@statewalker/cellb 0.1.0 → 0.2.0

package/dist/isolate/isolate.js.map

@@ -1 +1 @@
-{"version":3,"file":"isolate.js","sourceRoot":"","sources":["../../src/isolate/isolate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAoB,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAoB,WAAW,EAAiB,MAAM,eAAe,CAAC;AAE7E,MAAM,UAAU,YAAY,CAC1B,IAAc,EACd,UAGqC,EACrC,IAAI,GAOA,EAAE;IAEN,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,sFAAsF;IACtF,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2C,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG;QACjB,YAAY,EAAE,IAAI;QAClB,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,IAAS;YACxC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,MAAM,KAAK,GAAG,EAAE,SAAS,CAAC;YAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,CAAC,CAAC,GAAG;oBACd,IAAI,EAAE;wBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;qBAC7D;iBACF,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,IAAI,CAAC,OAAe;YACxB,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC;gBACN,CAAC,CAAE,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAA4B;gBAC3F,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAI,KAAI,CAAC;KAChB,CAAC;IACF,6FAA6F;IAC7F,wFAAwF;IACxF,4FAA4F;IAC5F,+FAA+F;IAC/F,MAAM,SAAS,GAAU;QACvB,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,mDAAmD;YAC9F,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK;gBACjC,IAAI;gBACJ,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACT,CAAC;QACnB,CAAC;KACF,CAAC;IACF,IAAI,OAAY,CAAC;IACjB,IAAI,GAAqC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QAChD,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,IAAI,CAAC,OAAO;gBACf,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC;YAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAC7D,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,UAAU;gBACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACxE,EAAE,GAAG,iBAAiB,CAAC;gBACrB,MAAM,EAAE,EAAE,GAAI,MAAuB,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpD,cAAc,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC9C,OAAO;gBACP,IAAI,EAAE,GAAG,EAAE,uDAAuD;gBAClE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1C,MAAM,EAAE,IAAI,EAAE,kEAAkE;aACjF,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,IAAI,GAAG,GAA4B,EAAE,CAAC;IACtC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,kGAAkG;IAClG,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,uFAAuF;IACvF,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,OAAe,EAAE,EAAE;QACzD,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAG1B,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;QACrF,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,EAAE,CAAc,EAAE,GAAY,EAAqB,EAAE,CAC5E,WAAW,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACvD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,CAAC;YACZ,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,kEAAkE;YAC/E,mFAAmF;YACnF,mFAAmF;YACnF,iDAAiD;YACjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAe,EAAE,EAAE,CAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK;gBAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU;oBACpE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE,CACzE,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAiB,CAAC;YACxD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;oBAC7B,MAAM,IAAI,KAAK,CACb,2KAA2K,CAC5K,CAAC;gBACJ,CAAC,CAAiB,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,qCAAqC;YACnE,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,kBAAkB,CACtB,IAAI,EACJ,CAAC,EAAW,EAAE,GAAgD,EAAE,EAAE,CAChE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAC1B,CAAC;gBACF,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;IACb,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,CAAC","sourcesContent":["/**\n * The isolate side: loads the Worker code in THIS realm and serves fetch/RPC for the host.\n * `importCode` is realm specific (data: URL of a bundle on Node, a site URL in browsers).\n */\nimport { ctxExports, entrypointStub } from \"../core/handles.js\";\nimport { runInDurableObject } from \"../core/namespace.js\";\nimport { type CellRuntime, createCellRuntime, type WorkerModule } from \"../core/runtime.js\";\nimport type { Lease, LeaseHandle, OpenCellSql } from \"../ports.js\";\nimport { realmWorkerScope } from \"../project/worker-scope.js\";\nimport { type FetchTarget, isolatePort, type PortLike } from \"./protocol.js\";\n\nexport function serveIsolate(\n  port: PortLike,\n  importCode: (\n    load: any,\n    logs: (level: string, args: unknown[]) => void,\n  ) => Promise<Record<string, unknown>>,\n  opts: {\n    patchConsole?: boolean;\n    /**\n     * Storage for Durable Object classes run INSIDE this isolate (facets of loaded code):\n     * each facet is a cell of an isolate-local runtime, with its own SQLite.\n     */\n    openSql?: (load: any) => OpenCellSql | Promise<OpenCellSql>;\n  } = {},\n) {\n  let module: Record<string, unknown> = {};\n  const runtimes = new Map<string, CellRuntime>();\n  // Facet logging through the host: the isolate-local cell key → the facet's key in the\n  // root's storage (celld: <root>/facets/<sha>) and the root's epoch.\n  const facetKeys = new Map<string, { key: string; epoch?: number }>();\n  const images = new Map<number, () => unknown>();\n  let nextImage = 0;\n  const hostLogged = (internal: string) => facetKeys.get(internal);\n  const durability = {\n    capturePages: true,\n    async committed(cellKey: string, info: any) {\n      const f = hostLogged(cellKey);\n      if (!f) return;\n      const token = ++nextImage;\n      if (typeof info.image === \"function\") images.set(token, info.image);\n      try {\n        await call({\n          type: \"durable\",\n          op: \"committed\",\n          cellKey: f.key,\n          info: {\n            seq: info.seq,\n            pages: info.pages,\n            epoch: f.epoch,\n            image: typeof info.image === \"function\" ? token : info.image,\n          },\n        });\n      } finally {\n        images.delete(token);\n      }\n    },\n  };\n  const backup = {\n    async load(cellKey: string) {\n      const f = hostLogged(cellKey);\n      return f\n        ? ((await call({ type: \"durable\", op: \"load\", cellKey: f.key })) as Uint8Array | undefined)\n        : undefined;\n    },\n    async save() {},\n  };\n  // The host holds the root's lease and attaches each facet with its epoch: handing that epoch\n  // out as the facet's own lease makes its ObjectHost rebuild the local database from the\n  // bucket when it opens, as a root does under a lease (a pool kept from an earlier ownership\n  // is older than what other nodes wrote since). Without an epoch, the local file stays primary.\n  const ownership: Lease = {\n    async tryAcquire(cellKey) {\n      const lost = new AbortController().signal; // fencing stays with the root's lease, in the host\n      return {\n        name: cellKey,\n        epoch: hostLogged(cellKey)?.epoch,\n        lost,\n        release: async () => {},\n      } as LeaseHandle;\n    },\n  };\n  let loadMsg: any;\n  let sql: Promise<OpenCellSql> | undefined;\n  const objectRuntime = async (className: string) => {\n    let rt = runtimes.get(className);\n    if (!rt) {\n      if (!opts.openSql)\n        throw new Error(\"this isolate cannot host Durable Object classes (no storage)\");\n      sql ??= Promise.resolve(opts.openSql(loadMsg));\n      const openSql = await sql;\n      if (runtimes.has(className)) return runtimes.get(className)!;\n      if (typeof module[className] !== \"function\")\n        throw new Error(`Loaded worker does not export class \"${className}\"`);\n      rt = createCellRuntime({\n        worker: { ...(module as WorkerModule), default: {} },\n        durableObjects: { [className]: { className } },\n        openSql,\n        vars: env, // the loaded Worker's env: plain values and host stubs\n        storage: { durability, backup, ownership },\n        facets: true, // rows move to this run's scope on open, as celld does for facets\n      });\n      runtimes.set(className, rt);\n    }\n    return rt;\n  };\n  let env: Record<string, unknown> = {};\n  let exports: Record<string, unknown> = {};\n  // The loaded Worker is this realm's own: its `cloudflare:workers` reads `env` and `exports` here.\n  const scope = realmWorkerScope();\n  // A facet of loaded code: the object lives here, named by the parent's facet cell key.\n  const facet = async (className: string, cellKey: string) => {\n    const rt = await objectRuntime(className);\n    const ns = rt.env[className] as {\n      getByName(n: string): any;\n      idFromName(n: string): { toString(): string };\n    };\n    return { rt, stub: ns.getByName(cellKey), key: `${className}/${ns.idFromName(cellKey)}` };\n  };\n  const exported = (name: string, props?: unknown) => {\n    const target = module[name];\n    if (target === undefined) throw new Error(`Loaded worker does not export \"${name}\"`);\n    return entrypointStub(target, env, props, exports);\n  };\n  const fetchTarget = async (t: FetchTarget, req: Request): Promise<Response> =>\n    \"className\" in t\n      ? (await facet(t.className, t.cellKey)).stub.fetch(req)\n      : exported(t.name, t.props).fetch(req);\n  const handle = async (m: any) => {\n    if (m.type === \"load\") {\n      loadMsg = m;\n      env = m.env; // host bindings arrive as stubs: every call goes back to the host\n      // Logs go to the host (Tail Workers, and the host prints them): through the global\n      // console, or — where the realm has other code that logs — a console scoped to the\n      // loaded modules (importCode receives the sink).\n      const sink = (level: string, args: unknown[]) =>\n        call({ type: \"log\", level, args: safe(args) }).catch(() => {});\n      if (opts.patchConsole !== false)\n        for (const level of [\"log\", \"info\", \"warn\", \"error\", \"debug\"] as const)\n          console[level] = (...args: unknown[]) => sink(level, args);\n      if (m.outbound === \"fetcher\")\n        globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) =>\n          outbound(new Request(input, init))) as typeof fetch;\n      if (m.outbound === \"blocked\")\n        globalThis.fetch = (async () => {\n          throw new Error(\n            \"This worker is not permitted to access the internet via global functions like fetch(). It must use capabilities (such as bindings in 'env') to talk to the outside world.\",\n          );\n        }) as typeof fetch;\n      scope.bind({ env, exports }); // read while the module is evaluated\n      module = await importCode(m, sink);\n      exports = ctxExports(module, env);\n      scope.bind({ env, exports });\n      return Object.fromEntries(Object.entries(module).map(([k, v]) => [k, typeof v]));\n    }\n    if (m.type === \"image\") return await images.get(m.token)?.();\n    if (m.type === \"object\") {\n      const { rt, stub, key } = await facet(m.className, m.cellKey);\n      if (m.op === \"attach\") {\n        facetKeys.set(key, { key: m.cellKey, epoch: m.epoch });\n        return;\n      }\n      if (m.op === \"call\") return stub[m.method](...m.args);\n      if (m.op === \"restart\") return rt.restartObject(key);\n      if (m.op === \"delete\") {\n        await runInDurableObject(\n          stub,\n          (_o: unknown, ctx: { storage: { deleteAll(): Promise<void> } }) =>\n            ctx.storage.deleteAll(),\n        );\n        return rt.restartObject(key);\n      }\n      throw new Error(`unknown object op ${m.op}`);\n    }\n    if (m.type === \"call\") return exported(m.name, m.props)[m.method](...m.args);\n    throw new Error(`unknown isolate message ${m.type}`);\n  };\n  const { call, outbound } = isolatePort(port, handle, fetchTarget);\n}\n\nconst safe = (args: unknown[]) =>\n  args.map((a) => {\n    try {\n      return structuredClone(a);\n    } catch {\n      return String(a);\n    }\n  });\n"]}
+{"version":3,"file":"isolate.js","sourceRoot":"","sources":["../../src/isolate/isolate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAoB,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAoB,WAAW,EAAiB,MAAM,eAAe,CAAC;AAE7E,MAAM,UAAU,YAAY,CAC1B,IAAc,EACd,UAGqC,EACrC,IAAI,GAOA,EAAE;IAEN,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,sFAAsF;IACtF,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2C,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG;QACjB,YAAY,EAAE,IAAI;QAClB,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,IAAS;YACxC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,MAAM,KAAK,GAAG,EAAE,SAAS,CAAC;YAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,CAAC,CAAC,GAAG;oBACd,IAAI,EAAE;wBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;qBAC7D;iBACF,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,IAAI,CAAC,OAAe;YACxB,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC;gBACN,CAAC,CAAE,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAA4B;gBAC3F,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAI,KAAI,CAAC;KAChB,CAAC;IACF,6FAA6F;IAC7F,wFAAwF;IACxF,4FAA4F;IAC5F,+FAA+F;IAC/F,MAAM,SAAS,GAAU;QACvB,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,mDAAmD;YAC9F,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK;gBACjC,IAAI;gBACJ,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACT,CAAC;QACnB,CAAC;KACF,CAAC;IACF,IAAI,OAAY,CAAC;IACjB,IAAI,GAAqC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QAChD,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,IAAI,CAAC,OAAO;gBACf,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC;YAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAC7D,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,UAAU;gBACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACxE,EAAE,GAAG,iBAAiB,CAAC;gBACrB,MAAM,EAAE,EAAE,GAAI,MAAuB,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpD,cAAc,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC9C,OAAO;gBACP,IAAI,EAAE,GAAG,EAAE,uDAAuD;gBAClE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1C,MAAM,EAAE,IAAI,EAAE,kEAAkE;gBAChF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,KAAK,SAAS;wBACvB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAE,EAAG,CAAC,GAAG,CAAC,SAAS,CAAgD,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC1F,CAAC;aACF,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,IAAI,GAAG,GAA4B,EAAE,CAAC;IACtC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,kGAAkG;IAClG,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,6FAA6F;IAC7F,8FAA8F;IAC9F,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,uFAAuF;IACvF,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,OAAe,EAAE,EAAE;QACzD,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAG1B,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;QACrF,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,EAAE,CAAc,EAAE,GAAY,EAAqB,EAAE,CAC5E,WAAW,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACvD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,CAAC;YACZ,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,kEAAkE;YAC/E,mFAAmF;YACnF,mFAAmF;YACnF,iDAAiD;YACjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAe,EAAE,EAAE,CAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK;gBAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU;oBACpE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE,CACzE,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAiB,CAAC;YACxD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;oBAC7B,MAAM,IAAI,KAAK,CACb,2KAA2K,CAC5K,CAAC;gBACJ,CAAC,CAAiB,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,qCAAqC;YACnE,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,kBAAkB,CACtB,IAAI,EACJ,CAAC,EAAW,EAAE,GAAgD,EAAE,EAAE,CAChE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAC1B,CAAC;gBACF,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;IACb,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,CAAC","sourcesContent":["/**\n * The isolate side: loads the Worker code in THIS realm and serves fetch/RPC for the host.\n * `importCode` is realm specific (data: URL of a bundle on Node, a site URL in browsers).\n */\nimport { ctxExports, entrypointStub } from \"../core/handles.js\";\nimport type { DurableObjectId } from \"../core/id.js\";\nimport { runInDurableObject } from \"../core/namespace.js\";\nimport { type CellRuntime, createCellRuntime, type WorkerModule } from \"../core/runtime.js\";\nimport type { Lease, LeaseHandle, OpenCellSql } from \"../ports.js\";\nimport { realmWorkerScope } from \"../project/worker-scope.js\";\nimport { type FetchTarget, isolatePort, type PortLike } from \"./protocol.js\";\n\nexport function serveIsolate(\n  port: PortLike,\n  importCode: (\n    load: any,\n    logs: (level: string, args: unknown[]) => void,\n  ) => Promise<Record<string, unknown>>,\n  opts: {\n    patchConsole?: boolean;\n    /**\n     * Storage for Durable Object classes run INSIDE this isolate (facets of loaded code):\n     * each facet is a cell of an isolate-local runtime, with its own SQLite.\n     */\n    openSql?: (load: any) => OpenCellSql | Promise<OpenCellSql>;\n  } = {},\n) {\n  let module: Record<string, unknown> = {};\n  const runtimes = new Map<string, CellRuntime>();\n  // Facet logging through the host: the isolate-local cell key → the facet's key in the\n  // root's storage (celld: <root>/facets/<sha>) and the root's epoch.\n  const facetKeys = new Map<string, { key: string; epoch?: number }>();\n  const images = new Map<number, () => unknown>();\n  let nextImage = 0;\n  const hostLogged = (internal: string) => facetKeys.get(internal);\n  const durability = {\n    capturePages: true,\n    async committed(cellKey: string, info: any) {\n      const f = hostLogged(cellKey);\n      if (!f) return;\n      const token = ++nextImage;\n      if (typeof info.image === \"function\") images.set(token, info.image);\n      try {\n        await call({\n          type: \"durable\",\n          op: \"committed\",\n          cellKey: f.key,\n          info: {\n            seq: info.seq,\n            pages: info.pages,\n            epoch: f.epoch,\n            image: typeof info.image === \"function\" ? token : info.image,\n          },\n        });\n      } finally {\n        images.delete(token);\n      }\n    },\n  };\n  const backup = {\n    async load(cellKey: string) {\n      const f = hostLogged(cellKey);\n      return f\n        ? ((await call({ type: \"durable\", op: \"load\", cellKey: f.key })) as Uint8Array | undefined)\n        : undefined;\n    },\n    async save() {},\n  };\n  // The host holds the root's lease and attaches each facet with its epoch: handing that epoch\n  // out as the facet's own lease makes its ObjectHost rebuild the local database from the\n  // bucket when it opens, as a root does under a lease (a pool kept from an earlier ownership\n  // is older than what other nodes wrote since). Without an epoch, the local file stays primary.\n  const ownership: Lease = {\n    async tryAcquire(cellKey) {\n      const lost = new AbortController().signal; // fencing stays with the root's lease, in the host\n      return {\n        name: cellKey,\n        epoch: hostLogged(cellKey)?.epoch,\n        lost,\n        release: async () => {},\n      } as LeaseHandle;\n    },\n  };\n  let loadMsg: any;\n  let sql: Promise<OpenCellSql> | undefined;\n  const objectRuntime = async (className: string) => {\n    let rt = runtimes.get(className);\n    if (!rt) {\n      if (!opts.openSql)\n        throw new Error(\"this isolate cannot host Durable Object classes (no storage)\");\n      sql ??= Promise.resolve(opts.openSql(loadMsg));\n      const openSql = await sql;\n      if (runtimes.has(className)) return runtimes.get(className)!;\n      if (typeof module[className] !== \"function\")\n        throw new Error(`Loaded worker does not export class \"${className}\"`);\n      rt = createCellRuntime({\n        worker: { ...(module as WorkerModule), default: {} },\n        durableObjects: { [className]: { className } },\n        openSql,\n        vars: env, // the loaded Worker's env: plain values and host stubs\n        storage: { durability, backup, ownership },\n        facets: true, // rows move to this run's scope on open, as celld does for facets\n        ctxIdOf: (key) => {\n          const name = idNames.get(key);\n          return name === undefined\n            ? undefined\n            : (rt!.env[className] as { idFromName(n: string): DurableObjectId }).idFromName(name);\n        },\n      });\n      runtimes.set(className, rt);\n    }\n    return rt;\n  };\n  let env: Record<string, unknown> = {};\n  let exports: Record<string, unknown> = {};\n  // The loaded Worker is this realm's own: its `cloudflare:workers` reads `env` and `exports` here.\n  const scope = realmWorkerScope();\n  // The name of the `id` a facet was given by `ctx.facets.get`, by its isolate-local cell key:\n  // the facet's `ctx.id` (partyserver's `this.name`). Two facets may be given the same id; each\n  // keeps its own object and storage, addressed by the parent's facet cell key.\n  const idNames = new Map<string, string>();\n  // A facet of loaded code: the object lives here, named by the parent's facet cell key.\n  const facet = async (className: string, cellKey: string) => {\n    const rt = await objectRuntime(className);\n    const ns = rt.env[className] as {\n      getByName(n: string): any;\n      idFromName(n: string): { toString(): string };\n    };\n    return { rt, stub: ns.getByName(cellKey), key: `${className}/${ns.idFromName(cellKey)}` };\n  };\n  const exported = (name: string, props?: unknown) => {\n    const target = module[name];\n    if (target === undefined) throw new Error(`Loaded worker does not export \"${name}\"`);\n    return entrypointStub(target, env, props, exports);\n  };\n  const fetchTarget = async (t: FetchTarget, req: Request): Promise<Response> =>\n    \"className\" in t\n      ? (await facet(t.className, t.cellKey)).stub.fetch(req)\n      : exported(t.name, t.props).fetch(req);\n  const handle = async (m: any) => {\n    if (m.type === \"load\") {\n      loadMsg = m;\n      env = m.env; // host bindings arrive as stubs: every call goes back to the host\n      // Logs go to the host (Tail Workers, and the host prints them): through the global\n      // console, or — where the realm has other code that logs — a console scoped to the\n      // loaded modules (importCode receives the sink).\n      const sink = (level: string, args: unknown[]) =>\n        call({ type: \"log\", level, args: safe(args) }).catch(() => {});\n      if (opts.patchConsole !== false)\n        for (const level of [\"log\", \"info\", \"warn\", \"error\", \"debug\"] as const)\n          console[level] = (...args: unknown[]) => sink(level, args);\n      if (m.outbound === \"fetcher\")\n        globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) =>\n          outbound(new Request(input, init))) as typeof fetch;\n      if (m.outbound === \"blocked\")\n        globalThis.fetch = (async () => {\n          throw new Error(\n            \"This worker is not permitted to access the internet via global functions like fetch(). It must use capabilities (such as bindings in 'env') to talk to the outside world.\",\n          );\n        }) as typeof fetch;\n      scope.bind({ env, exports }); // read while the module is evaluated\n      module = await importCode(m, sink);\n      exports = ctxExports(module, env);\n      scope.bind({ env, exports });\n      return Object.fromEntries(Object.entries(module).map(([k, v]) => [k, typeof v]));\n    }\n    if (m.type === \"image\") return await images.get(m.token)?.();\n    if (m.type === \"object\") {\n      const { rt, stub, key } = await facet(m.className, m.cellKey);\n      if (m.op === \"attach\") {\n        facetKeys.set(key, { key: m.cellKey, epoch: m.epoch });\n        if (typeof m.idName === \"string\") idNames.set(key, m.idName);\n        return;\n      }\n      if (m.op === \"call\") return stub[m.method](...m.args);\n      if (m.op === \"restart\") return rt.restartObject(key);\n      if (m.op === \"delete\") {\n        await runInDurableObject(\n          stub,\n          (_o: unknown, ctx: { storage: { deleteAll(): Promise<void> } }) =>\n            ctx.storage.deleteAll(),\n        );\n        return rt.restartObject(key);\n      }\n      throw new Error(`unknown object op ${m.op}`);\n    }\n    if (m.type === \"call\") return exported(m.name, m.props)[m.method](...m.args);\n    throw new Error(`unknown isolate message ${m.type}`);\n  };\n  const { call, outbound } = isolatePort(port, handle, fetchTarget);\n}\n\nconst safe = (args: unknown[]) =>\n  args.map((a) => {\n    try {\n      return structuredClone(a);\n    } catch {\n      return String(a);\n    }\n  });\n"]}

package/dist/isolate/node-entry.js

@@ -1,10 +1,21 @@
 // A worker thread hosting ONE loaded Worker (an isolate); see src/isolate/protocol.ts.
 import { parentPort } from "node:worker_threads";
 import { nodeSqliteOpener } from "../adapters/node-sqlite.js";
+import { CellsRequest, CellsResponse, WebSocket, WebSocketPair, WebSocketRequestResponsePair, } from "../project/workers-globals-module.js";
 import { serveIsolate } from "./isolate.js";
 // An exception no request awaits (a timer, ctx.abort() from one) is reported, and the isolate
 // lives on, as in a browser Dedicated Worker and workerd; Node would end the thread.
 process.on("uncaughtException", (e) => console.error("Uncaught", e));
+// This thread is the loaded Worker's realm: its globals are the Workers ones, as in a browser
+// isolate (src/isolate/isolate-worker.ts). A `Response` that takes `{ status: 101, webSocket }`
+// and a `WebSocketPair` are what a Worker that accepts WebSockets needs.
+Object.assign(globalThis, {
+    Request: CellsRequest,
+    Response: CellsResponse,
+    WebSocket,
+    WebSocketPair,
+    WebSocketRequestResponsePair,
+});
 serveIsolate(parentPort, async ({ source }) => import(`data:text/javascript;base64,${Buffer.from(source ?? "").toString("base64")}`), 
 // Facets of the loaded code keep their SQLite here: files under `dataDir` when the host
 // gives one, else in memory (lost with the isolate).

package/dist/isolate/node-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-entry.js","sourceRoot":"","sources":["../../src/isolate/node-entry.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,8FAA8F;AAC9F,qFAAqF;AACrF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAErE,YAAY,CACV,UAAiC,EACjC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,MAAM,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvF,wFAAwF;AACxF,qDAAqD;AACrD,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CACvD,CAAC","sourcesContent":["// A worker thread hosting ONE loaded Worker (an isolate); see src/isolate/protocol.ts.\nimport { parentPort } from \"node:worker_threads\";\nimport { nodeSqliteOpener } from \"../adapters/node-sqlite.js\";\nimport { serveIsolate } from \"./isolate.js\";\nimport type { PortLike } from \"./protocol.js\";\n\n// An exception no request awaits (a timer, ctx.abort() from one) is reported, and the isolate\n// lives on, as in a browser Dedicated Worker and workerd; Node would end the thread.\nprocess.on(\"uncaughtException\", (e) => console.error(\"Uncaught\", e));\n\nserveIsolate(\n  parentPort as unknown as PortLike,\n  async ({ source }) =>\n    import(`data:text/javascript;base64,${Buffer.from(source ?? \"\").toString(\"base64\")}`),\n  // Facets of the loaded code keep their SQLite here: files under `dataDir` when the host\n  // gives one, else in memory (lost with the isolate).\n  { openSql: (load) => nodeSqliteOpener(load?.dataDir) },\n);\n"]}
+{"version":3,"file":"node-entry.js","sourceRoot":"","sources":["../../src/isolate/node-entry.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,aAAa,EACb,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,8FAA8F;AAC9F,qFAAqF;AACrF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAErE,8FAA8F;AAC9F,gGAAgG;AAChG,yEAAyE;AACzE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;IACxB,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,aAAa;IACvB,SAAS;IACT,aAAa;IACb,4BAA4B;CAC7B,CAAC,CAAC;AAEH,YAAY,CACV,UAAiC,EACjC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,MAAM,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvF,wFAAwF;AACxF,qDAAqD;AACrD,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CACvD,CAAC","sourcesContent":["// A worker thread hosting ONE loaded Worker (an isolate); see src/isolate/protocol.ts.\nimport { parentPort } from \"node:worker_threads\";\nimport { nodeSqliteOpener } from \"../adapters/node-sqlite.js\";\nimport {\n  CellsRequest,\n  CellsResponse,\n  WebSocket,\n  WebSocketPair,\n  WebSocketRequestResponsePair,\n} from \"../project/workers-globals-module.js\";\nimport { serveIsolate } from \"./isolate.js\";\nimport type { PortLike } from \"./protocol.js\";\n\n// An exception no request awaits (a timer, ctx.abort() from one) is reported, and the isolate\n// lives on, as in a browser Dedicated Worker and workerd; Node would end the thread.\nprocess.on(\"uncaughtException\", (e) => console.error(\"Uncaught\", e));\n\n// This thread is the loaded Worker's realm: its globals are the Workers ones, as in a browser\n// isolate (src/isolate/isolate-worker.ts). A `Response` that takes `{ status: 101, webSocket }`\n// and a `WebSocketPair` are what a Worker that accepts WebSockets needs.\nObject.assign(globalThis, {\n  Request: CellsRequest,\n  Response: CellsResponse,\n  WebSocket,\n  WebSocketPair,\n  WebSocketRequestResponsePair,\n});\n\nserveIsolate(\n  parentPort as unknown as PortLike,\n  async ({ source }) =>\n    import(`data:text/javascript;base64,${Buffer.from(source ?? \"\").toString(\"base64\")}`),\n  // Facets of the loaded code keep their SQLite here: files under `dataDir` when the host\n  // gives one, else in memory (lost with the isolate).\n  { openSql: (load) => nodeSqliteOpener(load?.dataDir) },\n);\n"]}

package/dist/isolate/protocol.d.ts

@@ -20,6 +20,9 @@
  * Fetches: one port per request (meta: its target and URL), HTTP/1.1 with streamed bodies,
  * as cells-http over a port (src/transport/port.ts): host → isolate to an export or facet,
  * isolate → host for the loaded code's global `fetch()` when a `globalOutbound` Fetcher routes it.
+ * A WebSocket upgrade (host → isolate) has a port of its own instead, since HTTP/1.1 drops the
+ * `Upgrade` header: its meta carries the request's method and headers; the isolate answers with
+ * the response's head (and body, unless it is a 101), then both sides relay the socket's frames.
  */
 export interface PortLike {
     postMessage(msg: unknown, transfer?: Transferable[]): void;
@@ -53,6 +56,7 @@ type Handle = (msg: any) => Promise<unknown>;
 export declare function hostPort(port: PortLike, handle: Handle, outbound?: (req: Request) => Promise<Response>): Promise<{
     call: Call;
     fetch: Fetch;
+    closeSockets(): void;
 }>;
 /**
  * The isolate's end: accepts the ports the host opens. Everything the isolate calls the host

package/dist/isolate/protocol.js

@@ -2,6 +2,9 @@ import { fetchOverDuplex, serveFetchOverDuplex } from "@statewalker/webrun-http-
 import { callPort, duplexOverPort, listenPort, multiplexPort, NO_TIMEOUT, serveDuplexOverPort, structuredCodec, } from "@statewalker/webrun-rpc";
 import { cross, pipeTo, rpcPromise, STUB } from "../core/handles.js";
 import { withUrl } from "../core/request-body.js";
+import { portEnd, relayFrames } from "../ws/frames.js";
+import { CellsResponse, CfWebSocket, takeClientPort } from "../ws/server.js";
+import { carryWebSocketHeaders } from "../ws/upgrade.js";
 /**
  * The host's end of an isolate's port: one webrun-rpc multiplexer over it, a calls port on
  * which each side calls the other (`callPort`/`listenPort`, no timeout: a call lasts as long
@@ -21,8 +24,17 @@ export async function hostPort(port, handle, outbound) {
         },
     });
     const call = callsOver(await mux.openPort({ kind: "calls" }), handle);
-    const fetch = (target, req) => fetchOver(mux, { kind: "fetch", target }, req);
-    return { call, fetch };
+    // The sockets open into the isolate: told it stopped (1001) when it does.
+    const sockets = new Set();
+    const fetch = (target, req) => isUpgrade(req)
+        ? upgradeOver(mux, { kind: "upgrade", target }, req, sockets)
+        : fetchOver(mux, { kind: "fetch", target }, req);
+    const closeSockets = () => {
+        for (const end of sockets)
+            end(1001, "the loaded Worker stopped");
+        sockets.clear();
+    };
+    return { call, fetch, closeSockets };
 }
 /**
  * The isolate's end: accepts the ports the host opens. Everything the isolate calls the host
@@ -40,6 +52,10 @@ export function isolatePort(port, handle, fetch) {
                 serveFetch(p, m.url, (r) => fetch(m.target, r));
                 return true;
             }
+            if (m?.kind === "upgrade") {
+                serveUpgrade(p, m, (r) => fetch(m.target, r));
+                return true;
+            }
             if (m?.kind !== "calls" || calls)
                 return false;
             calls = callsOver(p, handle);
@@ -61,6 +77,106 @@ function fetchOver(mux, meta, req) {
 function serveFetch(p, url, fetch) {
     serveDuplexOverPort(p, serveFetchOverDuplex((req) => withUrl(req, url).then(fetch).catch(throwOwn)));
 }
+const isUpgrade = (req) => req.headers.get("upgrade")?.toLowerCase() === "websocket";
+/** A port of the multiplexer as one end of a frame relay. */
+const muxEnd = (p) => ({
+    post: (f) => p.postMessage(f),
+    listen: (fn) => {
+        p.addEventListener("message", (e) => fn(e.data));
+        void p.start?.();
+    },
+    close: () => void p.close?.(),
+});
+/** Statuses whose response has no body (`new Response(body, …)` refuses one). */
+const nullBody = (status) => [101, 204, 205, 304].includes(status);
+/**
+ * A WebSocket upgrade over a port of its own. A 101 answer becomes a Workers response whose
+ * `webSocket` is a client end here; its frames and the isolate's are relayed over the port until
+ * the socket's closing handshake, or `sockets`' close (the isolate stops). Any other answer
+ * closes the port.
+ */
+async function upgradeOver(mux, meta, req, sockets) {
+    const p = await mux.openPort({
+        ...meta,
+        url: req.url,
+        method: req.method,
+        headers: [...req.headers],
+    });
+    return new Promise((resolve, reject) => {
+        const onHead = (e) => {
+            p.removeEventListener("message", onHead);
+            try {
+                const head = e.data;
+                if ("error" in head)
+                    throw head.error;
+                if (head.status !== 101) {
+                    void p.close?.();
+                    return resolve(new Response(nullBody(head.status) ? null : head.body, {
+                        status: head.status,
+                        statusText: head.statusText,
+                        headers: head.headers,
+                    }));
+                }
+                const channel = new MessageChannel();
+                const end = relayFrames(portEnd(channel.port2), muxEnd(p), () => sockets.delete(end));
+                sockets.add(end);
+                resolve(new CellsResponse(null, {
+                    status: 101,
+                    headers: head.headers,
+                    webSocket: new CfWebSocket(channel.port1),
+                }));
+            }
+            catch (err) {
+                void p.close?.();
+                reject(err);
+            }
+        };
+        p.addEventListener("message", onHead);
+        void p.start?.();
+    });
+}
+/** Serves an upgrade on port `p`: the loaded code's 101 hands its client end's frames to the port. */
+function serveUpgrade(p, meta, fetch) {
+    // A browser drops `Upgrade` and `Sec-WebSocket-*` from `new Request()`: carried over here.
+    const headers = new Headers(meta.headers);
+    const req = carryWebSocketHeaders(headers, new Request(meta.url, { method: meta.method, headers }));
+    const answer = (head) => {
+        try {
+            p.postMessage(head);
+        }
+        catch {
+            // An error that cannot be copied (a function in its `cause`, say): its name and message.
+            const e = head.error;
+            p.postMessage({
+                error: Object.assign(new Error(String(e?.message ?? e)), {
+                    name: String(e?.name ?? "Error"),
+                }),
+            });
+        }
+    };
+    void (async () => {
+        try {
+            const res = await fetch(req);
+            const ws = res.webSocket;
+            if (res.status === 101 && ws) {
+                // Listening before the head goes out: the host relays frames as soon as it has it.
+                relayFrames(portEnd(takeClientPort(ws)), muxEnd(p));
+                answer({ status: 101, headers: [...res.headers], body: null });
+                return;
+            }
+            answer({
+                status: res.status,
+                statusText: res.statusText,
+                headers: [...res.headers],
+                body: nullBody(res.status) ? null : await res.arrayBuffer(),
+            });
+        }
+        catch (error) {
+            answer({ error });
+        }
+        void p.close?.();
+    })();
+}
 /** Marks a value passed by reference in a message: `{ [REF]: id }`. */
 const REF = "\u0000cellb.ref";
 /**

package/dist/isolate/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/isolate/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EACL,QAAQ,EACR,cAAc,EACd,UAAU,EAEV,aAAa,EACb,UAAU,EAEV,mBAAmB,EACnB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA2ClD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAc,EACd,MAAc,EACd,QAA8C;IAE9C,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;QAC7C,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,WAAW;QACjB,MAAM,CAAC,CAAC,EAAE,IAAI;YACZ,MAAM,CAAC,GAAG,IAAkD,CAAC;YAC7D,IAAI,CAAC,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtD,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,KAAK,GAAU,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,IAAc,EACd,MAAc,EACd,KAAY;IAEZ,IAAI,KAAuB,CAAC;IAC5B,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;QAC7C,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,WAAW;QACjB,MAAM,CAAC,CAAC,EAAE,IAAI;YACZ,MAAM,CAAC,GAAG,IAAuE,CAAC;YAClF,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gBACxB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC/C,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAM,CAAC,GAAG,CAAC;QAC1B,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,GAAY,EAAE,IAAY,EAAE,GAAY;IACzD,OAAO,eAAe,CACpB,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,SAAS,CAAC;QACd,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,EAAE,EACN,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,CAAgB,EAAE,GAAW,EAAE,KAA0C;IAC3F,mBAAmB,CACjB,CAAC,EACD,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,GAAG,GAAG,iBAAiB,CAAC;AAE9B;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAmB,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAC5B,SAAS,CACP,KAAK,CACH,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;QACJ,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CACT,CACF,CAAC;IACJ,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO;QAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACpB,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAQ,IAAI,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE;YACpC,KAAK,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;YAC5C,GAAG,CAAC,EAAE,EAAE,IAAI;gBACV,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAC/B,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO;oBACzB,OAAO,GAAG,EAAE;wBACV,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;wBAC3B,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;oBAChC,CAAC,CAAC;gBACJ,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAClE,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;QACH,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,uEAAuE;IACvE,MAAM,MAAM,GAAG,CAAC,CAAM,EAAO,EAAE;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAM,EAAW,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,yFAAyF;IACzF,WAAW;IACX,MAAM,KAAK,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;;gBACrC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAU,CAAC;QACf,IAAI,CAAC;YACH,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAS,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,EAAE,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CACzB,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,6EAA6E;QAC7E,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAG,CAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,CAAC;AACV,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAI,KAAQ;IAC5B,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kGAAkG;AAClG,SAAS,aAAa,CAAC,IAAc;IACnC,IAAI,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAqB,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC/D,gBAAgB,CAAC,KAAK,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAkB,CAAC,CAAC;YACtE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC5B,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,mBAAmB,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAC1C,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { fetchOverDuplex, serveFetchOverDuplex } from \"@statewalker/webrun-http-streams\";\nimport {\n  callPort,\n  duplexOverPort,\n  listenPort,\n  type MessageTarget,\n  multiplexPort,\n  NO_TIMEOUT,\n  type PortMux,\n  serveDuplexOverPort,\n  structuredCodec,\n} from \"@statewalker/webrun-rpc\";\nimport { cross, pipeTo, rpcPromise, STUB } from \"../core/handles.js\";\nimport { withUrl } from \"../core/request-body.js\";\n\n/**\n * Isolation for loaded Workers (celld runs each in its own V8 isolate): the loaded code runs\n * in a separate realm — a worker thread on Node, a Dedicated Worker in browsers — and talks\n * to the host over one MessagePort, multiplexed with `@statewalker/webrun-rpc`. The host keeps\n * everything else: bindings in the loaded Worker's env are reached through stubs, and its logs\n * come back for Tail Workers. Errors cross with their own properties (`name`, `code`, …).\n * Functions, `RpcTarget`s and stubs anywhere in a call or result cross by reference (as\n * workerd passes them): the far side gets a stub whose calls come back.\n *\n * Calls (one port, both directions; each names an `answer`, which the serving side keeps until\n * the caller has the result, so calls on it can be sent before then — promise pipelining):\n *   host → isolate   load {source|url, env, outbound}                     → loaded {exports}\n *                    call {name, method, args, props}                     → result\n *   isolate → host   log {level, args}\n *   either way       ref {id|on, path, args}  (a call on a stub of the other side's value, or\n *                                              on answer `on`: `path` is the property path\n *                                              called, [] the value itself)\n *                    release {id|answer}      (that stub was disposed or collected; the caller\n *                                              has that answer)\n * Fetches: one port per request (meta: its target and URL), HTTP/1.1 with streamed bodies,\n * as cells-http over a port (src/transport/port.ts): host → isolate to an export or facet,\n * isolate → host for the loaded code's global `fetch()` when a `globalOutbound` Fetcher routes it.\n */\nexport interface PortLike {\n  postMessage(msg: unknown, transfer?: Transferable[]): void;\n  addEventListener?(type: \"message\", fn: (e: { data: unknown }) => void): void;\n  removeEventListener?(type: \"message\", fn: (e: { data: unknown }) => void): void;\n  on?(type: \"message\", fn: (data: unknown) => void): void;\n  off?(type: \"message\", fn: (data: unknown) => void): void;\n  start?(): void;\n}\n\n/** Where a fetch goes in the isolate: an export of the loaded Worker, or one of its facets. */\nexport type FetchTarget =\n  | { name: string; props?: unknown }\n  | { className: string; cellKey: string };\ntype Fetch = (target: FetchTarget, req: Request) => Promise<Response>;\n\nexport type Call = <T = unknown>(msg: object) => Promise<T>;\ntype Handle = (msg: any) => Promise<unknown>;\n\n/**\n * The host's end of an isolate's port: one webrun-rpc multiplexer over it, a calls port on\n * which each side calls the other (`callPort`/`listenPort`, no timeout: a call lasts as long\n * as the work it starts), and a port per fetch. `outbound` serves the loaded code's global\n * `fetch()` (its `globalOutbound` Fetcher).\n */\nexport async function hostPort(\n  port: PortLike,\n  handle: Handle,\n  outbound?: (req: Request) => Promise<Response>,\n): Promise<{ call: Call; fetch: Fetch }> {\n  const mux = multiplexPort(messageTarget(port), {\n    codec: structuredCodec,\n    side: \"initiator\",\n    onPort(p, meta) {\n      const m = meta as { kind?: string; url: string } | undefined;\n      if (m?.kind !== \"outbound\" || !outbound) return false;\n      serveFetch(p, m.url, outbound);\n      return true;\n    },\n  });\n  const call = callsOver(await mux.openPort({ kind: \"calls\" }), handle);\n  const fetch: Fetch = (target, req) => fetchOver(mux, { kind: \"fetch\", target }, req);\n  return { call, fetch };\n}\n\n/**\n * The isolate's end: accepts the ports the host opens. Everything the isolate calls the host\n * for happens while serving a host call, so the calls port is open by then. `outbound` sends\n * a fetch to the host's `globalOutbound`.\n */\nexport function isolatePort(\n  port: PortLike,\n  handle: Handle,\n  fetch: Fetch,\n): { call: Call; outbound: (req: Request) => Promise<Response> } {\n  let calls: Call | undefined;\n  const mux = multiplexPort(messageTarget(port), {\n    codec: structuredCodec,\n    side: \"responder\",\n    onPort(p, meta) {\n      const m = meta as { kind?: string; target: FetchTarget; url: string } | undefined;\n      if (m?.kind === \"fetch\") {\n        serveFetch(p, m.url, (r) => fetch(m.target, r));\n        return true;\n      }\n      if (m?.kind !== \"calls\" || calls) return false;\n      calls = callsOver(p, handle);\n      return true;\n    },\n  });\n  return {\n    call: (msg) => calls!(msg),\n    outbound: (req) => fetchOver(mux, { kind: \"outbound\" }, req),\n  };\n}\n\n/** A fetch over a new port of `mux`; the URL rides in the meta (the HTTP/1.1 wire drops its scheme). */\nfunction fetchOver(mux: PortMux, meta: object, req: Request): Promise<Response> {\n  return fetchOverDuplex(\n    (input) =>\n      (async function* () {\n        yield* duplexOverPort(await mux.openPort({ ...meta, url: req.url }))(input);\n      })(),\n    req,\n  );\n}\n\n/** Serves the fetch on port `p` (its URL from the meta) with `fetch`. */\nfunction serveFetch(p: MessageTarget, url: string, fetch: (req: Request) => Promise<Response>) {\n  serveDuplexOverPort(\n    p,\n    serveFetchOverDuplex((req) => withUrl(req, url).then(fetch).catch(throwOwn)),\n  );\n}\n\n/** Marks a value passed by reference in a message: `{ [REF]: id }`. */\nconst REF = \"\\u0000cellb.ref\";\n\n/**\n * The calls of one port, with values passed by reference: each side keeps the values it\n * passed (by id, and how many ids hold each); the other side calls them through stubs. A\n * stub's `Symbol.dispose` (or its garbage collection) releases its id; the last release of a\n * value runs the value's own `Symbol.dispose`, as workerd does for an `RpcTarget`. A call\n * returns an RpcPromise: calls on it go to the other side at once, naming its answer.\n */\nfunction callsOver(port: MessageTarget, handle: Handle): Call {\n  const values = new Map<number, any>();\n  const answers = new Map<number, unknown>();\n  let lastAnswer = 0;\n  const holders = new Map<unknown, number>();\n  let lastId = 0;\n  const encode = (v: unknown) =>\n    cloneable(\n      cross(\n        v,\n        (x) => {\n          values.set(++lastId, x);\n          holders.set(x, (holders.get(x) ?? 0) + 1);\n          return { [REF]: lastId };\n        },\n        (x) => x, // the port copies the rest\n      ),\n    );\n  const release = (id: number) => {\n    const v = values.get(id);\n    if (!values.delete(id)) return;\n    const n = (holders.get(v) ?? 1) - 1;\n    if (n) holders.set(v, n);\n    else {\n      holders.delete(v);\n      v[Symbol.dispose]?.();\n    }\n  };\n  const send = (msg: object) => callPort(port, msg, { timeout: NO_TIMEOUT }).catch(() => {});\n  const collected = new FinalizationRegistry<number>((id) => send({ type: \"release\", id }));\n  const stubOf = (id: number) => {\n    const invoke = (path: string[], args: unknown[]) => call({ type: \"ref\", id, path, args });\n    const stub: any = new Proxy(() => {}, {\n      apply: (_t, _this, args) => invoke([], args),\n      get(_t, prop) {\n        if (prop === STUB) return true;\n        if (prop === Symbol.dispose)\n          return () => {\n            collected.unregister(stub);\n            send({ type: \"release\", id });\n          };\n        if (prop === \"then\" || typeof prop === \"symbol\") return undefined;\n        return (...args: unknown[]) => invoke([prop], args);\n      },\n    });\n    collected.register(stub, id, stub);\n    return stub;\n  };\n  // Messages arrive as fresh copies: stubs replace the markers in place.\n  const decode = (v: any): any => {\n    if (Array.isArray(v)) for (let i = 0; i < v.length; i++) v[i] = decode(v[i]);\n    else if (v && Object.getPrototypeOf(v) === Object.prototype) {\n      if (typeof v[REF] === \"number\") return stubOf(v[REF]);\n      for (const k of Object.keys(v)) v[k] = decode(v[k]);\n    }\n    return v;\n  };\n  const run = (m: any): unknown => {\n    if (m.type !== \"ref\") return handle(m);\n    if (m.on !== undefined) return pipeTo(answers.get(m.on), m.path, m.args);\n    const v = values.get(m.id);\n    if (v === undefined) throw new Error(\"A stub was used after it was disposed.\");\n    return pipeTo(v, m.path, m.args);\n  };\n  // The answer is kept as the message arrives: a pipelined call on it may arrive before it\n  // settles.\n  const serve = async (m: any) => {\n    if (m.type === \"release\") {\n      if (m.answer === undefined) release(m.id);\n      else answers.delete(m.answer);\n      return;\n    }\n    let r: unknown;\n    try {\n      r = run(m);\n    } catch (e) {\n      r = Promise.reject(e);\n    }\n    answers.set(m.answer, r);\n    return r;\n  };\n  listenPort(port, (msg) => serve(decode(msg)).then(encode).catch(throwOwn));\n  const call: Call = (msg) => {\n    const answer = ++lastAnswer;\n    const result = (async () =>\n      decode(await callPort(port, encode({ ...msg, answer }), { timeout: NO_TIMEOUT })))();\n    // Calls on the answer sent before now are ahead of this release on the port.\n    const done = () => send({ type: \"release\", answer });\n    result.then(done, done);\n    return rpcPromise(result, (path, args) => call({ type: \"ref\", on: answer, path, args }));\n  };\n  return call;\n}\n\n/** Errors cross with their own properties (so `code` does); `name` is inherited, so copy it. */\nfunction throwOwn(e: unknown): never {\n  if (e && typeof e === \"object\")\n    Object.defineProperty(e, \"name\", { value: (e as Error).name, enumerable: true });\n  throw e;\n}\n\n/**\n * Throws `DataCloneError` for a value the port cannot carry: the multiplexer drops a message\n * it fails to post, and the call would wait forever.\n */\nfunction cloneable<T>(value: T): T {\n  structuredClone(value);\n  return value;\n}\n\n/** A worker_threads Worker is an EventEmitter; MessagePorts and Dedicated Workers are targets. */\nfunction messageTarget(port: PortLike): MessageTarget {\n  if (port.addEventListener) return port as MessageTarget;\n  const on = port.on!.bind(port);\n  const listeners = new Map<unknown, (data: unknown) => void>();\n  return {\n    postMessage: (msg, transfer) => port.postMessage(msg, transfer),\n    addEventListener(_type, fn) {\n      const listener = (data: unknown) => void fn({ data } as MessageEvent);\n      listeners.set(fn, listener);\n      on(\"message\", listener);\n    },\n    removeEventListener(_type, fn) {\n      port.off?.(\"message\", listeners.get(fn)!);\n      listeners.delete(fn);\n    },\n  };\n}\n"]}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/isolate/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EACL,QAAQ,EACR,cAAc,EACd,UAAU,EAEV,aAAa,EACb,UAAU,EAEV,mBAAmB,EACnB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAA6B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AA8CzD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAc,EACd,MAAc,EACd,QAA8C;IAE9C,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;QAC7C,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,WAAW;QACjB,MAAM,CAAC,CAAC,EAAE,IAAI;YACZ,MAAM,CAAC,GAAG,IAAkD,CAAC;YAC7D,IAAI,CAAC,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtD,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0C,CAAC;IAClE,MAAM,KAAK,GAAU,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CACnC,SAAS,CAAC,GAAG,CAAC;QACZ,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC;QAC7D,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,KAAK,MAAM,GAAG,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;QAClE,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,IAAc,EACd,MAAc,EACd,KAAY;IAEZ,IAAI,KAAuB,CAAC;IAC5B,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;QAC7C,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,WAAW;QACjB,MAAM,CAAC,CAAC,EAAE,IAAI;YACZ,MAAM,CAAC,GAAG,IAAuE,CAAC;YAClF,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gBACxB,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1B,YAAY,CAAC,CAAC,EAAE,CAA2B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC/C,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAM,CAAC,GAAG,CAAC;QAC1B,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,GAAY,EAAE,IAAY,EAAE,GAAY;IACzD,OAAO,eAAe,CACpB,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,SAAS,CAAC;QACd,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,EAAE,EACN,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,CAAgB,EAAE,GAAW,EAAE,KAA0C;IAC3F,mBAAmB,CACjB,CAAC,EACD,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,CAAC;AAiB9F,6DAA6D;AAC7D,MAAM,MAAM,GAAG,CAAC,CAAgB,EAAY,EAAE,CAAC,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;QACb,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAa,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACnB,CAAC;IACD,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;CAC9B,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,GAAY,EACZ,IAAY,EACZ,GAAY,EACZ,OAAoD;IAEpD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;QAC3B,GAAG,IAAI;QACP,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;KACJ,CAAC,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,CAAC,CAAe,EAAE,EAAE;YACjC,CAAC,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,CAAC,IAAmB,CAAC;gBACnC,IAAI,OAAO,IAAI,IAAI;oBAAE,MAAM,IAAI,CAAC,KAAK,CAAC;gBACtC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACxB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBACjB,OAAO,OAAO,CACZ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;wBACrD,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;qBACtB,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,CACL,IAAI,aAAa,CAAC,IAAI,EAAE;oBACtB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;iBAC1C,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sGAAsG;AACtG,SAAS,YAAY,CACnB,CAAgB,EAChB,IAAiB,EACjB,KAA0C;IAE1C,2FAA2F;IAC3F,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,qBAAqB,CAC/B,OAAO,EACP,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CACxD,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAiB,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,yFAAyF;YACzF,MAAM,CAAC,GAAI,IAA0D,CAAC,KAAK,CAAC;YAC5E,CAAC,CAAC,WAAW,CAAC;gBACZ,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE;oBACvD,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC;iBACjC,CAAC;aACmB,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,EAAE,GAAI,GAA0C,CAAC,SAAS,CAAC;YACjE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,EAAE,EAAE,CAAC;gBAC7B,mFAAmF;gBACnF,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,CAAC;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;gBACzB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,uEAAuE;AACvE,MAAM,GAAG,GAAG,iBAAiB,CAAC;AAE9B;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,IAAmB,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAC5B,SAAS,CACP,KAAK,CACH,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;QACJ,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CACT,CACF,CAAC;IACJ,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO;QAC/B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACpB,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAS,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAQ,IAAI,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE;YACpC,KAAK,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;YAC5C,GAAG,CAAC,EAAE,EAAE,IAAI;gBACV,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAC/B,IAAI,IAAI,KAAK,MAAM,CAAC,OAAO;oBACzB,OAAO,GAAG,EAAE;wBACV,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;wBAC3B,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;oBAChC,CAAC,CAAC;gBACJ,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAClE,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;QACH,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,uEAAuE;IACvE,MAAM,MAAM,GAAG,CAAC,CAAM,EAAO,EAAE;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAM,EAAW,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,yFAAyF;IACzF,WAAW;IACX,MAAM,KAAK,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;;gBACrC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAU,CAAC;QACf,IAAI,CAAC;YACH,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,UAAU,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAS,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,EAAE,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CACzB,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,6EAA6E;QAC7E,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAG,CAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,MAAM,CAAC,CAAC;AACV,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAI,KAAQ;IAC5B,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kGAAkG;AAClG,SAAS,aAAa,CAAC,IAAc;IACnC,IAAI,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAqB,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC/D,gBAAgB,CAAC,KAAK,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAkB,CAAC,CAAC;YACtE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC5B,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,mBAAmB,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;YAC1C,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { fetchOverDuplex, serveFetchOverDuplex } from \"@statewalker/webrun-http-streams\";\nimport {\n  callPort,\n  duplexOverPort,\n  listenPort,\n  type MessageTarget,\n  multiplexPort,\n  NO_TIMEOUT,\n  type PortMux,\n  serveDuplexOverPort,\n  structuredCodec,\n} from \"@statewalker/webrun-rpc\";\nimport { cross, pipeTo, rpcPromise, STUB } from \"../core/handles.js\";\nimport { withUrl } from \"../core/request-body.js\";\nimport { type Frame, type FrameEnd, portEnd, relayFrames } from \"../ws/frames.js\";\nimport { CellsResponse, CfWebSocket, takeClientPort } from \"../ws/server.js\";\nimport { carryWebSocketHeaders } from \"../ws/upgrade.js\";\n\n/**\n * Isolation for loaded Workers (celld runs each in its own V8 isolate): the loaded code runs\n * in a separate realm — a worker thread on Node, a Dedicated Worker in browsers — and talks\n * to the host over one MessagePort, multiplexed with `@statewalker/webrun-rpc`. The host keeps\n * everything else: bindings in the loaded Worker's env are reached through stubs, and its logs\n * come back for Tail Workers. Errors cross with their own properties (`name`, `code`, …).\n * Functions, `RpcTarget`s and stubs anywhere in a call or result cross by reference (as\n * workerd passes them): the far side gets a stub whose calls come back.\n *\n * Calls (one port, both directions; each names an `answer`, which the serving side keeps until\n * the caller has the result, so calls on it can be sent before then — promise pipelining):\n *   host → isolate   load {source|url, env, outbound}                     → loaded {exports}\n *                    call {name, method, args, props}                     → result\n *   isolate → host   log {level, args}\n *   either way       ref {id|on, path, args}  (a call on a stub of the other side's value, or\n *                                              on answer `on`: `path` is the property path\n *                                              called, [] the value itself)\n *                    release {id|answer}      (that stub was disposed or collected; the caller\n *                                              has that answer)\n * Fetches: one port per request (meta: its target and URL), HTTP/1.1 with streamed bodies,\n * as cells-http over a port (src/transport/port.ts): host → isolate to an export or facet,\n * isolate → host for the loaded code's global `fetch()` when a `globalOutbound` Fetcher routes it.\n * A WebSocket upgrade (host → isolate) has a port of its own instead, since HTTP/1.1 drops the\n * `Upgrade` header: its meta carries the request's method and headers; the isolate answers with\n * the response's head (and body, unless it is a 101), then both sides relay the socket's frames.\n */\nexport interface PortLike {\n  postMessage(msg: unknown, transfer?: Transferable[]): void;\n  addEventListener?(type: \"message\", fn: (e: { data: unknown }) => void): void;\n  removeEventListener?(type: \"message\", fn: (e: { data: unknown }) => void): void;\n  on?(type: \"message\", fn: (data: unknown) => void): void;\n  off?(type: \"message\", fn: (data: unknown) => void): void;\n  start?(): void;\n}\n\n/** Where a fetch goes in the isolate: an export of the loaded Worker, or one of its facets. */\nexport type FetchTarget =\n  | { name: string; props?: unknown }\n  | { className: string; cellKey: string };\ntype Fetch = (target: FetchTarget, req: Request) => Promise<Response>;\n\nexport type Call = <T = unknown>(msg: object) => Promise<T>;\ntype Handle = (msg: any) => Promise<unknown>;\n\n/**\n * The host's end of an isolate's port: one webrun-rpc multiplexer over it, a calls port on\n * which each side calls the other (`callPort`/`listenPort`, no timeout: a call lasts as long\n * as the work it starts), and a port per fetch. `outbound` serves the loaded code's global\n * `fetch()` (its `globalOutbound` Fetcher).\n */\nexport async function hostPort(\n  port: PortLike,\n  handle: Handle,\n  outbound?: (req: Request) => Promise<Response>,\n): Promise<{ call: Call; fetch: Fetch; closeSockets(): void }> {\n  const mux = multiplexPort(messageTarget(port), {\n    codec: structuredCodec,\n    side: \"initiator\",\n    onPort(p, meta) {\n      const m = meta as { kind?: string; url: string } | undefined;\n      if (m?.kind !== \"outbound\" || !outbound) return false;\n      serveFetch(p, m.url, outbound);\n      return true;\n    },\n  });\n  const call = callsOver(await mux.openPort({ kind: \"calls\" }), handle);\n  // The sockets open into the isolate: told it stopped (1001) when it does.\n  const sockets = new Set<(code: number, reason: string) => void>();\n  const fetch: Fetch = (target, req) =>\n    isUpgrade(req)\n      ? upgradeOver(mux, { kind: \"upgrade\", target }, req, sockets)\n      : fetchOver(mux, { kind: \"fetch\", target }, req);\n  const closeSockets = () => {\n    for (const end of sockets) end(1001, \"the loaded Worker stopped\");\n    sockets.clear();\n  };\n  return { call, fetch, closeSockets };\n}\n\n/**\n * The isolate's end: accepts the ports the host opens. Everything the isolate calls the host\n * for happens while serving a host call, so the calls port is open by then. `outbound` sends\n * a fetch to the host's `globalOutbound`.\n */\nexport function isolatePort(\n  port: PortLike,\n  handle: Handle,\n  fetch: Fetch,\n): { call: Call; outbound: (req: Request) => Promise<Response> } {\n  let calls: Call | undefined;\n  const mux = multiplexPort(messageTarget(port), {\n    codec: structuredCodec,\n    side: \"responder\",\n    onPort(p, meta) {\n      const m = meta as { kind?: string; target: FetchTarget; url: string } | undefined;\n      if (m?.kind === \"fetch\") {\n        serveFetch(p, m.url, (r) => fetch(m.target, r));\n        return true;\n      }\n      if (m?.kind === \"upgrade\") {\n        serveUpgrade(p, m as unknown as UpgradeMeta, (r) => fetch(m.target, r));\n        return true;\n      }\n      if (m?.kind !== \"calls\" || calls) return false;\n      calls = callsOver(p, handle);\n      return true;\n    },\n  });\n  return {\n    call: (msg) => calls!(msg),\n    outbound: (req) => fetchOver(mux, { kind: \"outbound\" }, req),\n  };\n}\n\n/** A fetch over a new port of `mux`; the URL rides in the meta (the HTTP/1.1 wire drops its scheme). */\nfunction fetchOver(mux: PortMux, meta: object, req: Request): Promise<Response> {\n  return fetchOverDuplex(\n    (input) =>\n      (async function* () {\n        yield* duplexOverPort(await mux.openPort({ ...meta, url: req.url }))(input);\n      })(),\n    req,\n  );\n}\n\n/** Serves the fetch on port `p` (its URL from the meta) with `fetch`. */\nfunction serveFetch(p: MessageTarget, url: string, fetch: (req: Request) => Promise<Response>) {\n  serveDuplexOverPort(\n    p,\n    serveFetchOverDuplex((req) => withUrl(req, url).then(fetch).catch(throwOwn)),\n  );\n}\n\nconst isUpgrade = (req: Request) => req.headers.get(\"upgrade\")?.toLowerCase() === \"websocket\";\n\ninterface UpgradeMeta {\n  url: string;\n  method: string;\n  headers: [string, string][];\n}\n/** The isolate's answer to an upgrade: the head of its response, or the error it threw. */\ntype UpgradeHead =\n  | {\n      status: number;\n      statusText?: string;\n      headers: [string, string][];\n      body: ArrayBuffer | null;\n    }\n  | { error: unknown };\n\n/** A port of the multiplexer as one end of a frame relay. */\nconst muxEnd = (p: MessageTarget): FrameEnd => ({\n  post: (f) => p.postMessage(f),\n  listen: (fn) => {\n    p.addEventListener(\"message\", (e) => fn(e.data as Frame));\n    void p.start?.();\n  },\n  close: () => void p.close?.(),\n});\n\n/** Statuses whose response has no body (`new Response(body, …)` refuses one). */\nconst nullBody = (status: number) => [101, 204, 205, 304].includes(status);\n\n/**\n * A WebSocket upgrade over a port of its own. A 101 answer becomes a Workers response whose\n * `webSocket` is a client end here; its frames and the isolate's are relayed over the port until\n * the socket's closing handshake, or `sockets`' close (the isolate stops). Any other answer\n * closes the port.\n */\nasync function upgradeOver(\n  mux: PortMux,\n  meta: object,\n  req: Request,\n  sockets: Set<(code: number, reason: string) => void>,\n): Promise<Response> {\n  const p = await mux.openPort({\n    ...meta,\n    url: req.url,\n    method: req.method,\n    headers: [...req.headers],\n  } satisfies UpgradeMeta);\n  return new Promise((resolve, reject) => {\n    const onHead = (e: MessageEvent) => {\n      p.removeEventListener(\"message\", onHead);\n      try {\n        const head = e.data as UpgradeHead;\n        if (\"error\" in head) throw head.error;\n        if (head.status !== 101) {\n          void p.close?.();\n          return resolve(\n            new Response(nullBody(head.status) ? null : head.body, {\n              status: head.status,\n              statusText: head.statusText,\n              headers: head.headers,\n            }),\n          );\n        }\n        const channel = new MessageChannel();\n        const end = relayFrames(portEnd(channel.port2), muxEnd(p), () => sockets.delete(end));\n        sockets.add(end);\n        resolve(\n          new CellsResponse(null, {\n            status: 101,\n            headers: head.headers,\n            webSocket: new CfWebSocket(channel.port1),\n          }),\n        );\n      } catch (err) {\n        void p.close?.();\n        reject(err);\n      }\n    };\n    p.addEventListener(\"message\", onHead);\n    void p.start?.();\n  });\n}\n\n/** Serves an upgrade on port `p`: the loaded code's 101 hands its client end's frames to the port. */\nfunction serveUpgrade(\n  p: MessageTarget,\n  meta: UpgradeMeta,\n  fetch: (req: Request) => Promise<Response>,\n) {\n  // A browser drops `Upgrade` and `Sec-WebSocket-*` from `new Request()`: carried over here.\n  const headers = new Headers(meta.headers);\n  const req = carryWebSocketHeaders(\n    headers,\n    new Request(meta.url, { method: meta.method, headers }),\n  );\n  const answer = (head: UpgradeHead) => {\n    try {\n      p.postMessage(head);\n    } catch {\n      // An error that cannot be copied (a function in its `cause`, say): its name and message.\n      const e = (head as { error?: { name?: unknown; message?: unknown } }).error;\n      p.postMessage({\n        error: Object.assign(new Error(String(e?.message ?? e)), {\n          name: String(e?.name ?? \"Error\"),\n        }),\n      } satisfies UpgradeHead);\n    }\n  };\n  void (async () => {\n    try {\n      const res = await fetch(req);\n      const ws = (res as { webSocket?: CfWebSocket | null }).webSocket;\n      if (res.status === 101 && ws) {\n        // Listening before the head goes out: the host relays frames as soon as it has it.\n        relayFrames(portEnd(takeClientPort(ws)), muxEnd(p));\n        answer({ status: 101, headers: [...res.headers], body: null });\n        return;\n      }\n      answer({\n        status: res.status,\n        statusText: res.statusText,\n        headers: [...res.headers],\n        body: nullBody(res.status) ? null : await res.arrayBuffer(),\n      });\n    } catch (error) {\n      answer({ error });\n    }\n    void p.close?.();\n  })();\n}\n\n/** Marks a value passed by reference in a message: `{ [REF]: id }`. */\nconst REF = \"\\u0000cellb.ref\";\n\n/**\n * The calls of one port, with values passed by reference: each side keeps the values it\n * passed (by id, and how many ids hold each); the other side calls them through stubs. A\n * stub's `Symbol.dispose` (or its garbage collection) releases its id; the last release of a\n * value runs the value's own `Symbol.dispose`, as workerd does for an `RpcTarget`. A call\n * returns an RpcPromise: calls on it go to the other side at once, naming its answer.\n */\nfunction callsOver(port: MessageTarget, handle: Handle): Call {\n  const values = new Map<number, any>();\n  const answers = new Map<number, unknown>();\n  let lastAnswer = 0;\n  const holders = new Map<unknown, number>();\n  let lastId = 0;\n  const encode = (v: unknown) =>\n    cloneable(\n      cross(\n        v,\n        (x) => {\n          values.set(++lastId, x);\n          holders.set(x, (holders.get(x) ?? 0) + 1);\n          return { [REF]: lastId };\n        },\n        (x) => x, // the port copies the rest\n      ),\n    );\n  const release = (id: number) => {\n    const v = values.get(id);\n    if (!values.delete(id)) return;\n    const n = (holders.get(v) ?? 1) - 1;\n    if (n) holders.set(v, n);\n    else {\n      holders.delete(v);\n      v[Symbol.dispose]?.();\n    }\n  };\n  const send = (msg: object) => callPort(port, msg, { timeout: NO_TIMEOUT }).catch(() => {});\n  const collected = new FinalizationRegistry<number>((id) => send({ type: \"release\", id }));\n  const stubOf = (id: number) => {\n    const invoke = (path: string[], args: unknown[]) => call({ type: \"ref\", id, path, args });\n    const stub: any = new Proxy(() => {}, {\n      apply: (_t, _this, args) => invoke([], args),\n      get(_t, prop) {\n        if (prop === STUB) return true;\n        if (prop === Symbol.dispose)\n          return () => {\n            collected.unregister(stub);\n            send({ type: \"release\", id });\n          };\n        if (prop === \"then\" || typeof prop === \"symbol\") return undefined;\n        return (...args: unknown[]) => invoke([prop], args);\n      },\n    });\n    collected.register(stub, id, stub);\n    return stub;\n  };\n  // Messages arrive as fresh copies: stubs replace the markers in place.\n  const decode = (v: any): any => {\n    if (Array.isArray(v)) for (let i = 0; i < v.length; i++) v[i] = decode(v[i]);\n    else if (v && Object.getPrototypeOf(v) === Object.prototype) {\n      if (typeof v[REF] === \"number\") return stubOf(v[REF]);\n      for (const k of Object.keys(v)) v[k] = decode(v[k]);\n    }\n    return v;\n  };\n  const run = (m: any): unknown => {\n    if (m.type !== \"ref\") return handle(m);\n    if (m.on !== undefined) return pipeTo(answers.get(m.on), m.path, m.args);\n    const v = values.get(m.id);\n    if (v === undefined) throw new Error(\"A stub was used after it was disposed.\");\n    return pipeTo(v, m.path, m.args);\n  };\n  // The answer is kept as the message arrives: a pipelined call on it may arrive before it\n  // settles.\n  const serve = async (m: any) => {\n    if (m.type === \"release\") {\n      if (m.answer === undefined) release(m.id);\n      else answers.delete(m.answer);\n      return;\n    }\n    let r: unknown;\n    try {\n      r = run(m);\n    } catch (e) {\n      r = Promise.reject(e);\n    }\n    answers.set(m.answer, r);\n    return r;\n  };\n  listenPort(port, (msg) => serve(decode(msg)).then(encode).catch(throwOwn));\n  const call: Call = (msg) => {\n    const answer = ++lastAnswer;\n    const result = (async () =>\n      decode(await callPort(port, encode({ ...msg, answer }), { timeout: NO_TIMEOUT })))();\n    // Calls on the answer sent before now are ahead of this release on the port.\n    const done = () => send({ type: \"release\", answer });\n    result.then(done, done);\n    return rpcPromise(result, (path, args) => call({ type: \"ref\", on: answer, path, args }));\n  };\n  return call;\n}\n\n/** Errors cross with their own properties (so `code` does); `name` is inherited, so copy it. */\nfunction throwOwn(e: unknown): never {\n  if (e && typeof e === \"object\")\n    Object.defineProperty(e, \"name\", { value: (e as Error).name, enumerable: true });\n  throw e;\n}\n\n/**\n * Throws `DataCloneError` for a value the port cannot carry: the multiplexer drops a message\n * it fails to post, and the call would wait forever.\n */\nfunction cloneable<T>(value: T): T {\n  structuredClone(value);\n  return value;\n}\n\n/** A worker_threads Worker is an EventEmitter; MessagePorts and Dedicated Workers are targets. */\nfunction messageTarget(port: PortLike): MessageTarget {\n  if (port.addEventListener) return port as MessageTarget;\n  const on = port.on!.bind(port);\n  const listeners = new Map<unknown, (data: unknown) => void>();\n  return {\n    postMessage: (msg, transfer) => port.postMessage(msg, transfer),\n    addEventListener(_type, fn) {\n      const listener = (data: unknown) => void fn({ data } as MessageEvent);\n      listeners.set(fn, listener);\n      on(\"message\", listener);\n    },\n    removeEventListener(_type, fn) {\n      port.off?.(\"message\", listeners.get(fn)!);\n      listeners.delete(fn);\n    },\n  };\n}\n"]}

package/dist/node-compat/crypto.js

@@ -2,9 +2,9 @@
  * `node:crypto` subset for browsers (nodejs_compat): hashes, HMAC, random, timingSafeEqual, and
  * public `KeyObject`s (`createPublicKey`) without signature checks.
  */
-import { hmac } from "@noble/hashes/hmac";
-import { md5, sha1 } from "@noble/hashes/legacy";
-import { sha256, sha384, sha512 } from "@noble/hashes/sha2";
+import { hmac } from "@noble/hashes/hmac.js";
+import { md5, sha1 } from "@noble/hashes/legacy.js";
+import { sha256, sha384, sha512 } from "@noble/hashes/sha2.js";
 import { Buffer } from "buffer";
 const HASHES = { md5, sha1, sha256, sha384, sha512 };
 const algo = (name) => {

package/dist/node-compat/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/node-compat/crypto.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAW,CAAC;AAE9D,MAAM,IAAI,GAAG,CAAC,IAAY,EAAyB,EAAE;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AACF,MAAM,KAAK,GAAG,CAAC,IAAyB,EAAE,GAAoB,EAAE,EAAE,CAChE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAErF,MAAM,IAAI;IAEqB,EAAE;IAD/B,MAAM,GAAiB,EAAE,CAAC;IAC1B,YAA6B,EAAiC;kBAAjC,EAAE;IAAkC,CAAC;IAClE,MAAM,CAAC,IAAyB,EAAE,GAAoB;QACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAoB;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAwB;IAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAU,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AACD,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IAC1D,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAC/B,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,IAAI,GAAyB;IACjC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC;IAC/D,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;IAClD,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC;IAC/B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAE,MAAgB,EAAE,EAAE;IACrD,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,SAAS,KAAK,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,SAAS;IACX,IAAI,GAAG,QAAQ,CAAC;IAChB,iBAAiB,CAAqB;IACtC,IAAI,CAAa;IACjB,OAAO,CAAmB;IACnC,YAAY,GAAe,EAAE,MAAwB;QACnD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,iBAAiB;YACpB,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,CAAC,IAAI,GAA8C,EAAE;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;YACzE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChF,OAAO,cAAc,KAAK,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,CAAC,KAAgB;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAY,CAAC;QAClC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAY,CAAC;QACnC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;CACF;AAQD,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/F,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,qDAAqD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;QAC3F,OAAO,IAAI,SAAS,CAClB,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,EAC/D,CAAC,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAC7C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,QAAQ,GAAG,GAAU,EAAE;IAC3B,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,UAAU,MAAM,CAAC,GAAG,KAAgB;IACxC,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,OAAO;QACL,MAAM;YACJ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;AAC3C,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAC/C,eAAe;IACb,UAAU;IACV,UAAU;IACV,UAAU;IACV,WAAW;IACX,eAAe;IACf,SAAS;IACT,eAAe;IACf,MAAM;IACN,YAAY;IACZ,SAAS;IACT,MAAM;CACP,CAAC","sourcesContent":["/**\n * `node:crypto` subset for browsers (nodejs_compat): hashes, HMAC, random, timingSafeEqual, and\n * public `KeyObject`s (`createPublicKey`) without signature checks.\n */\nimport { hmac } from \"@noble/hashes/hmac\";\nimport { md5, sha1 } from \"@noble/hashes/legacy\";\nimport { sha256, sha384, sha512 } from \"@noble/hashes/sha2\";\nimport { Buffer } from \"buffer\";\n\nconst HASHES = { md5, sha1, sha256, sha384, sha512 } as const;\ntype Algo = keyof typeof HASHES;\nconst algo = (name: string): (typeof HASHES)[Algo] => {\n  const h = HASHES[name.toLowerCase().replace(\"-\", \"\") as Algo];\n  if (!h) throw new Error(`Digest method not supported: ${name}`);\n  return h;\n};\nconst bytes = (data: string | Uint8Array, enc?: BufferEncoding) =>\n  typeof data === \"string\" ? new Uint8Array(Buffer.from(data, enc ?? \"utf8\")) : data;\n\nclass Hash {\n  #parts: Uint8Array[] = [];\n  constructor(private readonly fn: (m: Uint8Array) => Uint8Array) {}\n  update(data: string | Uint8Array, enc?: BufferEncoding): this {\n    this.#parts.push(bytes(data, enc));\n    return this;\n  }\n  digest(enc?: BufferEncoding): Buffer | string {\n    const all = Buffer.concat(this.#parts);\n    const out = Buffer.from(this.fn(new Uint8Array(all)));\n    return enc ? out.toString(enc) : out;\n  }\n}\n\nexport function createHash(name: string) {\n  return new Hash(algo(name));\n}\nexport function createHmac(name: string, key: string | Uint8Array) {\n  const h = algo(name);\n  return new Hash((m) => hmac(h as never, bytes(key), m));\n}\nexport function randomUUID(): string {\n  return crypto.randomUUID();\n}\nexport function randomBytes(n: number): Buffer {\n  return Buffer.from(crypto.getRandomValues(new Uint8Array(n)));\n}\nexport function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.byteLength !== b.byteLength)\n    throw new RangeError(\"Input buffers must have the same byte length\");\n  let d = 0;\n  for (let i = 0; i < a.byteLength; i++) d |= a[i] ^ b[i];\n  return d === 0;\n}\n\nconst OIDS: [number[], string][] = [\n  [[0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01], \"rsa\"],\n  [[0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01], \"ec\"],\n  [[0x2b, 0x65, 0x70], \"ed25519\"],\n  [[0x2b, 0x65, 0x71], \"ed448\"],\n];\nconst contains = (hay: Uint8Array, needle: number[]) => {\n  outer: for (let i = 0; i + needle.length <= hay.length; i++) {\n    for (let j = 0; j < needle.length; j++) if (hay[i + j] !== needle[j]) continue outer;\n    return true;\n  }\n  return false;\n};\n\n/**\n * A public key as `createPublicKey` returns it: its type and its bytes, exportable as DER or\n * PEM. Libraries build these when they load (sigstore's trust roots, in EmDash's plugin\n * registry); signatures are checked through `verify`, which is not available here.\n */\nexport class KeyObject {\n  readonly type = \"public\";\n  readonly asymmetricKeyType: string | undefined;\n  readonly #der: Uint8Array;\n  readonly #format: \"spki\" | \"pkcs1\";\n  constructor(der: Uint8Array, format: \"spki\" | \"pkcs1\") {\n    this.#der = der;\n    this.#format = format;\n    this.asymmetricKeyType =\n      format === \"pkcs1\" ? \"rsa\" : OIDS.find(([oid]) => contains(der.subarray(0, 32), oid))?.[1];\n  }\n  export(opts: { format?: \"der\" | \"pem\"; type?: string } = {}): Buffer | string {\n    if (opts.format === \"pem\") {\n      const label = this.#format === \"pkcs1\" ? \"RSA PUBLIC KEY\" : \"PUBLIC KEY\";\n      const b64 = Buffer.from(this.#der).toString(\"base64\").replace(/.{64}/g, \"$&\\n\");\n      return `-----BEGIN ${label}-----\\n${b64.replace(/\\n$/, \"\")}\\n-----END ${label}-----\\n`;\n    }\n    return Buffer.from(this.#der);\n  }\n  equals(other: KeyObject): boolean {\n    const a = this.export() as Buffer;\n    const b = other.export() as Buffer;\n    return a.length === b.length && timingSafeEqual(a, b);\n  }\n}\n\ntype KeyInput =\n  | string\n  | Uint8Array\n  | KeyObject\n  | { key: string | Uint8Array; format?: \"pem\" | \"der\"; type?: \"spki\" | \"pkcs1\" };\n\nexport function createPublicKey(input: KeyInput): KeyObject {\n  if (input instanceof KeyObject) return input;\n  const spec = typeof input === \"string\" || input instanceof Uint8Array ? { key: input } : input;\n  if (typeof spec.key === \"string\" || spec.format === \"pem\") {\n    const pem = typeof spec.key === \"string\" ? spec.key : Buffer.from(spec.key).toString(\"utf8\");\n    const m = /-----BEGIN ([A-Z ]+)-----([\\s\\S]*?)-----END \\1-----/.exec(pem);\n    if (!m) throw new TypeError(\"createPublicKey: not a PEM public key\");\n    if (!/PUBLIC KEY/.test(m[1]))\n      throw new Error(`createPublicKey: ${m[1]} is not supported in browsers (nodejs_compat)`);\n    return new KeyObject(\n      new Uint8Array(Buffer.from(m[2].replace(/\\s+/g, \"\"), \"base64\")),\n      m[1] === \"RSA PUBLIC KEY\" ? \"pkcs1\" : \"spki\",\n    );\n  }\n  return new KeyObject(new Uint8Array(spec.key), spec.type === \"pkcs1\" ? \"pkcs1\" : \"spki\");\n}\n\nconst noVerify = (): never => {\n  throw new Error(\n    \"node:crypto signature verification is not available in browsers (nodejs_compat)\",\n  );\n};\nexport function verify(..._args: unknown[]): boolean {\n  return noVerify();\n}\nexport function createVerify(_algorithm: string) {\n  return {\n    update() {\n      return this;\n    },\n    verify: noVerify,\n  };\n}\n\nexport const webcrypto = globalThis.crypto;\nexport const subtle = globalThis.crypto.subtle;\nexport default {\n  createHash,\n  createHmac,\n  randomUUID,\n  randomBytes,\n  timingSafeEqual,\n  KeyObject,\n  createPublicKey,\n  verify,\n  createVerify,\n  webcrypto,\n  subtle,\n};\n"]}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/node-compat/crypto.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAW,CAAC;AAE9D,MAAM,IAAI,GAAG,CAAC,IAAY,EAAyB,EAAE;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AACF,MAAM,KAAK,GAAG,CAAC,IAAyB,EAAE,GAAoB,EAAE,EAAE,CAChE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAErF,MAAM,IAAI;IAEqB,EAAE;IAD/B,MAAM,GAAiB,EAAE,CAAC;IAC1B,YAA6B,EAAiC;kBAAjC,EAAE;IAAkC,CAAC;IAClE,MAAM,CAAC,IAAyB,EAAE,GAAoB;QACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAoB;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAwB;IAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAU,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AACD,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,CAAa,EAAE,CAAa;IAC1D,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAC/B,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,IAAI,GAAyB;IACjC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC;IAC/D,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;IAClD,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC;IAC/B,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAE,MAAgB,EAAE,EAAE;IACrD,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,SAAS,KAAK,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,SAAS;IACX,IAAI,GAAG,QAAQ,CAAC;IAChB,iBAAiB,CAAqB;IACtC,IAAI,CAAa;IACjB,OAAO,CAAmB;IACnC,YAAY,GAAe,EAAE,MAAwB;QACnD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,iBAAiB;YACpB,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,CAAC,IAAI,GAA8C,EAAE;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;YACzE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChF,OAAO,cAAc,KAAK,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,CAAC,KAAgB;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAY,CAAC;QAClC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAY,CAAC;QACnC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;CACF;AAQD,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/F,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,qDAAqD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;QAC3F,OAAO,IAAI,SAAS,CAClB,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,EAC/D,CAAC,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAC7C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,QAAQ,GAAG,GAAU,EAAE;IAC3B,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,UAAU,MAAM,CAAC,GAAG,KAAgB;IACxC,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,OAAO;QACL,MAAM;YACJ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;AAC3C,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAC/C,eAAe;IACb,UAAU;IACV,UAAU;IACV,UAAU;IACV,WAAW;IACX,eAAe;IACf,SAAS;IACT,eAAe;IACf,MAAM;IACN,YAAY;IACZ,SAAS;IACT,MAAM;CACP,CAAC","sourcesContent":["/**\n * `node:crypto` subset for browsers (nodejs_compat): hashes, HMAC, random, timingSafeEqual, and\n * public `KeyObject`s (`createPublicKey`) without signature checks.\n */\nimport { hmac } from \"@noble/hashes/hmac.js\";\nimport { md5, sha1 } from \"@noble/hashes/legacy.js\";\nimport { sha256, sha384, sha512 } from \"@noble/hashes/sha2.js\";\nimport { Buffer } from \"buffer\";\n\nconst HASHES = { md5, sha1, sha256, sha384, sha512 } as const;\ntype Algo = keyof typeof HASHES;\nconst algo = (name: string): (typeof HASHES)[Algo] => {\n  const h = HASHES[name.toLowerCase().replace(\"-\", \"\") as Algo];\n  if (!h) throw new Error(`Digest method not supported: ${name}`);\n  return h;\n};\nconst bytes = (data: string | Uint8Array, enc?: BufferEncoding) =>\n  typeof data === \"string\" ? new Uint8Array(Buffer.from(data, enc ?? \"utf8\")) : data;\n\nclass Hash {\n  #parts: Uint8Array[] = [];\n  constructor(private readonly fn: (m: Uint8Array) => Uint8Array) {}\n  update(data: string | Uint8Array, enc?: BufferEncoding): this {\n    this.#parts.push(bytes(data, enc));\n    return this;\n  }\n  digest(enc?: BufferEncoding): Buffer | string {\n    const all = Buffer.concat(this.#parts);\n    const out = Buffer.from(this.fn(new Uint8Array(all)));\n    return enc ? out.toString(enc) : out;\n  }\n}\n\nexport function createHash(name: string) {\n  return new Hash(algo(name));\n}\nexport function createHmac(name: string, key: string | Uint8Array) {\n  const h = algo(name);\n  return new Hash((m) => hmac(h as never, bytes(key), m));\n}\nexport function randomUUID(): string {\n  return crypto.randomUUID();\n}\nexport function randomBytes(n: number): Buffer {\n  return Buffer.from(crypto.getRandomValues(new Uint8Array(n)));\n}\nexport function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.byteLength !== b.byteLength)\n    throw new RangeError(\"Input buffers must have the same byte length\");\n  let d = 0;\n  for (let i = 0; i < a.byteLength; i++) d |= a[i] ^ b[i];\n  return d === 0;\n}\n\nconst OIDS: [number[], string][] = [\n  [[0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01], \"rsa\"],\n  [[0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01], \"ec\"],\n  [[0x2b, 0x65, 0x70], \"ed25519\"],\n  [[0x2b, 0x65, 0x71], \"ed448\"],\n];\nconst contains = (hay: Uint8Array, needle: number[]) => {\n  outer: for (let i = 0; i + needle.length <= hay.length; i++) {\n    for (let j = 0; j < needle.length; j++) if (hay[i + j] !== needle[j]) continue outer;\n    return true;\n  }\n  return false;\n};\n\n/**\n * A public key as `createPublicKey` returns it: its type and its bytes, exportable as DER or\n * PEM. Libraries build these when they load (sigstore's trust roots, in EmDash's plugin\n * registry); signatures are checked through `verify`, which is not available here.\n */\nexport class KeyObject {\n  readonly type = \"public\";\n  readonly asymmetricKeyType: string | undefined;\n  readonly #der: Uint8Array;\n  readonly #format: \"spki\" | \"pkcs1\";\n  constructor(der: Uint8Array, format: \"spki\" | \"pkcs1\") {\n    this.#der = der;\n    this.#format = format;\n    this.asymmetricKeyType =\n      format === \"pkcs1\" ? \"rsa\" : OIDS.find(([oid]) => contains(der.subarray(0, 32), oid))?.[1];\n  }\n  export(opts: { format?: \"der\" | \"pem\"; type?: string } = {}): Buffer | string {\n    if (opts.format === \"pem\") {\n      const label = this.#format === \"pkcs1\" ? \"RSA PUBLIC KEY\" : \"PUBLIC KEY\";\n      const b64 = Buffer.from(this.#der).toString(\"base64\").replace(/.{64}/g, \"$&\\n\");\n      return `-----BEGIN ${label}-----\\n${b64.replace(/\\n$/, \"\")}\\n-----END ${label}-----\\n`;\n    }\n    return Buffer.from(this.#der);\n  }\n  equals(other: KeyObject): boolean {\n    const a = this.export() as Buffer;\n    const b = other.export() as Buffer;\n    return a.length === b.length && timingSafeEqual(a, b);\n  }\n}\n\ntype KeyInput =\n  | string\n  | Uint8Array\n  | KeyObject\n  | { key: string | Uint8Array; format?: \"pem\" | \"der\"; type?: \"spki\" | \"pkcs1\" };\n\nexport function createPublicKey(input: KeyInput): KeyObject {\n  if (input instanceof KeyObject) return input;\n  const spec = typeof input === \"string\" || input instanceof Uint8Array ? { key: input } : input;\n  if (typeof spec.key === \"string\" || spec.format === \"pem\") {\n    const pem = typeof spec.key === \"string\" ? spec.key : Buffer.from(spec.key).toString(\"utf8\");\n    const m = /-----BEGIN ([A-Z ]+)-----([\\s\\S]*?)-----END \\1-----/.exec(pem);\n    if (!m) throw new TypeError(\"createPublicKey: not a PEM public key\");\n    if (!/PUBLIC KEY/.test(m[1]))\n      throw new Error(`createPublicKey: ${m[1]} is not supported in browsers (nodejs_compat)`);\n    return new KeyObject(\n      new Uint8Array(Buffer.from(m[2].replace(/\\s+/g, \"\"), \"base64\")),\n      m[1] === \"RSA PUBLIC KEY\" ? \"pkcs1\" : \"spki\",\n    );\n  }\n  return new KeyObject(new Uint8Array(spec.key), spec.type === \"pkcs1\" ? \"pkcs1\" : \"spki\");\n}\n\nconst noVerify = (): never => {\n  throw new Error(\n    \"node:crypto signature verification is not available in browsers (nodejs_compat)\",\n  );\n};\nexport function verify(..._args: unknown[]): boolean {\n  return noVerify();\n}\nexport function createVerify(_algorithm: string) {\n  return {\n    update() {\n      return this;\n    },\n    verify: noVerify,\n  };\n}\n\nexport const webcrypto = globalThis.crypto;\nexport const subtle = globalThis.crypto.subtle;\nexport default {\n  createHash,\n  createHmac,\n  randomUUID,\n  randomBytes,\n  timingSafeEqual,\n  KeyObject,\n  createPublicKey,\n  verify,\n  createVerify,\n  webcrypto,\n  subtle,\n};\n"]}

package/dist/project/browser-host.js

@@ -1,6 +1,6 @@
 import { BrowserFilesApi } from "@statewalker/webrun-files-browser";
 import { installLtxVfs } from "../adapters/ltx-vfs.js";
-import { sahpoolOpener, WasmSqliteDriver, wasmMemoryOpener } from "../adapters/wasm-sqlite.js";
+import { sahpoolOpener, tuneCellConnection, WasmSqliteDriver, wasmMemoryOpener, } from "../adapters/wasm-sqlite.js";
 import { celldBucket } from "../bucket/celld-cells.js";
 import { idbObjectStore } from "../bucket/idb-object-store.js";
 import { filesApiObjectStore } from "../bucket/object-store.js";
@@ -10,7 +10,7 @@ import { installAsyncContext } from "../node-compat/async_hooks.js";
 import { installNodeGlobals } from "../node-compat/install.js";
 import { browserModuleLoader } from "./browser-modules.js";
 import * as workersModule from "./cloudflare-workers.js";
-import { siteModuleLoader, workersHostRegistry } from "./site.js";
+import { siteModuleLoader, workersHostRegistry } from "./site-loader.js";
 import { workerScope } from "./worker-scope.js";
 import * as workersGlobals from "./workers-globals-module.js";
 import { createProjectRuntime, loadTimeEnv } from "./wrangler.js";
@@ -45,6 +45,7 @@ async function ltxOpener(sqlite3, dir, compactAfter, files) {
     const s3 = sqlite3;
     const open = (cellKey) => {
         const db = new s3.oo1.DB({ filename: cellKey, vfs: name, flags: "c" });
+        tuneCellConnection(sqlite3, db);
         db.exec("PRAGMA journal_mode=MEMORY; PRAGMA synchronous=FULL;");
         // SQLite's C API for inTransaction() only (no page hook or session capture on this VFS).
         return new WasmSqliteDriver(db, undefined, undefined, sqlite3.capi);

package/dist/project/browser-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-host.js","sourceRoot":"","sources":["../../src/project/browser-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG/F,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAoB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAoB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAuB,MAAM,eAAe,CAAC;AA+FvF,KAAK,UAAU,WAAW,CAAC,CAAgB;IACzC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACjC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACpD,OAAO,mBAAmB,CACxB,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAC5F,EAAE,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CAAC,OAAgB,EAAE,GAAW,EAAE,YAAqB,EAAE,KAAc;IAC3F,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,IAAI,GAAG,CAAC,4BAA4B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,wCAAwC,EAC/F,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,4CAA4C;IAC/F,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,OAAO,IAAI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC;IACZ,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,EAAE,GAAG,OAAmE,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAChE,yFAAyF;QACzF,OAAO,IAAI,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAG,OAA2B,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,OAAO;YACL,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,gBAAgB,CAC7B,MAAsB,EACtB,IAAmC,EACnC,KAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;IACpE,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,EAAE,CAAC;QACrB,+FAA+F;QAC/F,iFAAiF;QAChF,UAAsC,CAAC,kBAAkB,GAAG,CAC3D,MAAM,MAAM,CAAC,oCAAoC,CAAC,CACnD,CAAC,mBAAmB,CAAC;QACtB,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACjC,yFAAyF;YACxF,UAAsC,CAAC,iBAAiB,GAAG,GAAG,CAAC;YAChE,MAAM,CAAC,MAAM,CAAE,UAA2D,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,0FAA0F;QAC1F,6FAA6F;QAC7F,8FAA8F;QAC9F,oBAAoB;QACpB,mBAAmB,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG;QACd,GAAG,cAAc;QACjB,OAAO,EAAE,cAAc,CAAC,YAAY;QACpC,QAAQ,EAAE,cAAc,CAAC,aAAa;QACtC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC7D,CAAC,CAAC,cAAc,CAAC,qBAAqB;YACtC,CAAC,CAAC,cAAc,CAAC,aAAa;KACjC,CAAC;IACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,mBAAmB,CAAC;YAClB,aAAa;YACb,oBAAoB,EAAE;gBACpB,GAAG,aAAa;gBAChB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;YACD,YAAY,EAAE,GAAG,IAAI,CAAC,IAAI,SAAS;YACnC,WAAW,EAAE,MAAM,MAAM,CAAC,uBAAuB,CAAC;YAClD,GAAG,OAAO;YACV,wFAAwF;YACxF,uBAAuB;YACvB,IAAI,EAAE,UAAU;gBACd,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC,CAAC,mBAAmB;gBAC1E,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI;YAChB,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,CAAC,CAAC,oBAAoB,GAAG,aAAa,CAAC;IACvC,CAAC,CAAC,mBAAmB,GAAG,KAAK,CAAC,CAAC,yDAAyD;IACxF,CAAC,CAAC,cAAc,GAAG,OAAO,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM;QAChB,CAAC,CAAC,MAAM,MAAM;QACV,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAC7F;QACH,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAA2B;IACrE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,0FAA0F;IAC1F,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;QACjC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;YACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAgB,CAAC,EAAE;gBACrD,OAAO,KAAI,CAAC;gBACZ,OAAO,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;aAChC,CAAC;YACJ,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAgB,EAAE;gBACzC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,eAAe,EAAE,EAAE,EAAE,kCAAkC;aACxD,CAAC,CAAC;IACX,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,UAAU,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,KAAK;QAClB,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpF,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE;QACzE,OAAO;QACP,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE;QAClE,eAAe,EAAE,IAAI,CAAC,aAAa;YACjC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM;gBACjC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,uDAAuD;aAC/E,CAAC;YACJ,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,MAAM,EAAE,0DAA0D;QAC3E,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,EAAE,EAAE,IAAI,CAAC,EAAE;KACZ,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO;QACL,OAAO;QACP,WAAW;QACX,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,sDAAsD;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,KAAK,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,IAAI,YAAY,CAAC;AAC3D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { BrowserFilesApi } from \"@statewalker/webrun-files-browser\";\nimport { installLtxVfs } from \"../adapters/ltx-vfs.js\";\nimport { sahpoolOpener, WasmSqliteDriver, wasmMemoryOpener } from \"../adapters/wasm-sqlite.js\";\nimport type { AssetFiles } from \"../bindings/assets.js\";\nimport type { WorkersAiOptions } from \"../bindings/workers-ai.js\";\nimport { celldBucket } from \"../bucket/celld-cells.js\";\nimport { idbObjectStore } from \"../bucket/idb-object-store.js\";\nimport { filesApiObjectStore, type ObjectStore } from \"../bucket/object-store.js\";\nimport { s3ObjectStore } from \"../bucket/s3-object-store.js\";\nimport type { CellRuntimeOptions, WorkerModule } from \"../core/runtime.js\";\nimport { browserIsolatedLoader } from \"../isolate/browser.js\";\nimport { installAsyncContext } from \"../node-compat/async_hooks.js\";\nimport { installNodeGlobals } from \"../node-compat/install.js\";\nimport { browserModuleLoader } from \"./browser-modules.js\";\nimport * as workersModule from \"./cloudflare-workers.js\";\nimport { siteModuleLoader, workersHostRegistry } from \"./site.js\";\nimport { type WorkerScope, workerScope } from \"./worker-scope.js\";\nimport * as workersGlobals from \"./workers-globals-module.js\";\nimport { createProjectRuntime, loadTimeEnv, type WranglerConfig } from \"./wrangler.js\";\n\n/**\n * Where a browser-hosted project keeps its cells when they must outlive the page or move to\n * other nodes: a celld fleet bucket. Cells, facets and alarms are then exactly celld's\n * (ownership in `own.json`, LTX logs, wake index) and R2 objects live in it too, so the same\n * cells can be served by this browser, by other browsers and by celld nodes, in turn.\n *\n * - `s3`: an S3-compatible bucket, reached directly (the bucket must allow CORS for the page's\n *   origin: methods GET/PUT/DELETE/HEAD, request headers `authorization`, `content-type`,\n *   `x-amz-*`, `if-match`, `if-none-match`; exposed headers `etag`, `last-modified`,\n *   `x-amz-meta-celld-r2`) or through a same-origin proxy (`endpoint` = the proxy,\n *   `signAs` = the real endpoint: SigV4 signs the real host and path).\n * - `opfs`: a bucket in this origin's OPFS — persistence without a server. Conditional writes\n *   are atomic only within one writer, so one tab or worker at a time should own its cells.\n * - `store`: any ObjectStore.\n */\nexport type BrowserBucket =\n  | {\n      s3: {\n        endpoint: string;\n        signAs?: string;\n        bucket: string;\n        prefix?: string;\n        region?: string;\n        accessKeyId: string;\n        secretAccessKey: string;\n      };\n      node: string;\n      leaseTtlMs?: number;\n    }\n  | { opfs: string; node: string; leaseTtlMs?: number }\n  /**\n   * `idb`: a bucket in this origin's IndexedDB (atomic conditional writes across tabs and\n   * workers). Cells then run SQLite in memory and persist through the bucket's page-level logs:\n   * no OPFS pool, so any number of workers can serve cells at once.\n   */\n  | { idb: string; node: string; leaseTtlMs?: number }\n  /**\n   * `ltx`: cells as celld keeps them, LTX files (a snapshot and one file per commit) in an OPFS\n   * directory, read page by page (a SQLite VFS over a store worker): no OPFS pool, and a\n   * cell's memory is its page cache, not its database. A cell is folded into one snapshot\n   * (streamed) past `compactAfter` files (default 64), or once the files after its snapshot hold\n   * more than half of it. See docs/browser-host.md.\n   */\n  | {\n      ltx: string;\n      node: string;\n      leaseTtlMs?: number;\n      compactAfter?: number;\n      /**\n       * The cells' FilesApi in the store worker: OPFS through synchronous handles (default,\n       * `opfs-sync`), OPFS through its asynchronous API (`opfs`), or memory (nothing kept).\n       */\n      files?: \"opfs\" | \"opfs-sync\" | \"memory\";\n    }\n  | { store: ObjectStore; node: string; leaseTtlMs?: number };\n\nexport interface BrowserProjectOptions {\n  config: WranglerConfig;\n  /**\n   * The project's Worker code, imported in this realm once its Workers globals (and with\n   * nodejs_compat `Buffer` and `process`) are installed:\n   * - `bundle`: one ES module built for browsers (`bundleWorkerForBrowser`), whose\n   *   `cloudflare:workers` is `PROJECT_WORKERS_MODULE_SHIM` and whose Workers globals read\n   *   `globalThis.__cellsGlobals`\n   *   (`null`: the project has no `main`). Worker Loader code becomes Blob-URL modules.\n   * - `site`: the base URL of the project's site (`createProjectSite`, hosted by\n   *   webrun-site-host). `main` and Worker Loader code are imported from it.\n   */\n  code: { bundle: string | null } | { site: string };\n  /**\n   * A Dedicated Worker script that serves one loaded Worker (`serveIsolate`): Worker Loader\n   * code then runs isolated, one Dedicated Worker per loaded Worker, as celld's isolates.\n   * The package ships one: `@statewalker/cellb/isolate-worker`.\n   */\n  isolateScript?: URL;\n  /** An initialized SQLite WASM module (`@sqlite.org/sqlite-wasm`). */\n  sqlite3: unknown;\n  /** OPFS sahpool name for this host's SQLite files (one pool per worker). */\n  pool: string;\n  /** OPFS directory for the project's FilesApi (Workers' fs-like bindings, R2 without bucket). */\n  filesDir: string;\n  assetFiles?: AssetFiles;\n  bucket?: BrowserBucket;\n  /**\n   * Cells this runtime does not host: where to send their events (a `Send` over a MessagePort\n   * to the runtime that hosts them, `linkOverPort`), or undefined to host the cell here. With\n   * one runtime per worker and `shardOf` as the placement, cells run in parallel threads.\n   */\n  route?: CellRuntimeOptions[\"route\"];\n  /** The OpenAI-compatible endpoint behind the project's `ai` binding (Workers AI). */\n  ai?: WorkersAiOptions;\n}\n\nasync function bucketStore(b: BrowserBucket): Promise<ObjectStore> {\n  if (\"store\" in b) return b.store;\n  if (\"s3\" in b) return s3ObjectStore({ region: \"us-east-1\", ...b.s3 });\n  if (\"idb\" in b) return idbObjectStore(b.idb);\n  if (\"ltx\" in b) throw new Error(\"an ltx directory is cell storage, not a bucket\");\n  const root = await navigator.storage.getDirectory();\n  return filesApiObjectStore(\n    new BrowserFilesApi({ rootHandle: await root.getDirectoryHandle(b.opfs, { create: true }) }),\n    \"\",\n  );\n}\n\n/**\n * Cells on the LTX VFS: a store worker owns the OPFS directory; each cell is a SQLite database\n * whose main file is its LTX files, read page by page (src/adapters/ltx-vfs.ts).\n */\nasync function ltxOpener(sqlite3: unknown, dir: string, compactAfter?: number, files?: string) {\n  const store = new Worker(\n    new URL(\"../ltx/ltx-store-worker.ts\", import.meta.url) /* `.js` in dist/ (scripts/build.mjs) */,\n    { type: \"module\" },\n  );\n  const sab = new SharedArrayBuffer(8 + 16 * 65536); // room for a read-ahead run of 64 KiB pages\n  // Wait until the store worker runs before any synchronous call: a nested worker is started\n  // (its script fetched) through this worker's event loop, which Atomics.wait would block.\n  const ready = new Promise<void>((resolve, reject) => {\n    store.addEventListener(\"message\", (e) => e.data?.op === \"ready\" && resolve(), { once: false });\n    store.addEventListener(\"error\", (e) => reject(new Error(`ltx store worker: ${e.message}`)));\n  });\n  store.postMessage({ op: \"init\", sab, dir, compactAfter, files });\n  await ready;\n  const { name } = installLtxVfs(sqlite3, { sab, post: (m) => store.postMessage(m) });\n  const s3 = sqlite3 as { oo1: { DB: new (o: Record<string, unknown>) => any } };\n  const open = (cellKey: string) => {\n    const db = new s3.oo1.DB({ filename: cellKey, vfs: name, flags: \"c\" });\n    db.exec(\"PRAGMA journal_mode=MEMORY; PRAGMA synchronous=FULL;\");\n    // SQLite's C API for inTransaction() only (no page hook or session capture on this VFS).\n    return new WasmSqliteDriver(db, undefined, undefined, (sqlite3 as { capi: never }).capi);\n  };\n  return Object.assign(open, {\n    release() {\n      store.terminate();\n    },\n    reserve: async (n: number) => n,\n  });\n}\n\n/** Installs the Workers globals the code reads, then imports its `main`. */\nasync function importWorkerCode(\n  config: WranglerConfig,\n  code: BrowserProjectOptions[\"code\"],\n  scope: WorkerScope,\n): Promise<WorkerModule> {\n  const flags = config.compatibility_flags ?? [];\n  const nodeCompat = flags.some((f) => f.startsWith(\"nodejs_compat\"));\n  if (nodeCompat) {\n    installNodeGlobals();\n    // node:* for bundles built with cellbHostModule (another bundler than bundleWorkerForBrowser);\n    // loaded after installNodeGlobals(), as the npm `util` polyfill reads `process`.\n    (globalThis as Record<string, unknown>).__cellsNodeModules = (\n      await import(\"../node-compat/browser-registry.js\")\n    ).nodeRegistryEntries;\n    if (populatesProcessEnv(config)) {\n      const env = processEnvOf(config);\n      // The bundle's own `process` reads it when evaluated; a site's modules use this realm's.\n      (globalThis as Record<string, unknown>).__cellsProcessEnv = env;\n      Object.assign((globalThis as { process: { env: Record<string, string> } }).process.env, env);\n    }\n    // node:async_hooks: continuations carry their AsyncLocalStorage stores (with AsyncContext\n    // the engine does, and this installs nothing). The code's awaits are lowered so that they go\n    // through them: by bundleWorkerForBrowser for a bundle, by createProjectSite (nodeCompat) for\n    // a site's modules.\n    installAsyncContext();\n  }\n  const globals = {\n    ...workersGlobals,\n    Request: workersGlobals.CellsRequest,\n    Response: workersGlobals.CellsResponse,\n    WebSocketPair: flags.includes(\"websocket_standard_binary_type\")\n      ? workersGlobals.StandardWebSocketPair\n      : workersGlobals.WebSocketPair,\n  };\n  if (\"site\" in code) {\n    workersHostRegistry({\n      workersModule,\n      projectWorkersModule: {\n        ...workersModule,\n        env: scope.env,\n        exports: scope.exports,\n        waitUntil: scope.waitUntil,\n      },\n      loadedPrefix: `${code.site}loaded/`,\n      emailModule: await import(\"./cloudflare-email.js\"),\n      ...globals,\n      // Loaded on demand, after installNodeGlobals(): the npm `util` polyfill reads `process`\n      // when it is imported.\n      node: nodeCompat\n        ? (await import(\"../node-compat/browser-registry.js\")).nodeRegistryEntries\n        : undefined,\n    });\n    return config.main\n      ? await import(/* @vite-ignore */ `${code.site}modules/~/${config.main}`)\n      : { default: {} };\n  }\n  const g = globalThis as Record<string, unknown>;\n  g.__cellsWorkersModule = workersModule;\n  g.__cellsProjectScope = scope; // `env` and `exports` of the bundle's cloudflare:workers\n  g.__cellsGlobals = globals;\n  return code.bundle\n    ? await import(\n        /* @vite-ignore */ URL.createObjectURL(new Blob([code.bundle], { type: \"text/javascript\" }))\n      )\n    : { default: {} };\n}\n\n/**\n * A project's runtime in this worker: installs the Workers globals, imports the code and\n * builds its Worker Loader; `close()` also releases the node's bucket lease.\n */\nexport async function browserProjectRuntime(opts: BrowserProjectOptions) {\n  const scope = workerScope(loadTimeEnv(opts.config, opts.ai));\n  const module = await importWorkerCode(opts.config, opts.code, scope);\n  const site = \"site\" in opts.code ? opts.code.site : undefined;\n  // With an IndexedDB bucket, cells live in memory and in the bucket's logs (no OPFS pool).\n  const openSql =\n    opts.bucket && \"ltx\" in opts.bucket\n      ? await ltxOpener(opts.sqlite3, opts.bucket.ltx, opts.bucket.compactAfter, opts.bucket.files)\n      : opts.bucket && \"idb\" in opts.bucket\n        ? Object.assign(wasmMemoryOpener(opts.sqlite3 as never), {\n            release() {},\n            reserve: async (n: number) => n,\n          })\n        : await sahpoolOpener(opts.sqlite3 as never, {\n            name: opts.pool,\n            initialCapacity: 64, // grows on demand (sahpoolOpener)\n          });\n  const root = await navigator.storage.getDirectory();\n  const files = new BrowserFilesApi({\n    rootHandle: await root.getDirectoryHandle(opts.filesDir, { create: true }),\n  });\n  // An `ltx` directory is the cells' own storage (the VFS), not a fleet bucket.\n  const store = opts.bucket && !(\"ltx\" in opts.bucket) ? await bucketStore(opts.bucket) : undefined;\n  const shared =\n    opts.bucket && store\n      ? celldBucket(store, { node: opts.bucket.node, leaseTtlMs: opts.bucket.leaseTtlMs })\n      : undefined;\n  const { runtime, unsupported } = createProjectRuntime(opts.config, module, {\n    openSql,\n    files,\n    assetFiles: opts.assetFiles,\n    loadModules: site ? siteModuleLoader(site) : browserModuleLoader(),\n    isolatedModules: opts.isolateScript\n      ? browserIsolatedLoader({\n          isolateScript: opts.isolateScript,\n          siteBaseUrl: site,\n          storagePrefix: `${opts.pool}-iso`,\n          storage: () => shared, // facets of loaded code are logged like the root's own\n        })\n      : undefined,\n    storage: shared, // R2 objects in the fleet bucket too, as celld keeps them\n    route: opts.route,\n    ai: opts.ai,\n  });\n  scope.bind(runtime);\n  return {\n    runtime,\n    unsupported,\n    bucket: shared,\n    close: async () => {\n      await runtime.close();\n      openSql.release(); // the pool's files, for the next worker that opens it\n    },\n  };\n}\n\n/**\n * workerd fills `process.env` with the project's text `vars` under nodejs_compat from\n * compatibility date 2025-04-01 (`nodejs_compat_populate_process_env`), unless\n * `nodejs_compat_do_not_populate_process_env` is set. Frameworks read their settings there\n * (EmDash's `EMDASH_SITE_URL`, for one).\n */\nexport function populatesProcessEnv(config: WranglerConfig): boolean {\n  const flags = config.compatibility_flags ?? [];\n  if (!flags.some((f) => f.startsWith(\"nodejs_compat\"))) return false;\n  if (flags.includes(\"nodejs_compat_do_not_populate_process_env\")) return false;\n  if (flags.includes(\"nodejs_compat_populate_process_env\")) return true;\n  return (config.compatibility_date ?? \"\") >= \"2025-04-01\";\n}\n\n/** The text `vars` of a project, as `process.env` holds them. */\nexport function processEnvOf(config: WranglerConfig): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const [k, v] of Object.entries(config.vars ?? {})) if (typeof v === \"string\") env[k] = v;\n  return env;\n}\n"]}
+{"version":3,"file":"browser-host.js","sourceRoot":"","sources":["../../src/project/browser-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAoB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAoB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAuB,MAAM,eAAe,CAAC;AA+FvF,KAAK,UAAU,WAAW,CAAC,CAAgB;IACzC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACjC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACpD,OAAO,mBAAmB,CACxB,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAC5F,EAAE,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,SAAS,CAAC,OAAgB,EAAE,GAAW,EAAE,YAAqB,EAAE,KAAc;IAC3F,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,IAAI,GAAG,CAAC,4BAA4B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,wCAAwC,EAC/F,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,4CAA4C;IAC/F,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,OAAO,IAAI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC;IACZ,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,EAAE,GAAG,OAAmE,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAChE,yFAAyF;QACzF,OAAO,IAAI,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAG,OAA2B,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACzB,OAAO;YACL,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,gBAAgB,CAC7B,MAAsB,EACtB,IAAmC,EACnC,KAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;IACpE,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,EAAE,CAAC;QACrB,+FAA+F;QAC/F,iFAAiF;QAChF,UAAsC,CAAC,kBAAkB,GAAG,CAC3D,MAAM,MAAM,CAAC,oCAAoC,CAAC,CACnD,CAAC,mBAAmB,CAAC;QACtB,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACjC,yFAAyF;YACxF,UAAsC,CAAC,iBAAiB,GAAG,GAAG,CAAC;YAChE,MAAM,CAAC,MAAM,CAAE,UAA2D,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,0FAA0F;QAC1F,6FAA6F;QAC7F,8FAA8F;QAC9F,oBAAoB;QACpB,mBAAmB,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG;QACd,GAAG,cAAc;QACjB,OAAO,EAAE,cAAc,CAAC,YAAY;QACpC,QAAQ,EAAE,cAAc,CAAC,aAAa;QACtC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC7D,CAAC,CAAC,cAAc,CAAC,qBAAqB;YACtC,CAAC,CAAC,cAAc,CAAC,aAAa;KACjC,CAAC;IACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,mBAAmB,CAAC;YAClB,aAAa;YACb,oBAAoB,EAAE;gBACpB,GAAG,aAAa;gBAChB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;YACD,YAAY,EAAE,GAAG,IAAI,CAAC,IAAI,SAAS;YACnC,WAAW,EAAE,MAAM,MAAM,CAAC,uBAAuB,CAAC;YAClD,GAAG,OAAO;YACV,wFAAwF;YACxF,uBAAuB;YACvB,IAAI,EAAE,UAAU;gBACd,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC,CAAC,mBAAmB;gBAC1E,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI;YAChB,CAAC,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,CAAC,CAAC,oBAAoB,GAAG,aAAa,CAAC;IACvC,CAAC,CAAC,mBAAmB,GAAG,KAAK,CAAC,CAAC,yDAAyD;IACxF,CAAC,CAAC,cAAc,GAAG,OAAO,CAAC;IAC3B,OAAO,IAAI,CAAC,MAAM;QAChB,CAAC,CAAC,MAAM,MAAM;QACV,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAC7F;QACH,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAA2B;IACrE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,0FAA0F;IAC1F,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;QACjC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;YACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAgB,CAAC,EAAE;gBACrD,OAAO,KAAI,CAAC;gBACZ,OAAO,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;aAChC,CAAC;YACJ,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAgB,EAAE;gBACzC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,eAAe,EAAE,EAAE,EAAE,kCAAkC;aACxD,CAAC,CAAC;IACX,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,UAAU,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC3E,CAAC,CAAC;IACH,8EAA8E;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,KAAK;QAClB,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACpF,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE;QACzE,OAAO;QACP,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE;QAClE,eAAe,EAAE,IAAI,CAAC,aAAa;YACjC,CAAC,CAAC,qBAAqB,CAAC;gBACpB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM;gBACjC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,uDAAuD;aAC/E,CAAC;YACJ,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,MAAM,EAAE,0DAA0D;QAC3E,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,EAAE,EAAE,IAAI,CAAC,EAAE;KACZ,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO;QACL,OAAO;QACP,WAAW;QACX,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,sDAAsD;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,KAAK,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,IAAI,YAAY,CAAC;AAC3D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { BrowserFilesApi } from \"@statewalker/webrun-files-browser\";\nimport { installLtxVfs } from \"../adapters/ltx-vfs.js\";\nimport {\n  sahpoolOpener,\n  tuneCellConnection,\n  WasmSqliteDriver,\n  wasmMemoryOpener,\n} from \"../adapters/wasm-sqlite.js\";\nimport type { AssetFiles } from \"../bindings/assets.js\";\nimport type { WorkersAiOptions } from \"../bindings/workers-ai.js\";\nimport { celldBucket } from \"../bucket/celld-cells.js\";\nimport { idbObjectStore } from \"../bucket/idb-object-store.js\";\nimport { filesApiObjectStore, type ObjectStore } from \"../bucket/object-store.js\";\nimport { s3ObjectStore } from \"../bucket/s3-object-store.js\";\nimport type { CellRuntimeOptions, WorkerModule } from \"../core/runtime.js\";\nimport { browserIsolatedLoader } from \"../isolate/browser.js\";\nimport { installAsyncContext } from \"../node-compat/async_hooks.js\";\nimport { installNodeGlobals } from \"../node-compat/install.js\";\nimport { browserModuleLoader } from \"./browser-modules.js\";\nimport * as workersModule from \"./cloudflare-workers.js\";\nimport { siteModuleLoader, workersHostRegistry } from \"./site-loader.js\";\nimport { type WorkerScope, workerScope } from \"./worker-scope.js\";\nimport * as workersGlobals from \"./workers-globals-module.js\";\nimport { createProjectRuntime, loadTimeEnv, type WranglerConfig } from \"./wrangler.js\";\n\n/**\n * Where a browser-hosted project keeps its cells when they must outlive the page or move to\n * other nodes: a celld fleet bucket. Cells, facets and alarms are then exactly celld's\n * (ownership in `own.json`, LTX logs, wake index) and R2 objects live in it too, so the same\n * cells can be served by this browser, by other browsers and by celld nodes, in turn.\n *\n * - `s3`: an S3-compatible bucket, reached directly (the bucket must allow CORS for the page's\n *   origin: methods GET/PUT/DELETE/HEAD, request headers `authorization`, `content-type`,\n *   `x-amz-*`, `if-match`, `if-none-match`; exposed headers `etag`, `last-modified`,\n *   `x-amz-meta-celld-r2`) or through a same-origin proxy (`endpoint` = the proxy,\n *   `signAs` = the real endpoint: SigV4 signs the real host and path).\n * - `opfs`: a bucket in this origin's OPFS — persistence without a server. Conditional writes\n *   are atomic only within one writer, so one tab or worker at a time should own its cells.\n * - `store`: any ObjectStore.\n */\nexport type BrowserBucket =\n  | {\n      s3: {\n        endpoint: string;\n        signAs?: string;\n        bucket: string;\n        prefix?: string;\n        region?: string;\n        accessKeyId: string;\n        secretAccessKey: string;\n      };\n      node: string;\n      leaseTtlMs?: number;\n    }\n  | { opfs: string; node: string; leaseTtlMs?: number }\n  /**\n   * `idb`: a bucket in this origin's IndexedDB (atomic conditional writes across tabs and\n   * workers). Cells then run SQLite in memory and persist through the bucket's page-level logs:\n   * no OPFS pool, so any number of workers can serve cells at once.\n   */\n  | { idb: string; node: string; leaseTtlMs?: number }\n  /**\n   * `ltx`: cells as celld keeps them, LTX files (a snapshot and one file per commit) in an OPFS\n   * directory, read page by page (a SQLite VFS over a store worker): no OPFS pool, and a\n   * cell's memory is its page cache, not its database. A cell is folded into one snapshot\n   * (streamed) past `compactAfter` files (default 64), or once the files after its snapshot hold\n   * more than half of it. See docs/browser-host.md.\n   */\n  | {\n      ltx: string;\n      node: string;\n      leaseTtlMs?: number;\n      compactAfter?: number;\n      /**\n       * The cells' FilesApi in the store worker: OPFS through synchronous handles (default,\n       * `opfs-sync`), OPFS through its asynchronous API (`opfs`), or memory (nothing kept).\n       */\n      files?: \"opfs\" | \"opfs-sync\" | \"memory\";\n    }\n  | { store: ObjectStore; node: string; leaseTtlMs?: number };\n\nexport interface BrowserProjectOptions {\n  config: WranglerConfig;\n  /**\n   * The project's Worker code, imported in this realm once its Workers globals (and with\n   * nodejs_compat `Buffer` and `process`) are installed:\n   * - `bundle`: one ES module built for browsers (`bundleWorkerForBrowser`), whose\n   *   `cloudflare:workers` is `PROJECT_WORKERS_MODULE_SHIM` and whose Workers globals read\n   *   `globalThis.__cellsGlobals`\n   *   (`null`: the project has no `main`). Worker Loader code becomes Blob-URL modules.\n   * - `site`: the base URL of the project's site (`createProjectSite`, hosted by\n   *   webrun-site-host). `main` and Worker Loader code are imported from it.\n   */\n  code: { bundle: string | null } | { site: string };\n  /**\n   * A Dedicated Worker script that serves one loaded Worker (`serveIsolate`): Worker Loader\n   * code then runs isolated, one Dedicated Worker per loaded Worker, as celld's isolates.\n   * The package ships one: `@statewalker/cellb/isolate-worker`.\n   */\n  isolateScript?: URL;\n  /** An initialized SQLite WASM module (`@sqlite.org/sqlite-wasm`). */\n  sqlite3: unknown;\n  /** OPFS sahpool name for this host's SQLite files (one pool per worker). */\n  pool: string;\n  /** OPFS directory for the project's FilesApi (Workers' fs-like bindings, R2 without bucket). */\n  filesDir: string;\n  assetFiles?: AssetFiles;\n  bucket?: BrowserBucket;\n  /**\n   * Cells this runtime does not host: where to send their events (a `Send` over a MessagePort\n   * to the runtime that hosts them, `linkOverPort`), or undefined to host the cell here. With\n   * one runtime per worker and `shardOf` as the placement, cells run in parallel threads.\n   */\n  route?: CellRuntimeOptions[\"route\"];\n  /** The OpenAI-compatible endpoint behind the project's `ai` binding (Workers AI). */\n  ai?: WorkersAiOptions;\n}\n\nasync function bucketStore(b: BrowserBucket): Promise<ObjectStore> {\n  if (\"store\" in b) return b.store;\n  if (\"s3\" in b) return s3ObjectStore({ region: \"us-east-1\", ...b.s3 });\n  if (\"idb\" in b) return idbObjectStore(b.idb);\n  if (\"ltx\" in b) throw new Error(\"an ltx directory is cell storage, not a bucket\");\n  const root = await navigator.storage.getDirectory();\n  return filesApiObjectStore(\n    new BrowserFilesApi({ rootHandle: await root.getDirectoryHandle(b.opfs, { create: true }) }),\n    \"\",\n  );\n}\n\n/**\n * Cells on the LTX VFS: a store worker owns the OPFS directory; each cell is a SQLite database\n * whose main file is its LTX files, read page by page (src/adapters/ltx-vfs.ts).\n */\nasync function ltxOpener(sqlite3: unknown, dir: string, compactAfter?: number, files?: string) {\n  const store = new Worker(\n    new URL(\"../ltx/ltx-store-worker.ts\", import.meta.url) /* `.js` in dist/ (scripts/build.mjs) */,\n    { type: \"module\" },\n  );\n  const sab = new SharedArrayBuffer(8 + 16 * 65536); // room for a read-ahead run of 64 KiB pages\n  // Wait until the store worker runs before any synchronous call: a nested worker is started\n  // (its script fetched) through this worker's event loop, which Atomics.wait would block.\n  const ready = new Promise<void>((resolve, reject) => {\n    store.addEventListener(\"message\", (e) => e.data?.op === \"ready\" && resolve(), { once: false });\n    store.addEventListener(\"error\", (e) => reject(new Error(`ltx store worker: ${e.message}`)));\n  });\n  store.postMessage({ op: \"init\", sab, dir, compactAfter, files });\n  await ready;\n  const { name } = installLtxVfs(sqlite3, { sab, post: (m) => store.postMessage(m) });\n  const s3 = sqlite3 as { oo1: { DB: new (o: Record<string, unknown>) => any } };\n  const open = (cellKey: string) => {\n    const db = new s3.oo1.DB({ filename: cellKey, vfs: name, flags: \"c\" });\n    tuneCellConnection(sqlite3, db);\n    db.exec(\"PRAGMA journal_mode=MEMORY; PRAGMA synchronous=FULL;\");\n    // SQLite's C API for inTransaction() only (no page hook or session capture on this VFS).\n    return new WasmSqliteDriver(db, undefined, undefined, (sqlite3 as { capi: never }).capi);\n  };\n  return Object.assign(open, {\n    release() {\n      store.terminate();\n    },\n    reserve: async (n: number) => n,\n  });\n}\n\n/** Installs the Workers globals the code reads, then imports its `main`. */\nasync function importWorkerCode(\n  config: WranglerConfig,\n  code: BrowserProjectOptions[\"code\"],\n  scope: WorkerScope,\n): Promise<WorkerModule> {\n  const flags = config.compatibility_flags ?? [];\n  const nodeCompat = flags.some((f) => f.startsWith(\"nodejs_compat\"));\n  if (nodeCompat) {\n    installNodeGlobals();\n    // node:* for bundles built with cellbHostModule (another bundler than bundleWorkerForBrowser);\n    // loaded after installNodeGlobals(), as the npm `util` polyfill reads `process`.\n    (globalThis as Record<string, unknown>).__cellsNodeModules = (\n      await import(\"../node-compat/browser-registry.js\")\n    ).nodeRegistryEntries;\n    if (populatesProcessEnv(config)) {\n      const env = processEnvOf(config);\n      // The bundle's own `process` reads it when evaluated; a site's modules use this realm's.\n      (globalThis as Record<string, unknown>).__cellsProcessEnv = env;\n      Object.assign((globalThis as { process: { env: Record<string, string> } }).process.env, env);\n    }\n    // node:async_hooks: continuations carry their AsyncLocalStorage stores (with AsyncContext\n    // the engine does, and this installs nothing). The code's awaits are lowered so that they go\n    // through them: by bundleWorkerForBrowser for a bundle, by createProjectSite (nodeCompat) for\n    // a site's modules.\n    installAsyncContext();\n  }\n  const globals = {\n    ...workersGlobals,\n    Request: workersGlobals.CellsRequest,\n    Response: workersGlobals.CellsResponse,\n    WebSocketPair: flags.includes(\"websocket_standard_binary_type\")\n      ? workersGlobals.StandardWebSocketPair\n      : workersGlobals.WebSocketPair,\n  };\n  if (\"site\" in code) {\n    workersHostRegistry({\n      workersModule,\n      projectWorkersModule: {\n        ...workersModule,\n        env: scope.env,\n        exports: scope.exports,\n        waitUntil: scope.waitUntil,\n      },\n      loadedPrefix: `${code.site}loaded/`,\n      emailModule: await import(\"./cloudflare-email.js\"),\n      ...globals,\n      // Loaded on demand, after installNodeGlobals(): the npm `util` polyfill reads `process`\n      // when it is imported.\n      node: nodeCompat\n        ? (await import(\"../node-compat/browser-registry.js\")).nodeRegistryEntries\n        : undefined,\n    });\n    return config.main\n      ? await import(/* @vite-ignore */ `${code.site}modules/~/${config.main}`)\n      : { default: {} };\n  }\n  const g = globalThis as Record<string, unknown>;\n  g.__cellsWorkersModule = workersModule;\n  g.__cellsProjectScope = scope; // `env` and `exports` of the bundle's cloudflare:workers\n  g.__cellsGlobals = globals;\n  return code.bundle\n    ? await import(\n        /* @vite-ignore */ URL.createObjectURL(new Blob([code.bundle], { type: \"text/javascript\" }))\n      )\n    : { default: {} };\n}\n\n/**\n * A project's runtime in this worker: installs the Workers globals, imports the code and\n * builds its Worker Loader; `close()` also releases the node's bucket lease.\n */\nexport async function browserProjectRuntime(opts: BrowserProjectOptions) {\n  const scope = workerScope(loadTimeEnv(opts.config, opts.ai));\n  const module = await importWorkerCode(opts.config, opts.code, scope);\n  const site = \"site\" in opts.code ? opts.code.site : undefined;\n  // With an IndexedDB bucket, cells live in memory and in the bucket's logs (no OPFS pool).\n  const openSql =\n    opts.bucket && \"ltx\" in opts.bucket\n      ? await ltxOpener(opts.sqlite3, opts.bucket.ltx, opts.bucket.compactAfter, opts.bucket.files)\n      : opts.bucket && \"idb\" in opts.bucket\n        ? Object.assign(wasmMemoryOpener(opts.sqlite3 as never), {\n            release() {},\n            reserve: async (n: number) => n,\n          })\n        : await sahpoolOpener(opts.sqlite3 as never, {\n            name: opts.pool,\n            initialCapacity: 64, // grows on demand (sahpoolOpener)\n          });\n  const root = await navigator.storage.getDirectory();\n  const files = new BrowserFilesApi({\n    rootHandle: await root.getDirectoryHandle(opts.filesDir, { create: true }),\n  });\n  // An `ltx` directory is the cells' own storage (the VFS), not a fleet bucket.\n  const store = opts.bucket && !(\"ltx\" in opts.bucket) ? await bucketStore(opts.bucket) : undefined;\n  const shared =\n    opts.bucket && store\n      ? celldBucket(store, { node: opts.bucket.node, leaseTtlMs: opts.bucket.leaseTtlMs })\n      : undefined;\n  const { runtime, unsupported } = createProjectRuntime(opts.config, module, {\n    openSql,\n    files,\n    assetFiles: opts.assetFiles,\n    loadModules: site ? siteModuleLoader(site) : browserModuleLoader(),\n    isolatedModules: opts.isolateScript\n      ? browserIsolatedLoader({\n          isolateScript: opts.isolateScript,\n          siteBaseUrl: site,\n          storagePrefix: `${opts.pool}-iso`,\n          storage: () => shared, // facets of loaded code are logged like the root's own\n        })\n      : undefined,\n    storage: shared, // R2 objects in the fleet bucket too, as celld keeps them\n    route: opts.route,\n    ai: opts.ai,\n  });\n  scope.bind(runtime);\n  return {\n    runtime,\n    unsupported,\n    bucket: shared,\n    close: async () => {\n      await runtime.close();\n      openSql.release(); // the pool's files, for the next worker that opens it\n    },\n  };\n}\n\n/**\n * workerd fills `process.env` with the project's text `vars` under nodejs_compat from\n * compatibility date 2025-04-01 (`nodejs_compat_populate_process_env`), unless\n * `nodejs_compat_do_not_populate_process_env` is set. Frameworks read their settings there\n * (EmDash's `EMDASH_SITE_URL`, for one).\n */\nexport function populatesProcessEnv(config: WranglerConfig): boolean {\n  const flags = config.compatibility_flags ?? [];\n  if (!flags.some((f) => f.startsWith(\"nodejs_compat\"))) return false;\n  if (flags.includes(\"nodejs_compat_do_not_populate_process_env\")) return false;\n  if (flags.includes(\"nodejs_compat_populate_process_env\")) return true;\n  return (config.compatibility_date ?? \"\") >= \"2025-04-01\";\n}\n\n/** The text `vars` of a project, as `process.env` holds them. */\nexport function processEnvOf(config: WranglerConfig): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const [k, v] of Object.entries(config.vars ?? {})) if (typeof v === \"string\") env[k] = v;\n  return env;\n}\n"]}