@velajs/cloudflare 1.29.0 → 1.30.0

package/dist/durable-objects.js

@@ -1,525 +1,3 @@
-import { S as connTag, a as armDoPitr, f as initDoLive, g as CfWsClient, n as isValidExpiry, p as initializeDoLiveResources, r as WsServerHolder, s as readDoPitrBookmark, t as isCanonicalBoundedText, v as rejectedAttachment, w as roomTag, x as registerCloudflareEnvironment, y as socketAttachment } from "./nonce-validation-Dy8z05A9.js";
-import { VelaApplication, bootstrap } from "@velajs/vela";
-import { WS_SERVER, WebSocketSendGate, WsDispatcher, WsMessageQueue, WsServerImpl, assertBroadcastCommandFits, local, readWsEntrypointMeta } from "@velajs/vela/websocket";
-import { DurableObject } from "cloudflare:workers";
-//#region src/websocket/cf-room-registry.ts
-/**
-* Core `RoomRegistry` backed by a Durable Object's hibernatable sockets. Room
-* membership lives in tags (hub room, set at accept) + the attachment (dynamic
-* `join()`), never in DO instance fields — so it survives hibernation with zero
-* rehydration.
-*/
-var CfRoomRegistry = class {
-	ctx;
-	#sendGates = /* @__PURE__ */ new WeakMap();
-	#admitting = /* @__PURE__ */ new WeakSet();
-	#sendPolicyForPath;
-	setSendPolicyResolver(resolve) {
-		this.#sendPolicyForPath = resolve;
-	}
-	deliveryAuthorizer;
-	frameLimitForPath;
-	constructor(ctx) {
-		this.ctx = ctx;
-	}
-	setDeliveryAuthorizer(authorizer) {
-		this.deliveryAuthorizer = authorizer;
-	}
-	/** Reconcile pre-migration/woken attachments with authoritative gateway metadata. */
-	setFrameLimitResolver(resolver) {
-		this.frameLimitForPath = resolver;
-	}
-	/**
-	* Run `admit` (the connection hook) with `ws` marked as being admitted, so a
-	* broadcast issued meanwhile (for example `server.emit()` announcing the new
-	* connection) skips the still-pending socket instead of rejecting it.
-	*/
-	async admitting(ws, admit) {
-		this.#admitting.add(ws);
-		try {
-			return await admit();
-		} finally {
-			this.#admitting.delete(ws);
-		}
-	}
-	register(_client) {}
-	leaveAll(_client) {}
-	join(client, room) {
-		return client.join(room);
-	}
-	leave(client, room) {
-		return client.leave(room);
-	}
-	localIdsInRoom(room) {
-		return this.socketsForRoom(room).map((ws) => this.attachmentOf(ws).connId);
-	}
-	deliverLocal(cmd) {
-		const excludeIds = new Set(cmd.exceptIds ?? []);
-		const excludeRooms = cmd.exceptRooms ?? [];
-		const targets = cmd.rooms.length === 0 ? this.ctx.getWebSockets() : this.collectRooms(cmd.rooms);
-		const seen = /* @__PURE__ */ new Set();
-		const selected = [];
-		for (const ws of targets) {
-			const att = this.reconcileFrameLimit(ws, this.attachmentOf(ws));
-			if (att.state === "pending" && this.#admitting.has(ws)) continue;
-			if (att.state !== "active" || att.expiresAtMs !== void 0 && (!Number.isSafeInteger(att.expiresAtMs) || att.expiresAtMs <= Date.now())) {
-				try {
-					att.state = "rejected";
-					ws.serializeAttachment(att);
-					ws.close(1008, "identity expired or connection rejected");
-				} catch {}
-				continue;
-			}
-			if (seen.has(att.connId)) continue;
-			seen.add(att.connId);
-			if (excludeIds.has(att.connId)) continue;
-			if (excludeRooms.some((r) => att.rooms.includes(r))) continue;
-			selected.push({
-				ws,
-				client: this.clientFor(ws)
-			});
-		}
-		if (!this.deliveryAuthorizer) {
-			for (const { client } of selected) client.sendRaw(cmd.frame);
-			return;
-		}
-		return Promise.all(selected.map(async ({ ws, client }) => {
-			let allowed = false;
-			try {
-				allowed = await this.deliveryAuthorizer(client) === true;
-			} catch {
-				allowed = false;
-			}
-			if (allowed) client.sendRaw(cmd.frame);
-			else this.reject(ws, "delivery authorization revoked");
-		})).then(() => void 0);
-	}
-	collectRooms(rooms) {
-		const set = /* @__PURE__ */ new Set();
-		for (const room of rooms) for (const ws of this.socketsForRoom(room)) set.add(ws);
-		return [...set];
-	}
-	socketsForRoom(room) {
-		return this.ctx.getWebSockets().filter((ws) => this.attachmentOf(ws).rooms.includes(room));
-	}
-	attachmentOf(ws) {
-		return socketAttachment(ws) ?? rejectedAttachment();
-	}
-	/** Reconstruct a `WsClient` for a raw socket (e.g. inside gateway lifecycle scans). */
-	clientFor(ws) {
-		this.reconcileFrameLimit(ws, this.attachmentOf(ws));
-		let gate = this.#sendGates.get(ws);
-		if (!gate) {
-			gate = new WebSocketSendGate(this.#sendPolicyForPath?.(this.attachmentOf(ws).path));
-			this.#sendGates.set(ws, gate);
-		}
-		return new CfWsClient(this.ctx, ws, gate);
-	}
-	reconcileFrameLimit(ws, attachment) {
-		const expected = this.frameLimitForPath?.(attachment.path);
-		if (expected !== void 0 && attachment.maxFrameBytes !== expected) {
-			attachment.maxFrameBytes = expected;
-			ws.serializeAttachment(attachment);
-		}
-		return attachment;
-	}
-	reject(ws, reason) {
-		try {
-			const attachment = this.attachmentOf(ws);
-			attachment.state = "rejected";
-			ws.serializeAttachment(attachment);
-			ws.close(1008, reason);
-		} catch {}
-	}
-};
-//#endregion
-//#region src/websocket/do-websocket-host.ts
-/**
-* The socket lifecycle inside a WebSocket Durable Object, decoupled from the
-* `cloudflare:workers` base class so it is unit-testable with fakes. The thin
-* `VelaWebSocketDurableObject` shell forwards its hibernation callbacks here.
-*/
-var DoWebSocketHost = class {
-	ctx;
-	dispatcher;
-	registry;
-	gatewayPaths;
-	#messages = /* @__PURE__ */ new WeakMap();
-	constructor(ctx, dispatcher, registry, gatewayPaths = []) {
-		this.ctx = ctx;
-		this.dispatcher = dispatcher;
-		this.registry = registry;
-		this.gatewayPaths = gatewayPaths;
-	}
-	/** The single registered gateway's path — a fallback when the Worker didn't forward `x-vela-path`. */
-	defaultPath() {
-		return this.gatewayPaths[0];
-	}
-	/**
-	* Accept a hibernatable socket: tag it with its hub room + connection id,
-	* persist the attachment, then await `OnGatewayConnection` before the caller
-	* returns 101. A rejected lifecycle hook closes and fails the upgrade.
-	*/
-	async accept(ws, path, roomId, userId, expiresAtMs, principal) {
-		const maxFrameBytes = this.dispatcher.getGatewayMaxFrameBytes(path);
-		if (maxFrameBytes === void 0) return false;
-		if (expiresAtMs !== void 0 && (!Number.isSafeInteger(expiresAtMs) || expiresAtMs <= Date.now())) return false;
-		if (principal !== void 0 && (expiresAtMs === void 0 || userId !== principal.subject || !principal.issuer || !principal.tenantId) || expiresAtMs !== void 0 && principal === void 0) return false;
-		const connId = crypto.randomUUID();
-		const attachment = {
-			version: 1,
-			connId,
-			state: "pending",
-			userId,
-			principal: principal === void 0 ? void 0 : {
-				issuer: principal.issuer,
-				subject: principal.subject,
-				principalType: principal.principalType
-			},
-			tenantId: principal?.tenantId,
-			expiresAtMs,
-			path,
-			maxFrameBytes,
-			rooms: [roomId],
-			data: {
-				...userId ? { userId } : {},
-				...principal ? {
-					principal: {
-						issuer: principal.issuer,
-						subject: principal.subject,
-						principalType: principal.principalType
-					},
-					tenantId: principal.tenantId
-				} : {},
-				...expiresAtMs !== void 0 ? { expiresAtMs } : {}
-			}
-		};
-		if (new TextEncoder().encode(JSON.stringify(attachment)).byteLength > 16384) return false;
-		try {
-			this.ctx.acceptWebSocket(ws, [roomTag(roomId), connTag(connId)]);
-			ws.serializeAttachment(attachment);
-		} catch {
-			try {
-				ws.close(1008, "Connection rejected");
-			} catch {}
-			return false;
-		}
-		const client = this.registry.clientFor(ws);
-		try {
-			await this.registry.admitting(ws, () => this.dispatcher.handleOpen(path, client));
-			if (!this.transition(ws, "active", "pending")) throw new Error(socketAttachment(ws)?.state === "rejected" ? "WebSocket was rejected while OnGatewayConnection was running: a frame arrived before the connection hook completed, or the connection closed or failed" : "Unable to persist authorized WebSocket state");
-			return true;
-		} catch (err) {
-			await this.dispatcher.handleError(path, client, err).catch(() => {});
-			this.transition(ws, "rejected");
-			try {
-				ws.close(1008, "Connection rejected");
-			} catch {}
-			return false;
-		}
-	}
-	async onMessage(ws, message) {
-		if (!this.isActive(ws)) {
-			this.reject(ws, "Connection is not authorized");
-			return;
-		}
-		let queue = this.#messages.get(ws);
-		if (!queue) {
-			const path = socketAttachment(ws)?.path;
-			const options = this.dispatcher.collectEntrypoints().find((entry) => entry.meta.path === path)?.meta.options;
-			queue = new WsMessageQueue(() => this.reject(ws, "WebSocket message budget exceeded", 1013), options?.maxPendingMessages, options?.maxPendingBytes);
-			this.#messages.set(ws, queue);
-		}
-		await queue.run(message, async () => {
-			if (!this.isActive(ws)) return;
-			const client = this.registry.clientFor(ws);
-			await this.dispatcher.dispatchMessage(client.path, client, message);
-		});
-	}
-	async onClose(ws, code, reason) {
-		this.#messages.get(ws)?.stop();
-		if (!this.isActive(ws, false)) {
-			this.transition(ws, "rejected");
-			try {
-				ws.close();
-			} catch {}
-			return;
-		}
-		const client = this.registry.clientFor(ws);
-		await this.dispatcher.handleClose(client.path, client, code, reason);
-		try {
-			if (code === 1e3 || code >= 3e3 && code <= 4999) ws.close(code, reason);
-			else ws.close();
-		} catch {}
-	}
-	async onError(ws, err) {
-		if (!this.isActive(ws, false)) {
-			this.reject(ws, "Connection failed before authorization");
-			return;
-		}
-		const client = this.registry.clientFor(ws);
-		await this.dispatcher.handleError(client.path, client, err);
-	}
-	/** Deliver a broadcast command to this DO's local sockets (RPC entry point). */
-	broadcast(cmd) {
-		assertBroadcastCommandFits(cmd, this.dispatcher.getMaximumGatewayFrameBytes());
-		return this.registry.deliverLocal(cmd);
-	}
-	transition(ws, state, expectedState) {
-		try {
-			const attachment = socketAttachment(ws);
-			if (!attachment) return false;
-			if (expectedState !== void 0 && attachment.state !== expectedState) return false;
-			attachment.state = state;
-			ws.serializeAttachment(attachment);
-			return true;
-		} catch {
-			return false;
-		}
-	}
-	isActive(ws, checkExpiry = true) {
-		try {
-			const attachment = socketAttachment(ws);
-			if (!attachment || attachment.state !== "active") return false;
-			return !checkExpiry || attachment.expiresAtMs === void 0 || Number.isSafeInteger(attachment.expiresAtMs) && attachment.expiresAtMs > Date.now();
-		} catch {
-			return false;
-		}
-	}
-	reject(ws, reason, code = 1008) {
-		this.#messages.get(ws)?.stop();
-		this.transition(ws, "rejected");
-		try {
-			ws.close(code, reason);
-		} catch {}
-	}
-};
-//#endregion
-//#region src/websocket/do-bootstrap.ts
-/**
-* Slim DI bootstrap for the Durable Object isolate: wires the container and runs
-* `OnModuleInit`/`OnApplicationBootstrap` (so `WsDispatcher` discovers gateways)
-* WITHOUT building the Hono app/routes the DO never serves. The DO's `env` is
-* seeded as the global ENV before providers construct, and the ctx-backed server
-* is bound before bootstrap lifecycle so gateway `afterInit`/handlers see it.
-*/
-async function buildDoRuntime(rootModule, ctx, options) {
-	const { container, routeManager, loader } = await bootstrap(rootModule, { configureContainer: (container) => {
-		registerCloudflareEnvironment(container, options.env);
-	} });
-	const registry = new CfRoomRegistry(ctx);
-	const driver = local();
-	driver.bind(registry);
-	const server = new WsServerImpl(driver);
-	if (container.has(WS_SERVER)) {
-		const holder = await container.resolveAsync(WS_SERVER);
-		if (!(holder instanceof WsServerHolder)) throw new Error("[vela] The WebSocket Durable Object found a WS_SERVER from the core WebSocketModule, which cannot reach Durable Object sockets. On Cloudflare, import CloudflareWebSocketModule.forRoot() instead of WebSocketModule.forRoot().");
-		holder.setTarget(server);
-	}
-	const app = new VelaApplication(container, routeManager);
-	app.setInstances(await loader.resolveAllInstances());
-	initializeDoLiveResources(container, ctx);
-	await app.callOnModuleInit();
-	await app.callOnApplicationBootstrap();
-	const wsEntrypoints = app.entrypoints.ofKind("websocket", readWsEntrypointMeta);
-	const dispatcher = wsEntrypoints[0]?.meta.dispatcher ?? app.get(WsDispatcher);
-	registry.setSendPolicyResolver((path) => wsEntrypoints.find((entry) => entry.meta.path === path)?.meta.options.sendPolicy);
-	registry.setFrameLimitResolver((path) => dispatcher.getGatewayMaxFrameBytes(path));
-	registry.setDeliveryAuthorizer((client) => {
-		const path = client instanceof CfWsClient ? client.path : "";
-		return dispatcher.authorizeDelivery(path, client);
-	});
-	const live = initDoLive(app, ctx, registry);
-	return {
-		dispatcher,
-		registry,
-		server,
-		gatewayPaths: wsEntrypoints.map((ep) => ep.meta.path),
-		live,
-		close: (signal) => app.close(signal)
-	};
-}
-//#endregion
-//#region src/websocket/websocket.durable-object.ts
-const PING = "{\"event\":\"$ping\"}";
-const PONG = "{\"event\":\"$pong\"}";
-const MAX_IDENTITY_FIELD_BYTES = 2048;
-const encoder = new TextEncoder();
-function isIdentityField(value) {
-	return value !== null && value.length > 0 && encoder.encode(value).byteLength <= MAX_IDENTITY_FIELD_BYTES;
-}
-/**
-* Base class for the WebSocket Durable Object. The user exports a named subclass
-* (matching their `wrangler.toml` `class_name`) built from their `AppModule`, or
-* from a `DynamicModule` declared at module scope:
-*
-* ```ts
-* export class ChatRoom extends VelaWebSocketDurableObject(AppModule) {}
-* ```
-*
-* It owns the raw hibernation socket lifecycle (Hono's `upgradeWebSocket` cannot
-* bridge DO hibernation) and forwards every event into the runtime-agnostic
-* `WsDispatcher` via {@link DoWebSocketHost}. The DO's `env` is the
-* application's ENV, as in the Worker.
-*/
-function VelaWebSocketDurableObject(rootModule) {
-	return class VelaWsDurableObject extends DurableObject {
-		host;
-		liveEngine;
-		ready;
-		constructor(ctx, env) {
-			super(ctx, env);
-			try {
-				ctx.setWebSocketAutoResponse(new WebSocketRequestResponsePair(PING, PONG));
-			} catch {}
-			this.ready = ctx.blockConcurrencyWhile(async () => {
-				const runtime = await buildDoRuntime(rootModule, ctx, { env });
-				this.host = new DoWebSocketHost(ctx, runtime.dispatcher, runtime.registry, runtime.gatewayPaths);
-				this.liveEngine = runtime.live;
-			});
-		}
-		/** Intra-worker RPC only; HTTP fetch never exposes this admin snapshot. */
-		async inspectLive() {
-			await this.ready;
-			return this.liveEngine?.inspect() ?? {
-				subscriptions: [],
-				rooms: []
-			};
-		}
-		async fetch(request) {
-			await this.ready;
-			if (request.headers.get("upgrade")?.toLowerCase() !== "websocket") return new Response("Expected WebSocket upgrade", { status: 426 });
-			const url = new URL(request.url);
-			const roomId = request.headers.get("x-vela-room") ?? this.ctx.id.name ?? url.pathname;
-			const path = request.headers.get("x-vela-path") ?? this.host.defaultPath() ?? url.pathname;
-			const userId = request.headers.get("x-vela-user") || void 0;
-			const rawExpiresAtMs = request.headers.get("x-vela-expires-at-ms");
-			const parsedExpiresAtMs = rawExpiresAtMs === null ? void 0 : Number(rawExpiresAtMs);
-			if (parsedExpiresAtMs !== void 0 && (!Number.isSafeInteger(parsedExpiresAtMs) || parsedExpiresAtMs <= 0)) return new Response("Invalid WebSocket identity expiry", { status: 403 });
-			const issuer = request.headers.get("x-vela-issuer");
-			const subject = request.headers.get("x-vela-subject");
-			const principalType = request.headers.get("x-vela-principal-type");
-			const tenantId = request.headers.get("x-vela-tenant");
-			const hasPrincipalHeader = issuer !== null || subject !== null || principalType !== null || tenantId !== null;
-			let principal;
-			if (hasPrincipalHeader) {
-				if (!isIdentityField(issuer) || !isIdentityField(subject) || principalType !== "user" && principalType !== "service" || !isIdentityField(tenantId) || parsedExpiresAtMs === void 0 || userId !== void 0 && userId !== subject) return new Response("Invalid WebSocket principal", { status: 403 });
-				principal = {
-					issuer,
-					subject,
-					principalType,
-					tenantId
-				};
-			} else if (parsedExpiresAtMs !== void 0) return new Response("WebSocket identity tuple is missing", { status: 403 });
-			if (parsedExpiresAtMs !== void 0 && parsedExpiresAtMs <= Date.now()) return new Response("WebSocket identity expired", { status: 403 });
-			const { 0: client, 1: server } = new WebSocketPair();
-			if (!await this.host.accept(server, path, roomId, userId, parsedExpiresAtMs, principal)) return new Response("WebSocket connection rejected", { status: 403 });
-			return new Response(null, {
-				status: 101,
-				webSocket: client
-			});
-		}
-		async webSocketMessage(ws, message) {
-			await this.ready;
-			await this.host.onMessage(ws, message);
-		}
-		async webSocketClose(ws, code, reason) {
-			await this.ready;
-			await this.host.onClose(ws, code, reason);
-		}
-		async webSocketError(ws, error) {
-			await this.ready;
-			await this.host.onError(ws, error);
-		}
-		/** DO RPC — server-initiated broadcast forwarded from a Worker (see `broadcastToRoom`). */
-		async broadcast(cmd) {
-			await this.ready;
-			await this.host.broadcast(cmd);
-		}
-		/**
-		* DO RPC — live tag invalidation forwarded from a Worker (durableObjectLive /
-		* liveInvalidateToRoom). Appends to THIS log scope's cursor log and returns
-		* the commit stamp (what `Vela-Commit-Cursor` carries); the subscription
-		* refreshes fan out asynchronously.
-		*/
-		async invalidate(cmd) {
-			await this.ready;
-			return this.liveEngine?.applyInvalidation(cmd);
-		}
-		/** DO RPC — the current PITR bookmark (typed-unavailable on a non-SQLite DO). */
-		async pitrCurrentBookmark() {
-			await this.ready;
-			return readDoPitrBookmark(this.ctx.storage);
-		}
-		/** DO RPC — the PITR bookmark closest to `time` (+ the current bookmark). */
-		async pitrBookmarkForTime(time) {
-			await this.ready;
-			return readDoPitrBookmark(this.ctx.storage, time);
-		}
-		/**
-		* DO RPC — arm a PITR restore and return the undo bookmark. When `restart` is
-		* requested, `ctx.abort()` is called AFTER the undo bookmark is computed so
-		* the recovery applies on the immediately-following session; otherwise the
-		* restore applies on the next natural restart (`restarted: false`).
-		*/
-		async pitrArmRestore(opts) {
-			await this.ready;
-			const result = await armDoPitr(this.ctx.storage, opts);
-			if (opts.restart === true) this.ctx.abort("vela PITR restore");
-			return result;
-		}
-	};
-}
-//#endregion
-//#region src/nonce/nonce.durable-object.ts
-const EXPIRED_DELETE_BATCH = 1024;
-const CREATE_TABLE = "CREATE TABLE IF NOT EXISTS __vela_nonce_claims (nonce TEXT PRIMARY KEY NOT NULL, expires_at INTEGER NOT NULL CHECK (expires_at > 0)) WITHOUT ROWID";
-const CREATE_EXPIRY_INDEX = "CREATE INDEX IF NOT EXISTS __vela_nonce_claims_expiry ON __vela_nonce_claims (expires_at)";
-const DELETE_EXPIRED = "DELETE FROM __vela_nonce_claims WHERE nonce IN (SELECT nonce FROM __vela_nonce_claims WHERE expires_at < ? ORDER BY expires_at LIMIT ?)";
-const INSERT_CLAIM = "INSERT INTO __vela_nonce_claims (nonce, expires_at) VALUES (?, ?) ON CONFLICT(nonce) DO NOTHING RETURNING nonce, expires_at";
-/**
-* SQLite Durable Object that atomically consumes nonces.
-*
-* Export this class from the Worker entry and register it through a Wrangler
-* `new_sqlite_classes` migration. `INSERT ... ON CONFLICT DO NOTHING RETURNING`
-* is the single-use decision; all SQL runs synchronously before the RPC method
-* yields, and the nonce primary key is the final concurrency boundary.
-*/
-var VelaNonceDurableObject = class extends DurableObject {
-	sql;
-	constructor(ctx, env) {
-		super(ctx, env);
-		try {
-			const sql = ctx.storage?.sql;
-			if (!sql || typeof sql.exec !== "function") return;
-			sql.exec(CREATE_TABLE);
-			sql.exec(CREATE_EXPIRY_INDEX);
-			this.sql = sql;
-		} catch {
-			this.sql = void 0;
-		}
-	}
-	async claim(nonce, expEpochSeconds) {
-		const sql = this.sql;
-		if (!sql) return false;
-		const now = Math.floor(Date.now() / 1e3);
-		if (!isCanonicalBoundedText(nonce, 512) || !isValidExpiry(expEpochSeconds, now)) return false;
-		try {
-			sql.exec(DELETE_EXPIRED, now, EXPIRED_DELETE_BATCH);
-			const cursor = sql.exec(INSERT_CLAIM, nonce, expEpochSeconds);
-			if (!cursor || typeof cursor.toArray !== "function") return false;
-			const rows = cursor.toArray();
-			if (!Array.isArray(rows) || rows.length !== 1) return false;
-			const row = rows[0];
-			if (typeof row !== "object" || row === null) return false;
-			if (!Object.hasOwn(row, "nonce") || !Object.hasOwn(row, "expires_at") || !("nonce" in row) || !("expires_at" in row)) return false;
-			return row.nonce === nonce && row.expires_at === expEpochSeconds;
-		} catch {
-			return false;
-		}
-	}
-};
-//#endregion
+import { VelaWebSocketDurableObject } from "./websocket/websocket.durable-object.js";
+import { VelaNonceDurableObject } from "./nonce/nonce.durable-object.js";
 export { VelaNonceDurableObject, VelaWebSocketDurableObject };
-
-//# sourceMappingURL=durable-objects.js.map

package/dist/environment.js

@@ -0,0 +1,19 @@
+import { ENV, defineProvider } from "@velajs/vela";
+//#region src/environment.ts
+/**
+* Seed the application's native environment as the global ENV before provider
+* factories or lifecycle hooks run. No platform I/O is performed here; callers
+* create applications inside an event or a Durable Object constructor.
+*/
+function registerCloudflareEnvironment(container, env) {
+	container.register(defineProvider(ENV, { useValue: env }));
+	container.markGlobalToken(ENV);
+}
+/** Reject accidental reuse of an application with another event's environment. */
+function assertCloudflareEnvironment(expected, actual) {
+	if (actual !== expected) throw new Error("This Cloudflare application belongs to a different environment. Create an application with the current event environment.");
+}
+//#endregion
+export { assertCloudflareEnvironment, registerCloudflareEnvironment };
+
+//# sourceMappingURL=environment.js.map

package/dist/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","names":[],"sources":["../src/environment.ts"],"sourcesContent":["import { defineProvider, ENV } from '@velajs/vela';\nimport type { VelaEnv } from '@velajs/vela';\nimport type { Container } from '@velajs/vela/module-kit';\n\n/**\n * Seed the application's native environment as the global ENV before provider\n * factories or lifecycle hooks run. No platform I/O is performed here; callers\n * create applications inside an event or a Durable Object constructor.\n */\nexport function registerCloudflareEnvironment(container: Container, env: VelaEnv): void {\n  container.register(defineProvider(ENV, { useValue: env }));\n  container.markGlobalToken(ENV);\n}\n\n/** Reject accidental reuse of an application with another event's environment. */\nexport function assertCloudflareEnvironment<T extends object>(expected: T, actual: T): void {\n  if (actual !== expected) {\n    throw new Error(\n      'This Cloudflare application belongs to a different environment. ' +\n        'Create an application with the current event environment.',\n    );\n  }\n}\n"],"mappings":";;;;;;;AASA,SAAgB,8BAA8B,WAAsB,KAAoB;CACtF,UAAU,SAAS,eAAe,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC;CACzD,UAAU,gBAAgB,GAAG;AAC/B;;AAGA,SAAgB,4BAA8C,UAAa,QAAiB;CAC1F,IAAI,WAAW,UACb,MAAM,IAAI,MACR,2HAEF;AAEJ"}

package/dist/index.d.ts

@@ -1,12 +1,15 @@
 import "./vela-env-DFvyoNT3.js";
-import { a as DoPitrId, c as DoPitrUnavailableError, d as isDoPitrUnavailable, f as readDoPitrBookmark, i as DoPitrBookmarkRead, l as VelaDoPitrRpc, n as DoPitrArmOptions, o as DoPitrNamespace, p as CloudflareRoot, r as DoPitrArmResult, s as DoPitrStorage, t as VelaNonceDurableObject, u as armDoPitr } from "./nonce.durable-object-Df4CZi-0.js";
-import { AsyncCacheStore, CacheEntry, CacheEntryReader, CacheEntryWriter, CacheInvalidationStore, DynamicModule, InjectionToken, NonceStore, RuntimeAdapter, ThrottlerStore, Type, VelaApplication, VelaEnv, VelaMiddlewareHandler, VelaSecurityOptions } from "@velajs/vela";
-import { BroadcastCommand, ConnectedSocket, MessageBody, OnGatewayConnection, OnGatewayDisconnect, OnGatewayInit, SubscribeMessage, UpgradeAuthenticator, WebSocketGateway, WebSocketGatewayOptions, WebSocketSendGate, WebSocketServer, WebSocketUpgradeAuthenticationContext, WebSocketUpgradeIdentity, WsClient, WsDispatcher, WsException, WsMessage, WsResponse, WsServer } from "@velajs/vela/websocket";
-import { CommitStamp, CursorLog, InvalidationCommand, LiveDriver, LiveEngine, LiveInvalidationSink, ResumeVerdict } from "@velajs/vela/live";
-import { DownloadResult, PresignMethod, PresignedUrlResult, StorageBody, StorageDriver, UploadOptions, UploadResult } from "@velajs/vela/storage";
+import { a as DoPitrId, c as DoPitrUnavailableError, d as isDoPitrUnavailable, f as readDoPitrBookmark, i as DoPitrBookmarkRead, l as VelaDoPitrRpc, n as DoPitrArmOptions, o as DoPitrNamespace, p as CloudflareRoot, r as DoPitrArmResult, s as DoPitrStorage, t as VelaNonceDurableObject, u as armDoPitr } from "./nonce.durable-object-Ci9AGssY.js";
+import { DynamicModule, InjectionToken, Type, VelaApplication, VelaEnv, VelaMiddlewareHandler, VelaSecurityOptions } from "@velajs/vela";
+import { BroadcastCommand, WebSocketGatewayOptions } from "@velajs/vela/websocket";
+import { CommitStamp, CursorLog, InvalidationCommand, LiveDriver, LiveInvalidationSink, ResumeVerdict } from "@velajs/vela/live";
 import { Context, ExecutionContext } from "hono";
-import "@velajs/vela/internal";
+import { RuntimeAdapter } from "@velajs/vela/module-kit";
+import { DownloadResult, PresignMethod, PresignedUrlResult, StorageBody, StorageDriver, UploadOptions, UploadResult } from "@velajs/vela/storage";
+import { AsyncCacheStore, CacheEntry, CacheEntryReader, CacheEntryWriter, CacheInvalidationStore } from "@velajs/vela/cache";
 import { FeatureFlagDriver, FlagContext } from "@velajs/feature-flags";
+import { ThrottlerStore } from "@velajs/vela/throttler";
+import { NonceStore } from "@velajs/vela/security";
 //#region src/websocket/room-id.d.ts
 /** Stable, collision-free Durable Object name for one gateway's room. */
 export declare function durableObjectRoomName(gatewayPath: string, roomId: string): string;
@@ -141,7 +144,7 @@ export declare class CloudflareApplication {
    *
    * @example
    * ```ts
-   * import { createOpenApiDocument } from '@velajs/vela';
+   * import { createOpenApiDocument } from '@velajs/vela/openapi';
    *
    * const app = await createCloudflareApp(AppModule, { env });
    * const document = createOpenApiDocument(AppModule, {
@@ -678,5 +681,4 @@ interface DurableObjectNonceStoreOptions {
  */
 export declare function durableObjectNonceStore(options: DurableObjectNonceStoreOptions): NonceStore;
 //#endregion
-export { type BroadcastNamespace, type CfLiveDriver, type CloudflareRateLimitBinding, type CloudflareRateLimitStoreOptions, type CloudflareRoot, type CloudflareScheduledEvent, type CloudflareWorkerOptions, ConnectedSocket, type CreateCloudflareAppOptions, type DiskConfig, type DoPitrArmOptions, type DoPitrArmResult, type DoPitrBookmarkRead, type DoPitrId, type DoPitrNamespace, type DoPitrStorage, DoPitrUnavailableError, type DurableObjectLiveOptions, type DurableObjectNonceNamespace, type DurableObjectNonceStoreOptions, type FlagshipBinding, type FlagshipFlagDriverOptions, type KvFlagDriverOptions, type LiveNamespace, MessageBody, type MountOpenApiOptions, type OnGatewayConnection, type OnGatewayDisconnect, type OnGatewayInit, type PresignedUrlConfig, type QueueConsumerMetadata, type ScheduledEvent, type StorageModuleOptions, SubscribeMessage, type UpgradeAuthenticator, type VelaDoPitrRpc, WebSocketGateway, WebSocketServer, type WebSocketUpgradeAuthenticationContext, type WebSocketUpgradeIdentity, type WsClient, WsException, type WsGatewayRoute, type WsMessage, type WsResponse, type WsServer, armDoPitr, isDoPitrUnavailable, readDoPitrBookmark };
-//# sourceMappingURL=index.d.ts.map
+export { type BroadcastNamespace, type CfLiveDriver, type CloudflareRateLimitBinding, type CloudflareRateLimitStoreOptions, type CloudflareRoot, type CloudflareScheduledEvent, type CloudflareWorkerOptions, type CreateCloudflareAppOptions, type DiskConfig, type DoPitrArmOptions, type DoPitrArmResult, type DoPitrBookmarkRead, type DoPitrId, type DoPitrNamespace, type DoPitrStorage, DoPitrUnavailableError, type DurableObjectLiveOptions, type DurableObjectNonceNamespace, type DurableObjectNonceStoreOptions, type FlagshipBinding, type FlagshipFlagDriverOptions, type KvFlagDriverOptions, type LiveNamespace, type MountOpenApiOptions, type PresignedUrlConfig, type QueueConsumerMetadata, type ScheduledEvent, type StorageModuleOptions, type VelaDoPitrRpc, type WsGatewayRoute, armDoPitr, isDoPitrUnavailable, readDoPitrBookmark };