@lunora/container 1.0.0-alpha.63 → 1.0.0-alpha.65

package/dist/packem_shared/{ContainerProxy-fTW_pXWY.mjs → ContainerProxy-CfXjS6ZI.mjs}

@@ -1,4 +1,4 @@
-import{WorkerEntrypoint as B,DurableObject as D}from"cloudflare:workers";function $(i=9){const t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",e=new Uint8Array(i);crypto.getRandomValues(e);let n="";for(let s=0;s<i;s++)n+=t[e[s]%t.length];return n}function W(i){if(typeof i=="number")return i;if(typeof i=="string"){const t=i.match(/^(\d+)([smh])$/);if(!t)throw new Error(`invalid time expression ${i}`);const e=parseInt(t[1]),n=t[2];switch(n){case"s":return e;case"m":return e*60;case"h":return e*60*60;default:throw new Error(`unknown time unit ${n}`)}}throw new Error(`invalid type for a time expression: ${typeof i}`)}const F="there is no container instance that can be provided to this durable object",U="you are requesting too many containers per second",H="runtime signalled the container to exit:",T="container exited with unexpected exit code:",q="container is not listening",R="__CF_CONTAINER_STATE",x="OUTBOUND_CONFIGURATION",j=3,E=100,G=180*1e3,N=5e3,V="10m",v=300,O=8e3,P=2e4,M=33;function et(i,t){return t}const w=new Map,S=new Map,C=new Map,K={SIGINT:2,SIGTERM:15,SIGKILL:9};function m(i,t){return(i instanceof Error?i.message:String(i)).toLowerCase().includes(t)}const I=i=>m(i,F),X=i=>m(i,U),J=i=>m(i,H),k=i=>m(i,q),Y=i=>m(i,T);function z(i){return i instanceof Error?J(i)?+i.message.toLowerCase().slice(i.message.toLowerCase().indexOf(H)+H.length+1):Y(i)?+i.message.toLowerCase().slice(i.message.toLowerCase().indexOf(T)+T.length+1):null:null}function _(i,t){const e=new AbortController;if(i?.aborted)return e.abort(),e.signal;i?.addEventListener("abort",()=>e.abort());const n=setTimeout(()=>e.abort(),t);return e.signal.addEventListener("abort",()=>clearTimeout(n)),e.signal}function A(i,t){const e=i.split("*");if(e.length===1)return i===t;if(!t.startsWith(e[0])||!t.endsWith(e[e.length-1]))return!1;let n=e[0].length;for(let s=1;s<e.length-1;s++){const o=t.indexOf(e[s],n);if(o===-1)return!1;n=o+e[s].length}return n<=t.length-e[e.length-1].length}function L(i,t){return t.some(e=>A(e,i))}function Z(i){let t=i.length;for(;t>0&&i[t-1]===".";)t--;return i.slice(0,t)}class Q{storage;status;constructor(t){this.storage=t}async setRunning(){await this.setStatusAndupdate("running")}async setHealthy(){await this.setStatusAndupdate("healthy")}async setStopping(){await this.setStatusAndupdate("stopping")}async setStopped(){await this.setStatusAndupdate("stopped")}async setStoppedIfUnchanged(t){this.status===t&&await this.setStopped()}async setStoppedWithCode(t){this.status={status:"stopped_with_code",lastChange:Date.now(),exitCode:t},await this.update()}async getState(){if(!this.status){const t=await this.storage.get(R);t?this.status=t:(this.status={status:"stopped",lastChange:Date.now()},await this.update())}return this.status}async setStatusAndupdate(t){this.status={status:t,lastChange:Date.now()},await this.update()}async update(){if(!this.status)throw new Error("status should be init");await this.storage.put(R,this.status)}}class nt extends B{async fetch(t){const e=new URL(t.url),n=Z(e.hostname),{className:s,containerId:o,outboundByHostOverrides:a,outboundHandlerOverride:c,enableInternet:d,allowedHosts:r,deniedHosts:l,interceptAll:p}=this.ctx.props,f={containerId:o,className:s};if(l&&L(n,l))return new Response("Origin is disallowed",{status:520});if(r&&!L(n,r))return new Response("Origin is disallowed",{status:520});const g=w.get(s);if(a&&g){const y=a[n]??Object.entries(a).find(([b])=>b!==n&&A(b,n))?.[1];if(y&&g[y.method])return g[y.method](t,this.env,{...f,params:y.params})}const h=C.get(s);if(h){const y=h[n]??Object.entries(h).find(([b])=>b!==n&&A(b,n))?.[1];if(y)return y(t,this.env,f)}if(!p)return r||d?fetch(t):new Response("Origin is disallowed",{status:520});if(c&&g?.[c.method])return g[c.method](t,this.env,{...f,params:c.params});const u=S.get(s);return u&&g?.[u]?g[u](t,this.env,f):r||d?fetch(t):new Response("Origin is disallowed",{status:520})}}class st extends D{static get outboundByHost(){return C.get(this.name)}static set outboundByHost(t){C.set(this.name,t)}static get outboundHandlers(){return w.get(this.name)}static set outboundHandlers(t){const e=w.get(this.name)??{};w.set(this.name,{...e,...t})}static get outbound(){const t=S.get(this.name);if(t)return w.get(this.name)?.[t]}static set outbound(t){const e="__outbound__",n=w.get(this.name)??{};w.set(this.name,{...n,[e]:t}),S.set(this.name,e)}static get outboundProxies(){return this.outboundHandlers}static set outboundProxies(t){this.outboundHandlers=t}static get outboundProxy(){return this.outbound}static set outboundProxy(t){this.outbound=t}defaultPort;requiredPorts;sleepAfter=V;envVars={};entrypoint;enableInternet=!0;labels={};interceptHttps=!1;allowedHosts;deniedHosts;pingEndpoint="ping";applyOutboundInterceptionPromise=Promise.resolve();usingInterception=!1;constructor(t,e,n){if(super(t,e),t.container===void 0)throw new Error("Containers have not been enabled for this Durable Object class. Have you correctly setup your Wrangler config? More info: https://developers.cloudflare.com/containers/get-started/#configuration");this.state=new Q(this.ctx.storage);const s=this.restoreOutboundConfiguration();this.ctx.blockConcurrencyWhile(async()=>{await this.scheduleNextAlarm(),this.renewActivityTimeout();const o=this.constructor;(s!==void 0||o.outboundByHost!==void 0||o.outbound!==void 0||o.outboundHandlers!==void 0||this.effectiveAllowedHosts!==void 0||this.effectiveDeniedHosts!==void 0)&&(this.usingInterception=!0),this.container.running&&(this.applyOutboundInterceptionPromise=this.applyOutboundInterception())}),this.container=t.container,n&&(n.defaultPort!==void 0&&(this.defaultPort=n.defaultPort),n.sleepAfter!==void 0&&(this.sleepAfter=n.sleepAfter),n.envVars!==void 0&&(this.envVars=n.envVars),n.entrypoint!==void 0&&(this.entrypoint=n.entrypoint),n.enableInternet!==void 0&&(this.enableInternet=n.enableInternet)),this.sql`
+import{WorkerEntrypoint as D,DurableObject as $}from"cloudflare:workers";function W(i=9){const t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",e=new Uint8Array(i);crypto.getRandomValues(e);let n="";for(let s=0;s<i;s++)n+=t[e[s]%t.length];return n}function U(i){if(typeof i=="number")return i;if(typeof i=="string"){const t=i.match(/^(\d+)([smh])$/);if(!t)throw new Error(`invalid time expression ${i}`);const e=parseInt(t[1]),n=t[2];switch(n){case"s":return e;case"m":return e*60;case"h":return e*60*60;default:throw new Error(`unknown time unit ${n}`)}}throw new Error(`invalid type for a time expression: ${typeof i}`)}const B="there is no container instance that can be provided to this durable object",q="you are requesting too many containers per second",T="runtime signalled the container to exit:",S="container exited with unexpected exit code:",j="container is not listening",x="__CF_CONTAINER_STATE",N="OUTBOUND_CONFIGURATION",G=3,O=100,V=180*1e3,P=5e3,K="10m",E=300,I=8e3,M=2e4,k=33;function nt(i,t){return t}const b=new Map,C=new Map,A=new Map,X={SIGINT:2,SIGTERM:15,SIGKILL:9};function v(i,t){return(i instanceof Error?i.message:String(i)).toLowerCase().includes(t)}const H=i=>v(i,B),J=i=>v(i,q),Y=i=>v(i,T),_=i=>v(i,j),z=i=>v(i,S);function Z(i){return i instanceof Error?Y(i)?+i.message.toLowerCase().slice(i.message.toLowerCase().indexOf(T)+T.length+1):z(i)?+i.message.toLowerCase().slice(i.message.toLowerCase().indexOf(S)+S.length+1):null:null}function L(i,t){const e=new AbortController;if(i?.aborted)return e.abort(),e.signal;i?.addEventListener("abort",()=>e.abort());const n=setTimeout(()=>e.abort(),t);return e.signal.addEventListener("abort",()=>clearTimeout(n)),e.signal}function R(i,t){const e=i.split("*");if(e.length===1)return i===t;if(!t.startsWith(e[0])||!t.endsWith(e[e.length-1]))return!1;let n=e[0].length;for(let s=1;s<e.length-1;s++){const o=t.indexOf(e[s],n);if(o===-1)return!1;n=o+e[s].length}return n<=t.length-e[e.length-1].length}function F(i,t){return t.some(e=>R(e,i))}function Q(i){let t=i.length;for(;t>0&&i[t-1]===".";)t--;return i.slice(0,t)}class tt{storage;status;constructor(t){this.storage=t}async setRunning(){await this.setStatusAndupdate("running")}async setHealthy(){await this.setStatusAndupdate("healthy")}async setStopping(){await this.setStatusAndupdate("stopping")}async setStopped(){await this.setStatusAndupdate("stopped")}async setStoppedIfUnchanged(t){this.status===t&&await this.setStopped()}async setStoppedWithCode(t){this.status={status:"stopped_with_code",lastChange:Date.now(),exitCode:t},await this.update()}async getState(){if(!this.status){const t=await this.storage.get(x);t?this.status=t:(this.status={status:"stopped",lastChange:Date.now()},await this.update())}return this.status}async setStatusAndupdate(t){this.status={status:t,lastChange:Date.now()},await this.update()}async update(){if(!this.status)throw new Error("status should be init");await this.storage.put(x,this.status)}}class st extends D{async fetch(t){const e=new URL(t.url),n=Q(e.hostname),{className:s,containerId:o,outboundByHostOverrides:a,outboundHandlerOverride:c,enableInternet:d,allowedHosts:r,deniedHosts:h,interceptAll:f}=this.ctx.props,p={containerId:o,className:s};if(h&&F(n,h))return new Response("Origin is disallowed",{status:520});if(r&&!F(n,r))return new Response("Origin is disallowed",{status:520});const g=b.get(s);if(a&&g){const y=a[n]??Object.entries(a).find(([l])=>l!==n&&R(l,n))?.[1];if(y&&g[y.method])return g[y.method](t,this.env,{...p,params:y.params})}const w=A.get(s);if(w){const y=w[n]??Object.entries(w).find(([l])=>l!==n&&R(l,n))?.[1];if(y)return y(t,this.env,p)}if(!f)return r||d?fetch(t):new Response("Origin is disallowed",{status:520});if(c&&g?.[c.method])return g[c.method](t,this.env,{...p,params:c.params});const u=C.get(s);return u&&g?.[u]?g[u](t,this.env,p):r||d?fetch(t):new Response("Origin is disallowed",{status:520})}}class it extends ${static get outboundByHost(){return A.get(this.name)}static set outboundByHost(t){A.set(this.name,t)}static get outboundHandlers(){return b.get(this.name)}static set outboundHandlers(t){const e=b.get(this.name)??{};b.set(this.name,{...e,...t})}static get outbound(){const t=C.get(this.name);if(t)return b.get(this.name)?.[t]}static set outbound(t){const e="__outbound__",n=b.get(this.name)??{};b.set(this.name,{...n,[e]:t}),C.set(this.name,e)}static get outboundProxies(){return this.outboundHandlers}static set outboundProxies(t){this.outboundHandlers=t}static get outboundProxy(){return this.outbound}static set outboundProxy(t){this.outbound=t}defaultPort;requiredPorts;sleepAfter=K;envVars={};entrypoint;enableInternet=!0;labels={};interceptHttps=!1;allowedHosts;deniedHosts;pingEndpoint="ping";applyOutboundInterceptionPromise=Promise.resolve();usingInterception=!1;constructor(t,e,n){if(super(t,e),t.container===void 0)throw new Error("Containers have not been enabled for this Durable Object class. Have you correctly setup your Wrangler config? More info: https://developers.cloudflare.com/containers/get-started/#configuration");this.state=new tt(this.ctx.storage);const s=this.restoreOutboundConfiguration();this.ctx.blockConcurrencyWhile(async()=>{await this.scheduleNextAlarm(),this.renewActivityTimeout();const o=this.constructor;(s!==void 0||o.outboundByHost!==void 0||o.outbound!==void 0||o.outboundHandlers!==void 0||this.effectiveAllowedHosts!==void 0||this.effectiveDeniedHosts!==void 0)&&(this.usingInterception=!0),this.container.running&&(this.applyOutboundInterceptionPromise=this.applyOutboundInterception())}),this.container=t.container,n&&(n.defaultPort!==void 0&&(this.defaultPort=n.defaultPort),n.sleepAfter!==void 0&&(this.sleepAfter=n.sleepAfter),n.envVars!==void 0&&(this.envVars=n.envVars),n.entrypoint!==void 0&&(this.entrypoint=n.entrypoint),n.enableInternet!==void 0&&(this.enableInternet=n.enableInternet)),this.sql`
       CREATE TABLE IF NOT EXISTS container_schedules (
         id TEXT PRIMARY KEY NOT NULL DEFAULT (randomblob(9)),
         callback TEXT NOT NULL,
@@ -8,20 +8,20 @@ import{WorkerEntrypoint as B,DurableObject as D}from"cloudflare:workers";functio
         delayInSeconds INTEGER,
         created_at INTEGER DEFAULT (unixepoch())
       )
-    `,this.container.running&&(this.monitor=this.container.monitor(),this.setupMonitorCallbacks())}async getState(){return{...await this.state.getState()}}async setOutboundHandler(t,...e){this.validateOutboundHandlerMethodName(t),this.outboundHandlerOverride=e.length===0?{method:t}:{method:t,params:e[0]},await this.refreshOutboundInterception()}async setOutboundByHost(t,e,...n){this.validateOutboundHandlerMethodName(e),this.outboundByHostOverrides[t]=n.length===0?{method:e}:{method:e,params:n[0]},await this.refreshOutboundInterception()}async removeOutboundByHost(t){delete this.outboundByHostOverrides[t],await this.refreshOutboundInterception()}async setOutboundByHosts(t){for(const e of Object.values(t)){const n=typeof e=="string"?e:e.method;this.validateOutboundHandlerMethodName(n)}this.outboundByHostOverrides=Object.fromEntries(Object.entries(t).map(([e,n])=>[e,typeof n=="string"?{method:n}:n])),await this.refreshOutboundInterception()}async setAllowedHosts(t){this.allowedHostsOverride=[...t],this.usingInterception=!0,await this.refreshOutboundInterception()}async setDeniedHosts(t){this.deniedHostsOverride=[...t],this.usingInterception=!0,await this.refreshOutboundInterception()}async allowHost(t){const e=this.effectiveAllowedHosts??[];e.includes(t)||(this.allowedHostsOverride=[...e,t]),this.usingInterception=!0,await this.refreshOutboundInterception()}async denyHost(t){const e=this.effectiveDeniedHosts??[];e.includes(t)||(this.deniedHostsOverride=[...e,t]),this.usingInterception=!0,await this.refreshOutboundInterception()}async removeAllowedHost(t){this.allowedHostsOverride=(this.effectiveAllowedHosts??[]).filter(e=>e!==t),await this.refreshOutboundInterception()}async removeDeniedHost(t){this.deniedHostsOverride=(this.effectiveDeniedHosts??[]).filter(e=>e!==t),await this.refreshOutboundInterception()}async start(t,e){const n=e?.portToCheck??this.defaultPort??(this.requiredPorts?this.requiredPorts[0]:M),s=e?.waitInterval??v;await this.startContainerIfNotRunning({signal:e?.signal,waitInterval:s,retries:e?.retries??Math.ceil(O/s),portToCheck:n},t),this.setupMonitorCallbacks(),await this.ctx.blockConcurrencyWhile(async()=>{await this.onStart()})}async startAndWaitForPorts(t,e,n){let s,o,a;typeof t=="object"&&t!==null&&!Array.isArray(t)?(s=t.ports,o=t.cancellationOptions,a=t.startOptions):(s=t,o=e,a=n);const c=await this.getPortsToCheck(s);await this.syncPendingStoppedEvents(),o??={};const d=o.instanceGetTimeoutMS??O,r=o.waitInterval??v,l=Math.ceil(d/r),p={signal:o.abort,retries:l,waitInterval:r,portToCheck:c[0]},f=await this.startContainerIfNotRunning(p,a);let h=Math.ceil((o.portReadyTimeoutMS??P)/r)-f;for(const u of c)h=await this.waitForPort({signal:o.abort,waitInterval:r,retries:h,portToCheck:u});this.setupMonitorCallbacks(),await this.ctx.blockConcurrencyWhile(async()=>{await this.state.setHealthy(),await this.onStart()})}async waitForPort(t){const e=t.portToCheck,n=this.container.getTcpPort(e),s=new Promise(c=>{t.signal?.addEventListener("abort",()=>{c(!0)})}),o=t.waitInterval??v,a=t.retries??Math.ceil(P/o);for(let c=0;c<a;c++)try{const d=_(t.signal,N);await n.fetch(`http://${this.pingEndpoint}`,{signal:d});break}catch(d){const r=d instanceof Error?d.message:String(d);if(!this.container.running){try{await this.onError(new Error("Container crashed while checking for ports, did you start the container and setup the entrypoint correctly?"))}catch{}throw d}if(c===a-1){try{await this.onError(`Failed to verify port ${e} is available after ${(c+1)*o}ms, last error: ${r}`)}catch{}throw d}if(await Promise.any([new Promise(l=>setTimeout(l,o)),s]),t.signal?.aborted)throw new Error("Container request aborted.",{cause:d})}return a}async stop(t="SIGTERM"){this.container.running&&this.container.signal(typeof t=="string"?K[t]:t),await this.syncPendingStoppedEvents()}async destroy(){await this.container.destroy()}onStart(){}onStop(t){}async onActivityExpired(){console.log("Activity expired, signalling container to stop"),this.container.running&&await this.stop()}onError(t){throw console.error("Container error:",t),t}renewActivityTimeout(){const t=W(this.sleepAfter)*1e3;this.sleepAfterMs=Date.now()+t}decrementInflight(){this.inflightRequests=Math.max(0,this.inflightRequests-1),this.inflightRequests===0&&this.renewActivityTimeout()}async schedule(t,e,n){const s=$(9);if(typeof e!="string")throw new Error("Callback must be a string (method name)");if(typeof this[e]!="function")throw new Error(`this.${e} is not a function`);if(t instanceof Date){const o=Math.floor(t.getTime()/1e3);return this.sql`
+    `,this.container.running&&(this.monitor=this.container.monitor(),this.setupMonitorCallbacks())}async getState(){return{...await this.state.getState()}}async setOutboundHandler(t,...e){this.validateOutboundHandlerMethodName(t),this.outboundHandlerOverride=e.length===0?{method:t}:{method:t,params:e[0]},await this.refreshOutboundInterception()}async setOutboundByHost(t,e,...n){this.validateOutboundHandlerMethodName(e),this.outboundByHostOverrides[t]=n.length===0?{method:e}:{method:e,params:n[0]},await this.refreshOutboundInterception()}async removeOutboundByHost(t){delete this.outboundByHostOverrides[t],await this.refreshOutboundInterception()}async setOutboundByHosts(t){for(const e of Object.values(t)){const n=typeof e=="string"?e:e.method;this.validateOutboundHandlerMethodName(n)}this.outboundByHostOverrides=Object.fromEntries(Object.entries(t).map(([e,n])=>[e,typeof n=="string"?{method:n}:n])),await this.refreshOutboundInterception()}async setAllowedHosts(t){this.allowedHostsOverride=[...t],this.usingInterception=!0,await this.refreshOutboundInterception()}async setDeniedHosts(t){this.deniedHostsOverride=[...t],this.usingInterception=!0,await this.refreshOutboundInterception()}async allowHost(t){const e=this.effectiveAllowedHosts??[];e.includes(t)||(this.allowedHostsOverride=[...e,t]),this.usingInterception=!0,await this.refreshOutboundInterception()}async denyHost(t){const e=this.effectiveDeniedHosts??[];e.includes(t)||(this.deniedHostsOverride=[...e,t]),this.usingInterception=!0,await this.refreshOutboundInterception()}async removeAllowedHost(t){this.allowedHostsOverride=(this.effectiveAllowedHosts??[]).filter(e=>e!==t),await this.refreshOutboundInterception()}async removeDeniedHost(t){this.deniedHostsOverride=(this.effectiveDeniedHosts??[]).filter(e=>e!==t),await this.refreshOutboundInterception()}async start(t,e){const n=e?.portToCheck??this.defaultPort??(this.requiredPorts?this.requiredPorts[0]:k),s=e?.waitInterval??E;await this.startContainerIfNotRunning({signal:e?.signal,waitInterval:s,retries:e?.retries??Math.ceil(I/s),portToCheck:n},t),this.setupMonitorCallbacks(),await this.ctx.blockConcurrencyWhile(async()=>{await this.onStart()})}async startAndWaitForPorts(t,e,n){let s,o,a;typeof t=="object"&&t!==null&&!Array.isArray(t)?(s=t.ports,o=t.cancellationOptions,a=t.startOptions):(s=t,o=e,a=n);const c=await this.getPortsToCheck(s);await this.syncPendingStoppedEvents(),o??={};const d=o.instanceGetTimeoutMS??I,r=o.waitInterval??E,h=Math.ceil(d/r),f={signal:o.abort,retries:h,waitInterval:r,portToCheck:c[0]},p=await this.startContainerIfNotRunning(f,a);let w=Math.ceil((o.portReadyTimeoutMS??M)/r)-p;for(const u of c)w=await this.waitForPort({signal:o.abort,waitInterval:r,retries:w,portToCheck:u});this.setupMonitorCallbacks(),await this.ctx.blockConcurrencyWhile(async()=>{await this.state.setHealthy(),await this.onStart()})}async waitForPort(t){const e=t.portToCheck,n=this.container.getTcpPort(e),s=new Promise(c=>{t.signal?.addEventListener("abort",()=>{c(!0)})}),o=t.waitInterval??E,a=t.retries??Math.ceil(M/o);for(let c=0;c<a;c++)try{const d=L(t.signal,P);await n.fetch(`http://${this.pingEndpoint}`,{signal:d});break}catch(d){const r=d instanceof Error?d.message:String(d);if(!this.container.running){try{await this.onError(new Error("Container crashed while checking for ports, did you start the container and setup the entrypoint correctly?"))}catch{}throw d}if(c===a-1){try{await this.onError(`Failed to verify port ${e} is available after ${(c+1)*o}ms, last error: ${r}`)}catch{}throw d}if(await Promise.any([new Promise(h=>setTimeout(h,o)),s]),t.signal?.aborted)throw new Error("Container request aborted.",{cause:d})}return a}async stop(t="SIGTERM"){this.container.running&&this.container.signal(typeof t=="string"?X[t]:t),await this.syncPendingStoppedEvents()}async destroy(){await this.container.destroy()}onStart(){}onStop(t){}async onActivityExpired(){console.log("Activity expired, signalling container to stop"),this.container.running&&await this.stop()}onError(t){throw console.error("Container error:",t),t}renewActivityTimeout(){const t=U(this.sleepAfter)*1e3;this.sleepAfterMs=Date.now()+t}decrementInflight(){this.inflightRequests=Math.max(0,this.inflightRequests-1),this.inflightRequests===0&&this.renewActivityTimeout()}async schedule(t,e,n){const s=W(9);if(typeof e!="string")throw new Error("Callback must be a string (method name)");if(typeof this[e]!="function")throw new Error(`this.${e} is not a function`);if(t instanceof Date){const o=Math.floor(t.getTime()/1e3);return this.sql`
         INSERT OR REPLACE INTO container_schedules (id, callback, payload, type, time)
         VALUES (${s}, ${e}, ${JSON.stringify(n)}, 'scheduled', ${o})
       `,await this.scheduleNextAlarm(),{taskId:s,callback:e,payload:n,time:o,type:"scheduled"}}if(typeof t=="number"){const o=Math.floor(Date.now()/1e3+t);return this.sql`
         INSERT OR REPLACE INTO container_schedules (id, callback, payload, type, delayInSeconds, time)
         VALUES (${s}, ${e}, ${JSON.stringify(n)}, 'delayed', ${t}, ${o})
-      `,await this.scheduleNextAlarm(),{taskId:s,callback:e,payload:n,delayInSeconds:t,time:o,type:"delayed"}}throw new Error("Invalid schedule type. 'when' must be a Date or number of seconds")}async containerFetch(t,e,n){const{request:s,port:o}=this.requestAndPortFromContainerFetchArgs(t,e,n),a=await this.state.getState();if(!this.container.running||a.status!=="healthy")try{await this.startAndWaitForPorts(o,{abort:s.signal})}catch(r){return I(r)?new Response(`There is no Container instance available at this time.
+      `,await this.scheduleNextAlarm(),{taskId:s,callback:e,payload:n,delayInSeconds:t,time:o,type:"delayed"}}throw new Error("Invalid schedule type. 'when' must be a Date or number of seconds")}async containerFetch(t,e,n){const{request:s,port:o}=this.requestAndPortFromContainerFetchArgs(t,e,n),a=await this.state.getState();if(!this.container.running||a.status!=="healthy")try{await this.startAndWaitForPorts(o,{abort:s.signal})}catch(r){return H(r)?new Response(`There is no Container instance available at this time.
 This is likely because you have reached your max concurrent instance count (set in wrangler config) or are you currently provisioning the Container.
-If you are deploying your Container for the first time, check your dashboard to see provisioning status, this may take a few minutes.`,{status:503}):X(r)?new Response(r instanceof Error?r.message:String(r),{status:429}):new Response(`Failed to start container: ${r instanceof Error?r.message:String(r)}`,{status:500})}const c=this.container.getTcpPort(o),d=s.url.replace("https:","http:");this.inflightRequests++;try{this.renewActivityTimeout();const r=await c.fetch(d,s);if(r.webSocket!==null){const l=r.webSocket,[p,f]=Object.values(new WebSocketPair);let g=!1;const h=()=>{g||(g=!0,this.decrementInflight())};return l.accept(),f.accept(),f.addEventListener("message",async u=>{this.renewActivityTimeout();try{const y=u.data instanceof Blob?await u.data.arrayBuffer():u.data;l.send(y)}catch{f.close(1011,"Failed to forward message to container")}}),l.addEventListener("message",async u=>{this.renewActivityTimeout();try{const y=u.data instanceof Blob?await u.data.arrayBuffer():u.data;f.send(y)}catch{l.close(1011,"Failed to forward message to client")}}),f.addEventListener("close",u=>{h();const y=u.code===1005||u.code===1006?1e3:u.code;l.close(y,u.reason)}),l.addEventListener("close",u=>{h();const y=u.code===1005||u.code===1006?1e3:u.code;f.close(y,u.reason)}),f.addEventListener("error",()=>{h(),l.close(1011,"Client WebSocket error")}),l.addEventListener("error",()=>{h(),f.close(1011,"Container WebSocket error")}),new Response(null,{status:r.status,webSocket:p,headers:r.headers})}if(r.body!==null){const{readable:l,writable:p}=new IdentityTransformStream;return r.body?.pipeTo(p).finally(()=>{this.decrementInflight()}),new Response(l,r)}return this.decrementInflight(),r}catch(r){if(this.decrementInflight(),!(r instanceof Error))throw r;return r.message.includes("Network connection lost.")?new Response("Container suddenly disconnected, try again",{status:500}):(console.error(`Error proxying request to container ${this.ctx.id}:`,r),new Response(`Error proxying request to container: ${r instanceof Error?r.message:String(r)}`,{status:500}))}}async fetch(t){if(this.defaultPort===void 0&&!t.headers.has("cf-container-target-port"))throw new Error("No port configured for this container. Set the `defaultPort` in your Container subclass, or specify a port with `container.fetch(switchPort(request, port))`.");let e=this.defaultPort;if(t.headers.has("cf-container-target-port")){const n=parseInt(t.headers.get("cf-container-target-port")??"");if(isNaN(n))throw new Error("port value from switchPort is not a number");e=n}return await this.containerFetch(t,e)}container;onStopCalled=!1;state;monitor;startInFlight;monitoredPromise;sleepAfterMs=0;inflightRequests=0;outboundByHostOverrides={};outboundHandlerOverride;allowedHostsOverride;deniedHostsOverride;hasInterceptAllRegistration=!1;validateOutboundHandlerMethodName(t){const e=w.get(this.constructor.name);if(!e||!(t in e))throw new Error(`Outbound handler method '${t}' not found in outboundHandlers for ${this.constructor.name}`)}get effectiveAllowedHosts(){return this.allowedHostsOverride??this.allowedHosts}get effectiveDeniedHosts(){return this.deniedHostsOverride??this.deniedHosts}getOutboundConfiguration(){return{outboundByHostOverrides:Object.keys(this.outboundByHostOverrides).length>0?this.outboundByHostOverrides:void 0,outboundHandlerOverride:this.outboundHandlerOverride,allowedHosts:this.effectiveAllowedHosts,deniedHosts:this.effectiveDeniedHosts,hasInterceptAllRegistration:this.hasInterceptAllRegistration||void 0}}persistOutboundConfiguration(t){this.ctx.storage.kv.put(x,{...t,allowedHosts:this.allowedHostsOverride,deniedHosts:this.deniedHostsOverride})}restoreOutboundConfiguration(){const t=this.ctx.storage.kv.get(x);if(t){if(this.outboundHandlerOverride=void 0,t.outboundHandlerOverride!==void 0)try{this.validateOutboundHandlerMethodName(t.outboundHandlerOverride.method),this.outboundHandlerOverride=t.outboundHandlerOverride}catch(e){console.warn("Ignoring invalid persisted outbound handler override:",e)}this.outboundByHostOverrides={};for(const[e,n]of Object.entries(t.outboundByHostOverrides??{}))try{this.validateOutboundHandlerMethodName(n.method),this.outboundByHostOverrides[e]=n}catch(s){console.warn(`Ignoring invalid persisted outbound override for ${e}:`,s)}return this.hasInterceptAllRegistration=t.hasInterceptAllRegistration===!0,t.allowedHosts&&(this.allowedHostsOverride=t.allowedHosts),t.deniedHosts&&(this.deniedHostsOverride=t.deniedHosts),this.getOutboundConfiguration()}}needsCatchAllInterception(){return this.constructor.outbound!==void 0||this.outboundHandlerOverride!==void 0}hasMutableOutboundConfiguration(){return Object.keys(this.outboundByHostOverrides).length>0||this.allowedHostsOverride!==void 0||this.deniedHostsOverride!==void 0}shouldInterceptAllOutbound(){return this.hasInterceptAllRegistration||this.needsCatchAllInterception()||this.effectiveAllowedHosts!==void 0||this.effectiveDeniedHosts!==void 0||this.hasMutableOutboundConfiguration()}getStaticOutboundByHostKeys(){const t=this.constructor;return t.outboundByHost?Object.keys(t.outboundByHost):[]}getHostsToIntercept(){const t=new Set,e=this.constructor;if(e.outboundByHost)for(const n of Object.keys(e.outboundByHost))t.add(n);for(const n of Object.keys(this.outboundByHostOverrides))t.add(n);return[...t]}async refreshOutboundInterception(){this.usingInterception&&(this.applyOutboundInterceptionPromise=this.applyOutboundInterception(),await this.applyOutboundInterceptionPromise)}async applyOutboundInterception(){const t=this.ctx;if(t.exports===void 0)throw new Error("ctx.exports is undefined, please try to update your compatibility date or export ContainerProxy from the containers package in your worker entrypoint");if(t.exports.ContainerProxy===void 0)throw new Error("ctx.exports.ContainerProxy is undefined, export ContainerProxy from the containers package in your worker entrypoint");const e=this.shouldInterceptAllOutbound();e&&(this.hasInterceptAllRegistration=e);const n=this.getOutboundConfiguration();this.persistOutboundConfiguration(n);const s=this.getHostsToIntercept(),o={enableInternet:this.enableInternet,containerId:this.ctx.id.toString(),className:this.constructor.name,outboundByHostOverrides:n.outboundByHostOverrides,outboundHandlerOverride:n.outboundHandlerOverride,allowedHosts:n.allowedHosts,deniedHosts:n.deniedHosts,interceptAll:e},a=t.exports.ContainerProxy({props:o});if(e){for(const c of this.getStaticOutboundByHostKeys())await this.container.interceptOutboundHttp(c,a),this.interceptHttps&&await this.container.interceptOutboundHttps(c,a);this.interceptHttps&&await this.container.interceptOutboundHttps("*",a),await this.container.interceptAllOutboundHttp(a)}else for(const c of s)await this.container.interceptOutboundHttp(c,a),this.interceptHttps&&await this.container.interceptOutboundHttps(c,a)}sql(t,...e){const n=t.reduce((s,o,a)=>s+o+(a<e.length?"?":""),"");return[...this.ctx.storage.sql.exec(n,...e)]}requestAndPortFromContainerFetchArgs(t,e,n){let s,o;if(t instanceof Request)s=t,o=typeof e=="number"?e:void 0;else{const a=typeof t=="string"?t:t.toString(),c=typeof e=="number"?{}:e||{};o=typeof e=="number"?e:typeof n=="number"?n:void 0,s=new Request(a,c)}if(o??=this.defaultPort,o===void 0)throw new Error("No port specified for container fetch. Set defaultPort or specify a port parameter.");return{request:s,port:o}}async getPortsToCheck(t){return t!==void 0?Array.isArray(t)?t:[t]:this.requiredPorts&&this.requiredPorts.length>0?[...this.requiredPorts]:[this.defaultPort??M]}async startContainerIfNotRunning(t,e){if(this.startInFlight)return this.startInFlight;if(this.container.running)return this.monitor||(this.monitor=this.container.monitor()),0;const n=this.doStartContainer(t,e);this.startInFlight=n;try{return await n}finally{this.startInFlight===n&&(this.startInFlight=void 0)}}async doStartContainer(t,e){const n=new Promise(a=>{t.signal?.addEventListener("abort",()=>{a(!0)})}),s=t.waitInterval??v,o=t.retries??Math.ceil(O/s);for(let a=0;a<o;a++){const c=e?.envVars??this.envVars,d=e?.entrypoint??this.entrypoint,r=e?.enableInternet??this.enableInternet,l=e?.labels??this.labels,p={enableInternet:r};c&&Object.keys(c).length>0&&(p.env=c),d&&(p.entrypoint=d),l&&Object.keys(l).length>0&&(p.labels=l),this.renewActivityTimeout();const f=async()=>{const h=await this.monitor?.catch(u=>u);if(typeof h=="number"){const u=new Error(`Container exited before we could determine the container health, exit code: ${h}`);await this.state.setStoppedWithCode(h),this.monitor=void 0;try{await this.onError(u)}catch{}throw u}else if(!I(h)){await this.state.setStopped(),this.monitor=void 0;try{await this.onError(h)}catch{}throw h}};a>0&&!this.container.running&&await f(),await this.scheduleNextAlarm(),this.container.running?await this.scheduleNextAlarm():(await this.refreshOutboundInterception(),this.container.start(p),this.monitor=this.container.monitor(),await this.state.setRunning()),this.renewActivityTimeout();const g=this.container.getTcpPort(t.portToCheck);try{const h=_(t.signal,N);return await g.fetch("http://containerstarthealthcheck",{signal:h}),a}catch(h){if(k(h)&&this.container.running)return a;if(!this.container.running&&k(h)&&await f(),await Promise.any([new Promise(u=>setTimeout(u,t.waitInterval)),n]),t.signal?.aborted)throw new Error("Aborted waiting for container to start as we received a cancellation signal",{cause:h});if(o===a+1)throw h instanceof Error&&h.message.includes("Network connection lost")&&this.ctx.abort(),await f(),await this.state.setStopped(),this.monitor=void 0,new Error(F,{cause:h});continue}}throw new Error(`Container did not start after ${o*s}ms`)}setupMonitorCallbacks(){const t=this.monitor;!t||this.monitoredPromise===t||(this.monitoredPromise=t,t.then(async()=>{await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStoppedWithCode(0)})}).catch(async e=>{if(this.monitor!==t)return;if(I(e)){await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStopped()});return}const n=z(e);if(n!==null){await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStoppedWithCode(n)});return}if(await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStopped()}),this.monitor===t)try{await this.onError(e)}catch{}}).finally(()=>{this.monitor===t&&(this.monitoredPromise=void 0,this.monitor=void 0)}))}deleteSchedules(t){this.sql`DELETE FROM container_schedules WHERE callback = ${t}`}async alarm(t){if(t!==void 0&&t.isRetry&&t.retryCount>j){((Number(this.sql`SELECT COUNT(*) as count FROM container_schedules`[0]?.count)||0)>0||this.container.running)&&await this.scheduleNextAlarm();return}const e=this.sql`
+If you are deploying your Container for the first time, check your dashboard to see provisioning status, this may take a few minutes.`,{status:503}):J(r)?new Response(r instanceof Error?r.message:String(r),{status:429}):new Response(`Failed to start container: ${r instanceof Error?r.message:String(r)}`,{status:500})}const c=this.container.getTcpPort(o),d=s.url.replace("https:","http:");this.inflightRequests++;try{this.renewActivityTimeout();const r=await c.fetch(d,s);if(r.webSocket!==null){const h=r.webSocket,[f,p]=Object.values(new WebSocketPair);let g=!1;const w=()=>{g||(g=!0,this.decrementInflight())};return h.accept(),p.accept(),p.addEventListener("message",async u=>{this.renewActivityTimeout();try{const y=u.data instanceof Blob?await u.data.arrayBuffer():u.data;h.send(y)}catch{p.close(1011,"Failed to forward message to container")}}),h.addEventListener("message",async u=>{this.renewActivityTimeout();try{const y=u.data instanceof Blob?await u.data.arrayBuffer():u.data;p.send(y)}catch{h.close(1011,"Failed to forward message to client")}}),p.addEventListener("close",u=>{w();const y=u.code===1005||u.code===1006?1e3:u.code;h.close(y,u.reason)}),h.addEventListener("close",u=>{w();const y=u.code===1005||u.code===1006?1e3:u.code;p.close(y,u.reason)}),p.addEventListener("error",()=>{w(),h.close(1011,"Client WebSocket error")}),h.addEventListener("error",()=>{w(),p.close(1011,"Container WebSocket error")}),new Response(null,{status:r.status,webSocket:f,headers:r.headers})}if(r.body!==null){const{readable:h,writable:f}=new IdentityTransformStream;return r.body?.pipeTo(f).finally(()=>{this.decrementInflight()}),new Response(h,r)}return this.decrementInflight(),r}catch(r){if(this.decrementInflight(),!(r instanceof Error))throw r;return r.message.includes("Network connection lost.")?new Response("Container suddenly disconnected, try again",{status:500}):(console.error(`Error proxying request to container ${this.ctx.id}:`,r),new Response(`Error proxying request to container: ${r instanceof Error?r.message:String(r)}`,{status:500}))}}async fetch(t){if(this.defaultPort===void 0&&!t.headers.has("cf-container-target-port"))throw new Error("No port configured for this container. Set the `defaultPort` in your Container subclass, or specify a port with `container.fetch(switchPort(request, port))`.");let e=this.defaultPort;if(t.headers.has("cf-container-target-port")){const n=parseInt(t.headers.get("cf-container-target-port")??"");if(isNaN(n))throw new Error("port value from switchPort is not a number");e=n}return await this.containerFetch(t,e)}container;onStopCalled=!1;state;monitor;startInFlight;monitoredPromise;sleepAfterMs=0;inflightRequests=0;outboundByHostOverrides={};outboundHandlerOverride;allowedHostsOverride;deniedHostsOverride;hasInterceptAllRegistration=!1;validateOutboundHandlerMethodName(t){const e=b.get(this.constructor.name);if(!e||!(t in e))throw new Error(`Outbound handler method '${t}' not found in outboundHandlers for ${this.constructor.name}`)}get effectiveAllowedHosts(){return this.allowedHostsOverride??this.allowedHosts}get effectiveDeniedHosts(){return this.deniedHostsOverride??this.deniedHosts}getOutboundConfiguration(){return{outboundByHostOverrides:Object.keys(this.outboundByHostOverrides).length>0?this.outboundByHostOverrides:void 0,outboundHandlerOverride:this.outboundHandlerOverride,allowedHosts:this.effectiveAllowedHosts,deniedHosts:this.effectiveDeniedHosts,hasInterceptAllRegistration:this.hasInterceptAllRegistration||void 0}}persistOutboundConfiguration(t){this.ctx.storage.kv.put(N,{...t,allowedHosts:this.allowedHostsOverride,deniedHosts:this.deniedHostsOverride})}restoreOutboundConfiguration(){const t=this.ctx.storage.kv.get(N);if(t){if(this.outboundHandlerOverride=void 0,t.outboundHandlerOverride!==void 0)try{this.validateOutboundHandlerMethodName(t.outboundHandlerOverride.method),this.outboundHandlerOverride=t.outboundHandlerOverride}catch(e){console.warn("Ignoring invalid persisted outbound handler override:",e)}this.outboundByHostOverrides={};for(const[e,n]of Object.entries(t.outboundByHostOverrides??{}))try{this.validateOutboundHandlerMethodName(n.method),this.outboundByHostOverrides[e]=n}catch(s){console.warn(`Ignoring invalid persisted outbound override for ${e}:`,s)}return this.hasInterceptAllRegistration=t.hasInterceptAllRegistration===!0,t.allowedHosts&&(this.allowedHostsOverride=t.allowedHosts),t.deniedHosts&&(this.deniedHostsOverride=t.deniedHosts),this.getOutboundConfiguration()}}needsCatchAllInterception(){return this.constructor.outbound!==void 0||this.outboundHandlerOverride!==void 0}hasMutableOutboundConfiguration(){return Object.keys(this.outboundByHostOverrides).length>0||this.allowedHostsOverride!==void 0||this.deniedHostsOverride!==void 0}shouldInterceptAllOutbound(){return this.hasInterceptAllRegistration||this.needsCatchAllInterception()||this.effectiveAllowedHosts!==void 0||this.effectiveDeniedHosts!==void 0||this.hasMutableOutboundConfiguration()}getStaticOutboundByHostKeys(){const t=this.constructor;return t.outboundByHost?Object.keys(t.outboundByHost):[]}getHostsToIntercept(){const t=new Set,e=this.constructor;if(e.outboundByHost)for(const n of Object.keys(e.outboundByHost))t.add(n);for(const n of Object.keys(this.outboundByHostOverrides))t.add(n);return[...t]}async refreshOutboundInterception(){this.usingInterception&&(this.applyOutboundInterceptionPromise=this.applyOutboundInterception(),await this.applyOutboundInterceptionPromise)}async applyOutboundInterception(){const t=this.ctx;if(t.exports===void 0)throw new Error("ctx.exports is undefined, please try to update your compatibility date or export ContainerProxy from the containers package in your worker entrypoint");if(t.exports.ContainerProxy===void 0)throw new Error("ctx.exports.ContainerProxy is undefined, export ContainerProxy from the containers package in your worker entrypoint");const e=this.shouldInterceptAllOutbound();e&&(this.hasInterceptAllRegistration=e);const n=this.getOutboundConfiguration();this.persistOutboundConfiguration(n);const s=this.getHostsToIntercept(),o={enableInternet:this.enableInternet,containerId:this.ctx.id.toString(),className:this.constructor.name,outboundByHostOverrides:n.outboundByHostOverrides,outboundHandlerOverride:n.outboundHandlerOverride,allowedHosts:n.allowedHosts,deniedHosts:n.deniedHosts,interceptAll:e},a=t.exports.ContainerProxy({props:o});if(e){for(const c of this.getStaticOutboundByHostKeys())await this.container.interceptOutboundHttp(c,a),this.interceptHttps&&await this.container.interceptOutboundHttps(c,a);this.interceptHttps&&await this.container.interceptOutboundHttps("*",a),await this.container.interceptAllOutboundHttp(a)}else for(const c of s)await this.container.interceptOutboundHttp(c,a),this.interceptHttps&&await this.container.interceptOutboundHttps(c,a)}sql(t,...e){const n=t.reduce((s,o,a)=>s+o+(a<e.length?"?":""),"");return[...this.ctx.storage.sql.exec(n,...e)]}requestAndPortFromContainerFetchArgs(t,e,n){let s,o;if(t instanceof Request)s=t,o=typeof e=="number"?e:void 0;else{const a=typeof t=="string"?t:t.toString(),c=typeof e=="number"?{}:e||{};o=typeof e=="number"?e:typeof n=="number"?n:void 0,s=new Request(a,c)}if(o??=this.defaultPort,o===void 0)throw new Error("No port specified for container fetch. Set defaultPort or specify a port parameter.");return{request:s,port:o}}async getPortsToCheck(t){return t!==void 0?Array.isArray(t)?t:[t]:this.requiredPorts&&this.requiredPorts.length>0?[...this.requiredPorts]:[this.defaultPort??k]}async startContainerIfNotRunning(t,e){if(this.startInFlight)return this.startInFlight;if(this.container.running)return this.monitor||(this.monitor=this.container.monitor()),0;const n=this.doStartContainer(t,e);this.startInFlight=n;try{return await n}finally{this.startInFlight===n&&(this.startInFlight=void 0)}}async doStartContainer(t,e){const n=new Promise(a=>{t.signal?.addEventListener("abort",()=>{a(!0)})}),s=t.waitInterval??E,o=t.retries??Math.ceil(I/s);for(let a=0;a<o;a++){const c=e?.envVars??this.envVars,d=e?.entrypoint??this.entrypoint,r=e?.enableInternet??this.enableInternet,h=e?.labels??this.labels,f={enableInternet:r};c&&Object.keys(c).length>0&&(f.env=c),d&&(f.entrypoint=d),h&&Object.keys(h).length>0&&(f.labels=h);const p=e?.containerSnapshot,g=e?.image??this.image,w=e?.instance??this.instance;p?f.containerSnapshot=p:g&&(f.image=g),w&&(f.instance=w),this.renewActivityTimeout();const u=async()=>{const l=await this.monitor?.catch(m=>m);if(typeof l=="number"){const m=new Error(`Container exited before we could determine the container health, exit code: ${l}`);await this.state.setStoppedWithCode(l),this.monitor=void 0;try{await this.onError(m)}catch{}throw m}else if(!H(l)){await this.state.setStopped(),this.monitor=void 0;try{await this.onError(l)}catch{}throw l}};a>0&&!this.container.running&&await u(),await this.scheduleNextAlarm(),this.container.running?await this.scheduleNextAlarm():(await this.refreshOutboundInterception(),this.container.start(f),this.monitor=this.container.monitor(),await this.state.setRunning()),this.renewActivityTimeout();const y=this.container.getTcpPort(t.portToCheck);try{const l=L(t.signal,P);return await y.fetch("http://containerstarthealthcheck",{signal:l}),a}catch(l){if(_(l)&&this.container.running)return a;if(!this.container.running&&_(l)&&await u(),await Promise.any([new Promise(m=>setTimeout(m,t.waitInterval)),n]),t.signal?.aborted)throw new Error("Aborted waiting for container to start as we received a cancellation signal",{cause:l});if(o===a+1)throw l instanceof Error&&l.message.includes("Network connection lost")&&this.ctx.abort(),await u(),await this.state.setStopped(),this.monitor=void 0,new Error(B,{cause:l});continue}}throw new Error(`Container did not start after ${o*s}ms`)}setupMonitorCallbacks(){const t=this.monitor;!t||this.monitoredPromise===t||(this.monitoredPromise=t,t.then(async()=>{await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStoppedWithCode(0)})}).catch(async e=>{if(this.monitor!==t)return;if(H(e)){await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStopped()});return}const n=Z(e);if(n!==null){await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStoppedWithCode(n)});return}if(await this.ctx.blockConcurrencyWhile(async()=>{this.monitor===t&&await this.state.setStopped()}),this.monitor===t)try{await this.onError(e)}catch{}}).finally(()=>{this.monitor===t&&(this.monitoredPromise=void 0,this.monitor=void 0)}))}deleteSchedules(t){this.sql`DELETE FROM container_schedules WHERE callback = ${t}`}async alarm(t){if(t!==void 0&&t.isRetry&&t.retryCount>G){((Number(this.sql`SELECT COUNT(*) as count FROM container_schedules`[0]?.count)||0)>0||this.container.running)&&await this.scheduleNextAlarm();return}const e=this.sql`
          SELECT * FROM container_schedules;
-       `;let n=Date.now()+G;const s=Date.now()/1e3;for(const d of e){if(d.time>s)continue;const r=this[d.callback];if(!r||typeof r!="function"){console.error(`Callback ${d.callback} not found or is not a function`);continue}const l=this.getSchedule(d.id);try{const p=d.payload?JSON.parse(d.payload):void 0;await r.call(this,p,await l)}catch(p){console.error(`Error executing scheduled callback "${d.callback}":`,p)}this.sql`DELETE FROM container_schedules WHERE id = ${d.id}`}const o=this.sql`
+       `;let n=Date.now()+V;const s=Date.now()/1e3;for(const d of e){if(d.time>s)continue;const r=this[d.callback];if(!r||typeof r!="function"){console.error(`Callback ${d.callback} not found or is not a function`);continue}const h=this.getSchedule(d.id);try{const f=d.payload?JSON.parse(d.payload):void 0;await r.call(this,f,await h)}catch(f){console.error(`Error executing scheduled callback "${d.callback}":`,f)}this.sql`DELETE FROM container_schedules WHERE id = ${d.id}`}const o=this.sql`
          SELECT * FROM container_schedules;
-       `,a=Math.min(...o.map(d=>d.time*1e3));if(!this.container.running){await this.syncPendingStoppedEvents(),o.length==0?await this.ctx.storage.deleteAlarm():await this.ctx.storage.setAlarm(a);return}if(this.isActivityExpired()){await this.onActivityExpired(),this.renewActivityTimeout(),await this.ctx.storage.setAlarm(Date.now()+E);return}n=Math.min(a,n,this.sleepAfterMs);const c=Math.max(n,Date.now()+E);await this.ctx.storage.setAlarm(c)}async syncPendingStoppedEvents(){const t=await this.state.getState();if(!this.container.running&&(t.status==="healthy"||t.status==="running")){await this.callOnStop({exitCode:0,reason:"exit"},t);return}if(!this.container.running&&t.status==="stopped_with_code"){await this.callOnStop({exitCode:t.exitCode??0,reason:"exit"},t);return}}async callOnStop(t,e){if(this.onStopCalled)return;this.onStopCalled=!0;const n=this.onStop(t);n instanceof Promise?await n.finally(()=>{this.onStopCalled=!1}):this.onStopCalled=!1,await this.state.setStoppedIfUnchanged(e)}async scheduleNextAlarm(t=1e3){const e=Date.now()+Math.max(t,E),n=await this.ctx.storage.getAlarm();n!==null&&n<=e||(await this.ctx.storage.setAlarm(e),await this.ctx.storage.sync())}async listSchedules(t){const e=this.sql`
+       `,a=Math.min(...o.map(d=>d.time*1e3));if(!this.container.running){await this.syncPendingStoppedEvents(),o.length==0?await this.ctx.storage.deleteAlarm():await this.ctx.storage.setAlarm(a);return}if(this.isActivityExpired()){await this.onActivityExpired(),this.renewActivityTimeout(),await this.ctx.storage.setAlarm(Date.now()+O);return}n=Math.min(a,n,this.sleepAfterMs);const c=Math.max(n,Date.now()+O);await this.ctx.storage.setAlarm(c)}async syncPendingStoppedEvents(){const t=await this.state.getState();if(!this.container.running&&(t.status==="healthy"||t.status==="running")){await this.callOnStop({exitCode:0,reason:"exit"},t);return}if(!this.container.running&&t.status==="stopped_with_code"){await this.callOnStop({exitCode:t.exitCode??0,reason:"exit"},t);return}}async callOnStop(t,e){if(this.onStopCalled)return;this.onStopCalled=!0;const n=this.onStop(t);n instanceof Promise?await n.finally(()=>{this.onStopCalled=!1}):this.onStopCalled=!1,await this.state.setStoppedIfUnchanged(e)}async scheduleNextAlarm(t=1e3){const e=Date.now()+Math.max(t,O),n=await this.ctx.storage.getAlarm();n!==null&&n<=e||(await this.ctx.storage.setAlarm(e),await this.ctx.storage.sync())}async listSchedules(t){const e=this.sql`
       SELECT * FROM container_schedules WHERE callback = ${t} LIMIT 1
     `;return!e||e.length===0?[]:e.map(this.toSchedule)}toSchedule(t){let e;try{e=JSON.parse(t.payload)}catch(n){console.error(`Error parsing payload for schedule ${t.id}:`,n),e=void 0}return t.type==="delayed"?{taskId:t.id,callback:t.callback,payload:e,type:"delayed",time:t.time,delayInSeconds:t.delayInSeconds}:{taskId:t.id,callback:t.callback,payload:e,type:"scheduled",time:t.time}}async getSchedule(t){const e=this.sql`
       SELECT * FROM container_schedules WHERE id = ${t} LIMIT 1
-    `;if(!e||e.length===0)return;const n=e[0];return this.toSchedule(n)}isActivityExpired(){return this.inflightRequests>0?(this.renewActivityTimeout(),!1):this.sleepAfterMs<=Date.now()}}export{st as Container,nt as ContainerProxy,et as outboundParams};
+    `;if(!e||e.length===0)return;const n=e[0];return this.toSchedule(n)}isActivityExpired(){return this.inflightRequests>0?(this.renewActivityTimeout(),!1):this.sleepAfterMs<=Date.now()}}export{it as Container,st as ContainerProxy,nt as outboundParams};

package/dist/packem_shared/DURABLE_OBJECT_POLICY_FORBIDDEN_KEYS-B9DkqZkf.mjs

@@ -0,0 +1 @@
+import{LunoraError as h}from"@lunora/errors";const d=new Set(["basic","lite","standard-1","standard-2","standard-3","standard-4"]),l=new Set(["lite","standard-1","standard-2","standard-3","standard-4"]),f="cloudflare/",w=e=>e.startsWith(f),g=["maxInstances","rollout"],c=100,u=128,s=/^[A-Z_]\w*$/i,y=/^\d+[smh]$/,E={h:3600,m:60,s:1},D=e=>{if(typeof e=="number")return Math.floor(e);if(y.exec(e)===null)throw new TypeError(`Invalid duration "${e}" — expected a number of seconds or "<n>[smh]"`);return Number(e.slice(0,-1))*(E[e.slice(-1)]??1)},T=e=>{const t=e.endsWith("/")?e.slice(0,-1):e,n=t.lastIndexOf("/");return n===-1?t:t.slice(n+1)},v=e=>{const t=e.lastIndexOf("/");return t===-1?".":e.slice(0,t)||"/"},M=e=>{if(typeof e!="string")return"build"in e?{buildDir:e.build.endsWith("/")?e.build.slice(0,-1):e.build,kind:"build"}:{kind:"registry",reference:e.registry};if(T(e).startsWith("Dockerfile"))return{buildContext:v(e),dockerfilePath:e,kind:"dockerfile"};const t=e.endsWith("/")?e.slice(0,-1):e;return{buildContext:t,dockerfilePath:`${t}/Dockerfile`,kind:"dockerfile"}},j=e=>`${e.charAt(0).toUpperCase()}${e.slice(1)}Container`,R=e=>`CONTAINER_${e.replaceAll(/(?<=[a-z0-9])(?=[A-Z])/g,"_").toUpperCase()}`,V=e=>`lunora-${e.replaceAll(/(?<=[a-z0-9])(?=[A-Z])/g,"-").toLowerCase()}:build`,m=e=>{if(typeof e=="string"){if(e.length===0)throw new TypeError("defineContainer: `image` must be a non-empty path or a { registry } reference");if(e.includes(":"))throw new TypeError(`defineContainer: \`image\` string "${e}" looks like a registry reference — pass it as { registry: "${e}" } instead. Plain strings are local Dockerfile paths.`);return}if("build"in e){if(typeof e.build!="string"||e.build.length===0)throw new TypeError("defineContainer: `image.build` must be a non-empty source directory for Railpack to build");return}if(typeof e.registry!="string"||e.registry.length===0)throw new TypeError("defineContainer: `image.registry` must be a non-empty fully-qualified image reference")},C=(e,t,n)=>{for(const[r,o]of Object.entries(e.secretsStore??{})){if(!s.test(r))throw new TypeError(`defineContainer: secretsStore env name "${r}" is not a valid environment variable name`);if(typeof o!="string"||o.trim().length===0)throw new TypeError(`defineContainer: \`secretsStore["${r}"]\` must be a non-empty Secrets Store binding name`);if(t.has(r)||n.has(r))throw new TypeError(`defineContainer: "${r}" is declared in both \`secretsStore\` and \`env\`/\`secrets\` — pick one source for the value`)}},$=e=>{for(const r of Object.keys(e.env??{}))if(!s.test(r))throw new TypeError(`defineContainer: env variable name "${r}" is not a valid environment variable name`);for(const r of Object.keys(e.buildArgs??{}))if(!s.test(r))throw new TypeError(`defineContainer: buildArg name "${r}" is not a valid environment variable name`);const t=new Set(Object.keys(e.env??{})),n=new Set(e.secrets);for(const r of e.secrets??[]){if(!s.test(r))throw new TypeError(`defineContainer: secret name "${r}" is not a valid environment variable name`);if(t.has(r))throw new TypeError(`defineContainer: "${r}" is declared in both \`env\` and \`secrets\` — a secret would silently overwrite the static env value; pick one`)}C(e,t,n)},i=(e,t)=>{if(!Number.isInteger(e)||e<1||e>65535)throw new TypeError(`defineContainer: \`${t}\` must be an integer in 1–65535 (got ${String(e)})`)},k=e=>{for(const t of e.readyOn??[]){if(typeof t.path!="string"||t.path.trim().length===0)throw new TypeError("defineContainer: `readyOn[].path` must be a non-empty HTTP path string");if(t.path!==t.path.trim())throw new TypeError("defineContainer: `readyOn[].path` must not have leading or trailing whitespace");if(t.port!==void 0&&i(t.port,"readyOn[].port"),t.status!==void 0&&(!Number.isInteger(t.status)||t.status<100||t.status>599))throw new TypeError(`defineContainer: \`readyOn[].status\` must be an HTTP status code in 100–599 (got ${String(t.status)})`)}},p=(e,t)=>{if(e!==void 0){if(typeof e=="string"){if(!y.test(e))throw new TypeError(`defineContainer: \`${t}\` string "${e}" must be a number of seconds followed by a unit, e.g. "30s", "5m", or "1h"`)}else if(!Number.isInteger(e)||e<1)throw new TypeError(`defineContainer: \`${t}\` must be a positive integer number of seconds or a duration string like "5m" (got ${String(e)})`)}},S=e=>{const{backups:t}=e;if(t!==void 0){if(e.sandbox!==!0)throw new TypeError("defineContainer: `backups` needs `sandbox: true` — directory backups are a Sandbox SDK helper");if(typeof t.bucket!="string"||t.bucket.trim().length===0)throw new TypeError("defineContainer: `backups.bucket` must name an R2 bucket binding");if(t.prefix!==void 0&&(typeof t.prefix!="string"||t.prefix.length>0&&!t.prefix.endsWith("/")))throw new TypeError("defineContainer: `backups.prefix` must be a string ending in `/`, or omitted")}},I=e=>{for(const t of["allowedHosts","deniedHosts"])if(e[t]?.some(r=>typeof r!="string"||r.trim().length===0))throw new TypeError(`defineContainer: \`${t}\` must be an array of non-empty hostname patterns`);if(e.interceptHttps!==void 0&&typeof e.interceptHttps!="boolean")throw new TypeError("defineContainer: `interceptHttps` must be a boolean, or omitted")},N=e=>{if(e.requiredPorts!==void 0){if(e.requiredPorts.length===0)throw new TypeError("defineContainer: `requiredPorts` must be a non-empty array of ports, or omitted");for(const t of e.requiredPorts)i(t,"requiredPorts[]")}if(e.entrypoint!==void 0&&(e.entrypoint.length===0||e.entrypoint.some(t=>typeof t!="string"||t.trim().length===0)))throw new TypeError("defineContainer: `entrypoint` must be a non-empty array of non-empty strings, or omitted");if(I(e),e.pingEndpoint!==void 0&&(typeof e.pingEndpoint!="string"||e.pingEndpoint.trim().length===0))throw new TypeError("defineContainer: `pingEndpoint` must be a non-empty path string");for(const[t,n]of Object.entries(e.labels??{}))if(t.trim().length===0||typeof n!="string")throw new TypeError("defineContainer: `labels` must be a record of non-empty keys to string values");if(k(e),e.sandbox!==void 0&&typeof e.sandbox!="boolean")throw new TypeError("defineContainer: `sandbox` must be a boolean, or omitted");S(e)},P=e=>typeof e=="string"&&e.startsWith("registry.cloudflare.com/")&&e.includes("@sha256:"),A=(e,t)=>{if(e.length===0||e.length>u)throw new TypeError(`defineContainer: image name "${e}" must be 1–${String(u)} characters`);if(typeof t=="string"){m(t);return}if(!P(t.registry))throw new TypeError(`defineContainer: \`images["${e}"].registry\` must be a digest-pinned (@sha256) reference under registry.cloudflare.com — push other registries' images there first`)},_=e=>{for(const r of g)if(e[r]!==void 0)throw new TypeError(`defineContainer: \`${r}\` is not supported with schedulingPolicy "durable_object"`);const t=Object.entries(e.images??{});if(t.length>c)throw new TypeError(`defineContainer: \`images\` holds at most ${String(c)} entries (got ${String(t.length)})`);for(const[r,o]of t)A(r,o);if(e.image!==void 0&&!Object.hasOwn(e.images??{},e.image)&&!w(e.image))throw new TypeError(`defineContainer: \`image\` "${e.image}" must name an entry of \`images\` or a Cloudflare-managed "${f}…" image`);const{instanceType:n}=e;if(typeof n=="string"&&!l.has(n))throw new TypeError(`defineContainer: \`instanceType\` "${n}" is not a runtime size — use one of ${[...l].join(", ")}, or a full { vcpu, memoryMib, diskMb } object`);if(typeof n=="object"&&[n.vcpu,n.memoryMib,n.diskMb].some(r=>typeof r!="number"||r<=0))throw new TypeError('defineContainer: a custom `instanceType` under schedulingPolicy "durable_object" needs positive vcpu, memoryMib and diskMb')},x=e=>{if(e.images!==void 0)throw new TypeError('defineContainer: `images` needs schedulingPolicy "durable_object"');m(e.image);const t=e.rollout?.stepPercentage;if(t!==void 0&&(!Number.isInteger(t)||t<1||t>100))throw new TypeError(`defineContainer: \`rollout.stepPercentage\` must be an integer in 1–100 (got ${String(t)})`);const n=e.rollout?.gracePeriodSeconds;if(n!==void 0&&(!Number.isInteger(n)||n<0))throw new TypeError(`defineContainer: \`rollout.gracePeriodSeconds\` must be a non-negative integer (got ${String(n)})`);if(e.maxInstances!==void 0&&(!Number.isInteger(e.maxInstances)||e.maxInstances<1))throw new TypeError(`defineContainer: \`maxInstances\` must be a positive integer (got ${String(e.maxInstances)})`);if(typeof e.instanceType=="string"&&!d.has(e.instanceType))throw new TypeError(`defineContainer: unknown \`instanceType\` "${e.instanceType}" — use one of ${[...d].join(", ")}, or a custom { vcpu, memoryMib, diskMb } object`)},L=e=>{const t=e.schedulingPolicy;if(e.schedulingPolicy==="durable_object")_(e);else if(t===void 0||t==="default")x(e);else throw new TypeError(`defineContainer: unknown \`schedulingPolicy\` ${JSON.stringify(t)} — use "default" or "durable_object"`);return e.defaultPort!==void 0&&i(e.defaultPort,"defaultPort"),p(e.sleepAfter,"sleepAfter"),p(e.hardTimeout,"hardTimeout"),$(e),N(e),{...e,isLunoraContainer:!0}},H=e=>typeof e=="object"&&e!==null&&e.isLunoraContainer===!0,W=(e,t,n)=>{const r={...e.env};for(const o of e.secrets??[]){const a=t[o];if(typeof a!="string"){const b=n===void 0?"container":`container "${n}"`;throw new h("INTERNAL",`${b}: declared secret "${o}" is not set on the Worker environment. Add it to .dev.vars for local dev and run \`wrangler secret put ${o}\` for production.`)}r[o]=a}return r};export{g as DURABLE_OBJECT_POLICY_FORBIDDEN_KEYS,R as containerBindingName,V as containerBuildTag,j as containerClassName,L as defineContainer,P as isCloudflareRegistryDigest,H as isContainerDefinition,w as isManagedImage,M as normalizeContainerImage,D as parseDurationSeconds,W as resolveContainerEnvVars};

package/dist/packem_shared/LunoraSandboxContainer-DPnhJUu1.mjs

@@ -0,0 +1 @@
+import{SandboxFileError as u,SandboxBackupError as d,SandboxS3MountError as l,SandboxProtocolError as p,Files as w,DirectoryBackup as f,S3Mount as b}from"@cloudflare/sandbox";import{LunoraError as s}from"@lunora/errors";import{LunoraContainer as y}from"../do/index.mjs";const m={EACCES:"FORBIDDEN",EBUSY:"CONFLICT",EEXIST:"CONFLICT",ENOENT:"NOT_FOUND",ENOTEMPTY:"CONFLICT",EPERM:"FORBIDDEN"},N={BACKUP_INTEGRITY:"CONFLICT",BACKUP_NOT_FOUND:"NOT_FOUND",BACKUP_TRANSFER:"INTERNAL"},E={S3_MOUNT_BUSY:"CONFLICT",S3_MOUNT_CONFLICT:"CONFLICT",S3_MOUNT_FAILED:"INTERNAL",S3_MOUNT_INCOMPATIBLE:"BAD_REQUEST"},h=(n,t)=>{if(u.is(n)){const e=n.destination===void 0?n.path:`${n.path} → ${n.destination}`;return new s(m[n.code]??"BAD_REQUEST",`${t}: ${n.operation} ${e} failed with ${n.code}: ${n.detail}`,{cause:n,data:{errno:n.code,operation:n.operation,path:n.path,...n.destination===void 0?{}:{destination:n.destination}}})}return d.is(n)?new s(N[n.code]??"INTERNAL",`${t}: ${n.operation} of ${n.path} failed (${n.code}): ${n.detail}`,{cause:n,data:{operation:n.operation,path:n.path,reason:n.code}}):l.is(n)?new s(E[n.code]??"INTERNAL",`${t}: ${n.operation} at ${n.path} failed (${n.code}): ${n.detail}`,{cause:n,data:{operation:n.operation,path:n.path,reason:n.code}}):p.is(n)?new s("INTERNAL",`${t}: the container did not answer the sandbox helper protocol: ${n.detail}`,{cause:n,hint:"The image needs `sandbox-shim` at `/usr/local/bin/sandbox-shim` in a version matching `@cloudflare/sandbox`. Copy it from Cloudflare's `cloudflare/sandbox` image (`COPY --from=docker.io/cloudflare/sandbox:<version> /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim`)."}):n},k=(n,t)=>{if(n.body===null)return t(),n;const{readable:e,writable:i}=new TransformStream;return n.body.pipeTo(i).finally(t).catch(()=>{}),new Response(e,n)};class O extends y{#t;#e;#n;#i;constructor(t,e,i,a,o){super(t,e,i,a,o),this.#t=i.backups}async lunoraReadFile(t,e={}){const{container:i,release:a}=await this.lunoraAcquire("files.readFile");try{return k(await this.files(i).readFile(t,e),a)}catch(o){throw a(),h(o,this.label("files.readFile"))}}async lunoraWriteFile(t,e,i={}){await this.withContainer("files.writeFile",async a=>this.files(a).writeFile(t,e,i))}async lunoraStat(t,e={}){return this.withContainer("files.stat",async i=>this.files(i).stat(t,e))}async lunoraReadDirectory(t,e={}){return this.withContainer("files.readDirectory",async i=>this.files(i).readDirectory(t,e))}async lunoraMkdir(t,e={}){await this.withContainer("files.mkdir",async i=>this.files(i).mkdir(t,e))}async lunoraRename(t,e,i={}){await this.withContainer("files.rename",async a=>this.files(a).rename(t,e,i))}async lunoraRemove(t,e={}){await this.withContainer("files.remove",async i=>this.files(i).remove(t,e))}async lunoraBackup(t,e={}){const i={dir:t,...e.exclude===void 0?{}:{exclude:[...e.exclude]},...e.gitignore===void 0?{}:{gitignore:e.gitignore},...e.name===void 0?{}:{name:e.name}};return this.withContainer("backup",async a=>this.backups(a).backup(i))}async lunoraRestore(t,e={}){const i=e.directory===void 0?{}:{dir:e.directory};await this.withContainer("restore",async a=>this.backups(a).restore(t,i))}async lunoraDeleteBackup(t){const e=this.ctx.container;if(e===void 0)throw new s("INTERNAL",`${this.label("deleteBackup")}: this Durable Object has no container binding`);try{await this.backups(e).delete(t)}catch(i){throw h(i,this.label("deleteBackup"))}}async lunoraMount(t){if(this.usingInterception)throw new s("BAD_REQUEST",`${this.label("mount")}: bucket mounts cannot be combined with an egress policy (allowedHosts, deniedHosts, interceptHttps, outbound handlers or runtime egress controls) on the same container`);const e={bucket:t.bucket,credentials:{type:"static",...this.mountCredentials(t)},endpoint:t.endpoint,region:t.region,type:"s3"},i={access:t.access,mountPath:t.path,source:e,...t.keyPrefix===void 0?{}:{keyPrefix:t.keyPrefix},...t.s3fsOptions===void 0?{}:{s3fsOptions:t.s3fsOptions}};await this.withContainer("mount",async a=>this.mounts(a).mount(i))}async lunoraInspectMount(t){return this.withContainer("inspectMount",async e=>this.mounts(e).inspect(t))}async lunoraUnmount(t){await this.withContainer("unmount",async e=>this.mounts(e).unmount(t))}async beforeContainerStart(){await super.beforeContainerStart();const t=this.ctx.container;this.#t!==void 0&&this.usingInterception&&t!==void 0&&await this.backups(t).intercept()}async withContainer(t,e){const{container:i,release:a}=await this.lunoraAcquire(t);try{return await e(i)}catch(o){throw h(o,this.label(t))}finally{a()}}files(t){return this.#e??=new w(t),this.#e}backups(t){if(this.#t===void 0)throw new s("BAD_REQUEST",`container "${this.lunoraName}": backups need \`backups: { bucket }\` in lunora/containers.ts`);const{bucket:e}=this.#t;if(typeof this.env[e]?.get!="function")throw new s("INTERNAL",`container "${this.lunoraName}": backups.bucket "${e}" is not an R2 bucket binding on the Worker env — add an r2_buckets entry with binding "${e}" to wrangler.jsonc`);return this.#n??=new f(t,this.workerExport("DirectoryBackupGateway"),{binding:this.#t.bucket,...this.#t.prefix===void 0?{}:{prefix:this.#t.prefix}}),this.#n}mounts(t){return this.#i??=new b(t,this.workerExport("S3Gateway")),this.#i}workerExport(t){const e=this.ctx.exports?.[t];if(e===void 0)throw new s("INTERNAL",`container "${this.lunoraName}": the worker does not export ${t}. Re-export the generated containers file from the worker entry (\`export * from "./lunora/_generated/containers.js"\`).`);return e}mountCredentials(t){const e=c=>{const r=this.env[c];if(typeof r!="string"||r.length===0)throw new s("INTERNAL",`${this.label("mount")}: credential secret "${c}" is not set on the Worker env — add it with \`wrangler secret put ${c}\` (or .dev.vars)`);return r},{accessKeyIdSecret:i,secretAccessKeySecret:a,sessionTokenSecret:o}=t.credentials;return{accessKeyId:e(i),secretAccessKey:e(a),...o===void 0?{}:{sessionToken:e(o)}}}label(t){return`container "${this.lunoraName}": ${t}()`}}export{O as default};

package/dist/packem_shared/createContainerContext-CcW1olml.mjs

@@ -0,0 +1 @@
+import{LunoraError as N}from"@lunora/errors";import{e as I,p as J,a as x,r as G}from"./exec-BYLW70sR.mjs";import{S as K}from"./sampling-D21rpu_s.mjs";import{containerBindingName as $}from"./DURABLE_OBJECT_POLICY_FORBIDDEN_KEYS-B9DkqZkf.mjs";import{a as Z}from"./jurisdiction-DtE9s70w.mjs";const ee=(e,t)=>{if(e.length===0)throw new TypeError("spawn: `command` must be a non-empty string");return{command:e,...t.args===void 0?{}:{args:[...t.args]},...t.cwd===void 0?{}:{cwd:t.cwd},...t.env===void 0?{}:{env:{...t.env}},...t.pty===void 0?{}:{pty:{...t.pty}},...t.stdin===void 0?{}:{stdin:t.stdin},...t.timeoutMs===void 0?{}:{timeoutMs:t.timeoutMs}}},te=(e,t)=>{const{control:r}=e,o=r.exitCode();if(t!==void 0){const n=()=>{Promise.resolve(r.kill()).catch(()=>{})};t.aborted?n():(t.addEventListener("abort",n,{once:!0}),o.finally(()=>{t.removeEventListener("abort",n)}).catch(()=>{}))}return{exitCode:o,isPty:e.isPty,kill:async n=>{await r.kill(n)},pid:e.pid,resize:async(n,s)=>{await r.resize(n,s)},stderr:e.stderr,stdin:e.stdin,stdout:e.stdout}},re=1048576,oe=80,ne=24,B=(e,t)=>{const r=Number(e.searchParams.get(t));return Number.isInteger(r)&&r>0?r:void 0},se={pair:()=>{const{WebSocketPair:e}=globalThis;if(e===void 0)throw new TypeError("terminal(): WebSocketPair is not available — open a terminal from a Worker or Durable Object");const t=new e;return[t[0],t[1]]},upgrade:e=>new Response(void 0,{status:101,webSocket:e})},ae=e=>{try{const t=JSON.parse(e);return Number.isInteger(t.cols)&&Number.isInteger(t.rows)?{cols:t.cols,rows:t.rows}:void 0}catch{return}},ie=async e=>{if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(e instanceof Blob)return new Uint8Array(await e.arrayBuffer())},ce=e=>e instanceof ArrayBuffer||ArrayBuffer.isView(e)?e.byteLength:e instanceof Blob?e.size:0,le=async(e,t)=>{const r=e.stdout?.getReader();try{for(;r!==void 0;){const{done:n,value:s}=await r.read();if(n)break;t.send(s)}const o=await e.exitCode;t.close(1e3,`exited with code ${String(o)}`)}catch{t.close(1011,"terminal stream failed")}},de=async(e,t,r={},o=se)=>{if(t.headers.get("upgrade")?.toLowerCase()!=="websocket")return new Response("terminal(): expected a WebSocket upgrade request",{status:426});const n=new URL(t.url),{command:s="sh",cols:c,rows:a,...i}=r,u=await e(s,{...i,env:{TERM:"xterm-256color",...i.env},pty:{cols:c??B(n,"cols")??oe,rows:a??B(n,"rows")??ne},stdin:!0}),[v,m]=o.pair(),d=u.stdin?.getWriter(),f=()=>{u.kill().catch(()=>{}),d?.close().catch(()=>{})};let p=Promise.resolve();const h=y=>{p=p.then(y).catch(f)};let R=0;const S=(y,g)=>{if(R+=y,R>re){m.close(1009,"terminal input backlog too large"),f();return}h(async()=>{try{const E=await g;E!==void 0&&await d?.write(E)}finally{R-=y}})};return m.accept(),m.addEventListener("message",({data:y})=>{if(typeof y!="string"){S(ce(y),ie(y));return}const g=ae(y);if(g===void 0){const E=new TextEncoder().encode(y);S(E.byteLength,Promise.resolve(E))}else h(async()=>u.resize(g.cols,g.rows).catch(()=>{}))}),m.addEventListener("close",f),m.addEventListener("error",f),le(u,m).catch(()=>{}),o.upgrade(v)},ue={EEXIST:"CONFLICT",ENOENT:"NOT_FOUND",ENOTEMPTY:"CONFLICT"},w=(e,t,r)=>new N(ue[e]??"BAD_REQUEST",`test container: ${t} ${r} failed with ${e}`,{data:{errno:e,operation:t,path:r}}),T=(e,t={})=>{const r=e.startsWith("/")?e:`${t.cwd??""}/${e}`;if(!r.startsWith("/"))throw new TypeError(`test container: "${e}" is relative and no absolute \`cwd\` was given`);const o=[];for(const n of r.split("/"))n===".."?o.pop():n!==""&&n!=="."&&o.push(n);return`/${o.join("/")}`},C=e=>e.slice(0,e.lastIndexOf("/"))||"/",fe=async e=>typeof e=="string"?new TextEncoder().encode(e):e instanceof ArrayBuffer?Uint8Array.from(new Uint8Array(e)):ArrayBuffer.isView(e)?new Uint8Array(e.buffer.slice(e.byteOffset,e.byteOffset+e.byteLength)):new Uint8Array(await new Response(e).arrayBuffer()),L=(e,t)=>{const r=new Date;return{accessedAt:r,changedAt:r,gid:0,modifiedAt:r,mode:e==="directory"?16877:33188,size:BigInt(t),type:e,uid:0}},ye=()=>{const e=new Map,t=new Set(["/"]),r=s=>e.has(s)||t.has(s),o=s=>[...e.keys(),...t].filter(c=>c!==s&&C(c)===s).toSorted((c,a)=>c.localeCompare(a)),n=(s,c)=>{const a=C(s);if(e.has(a))throw w("ENOTDIR",c,s);if(!t.has(a))throw w("ENOENT",c,s)};return{mkdir:async(s,c={})=>{const a=T(s,c);if(c.recursive===!0){let i="";for(const u of a.split("/").filter(Boolean)){if(i=`${i}/${u}`,e.has(i))throw w("ENOTDIR","mkdir",i);t.add(i)}return}if(r(a))throw w("EEXIST","mkdir",a);n(a,"mkdir"),t.add(a)},readDirectory:async(s,c)=>{const a=T(s,c);if(e.has(a))throw w("ENOTDIR","readDirectory",a);if(!t.has(a))throw w("ENOENT","readDirectory",a);return o(a).map(i=>({name:i.slice(i.lastIndexOf("/")+1),type:t.has(i)?"directory":"file"}))},readFile:async(s,c)=>{const a=T(s,c),i=e.get(a);if(i===void 0)throw w(t.has(a)?"EISDIR":"ENOENT","readFile",a);return new Response(new Uint8Array(i))},remove:async(s,c={})=>{const a=T(s,c);if(!e.delete(a)){if(!t.has(a)){if(c.force!==!0)throw w("ENOENT","remove",a);return}if(c.recursive!==!0)throw w(o(a).length>0?"ENOTEMPTY":"EISDIR","remove",a);for(const i of[...e.keys(),...t])(i===a||i.startsWith(`${a}/`))&&(e.delete(i),t.delete(i));t.add("/")}},rename:async(s,c,a)=>{const i=T(s,a),u=T(c,a);if(!r(i))throw w("ENOENT","rename",i);if(n(u,"rename"),u.startsWith(`${i}/`))throw w("EINVAL","rename",i);const v=[...e],m=[...t];for(const[d,f]of v)(d===i||d.startsWith(`${i}/`))&&(e.delete(d),e.set(u+d.slice(i.length),f));for(const d of m)(d===i||d.startsWith(`${i}/`))&&(t.delete(d),t.add(u+d.slice(i.length)))},stat:async(s,c)=>{const a=T(s,c),i=e.get(a);if(i!==void 0)return L("file",i.byteLength);if(t.has(a))return L("directory",4096);throw w("ENOENT","stat",a)},writeFile:async(s,c,a)=>{const i=T(s,a);if(t.has(i))throw w("EISDIR","writeFile",i);n(i,"writeFile"),e.set(i,await fe(c))}}},k=3,U=3e4,me=3,we=500,he="cf-container-target-port",M="__lunora",Ee=e=>{const t=e.indexOf(";");return t===-1?e:e.slice(0,t)},ve=e=>{const t=e.split("/").find(r=>r!=="")??"";return Ee(t).toLowerCase()},H=(e,t)=>{const r=typeof e=="string"?e:e.url,o=URL.parse(r.startsWith("/")?`http://container${r}`:r);if(o!==null&&J(o.pathname,n=>ve(n)===M))throw new N("BAD_REQUEST",`${t}: \`/${M}/*\` is reserved for Lunora's own container routes and cannot be reached with \`fetch\`. Use \`exec\` to run a command.`)},W=(e,t)=>{if(typeof e!="string"){const o=new Request(e,t);return o.headers.delete(x),[o,void 0]}if(t?.headers===void 0)return[e,t];const r=new Headers(t.headers);return r.delete(x),[e,{...t,headers:r}]},z=(e,t,r,o)=>{const n=typeof e=="string"&&e.startsWith("/")?new Request(`http://container${e}`,t):new Request(e,t);return r!==void 0&&n.headers.set(he,String(r)),o?.traceparent!==void 0&&n.headers.set("traceparent",o.traceparent),o?.sampleErrors!==void 0&&n.headers.set(K,o.sampleErrors?"1":"0"),n},j=async e=>{e<=0||await new Promise(t=>{setTimeout(t,e)})},pe=/no container instance|not listening|try again later|rate.?limit|provision/i,Te="no Container instance available",Re="Failed to start container:",ge=1024,Ae=async e=>(await G(e.clone().body,ge)).text,X=e=>e instanceof Error&&pe.test(e.message),V=async e=>{if(e.status===429)return!0;if(e.status!==500&&e.status!==503)return!1;try{const t=await Ae(e);return t.includes(Te)||t.startsWith(Re)}catch{return!1}},O=e=>`ctx.containers.${e.exportName}`,_=(e,t,r={},o,n)=>{const s=Math.max(1,r.attempts??me),c=r.backoffMs??we,a=r.maxBackoffMs??U,i=async(u,v)=>{const m=typeof u=="string"?s:1;let d;for(let f=0;f<m;f+=1){const p=f===m-1;f>0&&await j(Math.min(c*2**(f-1),a));try{const h=await e(z(u,v,o,n),v?.signal);if(p||!await V(h))return h}catch(h){if(d=h,p||!X(h))throw h}}throw d instanceof Error?d:new Error("ctx.containers: cold-start retry exhausted")};return{exec:I(i,t),fetch:async(u,v)=>(H(u,t),i(...W(u,v))),port:u=>_(e,t,r,u,n)}},Se=async(e,t)=>{if(t.aborted)throw e.catch(()=>{}),t.reason;const r=new AbortController,o=new Promise((n,s)=>{t.addEventListener("abort",()=>{s(t.reason)},{once:!0,signal:r.signal})});try{return await Promise.race([e,o])}finally{r.abort(),e.catch(()=>{})}},F=async(e,t,r)=>{if(!t.headers.has(x))return e.fetch(t);if(typeof e.lunoraExec!="function")throw new TypeError("ctx.containers: this container DO does not expose lunoraExec() — is @lunora/container/do up to date?");t.headers.delete(x);const o=e.lunoraExec(new Request(t.url,{body:await t.text(),headers:t.headers,method:t.method}));return r?Se(o,r):o},Y=(e,t,r,o,n)=>_(async(s,c)=>F(e.get(e.idFromName(t)),s,c),r,o,void 0,n),Ne=new Set(["lunoraBackup","lunoraDeleteBackup","lunoraInspectMount","lunoraMkdir","lunoraMount","lunoraReadDirectory","lunoraReadFile","lunoraRemove","lunoraRename","lunoraRestore","lunoraStat","lunoraUnmount","lunoraWriteFile"]),l=async(e,t,r,...o)=>{const n=e[t];if(typeof n!="function")throw Ne.has(t)?new N("BAD_REQUEST",`ctx.containers: the "${r}" container DO does not expose ${t}() — sandbox helpers need \`sandbox: true\` in its defineContainer() definition`):new TypeError(`ctx.containers: the "${r}" container DO does not expose ${t}() — is @lunora/container/do up to date?`);return n(...o)},Oe=(e,t)=>({backup:async(r,o)=>l(e(),"lunoraBackup",t,r,o),deleteBackup:async r=>l(e(),"lunoraDeleteBackup",t,r),files:{mkdir:async(r,o)=>l(e(),"lunoraMkdir",t,r,o),readDirectory:async(r,o)=>l(e(),"lunoraReadDirectory",t,r,o),readFile:async(r,o)=>l(e(),"lunoraReadFile",t,r,o),remove:async(r,o)=>l(e(),"lunoraRemove",t,r,o),rename:async(r,o,n)=>l(e(),"lunoraRename",t,r,o,n),stat:async(r,o)=>l(e(),"lunoraStat",t,r,o),writeFile:async(r,o,n)=>l(e(),"lunoraWriteFile",t,r,o,n)},inspectMount:async r=>l(e(),"lunoraInspectMount",t,r),mount:async r=>l(e(),"lunoraMount",t,r),restore:async(r,o)=>l(e(),"lunoraRestore",t,r,o),unmount:async r=>l(e(),"lunoraUnmount",t,r)}),De=(e,t)=>({allow:async r=>l(e(),"allowHost",t,r),deny:async r=>l(e(),"denyHost",t,r),removeAllowed:async r=>l(e(),"removeAllowedHost",t,r),removeDenied:async r=>l(e(),"removeDeniedHost",t,r),setAllowed:async r=>l(e(),"setAllowedHosts",t,[...r]),setDenied:async r=>l(e(),"setDeniedHosts",t,[...r])}),Q=(e,t,r,o,n)=>{const s=()=>e.get(e.idFromName(r)),c=async(a,i={})=>te(await l(s(),"lunoraSpawn",t.binding,ee(a,i)),i.signal);return{..._(async(a,i)=>F(s(),a,i),O(t),o,void 0,n),...Oe(s,t.binding),destroy:async()=>l(s(),"destroy",t.binding),egress:De(s,t.binding),getState:async()=>l(s(),"getState",t.binding),renewActivityTimeout:async()=>l(s(),"renewActivityTimeout",t.binding),snapshot:async a=>l(s(),"lunoraSnapshot",t.binding,a),spawn:c,start:async a=>l(s(),"start",t.binding,a),stop:async a=>l(s(),"stop",t.binding,a),terminal:async(a,i)=>de(c,a,i)}},D="pool-",P=e=>`${D}${String(Math.floor(Math.random()*e))}`,q=(e,t)=>{if(e.startsWith(D))throw new N("BAD_REQUEST",`${O(t)}.get(${JSON.stringify(e)}): the "${D}" prefix is reserved for the instances .any()/.pool() pick, so this name would share a container (disk, lifecycle) with a pool member. Pick a name that does not start with "${D}".`)},xe=e=>e.status>=500,b=(e,t,r={},o,n)=>{const s=r.size??t.maxInstances??k,c=Math.max(1,r.attempts??3),a=r.backoffMs??100,i=r.maxBackoffMs??U,u=`${O(t)}.pool()`,v=(d,f)=>async(p,h)=>{const R=typeof p=="string"?c:1;let S;for(let y=0;y<R;y+=1){y>0&&await j(Math.min(a*2**(y-1),i));const g=z(p,h,o,n);try{const E=await F(e.get(e.idFromName(P(s))),g,h?.signal);if(y===R-1||!await d(E))return E}catch(E){if(S=E,!f(E))throw E}}throw S instanceof Error?S:new Error(`ctx.containers.${t.exportName}.pool(): all ${String(R)} attempts failed`)},m=v(r.retryOn??xe,()=>!0);return{exec:I(v(V,X),u),fetch:async(d,f)=>(H(d,u),m(...W(d,f))),port:d=>b(e,t,r,d,n)}},ke=(e,t,r)=>({any:(o,n)=>Y(e,P(o??t.maxInstances??k),O(t),n,r),get:(o,n)=>(q(o,t),Q(e,t,o,n,r)),pool:o=>b(e,t,o,void 0,r)}),_e=e=>{const t=()=>{throw new N("INTERNAL",`ctx.containers.${e.exportName}: no "${e.binding}" Durable Object binding found. Run \`lunora dev\` (or \`lunora deploy\`) to reconcile wrangler.jsonc, and make sure the worker entry re-exports the generated container classes.`)};return{any:t,get:t,pool:t}},Fe=(e,t,r,o,n)=>{const s={};for(const c of t){const a=e[c.binding];s[c.exportName]=a&&typeof a.idFromName=="function"&&typeof a.get=="function"?ke(Z(a,r),c,{...n===void 0?{}:{sampleErrors:n},...o===void 0?{}:{traceparent:o}}):_e(c)}return s},Ie=(e,t,r,o={})=>{const{jurisdiction:n,...s}=o,c={binding:$(t),exportName:t};return Fe(e,[c],n)[t].get(r,s)},A=e=>()=>Promise.reject(new N("NOT_IMPLEMENTED",`createContainerTestContext: ${e}() needs a real container — the test double has no processes or buckets. Stub the handle method in your test instead.`)),Pe=e=>{const t=new Map,r=o=>{const n=t.get(o)??ye();return t.set(o,n),{allowHost:()=>Promise.resolve(),denyHost:()=>Promise.resolve(),destroy:()=>Promise.resolve(),fetch:s=>Promise.resolve(e(s,{name:o})),lunoraBackup:A("backup"),lunoraDeleteBackup:A("deleteBackup"),lunoraExec:s=>Promise.resolve(e(s,{name:o})),lunoraInspectMount:A("inspectMount"),lunoraMkdir:n.mkdir,lunoraMount:A("mount"),lunoraReadDirectory:n.readDirectory,lunoraReadFile:n.readFile,lunoraRemove:n.remove,lunoraRename:n.rename,lunoraRestore:A("restore"),lunoraSnapshot:s=>Promise.resolve({id:`test-snapshot-${o}`,size:0,...s?.name===void 0?{}:{name:s.name}}),lunoraSpawn:A("spawn"),lunoraStat:n.stat,lunoraUnmount:A("unmount"),lunoraWriteFile:n.writeFile,getState:()=>Promise.resolve({lastChange:0}),removeAllowedHost:()=>Promise.resolve(),removeDeniedHost:()=>Promise.resolve(),renewActivityTimeout:()=>Promise.resolve(),setAllowedHosts:()=>Promise.resolve(),setDeniedHosts:()=>Promise.resolve(),start:()=>Promise.resolve(),stop:()=>Promise.resolve()}};return{get:o=>r(String(o)),idFromName:o=>o}},$e=e=>{const t={};for(const[r,o]of Object.entries(e)){const n=Pe(o),s={binding:$(r),exportName:r};t[r]={any:(c,a)=>Y(n,P(c??s.maxInstances??k),O(s),{attempts:1,...a}),get:(c,a)=>(q(c,s),Q(n,s,c,{attempts:1,...a})),pool:c=>b(n,s,{...c,attempts:1})}}return t};export{Fe as createContainerContext,$e as createContainerTestContext,Ie as getContainer};

package/dist/packem_shared/exec-BYLW70sR.mjs

@@ -0,0 +1 @@
+import{LunoraError as d}from"@lunora/errors";import{a as w}from"./abort-deadline-jwbW9Ala.mjs";const E=async(o,t,r)=>{if(o===null)return{overflowed:!1,text:""};const e=o.getReader(),n=new TextDecoder,a=()=>{e.cancel().catch(()=>{})};r?.addEventListener("abort",a);let s="",c=0,i=!1;try{for(;r?.aborted!==!0;){const{done:f,value:u}=await e.read();if(f)break;if(c+u.byteLength>t){i=!0,s+=n.decode(u.subarray(0,t-c),{stream:!0});break}c+=u.byteLength,s+=n.decode(u,{stream:!0})}s+=n.decode()}finally{r?.removeEventListener("abort",a),e.cancel().catch(()=>{})}if(r?.aborted===!0)throw r.reason;return{overflowed:i,text:s}},l="/__lunora/exec",h="x-lunora-container-exec",x=5,m=o=>{try{return decodeURIComponent(o)}catch{return o.replaceAll(/%[\da-f]{2}/giu,t=>{try{return decodeURIComponent(t)}catch{return t}})}},_=(o,t)=>{let r=o;for(let e=0;e<=x;e+=1){if(t(r))return!0;const n=m(r);if(n===r)return!1;r=n}return!0},b=512,p=1e6,v="<redacted>",g=(o,t)=>{if(t===void 0)return o;let r=o;for(const e of Object.values(t))e.length>0&&(r=r.split(e).join(v));return r},T=o=>{if(o===null||typeof o!="object")return;const{code:t,stderr:r,stdout:e}=o;if(typeof t=="number")return{code:t,stderr:typeof r=="string"?r:"",stdout:typeof e=="string"?e:""}},A=(o,t)=>w(o,t,()=>new d("INTERNAL",`ctx.containers: exec timed out after ${String(t)}ms`)),R=(o,t)=>async(r,e={})=>{if(typeof r!="string"||r.length===0)throw new d("BAD_REQUEST",`${t}: exec requires a non-empty \`command\``);const n=e.maxOutputBytes??p;if(!Number.isSafeInteger(n)||n<=0)throw new d("BAD_REQUEST",`${t}: exec \`maxOutputBytes\` must be a positive whole number of bytes, got ${String(n)}`);const a=A(e.signal,e.timeoutMs);try{const s=await o(l,{body:JSON.stringify({args:e.args??[],command:r,...e.cwd===void 0?{}:{cwd:e.cwd},...e.env===void 0?{}:{env:e.env},maxOutputBytes:n,...e.timeoutMs===void 0?{}:{timeoutMs:e.timeoutMs}}),headers:{"content-type":"application/json",[h]:"1"},method:"POST",...a.signal===void 0?{}:{signal:a.signal}});if(!s.ok){const u=await E(s.body,b,a.signal).then(y=>g(y.text,e.env),()=>"<unreadable body>");throw new d("INTERNAL",`${t}: exec failed — the container answered ${String(s.status)} for POST ${l}. Does it serve that route? Body: ${u}`)}const c=await E(s.body,n,a.signal);if(c.overflowed)throw new d("INTERNAL",`${t}: exec response exceeded ${String(n)} bytes and was abandoned — it is buffered whole to be parsed, so an unbounded one would exhaust the isolate. Cap the command's output, or raise \`maxOutputBytes\`.`);let i;try{i=JSON.parse(c.text)}catch{throw new d("INTERNAL",`${t}: exec response was not JSON — expected {"code","stdout","stderr"} from POST ${l}`)}const f=T(i);if(f===void 0)throw new d("INTERNAL",`${t}: exec response is missing a numeric \`code\` — expected {"code","stdout","stderr"} from POST ${l}`);return f}finally{a.dispose()}};export{l as C,p as D,h as a,R as e,_ as p,E as r};

package/dist/packem_shared/{jurisdiction.d-DPvNG2h5.d.mts → jurisdiction.d-t4mtuqYW.d.mts}

@@ -1,3 +1,92 @@
+/**
+ * The `handle.spawn()` contract: start a process in a named container
+ * instance and stream it, rather than buffer it the way `exec` does.
+ *
+ * Node-safe (no runtime imports): the Durable Object half lives in
+ * `do/spawn.ts`. This module owns the request shape both halves agree on and
+ * turns the RPC result into a {@link ContainerProcess}.
+ */
+/** Per-call options for `handle.spawn()`. */
+interface ContainerSpawnOptions {
+  /** Arguments passed to `command`, unshelled. */
+  args?: ReadonlyArray<string>;
+  /** Working directory for the process. */
+  cwd?: string;
+  /** Extra environment for this process, merged over the container's start env. */
+  env?: Readonly<Record<string, string>>;
+  /**
+   * Run the process on a pseudo-terminal of this size (defaults `80×24`).
+   * Under a PTY, stderr is merged into `stdout` and `resize()` works — what an
+   * interactive shell or a browser terminal needs.
+   */
+  pty?: {
+    cols?: number;
+    rows?: number;
+  };
+  /** Kill the process when this signal aborts. */
+  signal?: AbortSignal;
+  /**
+   * Give the process a stdin: `true` returns a writable `stdin` stream, a
+   * `ReadableStream` is piped in as the process's whole input. Omitted or
+   * `false` leaves stdin closed.
+   */
+  stdin?: ReadableStream<Uint8Array> | boolean;
+  /**
+   * Kill the process after this many ms. Unlike `exec`, a spawned process has
+   * no default deadline: it runs until it exits, is killed, or the container
+   * stops.
+   */
+  timeoutMs?: number;
+}
+/** The request `lunoraSpawn` takes over RPC. An `AbortSignal` cannot cross RPC, so it stays on the caller's side. */
+interface ContainerSpawnRequest extends Omit<ContainerSpawnOptions, "args" | "env" | "signal"> {
+  args?: string[];
+  command: string;
+  env?: Record<string, string>;
+}
+/** The control stub `lunoraSpawn` returns, as the caller sees it over RPC. */
+interface ContainerProcessControlStub {
+  exitCode: () => Promise<number>;
+  kill: (signal?: number) => Promise<void> | void;
+  resize: (cols: number, rows: number) => Promise<void> | void;
+}
+/** `lunoraSpawn`'s RPC result. */
+interface SpawnResult {
+  control: ContainerProcessControlStub;
+  isPty: boolean;
+  pid: number;
+  stderr: ReadableStream<Uint8Array> | null;
+  stdin: WritableStream<Uint8Array> | null;
+  stdout: ReadableStream<Uint8Array> | null;
+}
+/**
+ * A running process in a container instance, returned by `handle.spawn()`.
+ *
+ * The container finishes a process's output, and settles `exitCode`, only
+ * while its output is being drained. Lunora drains `stdout` and `stderr` into
+ * a 1 MiB buffer each, so they can be read in either order, or after awaiting
+ * `exitCode`, while the stream you are not reading stays under 1 MiB. Past
+ * that the process stalls until you read it: for a process that may write more
+ * to one stream, read both concurrently, or cancel the one you do not need.
+ */
+interface ContainerProcess {
+  /** Resolves with the exit code once the process ends. */
+  exitCode: Promise<number>;
+  /** Whether the process runs on a PTY (`spawn({ pty })`). */
+  isPty: boolean;
+  /** Send `signal` (default `SIGTERM`). Resolves once the signal is sent, not when the process exits. */
+  kill: (signal?: number) => Promise<void>;
+  /** The process id inside the container, or `-1` when the runtime does not report one. */
+  pid: number;
+  /** Resize the PTY. Rejects for a process spawned without `pty`. */
+  resize: (cols: number, rows: number) => Promise<void>;
+  /** The process's stderr, or `null` under `pty` (merged into `stdout`). */
+  stderr: ReadableStream<Uint8Array> | null;
+  /** The process's stdin when spawned with `stdin: true`, else `null`. */
+  stdin: WritableStream<Uint8Array> | null;
+  /** The process's stdout (and, under `pty`, its stderr too). */
+  stdout: ReadableStream<Uint8Array> | null;
+}
 /**
  * Public configuration types for `@lunora/container`.
  *
@@ -26,6 +115,22 @@ interface CustomContainerInstanceType {
  * `ContainerInstanceType` is part of the experimental `@lunora/container` API and may change without a major version bump.
  */
 type ContainerInstanceType = CustomContainerInstanceType | NamedContainerInstanceType;
+/**
+ * An instance size a Durable Object can pick at start under the
+ * `durable_object` scheduling policy. The runtime does not accept `basic` (or
+ * the legacy `dev`/`standard` aliases), and a custom size must set all three
+ * fields — it is passed to `ctx.container.start({ instance })` as-is.
+ */
+type ContainerRuntimeInstanceType = Exclude<NamedContainerInstanceType, "basic"> | Required<CustomContainerInstanceType>;
+/**
+ * One named image under the `durable_object` scheduling policy. A `string` is
+ * a local Dockerfile path or directory, built and uploaded by `wrangler deploy`
+ * (wrangler `dockerfile` + `build_context`); `{ registry }` must be a
+ * digest-pinned (`@sha256:…`) reference under `registry.cloudflare.com/`,
+ * the Cloudflare managed registry — Cloudflare does not accept Docker Hub, ECR
+ * or Artifact Registry references here.
+ */
+type ContainerNamedImageSource = RegistryImageSource | string;
 /**
  * Rolling-deploy tuning for a container.
  */
@@ -73,17 +178,27 @@ type ContainerImageSource = BuildImageSource | RegistryImageSource | string;
 interface ContainerReadinessCheck {
   /** HTTP path probed on the container, e.g. `"/ready"` (a leading slash is optional). */
   path: string;
-  /** Port to probe. Defaults to {@link ContainerConfig.defaultPort}. */
+  /** Port to probe. Defaults to {@link ContainerConfigBase.defaultPort}. */
   port?: number;
   /** HTTP status that means "ready". Defaults to `200`. */
   status?: number;
 }
 /**
- * `ContainerConfig` is part of the experimental `@lunora/container` API and may change without a major version bump.
+ * The fields every container accepts, whichever scheduling policy it uses.
+ */
+/**
+ * Where `handle.backup()` stores directory backups for a `sandbox: true`
+ * container: an R2 bucket binding and an optional key prefix.
  */
-interface ContainerConfig {
+interface ContainerBackupStorage {
+  /** Name of an R2 bucket binding on the Worker env (`r2_buckets[].binding`). */
+  bucket: string;
+  /** Key prefix for the backup objects. A non-empty prefix ends in `/`. */
+  prefix?: string;
+}
+interface ContainerConfigBase {
   /**
-   * Hostnames the container may reach **even when {@link ContainerConfig.enableInternet}
+   * Hostnames the container may reach **even when {@link ContainerConfigBase.enableInternet}
    * is `false`** — an egress allow-list (Cloudflare's `allowedHosts`). Glob
    * patterns like `*.stripe.com` are supported. Pair with `enableInternet:
    * false` to deny all egress except these hosts (the firewall pattern
@@ -93,32 +208,39 @@ interface ContainerConfig {
    * handle's `egress` controls adjust the lists at runtime.
    */
   allowedHosts?: ReadonlyArray<string>;
+  /**
+   * Where `handle.backup()` saves directory backups (requires `sandbox: true`).
+   * The backup and restore traffic goes through the `DirectoryBackupGateway`
+   * Worker entrypoint, which hands the container a grant for one object per
+   * operation, so the container never holds bucket credentials.
+   */
+  backups?: ContainerBackupStorage;
   /**
    * Build-time variables for a Dockerfile/Railpack image — wrangler's
    * `image_vars` (equivalent to `docker build --build-arg`). For *runtime*
-   * values use {@link ContainerConfig.env} / {@link ContainerConfig.secrets}.
+   * values use {@link ContainerConfigBase.env} / {@link ContainerConfigBase.secrets}.
    * Ignored for a pre-built `{ registry }` image.
    */
   buildArgs?: Readonly<Record<string, string>>;
   /**
    * The port the container listens on. Worker → container requests target
    * this port. Locally the Dockerfile must also `EXPOSE` it. For a
-   * multi-port container also declare {@link ContainerConfig.requiredPorts}
+   * multi-port container also declare {@link ContainerConfigBase.requiredPorts}
    * and route per request with the handle's `.port(n)`.
    */
   defaultPort?: number;
   /**
    * Hostnames the container may **never** reach — an egress deny-list
    * (Cloudflare's `deniedHosts`). Overrides everything else, including
-   * `enableInternet: true` and {@link ContainerConfig.allowedHosts}. Glob
+   * `enableInternet: true` and {@link ContainerConfigBase.allowedHosts}. Glob
    * patterns like `*.evil.com` are supported.
    */
   deniedHosts?: ReadonlyArray<string>;
   /**
    * Whether the container may open outbound internet connections. Defaults
    * to `true` — the platform default. Note that container egress is billed
-   * per GB by Cloudflare. Combine with {@link ContainerConfig.allowedHosts} /
-   * {@link ContainerConfig.deniedHosts} for a precise egress firewall.
+   * per GB by Cloudflare. Combine with {@link ContainerConfigBase.allowedHosts} /
+   * {@link ContainerConfigBase.deniedHosts} for a precise egress firewall.
    */
   enableInternet?: boolean;
   /**
@@ -129,14 +251,14 @@ interface ContainerConfig {
   entrypoint?: ReadonlyArray<string>;
   /**
    * Static environment variables passed to the container on every start.
-   * For secret values use {@link ContainerConfig.secrets} instead so they
+   * For secret values use {@link ContainerConfigBase.secrets} instead so they
    * flow through Worker Secrets rather than source code.
    */
   env?: Readonly<Record<string, string>>;
   /**
    * Hard cap on how long an instance may run, measured from start regardless
    * of activity — a runaway-cost backstop on top of the idle
-   * {@link ContainerConfig.sleepAfter}. Same grammar as `sleepAfter`
+   * {@link ContainerConfigBase.sleepAfter}. Same grammar as `sleepAfter`
    * (`"30s"`, `"5m"`, `"1h"`, or a plain number of seconds). When it elapses,
    * the `LunoraContainer.onHardTimeoutExpired` hook runs (default: `stop()`,
    * which sends SIGTERM and does not escalate — a container that ignores the
@@ -144,13 +266,6 @@ interface ContainerConfig {
    * `destroy()`). (Upstream cloudflare/containers#85.)
    */
   hardTimeout?: number | string;
-  /** Image source — a local Dockerfile path/directory or a registry reference. */
-  image: ContainerImageSource;
-  /**
-   * Resource class for each instance: a named Cloudflare instance type or a
-   * custom `{ vcpu, memoryMib, diskMb }` object.
-   */
-  instanceType?: ContainerInstanceType;
   /**
    * Intercept the container's outbound **HTTPS** traffic so the egress
    * allow/deny lists apply to TLS connections too (Cloudflare's
@@ -166,11 +281,6 @@ interface ContainerConfig {
    * `start({ labels })`.
    */
   labels?: Readonly<Record<string, string>>;
-  /**
-   * Maximum number of concurrently *running* instances. Stopped (slept)
-   * containers don't count. Also the default pool size for `.any()`.
-   */
-  maxInstances?: number;
   /**
    * Override for the wrangler `containers[].name` identifier. Defaults to
    * wrangler's own default (worker name + class name + environment).
@@ -196,17 +306,21 @@ interface ContainerConfig {
    * Ports the container must be listening on before it's considered ready
    * (Cloudflare's `requiredPorts`) — for multi-port containers. Start-up
    * waits for every listed port, and the handle's `.port(n)` routes a request
-   * to any of them; {@link ContainerConfig.defaultPort} is the target when a
+   * to any of them; {@link ContainerConfigBase.defaultPort} is the target when a
    * request doesn't pick one.
    */
   requiredPorts?: ReadonlyArray<number>;
   /**
-   * Rolling-deploy tuning. `stepPercentage` is the share of instances updated
-   * per rollout step (wrangler `rollout_step_percentage`); `gracePeriodSeconds`
-   * is how long an active instance is left running before it's eligible for
-   * update (wrangler `rollout_active_grace_period`).
+   * Opt in to the Sandbox SDK helpers (`@cloudflare/sandbox`): structured
+   * file operations, directory backups to R2 and S3-compatible bucket mounts
+   * on a named instance. The image must ship the `sandbox-shim` helper at
+   * `/usr/local/bin/sandbox-shim`, copied from Cloudflare's shim-only
+   * `cloudflare/sandbox` image (`COPY --from=…`). Turning it on also makes codegen export the `S3Gateway` and
+   * `DirectoryBackupGateway` entrypoints from the worker, which the helpers
+   * route the container's storage traffic through. Must be a `true`/`false`
+   * literal, because codegen reads it. Defaults to `false`.
    */
-  rollout?: ContainerRollout;
+  sandbox?: boolean;
   /**
    * Names of Worker secrets (from `wrangler secret` / `.dev.vars`) forwarded
    * into the container's environment at instance start. Each declared name
@@ -220,7 +334,7 @@ interface ContainerConfig {
    * binding name*. Each binding is resolved with its async `.get()` the first
    * time the instance starts, then injected as that env var — e.g.
    * `{ STRIPE_KEY: "STRIPE_SECRET" }` runs `env.STRIPE_SECRET.get()` and sets
-   * `STRIPE_KEY` inside the container. Unlike {@link ContainerConfig.secrets}
+   * `STRIPE_KEY` inside the container. Unlike {@link ContainerConfigBase.secrets}
    * (plain Worker text secrets), this pulls from a `secrets_store_secrets`
    * binding. A name already used by `env`/`secrets` is rejected at authoring
    * time; a missing binding or unreadable value fails the start. Applies
@@ -236,13 +350,95 @@ interface ContainerConfig {
    */
   sleepAfter?: number | string;
 }
+/**
+ * A container under the `default` scheduling policy: one application-wide
+ * image and instance size, set in wrangler and rolled out by Cloudflare on
+ * deploy.
+ */
+interface DefaultScheduledContainerConfig extends ContainerConfigBase {
+  /** Image source — a local Dockerfile path/directory or a registry reference. */
+  image: ContainerImageSource;
+  /**
+   * Resource class for each instance: a named Cloudflare instance type or a
+   * custom `{ vcpu, memoryMib, diskMb }` object.
+   */
+  instanceType?: ContainerInstanceType;
+  /**
+   * Maximum number of concurrently *running* instances. Stopped (slept)
+   * containers don't count. Also the default pool size for `.any()`.
+   */
+  maxInstances?: number;
+  /**
+   * Rolling-deploy tuning. `stepPercentage` is the share of instances updated
+   * per rollout step (wrangler `rollout_step_percentage`); `gracePeriodSeconds`
+   * is how long an active instance is left running before it's eligible for
+   * update (wrangler `rollout_active_grace_period`).
+   */
+  rollout?: ContainerRollout;
+  /**
+   * Where the image and instance size are configured. `"default"` (the
+   * default) sets them once in wrangler; `"durable_object"` is the
+   * per-instance policy.
+   * Immutable once deployed: switching policies means a new container
+   * application, which replaces every running instance.
+   */
+  schedulingPolicy?: "default";
+}
+/**
+ * A container under the `durable_object` scheduling policy (Cloudflare public
+ * beta): each instance picks its image and size when it starts, via
+ * `ctx.containers.<name>.get(id).start({ image, instanceType })`, and can save
+ * and restore its filesystem with `snapshot()` / `start({ snapshot })`.
+ * Instances keep the image they started with across deploys — there is no
+ * application-wide rollout, and no `maxInstances` cap (running instances count
+ * against the account limit).
+ */
+interface DurableObjectScheduledContainerConfig extends ContainerConfigBase {
+  /**
+   * The image a start uses when it names none — including the implicit start a
+   * `fetch`/`exec` triggers. Either a key of `images`
+   * or a Cloudflare-managed image such as `"cloudflare/debian-trixie"`.
+   * Without it, an instance must be started explicitly with an `image` (or a
+   * `snapshot`) before it can serve requests.
+   */
+  image?: string;
+  /**
+   * Named images an instance can start from, keyed by the name `start({ image })`
+   * takes (wrangler `containers[].images`). Up to 100, each name 1–128
+   * characters. Updating the map does not restart running instances.
+   */
+  images?: Readonly<Record<string, ContainerNamedImageSource>>;
+  /**
+   * The instance size a start uses when it names none. Cloudflare's runtime
+   * default is `"lite"`.
+   */
+  instanceType?: ContainerRuntimeInstanceType;
+  /** Selects the per-instance policy. Immutable once deployed. */
+  schedulingPolicy: "durable_object";
+}
+/**
+ * `ContainerConfig` is part of the experimental `@lunora/container` API and may change without a major version bump.
+ */
+type ContainerConfig = DefaultScheduledContainerConfig | DurableObjectScheduledContainerConfig;
 /**
  * The value `defineContainer` returns: the validated config plus a brand the
  * codegen discovery and the generated Container DO class key on.
  */
-interface ContainerDefinition extends ContainerConfig {
+type ContainerDefinition = ContainerConfig & {
   /** Brand marking a value as a Lunora container definition. */
   readonly isLunoraContainer: true;
+};
+/**
+ * A saved container filesystem, as `snapshot()` returns it. Plain data: store
+ * it anywhere and pass it back to `start({ snapshot })`, from the same or
+ * another instance of the same container. Tied to the image it was taken
+ * from; Cloudflare keeps it 30 days, refreshed on each restore.
+ */
+interface ContainerSnapshot {
+  id: string;
+  name?: string;
+  /** Size in bytes. */
+  size: number;
 }
 /**
  * A normalized image source, as written into `wrangler.jsonc`.
@@ -268,4 +464,4 @@ type NormalizedContainerImage = {
  * @see https://developers.cloudflare.com/durable-objects/reference/data-location/
  */
 type DurableObjectJurisdiction = "eu" | "fedramp" | "us";
-export { BuildImageSource as B, ContainerDefinition as C, DurableObjectJurisdiction as D, NormalizedContainerImage as N, RegistryImageSource as R, ContainerConfig as a, ContainerImageSource as b, ContainerInstanceType as c, ContainerReadinessCheck as d, ContainerRollout as e, CustomContainerInstanceType as f, NamedContainerInstanceType as g };
+export { BuildImageSource as B, ContainerDefinition as C, DurableObjectJurisdiction as D, NormalizedContainerImage as N, RegistryImageSource as R, SpawnResult as S, ContainerSpawnOptions as a, ContainerSnapshot as b, ContainerProcess as c, ContainerRuntimeInstanceType as d, ContainerSpawnRequest as e, DefaultScheduledContainerConfig as f, DurableObjectScheduledContainerConfig as g, ContainerImageSource as h, ContainerBackupStorage as i, ContainerConfig as j, ContainerConfigBase as k, ContainerInstanceType as l, ContainerNamedImageSource as m, ContainerReadinessCheck as n, ContainerRollout as o, CustomContainerInstanceType as p, NamedContainerInstanceType as q };