OAAOX,UAAU;CAClE,IAAIiC,WAAWtB,iBAAiB,MAC9BsB,WAAWtB,aAAa+B,KAAKR,QAAQA;CACvC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAMS,aAAa,OACjBrD,GACAxC,YACsB;CACtB,MAAMuF,SAAS3D,iBAAiB5B,OAAO;CACvC,IAAI,cAAcuF,QAAQ,OAAOA,OAAO1D;CACxC,MAAMiE,MAAM,MAAM/F,cAAcC,OAAO;CACvC,IAAI8F,QAAQ,MACV,OAAOhE,SAASC,KAAK,EAAEC,QAAQ,uBAAuB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CAE1E,IAAI1B;CACJ,IAAI;EACFA,OAAOuF,IAAIC,KAAK,IAAIC,KAAKC,MAAMH,GAAG,IAAI;CACxC,QAAQ;EACN,OAAOhE,SAASC,KAAK,EAAEC,QAAQ,oBAAoB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CACvE;CACA,IAAIiC;CACJ,IAAI;EACFA,QAAQ3D,SAAS,QAAQ,CAACuF,IAAIC,KAAK,IAAI,EAAEG,KAAK,CAAA,EAAG,IAAIlH,gBAAgBuB,IAAI;CAC3E,SAASoC,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EAER,OAAOb,SAASC,KAAK,EAAEC,QAAQW,MAAM0D,QAAQ,GAAG,EAAEpE,QAAQ,IAAI,CAAC;CACjE;CACA,MAAMqD,aAAa,MAAM/C,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAasF,YAAY,OAAOA,WAAW5C;CAC/C,MAAM8C,WAAW3C,0BACfL,GACA+C,OAAO7D,UACP4D,WAAW7C,IACb;CACA,IAAI+C,aAAa,MAAM,OAAOA;CAC9B,IAAI7G,kBAAkB6D,CAAC,GAAG,OAAOI,wBAAwB;CACzD,MAAMoB,YAAYzE,mBAAmBS,QAAQI,SAASoC,EAAEiD,aAAa,CACnEjD,EAAEkD,QAAQ,CACX;CACD,IAAI,SAAS1B,WACX,OAAOlC,SAASC,KAAKiC,WAAW,EAAE/B,QAAQ+B,UAAU2B,IAAI1D,OAAO,CAAC;CAClE,IAAIkD;CACJ,IAAI;EACFA,aAAapB,UACXvB,GACA+C,OAAO7D,UACP4D,WAAW7C,MACXuB,WACAE,KACF;CACF,SAASvB,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EACR,OAAOb,SAASC,KACd,EAAE4D,KAAK;GAAEzD,QAAQ;GAAkBmE,SAAS1D,MAAM0D;EAAQ,EAAE,GAC5D,EAAEpE,QAAQ,IAAI,CAChB;CACF;CACA,IAAIkD,WAAWtB,iBAAiB,MAAM,OAAOqB,eAAeC,YAAY,IAAI;CAC5E,MAAMC,QAAQlC,UAAU;CACxBiC,WAAWtB,aAAa+B,KAAKR,QAAQA;CACrC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAakB,SAAS,OACpB9D,GACAxC,YACsB;CACtB,IAAIA,QAAQuG,WAAW,OAAO,OAAOlB,UAAU7C,GAAGxC,OAAO;CACzD,IAAIA,QAAQuG,WAAW,QAAQ,OAAOV,WAAWrD,GAAGxC,OAAO;CAC3D,OAAO,IAAI8B,SAAS,MAAM;EACxBG,QAAQ;EACR7B,SAAS,EAAEoG,OAAO,YAAY;CAChC,CAAC;AACH;AAEA,MAAMC,aACJjE,GACAd,UACAiE,QACG;CACH7G,MAAM0D,CAAC;CACP,KAAK,MAAMoD,QAAQ,CAAC,GAAGpD,EAAEmE,KAAK,GAAG;EAC/B,IAAIf,KAAKlE,aAAaA,UAAU;EAChCxC,OAAOsD,GAAGoD,MAAMI,KAAKY,UAAU,EAAEjB,IAAI,CAAC,CAAC;EACvC9G,UAAU2D,GAAGoD,IAAI;CACnB;AACF;AAEA,MAAMiB,qBACJrE,GACAd,UACAQ,WACG;CACHuE,UAAUjE,GAAGd,UAAU;EACrBQ,QAAQ;EACRmE,SAASnE;CACX,CAAC;CACD,OAAOJ,SAASC,KAAK,EAAEY,OAAOT,OAAO,GAAG,EAAED,QAAQ,IAAI,CAAC;AACzD;AAEA,MAAa6E,SAAS,OACpBtE,GACAxC,YACsB;CACtB,MAAMoF,QAAQpF,QAAQI,QAAQC,IAAIX,YAAY;CAE9C,MAAMqH,SACJ3B,UAAU,OACNpC,KAAAA,IACA,CAAC,GAAGR,EAAEmE,KAAK,CAAC,CAACK,MAAMpB,SAASA,KAAKtB,QAAQsB,KAAKR,UAAUA,KAAK;CACnE,IAAI5C,EAAEyE,YAAYzE,EAAE0E,aAAa,QAAQH,WAAW/D,KAAAA,GAClD,OAAOlB,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,MAAMP,WAAWqF,OAAOrF;CACxB,MAAMoE,MAAM,MAAM/F,cAAcC,OAAO;CACvC,IAAI8F,QAAQ,MACV,OAAOhE,SAASC,KAAK,EAAEY,OAAO,uBAAuB,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEzE,IAAIiC;CACJ,IAAI;EACFA,QAAQnF,WAAW+G,GAAG;CACxB,SAASnD,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EAER,OAAOkE,kBAAkBrE,GAAGd,UAAUiB,MAAM0D,OAAO;CACrD;CACA,IAAI,CAACU,OAAOzC,QAAQ9B,EAAEyE,YAAYzE,EAAE0E,aAAa,MAC/C,OAAOpF,SAASC,KAAK,EAAEY,OAAO,cAAc,GAAG,EAAEV,QAAQ,IAAI,CAAC;CAEhE,IAAIkF;CACJ,IAAI;EACFA,YAAYzI,WAAW8D,GAAGuE,QAAQ7C,KAAK;CACzC,SAASvB,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EACR,OAAOkE,kBAAkBrE,GAAGd,UAAUiB,MAAM0D,OAAO;CACrD;CACA,IAAIc,UAAUE,SAAS,WAAW;EAChC,MAAMC,QAAQH,UAAUI,IAAIA,IAAID;EAChC,OAAOxF,SAASC,KAAKoF,UAAUI,KAAK;GAClCtF,QAAQqF,UAAUtE,KAAAA,IAAY,MAAM;GACpC,GAAIsE,UAAUtE,KAAAA,KAAa,EACzB5C,SAAS,EAAE,eAAemD,OAAOiE,KAAKC,KAAKH,QAAQ,GAAI,CAAC,EAAE,EAC5D;EACF,CAAC;CACH;CACA,OAAOxF,SAASC,KAAK,CAAC,CAAC;AACzB"}
+{"version":3,"file":"http.js","names":["StatewireHost","CLIENT_ID_RE","PRINCIPAL_MISMATCH_MESSAGE","SUBSCRIBER_LIMIT_MESSAGE","admitFrame","atSubscriberLimit","authEquals","closeConn","flush","expireLease","parseFrame","parseFrameValue","register","sendTo","ParsedFrame","Registration","SocketHostState","MAX_FRAME_BODY_BYTES","negotiateProtocols","StatewireProtocol","CLIENT_ID_HEADER","LEASE_HEADER","encoder","TextEncoder","laggardFin","encode","readFrameBody","request","Request","Promise","declared","headers","get","Number","body","cancel","catch","reader","getReader","chunks","Uint8Array","size","done","value","read","length","push","offset","chunk","set","TextDecoder","decode","invalidClientIdReason","clientId","test","clientIdResponse","response","Response","json","detail","status","reason","headersOf","Record","Object","fromEntries","authorize","h","auth","authorizedAt","refused","Date","now","error","subscriberLimitResponse","principalMismatchResponse","rec","clients","undefined","principal","mintLease","bytes","crypto","getRandomValues","btoa","String","fromCharCode","replaceAll","replace","SseAttachment","ReadableStream","registration","activateBackpressure","attachSse","selection","Selection","frame","controller","ReadableStreamDefaultController","connection","open","backpressureActive","start","next","close","highWaterMark","streamQueueSize","socket","send","data","desiredSize","enqueue","streamResponse","attachment","lease","getStream","authorized","client","mismatch","wireVersion","protocol","fin","conn","postStream","raw","trim","JSON","parse","cmd","Error","name","message","stream","method","Allow","finClient","Fin","conns","stringify","violationResponse","frames","leased","find","disposed","finished","admission","ReturnType","type","retry","syn","Math","ceil"],"sources":["../../src/host/http.ts"],"sourcesContent":["import type { StatewireHost } from \"../host\";\nimport {\n  CLIENT_ID_RE,\n  PRINCIPAL_MISMATCH_MESSAGE,\n  SUBSCRIBER_LIMIT_MESSAGE,\n  admitFrame,\n  atSubscriberLimit,\n  authEquals,\n  closeConn,\n  flush,\n  expireLease,\n  parseFrame,\n  parseFrameValue,\n  register,\n  sendTo,\n} from \"./socket\";\nimport type { ParsedFrame, Registration, SocketHostState } from \"./socket\";\nimport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\nimport { negotiateProtocols } from \"../wire/protocol\";\nimport type { StatewireProtocol } from \"../wire/protocol\";\n\nexport { MAX_FRAME_BODY_BYTES } from \"../wire/limits\";\n\nconst CLIENT_ID_HEADER = \"Statewire-Client-Id\";\nconst LEASE_HEADER = \"Statewire-Lease\";\nconst encoder = new TextEncoder();\nconst laggardFin = encoder.encode(\n  'data: {\"fin\":{\"reason\":\"reconnect\",\"code\":\"client-fell-behind\"}}\\n\\n',\n);\nconst readFrameBody = async (request: Request): Promise<string | null> => {\n  const declared = request.headers.get(\"content-length\");\n  if (declared !== null && Number(declared) > MAX_FRAME_BODY_BYTES) {\n    await request.body?.cancel(\"frame body too large\").catch(() => {});\n    return null;\n  }\n  if (request.body === null) return \"\";\n  const reader = request.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.length;\n    if (size > MAX_FRAME_BODY_BYTES) {\n      await reader.cancel(\"frame body too large\").catch(() => {});\n      return null;\n    }\n    chunks.push(value);\n  }\n  const body = new Uint8Array(size);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return new TextDecoder().decode(body);\n};\n\nconst invalidClientIdReason = (clientId: string): string | null => {\n  if (clientId === \"\") return \"id must be non-empty\";\n  if (clientId.length > 256) return \"id must be at most 256 characters\";\n  if (!CLIENT_ID_RE.test(clientId)) {\n    return \"id must contain only [A-Za-z0-9._~-]\";\n  }\n  return null;\n};\n\nconst clientIdResponse = (\n  request: Request,\n): { clientId: string } | { response: Response } => {\n  const clientId = request.headers.get(CLIENT_ID_HEADER);\n  if (clientId === null) {\n    return {\n      response: Response.json(\n        { detail: `missing ${CLIENT_ID_HEADER} header` },\n        { status: 400 },\n      ),\n    };\n  }\n  const reason = invalidClientIdReason(clientId);\n  if (reason !== null) {\n    return {\n      response: Response.json(\n        { detail: `invalid ${CLIENT_ID_HEADER}: ${reason}` },\n        { status: 400 },\n      ),\n    };\n  }\n  return { clientId };\n};\n\nconst headersOf = (request: Request): Record<string, string> =>\n  Object.fromEntries(request.headers);\n\nconst authorize = async (\n  h: SocketHostState,\n  headers: Record<string, string>,\n): Promise<{ auth: unknown; authorizedAt: number } | { refused: Response }> => {\n  try {\n    const auth = await h.authorize?.({ headers });\n    return { auth, authorizedAt: Date.now() };\n  } catch (error) {\n    if (error instanceof Response) return { refused: error };\n    throw error;\n  }\n};\n\nconst subscriberLimitResponse = (): Response =>\n  Response.json({ detail: SUBSCRIBER_LIMIT_MESSAGE }, { status: 503 });\n\n// No awaits between this check and register: the binding cannot race.\nconst principalMismatchResponse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n): Response | null => {\n  const rec = h.clients.get(clientId);\n  if (rec !== undefined && !authEquals(rec.principal, auth)) {\n    return Response.json(\n      { detail: PRINCIPAL_MISMATCH_MESSAGE },\n      { status: 403 },\n    );\n  }\n  return null;\n};\n\nconst mintLease = (): string => {\n  const bytes = crypto.getRandomValues(new Uint8Array(16));\n  return btoa(String.fromCharCode(...bytes))\n    .replaceAll(\"+\", \"-\")\n    .replaceAll(\"/\", \"_\")\n    .replace(/=+$/, \"\");\n};\n\ntype SseAttachment = {\n  body: ReadableStream<Uint8Array>;\n  registration: Registration | null;\n  activateBackpressure: () => void;\n};\n\nconst attachSse = (\n  h: SocketHostState,\n  clientId: string,\n  auth: unknown,\n  authorizedAt: number,\n  selection: StatewireProtocol.Selection,\n  frame?: ParsedFrame,\n): SseAttachment => {\n  let controller: ReadableStreamDefaultController<Uint8Array>;\n  let connection: Registration[\"connection\"] | null = null;\n  let open = true;\n  let backpressureActive = false;\n  const body = new ReadableStream(\n    {\n      start: (next) => {\n        controller = next;\n      },\n      cancel: () => {\n        open = false;\n        connection?.close();\n      },\n    },\n    { highWaterMark: h.streamQueueSize },\n  );\n  const socket = {\n    send: (data: string) => {\n      if (!open) return;\n      if (\n        backpressureActive &&\n        controller.desiredSize !== null &&\n        controller.desiredSize <= 0\n      ) {\n        open = false;\n        try {\n          controller.enqueue(laggardFin);\n          controller.close();\n        } catch {\n          /* stream already gone */\n        }\n        connection?.close();\n        return;\n      }\n      const frame = data === \"{}\" ? \": ping\\n\\n\" : `data: ${data}\\n\\n`;\n      try {\n        controller.enqueue(encoder.encode(frame));\n      } catch {\n        open = false;\n        connection?.close();\n      }\n    },\n    close: () => {\n      if (!open) return;\n      open = false;\n      try {\n        controller.close();\n      } catch {\n        return;\n      }\n    },\n  };\n  const registration = register(\n    h,\n    clientId,\n    socket,\n    false,\n    auth,\n    selection,\n    frame,\n    authorizedAt,\n  );\n  connection = registration?.connection ?? null;\n  if (!open) connection?.close();\n  return {\n    body,\n    registration,\n    activateBackpressure: () => {\n      backpressureActive = true;\n    },\n  };\n};\n\nconst streamResponse = (\n  attachment: SseAttachment,\n  lease: string | null,\n): Response => {\n  attachment.activateBackpressure();\n  return new Response(attachment.body, {\n    status: 200,\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      ...(lease !== null && { [LEASE_HEADER]: lease }),\n    },\n  });\n};\n\nconst getStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const selection = negotiateProtocols(request.headers, h.wireVersion, [\n    h.protocol,\n  ]);\n  if (\"fin\" in selection)\n    return Response.json(selection, { status: selection.fin.status });\n  const attachment = attachSse(\n    h,\n    client.clientId,\n    authorized.auth,\n    authorized.authorizedAt,\n    selection,\n  );\n  const lease = attachment.registration === null ? null : mintLease();\n  if (attachment.registration !== null)\n    attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nconst postStream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const client = clientIdResponse(request);\n  if (\"response\" in client) return client.response;\n  const raw = await readFrameBody(request);\n  if (raw === null) {\n    return Response.json({ detail: \"frame body too large\" }, { status: 413 });\n  }\n  let body: unknown;\n  try {\n    body = raw.trim() ? JSON.parse(raw) : null;\n  } catch {\n    return Response.json({ detail: \"body must be JSON\" }, { status: 400 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = body === null && !raw.trim() ? { cmd: [] } : parseFrameValue(body);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return Response.json({ detail: error.message }, { status: 400 });\n  }\n  const authorized = await authorize(h, headersOf(request));\n  if (\"refused\" in authorized) return authorized.refused;\n  const mismatch = principalMismatchResponse(\n    h,\n    client.clientId,\n    authorized.auth,\n  );\n  if (mismatch !== null) return mismatch;\n  if (atSubscriberLimit(h)) return subscriberLimitResponse();\n  const selection = negotiateProtocols(request.headers, h.wireVersion, [\n    h.protocol,\n  ]);\n  if (\"fin\" in selection)\n    return Response.json(selection, { status: selection.fin.status });\n  let attachment: SseAttachment;\n  try {\n    attachment = attachSse(\n      h,\n      client.clientId,\n      authorized.auth,\n      authorized.authorizedAt,\n      selection,\n      frame,\n    );\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\")\n      throw error;\n    return Response.json(\n      { fin: { reason: \"protocol-error\", message: error.message } },\n      { status: 400 },\n    );\n  }\n  if (attachment.registration === null) return streamResponse(attachment, null);\n  const lease = mintLease();\n  attachment.registration.conn.lease = lease;\n  return streamResponse(attachment, lease);\n};\n\nexport const stream = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  if (request.method === \"GET\") return getStream(h, request);\n  if (request.method === \"POST\") return postStream(h, request);\n  return new Response(null, {\n    status: 405,\n    headers: { Allow: \"GET, POST\" },\n  });\n};\n\nconst finClient = (\n  h: SocketHostState,\n  clientId: string,\n  fin: StatewireHost.Fin,\n) => {\n  flush(h);\n  for (const conn of [...h.conns]) {\n    if (conn.clientId !== clientId) continue;\n    sendTo(h, conn, JSON.stringify({ fin }));\n    closeConn(h, conn);\n  }\n};\n\nconst violationResponse = (\n  h: SocketHostState,\n  clientId: string,\n  reason: string,\n) => {\n  finClient(h, clientId, {\n    reason: \"protocol-error\",\n    message: reason,\n  });\n  return Response.json({ error: reason }, { status: 400 });\n};\n\nexport const frames = async (\n  h: SocketHostState,\n  request: Request,\n): Promise<Response> => {\n  const lease = request.headers.get(LEASE_HEADER);\n  // A lease lives and dies with its attach: any live attach of the id accepts.\n  const leased =\n    lease === null\n      ? undefined\n      : [...h.conns].find((conn) => conn.open && conn.lease === lease);\n  if (\n    h.disposed ||\n    h.finished !== null ||\n    leased === undefined ||\n    expireLease(h, leased)\n  ) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  const clientId = leased.clientId;\n  const raw = await readFrameBody(request);\n  if (\n    !leased.open ||\n    h.disposed ||\n    h.finished !== null ||\n    expireLease(h, leased)\n  ) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  if (raw === null) {\n    return Response.json({ error: \"frame body too large\" }, { status: 413 });\n  }\n  let frame: ParsedFrame;\n  try {\n    frame = parseFrame(raw);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\") {\n      throw error;\n    }\n    return violationResponse(h, clientId, error.message);\n  }\n  if (\n    !leased.open ||\n    h.disposed ||\n    h.finished !== null ||\n    expireLease(h, leased)\n  ) {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  let admission: ReturnType<typeof admitFrame>;\n  try {\n    admission = admitFrame(h, leased, frame);\n  } catch (error) {\n    if (!(error instanceof Error) || error.name !== \"StatewireViolation\")\n      throw error;\n    return violationResponse(h, clientId, error.message);\n  }\n  if (admission.type === \"expired\") {\n    return Response.json({ error: \"stale-lease\" }, { status: 423 });\n  }\n  if (admission.type === \"refused\") {\n    const retry = admission.syn.syn.retry;\n    return Response.json(admission.syn, {\n      status: retry === undefined ? 409 : 429,\n      ...(retry !== undefined && {\n        headers: { \"Retry-After\": String(Math.ceil(retry / 1000)) },\n      }),\n    });\n  }\n  return Response.json({});\n};\n"],"mappings":";;;;AAuBA,MAAMoB,mBAAmB;AACzB,MAAMC,eAAe;AACrB,MAAMC,UAAU,IAAIC,YAAY;AAChC,MAAMC,aAAaF,QAAQG,OACzB,gFACF;AACA,MAAMC,gBAAgB,OAAOC,YAA6C;CACxE,MAAMG,WAAWH,QAAQI,QAAQC,IAAI,gBAAgB;CACrD,IAAIF,aAAa,QAAQG,OAAOH,QAAQ,IAAA,SAA0B;EAChE,MAAMH,QAAQO,MAAMC,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;EACjE,OAAO;CACT;CACA,IAAIT,QAAQO,SAAS,MAAM,OAAO;CAClC,MAAMG,SAASV,QAAQO,KAAKI,UAAU;CACtC,MAAMC,SAAuB,CAAA;CAC7B,IAAIE,OAAO;CACX,SAAS;EACP,MAAM,EAAEC,MAAMC,UAAU,MAAMN,OAAOO,KAAK;EAC1C,IAAIF,MAAM;EACVD,QAAQE,MAAME;EACd,IAAIJ,OAAAA,SAA6B;GAC/B,MAAMJ,OAAOF,OAAO,sBAAsB,CAAC,CAACC,YAAY,CAAC,CAAC;GAC1D,OAAO;EACT;EACAG,OAAOO,KAAKH,KAAK;CACnB;CACA,MAAMT,OAAO,IAAIM,WAAWC,IAAI;CAChC,IAAIM,SAAS;CACb,KAAK,MAAMC,SAAST,QAAQ;EAC1BL,KAAKe,IAAID,OAAOD,MAAM;EACtBA,UAAUC,MAAMH;CAClB;CACA,OAAO,IAAIK,YAAY,CAAC,CAACC,OAAOjB,IAAI;AACtC;AAEA,MAAMkB,yBAAyBC,aAAoC;CACjE,IAAIA,aAAa,IAAI,OAAO;CAC5B,IAAIA,SAASR,SAAS,KAAK,OAAO;CAClC,IAAI,CAAC5C,aAAaqD,KAAKD,QAAQ,GAC7B,OAAO;CAET,OAAO;AACT;AAEA,MAAME,oBACJ5B,YACkD;CAClD,MAAM0B,WAAW1B,QAAQI,QAAQC,IAAIZ,gBAAgB;CACrD,IAAIiC,aAAa,MACf,OAAO,EACLG,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,SAAU,GAC/C,EAAEwC,QAAQ,IAAI,CAChB,EACF;CAEF,MAAMC,SAAST,sBAAsBC,QAAQ;CAC7C,IAAIQ,WAAW,MACb,OAAO,EACLL,UAAUC,SAASC,KACjB,EAAEC,QAAQ,WAAWvC,iBAAgB,IAAKyC,SAAS,GACnD,EAAED,QAAQ,IAAI,CAChB,EACF;CAEF,OAAO,EAAEP,SAAS;AACpB;AAEA,MAAMS,aAAanC,YACjBqC,OAAOC,YAAYtC,QAAQI,OAAO;AAEpC,MAAMmC,YAAY,OAChBC,GACApC,YAC6E;CAC7E,IAAI;EAEF,OAAO;GAAEqC,MAAAA,MADUD,EAAED,YAAY,EAAEnC,QAAQ,CAAC;GAC7BsC,cAAcE,KAAKC,IAAI;EAAE;CAC1C,SAASC,OAAO;EACd,IAAIA,iBAAiBhB,UAAU,OAAO,EAAEa,SAASG,MAAM;EACvD,MAAMA;CACR;AACF;AAEA,MAAMC,gCACJjB,SAASC,KAAK,EAAEC,QAAQxD,yBAAyB,GAAG,EAAEyD,QAAQ,IAAI,CAAC;AAGrE,MAAMe,6BACJR,GACAd,UACAe,SACoB;CACpB,MAAMQ,MAAMT,EAAEU,QAAQ7C,IAAIqB,QAAQ;CAClC,IAAIuB,QAAQE,KAAAA,KAAa,CAACxE,WAAWsE,IAAIG,WAAWX,IAAI,GACtD,OAAOX,SAASC,KACd,EAAEC,QAAQzD,2BAA2B,GACrC,EAAE0D,QAAQ,IAAI,CAChB;CAEF,OAAO;AACT;AAEA,MAAMoB,kBAA0B;CAC9B,MAAMC,QAAQC,OAAOC,gCAAgB,IAAI3C,WAAW,EAAE,CAAC;CACvD,OAAO4C,KAAKC,OAAOC,aAAa,GAAGL,KAAK,CAAC,CAAC,CACvCM,WAAW,KAAK,GAAG,CAAC,CACpBA,WAAW,KAAK,GAAG,CAAC,CACpBC,QAAQ,OAAO,EAAE;AACtB;AAQA,MAAMK,aACJ1B,GACAd,UACAe,MACAC,cACAyB,WACAE,UACkB;CAClB,IAAIC;CACJ,IAAIE,aAAgD;CACpD,IAAIC,OAAO;CACX,IAAIC,qBAAqB;CACzB,MAAMnE,OAAO,IAAIwD,eACf;EACEY,QAAQC,SAAS;GACfN,aAAaM;EACf;EACApE,cAAc;GACZiE,OAAO;GACPD,YAAYK,MAAM;EACpB;CACF,GACA,EAAEC,eAAetC,EAAEuC,gBAAgB,CACrC;CAqCA,MAAMf,eAAe/E,SACnBuD,GACAd,UACAsD;EAtCAC,OAAOC,SAAiB;GACtB,IAAI,CAACT,MAAM;GACX,IACEC,sBACAJ,WAAWa,gBAAgB,QAC3Bb,WAAWa,eAAe,GAC1B;IACAV,OAAO;IACP,IAAI;KACFH,WAAWc,QAAQvF,UAAU;KAC7ByE,WAAWO,MAAM;IACnB,QAAQ,CACN;IAEFL,YAAYK,MAAM;IAClB;GACF;GACA,MAAMR,QAAQa,SAAS,OAAO,eAAe,SAASA,KAAI;GAC1D,IAAI;IACFZ,WAAWc,QAAQzF,QAAQG,OAAOuE,KAAK,CAAC;GAC1C,QAAQ;IACNI,OAAO;IACPD,YAAYK,MAAM;GACpB;EACF;EACAA,aAAa;GACX,IAAI,CAACJ,MAAM;GACXA,OAAO;GACP,IAAI;IACFH,WAAWO,MAAM;GACnB,QAAQ;IACN;GACF;EACF;CAKAG,GACA,OACAvC,MACA0B,WACAE,OACA3B,YACF;CACA8B,aAAaR,cAAcQ,cAAc;CACzC,IAAI,CAACC,MAAMD,YAAYK,MAAM;CAC7B,OAAO;EACLtE;EACAyD;EACAC,4BAA4B;GAC1BS,qBAAqB;EACvB;CACF;AACF;AAEA,MAAMW,kBACJC,YACAC,UACa;CACbD,WAAWrB,qBAAqB;CAChC,OAAO,IAAInC,SAASwD,WAAW/E,MAAM;EACnC0B,QAAQ;EACR7B,SAAS;GACP,gBAAgB;GAChB,GAAImF,UAAU,QAAQ,GAAG7F,eAAe6F,MAAM;EAChD;CACF,CAAC;AACH;AAEA,MAAMC,YAAY,OAChBhD,GACAxC,YACsB;CACtB,MAAMyF,aAAa,MAAMlD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAayF,YAAY,OAAOA,WAAW9C;CAC/C,MAAM+C,SAAS9D,iBAAiB5B,OAAO;CACvC,IAAI,cAAc0F,QAAQ,OAAOA,OAAO7D;CACxC,MAAM8D,WAAW3C,0BACfR,GACAkD,OAAOhE,UACP+D,WAAWhD,IACb;CACA,IAAIkD,aAAa,MAAM,OAAOA;CAC9B,IAAIjH,kBAAkB8D,CAAC,GAAG,OAAOO,wBAAwB;CACzD,MAAMoB,YAAY5E,mBAAmBS,QAAQI,SAASoC,EAAEoD,aAAa,CACnEpD,EAAEqD,QAAQ,CACX;CACD,IAAI,SAAS1B,WACX,OAAOrC,SAASC,KAAKoC,WAAW,EAAElC,QAAQkC,UAAU2B,IAAI7D,OAAO,CAAC;CAClE,MAAMqD,aAAapB,UACjB1B,GACAkD,OAAOhE,UACP+D,WAAWhD,MACXgD,WAAW/C,cACXyB,SACF;CACA,MAAMoB,QAAQD,WAAWtB,iBAAiB,OAAO,OAAOX,UAAU;CAClE,IAAIiC,WAAWtB,iBAAiB,MAC9BsB,WAAWtB,aAAa+B,KAAKR,QAAQA;CACvC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAMS,aAAa,OACjBxD,GACAxC,YACsB;CACtB,MAAM0F,SAAS9D,iBAAiB5B,OAAO;CACvC,IAAI,cAAc0F,QAAQ,OAAOA,OAAO7D;CACxC,MAAMoE,MAAM,MAAMlG,cAAcC,OAAO;CACvC,IAAIiG,QAAQ,MACV,OAAOnE,SAASC,KAAK,EAAEC,QAAQ,uBAAuB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CAE1E,IAAI1B;CACJ,IAAI;EACFA,OAAO0F,IAAIC,KAAK,IAAIC,KAAKC,MAAMH,GAAG,IAAI;CACxC,QAAQ;EACN,OAAOnE,SAASC,KAAK,EAAEC,QAAQ,oBAAoB,GAAG,EAAEC,QAAQ,IAAI,CAAC;CACvE;CACA,IAAIoC;CACJ,IAAI;EACFA,QAAQ9D,SAAS,QAAQ,CAAC0F,IAAIC,KAAK,IAAI,EAAEG,KAAK,CAAA,EAAG,IAAIrH,gBAAgBuB,IAAI;CAC3E,SAASuC,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EAER,OAAOhB,SAASC,KAAK,EAAEC,QAAQc,MAAM0D,QAAQ,GAAG,EAAEvE,QAAQ,IAAI,CAAC;CACjE;CACA,MAAMwD,aAAa,MAAMlD,UAAUC,GAAGL,UAAUnC,OAAO,CAAC;CACxD,IAAI,aAAayF,YAAY,OAAOA,WAAW9C;CAC/C,MAAMgD,WAAW3C,0BACfR,GACAkD,OAAOhE,UACP+D,WAAWhD,IACb;CACA,IAAIkD,aAAa,MAAM,OAAOA;CAC9B,IAAIjH,kBAAkB8D,CAAC,GAAG,OAAOO,wBAAwB;CACzD,MAAMoB,YAAY5E,mBAAmBS,QAAQI,SAASoC,EAAEoD,aAAa,CACnEpD,EAAEqD,QAAQ,CACX;CACD,IAAI,SAAS1B,WACX,OAAOrC,SAASC,KAAKoC,WAAW,EAAElC,QAAQkC,UAAU2B,IAAI7D,OAAO,CAAC;CAClE,IAAIqD;CACJ,IAAI;EACFA,aAAapB,UACX1B,GACAkD,OAAOhE,UACP+D,WAAWhD,MACXgD,WAAW/C,cACXyB,WACAE,KACF;CACF,SAASvB,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EACR,OAAOhB,SAASC,KACd,EAAE+D,KAAK;GAAE5D,QAAQ;GAAkBsE,SAAS1D,MAAM0D;EAAQ,EAAE,GAC5D,EAAEvE,QAAQ,IAAI,CAChB;CACF;CACA,IAAIqD,WAAWtB,iBAAiB,MAAM,OAAOqB,eAAeC,YAAY,IAAI;CAC5E,MAAMC,QAAQlC,UAAU;CACxBiC,WAAWtB,aAAa+B,KAAKR,QAAQA;CACrC,OAAOF,eAAeC,YAAYC,KAAK;AACzC;AAEA,MAAakB,SAAS,OACpBjE,GACAxC,YACsB;CACtB,IAAIA,QAAQ0G,WAAW,OAAO,OAAOlB,UAAUhD,GAAGxC,OAAO;CACzD,IAAIA,QAAQ0G,WAAW,QAAQ,OAAOV,WAAWxD,GAAGxC,OAAO;CAC3D,OAAO,IAAI8B,SAAS,MAAM;EACxBG,QAAQ;EACR7B,SAAS,EAAEuG,OAAO,YAAY;CAChC,CAAC;AACH;AAEA,MAAMC,aACJpE,GACAd,UACAoE,QACG;CACHjH,MAAM2D,CAAC;CACP,KAAK,MAAMuD,QAAQ,CAAC,GAAGvD,EAAEsE,KAAK,GAAG;EAC/B,IAAIf,KAAKrE,aAAaA,UAAU;EAChCxC,OAAOsD,GAAGuD,MAAMI,KAAKY,UAAU,EAAEjB,IAAI,CAAC,CAAC;EACvClH,UAAU4D,GAAGuD,IAAI;CACnB;AACF;AAEA,MAAMiB,qBACJxE,GACAd,UACAQ,WACG;CACH0E,UAAUpE,GAAGd,UAAU;EACrBQ,QAAQ;EACRsE,SAAStE;CACX,CAAC;CACD,OAAOJ,SAASC,KAAK,EAAEe,OAAOZ,OAAO,GAAG,EAAED,QAAQ,IAAI,CAAC;AACzD;AAEA,MAAagF,SAAS,OACpBzE,GACAxC,YACsB;CACtB,MAAMuF,QAAQvF,QAAQI,QAAQC,IAAIX,YAAY;CAE9C,MAAMwH,SACJ3B,UAAU,OACNpC,KAAAA,IACA,CAAC,GAAGX,EAAEsE,KAAK,CAAC,CAACK,MAAMpB,SAASA,KAAKtB,QAAQsB,KAAKR,UAAUA,KAAK;CACnE,IACE/C,EAAE4E,YACF5E,EAAE6E,aAAa,QACfH,WAAW/D,KAAAA,KACXrE,YAAY0D,GAAG0E,MAAM,GAErB,OAAOpF,SAASC,KAAK,EAAEe,OAAO,cAAc,GAAG,EAAEb,QAAQ,IAAI,CAAC;CAEhE,MAAMP,WAAWwF,OAAOxF;CACxB,MAAMuE,MAAM,MAAMlG,cAAcC,OAAO;CACvC,IACE,CAACkH,OAAOzC,QACRjC,EAAE4E,YACF5E,EAAE6E,aAAa,QACfvI,YAAY0D,GAAG0E,MAAM,GAErB,OAAOpF,SAASC,KAAK,EAAEe,OAAO,cAAc,GAAG,EAAEb,QAAQ,IAAI,CAAC;CAEhE,IAAIgE,QAAQ,MACV,OAAOnE,SAASC,KAAK,EAAEe,OAAO,uBAAuB,GAAG,EAAEb,QAAQ,IAAI,CAAC;CAEzE,IAAIoC;CACJ,IAAI;EACFA,QAAQtF,WAAWkH,GAAG;CACxB,SAASnD,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EAER,OAAOkE,kBAAkBxE,GAAGd,UAAUoB,MAAM0D,OAAO;CACrD;CACA,IACE,CAACU,OAAOzC,QACRjC,EAAE4E,YACF5E,EAAE6E,aAAa,QACfvI,YAAY0D,GAAG0E,MAAM,GAErB,OAAOpF,SAASC,KAAK,EAAEe,OAAO,cAAc,GAAG,EAAEb,QAAQ,IAAI,CAAC;CAEhE,IAAIqF;CACJ,IAAI;EACFA,YAAY7I,WAAW+D,GAAG0E,QAAQ7C,KAAK;CACzC,SAASvB,OAAO;EACd,IAAI,EAAEA,iBAAiBwD,UAAUxD,MAAMyD,SAAS,sBAC9C,MAAMzD;EACR,OAAOkE,kBAAkBxE,GAAGd,UAAUoB,MAAM0D,OAAO;CACrD;CACA,IAAIc,UAAUE,SAAS,WACrB,OAAO1F,SAASC,KAAK,EAAEe,OAAO,cAAc,GAAG,EAAEb,QAAQ,IAAI,CAAC;CAEhE,IAAIqF,UAAUE,SAAS,WAAW;EAChC,MAAMC,QAAQH,UAAUI,IAAIA,IAAID;EAChC,OAAO3F,SAASC,KAAKuF,UAAUI,KAAK;GAClCzF,QAAQwF,UAAUtE,KAAAA,IAAY,MAAM;GACpC,GAAIsE,UAAUtE,KAAAA,KAAa,EACzB/C,SAAS,EAAE,eAAesD,OAAOiE,KAAKC,KAAKH,QAAQ,GAAI,CAAC,EAAE,EAC5D;EACF,CAAC;CACH;CACA,OAAO3F,SAASC,KAAK,CAAC,CAAC;AACzB"}

package/dist/host/socket.d.ts

@@ -1,168 +1,174 @@
-import { CommandsHost } from "./host.js";
-import { StatewireHost } from "../host.js";
-import { StatewireProtocol } from "../wire/protocol.js";
-import { StatewireDocument } from "../document.js";
-import { Statewire } from "../types.js";
-import { StatewirePath } from "../wire/ops.js";
-import { StatewireHostInternal } from "../host-internal.js";
-import { ResourceElement } from "@assistant-ui/tap";
-//#region src/host/socket.d.ts
-declare const CLIENT_ID_RE: RegExp;
-declare const PRINCIPAL_MISMATCH_MESSAGE = "client id is bound to another principal";
+import type { StatewireProtocol } from "../wire/protocol.js";
+import type { ResourceElement } from "@assistant-ui/tap";
+import type { CommandsHost } from "./host.js";
+import type { Statewire } from "../types.js";
+import type { StatewireHost } from "../host.js";
+import type { StatewireHostInternal } from "../host-internal.js";
+import type { StatewireDocument } from "../document.js";
+import type { StatewirePath } from "../wire/ops.js";
+export declare const CLIENT_ID_RE: RegExp;
+export declare const PRINCIPAL_MISMATCH_MESSAGE = "client id is bound to another principal";
 /** Structural equality over auth values: primitives, Dates, arrays, and plain
  * objects compare by value; anything else by identity. */
-declare const authEquals: (a: unknown, b: unknown) => boolean;
-declare const SUBSCRIBER_LIMIT_MESSAGE = "stream subscriber limit reached";
+export declare const authEquals: (a: unknown, b: unknown) => boolean;
+export declare const SUBSCRIBER_LIMIT_MESSAGE = "stream subscriber limit reached";
 type Cmd = StatewireHostInternal.Cmd;
 type WireOp = {
-  op: string;
-  doc?: number;
-  path?: StatewirePath;
-  value?: unknown;
-  meta?: StatewireDocument.MetaEntry[];
-  protocol?: string;
-  key?: readonly string[];
-  main?: boolean;
+    op: string;
+    doc?: number;
+    path?: StatewirePath;
+    value?: unknown;
+    meta?: StatewireDocument.MetaEntry[];
+    protocol?: string;
+    key?: readonly string[];
+    main?: boolean;
 };
 type Admission = {
-  protocol: string;
-  seq: number;
-  method: string;
-  applied: boolean;
-  appliedSent: boolean;
-  settled: boolean;
+    protocol: string;
+    seq: number;
+    method: string;
+    applied: boolean;
+    appliedSent: boolean;
+    settled: boolean;
 };
 /** One statement lane: durable lanes live on the client record, ephemeral lanes on the attach. */
 type Lane = {
-  protocol: string;
-  clientId: string;
-  conn: Conn | null;
-  lastSeq: number;
-  results: Map<number, {
-    ts: number;
-    cmd: Cmd;
-  }>;
-  inflight: Map<number, Admission>;
+    protocol: string;
+    clientId: string;
+    conn: Conn | null;
+    lastSeq: number;
+    results: Map<number, {
+        ts: number;
+        cmd: Cmd;
+    }>;
+    inflight: Map<number, Admission>;
 };
-type ClientRec = {
-  id: string;
-  touched: number;
-  lanes: Map<string, Lane>;
-  /** The auth captured at the record's first attach; later attaches must match. */
-  principal: unknown;
+export type ClientRec = {
+    id: string;
+    touched: number;
+    lanes: Map<string, Lane>;
+    /** The auth captured at the record's first attach; later attaches must match. */
+    principal: unknown;
 };
-type Conn = {
-  selection: StatewireProtocol.Selection;
-  clientId: string;
-  socket: StatewireHostInternal.Socket;
-  open: boolean;
-  ready: boolean;
-  sawFrame: boolean;
-  lastSentAt: number;
-  lease: string | null;
-  /** The awaited `authorize` return captured at this attach's authorization. */
-  auth: unknown;
-  lanes: Map<string, Lane>;
-  contexts: Map<string, Statewire.Context>;
-  documents: Map<string, StatewireHost.Document>;
-  included: Set<string>;
-  view: Map<string, {
-    doc: number;
-    value: unknown;
-  }>;
-  nextDoc: number;
-  pendingApplied: Cmd[];
-  pendingCmds: Cmd[];
-  attach: StatewireHost.Attach;
+export type Conn = {
+    selection: StatewireProtocol.Selection;
+    clientId: string;
+    socket: StatewireHostInternal.Socket;
+    open: boolean;
+    ready: boolean;
+    sawFrame: boolean;
+    lastSentAt: number;
+    lease: string | null;
+    /** The awaited `authorize` return captured at this attach's authorization. */
+    auth: unknown;
+    authorizedAt: number | undefined;
+    leaseTimer: ReturnType<typeof setTimeout> | null;
+    lanes: Map<string, Lane>;
+    contexts: Map<string, Statewire.Context>;
+    documents: Map<string, StatewireHost.Document>;
+    included: Set<string>;
+    onIncludedChange: ((included: readonly StatewireHostInternal.IncludedDocument[]) => void) | undefined;
+    view: Map<string, {
+        doc: number;
+        value: unknown;
+    }>;
+    nextDoc: number;
+    pendingApplied: Cmd[];
+    pendingCmds: Cmd[];
+    attach: StatewireHost.Attach;
 };
 type PendingConn = {
-  socket: StatewireHostInternal.Socket;
-  open: boolean;
-  authorizing: boolean;
-  queued: string[];
-  timer: ReturnType<typeof setTimeout> | null;
-  connection: StatewireHostInternal.SocketConnection | null;
+    socket: StatewireHostInternal.Socket;
+    open: boolean;
+    authorizing: boolean;
+    queued: string[];
+    timer: ReturnType<typeof setTimeout> | null;
+    connection: StatewireHostInternal.SocketConnection | null;
 };
 type CmdStatement = {
-  protocol: string;
-  seq: number;
-  method: string;
-  params: unknown;
-  meta?: unknown;
-};
-type ParsedFrame = {
-  cmd: CmdStatement[];
-  ctx?: {
     protocol: string;
-    value: Statewire.Context;
-  }[];
+    seq: number;
+    method: string;
+    params: unknown;
+    meta?: unknown;
 };
-declare const parseFrameValue: (frame: unknown) => ParsedFrame;
-declare const parseFrame: (raw: string) => ParsedFrame;
-type SocketHostState = {
-  protocol: StatewireProtocol.Definition;
-  key: readonly string[] | undefined;
-  wireVersion: StatewireProtocol.Range;
-  heartbeatMs: number;
-  wsInitTimeoutMs: number;
-  maxSubscribers: number;
-  maxInflightCommands: number;
-  streamQueueSize: number;
-  clientRecordLimit: number;
-  finOnIdle: boolean;
-  pushback: (() => number | null) | undefined;
-  authorize: StatewireHostInternal.SocketHostOptions["authorize"];
-  clients: Map<string, ClientRec>;
-  conns: Set<Conn>;
-  pendingConns: Set<PendingConn>;
-  pendingOps: WireOp[];
-  pendingApplied: Map<string, Cmd[]>;
-  pendingCmds: Map<string, Cmd[]>;
-  viewsDirty: boolean;
-  idleWire: boolean;
-  finished: StatewireHost.Fin | null;
-  disposed: boolean;
-  flushScheduled: boolean;
-  heartbeatTimer: ReturnType<typeof setInterval> | null;
-  stateHost: StatewireHost.StateHost | null;
-  commandsHost: CommandsHost | null;
-  current: Statewire<unknown> | null;
-  persistence: StatewireHostInternal.SocketHostPersistence | undefined;
-  post: () => void;
-  connect: (clientId: string, socket: StatewireHostInternal.Socket, options?: StatewireHostInternal.SocketConnectOptions) => StatewireHostInternal.SocketConnection | null;
-  finish: (fin: StatewireHost.Fin) => void;
-  stream: (request: Request) => Promise<Response>;
-  frames: (request: Request) => Promise<Response>;
+export type ParsedFrame = {
+    cmd: CmdStatement[];
+    ctx?: {
+        protocol: string;
+        value: Statewire.Context;
+    }[];
 };
-declare const closeConn: (h: SocketHostState, conn: Conn, code?: number, reason?: string) => void;
-declare const sendTo: (h: SocketHostState, conn: Conn, data: string) => void;
-declare const atSubscriberLimit: (h: SocketHostState) => boolean;
-declare const flush: (h: SocketHostState, fin?: StatewireHost.Fin) => void;
-type FrameAdmission = {
-  type: "ok";
+export declare const parseFrameValue: (frame: unknown) => ParsedFrame;
+export declare const parseFrame: (raw: string) => ParsedFrame;
+export type SocketHostState = {
+    protocol: StatewireProtocol.Definition;
+    key: readonly string[] | undefined;
+    wireVersion: StatewireProtocol.Range;
+    heartbeatMs: number;
+    maxLeaseLifetimeMs: number | null;
+    wsInitTimeoutMs: number;
+    maxSubscribers: number;
+    maxInflightCommands: number;
+    streamQueueSize: number;
+    clientRecordLimit: number;
+    finOnIdle: boolean;
+    pushback: (() => number | null) | undefined;
+    authorize: StatewireHostInternal.SocketHostOptions["authorize"];
+    clients: Map<string, ClientRec>;
+    conns: Set<Conn>;
+    pendingConns: Set<PendingConn>;
+    pendingOps: WireOp[];
+    pendingApplied: Map<string, Cmd[]>;
+    pendingCmds: Map<string, Cmd[]>;
+    viewsDirty: boolean;
+    idleWire: boolean;
+    finished: StatewireHost.Fin | null;
+    disposed: boolean;
+    flushScheduled: boolean;
+    heartbeatTimer: ReturnType<typeof setInterval> | null;
+    stateHost: StatewireHost.StateHost | null;
+    commandsHost: CommandsHost | null;
+    current: Statewire<unknown> | null;
+    persistence: StatewireHostInternal.SocketHostPersistence | undefined;
+    post: () => void;
+    connect: (clientId: string, socket: StatewireHostInternal.Socket, options?: StatewireHostInternal.SocketConnectOptions) => StatewireHostInternal.SocketConnection | null;
+    finish: (fin: StatewireHost.Fin) => void;
+    stream: (request: Request) => Promise<Response>;
+    frames: (request: Request) => Promise<Response>;
+};
+export declare const closeConn: (h: SocketHostState, conn: Conn, code?: number, reason?: string) => void;
+export declare const sendTo: (h: SocketHostState, conn: Conn, data: string) => void;
+export declare const expireLease: (h: SocketHostState, conn: Conn) => boolean;
+export declare const atSubscriberLimit: (h: SocketHostState) => boolean;
+export declare const flush: (h: SocketHostState, fin?: StatewireHost.Fin) => void;
+export type FrameAdmission = {
+    type: "ok";
+} | {
+    type: "expired";
 } | {
-  type: "refused";
-  syn: {
+    type: "refused";
     syn: {
-      protocols: {
-        name: string;
-        seq: number;
-      }[];
-      retry?: number;
+        syn: {
+            protocols: {
+                name: string;
+                seq: number;
+            }[];
+            retry?: number;
+        };
     };
-  };
 };
-declare const admitFrame: (h: SocketHostState, conn: Conn, frame: ParsedFrame) => FrameAdmission;
-type Registration = {
-  conn: Conn;
-  connection: StatewireHostInternal.SocketConnection;
+export declare const admitFrame: (h: SocketHostState, conn: Conn, frame: ParsedFrame) => FrameAdmission;
+export type Registration = {
+    conn: Conn;
+    connection: StatewireHostInternal.SocketConnection;
 };
 /**
  * Attach a socket: ephemeral-lane statements of the attach frame are admitted
  * before the snapshot (their documents and answers ride the hello), durable
  * ones after it. A violation in the attach frame closes the attach and throws.
  */
-declare const register: (h: SocketHostState, clientId: string, socket: StatewireHostInternal.Socket, sawFrame?: boolean, auth?: unknown, selection?: StatewireProtocol.Selection, frame?: ParsedFrame) => Registration | null;
+export declare const register: (h: SocketHostState, clientId: string, socket: StatewireHostInternal.Socket, sawFrame?: boolean, auth?: unknown, selection?: StatewireProtocol.Selection, frame?: ParsedFrame, authorizedAt?: number, included?: Pick<StatewireHostInternal.SocketConnectOptions, "included" | "onIncludedChange">) => Registration | null;
 /**
  * Transport-agnostic WS binding over a statewire/host transport:
  * feed it sockets (anything with `send`/`close`) and raw text frames, and it
@@ -172,7 +178,6 @@ declare const register: (h: SocketHostState, clientId: string, socket: Statewire
  * admitting attach (ephemeral lanes), per-attach document views, idle edges,
  * and `fin` on finish.
  */
-declare const StatewireSocketHost: (transport: ResourceElement<Statewire>, options?: StatewireHostInternal.SocketHostOptions, persistence?: StatewireHostInternal.SocketHostPersistence) => StatewireHostInternal.SocketHost;
-//#endregion
-export { CLIENT_ID_RE, ClientRec, Conn, FrameAdmission, PRINCIPAL_MISMATCH_MESSAGE, ParsedFrame, Registration, SUBSCRIBER_LIMIT_MESSAGE, SocketHostState, StatewireSocketHost, admitFrame, atSubscriberLimit, authEquals, closeConn, flush, parseFrame, parseFrameValue, register, sendTo };
+export declare const StatewireSocketHost: (transport: ResourceElement<Statewire>, options?: StatewireHostInternal.SocketHostOptions, persistence?: StatewireHostInternal.SocketHostPersistence) => StatewireHostInternal.SocketHost;
+export {};
 //# sourceMappingURL=socket.d.ts.map

package/dist/host/socket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket.d.ts","names":[],"sources":["../../src/host/socket.ts"],"mappings":";;;;;;;;;cAiCa,cAAY;cACZ;;;cAKA,aAAc,YAAY;cAoC1B;KAGR,MAAM,sBAAsB;KAE5B;EACH;EACA;EACA,OAAO;EACP;EACA,OAAO,kBAAkB;EACzB;EACA;EACA;;KAGG;EACH;EACA;EACA;EACA;EACA;EACA;;;KAIG;EACH;EACA;EACA,MAAM;EACN;EACA,SAAS;IAAc;IAAY,KAAK;;EACxC,UAAU,YAAY;;KAGZ;EACV;EACA;EACA,OAAO,YAAY;;EAEnB;;KAIU;EACV,WAAW,kBAAkB;EAC7B;EACA,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA;EACA;;EAEA;EACA,OAAO,YAAY;EACnB,UAAU,YAAY,UAAU;EAChC,WAAW,YAAY,cAAc;EACrC,UAAU;EACV,MAAM;IAAc;IAAa;;EACjC;EACA,gBAAgB;EAChB,aAAa;EACb,QAAQ,cAAc;;KAGnB;EACH,QAAQ,sBAAsB;EAC9B;EACA;EACA;EACA,OAAO,kBAAkB;EACzB,YAAY,sBAAsB;;KAc/B;EACH;EACA;EACA;EACA;EACA;;KAGU;EACV,KAAK;EACL;IAAQ;IAAkB,OAAO,UAAU;;;cAQhC,kBAAmB,mBAAiB;cAqFpC,aAAc,gBAAc;KAyF7B;EACV,UAAU,kBAAkB;EAC5B;EACA,aAAa,kBAAkB;EAC/B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,sBAAsB;EACjC,SAAS,YAAY;EACrB,OAAO,IAAI;EACX,cAAc,IAAI;EAClB,YAAY;EACZ,gBAAgB,YAAY;EAC5B,aAAa,YAAY;EACzB;EACA;EACA,UAAU,cAAc;EACxB;EACA;EACA,gBAAgB,kBAAkB;EAClC,WAAW,cAAc;EACzB,cAAc;EACd,SAAS;EACT,aAAa,sBAAsB;EACnC;EACA,UACE,kBACA,QAAQ,sBAAsB,QAC9B,UAAU,sBAAsB,yBAC7B,sBAAsB;EAC3B,SAAS,KAAK,cAAc;EAC5B,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,YAAY,QAAQ;;cAsD3B,YACX,GAAG,iBACH,MAAM,MACN,eACA;cAiBW,SAAU,GAAG,iBAAiB,MAAM,MAAM;cAmB1C,oBAAqB,GAAG;cAsLxB,QAAS,GAAG,iBAAiB,MAAM,cAAc;KAoUlD;EACN;;EAEA;EACA;IACE;MAAO;QAAa;QAAc;;MAAiB;;;;cAyE9C,aACX,GAAG,iBACH,MAAM,MACN,OAAO,gBACN;KA8YS;EACV,MAAM;EACN,YAAY,sBAAsB;;;;;;;cAQvB,WACX,GAAG,iBACH,kBACA,QAAQ,sBAAsB,QAC9B,oBACA,gBACA,YAAW,kBAAkB,WAI7B,QAAO,gBACN;;;;;;;;;;cA0UU,sBACX,WAAW,gBAAgB,YAC3B,UAAU,sBAAsB,mBAChC,cAAc,sBAAsB,0BACnC,sBAAsB"}
+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/host/socket.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,4BAAyB;AAG1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,KAAK,EAAE,YAAY,EAAmB,kBAAe;AAE5D,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAiB;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAgB;AAC7C,OAAO,KAAK,EAAE,qBAAqB,EAAE,4BAAyB;AAY9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAoB;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAoB;AAGjD,eAAO,MAAM,YAAY,QAA6B,CAAC;AACvD,eAAO,MAAM,0BAA0B,4CACI,CAAC;AAE5C;0DAC0D;AAC1D,eAAO,MAAM,UAAU,GAAI,GAAG,OAAO,EAAE,GAAG,OAAO,KAAG,OA8BnD,CAAC;AAMF,eAAO,MAAM,wBAAwB,oCAAoC,CAAC;AAG1E,KAAK,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC;AAErC,KAAK,MAAM,GAAG;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,kGAAkG;AAClG,KAAK,IAAI,GAAG;IACV,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzB,iFAAiF;IACjF,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAGF,MAAM,MAAM,IAAI,GAAG;IACjB,SAAS,EAAE,iBAAiB,CAAC,SAAS,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,8EAA8E;IAC9E,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IACjD,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IACzC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,gBAAgB,EACZ,CAAC,CAAC,QAAQ,EAAE,SAAS,qBAAqB,CAAC,gBAAgB,EAAE,KAAK,IAAI,CAAC,GACvE,SAAS,CAAC;IACd,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,GAAG,EAAE,CAAC;IACtB,WAAW,EAAE,GAAG,EAAE,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;CAC9B,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IAC5C,UAAU,EAAE,qBAAqB,CAAC,gBAAgB,GAAG,IAAI,CAAC;CAC3D,CAAC;AAaF,KAAK,YAAY,GAAG;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,YAAY,EAAE,CAAC;IACpB,GAAG,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAA;KAAE,EAAE,CAAC;CACxD,CAAC;AAOF,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,WAmFhD,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,WAQxC,CAAC;AA+EF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC;IACvC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,iBAAiB,CAAC,KAAK,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IAC5C,SAAS,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAChE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC,GAAG,GAAG,IAAI,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC;IACtD,SAAS,EAAE,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC;IAC1C,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACnC,WAAW,EAAE,qBAAqB,CAAC,qBAAqB,GAAG,SAAS,CAAC;IACrE,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,OAAO,EAAE,CACP,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,qBAAqB,CAAC,MAAM,EACpC,OAAO,CAAC,EAAE,qBAAqB,CAAC,oBAAoB,KACjD,qBAAqB,CAAC,gBAAgB,GAAG,IAAI,CAAC;IACnD,MAAM,EAAE,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,KAAK,IAAI,CAAC;IACzC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACjD,CAAC;AAqDF,eAAO,MAAM,SAAS,GACpB,GAAG,eAAe,EAClB,MAAM,IAAI,EACV,OAAO,MAAM,EACb,SAAS,MAAM,SAmBhB,CAAC;AAEF,eAAO,MAAM,MAAM,GAAI,GAAG,eAAe,EAAE,MAAM,IAAI,EAAE,MAAM,MAAM,SAQlE,CAAC;AAkBF,eAAO,MAAM,WAAW,GAAI,GAAG,eAAe,EAAE,MAAM,IAAI,KAAG,OAS5D,CAAC;AA2BF,eAAO,MAAM,iBAAiB,GAAI,GAAG,eAAe,KAAG,OAGrC,CAAC;AAkNnB,eAAO,MAAM,KAAK,GAAI,GAAG,eAAe,EAAE,MAAM,aAAa,CAAC,GAAG,SAyEhE,CAAC;AA2PF,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE;QACH,GAAG,EAAE;YAAE,SAAS,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,GAAG,EAAE,MAAM,CAAA;aAAE,EAAE,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrE,CAAC;CACH,CAAC;AAuEN,eAAO,MAAM,UAAU,GACrB,GAAG,eAAe,EAClB,MAAM,IAAI,EACV,OAAO,WAAW,KACjB,cA8DF,CAAC;AAwWF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,qBAAqB,CAAC,gBAAgB,CAAC;CACpD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GACnB,GAAG,eAAe,EAClB,UAAU,MAAM,EAChB,QAAQ,qBAAqB,CAAC,MAAM,EACpC,kBAAgB,EAChB,OAAM,OAAmB,EACzB,YAAW,iBAAiB,CAAC,SAG5B,EACD,QAAO,WAAyB,EAChC,eAAe,MAAM,EACrB,WAAU,IAAI,CACZ,qBAAqB,CAAC,oBAAoB,EAC1C,UAAU,GAAG,kBAAkB,CAC3B,KACL,YAAY,GAAG,IAoKjB,CAAC;AAkMF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAC9B,WAAW,eAAe,CAAC,SAAS,CAAC,EACrC,UAAU,qBAAqB,CAAC,iBAAiB,EACjD,cAAc,qBAAqB,CAAC,qBAAqB,KACxD,qBAAqB,CAAC,UAqBxB,CAAC"}