devflare 1.0.0-next.60 → 1.0.0-next.62

package/dist/_chunks/{build-Dp8k2SWa.js → build-Bipv3UYU.js}

@@ -1,5 +1,5 @@
 import { a as cyanBold, f as logLine, o as dim, r as createCliTheme } from "./ui-BUoZApvE.js";
-import { t as prepareBuildArtifacts } from "./build-artifacts-DLEYfdVL.js";
+import { t as prepareBuildArtifacts } from "./build-artifacts-B5OsATal.js";
 //#region src/cli/commands/build.ts
 async function runBuildCommand(parsed, logger, options) {
 	const theme = createCliTheme(parsed.options);

package/dist/_chunks/{build-artifacts-DLEYfdVL.js → build-artifacts-B5OsATal.js}

@@ -4,7 +4,7 @@ import { c as writeWranglerConfig, i as isolateViteBuildOutputPaths$1, o as reba
 import { f as logLine } from "./ui-BUoZApvE.js";
 import { n as getPackageVersion } from "./package-metadata-DjHBLB-z.js";
 import { t as resolvePackageSpecifier } from "./resolve-package-qizBfCIm.js";
-import { i as writeGeneratedViteConfig, l as prepareComposedWorkerEntrypoint, n as resolveEffectiveViteProject } from "./vite-CtvgOi1c.js";
+import { i as writeGeneratedViteConfig, l as prepareComposedWorkerEntrypoint, n as resolveEffectiveViteProject } from "./vite-CzqppgNp.js";
 import { t as bundleWorkerEntry } from "./worker-bundler-dTTnYU3n.js";
 import { t as detectViteProject } from "./vite-utils-OVLMV605.js";
 import { t as getDependencies } from "./dependencies-C2oxFjU_.js";

package/dist/_chunks/{cli-BlVetiEh.js → cli-sOZfXGua.js}

@@ -1101,15 +1101,15 @@ async function runInit(parsed, logger, options) {
 	return runInitCommand(parsed, logger, options);
 }
 async function runDev(parsed, logger, options) {
-	const { runDevCommand } = await import("./dev-DRP6LR2H.js");
+	const { runDevCommand } = await import("./dev-9XMiBRSG.js");
 	return runDevCommand(parsed, logger, options);
 }
 async function runBuild(parsed, logger, options) {
-	const { runBuildCommand } = await import("./build-Dp8k2SWa.js");
+	const { runBuildCommand } = await import("./build-Bipv3UYU.js");
 	return runBuildCommand(parsed, logger, options);
 }
 async function runDeploy(parsed, logger, options) {
-	const { runDeployCommand } = await import("./deploy-Blrdr3Gv.js");
+	const { runDeployCommand } = await import("./deploy-cU11igDG.js");
 	return runDeployCommand(parsed, logger, {
 		...options,
 		requireExplicitDeployTarget: true

package/dist/_chunks/{context-CX50Y2Kb.js → context-B6S7cqQW.js}

@@ -1,5 +1,234 @@
 import { wrapEnvSendEmailBindings } from "../utils/send-email.js";
 import { AsyncLocalStorage } from "node:async_hooks";
+//#region src/bridge/v2/wire.ts
+/** Binary frame kinds */
+const BinaryKind = {
+	StreamChunk: 1,
+	WsData: 2
+};
+/** Binary frame flags */
+const BinaryFlags = {
+	FIN: 1,
+	TEXT: 2
+};
+/** Encode a binary frame */
+function encodeBinaryFrame(kind, id, seq, flags, payload) {
+	const frame = new Uint8Array(10 + payload.byteLength);
+	const view = new DataView(frame.buffer);
+	view.setUint8(0, kind);
+	view.setUint32(1, id, true);
+	view.setUint32(5, seq, true);
+	view.setUint8(9, flags);
+	frame.set(payload, 10);
+	return frame;
+}
+/** Parse a JSON message from string */
+function parseJsonMsg(data) {
+	const msg = JSON.parse(data);
+	if (typeof msg !== "object" || msg === null || !("t" in msg)) throw new Error("Invalid message: missing type field");
+	return msg;
+}
+/** Stringify a JSON message */
+function stringifyJsonMsg(msg) {
+	return JSON.stringify(msg);
+}
+let streamIdCounter = 0;
+let wsIdCounter = 0;
+/** Generate unique stream ID */
+function nextStreamId() {
+	return ++streamIdCounter;
+}
+/** Generate unique WebSocket proxy ID */
+function nextWsId() {
+	return ++wsIdCounter;
+}
+/** Default chunk size for streaming (256 KB) */
+const DEFAULT_CHUNK_SIZE = 256 * 1024;
+/** Threshold for switching to HTTP transfer (512 KB — workerd ~1MB WS message limit). */
+const HTTP_TRANSFER_THRESHOLD = 512 * 1024;
+//#endregion
+//#region src/bridge/websocket-constructor.ts
+let wsPackageConstructorPromise = null;
+/**
+* Lazily import the `ws` package's WebSocket constructor (memoized). Used as the
+* Node fallback and whenever custom upgrade headers are required — unlike the
+* platform global, the `ws` constructor accepts an options object with headers.
+*
+* @returns The `ws` package WebSocket constructor.
+* @throws When the `ws` package does not export a usable WebSocket implementation.
+*/
+async function importWsPackageConstructor() {
+	if (!wsPackageConstructorPromise) wsPackageConstructorPromise = (async () => {
+		const wsModule = await new Function("specifier", [
+			"return ",
+			"import",
+			"(specifier)"
+		].join(""))("ws");
+		const defaultExport = wsModule.default;
+		const wsConstructor = wsModule.WebSocket ?? (typeof defaultExport === "object" && defaultExport !== null ? defaultExport.WebSocket : void 0) ?? defaultExport;
+		if (typeof wsConstructor !== "function") throw new Error("Could not load a WebSocket client implementation from the ws package");
+		return wsConstructor;
+	})();
+	return wsPackageConstructorPromise;
+}
+/**
+* Return the runtime's global WebSocket constructor, or null when the runtime
+* has none (older Node without a global WebSocket).
+*
+* @param runtimeWebSocket - The candidate global (defaults to `globalThis.WebSocket`).
+* @returns The global constructor, or null.
+*/
+function getRuntimeWebSocketConstructor(runtimeWebSocket = globalThis.WebSocket) {
+	if (typeof runtimeWebSocket === "function") return runtimeWebSocket;
+	return null;
+}
+/**
+* Resolve a WebSocket constructor for the bridge socket: prefer the runtime
+* global, fall back to the `ws` package.
+*
+* @param runtimeWebSocket - The candidate global (defaults to `globalThis.WebSocket`).
+* @returns A usable WebSocket constructor.
+*/
+async function resolveBridgeWebSocketConstructor(runtimeWebSocket = globalThis.WebSocket) {
+	const runtimeConstructor = getRuntimeWebSocketConstructor(runtimeWebSocket);
+	if (runtimeConstructor) return runtimeConstructor;
+	return importWsPackageConstructor();
+}
+/**
+* Resolve the WebSocket constructor for a Durable Object pass-through
+* connection. Custom upgrade headers require the `ws` package (whose constructor
+* accepts an options object); the global WebSocket (undici/Bun) cannot set
+* request headers, so it is used only when there are no headers to forward.
+*
+* @param hasHeaders - Whether application headers must ride the upgrade request.
+* @returns A WebSocket constructor suitable for the connection.
+*/
+async function resolveDoWebSocketConstructor(hasHeaders) {
+	if (hasHeaders) return importWsPackageConstructor();
+	return resolveBridgeWebSocketConstructor();
+}
+//#endregion
+//#region src/bridge/do-websocket-connect.ts
+/**
+* Hop-by-hop / WebSocket-control request headers that the WebSocket client sets
+* itself. They must never be copied from the user's `connect(url, { headers })`
+* onto the outgoing upgrade — a duplicate `Upgrade`/`Sec-WebSocket-*` breaks the
+* handshake (the `ws` package rejects it). Auth/cookie headers are preserved.
+*/
+const WS_CONTROL_HEADERS = new Set([
+	"upgrade",
+	"connection",
+	"host",
+	"sec-websocket-key",
+	"sec-websocket-version",
+	"sec-websocket-extensions",
+	"sec-websocket-protocol"
+]);
+/**
+* Strip WebSocket-control headers from user-supplied upgrade headers, leaving
+* only the application headers (auth, cookies) worth forwarding to the DO.
+*
+* @param headers - Header tuples from `connect(url, { headers })`, or undefined.
+* @returns A plain object of the forwardable headers (may be empty).
+*/
+function forwardableUpgradeHeaders(headers) {
+	const out = {};
+	for (const [key, value] of headers ?? []) if (!WS_CONTROL_HEADERS.has(key.toLowerCase())) out[key] = value;
+	return out;
+}
+/**
+* Normalize an inbound WebSocket payload to the `Uint8Array | string` contract
+* the DO Socket facade expects: text frames stay strings, binary frames become
+* a `Uint8Array` view regardless of whether the runtime delivered an
+* `ArrayBuffer`, a `Buffer`, or another typed-array/DataView.
+*
+* @param data - The raw `MessageEvent.data` from the DO pass-through socket.
+* @returns The payload as a string (text) or `Uint8Array` (binary).
+*/
+function normalizeIncomingWsData(data) {
+	if (typeof data === "string") return data;
+	if (data instanceof Uint8Array) return data;
+	if (data instanceof ArrayBuffer) return new Uint8Array(data);
+	if (ArrayBuffer.isView(data)) {
+		const view = data;
+		return new Uint8Array(view.buffer, view.byteOffset, view.byteLength);
+	}
+	return String(data);
+}
+/**
+* Open a real pass-through WebSocket to a Durable Object through the gateway's
+* `/_devflare/do-ws` endpoint. Unlike the legacy relay, this is a standalone
+* connection with its own lifecycle, so it is unaffected by the bridge client's
+* `disconnect()`/reconnect bookkeeping.
+*
+* @param bridgeUrl - The bridge/gateway base URL (e.g. `ws://127.0.0.1:8787`).
+* @param binding - DO namespace binding name (e.g. `DOC_ROOM`).
+* @param idHex - Already-resolved Durable Object id, hex form.
+* @param targetUrl - The DO fetch URL the caller passed to `stub.connect(url)`.
+* @param headers - Optional upgrade headers (auth/cookies) forwarded to the DO.
+* @returns A proxy surface (send/close/onMessage/onClose) over the socket.
+* @throws When the pass-through socket fails to open (bad binding/id, or the DO
+*   rejected the upgrade).
+*/
+async function openDurableObjectWebSocket(bridgeUrl, binding, idHex, targetUrl, headers) {
+	const wsUrl = new URL(bridgeUrl);
+	wsUrl.pathname = "/_devflare/do-ws";
+	wsUrl.searchParams.set("binding", binding);
+	wsUrl.searchParams.set("id", idHex);
+	wsUrl.searchParams.set("u", targetUrl);
+	const forwardHeaders = forwardableUpgradeHeaders(headers);
+	const hasHeaders = Object.keys(forwardHeaders).length > 0;
+	const WebSocketCtor = await resolveDoWebSocketConstructor(hasHeaders);
+	const socket = hasHeaders ? new WebSocketCtor(wsUrl.toString(), { headers: forwardHeaders }) : new WebSocketCtor(wsUrl.toString());
+	socket.binaryType = "arraybuffer";
+	let opened = false;
+	let messageHandler = null;
+	let closeHandler = null;
+	const pendingMessages = [];
+	let pendingClose = null;
+	socket.onmessage = (event) => {
+		const data = normalizeIncomingWsData(event.data);
+		if (messageHandler) messageHandler(data);
+		else pendingMessages.push(data);
+	};
+	await new Promise((resolve, reject) => {
+		socket.onopen = () => {
+			opened = true;
+			resolve();
+		};
+		socket.onerror = () => {
+			if (!opened) reject(/* @__PURE__ */ new Error(`DO WebSocket connection failed: ${binding}/${idHex}`));
+		};
+		socket.onclose = (event) => {
+			if (!opened) {
+				reject(/* @__PURE__ */ new Error(`DO WebSocket closed before open: ${binding}/${idHex}`));
+				return;
+			}
+			if (closeHandler) closeHandler(event?.code, event?.reason);
+			else pendingClose = {
+				code: event?.code,
+				reason: event?.reason
+			};
+		};
+	});
+	return {
+		wid: nextWsId(),
+		send: (data) => socket.send(data),
+		close: (code, reason) => socket.close(code, reason),
+		onMessage: (handler) => {
+			messageHandler = handler;
+			if (pendingMessages.length > 0) for (const data of pendingMessages.splice(0)) handler(data);
+		},
+		onClose: (handler) => {
+			closeHandler = handler;
+			if (pendingClose) {
+				handler(pendingClose.code, pendingClose.reason);
+				pendingClose = null;
+			}
+		}
+	};
+}
+//#endregion
 //#region src/bridge/log.ts
 const isDebugEnabled = () => {
 	try {
@@ -479,53 +708,6 @@ function tryParseWireError(data) {
 	return parsed;
 }
 //#endregion
-//#region src/bridge/v2/wire.ts
-/** Binary frame kinds */
-const BinaryKind = {
-	StreamChunk: 1,
-	WsData: 2
-};
-/** Binary frame flags */
-const BinaryFlags = {
-	FIN: 1,
-	TEXT: 2
-};
-/** Encode a binary frame */
-function encodeBinaryFrame(kind, id, seq, flags, payload) {
-	const frame = new Uint8Array(10 + payload.byteLength);
-	const view = new DataView(frame.buffer);
-	view.setUint8(0, kind);
-	view.setUint32(1, id, true);
-	view.setUint32(5, seq, true);
-	view.setUint8(9, flags);
-	frame.set(payload, 10);
-	return frame;
-}
-/** Parse a JSON message from string */
-function parseJsonMsg(data) {
-	const msg = JSON.parse(data);
-	if (typeof msg !== "object" || msg === null || !("t" in msg)) throw new Error("Invalid message: missing type field");
-	return msg;
-}
-/** Stringify a JSON message */
-function stringifyJsonMsg(msg) {
-	return JSON.stringify(msg);
-}
-let streamIdCounter = 0;
-let wsIdCounter = 0;
-/** Generate unique stream ID */
-function nextStreamId() {
-	return ++streamIdCounter;
-}
-/** Generate unique WebSocket proxy ID */
-function nextWsId() {
-	return ++wsIdCounter;
-}
-/** Default chunk size for streaming (256 KB) */
-const DEFAULT_CHUNK_SIZE = 256 * 1024;
-/** Threshold for switching to HTTP transfer (512 KB — workerd ~1MB WS message limit). */
-const HTTP_TRANSFER_THRESHOLD = 512 * 1024;
-//#endregion
 //#region src/bridge/v2/value-serialization.ts
 /** Serialize a Request to a POJO */
 async function serializeRequest(request, options) {
@@ -859,25 +1041,6 @@ const BRIDGE_CLIENT_CAPABILITIES = [
 	"ws-relay",
 	"http-transfer"
 ];
-let wsPackageConstructorPromise = null;
-async function importWsPackageConstructor() {
-	if (!wsPackageConstructorPromise) wsPackageConstructorPromise = (async () => {
-		const wsModule = await new Function("specifier", [
-			"return ",
-			"import",
-			"(specifier)"
-		].join(""))("ws");
-		const defaultExport = wsModule.default;
-		const wsConstructor = wsModule.WebSocket ?? (typeof defaultExport === "object" && defaultExport !== null ? defaultExport.WebSocket : void 0) ?? defaultExport;
-		if (typeof wsConstructor !== "function") throw new Error("Could not load a WebSocket client implementation from the ws package");
-		return wsConstructor;
-	})();
-	return wsPackageConstructorPromise;
-}
-function getRuntimeWebSocketConstructor(runtimeWebSocket = globalThis.WebSocket) {
-	if (typeof runtimeWebSocket === "function") return runtimeWebSocket;
-	return null;
-}
 var BridgeClient = class {
 	ws = null;
 	codec = null;
@@ -1072,7 +1235,18 @@ var BridgeClient = class {
 			if (current.size === 0) this.eventListeners.delete(topic);
 		};
 	}
-	/** Create a proxied WebSocket to a Durable Object */
+	/**
+	* Create a proxied WebSocket to a Durable Object via the in-process bridge
+	* relay (`ws.open` control frame → gateway `stub.fetch()` pump → `WsData`
+	* frames).
+	*
+	* DEPRECATED for DO connect(): this relay pumps the DO's WebSocket in-process,
+	* which does NOT trigger workerd's hibernation dispatch — so a DO that uses
+	* `ctx.acceptWebSocket()` never sees `webSocketMessage`/`webSocketClose` and
+	* cross-socket `ctx.getWebSockets()` broadcasts never cross. `connect()` now
+	* uses `openDoWebSocket()` (a real pass-through) instead. This method is
+	* retained for the `ws-relay` wire capability and backward compatibility.
+	*/
 	async createWsProxy(binding, id, url, headers) {
 		await this.ensureConnected();
 		const wid = nextWsId();
@@ -1131,6 +1305,36 @@ var BridgeClient = class {
 			}
 		};
 	}
+	/**
+	* Open a REAL WebSocket to the gateway's DO pass-through endpoint
+	* (`/_devflare/do-ws`), which forwards the upgrade to the target Durable
+	* Object and passes through its `101` response.
+	*
+	* This is the ONLY way a bridged DO WebSocket triggers the runtime's
+	* hibernation dispatch under miniflare: the gateway returns the DO's client
+	* socket for a genuine inbound connection, so workerd pumps it and invokes
+	* `webSocketMessage`/`webSocketClose` and delivers `ctx.getWebSockets()`
+	* broadcasts. The legacy in-process relay (`createWsProxy` + gateway
+	* `stub.fetch()` pump) never fires hibernation, so two sockets to the same
+	* `getByName(id)` could not see each other's messages. Here they share ONE DO
+	* instance and broadcast across each other, exactly as on real Cloudflare.
+	*
+	* Unlike `createWsProxy`, this does not multiplex over the bridge socket: it
+	* is a standalone connection (see `openDurableObjectWebSocket`) with its own
+	* lifecycle, so it is unaffected by the bridge client's disconnect/reconnect
+	* bookkeeping. It also does not require the bridge socket to be connected.
+	*
+	* @param binding - DO namespace binding name (e.g. `DOC_ROOM`).
+	* @param idHex - Already-resolved Durable Object id, hex form.
+	* @param targetUrl - The DO fetch URL the caller passed to `stub.connect(url)`.
+	* @param headers - Optional upgrade headers (auth/cookies) forwarded to the DO.
+	* @returns A minimal proxy surface (send/close/onMessage/onClose) over the socket.
+	* @throws When the pass-through socket fails to open (bad binding/id, or the
+	*   DO rejected the upgrade).
+	*/
+	async openDoWebSocket(binding, idHex, targetUrl, headers) {
+		return openDurableObjectWebSocket(this.url, binding, idHex, targetUrl, headers);
+	}
 	/** Create a readable stream that pulls from the bridge */
 	createReadableStream(sid) {
 		return new ReadableStream({
@@ -1574,7 +1778,7 @@ function createDOStubProxy(client, bindingName, idInfo, proxyOptions = {}) {
 			if (options?.headers) new Headers(options.headers).forEach((value, key) => {
 				headersList.push([key, value]);
 			});
-			const wsProxy = await client.createWsProxy(bindingName, id.hex, url, headersList);
+			const wsProxy = await client.openDoWebSocket(bindingName, id.hex, url, headersList);
 			let readController = null;
 			const readable = new ReadableStream({
 				start(controller) {

package/dist/_chunks/{deploy-Blrdr3Gv.js → deploy-cU11igDG.js}

@@ -7,7 +7,7 @@ import { _ as yellowBold, d as green, f as logLine, g as yellow, o as dim, r as
 import { n as getPackageVersion } from "./package-metadata-DjHBLB-z.js";
 import { t as resolvePackageSpecifier } from "./resolve-package-qizBfCIm.js";
 import { t as asOptionalString } from "./command-utils-CSnoFdxM.js";
-import { a as createBuildManifest, i as compareManifests, n as applyDeploymentStrategy, o as formatDriftWarning, r as describeDeploymentStrategy, s as readBuildManifest, t as prepareBuildArtifacts } from "./build-artifacts-DLEYfdVL.js";
+import { a as createBuildManifest, i as compareManifests, n as applyDeploymentStrategy, o as formatDriftWarning, r as describeDeploymentStrategy, s as readBuildManifest, t as prepareBuildArtifacts } from "./build-artifacts-B5OsATal.js";
 import { t as getDependencies } from "./dependencies-C2oxFjU_.js";
 import { n as preparePreviewScopedResourcesForDeploy } from "./preview-resources-D_aFwtZR.js";
 import { mkdir, open, readFile, rm, writeFile } from "node:fs/promises";

package/dist/_chunks/{dev-DRP6LR2H.js → dev-9XMiBRSG.js}

@@ -7,7 +7,7 @@ import { clearLocalSendEmailBindings, setLocalSendEmailBindings } from "../utils
 import { C as buildSendEmailConfig, D as buildVersionMetadataConfig, E as buildTailConsumersConfig, O as buildWorkerLoadersConfig, S as buildSecretsStoreConfig, T as buildStreamingTailConsumersConfig, _ as buildMtlsCertificatesConfig, b as buildQueueProducers, c as buildAiSearchInstancesConfig, d as buildArtifactsConfig, f as buildDispatchNamespacesConfig, g as buildMediaConfig, h as buildImagesConfig, k as buildWorkflowsConfig, l as buildAiSearchNamespacesConfig, m as buildHyperdrivesConfig, n as getRouteDirectoryCandidate, p as buildFlagshipConfig, s as resolveServiceBindings, t as discoverRoutes, u as buildAnalyticsEngineConfig, v as buildPipelinesConfig, w as buildStreamConfig, x as buildRateLimitsConfig, y as buildQueueConsumers } from "./routes-BMU7ga_l.js";
 import { r as transformDurableObject } from "./durable-object-DMtH0XYX.js";
 import { i as findFiles } from "./glob-CmQOvunB.js";
-import { d as DEFAULT_FETCH_ENTRY_FILES, f as DEFAULT_QUEUE_ENTRY_FILES, g as discoverDurableObjectFiles, h as resolveWorkerSurfacePaths, i as writeGeneratedViteConfig, l as prepareComposedWorkerEntrypoint, m as hasWorkerSurfacePaths, n as resolveEffectiveViteProject, p as DEFAULT_SCHEDULED_ENTRY_FILES, u as DEFAULT_EMAIL_ENTRY_FILES } from "./vite-CtvgOi1c.js";
+import { d as DEFAULT_FETCH_ENTRY_FILES, f as DEFAULT_QUEUE_ENTRY_FILES, g as discoverDurableObjectFiles, h as resolveWorkerSurfacePaths, i as writeGeneratedViteConfig, l as prepareComposedWorkerEntrypoint, m as hasWorkerSurfacePaths, n as resolveEffectiveViteProject, p as DEFAULT_SCHEDULED_ENTRY_FILES, u as DEFAULT_EMAIL_ENTRY_FILES } from "./vite-CzqppgNp.js";
 import { a as createWorkerdBundlerDefaults, i as writeWorkerCompatibleBundle, n as ensureDebugShim, r as resolveWorkerCompatibleRolldownConfig, t as bundleWorkerEntry } from "./worker-bundler-dTTnYU3n.js";
 import { n as bundleWorkflowEntrypointScript, t as R2_PRESIGN_RUNTIME_JS } from "./r2-presign-runtime-zTOLS0Ea.js";
 import { n as buildLocalSecretWrappedBindingConfig } from "./local-secrets-6sMstHXw.js";
@@ -542,6 +542,42 @@ function resolveDoNamespace(binding, jurisdiction) {
 	return binding
 }
 
+// Dispatch a single Durable Object RPC method call to its stub.
+//
+// A DO that extends DurableObject (from cloudflare:workers) exposes its methods
+// as native RPC on the stub, so the method is invoked DIRECTLY as
+// stub[method](...args) — exactly as on real Cloudflare. This is the ONLY
+// correct path for a DO that ALSO defines its own fetch(): routing the call
+// through fetch() would hand devflare's internal _rpc probe to the user handler,
+// which may reject it (e.g. a websocket-only fetch() returning 426) and yield a
+// non-JSON body that then fails to parse (the reported crash).
+//
+// The fetch _rpc convention is kept only as a fallback for DOs that are not
+// RPC-enabled: the stub proxies every property as callable, so such a DO only
+// reveals itself when the native call throws "does not support RPC".
+async function callDurableObjectRpc(stub, methodName, args) {
+	if (typeof stub[methodName] === 'function') {
+		try {
+			return await stub[methodName](...args)
+		} catch (error) {
+			if (!isDurableObjectRpcUnsupported(error)) throw error
+		}
+	}
+	const response = await stub.fetch(new Request('http://do/_rpc', {
+		method: 'POST',
+		headers: { 'Content-Type': 'application/json' },
+		body: JSON.stringify({ method: methodName, params: args })
+	}))
+	const result = await response.json()
+	if (!result.ok) throw new Error(result.error?.message || 'RPC failed')
+	return result.result
+}
+
+function isDurableObjectRpcUnsupported(error) {
+	const message = error && error.message ? String(error.message) : String(error)
+	return message.indexOf('does not support RPC') !== -1
+}
+
 /**
  * Execute an RPC method against the gateway's bindings.
  *
@@ -668,14 +704,7 @@ async function executeRpcMethod(method, params, env, _ctx) {
 		const [, serializedId, methodName, args] = params
 		const id = binding.idFromString(serializedId.hex)
 		const stub = binding.get(id)
-		const response = await stub.fetch(new Request('http://do/_rpc', {
-			method: 'POST',
-			headers: { 'Content-Type': 'application/json' },
-			body: JSON.stringify({ method: methodName, params: args })
-		}))
-		const result = await response.json()
-		if (!result.ok) throw new Error(result.error?.message || 'RPC failed')
-		return result.result
+		return callDurableObjectRpc(stub, methodName, Array.isArray(args) ? args : [])
 	}
 
 	// Service Bindings
@@ -902,6 +931,47 @@ async function handleBridgeJsonMessage(data, ws, env, ctx, wsProxies) {
 	}
 }
 
+// Pass-through DO WebSocket upgrade (bridge client -> gateway -> DO).
+//
+// The bridge client's openDoWebSocket() opens a REAL loopback WebSocket to this
+// endpoint (/_devflare/do-ws?binding&id&u) instead of tunneling frames over the
+// bridge socket. We resolve the DO by id and RETURN the DO's 101 response
+// verbatim (webSocket included), so miniflare wires the inbound connection to
+// the DO's client socket. That genuine inbound connection is what makes workerd
+// dispatch the DO's hibernation handlers (webSocketMessage/webSocketClose) and
+// deliver ctx.getWebSockets() broadcasts. Pumping the DO socket in-process (the
+// legacy handleBridgeWsOpen path) never triggers hibernation, so two sockets to
+// one getByName(id) could not see each other's messages. This mirrors the
+// browser WS_ROUTES pass-through (handleDoWebSocket) and real Cloudflare.
+//
+// NOTE: the devflare/test gateway (src/test/simple-context-gateway-script.ts)
+// keeps a byte-equivalent copy of this handler because it is a separately-bundled
+// Worker template that cannot import this runtime — keep the two in sync.
+async function handleBridgeDoWebSocket(request, env, url) {
+	try {
+		const bindingName = url.searchParams.get('binding')
+		const idHex = url.searchParams.get('id')
+		const targetUrl = url.searchParams.get('u') || url.toString()
+
+		const binding = env[bindingName]
+		if (!binding || typeof binding.idFromString !== 'function') {
+			return new Response('Durable Object binding not found: ' + bindingName, { status: 500 })
+		}
+		if (!idHex) {
+			return new Response('Missing Durable Object id', { status: 400 })
+		}
+
+		const stub = binding.get(binding.idFromString(idHex))
+		// Forward the real upgrade request (its headers carry any auth/cookies the
+		// caller passed to connect()) and pass the DO's 101 response straight back.
+		return stub.fetch(new Request(targetUrl, { method: 'GET', headers: request.headers }))
+	} catch (error) {
+		return new Response('Error opening DO WebSocket: ' + (error?.message || String(error)), {
+			status: 500
+		})
+	}
+}
+
 function handleBridgeWebSocket(request, env, ctx) {
 	const { 0: client, 1: server } = new WebSocketPair()
 	server.accept()
@@ -1627,6 +1697,11 @@ export default {
 		const isWebSocket = request.headers.get('Upgrade') === 'websocket'
 
 		if (isWebSocket) {
+			// Bridge DO connect(): a real pass-through upgrade to a Durable Object
+			// (hibernation-correct), distinct from the bridge RPC/relay socket.
+			if (url.pathname === '/_devflare/do-ws') {
+				return handleBridgeDoWebSocket(request, env, url)
+			}
 			const matchedRoute = matchWsRoute(url.pathname)
 			if (matchedRoute) {
 				return handleDoWebSocket(request, env, url, matchedRoute)

package/dist/_chunks/{env-S0_nMVz1.js → env-UqevBSTd.js}

@@ -1,4 +1,4 @@
-import { j as bridgeEnv, n as getContextOrNull } from "./context-CX50Y2Kb.js";
+import { j as bridgeEnv, n as getContextOrNull } from "./context-B6S7cqQW.js";
 //#region src/env.ts
 let testContextEnv = null;
 let testContextDispose = null;

package/dist/_chunks/{runtime-RekfD_2X.js → runtime-sEr9b0ns.js}

@@ -1,4 +1,4 @@
-import { D as createFetchEvent, b as createContextProxy, n as getContextOrNull, v as runWithEventContext } from "./context-CX50Y2Kb.js";
+import { D as createFetchEvent, b as createContextProxy, n as getContextOrNull, v as runWithEventContext } from "./context-B6S7cqQW.js";
 import { AwsV4Signer } from "aws4fetch";
 //#region src/runtime/exports.ts
 /**

package/dist/_chunks/{vite-CtvgOi1c.js → vite-CzqppgNp.js}

@@ -2,7 +2,7 @@ import { d as resolveConfigEnvVars } from "./preview-C3Cdr8an.js";
 import { i as resolveConfigPath, o as loadResolvedConfig, r as loadConfig, s as resolveResources, u as resolveConfigForEnvironment } from "./loader-E_UGyTrJ.js";
 import { o as normalizeDOBinding } from "./schema-normalization-Zgm4W6O6.js";
 import { c as writeWranglerConfig, i as isolateViteBuildOutputPaths, n as compileConfig, o as rebaseWranglerConfigPaths, r as compileToProgrammaticConfig, t as compileBuildConfig } from "./compiler-CgIFPfRA.js";
-import { _ as resolveFetchHandler, o as assertExplicit2ArgStyle } from "./runtime-RekfD_2X.js";
+import { _ as resolveFetchHandler, o as assertExplicit2ArgStyle } from "./runtime-sEr9b0ns.js";
 import { s as resolveServiceBindings, t as discoverRoutes } from "./routes-BMU7ga_l.js";
 import { n as findDurableObjectClasses } from "./durable-object-DMtH0XYX.js";
 import { r as SUPPORTED_WORKER_EXTENSIONS } from "./worker-entrypoint-CQW77lG8.js";

package/dist/bridge/client.d.ts

@@ -1,5 +1,4 @@
-type WebSocketConstructor = new (url: string) => WebSocket;
-export declare function resolveBridgeWebSocketConstructor(runtimeWebSocket?: unknown): Promise<WebSocketConstructor>;
+export { resolveBridgeWebSocketConstructor } from './websocket-constructor.js';
 export interface BridgeClientOptions {
     /** Bridge WebSocket URL (default: ws://localhost:8787) */
     url?: string;
@@ -85,7 +84,18 @@ export declare class BridgeClient {
      * surface is provided so consumers can register ahead of that work.
      */
     on(topic: string, cb: (data: unknown) => void): () => void;
-    /** Create a proxied WebSocket to a Durable Object */
+    /**
+     * Create a proxied WebSocket to a Durable Object via the in-process bridge
+     * relay (`ws.open` control frame → gateway `stub.fetch()` pump → `WsData`
+     * frames).
+     *
+     * DEPRECATED for DO connect(): this relay pumps the DO's WebSocket in-process,
+     * which does NOT trigger workerd's hibernation dispatch — so a DO that uses
+     * `ctx.acceptWebSocket()` never sees `webSocketMessage`/`webSocketClose` and
+     * cross-socket `ctx.getWebSockets()` broadcasts never cross. `connect()` now
+     * uses `openDoWebSocket()` (a real pass-through) instead. This method is
+     * retained for the `ws-relay` wire capability and backward compatibility.
+     */
     createWsProxy(binding: string, id: string, url: string, headers?: [string, string][]): Promise<{
         wid: number;
         send: (data: Uint8Array | string) => void;
@@ -93,6 +103,40 @@ export declare class BridgeClient {
         onMessage: (handler: (data: Uint8Array | string) => void) => void;
         onClose: (handler: (code?: number, reason?: string) => void) => void;
     }>;
+    /**
+     * Open a REAL WebSocket to the gateway's DO pass-through endpoint
+     * (`/_devflare/do-ws`), which forwards the upgrade to the target Durable
+     * Object and passes through its `101` response.
+     *
+     * This is the ONLY way a bridged DO WebSocket triggers the runtime's
+     * hibernation dispatch under miniflare: the gateway returns the DO's client
+     * socket for a genuine inbound connection, so workerd pumps it and invokes
+     * `webSocketMessage`/`webSocketClose` and delivers `ctx.getWebSockets()`
+     * broadcasts. The legacy in-process relay (`createWsProxy` + gateway
+     * `stub.fetch()` pump) never fires hibernation, so two sockets to the same
+     * `getByName(id)` could not see each other's messages. Here they share ONE DO
+     * instance and broadcast across each other, exactly as on real Cloudflare.
+     *
+     * Unlike `createWsProxy`, this does not multiplex over the bridge socket: it
+     * is a standalone connection (see `openDurableObjectWebSocket`) with its own
+     * lifecycle, so it is unaffected by the bridge client's disconnect/reconnect
+     * bookkeeping. It also does not require the bridge socket to be connected.
+     *
+     * @param binding - DO namespace binding name (e.g. `DOC_ROOM`).
+     * @param idHex - Already-resolved Durable Object id, hex form.
+     * @param targetUrl - The DO fetch URL the caller passed to `stub.connect(url)`.
+     * @param headers - Optional upgrade headers (auth/cookies) forwarded to the DO.
+     * @returns A minimal proxy surface (send/close/onMessage/onClose) over the socket.
+     * @throws When the pass-through socket fails to open (bad binding/id, or the
+     *   DO rejected the upgrade).
+     */
+    openDoWebSocket(binding: string, idHex: string, targetUrl: string, headers?: [string, string][]): Promise<{
+        wid: number;
+        send: (data: Uint8Array | string) => void;
+        close: (code?: number, reason?: string) => void;
+        onMessage: (handler: (data: Uint8Array | string) => void) => void;
+        onClose: (handler: (code?: number, reason?: string) => void) => void;
+    }>;
     /** Create a readable stream that pulls from the bridge */
     createReadableStream(sid: number): ReadableStream<Uint8Array>;
     private handleJsonMessage;
@@ -120,5 +164,4 @@ export declare class BridgeClient {
 export declare function getClient(options?: BridgeClientOptions): BridgeClient;
 /** Reset the default client (for testing) */
 export declare function resetClient(): void;
-export {};
 //# sourceMappingURL=client.d.ts.map

package/dist/bridge/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/bridge/client.ts"],"names":[],"mappings":"AAiEA,KAAK,oBAAoB,GAAG,KAAK,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;AA2C1D,wBAAsB,iCAAiC,CACtD,gBAAgB,GAAE,OAA8B,GAC9C,OAAO,CAAC,oBAAoB,CAAC,CAK/B;AAMD,MAAM,WAAW,mBAAmB;IACnC,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,4BAA4B;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IACjC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;IAC9B,OAAO,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,+BAA+B,CAAC,UAAU,CAAC,CAAA;IACvD,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,0DAA0D;IAC1D,WAAW,EAAE;QACZ,OAAO,EAAE,MAAM,IAAI,CAAA;QACnB,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;KAC9B,GAAG,IAAI,CAAA;IACR,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAA;IACd,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,CAAA;IAC9C,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACjD;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CAC9B;AAMD,qBAAa,YAAY;IACxB,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,cAAc,CAAQ;IAE9B,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,cAAc,CAAkD;IAExE,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,WAAW,CAAQ;IAE3B,YAAY,OAAO,GAAE,mBAAwB,EAK5C;IAED,4BAA4B;IAC5B,MAAM,IAAI,MAAM,CAEf;IAED,6CAA6C;IAC7C,UAAU,IAAI,MAAM,CAGnB;IAMD,4BAA4B;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAgB7B;YAEa,iCAAiC;IAK/C,OAAO,CAAC,cAAc;IA8DtB,iEAAiE;IACjE,UAAU,IAAI,IAAI,CAgBjB;IAED,6BAA6B;IAC7B,KAAK,IAAI,IAAI,CAEZ;IAED,yBAAyB;IACzB,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,OAAO,CAAC,gBAAgB;IAmBxB,gFAAgF;IAChF,OAAO,CAAC,cAAc;IAwCtB,yBAAyB;IACnB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CA0CjF;IAMD;;;;;;;;;;OAUG;IACH,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAazD;IAMD,qDAAqD;IAC/C,aAAa,CAClB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAC1B,OAAO,CAAC;QACV,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,CAAA;QACzC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC/C,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;QACjE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;KACpE,CAAC,CAqDD;IAMD,0DAA0D;IAC1D,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAqE5D;IASD,OAAO,CAAC,iBAAiB;IA6BzB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAW3B,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,gBAAgB;YAQV,UAAU;IAmCxB,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,iBAAiB;IAmBzB,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;YAWR,eAAe;IAM7B,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,UAAU;CAOlB;AAQD,8CAA8C;AAC9C,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,YAAY,CAKrE;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,IAAI,IAAI,CAGlC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/bridge/client.ts"],"names":[],"mappings":"AA6CA,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAA;AAkC3E,MAAM,WAAW,mBAAmB;IACnC,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,4BAA4B;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IACjC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;IAC9B,OAAO,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,+BAA+B,CAAC,UAAU,CAAC,CAAA;IACvD,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,0DAA0D;IAC1D,WAAW,EAAE;QACZ,OAAO,EAAE,MAAM,IAAI,CAAA;QACnB,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;KAC9B,GAAG,IAAI,CAAA;IACR,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAA;IACd,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,SAAS,CAAA;IACnB,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,CAAA;IAC9C,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACjD;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CAC9B;AAMD,qBAAa,YAAY;IACxB,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,cAAc,CAAQ;IAC9B,OAAO,CAAC,cAAc,CAAQ;IAE9B,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,cAAc,CAAmC;IACzD,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,cAAc,CAAkD;IAExE,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,WAAW,CAAQ;IAE3B,YAAY,OAAO,GAAE,mBAAwB,EAK5C;IAED,4BAA4B;IAC5B,MAAM,IAAI,MAAM,CAEf;IAED,6CAA6C;IAC7C,UAAU,IAAI,MAAM,CAGnB;IAMD,4BAA4B;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAgB7B;YAEa,iCAAiC;IAK/C,OAAO,CAAC,cAAc;IA8DtB,iEAAiE;IACjE,UAAU,IAAI,IAAI,CAgBjB;IAED,6BAA6B;IAC7B,KAAK,IAAI,IAAI,CAEZ;IAED,yBAAyB;IACzB,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,OAAO,CAAC,gBAAgB;IAmBxB,gFAAgF;IAChF,OAAO,CAAC,cAAc;IAwCtB,yBAAyB;IACnB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CA0CjF;IAMD;;;;;;;;;;OAUG;IACH,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAazD;IAMD;;;;;;;;;;;OAWG;IACG,aAAa,CAClB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAC1B,OAAO,CAAC;QACV,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,CAAA;QACzC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC/C,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;QACjE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;KACpE,CAAC,CAqDD;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,eAAe,CACpB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAC1B,OAAO,CAAC;QACV,GAAG,EAAE,MAAM,CAAA;QACX,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,CAAA;QACzC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAC/C,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;QACjE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;KACpE,CAAC,CAED;IAMD,0DAA0D;IAC1D,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAqE5D;IASD,OAAO,CAAC,iBAAiB;IA6BzB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAW3B,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,gBAAgB;YAQV,UAAU;IAmCxB,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,iBAAiB;IAmBzB,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;YAWR,eAAe;IAM7B,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,UAAU;CAOlB;AAQD,8CAA8C;AAC9C,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,YAAY,CAKrE;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,IAAI,IAAI,CAGlC"}

package/dist/bridge/do-rpc-dispatch.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Dispatch a single Durable Object RPC method call to its stub.
+ *
+ * A DO that `extends DurableObject` (from `cloudflare:workers`) exposes its
+ * methods as native RPC on the stub, so the method is invoked DIRECTLY as
+ * `stub[method](...args)` — exactly as on real Cloudflare. This is the ONLY
+ * correct path for a DO that ALSO defines its own `fetch()`: routing the call
+ * through `fetch()` would hand devflare's internal `_rpc` probe to the user
+ * handler, which may reject it (e.g. a websocket-only `fetch()` returning 426),
+ * yielding a non-JSON body that then fails to parse.
+ *
+ * The fetch `_rpc` convention is kept only as a fallback for DOs that are not
+ * RPC-enabled (see `callDurableObjectRpcViaFetch`).
+ *
+ * @param stub - The resolved Durable Object stub to dispatch against.
+ * @param methodName - The RPC method name requested by the client proxy.
+ * @param args - The already-deserialized positional arguments for the method.
+ * @returns The method's return value (or the `_rpc` fallback's result).
+ * @throws Re-throws any genuine error from the method; only a workerd
+ *   "does not support RPC" signal is swallowed to trigger the fetch fallback.
+ */
+export declare function callDurableObjectRpc(stub: DurableObjectStub, methodName: string, args: unknown[]): Promise<unknown>;
+//# sourceMappingURL=do-rpc-dispatch.d.ts.map

package/dist/bridge/do-rpc-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"do-rpc-dispatch.d.ts","sourceRoot":"","sources":["../../src/bridge/do-rpc-dispatch.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CACzC,IAAI,EAAE,iBAAiB,EACvB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EAAE,GACb,OAAO,CAAC,OAAO,CAAC,CAelB"}

package/dist/bridge/do-websocket-connect.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The minimal proxy surface over a DO pass-through socket, matching the shape
+ * consumed by the DO Socket facade in `proxy.ts` `connect()`.
+ */
+export interface DoWebSocketProxy {
+    /** Synthetic id for parity with the legacy relay proxy (not on the wire). */
+    wid: number;
+    /** Send a frame to the DO (binary for bytes, text for strings). */
+    send: (data: Uint8Array | string) => void;
+    /** Close the socket. */
+    close: (code?: number, reason?: string) => void;
+    /** Attach the inbound-frame handler; buffered frames flush immediately. */
+    onMessage: (handler: (data: Uint8Array | string) => void) => void;
+    /** Attach the close handler; a buffered close fires immediately. */
+    onClose: (handler: (code?: number, reason?: string) => void) => void;
+}
+/**
+ * Open a real pass-through WebSocket to a Durable Object through the gateway's
+ * `/_devflare/do-ws` endpoint. Unlike the legacy relay, this is a standalone
+ * connection with its own lifecycle, so it is unaffected by the bridge client's
+ * `disconnect()`/reconnect bookkeeping.
+ *
+ * @param bridgeUrl - The bridge/gateway base URL (e.g. `ws://127.0.0.1:8787`).
+ * @param binding - DO namespace binding name (e.g. `DOC_ROOM`).
+ * @param idHex - Already-resolved Durable Object id, hex form.
+ * @param targetUrl - The DO fetch URL the caller passed to `stub.connect(url)`.
+ * @param headers - Optional upgrade headers (auth/cookies) forwarded to the DO.
+ * @returns A proxy surface (send/close/onMessage/onClose) over the socket.
+ * @throws When the pass-through socket fails to open (bad binding/id, or the DO
+ *   rejected the upgrade).
+ */
+export declare function openDurableObjectWebSocket(bridgeUrl: string, binding: string, idHex: string, targetUrl: string, headers?: [string, string][]): Promise<DoWebSocketProxy>;
+//# sourceMappingURL=do-websocket-connect.d.ts.map

package/dist/bridge/do-websocket-connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"do-websocket-connect.d.ts","sourceRoot":"","sources":["../../src/bridge/do-websocket-connect.ts"],"names":[],"mappings":"AAqEA;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAA;IACX,mEAAmE;IACnE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,CAAA;IACzC,wBAAwB;IACxB,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/C,2EAA2E;IAC3E,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;IACjE,oEAAoE;IACpE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,KAAK,IAAI,CAAA;CACpE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,0BAA0B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAyE3B"}

package/dist/bridge/gateway-runtime.d.ts

@@ -4,5 +4,5 @@
  * module. All symbols are declared with `function`/`const` so they are
  * hoisted in both embedding sites.
  */
-export declare const GATEWAY_RUNTIME_JS = "\nconst RAW_EMAIL = 'EmailMessage::raw'\n\n// Inline body cap for proxied DO/service-fetch responses. Matches\n// HTTP_TRANSFER_THRESHOLD in wire.ts (512 KB). A larger body would exceed\n// workerd's ~1 MB WebSocket message limit once base64-encoded into the rpc.ok\n// frame, so it is rejected with a clear error rather than silently truncated.\nconst HTTP_TRANSFER_THRESHOLD = 512 * 1024\n\nfunction arrayBufferToBase64(buffer) {\n\tconst bytes = new Uint8Array(buffer)\n\tlet binary = ''\n\tfor (let i = 0; i < bytes.byteLength; i++) binary += String.fromCharCode(bytes[i])\n\treturn btoa(binary)\n}\n\nfunction base64ToArrayBuffer(base64) {\n\tconst binary = atob(base64)\n\tconst bytes = new Uint8Array(binary.length)\n\tfor (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i)\n\treturn bytes.buffer\n}\n\n// Binary WsData frame codec (10-byte header: kind:u8, id:u32 LE, seq:u32 LE,\n// flags:u8 + payload). MUST match wire.ts encodeBinaryFrame/decodeBinaryFrame so\n// the bridge client and this gateway agree on the WS-data wire format\n// (BinaryKind.WsData = 2, BinaryFlags.TEXT = 2).\nfunction encodeWsDataFrame(wid, flags, payload) {\n\tconst frame = new Uint8Array(10 + payload.byteLength)\n\tconst view = new DataView(frame.buffer)\n\tview.setUint8(0, 2)\n\tview.setUint32(1, wid, true)\n\tview.setUint32(5, 0, true)\n\tview.setUint8(9, flags)\n\tframe.set(payload, 10)\n\treturn frame\n}\n\nfunction decodeWsDataFrame(buffer) {\n\tconst bytes = new Uint8Array(buffer)\n\tif (bytes.byteLength < 10) return null\n\tconst view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength)\n\treturn {\n\t\tkind: view.getUint8(0),\n\t\tid: view.getUint32(1, true),\n\t\tflags: view.getUint8(9),\n\t\tpayload: bytes.subarray(10)\n\t}\n}\n\nfunction serializeR2Object(obj) {\n\tif (!obj) return null\n\treturn {\n\t\t__type: 'R2Object',\n\t\tkey: obj.key,\n\t\tversion: obj.version,\n\t\tsize: obj.size,\n\t\tetag: obj.etag,\n\t\thttpEtag: obj.httpEtag,\n\t\tchecksums: obj.checksums,\n\t\tuploaded: obj.uploaded?.toISOString(),\n\t\thttpMetadata: obj.httpMetadata,\n\t\tcustomMetadata: obj.customMetadata,\n\t\trange: obj.range,\n\t\tstorageClass: obj.storageClass\n\t}\n}\n\nfunction serializeR2ObjectBody(obj, bodyData) {\n\tif (!obj) return null\n\treturn {\n\t\t__type: 'R2ObjectBody',\n\t\tkey: obj.key,\n\t\tversion: obj.version,\n\t\tsize: obj.size,\n\t\tetag: obj.etag,\n\t\thttpEtag: obj.httpEtag,\n\t\tchecksums: obj.checksums,\n\t\tuploaded: obj.uploaded?.toISOString(),\n\t\thttpMetadata: obj.httpMetadata,\n\t\tcustomMetadata: obj.customMetadata,\n\t\trange: obj.range,\n\t\tstorageClass: obj.storageClass,\n\t\tbodyData\n\t}\n}\n\nfunction serializeR2Objects(result) {\n\tif (!result) return null\n\treturn {\n\t\tobjects: result.objects.map(serializeR2Object),\n\t\ttruncated: result.truncated,\n\t\tcursor: result.cursor,\n\t\tdelimitedPrefixes: result.delimitedPrefixes\n\t}\n}\n\nasync function serializeResponse(response) {\n\tlet body = null\n\tif (response.body) {\n\t\tconst bytes = await response.arrayBuffer()\n\t\tif (bytes.byteLength > HTTP_TRANSFER_THRESHOLD) {\n\t\t\tthrow new Error(\n\t\t\t\t'[devflare][bridge] Response body (' + bytes.byteLength + ' bytes) exceeds the '\n\t\t\t\t+ HTTP_TRANSFER_THRESHOLD + '-byte inline limit. DO and service-binding fetch responses '\n\t\t\t\t+ 'are delivered inline over the bridge WebSocket and cannot be streamed locally; keep '\n\t\t\t\t+ 'proxied response bodies under the limit (large R2 objects are exempt \u2014 read them through '\n\t\t\t\t+ 'the R2 binding, which uses the HTTP transfer side-channel).'\n\t\t\t)\n\t\t}\n\t\tif (bytes.byteLength > 0) {\n\t\t\tbody = { type: 'bytes', data: arrayBufferToBase64(bytes) }\n\t\t}\n\t}\n\treturn {\n\t\tstatus: response.status,\n\t\tstatusText: response.statusText,\n\t\theaders: [...response.headers.entries()],\n\t\tbody\n\t}\n}\n\nfunction deserializeRequest(serializedReq) {\n\treturn new Request(serializedReq.url, {\n\t\tmethod: serializedReq.method,\n\t\theaders: serializedReq.headers,\n\t\tbody: serializedReq.body?.type === 'bytes'\n\t\t\t? base64ToArrayBuffer(serializedReq.body.data)\n\t\t\t: undefined,\n\t\tredirect: serializedReq.redirect\n\t})\n}\n\nfunction createEmailMessageRaw(raw) {\n\tif (typeof raw === 'string' || raw instanceof ReadableStream) {\n\t\treturn raw\n\t}\n\tif (raw instanceof ArrayBuffer || raw instanceof Uint8Array) {\n\t\treturn new Response(raw).body\n\t}\n\tthrow new Error('Unsupported EmailMessage raw payload')\n}\n\nfunction isDurableObjectNamespace(binding) {\n\treturn !!binding\n\t\t&& typeof binding.idFromName === 'function'\n\t\t&& typeof binding.idFromString === 'function'\n\t\t&& typeof binding.newUniqueId === 'function'\n}\n\n/**\n * Resolve a (possibly jurisdiction-scoped) DurableObjectNamespace.\n * Forwards the jurisdiction faithfully when the binding supports it\n * (real Cloudflare), and degrades to the plain binding otherwise\n * (miniflare/workerd local emulation, which does not pin jurisdictions).\n */\nfunction resolveDoNamespace(binding, jurisdiction) {\n\tif (jurisdiction && typeof binding.jurisdiction === 'function') {\n\t\treturn binding.jurisdiction(jurisdiction)\n\t}\n\treturn binding\n}\n\n/**\n * Execute an RPC method against the gateway's bindings.\n *\n * Method format: \"binding.operation\". Operations must be namespaced by\n * binding kind (e.g. \"kv.get\", \"r2.head\", \"d1.stmt.first\", \"do.fetch\",\n * \"service.fetch\", \"queue.send\", \"email.send\", \"ai.run\"). Bare verbs and the legacy\n * \"stmt.*\" / \"stub.*\" sub-prefixes were removed in B3-final and now throw.\n * Method vocabulary must stay in sync with the canonical server in\n * src/bridge/server.ts.\n */\nasync function executeRpcMethod(method, params, env, _ctx) {\n\tconst parts = method.split('.')\n\tif (parts.length < 2) throw new Error('Invalid method format: ' + method)\n\n\tconst bindingName = parts[0]\n\tconst operation = parts.slice(1).join('.')\n\tconst binding = env[bindingName]\n\n\tif (!binding) throw new Error('Binding not found: ' + bindingName)\n\n\tconst isNamespaced =\n\t\toperation.indexOf('kv.') === 0 ||\n\t\toperation.indexOf('r2.') === 0 ||\n\t\toperation.indexOf('d1.') === 0 ||\n\t\toperation.indexOf('do.') === 0 ||\n\t\toperation.indexOf('service.') === 0 ||\n\t\toperation.indexOf('queue.') === 0 ||\n\t\toperation.indexOf('email.') === 0 ||\n\t\toperation.indexOf('ai.') === 0 ||\n\t\toperation.indexOf('workflow.') === 0 ||\n\t\toperation.indexOf('var.') === 0\n\tif (!isNamespaced) {\n\t\tthrow new Error(createUnsupportedBridgeOperationErrorMessage(bindingName, operation))\n\t}\n\n\t// KV\n\tif (operation === 'kv.get') return binding.get(params[0], params[1])\n\tif (operation === 'kv.put') return binding.put(params[0], params[1], params[2])\n\tif (operation === 'kv.delete') return binding.delete(params[0])\n\tif (operation === 'kv.list') return binding.list(params[0])\n\tif (operation === 'kv.getWithMetadata') return binding.getWithMetadata(params[0], params[1])\n\n\t// DO get (returns DOStub reference)\n\tif (operation === 'do.get') {\n\t\treturn { __type: 'DOStub', binding: bindingName, id: params[0] }\n\t}\n\n\t// R2\n\tif (operation === 'r2.head') return serializeR2Object(await binding.head(params[0]))\n\tif (operation === 'r2.get') {\n\t\tconst obj = await binding.get(params[0], params[1])\n\t\tif (!obj) return null\n\t\tconst body = await obj.arrayBuffer()\n\t\treturn serializeR2ObjectBody(obj, arrayBufferToBase64(body))\n\t}\n\tif (operation === 'r2.put') {\n\t\tlet value = params[1]\n\t\tif (value && typeof value === 'object') {\n\t\t\tif (value.__type === 'ArrayBuffer' || value.__type === 'Uint8Array') {\n\t\t\t\tvalue = base64ToArrayBuffer(value.data)\n\t\t\t}\n\t\t}\n\t\treturn serializeR2Object(await binding.put(params[0], value, params[2]))\n\t}\n\tif (operation === 'r2.delete') return binding.delete(params[0])\n\tif (operation === 'r2.list') return serializeR2Objects(await binding.list(params[0]))\n\n\t// D1\n\tif (operation === 'd1.exec') return binding.exec(params[0])\n\tif (operation === 'd1.batch') {\n\t\tconst statements = params[0].map((s) => binding.prepare(s.sql).bind(...(s.bindings || [])))\n\t\treturn binding.batch(statements)\n\t}\n\tif (operation.indexOf('d1.stmt.') === 0) {\n\t\tconst mode = operation.split('.')[2]\n\t\tconst [sql, ...rest] = params\n\t\tlet bindings = rest\n\t\tlet extraParam\n\t\tif (mode === 'first' || mode === 'raw') {\n\t\t\textraParam = rest[rest.length - 1]\n\t\t\tbindings = rest.slice(0, -1)\n\t\t}\n\t\tlet stmt = binding.prepare(sql)\n\t\tif (bindings.length > 0) stmt = stmt.bind(...bindings)\n\t\tif (mode === 'first') {\n\t\t\tif (typeof extraParam === 'string' && extraParam.length > 0) return stmt.first(extraParam)\n\t\t\treturn stmt.first()\n\t\t}\n\t\tif (mode === 'all') return stmt.all()\n\t\tif (mode === 'run') return stmt.run()\n\t\tif (mode === 'raw') return stmt.raw(extraParam)\n\t\tthrow new Error('Unknown stmt mode: ' + mode)\n\t}\n\n\t// Durable Objects\n\tif (operation === 'do.idFromName') {\n\t\tconst ns = resolveDoNamespace(binding, params[1])\n\t\tconst id = ns.idFromName(params[0])\n\t\treturn { __type: 'DOId', hex: id.toString() }\n\t}\n\tif (operation === 'do.idFromString') {\n\t\tconst id = binding.idFromString(params[0])\n\t\treturn { __type: 'DOId', hex: id.toString() }\n\t}\n\tif (operation === 'do.newUniqueId') {\n\t\tconst ns = resolveDoNamespace(binding, params[1])\n\t\tconst id = ns.newUniqueId(params[0])\n\t\treturn { __type: 'DOId', hex: id.toString() }\n\t}\n\tif (operation === 'do.fetch') {\n\t\tconst [, serializedId, serializedReq] = params\n\t\tconst id = binding.idFromString(serializedId.hex)\n\t\tconst stub = binding.get(id)\n\t\tconst response = await stub.fetch(new Request(serializedReq.url, {\n\t\t\tmethod: serializedReq.method,\n\t\t\theaders: serializedReq.headers,\n\t\t\tbody: serializedReq.body?.type === 'bytes'\n\t\t\t\t? base64ToArrayBuffer(serializedReq.body.data)\n\t\t\t\t: undefined\n\t\t}))\n\t\treturn serializeResponse(response)\n\t}\n\tif (operation === 'do.rpc') {\n\t\tconst [, serializedId, methodName, args] = params\n\t\tconst id = binding.idFromString(serializedId.hex)\n\t\tconst stub = binding.get(id)\n\t\tconst response = await stub.fetch(new Request('http://do/_rpc', {\n\t\t\tmethod: 'POST',\n\t\t\theaders: { 'Content-Type': 'application/json' },\n\t\t\tbody: JSON.stringify({ method: methodName, params: args })\n\t\t}))\n\t\tconst result = await response.json()\n\t\tif (!result.ok) throw new Error(result.error?.message || 'RPC failed')\n\t\treturn result.result\n\t}\n\n\t// Service Bindings\n\tif (operation === 'service.fetch') {\n\t\tif (!binding || typeof binding.fetch !== 'function') {\n\t\t\tthrow new Error('Service binding ' + bindingName + ' does not support fetch()')\n\t\t}\n\t\tconst response = await binding.fetch(deserializeRequest(params[0]))\n\t\treturn serializeResponse(response)\n\t}\n\tif (operation === 'service.rpc') {\n\t\tconst methodName = params[0]\n\t\tif (typeof methodName !== 'string') {\n\t\t\tthrow new Error('Service binding ' + bindingName + ' RPC method name must be a string')\n\t\t}\n\t\tconst args = Array.isArray(params[1]) ? params[1] : []\n\t\tconst method = binding && binding[methodName]\n\t\tif (typeof method !== 'function') {\n\t\t\tthrow new Error('Service binding ' + bindingName + ' does not support ' + methodName + '()')\n\t\t}\n\t\treturn method.apply(binding, args)\n\t}\n\n\t// Queues\n\tif (operation === 'queue.send') return binding.send(params[0], params[1])\n\tif (operation === 'queue.sendBatch') return binding.sendBatch(params[0], params[1])\n\n\t// Send Email\n\tif (operation === 'email.send') {\n\t\tif (binding && typeof binding.send === 'function') {\n\t\t\tconst message = params[0]\n\t\t\tif (message && typeof message === 'object' && 'from' in message && 'to' in message && 'raw' in message) {\n\t\t\t\treturn binding.send({\n\t\t\t\t\tfrom: message.from,\n\t\t\t\t\tto: message.to,\n\t\t\t\t\t[RAW_EMAIL]: createEmailMessageRaw(message.raw)\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn binding.send(message)\n\t\t}\n\t\treturn { ok: true, simulated: true }\n\t}\n\n\t// Workflows\n\tif (operation === 'workflow.create') {\n\t\treturn serializeWorkflowInstance(await binding.create(params[0]))\n\t}\n\tif (operation === 'workflow.get') {\n\t\treturn serializeWorkflowInstance(await binding.get(params[0]))\n\t}\n\tif (operation === 'workflow.status') {\n\t\treturn (await binding.get(params[0])).status()\n\t}\n\tif (operation === 'workflow.pause') {\n\t\treturn (await binding.get(params[0])).pause()\n\t}\n\tif (operation === 'workflow.resume') {\n\t\treturn (await binding.get(params[0])).resume()\n\t}\n\tif (operation === 'workflow.terminate') {\n\t\treturn (await binding.get(params[0])).terminate()\n\t}\n\tif (operation === 'workflow.restart') {\n\t\treturn (await binding.get(params[0])).restart()\n\t}\n\tif (operation === 'workflow.sendEvent') {\n\t\treturn (await binding.get(params[0])).sendEvent(params[1])\n\t}\n\n\t// AI / generic run()\n\tif (operation === 'ai.run') {\n\t\tif (typeof binding.run !== 'function') {\n\t\t\tthrow new Error('Binding ' + bindingName + ' does not support run(): ' + method)\n\t\t}\n\t\treturn binding.run(params[0], params[1])\n\t}\n\n\tthrow new Error('Unknown operation: ' + method)\n}\n\nfunction createUnsupportedBridgeOperationErrorMessage(bindingName, operation) {\n\tconst base = \"[devflare][bridge] Unsupported bridge operation '\" + operation + \"' for binding '\" + bindingName + \"'.\"\n\tif (operation === 'fetch') {\n\t\treturn base + ' Devflare could not dispatch fetch() for this binding through the local bridge. '\n\t\t\t+ 'Expected Cloudflare API: env.' + bindingName + '.fetch(request). '\n\t\t\t+ 'If this came from SvelteKit platform.env, make sure the binding is declared as a service binding; '\n\t\t\t+ 'this is a Devflare local bridge issue when service bindings fall back to a bare fetch operation.'\n\t}\n\tif (operation === 'toString') {\n\t\treturn base + ' A platform.env value was coerced to a string through the bridge. '\n\t\t\t+ 'For SvelteKit local dev, declared vars should be plain string values and missing env names should read as undefined.'\n\t}\n\treturn base + ' Bare verbs and the legacy stmt.*/stub.* sub-prefixes are not supported; '\n\t\t+ 'use the namespaced form (e.g. kv.get, r2.put, d1.stmt.first, do.fetch, service.fetch).'\n}\n\nfunction serializeWorkflowInstance(instance) {\n\treturn {\n\t\t__type: 'WorkflowInstance',\n\t\tid: instance.id\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// WebSocket bridge (shared with src/bridge/server.ts in shape)\n// ---------------------------------------------------------------------------\n// NOTE: wsProxies is intentionally created per handleBridgeWebSocket call so\n// state never leaks across connections or across gateway-script regenerations.\n\nasync function handleBridgeRpcCall(msg, ws, env, ctx) {\n\ttry {\n\t\tconst result = await executeRpcMethod(msg.method, msg.params, env, ctx)\n\t\tws.send(JSON.stringify({ t: 'rpc.ok', id: msg.id, result }))\n\t} catch (error) {\n\t\tws.send(JSON.stringify({\n\t\t\tt: 'rpc.err',\n\t\t\tid: msg.id,\n\t\t\terror: {\n\t\t\t\tcode: error?.code || 'INTERNAL_ERROR',\n\t\t\t\tmessage: error?.message || String(error)\n\t\t\t}\n\t\t}))\n\t}\n}\n\nasync function handleBridgeWsOpen(msg, ws, env, wsProxies) {\n\ttry {\n\t\tconst binding = env[msg.target.binding]\n\t\tconst id = binding.idFromString(msg.target.id)\n\t\tconst stub = binding.get(id)\n\n\t\tconst headers = new Headers(msg.target.headers || [])\n\t\theaders.set('Upgrade', 'websocket')\n\n\t\tconst response = await stub.fetch(new Request(msg.target.url, { method: 'GET', headers }))\n\t\tconst doWs = response.webSocket\n\n\t\tif (!doWs) {\n\t\t\tws.send(JSON.stringify({\n\t\t\t\tt: 'rpc.err',\n\t\t\t\tid: 'ws_' + msg.wid,\n\t\t\t\terror: { code: 'WS_FAILED', message: 'No WebSocket returned' }\n\t\t\t}))\n\t\t\treturn\n\t\t}\n\n\t\tdoWs.accept()\n\t\twsProxies.set(msg.wid, { doWs })\n\n\t\tdoWs.addEventListener('message', (event) => {\n\t\t\tconst isText = typeof event.data === 'string'\n\t\t\tconst payload = isText\n\t\t\t\t? new TextEncoder().encode(event.data)\n\t\t\t\t: new Uint8Array(event.data)\n\t\t\tconst flags = isText ? 2 : 0\n\t\t\tws.send(encodeWsDataFrame(msg.wid, flags, payload))\n\t\t})\n\n\t\tdoWs.addEventListener('close', (event) => {\n\t\t\tws.send(JSON.stringify({ t: 'ws.close', wid: msg.wid, code: event.code, reason: event.reason }))\n\t\t\twsProxies.delete(msg.wid)\n\t\t})\n\n\t\tws.send(JSON.stringify({ t: 'ws.opened', wid: msg.wid }))\n\t} catch (error) {\n\t\tws.send(JSON.stringify({\n\t\t\tt: 'rpc.err',\n\t\t\tid: 'ws_' + msg.wid,\n\t\t\terror: { code: 'WS_FAILED', message: error.message }\n\t\t}))\n\t}\n}\n\nfunction handleBridgeWsClose(msg, wsProxies) {\n\tconst proxy = wsProxies.get(msg.wid)\n\tif (proxy) {\n\t\tproxy.doWs.close(msg.code, msg.reason)\n\t\twsProxies.delete(msg.wid)\n\t}\n}\n\n// Relay an inbound binary WsData frame (client -> DO). Mirrors server.ts\n// handleBinaryMessage: decode the frame, look up the proxy by ws id, and forward\n// the payload to the DO socket honoring the TEXT flag.\nfunction handleBridgeBinaryMessage(buffer, wsProxies) {\n\tconst frame = decodeWsDataFrame(buffer)\n\tif (!frame || frame.kind !== 2) return\n\tconst proxy = wsProxies.get(frame.id)\n\tif (!proxy) return\n\tif ((frame.flags & 2) !== 0) {\n\t\tproxy.doWs.send(new TextDecoder().decode(frame.payload))\n\t} else {\n\t\tproxy.doWs.send(frame.payload)\n\t}\n}\n\nasync function handleBridgeJsonMessage(data, ws, env, ctx, wsProxies) {\n\tconst msg = JSON.parse(data)\n\tswitch (msg.t) {\n\t\tcase 'hello':\n\t\t\t// v2 handshake \u2014 acknowledge with welcome echoing the negotiated\n\t\t\t// capability intersection. The gateway advertises only what it\n\t\t\t// implements end-to-end: 'ws-relay' (binary WsData relay to/from DO\n\t\t\t// sockets) and 'http-transfer' (the R2 transfer HTTP side-channel).\n\t\t\t// 'streams' is intentionally NOT advertised \u2014 large DO/service-fetch\n\t\t\t// responses are inlined, not streamed, in this gateway.\n\t\t\tws.send(JSON.stringify({\n\t\t\t\tt: 'welcome',\n\t\t\t\tprotocolVersion: 2,\n\t\t\t\tcapabilities: ['ws-relay', 'http-transfer']\n\t\t\t\t\t.filter((c) => Array.isArray(msg.capabilities) && msg.capabilities.includes(c))\n\t\t\t\t\t.sort()\n\t\t\t}))\n\t\t\tbreak\n\t\tcase 'rpc.call':\n\t\t\tawait handleBridgeRpcCall(msg, ws, env, ctx)\n\t\t\tbreak\n\t\tcase 'ws.open':\n\t\t\tawait handleBridgeWsOpen(msg, ws, env, wsProxies)\n\t\t\tbreak\n\t\tcase 'ws.close':\n\t\t\thandleBridgeWsClose(msg, wsProxies)\n\t\t\tbreak\n\t}\n}\n\nfunction handleBridgeWebSocket(request, env, ctx) {\n\tconst { 0: client, 1: server } = new WebSocketPair()\n\tserver.accept()\n\n\t// Per-connection state: recreated for every bridge client so reloads and\n\t// concurrent clients never share WS proxy entries.\n\tconst wsProxies = new Map()\n\n\tserver.addEventListener('message', async (event) => {\n\t\ttry {\n\t\t\tif (typeof event.data === 'string') {\n\t\t\t\tawait handleBridgeJsonMessage(event.data, server, env, ctx, wsProxies)\n\t\t\t} else {\n\t\t\t\thandleBridgeBinaryMessage(event.data, wsProxies)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error('[Gateway] Error:', error)\n\t\t}\n\t})\n\n\tserver.addEventListener('close', () => {\n\t\tfor (const proxy of wsProxies.values()) {\n\t\t\t// Best-effort cleanup: the DO-side WS may already be closed or in an\n\t\t\t// invalid state; any throw here would abort sibling closes. Surface\n\t\t\t// the swallowed error when DEVFLARE_DEBUG_BRIDGE is enabled.\n\t\t\ttry { proxy.doWs.close() } catch (error) {\n\t\t\t\tif (globalThis.DEVFLARE_DEBUG_BRIDGE) {\n\t\t\t\t\tconsole.warn('[devflare:bridge] proxy.doWs.close() failed', error)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\twsProxies.clear()\n\t})\n\n\treturn new Response(null, { status: 101, webSocket: client })\n}\n\n// ---------------------------------------------------------------------------\n// HTTP transfer for R2 bodies (shared with src/bridge/server.ts in shape)\n// ---------------------------------------------------------------------------\n\nasync function handleHttpTransfer(request, env, url) {\n\tconst transferIdEncoded = url.pathname.split('/').pop()\n\tconst transferId = decodeURIComponent(transferIdEncoded || '')\n\tconst [binding, ...keyParts] = transferId.split(':')\n\tconst key = keyParts.join(':')\n\tconst bucket = env[binding]\n\n\tif (!bucket) return new Response('Bucket not found: ' + binding, { status: 404 })\n\n\tif (request.method === 'PUT' || request.method === 'POST') {\n\t\tconst result = await bucket.put(key, request.body)\n\t\treturn new Response(JSON.stringify(serializeR2Object(result)), {\n\t\t\theaders: { 'Content-Type': 'application/json' }\n\t\t})\n\t}\n\n\tif (request.method === 'GET') {\n\t\tconst object = await bucket.get(key)\n\t\tif (!object) return new Response('Not found', { status: 404 })\n\t\treturn new Response(object.body, {\n\t\t\theaders: {\n\t\t\t\t'Content-Type': object.httpMetadata?.contentType || 'application/octet-stream',\n\t\t\t\t'Content-Length': String(object.size)\n\t\t\t}\n\t\t})\n\t}\n\n\treturn new Response('Method not allowed', { status: 405 })\n}\n";
+export declare const GATEWAY_RUNTIME_JS = "\nconst RAW_EMAIL = 'EmailMessage::raw'\n\n// Inline body cap for proxied DO/service-fetch responses. Matches\n// HTTP_TRANSFER_THRESHOLD in wire.ts (512 KB). A larger body would exceed\n// workerd's ~1 MB WebSocket message limit once base64-encoded into the rpc.ok\n// frame, so it is rejected with a clear error rather than silently truncated.\nconst HTTP_TRANSFER_THRESHOLD = 512 * 1024\n\nfunction arrayBufferToBase64(buffer) {\n\tconst bytes = new Uint8Array(buffer)\n\tlet binary = ''\n\tfor (let i = 0; i < bytes.byteLength; i++) binary += String.fromCharCode(bytes[i])\n\treturn btoa(binary)\n}\n\nfunction base64ToArrayBuffer(base64) {\n\tconst binary = atob(base64)\n\tconst bytes = new Uint8Array(binary.length)\n\tfor (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i)\n\treturn bytes.buffer\n}\n\n// Binary WsData frame codec (10-byte header: kind:u8, id:u32 LE, seq:u32 LE,\n// flags:u8 + payload). MUST match wire.ts encodeBinaryFrame/decodeBinaryFrame so\n// the bridge client and this gateway agree on the WS-data wire format\n// (BinaryKind.WsData = 2, BinaryFlags.TEXT = 2).\nfunction encodeWsDataFrame(wid, flags, payload) {\n\tconst frame = new Uint8Array(10 + payload.byteLength)\n\tconst view = new DataView(frame.buffer)\n\tview.setUint8(0, 2)\n\tview.setUint32(1, wid, true)\n\tview.setUint32(5, 0, true)\n\tview.setUint8(9, flags)\n\tframe.set(payload, 10)\n\treturn frame\n}\n\nfunction decodeWsDataFrame(buffer) {\n\tconst bytes = new Uint8Array(buffer)\n\tif (bytes.byteLength < 10) return null\n\tconst view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength)\n\treturn {\n\t\tkind: view.getUint8(0),\n\t\tid: view.getUint32(1, true),\n\t\tflags: view.getUint8(9),\n\t\tpayload: bytes.subarray(10)\n\t}\n}\n\nfunction serializeR2Object(obj) {\n\tif (!obj) return null\n\treturn {\n\t\t__type: 'R2Object',\n\t\tkey: obj.key,\n\t\tversion: obj.version,\n\t\tsize: obj.size,\n\t\tetag: obj.etag,\n\t\thttpEtag: obj.httpEtag,\n\t\tchecksums: obj.checksums,\n\t\tuploaded: obj.uploaded?.toISOString(),\n\t\thttpMetadata: obj.httpMetadata,\n\t\tcustomMetadata: obj.customMetadata,\n\t\trange: obj.range,\n\t\tstorageClass: obj.storageClass\n\t}\n}\n\nfunction serializeR2ObjectBody(obj, bodyData) {\n\tif (!obj) return null\n\treturn {\n\t\t__type: 'R2ObjectBody',\n\t\tkey: obj.key,\n\t\tversion: obj.version,\n\t\tsize: obj.size,\n\t\tetag: obj.etag,\n\t\thttpEtag: obj.httpEtag,\n\t\tchecksums: obj.checksums,\n\t\tuploaded: obj.uploaded?.toISOString(),\n\t\thttpMetadata: obj.httpMetadata,\n\t\tcustomMetadata: obj.customMetadata,\n\t\trange: obj.range,\n\t\tstorageClass: obj.storageClass,\n\t\tbodyData\n\t}\n}\n\nfunction serializeR2Objects(result) {\n\tif (!result) return null\n\treturn {\n\t\tobjects: result.objects.map(serializeR2Object),\n\t\ttruncated: result.truncated,\n\t\tcursor: result.cursor,\n\t\tdelimitedPrefixes: result.delimitedPrefixes\n\t}\n}\n\nasync function serializeResponse(response) {\n\tlet body = null\n\tif (response.body) {\n\t\tconst bytes = await response.arrayBuffer()\n\t\tif (bytes.byteLength > HTTP_TRANSFER_THRESHOLD) {\n\t\t\tthrow new Error(\n\t\t\t\t'[devflare][bridge] Response body (' + bytes.byteLength + ' bytes) exceeds the '\n\t\t\t\t+ HTTP_TRANSFER_THRESHOLD + '-byte inline limit. DO and service-binding fetch responses '\n\t\t\t\t+ 'are delivered inline over the bridge WebSocket and cannot be streamed locally; keep '\n\t\t\t\t+ 'proxied response bodies under the limit (large R2 objects are exempt \u2014 read them through '\n\t\t\t\t+ 'the R2 binding, which uses the HTTP transfer side-channel).'\n\t\t\t)\n\t\t}\n\t\tif (bytes.byteLength > 0) {\n\t\t\tbody = { type: 'bytes', data: arrayBufferToBase64(bytes) }\n\t\t}\n\t}\n\treturn {\n\t\tstatus: response.status,\n\t\tstatusText: response.statusText,\n\t\theaders: [...response.headers.entries()],\n\t\tbody\n\t}\n}\n\nfunction deserializeRequest(serializedReq) {\n\treturn new Request(serializedReq.url, {\n\t\tmethod: serializedReq.method,\n\t\theaders: serializedReq.headers,\n\t\tbody: serializedReq.body?.type === 'bytes'\n\t\t\t? base64ToArrayBuffer(serializedReq.body.data)\n\t\t\t: undefined,\n\t\tredirect: serializedReq.redirect\n\t})\n}\n\nfunction createEmailMessageRaw(raw) {\n\tif (typeof raw === 'string' || raw instanceof ReadableStream) {\n\t\treturn raw\n\t}\n\tif (raw instanceof ArrayBuffer || raw instanceof Uint8Array) {\n\t\treturn new Response(raw).body\n\t}\n\tthrow new Error('Unsupported EmailMessage raw payload')\n}\n\nfunction isDurableObjectNamespace(binding) {\n\treturn !!binding\n\t\t&& typeof binding.idFromName === 'function'\n\t\t&& typeof binding.idFromString === 'function'\n\t\t&& typeof binding.newUniqueId === 'function'\n}\n\n/**\n * Resolve a (possibly jurisdiction-scoped) DurableObjectNamespace.\n * Forwards the jurisdiction faithfully when the binding supports it\n * (real Cloudflare), and degrades to the plain binding otherwise\n * (miniflare/workerd local emulation, which does not pin jurisdictions).\n */\nfunction resolveDoNamespace(binding, jurisdiction) {\n\tif (jurisdiction && typeof binding.jurisdiction === 'function') {\n\t\treturn binding.jurisdiction(jurisdiction)\n\t}\n\treturn binding\n}\n\n// Dispatch a single Durable Object RPC method call to its stub.\n//\n// A DO that extends DurableObject (from cloudflare:workers) exposes its methods\n// as native RPC on the stub, so the method is invoked DIRECTLY as\n// stub[method](...args) \u2014 exactly as on real Cloudflare. This is the ONLY\n// correct path for a DO that ALSO defines its own fetch(): routing the call\n// through fetch() would hand devflare's internal _rpc probe to the user handler,\n// which may reject it (e.g. a websocket-only fetch() returning 426) and yield a\n// non-JSON body that then fails to parse (the reported crash).\n//\n// The fetch _rpc convention is kept only as a fallback for DOs that are not\n// RPC-enabled: the stub proxies every property as callable, so such a DO only\n// reveals itself when the native call throws \"does not support RPC\".\nasync function callDurableObjectRpc(stub, methodName, args) {\n\tif (typeof stub[methodName] === 'function') {\n\t\ttry {\n\t\t\treturn await stub[methodName](...args)\n\t\t} catch (error) {\n\t\t\tif (!isDurableObjectRpcUnsupported(error)) throw error\n\t\t}\n\t}\n\tconst response = await stub.fetch(new Request('http://do/_rpc', {\n\t\tmethod: 'POST',\n\t\theaders: { 'Content-Type': 'application/json' },\n\t\tbody: JSON.stringify({ method: methodName, params: args })\n\t}))\n\tconst result = await response.json()\n\tif (!result.ok) throw new Error(result.error?.message || 'RPC failed')\n\treturn result.result\n}\n\nfunction isDurableObjectRpcUnsupported(error) {\n\tconst message = error && error.message ? String(error.message) : String(error)\n\treturn message.indexOf('does not support RPC') !== -1\n}\n\n/**\n * Execute an RPC method against the gateway's bindings.\n *\n * Method format: \"binding.operation\". Operations must be namespaced by\n * binding kind (e.g. \"kv.get\", \"r2.head\", \"d1.stmt.first\", \"do.fetch\",\n * \"service.fetch\", \"queue.send\", \"email.send\", \"ai.run\"). Bare verbs and the legacy\n * \"stmt.*\" / \"stub.*\" sub-prefixes were removed in B3-final and now throw.\n * Method vocabulary must stay in sync with the canonical server in\n * src/bridge/server.ts.\n */\nasync function executeRpcMethod(method, params, env, _ctx) {\n\tconst parts = method.split('.')\n\tif (parts.length < 2) throw new Error('Invalid method format: ' + method)\n\n\tconst bindingName = parts[0]\n\tconst operation = parts.slice(1).join('.')\n\tconst binding = env[bindingName]\n\n\tif (!binding) throw new Error('Binding not found: ' + bindingName)\n\n\tconst isNamespaced =\n\t\toperation.indexOf('kv.') === 0 ||\n\t\toperation.indexOf('r2.') === 0 ||\n\t\toperation.indexOf('d1.') === 0 ||\n\t\toperation.indexOf('do.') === 0 ||\n\t\toperation.indexOf('service.') === 0 ||\n\t\toperation.indexOf('queue.') === 0 ||\n\t\toperation.indexOf('email.') === 0 ||\n\t\toperation.indexOf('ai.') === 0 ||\n\t\toperation.indexOf('workflow.') === 0 ||\n\t\toperation.indexOf('var.') === 0\n\tif (!isNamespaced) {\n\t\tthrow new Error(createUnsupportedBridgeOperationErrorMessage(bindingName, operation))\n\t}\n\n\t// KV\n\tif (operation === 'kv.get') return binding.get(params[0], params[1])\n\tif (operation === 'kv.put') return binding.put(params[0], params[1], params[2])\n\tif (operation === 'kv.delete') return binding.delete(params[0])\n\tif (operation === 'kv.list') return binding.list(params[0])\n\tif (operation === 'kv.getWithMetadata') return binding.getWithMetadata(params[0], params[1])\n\n\t// DO get (returns DOStub reference)\n\tif (operation === 'do.get') {\n\t\treturn { __type: 'DOStub', binding: bindingName, id: params[0] }\n\t}\n\n\t// R2\n\tif (operation === 'r2.head') return serializeR2Object(await binding.head(params[0]))\n\tif (operation === 'r2.get') {\n\t\tconst obj = await binding.get(params[0], params[1])\n\t\tif (!obj) return null\n\t\tconst body = await obj.arrayBuffer()\n\t\treturn serializeR2ObjectBody(obj, arrayBufferToBase64(body))\n\t}\n\tif (operation === 'r2.put') {\n\t\tlet value = params[1]\n\t\tif (value && typeof value === 'object') {\n\t\t\tif (value.__type === 'ArrayBuffer' || value.__type === 'Uint8Array') {\n\t\t\t\tvalue = base64ToArrayBuffer(value.data)\n\t\t\t}\n\t\t}\n\t\treturn serializeR2Object(await binding.put(params[0], value, params[2]))\n\t}\n\tif (operation === 'r2.delete') return binding.delete(params[0])\n\tif (operation === 'r2.list') return serializeR2Objects(await binding.list(params[0]))\n\n\t// D1\n\tif (operation === 'd1.exec') return binding.exec(params[0])\n\tif (operation === 'd1.batch') {\n\t\tconst statements = params[0].map((s) => binding.prepare(s.sql).bind(...(s.bindings || [])))\n\t\treturn binding.batch(statements)\n\t}\n\tif (operation.indexOf('d1.stmt.') === 0) {\n\t\tconst mode = operation.split('.')[2]\n\t\tconst [sql, ...rest] = params\n\t\tlet bindings = rest\n\t\tlet extraParam\n\t\tif (mode === 'first' || mode === 'raw') {\n\t\t\textraParam = rest[rest.length - 1]\n\t\t\tbindings = rest.slice(0, -1)\n\t\t}\n\t\tlet stmt = binding.prepare(sql)\n\t\tif (bindings.length > 0) stmt = stmt.bind(...bindings)\n\t\tif (mode === 'first') {\n\t\t\tif (typeof extraParam === 'string' && extraParam.length > 0) return stmt.first(extraParam)\n\t\t\treturn stmt.first()\n\t\t}\n\t\tif (mode === 'all') return stmt.all()\n\t\tif (mode === 'run') return stmt.run()\n\t\tif (mode === 'raw') return stmt.raw(extraParam)\n\t\tthrow new Error('Unknown stmt mode: ' + mode)\n\t}\n\n\t// Durable Objects\n\tif (operation === 'do.idFromName') {\n\t\tconst ns = resolveDoNamespace(binding, params[1])\n\t\tconst id = ns.idFromName(params[0])\n\t\treturn { __type: 'DOId', hex: id.toString() }\n\t}\n\tif (operation === 'do.idFromString') {\n\t\tconst id = binding.idFromString(params[0])\n\t\treturn { __type: 'DOId', hex: id.toString() }\n\t}\n\tif (operation === 'do.newUniqueId') {\n\t\tconst ns = resolveDoNamespace(binding, params[1])\n\t\tconst id = ns.newUniqueId(params[0])\n\t\treturn { __type: 'DOId', hex: id.toString() }\n\t}\n\tif (operation === 'do.fetch') {\n\t\tconst [, serializedId, serializedReq] = params\n\t\tconst id = binding.idFromString(serializedId.hex)\n\t\tconst stub = binding.get(id)\n\t\tconst response = await stub.fetch(new Request(serializedReq.url, {\n\t\t\tmethod: serializedReq.method,\n\t\t\theaders: serializedReq.headers,\n\t\t\tbody: serializedReq.body?.type === 'bytes'\n\t\t\t\t? base64ToArrayBuffer(serializedReq.body.data)\n\t\t\t\t: undefined\n\t\t}))\n\t\treturn serializeResponse(response)\n\t}\n\tif (operation === 'do.rpc') {\n\t\tconst [, serializedId, methodName, args] = params\n\t\tconst id = binding.idFromString(serializedId.hex)\n\t\tconst stub = binding.get(id)\n\t\treturn callDurableObjectRpc(stub, methodName, Array.isArray(args) ? args : [])\n\t}\n\n\t// Service Bindings\n\tif (operation === 'service.fetch') {\n\t\tif (!binding || typeof binding.fetch !== 'function') {\n\t\t\tthrow new Error('Service binding ' + bindingName + ' does not support fetch()')\n\t\t}\n\t\tconst response = await binding.fetch(deserializeRequest(params[0]))\n\t\treturn serializeResponse(response)\n\t}\n\tif (operation === 'service.rpc') {\n\t\tconst methodName = params[0]\n\t\tif (typeof methodName !== 'string') {\n\t\t\tthrow new Error('Service binding ' + bindingName + ' RPC method name must be a string')\n\t\t}\n\t\tconst args = Array.isArray(params[1]) ? params[1] : []\n\t\tconst method = binding && binding[methodName]\n\t\tif (typeof method !== 'function') {\n\t\t\tthrow new Error('Service binding ' + bindingName + ' does not support ' + methodName + '()')\n\t\t}\n\t\treturn method.apply(binding, args)\n\t}\n\n\t// Queues\n\tif (operation === 'queue.send') return binding.send(params[0], params[1])\n\tif (operation === 'queue.sendBatch') return binding.sendBatch(params[0], params[1])\n\n\t// Send Email\n\tif (operation === 'email.send') {\n\t\tif (binding && typeof binding.send === 'function') {\n\t\t\tconst message = params[0]\n\t\t\tif (message && typeof message === 'object' && 'from' in message && 'to' in message && 'raw' in message) {\n\t\t\t\treturn binding.send({\n\t\t\t\t\tfrom: message.from,\n\t\t\t\t\tto: message.to,\n\t\t\t\t\t[RAW_EMAIL]: createEmailMessageRaw(message.raw)\n\t\t\t\t})\n\t\t\t}\n\t\t\treturn binding.send(message)\n\t\t}\n\t\treturn { ok: true, simulated: true }\n\t}\n\n\t// Workflows\n\tif (operation === 'workflow.create') {\n\t\treturn serializeWorkflowInstance(await binding.create(params[0]))\n\t}\n\tif (operation === 'workflow.get') {\n\t\treturn serializeWorkflowInstance(await binding.get(params[0]))\n\t}\n\tif (operation === 'workflow.status') {\n\t\treturn (await binding.get(params[0])).status()\n\t}\n\tif (operation === 'workflow.pause') {\n\t\treturn (await binding.get(params[0])).pause()\n\t}\n\tif (operation === 'workflow.resume') {\n\t\treturn (await binding.get(params[0])).resume()\n\t}\n\tif (operation === 'workflow.terminate') {\n\t\treturn (await binding.get(params[0])).terminate()\n\t}\n\tif (operation === 'workflow.restart') {\n\t\treturn (await binding.get(params[0])).restart()\n\t}\n\tif (operation === 'workflow.sendEvent') {\n\t\treturn (await binding.get(params[0])).sendEvent(params[1])\n\t}\n\n\t// AI / generic run()\n\tif (operation === 'ai.run') {\n\t\tif (typeof binding.run !== 'function') {\n\t\t\tthrow new Error('Binding ' + bindingName + ' does not support run(): ' + method)\n\t\t}\n\t\treturn binding.run(params[0], params[1])\n\t}\n\n\tthrow new Error('Unknown operation: ' + method)\n}\n\nfunction createUnsupportedBridgeOperationErrorMessage(bindingName, operation) {\n\tconst base = \"[devflare][bridge] Unsupported bridge operation '\" + operation + \"' for binding '\" + bindingName + \"'.\"\n\tif (operation === 'fetch') {\n\t\treturn base + ' Devflare could not dispatch fetch() for this binding through the local bridge. '\n\t\t\t+ 'Expected Cloudflare API: env.' + bindingName + '.fetch(request). '\n\t\t\t+ 'If this came from SvelteKit platform.env, make sure the binding is declared as a service binding; '\n\t\t\t+ 'this is a Devflare local bridge issue when service bindings fall back to a bare fetch operation.'\n\t}\n\tif (operation === 'toString') {\n\t\treturn base + ' A platform.env value was coerced to a string through the bridge. '\n\t\t\t+ 'For SvelteKit local dev, declared vars should be plain string values and missing env names should read as undefined.'\n\t}\n\treturn base + ' Bare verbs and the legacy stmt.*/stub.* sub-prefixes are not supported; '\n\t\t+ 'use the namespaced form (e.g. kv.get, r2.put, d1.stmt.first, do.fetch, service.fetch).'\n}\n\nfunction serializeWorkflowInstance(instance) {\n\treturn {\n\t\t__type: 'WorkflowInstance',\n\t\tid: instance.id\n\t}\n}\n\n// ---------------------------------------------------------------------------\n// WebSocket bridge (shared with src/bridge/server.ts in shape)\n// ---------------------------------------------------------------------------\n// NOTE: wsProxies is intentionally created per handleBridgeWebSocket call so\n// state never leaks across connections or across gateway-script regenerations.\n\nasync function handleBridgeRpcCall(msg, ws, env, ctx) {\n\ttry {\n\t\tconst result = await executeRpcMethod(msg.method, msg.params, env, ctx)\n\t\tws.send(JSON.stringify({ t: 'rpc.ok', id: msg.id, result }))\n\t} catch (error) {\n\t\tws.send(JSON.stringify({\n\t\t\tt: 'rpc.err',\n\t\t\tid: msg.id,\n\t\t\terror: {\n\t\t\t\tcode: error?.code || 'INTERNAL_ERROR',\n\t\t\t\tmessage: error?.message || String(error)\n\t\t\t}\n\t\t}))\n\t}\n}\n\nasync function handleBridgeWsOpen(msg, ws, env, wsProxies) {\n\ttry {\n\t\tconst binding = env[msg.target.binding]\n\t\tconst id = binding.idFromString(msg.target.id)\n\t\tconst stub = binding.get(id)\n\n\t\tconst headers = new Headers(msg.target.headers || [])\n\t\theaders.set('Upgrade', 'websocket')\n\n\t\tconst response = await stub.fetch(new Request(msg.target.url, { method: 'GET', headers }))\n\t\tconst doWs = response.webSocket\n\n\t\tif (!doWs) {\n\t\t\tws.send(JSON.stringify({\n\t\t\t\tt: 'rpc.err',\n\t\t\t\tid: 'ws_' + msg.wid,\n\t\t\t\terror: { code: 'WS_FAILED', message: 'No WebSocket returned' }\n\t\t\t}))\n\t\t\treturn\n\t\t}\n\n\t\tdoWs.accept()\n\t\twsProxies.set(msg.wid, { doWs })\n\n\t\tdoWs.addEventListener('message', (event) => {\n\t\t\tconst isText = typeof event.data === 'string'\n\t\t\tconst payload = isText\n\t\t\t\t? new TextEncoder().encode(event.data)\n\t\t\t\t: new Uint8Array(event.data)\n\t\t\tconst flags = isText ? 2 : 0\n\t\t\tws.send(encodeWsDataFrame(msg.wid, flags, payload))\n\t\t})\n\n\t\tdoWs.addEventListener('close', (event) => {\n\t\t\tws.send(JSON.stringify({ t: 'ws.close', wid: msg.wid, code: event.code, reason: event.reason }))\n\t\t\twsProxies.delete(msg.wid)\n\t\t})\n\n\t\tws.send(JSON.stringify({ t: 'ws.opened', wid: msg.wid }))\n\t} catch (error) {\n\t\tws.send(JSON.stringify({\n\t\t\tt: 'rpc.err',\n\t\t\tid: 'ws_' + msg.wid,\n\t\t\terror: { code: 'WS_FAILED', message: error.message }\n\t\t}))\n\t}\n}\n\nfunction handleBridgeWsClose(msg, wsProxies) {\n\tconst proxy = wsProxies.get(msg.wid)\n\tif (proxy) {\n\t\tproxy.doWs.close(msg.code, msg.reason)\n\t\twsProxies.delete(msg.wid)\n\t}\n}\n\n// Relay an inbound binary WsData frame (client -> DO). Mirrors server.ts\n// handleBinaryMessage: decode the frame, look up the proxy by ws id, and forward\n// the payload to the DO socket honoring the TEXT flag.\nfunction handleBridgeBinaryMessage(buffer, wsProxies) {\n\tconst frame = decodeWsDataFrame(buffer)\n\tif (!frame || frame.kind !== 2) return\n\tconst proxy = wsProxies.get(frame.id)\n\tif (!proxy) return\n\tif ((frame.flags & 2) !== 0) {\n\t\tproxy.doWs.send(new TextDecoder().decode(frame.payload))\n\t} else {\n\t\tproxy.doWs.send(frame.payload)\n\t}\n}\n\nasync function handleBridgeJsonMessage(data, ws, env, ctx, wsProxies) {\n\tconst msg = JSON.parse(data)\n\tswitch (msg.t) {\n\t\tcase 'hello':\n\t\t\t// v2 handshake \u2014 acknowledge with welcome echoing the negotiated\n\t\t\t// capability intersection. The gateway advertises only what it\n\t\t\t// implements end-to-end: 'ws-relay' (binary WsData relay to/from DO\n\t\t\t// sockets) and 'http-transfer' (the R2 transfer HTTP side-channel).\n\t\t\t// 'streams' is intentionally NOT advertised \u2014 large DO/service-fetch\n\t\t\t// responses are inlined, not streamed, in this gateway.\n\t\t\tws.send(JSON.stringify({\n\t\t\t\tt: 'welcome',\n\t\t\t\tprotocolVersion: 2,\n\t\t\t\tcapabilities: ['ws-relay', 'http-transfer']\n\t\t\t\t\t.filter((c) => Array.isArray(msg.capabilities) && msg.capabilities.includes(c))\n\t\t\t\t\t.sort()\n\t\t\t}))\n\t\t\tbreak\n\t\tcase 'rpc.call':\n\t\t\tawait handleBridgeRpcCall(msg, ws, env, ctx)\n\t\t\tbreak\n\t\tcase 'ws.open':\n\t\t\tawait handleBridgeWsOpen(msg, ws, env, wsProxies)\n\t\t\tbreak\n\t\tcase 'ws.close':\n\t\t\thandleBridgeWsClose(msg, wsProxies)\n\t\t\tbreak\n\t}\n}\n\n// Pass-through DO WebSocket upgrade (bridge client -> gateway -> DO).\n//\n// The bridge client's openDoWebSocket() opens a REAL loopback WebSocket to this\n// endpoint (/_devflare/do-ws?binding&id&u) instead of tunneling frames over the\n// bridge socket. We resolve the DO by id and RETURN the DO's 101 response\n// verbatim (webSocket included), so miniflare wires the inbound connection to\n// the DO's client socket. That genuine inbound connection is what makes workerd\n// dispatch the DO's hibernation handlers (webSocketMessage/webSocketClose) and\n// deliver ctx.getWebSockets() broadcasts. Pumping the DO socket in-process (the\n// legacy handleBridgeWsOpen path) never triggers hibernation, so two sockets to\n// one getByName(id) could not see each other's messages. This mirrors the\n// browser WS_ROUTES pass-through (handleDoWebSocket) and real Cloudflare.\n//\n// NOTE: the devflare/test gateway (src/test/simple-context-gateway-script.ts)\n// keeps a byte-equivalent copy of this handler because it is a separately-bundled\n// Worker template that cannot import this runtime \u2014 keep the two in sync.\nasync function handleBridgeDoWebSocket(request, env, url) {\n\ttry {\n\t\tconst bindingName = url.searchParams.get('binding')\n\t\tconst idHex = url.searchParams.get('id')\n\t\tconst targetUrl = url.searchParams.get('u') || url.toString()\n\n\t\tconst binding = env[bindingName]\n\t\tif (!binding || typeof binding.idFromString !== 'function') {\n\t\t\treturn new Response('Durable Object binding not found: ' + bindingName, { status: 500 })\n\t\t}\n\t\tif (!idHex) {\n\t\t\treturn new Response('Missing Durable Object id', { status: 400 })\n\t\t}\n\n\t\tconst stub = binding.get(binding.idFromString(idHex))\n\t\t// Forward the real upgrade request (its headers carry any auth/cookies the\n\t\t// caller passed to connect()) and pass the DO's 101 response straight back.\n\t\treturn stub.fetch(new Request(targetUrl, { method: 'GET', headers: request.headers }))\n\t} catch (error) {\n\t\treturn new Response('Error opening DO WebSocket: ' + (error?.message || String(error)), {\n\t\t\tstatus: 500\n\t\t})\n\t}\n}\n\nfunction handleBridgeWebSocket(request, env, ctx) {\n\tconst { 0: client, 1: server } = new WebSocketPair()\n\tserver.accept()\n\n\t// Per-connection state: recreated for every bridge client so reloads and\n\t// concurrent clients never share WS proxy entries.\n\tconst wsProxies = new Map()\n\n\tserver.addEventListener('message', async (event) => {\n\t\ttry {\n\t\t\tif (typeof event.data === 'string') {\n\t\t\t\tawait handleBridgeJsonMessage(event.data, server, env, ctx, wsProxies)\n\t\t\t} else {\n\t\t\t\thandleBridgeBinaryMessage(event.data, wsProxies)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconsole.error('[Gateway] Error:', error)\n\t\t}\n\t})\n\n\tserver.addEventListener('close', () => {\n\t\tfor (const proxy of wsProxies.values()) {\n\t\t\t// Best-effort cleanup: the DO-side WS may already be closed or in an\n\t\t\t// invalid state; any throw here would abort sibling closes. Surface\n\t\t\t// the swallowed error when DEVFLARE_DEBUG_BRIDGE is enabled.\n\t\t\ttry { proxy.doWs.close() } catch (error) {\n\t\t\t\tif (globalThis.DEVFLARE_DEBUG_BRIDGE) {\n\t\t\t\t\tconsole.warn('[devflare:bridge] proxy.doWs.close() failed', error)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\twsProxies.clear()\n\t})\n\n\treturn new Response(null, { status: 101, webSocket: client })\n}\n\n// ---------------------------------------------------------------------------\n// HTTP transfer for R2 bodies (shared with src/bridge/server.ts in shape)\n// ---------------------------------------------------------------------------\n\nasync function handleHttpTransfer(request, env, url) {\n\tconst transferIdEncoded = url.pathname.split('/').pop()\n\tconst transferId = decodeURIComponent(transferIdEncoded || '')\n\tconst [binding, ...keyParts] = transferId.split(':')\n\tconst key = keyParts.join(':')\n\tconst bucket = env[binding]\n\n\tif (!bucket) return new Response('Bucket not found: ' + binding, { status: 404 })\n\n\tif (request.method === 'PUT' || request.method === 'POST') {\n\t\tconst result = await bucket.put(key, request.body)\n\t\treturn new Response(JSON.stringify(serializeR2Object(result)), {\n\t\t\theaders: { 'Content-Type': 'application/json' }\n\t\t})\n\t}\n\n\tif (request.method === 'GET') {\n\t\tconst object = await bucket.get(key)\n\t\tif (!object) return new Response('Not found', { status: 404 })\n\t\treturn new Response(object.body, {\n\t\t\theaders: {\n\t\t\t\t'Content-Type': object.httpMetadata?.contentType || 'application/octet-stream',\n\t\t\t\t'Content-Length': String(object.size)\n\t\t\t}\n\t\t})\n\t}\n\n\treturn new Response('Method not allowed', { status: 405 })\n}\n";
 //# sourceMappingURL=gateway-runtime.d.ts.map

package/dist/bridge/gateway-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-runtime.d.ts","sourceRoot":"","sources":["../../src/bridge/gateway-runtime.ts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,+1pBAilB9B,CAAA"}
+{"version":3,"file":"gateway-runtime.d.ts","sourceRoot":"","sources":["../../src/bridge/gateway-runtime.ts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,6xwBAupB9B,CAAA"}

package/dist/bridge/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/bridge/proxy.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,UAAU,CAAA;AAavD,MAAM,WAAW,eAAe;IAC/B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,qCAAqC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uEAAuE;IACvE,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAA;CAC9C;AAgoBD,mDAAmD;AACnD,MAAM,MAAM,WAAW,GACpB,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,OAAO,GACP,IAAI,GACJ,SAAS,GACT,WAAW,GACX,UAAU,GACV,QAAQ,GACR,KAAK,CAAA;AAER,MAAM,WAAW,YAAY;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;CAC1B;AAKD;;GAEG;AACH,wBAAgB,cAAc,CAC7B,OAAO,GAAE,eAAe,GAAG;IAAE,KAAK,CAAC,EAAE,YAAY,CAAA;CAAO,GACtD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoFzB;AAwFD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAO5C,CAAA;AAEF;;GAEG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAE,eAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG9E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAIzD"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/bridge/proxy.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,UAAU,CAAA;AAavD,MAAM,WAAW,eAAe;IAC/B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,qCAAqC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uEAAuE;IACvE,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAA;CAC9C;AAooBD,mDAAmD;AACnD,MAAM,MAAM,WAAW,GACpB,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,OAAO,GACP,IAAI,GACJ,SAAS,GACT,WAAW,GACX,UAAU,GACV,QAAQ,GACR,KAAK,CAAA;AAER,MAAM,WAAW,YAAY;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;CAC1B;AAKD;;GAEG;AACH,wBAAgB,cAAc,CAC7B,OAAO,GAAE,eAAe,GAAG;IAAE,KAAK,CAAC,EAAE,YAAY,CAAA;CAAO,GACtD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoFzB;AAwFD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAO5C,CAAA;AAEF;;GAEG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAE,eAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG9E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAIzD"}

package/dist/bridge/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAuCA,MAAM,WAAW,UAAU;IAE1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACtB;;IAiBM,KAAK,UAAU,OAAO,OAAO,UAAU,OAAO,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;;;AA+LzF,wBAAsB,gBAAgB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EAAE,EACjB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,gBAAgB,GACnB,OAAO,CAAC,OAAO,CAAC,CA+KlB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/bridge/server.ts"],"names":[],"mappings":"AAwCA,MAAM,WAAW,UAAU;IAE1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACtB;;IAiBM,KAAK,UAAU,OAAO,OAAO,UAAU,OAAO,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;;;AA+LzF,wBAAsB,gBAAgB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EAAE,EACjB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,gBAAgB,GACnB,OAAO,CAAC,OAAO,CAAC,CA+KlB"}

package/dist/bridge/websocket-constructor.d.ts

@@ -0,0 +1,38 @@
+/** A WebSocket constructor callable as `new Ctor(url)`. */
+export type WebSocketConstructor = new (url: string) => WebSocket;
+/**
+ * Lazily import the `ws` package's WebSocket constructor (memoized). Used as the
+ * Node fallback and whenever custom upgrade headers are required — unlike the
+ * platform global, the `ws` constructor accepts an options object with headers.
+ *
+ * @returns The `ws` package WebSocket constructor.
+ * @throws When the `ws` package does not export a usable WebSocket implementation.
+ */
+export declare function importWsPackageConstructor(): Promise<WebSocketConstructor>;
+/**
+ * Return the runtime's global WebSocket constructor, or null when the runtime
+ * has none (older Node without a global WebSocket).
+ *
+ * @param runtimeWebSocket - The candidate global (defaults to `globalThis.WebSocket`).
+ * @returns The global constructor, or null.
+ */
+export declare function getRuntimeWebSocketConstructor(runtimeWebSocket?: unknown): WebSocketConstructor | null;
+/**
+ * Resolve a WebSocket constructor for the bridge socket: prefer the runtime
+ * global, fall back to the `ws` package.
+ *
+ * @param runtimeWebSocket - The candidate global (defaults to `globalThis.WebSocket`).
+ * @returns A usable WebSocket constructor.
+ */
+export declare function resolveBridgeWebSocketConstructor(runtimeWebSocket?: unknown): Promise<WebSocketConstructor>;
+/**
+ * Resolve the WebSocket constructor for a Durable Object pass-through
+ * connection. Custom upgrade headers require the `ws` package (whose constructor
+ * accepts an options object); the global WebSocket (undici/Bun) cannot set
+ * request headers, so it is used only when there are no headers to forward.
+ *
+ * @param hasHeaders - Whether application headers must ride the upgrade request.
+ * @returns A WebSocket constructor suitable for the connection.
+ */
+export declare function resolveDoWebSocketConstructor(hasHeaders: boolean): Promise<WebSocketConstructor>;
+//# sourceMappingURL=websocket-constructor.d.ts.map

package/dist/bridge/websocket-constructor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket-constructor.d.ts","sourceRoot":"","sources":["../../src/bridge/websocket-constructor.ts"],"names":[],"mappings":"AAUA,2DAA2D;AAC3D,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;AAIjE;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,oBAAoB,CAAC,CA4BhF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC7C,gBAAgB,GAAE,OAA8B,GAC9C,oBAAoB,GAAG,IAAI,CAM7B;AAED;;;;;;GAMG;AACH,wBAAsB,iCAAiC,CACtD,gBAAgB,GAAE,OAA8B,GAC9C,OAAO,CAAC,oBAAoB,CAAC,CAK/B;AAED;;;;;;;;GAQG;AACH,wBAAsB,6BAA6B,CAClD,UAAU,EAAE,OAAO,GACjB,OAAO,CAAC,oBAAoB,CAAC,CAG/B"}

package/dist/browser.js

@@ -1,8 +1,8 @@
 import { n as defineConfig, t as ref } from "./_chunks/ref-CYJNAAe_.js";
 import { t as workerName } from "./_chunks/workerName-CFJsLZA-.js";
 import { n as getDurableObjectOptions, t as durableObject } from "./_chunks/decorators-QmV57ixr.js";
-import { F as BridgeClient, I as getClient, M as createEnvProxy, N as initEnv, P as setBindingHints } from "./_chunks/context-CX50Y2Kb.js";
-import { i as vars, r as env } from "./_chunks/env-S0_nMVz1.js";
+import { F as BridgeClient, I as getClient, M as createEnvProxy, N as initEnv, P as setBindingHints } from "./_chunks/context-B6S7cqQW.js";
+import { i as vars, r as env } from "./_chunks/env-UqevBSTd.js";
 //#region src/browser.ts
 function createUnsupportedApiError(name) {
 	return /* @__PURE__ */ new Error(`${name} is not available in browser environments; import from devflare/test or devflare/runtime in a worker/Node context instead.`);

package/dist/cli/index.js

@@ -1,2 +1,2 @@
-import { n as runCli, t as parseArgs } from "../_chunks/cli-BlVetiEh.js";
+import { n as runCli, t as parseArgs } from "../_chunks/cli-sOZfXGua.js";
 export { parseArgs, runCli };

package/dist/dev-server/gateway-script.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-script.d.ts","sourceRoot":"","sources":["../../src/dev-server/gateway-script.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAE9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAC/B,QAAQ,GAAE,aAAa,EAAO,EAC9B,KAAK,UAAQ,EACb,qBAAqB,GAAE,MAAM,GAAG,IAAW,GACzC,MAAM,CAuQR"}
+{"version":3,"file":"gateway-script.d.ts","sourceRoot":"","sources":["../../src/dev-server/gateway-script.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAE9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAC/B,QAAQ,GAAE,aAAa,EAAO,EAC9B,KAAK,UAAQ,EACb,qBAAqB,GAAE,MAAM,GAAG,IAAW,GACzC,MAAM,CA4QR"}

package/dist/index.js

@@ -4,6 +4,6 @@ import { a as ConfigResourceResolutionError, d as configSchema, n as ConfigValid
 import { n as compileConfig, s as stringifyConfig } from "./_chunks/compiler-CgIFPfRA.js";
 import { t as workerName } from "./_chunks/workerName-CFJsLZA-.js";
 import { n as getDurableObjectOptions, t as durableObject } from "./_chunks/decorators-QmV57ixr.js";
-import { n as runCli, t as parseArgs } from "./_chunks/cli-BlVetiEh.js";
-import { i as vars, r as env } from "./_chunks/env-S0_nMVz1.js";
+import { n as runCli, t as parseArgs } from "./_chunks/cli-sOZfXGua.js";
+import { i as vars, r as env } from "./_chunks/env-UqevBSTd.js";
 export { ConfigNotFoundError, ConfigResourceResolutionError, ConfigValidationError, compileConfig, configSchema, defineConfig as default, defineConfig, durableObject, env, getDurableObjectOptions, loadConfig, loadResolvedConfig, parseArgs, preview, ref, runCli, stringifyConfig, vars, workerName };

package/dist/runtime/index.js

@@ -1,5 +1,5 @@
 import { n as getDurableObjectOptions, t as durableObject } from "../_chunks/decorators-QmV57ixr.js";
-import { A as createTailEvent, C as createDurableObjectWebSocketCloseEvent, D as createFetchEvent, E as createEmailEvent, O as createQueueEvent, S as createDurableObjectFetchEvent, T as createDurableObjectWebSocketMessageEvent, _ as runWithContext, a as getDurableObjectFetchEvent, b as createContextProxy, c as getDurableObjectWebSocketMessageEvent, d as getEventContextOrNull, f as getFetchEvent, g as hasContext, h as getTailEvent, i as getDurableObjectEvent, k as createScheduledEvent, l as getEmailEvent, m as getScheduledEvent, n as getContextOrNull, o as getDurableObjectWebSocketCloseEvent, p as getQueueEvent, r as getDurableObjectAlarmEvent, s as getDurableObjectWebSocketErrorEvent, t as getContext, u as getEventContext, v as runWithEventContext, w as createDurableObjectWebSocketErrorEvent, x as createDurableObjectAlarmEvent, y as ContextAccessError } from "../_chunks/context-CX50Y2Kb.js";
+import { A as createTailEvent, C as createDurableObjectWebSocketCloseEvent, D as createFetchEvent, E as createEmailEvent, O as createQueueEvent, S as createDurableObjectFetchEvent, T as createDurableObjectWebSocketMessageEvent, _ as runWithContext, a as getDurableObjectFetchEvent, b as createContextProxy, c as getDurableObjectWebSocketMessageEvent, d as getEventContextOrNull, f as getFetchEvent, g as hasContext, h as getTailEvent, i as getDurableObjectEvent, k as createScheduledEvent, l as getEmailEvent, m as getScheduledEvent, n as getContextOrNull, o as getDurableObjectWebSocketCloseEvent, p as getQueueEvent, r as getDurableObjectAlarmEvent, s as getDurableObjectWebSocketErrorEvent, t as getContext, u as getEventContext, v as runWithEventContext, w as createDurableObjectWebSocketErrorEvent, x as createDurableObjectAlarmEvent, y as ContextAccessError } from "../_chunks/context-B6S7cqQW.js";
 import { clearLocalSendEmailBindings, setLocalSendEmailBindings } from "../utils/send-email.js";
-import { C as vars, S as locals, _ as resolveFetchHandler, a as matchFetchRoute, b as env, c as assertExplicitScheduledHandlerStyle, d as defineQueueHandler, f as defineScheduledHandler, g as markWorkerStyle, h as markResolveStyle, i as invokeRouteModules, l as createResolveFetch, m as invokeFetchModule, n as presignR2Put, o as assertExplicit2ArgStyle, p as invokeFetchHandler, r as createRouteResolve, s as assertExplicitQueueHandlerStyle, t as presignR2Get, u as defineFetchHandler, v as sequence, x as event, y as ctx } from "../_chunks/runtime-RekfD_2X.js";
+import { C as vars, S as locals, _ as resolveFetchHandler, a as matchFetchRoute, b as env, c as assertExplicitScheduledHandlerStyle, d as defineQueueHandler, f as defineScheduledHandler, g as markWorkerStyle, h as markResolveStyle, i as invokeRouteModules, l as createResolveFetch, m as invokeFetchModule, n as presignR2Put, o as assertExplicit2ArgStyle, p as invokeFetchHandler, r as createRouteResolve, s as assertExplicitQueueHandlerStyle, t as presignR2Get, u as defineFetchHandler, v as sequence, x as event, y as ctx } from "../_chunks/runtime-sEr9b0ns.js";
 export { ContextAccessError, assertExplicit2ArgStyle, assertExplicitQueueHandlerStyle, assertExplicitScheduledHandlerStyle, clearLocalSendEmailBindings, createContextProxy, createDurableObjectAlarmEvent, createDurableObjectFetchEvent, createDurableObjectWebSocketCloseEvent, createDurableObjectWebSocketErrorEvent, createDurableObjectWebSocketMessageEvent, createEmailEvent, createFetchEvent, createQueueEvent, createResolveFetch, createRouteResolve, createScheduledEvent, createTailEvent, ctx, defineFetchHandler, defineQueueHandler, defineScheduledHandler, durableObject, env, event, getContext, getContextOrNull, getDurableObjectAlarmEvent, getDurableObjectEvent, getDurableObjectFetchEvent, getDurableObjectOptions, getDurableObjectWebSocketCloseEvent, getDurableObjectWebSocketErrorEvent, getDurableObjectWebSocketMessageEvent, getEmailEvent, getEventContext, getEventContextOrNull, getFetchEvent, getQueueEvent, getScheduledEvent, getTailEvent, hasContext, invokeFetchHandler, invokeFetchModule, invokeRouteModules, locals, markResolveStyle, markWorkerStyle, matchFetchRoute, presignR2Get, presignR2Put, resolveFetchHandler, runWithContext, runWithEventContext, sequence, setLocalSendEmailBindings, vars };

package/dist/sveltekit/index.js

@@ -1,6 +1,6 @@
 import { r as loadConfig } from "../_chunks/loader-E_UGyTrJ.js";
 import { l as normalizeHyperdriveBinding } from "../_chunks/schema-normalization-Zgm4W6O6.js";
-import { D as createFetchEvent, I as getClient, M as createEnvProxy, P as setBindingHints, v as runWithEventContext } from "../_chunks/context-CX50Y2Kb.js";
+import { D as createFetchEvent, I as getClient, M as createEnvProxy, P as setBindingHints, v as runWithEventContext } from "../_chunks/context-B6S7cqQW.js";
 import { createLocalSendEmailBinding } from "../utils/send-email.js";
 import { i as extractBindingHints, n as createLocalWorkerLoaderBinding, t as createLocalHyperdrive } from "../_chunks/local-hyperdrive-CJ90j46O.js";
 import { t as buildLocalSecretNodeBindings } from "../_chunks/local-secrets-6sMstHXw.js";

package/dist/test/index.js

@@ -4,10 +4,10 @@ import { _ as normalizeSecretsStoreBinding, f as normalizeMediaBinding, h as nor
 import { t as applyLocalDevVarsToConfig } from "../_chunks/local-dev-vars-CTSa-wvF.js";
 import { g as isAuthenticated, p as getApiToken } from "../_chunks/api-TzdliH-6.js";
 import { d as getPrimaryAccount, n as getEffectiveAccountId } from "../_chunks/preferences-BKp_7XJx.js";
-import { A as createTailEvent, D as createFetchEvent, E as createEmailEvent, F as BridgeClient, M as createEnvProxy, O as createQueueEvent, P as setBindingHints, _ as runWithContext, k as createScheduledEvent, v as runWithEventContext, x as createDurableObjectAlarmEvent } from "../_chunks/context-CX50Y2Kb.js";
+import { A as createTailEvent, D as createFetchEvent, E as createEmailEvent, F as BridgeClient, M as createEnvProxy, O as createQueueEvent, P as setBindingHints, _ as runWithContext, k as createScheduledEvent, v as runWithEventContext, x as createDurableObjectAlarmEvent } from "../_chunks/context-B6S7cqQW.js";
 import { createLocalSendEmailBinding, wrapEnvSendEmailBindings } from "../utils/send-email.js";
-import { n as __setTestContext, r as env, t as __clearTestContext } from "../_chunks/env-S0_nMVz1.js";
-import { _ as resolveFetchHandler, a as matchFetchRoute, m as invokeFetchModule, r as createRouteResolve } from "../_chunks/runtime-RekfD_2X.js";
+import { n as __setTestContext, r as env, t as __clearTestContext } from "../_chunks/env-UqevBSTd.js";
+import { _ as resolveFetchHandler, a as matchFetchRoute, m as invokeFetchModule, r as createRouteResolve } from "../_chunks/runtime-sEr9b0ns.js";
 import { i as extractBindingHints, n as createLocalWorkerLoaderBinding, r as disposeLocalWorkerLoaderBindings, t as createLocalHyperdrive } from "../_chunks/local-hyperdrive-CJ90j46O.js";
 import { E as buildTailConsumersConfig, T as buildStreamingTailConsumersConfig, a as hasServiceBindings, i as hasCrossWorkerDOs, m as buildHyperdrivesConfig, o as resolveDOBindings, r as clearBundleCache, s as resolveServiceBindings, t as discoverRoutes, u as buildAnalyticsEngineConfig } from "../_chunks/routes-BMU7ga_l.js";
 import { i as findFiles, t as DEFAULT_DO_PATTERN } from "../_chunks/glob-CmQOvunB.js";
@@ -1617,6 +1617,39 @@ function __encodeTransport(value) {
 export default {
 	async fetch(request, env) {
 		if (request.headers.get('Upgrade') === 'websocket') {
+			const wsUrl = new URL(request.url)
+			// Bridge DO connect(): a real pass-through upgrade to a Durable Object.
+			// The client's openDoWebSocket() opens a real loopback WS here rather
+			// than tunneling frames over the RPC socket; we forward the upgrade to
+			// the DO and pass its 101 response straight back so miniflare wires the
+			// inbound connection to the DO's client socket. That genuine inbound
+			// connection is what makes the runtime dispatch the DO's hibernation
+			// handlers (webSocketMessage/webSocketClose) and deliver
+			// ctx.getWebSockets() broadcasts — an in-process pump never does.
+			//
+			// This is a byte-equivalent copy of handleBridgeDoWebSocket in
+			// src/bridge/gateway-runtime.ts (this gateway is a separately-bundled
+			// Worker template that cannot import that runtime) — keep the two in sync.
+			if (wsUrl.pathname === '/_devflare/do-ws') {
+				try {
+					const bindingName = wsUrl.searchParams.get('binding')
+					const idHex = wsUrl.searchParams.get('id')
+					const targetUrl = wsUrl.searchParams.get('u') || request.url
+					const doBinding = env[bindingName]
+					if (!doBinding || typeof doBinding.idFromString !== 'function') {
+						return new Response('Durable Object binding not found: ' + bindingName, { status: 500 })
+					}
+					if (!idHex) {
+						return new Response('Missing Durable Object id', { status: 400 })
+					}
+					const stub = doBinding.get(doBinding.idFromString(idHex))
+					return stub.fetch(new Request(targetUrl, { method: 'GET', headers: request.headers }))
+				} catch (error) {
+					return new Response('Error opening DO WebSocket: ' + (error?.message || String(error)), {
+						status: 500
+					})
+				}
+			}
 			const { 0: client, 1: server } = new WebSocketPair()
 			server.accept()
 			server.addEventListener('message', async (e) => {

package/dist/test/simple-context-gateway-script.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simple-context-gateway-script.d.ts","sourceRoot":"","sources":["../../src/test/simple-context-gateway-script.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,CACjC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,qBAAqB,GAAE,MAAM,EAAO,GAClC,MAAM,CA0NR"}
+{"version":3,"file":"simple-context-gateway-script.d.ts","sourceRoot":"","sources":["../../src/test/simple-context-gateway-script.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,CACjC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,qBAAqB,GAAE,MAAM,EAAO,GAClC,MAAM,CA2PR"}

package/dist/vite/index.js

@@ -1,2 +1,2 @@
-import { a as devflarePlugin, c as getDevflareConfigs, i as writeGeneratedViteConfig, n as resolveEffectiveViteProject, o as getPluginContext, r as resolveViteUserConfig, s as getCloudflareConfig, t as hasInlineViteConfig } from "../_chunks/vite-CtvgOi1c.js";
+import { a as devflarePlugin, c as getDevflareConfigs, i as writeGeneratedViteConfig, n as resolveEffectiveViteProject, o as getPluginContext, r as resolveViteUserConfig, s as getCloudflareConfig, t as hasInlineViteConfig } from "../_chunks/vite-CzqppgNp.js";
 export { devflarePlugin as default, devflarePlugin, getCloudflareConfig, getDevflareConfigs, getPluginContext, hasInlineViteConfig, resolveEffectiveViteProject, resolveViteUserConfig, writeGeneratedViteConfig };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "devflare",
-	"version": "1.0.0-next.60",
+	"version": "1.0.0-next.62",
 	"description": "Devflare is a developer-first toolkit for Cloudflare Workers that sits on top of Miniflare and Wrangler-compatible config",
 	"repository": {
 		"type": "git",
@@ -84,7 +84,7 @@
 		"test:unit": "bun test tests/unit",
 		"test:coverage": "bun test tests/unit --coverage",
 		"test:integration:control": "bun test tests/integration/cli tests/integration/examples tests/integration/package-entry tests/integration/vite",
-		"test:integration:bridge": "bun test tests/integration/bridge/bridge-proxy.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/case18-do.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/durable-object.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/do-websocket.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/miniflare.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/r2-transfer.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/r2-presign.test.ts --parallel=1 --max-concurrency=1",
+		"test:integration:bridge": "bun test tests/integration/bridge/bridge-proxy.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/case18-do.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/durable-object.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/do-websocket.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/do-rpc-native.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/do-websocket-hibernation.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/do-websocket-hibernation-test-context.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/miniflare.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/r2-transfer.test.ts --parallel=1 --max-concurrency=1 && bun test tests/integration/bridge/r2-presign.test.ts --parallel=1 --max-concurrency=1",
 		"test:integration:test-context": "bun test tests/integration/test-context --parallel=1 --max-concurrency=1",
 		"test:integration:dev-server": "bun test tests/integration/dev-server --parallel=1 --max-concurrency=1",
 		"test:integration:shims": "bun test tests/integration/shims --parallel=1 --max-concurrency=1",