@roj-ai/isolate-runtime 0.0.0-stage → 0.2.14

package/README.md

@@ -1,3 +1,64 @@
-# Temporary Holding Version
+# @roj-ai/isolate-runtime
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Runs the Roj runtime and an app's `roj build` bundle inside a Cloudflare Durable Object, without a VM.
+The host loads the code through the [Worker Loader](https://developers.cloudflare.com/workers/runtime-apis/bindings/worker-loader/)
+and runs it as a [Durable Object facet](https://developers.cloudflare.com/durable-objects/api/facets/) of its own instance object.
+
+```
+client ──► host DO (trusted)                                  facet "runtime" (loaded code, untrusted)
+           authenticates, stamps `_caller`        ──fetch──►   SDK + kompjutr + app bundle
+           alarm() ─────────────────────────── deliverWakes►   own SQLite: filesystem, events, LLM log, wakes
+           RuntimeHost entrypoint = env.HOST      ◄──────────  setAlarm / deleteAlarm / broadcast
+           egress gateway = globalOutbound        ◄──────────  every fetch: allowlist, provider key, tool credentials
+```
+
+The runtime holds no keys and no bindings. Its only capability is `env.HOST`. Every `fetch` it or the app
+makes goes to the gateway the host set as `globalOutbound`, which adds the provider key and any tool
+credentials. The runtime sends the placeholder `EGRESS_PROVIDED_KEY` as its OpenRouter key.
+
+## What the host provides
+
+| | |
+|---|---|
+| `env.HOST` | A `RuntimeHost` (`src/host-contract.ts`): the host DO's alarm slot and a sink for user-output notifications (`{ type, payload, ts }`, the shape the sandbox runtime sends over its agent WebSocket). A notification is app output: treat it as untrusted. Each is a separate call, so two may arrive out of order. |
+| `globalOutbound` | The egress gateway. It must not follow redirects: return them, so the next hop comes through the gateway again. |
+| `alarm()` | Calls `deliverWakes()` on the facet. A facet has no alarm of its own. |
+| Caller | The facet serves the sandbox runtime's HTTP surface (`/rpc`, `/status`, `/sessions/*`) with no auth of its own. The host sets `_caller` on every RPC from the principal it authenticated, and drops whatever the client sent. |
+
+`e2e/host.ts` is a complete minimal host.
+
+## Exports
+
+| | |
+|---|---|
+| `.` | The runtime: `createIsolateRuntime`, the alarm scheduler. Runs inside the facet. |
+| `./host` | For the host Worker: the `RuntimeHost` contract, `withAppBundle`, `unresolvedImports`, the runtime version. Imports nothing from the runtime. |
+| `./build` | Bun only: `buildRuntimeModules`. |
+
+## Building the modules
+
+```ts
+import { buildRuntimeModules, withAppBundle } from '@roj-ai/isolate-runtime/build'
+
+const runtime = await buildRuntimeModules()          // once per runtime version, needs Bun
+const { mainModule, modules } = withAppBundle(runtime, appBundleSource)
+env.LOADER.get(`${bundleRevision}:${runtimeVersion}`, () => ({ mainModule, modules, ... }))
+```
+
+- The SDK is built once and shared by every bundle. The app bundle must be built in `externalSdk` mode (`runtime: { external: true }`). Its `@roj-ai/sdk/*` imports resolve to shim modules that re-export the shared build. Any other `@roj-ai/*` import fails at load.
+- `unresolvedImports(modules)` lists imports that would not resolve under the loader's rules: a specifier resolves relative to the importing module's directory, even a bare one.
+- About 3 MB raw: the SDK chunks plus a `main.js` of about 1.9 MB, which bundles kompjutr.
+
+## Evictions
+
+Event sourcing restores a session, not a request in flight. When a delivery starts, the scheduler arms a
+retry (`inFlightRetryMs`, 5 minutes by default) and clears it when the delivery ends. If the isolate is
+evicted mid-turn, the retry fires the host alarm, the facet loads its sessions again, and the SDK resets
+agents left `inferring` to `pending`. The lost provider call is made again and billed twice.
+
+## Tests
+
+- `bun test packages/isolate-runtime/src`: scheduler, runtime on `bun:sqlite`, module build. Part of `bun run test`.
+- `bun run --cwd packages/isolate-runtime test:e2e`: the runtime in workerd under `wrangler dev`, with a fake provider behind the gateway. Run by hand, from the package directory: under `bun test` started at the repo root, `Bun.build` fails to resolve the `@kompjutr/do` subpath exports.
+
+Facets and the Worker Loader are in open beta. Locally they need the `experimental` compatibility flag.

package/dist/alarm-scheduler.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Scheduler over a Durable Object's single alarm slot.
+ *
+ * A DO has no process between wakes, so it implements the plain {@link Scheduler}
+ * port rather than `LiveScheduler`: the host delivers through {@link AlarmScheduler.deliverDue}
+ * from its own `alarm()` handler, in whichever isolate happens to be alive by then.
+ * The slot is reached through {@link AlarmStorageLike}, so a DO facet, which has no
+ * alarm of its own, can borrow its parent's.
+ *
+ * Two shapes of the SDK dictate the design. It arms without awaiting —
+ * `scheduleProcessing()` and `shutdown()` are synchronous, so the promises are
+ * dropped — and it cancels a key then re-arms it in the same frame. So the state
+ * that decides what is due (in-memory key→dueAt maps and their rows in the DO's
+ * synchronous KV) moves synchronously, where nothing can reorder it; the alarm
+ * slot, which is asynchronous storage I/O, is reconciled afterwards against the
+ * maps as they stand when the write runs — never against the arguments that queued it.
+ */
+import type { Scheduler, WakeHandler } from '@roj-ai/sdk/platform';
+/** Synchronous key-value surface of a SQLite-backed Durable Object (`storage.kv`). */
+export interface SyncKvLike {
+    list(options?: {
+        prefix?: string;
+    }): Iterable<[string, unknown]>;
+    put(key: string, value: unknown): void;
+    delete(key: string): boolean;
+}
+/** The parts of `DurableObjectStorage` a wake needs: one alarm, and rows to survive in. */
+export interface AlarmStorageLike {
+    kv: SyncKvLike;
+    setAlarm(scheduledTime: number): Promise<void>;
+    deleteAlarm(): Promise<void>;
+    /** Optional so a test double need not implement it; see `applyAlarm`. */
+    sync?(): Promise<void>;
+}
+export interface AlarmSchedulerHost {
+    storage: AlarmStorageLike;
+    /**
+     * Keeps a promise nobody awaits alive. `DurableObjectState.waitUntil` puts it
+     * on the actor's IoContext, so an arm issued during a request outlives the
+     * frame that issued it.
+     */
+    waitUntil?(promise: Promise<unknown>): void;
+    /** How long after a delivery starts it is delivered again unless it finished. Default 5 minutes. */
+    inFlightRetryMs?: number;
+}
+export interface AlarmSchedulerStats {
+    /** Wakes armed and not yet delivered. */
+    pending: number;
+    /** Deliveries started and not finished, each with a retry armed. */
+    inFlight: number;
+    /** What the alarm slot holds, as far as this isolate knows. */
+    armedAt: number | null;
+    /** Alarms drained since this isolate booted. */
+    drains: number;
+    /** Wakes handed to a delivery handler since this isolate booted. */
+    delivered: number;
+}
+export interface AlarmScheduler extends Scheduler {
+    /**
+     * Drain every wake now due, re-arm for the next, then hand each drained key to
+     * `deliver`. Call from the DO's `alarm()`; returns the keys delivered.
+     */
+    deliverDue(deliver: WakeHandler): Promise<string[]>;
+    /** Settle the pending alarm writes. Call before an entry point returns. Throws when the slot cannot be written. */
+    flush(): Promise<void>;
+    /**
+     * Ignore wakes and cancels while `fn` runs.
+     *
+     * `SessionManager.shutdown()` cancels every agent's wakes — right when a
+     * session is being torn down, wrong when the isolate is merely going away,
+     * which drops exactly the wake this port exists to preserve. Only the host
+     * knows which of the two it is doing.
+     */
+    suspend<T>(fn: () => Promise<T>): Promise<T>;
+    stats(): AlarmSchedulerStats;
+}
+export declare function createAlarmScheduler(host: AlarmSchedulerHost): AlarmScheduler;
+//# sourceMappingURL=alarm-scheduler.d.ts.map

package/dist/alarm-scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-scheduler.d.ts","sourceRoot":"","sources":["../src/alarm-scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAElE,sFAAsF;AACtF,MAAM,WAAW,UAAU;IAC1B,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAChE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;IACtC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAC5B;AAED,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,UAAU,CAAA;IACd,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,yEAAyE;IACzE,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,gBAAgB,CAAA;IACzB;;;;OAIG;IACH,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;IAC3C,oGAAoG;IACpG,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IACnC,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAA;IAChB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,cAAe,SAAQ,SAAS;IAChD;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACnD,mHAAmH;IACnH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB;;;;;;;OAOG;IACH,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,mBAAmB,CAAA;CAC5B;AAsCD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CAoH7E"}

package/dist/alarm-scheduler.js

@@ -0,0 +1,168 @@
+/**
+ * Scheduler over a Durable Object's single alarm slot.
+ *
+ * A DO has no process between wakes, so it implements the plain {@link Scheduler}
+ * port rather than `LiveScheduler`: the host delivers through {@link AlarmScheduler.deliverDue}
+ * from its own `alarm()` handler, in whichever isolate happens to be alive by then.
+ * The slot is reached through {@link AlarmStorageLike}, so a DO facet, which has no
+ * alarm of its own, can borrow its parent's.
+ *
+ * Two shapes of the SDK dictate the design. It arms without awaiting —
+ * `scheduleProcessing()` and `shutdown()` are synchronous, so the promises are
+ * dropped — and it cancels a key then re-arms it in the same frame. So the state
+ * that decides what is due (in-memory key→dueAt maps and their rows in the DO's
+ * synchronous KV) moves synchronously, where nothing can reorder it; the alarm
+ * slot, which is asynchronous storage I/O, is reconciled afterwards against the
+ * maps as they stand when the write runs — never against the arguments that queued it.
+ */
+/** Namespaced so wakes cannot collide with whatever else the host keeps in storage. */
+const WAKE_PREFIX = 'roj:wake:';
+const RETRY_PREFIX = 'roj:retry:';
+const DEFAULT_IN_FLIGHT_RETRY_MS = 5 * 60_000;
+/**
+ * Clock slack when draining. workerd pins `Date.now()` between I/O, so an alarm
+ * can read as fractionally early; without slack that costs an extra round trip.
+ */
+const DRAIN_SLACK_MS = 10;
+/** A key→time map mirrored into KV rows, so it outlives the isolate. */
+function persistedTimes(kv, prefix) {
+    const times = new Map();
+    for (const [key, value] of kv.list({ prefix })) {
+        if (typeof value === 'number')
+            times.set(key.slice(prefix.length), value);
+    }
+    return {
+        times,
+        set(key, at) {
+            times.set(key, at);
+            kv.put(prefix + key, at);
+        },
+        delete(key) {
+            // The map mirrors the rows, so a key it does not hold has no row either.
+            if (!times.delete(key))
+                return false;
+            kv.delete(prefix + key);
+            return true;
+        },
+        dueBy(cutoff) {
+            return [...times].filter(([, at]) => at <= cutoff).map(([key]) => key);
+        },
+    };
+}
+export function createAlarmScheduler(host) {
+    const storage = host.storage;
+    const track = host.waitUntil?.bind(host);
+    const inFlightRetryMs = host.inFlightRetryMs ?? DEFAULT_IN_FLIGHT_RETRY_MS;
+    const wakes = persistedTimes(storage.kv, WAKE_PREFIX);
+    // A delivery lost to an eviction never reaches its end, and its wake row is already gone.
+    // The retry row brings the alarm back, so the session loads and recovers its agents.
+    const retries = persistedTimes(storage.kv, RETRY_PREFIX);
+    let armedAt;
+    let tail = Promise.resolve();
+    let suspended = 0;
+    let drains = 0;
+    let delivered = 0;
+    const earliest = () => {
+        let min;
+        for (const at of [...wakes.times.values(), ...retries.times.values()]) {
+            if (min === undefined || at < min)
+                min = at;
+        }
+        return min;
+    };
+    const applyAlarm = async () => {
+        const target = earliest();
+        if (target === armedAt)
+            return;
+        if (target === undefined)
+            await storage.deleteAlarm();
+        else
+            await storage.setAlarm(target);
+        armedAt = target;
+        // Awaiting the write only queues it; sync() is what waits for it to be durable,
+        // and an isolate aborted before that point loses the arm.
+        await storage.sync?.();
+    };
+    /** Queue one alarm write. Serialized, because there is only one slot to race over. */
+    const reconcile = () => {
+        const next = tail.then(applyAlarm);
+        // The tail must never reject, or every later reconcile inherits this failure.
+        const settled = next.catch(() => undefined);
+        tail = settled;
+        track?.(settled);
+        return next;
+    };
+    // A previous isolate may have died between writing rows and committing its alarm.
+    if (wakes.times.size > 0 || retries.times.size > 0)
+        void reconcile().catch(() => undefined);
+    return {
+        async wake(key, delayMs) {
+            if (suspended > 0)
+                return;
+            // Synchronous, so the cancel-then-arm pair the SDK issues in one frame
+            // cannot land out of order however long the alarm write takes.
+            wakes.set(key, Date.now() + Math.max(delayMs, 0));
+            await reconcile();
+        },
+        async cancel(key) {
+            if (suspended > 0)
+                return;
+            if (!wakes.delete(key))
+                return;
+            await reconcile();
+        },
+        async deliverDue(deliver) {
+            // workerd clears the slot before delivering, so this isolate holds nothing.
+            armedAt = undefined;
+            drains += 1;
+            const cutoff = Date.now() + DRAIN_SLACK_MS;
+            const due = [...new Set([...wakes.dueBy(cutoff), ...retries.dueBy(cutoff)])];
+            const retryAt = Date.now() + inFlightRetryMs;
+            for (const key of due) {
+                wakes.delete(key);
+                retries.set(key, retryAt);
+            }
+            // Re-arm before dispatching: a wake that runs long, or throws, must not
+            // strand the ones behind it.
+            await reconcile();
+            // Concurrently: one wake runs a whole agent turn, and the slot fires one alarm at a time.
+            await Promise.all(due.map(async (key) => {
+                delivered += 1;
+                try {
+                    await deliver(key);
+                    retries.delete(key);
+                }
+                catch {
+                    // The handler owns its error reporting. The retry row stays, so the wake is delivered again.
+                }
+            }));
+            if (due.length > 0)
+                await reconcile();
+            return due;
+        },
+        async flush() {
+            // Deliveries and agent work chain further reconciles as they run.
+            let seen;
+            while (seen !== tail) {
+                seen = tail;
+                await seen;
+            }
+            // A failed write leaves rows the slot does not cover. Try once more, and let a second failure surface.
+            if (earliest() !== armedAt)
+                await reconcile();
+        },
+        async suspend(fn) {
+            suspended += 1;
+            try {
+                return await fn();
+            }
+            finally {
+                suspended -= 1;
+            }
+        },
+        stats() {
+            return { pending: wakes.times.size, inFlight: retries.times.size, armedAt: armedAt ?? null, drains, delivered };
+        },
+    };
+}
+//# sourceMappingURL=alarm-scheduler.js.map

package/dist/alarm-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-scheduler.js","sourceRoot":"","sources":["../src/alarm-scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAiEH,uFAAuF;AACvF,MAAM,WAAW,GAAG,WAAW,CAAA;AAC/B,MAAM,YAAY,GAAG,YAAY,CAAA;AAEjC,MAAM,0BAA0B,GAAG,CAAC,GAAG,MAAM,CAAA;AAE7C;;;GAGG;AACH,MAAM,cAAc,GAAG,EAAE,CAAA;AAEzB,wEAAwE;AACxE,SAAS,cAAc,CAAC,EAAc,EAAE,MAAc;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO;QACN,KAAK;QACL,GAAG,CAAC,GAAW,EAAE,EAAU;YAC1B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAClB,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,CAAA;QACzB,CAAC;QACD,MAAM,CAAC,GAAW;YACjB,yEAAyE;YACzE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YACpC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;YACvB,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,MAAc;YACnB,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;QACvE,CAAC;KACD,CAAA;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,0BAA0B,CAAA;IAC1E,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;IACrD,0FAA0F;IAC1F,qFAAqF;IACrF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;IACxD,IAAI,OAA2B,CAAA;IAC/B,IAAI,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,MAAM,QAAQ,GAAG,GAAuB,EAAE;QACzC,IAAI,GAAuB,CAAA;QAC3B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,GAAG;gBAAE,GAAG,GAAG,EAAE,CAAA;QAC5C,CAAC;QACD,OAAO,GAAG,CAAA;IACX,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,KAAK,IAAmB,EAAE;QAC5C,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAA;QACzB,IAAI,MAAM,KAAK,OAAO;YAAE,OAAM;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,WAAW,EAAE,CAAA;;YAChD,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACnC,OAAO,GAAG,MAAM,CAAA;QAChB,gFAAgF;QAChF,0DAA0D;QAC1D,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,CAAA;IACvB,CAAC,CAAA;IAED,sFAAsF;IACtF,MAAM,SAAS,GAAG,GAAkB,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAClC,8EAA8E;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC3C,IAAI,GAAG,OAAO,CAAA;QACd,KAAK,EAAE,CAAC,OAAO,CAAC,CAAA;QAChB,OAAO,IAAI,CAAA;IACZ,CAAC,CAAA;IAED,kFAAkF;IAClF,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;QAAE,KAAK,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAE3F,OAAO;QACN,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,OAAe;YACtC,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAM;YACzB,uEAAuE;YACvE,+DAA+D;YAC/D,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;YACjD,MAAM,SAAS,EAAE,CAAA;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAW;YACvB,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAM;YACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAM;YAC9B,MAAM,SAAS,EAAE,CAAA;QAClB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAoB;YACpC,4EAA4E;YAC5E,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,IAAI,CAAC,CAAA;YAEX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAA;YAC1C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAA;YAC5C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACvB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC1B,CAAC;YAED,wEAAwE;YACxE,6BAA6B;YAC7B,MAAM,SAAS,EAAE,CAAA;YAEjB,0FAA0F;YAC1F,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;gBACrC,SAAS,IAAI,CAAC,CAAA;gBACd,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;oBAClB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACpB,CAAC;gBAAC,MAAM,CAAC;oBACR,6FAA6F;gBAC9F,CAAC;YACF,CAAC,CAAC,CAAC,CAAA;YACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,SAAS,EAAE,CAAA;YACrC,OAAO,GAAG,CAAA;QACX,CAAC;QAED,KAAK,CAAC,KAAK;YACV,kEAAkE;YAClE,IAAI,IAA+B,CAAA;YACnC,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,CAAA;gBACX,MAAM,IAAI,CAAA;YACX,CAAC;YACD,uGAAuG;YACvG,IAAI,QAAQ,EAAE,KAAK,OAAO;gBAAE,MAAM,SAAS,EAAE,CAAA;QAC9C,CAAC;QAED,KAAK,CAAC,OAAO,CAAI,EAAoB;YACpC,SAAS,IAAI,CAAC,CAAA;YACd,IAAI,CAAC;gBACJ,OAAO,MAAM,EAAE,EAAE,CAAA;YAClB,CAAC;oBAAS,CAAC;gBACV,SAAS,IAAI,CAAC,CAAA;YACf,CAAC;QACF,CAAC;QAED,KAAK;YACJ,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAChH,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/build.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Builds the modules a host hands to the Worker Loader to run the runtime as a facet.
+ *
+ * The SDK is built once per runtime version and shared by every app bundle. An app
+ * bundle is `roj build` output in `externalSdk` mode: it imports `@roj-ai/sdk` and its
+ * subpaths as bare specifiers, which resolve to small shim modules re-exporting the
+ * shared build. The runtime's main module imports the same shims, so the app and the
+ * runtime share one SDK instance.
+ *
+ * The loader resolves a specifier relative to the importing module's directory, a bare
+ * one included. The shims sit at the root, so the app bundle and the main module reach
+ * them by name; the shims reach the SDK by absolute path.
+ */
+import { type RuntimeModules } from './modules.js';
+export type { LoaderModule, RuntimeModules } from './modules.js';
+export { APP_BUNDLE_MODULE, unresolvedImports, withAppBundle } from './modules.js';
+/** Builds the runtime from the installed `@roj-ai/*` packages. Needs Bun. */
+export declare function buildRuntimeModules(): Promise<RuntimeModules>;
+//# sourceMappingURL=build.d.ts.map

package/dist/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAExF,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAmClF,6EAA6E;AAC7E,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,cAAc,CAAC,CAuCnE"}

package/dist/build.js

@@ -0,0 +1,86 @@
+/**
+ * Builds the modules a host hands to the Worker Loader to run the runtime as a facet.
+ *
+ * The SDK is built once per runtime version and shared by every app bundle. An app
+ * bundle is `roj build` output in `externalSdk` mode: it imports `@roj-ai/sdk` and its
+ * subpaths as bare specifiers, which resolve to small shim modules re-exporting the
+ * shared build. The runtime's main module imports the same shims, so the app and the
+ * runtime share one SDK instance.
+ *
+ * The loader resolves a specifier relative to the importing module's directory, a bare
+ * one included. The shims sit at the root, so the app bundle and the main module reach
+ * them by name; the shims reach the SDK by absolute path.
+ */
+import { mkdir, readdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { join, posix } from 'node:path';
+import { APP_BUNDLE_MODULE } from './modules.js';
+export { APP_BUNDLE_MODULE, unresolvedImports, withAppBundle } from './modules.js';
+const MAIN_MODULE = 'main.js';
+const SDK_DIR = 'sdk';
+const PLATFORM_EXTERNALS = ['node:*', 'cloudflare:*'];
+/** SDK subpaths an isolate cannot run or an app bundle has no use for. */
+const EXCLUDED_SDK_EXPORTS = new Set(['./package.json', './bun-platform', './testing']);
+const packageRoot = join(import.meta.dir, '..');
+async function bunBuild(options) {
+    const result = await Bun.build({ target: 'node', format: 'esm', ...options });
+    if (!result.success)
+        throw new AggregateError(result.logs, 'isolate runtime build failed');
+}
+async function sdkSubpaths() {
+    const manifestPath = Bun.resolveSync('@roj-ai/sdk/package.json', packageRoot);
+    const manifest = await Bun.file(manifestPath).json();
+    const bunOnly = new Set(manifest.roj?.bunOnlyExports ?? []);
+    return Object.keys(manifest.exports).filter(subpath => !EXCLUDED_SDK_EXPORTS.has(subpath) && !bunOnly.has(subpath));
+}
+/** `.` → `@roj-ai/sdk`, `./tools/shell` → `@roj-ai/sdk/tools/shell`. */
+const specifierOf = (subpath) => (subpath === '.' ? '@roj-ai/sdk' : `@roj-ai/sdk/${subpath.slice(2)}`);
+/** `.` → `index`, `./tools/shell` → `tools__shell`: flat, so every entry lands in one directory. */
+const entryNameOf = (subpath) => (subpath === '.' ? 'index' : subpath.slice(2).replaceAll('/', '__'));
+async function readModules(dir, prefix) {
+    const modules = {};
+    for (const file of await readdir(dir)) {
+        modules[posix.join(prefix, file)] = await readFile(join(dir, file), 'utf8');
+    }
+    return modules;
+}
+/** Builds the runtime from the installed `@roj-ai/*` packages. Needs Bun. */
+export async function buildRuntimeModules() {
+    // Entries must resolve `@roj-ai/sdk` the way this package does, so they live inside it.
+    const workDir = join(packageRoot, `.isolate-build-${crypto.randomUUID()}`);
+    try {
+        const subpaths = await sdkSubpaths();
+        const entriesDir = join(workDir, 'entries');
+        await mkdir(entriesDir, { recursive: true });
+        const entries = [];
+        for (const subpath of subpaths) {
+            const entry = join(entriesDir, `${entryNameOf(subpath)}.ts`);
+            await writeFile(entry, `export * from '${specifierOf(subpath)}'\n`);
+            entries.push(entry);
+        }
+        await bunBuild({
+            entrypoints: entries,
+            outdir: join(workDir, SDK_DIR),
+            splitting: true,
+            external: PLATFORM_EXTERNALS,
+            naming: { entry: '[name].js', chunk: 'chunk-[hash].js' },
+        });
+        await bunBuild({
+            entrypoints: [join(packageRoot, 'src/worker/main.ts')],
+            outdir: join(workDir, 'main'),
+            naming: MAIN_MODULE,
+            external: [...PLATFORM_EXTERNALS, '@roj-ai/sdk', '@roj-ai/sdk/*', APP_BUNDLE_MODULE],
+        });
+        const modules = {
+            [MAIN_MODULE]: await readFile(join(workDir, 'main', MAIN_MODULE), 'utf8'),
+            ...(await readModules(join(workDir, SDK_DIR), SDK_DIR)),
+        };
+        for (const subpath of subpaths) {
+            modules[specifierOf(subpath)] = { js: `export * from '/${SDK_DIR}/${entryNameOf(subpath)}.js'\n` };
+        }
+        return { mainModule: MAIN_MODULE, modules };
+    }
+    finally {
+        await rm(workDir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=build.js.map

package/dist/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAA0C,MAAM,cAAc,CAAA;AAGxF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAElF,MAAM,WAAW,GAAG,SAAS,CAAA;AAC7B,MAAM,OAAO,GAAG,KAAK,CAAA;AACrB,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;AACrD,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAA;AAEvF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAE/C,KAAK,UAAU,QAAQ,CAAC,OAAwC;IAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IAC7E,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAA;AAC3F,CAAC;AAED,KAAK,UAAU,WAAW;IACzB,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAA;IAC7E,MAAM,QAAQ,GAA8E,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;AACpH,CAAC;AAED,wEAAwE;AACxE,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAC9G,oGAAoG;AACpG,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;AAE7G,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,MAAc;IACrD,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACxC,wFAAwF;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAA;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC3C,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5D,MAAM,SAAS,CAAC,KAAK,EAAE,kBAAkB,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACnE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QAED,MAAM,QAAQ,CAAC;YACd,WAAW,EAAE,OAAO;YACpB,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;YAC9B,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,kBAAkB;YAC5B,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE;SACxD,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC;YACd,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;YACtD,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;YAC7B,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,CAAC,GAAG,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,CAAC;SACpF,CAAC,CAAA;QAEF,MAAM,OAAO,GAAiC;YAC7C,CAAC,WAAW,CAAC,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;YACzE,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;SACvD,CAAA;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,mBAAmB,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;QACnG,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;IAC5C,CAAC;YAAS,CAAC;QACV,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,CAAC;AACF,CAAC"}

package/dist/host-contract.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The contract between the runtime and the Durable Object hosting it. Kept free of imports,
+ * so a host type-checked against Workers types can use it without the SDK.
+ */
+/** A user-output notification in the shape the sandbox runtime sends over its agent WebSocket. */
+export interface RuntimeBroadcast {
+    type: string;
+    payload: unknown;
+    ts: number;
+}
+/** What the host gives the runtime. Bound to one instance by the host; the runtime cannot name another. */
+export interface RuntimeHost {
+    /** The single alarm slot of the host's Durable Object, lent to the runtime. */
+    setAlarm(scheduledTime: number): Promise<void>;
+    deleteAlarm(): Promise<void>;
+    broadcast(message: RuntimeBroadcast): Promise<void>;
+}
+/** What the host calls on the facet's stub. */
+export interface RuntimeFacetRpc {
+    fetch(request: Request): Promise<Response>;
+    deliverWakes(): Promise<string[]>;
+}
+//# sourceMappingURL=host-contract.d.ts.map

package/dist/host-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-contract.d.ts","sourceRoot":"","sources":["../src/host-contract.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,kGAAkG;AAClG,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;CACV;AAED,2GAA2G;AAC3G,MAAM,WAAW,WAAW;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD;AAED,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC/B,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CACjC"}

package/dist/host-contract.js

@@ -0,0 +1,6 @@
+/**
+ * The contract between the runtime and the Durable Object hosting it. Kept free of imports,
+ * so a host type-checked against Workers types can use it without the SDK.
+ */
+export {};
+//# sourceMappingURL=host-contract.js.map

package/dist/host-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-contract.js","sourceRoot":"","sources":["../src/host-contract.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/host.d.ts

@@ -0,0 +1,9 @@
+/**
+ * What a host needs at run time: the contract with the facet, the module map helpers and the
+ * runtime version. Imports nothing from the runtime itself, so it adds nothing to a host's bundle.
+ */
+export type { RuntimeBroadcast, RuntimeFacetRpc, RuntimeHost } from './host-contract.js';
+export { ISOLATE_RUNTIME_NAME, ISOLATE_RUNTIME_VERSION } from './info.js';
+export type { LoaderModule, RuntimeModules } from './modules.js';
+export { APP_BUNDLE_MODULE, unresolvedImports, withAppBundle } from './modules.js';
+//# sourceMappingURL=host.d.ts.map

package/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACxF,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACzE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/host.js

@@ -0,0 +1,7 @@
+/**
+ * What a host needs at run time: the contract with the facet, the module map helpers and the
+ * runtime version. Imports nothing from the runtime itself, so it adds nothing to a host's bundle.
+ */
+export { ISOLATE_RUNTIME_NAME, ISOLATE_RUNTIME_VERSION } from './info.js';
+export { APP_BUNDLE_MODULE, unresolvedImports, withAppBundle } from './modules.js';
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AAEzE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export type { AlarmScheduler, AlarmSchedulerHost, AlarmSchedulerStats, AlarmStorageLike, SyncKvLike, } from './alarm-scheduler.js';
+export { createAlarmScheduler } from './alarm-scheduler.js';
+export { ISOLATE_RUNTIME_NAME, ISOLATE_RUNTIME_VERSION } from './info.js';
+export type { RuntimeBroadcast, RuntimeFacetRpc, RuntimeHost } from './host-contract.js';
+export type { IsolateRuntime, IsolateRuntimeOptions, IsolateRuntimeState } from './runtime.js';
+export { createIsolateRuntime, EGRESS_PROVIDED_KEY } from './runtime.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,GACV,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACzE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACxF,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAC9F,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export { createAlarmScheduler } from './alarm-scheduler.js';
+export { ISOLATE_RUNTIME_NAME, ISOLATE_RUNTIME_VERSION } from './info.js';
+export { createIsolateRuntime, EGRESS_PROVIDED_KEY } from './runtime.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAA;AAGzE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA"}

package/dist/info.d.ts

@@ -0,0 +1,4 @@
+/** Read from this package's own package.json, so the value tracks releases. */
+export declare const ISOLATE_RUNTIME_VERSION: string;
+export declare const ISOLATE_RUNTIME_NAME: string;
+//# sourceMappingURL=info.d.ts.map

package/dist/info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.d.ts","sourceRoot":"","sources":["../src/info.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAI/E,eAAO,MAAM,uBAAuB,QAAc,CAAA;AAClD,eAAO,MAAM,oBAAoB,QAAW,CAAA"}

package/dist/info.js

@@ -0,0 +1,5 @@
+/** Read from this package's own package.json, so the value tracks releases. */
+import pkg from '../package.json' with { type: 'json' };
+export const ISOLATE_RUNTIME_VERSION = pkg.version;
+export const ISOLATE_RUNTIME_NAME = pkg.name;
+//# sourceMappingURL=info.js.map

package/dist/info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.js","sourceRoot":"","sources":["../src/info.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAA;AAEvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC,OAAO,CAAA;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC,IAAI,CAAA"}

package/dist/modules.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The Worker Loader module map a host builds once per runtime version (`./build`) and completes with
+ * one app bundle per instance. Free of Bun and Node APIs, so a host can use it inside a Worker.
+ */
+/** A Worker Loader module: a `.js` name maps to ES module source, any other name needs its type. */
+export type LoaderModule = string | {
+    js: string;
+};
+export interface RuntimeModules {
+    mainModule: string;
+    modules: Record<string, LoaderModule>;
+}
+/** The module name the main module imports the app's config from. */
+export declare const APP_BUNDLE_MODULE = "roj-app-bundle";
+/** The runtime's modules plus one app bundle: what a host passes to `LOADER.get()`. */
+export declare function withAppBundle(runtime: RuntimeModules, appBundle: string): RuntimeModules;
+/**
+ * Imports that would not resolve under the loader's rules, plus any use of `import.meta.require`,
+ * reported with that as the specifier. Bun's unminified ESM output keeps every static import at the
+ * start of a line, which is what the scan relies on. Platform builtins (`node:`, `cloudflare:`) are not checked.
+ */
+export declare function unresolvedImports(modules: Record<string, LoaderModule>): {
+    module: string;
+    specifier: string;
+}[];
+//# sourceMappingURL=modules.d.ts.map

package/dist/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../src/modules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,oGAAoG;AACpG,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAElD,MAAM,WAAW,cAAc;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACrC;AAED,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,mBAAmB,CAAA;AAEjD,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc,CAExF;AAkBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,CAehH"}