1	# Byte-exact TCP, UDP, and TLS sockets. Source: https://github.com/paymog/bend-kit/tree/main/wire
2	import Base
3	
4	# Socket IO on octets: one Char per byte (0..255). Base's TCP/UDP effects
5	# decode UTF-8, which breaks byte counts and binary protocols.
6	# ms arguments are deadlines in milliseconds (0: none unless stated otherwise).
7	# A deadline miss is ETIMEDOUT.
8	#   import ./wire.bend as Wire
9	
10	# TCP connect to a numeric IPv4 or IPv6 address, with a deadline.
11	def connect(host: String, port: U32, ms: U32) ->
12	  IO(Result<&1, &1, U32 & String, Socket>):
13	  import "./effs/wire.c"
14	  import "./effs/wire.js"
15	
16	# One monotonic accept budget, ms: 1..2147483647. Every outcome returns the
17	# actual listener; timeout leaves it usable. Cooperative scheduling does not
18	# preempt arbitrary CPU work or blocking effects.
19	def accept.deadline(listener: Listener, ms: U32) ->
20	  IO(Listener & Result<&1, &1, U32 & String, Socket>):
21	  import "./effs/wire.c"
22	  import "./effs/wire.js"
23	
24	# Octet-String TCP and UDP effects are the slow path: one Char cell per byte.
25	def recv(sock: Socket, max: U32, ms: U32) ->
26	  IO(Socket & Result<&1, &1, U32 & String, String>):
27	  import "./effs/wire.c"
28	  import "./effs/wire.js"
29	
30	def send(sock: Socket, data: String) ->
31	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
32	  import "./effs/wire.c"
33	  import "./effs/wire.js"
34	
35	def recv_from(sock: Socket, max: U32, ms: U32) ->
36	  IO(Socket & Result<&1, &1, U32 & String, String & U32 & String>):
37	  import "./effs/wire.c"
38	  import "./effs/wire.js"
39	
40	def send_to(sock: Socket, host: String, port: U32, data: String) ->
41	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
42	  import "./effs/wire.c"
43	  import "./effs/wire.js"
44	
45	# TLS over a connected TCP socket (OpenSSL 3, loaded at run time; BEND_LIBSSL
46	# overrides its path). The certificate chain and host name are always checked.
47	def tls.connect(sock: Socket, host: String, ms: U32) ->
48	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
49	  import "./effs/wire.c"
50	  import "./effs/wire.js"
51	
52	# Use a PEM certificate chain and its private key for mutual TLS.
53	# A load failure is EINVAL; a handshake or server verification failure is EPROTO.
54	def tls.connect.cert(sock: Socket, host: String, ms: U32, cert_path: String, key_path: String) ->
55	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
56	  import "./effs/wire.c"
57	  import "./effs/wire.js"
58	
59	# protos is a comma-separated ALPN list (for example "h2,http/1.1").
60	def tls.connect.alpn(sock: Socket, host: String, ms: U32, protos: String) ->
61	  IO(Socket & Result<&1, &1, U32 & String, String>):
62	  import "./effs/wire.c"
63	  import "./effs/wire.js"
64	
65	# The String TLS effects are the slow path: one Char cell per octet.
66	def tls.send(sock: Socket, data: String) ->
67	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
68	  import "./effs/wire.c"
69	  import "./effs/wire.js"
70	
71	# "" once the peer sends close_notify. A bare EOF is an error.
72	def tls.recv(sock: Socket, max: U32, ms: U32) ->
73	  IO(Socket & Result<&1, &1, U32 & String, String>):
74	  import "./effs/wire.c"
75	  import "./effs/wire.js"
76	
77	# Ends the TLS session and closes the socket.
78	def tls.close(sock: Socket) -> IO(Unit):
79	  import "./effs/wire.c"
80	  import "./effs/wire.js"
81	
82	# The .words forms move (len, words): bytes packed four to a U32, laid out as
83	# bytes/bytes.bend packs them, so no String cell is made per byte.
84	def recv.words(sock: Socket, max: U32, ms: U32) ->
85	  IO(Socket & Result<&1, &1, U32 & String, U32 & Array<U32>>):
86	  import "./effs/wire.c"
87	  import "./effs/wire.js"
88	
89	# len past the end of words fails with EINVAL.
90	def send.words(sock: Socket, len: U32, words: Array<U32>) ->
91	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
92	  import "./effs/wire.c"
93	  import "./effs/wire.js"
94	
95	# Total write budget, including packing; ms must be 1..2147483647.
96	# Returns socket, bytes accepted locally, and outcome on every path. Consumes
97	# words on every path. Timeout/disconnect may leave a sent prefix: close the
98	# returned socket, do not replay the whole buffer. Success is not peer receipt.
99	def send.words.deadline(sock: Socket, len: U32, words: Array<U32>, ms: U32) ->
100	  IO(Socket & (U32 & Result<&1, &1, U32 & String, Unit>)):
101	  import "./effs/wire.c"
102	  import "./effs/wire.js"
103	
104	# UDP keeps the sender address and port beside the packed datagram.
105	def recv_from.words(sock: Socket, max: U32, ms: U32) ->
106	  IO(Socket & Result<&1, &1, U32 & String, String & U32 & (U32 & Array<U32>)>):
107	  import "./effs/wire.c"
108	  import "./effs/wire.js"
109	
110	# len past the end of words fails with EINVAL.
111	def send_to.words(sock: Socket, host: String, port: U32, len: U32, words: Array<U32>) ->
112	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
113	  import "./effs/wire.c"
114	  import "./effs/wire.js"
115	
116	# len 0 once the peer sends close_notify.
117	def tls.recv.words(sock: Socket, max: U32, ms: U32) ->
118	  IO(Socket & Result<&1, &1, U32 & String, U32 & Array<U32>>):
119	  import "./effs/wire.c"
120	  import "./effs/wire.js"
121	
122	def tls.send.words(sock: Socket, len: U32, words: Array<U32>) ->
123	  IO(Socket & Result<&1, &1, U32 & String, Unit>):
124	  import "./effs/wire.c"
125	  import "./effs/wire.js"