@mcp-b/do-runtime 0.3.5 → 0.4.0

package/dist/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","names":[],"sources":["../src/gate.ts"],"sourcesContent":["/* @do-runtime-gated */\n\nimport {\n  tryCurrentContinuation,\n  tryCurrentIoContext,\n  type IoContext,\n} from \"./io/io-context\";\n\ntype Publication = {\n  readonly publish: () => Promise<void>;\n  readonly reject: (exception: unknown) => void;\n};\n\ntype Outcome<T> =\n  | { readonly ok: true; readonly value: T }\n  | { readonly ok: false; readonly exception: unknown };\n\nconst TRANSFORMED_AWAIT = Symbol(\"@mcp-b/do-runtime/transformed-await\");\nconst warnedUngatedAwaits = new Set<string>();\n\ntype TransformedAwait<T> = {\n  readonly [TRANSFORMED_AWAIT]: true;\n  readonly context: IoContext;\n  readonly outcome: Outcome<T>;\n};\n\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return (\n    (typeof value === \"object\" && value !== null) ||\n    typeof value === \"function\"\n  ) && typeof Reflect.get(value, \"then\") === \"function\";\n}\n\n/** Re-enter the actor that owns this transformed await; fail open outside actors. */\nexport function __gate<T>(value: T): T | Promise<Awaited<T>> {\n  const context = tryCurrentIoContext();\n  if (!isThenable(value) && context === undefined) return value;\n  if (context === undefined) return value;\n  return resumeWithContext(context, Promise.resolve(value));\n}\n\n/** Capture an actor await without publishing its context before the continuation runs. */\nexport function __gateAwait<T>(\n  value: T,\n  developmentSource?: string,\n): T | Promise<TransformedAwait<Awaited<T>>> {\n  const context = tryCurrentIoContext();\n  if (context === undefined) {\n    if (developmentSource !== undefined && !warnedUngatedAwaits.has(developmentSource)) {\n      warnedUngatedAwaits.add(developmentSource);\n      console.warn(\n        `do-runtime: transformed await in ${developmentSource} ran without an actor input lock; ` +\n          \"an earlier await or entry path is not gated\",\n      );\n    }\n    return value;\n  }\n  return resumeAwaitWithContext(context, Promise.resolve(value));\n}\n\n/** Restore the captured actor at the first instruction after a transformed await. */\nexport function __resumeAwait<T>(value: T | TransformedAwait<T>): T {\n  if (!isTransformedAwait(value)) return value as T;\n\n  value.context.restoreContinuation();\n  if (value.outcome.ok) return value.outcome.value;\n  throw value.outcome.exception;\n}\n\nfunction isTransformedAwait<T>(value: T | TransformedAwait<T>): value is TransformedAwait<T> {\n  return Reflect.get(Object(value), TRANSFORMED_AWAIT) === true;\n}\n\nfunction publishOutcome<T, Result>(\n  context: IoContext,\n  promise: Promise<T>,\n  finish: (outcome: Outcome<T>) => Result,\n): Promise<Result> {\n  return new Promise<Result>((resolve, reject) => {\n    const publish = context.makeTransformReentryCallback((outcome: Outcome<T>) => {\n      if (tryCurrentContinuation() !== undefined) {\n        schedulePublication({ publish: () => publish(outcome), reject });\n        return;\n      }\n      resolve(finish(outcome));\n    });\n    void promise.then(\n      (value) => {\n        schedulePublication({ publish: () => publish({ ok: true, value }), reject });\n      },\n      (exception: unknown) => {\n        schedulePublication({ publish: () => publish({ ok: false, exception }), reject });\n      },\n    );\n  });\n}\n\nfunction resumeAwaitWithContext<T>(\n  context: IoContext,\n  promise: Promise<T>,\n): Promise<TransformedAwait<T>> {\n  return publishOutcome(context, promise, (outcome) => ({\n    [TRANSFORMED_AWAIT]: true,\n    context,\n    outcome,\n  }));\n}\n\nfunction resumeWithContext<T>(context: IoContext, promise: Promise<T>): Promise<T> {\n  return publishOutcome(context, promise, (outcome) => {\n    context.restoreContinuation();\n    if (outcome.ok) return outcome.value;\n    throw outcome.exception;\n  });\n}\n\n/**\n * Resolve one transformed await per task, inside a fresh actor slice. Admission\n * attempts are independent so a blocked actor cannot stall the actor that will\n * unblock it. The task boundary keeps each continuation ambient isolated.\n */\nfunction schedulePublication(publication: Publication): void {\n  const channel = new MessageChannel();\n  channel.port1.onmessage = () => {\n    channel.port1.close();\n    channel.port2.close();\n\n    void publication.publish().catch((exception: unknown) => {\n      publication.reject(exception);\n    });\n  };\n  channel.port2.postMessage(undefined);\n}\n\nfunction iteratorFor<T>(iterable: AsyncIterable<T> | Iterable<T>): AsyncIterator<T> | Iterator<T> {\n  const subject = Object(iterable);\n  const asyncIterator: unknown = Reflect.get(subject, Symbol.asyncIterator);\n  if (typeof asyncIterator === \"function\") return Reflect.apply(asyncIterator, iterable, []);\n  const iterator: unknown = Reflect.get(subject, Symbol.iterator);\n  if (typeof iterator === \"function\") return Reflect.apply(iterator, iterable, []);\n  throw new TypeError(\"value is not async iterable or iterable\");\n}\n\nfunction gatedIterator<T>(iterable: AsyncIterable<T> | Iterable<T>): AsyncIterator<T> {\n  const iterator = iteratorFor(iterable);\n\n  function invoke(methodName: \"next\" | \"return\" | \"throw\", args: unknown[]): Promise<IteratorResult<T>> {\n    const method: unknown = Reflect.get(iterator, methodName);\n    if (typeof method === \"function\") {\n      return Promise.resolve(__gate(Reflect.apply(method, iterator, args)));\n    }\n    if (methodName === \"throw\") return Promise.reject(args[0]);\n    return Promise.resolve({ done: true, value: args[0] });\n  }\n\n  return {\n    next: (...args: [] | [unknown]) => invoke(\"next\", args),\n    return: (value?: unknown) => invoke(\"return\", [value]),\n    throw: (exception?: unknown) => invoke(\"throw\", [exception]),\n  };\n}\n\n/** Gate every operation used by `for await`, including early return and throw. */\nexport function __gateAsyncIterable<T, IterableType extends AsyncIterable<T> | Iterable<T>>(\n  iterable: IterableType,\n): IterableType;\nexport function __gateAsyncIterable<T>(\n  iterable: AsyncIterable<T> | Iterable<T>,\n): AsyncIterable<T> | Iterable<T> {\n  const wrapper: AsyncIterable<T> = {\n    [Symbol.asyncIterator]: () => gatedIterator(iterable),\n  };\n  if ((typeof iterable !== \"object\" || iterable === null) && typeof iterable !== \"function\") {\n    return wrapper;\n  }\n  return new Proxy(iterable, {\n    get(target, property, receiver): unknown {\n      if (property === Symbol.asyncIterator) return wrapper[Symbol.asyncIterator];\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n"],"mappings":";;AAiBA,IAAM,oBAAoB,OAAO,qCAAqC;AACtE,IAAM,sCAAsB,IAAI,IAAY;AAQ5C,SAAS,WAAW,OAA+C;CACjE,QACG,OAAO,UAAU,YAAY,UAAU,QACxC,OAAO,UAAU,eACd,OAAO,QAAQ,IAAI,OAAO,MAAM,MAAM;AAC7C;;AAGA,SAAgB,OAAU,OAAmC;CAC3D,MAAM,UAAU,oBAAoB;CACpC,IAAI,CAAC,WAAW,KAAK,KAAK,YAAY,KAAA,GAAW,OAAO;CACxD,IAAI,YAAY,KAAA,GAAW,OAAO;CAClC,OAAO,kBAAkB,SAAS,QAAQ,QAAQ,KAAK,CAAC;AAC1D;;AAGA,SAAgB,YACd,OACA,mBAC2C;CAC3C,MAAM,UAAU,oBAAoB;CACpC,IAAI,YAAY,KAAA,GAAW;EACzB,IAAI,sBAAsB,KAAA,KAAa,CAAC,oBAAoB,IAAI,iBAAiB,GAAG;GAClF,oBAAoB,IAAI,iBAAiB;GACzC,QAAQ,KACN,oCAAoC,kBAAkB,8EAExD;EACF;EACA,OAAO;CACT;CACA,OAAO,uBAAuB,SAAS,QAAQ,QAAQ,KAAK,CAAC;AAC/D;;AAGA,SAAgB,cAAiB,OAAmC;CAClE,IAAI,CAAC,mBAAmB,KAAK,GAAG,OAAO;CAEvC,MAAM,QAAQ,oBAAoB;CAClC,IAAI,MAAM,QAAQ,IAAI,OAAO,MAAM,QAAQ;CAC3C,MAAM,MAAM,QAAQ;AACtB;AAEA,SAAS,mBAAsB,OAA8D;CAC3F,OAAO,QAAQ,IAAI,OAAO,KAAK,GAAG,iBAAiB,MAAM;AAC3D;AAEA,SAAS,eACP,SACA,SACA,QACiB;CACjB,OAAO,IAAI,SAAiB,SAAS,WAAW;EAC9C,MAAM,UAAU,QAAQ,8BAA8B,YAAwB;GAC5E,IAAI,uBAAuB,MAAM,KAAA,GAAW;IAC1C,oBAAoB;KAAE,eAAe,QAAQ,OAAO;KAAG;IAAO,CAAC;IAC/D;GACF;GACA,QAAQ,OAAO,OAAO,CAAC;EACzB,CAAC;EACD,QAAa,MACV,UAAU;GACT,oBAAoB;IAAE,eAAe,QAAQ;KAAE,IAAI;KAAM;IAAM,CAAC;IAAG;GAAO,CAAC;EAC7E,IACC,cAAuB;GACtB,oBAAoB;IAAE,eAAe,QAAQ;KAAE,IAAI;KAAO;IAAU,CAAC;IAAG;GAAO,CAAC;EAClF,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBACP,SACA,SAC8B;CAC9B,OAAO,eAAe,SAAS,UAAU,aAAa;GACnD,oBAAoB;EACrB;EACA;CACF,EAAE;AACJ;AAEA,SAAS,kBAAqB,SAAoB,SAAiC;CACjF,OAAO,eAAe,SAAS,UAAU,YAAY;EACnD,QAAQ,oBAAoB;EAC5B,IAAI,QAAQ,IAAI,OAAO,QAAQ;EAC/B,MAAM,QAAQ;CAChB,CAAC;AACH;;;;;;AAOA,SAAS,oBAAoB,aAAgC;CAC3D,MAAM,UAAU,IAAI,eAAe;CACnC,QAAQ,MAAM,kBAAkB;EAC9B,QAAQ,MAAM,MAAM;EACpB,QAAQ,MAAM,MAAM;EAEpB,YAAiB,QAAQ,CAAC,CAAC,OAAO,cAAuB;GACvD,YAAY,OAAO,SAAS;EAC9B,CAAC;CACH;CACA,QAAQ,MAAM,YAAY,KAAA,CAAS;AACrC;AAEA,SAAS,YAAe,UAA0E;CAChG,MAAM,UAAU,OAAO,QAAQ;CAC/B,MAAM,gBAAyB,QAAQ,IAAI,SAAS,OAAO,aAAa;CACxE,IAAI,OAAO,kBAAkB,YAAY,OAAO,QAAQ,MAAM,eAAe,UAAU,CAAC,CAAC;CACzF,MAAM,WAAoB,QAAQ,IAAI,SAAS,OAAO,QAAQ;CAC9D,IAAI,OAAO,aAAa,YAAY,OAAO,QAAQ,MAAM,UAAU,UAAU,CAAC,CAAC;CAC/E,MAAM,IAAI,UAAU,yCAAyC;AAC/D;AAEA,SAAS,cAAiB,UAA4D;CACpF,MAAM,WAAW,YAAY,QAAQ;CAErC,SAAS,OAAO,YAAyC,MAA6C;EACpG,MAAM,SAAkB,QAAQ,IAAI,UAAU,UAAU;EACxD,IAAI,OAAO,WAAW,YACpB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,MAAM,QAAQ,UAAU,IAAI,CAAC,CAAC;EAEtE,IAAI,eAAe,SAAS,OAAO,QAAQ,OAAO,KAAK,EAAE;EACzD,OAAO,QAAQ,QAAQ;GAAE,MAAM;GAAM,OAAO,KAAK;EAAG,CAAC;CACvD;CAEA,OAAO;EACL,OAAO,GAAG,SAAyB,OAAO,QAAQ,IAAI;EACtD,SAAS,UAAoB,OAAO,UAAU,CAAC,KAAK,CAAC;EACrD,QAAQ,cAAwB,OAAO,SAAS,CAAC,SAAS,CAAC;CAC7D;AACF;AAMA,SAAgB,oBACd,UACgC;CAChC,MAAM,UAA4B,GAC/B,OAAO,sBAAsB,cAAc,QAAQ,EACtD;CACA,KAAK,OAAO,aAAa,YAAY,aAAa,SAAS,OAAO,aAAa,YAC7E,OAAO;CAET,OAAO,IAAI,MAAM,UAAU,EACzB,IAAI,QAAQ,UAAU,UAAmB;EACvC,IAAI,aAAa,OAAO,eAAe,OAAO,QAAQ,OAAO;EAC7D,OAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;CAC/C,EACF,CAAC;AACH"}
+{"version":3,"file":"gate.js","names":[],"sources":["../src/gate.ts"],"sourcesContent":["/* @do-runtime-gated */\n\nimport {\n  atCheckpointEnd,\n  tryCurrentContinuation,\n  tryCurrentIoContext,\n  type IoContext,\n} from \"./io/io-context\";\n\ntype Publication = {\n  readonly publish: () => Promise<void>;\n  readonly reject: (exception: unknown) => void;\n};\n\ntype Outcome<T> =\n  | { readonly ok: true; readonly value: T }\n  | { readonly ok: false; readonly exception: unknown };\n\nconst TRANSFORMED_AWAIT = Symbol(\"@mcp-b/do-runtime/transformed-await\");\n/**\n * Own the gap between publishing an await result and its `__resumeAwait` call.\n * This is deliberately separate from the current-continuation ambient: a\n * reservation serializes publishers but must never make its actor look current.\n * See §2.3 and decision 8.\n */\nconst CURRENT_PUBLICATION = Symbol.for(\"@mcp-b/do-runtime/current-await-publication\");\nconst warnedUngatedAwaits = new Set<string>();\n\ntype PublicationReservation = {\n  readonly context: IoContext;\n};\n\ntype TransformedAwait<T> = {\n  readonly [TRANSFORMED_AWAIT]: true;\n  readonly context: IoContext;\n  readonly outcome: Outcome<T>;\n  readonly reservation: PublicationReservation;\n};\n\nfunction isThenable(value: unknown): value is PromiseLike<unknown> {\n  return (\n    (typeof value === \"object\" && value !== null) ||\n    typeof value === \"function\"\n  ) && typeof Reflect.get(value, \"then\") === \"function\";\n}\n\n/** Re-enter the actor that owns this transformed await; fail open outside actors. */\nexport function __gate<T>(value: T): T | Promise<Awaited<T>> {\n  const context = tryCurrentIoContext();\n  if (!isThenable(value) && context === undefined) return value;\n  if (context === undefined) return value;\n  return resumeWithContext(context, Promise.resolve(value));\n}\n\n/** Capture an actor await without publishing its context before the continuation runs. */\nexport function __gateAwait<T>(\n  value: T,\n  developmentSource?: string,\n): T | Promise<TransformedAwait<Awaited<T>>> {\n  const context = tryCurrentIoContext();\n  if (context === undefined) {\n    if (developmentSource !== undefined && !warnedUngatedAwaits.has(developmentSource)) {\n      warnedUngatedAwaits.add(developmentSource);\n      console.warn(\n        `do-runtime: transformed await in ${developmentSource} ran without an actor input lock; ` +\n          \"an earlier await or entry path is not gated\",\n      );\n    }\n    return value;\n  }\n  return resumeAwaitWithContext(context, Promise.resolve(value));\n}\n\n/** Restore the captured actor at the first instruction after a transformed await. */\nexport function __resumeAwait<T>(value: T | TransformedAwait<T>): T {\n  if (!isTransformedAwait(value)) return value as T;\n\n  clearPublication(value.reservation);\n  value.context.restoreContinuation();\n  if (value.outcome.ok) return value.outcome.value;\n  throw value.outcome.exception;\n}\n\nfunction isTransformedAwait<T>(value: T | TransformedAwait<T>): value is TransformedAwait<T> {\n  return Reflect.get(Object(value), TRANSFORMED_AWAIT) === true;\n}\n\nfunction currentPublication(): PublicationReservation | undefined {\n  return Reflect.get(globalThis, CURRENT_PUBLICATION) as PublicationReservation | undefined;\n}\n\nfunction reservePublication(context: IoContext): PublicationReservation | undefined {\n  if (tryCurrentContinuation() !== undefined || currentPublication() !== undefined) return undefined;\n  const reservation = { context };\n  Reflect.set(globalThis, CURRENT_PUBLICATION, reservation);\n  atCheckpointEnd(() => clearPublication(reservation));\n  return reservation;\n}\n\nfunction clearPublication(reservation: PublicationReservation): void {\n  if (currentPublication() === reservation) {\n    Reflect.deleteProperty(globalThis, CURRENT_PUBLICATION);\n  }\n}\n\nfunction publishOutcome<T, Result>(\n  context: IoContext,\n  promise: Promise<T>,\n  finish: (outcome: Outcome<T>, reservation: PublicationReservation) => Result,\n): Promise<Result> {\n  return new Promise<Result>((resolve, reject) => {\n    const publish = context.makeTransformReentryCallback((outcome: Outcome<T>) => {\n      const reservation = reservePublication(context);\n      if (reservation === undefined) {\n        schedulePublication({ publish: () => publish(outcome), reject });\n        return;\n      }\n      resolve(finish(outcome, reservation));\n    });\n    void promise.then(\n      (value) => {\n        schedulePublication({ publish: () => publish({ ok: true, value }), reject });\n      },\n      (exception: unknown) => {\n        schedulePublication({ publish: () => publish({ ok: false, exception }), reject });\n      },\n    );\n  });\n}\n\nfunction resumeAwaitWithContext<T>(\n  context: IoContext,\n  promise: Promise<T>,\n): Promise<TransformedAwait<T>> {\n  return publishOutcome(context, promise, (outcome, reservation) => ({\n    [TRANSFORMED_AWAIT]: true,\n    context,\n    outcome,\n    reservation,\n  }));\n}\n\nfunction resumeWithContext<T>(context: IoContext, promise: Promise<T>): Promise<T> {\n  return publishOutcome(context, promise, (outcome, reservation) => {\n    clearPublication(reservation);\n    context.restoreContinuation();\n    if (outcome.ok) return outcome.value;\n    throw outcome.exception;\n  });\n}\n\n/**\n * Resolve one transformed await per task, inside a fresh actor slice. Admission\n * attempts are independent so a blocked actor cannot stall the actor that will\n * unblock it. The task boundary keeps each continuation ambient isolated.\n */\nfunction schedulePublication(publication: Publication): void {\n  const channel = new MessageChannel();\n  channel.port1.onmessage = () => {\n    channel.port1.close();\n    channel.port2.close();\n\n    void publication.publish().catch((exception: unknown) => {\n      publication.reject(exception);\n    });\n  };\n  channel.port2.postMessage(undefined);\n}\n\nfunction iteratorFor<T>(iterable: AsyncIterable<T> | Iterable<T>): AsyncIterator<T> | Iterator<T> {\n  const subject = Object(iterable);\n  const asyncIterator: unknown = Reflect.get(subject, Symbol.asyncIterator);\n  if (typeof asyncIterator === \"function\") return Reflect.apply(asyncIterator, iterable, []);\n  const iterator: unknown = Reflect.get(subject, Symbol.iterator);\n  if (typeof iterator === \"function\") return Reflect.apply(iterator, iterable, []);\n  throw new TypeError(\"value is not async iterable or iterable\");\n}\n\nfunction gatedIterator<T>(iterable: AsyncIterable<T> | Iterable<T>): AsyncIterator<T> {\n  const iterator = iteratorFor(iterable);\n\n  function invoke(methodName: \"next\" | \"return\" | \"throw\", args: unknown[]): Promise<IteratorResult<T>> {\n    const method: unknown = Reflect.get(iterator, methodName);\n    if (typeof method === \"function\") {\n      return Promise.resolve(__gate(Reflect.apply(method, iterator, args)));\n    }\n    if (methodName === \"throw\") return Promise.reject(args[0]);\n    return Promise.resolve({ done: true, value: args[0] });\n  }\n\n  return {\n    next: (...args: [] | [unknown]) => invoke(\"next\", args),\n    return: (value?: unknown) => invoke(\"return\", [value]),\n    throw: (exception?: unknown) => invoke(\"throw\", [exception]),\n  };\n}\n\n/** Gate every operation used by `for await`, including early return and throw. */\nexport function __gateAsyncIterable<T, IterableType extends AsyncIterable<T> | Iterable<T>>(\n  iterable: IterableType,\n): IterableType;\nexport function __gateAsyncIterable<T>(\n  iterable: AsyncIterable<T> | Iterable<T>,\n): AsyncIterable<T> | Iterable<T> {\n  const wrapper: AsyncIterable<T> = {\n    [Symbol.asyncIterator]: () => gatedIterator(iterable),\n  };\n  if ((typeof iterable !== \"object\" || iterable === null) && typeof iterable !== \"function\") {\n    return wrapper;\n  }\n  return new Proxy(iterable, {\n    get(target, property, receiver): unknown {\n      if (property === Symbol.asyncIterator) return wrapper[Symbol.asyncIterator];\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n"],"mappings":";;AAkBA,IAAM,oBAAoB,OAAO,qCAAqC;;;;;;;AAOtE,IAAM,sBAAsB,OAAO,IAAI,6CAA6C;AACpF,IAAM,sCAAsB,IAAI,IAAY;AAa5C,SAAS,WAAW,OAA+C;CACjE,QACG,OAAO,UAAU,YAAY,UAAU,QACxC,OAAO,UAAU,eACd,OAAO,QAAQ,IAAI,OAAO,MAAM,MAAM;AAC7C;;AAGA,SAAgB,OAAU,OAAmC;CAC3D,MAAM,UAAU,oBAAoB;CACpC,IAAI,CAAC,WAAW,KAAK,KAAK,YAAY,KAAA,GAAW,OAAO;CACxD,IAAI,YAAY,KAAA,GAAW,OAAO;CAClC,OAAO,kBAAkB,SAAS,QAAQ,QAAQ,KAAK,CAAC;AAC1D;;AAGA,SAAgB,YACd,OACA,mBAC2C;CAC3C,MAAM,UAAU,oBAAoB;CACpC,IAAI,YAAY,KAAA,GAAW;EACzB,IAAI,sBAAsB,KAAA,KAAa,CAAC,oBAAoB,IAAI,iBAAiB,GAAG;GAClF,oBAAoB,IAAI,iBAAiB;GACzC,QAAQ,KACN,oCAAoC,kBAAkB,8EAExD;EACF;EACA,OAAO;CACT;CACA,OAAO,uBAAuB,SAAS,QAAQ,QAAQ,KAAK,CAAC;AAC/D;;AAGA,SAAgB,cAAiB,OAAmC;CAClE,IAAI,CAAC,mBAAmB,KAAK,GAAG,OAAO;CAEvC,iBAAiB,MAAM,WAAW;CAClC,MAAM,QAAQ,oBAAoB;CAClC,IAAI,MAAM,QAAQ,IAAI,OAAO,MAAM,QAAQ;CAC3C,MAAM,MAAM,QAAQ;AACtB;AAEA,SAAS,mBAAsB,OAA8D;CAC3F,OAAO,QAAQ,IAAI,OAAO,KAAK,GAAG,iBAAiB,MAAM;AAC3D;AAEA,SAAS,qBAAyD;CAChE,OAAO,QAAQ,IAAI,YAAY,mBAAmB;AACpD;AAEA,SAAS,mBAAmB,SAAwD;CAClF,IAAI,uBAAuB,MAAM,KAAA,KAAa,mBAAmB,MAAM,KAAA,GAAW,OAAO,KAAA;CACzF,MAAM,cAAc,EAAE,QAAQ;CAC9B,QAAQ,IAAI,YAAY,qBAAqB,WAAW;CACxD,sBAAsB,iBAAiB,WAAW,CAAC;CACnD,OAAO;AACT;AAEA,SAAS,iBAAiB,aAA2C;CACnE,IAAI,mBAAmB,MAAM,aAC3B,QAAQ,eAAe,YAAY,mBAAmB;AAE1D;AAEA,SAAS,eACP,SACA,SACA,QACiB;CACjB,OAAO,IAAI,SAAiB,SAAS,WAAW;EAC9C,MAAM,UAAU,QAAQ,8BAA8B,YAAwB;GAC5E,MAAM,cAAc,mBAAmB,OAAO;GAC9C,IAAI,gBAAgB,KAAA,GAAW;IAC7B,oBAAoB;KAAE,eAAe,QAAQ,OAAO;KAAG;IAAO,CAAC;IAC/D;GACF;GACA,QAAQ,OAAO,SAAS,WAAW,CAAC;EACtC,CAAC;EACD,QAAa,MACV,UAAU;GACT,oBAAoB;IAAE,eAAe,QAAQ;KAAE,IAAI;KAAM;IAAM,CAAC;IAAG;GAAO,CAAC;EAC7E,IACC,cAAuB;GACtB,oBAAoB;IAAE,eAAe,QAAQ;KAAE,IAAI;KAAO;IAAU,CAAC;IAAG;GAAO,CAAC;EAClF,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBACP,SACA,SAC8B;CAC9B,OAAO,eAAe,SAAS,UAAU,SAAS,iBAAiB;GAChE,oBAAoB;EACrB;EACA;EACA;CACF,EAAE;AACJ;AAEA,SAAS,kBAAqB,SAAoB,SAAiC;CACjF,OAAO,eAAe,SAAS,UAAU,SAAS,gBAAgB;EAChE,iBAAiB,WAAW;EAC5B,QAAQ,oBAAoB;EAC5B,IAAI,QAAQ,IAAI,OAAO,QAAQ;EAC/B,MAAM,QAAQ;CAChB,CAAC;AACH;;;;;;AAOA,SAAS,oBAAoB,aAAgC;CAC3D,MAAM,UAAU,IAAI,eAAe;CACnC,QAAQ,MAAM,kBAAkB;EAC9B,QAAQ,MAAM,MAAM;EACpB,QAAQ,MAAM,MAAM;EAEpB,YAAiB,QAAQ,CAAC,CAAC,OAAO,cAAuB;GACvD,YAAY,OAAO,SAAS;EAC9B,CAAC;CACH;CACA,QAAQ,MAAM,YAAY,KAAA,CAAS;AACrC;AAEA,SAAS,YAAe,UAA0E;CAChG,MAAM,UAAU,OAAO,QAAQ;CAC/B,MAAM,gBAAyB,QAAQ,IAAI,SAAS,OAAO,aAAa;CACxE,IAAI,OAAO,kBAAkB,YAAY,OAAO,QAAQ,MAAM,eAAe,UAAU,CAAC,CAAC;CACzF,MAAM,WAAoB,QAAQ,IAAI,SAAS,OAAO,QAAQ;CAC9D,IAAI,OAAO,aAAa,YAAY,OAAO,QAAQ,MAAM,UAAU,UAAU,CAAC,CAAC;CAC/E,MAAM,IAAI,UAAU,yCAAyC;AAC/D;AAEA,SAAS,cAAiB,UAA4D;CACpF,MAAM,WAAW,YAAY,QAAQ;CAErC,SAAS,OAAO,YAAyC,MAA6C;EACpG,MAAM,SAAkB,QAAQ,IAAI,UAAU,UAAU;EACxD,IAAI,OAAO,WAAW,YACpB,OAAO,QAAQ,QAAQ,OAAO,QAAQ,MAAM,QAAQ,UAAU,IAAI,CAAC,CAAC;EAEtE,IAAI,eAAe,SAAS,OAAO,QAAQ,OAAO,KAAK,EAAE;EACzD,OAAO,QAAQ,QAAQ;GAAE,MAAM;GAAM,OAAO,KAAK;EAAG,CAAC;CACvD;CAEA,OAAO;EACL,OAAO,GAAG,SAAyB,OAAO,QAAQ,IAAI;EACtD,SAAS,UAAoB,OAAO,UAAU,CAAC,KAAK,CAAC;EACrD,QAAQ,cAAwB,OAAO,SAAS,CAAC,SAAS,CAAC;CAC7D;AACF;AAMA,SAAgB,oBACd,UACgC;CAChC,MAAM,UAA4B,GAC/B,OAAO,sBAAsB,cAAc,QAAQ,EACtD;CACA,KAAK,OAAO,aAAa,YAAY,aAAa,SAAS,OAAO,aAAa,YAC7E,OAAO;CAET,OAAO,IAAI,MAAM,UAAU,EACzB,IAAI,QAAQ,UAAU,UAAmB;EACvC,IAAI,aAAa,OAAO,eAAe,OAAO,QAAQ,OAAO;EAC7D,OAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;CAC/C,EACF,CAAC;AACH"}

package/dist/index.js

@@ -1,6 +1,6 @@
 import { a as hasUserErrorDetail, c as setUserErrorDetail, d as tryCurrentSlice, f as CanceledError, i as captureGateStack, m as OutputGate, n as IoContext, o as isExceptionFromInputGateBroken, p as InputGate, r as atCheckpointEnd, s as requireInputLock, t as BrokenActorError, u as tryCurrentIoContext } from "./chunks/io-context-RmmjNtwm.js";
 import { RpcTarget as RpcTarget$1 } from "./cloudflare-workers.js";
-import { a as getInt64, c as isNull, i as getBlob, o as getText, r as SqliteDatabase, s as hasCurrentSqliteTable } from "./chunks/sqlite-DFg92Tgt.js";
+import { a as SqliteDatabase, c as getText, l as hasCurrentSqliteTable, o as getBlob, s as getInt64, t as ensureRuntimeStorageVersion, u as isNull } from "./chunks/sqlite-migrations-DsWmLP_B.js";
 import { ALARM_RETRY_MAX_TRIES, ALARM_RETRY_START_SECONDS, AlarmScheduler, RETRY_BACKOFF_MAX, RETRY_JITTER_FACTOR, alarmRetryDelayMs } from "./server/alarm-scheduler.js";
 import { deserialize, serialize } from "@ungap/structured-clone";
 import { RpcTarget, newMessagePortRpcSession } from "capnweb";
@@ -1119,6 +1119,247 @@ function refuseTransactionControl(statement) {
 	if (TRANSACTION_CONTROL.test(code)) SqlStorageRegulator.allowTransactions();
 }
 /**
+* ← the message a `SQLITE_DENY` from the authorizer surfaces to JavaScript,
+* byte-identical so a caller matching on it ports unchanged.
+*/
+var SQL_NOT_AUTHORIZED_MESSAGE = "not authorized: SQLITE_AUTH";
+/** Comments are never code. String literals STAY: pragma arguments may be quoted. */
+var NOT_COMMENT = /--[^\n]*|\/\*[\s\S]*?\*\//g;
+/** Cheap pre-test; `PRAGMA` and the `pragma_` functions both contain it. */
+var PRAGMA_HINT = /pragma/i;
+/** `PRAGMA [schema.]name`, then `= value`, `(argument)`, or nothing. */
+var PRAGMA_STATEMENT = /^\s*PRAGMA\s+(?:[A-Za-z_][A-Za-z0-9_$]*\s*\.\s*)?([A-Za-z_][A-Za-z0-9_$]*)(?:\s*=\s*([\s\S]+?)|\s*\(\s*([\s\S]*?)\s*\))?\s*;?\s*$/i;
+/**
+* ← `ALLOWED_PRAGMAS` and `PragmaSignature` (`util/sqlite.c++:525-563`),
+* verbatim. `table_list`, `table_info`, and `table_xinfo` are special-cased
+* ahead of the table in the authorizer, exactly as upstream's `SQLITE_PRAGMA`
+* case does (`util/sqlite.c++:1194-1273`).
+*/
+var ALLOWED_PRAGMAS = /* @__PURE__ */ new Map([
+	["data_version", "NO_ARG"],
+	["case_sensitive_like", "BOOLEAN"],
+	["foreign_keys", "BOOLEAN"],
+	["defer_foreign_keys", "BOOLEAN"],
+	["ignore_check_constraints", "BOOLEAN"],
+	["legacy_alter_table", "BOOLEAN"],
+	["recursive_triggers", "BOOLEAN"],
+	["reverse_unordered_selects", "BOOLEAN"],
+	["foreign_key_check", "OPTIONAL_OBJECT_NAME"],
+	["foreign_key_list", "OBJECT_NAME"],
+	["index_info", "OBJECT_NAME"],
+	["index_list", "OBJECT_NAME"],
+	["index_xinfo", "OBJECT_NAME"],
+	["quick_check", "NULL_NUMBER_OR_OBJECT_NAME"],
+	["optimize", "NULL_OR_NUMBER"]
+]);
+/** Upstream compares the eight literal forms as PREFIXES, case-insensitively. */
+var BOOLEAN_PRAGMA_VALUE = /^(?:true|false|yes|no|on|off|1|0)/i;
+/**
+* The pragmas SQLite ships (https://www.sqlite.org/pragma.html), so a
+* `pragma_X` identifier can be told apart: `X` here means the table-valued
+* pragma function and follows the allowlist; any other `pragma_`-prefixed
+* identifier is an ordinary application name, which upstream's authorizer
+* distinguishes by resolution and the conformance suite pins.
+*/
+var SQLITE_PRAGMA_NAMES = /* @__PURE__ */ new Set([
+	"analysis_limit",
+	"application_id",
+	"auto_vacuum",
+	"automatic_index",
+	"busy_timeout",
+	"cache_size",
+	"cache_spill",
+	"case_sensitive_like",
+	"cell_size_check",
+	"checkpoint_fullfsync",
+	"collation_list",
+	"compile_options",
+	"data_version",
+	"database_list",
+	"defer_foreign_keys",
+	"encoding",
+	"foreign_key_check",
+	"foreign_key_list",
+	"foreign_keys",
+	"freelist_count",
+	"full_column_names",
+	"fullfsync",
+	"function_list",
+	"hard_heap_limit",
+	"ignore_check_constraints",
+	"incremental_vacuum",
+	"index_info",
+	"index_list",
+	"index_xinfo",
+	"integrity_check",
+	"journal_mode",
+	"journal_size_limit",
+	"legacy_alter_table",
+	"legacy_file_format",
+	"locking_mode",
+	"max_page_count",
+	"mmap_size",
+	"module_list",
+	"optimize",
+	"page_count",
+	"page_size",
+	"pragma_list",
+	"query_only",
+	"quick_check",
+	"read_uncommitted",
+	"recursive_triggers",
+	"reverse_unordered_selects",
+	"schema_version",
+	"secure_delete",
+	"short_column_names",
+	"shrink_memory",
+	"soft_heap_limit",
+	"synchronous",
+	"table_info",
+	"table_list",
+	"table_xinfo",
+	"temp_store",
+	"threads",
+	"trusted_schema",
+	"user_version",
+	"wal_autocheckpoint",
+	"wal_checkpoint",
+	"writable_schema"
+]);
+/** kj's `tryParseAs` is decimal; keep the same acceptance. */
+var DECIMAL = /^[+-]?\d+$/;
+/** One layer of SQL quoting off a pragma argument, any of the four forms. */
+function unquoted(argument) {
+	const first = argument[0];
+	const last = argument[argument.length - 1];
+	if (argument.length >= 2) {
+		if ((first === "'" || first === "\"" || first === "`") && last === first) return argument.slice(1, -1);
+		if (first === "[" && last === "]") return argument.slice(1, -1);
+	}
+	return argument;
+}
+/** ← the `SQLITE_PRAGMA` authorizer case (`util/sqlite.c++:1194-1273`), whole. */
+function isAllowedPragma(name, argument) {
+	const pragma = name.toLowerCase();
+	if (pragma === "table_list") return true;
+	if (pragma === "table_info" || pragma === "table_xinfo") {
+		if (argument === void 0) return false;
+		return SqlStorageRegulator.isAllowedName(unquoted(argument));
+	}
+	const signature = ALLOWED_PRAGMAS.get(pragma);
+	if (signature === void 0) return false;
+	switch (signature) {
+		case "NO_ARG": return argument === void 0;
+		case "BOOLEAN": return argument === void 0 || BOOLEAN_PRAGMA_VALUE.test(unquoted(argument));
+		case "OBJECT_NAME": return argument !== void 0 && SqlStorageRegulator.isAllowedName(unquoted(argument));
+		case "OPTIONAL_OBJECT_NAME": return argument === void 0 || SqlStorageRegulator.isAllowedName(unquoted(argument));
+		case "NULL_OR_NUMBER": return argument === void 0 || DECIMAL.test(argument);
+		case "NULL_NUMBER_OR_OBJECT_NAME": return argument === void 0 || DECIMAL.test(argument) || SqlStorageRegulator.isAllowedName(unquoted(argument));
+	}
+}
+/**
+* The text-level stand-in for the authorizer's `SQLITE_PRAGMA` case, against
+* one SQLite-decided statement boundary. Load-bearing beyond fidelity:
+* `user_version` is where runtime storage versioning keeps its per-file stamp
+* (`util/sqlite-migrations.ts`), and `writable_schema` would let application
+* SQL rewrite `sqlite_master` out from under the `_cf_` reservation.
+*
+* The `pragma_` table-valued functions reach the same authorizer path
+* upstream, so they follow the same allowlist here — by pragma NAME only. An
+* argument the text cannot see (a string literal or a binding) goes unchecked
+* where upstream's authorizer sees the resolved value; a `_cf_` name smuggled
+* that way reads schema whose shape is public source anyway, while identifier
+* arguments stay covered by `requireAllowedNames`. The README divergence row
+* records this.
+*/
+function requireAllowedPragmas(statement) {
+	if (!PRAGMA_HINT.test(statement)) return;
+	const code = statement.replace(NOT_COMMENT, " ");
+	const direct = code.match(PRAGMA_STATEMENT);
+	if (direct !== null) {
+		const [, name = "", assigned, called] = direct;
+		const argument = (assigned ?? called)?.trim();
+		if (!isAllowedPragma(name, argument === "" ? void 0 : argument)) throw new Error(SQL_NOT_AUTHORIZED_MESSAGE);
+		return;
+	}
+	if (/^\s*PRAGMA\b/i.test(code)) throw new Error(SQL_NOT_AUTHORIZED_MESSAGE);
+	const literalFree = code.replace(NOT_CODE, " ");
+	for (const [token] of literalFree.matchAll(IDENTIFIER)) {
+		if (token.length <= 7 || token.slice(0, 7).toLowerCase() !== "pragma_") continue;
+		const name = token.slice(7).toLowerCase();
+		if (!SQLITE_PRAGMA_NAMES.has(name)) continue;
+		if (name !== "table_list" && name !== "table_info" && name !== "table_xinfo" && !ALLOWED_PRAGMAS.has(name)) throw new Error(SQL_NOT_AUTHORIZED_MESSAGE);
+	}
+}
+/** Everything the untrusted path refuses at one statement boundary. */
+function regulateUntrustedStatement(statement) {
+	refuseTransactionControl(statement);
+	requireAllowedPragmas(statement);
+}
+/** ← `JSG_INHERIT_INTRINSIC(v8::kIteratorPrototype)` (`jsg/iterator.h:1044`). */
+var IteratorPrototype = Object.getPrototypeOf(Object.getPrototypeOf([][Symbol.iterator]()));
+/**
+* ← the `JSG_ITERATOR` types (`jsg/iterator.h:1036-1050`): `next` and
+* self-iterability on `%IteratorPrototype%` — which is what carries the ES
+* iterator helpers; `raw().toArray()` is what Drizzle's durable-sqlite driver
+* calls — and NOTHING else. No `return`, no `throw` (only the async variant
+* registers `return_`, `:1069-1085`), so `IteratorClose` after a `break`, a
+* partial destructuring, or a `take()` is a no-op and a retained iterator
+* resumes. Results are `JSG_STRUCT(done, value)` in that key order
+* (`jsg/iterator.h:706-710`).
+*/
+var RawIterator = class {
+	#pull;
+	constructor(pull) {
+		this.#pull = pull;
+	}
+	next() {
+		const raw = this.#pull();
+		if (raw === void 0) return {
+			done: true,
+			value: void 0
+		};
+		return {
+			done: false,
+			value: asRawRow([...raw])
+		};
+	}
+	[Symbol.iterator]() {
+		return this;
+	}
+};
+Object.setPrototypeOf(RawIterator.prototype, IteratorPrototype);
+Object.defineProperty(RawIterator.prototype, Symbol.toStringTag, {
+	value: "RawIterator",
+	configurable: true
+});
+/** ← `RowIterator`, shaped exactly as `RawIterator` above. */
+var RowIterator = class {
+	#pull;
+	constructor(pull) {
+		this.#pull = pull;
+	}
+	next() {
+		const row = this.#pull();
+		if (row === void 0) return {
+			done: true,
+			value: void 0
+		};
+		return {
+			done: false,
+			value: row
+		};
+	}
+	[Symbol.iterator]() {
+		return this;
+	}
+};
+Object.setPrototypeOf(RowIterator.prototype, IteratorPrototype);
+Object.defineProperty(RowIterator.prototype, Symbol.toStringTag, {
+	value: "RowIterator",
+	configurable: true
+});
+/**
 * ← `SqlStorage::Cursor`.
 *
 * `rowsRead` is the one counter that is not upstream's. Upstream reads
@@ -1130,20 +1371,30 @@ function refuseTransactionControl(statement) {
 * undercounts any query that scans more rows than it returns.
 */
 var Cursor = class {
-	columnNames;
+	#columnNames;
 	#rawRows;
 	#rowsWritten;
 	#position = 0;
 	constructor(state) {
 		if (state === void 0) throw new Error(CURSOR_NOT_CONSTRUCTIBLE_MESSAGE);
-		this.columnNames = state.columnNames;
+		this.#columnNames = state.columnNames;
 		this.#rawRows = state.rawRows;
 		this.#rowsWritten = state.rowsWritten;
 	}
+	/**
+	* ← `JSG_READONLY_PROTOTYPE_PROPERTY(columnNames)` (`sql.h:210`): a
+	* prototype accessor, not an own field, so a cursor JSON-stringifies to `{}`.
+	*/
+	get columnNames() {
+		return this.#columnNames;
+	}
 	/** ← `Cursor::next`, whose `RowIterator::Next` is this exact shape. */
 	next() {
 		const row = this.#nextRow();
-		if (row === void 0) return { done: true };
+		if (row === void 0) return {
+			done: true,
+			value: void 0
+		};
 		return {
 			done: false,
 			value: row
@@ -1168,45 +1419,16 @@ var Cursor = class {
 		}
 		return row;
 	}
-	/** ← `Cursor::raw`, which shares this cursor's position rather than restarting. */
+	/**
+	* ← `Cursor::raw`, which shares this cursor's position rather than
+	* restarting. The iterator's shape is `RawIterator`'s whole doc comment.
+	*/
 	raw() {
-		const iterator = {
-			[Symbol.iterator]() {
-				return iterator;
-			},
-			next: () => {
-				const raw = this.#nextRaw();
-				if (raw === void 0) return {
-					done: true,
-					value: void 0
-				};
-				return {
-					done: false,
-					value: asRawRow([...raw])
-				};
-			}
-		};
-		return iterator;
+		return new RawIterator(() => this.#nextRaw());
 	}
-	/** ← `JSG_ITERABLE(rows)`. */
+	/** ← `JSG_ITERABLE(rows)`, yielding through the same shared position. */
 	[Symbol.iterator]() {
-		const iterator = {
-			[Symbol.iterator]() {
-				return iterator;
-			},
-			next: () => {
-				const row = this.#nextRow();
-				if (row === void 0) return {
-					done: true,
-					value: void 0
-				};
-				return {
-					done: false,
-					value: row
-				};
-			}
-		};
-		return iterator;
+		return new RowIterator(() => this.#nextRow());
 	}
 	get rowsRead() {
 		return this.#position;
@@ -1226,12 +1448,17 @@ var Cursor = class {
 		const raw = this.#nextRaw();
 		if (raw === void 0) return void 0;
 		const row = {};
-		this.columnNames.forEach((name, index) => {
+		this.#columnNames.forEach((name, index) => {
 			row[name] = raw[index] ?? null;
 		});
 		return asRow(row);
 	}
 };
+/** ← the jsg resource-type tag every workerd API object carries (`resource.h`). */
+Object.defineProperty(Cursor.prototype, Symbol.toStringTag, {
+	value: "Cursor",
+	configurable: true
+});
 /**
 * ← `SqlStorage::Statement`, which upstream describes as "supported only for
 * backwards compatibility ... it is actually just a wrapper around `exec()`".
@@ -1261,7 +1488,7 @@ var SqlStorage = class {
 		const db = this.#owner.getSqliteDb();
 		const sqlBindings = bindings.map(toSqlBindingValue);
 		requireAllowedNames(query);
-		const result = db.run({ regulate: refuseTransactionControl }, query, ...sqlBindings);
+		const result = db.run({ regulate: regulateUntrustedStatement }, query, ...sqlBindings);
 		return new Cursor({
 			columnNames: [...result.columnNames],
 			rawRows: result.rawRows.map((row) => row.map(toSqlStorageValue)),
@@ -1294,7 +1521,7 @@ var SqlStorage = class {
 	ingest(query) {
 		requireInputLock(this.#ctx, "sql.ingest()");
 		requireAllowedNames(query);
-		return this.#owner.getSqliteDb().ingest(query, refuseTransactionControl);
+		return this.#owner.getSqliteDb().ingest(query, regulateUntrustedStatement);
 	}
 	/** ← `SqlStorage::setMaxPageCountForTest`, which is what its name says. */
 	setMaxPageCountForTest(count) {
@@ -5827,9 +6054,13 @@ var ActorContainerImpl = class {
 * `state`.
 */
 async function createActorContainer(options) {
-	const db = new SqliteDatabase(await options.ports.sql.open(ACTOR_DATABASE_NAME));
+	const actorDb = await options.ports.sql.open(ACTOR_DATABASE_NAME);
+	ensureRuntimeStorageVersion(actorDb, ACTOR_DATABASE_NAME);
+	const db = new SqliteDatabase(actorDb);
 	if (options.facet !== void 0) return new ActorContainerImpl(options, db, void 0, options.facet.tree);
-	const tree = new ActorTree(await options.ports.sql.open(FACET_DATABASE_NAME), options.ports.facets);
+	const facetDb = await options.ports.sql.open(FACET_DATABASE_NAME);
+	ensureRuntimeStorageVersion(facetDb, FACET_DATABASE_NAME);
+	const tree = new ActorTree(facetDb, options.ports.facets);
 	return new ActorContainerImpl(options, db, tree, tree);
 }
 //#endregion