@lunora/container 1.0.0-alpha.5 → 1.0.0-alpha.51

package/LICENSE.md

@@ -103,3 +103,29 @@ Unless required by applicable law or agreed to in writing, software distributed
 under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
 CONDITIONS OF ANY KIND, either express or implied. See the License for the
 specific language governing permissions and limitations under the License.
+
+<!-- DEPENDENCIES -->
+
+# Licenses of bundled dependencies
+The published @lunora/container artifact additionally contains code with the following licenses:
+MIT OR Apache-2.0
+
+# Bundled dependencies:
+## @cloudflare/containers
+License: MIT OR Apache-2.0
+Repository: git+https://github.com/cloudflare/containers.git
+
+<!-- /DEPENDENCIES -->
+
+<!-- TYPE_DEPENDENCIES -->
+
+# Licenses of bundled types
+The published @lunora/container artifact additionally contains code with the following licenses:
+MIT OR Apache-2.0
+
+# Bundled types:
+## @cloudflare/containers
+License: MIT OR Apache-2.0
+Repository: git+https://github.com/cloudflare/containers.git
+
+<!-- /TYPE_DEPENDENCIES -->

package/README.md

@@ -10,6 +10,8 @@
 
 <!-- END_PACKAGE_OG_IMAGE_PLACEHOLDER -->
 
+> **Experimental** — this package is outside the Lunora 1.0 stability promise: its API may change in any release, without a major version bump.
+
 <br />
 
 <div align="center">
@@ -170,12 +172,12 @@ export const api = defineContainer({
 
 ### Hard timeout
 
-`sleepAfter` caps _idle_ time; `hardTimeout` caps _total_ lifetime — a runaway-cost backstop measured from start, regardless of activity (same grammar as `sleepAfter`). When it elapses the generated class's `onHardTimeoutExpired` hook runs (default: `stop()`); the timer is run-generation-stamped so a stale timer from a slept/crashed run can't kill a fresh one.
+`sleepAfter` caps _idle_ time; `hardTimeout` caps _total_ lifetime — a runaway-cost backstop measured from start, regardless of activity (same grammar as `sleepAfter`). When it elapses the generated class's `onHardTimeoutExpired` hook runs (default: `stop()`, i.e. SIGTERM with no escalation — a container that ignores SIGTERM outlives its cap unless you override the hook and follow up with `destroy()`); the timer is run-generation-stamped so a stale timer from a slept/crashed run can't kill a fresh one.
 
 ```ts
 export const job = defineContainer({
     image: "./containers/job",
-    hardTimeout: "1h", // never run longer than an hour, busy or not
+    hardTimeout: "1h", // stopped after an hour, busy or not
 });
 ```
 
@@ -194,7 +196,7 @@ await lunora.mutation("jobs:markDone", { id: pending[0].id });
 
 The token is a bearer your Worker's `resolveIdentity` recognizes — pass it to the container as a `secret`. Non-JS containers can `POST /_lunora/rpc` with `{ functionPath, args }` directly.
 
-Secure the bridge in `resolveIdentity`: read `request.headers.get("authorization")`, strip the `Bearer ` prefix, and compare the token against a Worker secret (e.g. `env.LUNORA_CONTAINER_TOKEN`) you also forward to the container. Return a `{ userId }` identity only on a match and `null` otherwise — an unrecognised request then runs anonymously and is rejected by your functions' own authorization checks. See [Securing the bridge](https://lunora.sh/docs/addons/containers#securing-the-bridge) for the full example.
+Secure the bridge in `resolveIdentity`: read `request.headers.get("authorization")`, strip the `Bearer ` prefix, and compare the token against a Worker secret (e.g. `env.LUNORA_CONTAINER_TOKEN`) you also forward to the container. Return a `{ userId }` identity only on a match and `null` otherwise — an unrecognised request then runs anonymously and is rejected by your functions' own authorization checks. See [Securing the bridge](https://lunora.sh/docs/packages/container#securing-the-bridge) for the full example.
 
 ### Entry points
 
@@ -202,7 +204,7 @@ Secure the bridge in `resolveIdentity`: read `request.headers.get("authorization
 - `@lunora/container/do` — workerd-only: the `LunoraContainer` base class the generated DO classes extend (pulls in `@cloudflare/containers`).
 - `@lunora/container/bridge` — runtime-agnostic: `createContainerBridge` for calling Lunora functions from inside a container.
 
-> This README covers the basics. For the full API, options, and guides, see the **[documentation](https://lunora.sh/docs/addons/containers)**.
+> This README covers the basics. For the full API, options, and guides, see the **[documentation](https://lunora.sh/docs/packages/container)**.
 
 ### Known platform limitations
 

package/dist/bridge.d.mts

@@ -1,4 +1,7 @@
-/** A `fetch` implementation — defaults to the runtime global. */
+import { LunoraError } from '@lunora/errors';
+/**
+ * A `fetch` implementation — defaults to the runtime global.
+ */
 type FetchLike = (input: string, init: {
   body: string;
   headers: Record<string, string>;
@@ -9,34 +12,38 @@ type FetchLike = (input: string, init: {
   status: number;
   statusText?: string;
 }>;
+/**
+ * `ContainerBridgeOptions` is part of the experimental `@lunora/container` API and may change without a major version bump.
+ */
 interface ContainerBridgeOptions {
   /**
-  * Base URL of the deployed Lunora Worker (no trailing `/_lunora/rpc`), e.g.
-  * `https://my-app.workers.dev`. In a Lunora container, surface it as an
-  * `env` value on the definition.
-  */
+   * Base URL of the deployed Lunora Worker (no trailing `/_lunora/rpc`), e.g.
+   * `https://my-app.workers.dev`. In a Lunora container, surface it as an
+   * `env` value on the definition.
+   */
   baseUrl: string;
   /** Injectable `fetch` (tests / non-global runtimes). Defaults to `globalThis.fetch`. */
   fetch?: FetchLike;
   /**
-  * Bearer token sent as `Authorization: Bearer &lt;token>`. Your Worker's
-  * `resolveIdentity` maps it to the identity the called functions run as.
-  * Pass it to the container as a `secret`, never bake it into the image.
-  */
+   * Bearer token sent as `Authorization: Bearer <token>`. Your Worker's
+   * `resolveIdentity` maps it to the identity the called functions run as.
+   * Pass it to the container as a `secret`, never bake it into the image.
+   */
   token?: string;
 }
-/** Thrown when a Lunora function returns an error envelope. Carries the wire `code`. */
-declare class ContainerBridgeError extends Error {
-  readonly code: string;
+/**
+ * Thrown when a Lunora function returns an error envelope. A `LunoraError` subclass carrying the wire `code`.
+ */
+declare class ContainerBridgeError extends LunoraError {
   constructor(code: string, message: string);
 }
 /**
-* Structural mirror of `@lunora/client`'s `FunctionReference` — the typed
-* handle the generated `_generated/api` object carries. Declared locally (not
-* imported) so the bridge stays dependency-free and its `.d.ts` is
-* self-contained; the `__lunoraPhantom` shape matches, so a real `api.x.y`
-* reference is assignable and its arg/return types are inferable.
-*/
+ * Structural mirror of `@lunora/client`'s `FunctionReference` — the typed
+ * handle the generated `_generated/api` object carries. Declared locally (not
+ * imported) so the bridge stays dependency-free and its `.d.ts` is
+ * self-contained; the `__lunoraPhantom` shape matches, so a real `api.x.y`
+ * reference is assignable and its arg/return types are inferable.
+ */
 interface BridgeFunctionReference<Args = unknown, Result = unknown> {
   readonly __lunoraPhantom?: {
     args: Args;
@@ -56,6 +63,9 @@ type ResultOfReference<Reference> = Reference extends {
     returns: infer Result;
   };
 } ? Result : never;
+/**
+ * `ContainerBridge` is part of the experimental `@lunora/container` API and may change without a major version bump.
+ */
 interface ContainerBridge {
   /** Call an `action` by `namespace:fn` path. Alias of {@link ContainerBridge.call} for intent. */
   action: <Result = unknown>(functionPath: string, args?: Record<string, unknown>, shardKey?: string) => Promise<Result>;
@@ -66,25 +76,25 @@ interface ContainerBridge {
   /** Call a `query` by `namespace:fn` path. Alias of {@link ContainerBridge.call} for intent. */
   query: <Result = unknown>(functionPath: string, args?: Record<string, unknown>, shardKey?: string) => Promise<Result>;
   /**
-  * Fully-typed call via a generated function reference. Pass a reference from
-  * the project's `_generated/api` (e.g. `api.messages.list`) and the args +
-  * result are inferred from it — the typed counterpart to {@link ContainerBridge.call}
-  * for JS/TS containers that can import the generated `api`.
-  */
+   * Fully-typed call via a generated function reference. Pass a reference from
+   * the project's `_generated/api` (e.g. `api.messages.list`) and the args +
+   * result are inferred from it — the typed counterpart to {@link ContainerBridge.call}
+   * for JS/TS containers that can import the generated `api`.
+   */
   run: <Reference extends BridgeFunctionReference>(reference: Reference, args: ArgsOfReference<Reference>, shardKey?: string) => Promise<ResultOfReference<Reference>>;
 }
 /**
-* Build a container→Lunora bridge bound to a Worker URL + token.
-*
-* ```ts
-* const lunora = createContainerBridge({ baseUrl: process.env.LUNORA_URL!, token: process.env.LUNORA_TOKEN });
-* const messages = await lunora.query("messages:list", { limit: 20 });
-* await lunora.mutation("messages:markProcessed", { id });
-* ```
-*
-* `query`/`mutation`/`action` are intent-revealing aliases of one `call` — the
-* wire is identical and the server dispatches by the function's registered
-* kind, so a query path called via `.mutation(...)` still runs as a query.
-*/
+ * Build a container→Lunora bridge bound to a Worker URL + token.
+ *
+ * ```ts
+ * const lunora = createContainerBridge({ baseUrl: process.env.LUNORA_URL!, token: process.env.LUNORA_TOKEN });
+ * const messages = await lunora.query("messages:list", { limit: 20 });
+ * await lunora.mutation("messages:markProcessed", { id });
+ * ```
+ *
+ * `query`/`mutation`/`action` are intent-revealing aliases of one `call` — the
+ * wire is identical and the server dispatches by the function's registered
+ * kind, so a query path called via `.mutation(...)` still runs as a query.
+ */
 declare const createContainerBridge: (options: ContainerBridgeOptions) => ContainerBridge;
 export { type BridgeFunctionReference, type ContainerBridge, ContainerBridgeError, type ContainerBridgeOptions, type FetchLike, createContainerBridge };

package/dist/bridge.d.ts

@@ -1,4 +1,7 @@
-/** A `fetch` implementation — defaults to the runtime global. */
+import { LunoraError } from '@lunora/errors';
+/**
+ * A `fetch` implementation — defaults to the runtime global.
+ */
 type FetchLike = (input: string, init: {
   body: string;
   headers: Record<string, string>;
@@ -9,34 +12,38 @@ type FetchLike = (input: string, init: {
   status: number;
   statusText?: string;
 }>;
+/**
+ * `ContainerBridgeOptions` is part of the experimental `@lunora/container` API and may change without a major version bump.
+ */
 interface ContainerBridgeOptions {
   /**
-  * Base URL of the deployed Lunora Worker (no trailing `/_lunora/rpc`), e.g.
-  * `https://my-app.workers.dev`. In a Lunora container, surface it as an
-  * `env` value on the definition.
-  */
+   * Base URL of the deployed Lunora Worker (no trailing `/_lunora/rpc`), e.g.
+   * `https://my-app.workers.dev`. In a Lunora container, surface it as an
+   * `env` value on the definition.
+   */
   baseUrl: string;
   /** Injectable `fetch` (tests / non-global runtimes). Defaults to `globalThis.fetch`. */
   fetch?: FetchLike;
   /**
-  * Bearer token sent as `Authorization: Bearer &lt;token>`. Your Worker's
-  * `resolveIdentity` maps it to the identity the called functions run as.
-  * Pass it to the container as a `secret`, never bake it into the image.
-  */
+   * Bearer token sent as `Authorization: Bearer <token>`. Your Worker's
+   * `resolveIdentity` maps it to the identity the called functions run as.
+   * Pass it to the container as a `secret`, never bake it into the image.
+   */
   token?: string;
 }
-/** Thrown when a Lunora function returns an error envelope. Carries the wire `code`. */
-declare class ContainerBridgeError extends Error {
-  readonly code: string;
+/**
+ * Thrown when a Lunora function returns an error envelope. A `LunoraError` subclass carrying the wire `code`.
+ */
+declare class ContainerBridgeError extends LunoraError {
   constructor(code: string, message: string);
 }
 /**
-* Structural mirror of `@lunora/client`'s `FunctionReference` — the typed
-* handle the generated `_generated/api` object carries. Declared locally (not
-* imported) so the bridge stays dependency-free and its `.d.ts` is
-* self-contained; the `__lunoraPhantom` shape matches, so a real `api.x.y`
-* reference is assignable and its arg/return types are inferable.
-*/
+ * Structural mirror of `@lunora/client`'s `FunctionReference` — the typed
+ * handle the generated `_generated/api` object carries. Declared locally (not
+ * imported) so the bridge stays dependency-free and its `.d.ts` is
+ * self-contained; the `__lunoraPhantom` shape matches, so a real `api.x.y`
+ * reference is assignable and its arg/return types are inferable.
+ */
 interface BridgeFunctionReference<Args = unknown, Result = unknown> {
   readonly __lunoraPhantom?: {
     args: Args;
@@ -56,6 +63,9 @@ type ResultOfReference<Reference> = Reference extends {
     returns: infer Result;
   };
 } ? Result : never;
+/**
+ * `ContainerBridge` is part of the experimental `@lunora/container` API and may change without a major version bump.
+ */
 interface ContainerBridge {
   /** Call an `action` by `namespace:fn` path. Alias of {@link ContainerBridge.call} for intent. */
   action: <Result = unknown>(functionPath: string, args?: Record<string, unknown>, shardKey?: string) => Promise<Result>;
@@ -66,25 +76,25 @@ interface ContainerBridge {
   /** Call a `query` by `namespace:fn` path. Alias of {@link ContainerBridge.call} for intent. */
   query: <Result = unknown>(functionPath: string, args?: Record<string, unknown>, shardKey?: string) => Promise<Result>;
   /**
-  * Fully-typed call via a generated function reference. Pass a reference from
-  * the project's `_generated/api` (e.g. `api.messages.list`) and the args +
-  * result are inferred from it — the typed counterpart to {@link ContainerBridge.call}
-  * for JS/TS containers that can import the generated `api`.
-  */
+   * Fully-typed call via a generated function reference. Pass a reference from
+   * the project's `_generated/api` (e.g. `api.messages.list`) and the args +
+   * result are inferred from it — the typed counterpart to {@link ContainerBridge.call}
+   * for JS/TS containers that can import the generated `api`.
+   */
   run: <Reference extends BridgeFunctionReference>(reference: Reference, args: ArgsOfReference<Reference>, shardKey?: string) => Promise<ResultOfReference<Reference>>;
 }
 /**
-* Build a container→Lunora bridge bound to a Worker URL + token.
-*
-* ```ts
-* const lunora = createContainerBridge({ baseUrl: process.env.LUNORA_URL!, token: process.env.LUNORA_TOKEN });
-* const messages = await lunora.query("messages:list", { limit: 20 });
-* await lunora.mutation("messages:markProcessed", { id });
-* ```
-*
-* `query`/`mutation`/`action` are intent-revealing aliases of one `call` — the
-* wire is identical and the server dispatches by the function's registered
-* kind, so a query path called via `.mutation(...)` still runs as a query.
-*/
+ * Build a container→Lunora bridge bound to a Worker URL + token.
+ *
+ * ```ts
+ * const lunora = createContainerBridge({ baseUrl: process.env.LUNORA_URL!, token: process.env.LUNORA_TOKEN });
+ * const messages = await lunora.query("messages:list", { limit: 20 });
+ * await lunora.mutation("messages:markProcessed", { id });
+ * ```
+ *
+ * `query`/`mutation`/`action` are intent-revealing aliases of one `call` — the
+ * wire is identical and the server dispatches by the function's registered
+ * kind, so a query path called via `.mutation(...)` still runs as a query.
+ */
 declare const createContainerBridge: (options: ContainerBridgeOptions) => ContainerBridge;
 export { type BridgeFunctionReference, type ContainerBridge, ContainerBridgeError, type ContainerBridgeOptions, type FetchLike, createContainerBridge };

package/dist/bridge.mjs

@@ -1,76 +1 @@
-const RPC_PATH = "/_lunora/rpc";
-class ContainerBridgeError extends Error {
-  code;
-  constructor(code, message) {
-    super(message);
-    this.name = "ContainerBridgeError";
-    this.code = code;
-  }
-}
-const joinUrl = (baseUrl, path) => {
-  let base = baseUrl;
-  while (base.endsWith("/")) {
-    base = base.slice(0, -1);
-  }
-  return `${base}${path}`;
-};
-const statusError = (functionPath, response) => new Error(
-  `createContainerBridge: request to "${functionPath}" failed (status ${String(response.status)}${response.statusText ? ` ${response.statusText}` : ""})`
-);
-const parseResponseBody = async (response, functionPath) => {
-  try {
-    return await response.json();
-  } catch {
-    if (!response.ok) {
-      throw statusError(functionPath, response);
-    }
-    throw new Error(`createContainerBridge: request to "${functionPath}" returned a non-JSON response (status ${String(response.status)})`);
-  }
-};
-const createContainerBridge = (options) => {
-  if (typeof options.baseUrl !== "string" || options.baseUrl.length === 0) {
-    throw new TypeError("createContainerBridge: `baseUrl` must be a non-empty Worker URL (e.g. https://my-app.workers.dev) — is the URL env var set?");
-  }
-  const fetchImpl = options.fetch ?? globalThis.fetch;
-  const call = async (functionPath, args = {}, shardKey) => {
-    if (typeof fetchImpl !== "function") {
-      throw new TypeError("createContainerBridge: no `fetch` available — pass `fetch` in options for this runtime.");
-    }
-    const headers = { "content-type": "application/json" };
-    if (options.token !== void 0) {
-      headers.authorization = `Bearer ${options.token}`;
-    }
-    const response = await fetchImpl(joinUrl(options.baseUrl, RPC_PATH), {
-      body: JSON.stringify({ args, functionPath, shardKey }),
-      headers,
-      method: "POST"
-    });
-    const body = await parseResponseBody(response, functionPath);
-    if (typeof body === "object" && body !== null && "error" in body) {
-      const { error } = body;
-      if (typeof error === "object" && error !== null) {
-        const { code, message } = error;
-        if (typeof code === "string" && typeof message === "string") {
-          throw new ContainerBridgeError(code, message);
-        }
-      }
-      let detail;
-      try {
-        detail = JSON.stringify(error);
-      } catch {
-        detail = String(error);
-      }
-      throw new Error(
-        `createContainerBridge: request to "${functionPath}" returned a malformed error envelope (status ${String(response.status)}): ${detail}`
-      );
-    }
-    if (!response.ok) {
-      throw statusError(functionPath, response);
-    }
-    return body.result;
-  };
-  const run = async (reference, args, shardKey) => call(reference.__lunoraRef, args, shardKey);
-  return { action: call, call, mutation: call, query: call, run };
-};
-
-export { ContainerBridgeError, createContainerBridge };
+import{LunoraError as p}from"@lunora/errors";const m=r=>{let t="";for(let c=0;c<r.length;c+=32768)t+=String.fromCharCode(...r.subarray(c,c+32768));return btoa(t)},R=r=>{const t=atob(r),o=new Uint8Array(t.length);for(let c=0;c<t.length;c+=1)o[c]=t.codePointAt(c)??0;return o},f="$lunora.wire$",w=64,E=1024,g="__proto__",j={BigInt64Array,BigUint64Array,Float32Array,Float64Array,Int8Array,Int16Array,Int32Array,Uint8Array,Uint8ClampedArray,Uint16Array,Uint32Array},O={Error,EvalError,RangeError,ReferenceError,SyntaxError,TypeError,URIError},U=r=>{if(r===null||typeof r!="object")return!1;const t=Object.getPrototypeOf(r);return t===null||t===Object.prototype},d=(r,t=0)=>{if(t>w)throw new RangeError(`wire-codec: value nesting exceeds the ${w}-level limit`);if(r===void 0)return[f,"undefined"];if(r===null)return null;const o=typeof r;if(o==="bigint")return[f,"bigint",r.toString()];if(o==="number"){const e=r;return Number.isNaN(e)?[f,"nan"]:e===1/0?[f,"inf"]:e===-1/0?[f,"-inf"]:e}if(o!=="object")return r;if(r instanceof Date)return[f,"date",d(r.getTime(),t+1)];if(r instanceof Error){const e=r,n={};for(const i of Object.keys(e)){if(e[i]===void 0)continue;const u=d(e[i],t+1);i===g?Object.defineProperty(n,i,{configurable:!0,enumerable:!0,value:u,writable:!0}):n[i]=u}const a=[f,"error",String(e.name),String(e.message),n];return e.cause!==void 0&&a.push(d(e.cause,t+1)),a}if(r instanceof URL)return[f,"url",r.href];if(r instanceof Map)return[f,"map",[...r.entries()].map(([e,n])=>[d(e,t+1),d(n,t+1)])];if(r instanceof Set)return[f,"set",[...r].map(e=>d(e,t+1))];if(r instanceof ArrayBuffer)return[f,"bytes",m(new Uint8Array(r)),"ArrayBuffer"];if(ArrayBuffer.isView(r)){const e=r,n=e.constructor.name,a=new Uint8Array(e.buffer,e.byteOffset,e.byteLength);return n==="Uint8Array"?[f,"bytes",m(a)]:[f,"bytes",m(a),n]}if(Array.isArray(r)){const e=r.map(n=>d(n,t+1));return e.length>0&&e[0]===f?[f,"arr",e]:e}if(!U(r)){const e=r.constructor?.name??"value";throw new TypeError(`wire-codec: cannot encode a ${e} over the Lunora wire — only plain objects, arrays, and the supported built-ins (Date, Error, URL, Map, Set, ArrayBuffer/typed arrays, bigint) round-trip`)}const c=r,s={};for(const e of Object.keys(c)){const n=c[e];if(n===void 0)continue;const a=d(n,t+1);e===g?Object.defineProperty(s,e,{configurable:!0,enumerable:!0,value:a,writable:!0}):s[e]=a}return s},b=(r,t=0)=>{if(t>w)throw new RangeError(`wire-codec: value nesting exceeds the ${w}-level limit`);if(r===null||typeof r!="object")return r;if(Array.isArray(r)){if(r[0]===f)switch(r[1]){case"-inf":return-1/0;case"arr":return r[2].map(e=>b(e,t+1));case"bigint":{const e=r[2];if(typeof e!="string"||e.length>E||!/^-?\d+$/.test(e))throw new RangeError(`wire-codec: invalid or over-long bigint (max ${E} digits)`);return BigInt(e)}case"date":{const e=b(r[2],t+1);if(typeof e!="number")throw new TypeError("wire-codec: malformed date — epoch must be a number");return new Date(e)}case"map":{const e=r[2];return new Map(e.map(n=>{if(!Array.isArray(n)||n.length!==2)throw new TypeError("wire-codec: malformed map entry — expected a [key, value] pair");return[b(n[0],t+1),b(n[1],t+1)]}))}case"set":return new Set(r[2].map(e=>b(e,t+1)));case"url":{const e=r[2];if(typeof e!="string")throw new TypeError("wire-codec: malformed url — href must be a string");return new URL(e)}case"error":{const e=r[2],n=r[3];if(typeof e!="string"||typeof n!="string")throw new TypeError("wire-codec: malformed error — name and message must be strings");const a=(Object.hasOwn(O,e)?O[e]:void 0)??Error,i=new a(n);i.name!==e&&Object.defineProperty(i,"name",{configurable:!0,value:e,writable:!0});const u=b(r[4],t+1);if(u===null||typeof u!="object"||Array.isArray(u))throw new TypeError("wire-codec: malformed error — props must be an object");for(const y of Object.keys(u))y===g?Object.defineProperty(i,y,{configurable:!0,enumerable:!0,value:u[y],writable:!0}):i[y]=u[y];return r.length>5&&Object.defineProperty(i,"cause",{configurable:!0,value:b(r[5],t+1),writable:!0}),i}case"bytes":{const e=r[2];if(typeof e!="string")throw new TypeError("wire-codec: malformed bytes — payload must be a base64 string");const n=R(e);if(m(n)!==e)throw new TypeError("wire-codec: malformed bytes — payload must be canonical padded base64");const a=r[3]??"Uint8Array";if(a==="ArrayBuffer")return n.buffer.byteLength===n.byteLength?n.buffer:n.slice().buffer;const i=Object.hasOwn(j,a)?j[a]:void 0;return i?new i(n.slice().buffer):n}case"inf":return 1/0;case"nan":return Number.NaN;case"undefined":return;default:return r.map(e=>b(e,t+1))}return r.map(s=>b(s,t+1))}const o=r,c={};for(const s of Object.keys(o)){const e=b(o[s],t+1);s===g?Object.defineProperty(c,s,{configurable:!0,enumerable:!0,value:e,writable:!0}):c[s]=e}return c},B="/_lunora/rpc";class S extends p{constructor(t,o){super(t,o,{name:"ContainerBridgeError"})}}const k=(r,t)=>{let o=r;for(;o.endsWith("/");)o=o.slice(0,-1);return`${o}${t}`},T=(r,t)=>new Error(`createContainerBridge: request to "${r}" failed (status ${String(t.status)}${t.statusText?` ${t.statusText}`:""})`),$=async(r,t)=>{try{return await r.json()}catch{throw r.ok?new p("INTERNAL",`createContainerBridge: request to "${t}" returned a non-JSON response (status ${String(r.status)})`):T(t,r)}},N=r=>{if(typeof r.baseUrl!="string"||r.baseUrl.length===0)throw new TypeError("createContainerBridge: `baseUrl` must be a non-empty Worker URL (e.g. https://my-app.workers.dev) — is the URL env var set?");const t=r.fetch??globalThis.fetch,o=async(s,e={},n)=>{if(typeof t!="function")throw new TypeError("createContainerBridge: no `fetch` available — pass `fetch` in options for this runtime.");const a={"content-type":"application/json"};r.token!==void 0&&(a.authorization=`Bearer ${r.token}`);const i=await t(k(r.baseUrl,B),{body:JSON.stringify({args:d(e),functionPath:s,shardKey:n}),headers:a,method:"POST"}),u=await $(i,s);if(typeof u=="object"&&u!==null&&"error"in u){const{error:y}=u;if(typeof y=="object"&&y!==null){const{code:h,message:A}=y;if(typeof h=="string"&&typeof A=="string")throw new S(h,A)}let l;try{l=JSON.stringify(y)}catch{l=String(y)}throw new p("INTERNAL",`createContainerBridge: request to "${s}" returned a malformed error envelope (status ${String(i.status)}): ${l}`)}if(!i.ok)throw T(s,i);return b(u.result)};return{action:o,call:o,mutation:o,query:o,run:async(s,e,n)=>o(s.__lunoraRef,e,n)}};export{S as ContainerBridgeError,N as createContainerBridge};