wire-mesh 0.0.0 → 1.0.1

package/dist/server.mjs

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+import { createNodeWebSocketTransport } from "./adapters/node-websocket-transport.mjs";
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { dirname, extname, join, normalize, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createRelayHub } from "wire-mesh-core/domain/relay-hub";
+//#region src/static-console.ts
+const CONTENT_TYPES = {
+	".css": "text/css; charset=utf-8",
+	".html": "text/html; charset=utf-8",
+	".ico": "image/x-icon",
+	".js": "application/javascript; charset=utf-8",
+	".json": "application/json; charset=utf-8",
+	".mjs": "application/javascript; charset=utf-8",
+	".png": "image/png",
+	".svg": "image/svg+xml",
+	".webmanifest": "application/manifest+json; charset=utf-8",
+	".woff2": "font/woff2"
+};
+const DEFAULT_CONTENT_TYPE = "application/octet-stream";
+const INDEX_FILE = "index.html";
+const SERVICE_WORKER_ALLOWED_HEADERS = { "Service-Worker-Allowed": "/" };
+/** Resolves `pathname` (a request URL's raw, still percent-encoded path) to a file under `consoleDir`. Returns undefined for a path that decodes to something outside `consoleDir` (a traversal attempt), a malformed percent-encoding, or a real 404 — an extension-bearing path with no matching file. */
+function resolveConsoleFile(consoleDir, pathname) {
+	let decoded;
+	try {
+		decoded = decodeURIComponent(pathname);
+	} catch {
+		return;
+	}
+	const root = normalize(consoleDir);
+	const relative = decoded === "/" ? INDEX_FILE : decoded.replace(/^\/+/, "");
+	let filePath = normalize(join(root, relative));
+	if (!filePath.startsWith(root + sep) && filePath !== root) return;
+	if (!existsSync(filePath) || !statSync(filePath).isFile()) {
+		if (extname(decoded) !== "") return;
+		filePath = join(root, INDEX_FILE);
+		if (!existsSync(filePath) || !statSync(filePath).isFile()) return;
+	}
+	const contentType = CONTENT_TYPES[extname(filePath)] ?? DEFAULT_CONTENT_TYPE;
+	return {
+		body: readFileSync(filePath),
+		contentType,
+		...filePath.endsWith("sw.js") ? { headers: SERVICE_WORKER_ALLOWED_HEADERS } : {}
+	};
+}
+//#endregion
+//#region src/server.ts
+function healthResponse() {
+	return {
+		ok: true,
+		node: "wire-mesh",
+		roles: ["relay"]
+	};
+}
+const DEFAULT_BIND_ADDRESS = "0.0.0.0:8787";
+const HTTP_OK = 200;
+const HTTP_NOT_FOUND = 404;
+const HEALTH_PATH = "/health";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const CONSOLE_DIR = join(__dirname, "web-console");
+function bindAddressFromArgs(argv) {
+	const flagIndex = argv.indexOf("--bind");
+	return (flagIndex === -1 ? void 0 : argv[flagIndex + 1]) ?? DEFAULT_BIND_ADDRESS;
+}
+/** Reads --tls-cert/--tls-key from argv, required together — a self-hosted node answering wss:// (wire-mesh#184, so an https://-served PWA can reach it without mixed-content blocking) needs an operator-supplied certificate; this package generates none of its own, matching the README's security note. Returns undefined when neither flag is given, the existing plain-ws:// default. */
+function tlsFromArgs(argv) {
+	const certIndex = argv.indexOf("--tls-cert");
+	const keyIndex = argv.indexOf("--tls-key");
+	const certPath = certIndex === -1 ? void 0 : argv[certIndex + 1];
+	const keyPath = keyIndex === -1 ? void 0 : argv[keyIndex + 1];
+	if (certPath === void 0 && keyPath === void 0) return;
+	if (certPath === void 0 || keyPath === void 0) throw new Error("--tls-cert and --tls-key must be given together");
+	return {
+		certPath,
+		keyPath
+	};
+}
+/** Builds the listener's onHttpRequest handler: /health answers the same JSON shape healthResponse() returns, everything else resolves against consoleDir via resolveConsoleFile. Takes consoleDir as a parameter, not a module-level constant, so a test can point it at a temp fixture instead of the real build-time CONSOLE_DIR. */
+function createHttpRequestHandler(consoleDir) {
+	return (request, response) => {
+		const url = new URL(request.url ?? "/", "http://localhost");
+		if (url.pathname === HEALTH_PATH) {
+			response.writeHead(HTTP_OK, { "content-type": "application/json" });
+			response.end(JSON.stringify(healthResponse()));
+			return;
+		}
+		const file = resolveConsoleFile(consoleDir, url.pathname);
+		if (file) {
+			response.writeHead(HTTP_OK, {
+				"content-type": file.contentType,
+				...file.headers
+			});
+			response.end(file.body);
+			return;
+		}
+		response.writeHead(HTTP_NOT_FOUND).end();
+	};
+}
+function logStartup(message) {
+	console.log(message);
+}
+async function main() {
+	const argv = process.argv.slice(2);
+	const tlsFiles = tlsFromArgs(argv);
+	const tls = tlsFiles ? {
+		certificatePem: readFileSync(tlsFiles.certPath, "utf-8"),
+		privateKeyPem: readFileSync(tlsFiles.keyPath, "utf-8")
+	} : void 0;
+	const hub = createRelayHub();
+	const listener = await createNodeWebSocketTransport({
+		onHttpRequest: createHttpRequestHandler(CONSOLE_DIR),
+		...tls ? { tls } : {}
+	}).listen(bindAddressFromArgs(argv), (connection) => {
+		hub.handleConnection(connection);
+	});
+	logStartup(`wire-mesh listening on ${tls ? "wss" : "ws"}://${listener.address}`);
+}
+const invokedPath = process.argv[1];
+if (invokedPath !== void 0 && import.meta.url === `file://${invokedPath}`) main();
+//#endregion
+export { bindAddressFromArgs, createHttpRequestHandler, healthResponse, tlsFromArgs };