@ricsam/isolate 0.1.4 → 0.1.5

package/dist/mjs/internal/crypto/index.mjs.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../../../../src/internal/crypto/index.ts"],
   "sourcesContent": [
-    "import ivm from \"isolated-vm\";\nimport crypto from \"node:crypto\";\n\nexport interface CryptoHandle {\n  dispose(): void;\n}\n\n// Host-side key storage for crypto.subtle\nconst cryptoKeysByContext = new WeakMap<ivm.Context, Map<number, crypto.webcrypto.CryptoKey>>();\nlet nextKeyId = 1;\n\nfunction getKeyMapForContext(context: ivm.Context): Map<number, crypto.webcrypto.CryptoKey> {\n  let map = cryptoKeysByContext.get(context);\n  if (!map) {\n    map = new Map();\n    cryptoKeysByContext.set(context, map);\n  }\n  return map;\n}\n\nfunction deserializeAlgorithm(algorithm: Record<string, unknown>): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(algorithm)) {\n    if (value && typeof value === 'object' && !Array.isArray(value) &&\n        Object.keys(value).every(k => /^\\d+$/.test(k))) {\n      // Convert {\"0\": n, \"1\": m, ...} back to Uint8Array\n      const length = Object.keys(value).length;\n      const arr = new Uint8Array(length);\n      for (let i = 0; i < length; i++) {\n        arr[i] = (value as Record<string, number>)[String(i)] ?? 0;\n      }\n      result[key] = arr;\n    } else {\n      result[key] = value;\n    }\n  }\n  return result;\n}\n\n/**\n * Setup Web Crypto API in an isolated-vm context\n *\n * Provides crypto.getRandomValues and crypto.randomUUID\n *\n * @example\n * const handle = await setupCrypto(context);\n * await context.eval(`\n *   const uuid = crypto.randomUUID();\n *   const array = new Uint8Array(16);\n *   crypto.getRandomValues(array);\n * `);\n */\nexport async function setupCrypto(\n  context: ivm.Context\n): Promise<CryptoHandle> {\n  const global = context.global;\n\n  // Register host callbacks\n  global.setSync(\n    \"__crypto_randomUUID\",\n    new ivm.Callback(() => {\n      return crypto.randomUUID();\n    })\n  );\n\n  global.setSync(\n    \"__crypto_getRandomValues\",\n    new ivm.Callback((byteLength: number) => {\n      const buffer = Buffer.alloc(byteLength);\n      crypto.randomFillSync(buffer);\n      return Array.from(buffer);\n    })\n  );\n\n  // Get key map for this context\n  const keyMap = getKeyMapForContext(context);\n\n  // crypto.subtle.importKey - async reference\n  const importKeyRef = new ivm.Reference(\n    async (\n      format: string,\n      keyDataJson: string,\n      algorithmJson: string,\n      extractable: boolean,\n      keyUsagesJson: string\n    ) => {\n      const keyData = JSON.parse(keyDataJson) as number[];\n      const algorithm = JSON.parse(algorithmJson);\n      const keyUsages = JSON.parse(keyUsagesJson) as crypto.webcrypto.KeyUsage[];\n\n      try {\n        let cryptoKey: crypto.webcrypto.CryptoKey;\n        if (format === \"raw\") {\n          const importData = new Uint8Array(keyData);\n          cryptoKey = await crypto.webcrypto.subtle.importKey(\n            \"raw\",\n            importData,\n            algorithm,\n            extractable,\n            keyUsages\n          );\n        } else if (format === \"jwk\") {\n          const importData = keyData as unknown as crypto.webcrypto.JsonWebKey;\n          cryptoKey = await crypto.webcrypto.subtle.importKey(\n            \"jwk\",\n            importData,\n            algorithm,\n            extractable,\n            keyUsages\n          );\n        } else {\n          throw new Error(`[NotSupportedError]Unsupported key format: ${format}`);\n        }\n\n        // Store key on host and return ID\n        const keyId = nextKeyId++;\n        keyMap.set(keyId, cryptoKey);\n        return keyId;\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_importKey_ref\", importKeyRef);\n\n  // crypto.subtle.sign - async reference\n  const signRef = new ivm.Reference(\n    async (algorithmJson: string, keyId: number, dataJson: string) => {\n      const algorithm = JSON.parse(algorithmJson);\n      const data = new Uint8Array(JSON.parse(dataJson) as number[]);\n\n      const cryptoKey = keyMap.get(keyId);\n      if (!cryptoKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        const signature = await crypto.webcrypto.subtle.sign(\n          algorithm,\n          cryptoKey,\n          data\n        );\n        return JSON.stringify(Array.from(new Uint8Array(signature)));\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_sign_ref\", signRef);\n\n  // crypto.subtle.verify - async reference\n  const verifyRef = new ivm.Reference(\n    async (\n      algorithmJson: string,\n      keyId: number,\n      signatureJson: string,\n      dataJson: string\n    ) => {\n      const algorithm = JSON.parse(algorithmJson);\n      const signature = new Uint8Array(JSON.parse(signatureJson) as number[]);\n      const data = new Uint8Array(JSON.parse(dataJson) as number[]);\n\n      const cryptoKey = keyMap.get(keyId);\n      if (!cryptoKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        return await crypto.webcrypto.subtle.verify(\n          algorithm,\n          cryptoKey,\n          signature,\n          data\n        );\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_verify_ref\", verifyRef);\n\n  // crypto.subtle.digest - async reference\n  const digestRef = new ivm.Reference(\n    async (algorithmJson: string, dataJson: string) => {\n      const algorithm = JSON.parse(algorithmJson);\n      const data = new Uint8Array(JSON.parse(dataJson) as number[]);\n\n      try {\n        const hash = await crypto.webcrypto.subtle.digest(algorithm, data);\n        return JSON.stringify(Array.from(new Uint8Array(hash)));\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_digest_ref\", digestRef);\n\n  // crypto.subtle.deriveBits - async reference\n  const deriveBitsRef = new ivm.Reference(\n    async (algorithmJson: string, keyId: number, length: number) => {\n      const algorithm = deserializeAlgorithm(JSON.parse(algorithmJson));\n\n      const cryptoKey = keyMap.get(keyId);\n      if (!cryptoKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        const bits = await crypto.webcrypto.subtle.deriveBits(\n          algorithm as unknown as crypto.webcrypto.EcdhKeyDeriveParams | crypto.webcrypto.HkdfParams | crypto.webcrypto.Pbkdf2Params,\n          cryptoKey,\n          length\n        );\n        return JSON.stringify(Array.from(new Uint8Array(bits)));\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_deriveBits_ref\", deriveBitsRef);\n\n  // crypto.subtle.deriveKey - async reference\n  const deriveKeyRef = new ivm.Reference(\n    async (\n      algorithmJson: string,\n      baseKeyId: number,\n      derivedKeyAlgorithmJson: string,\n      extractable: boolean,\n      keyUsagesJson: string\n    ) => {\n      const algorithm = deserializeAlgorithm(JSON.parse(algorithmJson));\n      const derivedKeyAlgorithm = JSON.parse(derivedKeyAlgorithmJson);\n      const keyUsages = JSON.parse(keyUsagesJson) as crypto.webcrypto.KeyUsage[];\n\n      const baseKey = keyMap.get(baseKeyId);\n      if (!baseKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        const derivedKey = await crypto.webcrypto.subtle.deriveKey(\n          algorithm as unknown as crypto.webcrypto.EcdhKeyDeriveParams | crypto.webcrypto.HkdfParams | crypto.webcrypto.Pbkdf2Params,\n          baseKey,\n          derivedKeyAlgorithm,\n          extractable,\n          keyUsages\n        );\n\n        // Store derived key on host and return ID\n        const keyId = nextKeyId++;\n        keyMap.set(keyId, derivedKey);\n        return keyId;\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_deriveKey_ref\", deriveKeyRef);\n\n  // Inject the crypto object into the isolate\n  const cryptoCode = `\n(function() {\n  // DOMException polyfill (Pattern #12)\n  if (typeof DOMException === 'undefined') {\n    globalThis.DOMException = class DOMException extends Error {\n      constructor(message, name) {\n        super(message);\n        this.name = name || 'DOMException';\n      }\n    };\n  }\n\n  // Helper to decode error from host\n  function __decodeError(err) {\n    if (!(err instanceof Error)) return err;\n    const match = err.message.match(/^\\\\[(TypeError|RangeError|NotSupportedError|InvalidAccessError|OperationError|DataError|Error)\\\\](.*)$/);\n    if (match) {\n      if (['NotSupportedError', 'InvalidAccessError', 'OperationError', 'DataError'].includes(match[1])) {\n        return new DOMException(match[2], match[1]);\n      }\n      const ErrorType = globalThis[match[1]] || Error;\n      return new ErrorType(match[2]);\n    }\n    return err;\n  }\n\n  // CryptoKey class to wrap key IDs\n  const _cryptoKeyIds = new WeakMap();\n\n  class CryptoKey {\n    constructor(keyId, algorithm, extractable, usages, type) {\n      _cryptoKeyIds.set(this, keyId);\n      this._algorithm = algorithm;\n      this._extractable = extractable;\n      this._usages = usages;\n      this._type = type || 'secret';\n    }\n\n    _getKeyId() {\n      return _cryptoKeyIds.get(this);\n    }\n\n    get algorithm() {\n      return this._algorithm;\n    }\n\n    get extractable() {\n      return this._extractable;\n    }\n\n    get usages() {\n      return [...this._usages];\n    }\n\n    get type() {\n      return this._type;\n    }\n  }\n\n  globalThis.CryptoKey = CryptoKey;\n\n  // Helper to convert data to byte array\n  function toByteArray(data) {\n    if (typeof data === 'string') {\n      return Array.from(new TextEncoder().encode(data));\n    }\n    if (data instanceof ArrayBuffer) {\n      return Array.from(new Uint8Array(data));\n    }\n    if (ArrayBuffer.isView(data)) {\n      return Array.from(new Uint8Array(data.buffer, data.byteOffset, data.byteLength));\n    }\n    throw new TypeError('Data must be a BufferSource');\n  }\n\n  // Normalize algorithm to object form\n  function normalizeAlgorithm(algorithm) {\n    if (typeof algorithm === 'string') {\n      return { name: algorithm };\n    }\n    return algorithm;\n  }\n\n  globalThis.crypto = {\n    randomUUID() {\n      return __crypto_randomUUID();\n    },\n\n    getRandomValues(typedArray) {\n      // Validate input is an integer TypedArray\n      if (!(typedArray instanceof Int8Array ||\n            typedArray instanceof Uint8Array ||\n            typedArray instanceof Uint8ClampedArray ||\n            typedArray instanceof Int16Array ||\n            typedArray instanceof Uint16Array ||\n            typedArray instanceof Int32Array ||\n            typedArray instanceof Uint32Array ||\n            typedArray instanceof BigInt64Array ||\n            typedArray instanceof BigUint64Array)) {\n        throw new TypeError(\"Argument 1 must be an integer typed array\");\n      }\n\n      const byteLength = typedArray.byteLength;\n      if (byteLength > 65536) {\n        throw new DOMException(\n          \"The ArrayBufferView's byte length exceeds the number of bytes of entropy available via this API (65536)\",\n          \"QuotaExceededError\"\n        );\n      }\n\n      // Get random bytes from host\n      const bytes = __crypto_getRandomValues(byteLength);\n\n      // Copy bytes into the TypedArray\n      const view = new Uint8Array(typedArray.buffer, typedArray.byteOffset, typedArray.byteLength);\n      for (let i = 0; i < bytes.length; i++) {\n        view[i] = bytes[i];\n      }\n\n      return typedArray;\n    },\n\n    subtle: {\n      async importKey(format, keyData, algorithm, extractable, keyUsages) {\n        try {\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          let keyDataJson;\n\n          if (format === 'raw') {\n            keyDataJson = JSON.stringify(toByteArray(keyData));\n          } else if (format === 'jwk') {\n            keyDataJson = JSON.stringify(keyData);\n          } else {\n            throw new DOMException('Unsupported key format: ' + format, 'NotSupportedError');\n          }\n\n          const keyId = await __crypto_subtle_importKey_ref.apply(undefined, [\n            format,\n            keyDataJson,\n            JSON.stringify(normalizedAlgo),\n            extractable,\n            JSON.stringify(keyUsages)\n          ], { result: { promise: true, copy: true } });\n\n          return new CryptoKey(keyId, normalizedAlgo, extractable, keyUsages);\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async sign(algorithm, key, data) {\n        try {\n          if (!(key instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const signatureBytesJson = await __crypto_subtle_sign_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            key._getKeyId(),\n            JSON.stringify(toByteArray(data))\n          ], { result: { promise: true, copy: true } });\n          const signatureBytes = JSON.parse(signatureBytesJson);\n          return new Uint8Array(signatureBytes).buffer;\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async verify(algorithm, key, signature, data) {\n        try {\n          if (!(key instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          return await __crypto_subtle_verify_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            key._getKeyId(),\n            JSON.stringify(toByteArray(signature)),\n            JSON.stringify(toByteArray(data))\n          ], { result: { promise: true, copy: true } });\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async digest(algorithm, data) {\n        try {\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const hashBytesJson = await __crypto_subtle_digest_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            JSON.stringify(toByteArray(data))\n          ], { result: { promise: true, copy: true } });\n          const hashBytes = JSON.parse(hashBytesJson);\n          return new Uint8Array(hashBytes).buffer;\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async deriveBits(algorithm, baseKey, length) {\n        try {\n          if (!(baseKey instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const bitsBytesJson = await __crypto_subtle_deriveBits_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            baseKey._getKeyId(),\n            length\n          ], { result: { promise: true, copy: true } });\n          const bitsBytes = JSON.parse(bitsBytesJson);\n          return new Uint8Array(bitsBytes).buffer;\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async deriveKey(algorithm, baseKey, derivedKeyAlgorithm, extractable, keyUsages) {\n        try {\n          if (!(baseKey instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const normalizedDerivedAlgo = normalizeAlgorithm(derivedKeyAlgorithm);\n          const keyId = await __crypto_subtle_deriveKey_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            baseKey._getKeyId(),\n            JSON.stringify(normalizedDerivedAlgo),\n            extractable,\n            JSON.stringify(keyUsages)\n          ], { result: { promise: true, copy: true } });\n          return new CryptoKey(keyId, normalizedDerivedAlgo, extractable, keyUsages);\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      }\n    }\n  };\n})();\n`;\n\n  context.evalSync(cryptoCode);\n\n  return {\n    dispose() {\n      // Clean up key storage for this context\n      keyMap.clear();\n    },\n  };\n}\n"
+    "import ivm from \"@ricsam/isolated-vm\";\nimport crypto from \"node:crypto\";\n\nexport interface CryptoHandle {\n  dispose(): void;\n}\n\n// Host-side key storage for crypto.subtle\nconst cryptoKeysByContext = new WeakMap<ivm.Context, Map<number, crypto.webcrypto.CryptoKey>>();\nlet nextKeyId = 1;\n\nfunction getKeyMapForContext(context: ivm.Context): Map<number, crypto.webcrypto.CryptoKey> {\n  let map = cryptoKeysByContext.get(context);\n  if (!map) {\n    map = new Map();\n    cryptoKeysByContext.set(context, map);\n  }\n  return map;\n}\n\nfunction deserializeAlgorithm(algorithm: Record<string, unknown>): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(algorithm)) {\n    if (value && typeof value === 'object' && !Array.isArray(value) &&\n        Object.keys(value).every(k => /^\\d+$/.test(k))) {\n      // Convert {\"0\": n, \"1\": m, ...} back to Uint8Array\n      const length = Object.keys(value).length;\n      const arr = new Uint8Array(length);\n      for (let i = 0; i < length; i++) {\n        arr[i] = (value as Record<string, number>)[String(i)] ?? 0;\n      }\n      result[key] = arr;\n    } else {\n      result[key] = value;\n    }\n  }\n  return result;\n}\n\n/**\n * Setup Web Crypto API in an isolated-vm context\n *\n * Provides crypto.getRandomValues and crypto.randomUUID\n *\n * @example\n * const handle = await setupCrypto(context);\n * await context.eval(`\n *   const uuid = crypto.randomUUID();\n *   const array = new Uint8Array(16);\n *   crypto.getRandomValues(array);\n * `);\n */\nexport async function setupCrypto(\n  context: ivm.Context\n): Promise<CryptoHandle> {\n  const global = context.global;\n\n  // Register host callbacks\n  global.setSync(\n    \"__crypto_randomUUID\",\n    new ivm.Callback(() => {\n      return crypto.randomUUID();\n    })\n  );\n\n  global.setSync(\n    \"__crypto_getRandomValues\",\n    new ivm.Callback((byteLength: number) => {\n      const buffer = Buffer.alloc(byteLength);\n      crypto.randomFillSync(buffer);\n      return Array.from(buffer);\n    })\n  );\n\n  // Get key map for this context\n  const keyMap = getKeyMapForContext(context);\n\n  // crypto.subtle.importKey - async reference\n  const importKeyRef = new ivm.Reference(\n    async (\n      format: string,\n      keyDataJson: string,\n      algorithmJson: string,\n      extractable: boolean,\n      keyUsagesJson: string\n    ) => {\n      const keyData = JSON.parse(keyDataJson) as number[];\n      const algorithm = JSON.parse(algorithmJson);\n      const keyUsages = JSON.parse(keyUsagesJson) as crypto.webcrypto.KeyUsage[];\n\n      try {\n        let cryptoKey: crypto.webcrypto.CryptoKey;\n        if (format === \"raw\") {\n          const importData = new Uint8Array(keyData);\n          cryptoKey = await crypto.webcrypto.subtle.importKey(\n            \"raw\",\n            importData,\n            algorithm,\n            extractable,\n            keyUsages\n          );\n        } else if (format === \"jwk\") {\n          const importData = keyData as unknown as crypto.webcrypto.JsonWebKey;\n          cryptoKey = await crypto.webcrypto.subtle.importKey(\n            \"jwk\",\n            importData,\n            algorithm,\n            extractable,\n            keyUsages\n          );\n        } else {\n          throw new Error(`[NotSupportedError]Unsupported key format: ${format}`);\n        }\n\n        // Store key on host and return ID\n        const keyId = nextKeyId++;\n        keyMap.set(keyId, cryptoKey);\n        return keyId;\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_importKey_ref\", importKeyRef);\n\n  // crypto.subtle.sign - async reference\n  const signRef = new ivm.Reference(\n    async (algorithmJson: string, keyId: number, dataJson: string) => {\n      const algorithm = JSON.parse(algorithmJson);\n      const data = new Uint8Array(JSON.parse(dataJson) as number[]);\n\n      const cryptoKey = keyMap.get(keyId);\n      if (!cryptoKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        const signature = await crypto.webcrypto.subtle.sign(\n          algorithm,\n          cryptoKey,\n          data\n        );\n        return JSON.stringify(Array.from(new Uint8Array(signature)));\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_sign_ref\", signRef);\n\n  // crypto.subtle.verify - async reference\n  const verifyRef = new ivm.Reference(\n    async (\n      algorithmJson: string,\n      keyId: number,\n      signatureJson: string,\n      dataJson: string\n    ) => {\n      const algorithm = JSON.parse(algorithmJson);\n      const signature = new Uint8Array(JSON.parse(signatureJson) as number[]);\n      const data = new Uint8Array(JSON.parse(dataJson) as number[]);\n\n      const cryptoKey = keyMap.get(keyId);\n      if (!cryptoKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        return await crypto.webcrypto.subtle.verify(\n          algorithm,\n          cryptoKey,\n          signature,\n          data\n        );\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_verify_ref\", verifyRef);\n\n  // crypto.subtle.digest - async reference\n  const digestRef = new ivm.Reference(\n    async (algorithmJson: string, dataJson: string) => {\n      const algorithm = JSON.parse(algorithmJson);\n      const data = new Uint8Array(JSON.parse(dataJson) as number[]);\n\n      try {\n        const hash = await crypto.webcrypto.subtle.digest(algorithm, data);\n        return JSON.stringify(Array.from(new Uint8Array(hash)));\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_digest_ref\", digestRef);\n\n  // crypto.subtle.deriveBits - async reference\n  const deriveBitsRef = new ivm.Reference(\n    async (algorithmJson: string, keyId: number, length: number) => {\n      const algorithm = deserializeAlgorithm(JSON.parse(algorithmJson));\n\n      const cryptoKey = keyMap.get(keyId);\n      if (!cryptoKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        const bits = await crypto.webcrypto.subtle.deriveBits(\n          algorithm as unknown as crypto.webcrypto.EcdhKeyDeriveParams | crypto.webcrypto.HkdfParams | crypto.webcrypto.Pbkdf2Params,\n          cryptoKey,\n          length\n        );\n        return JSON.stringify(Array.from(new Uint8Array(bits)));\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_deriveBits_ref\", deriveBitsRef);\n\n  // crypto.subtle.deriveKey - async reference\n  const deriveKeyRef = new ivm.Reference(\n    async (\n      algorithmJson: string,\n      baseKeyId: number,\n      derivedKeyAlgorithmJson: string,\n      extractable: boolean,\n      keyUsagesJson: string\n    ) => {\n      const algorithm = deserializeAlgorithm(JSON.parse(algorithmJson));\n      const derivedKeyAlgorithm = JSON.parse(derivedKeyAlgorithmJson);\n      const keyUsages = JSON.parse(keyUsagesJson) as crypto.webcrypto.KeyUsage[];\n\n      const baseKey = keyMap.get(baseKeyId);\n      if (!baseKey) {\n        throw new Error(\"[InvalidAccessError]Key not found\");\n      }\n\n      try {\n        const derivedKey = await crypto.webcrypto.subtle.deriveKey(\n          algorithm as unknown as crypto.webcrypto.EcdhKeyDeriveParams | crypto.webcrypto.HkdfParams | crypto.webcrypto.Pbkdf2Params,\n          baseKey,\n          derivedKeyAlgorithm,\n          extractable,\n          keyUsages\n        );\n\n        // Store derived key on host and return ID\n        const keyId = nextKeyId++;\n        keyMap.set(keyId, derivedKey);\n        return keyId;\n      } catch (err) {\n        if (err instanceof Error) {\n          throw new Error(`[${err.name}]${err.message}`);\n        }\n        throw err;\n      }\n    }\n  );\n  global.setSync(\"__crypto_subtle_deriveKey_ref\", deriveKeyRef);\n\n  // Inject the crypto object into the isolate\n  const cryptoCode = `\n(function() {\n  // DOMException polyfill (Pattern #12)\n  if (typeof DOMException === 'undefined') {\n    globalThis.DOMException = class DOMException extends Error {\n      constructor(message, name) {\n        super(message);\n        this.name = name || 'DOMException';\n      }\n    };\n  }\n\n  // Helper to decode error from host\n  function __decodeError(err) {\n    if (!(err instanceof Error)) return err;\n    const match = err.message.match(/^\\\\[(TypeError|RangeError|NotSupportedError|InvalidAccessError|OperationError|DataError|Error)\\\\](.*)$/);\n    if (match) {\n      if (['NotSupportedError', 'InvalidAccessError', 'OperationError', 'DataError'].includes(match[1])) {\n        return new DOMException(match[2], match[1]);\n      }\n      const ErrorType = globalThis[match[1]] || Error;\n      return new ErrorType(match[2]);\n    }\n    return err;\n  }\n\n  // CryptoKey class to wrap key IDs\n  const _cryptoKeyIds = new WeakMap();\n\n  class CryptoKey {\n    constructor(keyId, algorithm, extractable, usages, type) {\n      _cryptoKeyIds.set(this, keyId);\n      this._algorithm = algorithm;\n      this._extractable = extractable;\n      this._usages = usages;\n      this._type = type || 'secret';\n    }\n\n    _getKeyId() {\n      return _cryptoKeyIds.get(this);\n    }\n\n    get algorithm() {\n      return this._algorithm;\n    }\n\n    get extractable() {\n      return this._extractable;\n    }\n\n    get usages() {\n      return [...this._usages];\n    }\n\n    get type() {\n      return this._type;\n    }\n  }\n\n  globalThis.CryptoKey = CryptoKey;\n\n  // Helper to convert data to byte array\n  function toByteArray(data) {\n    if (typeof data === 'string') {\n      return Array.from(new TextEncoder().encode(data));\n    }\n    if (data instanceof ArrayBuffer) {\n      return Array.from(new Uint8Array(data));\n    }\n    if (ArrayBuffer.isView(data)) {\n      return Array.from(new Uint8Array(data.buffer, data.byteOffset, data.byteLength));\n    }\n    throw new TypeError('Data must be a BufferSource');\n  }\n\n  // Normalize algorithm to object form\n  function normalizeAlgorithm(algorithm) {\n    if (typeof algorithm === 'string') {\n      return { name: algorithm };\n    }\n    return algorithm;\n  }\n\n  globalThis.crypto = {\n    randomUUID() {\n      return __crypto_randomUUID();\n    },\n\n    getRandomValues(typedArray) {\n      // Validate input is an integer TypedArray\n      if (!(typedArray instanceof Int8Array ||\n            typedArray instanceof Uint8Array ||\n            typedArray instanceof Uint8ClampedArray ||\n            typedArray instanceof Int16Array ||\n            typedArray instanceof Uint16Array ||\n            typedArray instanceof Int32Array ||\n            typedArray instanceof Uint32Array ||\n            typedArray instanceof BigInt64Array ||\n            typedArray instanceof BigUint64Array)) {\n        throw new TypeError(\"Argument 1 must be an integer typed array\");\n      }\n\n      const byteLength = typedArray.byteLength;\n      if (byteLength > 65536) {\n        throw new DOMException(\n          \"The ArrayBufferView's byte length exceeds the number of bytes of entropy available via this API (65536)\",\n          \"QuotaExceededError\"\n        );\n      }\n\n      // Get random bytes from host\n      const bytes = __crypto_getRandomValues(byteLength);\n\n      // Copy bytes into the TypedArray\n      const view = new Uint8Array(typedArray.buffer, typedArray.byteOffset, typedArray.byteLength);\n      for (let i = 0; i < bytes.length; i++) {\n        view[i] = bytes[i];\n      }\n\n      return typedArray;\n    },\n\n    subtle: {\n      async importKey(format, keyData, algorithm, extractable, keyUsages) {\n        try {\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          let keyDataJson;\n\n          if (format === 'raw') {\n            keyDataJson = JSON.stringify(toByteArray(keyData));\n          } else if (format === 'jwk') {\n            keyDataJson = JSON.stringify(keyData);\n          } else {\n            throw new DOMException('Unsupported key format: ' + format, 'NotSupportedError');\n          }\n\n          const keyId = await __crypto_subtle_importKey_ref.apply(undefined, [\n            format,\n            keyDataJson,\n            JSON.stringify(normalizedAlgo),\n            extractable,\n            JSON.stringify(keyUsages)\n          ], { result: { promise: true, copy: true } });\n\n          return new CryptoKey(keyId, normalizedAlgo, extractable, keyUsages);\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async sign(algorithm, key, data) {\n        try {\n          if (!(key instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const signatureBytesJson = await __crypto_subtle_sign_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            key._getKeyId(),\n            JSON.stringify(toByteArray(data))\n          ], { result: { promise: true, copy: true } });\n          const signatureBytes = JSON.parse(signatureBytesJson);\n          return new Uint8Array(signatureBytes).buffer;\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async verify(algorithm, key, signature, data) {\n        try {\n          if (!(key instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          return await __crypto_subtle_verify_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            key._getKeyId(),\n            JSON.stringify(toByteArray(signature)),\n            JSON.stringify(toByteArray(data))\n          ], { result: { promise: true, copy: true } });\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async digest(algorithm, data) {\n        try {\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const hashBytesJson = await __crypto_subtle_digest_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            JSON.stringify(toByteArray(data))\n          ], { result: { promise: true, copy: true } });\n          const hashBytes = JSON.parse(hashBytesJson);\n          return new Uint8Array(hashBytes).buffer;\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async deriveBits(algorithm, baseKey, length) {\n        try {\n          if (!(baseKey instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const bitsBytesJson = await __crypto_subtle_deriveBits_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            baseKey._getKeyId(),\n            length\n          ], { result: { promise: true, copy: true } });\n          const bitsBytes = JSON.parse(bitsBytesJson);\n          return new Uint8Array(bitsBytes).buffer;\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      },\n\n      async deriveKey(algorithm, baseKey, derivedKeyAlgorithm, extractable, keyUsages) {\n        try {\n          if (!(baseKey instanceof CryptoKey)) {\n            throw new TypeError('Key must be a CryptoKey');\n          }\n          const normalizedAlgo = normalizeAlgorithm(algorithm);\n          const normalizedDerivedAlgo = normalizeAlgorithm(derivedKeyAlgorithm);\n          const keyId = await __crypto_subtle_deriveKey_ref.apply(undefined, [\n            JSON.stringify(normalizedAlgo),\n            baseKey._getKeyId(),\n            JSON.stringify(normalizedDerivedAlgo),\n            extractable,\n            JSON.stringify(keyUsages)\n          ], { result: { promise: true, copy: true } });\n          return new CryptoKey(keyId, normalizedDerivedAlgo, extractable, keyUsages);\n        } catch (err) {\n          throw __decodeError(err);\n        }\n      }\n    }\n  };\n})();\n`;\n\n  context.evalSync(cryptoCode);\n\n  return {\n    dispose() {\n      // Clean up key storage for this context\n      keyMap.clear();\n    },\n  };\n}\n"
   ],
   "mappings": ";AAAA;AACA;AAOA,IAAM,sBAAsB,IAAI;AAChC,IAAI,YAAY;AAEhB,SAAS,mBAAmB,CAAC,SAA+D;AAAA,EAC1F,IAAI,MAAM,oBAAoB,IAAI,OAAO;AAAA,EACzC,IAAI,CAAC,KAAK;AAAA,IACR,MAAM,IAAI;AAAA,IACV,oBAAoB,IAAI,SAAS,GAAG;AAAA,EACtC;AAAA,EACA,OAAO;AAAA;AAGT,SAAS,oBAAoB,CAAC,WAA6D;AAAA,EACzF,MAAM,SAAkC,CAAC;AAAA,EACzC,YAAY,KAAK,UAAU,OAAO,QAAQ,SAAS,GAAG;AAAA,IACpD,IAAI,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,KAC1D,OAAO,KAAK,KAAK,EAAE,MAAM,OAAK,QAAQ,KAAK,CAAC,CAAC,GAAG;AAAA,MAElD,MAAM,SAAS,OAAO,KAAK,KAAK,EAAE;AAAA,MAClC,MAAM,MAAM,IAAI,WAAW,MAAM;AAAA,MACjC,SAAS,IAAI,EAAG,IAAI,QAAQ,KAAK;AAAA,QAC/B,IAAI,KAAM,MAAiC,OAAO,CAAC,MAAM;AAAA,MAC3D;AAAA,MACA,OAAO,OAAO;AAAA,IAChB,EAAO;AAAA,MACL,OAAO,OAAO;AAAA;AAAA,EAElB;AAAA,EACA,OAAO;AAAA;AAgBT,eAAsB,WAAW,CAC/B,SACuB;AAAA,EACvB,MAAM,SAAS,QAAQ;AAAA,EAGvB,OAAO,QACL,uBACA,IAAI,IAAI,SAAS,MAAM;AAAA,IACrB,OAAO,OAAO,WAAW;AAAA,GAC1B,CACH;AAAA,EAEA,OAAO,QACL,4BACA,IAAI,IAAI,SAAS,CAAC,eAAuB;AAAA,IACvC,MAAM,SAAS,OAAO,MAAM,UAAU;AAAA,IACtC,OAAO,eAAe,MAAM;AAAA,IAC5B,OAAO,MAAM,KAAK,MAAM;AAAA,GACzB,CACH;AAAA,EAGA,MAAM,SAAS,oBAAoB,OAAO;AAAA,EAG1C,MAAM,eAAe,IAAI,IAAI,UAC3B,OACE,QACA,aACA,eACA,aACA,kBACG;AAAA,IACH,MAAM,UAAU,KAAK,MAAM,WAAW;AAAA,IACtC,MAAM,YAAY,KAAK,MAAM,aAAa;AAAA,IAC1C,MAAM,YAAY,KAAK,MAAM,aAAa;AAAA,IAE1C,IAAI;AAAA,MACF,IAAI;AAAA,MACJ,IAAI,WAAW,OAAO;AAAA,QACpB,MAAM,aAAa,IAAI,WAAW,OAAO;AAAA,QACzC,YAAY,MAAM,OAAO,UAAU,OAAO,UACxC,OACA,YACA,WACA,aACA,SACF;AAAA,MACF,EAAO,SAAI,WAAW,OAAO;AAAA,QAC3B,MAAM,aAAa;AAAA,QACnB,YAAY,MAAM,OAAO,UAAU,OAAO,UACxC,OACA,YACA,WACA,aACA,SACF;AAAA,MACF,EAAO;AAAA,QACL,MAAM,IAAI,MAAM,8CAA8C,QAAQ;AAAA;AAAA,MAIxE,MAAM,QAAQ;AAAA,MACd,OAAO,IAAI,OAAO,SAAS;AAAA,MAC3B,OAAO;AAAA,MACP,OAAO,KAAK;AAAA,MACZ,IAAI,eAAe,OAAO;AAAA,QACxB,MAAM,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,SAAS;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,GAGZ;AAAA,EACA,OAAO,QAAQ,iCAAiC,YAAY;AAAA,EAG5D,MAAM,UAAU,IAAI,IAAI,UACtB,OAAO,eAAuB,OAAe,aAAqB;AAAA,IAChE,MAAM,YAAY,KAAK,MAAM,aAAa;AAAA,IAC1C,MAAM,OAAO,IAAI,WAAW,KAAK,MAAM,QAAQ,CAAa;AAAA,IAE5D,MAAM,YAAY,OAAO,IAAI,KAAK;AAAA,IAClC,IAAI,CAAC,WAAW;AAAA,MACd,MAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,YAAY,MAAM,OAAO,UAAU,OAAO,KAC9C,WACA,WACA,IACF;AAAA,MACA,OAAO,KAAK,UAAU,MAAM,KAAK,IAAI,WAAW,SAAS,CAAC,CAAC;AAAA,MAC3D,OAAO,KAAK;AAAA,MACZ,IAAI,eAAe,OAAO;AAAA,QACxB,MAAM,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,SAAS;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,GAGZ;AAAA,EACA,OAAO,QAAQ,4BAA4B,OAAO;AAAA,EAGlD,MAAM,YAAY,IAAI,IAAI,UACxB,OACE,eACA,OACA,eACA,aACG;AAAA,IACH,MAAM,YAAY,KAAK,MAAM,aAAa;AAAA,IAC1C,MAAM,YAAY,IAAI,WAAW,KAAK,MAAM,aAAa,CAAa;AAAA,IACtE,MAAM,OAAO,IAAI,WAAW,KAAK,MAAM,QAAQ,CAAa;AAAA,IAE5D,MAAM,YAAY,OAAO,IAAI,KAAK;AAAA,IAClC,IAAI,CAAC,WAAW;AAAA,MACd,MAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAAA,IAEA,IAAI;AAAA,MACF,OAAO,MAAM,OAAO,UAAU,OAAO,OACnC,WACA,WACA,WACA,IACF;AAAA,MACA,OAAO,KAAK;AAAA,MACZ,IAAI,eAAe,OAAO;AAAA,QACxB,MAAM,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,SAAS;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,GAGZ;AAAA,EACA,OAAO,QAAQ,8BAA8B,SAAS;AAAA,EAGtD,MAAM,YAAY,IAAI,IAAI,UACxB,OAAO,eAAuB,aAAqB;AAAA,IACjD,MAAM,YAAY,KAAK,MAAM,aAAa;AAAA,IAC1C,MAAM,OAAO,IAAI,WAAW,KAAK,MAAM,QAAQ,CAAa;AAAA,IAE5D,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,OAAO,UAAU,OAAO,OAAO,WAAW,IAAI;AAAA,MACjE,OAAO,KAAK,UAAU,MAAM,KAAK,IAAI,WAAW,IAAI,CAAC,CAAC;AAAA,MACtD,OAAO,KAAK;AAAA,MACZ,IAAI,eAAe,OAAO;AAAA,QACxB,MAAM,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,SAAS;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,GAGZ;AAAA,EACA,OAAO,QAAQ,8BAA8B,SAAS;AAAA,EAGtD,MAAM,gBAAgB,IAAI,IAAI,UAC5B,OAAO,eAAuB,OAAe,WAAmB;AAAA,IAC9D,MAAM,YAAY,qBAAqB,KAAK,MAAM,aAAa,CAAC;AAAA,IAEhE,MAAM,YAAY,OAAO,IAAI,KAAK;AAAA,IAClC,IAAI,CAAC,WAAW;AAAA,MACd,MAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,OAAO,UAAU,OAAO,WACzC,WACA,WACA,MACF;AAAA,MACA,OAAO,KAAK,UAAU,MAAM,KAAK,IAAI,WAAW,IAAI,CAAC,CAAC;AAAA,MACtD,OAAO,KAAK;AAAA,MACZ,IAAI,eAAe,OAAO;AAAA,QACxB,MAAM,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,SAAS;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,GAGZ;AAAA,EACA,OAAO,QAAQ,kCAAkC,aAAa;AAAA,EAG9D,MAAM,eAAe,IAAI,IAAI,UAC3B,OACE,eACA,WACA,yBACA,aACA,kBACG;AAAA,IACH,MAAM,YAAY,qBAAqB,KAAK,MAAM,aAAa,CAAC;AAAA,IAChE,MAAM,sBAAsB,KAAK,MAAM,uBAAuB;AAAA,IAC9D,MAAM,YAAY,KAAK,MAAM,aAAa;AAAA,IAE1C,MAAM,UAAU,OAAO,IAAI,SAAS;AAAA,IACpC,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAAA,IAEA,IAAI;AAAA,MACF,MAAM,aAAa,MAAM,OAAO,UAAU,OAAO,UAC/C,WACA,SACA,qBACA,aACA,SACF;AAAA,MAGA,MAAM,QAAQ;AAAA,MACd,OAAO,IAAI,OAAO,UAAU;AAAA,MAC5B,OAAO;AAAA,MACP,OAAO,KAAK;AAAA,MACZ,IAAI,eAAe,OAAO;AAAA,QACxB,MAAM,IAAI,MAAM,IAAI,IAAI,QAAQ,IAAI,SAAS;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,GAGZ;AAAA,EACA,OAAO,QAAQ,iCAAiC,YAAY;AAAA,EAG5D,MAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiPnB,QAAQ,SAAS,UAAU;AAAA,EAE3B,OAAO;AAAA,IACL,OAAO,GAAG;AAAA,MAER,OAAO,MAAM;AAAA;AAAA,EAEjB;AAAA;",
-  "debugId": "56846119A4CC968B64756E2164756E21",
+  "debugId": "0B21DFAE8F92325664756E2164756E21",
   "names": []
 }

package/dist/mjs/internal/daemon/connection.mjs

@@ -78,6 +78,7 @@ function handleConnection(socket, state) {
     pendingCallbacks: new Map,
     nextRequestId: 1,
     nextCallbackId: 1,
+    nextLocalCallbackId: 1e6,
     nextStreamId: 1,
     activeStreams: new Map,
     streamReceivers: new Map,
@@ -192,6 +193,9 @@ async function handleMessage(message, connection, state) {
     case MessageType.CALLBACK_RESPONSE:
       handleCallbackResponse(message, connection);
       break;
+    case MessageType.CALLBACK_INVOKE:
+      await handleCallbackInvoke(message, connection, state);
+      break;
     case MessageType.WS_OPEN:
       await handleWsOpen(message, connection, state);
       break;
@@ -605,19 +609,26 @@ async function handleCreateRuntime(message, connection, state) {
     let bridgedCustomFunctions;
     let customFnMarshalOptions;
     if (customCallbacks) {
+      const allocateLocalCallbackId = () => {
+        const currentConnection = callbackContext.connection;
+        if (!currentConnection) {
+          throw new Error("Cannot register callback without an active client connection");
+        }
+        return currentConnection.nextLocalCallbackId++;
+      };
       const createMarshalContext = () => ({
         registerCallback: (fn) => {
-          const callbackId = instance.nextLocalCallbackId++;
+          const callbackId = allocateLocalCallbackId();
           instance.returnedCallbacks.set(callbackId, fn);
           return callbackId;
         },
         registerPromise: (promise) => {
-          const promiseId = instance.nextLocalCallbackId++;
+          const promiseId = allocateLocalCallbackId();
           instance.returnedPromises.set(promiseId, promise);
           return promiseId;
         },
         registerIterator: (iterator) => {
-          const iteratorId = instance.nextLocalCallbackId++;
+          const iteratorId = allocateLocalCallbackId();
           instance.returnedIterators.set(iteratorId, iterator);
           return iteratorId;
         }
@@ -628,7 +639,7 @@ async function handleCreateRuntime(message, connection, state) {
         if (isPromiseRef(value)) {
           if ("__resolveCallbackId" in value)
             return value;
-          const resolveCallbackId = instance.nextLocalCallbackId++;
+          const resolveCallbackId = allocateLocalCallbackId();
           instance.returnedCallbacks.set(resolveCallbackId, async (promiseId) => {
             const promise = instance.returnedPromises.get(promiseId);
             if (!promise)
@@ -644,7 +655,7 @@ async function handleCreateRuntime(message, connection, state) {
         if (isAsyncIteratorRef(value)) {
           if ("__nextCallbackId" in value)
             return value;
-          const nextCallbackId = instance.nextLocalCallbackId++;
+          const nextCallbackId = allocateLocalCallbackId();
           instance.returnedCallbacks.set(nextCallbackId, async (iteratorId) => {
             const iterator = instance.returnedIterators.get(iteratorId);
             if (!iterator)
@@ -656,7 +667,7 @@ async function handleCreateRuntime(message, connection, state) {
             const marshalledValue = await marshalValue(result2.value, ctx);
             return { done: result2.done, value: addCallbackIdsToRefs(marshalledValue) };
           });
-          const returnCallbackId = instance.nextLocalCallbackId++;
+          const returnCallbackId = allocateLocalCallbackId();
           instance.returnedCallbacks.set(returnCallbackId, async (iteratorId, returnValue) => {
             const iterator = instance.returnedIterators.get(iteratorId);
             instance.returnedIterators.delete(iteratorId);
@@ -667,7 +678,7 @@ async function handleCreateRuntime(message, connection, state) {
             const marshalledValue = await marshalValue(result2.value, ctx);
             return { done: true, value: addCallbackIdsToRefs(marshalledValue) };
           });
-          const throwCallbackId = instance.nextLocalCallbackId++;
+          const throwCallbackId = allocateLocalCallbackId();
           instance.returnedCallbacks.set(throwCallbackId, async (iteratorId, errorValue) => {
             const iterator = instance.returnedIterators.get(iteratorId);
             if (!iterator) {
@@ -706,6 +717,11 @@ async function handleCreateRuntime(message, connection, state) {
         return result;
       };
       const LOCAL_CALLBACK_THRESHOLD = 1e6;
+      const marshalArgsForClient = async (args) => {
+        const ctx = createMarshalContext();
+        const marshalledArgs = await marshalValue(args, ctx);
+        return addCallbackIdsToRefs(marshalledArgs);
+      };
       const invokeCallback = async (callbackId, args) => {
         if (callbackId >= LOCAL_CALLBACK_THRESHOLD) {
           const callback = instance.returnedCallbacks.get(callbackId);
@@ -715,14 +731,15 @@ async function handleCreateRuntime(message, connection, state) {
           return await callback(...args);
         } else {
           const conn = await waitForConnection(callbackContext);
+          const marshalledArgs = await marshalArgsForClient(args);
           try {
-            return await invokeClientCallback(conn, callbackId, args, {
+            return await invokeClientCallback(conn, callbackId, marshalledArgs, {
               signal: getCurrentHostSignal(instance)
             });
           } catch (err) {
             if (callbackContext.reconnectionPromise && !callbackContext.connection) {
               const newConn = await callbackContext.reconnectionPromise.promise;
-              return invokeClientCallback(newConn, callbackId, args, {
+              return invokeClientCallback(newConn, callbackId, marshalledArgs, {
                 signal: getCurrentHostSignal(instance)
               });
             }
@@ -744,7 +761,8 @@ async function handleCreateRuntime(message, connection, state) {
               const nextCallbackId = callbackContext_.custom.get(`${name}:next`);
               const returnCallbackId = callbackContext_.custom.get(`${name}:return`);
               async function* bridgedIterator() {
-                const startResult = await invokeCallbackWithReconnect(callbackContext_, () => callbackContext_.custom.get(`${name}:start`), args, `AsyncIterator '${name}' start`, invokeClientCallback, { signal: getCurrentHostSignal(instance) });
+                const marshalledArgs = await marshalArgsForClient(args);
+                const startResult = await invokeCallbackWithReconnect(callbackContext_, () => callbackContext_.custom.get(`${name}:start`), marshalledArgs, `AsyncIterator '${name}' start`, invokeClientCallback, { signal: getCurrentHostSignal(instance) });
                 const iteratorId = startResult.iteratorId;
                 try {
                   while (true) {
@@ -770,7 +788,8 @@ async function handleCreateRuntime(message, connection, state) {
           bridgedCustomFunctions[name] = {
             type: registration.type,
             fn: async (...args) => {
-              return invokeCallbackWithReconnect(callbackContext_, () => callbackContext_.custom.get(name), args, `Custom function '${name}'`, invokeClientCallback, { signal: getCurrentHostSignal(instance) });
+              const marshalledArgs = await marshalArgsForClient(args);
+              return invokeCallbackWithReconnect(callbackContext_, () => callbackContext_.custom.get(name), marshalledArgs, `Custom function '${name}'`, invokeClientCallback, { signal: getCurrentHostSignal(instance) });
             }
           };
         }
@@ -1430,6 +1449,52 @@ function handleCallbackResponse(message, connection) {
     pending.resolve(message.result);
   }
 }
+async function handleCallbackInvoke(message, connection, state) {
+  const response = {
+    type: MessageType.CALLBACK_RESPONSE,
+    requestId: message.requestId
+  };
+  let instance;
+  for (const isolateId of connection.isolates) {
+    const candidate = state.isolates.get(isolateId);
+    if (candidate?.returnedCallbacks?.has(message.callbackId)) {
+      instance = candidate;
+      break;
+    }
+  }
+  if (!instance) {
+    response.error = {
+      name: "Error",
+      message: `Unknown callback: ${message.callbackId}`
+    };
+    sendMessage(connection.socket, response);
+    return;
+  }
+  instance.lastActivity = Date.now();
+  const callback = instance.returnedCallbacks.get(message.callbackId);
+  if (!callback) {
+    response.error = {
+      name: "Error",
+      message: `Unknown callback: ${message.callbackId}`
+    };
+    sendMessage(connection.socket, response);
+    return;
+  }
+  try {
+    response.result = await requestContextStorage.run({
+      ...message.context ?? {},
+      signal: getCurrentHostSignal(instance)
+    }, async () => await callback(...message.args));
+  } catch (err) {
+    const error = err;
+    response.error = {
+      name: error.name,
+      message: error.message,
+      stack: error.stack
+    };
+  }
+  sendMessage(connection.socket, response);
+}
 async function invokeClientCallback(connection, callbackId, args, options) {
   const requestId = connection.nextCallbackId++;
   const timeoutMs = options?.timeoutMs ?? DEFAULT_CALLBACK_TIMEOUT_MS;
@@ -1928,4 +1993,4 @@ export {
   handleConnection
 };
 
-//# debugId=821596E06E80F8D064756E2164756E21
+//# debugId=665A564AAE317D3264756E2164756E21