@lunora/container 1.0.0-alpha.4 → 1.0.0-alpha.41

package/dist/do/index.mjs

@@ -1,256 +1 @@
-import { Container } from '@cloudflare/containers';
-export { ContainerProxy, outboundParams } from '@cloudflare/containers';
-import { resolveContainerEnvVars as resolveContainerEnvVariables, parseDurationSeconds } from '../packem_shared/containerBindingName-C7Lic2ET.mjs';
-
-const LUNORA_EVENT_SOURCE = "lunora";
-const buildContainerLifecycleEvent = (container, instance, event, message) => {
-  return {
-    container,
-    event,
-    instance,
-    level: event === "error" ? "error" : "info",
-    message,
-    source: LUNORA_EVENT_SOURCE,
-    ts: Date.now(),
-    type: "container"
-  };
-};
-const emitContainerLifecycle = (container, instance, event, message) => {
-  const envelope = buildContainerLifecycleEvent(container, instance, event, message);
-  const line = JSON.stringify(envelope);
-  if (event === "error") {
-    console.error(line);
-  } else {
-    console.log(line);
-  }
-  return envelope;
-};
-
-const RECORD_CONTAINER_EVENT_OP = "__lunora_admin__:recordContainerEvent";
-const ROOT_SHARD_NAME = "__root__";
-const applyJurisdiction = (namespace, jurisdiction) => {
-  if (jurisdiction === void 0) {
-    return namespace;
-  }
-  if (typeof namespace.jurisdiction !== "function") {
-    throw new TypeError(
-      `@lunora/container: Durable Object namespace does not support jurisdiction("${jurisdiction}") — update @cloudflare/workers-types or remove the jurisdiction option`
-    );
-  }
-  return namespace.jurisdiction(jurisdiction);
-};
-const isShardNamespace = (value) => {
-  if (value === null || typeof value !== "object") {
-    return false;
-  }
-  const candidate = value;
-  return typeof candidate.get === "function" && typeof candidate.idFromName === "function";
-};
-const resolveRootShard = (namespace, jurisdiction) => {
-  const pinned = applyJurisdiction(namespace, jurisdiction);
-  if (typeof pinned.getByName === "function") {
-    return pinned.getByName(ROOT_SHARD_NAME);
-  }
-  return pinned.get(pinned.idFromName(ROOT_SHARD_NAME));
-};
-const reportContainerLifecycle = async (env, envelope, jurisdiction) => {
-  try {
-    const envRecord = env ?? {};
-    const namespace = envRecord["SHARD"];
-    if (!isShardNamespace(namespace)) {
-      return;
-    }
-    const adminBearer = typeof envRecord["LUNORA_ADMIN_TOKEN"] === "string" ? envRecord["LUNORA_ADMIN_TOKEN"] : void 0;
-    if (!adminBearer || adminBearer.length === 0) {
-      return;
-    }
-    const request = new Request("https://shard.internal/rpc", {
-      body: JSON.stringify({ args: { event: envelope }, functionPath: RECORD_CONTAINER_EVENT_OP }),
-      headers: { authorization: `Bearer ${adminBearer}`, "content-type": "application/json" },
-      method: "POST"
-    });
-    await resolveRootShard(namespace, jurisdiction).fetch(request);
-  } catch {
-  }
-};
-
-const READINESS_POLL_INTERVAL_MS = 500;
-const READINESS_TIMEOUT_MS = 3e4;
-const HARD_TIMEOUT_GENERATION_KEY = "__lunoraHardTimeoutGeneration";
-class LunoraContainer extends Container {
-  /**
-   * Data-residency jurisdiction the app's DOs are pinned to (codegen passes the
-   * schema's `.jurisdiction("…")`). Used to pin the best-effort lifecycle report
-   * to the same region as the root shard. `undefined` ⇒ un-pinned.
-   */
-  lunoraJurisdiction;
-  /** The `lunora/containers.ts` export name, for lifecycle log correlation. */
-  lunoraName;
-  /** Default port the readiness probes target when a check omits its own `port`. */
-  lunoraDefaultPort;
-  /** Hard-cap lifetime in whole seconds (from the `hardTimeout` config), or `undefined`. */
-  lunoraHardTimeoutSeconds;
-  /** Declarative readiness probes that gate request proxying (from the `readyOn` config). */
-  lunoraReadyOn;
-  constructor(context, env, definition, exportName, jurisdiction) {
-    super(context, env, {
-      defaultPort: definition.defaultPort,
-      entrypoint: definition.entrypoint ? [...definition.entrypoint] : void 0,
-      envVars: resolveContainerEnvVariables(definition, env, exportName),
-      sleepAfter: definition.sleepAfter
-    });
-    if (definition.enableInternet !== void 0) {
-      this.enableInternet = definition.enableInternet;
-    }
-    if (definition.requiredPorts !== void 0) {
-      this.requiredPorts = [...definition.requiredPorts];
-    }
-    if (definition.interceptHttps !== void 0) {
-      this.interceptHttps = definition.interceptHttps;
-    }
-    if (definition.allowedHosts !== void 0) {
-      this.allowedHosts = [...definition.allowedHosts];
-    }
-    if (definition.deniedHosts !== void 0) {
-      this.deniedHosts = [...definition.deniedHosts];
-    }
-    if (definition.pingEndpoint !== void 0) {
-      this.pingEndpoint = definition.pingEndpoint;
-    }
-    if (definition.labels !== void 0) {
-      this.labels = { ...definition.labels };
-    }
-    this.lunoraName = exportName ?? "container";
-    this.lunoraJurisdiction = jurisdiction;
-    this.lunoraDefaultPort = definition.defaultPort;
-    this.lunoraReadyOn = definition.readyOn ? [...definition.readyOn] : [];
-    this.lunoraHardTimeoutSeconds = definition.hardTimeout === void 0 ? void 0 : parseDurationSeconds(definition.hardTimeout);
-  }
-  async onActivityExpired() {
-    const envelope = emitContainerLifecycle(this.lunoraName, this.instanceId(), "sleep");
-    this.surfaceInStudioLogs(envelope);
-    await super.onActivityExpired();
-  }
-  onError(error) {
-    const envelope = emitContainerLifecycle(this.lunoraName, this.instanceId(), "error", error instanceof Error ? error.message : String(error));
-    this.surfaceInStudioLogs(envelope);
-    return super.onError(error);
-  }
-  async onStart() {
-    const envelope = emitContainerLifecycle(this.lunoraName, this.instanceId(), "start");
-    this.surfaceInStudioLogs(envelope);
-    await super.onStart();
-    await this.armHardTimeout();
-    await this.awaitContainerReadiness();
-  }
-  /**
-   * Hook run when the container's `hardTimeout` elapses (dispatched by the base
-   * scheduler via the run-generation-stamped schedule armed in
-   * {@link onStart}). Default: stop the instance. Override to drain/checkpoint
-   * first. A stale schedule from a previous run, or an already-stopped
-   * instance, is ignored (upstream cloudflare/containers#85).
-   */
-  async onHardTimeoutExpired(payload) {
-    const current = await this.ctx.storage.get(HARD_TIMEOUT_GENERATION_KEY);
-    if (payload?.generation !== void 0 && payload.generation !== current) {
-      return;
-    }
-    if (this.ctx.container?.running !== true) {
-      return;
-    }
-    const envelope = emitContainerLifecycle(this.lunoraName, this.instanceId(), "stop", "hard timeout reached");
-    this.surfaceInStudioLogs(envelope);
-    await this.stop();
-  }
-  async onStop(parameters) {
-    const envelope = emitContainerLifecycle(this.lunoraName, this.instanceId(), "stop", `${parameters.reason} (exit ${String(parameters.exitCode)})`);
-    this.surfaceInStudioLogs(envelope);
-    await super.onStop(parameters);
-  }
-  /**
-   * Arm the hard-timeout kill via the base scheduler (so it integrates with
-   * the container's own alarm machinery instead of fighting it). Bumps the run
-   * generation and stamps the schedule with it, so {@link onHardTimeoutExpired}
-   * can tell a fresh schedule from a stale one. No-op without a `hardTimeout`.
-   */
-  async armHardTimeout() {
-    if (this.lunoraHardTimeoutSeconds === void 0) {
-      return;
-    }
-    const generation = (await this.ctx.storage.get(HARD_TIMEOUT_GENERATION_KEY) ?? 0) + 1;
-    await this.ctx.storage.put(HARD_TIMEOUT_GENERATION_KEY, generation);
-    await this.schedule(this.lunoraHardTimeoutSeconds, "onHardTimeoutExpired", { generation });
-  }
-  /**
-   * Block until every `readyOn` probe responds with its expected status, or
-   * throw once the readiness budget is spent. Probes run in parallel and hit
-   * the container's TCP port directly (NOT `containerFetch`, which would
-   * recurse back into the start path). No-op without `readyOn`.
-   */
-  async awaitContainerReadiness() {
-    if (this.lunoraReadyOn.length === 0) {
-      return;
-    }
-    const { container } = this.ctx;
-    if (container === void 0) {
-      return;
-    }
-    const deadline = Date.now() + READINESS_TIMEOUT_MS;
-    await Promise.all(this.lunoraReadyOn.map(async (check) => this.awaitReadinessCheck(container, check, deadline)));
-  }
-  /** Poll one readiness probe until it returns its expected status or the shared deadline passes. */
-  async awaitReadinessCheck(container, check, deadline) {
-    const port = check.port ?? this.lunoraDefaultPort;
-    if (port === void 0) {
-      throw new Error(
-        `container "${this.lunoraName}": readyOn check "${check.path}" has no port — set the check's \`port\` or the container \`defaultPort\`.`
-      );
-    }
-    const expectedStatus = check.status ?? 200;
-    const path = check.path.startsWith("/") ? check.path : `/${check.path}`;
-    const tcpPort = container.getTcpPort(port);
-    for (; ; ) {
-      try {
-        const response = await tcpPort.fetch(`http://container${path}`);
-        if (response.status === expectedStatus) {
-          return;
-        }
-      } catch {
-      }
-      if (Date.now() >= deadline) {
-        throw new Error(
-          `container "${this.lunoraName}": readiness check "${check.path}" (port ${String(port)}) did not return ${String(expectedStatus)} within ${String(READINESS_TIMEOUT_MS)}ms`
-        );
-      }
-      await new Promise((resolve) => {
-        setTimeout(resolve, READINESS_POLL_INTERVAL_MS);
-      });
-    }
-  }
-  /**
-   * Best-effort push of `envelope` into the root ShardDO's log buffer so it
-   * also appears in the Studio Logs panel (the terminal already has it via
-   * `emitContainerLifecycle`). Fire-and-forget and fully swallowed: a missing
-   * `SHARD` binding, a missing admin token, or a fetch failure NEVER throws
-   * out of a lifecycle hook — the `console` path stays the source of truth.
-   */
-  surfaceInStudioLogs(envelope) {
-    reportContainerLifecycle(this.env, envelope, this.lunoraJurisdiction).catch(() => {
-    });
-  }
-  /**
-   * Per-instance correlation id: the Durable Object id, which Cloudflare also
-   * injects into the container as `CLOUDFLARE_DURABLE_OBJECT_ID`. Read
-   * defensively — the id shape varies and isn't worth crashing a hook over.
-   */
-  instanceId() {
-    try {
-      const { id } = this.ctx;
-      return typeof id?.toString === "function" ? id.toString() : "unknown";
-    } catch {
-      return "unknown";
-    }
-  }
-}
-
-export { LunoraContainer };
+import{LunoraError as u}from"@lunora/errors";import{a as f}from"../packem_shared/abort-deadline-jwbW9Ala.mjs";import{resolveContainerEnvVars as y,parseDurationSeconds as g}from"../packem_shared/containerBindingName-D01FopQt.mjs";import{a as w}from"../packem_shared/jurisdiction-DtE9s70w.mjs";import{Container as E}from"../packem_shared/ContainerProxy-fTW_pXWY.mjs";import{ContainerProxy as C,outboundParams as M}from"../packem_shared/ContainerProxy-fTW_pXWY.mjs";const N="lunora",R=(s,t,r,e)=>({container:s,event:r,instance:t,level:r==="error"?"error":"info",message:e,source:N,ts:Date.now(),type:"container"}),i=(s,t,r,e)=>{const o=R(s,t,r,e),n=JSON.stringify(o);return r==="error"?console.error(n):console.log(n),o},T="__lunora_admin__:recordContainerEvent",S="__root__",_=s=>{if(s===null||typeof s!="object")return!1;const t=s;return typeof t.get=="function"&&typeof t.idFromName=="function"},I=(s,t)=>{const r=w(s,t);return typeof r.getByName=="function"?r.getByName(S):r.get(r.idFromName(S))},O=async(s,t,r)=>{try{const e=s??{},o=e.SHARD;if(!_(o))return;const n=typeof e.LUNORA_ADMIN_TOKEN=="string"?e.LUNORA_ADMIN_TOKEN:void 0;if(!n||n.length===0)return;const a=new Request("https://shard.internal/rpc",{body:JSON.stringify({args:{event:t},functionPath:T}),headers:{authorization:`Bearer ${n}`,"content-type":"application/json"},method:"POST"});await I(o,r).fetch(a)}catch{}},m=500,v=3e4,d="__lunoraHardTimeoutGeneration";class b extends E{lunoraJurisdiction;lunoraName;lunoraDefaultPort;lunoraHardTimeoutSeconds;lunoraReadyOn;lunoraSecretsStore;lunoraSecretsStoreResolved;constructor(t,r,e,o,n){super(t,r,{defaultPort:e.defaultPort,entrypoint:e.entrypoint?[...e.entrypoint]:void 0,envVars:y(e,r,o),sleepAfter:e.sleepAfter}),e.enableInternet!==void 0&&(this.enableInternet=e.enableInternet),e.requiredPorts!==void 0&&(this.requiredPorts=[...e.requiredPorts]),e.interceptHttps!==void 0&&(this.interceptHttps=e.interceptHttps),e.allowedHosts!==void 0&&(this.allowedHosts=[...e.allowedHosts]),e.deniedHosts!==void 0&&(this.deniedHosts=[...e.deniedHosts]),e.pingEndpoint!==void 0&&(this.pingEndpoint=e.pingEndpoint),e.labels!==void 0&&(this.labels={...e.labels}),this.lunoraName=o??"container",this.lunoraJurisdiction=n,this.lunoraDefaultPort=e.defaultPort,this.lunoraReadyOn=e.readyOn?[...e.readyOn]:[],this.lunoraHardTimeoutSeconds=e.hardTimeout===void 0?void 0:g(e.hardTimeout),this.lunoraSecretsStore=e.secretsStore}async containerFetch(...t){return await this.resolveSecretsStoreEnv(),super.containerFetch(...t)}async start(...t){const[r]=t;return r?.envVars===void 0&&await this.resolveSecretsStoreEnv(),super.start(...t)}async onActivityExpired(){const t=i(this.lunoraName,this.instanceId(),"sleep");this.surfaceInStudioLogs(t),await super.onActivityExpired()}onError(t){const r=i(this.lunoraName,this.instanceId(),"error",t instanceof Error?t.message:String(t));return this.surfaceInStudioLogs(r),super.onError(t)}async onStart(){const t=i(this.lunoraName,this.instanceId(),"start");this.surfaceInStudioLogs(t),await super.onStart(),await this.armHardTimeout(),await this.awaitContainerReadiness()}async onHardTimeoutExpired(t){const r=await this.ctx.storage.get(d);if(t?.generation!==void 0&&t.generation!==r||this.ctx.container?.running!==!0)return;const e=i(this.lunoraName,this.instanceId(),"stop","hard timeout reached");this.surfaceInStudioLogs(e),await this.stop()}async onStop(t){const r=i(this.lunoraName,this.instanceId(),"stop",`${t.reason} (exit ${String(t.exitCode)})`);this.surfaceInStudioLogs(r),await super.onStop(t)}async armHardTimeout(){if(this.lunoraHardTimeoutSeconds===void 0)return;const t=(await this.ctx.storage.get(d)??0)+1;await this.ctx.storage.put(d,t),await this.schedule(this.lunoraHardTimeoutSeconds,"onHardTimeoutExpired",{generation:t})}async resolveSecretsStoreEnv(){const t=this.lunoraSecretsStore;t!==void 0&&(this.lunoraSecretsStoreResolved??=(async()=>{const r=this.env,e={};for(const[o,n]of Object.entries(t)){const a=r[n];if(a===void 0||typeof a.get!="function")throw new u("INTERNAL",`container "${this.lunoraName}": secretsStore env "${o}" points at binding "${n}", which is not a Secrets Store binding on the Worker env. Add a \`secrets_store_secrets\` entry binding "${n}".`);const c=await a.get();if(typeof c!="string")throw new TypeError(`container "${this.lunoraName}": Secrets Store binding "${n}" (env "${o}") did not resolve to a string value.`);e[o]=c}this.envVars={...this.envVars,...e}})().catch(r=>{throw this.lunoraSecretsStoreResolved=void 0,r}),await this.lunoraSecretsStoreResolved)}async awaitContainerReadiness(){if(this.lunoraReadyOn.length===0)return;const{container:t}=this.ctx;if(t===void 0)return;const r=Date.now()+v;await Promise.all(this.lunoraReadyOn.map(async e=>this.awaitReadinessCheck(t,e,r)))}async awaitReadinessCheck(t,r,e){const o=r.port??this.lunoraDefaultPort;if(o===void 0)throw new u("INTERNAL",`container "${this.lunoraName}": readyOn check "${r.path}" has no port — set the check's \`port\` or the container \`defaultPort\`.`);const n=r.status??200,a=r.path.startsWith("/")?r.path:`/${r.path}`,c=t.getTcpPort(o);for(;;){const l=Math.max(m,e-Date.now()),h=f(void 0,l,()=>new DOMException(`readiness probe timed out after ${String(l)}ms`,"TimeoutError"));try{if((await c.fetch(`http://container${a}`,{signal:h.signal})).status===n)return}catch{}finally{h.dispose()}if(Date.now()>=e)throw new u("INTERNAL",`container "${this.lunoraName}": readiness check "${r.path}" (port ${String(o)}) did not return ${String(n)} within ${String(v)}ms`);await new Promise(p=>{setTimeout(p,m)})}}surfaceInStudioLogs(t){O(this.env,t,this.lunoraJurisdiction).catch(()=>{})}instanceId(){try{const{id:t}=this.ctx;return typeof t?.toString=="function"?t.toString():"unknown"}catch{return"unknown"}}}export{C as ContainerProxy,b as LunoraContainer,M as outboundParams};