devflare 1.0.0-next.5 → 1.0.0-next.50

package/dist/bridge/{serialization.d.ts → v2/value-serialization.d.ts}

@@ -24,21 +24,19 @@ export type BodyRef = {
 } | {
     type: 'stream';
     sid: number;
-} | {
-    type: 'http';
-    transferId: string;
 };
-/** Serialized DurableObjectId */
+/**
+ * Canonical wire discriminator for a serialized `DurableObjectId`.
+ *
+ * Kept as a shared constant so the TypeScript serializers in `server.ts` and
+ * the stringified gateway runtime (`gateway-runtime.ts`) agree on a single
+ * shape. DO NOT change without coordinating both sides of the bridge.
+ */
+export declare const DO_ID_TYPE: 'DOId';
+/** Serialized DurableObjectId — matches the wire shape emitted by every gateway variant. */
 export interface SerializedDOId {
-    type: 'do-id';
-    name?: string;
-    hexId?: string;
-}
-/** Serialized DurableObjectStub */
-export interface SerializedDOStub {
-    type: 'do-stub';
-    binding: string;
-    id: SerializedDOId;
+    __type: typeof DO_ID_TYPE;
+    hex: string;
 }
 /** Serialize a Request to a POJO */
 export declare function serializeRequest(request: Request, options?: {
@@ -63,14 +61,38 @@ export interface StreamRef {
     sid: number;
     stream: ReadableStream<Uint8Array>;
 }
-/** Serialize a DurableObjectId */
+/** Serialize a DurableObjectId to the canonical wire shape. */
 export declare function serializeDOId(id: DurableObjectId): SerializedDOId;
-/** Serialize a DurableObjectStub reference */
-export declare function serializeDOStub(binding: string, id: DurableObjectId): SerializedDOStub;
+/** Deserialize a canonical `SerializedDOId` back into a `DurableObjectId` bound to `ns`. */
+export declare function deserializeDOId(serialized: SerializedDOId | {
+    __type?: unknown;
+    hex?: unknown;
+}, ns: DurableObjectNamespace): DurableObjectId;
 /** Check if a value needs special serialization */
 export declare function needsSpecialSerialization(value: unknown): boolean;
+/** Discriminator tag for structurally-encoded special values */
+export type SerializedSpecial = {
+    __devflare: 'date';
+    iso: string;
+} | {
+    __devflare: 'map';
+    entries: [unknown, unknown][];
+} | {
+    __devflare: 'set';
+    values: unknown[];
+} | {
+    __devflare: 'url';
+    href: string;
+} | {
+    __devflare: 'error';
+    name: string;
+    message: string;
+    stack?: string;
+};
 /** Serialize a value that may contain special types */
-export declare function serializeValue(value: unknown): Promise<{
+export declare function serializeValue(value: unknown, options?: {
+    httpThreshold?: number;
+}): Promise<{
     value: unknown;
     streams: StreamRef[];
 }>;
@@ -80,4 +102,4 @@ export declare function deserializeValue(value: unknown, getStream?: (sid: numbe
 export declare function base64Encode(bytes: Uint8Array): string;
 /** Decode base64 string to Uint8Array */
 export declare function base64Decode(str: string): Uint8Array;
-//# sourceMappingURL=serialization.d.ts.map
+//# sourceMappingURL=value-serialization.d.ts.map

package/dist/bridge/v2/value-serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"value-serialization.d.ts","sourceRoot":"","sources":["../../../src/bridge/v2/value-serialization.ts"],"names":[],"mappings":"AAgBA,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;IAC3B,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACrB,QAAQ,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAA;IACxC,EAAE,CAAC,EAAE,OAAO,CAAA;CACZ;AAED,+BAA+B;AAC/B,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;IAC3B,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACrB,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3B;AAED,0DAA0D;AAC1D,MAAM,MAAM,OAAO,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAElC;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,EAAG,MAAe,CAAA;AAEzC,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,OAAO,UAAU,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;CACX;AAMD,oCAAoC;AACpC,wBAAsB,gBAAgB,CACrC,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC;IAAE,UAAU,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,CA6ClE;AAED,wCAAwC;AACxC,wBAAgB,kBAAkB,CACjC,UAAU,EAAE,iBAAiB,EAC7B,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAC5D,OAAO,CAuBT;AAMD,qCAAqC;AACrC,wBAAsB,iBAAiB,CACtC,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC;IAAE,UAAU,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,CA4DnE;AAED,yCAAyC;AACzC,wBAAgB,mBAAmB,CAClC,UAAU,EAAE,kBAAkB,EAC9B,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAC5D,QAAQ,CAsBV;AAMD,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;CAClC;AAMD,+DAA+D;AAC/D,wBAAgB,aAAa,CAAC,EAAE,EAAE,eAAe,GAAG,cAAc,CAEjE;AAED,4FAA4F;AAC5F,wBAAgB,eAAe,CAC9B,UAAU,EAAE,cAAc,GAAG;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,EAChE,EAAE,EAAE,sBAAsB,GACxB,eAAe,CAKjB;AAMD,mDAAmD;AACnD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAajE;AAED,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAC1B;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAA;CAAE,GACpD;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,GACxC;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzE,uDAAuD;AACvD,wBAAsB,cAAc,CACnC,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC;IACV,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,SAAS,EAAE,CAAA;CACpB,CAAC,CAMD;AAyFD,yDAAyD;AACzD,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,OAAO,EACd,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAC5D,OAAO,CAkFT;AAyHD,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAWtD;AAED,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAYpD"}

package/dist/bridge/{protocol.d.ts → v2/wire.d.ts}

@@ -21,6 +21,30 @@ export interface RpcErr {
         details?: unknown;
     };
 }
+/**
+ * Out-of-band structured error frame (B5-frame).
+ *
+ * Sent for failures that are not scoped to a single in-flight RPC: malformed
+ * incoming frames, transport-level violations, stream/ws aborts that need a
+ * typed cause, and gateway-side bookkeeping errors. Replaces the prior
+ * silent-`catch {}` fallthroughs in client/server/codec so a structured cause
+ * surfaces back to the peer instead of being logged-only.
+ *
+ * `scope` lets the peer route the frame: 'rpc' for an RPC-related failure
+ * the server could not pin to a call id, 'stream'/'ws' for a body-stream or
+ * websocket-proxy failure, or 'transport' for protocol-level violations.
+ * `refId` optionally pins the error to a known stream/ws/rpc id.
+ */
+export interface WireError {
+    t: 'error';
+    scope: 'transport' | 'rpc' | 'stream' | 'ws';
+    error: {
+        code: string;
+        message: string;
+        details?: unknown;
+    };
+    refId?: string | number;
+}
 /** Event notification (worker → client) */
 export interface EventMsg {
     t: 'event';
@@ -84,13 +108,13 @@ export interface HttpTransfer {
     direction: 'upload' | 'download';
 }
 /** Union of all JSON message types */
-export type JsonMsg = RpcCall | RpcOk | RpcErr | EventMsg | StreamOpen | StreamPull | StreamEnd | StreamAbort | WsOpen | WsOpened | WsClose | HttpTransfer;
+export type JsonMsg = RpcCall | RpcOk | RpcErr | WireError | EventMsg | StreamOpen | StreamPull | StreamEnd | StreamAbort | WsOpen | WsOpened | WsClose | HttpTransfer;
 /** Binary frame kinds */
 export declare const BinaryKind: {
     readonly StreamChunk: 1;
     readonly WsData: 2;
 };
-export type BinaryKind = typeof BinaryKind[keyof typeof BinaryKind];
+export type BinaryKind = (typeof BinaryKind)[keyof typeof BinaryKind];
 /** Binary frame flags */
 export declare const BinaryFlags: {
     readonly FIN: 1;
@@ -137,10 +161,10 @@ export declare function nextWsId(): number;
 export declare function resetIdCounters(): void;
 /** Default chunk size for streaming (256 KB) */
 export declare const DEFAULT_CHUNK_SIZE: number;
-/** Threshold for switching to HTTP transfer (10 MB) */
+/** Threshold for switching to HTTP transfer (512 KB — workerd ~1MB WS message limit). */
 export declare const HTTP_TRANSFER_THRESHOLD: number;
-/** Default WebSocket port for bridge */
-export declare const DEFAULT_BRIDGE_PORT = 8686;
-/** Default HTTP port for large transfers */
-export declare const DEFAULT_HTTP_PORT = 8687;
-//# sourceMappingURL=protocol.d.ts.map
+/** Default WebSocket port for the bridge (matches the dev runtime port). */
+export declare const DEFAULT_BRIDGE_PORT = 8787;
+/** Default HTTP port for large transfers (matches the dev runtime HTTP port). */
+export declare const DEFAULT_HTTP_PORT = 8788;
+//# sourceMappingURL=wire.d.ts.map

package/dist/bridge/v2/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../src/bridge/v2/wire.ts"],"names":[],"mappings":"AAyBA,qCAAqC;AACrC,MAAM,WAAW,OAAO;IACvB,CAAC,EAAE,UAAU,CAAA;IACb,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,EAAE,CAAA;CACjB;AAED,8BAA8B;AAC9B,MAAM,WAAW,KAAK;IACrB,CAAC,EAAE,QAAQ,CAAA;IACX,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,OAAO,CAAA;CACf;AAED,yBAAyB;AACzB,MAAM,WAAW,MAAM;IACtB,CAAC,EAAE,SAAS,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;CACD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,SAAS;IACzB,CAAC,EAAE,OAAO,CAAA;IACV,KAAK,EAAE,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAA;IAC5C,KAAK,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,OAAO,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;IACD,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB;AAED,2CAA2C;AAC3C,MAAM,WAAW,QAAQ;IACxB,CAAC,EAAE,OAAO,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,OAAO,CAAA;CACb;AAED,wBAAwB;AACxB,MAAM,WAAW,UAAU;IAC1B,CAAC,EAAE,aAAa,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,MAAM,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;CACD;AAED,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IAC1B,CAAC,EAAE,aAAa,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;CACnB;AAED,oCAAoC;AACpC,MAAM,WAAW,SAAS;IACzB,CAAC,EAAE,YAAY,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;CACX;AAED,gCAAgC;AAChC,MAAM,WAAW,WAAW;IAC3B,CAAC,EAAE,cAAc,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACd;AAED,sCAAsC;AACtC,MAAM,WAAW,MAAM;IACtB,CAAC,EAAE,SAAS,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE;QACP,OAAO,EAAE,MAAM,CAAA;QACf,EAAE,EAAE,MAAM,CAAA;QACV,GAAG,EAAE,MAAM,CAAA;QACX,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAA;KAC5B,CAAA;CACD;AAED,0CAA0C;AAC1C,MAAM,WAAW,QAAQ;IACxB,CAAC,EAAE,WAAW,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;CACX;AAED,4BAA4B;AAC5B,MAAM,WAAW,OAAO;IACvB,CAAC,EAAE,UAAU,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC5B,CAAC,EAAE,eAAe,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,QAAQ,GAAG,UAAU,CAAA;CAChC;AAED,sCAAsC;AACtC,MAAM,MAAM,OAAO,GAChB,OAAO,GACP,KAAK,GACL,MAAM,GACN,SAAS,GACT,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,GACX,MAAM,GACN,QAAQ,GACR,OAAO,GACP,YAAY,CAAA;AAMf,yBAAyB;AACzB,eAAO,MAAM,UAAU;aACtB,WAAW,EAAE,CAAC;aACd,MAAM,EAAE,CAAC;CACA,CAAA;AAEV,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAErE,yBAAyB;AACzB,eAAO,MAAM,WAAW;aACvB,GAAG,EAAE,CAAM;aACX,IAAI,EAAE,CAAM;CACH,CAAA;AAEV;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC,4BAA4B;AAC5B,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,UAAU,EAChB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,UAAU,GACjB,UAAU,CAYZ;AAED,2BAA2B;AAC3B,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,UAAU,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,UAAU,CAAA;CACnB;AAED,4BAA4B;AAC5B,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB,CAcvE;AAED,+BAA+B;AAC/B,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE5C;AAED,4CAA4C;AAC5C,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C;AAMD,uCAAuC;AACvC,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CASlD;AAED,+BAA+B;AAC/B,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAErD;AAUD,kCAAkC;AAClC,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,gCAAgC;AAChC,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,yCAAyC;AACzC,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,sCAAsC;AACtC,wBAAgB,eAAe,IAAI,IAAI,CAItC;AAMD,gDAAgD;AAChD,eAAO,MAAM,kBAAkB,QAAa,CAAA;AAE5C,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,QAAa,CAAA;AAEjD,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAEvC,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,OAAO,CAAA"}

package/dist/bridge/v2/ws-relay.d.ts

@@ -0,0 +1,53 @@
+import type { TransportV2Codec } from './codec.js';
+import type { TransportV2AuxMsg } from './control-messages.js';
+import type { TransportV2DecodedBinaryFrame } from './frames.js';
+export interface TransportV2WsProxyHandlers {
+    onMessage?: (data: string | Uint8Array) => void;
+    onClose?: (code?: number, reason?: string) => void;
+    onError?: (error: Error) => void;
+}
+export interface TransportV2WsProxy {
+    readonly id: string;
+    readonly opened: Promise<void>;
+    send(data: string | Uint8Array): void;
+    close(code?: number, reason?: string): void;
+    setHandlers(handlers: TransportV2WsProxyHandlers): void;
+}
+export interface TransportV2WsRelayOptions {
+    codec: TransportV2Codec;
+    binding: string;
+    path: string;
+    headers?: Record<string, string>;
+    doId?: string;
+    doName?: string;
+}
+/**
+ * Owns all in-flight v2 WS relays multiplexed on a single codec. Wire it up by
+ * passing its `handleControl`/`handleBinary` to the codec's
+ * `onUnknownControl`/`onUnknownBinary` hooks.
+ */
+export declare class TransportV2WsRelayManager {
+    #private;
+    constructor(codec: TransportV2Codec);
+    open(options: Omit<TransportV2WsRelayOptions, 'codec'>): TransportV2WsProxy;
+    handleControl(text: string): boolean;
+    handleBinary(frame: TransportV2DecodedBinaryFrame): boolean;
+    _send(proxy: InternalProxy, data: string | Uint8Array): void;
+    _close(proxy: InternalProxy, code?: number, reason?: string): void;
+}
+declare class InternalProxy implements TransportV2WsProxy {
+    #private;
+    readonly id: string;
+    readonly opened: Promise<void>;
+    constructor(id: string, manager: TransportV2WsRelayManager);
+    setHandlers(handlers: TransportV2WsProxyHandlers): void;
+    send(data: string | Uint8Array): void;
+    close(code?: number, reason?: string): void;
+    _resolveOpened(): void;
+    _rejectOpened(error: Error): void;
+    _deliver(data: string | Uint8Array): void;
+    _handleClose(code?: number, reason?: string): void;
+}
+export declare function isTransportV2WsAuxMsg(msg: TransportV2AuxMsg): boolean;
+export {};
+//# sourceMappingURL=ws-relay.d.ts.map

package/dist/bridge/v2/ws-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-relay.d.ts","sourceRoot":"","sources":["../../../src/bridge/v2/ws-relay.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAE/C,OAAO,KAAK,EACX,iBAAiB,EAIjB,MAAM,oBAAoB,CAAA;AAQ3B,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,UAAU,CAAA;AAE7D,MAAM,WAAW,0BAA0B;IAC1C,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,CAAA;IAC/C,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAClD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAA;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,WAAW,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAAA;CACvD;AAED,MAAM,WAAW,yBAAyB;IACzC,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;GAIG;AACH,qBAAa,yBAAyB;;IAMrC,YAAY,KAAK,EAAE,gBAAgB,EAElC;IAED,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAiB1E;IAED,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA4BnC;IAED,YAAY,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAiB1D;IAED,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAyB3D;IAED,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAOjE;CACD;AAED,cAAM,aAAc,YAAW,kBAAkB;;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAQ9B,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAOzD;IAED,WAAW,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CAEtD;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAGpC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAK1C;IAED,cAAc,IAAI,IAAI,CAIrB;IAED,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAKhC;IAED,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAExC;IAED,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAIjD;CACD;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAErE"}

package/dist/browser-shim/handler.d.ts

@@ -1,5 +1,5 @@
-import type { Miniflare } from 'miniflare';
 import type { ConsolaInstance } from 'consola';
+import type { Miniflare } from 'miniflare';
 export interface BrowserNodeHandlerOptions {
     /** URL of the browser shim server (e.g., http://127.0.0.1:8788) */
     browserShimUrl: string;
@@ -17,5 +17,5 @@ export interface BrowserNodeHandlerOptions {
  * @param options - Handler configuration
  * @returns Fetch-style handler function
  */
-export declare function createBrowserNodeHandler(options: BrowserNodeHandlerOptions): (request: Request<unknown, CfProperties<unknown>>, _miniflare: Miniflare) => Promise<Response>;
+export declare function createBrowserNodeHandler(options: BrowserNodeHandlerOptions): (request: Request, _miniflare: Miniflare) => Promise<Response>;
 //# sourceMappingURL=handler.d.ts.map

package/dist/browser-shim/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/browser-shim/handler.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAM9C,MAAM,WAAW,yBAAyB;IACzC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAA;IACtB,sBAAsB;IACtB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAkCD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,kGAuB1E"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/browser-shim/handler.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAM1C,MAAM,WAAW,yBAAyB;IACzC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAA;IACtB,sBAAsB;IACtB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;CACjB;AAkCD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,aAG5B,OAAO,cAAc,SAAS,KAAG,OAAO,CAAC,QAAQ,CAAC,CAiBhG"}

package/dist/browser-shim/index.d.ts

@@ -1,3 +1,3 @@
-export { createBrowserShim, type BrowserShimOptions, type BrowserShim } from './server';
-export { createBrowserNodeHandler, type BrowserNodeHandlerOptions } from './handler';
+export { createBrowserShim, type BrowserShimOptions, type BrowserShim } from './server.js';
+export { createBrowserNodeHandler, type BrowserNodeHandlerOptions } from './handler.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/browser-shim/server.d.ts

@@ -1,3 +1,17 @@
+/**
+ * Devflare's **local browser-rendering shim**.
+ *
+ * Accepts only loopback browser origins (e.g. `http://127.0.0.1:*`,
+ * `http://localhost:*`) plus origin-less tool traffic (Puppeteer, curl, and
+ * other non-browser clients that do not send an `Origin` header). Cross-origin
+ * browser traffic is rejected at the request boundary.
+ *
+ * This is NOT a user-facing app route — it is devflare's protected helper
+ * endpoint used by the local Browser Rendering binding to satisfy the
+ * `@cloudflare/puppeteer` contract during local dev. The loopback-only posture
+ * applies to this shim only and does not apply to the user's normal worker
+ * routes.
+ */
 import type { ConsolaInstance } from 'consola';
 export interface BrowserShimOptions {
     /** Port to run the shim server on (default: 8788) */
@@ -12,6 +26,15 @@ export interface BrowserShimOptions {
     keepAlive?: number;
     /** Custom cache directory for Chrome (default: ~/.devflare/chrome) */
     cacheDir?: string;
+    /**
+     * Opt-in to launching Chrome with `--no-sandbox` / `--disable-setuid-sandbox`.
+     *
+     * Disabling the Chromium sandbox is a significant security regression: a
+     * compromised page can access the host with the privileges of the process
+     * running the browser. Only enable this in trusted CI containers or rootless
+     * environments where the sandbox cannot start. Defaults to `false`.
+     */
+    allowNoSandbox?: boolean;
 }
 export interface BrowserShim {
     /** Start the browser shim server */
@@ -21,5 +44,45 @@ export interface BrowserShim {
     /** Get the server URL (for creating Fetcher) */
     getUrl(): string;
 }
+/**
+ * Default Chrome flags used when launching headless Chrome for local
+ * browser-rendering emulation. Each flag is included for a deliberate reason;
+ * edit cautiously.
+ *
+ * NOTE: `--no-sandbox` / `--disable-setuid-sandbox` are intentionally NOT part
+ * of the defaults. Disabling the sandbox removes the primary boundary between
+ * untrusted web content and the host and must be opted into explicitly via
+ * `BrowserShimOptions.allowNoSandbox`.
+ */
+export declare const DEFAULT_CHROME_FLAGS: readonly string[];
+/**
+ * Flags appended only when `allowNoSandbox` is explicitly enabled. Kept in a
+ * separate constant so callers and tests can assert they are opt-in.
+ */
+export declare const NO_SANDBOX_FLAGS: readonly string[];
+/**
+ * Resolve the Chrome argv for a shim launch. Exported for testability.
+ */
+export declare function resolveChromeFlags(options?: {
+    allowNoSandbox?: boolean;
+}): string[];
+export interface DownloadProgress {
+    bytesReceived: number;
+    totalBytes: number;
+}
+/**
+ * Create a download progress logger that emits at most one "start" line and
+ * exactly one "complete" line per download. Avoids the previous heuristic
+ * percent-spam which could log the same bucket multiple times.
+ *
+ * The returned callback matches `@puppeteer/browsers` `downloadProgressCallback`.
+ */
+export declare function createDownloadProgressLogger(logger?: ConsolaInstance, label?: string): {
+    onProgress: (downloadedBytes: number, totalBytes: number) => void;
+    finalize: () => void;
+    readonly progress: DownloadProgress;
+    readonly started: boolean;
+    readonly completed: boolean;
+};
 export declare function createBrowserShim(options?: BrowserShimOptions): BrowserShim;
 //# sourceMappingURL=server.d.ts.map

package/dist/browser-shim/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/browser-shim/server.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAiB9C,MAAM,WAAW,kBAAkB;IAClC,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,WAAW;IAC3B,oCAAoC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,6CAA6C;IAC7C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACrB,gDAAgD;IAChD,MAAM,IAAI,MAAM,CAAA;CAChB;AAmFD,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAyf/E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/browser-shim/server.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AA2BH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAO9C,MAAM,WAAW,kBAAkB;IAClC,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sBAAsB;IACtB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,WAAW;IAC3B,oCAAoC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,6CAA6C;IAC7C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACrB,gDAAgD;IAChD,MAAM,IAAI,MAAM,CAAA;CAChB;AA2BD;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAmBjD,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAiD,CAAA;AAE/F;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,EAAE,CAMvF;AAMD,MAAM,WAAW,gBAAgB;IAChC,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC3C,MAAM,CAAC,EAAE,eAAe,EACxB,KAAK,SAAW,GACd;IACF,UAAU,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAA;IACjE,QAAQ,EAAE,MAAM,IAAI,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B,CA4CA;AAqDD,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAqjB/E"}