hgraph-web
C++-first HTTP/S and WebSocket transports for hgraph, implementing the contract in hgraph RFC 0024. The extension covers all four transports — HTTP(S) server, HTTP(S) client, WebSocket server, and WebSocket client — and exposes the same service model to native C++ and Python graphs.
One path-bound, multi-interface service_impl owns the sockets, TLS contexts,
and worker threads for a configuration. Serving a route and connecting a
WebSocket are subscription services keyed by the immutable route or connection
key; responding, sending frames, and calling a remote endpoint are
request/reply services; events and statistics are reference services. Graph
output reaches the transport through the implementation's sink inputs, and
requests, frames, delivery reports, events, and stats re-enter the root graph
through bounded push sources. Listeners and clients are created on graph start
and stopped with the graph; there is no user-held server or client object.
Routing lives in the transport rather than the graph. The route key set arrives
as TSS deltas, is compiled into a native route table, and requests are
delivered already keyed by route. Duplicate and ordered headers, multi-value
query parameters, and binary bodies are preserved end to end.
The server speaks HTTP/1.1 and WebSocket over Asio/Beast; the client speaks
HTTP/1.1, HTTP/2, and WebSocket over libcurl. The server ships the complete
HTTP/2 seam — the ALPN callback, protocol dispatch, and configuration
placeholders — and rejects h2 in server ALPN until the nghttp2 session lands
in a v1.x release. TLS termination, mTLS, SNI, and ALPN use OpenSSL on every
platform.
The core hgraph wheel owns a guarded compatibility shim at
hgraph.adaptors.web which delegates to this extension when it is installed.
The released hgraph.adaptors.tornado package is unchanged; whether it is
later re-pointed or deprecated is a separate migration decision. The extension
wheel installs only hgraph_web; it never contributes files to the core
hgraph package.
Status
The HTTP/1.1, HTTP/2 client, and WebSocket service implementations, schemas,
service interfaces, endpoint decorators, and codec helpers are available.
Runnable HTTP server/client and WebSocket loopback examples are in
python/examples.
Build and test
This is a first-party extension in the hgraph monorepo. It remains a separate CMake package and Python distribution: the top-level core package does not link curl, Boost, nghttp2, or OpenSSL, and does not install these modules.
For an in-tree native development build from the repository root:
cmake -S . -B build-web \
-DHGRAPH_BUILD_WEB_EXTENSION=ON \
-DBUILD_TESTING=ON
cmake --build build-web --parallel
ctest --test-dir build-web --output-on-failure
The extension can still be configured independently against an installed hgraph SDK:
cmake -S . -B build -DCMAKE_PREFIX_PATH=/path/to/hgraph/install
cmake --build build --parallel
ctest --test-dir build --output-on-failure
Each third-party dependency arrives with the translation unit that links it,
resolved with find_package(... CONFIG QUIET) first and falling back to a
pinned static FetchContent build. The skeleton links only hgraph::core.
Build its separately deployable ABI3 wheel from the repository root after
making the matching hgraph SDK discoverable through CMAKE_PREFIX_PATH:
CMAKE_PREFIX_PATH=/path/to/hgraph/sdk \
uv build --wheel --package hgraph-web --python 3.12
The deterministic suite runs against the extension's fake transport, which exercises routing, pacing, reservation, and lifecycle without sockets. A live loopback subset acts as the transport oracle.
Wheel builds require the SDK installed by a stable-ABI hgraph wheel. The
extension rejects an SDK that links Python::Python, because that would pin
the nominal ABI3 module to the build interpreter.
Metadata
Release files for hgraph-web 0.8.25
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| hgraph_web-0.8.25.tar.gz | 207.1 kB | With provenance | Details |
Built distributions (wheels)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| hgraph_web-0.8.25-cp312-abi3-win_amd64.whl | CPython 3.12 | abi3 | Windows x86-64 | Details |
| hgraph_web-0.8.25-cp312-abi3-manylinux_2_28_x86_64.whl | CPython 3.12 | abi3 | Linux glibc 2.28+ x86-64 | Details |
| hgraph_web-0.8.25-cp312-abi3-macosx_15_0_arm64.whl | CPython 3.12 | abi3 | macOS 15.0+ ARM64 | Details |
Total release size: 12.2 MB
Release files / hgraph_web-0.8.25.tar.gz
| Download URL | hgraph_web-0.8.25.tar.gz |
|---|---|
| Size | 207.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b432c79bf505a8474c2ff12c8d98248a43162635a48ca9b6738a7918d20f5b62
|
|
BLAKE2b-256 checksum How to use checksums |
cf33938239cb3d31eb4f728e194b634baad89599193b53d5878300b15812aafa
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / hgraph_web-0.8.25-cp312-abi3-win_amd64.whl
| Download URL | hgraph_web-0.8.25-cp312-abi3-win_amd64.whl |
|---|---|
| Size | 3.6 MB |
| Tags | CPython 3.12 Windows x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
ba91c825045e83f0f5f49beb4de9fcb8146435530c0c891f94e2217b7f7f2f22
|
|
BLAKE2b-256 checksum How to use checksums |
2b3731e86561f88215cfd06108da3abf5bec112dd9722c8e8307a2820e362a35
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / hgraph_web-0.8.25-cp312-abi3-manylinux_2_28_x86_64.whl
| Download URL | hgraph_web-0.8.25-cp312-abi3-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 5.2 MB |
| Tags | CPython 3.12 Linux glibc 2.28+ x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
d50949b49841eeb91f0294907e608599bc721226eb9a60dcc5da220a8d084fcd
|
|
BLAKE2b-256 checksum How to use checksums |
f440d059e75bf3bfe47132dd27f4cfe744d010b84f5ae45d9ba605a320fed27a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / hgraph_web-0.8.25-cp312-abi3-macosx_15_0_arm64.whl
| Download URL | hgraph_web-0.8.25-cp312-abi3-macosx_15_0_arm64.whl |
|---|---|
| Size | 3.1 MB |
| Tags | CPython 3.12 abi3 macOS 15.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
600385c0c88e079492bf72093f6703208d5fd98420d934b17fccff41b9d46bd4
|
|
BLAKE2b-256 checksum How to use checksums |
5fc250c305ba8f4c2e83776c584a0908cf950a3d88cf82517e2e95082b8d1352
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logSecurity for hgraph-web 0.8.25
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 4 files in this release have been uploaded with provenance metadata.
Attestation for hgraph_web-0.8.25.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.