@hatk/hatk 0.0.1-alpha.36 → 0.0.1-alpha.38

package/dist/backfill.js

@@ -200,6 +200,7 @@ export async function backfillRepo(did, collections, fetchTimeout) {
         // Insert records in chunks to limit memory usage
         const CHUNK_SIZE = 1000;
         let chunk = [];
+        const validationSkips = {};
         for (const entry of entries) {
             const collection = entry.path.split('/')[0];
             if (!collections.has(collection))
@@ -216,12 +217,7 @@ export async function backfillRepo(did, collections, fetchTimeout) {
                 const uri = `at://${did}/${collection}/${rkey}`;
                 const validationError = validateRecord(getLexiconArray(), collection, record);
                 if (validationError) {
-                    emit('backfill', 'validation_skip', {
-                        uri,
-                        collection,
-                        path: validationError.path,
-                        error: validationError.message,
-                    });
+                    validationSkips[collection] = (validationSkips[collection] || 0) + 1;
                     continue;
                 }
                 chunk.push({ collection, uri, cid: entry.cid, did, record });
@@ -242,6 +238,10 @@ export async function backfillRepo(did, collections, fetchTimeout) {
         if (chunk.length > 0) {
             count += await bulkInsertRecords(chunk);
         }
+        const totalSkips = Object.values(validationSkips).reduce((a, b) => a + b, 0);
+        if (totalSkips > 0) {
+            emit('backfill', 'validation_skips', { did, total: totalSkips, by_collection: validationSkips });
+        }
         await setRepoStatus(did, 'active', commit.rev, { handle });
         return count;
     }

package/dist/cli.js

@@ -1304,7 +1304,7 @@ else if (command === 'generate') {
         out += `import type { ${[...usedWrappers].sort().join(', ')}, LexServerParams, Checked, Prettify, StrictArg } from '@hatk/hatk/lex-types'\n`;
         out += `import type { XrpcContext } from '@hatk/hatk/xrpc'\n`;
         out += `import { callXrpc as _callXrpc } from '@hatk/hatk/xrpc'\n`;
-        out += `import { defineFeed as _defineFeed, type FeedResult, type FeedContext, type HydrateContext } from '@hatk/hatk/feeds'\n`;
+        out += `import { defineFeed as _defineFeed, type FeedResult, type FeedContext, type HydrateContext, type Row } from '@hatk/hatk/feeds'\n`;
         out += `import { seed as _seed, type SeedOpts } from '@hatk/hatk/seed'\n`;
         // Emit ALL lexicons as `const ... = {...} as const` (including defs-only)
         out += `\n// ─── Lexicon Definitions ────────────────────────────────────────────\n\n`;
@@ -1460,11 +1460,11 @@ else if (command === 'generate') {
         out += `}\n`;
         // Emit Ctx helper for typesafe XRPC handler contexts
         out += `\n// ─── XRPC Helpers ───────────────────────────────────────────────────\n\n`;
-        out += `export type { HydrateContext } from '@hatk/hatk/feeds'\n`;
+        out += `export type { HydrateContext, Row } from '@hatk/hatk/feeds'\n`;
         out += `export { InvalidRequestError, NotFoundError } from '@hatk/hatk/xrpc'\n`;
         out += `export { defineSetup } from '@hatk/hatk/setup'\n`;
         out += `export { defineHook } from '@hatk/hatk/hooks'\n`;
-        out += `export { defineLabels } from '@hatk/hatk/labels'\n`;
+        out += `export { defineLabel } from '@hatk/hatk/labels'\n`;
         out += `export { defineOG } from '@hatk/hatk/opengraph'\n`;
         out += `export { defineRenderer } from '@hatk/hatk/renderer'\n`;
         out += `export type Ctx<K extends keyof XrpcSchema & keyof Registry> = XrpcContext<\n`;
@@ -1571,9 +1571,10 @@ else if (command === 'generate') {
         clientOut += `export async function callXrpc<K extends keyof XrpcSchema & string>(\n`;
         clientOut += `  nsid: K,\n`;
         clientOut += `  arg?: CallArg<K>,\n`;
+        clientOut += `  customFetch?: typeof globalThis.fetch,\n`;
         clientOut += `): Promise<OutputOf<K>> {\n`;
-        // Server-side bridge
-        clientOut += `  if (typeof window === 'undefined') {\n`;
+        // Server-side bridge (skip when customFetch is provided — let SvelteKit's fetch handle it)
+        clientOut += `  if (typeof window === 'undefined' && !customFetch) {\n`;
         clientOut += `    const bridge = (globalThis as any).__hatk_callXrpc\n`;
         clientOut += `    if (!bridge) throw new Error('callXrpc: server bridge not available — is hatk initialized?')\n`;
         if (procedureNsids.length > 0 || blobInputNsids.length > 0) {
@@ -1586,30 +1587,35 @@ else if (command === 'generate') {
         }
         clientOut += `    return bridge(nsid, arg) as Promise<OutputOf<K>>\n`;
         clientOut += `  }\n`;
-        // Client-side fetch
-        clientOut += `  const url = new URL(\`/xrpc/\${nsid}\`, window.location.origin)\n`;
+        // Client-side fetch (or server-side with customFetch for SSR deduplication)
+        clientOut += `  const _fetch = customFetch ?? globalThis.fetch\n`;
+        clientOut += `  // Use relative URL so SvelteKit's fetch can deduplicate server/client requests\n`;
+        clientOut += `  let path = \`/xrpc/\${nsid}\`\n`;
         if (blobInputNsids.length > 0) {
             clientOut += `  if (_blobInputs.has(nsid)) {\n`;
             clientOut += `    const blob = arg as Blob | ArrayBuffer\n`;
             clientOut += `    const ct = blob instanceof Blob ? blob.type : 'application/octet-stream'\n`;
-            clientOut += `    const res = await fetch(url, { method: 'POST', headers: { 'Content-Type': ct }, body: blob })\n`;
+            clientOut += `    const res = await _fetch(path, { method: 'POST', headers: { 'Content-Type': ct }, body: blob })\n`;
             clientOut += `    if (!res.ok) throw new Error(\`XRPC \${nsid} failed: \${res.status}\`)\n`;
             clientOut += `    return res.json() as Promise<OutputOf<K>>\n`;
             clientOut += `  }\n`;
         }
         if (procedureNsids.length > 0) {
             clientOut += `  if (_procedures.has(nsid)) {\n`;
-            clientOut += `    const res = await fetch(url, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(arg) })\n`;
-            clientOut += `    if (res.status === 401) { window.location.href = '/oauth/login'; return new Promise(() => {}) as any }\n`;
+            clientOut += `    const res = await _fetch(path, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(arg) })\n`;
+            clientOut += `    if (typeof window !== 'undefined' && res.status === 401) { const _h = getViewer()?.handle; window.location.href = _h ? \`/oauth/login?handle=\${encodeURIComponent(_h)}\` : '/oauth/login'; return new Promise(() => {}) as any }\n`;
             clientOut += `    if (!res.ok) throw new Error(\`XRPC \${nsid} failed: \${res.status}\`)\n`;
             clientOut += `    return res.json() as Promise<OutputOf<K>>\n`;
             clientOut += `  }\n`;
         }
+        clientOut += `  const params = new URLSearchParams()\n`;
         clientOut += `  for (const [k, v] of Object.entries(arg || {})) {\n`;
-        clientOut += `    if (v != null) url.searchParams.set(k, String(v))\n`;
+        clientOut += `    if (v != null) params.set(k, String(v))\n`;
         clientOut += `  }\n`;
-        clientOut += `  const res = await fetch(url)\n`;
-        clientOut += `  if (res.status === 401) { window.location.href = '/oauth/login'; return new Promise(() => {}) as any }\n`;
+        clientOut += `  const qs = params.toString()\n`;
+        clientOut += `  if (qs) path += \`?\${qs}\`\n`;
+        clientOut += `  const res = await _fetch(path)\n`;
+        clientOut += `  if (typeof window !== 'undefined' && res.status === 401) { window.location.href = '/oauth/login'; return new Promise(() => {}) as any }\n`;
         clientOut += `  if (!res.ok) throw new Error(\`XRPC \${nsid} failed: \${res.status}\`)\n`;
         clientOut += `  return res.json() as Promise<OutputOf<K>>\n`;
         clientOut += `}\n`;
@@ -1617,6 +1623,43 @@ else if (command === 'generate') {
         clientOut += `\nexport function getViewer(): { did: string; handle: string } | null {\n`;
         clientOut += `  return (globalThis as any).__hatk_viewer ?? null\n`;
         clientOut += `}\n`;
+        // Auth helpers — login, logout, viewerDid
+        clientOut += `\n// ─── Auth Helpers ────────────────────────────────────────────────────\n\n`;
+        clientOut += `export async function login(handle: string): Promise<void> {\n`;
+        clientOut += `  const res = await fetch(\`/oauth/login?handle=\${encodeURIComponent(handle)}\`, { redirect: 'manual' })\n`;
+        clientOut += `  if (res.type === 'opaqueredirect') {\n`;
+        clientOut += `    window.location.href = \`/oauth/login?handle=\${encodeURIComponent(handle)}\`\n`;
+        clientOut += `    return\n`;
+        clientOut += `  }\n`;
+        clientOut += `  if (res.ok) return\n`;
+        clientOut += `  const body = await res.json().catch(() => ({ error: 'Login failed' }))\n`;
+        clientOut += `  throw new Error(body.error || 'Login failed')\n`;
+        clientOut += `}\n\n`;
+        clientOut += `export async function logout(): Promise<void> {\n`;
+        clientOut += `  ;(globalThis as any).__hatk_viewer = null\n`;
+        clientOut += `  await fetch('/auth/logout', { method: 'POST' }).catch(() => {})\n`;
+        clientOut += `}\n\n`;
+        clientOut += `export function viewerDid(): string | null {\n`;
+        clientOut += `  if (typeof window === 'undefined') return null\n`;
+        clientOut += `  const viewer = (globalThis as any).__hatk_viewer\n`;
+        clientOut += `  return viewer?.did ?? null\n`;
+        clientOut += `}\n\n`;
+        clientOut += `// Expose viewer for getViewer() bridge\n`;
+        clientOut += `;(globalThis as any).__hatk_auth = { viewerDid }\n`;
+        // parseViewer — server-side session cookie resolution for +layout.server.ts
+        clientOut += `\n// ─── Server Helpers ──────────────────────────────────────────────────\n\n`;
+        clientOut += `export async function parseViewer(cookies: { get(name: string): string | undefined }): Promise<{ did: string; handle?: string } | null> {\n`;
+        clientOut += `  const parseSessionCookie = (globalThis as any).__hatk_parseSessionCookie\n`;
+        clientOut += `  if (!parseSessionCookie) return null\n`;
+        clientOut += `  const cookieValue = cookies.get('__hatk_session')\n`;
+        clientOut += `  if (!cookieValue) return null\n`;
+        clientOut += `  try {\n`;
+        clientOut += `    const request = new Request('http://localhost', { headers: { cookie: \`__hatk_session=\${cookieValue}\` } })\n`;
+        clientOut += `    const viewer = await parseSessionCookie(request)\n`;
+        clientOut += `    if (viewer) (globalThis as any).__hatk_viewer = viewer\n`;
+        clientOut += `    return viewer\n`;
+        clientOut += `  } catch { return null }\n`;
+        clientOut += `}\n`;
         writeFileSync('./hatk.generated.client.ts', clientOut);
         console.log(`Generated ${outPath} with ${entries.length} types: ${entries.map((e) => capitalize(varNames.get(e.nsid))).join(', ')}`);
         console.log(`Generated ./hatk.generated.client.ts (client-safe subset)`);

package/dist/cloudflare/container.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Cloudflare Container entry point for hatk.
+ *
+ * Runs as a long-lived Node.js process alongside the Worker. Handles the
+ * firehose indexer and backfill loop — the Worker delegates resync requests
+ * here via RPC (Cloudflare Container service bindings).
+ *
+ * No HTTP server — all communication is via the Container RPC interface.
+ */
+export interface Env {
+    /** Cloudflare D1 database binding */
+    DB: D1Database;
+    HATK_RELAY: string;
+    HATK_PLC: string;
+    HATK_OAUTH_ISSUER?: string;
+    HATK_OAUTH_SCOPES?: string;
+    HATK_ADMINS?: string;
+    HATK_COLLECTIONS?: string;
+    HATK_BACKFILL_PARALLELISM?: string;
+    HATK_BACKFILL_FETCH_TIMEOUT?: string;
+    HATK_BACKFILL_MAX_RETRIES?: string;
+    HATK_BACKFILL_FULL_NETWORK?: string;
+    HATK_BACKFILL_REPOS?: string;
+    HATK_BACKFILL_SIGNAL_COLLECTIONS?: string;
+}
+interface D1Database {
+    prepare(sql: string): any;
+    batch<T = unknown>(statements: any[]): Promise<any[]>;
+    exec(sql: string): Promise<any>;
+}
+/**
+ * Resync a single DID by triggering auto-backfill.
+ * Called by the Worker via Container service binding RPC.
+ */
+declare function resync(did: string): Promise<void>;
+/**
+ * Trigger a full re-enumeration backfill of all repos.
+ * Called by the Worker via Container service binding RPC.
+ */
+declare function resyncAll(): Promise<void>;
+/**
+ * Return basic status info about the Container.
+ * Called by the Worker for health checks / admin UI.
+ */
+declare function getStatus(): {
+    initialized: boolean;
+    collections: string[];
+    uptimeMs: number;
+};
+/**
+ * Cloudflare Container entry point.
+ *
+ * Containers expose RPC methods that the Worker can call via the service binding.
+ * The Container also handles fetch requests routed from the Worker, but for hatk
+ * all Worker-to-Container communication uses the RPC methods above.
+ */
+declare const _default: {
+    /**
+     * Container startup — called when the Container is first instantiated.
+     * Initializes the database, starts the firehose, and begins backfill.
+     */
+    start(env: Env): Promise<void>;
+    /**
+     * Handle fetch requests forwarded from the Worker.
+     * The Container doesn't serve HTTP — return 404 for any direct requests.
+     */
+    fetch(request: Request, env: Env): Promise<Response>;
+    resync: typeof resync;
+    resyncAll: typeof resyncAll;
+    getStatus: typeof getStatus;
+};
+export default _default;
+//# sourceMappingURL=container.d.ts.map

package/dist/cloudflare/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/cloudflare/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0BH,MAAM,WAAW,GAAG;IAClB,qCAAqC;IACrC,EAAE,EAAE,UAAU,CAAA;IAGd,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAGzB,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gCAAgC,CAAC,EAAE,MAAM,CAAA;CAC1C;AAGD,UAAU,UAAU;IAClB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;IACzB,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACrD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;CAChC;AAoLD;;;GAGG;AACH,iBAAe,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhD;AAED;;;GAGG;AACH,iBAAe,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAExC;AAED;;;GAGG;AACH,iBAAS,SAAS,IAAI;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAMtF;AAID;;;;;;GAMG;;IAED;;;OAGG;eACc,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpC;;;OAGG;mBACkB,OAAO,OAAO,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;;;;;AAb5D,wBA0BC"}

package/dist/cloudflare/container.js

@@ -0,0 +1,232 @@
+/**
+ * Cloudflare Container entry point for hatk.
+ *
+ * Runs as a long-lived Node.js process alongside the Worker. Handles the
+ * firehose indexer and backfill loop — the Worker delegates resync requests
+ * here via RPC (Cloudflare Container service bindings).
+ *
+ * No HTTP server — all communication is via the Container RPC interface.
+ */
+import { D1Adapter } from "../database/adapters/d1.js";
+import { initDatabase, getCursor, migrateSchema } from "../database/db.js";
+import { storeLexicons, discoverCollections, buildSchemas } from "../database/schema.js";
+import { discoverViews } from "../views.js";
+import { getDialect } from "../database/dialect.js";
+import { setSearchPort } from "../database/fts.js";
+import { rebuildAllIndexes } from "../database/fts.js";
+import { registerCoreHandlers } from "../server.js";
+import { configureRelay } from "../xrpc.js";
+import { startIndexer, triggerAutoBackfill } from "../indexer.js";
+import { runBackfill } from "../backfill.js";
+import { relayHttpUrl } from "../config.js";
+import { validateLexicons } from '@bigmoves/lexicon';
+import { log } from "../logger.js";
+// ---------- Container state ----------
+let initialized = false;
+let initPromise = null;
+let collections = [];
+let collectionSet = new Set();
+let backfillOpts = null;
+let startedAt = 0;
+/**
+ * One-time initialization. Mirrors main.ts startup minus the HTTP server.
+ */
+async function initialize(env) {
+    startedAt = Date.now();
+    // 1. Parse config from env vars
+    const relay = env.HATK_RELAY || 'wss://bsky.network';
+    const plc = env.HATK_PLC || 'https://plc.directory';
+    configureRelay(relay);
+    const admins = env.HATK_ADMINS ? env.HATK_ADMINS.split(',').map((s) => s.trim()) : [];
+    // 2. Load lexicons — injected at build time via virtual module
+    let lexicons;
+    try {
+        // @ts-expect-error — virtual module generated at build time
+        const lexiconModule = await import('virtual:hatk-lexicons');
+        lexicons = new Map(Object.entries(lexiconModule.default));
+    }
+    catch {
+        lexicons = new Map();
+    }
+    const lexiconErrors = validateLexicons([...lexicons.values()]);
+    if (lexiconErrors) {
+        for (const [nsid, errors] of Object.entries(lexiconErrors)) {
+            for (const err of errors) {
+                console.error(`[container] Invalid lexicon ${nsid}: ${err}`);
+            }
+        }
+        throw new Error('Invalid lexicons — check build output');
+    }
+    storeLexicons(lexicons);
+    // 3. Determine collections
+    collections = env.HATK_COLLECTIONS
+        ? env.HATK_COLLECTIONS.split(',').map((s) => s.trim())
+        : discoverCollections(lexicons);
+    collectionSet = new Set(collections);
+    if (collections.length === 0) {
+        log('[container] No record collections found — running in indexer-only mode');
+    }
+    log(`[container] Loaded config: ${collections.length} collections`);
+    // 4. Build schemas and init D1
+    discoverViews();
+    const engineDialect = getDialect('d1');
+    const { schemas, ddlStatements } = buildSchemas(lexicons, collections, engineDialect);
+    const adapter = new D1Adapter();
+    adapter.initWithBinding(env.DB);
+    setSearchPort(null); // D1 uses SQLite FTS natively
+    await initDatabase(adapter, ':memory:', schemas, ddlStatements);
+    // Auto-migrate schema if lexicons changed
+    const migrationChanges = await migrateSchema(schemas);
+    if (migrationChanges.length > 0) {
+        log(`[container] Applied ${migrationChanges.length} schema migration(s)`);
+    }
+    // 5. Init server directory handlers (feeds, labels, hooks, xrpc, setup)
+    //    In Containers, we load these via the bundled virtual module like the Worker.
+    //    The server/ directory scanning won't work in a Container since there's no filesystem
+    //    layout matching the dev project. For now, register core handlers only.
+    //    When build tooling (Task 7) bundles server handlers, they'll be imported here.
+    const oauthConfig = env.HATK_OAUTH_ISSUER
+        ? {
+            issuer: env.HATK_OAUTH_ISSUER,
+            scopes: env.HATK_OAUTH_SCOPES ? env.HATK_OAUTH_SCOPES.split(',').map((s) => s.trim()) : ['read', 'write'],
+            clients: [],
+        }
+        : null;
+    registerCoreHandlers(collections, oauthConfig);
+    // 6. Parse backfill config
+    const backfillConfig = {
+        fullNetwork: env.HATK_BACKFILL_FULL_NETWORK === 'true',
+        parallelism: env.HATK_BACKFILL_PARALLELISM ? parseInt(env.HATK_BACKFILL_PARALLELISM, 10) : 10,
+        fetchTimeout: env.HATK_BACKFILL_FETCH_TIMEOUT ? parseInt(env.HATK_BACKFILL_FETCH_TIMEOUT, 10) : 30,
+        maxRetries: env.HATK_BACKFILL_MAX_RETRIES ? parseInt(env.HATK_BACKFILL_MAX_RETRIES, 10) : 5,
+        repos: env.HATK_BACKFILL_REPOS ? env.HATK_BACKFILL_REPOS.split(',').map((s) => s.trim()) : undefined,
+        signalCollections: env.HATK_BACKFILL_SIGNAL_COLLECTIONS
+            ? env.HATK_BACKFILL_SIGNAL_COLLECTIONS.split(',').map((s) => s.trim())
+            : undefined,
+    };
+    backfillOpts = {
+        pdsUrl: relayHttpUrl(relay),
+        plcUrl: plc,
+        collections: collectionSet,
+        config: backfillConfig,
+    };
+    // 7. Start firehose indexer
+    const cursor = await getCursor('relay');
+    startIndexer({
+        relayUrl: relay,
+        collections: collectionSet,
+        signalCollections: backfillConfig.signalCollections ? new Set(backfillConfig.signalCollections) : undefined,
+        pinnedRepos: backfillConfig.repos ? new Set(backfillConfig.repos) : undefined,
+        cursor,
+        fetchTimeout: backfillConfig.fetchTimeout,
+        maxRetries: backfillConfig.maxRetries,
+        parallelism: backfillConfig.parallelism,
+    });
+    log('[container] Firehose indexer started');
+    // 8. Run backfill in background
+    runBackfillAndRestart();
+    initialized = true;
+    log('[container] Initialization complete');
+}
+/**
+ * Run backfill, rebuild FTS indexes, and restart the process if records
+ * were imported (to reclaim memory from CAR parsing). Mirrors main.ts behavior.
+ */
+function runBackfillAndRestart() {
+    if (!backfillOpts)
+        return;
+    runBackfill(backfillOpts)
+        .then(async (recordCount) => {
+        log('[container] Backfill complete, building FTS indexes...');
+        await rebuildAllIndexes(collections);
+        log('[container] FTS indexes ready');
+        return recordCount;
+    })
+        .then((recordCount) => {
+        if (recordCount > 0) {
+            log('[container] Restarting to reclaim memory...');
+            process.exit(1);
+        }
+    })
+        .catch((err) => {
+        console.error('[container] Backfill error:', err.message);
+    });
+}
+/**
+ * Ensure initialization has completed. Uses a shared promise so concurrent
+ * RPC calls don't trigger multiple inits.
+ */
+function ensureInit(env) {
+    if (initialized)
+        return Promise.resolve();
+    if (!initPromise) {
+        initPromise = initialize(env).catch((err) => {
+            initPromise = null;
+            throw err;
+        });
+    }
+    return initPromise;
+}
+// ---------- RPC methods ----------
+/**
+ * Resync a single DID by triggering auto-backfill.
+ * Called by the Worker via Container service binding RPC.
+ */
+async function resync(did) {
+    await triggerAutoBackfill(did);
+}
+/**
+ * Trigger a full re-enumeration backfill of all repos.
+ * Called by the Worker via Container service binding RPC.
+ */
+async function resyncAll() {
+    runBackfillAndRestart();
+}
+/**
+ * Return basic status info about the Container.
+ * Called by the Worker for health checks / admin UI.
+ */
+function getStatus() {
+    return {
+        initialized,
+        collections,
+        uptimeMs: startedAt > 0 ? Date.now() - startedAt : 0,
+    };
+}
+// ---------- Container export ----------
+/**
+ * Cloudflare Container entry point.
+ *
+ * Containers expose RPC methods that the Worker can call via the service binding.
+ * The Container also handles fetch requests routed from the Worker, but for hatk
+ * all Worker-to-Container communication uses the RPC methods above.
+ */
+export default {
+    /**
+     * Container startup — called when the Container is first instantiated.
+     * Initializes the database, starts the firehose, and begins backfill.
+     */
+    async start(env) {
+        await ensureInit(env);
+    },
+    /**
+     * Handle fetch requests forwarded from the Worker.
+     * The Container doesn't serve HTTP — return 404 for any direct requests.
+     */
+    async fetch(request, env) {
+        await ensureInit(env);
+        return new Response(JSON.stringify({ error: 'Container does not serve HTTP requests' }), {
+            status: 404,
+            headers: { 'Content-Type': 'application/json' },
+        });
+    },
+    // RPC methods exposed to the Worker via service binding
+    resync,
+    resyncAll,
+    getStatus,
+};
+// Graceful shutdown
+process.on('SIGTERM', () => {
+    log('[container] Received SIGTERM, shutting down...');
+    process.exit(0);
+});

package/dist/cloudflare/hooks.d.ts

@@ -0,0 +1,33 @@
+/**
+ * SvelteKit handle hook for Cloudflare Workers.
+ *
+ * Use with @sveltejs/adapter-cloudflare. Lazily initializes hatk on the first
+ * request using the D1 binding from platform.env, then intercepts hatk API
+ * routes before SvelteKit processes them.
+ *
+ * @example
+ * ```ts
+ * // app/hooks.server.ts
+ * import { createHandle } from '@hatk/hatk/cloudflare/hooks'
+ * export const handle = createHandle()
+ * ```
+ */
+type MaybePromise<T> = T | Promise<T>;
+/** Minimal SvelteKit Handle type to avoid depending on @sveltejs/kit. */
+type Handle = (input: {
+    event: {
+        request: Request;
+        url: URL;
+        platform?: {
+            env?: Record<string, unknown>;
+        };
+    };
+    resolve: (event: any) => MaybePromise<Response>;
+}) => MaybePromise<Response>;
+/**
+ * Create a SvelteKit `handle` function that initializes hatk with D1
+ * and intercepts API routes.
+ */
+export declare function createHandle(): Handle;
+export {};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/cloudflare/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/cloudflare/hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;AAErC,yEAAyE;AACzE,KAAK,MAAM,GAAG,CAAC,KAAK,EAAE;IACpB,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAA;QAChB,GAAG,EAAE,GAAG,CAAA;QACR,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAA;KAC7C,CAAA;IACD,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAA;CAChD,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAA;AAE5B;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAsBrC"}

package/dist/cloudflare/hooks.js

@@ -0,0 +1,40 @@
+/**
+ * SvelteKit handle hook for Cloudflare Workers.
+ *
+ * Use with @sveltejs/adapter-cloudflare. Lazily initializes hatk on the first
+ * request using the D1 binding from platform.env, then intercepts hatk API
+ * routes before SvelteKit processes them.
+ *
+ * @example
+ * ```ts
+ * // app/hooks.server.ts
+ * import { createHandle } from '@hatk/hatk/cloudflare/hooks'
+ * export const handle = createHandle()
+ * ```
+ */
+import { ensureInit, getHandler } from "./init.js";
+import { isHatkRoute } from "../adapter.js";
+/**
+ * Create a SvelteKit `handle` function that initializes hatk with D1
+ * and intercepts API routes.
+ */
+export function createHandle() {
+    return async ({ event, resolve }) => {
+        const env = event.platform?.env;
+        if (!env || !env.DB) {
+            // Not running on Cloudflare (e.g. dev mode) — pass through
+            return resolve(event);
+        }
+        // Lazy init hatk with the D1 binding
+        await ensureInit(env);
+        // hatk API routes
+        if (isHatkRoute(event.url.pathname)) {
+            const handler = getHandler();
+            if (handler) {
+                return handler(event.request);
+            }
+        }
+        // Everything else → SvelteKit
+        return resolve(event);
+    };
+}

package/dist/cloudflare/init.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared Cloudflare initialization logic used by both the standalone Worker
+ * entry and the SvelteKit handle hook.
+ */
+export interface CloudflareEnv {
+    DB: D1Database;
+    HATK_RELAY?: string;
+    HATK_PLC?: string;
+    HATK_OAUTH_ISSUER?: string;
+    HATK_OAUTH_SCOPES?: string;
+    HATK_ADMINS?: string;
+    HATK_COLLECTIONS?: string;
+    [key: string]: unknown;
+}
+interface D1Database {
+    prepare(sql: string): any;
+    batch<T = unknown>(statements: any[]): Promise<any[]>;
+    exec(sql: string): Promise<any>;
+}
+/**
+ * Ensure initialization has completed. Concurrent calls share the same promise.
+ */
+export declare function ensureInit(env: CloudflareEnv): Promise<void>;
+/** Get the hatk request handler (only valid after init). */
+export declare function getHandler(): ((request: Request) => Promise<Response>) | null;
+export {};
+//# sourceMappingURL=init.d.ts.map

package/dist/cloudflare/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cloudflare/init.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,UAAU,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,UAAU,UAAU;IAClB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;IACzB,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACrD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;CAChC;AAoFD;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAS5D;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAE7E"}