mindoodb 0.0.84 → 0.0.86

package/dist/cloudflare/WorkersCryptoAdapter.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkersCryptoAdapter = void 0;
+/** WebCrypto of the Workers runtime (`globalThis.crypto`). */
+class WorkersCryptoAdapter {
+    getSubtle() {
+        return globalThis.crypto.subtle;
+    }
+    getRandomValues(array) {
+        return globalThis.crypto.getRandomValues(array);
+    }
+}
+exports.WorkersCryptoAdapter = WorkersCryptoAdapter;
+//# sourceMappingURL=WorkersCryptoAdapter.js.map

package/dist/cloudflare/WorkersCryptoAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkersCryptoAdapter.js","sourceRoot":"","sources":["../../src/cloudflare/WorkersCryptoAdapter.ts"],"names":[],"mappings":";;;AAEA,8DAA8D;AAC9D,MAAa,oBAAoB;IAC/B,SAAS;QACP,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,eAAe,CAAC,KAAiB;QAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;CACF;AARD,oDAQC"}

package/dist/cloudflare/host.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Settings and helpers shared by the Worker and its Durable Objects.
+ */
+import { type TsaProviderConfig } from "../server/timestampProxy";
+import type { ServerDataStore } from "../server/ServerDataStore";
+import type { DurableObjectStub, MindooCloudflareEnv, RateLimitBinding } from "./types";
+/**
+ * Workers' WebCrypto refuses PBKDF2 above 100 000 iterations. Key bags the
+ * server derives itself use this count; the server identity must be created
+ * with it as well (`cloudflare/scripts/setup.mjs` does).
+ */
+export declare const WORKERS_PBKDF2_ITERATIONS = 100000;
+export interface HostSettings {
+    jsonBodyLimit: string;
+    jsonBodyLimitBytes: number | null;
+    tsaProviders: TsaProviderConfig[];
+    allowInsecureSyncUrls: boolean;
+}
+export declare function createHostSettings(env: MindooCloudflareEnv): HostSettings;
+/** Put the server identity from the secret where the tenant manager reads it. */
+export declare function seedServerIdentity(dataStore: ServerDataStore, env: MindooCloudflareEnv): void;
+/** Headers naming the addressed object's tenant and database on every request to it. */
+export declare const OBJECT_HEADER: {
+    readonly tenantId: "x-mindoodb-tenant";
+    readonly dbId: "x-mindoodb-db";
+};
+export declare function objectHeaders(tenantId: string, dbId: string): Record<string, string>;
+/** Headers of a call from one object to another (reaches `/internal/*`). */
+export declare function internalHeaders(tenantId?: string, dbId?: string): Record<string, string>;
+/** The object serving one database of a tenant; `directory` is also the tenant's hub. */
+export declare function databaseObject(env: MindooCloudflareEnv, tenantId: string, dbId: string): DurableObjectStub;
+export declare function serverObject(env: MindooCloudflareEnv): DurableObjectStub;
+/**
+ * Enforce one limiter tier; returns the 429 to send, or null. A missing
+ * binding means the tier is not configured for this deployment.
+ */
+export declare function rateLimited(binding: RateLimitBinding | undefined, key: string, message: string): Promise<Response | null>;
+/**
+ * Per-tenant sync-token key: HMAC-SHA256(MINDOODB_JWT_SECRET, "tenant:<id>").
+ * Every object serving the tenant derives the same key, so a token issued by
+ * the tenant's directory object is accepted by all of its databases.
+ */
+export declare function deriveTenantJwtSecret(env: MindooCloudflareEnv, tenantId: string): Promise<Uint8Array>;
+/**
+ * Peer-token key, HMAC-SHA256(MINDOODB_JWT_SECRET, "peer"): the server object
+ * issues peer tokens, the database objects accept them on the sync routes.
+ */
+export declare function derivePeerJwtSecret(env: MindooCloudflareEnv): Promise<Uint8Array>;
+//# sourceMappingURL=host.d.ts.map

package/dist/cloudflare/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/cloudflare/host.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAKjD,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,YAAY,CAWzE;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAK7F;AAED,wFAAwF;AACxF,eAAO,MAAM,aAAa;;;CAGhB,CAAC;AAEX,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEpF;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKxF;AAED,yFAAyF;AACzF,wBAAgB,cAAc,CAC5B,GAAG,EAAE,mBAAmB,EACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,iBAAiB,CAEnB;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,mBAAmB,GAAG,iBAAiB,CAExE;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,gBAAgB,GAAG,SAAS,EACrC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAI1B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAErG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAEjF"}

package/dist/cloudflare/host.js

@@ -0,0 +1,104 @@
+"use strict";
+/**
+ * Settings and helpers shared by the Worker and its Durable Objects.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OBJECT_HEADER = exports.WORKERS_PBKDF2_ITERATIONS = void 0;
+exports.createHostSettings = createHostSettings;
+exports.seedServerIdentity = seedServerIdentity;
+exports.objectHeaders = objectHeaders;
+exports.internalHeaders = internalHeaders;
+exports.databaseObject = databaseObject;
+exports.serverObject = serverObject;
+exports.rateLimited = rateLimited;
+exports.deriveTenantJwtSecret = deriveTenantJwtSecret;
+exports.derivePeerJwtSecret = derivePeerJwtSecret;
+const MindooDBServerCore_1 = require("../server/http/MindooDBServerCore");
+const timestampProxy_1 = require("../server/timestampProxy");
+const base64_1 = require("../core/utils/base64");
+const http_1 = require("./http");
+/**
+ * Workers' WebCrypto refuses PBKDF2 above 100 000 iterations. Key bags the
+ * server derives itself use this count; the server identity must be created
+ * with it as well (`cloudflare/scripts/setup.mjs` does).
+ */
+exports.WORKERS_PBKDF2_ITERATIONS = 100000;
+globalThis.__MINDOODB_PBKDF2_ITERATIONS =
+    exports.WORKERS_PBKDF2_ITERATIONS;
+function createHostSettings(env) {
+    const jsonBodyLimit = env.MINDOODB_JSON_BODY_LIMIT?.trim() || "5mb";
+    const allowInsecureSyncUrls = /^(1|true)$/i.test(env.MINDOODB_ALLOW_INSECURE_SYNC_URLS ?? "");
+    return {
+        jsonBodyLimit,
+        jsonBodyLimitBytes: (0, MindooDBServerCore_1.parseBodySizeLimitToBytes)(jsonBodyLimit),
+        tsaProviders: (0, timestampProxy_1.parseTsaProviders)(env.MINDOODB_TSA_PROVIDERS, {
+            allowInsecureUrls: allowInsecureSyncUrls,
+        }),
+        allowInsecureSyncUrls,
+    };
+}
+/** Put the server identity from the secret where the tenant manager reads it. */
+function seedServerIdentity(dataStore, env) {
+    const identity = env.MINDOODB_SERVER_IDENTITY?.trim();
+    if (identity && dataStore.readText("server.identity.json") !== identity) {
+        dataStore.writeText("server.identity.json", identity);
+    }
+}
+/** Headers naming the addressed object's tenant and database on every request to it. */
+exports.OBJECT_HEADER = {
+    tenantId: "x-mindoodb-tenant",
+    dbId: "x-mindoodb-db",
+};
+function objectHeaders(tenantId, dbId) {
+    return { [exports.OBJECT_HEADER.tenantId]: tenantId, [exports.OBJECT_HEADER.dbId]: dbId };
+}
+/** Headers of a call from one object to another (reaches `/internal/*`). */
+function internalHeaders(tenantId, dbId) {
+    return {
+        ...(tenantId && dbId ? objectHeaders(tenantId, dbId) : {}),
+        [http_1.INTERNAL_HEADER.internalCall]: "1",
+    };
+}
+/** The object serving one database of a tenant; `directory` is also the tenant's hub. */
+function databaseObject(env, tenantId, dbId) {
+    return env.MINDOODB_DATABASES.get(env.MINDOODB_DATABASES.idFromName(`${tenantId}/${dbId}`));
+}
+function serverObject(env) {
+    return env.MINDOODB_SERVER.get(env.MINDOODB_SERVER.idFromName("server"));
+}
+/**
+ * Enforce one limiter tier; returns the 429 to send, or null. A missing
+ * binding means the tier is not configured for this deployment.
+ */
+async function rateLimited(binding, key, message) {
+    if (!binding)
+        return null;
+    const { success } = await binding.limit({ key });
+    return success ? null : (0, http_1.jsonResponse)(429, { error: message });
+}
+/**
+ * Per-tenant sync-token key: HMAC-SHA256(MINDOODB_JWT_SECRET, "tenant:<id>").
+ * Every object serving the tenant derives the same key, so a token issued by
+ * the tenant's directory object is accepted by all of its databases.
+ */
+function deriveTenantJwtSecret(env, tenantId) {
+    return deriveJwtSecret(env, `tenant:${tenantId}`);
+}
+/**
+ * Peer-token key, HMAC-SHA256(MINDOODB_JWT_SECRET, "peer"): the server object
+ * issues peer tokens, the database objects accept them on the sync routes.
+ */
+function derivePeerJwtSecret(env) {
+    return deriveJwtSecret(env, "peer");
+}
+async function deriveJwtSecret(env, label) {
+    const secret = env.MINDOODB_JWT_SECRET?.trim();
+    if (!secret) {
+        throw new Error("MINDOODB_JWT_SECRET is not set; run cloudflare/scripts/setup.mjs");
+    }
+    const subtle = globalThis.crypto.subtle;
+    const key = await subtle.importKey("raw", (0, base64_1.base64ToBytes)(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const mac = await subtle.sign("HMAC", key, new TextEncoder().encode(label));
+    return new Uint8Array(mac);
+}
+//# sourceMappingURL=host.js.map

package/dist/cloudflare/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/cloudflare/host.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AA0BH,gDAWC;AAGD,gDAKC;AAQD,sCAEC;AAGD,0CAKC;AAGD,wCAMC;AAED,oCAEC;AAMD,kCAQC;AAOD,sDAEC;AAMD,kDAEC;AAzGD,0EAA8E;AAC9E,6DAAqF;AAErF,iDAAqD;AACrD,iCAAuD;AAGvD;;;;GAIG;AACU,QAAA,yBAAyB,GAAG,MAAO,CAAC;AAEhD,UAAwD,CAAC,4BAA4B;IACpF,iCAAyB,CAAC;AAS5B,SAAgB,kBAAkB,CAAC,GAAwB;IACzD,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC;IACpE,MAAM,qBAAqB,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC9F,OAAO;QACL,aAAa;QACb,kBAAkB,EAAE,IAAA,8CAAyB,EAAC,aAAa,CAAC;QAC5D,YAAY,EAAE,IAAA,kCAAiB,EAAC,GAAG,CAAC,sBAAsB,EAAE;YAC1D,iBAAiB,EAAE,qBAAqB;SACzC,CAAC;QACF,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAgB,kBAAkB,CAAC,SAA0B,EAAE,GAAwB;IACrF,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxE,SAAS,CAAC,SAAS,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,wFAAwF;AAC3E,QAAA,aAAa,GAAG;IAC3B,QAAQ,EAAE,mBAAmB;IAC7B,IAAI,EAAE,eAAe;CACb,CAAC;AAEX,SAAgB,aAAa,CAAC,QAAgB,EAAE,IAAY;IAC1D,OAAO,EAAE,CAAC,qBAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,qBAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,4EAA4E;AAC5E,SAAgB,eAAe,CAAC,QAAiB,EAAE,IAAa;IAC9D,OAAO;QACL,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,CAAC,sBAAe,CAAC,YAAY,CAAC,EAAE,GAAG;KACpC,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAgB,cAAc,CAC5B,GAAwB,EACxB,QAAgB,EAChB,IAAY;IAEZ,OAAO,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAgB,YAAY,CAAC,GAAwB;IACnD,OAAO,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAqC,EACrC,GAAW,EACX,OAAe;IAEf,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,GAAwB,EAAE,QAAgB;IAC9E,OAAO,eAAe,CAAC,GAAG,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,GAAwB;IAC1D,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAwB,EAAE,KAAa;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAChC,KAAK,EACL,IAAA,sBAAa,EAAC,MAAM,CAAiB,EACrC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/cloudflare/http.d.ts

@@ -0,0 +1,91 @@
+/**
+ * HTTP glue between the Workers `fetch` API and the platform-neutral handlers:
+ * route matching, body parsing, responses, CORS and security headers. The
+ * Node server gets the same from Express, helmet, cors and body-parser; this
+ * module mirrors their observable behaviour for the MindooDB API.
+ */
+import { StoreKind } from "../core/appendonlystores/types";
+import { type SyncRouteName } from "../server/http/MindooDBServerCore";
+import { type ServerRequest, type ServerResponse } from "../server/http/types";
+/** Headers the Worker sets on requests it forwards to Durable Objects. */
+export declare const INTERNAL_HEADER: {
+    readonly clientIp: "x-mindoodb-client-ip";
+    /** The sync-events read gate already ran against `?dbId=` in that database's object. */
+    readonly eventsGatePassed: "x-mindoodb-events-gate-passed";
+    /**
+     * Marks calls between the objects themselves. `/internal/*` routes refuse
+     * requests without it; the Worker drops every `x-mindoodb-*` header a
+     * client sends, so no outside request can carry it.
+     */
+    readonly internalCall: "x-mindoodb-internal-call";
+};
+export declare function isInternalCall(request: Request): boolean;
+/** Host name of requests between the Worker and its Durable Objects. */
+export declare const INTERNAL_ORIGIN = "https://mindoodb.internal";
+export type MatchedRoute = {
+    kind: "health";
+} | {
+    kind: "serverInfo";
+} | {
+    kind: "clusterMirrors";
+} | {
+    kind: "publicInfosFingerprints";
+    tenantId: string;
+} | {
+    kind: "unsupported";
+    feature: string;
+} | {
+    kind: "system";
+    path: string;
+} | {
+    kind: "peer";
+    path: string;
+} | {
+    kind: "tenantAuth";
+    tenantId: string;
+    phase: "challenge" | "authenticate";
+} | {
+    kind: "timestamp";
+    tenantId: string;
+} | {
+    kind: "sync";
+    tenantId: string;
+    storeKind: StoreKind;
+    name: SyncRouteName;
+} | {
+    kind: "tenantNotFound";
+    tenantId: string;
+} | {
+    kind: "notFound";
+};
+/**
+ * Map a request onto the API. Like Express's defaults, literal segments match
+ * case-insensitively and a trailing slash is ignored.
+ */
+export declare function matchRoute(method: string, pathname: string): MatchedRoute;
+export declare function jsonResponse(status: number, body: unknown, headers?: HeadersInit): Response;
+/** Turn a handler result into a `Response`. Event streams are the caller's business. */
+export declare function toResponse(response: ServerResponse): Response;
+export interface ParseRequestOptions {
+    params: Record<string, string | undefined>;
+    jsonBodyLimitBytes: number | null;
+    /** Body bytes the Worker already read (to route by `dbId`). */
+    body?: Uint8Array;
+}
+/**
+ * Build a {@link ServerRequest}, or the error response body-parser would have
+ * sent (413 too large, 400 invalid JSON).
+ */
+export declare function toServerRequest(request: Request, options: ParseRequestOptions): Promise<ServerRequest | Response>;
+export declare function parseCorsOrigins(raw: string | undefined): string[];
+/** Answer a CORS preflight, or null when CORS is off (then OPTIONS falls through). */
+export declare function corsPreflight(request: Request, origins: string[]): Response | null;
+/** Security and CORS headers on every response. */
+export declare function decorateResponse(request: Request, response: Response, origins: string[]): Response;
+/**
+ * Rate-limit key for a client address. IPv6 addresses collapse to their /56
+ * prefix like express-rate-limit's `ipKeyGenerator`: one client routinely
+ * holds many addresses of a /64.
+ */
+export declare function clientAddressKey(address: string | null | undefined): string;
+//# sourceMappingURL=http.d.ts.map

package/dist/cloudflare/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/cloudflare/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAG9B,0EAA0E;AAC1E,eAAO,MAAM,eAAe;;IAE1B,wFAAwF;;IAExF;;;;OAIG;;CAEK,CAAC;AAEX,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAExD;AAED,wEAAwE;AACxE,eAAO,MAAM,eAAe,8BAA8B,CAAC;AAE3D,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAUzB;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CA8CzE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,CAI3F;AAED,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,CAS7D;AASD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,+DAA+D;IAC/D,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC,CA+CnC;AAsBD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAKlE;AAYD,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,GAAG,IAAI,CAUlF;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CASlG;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAY3E"}

package/dist/cloudflare/http.js

@@ -0,0 +1,266 @@
+"use strict";
+/**
+ * HTTP glue between the Workers `fetch` API and the platform-neutral handlers:
+ * route matching, body parsing, responses, CORS and security headers. The
+ * Node server gets the same from Express, helmet, cors and body-parser; this
+ * module mirrors their observable behaviour for the MindooDB API.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INTERNAL_ORIGIN = exports.INTERNAL_HEADER = void 0;
+exports.isInternalCall = isInternalCall;
+exports.matchRoute = matchRoute;
+exports.jsonResponse = jsonResponse;
+exports.toResponse = toResponse;
+exports.toServerRequest = toServerRequest;
+exports.parseCorsOrigins = parseCorsOrigins;
+exports.corsPreflight = corsPreflight;
+exports.decorateResponse = decorateResponse;
+exports.clientAddressKey = clientAddressKey;
+const binaryEntryFraming_1 = require("../core/appendonlystores/network/binaryEntryFraming");
+const types_1 = require("../core/appendonlystores/types");
+const MindooDBServerCore_1 = require("../server/http/MindooDBServerCore");
+const types_2 = require("../server/http/types");
+const timestampProxy_1 = require("../server/timestampProxy");
+/** Headers the Worker sets on requests it forwards to Durable Objects. */
+exports.INTERNAL_HEADER = {
+    clientIp: "x-mindoodb-client-ip",
+    /** The sync-events read gate already ran against `?dbId=` in that database's object. */
+    eventsGatePassed: "x-mindoodb-events-gate-passed",
+    /**
+     * Marks calls between the objects themselves. `/internal/*` routes refuse
+     * requests without it; the Worker drops every `x-mindoodb-*` header a
+     * client sends, so no outside request can carry it.
+     */
+    internalCall: "x-mindoodb-internal-call",
+};
+function isInternalCall(request) {
+    return request.headers.get(exports.INTERNAL_HEADER.internalCall) === "1";
+}
+/** Host name of requests between the Worker and its Durable Objects. */
+exports.INTERNAL_ORIGIN = "https://mindoodb.internal";
+function decodeSegment(segment) {
+    try {
+        return decodeURIComponent(segment);
+    }
+    catch {
+        return segment;
+    }
+}
+/**
+ * Map a request onto the API. Like Express's defaults, literal segments match
+ * case-insensitively and a trailing slash is ignored.
+ */
+function matchRoute(method, pathname) {
+    const trimmed = pathname.length > 1 && pathname.endsWith("/") ? pathname.slice(0, -1) : pathname;
+    const segments = trimmed.split("/").slice(1).map(decodeSegment);
+    const lower = segments.map((segment) => segment.toLowerCase());
+    const m = method.toUpperCase();
+    if (m === "GET" && lower.length === 1 && lower[0] === "health")
+        return { kind: "health" };
+    if (lower[0] === ".well-known") {
+        if (m === "GET" && lower.length === 2 && lower[1] === "mindoodb-server-info")
+            return { kind: "serverInfo" };
+        if (m === "GET" && lower.length === 2 && lower[1] === "mindoodb-cluster")
+            return { kind: "clusterMirrors" };
+        if (m === "GET" &&
+            lower.length === 4 &&
+            lower[1] === "mindoodb-tenants" &&
+            lower[3] === "publicinfos-fingerprints") {
+            return { kind: "publicInfosFingerprints", tenantId: segments[2] };
+        }
+        return { kind: "notFound" };
+    }
+    if (lower[0] === "device")
+        return { kind: "unsupported", feature: "Device discovery" };
+    if (lower[0] === "system") {
+        if (lower[1] === "peer")
+            return { kind: "peer", path: trimmed };
+        return { kind: "system", path: trimmed };
+    }
+    if (lower.length < 2 || segments[0] === "")
+        return { kind: "notFound" };
+    const tenantId = segments[0];
+    if (m === "POST" && lower.length === 3 && lower[1] === "auth") {
+        if (lower[2] === "challenge" || lower[2] === "authenticate") {
+            return { kind: "tenantAuth", tenantId, phase: lower[2] };
+        }
+    }
+    if (m === "POST" && lower.length === 3 && lower[1] === "timestamps" && lower[2] === "rfc3161") {
+        return { kind: "timestamp", tenantId };
+    }
+    if (lower.length === 4 && lower[1] === "sync") {
+        const storeKind = lower[2] === "docs" ? types_1.StoreKind.docs : lower[2] === "attachments" ? types_1.StoreKind.attachments : null;
+        const route = MindooDBServerCore_1.SYNC_ROUTES.find((candidate) => candidate.name.toLowerCase() === lower[3]);
+        if (storeKind && route && route.method === m) {
+            return { kind: "sync", tenantId, storeKind, name: route.name };
+        }
+    }
+    // Express runs the tenant guard before matching tenant routes, so an
+    // unknown tenant answers 404 "not found on server" for any path below it.
+    return { kind: "tenantNotFound", tenantId };
+}
+function jsonResponse(status, body, headers) {
+    const result = new Response(JSON.stringify(body), { status, headers });
+    result.headers.set("content-type", "application/json; charset=utf-8");
+    return result;
+}
+/** Turn a handler result into a `Response`. Event streams are the caller's business. */
+function toResponse(response) {
+    if ((0, types_2.isJsonResponse)(response)) {
+        return jsonResponse(response.status, response.json, response.headers);
+    }
+    if ((0, types_2.isBytesResponse)(response)) {
+        // Cloudflare compresses at the edge when the client accepts it.
+        return new Response(response.bytes, { status: response.status, headers: response.headers });
+    }
+    throw new Error("Event stream responses must be handled by the caller");
+}
+function parseBodyLimit(contentType) {
+    const type = (contentType ?? "").split(";")[0].trim().toLowerCase();
+    if (type === "application/json" || type.endsWith("+json"))
+        return "json";
+    if (type === binaryEntryFraming_1.BINARY_ENTRIES_CONTENT_TYPE || type === timestampProxy_1.TIMESTAMP_QUERY_CONTENT_TYPE)
+        return "raw";
+    return "none";
+}
+/**
+ * Build a {@link ServerRequest}, or the error response body-parser would have
+ * sent (413 too large, 400 invalid JSON).
+ */
+async function toServerRequest(request, options) {
+    const url = new URL(request.url);
+    const headers = {};
+    request.headers.forEach((value, name) => {
+        headers[name.toLowerCase()] = value;
+    });
+    const query = {};
+    for (const key of new Set(url.searchParams.keys())) {
+        const values = url.searchParams.getAll(key);
+        query[key] = values.length === 1 ? values[0] : values;
+    }
+    let body = {};
+    let rawBody;
+    let jsonBodyBytes;
+    const kind = parseBodyLimit(request.headers.get("content-type"));
+    if (kind !== "none" && request.method !== "GET" && request.method !== "HEAD") {
+        const bytes = options.body ?? new Uint8Array(await request.arrayBuffer());
+        if (options.jsonBodyLimitBytes !== null && bytes.byteLength > options.jsonBodyLimitBytes) {
+            return jsonResponse(413, { error: "Request body too large" });
+        }
+        if (kind === "json") {
+            if (bytes.byteLength > 0) {
+                try {
+                    body = JSON.parse(new TextDecoder().decode(bytes));
+                }
+                catch {
+                    return jsonResponse(400, { error: "Invalid JSON body" });
+                }
+                jsonBodyBytes = bytes.byteLength;
+            }
+        }
+        else {
+            rawBody = bytes;
+        }
+    }
+    return {
+        method: request.method.toUpperCase(),
+        path: url.pathname,
+        params: options.params,
+        query,
+        headers,
+        body,
+        rawBody,
+        jsonBodyBytes,
+        httpVersion: "1.1",
+        clientIp: headers[exports.INTERNAL_HEADER.clientIp] ?? headers["cf-connecting-ip"],
+    };
+}
+/**
+ * Headers helmet sets by default on the Node server. Kept identical so a
+ * client sees the same security posture from both hosts.
+ */
+const SECURITY_HEADERS = {
+    "content-security-policy": "default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests",
+    "cross-origin-opener-policy": "same-origin",
+    "cross-origin-resource-policy": "same-origin",
+    "origin-agent-cluster": "?1",
+    "referrer-policy": "no-referrer",
+    "strict-transport-security": "max-age=31536000; includeSubDomains",
+    "x-content-type-options": "nosniff",
+    "x-dns-prefetch-control": "off",
+    "x-download-options": "noopen",
+    "x-frame-options": "SAMEORIGIN",
+    "x-permitted-cross-domain-policies": "none",
+    "x-xss-protection": "0",
+};
+function parseCorsOrigins(raw) {
+    return (raw ?? "")
+        .split(",")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+}
+/**
+ * The `Access-Control-Allow-Origin` value the `cors` package would send:
+ * a single configured origin always, one of several only when it matches.
+ */
+function allowedOrigin(origins, requestOrigin) {
+    if (origins.length === 0)
+        return null;
+    if (origins.length === 1)
+        return origins[0];
+    return requestOrigin && origins.includes(requestOrigin) ? requestOrigin : null;
+}
+/** Answer a CORS preflight, or null when CORS is off (then OPTIONS falls through). */
+function corsPreflight(request, origins) {
+    if (request.method !== "OPTIONS" || origins.length === 0)
+        return null;
+    const response = new Response(null, { status: 204 });
+    const origin = allowedOrigin(origins, request.headers.get("origin"));
+    if (origin)
+        response.headers.set("access-control-allow-origin", origin);
+    response.headers.set("vary", "Origin, Access-Control-Request-Headers");
+    response.headers.set("access-control-allow-methods", "GET,POST,PUT,DELETE");
+    response.headers.set("access-control-allow-headers", "Content-Type,Authorization");
+    response.headers.set("content-length", "0");
+    return withSecurityHeaders(response);
+}
+/** Security and CORS headers on every response. */
+function decorateResponse(request, response, origins) {
+    // Responses from fetch() and Durable Objects have immutable headers.
+    const decorated = new Response(response.body, response);
+    const origin = allowedOrigin(origins, request.headers.get("origin"));
+    if (origin) {
+        decorated.headers.set("access-control-allow-origin", origin);
+        decorated.headers.append("vary", "Origin");
+    }
+    return withSecurityHeaders(decorated);
+}
+function withSecurityHeaders(response) {
+    for (const [name, value] of Object.entries(SECURITY_HEADERS)) {
+        if (!response.headers.has(name))
+            response.headers.set(name, value);
+    }
+    return response;
+}
+/**
+ * Rate-limit key for a client address. IPv6 addresses collapse to their /56
+ * prefix like express-rate-limit's `ipKeyGenerator`: one client routinely
+ * holds many addresses of a /64.
+ */
+function clientAddressKey(address) {
+    if (!address)
+        return "unknown";
+    if (!address.includes(":"))
+        return address;
+    const [head, tail = ""] = address.split("::");
+    const headGroups = head ? head.split(":") : [];
+    const tailGroups = tail ? tail.split(":") : [];
+    const groups = address.includes("::")
+        ? [...headGroups, ...new Array(Math.max(0, 8 - headGroups.length - tailGroups.length)).fill("0"), ...tailGroups]
+        : headGroups;
+    const hex = groups.slice(0, 4).map((group) => group.padStart(4, "0"));
+    if (hex.length < 4)
+        return address;
+    return `${hex[0]}:${hex[1]}:${hex[2]}:${hex[3].substring(0, 2)}00::/56`;
+}
+//# sourceMappingURL=http.js.map

package/dist/cloudflare/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/cloudflare/http.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA0BH,wCAEC;AA+BD,gCA8CC;AAED,oCAIC;AAGD,gCASC;AAoBD,0CAkDC;AAsBD,4CAKC;AAaD,sCAUC;AAGD,4CASC;AAcD,4CAYC;AAvRD,4FAAkG;AAClG,0DAA2D;AAC3D,0EAAoF;AACpF,gDAK8B;AAC9B,6DAAwE;AAExE,0EAA0E;AAC7D,QAAA,eAAe,GAAG;IAC7B,QAAQ,EAAE,sBAAsB;IAChC,wFAAwF;IACxF,gBAAgB,EAAE,+BAA+B;IACjD;;;;OAIG;IACH,YAAY,EAAE,0BAA0B;CAChC,CAAC;AAEX,SAAgB,cAAc,CAAC,OAAgB;IAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAe,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC;AACnE,CAAC;AAED,wEAAwE;AAC3D,QAAA,eAAe,GAAG,2BAA2B,CAAC;AAgB3D,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,MAAc,EAAE,QAAgB;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjG,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAE/B,IAAI,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,sBAAsB;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAC5G,IAAI,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,kBAAkB;YAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QAC5G,IACE,CAAC,KAAK,KAAK;YACX,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,KAAK,CAAC,CAAC,CAAC,KAAK,kBAAkB;YAC/B,KAAK,CAAC,CAAC,CAAC,KAAK,0BAA0B,EACvC,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACvF,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAExE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9F,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,iBAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACnH,MAAM,KAAK,GAAG,gCAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,SAAS,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,0EAA0E;IAC1E,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED,SAAgB,YAAY,CAAC,MAAc,EAAE,IAAa,EAAE,OAAqB;IAC/E,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wFAAwF;AACxF,SAAgB,UAAU,CAAC,QAAwB;IACjD,IAAI,IAAA,sBAAc,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,IAAA,uBAAe,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,gEAAgE;QAChE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAA4B,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,WAA0B;IAChD,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IACzE,IAAI,IAAI,KAAK,gDAA2B,IAAI,IAAI,KAAK,6CAA4B;QAAE,OAAO,KAAK,CAAC;IAChG,OAAO,MAAM,CAAC;AAChB,CAAC;AASD;;;GAGG;AACI,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,OAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACtC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,GAAQ,EAAE,CAAC;IACnB,IAAI,OAA+B,CAAC;IACpC,IAAI,aAAiC,CAAC;IACtC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACzF,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBACD,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC;YACnC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACpC,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK;QACL,OAAO;QACP,IAAI;QACJ,OAAO;QACP,aAAa;QACb,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,OAAO,CAAC,uBAAe,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,yBAAyB,EACvB,6PAA6P;IAC/P,4BAA4B,EAAE,aAAa;IAC3C,8BAA8B,EAAE,aAAa;IAC7C,sBAAsB,EAAE,IAAI;IAC5B,iBAAiB,EAAE,aAAa;IAChC,2BAA2B,EAAE,qCAAqC;IAClE,wBAAwB,EAAE,SAAS;IACnC,wBAAwB,EAAE,KAAK;IAC/B,oBAAoB,EAAE,QAAQ;IAC9B,iBAAiB,EAAE,YAAY;IAC/B,mCAAmC,EAAE,MAAM;IAC3C,kBAAkB,EAAE,GAAG;CACxB,CAAC;AAEF,SAAgB,gBAAgB,CAAC,GAAuB;IACtD,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,OAAiB,EAAE,aAA4B;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,aAAa,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,sFAAsF;AACtF,SAAgB,aAAa,CAAC,OAAgB,EAAE,OAAiB;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM;QAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACxE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;IACvE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,qBAAqB,CAAC,CAAC;IAC5E,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;IACnF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,mDAAmD;AACnD,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,QAAkB,EAAE,OAAiB;IACtF,qEAAqE;IACrE,MAAM,SAAS,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAC7D,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,OAAkC;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnC,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC;QAChH,CAAC,CAAC,UAAU,CAAC;IACf,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC"}

package/dist/cloudflare/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * MindooDB server on Cloudflare Workers + Durable Objects.
+ *
+ * A Worker project re-exports these (see `cloudflare/src/index.ts`):
+ * the default export is the Worker, the two classes are the Durable Objects
+ * bound as `MINDOODB_SERVER` and `MINDOODB_DATABASES`.
+ */
+export { default } from "./worker";
+export { MindooServerObject } from "./MindooServerObject";
+export { MindooDatabaseObject } from "./MindooDatabaseObject";
+export type { MindooCloudflareEnv } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/cloudflare/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC"}

package/dist/cloudflare/index.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * MindooDB server on Cloudflare Workers + Durable Objects.
+ *
+ * A Worker project re-exports these (see `cloudflare/src/index.ts`):
+ * the default export is the Worker, the two classes are the Durable Objects
+ * bound as `MINDOODB_SERVER` and `MINDOODB_DATABASES`.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MindooDatabaseObject = exports.MindooServerObject = exports.default = void 0;
+var worker_1 = require("./worker");
+Object.defineProperty(exports, "default", { enumerable: true, get: function () { return __importDefault(worker_1).default; } });
+var MindooServerObject_1 = require("./MindooServerObject");
+Object.defineProperty(exports, "MindooServerObject", { enumerable: true, get: function () { return MindooServerObject_1.MindooServerObject; } });
+var MindooDatabaseObject_1 = require("./MindooDatabaseObject");
+Object.defineProperty(exports, "MindooDatabaseObject", { enumerable: true, get: function () { return MindooDatabaseObject_1.MindooDatabaseObject; } });
+//# sourceMappingURL=index.js.map

package/dist/cloudflare/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;AAEH,mCAAmC;AAA1B,kHAAA,OAAO,OAAA;AAChB,2DAA0D;AAAjD,wHAAA,kBAAkB,OAAA;AAC3B,+DAA8D;AAArD,4HAAA,oBAAoB,OAAA"}

package/dist/cloudflare/storeRpc.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Entry stores of a database object, reached from another object.
+ *
+ * Peer replication runs in the server object but the stores live in the
+ * database objects. The existing store RPC ({@link RpcContentAddressedStore} /
+ * {@link StoreRpcServer}) carries the calls: JSON for metadata, raw bytes for
+ * entry payloads, over internal requests between the objects.
+ */
+import type { StoreKind } from "../core/appendonlystores/types";
+import type { ContentAddressedStore } from "../core/types";
+import type { DurableObjectStub } from "./types";
+/** A store of `dbId` in the object `stub`; `headers` address and authorize the call. */
+export declare function remoteObjectStore(stub: DurableObjectStub, headers: Record<string, string>, tenantId: string, dbId: string, kind: StoreKind): ContentAddressedStore;
+/** Payload buffers between the calls of one store RPC exchange. */
+export declare class StoreRpcBytes {
+    private readonly buffers;
+    take(blobId: string): Promise<Uint8Array | null>;
+    offer(blobId: string, bytes: Uint8Array): Promise<void>;
+    /** Serve the byte routes under {@link RPC_PATH}; null for anything else. */
+    handle(path: string, request: Request): Promise<Response | null>;
+}
+//# sourceMappingURL=storeRpc.d.ts.map

package/dist/cloudflare/storeRpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storeRpc.d.ts","sourceRoot":"","sources":["../../src/cloudflare/storeRpc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAyCjD,wFAAwF;AACxF,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,GACd,qBAAqB,CAMvB;AAED,mEAAmE;AACnE,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEnD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMhD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,4EAA4E;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAavE"}