@statewalker/cellb 0.0.0-stage → 0.1.0

package/dist/core/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/core/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE7D,yGAAyG;AACzG,MAAM,OAAO,eAAe;IACjB,IAAI,CAAS;IACb,IAAI,CAAU;IACvB,YAAY,GAAW,EAAE,IAAa;QACpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3C,CAAC;IACD,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,KAAsB;QAC3B,OAAO,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,SAAiB;IAChE,OAAO,YAAY,UAAU,CAAC,MAAM,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;AAC3C,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE;IAC3B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,GAAe,EAAE,IAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5F,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,KAAiB,EAAE,EAAE;IACnD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,EAAU,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,8EAA8E;IAC9E,OAAO,IAAI,eAAe,CACxB,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,EAAU,EAAE,GAAW;IAChD,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG;QACtD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC;AACZ,CAAC","sourcesContent":["import { hmac } from \"@noble/hashes/hmac\";\nimport { sha256 } from \"@noble/hashes/sha256\";\nimport { bytesToHex, hexToBytes } from \"@noble/hashes/utils\";\n\n/** 64-hex-char object id. idFromName is SYNCHRONOUS (as on CF), hence noble instead of crypto.subtle. */\nexport class DurableObjectId {\n  readonly #hex: string;\n  readonly name?: string;\n  constructor(hex: string, name?: string) {\n    if (!/^[0-9a-f]{64}$/.test(hex))\n      throw new TypeError(\"Invalid Durable Object ID: must be 64 hex digits\");\n    this.#hex = hex;\n    if (name !== undefined) this.name = name;\n  }\n  toString(): string {\n    return this.#hex;\n  }\n  equals(other: DurableObjectId): boolean {\n    return other.toString() === this.#hex;\n  }\n}\n\n/**\n * Ids as celld derives them (engine_api.rs), so one name reaches the same object id on\n * celld and on cellb: namespace key `cells:v1:<len(script)>:<script>:<class>`;\n * key = SHA-256(namespace key); id = HMAC(key, name)[0..16] ‖ HMAC(key, first half)[0..16].\n * The second half authenticates the first, so idFromString() rejects ids of other namespaces.\n */\nexport function namespaceKey(scriptName: string, className: string): string {\n  return `cells:v1:${scriptName.length}:${scriptName}:${className}`;\n}\n\nconst keys = new Map<string, Uint8Array>();\nconst keyOf = (ns: string) => {\n  let k = keys.get(ns);\n  if (!k) {\n    k = sha256(new TextEncoder().encode(ns));\n    keys.set(ns, k);\n  }\n  return k;\n};\nconst half = (key: Uint8Array, data: Uint8Array) => hmac(sha256, key, data).subarray(0, 16);\nconst withSuffix = (ns: string, first: Uint8Array) => {\n  const id = new Uint8Array(32);\n  id.set(first, 0);\n  id.set(half(keyOf(ns), first), 16);\n  return bytesToHex(id);\n};\n\nexport function idFromName(ns: string, name: string): DurableObjectId {\n  const hex = withSuffix(ns, half(keyOf(ns), new TextEncoder().encode(name)));\n  // ctx.id.name holds names up to 1024 UTF-8 bytes, as on Cloudflare and celld.\n  return new DurableObjectId(\n    hex,\n    new TextEncoder().encode(name).byteLength <= 1024 ? name : undefined,\n  );\n}\n\nexport function newUniqueId(ns: string): DurableObjectId {\n  const first = new Uint8Array(16);\n  crypto.getRandomValues(first);\n  return new DurableObjectId(withSuffix(ns, first));\n}\n\n/** idFromString(): 64 hex digits whose second half authenticates the first for `ns`. */\nexport function validateId(ns: string, hex: string): DurableObjectId {\n  const id = new DurableObjectId(hex);\n  if (withSuffix(ns, hexToBytes(hex.slice(0, 32))) !== hex)\n    throw new TypeError(\"Durable Object ID is not valid for this namespace\");\n  return id;\n}\n"]}

package/dist/core/namespace.d.ts

@@ -0,0 +1,38 @@
+import { type DurableObjectId } from "./id.js";
+import type { ObjectHost } from "./object-host.js";
+import type { DurableObjectState } from "./state.js";
+/** What a stub talks to: a local ObjectHost or a remote cell host behind a port. */
+export interface ObjectEndpoint {
+    fetch(req: Request): Promise<Response>;
+    call(method: string, args: unknown[]): Promise<unknown>;
+    /** Present only for in-process objects (enables runInDurableObject). */
+    local?: ObjectHost;
+}
+/**
+ * An in-process object. `ready` (for a cell not open yet): a promise its first events await
+ * before the host opens the cell's database (its store is making room), or undefined.
+ */
+export declare function localEndpoint(host: () => ObjectHost, ready?: () => Promise<void> | undefined): () => ObjectEndpoint;
+export declare class DurableObjectNamespace {
+    #private;
+    constructor(namespaceKey: string, endpoint: (id: DurableObjectId) => () => ObjectEndpoint);
+    idFromName(name: string): DurableObjectId;
+    newUniqueId(opts?: {
+        jurisdiction?: string;
+    }): DurableObjectId;
+    idFromString(hex: string): DurableObjectId;
+    /** The key ids of this namespace derive from (see id.ts). */
+    get namespaceKey(): string;
+    get(id: DurableObjectId): DurableObjectStub;
+    getByName(name: string): DurableObjectStub;
+}
+export type DurableObjectStub = {
+    readonly id: DurableObjectId;
+    readonly name?: string;
+    fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
+} & Record<string, any>;
+/**
+ * Test hook (same idea as vitest-pool-workers' runInDurableObject): runs `fn`
+ * inside a LOCAL object, through the input/output gates, without cloning `fn`.
+ */
+export declare function runInDurableObject<T>(stub: DurableObjectStub, fn: (instance: any, state: DurableObjectState) => T | Promise<T>): Promise<T>;

package/dist/core/namespace.js

@@ -0,0 +1,141 @@
+import { carryWebSocketHeaders } from "../ws/upgrade.js";
+import { cross, rpcCall, STUB } from "./handles.js";
+import { idFromName, newUniqueId, validateId } from "./id.js";
+/**
+ * An in-process object. `ready` (for a cell not open yet): a promise its first events await
+ * before the host opens the cell's database (its store is making room), or undefined.
+ */
+export function localEndpoint(host, ready) {
+    return () => {
+        const wait = ready?.();
+        if (!wait)
+            return endpointOf(host());
+        return {
+            get local() {
+                return host();
+            },
+            fetch: async (req) => {
+                await wait;
+                return endpointOf(host()).fetch(req);
+            },
+            call: async (method, args) => {
+                const copied = cross(args); // the arguments as they are now, as for an open cell
+                await wait;
+                return deliverCall(host(), method, copied);
+            },
+        };
+    };
+}
+function endpointOf(h) {
+    return {
+        local: h,
+        fetch: (req) => h.deliver(async (obj) => {
+            if (typeof obj.fetch !== "function")
+                throw new Error("Handler does not export a fetch() function.");
+            let res;
+            try {
+                const r = await obj.fetch(req);
+                res = r instanceof Response ? r : new Response(String(r)); // a non-Response is sent as text (celld)
+            }
+            catch (e) {
+                // celld: the stub's fetch() rejects with "rejected: <name>: <message> [at …]".
+                const err = e;
+                throw new Error(`rejected: ${err?.name ?? "Error"}: ${err?.message ?? String(e)}`, {
+                    cause: e,
+                });
+            }
+            // A WebSocket answer to a request that did not ask for one fails (workerd, celld):
+            // the stub rejects and the server end sees an abnormal close.
+            const ws = res.webSocket;
+            if (res.status === 101 && ws && req.headers.get("upgrade")?.toLowerCase() !== "websocket")
+                throw new Error("rejected: Error: a WebSocket response to a request without Upgrade: websocket");
+            return res;
+        }),
+        call: async (method, args) => deliverCall(h, method, cross(args)),
+    };
+}
+async function deliverCall(h, method, copied) {
+    const r = await h.deliver((obj) => {
+        const m = obj[method];
+        if (typeof m !== "function")
+            throw new TypeError(`${method} is not a function`); // celld's wording
+        return m.apply(obj, copied);
+    });
+    return cross(r);
+}
+export class DurableObjectNamespace {
+    #key;
+    #endpoint;
+    constructor(namespaceKey, endpoint) {
+        this.#key = namespaceKey;
+        this.#endpoint = endpoint;
+    }
+    idFromName(name) {
+        return idFromName(this.#key, name);
+    }
+    newUniqueId(opts) {
+        if (opts?.jurisdiction != null)
+            throw new Error("Jurisdiction restrictions are not implemented");
+        return newUniqueId(this.#key);
+    }
+    idFromString(hex) {
+        return validateId(this.#key, hex);
+    }
+    /** The key ids of this namespace derive from (see id.ts). */
+    get namespaceKey() {
+        return this.#key;
+    }
+    get(id) {
+        return createStub(id, this.#endpoint(id));
+    }
+    getByName(name) {
+        return this.get(this.idFromName(name));
+    }
+}
+const kEndpoint = Symbol("cellb.endpoint");
+/**
+ * Test hook (same idea as vitest-pool-workers' runInDurableObject): runs `fn`
+ * inside a LOCAL object, through the input/output gates, without cloning `fn`.
+ */
+export function runInDurableObject(stub, fn) {
+    const ep = stub[kEndpoint];
+    const local = ep?.().local;
+    if (!local)
+        throw new TypeError("runInDurableObject needs a stub of an in-process cellb object");
+    return local.deliver(fn);
+}
+/** Stub = Proxy: `fetch` → fetch handler, any other property → JS-RPC call (an RpcPromise). */
+function createStub(id, endpoint) {
+    const target = { id, name: id.name };
+    // Only id and name are own enumerable keys, as in workerd and celld: Object.keys(stub) is
+    // [id, name], and two stubs of one object are deep-equal.
+    Object.defineProperty(target, kEndpoint, { value: endpoint });
+    Object.defineProperty(target, STUB, { value: true });
+    Object.defineProperty(target, "fetch", {
+        value(input, init) {
+            const req = new Request(input, init);
+            // Cloudflare's `cf` request property (RequestInit.cf or Request#cf) is not part of
+            // the Fetch standard: re-attach it so objects can read `request.cf`.
+            const cf = init?.cf ?? input.cf;
+            if (cf !== undefined)
+                Object.defineProperty(req, "cf", { value: cf, enumerable: true });
+            // Keep a WebSocket upgrade that browsers strip from new Request() (forbidden headers).
+            const source = init?.headers
+                ? new Headers(init.headers)
+                : input instanceof Request
+                    ? input.headers
+                    : undefined;
+            return endpoint().fetch(source ? carryWebSocketHeaders(source, req) : req);
+        },
+    });
+    return new Proxy(target, {
+        get(t, prop, recv) {
+            if (prop in t)
+                return Reflect.get(t, prop, recv);
+            if (prop === "then" || typeof prop === "symbol")
+                return undefined;
+            return (...args) => rpcCall(() => endpoint().call(String(prop), args));
+        },
+    });
+}
+//# sourceMappingURL=namespace.js.map

package/dist/core/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/core/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAwB,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAYpF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAsB,EACtB,KAAuC;IAEvC,OAAO,GAAG,EAAE;QACV,MAAM,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO;YACL,IAAI,KAAK;gBACP,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACnB,MAAM,IAAI,CAAC;gBACX,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,qDAAqD;gBACjF,MAAM,IAAI,CAAC;gBACX,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAa;IAC/B,OAAO;QACL,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACtB,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU;gBACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/B,GAAG,GAAG,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yCAAyC;YACtG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,+EAA+E;gBAC/E,MAAM,GAAG,GAAG,CAAU,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,EAAE,IAAI,IAAI,OAAO,KAAK,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;oBACjF,KAAK,EAAE,CAAC;iBACT,CAAC,CAAC;YACL,CAAC;YACD,mFAAmF;YACnF,8DAA8D;YAC9D,MAAM,EAAE,GAAI,GAA+B,CAAC,SAAS,CAAC;YACtD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW;gBACvF,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QACJ,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,CAAa,EAAE,MAAc,EAAE,MAAiB;IACzE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,kBAAkB;QACnG,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,IAAI,CAAS;IACb,SAAS,CAAgD;IAElE,YAAY,YAAoB,EAAE,QAAuD;QACvF,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IACD,UAAU,CAAC,IAAY;QACrB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,WAAW,CAAC,IAAgC;QAC1C,IAAI,IAAI,EAAE,YAAY,IAAI,IAAI;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,YAAY,CAAC,GAAW;QACtB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,6DAA6D;IAC7D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,EAAmB;QACrB,OAAO,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;CACF;AAQD,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAuB,EACvB,EAAgE;IAEhE,MAAM,EAAE,GAAI,IAAY,CAAC,SAAS,CAAuC,CAAC;IAC1E,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,EAAmB,EAAE,QAA8B;IACrE,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACrC,0FAA0F;IAC1F,0DAA0D;IAC1D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE;QACrC,KAAK,CAAC,KAAwB,EAAE,IAAkB;YAChD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,KAAY,EAAE,IAAI,CAAC,CAAC;YAC5C,mFAAmF;YACnF,qEAAqE;YACrE,MAAM,EAAE,GAAI,IAAqC,EAAE,EAAE,IAAK,KAA0B,CAAC,EAAE,CAAC;YACxF,IAAI,EAAE,KAAK,SAAS;gBAAE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,uFAAuF;YACvF,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO;gBAC1B,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,KAAK,YAAY,OAAO;oBACxB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;KACF,CAAC,CAAC;IACH,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;QACvB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI;YACf,IAAI,IAAI,IAAI,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClE,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;KACF,CAAiC,CAAC;AACrC,CAAC","sourcesContent":["import { carryWebSocketHeaders } from \"../ws/upgrade.js\";\nimport { cross, rpcCall, STUB } from \"./handles.js\";\nimport { type DurableObjectId, idFromName, newUniqueId, validateId } from \"./id.js\";\nimport type { ObjectHost } from \"./object-host.js\";\nimport type { DurableObjectState } from \"./state.js\";\n\n/** What a stub talks to: a local ObjectHost or a remote cell host behind a port. */\nexport interface ObjectEndpoint {\n  fetch(req: Request): Promise<Response>;\n  call(method: string, args: unknown[]): Promise<unknown>;\n  /** Present only for in-process objects (enables runInDurableObject). */\n  local?: ObjectHost;\n}\n\n/**\n * An in-process object. `ready` (for a cell not open yet): a promise its first events await\n * before the host opens the cell's database (its store is making room), or undefined.\n */\nexport function localEndpoint(\n  host: () => ObjectHost,\n  ready?: () => Promise<void> | undefined,\n): () => ObjectEndpoint {\n  return () => {\n    const wait = ready?.();\n    if (!wait) return endpointOf(host());\n    return {\n      get local() {\n        return host();\n      },\n      fetch: async (req) => {\n        await wait;\n        return endpointOf(host()).fetch(req);\n      },\n      call: async (method, args) => {\n        const copied = cross(args); // the arguments as they are now, as for an open cell\n        await wait;\n        return deliverCall(host(), method, copied);\n      },\n    };\n  };\n}\n\nfunction endpointOf(h: ObjectHost): ObjectEndpoint {\n  return {\n    local: h,\n    fetch: (req) =>\n      h.deliver(async (obj) => {\n        if (typeof obj.fetch !== \"function\")\n          throw new Error(\"Handler does not export a fetch() function.\");\n        let res: Response;\n        try {\n          const r = await obj.fetch(req);\n          res = r instanceof Response ? r : new Response(String(r)); // a non-Response is sent as text (celld)\n        } catch (e) {\n          // celld: the stub's fetch() rejects with \"rejected: <name>: <message> [at …]\".\n          const err = e as Error;\n          throw new Error(`rejected: ${err?.name ?? \"Error\"}: ${err?.message ?? String(e)}`, {\n            cause: e,\n          });\n        }\n        // A WebSocket answer to a request that did not ask for one fails (workerd, celld):\n        // the stub rejects and the server end sees an abnormal close.\n        const ws = (res as { webSocket?: unknown }).webSocket;\n        if (res.status === 101 && ws && req.headers.get(\"upgrade\")?.toLowerCase() !== \"websocket\")\n          throw new Error(\n            \"rejected: Error: a WebSocket response to a request without Upgrade: websocket\",\n          );\n        return res;\n      }),\n    call: async (method, args) => deliverCall(h, method, cross(args)),\n  };\n}\n\nasync function deliverCall(h: ObjectHost, method: string, copied: unknown[]): Promise<unknown> {\n  const r = await h.deliver((obj) => {\n    const m = obj[method];\n    if (typeof m !== \"function\") throw new TypeError(`${method} is not a function`); // celld's wording\n    return m.apply(obj, copied);\n  });\n  return cross(r);\n}\n\nexport class DurableObjectNamespace {\n  readonly #key: string;\n  readonly #endpoint: (id: DurableObjectId) => () => ObjectEndpoint;\n\n  constructor(namespaceKey: string, endpoint: (id: DurableObjectId) => () => ObjectEndpoint) {\n    this.#key = namespaceKey;\n    this.#endpoint = endpoint;\n  }\n  idFromName(name: string): DurableObjectId {\n    return idFromName(this.#key, name);\n  }\n  newUniqueId(opts?: { jurisdiction?: string }): DurableObjectId {\n    if (opts?.jurisdiction != null)\n      throw new Error(\"Jurisdiction restrictions are not implemented\");\n    return newUniqueId(this.#key);\n  }\n  idFromString(hex: string): DurableObjectId {\n    return validateId(this.#key, hex);\n  }\n  /** The key ids of this namespace derive from (see id.ts). */\n  get namespaceKey(): string {\n    return this.#key;\n  }\n  get(id: DurableObjectId): DurableObjectStub {\n    return createStub(id, this.#endpoint(id));\n  }\n  getByName(name: string): DurableObjectStub {\n    return this.get(this.idFromName(name));\n  }\n}\n\nexport type DurableObjectStub = {\n  readonly id: DurableObjectId;\n  readonly name?: string;\n  fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;\n} & Record<string, any>;\n\nconst kEndpoint = Symbol(\"cellb.endpoint\");\n\n/**\n * Test hook (same idea as vitest-pool-workers' runInDurableObject): runs `fn`\n * inside a LOCAL object, through the input/output gates, without cloning `fn`.\n */\nexport function runInDurableObject<T>(\n  stub: DurableObjectStub,\n  fn: (instance: any, state: DurableObjectState) => T | Promise<T>,\n): Promise<T> {\n  const ep = (stub as any)[kEndpoint] as (() => ObjectEndpoint) | undefined;\n  const local = ep?.().local;\n  if (!local) throw new TypeError(\"runInDurableObject needs a stub of an in-process cellb object\");\n  return local.deliver(fn);\n}\n\n/** Stub = Proxy: `fetch` → fetch handler, any other property → JS-RPC call (an RpcPromise). */\nfunction createStub(id: DurableObjectId, endpoint: () => ObjectEndpoint): DurableObjectStub {\n  const target = { id, name: id.name };\n  // Only id and name are own enumerable keys, as in workerd and celld: Object.keys(stub) is\n  // [id, name], and two stubs of one object are deep-equal.\n  Object.defineProperty(target, kEndpoint, { value: endpoint });\n  Object.defineProperty(target, STUB, { value: true });\n  Object.defineProperty(target, \"fetch\", {\n    value(input: RequestInfo | URL, init?: RequestInit): Promise<Response> {\n      const req = new Request(input as any, init);\n      // Cloudflare's `cf` request property (RequestInit.cf or Request#cf) is not part of\n      // the Fetch standard: re-attach it so objects can read `request.cf`.\n      const cf = (init as { cf?: unknown } | undefined)?.cf ?? (input as { cf?: unknown }).cf;\n      if (cf !== undefined) Object.defineProperty(req, \"cf\", { value: cf, enumerable: true });\n      // Keep a WebSocket upgrade that browsers strip from new Request() (forbidden headers).\n      const source = init?.headers\n        ? new Headers(init.headers)\n        : input instanceof Request\n          ? input.headers\n          : undefined;\n      return endpoint().fetch(source ? carryWebSocketHeaders(source, req) : req);\n    },\n  });\n  return new Proxy(target, {\n    get(t, prop, recv) {\n      if (prop in t) return Reflect.get(t, prop, recv);\n      if (prop === \"then\" || typeof prop === \"symbol\") return undefined;\n      return (...args: unknown[]) => rpcCall(() => endpoint().call(String(prop), args));\n    },\n  }) as unknown as DurableObjectStub;\n}\n"]}

package/dist/core/object-host.d.ts

@@ -0,0 +1,91 @@
+import type { BackupInfo, CellBackup, CellDurability, Lease, OpenCellSql, ValueCodec } from "../ports.js";
+import type { AsyncRoot } from "./async-context.js";
+import { type DurableObjectClass } from "./handles.js";
+import { type DurableObjectId } from "./id.js";
+import { DurableObjectState } from "./state.js";
+export declare class BrokenObjectError extends Error {
+    constructor(cause: unknown, reason?: string);
+}
+/**
+ * One live instance of one Durable Object: its SQLite, gates and dispatcher.
+ * Everything that reaches the object (fetch, RPC, later alarms/WebSockets)
+ * goes through `deliver()`.
+ */
+export declare class ObjectHost {
+    #private;
+    readonly cellKey: string;
+    readonly state: DurableObjectState;
+    broken: boolean;
+    constructor(opts: {
+        cellKey: string;
+        id: DurableObjectId;
+        cls: DurableObjectClass;
+        env: unknown;
+        openSql: OpenCellSql;
+        durability: CellDurability;
+        codec: ValueCodec;
+        waitUntil: (p: Promise<unknown>) => void;
+        backup?: CellBackup;
+        /** The stored alarm changed (null = cleared). */
+        onAlarmChange?: (at: number | null) => void;
+        /** `ctx.exports` (loopback handles of the Worker's exports). */
+        exports?: Record<string, unknown>;
+        /** `ctx.props` of a facet started from a class handle with `{ props }`. */
+        props?: unknown;
+        /** SQLite extensions to load into every cell database (e.g. "sqlite_vec"). */
+        sqlExtensions?: string[];
+        /** storage.deleteAll() keeps the alarm (`delete_all_preserves_alarm`). */
+        deleteAllPreservesAlarm?: boolean;
+        /**
+         * Ownership: acquire the cell's lease before restoring it. No lease → the cell is owned
+         * elsewhere (the host refuses events). The lease epoch fences the cell's log segments;
+         * losing the lease breaks the host so it stops serving.
+         */
+        /** Owner epoch when no lease is taken (facets inherit their root's). */
+        epoch?: number;
+        /** A facet: on open its rows move to this run's scope, as celld does. */
+        facet?: boolean;
+        acquire?: Lease["tryAcquire"];
+        /** The async context events start in (`asyncRoot()`): not the caller's, as on Cloudflare. */
+        asyncRoot?: AsyncRoot;
+    });
+    /**
+     * Takes an image if the cell changed since the last successful save and hands
+     * it to `backup.save`. Taken synchronously between events → a consistent image.
+     * Skipped while an async transaction() holds the database or a save is running.
+     */
+    backupIfDirty(reason: BackupInfo["reason"], now: number): Promise<void>;
+    /**
+     * Input gate → handler → commit → output gate (durability) → result.
+     *
+     * Events are queued and STARTED synchronously by a pump only while the gate
+     * is open: the first storage op of a handler closes the gate before the
+     * next event can start (checking the gate in an `await` continuation is too
+     * late — every queued continuation would see it open).
+     */
+    deliver<T>(fn: (instance: any, state: DurableObjectState) => T | Promise<T>): Promise<T>;
+    /** Settles once the cell lease is released (a store closed earlier would keep it held). */
+    close(): Promise<void>;
+    /** Time of the last event's completion (the runtime's idle sweep reads it). */
+    lastActive: number;
+    get hibernated(): boolean;
+    /**
+     * Drops the instance when nothing runs: no event in flight or queued, no open async
+     * transaction, no standard WebSocket. Storage, alarms and hibernatable sockets stay; the
+     * next event constructs the class again. Returns whether it hibernated.
+     */
+    hibernate(): boolean;
+    /**
+     * Closes the database of a hibernated cell (the cell lease stays); the next event reopens it.
+     * A cell with changes its backup has not taken yet stays open. Returns whether it closed.
+     */
+    closeDatabase(): boolean;
+    /** Replaces the instance with a fresh one on the SAME database (facet abort/delete). */
+    restart(): void;
+}
+/** The cell's lease is held by another owner (route the request there, or retry later). */
+export declare class CellOwnedElsewhereError extends Error {
+    constructor(cellKey: string);
+}
+/** celld's path segment for a facet name: the first 16 bytes of SHA-256(name), hex. */
+export declare function facetSegment(name: string): string;