stzReactor

(no comment in the source: the name reads as a sentence) initno extension

(no comment in the source: the name reads as a sentence) handleno extension

(no comment in the source: the name reads as a sentence) versionno extension

── timers ───────────────────────────────────────────────no extension

Block up to nTimeoutMs for the timer; returns 0 (fired), -1 (running/timeout) or -2 (unknown id).no extension

(no comment in the source: the name reads as a sentence) pollno extension

Non-draining peek: -2 unknown, -1 running, 0 ready-to-fetch.no extension

(no comment in the source: the name reads as a sentence) pendingno extension

── async TCP request/response ───────────────────────────no extension

Block up to nTimeoutMs for the response body (empty on error/timeout).no extension

(no comment in the source: the name reads as a sentence) poll tcpno extension

(no comment in the source: the name reads as a sentence) tcp last statusno extension

Submit + await an async TCP request in one call; returns the body.no extension

Run a subprocess on the loop, capture its stdout, report the exit code -- non-Haro workers run OFF-THREAD, drained via the job idiom. The command is the program followed by its arguments. Submit; acArgv = [ program, arg1, arg2, ... ]. Returns a job id.no extension

Block up to nTimeoutMs for the child; returns its stdout.no extension

(no comment in the source: the name reads as a sentence) poll spawnno extension

(no comment in the source: the name reads as a sentence) spawn last statusno extension

Force-kill a spawned child by job id: send nSignum (default SIGKILL=9; SIGTERM=15). On Windows libuv maps these to TerminateProcess. Returns 0 on success, negative on error (-2 not found, -3 already exited, -4 not a spawn / no handle). The kill is mutex-guarded in the engine so it can't race the loop thread reaping the process on its own exit.no extension

SIGKILL by default (the forceful stop for a wedged child).no extension

Submit + await in one call; returns the child's stdout.no extension

A full HTTP(S) request runs on a libuv WORKER thread via curl (native Schannel TLS on Windows) and is drained through the job idiom -- so https:// is genuinely async, no TLS state machine on the loop. Methods: 0=GET 1=POST 2=PUT 3=DELETE 4=HEAD 5=OPTIONS 6=PATCH.no extension

(no comment in the source: the name reads as a sentence) await httpno extension

(no comment in the source: the name reads as a sentence) poll httpno extension

HTTP status code of the last drained request (or < 0 on error).no extension

Submit + await a GET in one call; returns the response body.no extension

Submit + await a POST with a body; returns the response body.no extension

A listener lives on the loop thread; Haro drains EVENTS: [ :accept, nConn, "" ] / [ :data, nConn, cBytes ] / [ :closed, nConn, "" ] / [] when there is none. In http mode each :data event is ONE complete framed HTTP/1.1 request (headers + Content-Length body, pipelining-safe). Raw TCP stream listener (IoT/telemetry). nPort 0 = ephemeral. Returns the server id (>0) or a negative uv error code.no extension

HTTP/1.1 listener: :data events carry complete requests.no extension

STZM message-plane listener (distribution D0): each :data event is ONE complete STZM frame (header + payload). Unpack with StzmUnpack().no extension

TLS-terminating STZM listener (D5): the same framed message plane over the same mbedTLS termination the HTTPS listener uses. A non-empty cCaPath verifies client certs; bRequireClient makes a valid one MANDATORY (mutual TLS node links).no extension

Persistent CLIENT CHANNEL to a peer (distribution D0). The dial is async: the channel id comes back immediately; link-up arrives as an :accept event on ServerPoll/Await (a failed dial as :closed). The channel then speaks the SAME calls a listener does -- ServerWrite to send, ServerPoll to receive, ServerStop to hang up. A link is a link, whichever side dialed.no extension

Raw-stream client channel (:data events carry stream chunks).no extension

STZM channel over CLIENT-role TLS (the mTLS counterpart of ListenTls, on the persistent link): this node PRESENTS cCertPath/cKeyPath for the peer's mutual check ("" for none) and VALIDATES the peer -- see _TlsVerifyMode() for what bVerify may be. Link-up (:accept) fires only when the handshake COMPLETES -- an up channel is a SECURE channel.no extension

Block up to nTimeoutMs for the channel's link-up. Returns the conn id (> 0) to write on, or 0 (dial failed or timed out).no extension

TLS-terminating HTTP listener: each connection runs an mbedTLS handshake (server cert cCertPath + key cKeyPath) before the plaintext HTTP framing -- so the events Haro drains are DECRYPTED requests and ServerWrite responses are encrypted transparently. A non-empty cCaPath turns on client-cert verification; bRequireClient = TRUE makes a valid client cert MANDATORY (mutual TLS). Returns the server id (>0) or a negative error (TLS setup errors are -10..-17). Engine-terminated TLS.no extension

One-way server TLS convenience (no client cert): serve HTTPS with just a server cert + key.no extension

Send cRequest (raw HTTP bytes) to cHost:nPort over TLS and return the response bytes ("" on failure -- see TlsClientStatus). This node PRESENTS the client cert cCertPath/cKeyPath (for the peer's mutual check; pass "" for none), and VALIDATES the peer's server cert (hostname checked via SNI) -- see _TlsVerifyMode() for bVerify. A dedicated mbedTLS transport (PEM certs + mutual auth), separate from the curl path used for general outbound HTTPS.no extension

Convenience: build + send a GET over TLS. Same cert/verify semantics.no extension

Result of the last TlsRequest: 0 ok, -1 connect, -2 handshake (an untrusted/invalid peer SERVER cert aborts here), -3 cert verify, -4 setup, -18 verification switched off without :InsecureNoVerify, -19 no trust anchor. NOTE: a server rejecting a MISSING client cert is enforced SERVER-side -- under TLS 1.3 the client's handshake still completes (status 0) but the protected response comes back EMPTY. So the authoritative "was I let in?" check is the RESPONSE body, not status.no extension

Actual bound port (useful after nPort = 0).no extension

tls client (the mtls counterpart to listenhttptls)no extension

Drain one event without blocking; [] if none.no extension

Block up to nTimeoutMs for one event; [] on timeout.no extension

Write to a connection; bCloseAfter closes it once the write lands.no extension

tls client (the mtls counterpart to listenhttptls)no extension

Bounded inbox (distribution D1): cap the QUEUED data events with a declared overflow policy -- :DropOldest / :DropNewest / :Refuse (reject and hang up, so the sender observes it). nCap 0 = unbounded. Overflow is COUNTED (ServerOverflow), never silent.no extension

tls client (the mtls counterpart to listenhttptls)no extension

tls client (the mtls counterpart to listenhttptls)no extension

tls client (the mtls counterpart to listenhttptls)no extension

── teardown ─────────────────────────────────────────────no extension