@statewalker/cellb 0.8.7 → 0.8.9

package/dist/isolate/isolate.js.map

@@ -1 +1 @@
-{"version":3,"file":"isolate.js","sourceRoot":"","sources":["../../src/isolate/isolate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAoB,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAoB,WAAW,EAAiB,MAAM,eAAe,CAAC;AAE7E,MAAM,UAAU,YAAY,CAC1B,IAAc,EACd,UAGqC,EACrC,IAAI,GAOA,EAAE;IAEN,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,sFAAsF;IACtF,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2C,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG;QACjB,YAAY,EAAE,IAAI;QAClB,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,IAAS;YACxC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,MAAM,KAAK,GAAG,EAAE,SAAS,CAAC;YAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,CAAC,CAAC,GAAG;oBACd,IAAI,EAAE;wBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;qBAC7D;iBACF,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,IAAI,CAAC,OAAe;YACxB,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC;gBACN,CAAC,CAAE,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAA4B;gBAC3F,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAI,KAAI,CAAC;KAChB,CAAC;IACF,6FAA6F;IAC7F,wFAAwF;IACxF,4FAA4F;IAC5F,+FAA+F;IAC/F,MAAM,SAAS,GAAU;QACvB,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,mDAAmD;YAC9F,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK;gBACjC,IAAI;gBACJ,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACT,CAAC;QACnB,CAAC;KACF,CAAC;IACF,IAAI,OAAY,CAAC;IACjB,IAAI,GAAqC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QAChD,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,IAAI,CAAC,OAAO;gBACf,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC;YAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAC7D,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,UAAU;gBACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACxE,EAAE,GAAG,iBAAiB,CAAC;gBACrB,MAAM,EAAE,EAAE,GAAI,MAAuB,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpD,cAAc,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC9C,OAAO;gBACP,IAAI,EAAE,GAAG,EAAE,uDAAuD;gBAClE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1C,MAAM,EAAE,IAAI,EAAE,kEAAkE;gBAChF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,KAAK,SAAS;wBACvB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAE,EAAG,CAAC,GAAG,CAAC,SAAS,CAAgD,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC1F,CAAC;aACF,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,IAAI,GAAG,GAA4B,EAAE,CAAC;IACtC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,kGAAkG;IAClG,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,6FAA6F;IAC7F,8FAA8F;IAC9F,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,uFAAuF;IACvF,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,OAAe,EAAE,EAAE;QACzD,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAG1B,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;QACrF,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,EAAE,CAAc,EAAE,GAAY,EAAqB,EAAE,CAC5E,WAAW,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACvD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,CAAC;YACZ,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,kEAAkE;YAC/E,mFAAmF;YACnF,mFAAmF;YACnF,iDAAiD;YACjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAe,EAAE,EAAE,CAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK;gBAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU;oBACpE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE,CACzE,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAiB,CAAC;YACxD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;oBAC7B,MAAM,IAAI,KAAK,CACb,2KAA2K,CAC5K,CAAC;gBACJ,CAAC,CAAiB,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,qCAAqC;YACnE,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7D,4FAA4F;QAC5F,4FAA4F;QAC5F,kFAAkF;QAClF,2FAA2F;QAC3F,mCAAmC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,WAAW,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAChD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,kBAAkB,CACtB,IAAI,EACJ,CAAC,EAAW,EAAE,GAAgD,EAAE,EAAE,CAChE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAC1B,CAAC;gBACF,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;IACb,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,CAAC","sourcesContent":["/**\n * The isolate side: loads the Worker code in THIS realm and serves fetch/RPC for the host.\n * `importCode` is realm specific (data: URL of a bundle on Node, a site URL in browsers).\n */\nimport { ctxExports, entrypointStub } from \"../core/handles.js\";\nimport type { DurableObjectId } from \"../core/id.js\";\nimport { runInDurableObject } from \"../core/namespace.js\";\nimport { type CellRuntime, createCellRuntime, type WorkerModule } from \"../core/runtime.js\";\nimport type { Lease, LeaseHandle, OpenCellSql } from \"../ports.js\";\nimport { realmWorkerScope } from \"../project/worker-scope.js\";\nimport { CfWebSocket } from \"../ws/server.js\";\nimport { type FetchTarget, isolatePort, type PortLike } from \"./protocol.js\";\n\nexport function serveIsolate(\n  port: PortLike,\n  importCode: (\n    load: any,\n    logs: (level: string, args: unknown[]) => void,\n  ) => Promise<Record<string, unknown>>,\n  opts: {\n    patchConsole?: boolean;\n    /**\n     * Storage for Durable Object classes run INSIDE this isolate (facets of loaded code):\n     * each facet is a cell of an isolate-local runtime, with its own SQLite.\n     */\n    openSql?: (load: any) => OpenCellSql | Promise<OpenCellSql>;\n  } = {},\n) {\n  let module: Record<string, unknown> = {};\n  const runtimes = new Map<string, CellRuntime>();\n  // Facet logging through the host: the isolate-local cell key → the facet's key in the\n  // root's storage (celld: <root>/facets/<sha>) and the root's epoch.\n  const facetKeys = new Map<string, { key: string; epoch?: number }>();\n  const images = new Map<number, () => unknown>();\n  let nextImage = 0;\n  const hostLogged = (internal: string) => facetKeys.get(internal);\n  const durability = {\n    capturePages: true,\n    async committed(cellKey: string, info: any) {\n      const f = hostLogged(cellKey);\n      if (!f) return;\n      const token = ++nextImage;\n      if (typeof info.image === \"function\") images.set(token, info.image);\n      try {\n        await call({\n          type: \"durable\",\n          op: \"committed\",\n          cellKey: f.key,\n          info: {\n            seq: info.seq,\n            pages: info.pages,\n            epoch: f.epoch,\n            image: typeof info.image === \"function\" ? token : info.image,\n          },\n        });\n      } finally {\n        images.delete(token);\n      }\n    },\n  };\n  const backup = {\n    async load(cellKey: string) {\n      const f = hostLogged(cellKey);\n      return f\n        ? ((await call({ type: \"durable\", op: \"load\", cellKey: f.key })) as Uint8Array | undefined)\n        : undefined;\n    },\n    async save() {},\n  };\n  // The host holds the root's lease and attaches each facet with its epoch: handing that epoch\n  // out as the facet's own lease makes its ObjectHost rebuild the local database from the\n  // bucket when it opens, as a root does under a lease (a pool kept from an earlier ownership\n  // is older than what other nodes wrote since). Without an epoch, the local file stays primary.\n  const ownership: Lease = {\n    async tryAcquire(cellKey) {\n      const lost = new AbortController().signal; // fencing stays with the root's lease, in the host\n      return {\n        name: cellKey,\n        epoch: hostLogged(cellKey)?.epoch,\n        lost,\n        release: async () => {},\n      } as LeaseHandle;\n    },\n  };\n  let loadMsg: any;\n  let sql: Promise<OpenCellSql> | undefined;\n  const objectRuntime = async (className: string) => {\n    let rt = runtimes.get(className);\n    if (!rt) {\n      if (!opts.openSql)\n        throw new Error(\"this isolate cannot host Durable Object classes (no storage)\");\n      sql ??= Promise.resolve(opts.openSql(loadMsg));\n      const openSql = await sql;\n      if (runtimes.has(className)) return runtimes.get(className)!;\n      if (typeof module[className] !== \"function\")\n        throw new Error(`Loaded worker does not export class \"${className}\"`);\n      rt = createCellRuntime({\n        worker: { ...(module as WorkerModule), default: {} },\n        durableObjects: { [className]: { className } },\n        openSql,\n        vars: env, // the loaded Worker's env: plain values and host stubs\n        storage: { durability, backup, ownership },\n        facets: true, // rows move to this run's scope on open, as celld does for facets\n        ctxIdOf: (key) => {\n          const name = idNames.get(key);\n          return name === undefined\n            ? undefined\n            : (rt!.env[className] as { idFromName(n: string): DurableObjectId }).idFromName(name);\n        },\n      });\n      runtimes.set(className, rt);\n    }\n    return rt;\n  };\n  let env: Record<string, unknown> = {};\n  let exports: Record<string, unknown> = {};\n  // The loaded Worker is this realm's own: its `cloudflare:workers` reads `env` and `exports` here.\n  const scope = realmWorkerScope();\n  // The name of the `id` a facet was given by `ctx.facets.get`, by its isolate-local cell key:\n  // the facet's `ctx.id` (partyserver's `this.name`). Two facets may be given the same id; each\n  // keeps its own object and storage, addressed by the parent's facet cell key.\n  const idNames = new Map<string, string>();\n  // A facet of loaded code: the object lives here, named by the parent's facet cell key.\n  const facet = async (className: string, cellKey: string) => {\n    const rt = await objectRuntime(className);\n    const ns = rt.env[className] as {\n      getByName(n: string): any;\n      idFromName(n: string): { toString(): string };\n    };\n    return { rt, stub: ns.getByName(cellKey), key: `${className}/${ns.idFromName(cellKey)}` };\n  };\n  const exported = (name: string, props?: unknown) => {\n    const target = module[name];\n    if (target === undefined) throw new Error(`Loaded worker does not export \"${name}\"`);\n    return entrypointStub(target, env, props, exports);\n  };\n  const fetchTarget = async (t: FetchTarget, req: Request): Promise<Response> =>\n    \"className\" in t\n      ? (await facet(t.className, t.cellKey)).stub.fetch(req)\n      : exported(t.name, t.props).fetch(req);\n  const handle = async (m: any) => {\n    if (m.type === \"load\") {\n      loadMsg = m;\n      env = m.env; // host bindings arrive as stubs: every call goes back to the host\n      // Logs go to the host (Tail Workers, and the host prints them): through the global\n      // console, or — where the realm has other code that logs — a console scoped to the\n      // loaded modules (importCode receives the sink).\n      const sink = (level: string, args: unknown[]) =>\n        call({ type: \"log\", level, args: safe(args) }).catch(() => {});\n      if (opts.patchConsole !== false)\n        for (const level of [\"log\", \"info\", \"warn\", \"error\", \"debug\"] as const)\n          console[level] = (...args: unknown[]) => sink(level, args);\n      if (m.outbound === \"fetcher\")\n        globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) =>\n          outbound(new Request(input, init))) as typeof fetch;\n      if (m.outbound === \"blocked\")\n        globalThis.fetch = (async () => {\n          throw new Error(\n            \"This worker is not permitted to access the internet via global functions like fetch(). It must use capabilities (such as bindings in 'env') to talk to the outside world.\",\n          );\n        }) as typeof fetch;\n      scope.bind({ env, exports }); // read while the module is evaluated\n      module = await importCode(m, sink);\n      exports = ctxExports(module, env);\n      scope.bind({ env, exports });\n      return Object.fromEntries(Object.entries(module).map(([k, v]) => [k, typeof v]));\n    }\n    if (m.type === \"image\") return await images.get(m.token)?.();\n    // The host is stopping this isolate: the sockets served here hear 1001 first. A 101 carries\n    // its early frames, so a socket's close normally goes straight to its client; only a client\n    // end that had sent unacknowledged frames before its hand-over keeps a relay here\n    // (takeClientEnd), and the answer waits a macrotask so that relay forwards the 1001 before\n    // the host terminates the isolate.\n    if (m.type === \"goAway\") {\n      CfWebSocket.goAway(\"the loaded Worker stopped\");\n      return await new Promise((r) => setTimeout(r, 0));\n    }\n    if (m.type === \"object\") {\n      const { rt, stub, key } = await facet(m.className, m.cellKey);\n      if (m.op === \"attach\") {\n        facetKeys.set(key, { key: m.cellKey, epoch: m.epoch });\n        if (typeof m.idName === \"string\") idNames.set(key, m.idName);\n        return;\n      }\n      if (m.op === \"call\") return stub[m.method](...m.args);\n      if (m.op === \"restart\") return rt.restartObject(key);\n      if (m.op === \"delete\") {\n        await runInDurableObject(\n          stub,\n          (_o: unknown, ctx: { storage: { deleteAll(): Promise<void> } }) =>\n            ctx.storage.deleteAll(),\n        );\n        return rt.restartObject(key);\n      }\n      throw new Error(`unknown object op ${m.op}`);\n    }\n    if (m.type === \"call\") return exported(m.name, m.props)[m.method](...m.args);\n    throw new Error(`unknown isolate message ${m.type}`);\n  };\n  const { call, outbound } = isolatePort(port, handle, fetchTarget);\n}\n\nconst safe = (args: unknown[]) =>\n  args.map((a) => {\n    try {\n      return structuredClone(a);\n    } catch {\n      return String(a);\n    }\n  });\n"]}
+{"version":3,"file":"isolate.js","sourceRoot":"","sources":["../../src/isolate/isolate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAoB,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAoB,WAAW,EAAiB,MAAM,eAAe,CAAC;AAE7E,MAAM,UAAU,YAAY,CAC1B,IAAc,EACd,UAGqC,EACrC,IAAI,GAOA,EAAE;IAEN,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,sFAAsF;IACtF,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA2C,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG;QACjB,YAAY,EAAE,IAAI;QAClB,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,IAAS;YACxC,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,MAAM,KAAK,GAAG,EAAE,SAAS,CAAC;YAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC;oBACT,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,WAAW;oBACf,OAAO,EAAE,CAAC,CAAC,GAAG;oBACd,IAAI,EAAE;wBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;qBAC7D;iBACF,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG;QACb,KAAK,CAAC,IAAI,CAAC,OAAe;YACxB,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC;gBACN,CAAC,CAAE,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAA4B;gBAC3F,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAI,KAAI,CAAC;KAChB,CAAC;IACF,6FAA6F;IAC7F,wFAAwF;IACxF,4FAA4F;IAC5F,+FAA+F;IAC/F,MAAM,SAAS,GAAU;QACvB,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,mDAAmD;YAC9F,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK;gBACjC,IAAI;gBACJ,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;aACT,CAAC;QACnB,CAAC;KACF,CAAC;IACF,IAAI,OAAY,CAAC;IACjB,IAAI,GAAqC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QAChD,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,CAAC,IAAI,CAAC,OAAO;gBACf,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC;YAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;YAC7D,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,UAAU;gBACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACxE,EAAE,GAAG,iBAAiB,CAAC;gBACrB,MAAM,EAAE,EAAE,GAAI,MAAuB,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpD,cAAc,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE;gBAC9C,OAAO;gBACP,IAAI,EAAE,GAAG,EAAE,uDAAuD;gBAClE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE;gBAC1C,MAAM,EAAE,IAAI,EAAE,kEAAkE;gBAChF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,KAAK,SAAS;wBACvB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAE,EAAG,CAAC,GAAG,CAAC,SAAS,CAAgD,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC1F,CAAC;aACF,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IACF,IAAI,GAAG,GAA4B,EAAE,CAAC;IACtC,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,kGAAkG;IAClG,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,6FAA6F;IAC7F,8FAA8F;IAC9F,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,uFAAuF;IACvF,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,OAAe,EAAE,EAAE;QACzD,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAG1B,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;QACrF,OAAO,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,EAAE,CAAc,EAAE,GAAY,EAAqB,EAAE,CAC5E,WAAW,IAAI,CAAC;QACd,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACvD,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,EAAE,CAAM,EAAE,EAAE;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,CAAC;YACZ,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,kEAAkE;YAC/E,mFAAmF;YACnF,mFAAmF;YACnF,iDAAiD;YACjD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAe,EAAE,EAAE,CAC9C,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK;gBAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAU;oBACpE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE,CACzE,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAiB,CAAC;YACxD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;gBAC1B,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;oBAC7B,MAAM,IAAI,KAAK,CACb,2KAA2K,CAC5K,CAAC;gBACJ,CAAC,CAAiB,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI;gBAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;YACtF,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,qCAAqC;YACnE,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC7D,4FAA4F;QAC5F,4FAA4F;QAC5F,kFAAkF;QAClF,2FAA2F;QAC3F,mCAAmC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,WAAW,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAChD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,kBAAkB,CACtB,IAAI,EACJ,CAAC,EAAW,EAAE,GAAgD,EAAE,EAAE,CAChE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAC1B,CAAC;gBACF,OAAO,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClE,+FAA+F;IAC/F,gGAAgG;IAC/F,UAAsC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAe,EAAS,EAAE;QAClF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAe,EAAE,EAAE,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;IACb,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,CAAC","sourcesContent":["/**\n * The isolate side: loads the Worker code in THIS realm and serves fetch/RPC for the host.\n * `importCode` is realm specific (data: URL of a bundle on Node, a site URL in browsers).\n */\nimport { registerWasmModules } from \"../bindings/worker-loader.js\";\nimport { ctxExports, entrypointStub } from \"../core/handles.js\";\nimport type { DurableObjectId } from \"../core/id.js\";\nimport { runInDurableObject } from \"../core/namespace.js\";\nimport { type CellRuntime, createCellRuntime, type WorkerModule } from \"../core/runtime.js\";\nimport type { Lease, LeaseHandle, OpenCellSql } from \"../ports.js\";\nimport { ABORT_ISOLATE } from \"../project/cloudflare-workers.js\";\nimport { realmWorkerScope } from \"../project/worker-scope.js\";\nimport { CfWebSocket } from \"../ws/server.js\";\nimport { type FetchTarget, isolatePort, type PortLike } from \"./protocol.js\";\n\nexport function serveIsolate(\n  port: PortLike,\n  importCode: (\n    load: any,\n    logs: (level: string, args: unknown[]) => void,\n  ) => Promise<Record<string, unknown>>,\n  opts: {\n    patchConsole?: boolean;\n    /**\n     * Storage for Durable Object classes run INSIDE this isolate (facets of loaded code):\n     * each facet is a cell of an isolate-local runtime, with its own SQLite.\n     */\n    openSql?: (load: any) => OpenCellSql | Promise<OpenCellSql>;\n  } = {},\n) {\n  let module: Record<string, unknown> = {};\n  const runtimes = new Map<string, CellRuntime>();\n  // Facet logging through the host: the isolate-local cell key → the facet's key in the\n  // root's storage (celld: <root>/facets/<sha>) and the root's epoch.\n  const facetKeys = new Map<string, { key: string; epoch?: number }>();\n  const images = new Map<number, () => unknown>();\n  let nextImage = 0;\n  const hostLogged = (internal: string) => facetKeys.get(internal);\n  const durability = {\n    capturePages: true,\n    async committed(cellKey: string, info: any) {\n      const f = hostLogged(cellKey);\n      if (!f) return;\n      const token = ++nextImage;\n      if (typeof info.image === \"function\") images.set(token, info.image);\n      try {\n        await call({\n          type: \"durable\",\n          op: \"committed\",\n          cellKey: f.key,\n          info: {\n            seq: info.seq,\n            pages: info.pages,\n            epoch: f.epoch,\n            image: typeof info.image === \"function\" ? token : info.image,\n          },\n        });\n      } finally {\n        images.delete(token);\n      }\n    },\n  };\n  const backup = {\n    async load(cellKey: string) {\n      const f = hostLogged(cellKey);\n      return f\n        ? ((await call({ type: \"durable\", op: \"load\", cellKey: f.key })) as Uint8Array | undefined)\n        : undefined;\n    },\n    async save() {},\n  };\n  // The host holds the root's lease and attaches each facet with its epoch: handing that epoch\n  // out as the facet's own lease makes its ObjectHost rebuild the local database from the\n  // bucket when it opens, as a root does under a lease (a pool kept from an earlier ownership\n  // is older than what other nodes wrote since). Without an epoch, the local file stays primary.\n  const ownership: Lease = {\n    async tryAcquire(cellKey) {\n      const lost = new AbortController().signal; // fencing stays with the root's lease, in the host\n      return {\n        name: cellKey,\n        epoch: hostLogged(cellKey)?.epoch,\n        lost,\n        release: async () => {},\n      } as LeaseHandle;\n    },\n  };\n  let loadMsg: any;\n  let sql: Promise<OpenCellSql> | undefined;\n  const objectRuntime = async (className: string) => {\n    let rt = runtimes.get(className);\n    if (!rt) {\n      if (!opts.openSql)\n        throw new Error(\"this isolate cannot host Durable Object classes (no storage)\");\n      sql ??= Promise.resolve(opts.openSql(loadMsg));\n      const openSql = await sql;\n      if (runtimes.has(className)) return runtimes.get(className)!;\n      if (typeof module[className] !== \"function\")\n        throw new Error(`Loaded worker does not export class \"${className}\"`);\n      rt = createCellRuntime({\n        worker: { ...(module as WorkerModule), default: {} },\n        durableObjects: { [className]: { className } },\n        openSql,\n        vars: env, // the loaded Worker's env: plain values and host stubs\n        storage: { durability, backup, ownership },\n        facets: true, // rows move to this run's scope on open, as celld does for facets\n        ctxIdOf: (key) => {\n          const name = idNames.get(key);\n          return name === undefined\n            ? undefined\n            : (rt!.env[className] as { idFromName(n: string): DurableObjectId }).idFromName(name);\n        },\n      });\n      runtimes.set(className, rt);\n    }\n    return rt;\n  };\n  let env: Record<string, unknown> = {};\n  let exports: Record<string, unknown> = {};\n  // The loaded Worker is this realm's own: its `cloudflare:workers` reads `env` and `exports` here.\n  const scope = realmWorkerScope();\n  // The name of the `id` a facet was given by `ctx.facets.get`, by its isolate-local cell key:\n  // the facet's `ctx.id` (partyserver's `this.name`). Two facets may be given the same id; each\n  // keeps its own object and storage, addressed by the parent's facet cell key.\n  const idNames = new Map<string, string>();\n  // A facet of loaded code: the object lives here, named by the parent's facet cell key.\n  const facet = async (className: string, cellKey: string) => {\n    const rt = await objectRuntime(className);\n    const ns = rt.env[className] as {\n      getByName(n: string): any;\n      idFromName(n: string): { toString(): string };\n    };\n    return { rt, stub: ns.getByName(cellKey), key: `${className}/${ns.idFromName(cellKey)}` };\n  };\n  const exported = (name: string, props?: unknown) => {\n    const target = module[name];\n    if (target === undefined) throw new Error(`Loaded worker does not export \"${name}\"`);\n    return entrypointStub(target, env, props, exports);\n  };\n  const fetchTarget = async (t: FetchTarget, req: Request): Promise<Response> =>\n    \"className\" in t\n      ? (await facet(t.className, t.cellKey)).stub.fetch(req)\n      : exported(t.name, t.props).fetch(req);\n  const handle = async (m: any) => {\n    if (m.type === \"load\") {\n      loadMsg = m;\n      env = m.env; // host bindings arrive as stubs: every call goes back to the host\n      // Logs go to the host (Tail Workers, and the host prints them): through the global\n      // console, or — where the realm has other code that logs — a console scoped to the\n      // loaded modules (importCode receives the sink).\n      const sink = (level: string, args: unknown[]) =>\n        call({ type: \"log\", level, args: safe(args) }).catch(() => {});\n      if (opts.patchConsole !== false)\n        for (const level of [\"log\", \"info\", \"warn\", \"error\", \"debug\"] as const)\n          console[level] = (...args: unknown[]) => sink(level, args);\n      if (m.outbound === \"fetcher\")\n        globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) =>\n          outbound(new Request(input, init))) as typeof fetch;\n      if (m.outbound === \"blocked\")\n        globalThis.fetch = (async () => {\n          throw new Error(\n            \"This worker is not permitted to access the internet via global functions like fetch(). It must use capabilities (such as bindings in 'env') to talk to the outside world.\",\n          );\n        }) as typeof fetch;\n      if (m.wasm) registerWasmModules(m.wasm); // compiled by the host (Node: wasmModulesOf)\n      scope.bind({ env, exports }); // read while the module is evaluated\n      module = await importCode(m, sink);\n      exports = ctxExports(module, env);\n      scope.bind({ env, exports });\n      return Object.fromEntries(Object.entries(module).map(([k, v]) => [k, typeof v]));\n    }\n    if (m.type === \"image\") return await images.get(m.token)?.();\n    // The host is stopping this isolate: the sockets served here hear 1001 first. A 101 carries\n    // its early frames, so a socket's close normally goes straight to its client; only a client\n    // end that had sent unacknowledged frames before its hand-over keeps a relay here\n    // (takeClientEnd), and the answer waits a macrotask so that relay forwards the 1001 before\n    // the host terminates the isolate.\n    if (m.type === \"goAway\") {\n      CfWebSocket.goAway(\"the loaded Worker stopped\");\n      return await new Promise((r) => setTimeout(r, 0));\n    }\n    if (m.type === \"object\") {\n      const { rt, stub, key } = await facet(m.className, m.cellKey);\n      if (m.op === \"attach\") {\n        facetKeys.set(key, { key: m.cellKey, epoch: m.epoch });\n        if (typeof m.idName === \"string\") idNames.set(key, m.idName);\n        return;\n      }\n      if (m.op === \"call\") return stub[m.method](...m.args);\n      if (m.op === \"restart\") return rt.restartObject(key);\n      if (m.op === \"delete\") {\n        await runInDurableObject(\n          stub,\n          (_o: unknown, ctx: { storage: { deleteAll(): Promise<void> } }) =>\n            ctx.storage.deleteAll(),\n        );\n        return rt.restartObject(key);\n      }\n      throw new Error(`unknown object op ${m.op}`);\n    }\n    if (m.type === \"call\") return exported(m.name, m.props)[m.method](...m.args);\n    throw new Error(`unknown isolate message ${m.type}`);\n  };\n  const { call, outbound } = isolatePort(port, handle, fetchTarget);\n  // `abortIsolate()`: the host ends this isolate. The caller sees workerd's error: the call that\n  // aborted rejects with it, as do the host's calls in flight (the host closes the port with it).\n  (globalThis as Record<symbol, unknown>)[ABORT_ISOLATE] = (reason: unknown): never => {\n    const reference = crypto.randomUUID().replace(/-/g, \"\").slice(0, 24);\n    void call({ type: \"abort\", reason: String(reason ?? \"\"), reference }).catch(() => {});\n    throw new Error(`internal error; reference = ${reference}`);\n  };\n}\n\nconst safe = (args: unknown[]) =>\n  args.map((a) => {\n    try {\n      return structuredClone(a);\n    } catch {\n      return String(a);\n    }\n  });\n"]}

package/dist/isolate/node-entry.js

@@ -1,11 +1,44 @@
 // A worker thread hosting ONE loaded Worker (an isolate); see src/isolate/protocol.ts.
+import * as nodeModule from "node:module";
 import { parentPort } from "node:worker_threads";
 import { nodeSqliteOpener } from "../adapters/node-sqlite.js";
+import { loadedModuleShim, resolveModuleName } from "../bindings/module-registry.js";
 import { CellsRequest, CellsResponse, WebSocket, WebSocketPair, WebSocketRequestResponsePair, } from "../project/workers-globals-module.js";
 import { serveIsolate } from "./isolate.js";
+import { makeGlobalsWritable } from "./writable-globals.js";
 // An exception no request awaits (a timer, ctx.abort() from one) is reported, and the isolate
 // lives on, as in a browser Dedicated Worker and workerd; Node would end the thread.
 process.on("uncaughtException", (e) => console.error("Uncaught", e));
+// workerd lets Worker code assign its globals (Kitesurf's DOM shim sets `navigator` and
+// `location`); this realm's getter-only ones become writable (writable-globals.ts).
+makeGlobalsWritable();
+// `import()` in code the loaded Worker builds with `Function` (Kitesurf imports page modules so)
+// names its modules as on workerd, but no bundler saw it: this thread's module hooks resolve such
+// a specifier against the loaded Worker's modules (the registry its bundle publishes) and load a
+// shim that re-exports the bundled module. `registerHooks` is in Node 22.15 and later.
+const LOADED = "cellb-loaded:";
+const registerHooks = nodeModule.registerHooks;
+registerHooks?.({
+    resolve(spec, context, next) {
+        const loaded = globalThis.__cellbLoadedModules;
+        const fromBundle = !context.parentURL || context.parentURL.startsWith("data:");
+        const name = loaded && fromBundle ? resolveModuleName(spec, loaded.main, loaded.names) : undefined;
+        if (name === undefined)
+            return next(spec, context);
+        return { url: LOADED + encodeURIComponent(name), shortCircuit: true };
+    },
+    load(url, context, next) {
+        if (!url.startsWith(LOADED))
+            return next(url, context);
+        const name = decodeURIComponent(url.slice(LOADED.length));
+        const loaded = globalThis.__cellbLoadedModules;
+        return {
+            format: "module",
+            shortCircuit: true,
+            source: loadedModuleShim(name, loaded?.exportNames[name] ?? []),
+        };
+    },
+});
 // This thread is the loaded Worker's realm: its globals are the Workers ones, as in a browser
 // isolate (src/isolate/isolate-worker.ts). A `Response` that takes `{ status: 101, webSocket }`
 // and a `WebSocketPair` are what a Worker that accepts WebSockets needs.

package/dist/isolate/node-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-entry.js","sourceRoot":"","sources":["../../src/isolate/node-entry.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,aAAa,EACb,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,8FAA8F;AAC9F,qFAAqF;AACrF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAErE,8FAA8F;AAC9F,gGAAgG;AAChG,yEAAyE;AACzE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;IACxB,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,aAAa;IACvB,SAAS;IACT,aAAa;IACb,4BAA4B;CAC7B,CAAC,CAAC;AAEH,YAAY,CACV,UAAiC,EACjC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,MAAM,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvF,wFAAwF;AACxF,0FAA0F;AAC1F,sFAAsF;AACtF,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAC9E,CAAC","sourcesContent":["// A worker thread hosting ONE loaded Worker (an isolate); see src/isolate/protocol.ts.\nimport { parentPort } from \"node:worker_threads\";\nimport { nodeSqliteOpener } from \"../adapters/node-sqlite.js\";\nimport {\n  CellsRequest,\n  CellsResponse,\n  WebSocket,\n  WebSocketPair,\n  WebSocketRequestResponsePair,\n} from \"../project/workers-globals-module.js\";\nimport { serveIsolate } from \"./isolate.js\";\nimport type { PortLike } from \"./protocol.js\";\n\n// An exception no request awaits (a timer, ctx.abort() from one) is reported, and the isolate\n// lives on, as in a browser Dedicated Worker and workerd; Node would end the thread.\nprocess.on(\"uncaughtException\", (e) => console.error(\"Uncaught\", e));\n\n// This thread is the loaded Worker's realm: its globals are the Workers ones, as in a browser\n// isolate (src/isolate/isolate-worker.ts). A `Response` that takes `{ status: 101, webSocket }`\n// and a `WebSocketPair` are what a Worker that accepts WebSockets needs.\nObject.assign(globalThis, {\n  Request: CellsRequest,\n  Response: CellsResponse,\n  WebSocket,\n  WebSocketPair,\n  WebSocketRequestResponsePair,\n});\n\nserveIsolate(\n  parentPort as unknown as PortLike,\n  async ({ source }) =>\n    import(`data:text/javascript;base64,${Buffer.from(source ?? \"\").toString(\"base64\")}`),\n  // Facets of the loaded code keep their SQLite here: files under `dataDir` when the host\n  // gives one, else temporary files (lost with the isolate, as in memory). The isolate logs\n  // every commit's pages to its host, so they are read from the WAL, not from an image.\n  { openSql: (load) => nodeSqliteOpener(load?.dataDir, { pageCapture: true }) },\n);\n"]}
+{"version":3,"file":"node-entry.js","sourceRoot":"","sources":["../../src/isolate/node-entry.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,UAAU,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACrF,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,aAAa,EACb,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,8FAA8F;AAC9F,qFAAqF;AACrF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAErE,wFAAwF;AACxF,oFAAoF;AACpF,mBAAmB,EAAE,CAAC;AAEtB,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,uFAAuF;AACvF,MAAM,MAAM,GAAG,eAAe,CAAC;AAE/B,MAAM,aAAa,GAAI,UAA6D,CAAC,aAAa,CAAC;AACnG,aAAa,EAAE,CAAC;IACd,OAAO,CAAC,IAAY,EAAE,OAA+B,EAAE,IAAuC;QAC5F,MAAM,MAAM,GAAI,UAAuD,CAAC,oBAAoB,CAAC;QAC7F,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/E,MAAM,IAAI,GACR,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,GAAW,EAAE,OAAe,EAAE,IAAuC;QACxE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAI,UAAuD,CAAC,oBAAoB,CAAC;QAC7F,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,8FAA8F;AAC9F,gGAAgG;AAChG,yEAAyE;AACzE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;IACxB,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,aAAa;IACvB,SAAS;IACT,aAAa;IACb,4BAA4B;CAC7B,CAAC,CAAC;AAEH,YAAY,CACV,UAAiC,EACjC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACnB,MAAM,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvF,wFAAwF;AACxF,0FAA0F;AAC1F,sFAAsF;AACtF,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAC9E,CAAC","sourcesContent":["// A worker thread hosting ONE loaded Worker (an isolate); see src/isolate/protocol.ts.\nimport * as nodeModule from \"node:module\";\nimport { parentPort } from \"node:worker_threads\";\nimport { nodeSqliteOpener } from \"../adapters/node-sqlite.js\";\nimport { loadedModuleShim, resolveModuleName } from \"../bindings/module-registry.js\";\nimport {\n  CellsRequest,\n  CellsResponse,\n  WebSocket,\n  WebSocketPair,\n  WebSocketRequestResponsePair,\n} from \"../project/workers-globals-module.js\";\nimport { serveIsolate } from \"./isolate.js\";\nimport type { PortLike } from \"./protocol.js\";\nimport { makeGlobalsWritable } from \"./writable-globals.js\";\n\n// An exception no request awaits (a timer, ctx.abort() from one) is reported, and the isolate\n// lives on, as in a browser Dedicated Worker and workerd; Node would end the thread.\nprocess.on(\"uncaughtException\", (e) => console.error(\"Uncaught\", e));\n\n// workerd lets Worker code assign its globals (Kitesurf's DOM shim sets `navigator` and\n// `location`); this realm's getter-only ones become writable (writable-globals.ts).\nmakeGlobalsWritable();\n\n// `import()` in code the loaded Worker builds with `Function` (Kitesurf imports page modules so)\n// names its modules as on workerd, but no bundler saw it: this thread's module hooks resolve such\n// a specifier against the loaded Worker's modules (the registry its bundle publishes) and load a\n// shim that re-exports the bundled module. `registerHooks` is in Node 22.15 and later.\nconst LOADED = \"cellb-loaded:\";\ntype LoadedModules = { main: string; names: Set<string>; exportNames: Record<string, string[]> };\nconst registerHooks = (nodeModule as { registerHooks?: (hooks: object) => unknown }).registerHooks;\nregisterHooks?.({\n  resolve(spec: string, context: { parentURL?: string }, next: (s: string, c: object) => unknown) {\n    const loaded = (globalThis as { __cellbLoadedModules?: LoadedModules }).__cellbLoadedModules;\n    const fromBundle = !context.parentURL || context.parentURL.startsWith(\"data:\");\n    const name =\n      loaded && fromBundle ? resolveModuleName(spec, loaded.main, loaded.names) : undefined;\n    if (name === undefined) return next(spec, context);\n    return { url: LOADED + encodeURIComponent(name), shortCircuit: true };\n  },\n  load(url: string, context: object, next: (u: string, c: object) => unknown) {\n    if (!url.startsWith(LOADED)) return next(url, context);\n    const name = decodeURIComponent(url.slice(LOADED.length));\n    const loaded = (globalThis as { __cellbLoadedModules?: LoadedModules }).__cellbLoadedModules;\n    return {\n      format: \"module\",\n      shortCircuit: true,\n      source: loadedModuleShim(name, loaded?.exportNames[name] ?? []),\n    };\n  },\n});\n\n// This thread is the loaded Worker's realm: its globals are the Workers ones, as in a browser\n// isolate (src/isolate/isolate-worker.ts). A `Response` that takes `{ status: 101, webSocket }`\n// and a `WebSocketPair` are what a Worker that accepts WebSockets needs.\nObject.assign(globalThis, {\n  Request: CellsRequest,\n  Response: CellsResponse,\n  WebSocket,\n  WebSocketPair,\n  WebSocketRequestResponsePair,\n});\n\nserveIsolate(\n  parentPort as unknown as PortLike,\n  async ({ source }) =>\n    import(`data:text/javascript;base64,${Buffer.from(source ?? \"\").toString(\"base64\")}`),\n  // Facets of the loaded code keep their SQLite here: files under `dataDir` when the host\n  // gives one, else temporary files (lost with the isolate, as in memory). The isolate logs\n  // every commit's pages to its host, so they are read from the WAL, not from an image.\n  { openSql: (load) => nodeSqliteOpener(load?.dataDir, { pageCapture: true }) },\n);\n"]}

package/dist/isolate/protocol.d.ts

@@ -60,6 +60,7 @@ type Handle = (msg: any) => Promise<unknown>;
 export declare function hostPort(port: PortLike, handle: Handle, outbound?: (req: Request) => Promise<Response>): Promise<{
     call: Call;
     fetch: Fetch;
+    close(reason: unknown): Promise<void>;
 }>;
 /**
  * The isolate's end: accepts the ports the host opens. Everything the isolate calls the host

package/dist/isolate/protocol.js

@@ -11,23 +11,27 @@ import { carryWebSocketHeaders } from "../ws/upgrade.js";
  * `fetch()` (its `globalOutbound` Fetcher).
  */
 export async function hostPort(port, handle, outbound) {
+    const bodies = new Bodies();
     const mux = multiplexPort(messageTarget(port), {
         codec: structuredCodec,
         side: "initiator",
         maxPorts: maxPorts(),
         onPort(p, meta) {
             const m = meta;
+            if (m?.kind === "body")
+                return bodies.serve(p, m.id);
             if (m?.kind !== "outbound" || !outbound)
                 return false;
             serveFetch(p, m.url, outbound);
             return true;
         },
     });
-    const call = callsOver(await mux.openPort({ kind: "calls" }), handle);
+    const call = callsOver(await mux.openPort({ kind: "calls" }), handle, mux, bodies);
     const fetch = (target, req) => isUpgrade(req)
         ? upgradeOver(mux, { kind: "upgrade", target }, req)
         : fetchOver(mux, { kind: "fetch", target }, req);
-    return { call, fetch };
+    // Closing the multiplexer rejects every call in flight, and every later one, with `reason`.
+    return { call, fetch, close: (reason) => mux.close(reason) };
 }
 /**
  * The isolate's end: accepts the ports the host opens. Everything the isolate calls the host
@@ -36,12 +40,15 @@ export async function hostPort(port, handle, outbound) {
  */
 export function isolatePort(port, handle, fetch) {
     let calls;
+    const bodies = new Bodies();
     const mux = multiplexPort(messageTarget(port), {
         codec: structuredCodec,
         side: "responder",
         maxPorts: maxPorts(),
         onPort(p, meta) {
             const m = meta;
+            if (m?.kind === "body")
+                return bodies.serve(p, m.id);
             if (m?.kind === "fetch") {
                 serveFetch(p, m.url, (r) => fetch(m.target, r));
                 return true;
@@ -52,7 +59,7 @@ export function isolatePort(port, handle, fetch) {
             }
             if (m?.kind !== "calls" || calls)
                 return false;
-            calls = callsOver(p, handle);
+            calls = callsOver(p, handle, mux, bodies);
             return true;
         },
     });
@@ -173,6 +180,170 @@ function serveUpgrade(p, meta, fetch) {
         void p.close?.();
     })();
 }
+/** Marks a Request, Response, Headers or ReadableStream in a message: `{ [WIRE]: kind, … }`. */
+const WIRE = "\u0000cellb.wire";
+// The realm's own classes, before the isolate entry replaces the globals with its subclasses
+// (CellsRequest, CellsResponse): instances of either are instances of these.
+const NativeRequest = globalThis.Request;
+const NativeResponse = globalThis.Response;
+const NativeHeaders = globalThis.Headers;
+const NativeReadableStream = globalThis.ReadableStream;
+/**
+ * The bodies one side has sent and the other has not read yet, by id. The reader opens a port
+ * `{ kind: "body", id }` on the multiplexer when it first pulls, and the body streams over it,
+ * as a fetch's body does; a reader that drops the body unread sends `release {body}` instead.
+ */
+class Bodies {
+    #last = 0;
+    #streams = new Map();
+    add(stream) {
+        this.#streams.set(++this.#last, stream);
+        return this.#last;
+    }
+    /** The last id handed out, for `releaseSince`. */
+    mark() {
+        return this.#last;
+    }
+    /** Releases the bodies added after `mark` (a message that could not be sent). */
+    releaseSince(mark) {
+        for (let id = mark + 1; id <= this.#last; id++)
+            this.release(id);
+    }
+    release(id) {
+        const stream = this.#streams.get(id);
+        this.#streams.delete(id);
+        void stream?.cancel().catch(() => { });
+    }
+    /** Serves body `id` on port `p`; false (the port is refused) if there is no such body. */
+    serve(p, id) {
+        const stream = this.#streams.get(id);
+        if (!stream)
+            return false;
+        this.#streams.delete(id);
+        const encoder = new TextEncoder();
+        serveDuplexOverPort(p, async function* () {
+            // A reader, not `for await`: not every engine iterates a ReadableStream (Safari).
+            const reader = stream.getReader();
+            try {
+                for (;;) {
+                    const { done, value: chunk } = await reader.read();
+                    if (done)
+                        return;
+                    yield typeof chunk === "string"
+                        ? encoder.encode(chunk)
+                        : ArrayBuffer.isView(chunk)
+                            ? new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength)
+                            : new Uint8Array(chunk);
+                }
+            }
+            finally {
+                // The reader stopped early (the port was abandoned): the stream is cancelled.
+                void reader.cancel().catch(() => { });
+            }
+        });
+        return true;
+    }
+}
+/**
+ * A Request, Response, Headers or ReadableStream as a message can carry it (workerd's RPC passes
+ * them; a port cannot clone them): its head copied, its body registered in `bodies` to stream
+ * when read. Anything else is returned as it is.
+ */
+function toWire(v, bodies) {
+    if (v instanceof NativeHeaders)
+        return { [WIRE]: "headers", entries: [...v] };
+    if (v instanceof NativeReadableStream)
+        return { [WIRE]: "stream", body: bodies.add(v) };
+    if (v instanceof NativeResponse) {
+        if (v.webSocket)
+            throw new DOMException("A WebSocket response cannot be passed in an RPC call; return it from fetch().", "DataCloneError");
+        return {
+            [WIRE]: "response",
+            status: v.status,
+            statusText: v.statusText,
+            url: v.url,
+            headers: [...v.headers],
+            body: v.body ? bodies.add(v.body) : null,
+        };
+    }
+    if (v instanceof NativeRequest)
+        return {
+            [WIRE]: "request",
+            url: v.url,
+            method: v.method,
+            headers: [...v.headers],
+            redirect: v.redirect,
+            body: v.body ? bodies.add(v.body) : null,
+        };
+    return v;
+}
+/** Releases a body that was never read, once its stream is collected. */
+const unread = new FinalizationRegistry((release) => release());
+/**
+ * The other side's body `id` as a stream: the first pull opens its port, so a body nobody
+ * reads costs nothing but its release.
+ */
+function remoteBody(mux, id, release) {
+    let chunks;
+    const token = {};
+    const stream = new NativeReadableStream({
+        async pull(controller) {
+            if (!chunks) {
+                unread.unregister(token);
+                const port = await mux.openPort({ kind: "body", id });
+                chunks = duplexOverPort(port)([])[Symbol.asyncIterator]();
+            }
+            const { done, value } = await chunks.next();
+            if (done)
+                controller.close();
+            else
+                controller.enqueue(value);
+        },
+        async cancel(reason) {
+            if (chunks)
+                await chunks.return?.(reason);
+            else {
+                unread.unregister(token);
+                release(id);
+            }
+        },
+    });
+    unread.register(stream, () => release(id), token);
+    return stream;
+}
+/** Statuses whose Response has no body. */
+const NULL_BODY = [101, 103, 204, 205, 304];
+/** The value `toWire` described, rebuilt; its body streams from the other side when read. */
+function fromWire(v, mux, release) {
+    const body = (id) => (id === null ? null : remoteBody(mux, id, release));
+    switch (v[WIRE]) {
+        case "headers":
+            return new Headers(v.entries);
+        case "stream":
+            return body(v.body);
+        case "response": {
+            if (NULL_BODY.includes(v.status) && v.body !== null)
+                release(v.body);
+            const res = new Response(NULL_BODY.includes(v.status) ? null : body(v.body), {
+                status: v.status,
+                statusText: v.statusText,
+                headers: v.headers,
+            });
+            if (v.url)
+                Object.defineProperty(res, "url", { value: v.url, enumerable: true });
+            return res;
+        }
+        case "request":
+            return new Request(v.url, {
+                method: v.method,
+                headers: v.headers,
+                redirect: v.redirect,
+                body: body(v.body),
+                duplex: "half",
+            });
+    }
+    return v;
+}
 /** Marks a value passed by reference in a message: `{ [REF]: id }`. */
 const REF = "\u0000cellb.ref";
 /**
@@ -182,17 +353,26 @@ const REF = "\u0000cellb.ref";
  * value runs the value's own `Symbol.dispose`, as workerd does for an `RpcTarget`. A call
  * returns an RpcPromise: calls on it go to the other side at once, naming its answer.
  */
-function callsOver(port, handle) {
+function callsOver(port, handle, mux, bodies) {
     const values = new Map();
     const answers = new Map();
     let lastAnswer = 0;
     const holders = new Map();
     let lastId = 0;
-    const encode = (v) => cloneable(cross(v, (x) => {
-        values.set(++lastId, x);
-        holders.set(x, (holders.get(x) ?? 0) + 1);
-        return { [REF]: lastId };
-    }, (x) => x));
+    const encode = (v) => {
+        const mark = bodies.mark();
+        try {
+            return cloneable(cross(v, (x) => {
+                values.set(++lastId, x);
+                holders.set(x, (holders.get(x) ?? 0) + 1);
+                return { [REF]: lastId };
+            }, (x) => toWire(x, bodies)));
+        }
+        catch (e) {
+            bodies.releaseSince(mark); // the message is not sent: nobody will read its bodies
+            throw e;
+        }
+    };
     const release = (id) => {
         const v = values.get(id);
         if (!values.delete(id))
@@ -206,9 +386,31 @@ function callsOver(port, handle) {
         }
     };
     const send = (msg) => callPort(port, msg, { timeout: NO_TIMEOUT }).catch(() => { });
-    const collected = new FinalizationRegistry((id) => send({ type: "release", id }));
+    // Stubs of one id held here: `dup()` makes another, and the id is released (and the other
+    // side's value with it, once no other id holds it) when the last of them is disposed or
+    // collected.
+    const local = new Map();
+    const drop = (id) => {
+        const n = (local.get(id) ?? 1) - 1;
+        if (n)
+            local.set(id, n);
+        else {
+            local.delete(id);
+            send({ type: "release", id });
+        }
+    };
+    const collected = new FinalizationRegistry(drop);
     const stubOf = (id) => {
-        const invoke = (path, args) => call({ type: "ref", id, path, args });
+        local.set(id, (local.get(id) ?? 0) + 1);
+        let disposed = false;
+        const live = () => {
+            if (disposed)
+                throw new Error("A stub was used after it was disposed.");
+        };
+        const invoke = (path, args) => {
+            live();
+            return call({ type: "ref", id, path, args });
+        };
         const stub = new Proxy(() => { }, {
             apply: (_t, _this, args) => invoke([], args),
             get(_t, prop) {
@@ -216,11 +418,20 @@ function callsOver(port, handle) {
                     return true;
                 if (prop === Symbol.dispose)
                     return () => {
+                        if (disposed)
+                            return;
+                        disposed = true;
                         collected.unregister(stub);
-                        send({ type: "release", id });
+                        drop(id);
                     };
                 if (prop === "then" || typeof prop === "symbol")
                     return undefined;
+                // workerd's `stub.dup()`: another stub of the same value, disposed on its own.
+                if (prop === "dup")
+                    return () => {
+                        live();
+                        return stubOf(id);
+                    };
                 return (...args) => invoke([prop], args);
             },
         });
@@ -233,6 +444,8 @@ function callsOver(port, handle) {
             for (let i = 0; i < v.length; i++)
                 v[i] = decode(v[i]);
         else if (v && Object.getPrototypeOf(v) === Object.prototype) {
+            if (typeof v[WIRE] === "string")
+                return fromWire(v, mux, (body) => send({ type: "release", body }));
             if (typeof v[REF] === "number")
                 return stubOf(v[REF]);
             for (const k of Object.keys(v))
@@ -254,7 +467,9 @@ function callsOver(port, handle) {
     // settles.
     const serve = async (m) => {
         if (m.type === "release") {
-            if (m.answer === undefined)
+            if (m.body !== undefined)
+                bodies.release(m.body);
+            else if (m.answer === undefined)
                 release(m.id);
             else
                 answers.delete(m.answer);