@statewalker/cellb 0.0.0-stage → 0.1.1

package/dist/peer/celld-peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"celld-peer.js","sourceRoot":"","sources":["../../src/peer/celld-peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAGjG,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAoB,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,sBAAsB;IAC/B,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,qBAAqB;IAC7B,SAAS,EAAE,wBAAwB;IACnC,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,0BAA0B;IACnC,SAAS,EAAE,wBAAwB;CAC3B,CAAC;AACX,MAAM,OAAO,GAAG;IACd,eAAe;IACf,iBAAiB;IACjB,oBAAoB;IACpB,0BAA0B;CAC3B,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAkB;IAClD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACjG,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAGnE,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,MAAM,GAAG,GAAG,CACV,GAAe,EACf,CAQC,EACD,EAAE,CACF,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;KACtB,MAAM,CACL,GAAG,MAAM,KAAK,QAAQ,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAC9G;KACA,MAAM,EAAE,CAAC;AAEd,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAC7B,GAAe,EACf,MAAc,EACd,MAAc,EACd,MAAc,EACd,YAAoB,EACpB,IAAI,GAAe,IAAI,UAAU,EAAE;IAEnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,EAAE;QACzB,MAAM;QACN,IAAI,EAAE,YAAY;QAClB,OAAO;QACP,MAAM;QACN,MAAM;QACN,EAAE;QACF,KAAK;KACN,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO;QACL,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ;QAChC,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM;QAC7B,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM;QAC7B,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE;QAC5B,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK;QAC3B,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO;QAC/B,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,SAAS;KACpC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAC/B,GAAe,EACf,IAAY,EACZ,MAAc,EACd,YAAoB,EACpB,OAAsD,EACtD,IAAgB,EAChB,IAAyB;IAEzB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAO,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACzF,IAAI,OAAO,KAAK,QAAQ;QACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC3E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG;QACtD,YAAY,CAAC,MAAM;QACnB,YAAY,CAAC,MAAM;QACnB,YAAY,CAAC,SAAS;QACtB,YAAY,CAAC,KAAK;QAClB,YAAY,CAAC,OAAO;QACpB,YAAY,CAAC,SAAS;KACvB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACT,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;QAC/D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,eAAe;QACnE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAChE,IACE,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO;QAC3B,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAEjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9F,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI;QACjB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,+CAA+C,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChG,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI;QAAE,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe;YAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACrF,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAE,EAAE;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACpD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,0FAA0F;AAC1F,SAAS,OAAO,CAAC,OAAoB,EAAE,KAAa,EAAE,IAAwB;IAC5E,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAChE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAC1B,EAAE,CAAC,CAAC,CAAC,CAAC;IACP,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAQ,CAAC;IACvC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,EAAE,CAC9B,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;IAChF,CAAW,EAAE,IAAI,KAAK,yBAAyB,CAAC;AAEnD,SAAS,KAAK,CACZ,GAAmB,EACnB,MAAc,EACd,OAA+B,EAC/B,IAA0B;IAE1B,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACxE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,GAAmB,EAAE,EAAE,CACpC,KAAK,CACH,GAAG,EACH,GAAG,EACH,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,EACtE,aAAa,CACd,CAAC;AAQJ;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAQ1C;IACC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAC5C,CAAC,CAAE,GAAG,CAAC,GAAc;YACrB,CAAC,CAAC,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,CAAC,GAAa,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAClF,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACzB,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,YAAY;oBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5F,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAuB,CAAC;QACvE,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,0BAA0B,CAAC;QAC9E,IAAI,IAAe,CAAC;QACpB,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACnF,IAAI,GAAG,WAAW,CAAC,GAAG,CAAc,CAAC;QACvC,CAAC;;YAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAc,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,UAAU;gBACZ,KAAK,CACH,GAAG,EACH,GAAG,EACH,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAC9C,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CACjC,CAAC;;gBACC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,UAAU;gBACb,OAAO,KAAK,CACV,GAAG,EACH,GAAG,EACH,EAAE,cAAc,EAAE,YAAY,EAAE,EAChC,eAAe,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,CACpD,CAAC;YACJ,2EAA2E;YAC3E,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9E,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC;IAEF,wFAAwF;IACxF,qFAAqF;IACrF,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,GAAG,EAAE,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;KAC/E,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC7D,2FAA2F;IAC3F,4FAA4F;IAC5F,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAoB,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QAClF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,KAAK,GAA2B,EAAE,EAAE,EAAE;YAChF,MAAM,KAAK,GAAG;gBACZ,YAAY,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE;gBAC7D,GAAG,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE;gBACtC,mBAAmB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;gBAC5C,mBAAmB;aACpB,CAAC;YACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAClB,IAAI,CAAC,OAAO,EACZ,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAC1C,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CACrD,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAC5C,CAAC,CAAE,GAAG,CAAC,GAAc;YACrB,CAAC,CAAC,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAuB,CAAC;QAC9E,IAAI,GAAkD,CAAC;QACvD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CACpB,WAAW,CACT,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,EAC7B,WAAW,EACX,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAChE,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAC;gBACpE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,oBAAoB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3C,IAAI;YACJ,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,SAAS;SACjE,CAAC,CAAC,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,YAAY,CAAc,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC;QAChC,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC9C,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAY,EAAE,QAAiB,EAAE,EAAE;gBACvD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,MAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpF,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;oBAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,CAAC,EAAgB,EAAE,EAAE,CACpC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAClD,IAAI,CAAC,KAAK,CACR,IAAI,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAC3E,MAAM,CAAC,QAAQ,EAAE,CAClB,CACF,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,CAAC,EAAc,EAAE,EAAE,CAChC,MAAM,CAAC,KAAK,CACV,EAAE,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EACxE,EAAE,CAAC,MAAM,CACV,CAAC;QACN,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,EACH,IAAI,CAAC,IAAI,EACT,KAAK,EACL,aAAa,EACb,GAAG,CAAC,OAAO,EACX,IAAI,UAAU,EAAE,EAChB,IAAI,CACL,CAAC;YACF,IAAI,MAAM;gBACR,OAAO,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACrF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtF,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,KAAK,CACV,GAAG,EACH,GAAG,EACH,EAAE,cAAc,EAAE,YAAY,EAAE,EAChC,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CACnC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAoB,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,KAAK,GAA2B,EAAE,EAAE,EAAE;YACrF,MAAM,KAAK,GAAG;gBACZ,YAAY,MAAM,IAAI,OAAO,EAAE;gBAC/B,GAAG,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE;gBACtC,mBAAmB;gBACnB,mBAAmB;aACpB,CAAC;YACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,IAAI,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc;YACnE,OAAO,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,iBAAiB,CAC9B,GAAG,EACH,IAAI,CAAC,IAAI,EACT,GAAG,CAAC,MAAM,IAAI,KAAK,EACnB,IAAI,EACJ,GAAG,CAAC,OAAO,EACX,IAAI,UAAU,EAAE,EAChB,IAAI,CACL,CAAC;QACF,IAAI,MAAM;YACR,OAAO,MAAM,CACX,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAC7D,CAAC;QACJ,IAAI,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CACV;YACE,kCAAkC;YAClC,uBAAuB;YACvB,qBAAqB;YACrB,2BAA2B;YAC3B,GAAG,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE;SACvC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,UAAU,CAC5B,CAAC;QACF,IAAI,IAAI,EAAE,MAAM;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IACzD,OAAO;QACL,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE;QACvB,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;YACtB,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,2FAA2F;AAC3F,KAAK,UAAU,UAAU,CACvB,GAAe,EACf,MAAc,EACd,KAAqC,EACrC,IAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG;QACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9E,MAAM,GAAG,GAAG,OAAO,CAAC;YAClB,IAAI;YACJ,IAAI;YACJ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,OAAO,EAAE,cAAc;gBACvB,UAAU,EAAE,SAAS;gBACrB,wBAAwB,EAAE,GAAG;gBAC7B,qBAAqB,EAAE,IAAI;gBAC3B,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;aACnE;SACF,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAiC,CAAC,CAAC,CAAC;QAC9E,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CACzB,MAAM,CACJ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE;YACjE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,aAAa;SAC5D,CAAC,CACH,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAe,EACf,MAAc,EACd,KAAqC,EACrC,IAAkB,EAClB,KAA2F;IAE3F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,GAAG,GAAG,OAAO;YACjB,2DAA2D;YAC3D;gBACE,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;gBACZ,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;oBAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;gBACpD,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;oBAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5C,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG;oBAC7B,OAAO;oBACP,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAA0C;IACnE,IAAI,GAAoC,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,EAAK,CAAS,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CACrC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,CAAC,EAAE;QAC9D,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAC;IACL,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAe;YAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAmB,SAAS,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACxF,OAAO,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,CAAC;QACD,IAAI;YACF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,OAAe,EAAE,IAAwB;YACrE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAuC,SAAS,KAAK,OAAO,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,SAAS,CAAC;YACrE,GAAG,KAAK,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC;YACpB,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,CAAC,CAAyB,EAAE,EAAE,CAAC,CAAC;gBAC9C,GAAG,CAAC;gBACJ,eAAe,EAAE,KAAK;gBACtB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,wFAAwF;YACxF,yFAAyF;YACzF,MAAM,eAAe,GAAG,KAAK,EAAE,GAAY,EAAE,GAAQ,EAAE,EAAE;gBACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC5D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO;qBAC1B,GAAG,CAAC,wBAAwB,CAAC;oBAC9B,EAAE,KAAK,CAAC,GAAG,CAAC;qBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;gBACnB,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE;oBACrF,gBAAgB,EAAE,GAAG,EAAE,CAAC,MAAM;oBAC9B,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;iBACrB,CAAC,CAAC;gBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrC,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,CAAC,EAAW,EAAE,GAA8D,EAAE,EAAE,CAC9E,MAAM,CACJ,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,aAAa;wBAClD,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;wBACrB,CAAC,CAAC,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,UAAU,EAAE,CAAC,CACzE,CACJ,CAAC;oBACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,CAAC,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAE,CAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAS,EAAE,QAAiB,EAAE,EAAE,CACpD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CACzD,CAAC;gBACF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAE,CAAgB,CAAC,IAAI,CAAC,EAAG,CAAgB,CAAC,MAAM,CAAC,CACrE,CAAC;gBACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAS,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC5F,OAAO,IAAI,aAAa,CAAC,IAAI,EAAE;oBAC7B,MAAM,EAAE,GAAG;oBACX,SAAS,EAAE,MAAM;oBACjB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;iBAC9E,CAAa,CAAC;YACjB,CAAC,CAAC;YACF,OAAO;gBACL,KAAK,CAAC,KAAK,CAAC,GAAY;oBACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW;wBAC3D,OAAO,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACnC,MAAM,OAAO,GAA2B,EAAE,CAAC;oBAC3C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBAC3B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;4BAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBAChD,CAAC,CAAC,CAAC;oBACH,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC;oBAC1B,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;wBAC3C,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC9C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;wBACrD,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;wBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;wBACzB,IAAI;qBACL,CAAC,CAAC;oBACH,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,aAAa;wBACxE,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;wBAC5C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;4BAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC/C,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAiB,EAAE;wBACtF,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,OAAO,EAAE,GAAG;qBACb,CAAC,CAAC;gBACL,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,IAAe;oBACxC,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;wBACtD,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,GAAG;wBACT,OAAO,EAAE,OAAO,CAAC;4BACf,oBAAoB,EAAE,MAAM;4BAC5B,cAAc,EAAE,0BAA0B;4BAC1C,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;yBACtC,CAAC;wBACF,IAAI;qBACL,CAAC,CAAC;oBACH,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,aAAa;wBACxE,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;wBAClB,MAAM,IAAI,KAAK,CACb,0BAA0B,CAAC,CAAC,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;oBACJ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACnD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;wBACpB,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAGpD,CAAC;wBACF,IAAI,KAAK,YAAY,KAAK;4BAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC1E,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAChE,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createHash, createHmac, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\nimport type { Duplex } from \"node:stream\";\nimport type { ObjectStore } from \"../bucket/object-store.js\";\nimport { toAnotherNode } from \"../core/handles.js\";\nimport type { CellRuntime } from \"../core/runtime.js\";\nimport { deserialize, serialize } from \"../v8/serialize.js\";\nimport { createWebSocketClass } from \"../ws/client.js\";\nimport { CellsResponse, type CfWebSocket, takeClientPort, WebSocketPair } from \"../ws/server.js\";\nimport { withUpgrade } from \"../ws/upgrade.js\";\n\n/**\n * celld's peer protocol (peer_auth.rs, main/peer_tunnel.rs, protocol 5) for a cellb node\n * hosted in Node, so celld nodes can route a cell's requests to it when it owns the cell.\n *\n * Authentication: every peer request carries an HMAC-SHA-256 over\n *   \"cells-peer-request-v1\\n5\\n<method>\\n<path?query>\\n<sha256(body)>\\n<source>\\n<target>\\n<ts>\\n<nonce>\"\n * keyed by the fleet secret in `fleet/peer-auth.json`, with headers x-cells-peer-{version,\n * source,target,timestamp,nonce,body-sha256,signature}; ±30 s clock window, nonce replay cache,\n * and the target must be this node.\n *\n * Tunnel: `GET /peer/tunnel` with `Upgrade: celld-tunnel` (kind `do` or `rpc`) is answered with\n * 101; then the connection carries plain HTTP/1.1 requests, one call each, with control headers\n * x-cells-scope (the cell, \"<Class>:<idhex>\"), x-cells-do-name, x-cells-request-id:\n *   do  — the application request as is; the reply streams back.\n *   rpc — POST, method in x-cells-rpc-method, arguments V8-serialized (an array) or JSON; the\n *         reply is the V8-serialized result, or a tagged error (0, then [error, props]).\n * A cell this node does not own answers 409 with `x-cells-route-error: stale-owner`, so celld\n * re-resolves the owner.\n */\nconst PROTOCOL = \"5\";\nconst DOMAIN = \"cells-peer-request-v1\";\nconst CLOCK_WINDOW_MS = 30_000;\nconst PEER_HEADERS = {\n  version: \"x-cells-peer-version\",\n  source: \"x-cells-peer-source\",\n  target: \"x-cells-peer-target\",\n  timestamp: \"x-cells-peer-timestamp\",\n  nonce: \"x-cells-peer-nonce\",\n  bodySha: \"x-cells-peer-body-sha256\",\n  signature: \"x-cells-peer-signature\",\n} as const;\nconst CONTROL = [\n  \"x-cells-scope\",\n  \"x-cells-do-name\",\n  \"x-cells-request-id\",\n  \"x-cells-capacity-handoff\",\n];\n\n/** The fleet's peer secret (celld creates it in the bucket). */\nexport async function loadPeerKey(store: ObjectStore): Promise<Uint8Array> {\n  const o = await store.get(\"fleet/peer-auth.json\");\n  if (!o) throw new Error(\"the fleet has no peer authentication secret; start a celld node first\");\n  const { version, key } = JSON.parse(new TextDecoder().decode(o.body)) as {\n    version: number;\n    key: string;\n  };\n  if (version !== 1 || !/^[0-9a-f]{64}$/.test(key))\n    throw new Error(\"unexpected fleet/peer-auth.json\");\n  return Uint8Array.from(Buffer.from(key, \"hex\"));\n}\n\nconst sha256hex = (b: Uint8Array) => createHash(\"sha256\").update(b).digest(\"hex\");\nconst mac = (\n  key: Uint8Array,\n  c: {\n    method: string;\n    path: string;\n    bodySha: string;\n    source: string;\n    target: string;\n    ts: string;\n    nonce: string;\n  },\n) =>\n  createHmac(\"sha256\", key)\n    .update(\n      `${DOMAIN}\\n${PROTOCOL}\\n${c.method}\\n${c.path}\\n${c.bodySha}\\n${c.source}\\n${c.target}\\n${c.ts}\\n${c.nonce}`,\n    )\n    .digest();\n\n/** Headers that sign one peer request from `source` to `target`. */\nexport function signPeerRequest(\n  key: Uint8Array,\n  source: string,\n  target: string,\n  method: string,\n  pathAndQuery: string,\n  body: Uint8Array = new Uint8Array(),\n) {\n  const ts = String(Date.now());\n  const nonce = randomBytes(16).toString(\"hex\");\n  const bodySha = sha256hex(body);\n  const signature = mac(key, {\n    method,\n    path: pathAndQuery,\n    bodySha,\n    source,\n    target,\n    ts,\n    nonce,\n  }).toString(\"hex\");\n  return {\n    [PEER_HEADERS.version]: PROTOCOL,\n    [PEER_HEADERS.source]: source,\n    [PEER_HEADERS.target]: target,\n    [PEER_HEADERS.timestamp]: ts,\n    [PEER_HEADERS.nonce]: nonce,\n    [PEER_HEADERS.bodySha]: bodySha,\n    [PEER_HEADERS.signature]: signature,\n  };\n}\n\n/** celld's verification; returns a status and message on failure. */\nexport function verifyPeerRequest(\n  key: Uint8Array,\n  self: string,\n  method: string,\n  pathAndQuery: string,\n  headers: Record<string, string | string[] | undefined>,\n  body: Uint8Array,\n  seen: Map<string, number>,\n): { status: number; message: string; stale?: boolean } | undefined {\n  const h = (n: string) => (typeof headers[n] === \"string\" ? (headers[n] as string) : undefined);\n  const version = h(PEER_HEADERS.version);\n  if (version === undefined) return { status: 401, message: \"peer authentication failed\" };\n  if (version !== PROTOCOL)\n    return { status: 426, message: \"peer protocol version is incompatible\" };\n  const [source, target, ts, nonce, bodySha, signature] = [\n    PEER_HEADERS.source,\n    PEER_HEADERS.target,\n    PEER_HEADERS.timestamp,\n    PEER_HEADERS.nonce,\n    PEER_HEADERS.bodySha,\n    PEER_HEADERS.signature,\n  ].map(h);\n  if (!source || !target || !ts || !nonce || !bodySha || !signature)\n    return { status: 401, message: \"peer authentication failed\" };\n  const now = Date.now();\n  if (!/^\\d+$/.test(ts) || Math.abs(now - Number(ts)) > CLOCK_WINDOW_MS)\n    return { status: 401, message: \"peer authentication failed\" };\n  if (\n    sha256hex(body) !== bodySha ||\n    !/^[0-9a-f]{32}$/.test(nonce) ||\n    !/^[0-9a-f]{64}$/.test(signature)\n  )\n    return { status: 401, message: \"peer authentication failed\" };\n  const expected = mac(key, { method, path: pathAndQuery, bodySha, source, target, ts, nonce });\n  if (!timingSafeEqual(expected, Buffer.from(signature, \"hex\")))\n    return { status: 401, message: \"peer authentication failed\" };\n  if (target !== self)\n    return { status: 409, message: \"peer request targets a different node session\", stale: true };\n  for (const [n, t] of seen) if (now - t > 2 * CLOCK_WINDOW_MS) seen.delete(n);\n  if (seen.has(nonce)) return { status: 409, message: \"peer request replay rejected\" };\n  seen.set(nonce, now);\n  return undefined;\n}\n\nconst readBody = async (req: IncomingMessage) => {\n  const chunks: Buffer[] = [];\n  for await (const c of req) chunks.push(c as Buffer);\n  return new Uint8Array(Buffer.concat(chunks));\n};\n\n/** The cell a scope names, as a stub of this runtime (undefined: not a class we host). */\nfunction stubFor(runtime: CellRuntime, scope: string, name: string | undefined): any {\n  const m = /^([^:]+):([0-9a-f]{64})$/.exec(scope);\n  if (!m) return undefined;\n  const binding = Object.entries(runtime.durableObjectBindings).find(\n    ([, cls]) => cls === m[1],\n  )?.[0];\n  if (!binding) return undefined;\n  const ns = runtime.env[binding] as any;\n  return name !== undefined ? ns.getByName(name) : ns.get(ns.idFromString(m[2]));\n}\n\nconst notOwner = (e: unknown) =>\n  /owned by another|OwnedElsewhere|lease/i.test(String((e as Error)?.message ?? e)) ||\n  (e as Error)?.name === \"CellOwnedElsewhereError\";\n\nfunction reply(\n  res: ServerResponse,\n  status: number,\n  headers: Record<string, string>,\n  body?: Uint8Array | string,\n) {\n  res.writeHead(status, { [PEER_HEADERS.version]: PROTOCOL, ...headers });\n  res.end(body);\n}\nconst stale = (res: ServerResponse) =>\n  reply(\n    res,\n    409,\n    { \"x-cells-route-error\": \"stale-owner\", \"content-type\": \"text/plain\" },\n    \"stale route\",\n  );\n\nexport interface CelldPeerServer {\n  /** host:port celld dials (put it in the node record: celldBucket({ addr })). */\n  addr: string;\n  close(): Promise<void>;\n}\n\n/**\n * Serves celld's peer tunnel for `runtime` on `host:port` (0: any free port). `node` is this\n * node's name in the fleet (the same as celldBucket's `node`).\n */\nexport async function startCelldPeerServer(opts: {\n  runtime: CellRuntime;\n  store: ObjectStore;\n  node: string;\n  host?: string;\n  port?: number;\n  /** Answers celld's signed probe (celldBucket(...).probe): `celld diagnose --peer` reaches us. */\n  probe?: (challenge: string) => Promise<unknown>;\n}): Promise<CelldPeerServer> {\n  const key = await loadPeerKey(opts.store);\n  const seen = new Map<string, number>();\n  const host = opts.host ?? \"127.0.0.1\";\n\n  const serveDo = async (req: IncomingMessage, res: ServerResponse) => {\n    const scope = String(req.headers[\"x-cells-scope\"] ?? \"\");\n    const name = req.headers[\"x-cells-do-name\"] as string | undefined;\n    const stub = stubFor(opts.runtime, scope, name);\n    if (!stub) return reply(res, 400, {}, \"malformed cell scope\");\n    const headers = new Headers();\n    for (const [k, v] of Object.entries(req.headers))\n      if (typeof v === \"string\" && !CONTROL.includes(k)) headers.set(k, v);\n    const method = req.method ?? \"GET\";\n    const body = method === \"GET\" || method === \"HEAD\" ? undefined : await readBody(req);\n    const url = /^https?:\\/\\//.test(req.url ?? \"\")\n      ? (req.url as string)\n      : `http://${req.headers.host ?? \"cell\"}${req.url ?? \"/\"}`;\n    try {\n      const r: Response = await stub.fetch(new Request(url, { method, headers, body }));\n      const out: Record<string, string> = {};\n      r.headers.forEach((v, k) => {\n        if (k !== \"content-length\" && k !== \"transfer-encoding\" && k !== \"connection\") out[k] = v;\n      });\n      reply(res, r.status, out, new Uint8Array(await r.arrayBuffer()));\n    } catch (e) {\n      if (notOwner(e)) return stale(res);\n      reply(res, 500, { \"content-type\": \"text/plain\" }, String((e as Error)?.message ?? e));\n    }\n  };\n\n  const serveRpc = async (req: IncomingMessage, res: ServerResponse) => {\n    const scope = String(req.headers[\"x-cells-scope\"] ?? \"\");\n    const stub = stubFor(opts.runtime, scope, req.headers[\"x-cells-do-name\"] as string | undefined);\n    const method = req.headers[\"x-cells-rpc-method\"] as string | undefined;\n    if (!stub) return reply(res, 400, {}, \"malformed cell scope\");\n    if (!method) return reply(res, 400, {}, \"RPC method header is missing\");\n    const raw = await readBody(req);\n    const structured = req.headers[\"content-type\"] === \"application/octet-stream\";\n    let args: unknown[];\n    if (structured) {\n      if (raw[0] !== 0xff) return reply(res, 501, {}, \"RPC stubs cannot cross to cellb\");\n      args = deserialize(raw) as unknown[];\n    } else args = JSON.parse(new TextDecoder().decode(raw)) as unknown[];\n    try {\n      const result = await stub[method](...(Array.isArray(args) ? args : [args]));\n      if (structured)\n        reply(\n          res,\n          200,\n          { \"content-type\": \"application/octet-stream\" },\n          serialize(toAnotherNode(result)),\n        );\n      else reply(res, 200, { \"content-type\": \"application/json\" }, JSON.stringify(result ?? null));\n    } catch (e) {\n      if (notOwner(e)) return stale(res);\n      if (!structured)\n        return reply(\n          res,\n          500,\n          { \"content-type\": \"text/plain\" },\n          `RPC failed: ${String((e as Error)?.message ?? e)}`,\n        );\n      // celld's callee exception: tag 0, then [error, own properties incl. name]\n      const err = e instanceof Error ? e : new Error(String(e));\n      const props = e instanceof Error ? { ...e, name: e.name } : { name: \"Error\" };\n      const sc = serialize([err, props]);\n      const tagged = new Uint8Array(sc.length + 1);\n      tagged.set(sc, 1);\n      reply(res, 200, { \"content-type\": \"application/octet-stream\" }, tagged);\n    }\n  };\n\n  // One inner HTTP/1.1 server per tunnel kind: an upgraded socket becomes its connection.\n  // celld's inner RPC requests carry no Host header: Node would answer 400 by default.\n  const inner = {\n    do: createServer({ requireHostHeader: false }, (q, s) => void serveDo(q, s)),\n    rpc: createServer({ requireHostHeader: false }, (q, s) => void serveRpc(q, s)),\n  };\n  for (const s of Object.values(inner)) s.keepAliveTimeout = 0;\n  // A tunneled WebSocket (celld: the client's own handshake crosses the tunnel and the owner\n  // answers it): the cell's 101 + webSocket is bridged to the raw connection, framed by `ws`.\n  const { WebSocketServer } = await import(\"ws\");\n  const wss = new WebSocketServer({ noServer: true });\n  inner.do.on(\"upgrade\", async (req: IncomingMessage, socket: Duplex, head: Buffer) => {\n    const fail = (status: number, body: string, extra: Record<string, string> = {}) => {\n      const lines = [\n        `HTTP/1.1 ${status} ${status === 409 ? \"Conflict\" : \"Error\"}`,\n        `${PEER_HEADERS.version}: ${PROTOCOL}`,\n        `content-length: ${Buffer.byteLength(body)}`,\n        \"connection: close\",\n      ];\n      for (const [k, v] of Object.entries(extra)) lines.push(`${k}: ${v}`);\n      socket.end(`${lines.join(\"\\r\\n\")}\\r\\n\\r\\n${body}`);\n    };\n    const stub = stubFor(\n      opts.runtime,\n      String(req.headers[\"x-cells-scope\"] ?? \"\"),\n      req.headers[\"x-cells-do-name\"] as string | undefined,\n    );\n    if (!stub) return fail(400, \"malformed cell scope\");\n    const headers = new Headers();\n    for (const [k, v] of Object.entries(req.headers))\n      if (typeof v === \"string\" && !CONTROL.includes(k)) headers.set(k, v);\n    const url = /^https?:\\/\\//.test(req.url ?? \"\")\n      ? (req.url as string)\n      : `http://${req.headers.host ?? \"cell\"}${req.url ?? \"/\"}`;\n    const protocols = req.headers[\"sec-websocket-protocol\"] as string | undefined;\n    let res: Response & { webSocket?: CfWebSocket | null };\n    try {\n      res = await stub.fetch(\n        withUpgrade(\n          new Request(url, { headers }),\n          \"websocket\",\n          protocols ? { \"Sec-WebSocket-Protocol\": protocols } : undefined,\n        ),\n      );\n    } catch (e) {\n      return notOwner(e)\n        ? fail(409, \"stale route\", { \"x-cells-route-error\": \"stale-owner\" })\n        : fail(500, String((e as Error)?.message ?? e));\n    }\n    if (res.status !== 101 || !res.webSocket) return fail(res.status, await res.text());\n    const port = takeClientPort(res.webSocket);\n    const WS = createWebSocketClass(async () => ({\n      port,\n      protocol: res.headers.get(\"Sec-WebSocket-Protocol\") ?? undefined,\n    }));\n    const cell = new WS(\"ws://cell/\") as WebSocket;\n    cell.binaryType = \"arraybuffer\";\n    const pending: (string | ArrayBuffer)[] = [];\n    let open = false;\n    wss.handleUpgrade(req, socket, head, (client) => {\n      cell.onopen = () => {\n        open = true;\n        for (const m of pending.splice(0)) cell.send(m);\n      };\n      client.on(\"message\", (data: Buffer, isBinary: boolean) => {\n        const m = isBinary ? (new Uint8Array(data).buffer as ArrayBuffer) : data.toString();\n        if (open) cell.send(m);\n        else pending.push(m);\n      });\n      cell.onmessage = (ev: MessageEvent) =>\n        client.send(ev.data instanceof ArrayBuffer ? Buffer.from(ev.data) : ev.data);\n      client.on(\"close\", (code: number, reason: Buffer) =>\n        cell.close(\n          code >= 1000 && code < 5000 && code !== 1005 && code !== 1006 ? code : 1000,\n          reason.toString(),\n        ),\n      );\n      cell.onclose = (ev: CloseEvent) =>\n        client.close(\n          ev.code >= 1000 && ev.code !== 1005 && ev.code !== 1006 ? ev.code : 1000,\n          ev.reason,\n        );\n    });\n  });\n\n  const server: Server = createServer(async (req, res) => {\n    if (req.url === \"/peer/probe\" && req.method === \"GET\" && opts.probe) {\n      const denied = verifyPeerRequest(\n        key,\n        opts.node,\n        \"GET\",\n        \"/peer/probe\",\n        req.headers,\n        new Uint8Array(),\n        seen,\n      );\n      if (denied)\n        return reply(res, denied.status, { \"content-type\": \"text/plain\" }, denied.message);\n      try {\n        const answer = await opts.probe(String(req.headers[\"x-cells-probe-challenge\"] ?? \"\"));\n        return reply(res, 200, { \"content-type\": \"application/json\" }, JSON.stringify(answer));\n      } catch (e) {\n        return reply(\n          res,\n          400,\n          { \"content-type\": \"text/plain\" },\n          String((e as Error)?.message ?? e),\n        );\n      }\n    }\n    reply(res, 404, {}, \"not found\");\n  });\n  server.on(\"upgrade\", (req: IncomingMessage, socket: Duplex, head: Buffer) => {\n    const path = req.url ?? \"/\";\n    const refuse = (status: number, message: string, extra: Record<string, string> = {}) => {\n      const lines = [\n        `HTTP/1.1 ${status} ${message}`,\n        `${PEER_HEADERS.version}: ${PROTOCOL}`,\n        \"connection: close\",\n        \"content-length: 0\",\n      ];\n      for (const [k, v] of Object.entries(extra)) lines.push(`${k}: ${v}`);\n      socket.end(`${lines.join(\"\\r\\n\")}\\r\\n\\r\\n`);\n    };\n    if (path !== \"/peer/tunnel\" || req.headers.upgrade !== \"celld-tunnel\")\n      return refuse(404, \"Not Found\");\n    const denied = verifyPeerRequest(\n      key,\n      opts.node,\n      req.method ?? \"GET\",\n      path,\n      req.headers,\n      new Uint8Array(),\n      seen,\n    );\n    if (denied)\n      return refuse(\n        denied.status,\n        denied.message,\n        denied.stale ? { \"x-cells-route-error\": \"stale-owner\" } : {},\n      );\n    if (req.headers[\"x-cells-tunnel-version\"] !== \"5\") return refuse(426, \"Upgrade Required\");\n    const kind = req.headers[\"x-cells-tunnel-kind\"];\n    if (kind !== \"do\" && kind !== \"rpc\") return refuse(400, \"Bad Request\");\n    socket.write(\n      [\n        \"HTTP/1.1 101 Switching Protocols\",\n        \"upgrade: celld-tunnel\",\n        \"connection: upgrade\",\n        \"x-cells-tunnel-version: 5\",\n        `${PEER_HEADERS.version}: ${PROTOCOL}`,\n      ].join(\"\\r\\n\") + \"\\r\\n\\r\\n\",\n    );\n    if (head?.length) socket.unshift(head);\n    inner[kind].emit(\"connection\", socket);\n  });\n  await new Promise<void>((r) => server.listen(opts.port ?? 0, host, () => r()));\n  const port = (server.address() as { port: number }).port;\n  return {\n    addr: `${host}:${port}`,\n    close: () =>\n      new Promise<void>((r) => {\n        server.closeAllConnections?.();\n        for (const s of Object.values(inner)) s.closeAllConnections?.();\n        server.close(() => r());\n      }),\n  };\n}\n\n/**\n * The calling half (celld's node A): open a signed tunnel to the owner node and send one call\n * through it — `fetch` on a `do` tunnel, JS RPC on an `rpc` tunnel (V8-serialized arguments;\n * the reply decoded as celld encodes it, a callee exception rethrown with its properties).\n */\n/** A signed `celld-tunnel` upgrade to the owner node: the raw connection after its 101. */\nasync function openTunnel(\n  key: Uint8Array,\n  source: string,\n  owner: { node: string; addr: string },\n  kind: \"do\" | \"rpc\",\n): Promise<import(\"node:net\").Socket> {\n  const { request } = await import(\"node:http\");\n  const [host, port] = [\n    owner.addr.slice(0, owner.addr.lastIndexOf(\":\")),\n    Number(owner.addr.slice(owner.addr.lastIndexOf(\":\") + 1)),\n  ];\n  const socket = await new Promise<import(\"node:net\").Socket>((resolve, reject) => {\n    const req = request({\n      host,\n      port,\n      path: \"/peer/tunnel\",\n      method: \"GET\",\n      headers: {\n        upgrade: \"celld-tunnel\",\n        connection: \"upgrade\",\n        \"x-cells-tunnel-version\": \"5\",\n        \"x-cells-tunnel-kind\": kind,\n        ...signPeerRequest(key, source, owner.node, \"GET\", \"/peer/tunnel\"),\n      },\n    });\n    req.on(\"upgrade\", (_res, sock) => resolve(sock as import(\"node:net\").Socket));\n    req.on(\"response\", (res) =>\n      reject(\n        Object.assign(new Error(`peer tunnel refused: ${res.statusCode}`), {\n          stale: res.headers[\"x-cells-route-error\"] === \"stale-owner\",\n        }),\n      ),\n    );\n    req.on(\"error\", reject);\n    req.end();\n  });\n  return socket;\n}\n\nasync function tunnelCall(\n  key: Uint8Array,\n  source: string,\n  owner: { node: string; addr: string },\n  kind: \"do\" | \"rpc\",\n  inner: { method: string; path: string; headers: Record<string, string>; body?: Uint8Array },\n): Promise<{ status: number; headers: Record<string, string>; body: Uint8Array }> {\n  const { request } = await import(\"node:http\");\n  const socket = await openTunnel(key, source, owner, kind);\n  try {\n    return await new Promise((resolve, reject) => {\n      const req = request(\n        // no agent: the request runs on the upgraded socket itself\n        {\n          createConnection: () => socket,\n          method: inner.method,\n          path: inner.path,\n          headers: inner.headers,\n        },\n        async (res) => {\n          const chunks: Buffer[] = [];\n          for await (const c of res) chunks.push(c as Buffer);\n          const headers: Record<string, string> = {};\n          for (const [k, v] of Object.entries(res.headers))\n            if (typeof v === \"string\") headers[k] = v;\n          resolve({\n            status: res.statusCode ?? 500,\n            headers,\n            body: new Uint8Array(Buffer.concat(chunks)),\n          });\n        },\n      );\n      req.on(\"error\", reject);\n      req.end(inner.body);\n    });\n  } finally {\n    socket.destroy();\n  }\n}\n\n/**\n * Routing to cells celld nodes own, for CellRuntimeOptions.peers: `ownerOf` reads the cell's\n * own.json, `endpoint` reaches the owner's address from its node record through the tunnel.\n */\nexport function celldPeers(opts: { store: ObjectStore; node: string }) {\n  let key: Promise<Uint8Array> | undefined;\n  const json = async <T>(k: string) => {\n    const o = await opts.store.get(k);\n    return o ? (JSON.parse(new TextDecoder().decode(o.body)) as T) : undefined;\n  };\n  const staleError = (cellKey: string) =>\n    Object.assign(new Error(`${cellKey} is owned by another node`), {\n      name: \"CellOwnedElsewhereError\",\n    });\n  return {\n    async ownerOf(cellKey: string) {\n      const own = await json<{ node: string }>(`cells/${cellKey.replace(\"/\", \":\")}/own.json`);\n      return own?.node && own.node !== opts.node ? own.node : undefined;\n    },\n    link(): never {\n      throw new Error(\"celld owners are reached through endpoint()\");\n    },\n    async endpoint(owner: string, cellKey: string, name: string | undefined) {\n      const lease = await json<{ addr: string; expires_ms: number }>(`nodes/${owner}.json`);\n      if (!lease?.addr || lease.expires_ms <= Date.now()) return undefined;\n      key ??= loadPeerKey(opts.store);\n      const k = await key;\n      const target = { node: owner, addr: lease.addr };\n      const scope = cellKey.replace(\"/\", \":\");\n      const control = (h: Record<string, string>) => ({\n        ...h,\n        \"x-cells-scope\": scope,\n        ...(name !== undefined ? { \"x-cells-do-name\": name } : {}),\n      });\n      // A WebSocket to a cell celld owns: the client handshake crosses a `do` tunnel and `ws`\n      // speaks the frames on it; the caller gets a 101 with a WebSocketPair end bridged to it.\n      const tunnelWebSocket = async (req: Request, url: URL) => {\n        const socket = await openTunnel(k, opts.node, target, \"do\");\n        const { WebSocket: WsClient } = await import(\"ws\");\n        const protocols = req.headers\n          .get(\"sec-websocket-protocol\")\n          ?.split(\",\")\n          .map((p) => p.trim())\n          .filter(Boolean);\n        const remote = new WsClient(`ws://${url.host}${url.pathname}${url.search}`, protocols, {\n          createConnection: () => socket,\n          headers: control({}),\n        });\n        await new Promise<void>((resolve, reject) => {\n          remote.once(\"open\", () => resolve());\n          remote.once(\n            \"unexpected-response\",\n            (_q: unknown, res: { statusCode?: number; headers: Record<string, unknown> }) =>\n              reject(\n                res.headers[\"x-cells-route-error\"] === \"stale-owner\"\n                  ? staleError(cellKey)\n                  : new Error(`WebSocket through the tunnel refused: ${res.statusCode}`),\n              ),\n          );\n          remote.once(\"error\", reject);\n        });\n        const pair = new WebSocketPair();\n        const [client, server] = [pair[0], pair[1]];\n        server.accept();\n        server.addEventListener(\"message\", (e) => remote.send((e as MessageEvent).data));\n        remote.on(\"message\", (d: Buffer, isBinary: boolean) =>\n          server.send(isBinary ? new Uint8Array(d) : d.toString()),\n        );\n        const code = (c: number) => (c >= 1000 && c !== 1005 && c !== 1006 ? c : 1000);\n        server.addEventListener(\"close\", (e) =>\n          remote.close(code((e as CloseEvent).code), (e as CloseEvent).reason),\n        );\n        remote.on(\"close\", (c: number, reason: Buffer) => server.close(code(c), reason.toString()));\n        return new CellsResponse(null, {\n          status: 101,\n          webSocket: client,\n          headers: remote.protocol ? { \"Sec-WebSocket-Protocol\": remote.protocol } : {},\n        }) as Response;\n      };\n      return {\n        async fetch(req: Request) {\n          const url = new URL(req.url);\n          if (req.headers.get(\"upgrade\")?.toLowerCase() === \"websocket\")\n            return tunnelWebSocket(req, url);\n          const headers: Record<string, string> = {};\n          req.headers.forEach((v, h) => {\n            if (!h.startsWith(\"x-cells-\")) headers[h] = v;\n          });\n          headers.host ??= url.host;\n          const body =\n            req.method === \"GET\" || req.method === \"HEAD\"\n              ? undefined\n              : new Uint8Array(await req.arrayBuffer());\n          const r = await tunnelCall(k, opts.node, target, \"do\", {\n            method: req.method,\n            path: url.pathname + url.search,\n            headers: control(headers),\n            body,\n          });\n          if (r.status === 409 && r.headers[\"x-cells-route-error\"] === \"stale-owner\")\n            throw staleError(cellKey);\n          const out = new Headers();\n          for (const [h, v] of Object.entries(r.headers))\n            if (!h.startsWith(\"x-cells-\")) out.set(h, v);\n          return new Response(r.status === 204 || r.status === 304 ? null : (r.body as BodyInit), {\n            status: r.status,\n            headers: out,\n          });\n        },\n        async call(method: string, args: unknown[]) {\n          const body = serialize(toAnotherNode(args));\n          const r = await tunnelCall(k, opts.node, target, \"rpc\", {\n            method: \"POST\",\n            path: \"/\",\n            headers: control({\n              \"x-cells-rpc-method\": method,\n              \"content-type\": \"application/octet-stream\",\n              \"content-length\": String(body.length),\n            }),\n            body,\n          });\n          if (r.status === 409 && r.headers[\"x-cells-route-error\"] === \"stale-owner\")\n            throw staleError(cellKey);\n          if (r.status !== 200)\n            throw new Error(\n              `remote RPC failed with ${r.status}: ${new TextDecoder().decode(r.body)}`,\n            );\n          if (r.body[0] === 0xff) return deserialize(r.body);\n          if (r.body[0] === 0) {\n            const [error, props] = deserialize(r.body.subarray(1)) as [\n              unknown,\n              Record<string, unknown>,\n            ];\n            if (error instanceof Error) Object.assign(error, props, { remote: true });\n            throw error;\n          }\n          throw new Error(\"RPC stubs cannot cross from celld to cellb\");\n        },\n      };\n    },\n  };\n}\n"]}

package/dist/ports.d.ts

@@ -0,0 +1,183 @@
+/**
+ * Ports: the only things that differ between browser and server hosts.
+ * Everything in `core/` depends on these interfaces and nothing else.
+ */
+import type { ObjectStore } from "./bucket/object-store.js";
+/** Result of one SQL statement, in array-of-arrays form (cheap to copy across ports). */
+export interface SqlResult {
+    columnNames: string[];
+    rows: unknown[][];
+    rowsWritten: number;
+}
+/**
+ * SYNCHRONOUS SQLite driver, one per cell.
+ * Browser: SQLite WASM + opfs-sahpool VFS inside a dedicated Worker (P04).
+ * Server: node:sqlite DatabaseSync / better-sqlite3 / bun:sqlite.
+ */
+export interface SyncSqlDriver {
+    /** Executes one statement (or a param-less script, returning the last statement's result). */
+    exec(sql: string, params: unknown[]): SqlResult;
+    /** Size of the database in bytes (ctx.storage.sql.databaseSize). */
+    databaseSize(): number;
+    /**
+     * Whether a transaction is open (SQLite's `sqlite3_get_autocommit() == 0`): after a failed
+     * statement, tells whether SQLite rolled the transaction back by itself (I/O errors, a full
+     * disk, out of memory). Optional; without it the storage asks SQLite with a statement.
+     */
+    inTransaction?(): boolean;
+    close(): void;
+    /** Loads a named SQLite extension (e.g. "sqlite_vec" for celld's `sqlite_vec` flag). */
+    loadExtension(name: string): void;
+    /**
+     * Change capture for transaction logs (SQLite session extension): `captureStart()` at
+     * BEGIN, `captureTake()` after COMMIT returns the transaction's changeset (empty if none),
+     * `applyChangeset()` replays one. `captureCoversRowidTables` is false when tables without
+     * a PRIMARY KEY are invisible to the session (node:sqlite has no ROWID session option).
+     */
+    captureStart?(): void;
+    captureTake?(): Uint8Array;
+    captureDiscard?(): void;
+    applyChangeset?(changeset: Uint8Array): void;
+    readonly captureCoversRowidTables?: boolean;
+    /** The database file page for page (page-level logs); defaults to image(). */
+    pageImage?(): Uint8Array;
+    /** Pages written since the previous call, when the driver can hook its file (SQLite WASM). */
+    takeDirtyPages(): {
+        pageSize: number;
+        pageCount: number;
+        pages: Map<number, Uint8Array>;
+    } | undefined;
+    discardDirtyPages?(): void;
+    /** Consistent image of the whole database (no transaction may be open). Needed for backups. */
+    image?(): Uint8Array;
+    /** Replaces the whole database with an image produced by `image()`. Needed for restores. */
+    restore?(image: Uint8Array): void;
+}
+/**
+ * Lease port: per-cell ownership, at most one live holder per cell key. `epoch` is a
+ * monotonically increasing fencing token: every durable write of the holder must carry
+ * it, so a paused ex-holder cannot overwrite its successor. (Browser shards are not
+ * leased through this port: a shard worker holds the shard's Web Lock.)
+ */
+export interface LeaseHandle {
+    readonly name: string;
+    readonly epoch: number;
+    /** Aborted when the holder must stop serving (renewal failed, deadline passed, fenced). */
+    readonly lost: AbortSignal;
+    release(): Promise<void>;
+}
+export interface Lease {
+    tryAcquire(name: string): Promise<LeaseHandle | undefined>;
+}
+export interface Clock {
+    now(): number;
+    setTimeout(fn: () => void, ms: number): unknown;
+    clearTimeout(handle: unknown): void;
+}
+export declare const systemClock: Clock;
+/** Opens (or creates) the SQLite database of a cell. */
+export type OpenCellSql = ((cellKey: string) => SyncSqlDriver) & {
+    /**
+     * Opening is synchronous, but a store may need time to make room (an OPFS pool grows
+     * asynchronously). Called before a cell's first event: a promise to await before opening
+     * `cellKey`, or undefined when it can open now. The runtime then opens it.
+     */
+    room?(cellKey: string): Promise<void> | undefined;
+};
+/**
+ * Durability port: called after every local commit. The output gate holds
+ * outgoing responses until the returned promise resolves. P06 plugs
+ * replication to a FilesApi (OPFS / S3) here; the default resolves at once.
+ */
+export interface CellDurability {
+    committed(cellKey: string, info: {
+        seq: number;
+        changes?: CommitChanges;
+        /** The committed database image (or a thunk producing it on demand). */
+        image?: Uint8Array | (() => Uint8Array | undefined | Promise<Uint8Array | undefined>);
+        /** The transaction's changed pages, when the driver hooks its file. */
+        pages?: {
+            pageSize: number;
+            pageCount: number;
+            pages: Map<number, Uint8Array>;
+        };
+        epoch?: number;
+    }): Promise<void>;
+    /**
+     * celld's alarm wake index: after a commit that changed the alarm, its publication
+     * (writer epoch, sequence, due time) — written once the commit is durable.
+     */
+    publishWake?(cellKey: string, wake: {
+        epoch: number;
+        sequence: number;
+        at: number | null;
+    }): Promise<void>;
+    /** Alarms published in the shared wake index (by any node), so this node can fire them. */
+    wakes?(): Promise<{
+        cellKey: string;
+        className: string;
+        at: number;
+    }[]>;
+    /** Asks the runtime for the whole database image after each commit (page-level logs: LTX). */
+    readonly capturePages?: boolean;
+    /** Asks the runtime to capture each transaction's changes (transaction-log durability). */
+    readonly captureChanges?: boolean;
+}
+/**
+ * One committed transaction, as a log segment: schema statements, the row changes (a
+ * SQLite changeset), and — only for drivers whose capture misses tables without a PRIMARY
+ * KEY — the write statements on such tables. `logSeq` is stored in the database itself
+ * (`_cf_METADATA`), so a snapshot knows which segments it already contains.
+ */
+export interface CommitChanges {
+    logSeq: number;
+    /** Fencing epoch of the owner that committed it (from the cell's lease), if owned. */
+    epoch?: number;
+    ddl: string[];
+    changeset: Uint8Array;
+    statements: [string, unknown[]][];
+}
+/** Serialization of KV values (CF uses V8 serialization; swap for webrun-msgpack later). */
+export interface ValueCodec {
+    encode(value: unknown): Uint8Array;
+    decode(bytes: Uint8Array): unknown;
+}
+export interface BackupInfo {
+    /** Local commit counter of the cell at snapshot time (monotonic per live instance). */
+    seq: number;
+    takenAt: number;
+    reason: "interval" | "manual" | "close";
+    /** Last transaction-log segment contained in the image (0 when no log is kept). */
+    logSeq?: number;
+}
+/**
+ * Durability by periodic backup: `save` receives a consistent SQLite image of a
+ * cell whenever it changed since the last successful save (every `intervalMs`,
+ * on `runtime.backupNow()` and on `runtime.close()`). `load` restores a cell
+ * whose local database is empty, and under a cell lease replaces the local
+ * database on every acquisition. RPO = interval: writes after the last
+ * successful save can be lost with the local store (e.g. an evicted OPFS).
+ */
+export interface CellBackup {
+    save(cellKey: string, image: Uint8Array, info: BackupInfo): Promise<void>;
+    load?(cellKey: string): Promise<Uint8Array | undefined>;
+    /** Transaction-log segments after `afterLogSeq`, in order (replayed after `load`). */
+    replay?(cellKey: string, afterLogSeq: number): AsyncIterable<CommitChanges>;
+    intervalMs?: number;
+    onError?(cellKey: string, error: unknown): void;
+}
+/**
+ * Where a runtime keeps its cells beyond the local SQLite files, as one bundle: a celld fleet
+ * bucket (`celldBucket`) or a log on a FilesApi (`filesApiChangeLog`, `filesApiLtxLog`) fills
+ * the members it has. The runtime owns it: `runtime.close()` takes the final backups first,
+ * then calls `close()`.
+ */
+export interface CellStorage {
+    durability?: CellDurability;
+    backup?: CellBackup;
+    /** Per-cell ownership: each object takes this lease before it opens (fencing epoch → log). */
+    ownership?: Lease;
+    /** Where R2 bindings keep their objects (a celld fleet bucket, in celld's layout). */
+    objects?: ObjectStore;
+    close?(): Promise<void>;
+}

package/dist/ports.js

@@ -0,0 +1,10 @@
+/**
+ * Ports: the only things that differ between browser and server hosts.
+ * Everything in `core/` depends on these interfaces and nothing else.
+ */
+export const systemClock = {
+    now: () => Date.now(),
+    setTimeout: (fn, ms) => setTimeout(fn, ms),
+    clearTimeout: (h) => clearTimeout(h),
+};
+//# sourceMappingURL=ports.js.map

package/dist/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8EH,MAAM,CAAC,MAAM,WAAW,GAAU;IAChC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAkC,CAAC;CACtE,CAAC","sourcesContent":["/**\n * Ports: the only things that differ between browser and server hosts.\n * Everything in `core/` depends on these interfaces and nothing else.\n */\n\nimport type { ObjectStore } from \"./bucket/object-store.js\";\n\n/** Result of one SQL statement, in array-of-arrays form (cheap to copy across ports). */\nexport interface SqlResult {\n  columnNames: string[];\n  rows: unknown[][];\n  rowsWritten: number;\n}\n\n/**\n * SYNCHRONOUS SQLite driver, one per cell.\n * Browser: SQLite WASM + opfs-sahpool VFS inside a dedicated Worker (P04).\n * Server: node:sqlite DatabaseSync / better-sqlite3 / bun:sqlite.\n */\nexport interface SyncSqlDriver {\n  /** Executes one statement (or a param-less script, returning the last statement's result). */\n  exec(sql: string, params: unknown[]): SqlResult;\n  /** Size of the database in bytes (ctx.storage.sql.databaseSize). */\n  databaseSize(): number;\n  /**\n   * Whether a transaction is open (SQLite's `sqlite3_get_autocommit() == 0`): after a failed\n   * statement, tells whether SQLite rolled the transaction back by itself (I/O errors, a full\n   * disk, out of memory). Optional; without it the storage asks SQLite with a statement.\n   */\n  inTransaction?(): boolean;\n  close(): void;\n  /** Loads a named SQLite extension (e.g. \"sqlite_vec\" for celld's `sqlite_vec` flag). */\n  loadExtension(name: string): void;\n  /**\n   * Change capture for transaction logs (SQLite session extension): `captureStart()` at\n   * BEGIN, `captureTake()` after COMMIT returns the transaction's changeset (empty if none),\n   * `applyChangeset()` replays one. `captureCoversRowidTables` is false when tables without\n   * a PRIMARY KEY are invisible to the session (node:sqlite has no ROWID session option).\n   */\n  captureStart?(): void;\n  captureTake?(): Uint8Array;\n  captureDiscard?(): void;\n  applyChangeset?(changeset: Uint8Array): void;\n  readonly captureCoversRowidTables?: boolean;\n  /** The database file page for page (page-level logs); defaults to image(). */\n  pageImage?(): Uint8Array;\n  /** Pages written since the previous call, when the driver can hook its file (SQLite WASM). */\n  takeDirtyPages():\n    | { pageSize: number; pageCount: number; pages: Map<number, Uint8Array> }\n    | undefined;\n  discardDirtyPages?(): void;\n  /** Consistent image of the whole database (no transaction may be open). Needed for backups. */\n  image?(): Uint8Array;\n  /** Replaces the whole database with an image produced by `image()`. Needed for restores. */\n  restore?(image: Uint8Array): void;\n}\n\n/**\n * Lease port: per-cell ownership, at most one live holder per cell key. `epoch` is a\n * monotonically increasing fencing token: every durable write of the holder must carry\n * it, so a paused ex-holder cannot overwrite its successor. (Browser shards are not\n * leased through this port: a shard worker holds the shard's Web Lock.)\n */\nexport interface LeaseHandle {\n  readonly name: string;\n  readonly epoch: number;\n  /** Aborted when the holder must stop serving (renewal failed, deadline passed, fenced). */\n  readonly lost: AbortSignal;\n  release(): Promise<void>;\n}\n\nexport interface Lease {\n  tryAcquire(name: string): Promise<LeaseHandle | undefined>;\n}\n\nexport interface Clock {\n  now(): number;\n  setTimeout(fn: () => void, ms: number): unknown;\n  clearTimeout(handle: unknown): void;\n}\n\nexport const systemClock: Clock = {\n  now: () => Date.now(),\n  setTimeout: (fn, ms) => setTimeout(fn, ms),\n  clearTimeout: (h) => clearTimeout(h as ReturnType<typeof setTimeout>),\n};\n\n/** Opens (or creates) the SQLite database of a cell. */\nexport type OpenCellSql = ((cellKey: string) => SyncSqlDriver) & {\n  /**\n   * Opening is synchronous, but a store may need time to make room (an OPFS pool grows\n   * asynchronously). Called before a cell's first event: a promise to await before opening\n   * `cellKey`, or undefined when it can open now. The runtime then opens it.\n   */\n  room?(cellKey: string): Promise<void> | undefined;\n};\n\n/**\n * Durability port: called after every local commit. The output gate holds\n * outgoing responses until the returned promise resolves. P06 plugs\n * replication to a FilesApi (OPFS / S3) here; the default resolves at once.\n */\nexport interface CellDurability {\n  committed(\n    cellKey: string,\n    info: {\n      seq: number;\n      changes?: CommitChanges;\n      /** The committed database image (or a thunk producing it on demand). */\n      image?: Uint8Array | (() => Uint8Array | undefined | Promise<Uint8Array | undefined>);\n      /** The transaction's changed pages, when the driver hooks its file. */\n      pages?: { pageSize: number; pageCount: number; pages: Map<number, Uint8Array> };\n      epoch?: number;\n    },\n  ): Promise<void>;\n  /**\n   * celld's alarm wake index: after a commit that changed the alarm, its publication\n   * (writer epoch, sequence, due time) — written once the commit is durable.\n   */\n  publishWake?(\n    cellKey: string,\n    wake: { epoch: number; sequence: number; at: number | null },\n  ): Promise<void>;\n  /** Alarms published in the shared wake index (by any node), so this node can fire them. */\n  wakes?(): Promise<{ cellKey: string; className: string; at: number }[]>;\n  /** Asks the runtime for the whole database image after each commit (page-level logs: LTX). */\n  readonly capturePages?: boolean;\n  /** Asks the runtime to capture each transaction's changes (transaction-log durability). */\n  readonly captureChanges?: boolean;\n}\n\n/**\n * One committed transaction, as a log segment: schema statements, the row changes (a\n * SQLite changeset), and — only for drivers whose capture misses tables without a PRIMARY\n * KEY — the write statements on such tables. `logSeq` is stored in the database itself\n * (`_cf_METADATA`), so a snapshot knows which segments it already contains.\n */\nexport interface CommitChanges {\n  logSeq: number;\n  /** Fencing epoch of the owner that committed it (from the cell's lease), if owned. */\n  epoch?: number;\n  ddl: string[];\n  changeset: Uint8Array;\n  statements: [string, unknown[]][];\n}\n\n/** Serialization of KV values (CF uses V8 serialization; swap for webrun-msgpack later). */\nexport interface ValueCodec {\n  encode(value: unknown): Uint8Array;\n  decode(bytes: Uint8Array): unknown;\n}\n\nexport interface BackupInfo {\n  /** Local commit counter of the cell at snapshot time (monotonic per live instance). */\n  seq: number;\n  takenAt: number;\n  reason: \"interval\" | \"manual\" | \"close\";\n  /** Last transaction-log segment contained in the image (0 when no log is kept). */\n  logSeq?: number;\n}\n\n/**\n * Durability by periodic backup: `save` receives a consistent SQLite image of a\n * cell whenever it changed since the last successful save (every `intervalMs`,\n * on `runtime.backupNow()` and on `runtime.close()`). `load` restores a cell\n * whose local database is empty, and under a cell lease replaces the local\n * database on every acquisition. RPO = interval: writes after the last\n * successful save can be lost with the local store (e.g. an evicted OPFS).\n */\nexport interface CellBackup {\n  save(cellKey: string, image: Uint8Array, info: BackupInfo): Promise<void>;\n  load?(cellKey: string): Promise<Uint8Array | undefined>;\n  /** Transaction-log segments after `afterLogSeq`, in order (replayed after `load`). */\n  replay?(cellKey: string, afterLogSeq: number): AsyncIterable<CommitChanges>;\n  intervalMs?: number;\n  onError?(cellKey: string, error: unknown): void;\n}\n\n/**\n * Where a runtime keeps its cells beyond the local SQLite files, as one bundle: a celld fleet\n * bucket (`celldBucket`) or a log on a FilesApi (`filesApiChangeLog`, `filesApiLtxLog`) fills\n * the members it has. The runtime owns it: `runtime.close()` takes the final backups first,\n * then calls `close()`.\n */\nexport interface CellStorage {\n  durability?: CellDurability;\n  backup?: CellBackup;\n  /** Per-cell ownership: each object takes this lease before it opens (fencing epoch → log). */\n  ownership?: Lease;\n  /** Where R2 bindings keep their objects (a celld fleet bucket, in celld's layout). */\n  objects?: ObjectStore;\n  close?(): Promise<void>;\n}\n"]}

package/dist/project/browser-bundle.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Node side of a browser-hosted project: bundles Worker code for a browser realm, for
+ * `browserProjectRuntime({ code: { bundle } })`. The bundle reads `cloudflare:workers` and the
+ * Workers globals (`Response` with status 101, `WebSocketPair`) from what that runtime installs;
+ * with nodejs_compat, `node:*` modules (and their bare names) become browser polyfills.
+ */
+/** Bundles the Worker module at `entry` into one ES module for `browserProjectRuntime`. */
+export declare function bundleWorkerForBrowser(entry: string, opts?: {
+    nodeCompat?: boolean;
+    /**
+     * Lower `await` to generators (default: with `nodeCompat`), so that the node:async_hooks
+     * polyfill carries AsyncLocalStorage stores through it. `false` only for browsers with TC39
+     * AsyncContext, whose engine carries them through native awaits; a lowered bundle runs there
+     * too.
+     */
+    lowerAwait?: boolean;
+}): Promise<string>;

package/dist/project/browser-bundle.js

@@ -0,0 +1,125 @@
+/**
+ * Node side of a browser-hosted project: bundles Worker code for a browser realm, for
+ * `browserProjectRuntime({ code: { bundle } })`. The bundle reads `cloudflare:workers` and the
+ * Workers globals (`Response` with status 101, `WebSocketPair`) from what that runtime installs;
+ * with nodejs_compat, `node:*` modules (and their bare names) become browser polyfills.
+ */
+import { builtinModules, createRequire } from "node:module";
+import { resolve } from "node:path";
+import { build } from "esbuild";
+import { NODE_POLYFILL_FILES, NODE_POLYFILL_PACKAGES } from "../node-compat/modules.js";
+import { PROJECT_WORKERS_MODULE_SHIM } from "./browser-modules.js";
+import { lowerAwait } from "./lower-await.js";
+import { ownModule } from "./own-module.js";
+import { SCHEDULER_EXPRESSION } from "./scheduler.js";
+import { WORKERS_GLOBAL_NAMES } from "./workers-global-names.js";
+const pkg = resolve(import.meta.dirname, "../..");
+const requireFromPkg = createRequire(resolve(pkg, "package.json"));
+/**
+ * A Node.js module with no browser polyfill, as an ES module: every export the module has on
+ * this Node.js (the bundler runs on it) is a function that throws when called (a class to extend
+ * too), and the default export answers any member the same way.
+ */
+function nodeStub(name) {
+    let names = [];
+    try {
+        names = Object.keys(requireFromPkg(name)).filter((n) => n !== "default");
+    }
+    catch {
+        // not a module of this Node.js: the default export only
+    }
+    const what = JSON.stringify(name);
+    return [
+        `const fail = (key) => { throw new Error(${what} + "." + key + " is not available in browsers (nodejs_compat)"); };`,
+        "const stub = (key) => function () { fail(key); };",
+        ...names.map((n, i) => `const s${i} = stub(${JSON.stringify(n)}); export { s${i} as ${JSON.stringify(n)} };`),
+        "export default new Proxy(Object.create(null), {",
+        "  get(target, key) {",
+        '    if (typeof key === "symbol" || key === "then" || key === "__esModule") return undefined;',
+        "    if (!Object.hasOwn(target, key)) target[key] = stub(String(key));",
+        "    return target[key];",
+        "  },",
+        "});",
+    ].join("\n");
+}
+const GLOBALS_SHIM = `${WORKERS_GLOBAL_NAMES.map((n) => `export const ${n} = globalThis.__cellsGlobals.${n};`).join(" ")} export const scheduler = ${SCHEDULER_EXPRESSION};`;
+/** A bare Node.js built-in name ("path", "fs/promises"): nodejs_compat takes it as `node:…`. */
+const bareBuiltin = new Set(builtinModules.filter((m) => !m.startsWith("_") && !m.includes(":")));
+/** Bundles the Worker module at `entry` into one ES module for `browserProjectRuntime`. */
+export async function bundleWorkerForBrowser(entry, opts = {}) {
+    const lower = opts.lowerAwait ?? opts.nodeCompat;
+    const options = (esbuildLowers) => ({
+        entryPoints: [entry],
+        write: false,
+        bundle: true,
+        format: "esm",
+        platform: "browser",
+        target: "es2022",
+        // Function names are observable (the npm assert polyfill reports its caller's name as the
+        // operator); bundling must not rename them.
+        keepNames: true,
+        // nodejs_compat: `await` lowered to generators, so that each one resumes through
+        // Promise.prototype.then and carries its AsyncLocalStorage stores (node-compat/async_hooks.ts).
+        ...(esbuildLowers
+            ? { supported: { "async-await": false, "async-generator": false, "for-await": false } }
+            : {}),
+        logLevel: "silent",
+        inject: [
+            "cells:globals",
+            ...(opts.nodeCompat ? [ownModule(import.meta.dirname, "../node-compat/globals")] : []),
+        ],
+        plugins: [
+            {
+                name: "cells-browser",
+                setup(b) {
+                    // nodejs_compat: node:* → browser polyfills, bundled in.
+                    if (opts.nodeCompat)
+                        b.onResolve({ filter: /^(node:)?[a-z_/]+$/ }, (a) => {
+                            const name = a.path.startsWith("node:") ? a.path : `node:${a.path}`;
+                            if (!a.path.startsWith("node:") && !bareBuiltin.has(a.path))
+                                return undefined;
+                            const file = NODE_POLYFILL_FILES[name];
+                            if (file)
+                                return { path: ownModule(import.meta.dirname, `../node-compat/${file}`) };
+                            const polyfill = NODE_POLYFILL_PACKAGES[name];
+                            // "buffer/" (trailing slash): the npm package, not the Node.js built-in of that name
+                            if (polyfill)
+                                return { path: requireFromPkg.resolve(`${polyfill}/`) };
+                            // No browser polyfill: a stub that loads and throws when used, as wrangler's
+                            // nodejs_compat stubs do on Cloudflare (libraries import such modules in code
+                            // paths a Worker never takes, e.g. a CLI's login).
+                            return { path: name, namespace: "cells-node-stub" };
+                        });
+                    b.onLoad({ filter: /.*/, namespace: "cells-node-stub" }, (a) => ({
+                        contents: nodeStub(a.path),
+                        loader: "js",
+                    }));
+                    b.onResolve({ filter: /^cloudflare:email$/ }, () => ({
+                        path: ownModule(import.meta.dirname, "cloudflare-email"),
+                    }));
+                    b.onResolve({ filter: /^cloudflare:workers$|^cells:globals$/ }, (a) => ({
+                        path: a.path,
+                        namespace: "cells",
+                    }));
+                    b.onLoad({ filter: /.*/, namespace: "cells" }, (a) => ({
+                        contents: a.path === "cloudflare:workers" ? PROJECT_WORKERS_MODULE_SHIM : GLOBALS_SHIM,
+                        loader: "js",
+                    }));
+                },
+            },
+        ],
+    });
+    try {
+        return (await build(options(!!lower))).outputFiles[0].text;
+    }
+    catch (err) {
+        // esbuild cannot lower a top-level await, and refuses to keep one while it lowers the rest
+        // (Astro's builds have one: `await import(…)` of the live content config). Such code is
+        // bundled as it is, then lowered by lowerAwait, which leaves top-level awaits native: module
+        // evaluation runs in no request's context, so they carry no store anyway.
+        if (!lower || !/Top-level await is not available/.test(String(err)))
+            throw err;
+        return lowerAwait((await build(options(false))).outputFiles[0].text);
+    }
+}
+//# sourceMappingURL=browser-bundle.js.map

package/dist/project/browser-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-bundle.js","sourceRoot":"","sources":["../../src/project/browser-bundle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAqB,KAAK,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAClD,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;AAEnE;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,2CAA2C,IAAI,qEAAqE;QACpH,mDAAmD;QACnD,GAAG,KAAK,CAAC,GAAG,CACV,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,UAAU,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CACxF;QACD,iDAAiD;QACjD,sBAAsB;QACtB,8FAA8F;QAC9F,uEAAuE;QACvE,yBAAyB;QACzB,MAAM;QACN,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,6BAA6B,oBAAoB,GAAG,CAAC;AAE7K,gGAAgG;AAChG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAElG,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,IAAI,GASA,EAAE;IAEN,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,aAAsB,EAAmC,EAAE,CAAC,CAAC;QAC5E,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,0FAA0F;QAC1F,4CAA4C;QAC5C,SAAS,EAAE,IAAI;QACf,iFAAiF;QACjF,gGAAgG;QAChG,GAAG,CAAC,aAAa;YACf,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YACvF,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE;YACN,eAAe;YACf,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF;QACD,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,eAAe;gBACrB,KAAK,CAAC,CAAC;oBACL,yDAAyD;oBACzD,IAAI,IAAI,CAAC,UAAU;wBACjB,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;4BAClD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;4BACpE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gCAAE,OAAO,SAAS,CAAC;4BAC9E,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;4BACvC,IAAI,IAAI;gCAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,IAAI,EAAE,CAAC,EAAE,CAAC;4BACpF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;4BAC9C,qFAAqF;4BACrF,IAAI,QAAQ;gCAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;4BACtE,6EAA6E;4BAC7E,8EAA8E;4BAC9E,mDAAmD;4BACnD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;wBACtD,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC/D,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;wBAC1B,MAAM,EAAE,IAAI;qBACb,CAAC,CAAC,CAAC;oBACJ,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBACnD,IAAI,EAAE,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC;qBACzD,CAAC,CAAC,CAAC;oBACJ,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACtE,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,SAAS,EAAE,OAAO;qBACnB,CAAC,CAAC,CAAC;oBACJ,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrD,QAAQ,EAAE,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,YAAY;wBACtF,MAAM,EAAE,IAAI;qBACb,CAAC,CAAC,CAAC;gBACN,CAAC;aACF;SACF;KACF,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2FAA2F;QAC3F,wFAAwF;QACxF,6FAA6F;QAC7F,0EAA0E;QAC1E,IAAI,CAAC,KAAK,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,GAAG,CAAC;QAC/E,OAAO,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;AACH,CAAC","sourcesContent":["/**\n * Node side of a browser-hosted project: bundles Worker code for a browser realm, for\n * `browserProjectRuntime({ code: { bundle } })`. The bundle reads `cloudflare:workers` and the\n * Workers globals (`Response` with status 101, `WebSocketPair`) from what that runtime installs;\n * with nodejs_compat, `node:*` modules (and their bare names) become browser polyfills.\n */\n\nimport { builtinModules, createRequire } from \"node:module\";\nimport { resolve } from \"node:path\";\nimport { type BuildOptions, build } from \"esbuild\";\nimport { NODE_POLYFILL_FILES, NODE_POLYFILL_PACKAGES } from \"../node-compat/modules.js\";\nimport { PROJECT_WORKERS_MODULE_SHIM } from \"./browser-modules.js\";\nimport { lowerAwait } from \"./lower-await.js\";\nimport { ownModule } from \"./own-module.js\";\nimport { SCHEDULER_EXPRESSION } from \"./scheduler.js\";\nimport { WORKERS_GLOBAL_NAMES } from \"./workers-global-names.js\";\n\nconst pkg = resolve(import.meta.dirname, \"../..\");\nconst requireFromPkg = createRequire(resolve(pkg, \"package.json\"));\n\n/**\n * A Node.js module with no browser polyfill, as an ES module: every export the module has on\n * this Node.js (the bundler runs on it) is a function that throws when called (a class to extend\n * too), and the default export answers any member the same way.\n */\nfunction nodeStub(name: string): string {\n  let names: string[] = [];\n  try {\n    names = Object.keys(requireFromPkg(name)).filter((n) => n !== \"default\");\n  } catch {\n    // not a module of this Node.js: the default export only\n  }\n  const what = JSON.stringify(name);\n  return [\n    `const fail = (key) => { throw new Error(${what} + \".\" + key + \" is not available in browsers (nodejs_compat)\"); };`,\n    \"const stub = (key) => function () { fail(key); };\",\n    ...names.map(\n      (n, i) =>\n        `const s${i} = stub(${JSON.stringify(n)}); export { s${i} as ${JSON.stringify(n)} };`,\n    ),\n    \"export default new Proxy(Object.create(null), {\",\n    \"  get(target, key) {\",\n    '    if (typeof key === \"symbol\" || key === \"then\" || key === \"__esModule\") return undefined;',\n    \"    if (!Object.hasOwn(target, key)) target[key] = stub(String(key));\",\n    \"    return target[key];\",\n    \"  },\",\n    \"});\",\n  ].join(\"\\n\");\n}\n\nconst GLOBALS_SHIM = `${WORKERS_GLOBAL_NAMES.map((n) => `export const ${n} = globalThis.__cellsGlobals.${n};`).join(\" \")} export const scheduler = ${SCHEDULER_EXPRESSION};`;\n\n/** A bare Node.js built-in name (\"path\", \"fs/promises\"): nodejs_compat takes it as `node:…`. */\nconst bareBuiltin = new Set(builtinModules.filter((m) => !m.startsWith(\"_\") && !m.includes(\":\")));\n\n/** Bundles the Worker module at `entry` into one ES module for `browserProjectRuntime`. */\nexport async function bundleWorkerForBrowser(\n  entry: string,\n  opts: {\n    nodeCompat?: boolean;\n    /**\n     * Lower `await` to generators (default: with `nodeCompat`), so that the node:async_hooks\n     * polyfill carries AsyncLocalStorage stores through it. `false` only for browsers with TC39\n     * AsyncContext, whose engine carries them through native awaits; a lowered bundle runs there\n     * too.\n     */\n    lowerAwait?: boolean;\n  } = {},\n): Promise<string> {\n  const lower = opts.lowerAwait ?? opts.nodeCompat;\n  const options = (esbuildLowers: boolean): BuildOptions & { write: false } => ({\n    entryPoints: [entry],\n    write: false,\n    bundle: true,\n    format: \"esm\",\n    platform: \"browser\",\n    target: \"es2022\",\n    // Function names are observable (the npm assert polyfill reports its caller's name as the\n    // operator); bundling must not rename them.\n    keepNames: true,\n    // nodejs_compat: `await` lowered to generators, so that each one resumes through\n    // Promise.prototype.then and carries its AsyncLocalStorage stores (node-compat/async_hooks.ts).\n    ...(esbuildLowers\n      ? { supported: { \"async-await\": false, \"async-generator\": false, \"for-await\": false } }\n      : {}),\n    logLevel: \"silent\",\n    inject: [\n      \"cells:globals\",\n      ...(opts.nodeCompat ? [ownModule(import.meta.dirname, \"../node-compat/globals\")] : []),\n    ],\n    plugins: [\n      {\n        name: \"cells-browser\",\n        setup(b) {\n          // nodejs_compat: node:* → browser polyfills, bundled in.\n          if (opts.nodeCompat)\n            b.onResolve({ filter: /^(node:)?[a-z_/]+$/ }, (a) => {\n              const name = a.path.startsWith(\"node:\") ? a.path : `node:${a.path}`;\n              if (!a.path.startsWith(\"node:\") && !bareBuiltin.has(a.path)) return undefined;\n              const file = NODE_POLYFILL_FILES[name];\n              if (file) return { path: ownModule(import.meta.dirname, `../node-compat/${file}`) };\n              const polyfill = NODE_POLYFILL_PACKAGES[name];\n              // \"buffer/\" (trailing slash): the npm package, not the Node.js built-in of that name\n              if (polyfill) return { path: requireFromPkg.resolve(`${polyfill}/`) };\n              // No browser polyfill: a stub that loads and throws when used, as wrangler's\n              // nodejs_compat stubs do on Cloudflare (libraries import such modules in code\n              // paths a Worker never takes, e.g. a CLI's login).\n              return { path: name, namespace: \"cells-node-stub\" };\n            });\n          b.onLoad({ filter: /.*/, namespace: \"cells-node-stub\" }, (a) => ({\n            contents: nodeStub(a.path),\n            loader: \"js\",\n          }));\n          b.onResolve({ filter: /^cloudflare:email$/ }, () => ({\n            path: ownModule(import.meta.dirname, \"cloudflare-email\"),\n          }));\n          b.onResolve({ filter: /^cloudflare:workers$|^cells:globals$/ }, (a) => ({\n            path: a.path,\n            namespace: \"cells\",\n          }));\n          b.onLoad({ filter: /.*/, namespace: \"cells\" }, (a) => ({\n            contents: a.path === \"cloudflare:workers\" ? PROJECT_WORKERS_MODULE_SHIM : GLOBALS_SHIM,\n            loader: \"js\",\n          }));\n        },\n      },\n    ],\n  });\n  try {\n    return (await build(options(!!lower))).outputFiles[0].text;\n  } catch (err) {\n    // esbuild cannot lower a top-level await, and refuses to keep one while it lowers the rest\n    // (Astro's builds have one: `await import(…)` of the live content config). Such code is\n    // bundled as it is, then lowered by lowerAwait, which leaves top-level awaits native: module\n    // evaluation runs in no request's context, so they carry no store anyway.\n    if (!lower || !/Top-level await is not available/.test(String(err))) throw err;\n    return lowerAwait((await build(options(false))).outputFiles[0].text);\n  }\n}\n"]}

package/dist/project/browser-cookies.d.ts

@@ -0,0 +1,12 @@
+/** Headers for an ingress request: the request's own, plus the cookies its URL would carry. */
+export declare function withPageCookies(scope: unknown, req: Request): Promise<Headers>;
+/** One `Set-Cookie` value as Cookie Store options; `expires: 0` deletes. */
+export declare function parseSetCookie(value: string, now?: number): {
+    name: string;
+    value: string;
+    path?: string;
+    expires?: number;
+    sameSite?: "strict" | "lax" | "none";
+};
+/** Stores the Worker's tunneled Set-Cookie values and returns the response without them. */
+export declare function applyWorkerCookies(scope: unknown, res: Response): Promise<Response>;

package/dist/project/browser-cookies.js

@@ -0,0 +1,90 @@
+/**
+ * Cookies for Workers served through a ServiceWorker. A browser hands a ServiceWorker no
+ * `Cookie` header and ignores `Set-Cookie` on the responses it builds, so the router does what
+ * the browser's network stack would: it sends the page's cookies to the Worker under
+ * `x-cellb-cookie` (an ingress that carries it gets the Worker's `Set-Cookie` values back under
+ * `x-cellb-set-cookie`, cells-http.ts), and stores those through the Cookie Store API.
+ *
+ * What differs from a server's cookies: they are written by script, so `HttpOnly` cannot be set
+ * and they are readable by the page's own scripts; `Domain` is ignored (the origin's host); and
+ * every cookie is stored with `Path=/` and sent with every request. Chromium lets a
+ * ServiceWorker read cookies only for its default URL (`getAll({ url })` throws "URL must be
+ * within Service Worker scope" for any URL), so a cookie scoped to `/_emdash/` could not be read
+ * back at all.
+ */
+import { H } from "../transport/cells-link.js";
+const storeOf = (scope) => scope.cookieStore;
+/** Headers for an ingress request: the request's own, plus the cookies its URL would carry. */
+export async function withPageCookies(scope, req) {
+    const headers = new Headers(req.headers);
+    const store = storeOf(scope);
+    if (!store)
+        return headers; // no Cookie Store API: no cookies either way
+    const cookies = await store.getAll().catch(() => []);
+    headers.set(H.cookie, cookies.map((c) => `${c.name}=${c.value}`).join("; "));
+    return headers;
+}
+/** One `Set-Cookie` value as Cookie Store options; `expires: 0` deletes. */
+export function parseSetCookie(value, now = Date.now()) {
+    const [pair, ...attrs] = value.split(";");
+    const eq = pair.indexOf("=");
+    const cookie = {
+        name: (eq < 0 ? "" : pair.slice(0, eq)).trim(),
+        value: (eq < 0 ? pair : pair.slice(eq + 1)).trim(),
+    };
+    let maxAge;
+    for (const attr of attrs) {
+        const i = attr.indexOf("=");
+        const key = (i < 0 ? attr : attr.slice(0, i)).trim().toLowerCase();
+        const val = i < 0 ? "" : attr.slice(i + 1).trim();
+        if (key === "path")
+            cookie.path = val || "/";
+        else if (key === "expires") {
+            const t = Date.parse(val);
+            if (!Number.isNaN(t))
+                cookie.expires = t;
+        }
+        else if (key === "max-age" && /^-?\d+$/.test(val))
+            maxAge = Number(val);
+        else if (key === "samesite") {
+            const s = val.toLowerCase();
+            if (s === "strict" || s === "lax" || s === "none")
+                cookie.sameSite = s;
+        }
+    }
+    // Max-Age wins over Expires (RFC 6265); zero or less deletes.
+    if (maxAge !== undefined)
+        cookie.expires = maxAge <= 0 ? 0 : now + maxAge * 1000;
+    return cookie;
+}
+/** Stores the Worker's tunneled Set-Cookie values and returns the response without them. */
+export async function applyWorkerCookies(scope, res) {
+    const tunneled = res.headers.get(H.setCookie);
+    if (tunneled === null)
+        return res;
+    const store = storeOf(scope);
+    for (const raw of tunneled.split(",").filter(Boolean)) {
+        const c = parseSetCookie(decodeURIComponent(raw));
+        if (!c.name || !store)
+            continue;
+        try {
+            if (c.expires !== undefined && c.expires <= Date.now())
+                await store.delete({ name: c.name, path: "/" });
+            else
+                await store.set({
+                    name: c.name,
+                    value: c.value,
+                    path: "/",
+                    expires: c.expires ?? null,
+                    sameSite: c.sameSite ?? "lax",
+                });
+        }
+        catch (err) {
+            console.warn(`cellb: cookie ${c.name} not stored: ${err?.message ?? err}`);
+        }
+    }
+    const headers = new Headers(res.headers);
+    headers.delete(H.setCookie);
+    return new Response(res.body, { status: res.status, statusText: res.statusText, headers });
+}
+//# sourceMappingURL=browser-cookies.js.map