@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/server/serverFacetLoader.cjs

@@ -0,0 +1,214 @@
+const require_headless = require("../schemas/headless.cjs");
+const require_liveImport = require("./liveImport.cjs");
+const require_serverFacet = require("../schemas/serverFacet.cjs");
+let _deepseek_ai_cordis = require("@deepseek-ai/cordis");
+//#region src/server/serverFacetLoader.ts
+/** Pure pre-model metadata from initially admitted session facets, never from retained candidates. */
+function selectedServerProviderOverrides(facets, environment) {
+	return facets.flatMap(({ declaration, facet, initiallyEligible }) => initiallyEligible === false || !declaration.scopes.includes("session") ? [] : facet.providerOverrides?.({ environment }) ?? []);
+}
+function ownedBy(owners, majorMode, activeLayers) {
+	return owners.some((owner) => owner.majorMode === majorMode && (owner.layer === "default" || activeLayers.includes(owner.layer)));
+}
+async function loadFacetEntries(scope, entries, options, importUrl) {
+	const facets = [];
+	for (const declaration of entries) {
+		if (!declaration.scopes.includes(scope)) continue;
+		const eligible = ownedBy(declaration.owners, options.majorMode, options.activeLayers);
+		if (!(scope === "session" && options.retainCandidates === true) && !eligible) continue;
+		try {
+			const imported = await importUrl(declaration);
+			if (!require_serverFacet.isDoomServerFacet(imported?.default)) throw new Error("default export is not a server object facet");
+			facets.push({
+				declaration,
+				facet: imported.default,
+				...scope === "session" && options.retainCandidates ? {
+					retained: true,
+					initiallyEligible: eligible
+				} : {}
+			});
+		} catch (error) {
+			const message = `Server facet '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;
+			if (declaration.required && eligible) throw new Error(message, { cause: error });
+			options.onNotice?.(message);
+		}
+	}
+	return facets;
+}
+/**
+* Live reader: imports each package's built entry from its content-addressed URL.
+*
+* Applies the scope, ownership and `required` rules of each entry. Each import is bounded and a URL that
+* timed out or threw is poisoned (see `guardedImport`); a poisoned required facet fails
+* exactly as a load failure does.
+*/
+async function loadServerFacets(scope, options) {
+	const importer = options.importer ?? ((url) => import(url));
+	const urls = new Map(options.entries.map((entry) => [entry, entry.url]));
+	const facets = await loadFacetEntries(scope, options.entries, options, (declaration) => require_liveImport.guardedImport(urls.get(declaration), importer, options));
+	return {
+		entries: options.entries,
+		facets
+	};
+}
+/**
+* Binds registrations to the Cordis fiber that calls the host service.
+*
+* The host itself is shared, but Cordis traceable services rebind `ctx` to the
+* caller. That lets a facet's registration unwind even when `apply` throws
+* before it can return its disposer.
+*/
+var ScopedDoomServerHost = class extends _deepseek_ai_cordis.Service {
+	host;
+	scope;
+	context;
+	constructor(ctx, host) {
+		super(ctx, require_serverFacet.DOOM_SERVER_HOST_SERVICE);
+		this.host = host;
+		this.scope = host.scope;
+		this.context = host.context;
+	}
+	registerApi(api) {
+		const headless = this.scope === "session" ? require_headless.readDoomHeadlessHost(this.ctx) : void 0;
+		if (headless) {
+			const activity = headless.registerActivity({
+				name: `api:${api.basePath}`,
+				start: () => {
+					const registration = this.host.registerApi(api);
+					if (registration.mounted !== true) {
+						registration.dispose();
+						throw new Error(`package API '${api.basePath}' did not mount.`);
+					}
+					return () => {
+						registration.dispose();
+					};
+				}
+			});
+			return {
+				mounted: true,
+				dispose: () => activity.dispose()
+			};
+		}
+		const registration = this.host.registerApi(api);
+		if (registration.mounted !== true) {
+			registration.dispose();
+			throw new Error(`package API '${api.basePath}' did not mount.`);
+		}
+		this.ctx.effect(() => () => registration.dispose(), "server facet API registration");
+		return registration;
+	}
+	registerChannel(channel) {
+		const registration = this.host.registerChannel(channel);
+		if (registration.mounted !== true) {
+			registration.dispose();
+			throw new Error(`hub channel '${channel.frameType}' did not mount.`);
+		}
+		this.ctx.effect(() => () => registration.dispose(), "server facet channel registration");
+		return registration;
+	}
+	registerMethod = (definition, handler) => {
+		const registration = this.host.registerMethod(definition, handler);
+		if (registration.mounted !== true) {
+			registration.dispose();
+			throw new Error(`plugin method '${definition.service}.${definition.method}' did not mount.`);
+		}
+		this.ctx.effect(() => () => registration.dispose(), "server facet method registration");
+		return registration;
+	};
+	mounted() {
+		return this.host.mounted();
+	}
+	mountedChannels() {
+		return this.host.mountedChannels();
+	}
+};
+/** Publishes the host service from inside a mounted plugin, so it unwinds with the root. */
+function serverHostProvider(context, host) {
+	new ScopedDoomServerHost(context, host);
+}
+/**
+* Installs server facets into a cordis root that provides the server host.
+*
+* A cordis root rather than plain calls, because a facet is a Doom
+* contribution like any other: it may inject services a host provides later,
+* and it unwinds through the same fiber disposal the Pi facet uses. One root
+* per host process, created here, so no host has to know cordis to run one.
+*
+* Facets are awaited one at a time and each is a single fiber, because a
+* facet declares its `inject` on itself. `fiber.await()` therefore settles
+* once `apply` has run, and the caller can read a complete mount table before
+* deciding whether to open a listener.
+*/
+async function installServerFacets(options) {
+	const notice = options.onNotice ?? (() => {});
+	const root = new _deepseek_ai_cordis.Context();
+	await root.plugin(serverHostProvider, options.host).await();
+	try {
+		await options.prepare?.(root);
+	} catch (error) {
+		await root.fiber.dispose();
+		throw error;
+	}
+	if (options.facets.some((candidate) => "retained" in candidate && candidate.retained === true) && !require_headless.readDoomHeadlessHost(root)) {
+		await root.fiber.dispose();
+		throw new Error("Retained server candidates require a gated headless host");
+	}
+	const installed = [];
+	const installedPackages = [];
+	const disposeInstalled = async () => {
+		for (const fiber of [...installed].reverse()) await fiber.dispose();
+	};
+	const factoryTimeoutMs = options.factoryTimeoutMs ?? 1e4;
+	let abandoned = false;
+	const disposeRoot = async () => {
+		if (!abandoned) return root.fiber.dispose();
+		await require_liveImport.withTimeout(root.fiber.dispose(), factoryTimeoutMs, "server facet root dispose").catch((error) => notice(error instanceof Error ? error.message : String(error)));
+	};
+	for (const candidate of options.facets) {
+		const facet = "declaration" in candidate ? candidate.facet : candidate;
+		const declaration = "declaration" in candidate ? candidate.declaration : void 0;
+		let fiber;
+		let applySettled = false;
+		try {
+			fiber = (declaration ? root.extend({ [require_headless.DOOM_HEADLESS_OWNER]: declaration }) : root).plugin(facet);
+			const applied = fiber.await();
+			const markSettled = () => {
+				applySettled = true;
+			};
+			applied.then(markSettled, markSettled);
+			await require_liveImport.withTimeout(applied, factoryTimeoutMs, declaration === void 0 ? "server facet apply" : `server facet '${declaration.packageName}' apply`);
+			installed.push(fiber);
+			if (declaration) installedPackages.push(declaration.packageName);
+		} catch (error) {
+			if (fiber && !applySettled) {
+				abandoned = true;
+				fiber.dispose().catch((disposeError) => notice(`abandoned server facet did not dispose (${disposeError instanceof Error ? disposeError.message : String(disposeError)})`));
+			} else await fiber?.dispose();
+			const message = `${declaration === void 0 ? "a server facet" : `server facet '${declaration.packageName}'`} did not install (${error instanceof Error ? error.message : String(error)})`;
+			if (declaration?.required === true && !("initiallyEligible" in candidate && candidate.initiallyEligible === false)) {
+				await disposeInstalled();
+				await disposeRoot();
+				throw new Error(message, { cause: error });
+			}
+			notice(message);
+		}
+	}
+	let disposePromise;
+	return {
+		root,
+		installedPackages,
+		dispose: () => {
+			disposePromise ??= (async () => {
+				await disposeInstalled();
+				await disposeRoot();
+			})();
+			return disposePromise;
+		}
+	};
+}
+//#endregion
+exports.installServerFacets = installServerFacets;
+exports.loadServerFacets = loadServerFacets;
+exports.selectedServerProviderOverrides = selectedServerProviderOverrides;
+
+//# sourceMappingURL=serverFacetLoader.cjs.map

package/dist/src/server/serverFacetLoader.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverFacetLoader.cjs","names":["isDoomServerFacet","guardedImport","Service","DOOM_SERVER_HOST_SERVICE","readDoomHeadlessHost","Context","withTimeout","DOOM_HEADLESS_OWNER"],"sources":["../../../src/server/serverFacetLoader.ts"],"sourcesContent":["import { Context, Service, type Fiber } from '@deepseek-ai/cordis';\n\nimport { DOOM_HEADLESS_OWNER, readDoomHeadlessHost } from '../schemas/headless';\nimport type { DoomApiScope } from '../schemas/packageApi';\nimport type { DoomServerBundleEntry } from '../schemas/serverBundle';\nimport {\n  DOOM_SERVER_HOST_SERVICE,\n  type DoomServerFacet,\n  type DoomServerProviderOverride,\n  type DoomServerHostService,\n  isDoomServerFacet,\n} from '../schemas/serverFacet';\nimport { guardedImport, LIVE_FACTORY_TIMEOUT_MS, type LiveImportGuard, withTimeout } from './liveImport';\n\nexport interface LoadedServerFacet {\n  readonly declaration: DoomServerBundleEntry;\n  readonly facet: DoomServerFacet;\n  readonly retained?: true;\n  readonly initiallyEligible?: boolean;\n}\n\n/** One live server facet: the bundle entry shape plus the URL its package module imports from. */\nexport interface LiveServerFacetEntry extends DoomServerBundleEntry {\n  /** Content-addressed import URL for `module`, see the po server's `packageUrl`. */\n  readonly url: string;\n}\n\nexport interface LoadServerFacetsOptions extends LiveImportGuard {\n  readonly entries: readonly LiveServerFacetEntry[];\n  readonly majorMode: string;\n  readonly activeLayers: readonly string[];\n  readonly onNotice?: (message: string) => void;\n  /** Only a session host with declarative contribution gating may retain all candidates. */\n  readonly retainCandidates?: boolean;\n  /** Test seam; defaults to native `import()`. */\n  readonly importer?: (url: string) => Promise<unknown>;\n}\n\nexport interface LoadedServerFacets {\n  readonly entries: readonly LiveServerFacetEntry[];\n  readonly facets: readonly LoadedServerFacet[];\n}\n\n/** Pure pre-model metadata from initially admitted session facets, never from retained candidates. */\nexport function selectedServerProviderOverrides(\n  facets: readonly LoadedServerFacet[],\n  environment: Readonly<Record<string, string | undefined>>,\n): readonly DoomServerProviderOverride[] {\n  return facets.flatMap(({ declaration, facet, initiallyEligible }) =>\n    initiallyEligible === false || !declaration.scopes.includes('session')\n      ? []\n      : (facet.providerOverrides?.({ environment }) ?? []),\n  );\n}\n\nfunction ownedBy(\n  owners: readonly { readonly majorMode: string; readonly layer: string }[],\n  majorMode: string,\n  activeLayers: readonly string[],\n): boolean {\n  return owners.some(\n    (owner) => owner.majorMode === majorMode && (owner.layer === 'default' || activeLayers.includes(owner.layer)),\n  );\n}\n\nasync function loadFacetEntries(\n  scope: DoomApiScope,\n  entries: readonly DoomServerBundleEntry[],\n  options: Pick<LoadServerFacetsOptions, 'majorMode' | 'activeLayers' | 'onNotice' | 'retainCandidates'>,\n  importUrl: (declaration: DoomServerBundleEntry) => Promise<unknown>,\n): Promise<LoadedServerFacet[]> {\n  const facets: LoadedServerFacet[] = [];\n  for (const declaration of entries) {\n    if (!declaration.scopes.includes(scope)) continue;\n    const eligible = ownedBy(declaration.owners, options.majorMode, options.activeLayers);\n    if (!(scope === 'session' && options.retainCandidates === true) && !eligible) continue;\n    try {\n      const imported = (await importUrl(declaration)) as { default?: unknown } | undefined;\n      if (!isDoomServerFacet(imported?.default)) throw new Error('default export is not a server object facet');\n      facets.push({\n        declaration,\n        facet: imported.default,\n        ...(scope === 'session' && options.retainCandidates\n          ? { retained: true as const, initiallyEligible: eligible }\n          : {}),\n      });\n    } catch (error) {\n      const message = `Server facet '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;\n      if (declaration.required && eligible) throw new Error(message, { cause: error });\n      options.onNotice?.(message);\n    }\n  }\n  return facets;\n}\n\n/**\n * Live reader: imports each package's built entry from its content-addressed URL.\n *\n * Applies the scope, ownership and `required` rules of each entry. Each import is bounded and a URL that\n * timed out or threw is poisoned (see `guardedImport`); a poisoned required facet fails\n * exactly as a load failure does.\n */\nexport async function loadServerFacets(\n  scope: DoomApiScope,\n  options: LoadServerFacetsOptions,\n): Promise<LoadedServerFacets> {\n  const importer = options.importer ?? ((url: string) => import(url));\n  const urls = new Map(options.entries.map((entry) => [entry as DoomServerBundleEntry, entry.url]));\n  const facets = await loadFacetEntries(scope, options.entries, options, (declaration) =>\n    guardedImport(urls.get(declaration)!, importer, options),\n  );\n  return { entries: options.entries, facets };\n}\n\nexport interface InstallServerFacetsOptions {\n  host: DoomServerHostService;\n  facets: readonly (DoomServerFacet | LoadedServerFacet)[];\n  onNotice?: (message: string) => void;\n  /** Install additional typed services before any package facet is applied. */\n  prepare?: (root: Context) => void | Promise<void>;\n  /** Bound on each facet's `apply`; defaults to `LIVE_FACTORY_TIMEOUT_MS`. */\n  factoryTimeoutMs?: number;\n}\n\nexport interface InstalledServerFacets {\n  /** The cordis root the facets were installed into, for a host that provides more services. */\n  readonly root: Context;\n  readonly installedPackages: readonly string[];\n  dispose(): Promise<void>;\n}\n\n/**\n * Binds registrations to the Cordis fiber that calls the host service.\n *\n * The host itself is shared, but Cordis traceable services rebind `ctx` to the\n * caller. That lets a facet's registration unwind even when `apply` throws\n * before it can return its disposer.\n */\nclass ScopedDoomServerHost extends Service<DoomServerHostService> implements DoomServerHostService {\n  readonly scope: DoomServerHostService['scope'];\n  readonly context: DoomServerHostService['context'];\n\n  constructor(\n    ctx: Context,\n    private readonly host: DoomServerHostService,\n  ) {\n    super(ctx, DOOM_SERVER_HOST_SERVICE);\n    this.scope = host.scope;\n    this.context = host.context;\n  }\n\n  registerApi(api: Parameters<DoomServerHostService['registerApi']>[0]) {\n    const headless = this.scope === 'session' ? readDoomHeadlessHost(this.ctx) : undefined;\n    if (headless) {\n      const activity = headless.registerActivity({\n        name: `api:${api.basePath}`,\n        start: () => {\n          const registration = this.host.registerApi(api);\n          if (registration.mounted !== true) {\n            registration.dispose();\n            throw new Error(`package API '${api.basePath}' did not mount.`);\n          }\n          return () => {\n            registration.dispose();\n          };\n        },\n      });\n      return {\n        mounted: true,\n        dispose: () => activity.dispose(),\n      };\n    }\n    const registration = this.host.registerApi(api);\n    if (registration.mounted !== true) {\n      registration.dispose();\n      throw new Error(`package API '${api.basePath}' did not mount.`);\n    }\n    this.ctx.effect(() => () => registration.dispose(), 'server facet API registration');\n    return registration;\n  }\n\n  registerChannel(channel: Parameters<DoomServerHostService['registerChannel']>[0]) {\n    const registration = this.host.registerChannel(channel);\n    if (registration.mounted !== true) {\n      registration.dispose();\n      throw new Error(`hub channel '${channel.frameType}' did not mount.`);\n    }\n    this.ctx.effect(() => () => registration.dispose(), 'server facet channel registration');\n    return registration;\n  }\n\n  registerMethod: DoomServerHostService['registerMethod'] = (definition, handler) => {\n    const registration = this.host.registerMethod(definition, handler);\n    if (registration.mounted !== true) {\n      registration.dispose();\n      throw new Error(`plugin method '${definition.service}.${definition.method}' did not mount.`);\n    }\n    this.ctx.effect(() => () => registration.dispose(), 'server facet method registration');\n    return registration;\n  };\n\n  mounted(): readonly string[] {\n    return this.host.mounted();\n  }\n\n  mountedChannels(): readonly string[] {\n    return this.host.mountedChannels();\n  }\n}\n\n/** Publishes the host service from inside a mounted plugin, so it unwinds with the root. */\nfunction serverHostProvider(context: Context, host: DoomServerHostService): void {\n  new ScopedDoomServerHost(context, host);\n}\n\n/**\n * Installs server facets into a cordis root that provides the server host.\n *\n * A cordis root rather than plain calls, because a facet is a Doom\n * contribution like any other: it may inject services a host provides later,\n * and it unwinds through the same fiber disposal the Pi facet uses. One root\n * per host process, created here, so no host has to know cordis to run one.\n *\n * Facets are awaited one at a time and each is a single fiber, because a\n * facet declares its `inject` on itself. `fiber.await()` therefore settles\n * once `apply` has run, and the caller can read a complete mount table before\n * deciding whether to open a listener.\n */\nexport async function installServerFacets(options: InstallServerFacetsOptions): Promise<InstalledServerFacets> {\n  const notice = options.onNotice ?? ((): void => {});\n  const root = new Context();\n  await root.plugin(serverHostProvider, options.host).await();\n  try {\n    await options.prepare?.(root);\n  } catch (error) {\n    await root.fiber.dispose();\n    throw error;\n  }\n  if (\n    options.facets.some((candidate) => 'retained' in candidate && candidate.retained === true) &&\n    !readDoomHeadlessHost(root)\n  ) {\n    await root.fiber.dispose();\n    throw new Error('Retained server candidates require a gated headless host');\n  }\n  const installed: Fiber[] = [];\n  const installedPackages: string[] = [];\n\n  const disposeInstalled = async (): Promise<void> => {\n    for (const fiber of [...installed].reverse()) await fiber.dispose();\n  };\n  const factoryTimeoutMs = options.factoryTimeoutMs ?? LIVE_FACTORY_TIMEOUT_MS;\n  // A fiber whose apply never settles also never finishes disposing, and holds its root\n  // open. Once one is abandoned, root disposal is bounded so teardown cannot hang.\n  let abandoned = false;\n  const disposeRoot = async (): Promise<void> => {\n    if (!abandoned) return root.fiber.dispose();\n    await withTimeout(root.fiber.dispose(), factoryTimeoutMs, 'server facet root dispose').catch((error: unknown) =>\n      notice(error instanceof Error ? error.message : String(error)),\n    );\n  };\n\n  for (const candidate of options.facets) {\n    const facet = 'declaration' in candidate ? candidate.facet : candidate;\n    const declaration = 'declaration' in candidate ? candidate.declaration : undefined;\n    let fiber: Fiber | undefined;\n    let applySettled = false;\n    try {\n      const scope = declaration ? root.extend({ [DOOM_HEADLESS_OWNER]: declaration }) : root;\n      fiber = scope.plugin(facet);\n      const applied = fiber.await();\n      const markSettled = (): void => {\n        applySettled = true;\n      };\n      applied.then(markSettled, markSettled);\n      await withTimeout(\n        applied,\n        factoryTimeoutMs,\n        declaration === undefined ? 'server facet apply' : `server facet '${declaration.packageName}' apply`,\n      );\n      installed.push(fiber);\n      if (declaration) installedPackages.push(declaration.packageName);\n    } catch (error) {\n      if (fiber && !applySettled) {\n        abandoned = true;\n        void fiber\n          .dispose()\n          .catch((disposeError: unknown) =>\n            notice(\n              `abandoned server facet did not dispose (${disposeError instanceof Error ? disposeError.message : String(disposeError)})`,\n            ),\n          );\n      } else await fiber?.dispose();\n      const message = `${declaration === undefined ? 'a server facet' : `server facet '${declaration.packageName}'`} did not install (${error instanceof Error ? error.message : String(error)})`;\n      if (\n        declaration?.required === true &&\n        !('initiallyEligible' in candidate && candidate.initiallyEligible === false)\n      ) {\n        await disposeInstalled();\n        await disposeRoot();\n        throw new Error(message, { cause: error });\n      }\n      notice(message);\n    }\n  }\n\n  let disposePromise: Promise<void> | undefined;\n  return {\n    root,\n    installedPackages,\n    dispose: () => {\n      disposePromise ??= (async () => {\n        await disposeInstalled();\n        await disposeRoot();\n      })();\n      return disposePromise;\n    },\n  };\n}\n"],"mappings":";;;;;;AA4CA,SAAgB,gCACd,QACA,aACuC;CACvC,OAAO,OAAO,SAAS,EAAE,aAAa,OAAO,wBAC3C,sBAAsB,SAAS,CAAC,YAAY,OAAO,SAAS,SAAS,IACjE,CAAC,IACA,MAAM,oBAAoB,EAAE,YAAY,CAAC,KAAK,CAAC,CACtD;AACF;AAEA,SAAS,QACP,QACA,WACA,cACS;CACT,OAAO,OAAO,MACX,UAAU,MAAM,cAAc,cAAc,MAAM,UAAU,aAAa,aAAa,SAAS,MAAM,KAAK,EAC7G;AACF;AAEA,eAAe,iBACb,OACA,SACA,SACA,WAC8B;CAC9B,MAAM,SAA8B,CAAC;CACrC,KAAK,MAAM,eAAe,SAAS;EACjC,IAAI,CAAC,YAAY,OAAO,SAAS,KAAK,GAAG;EACzC,MAAM,WAAW,QAAQ,YAAY,QAAQ,QAAQ,WAAW,QAAQ,YAAY;EACpF,IAAI,EAAE,UAAU,aAAa,QAAQ,qBAAqB,SAAS,CAAC,UAAU;EAC9E,IAAI;GACF,MAAM,WAAY,MAAM,UAAU,WAAW;GAC7C,IAAI,CAACA,oBAAAA,kBAAkB,UAAU,OAAO,GAAG,MAAM,IAAI,MAAM,6CAA6C;GACxG,OAAO,KAAK;IACV;IACA,OAAO,SAAS;IAChB,GAAI,UAAU,aAAa,QAAQ,mBAC/B;KAAE,UAAU;KAAe,mBAAmB;IAAS,IACvD,CAAC;GACP,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,YAAY,YAAY,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GACpI,IAAI,YAAY,YAAY,UAAU,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GAC/E,QAAQ,WAAW,OAAO;EAC5B;CACF;CACA,OAAO;AACT;;;;;;;;AASA,eAAsB,iBACpB,OACA,SAC6B;CAC7B,MAAM,WAAW,QAAQ,cAAc,QAAgB,OAAO;CAC9D,MAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,KAAK,UAAU,CAAC,OAAgC,MAAM,GAAG,CAAC,CAAC;CAChG,MAAM,SAAS,MAAM,iBAAiB,OAAO,QAAQ,SAAS,UAAU,gBACtEC,mBAAAA,cAAc,KAAK,IAAI,WAAW,GAAI,UAAU,OAAO,CACzD;CACA,OAAO;EAAE,SAAS,QAAQ;EAAS;CAAO;AAC5C;;;;;;;;AA0BA,IAAM,uBAAN,cAAmCC,oBAAAA,QAAgE;CAM9E;CALnB;CACA;CAEA,YACE,KACA,MACA;EACA,MAAM,KAAKC,oBAAAA,wBAAwB;EAFlB,KAAA,OAAA;EAGjB,KAAK,QAAQ,KAAK;EAClB,KAAK,UAAU,KAAK;CACtB;CAEA,YAAY,KAA0D;EACpE,MAAM,WAAW,KAAK,UAAU,YAAYC,iBAAAA,qBAAqB,KAAK,GAAG,IAAI,KAAA;EAC7E,IAAI,UAAU;GACZ,MAAM,WAAW,SAAS,iBAAiB;IACzC,MAAM,OAAO,IAAI;IACjB,aAAa;KACX,MAAM,eAAe,KAAK,KAAK,YAAY,GAAG;KAC9C,IAAI,aAAa,YAAY,MAAM;MACjC,aAAa,QAAQ;MACrB,MAAM,IAAI,MAAM,gBAAgB,IAAI,SAAS,iBAAiB;KAChE;KACA,aAAa;MACX,aAAa,QAAQ;KACvB;IACF;GACF,CAAC;GACD,OAAO;IACL,SAAS;IACT,eAAe,SAAS,QAAQ;GAClC;EACF;EACA,MAAM,eAAe,KAAK,KAAK,YAAY,GAAG;EAC9C,IAAI,aAAa,YAAY,MAAM;GACjC,aAAa,QAAQ;GACrB,MAAM,IAAI,MAAM,gBAAgB,IAAI,SAAS,iBAAiB;EAChE;EACA,KAAK,IAAI,mBAAmB,aAAa,QAAQ,GAAG,+BAA+B;EACnF,OAAO;CACT;CAEA,gBAAgB,SAAkE;EAChF,MAAM,eAAe,KAAK,KAAK,gBAAgB,OAAO;EACtD,IAAI,aAAa,YAAY,MAAM;GACjC,aAAa,QAAQ;GACrB,MAAM,IAAI,MAAM,gBAAgB,QAAQ,UAAU,iBAAiB;EACrE;EACA,KAAK,IAAI,mBAAmB,aAAa,QAAQ,GAAG,mCAAmC;EACvF,OAAO;CACT;CAEA,kBAA2D,YAAY,YAAY;EACjF,MAAM,eAAe,KAAK,KAAK,eAAe,YAAY,OAAO;EACjE,IAAI,aAAa,YAAY,MAAM;GACjC,aAAa,QAAQ;GACrB,MAAM,IAAI,MAAM,kBAAkB,WAAW,QAAQ,GAAG,WAAW,OAAO,iBAAiB;EAC7F;EACA,KAAK,IAAI,mBAAmB,aAAa,QAAQ,GAAG,kCAAkC;EACtF,OAAO;CACT;CAEA,UAA6B;EAC3B,OAAO,KAAK,KAAK,QAAQ;CAC3B;CAEA,kBAAqC;EACnC,OAAO,KAAK,KAAK,gBAAgB;CACnC;AACF;;AAGA,SAAS,mBAAmB,SAAkB,MAAmC;CAC/E,IAAI,qBAAqB,SAAS,IAAI;AACxC;;;;;;;;;;;;;;AAeA,eAAsB,oBAAoB,SAAqE;CAC7G,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,OAAO,IAAIC,oBAAAA,QAAQ;CACzB,MAAM,KAAK,OAAO,oBAAoB,QAAQ,IAAI,CAAC,CAAC,MAAM;CAC1D,IAAI;EACF,MAAM,QAAQ,UAAU,IAAI;CAC9B,SAAS,OAAO;EACd,MAAM,KAAK,MAAM,QAAQ;EACzB,MAAM;CACR;CACA,IACE,QAAQ,OAAO,MAAM,cAAc,cAAc,aAAa,UAAU,aAAa,IAAI,KACzF,CAACD,iBAAAA,qBAAqB,IAAI,GAC1B;EACA,MAAM,KAAK,MAAM,QAAQ;EACzB,MAAM,IAAI,MAAM,0DAA0D;CAC5E;CACA,MAAM,YAAqB,CAAC;CAC5B,MAAM,oBAA8B,CAAC;CAErC,MAAM,mBAAmB,YAA2B;EAClD,KAAK,MAAM,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,GAAG,MAAM,MAAM,QAAQ;CACpE;CACA,MAAM,mBAAmB,QAAQ,oBAAA;CAGjC,IAAI,YAAY;CAChB,MAAM,cAAc,YAA2B;EAC7C,IAAI,CAAC,WAAW,OAAO,KAAK,MAAM,QAAQ;EAC1C,MAAME,mBAAAA,YAAY,KAAK,MAAM,QAAQ,GAAG,kBAAkB,2BAA2B,CAAC,CAAC,OAAO,UAC5F,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAC/D;CACF;CAEA,KAAK,MAAM,aAAa,QAAQ,QAAQ;EACtC,MAAM,QAAQ,iBAAiB,YAAY,UAAU,QAAQ;EAC7D,MAAM,cAAc,iBAAiB,YAAY,UAAU,cAAc,KAAA;EACzE,IAAI;EACJ,IAAI,eAAe;EACnB,IAAI;GAEF,SADc,cAAc,KAAK,OAAO,GAAGC,iBAAAA,sBAAsB,YAAY,CAAC,IAAI,KAAA,CACpE,OAAO,KAAK;GAC1B,MAAM,UAAU,MAAM,MAAM;GAC5B,MAAM,oBAA0B;IAC9B,eAAe;GACjB;GACA,QAAQ,KAAK,aAAa,WAAW;GACrC,MAAMD,mBAAAA,YACJ,SACA,kBACA,gBAAgB,KAAA,IAAY,uBAAuB,iBAAiB,YAAY,YAAY,QAC9F;GACA,UAAU,KAAK,KAAK;GACpB,IAAI,aAAa,kBAAkB,KAAK,YAAY,WAAW;EACjE,SAAS,OAAO;GACd,IAAI,SAAS,CAAC,cAAc;IAC1B,YAAY;IACZ,MACG,QAAQ,CAAC,CACT,OAAO,iBACN,OACE,2CAA2C,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,EAAE,EACzH,CACF;GACJ,OAAO,MAAM,OAAO,QAAQ;GAC5B,MAAM,UAAU,GAAG,gBAAgB,KAAA,IAAY,mBAAmB,iBAAiB,YAAY,YAAY,GAAG,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GACzL,IACE,aAAa,aAAa,QAC1B,EAAE,uBAAuB,aAAa,UAAU,sBAAsB,QACtE;IACA,MAAM,iBAAiB;IACvB,MAAM,YAAY;IAClB,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GAC3C;GACA,OAAO,OAAO;EAChB;CACF;CAEA,IAAI;CACJ,OAAO;EACL;EACA;EACA,eAAe;GACb,oBAAoB,YAAY;IAC9B,MAAM,iBAAiB;IACvB,MAAM,YAAY;GACpB,EAAA,CAAG;GACH,OAAO;EACT;CACF;AACF"}

package/dist/src/server/serverFacetLoader.d.mts

@@ -0,0 +1,72 @@
+import { DoomApiScope } from "../schemas/packageApi.mjs";
+import { DoomServerBundleEntry } from "../schemas/serverBundle.mjs";
+import { DoomServerFacet, DoomServerHostService, DoomServerProviderOverride } from "../schemas/serverFacet.mjs";
+import { LiveImportGuard } from "./liveImport.mjs";
+import { Context } from "@deepseek-ai/cordis";
+//#region src/server/serverFacetLoader.d.ts
+export interface LoadedServerFacet {
+  readonly declaration: DoomServerBundleEntry;
+  readonly facet: DoomServerFacet;
+  readonly retained?: true;
+  readonly initiallyEligible?: boolean;
+}
+/** One live server facet: the bundle entry shape plus the URL its package module imports from. */
+export interface LiveServerFacetEntry extends DoomServerBundleEntry {
+  /** Content-addressed import URL for `module`, see the po server's `packageUrl`. */
+  readonly url: string;
+}
+export interface LoadServerFacetsOptions extends LiveImportGuard {
+  readonly entries: readonly LiveServerFacetEntry[];
+  readonly majorMode: string;
+  readonly activeLayers: readonly string[];
+  readonly onNotice?: (message: string) => void;
+  /** Only a session host with declarative contribution gating may retain all candidates. */
+  readonly retainCandidates?: boolean;
+  /** Test seam; defaults to native `import()`. */
+  readonly importer?: (url: string) => Promise<unknown>;
+}
+export interface LoadedServerFacets {
+  readonly entries: readonly LiveServerFacetEntry[];
+  readonly facets: readonly LoadedServerFacet[];
+}
+/** Pure pre-model metadata from initially admitted session facets, never from retained candidates. */
+export declare function selectedServerProviderOverrides(facets: readonly LoadedServerFacet[], environment: Readonly<Record<string, string | undefined>>): readonly DoomServerProviderOverride[];
+/**
+ * Live reader: imports each package's built entry from its content-addressed URL.
+ *
+ * Applies the scope, ownership and `required` rules of each entry. Each import is bounded and a URL that
+ * timed out or threw is poisoned (see `guardedImport`); a poisoned required facet fails
+ * exactly as a load failure does.
+ */
+export declare function loadServerFacets(scope: DoomApiScope, options: LoadServerFacetsOptions): Promise<LoadedServerFacets>;
+export interface InstallServerFacetsOptions {
+  host: DoomServerHostService;
+  facets: readonly (DoomServerFacet | LoadedServerFacet)[];
+  onNotice?: (message: string) => void;
+  /** Install additional typed services before any package facet is applied. */
+  prepare?: (root: Context) => void | Promise<void>;
+  /** Bound on each facet's `apply`; defaults to `LIVE_FACTORY_TIMEOUT_MS`. */
+  factoryTimeoutMs?: number;
+}
+export interface InstalledServerFacets {
+  /** The cordis root the facets were installed into, for a host that provides more services. */
+  readonly root: Context;
+  readonly installedPackages: readonly string[];
+  dispose(): Promise<void>;
+}
+/**
+ * Installs server facets into a cordis root that provides the server host.
+ *
+ * A cordis root rather than plain calls, because a facet is a Doom
+ * contribution like any other: it may inject services a host provides later,
+ * and it unwinds through the same fiber disposal the Pi facet uses. One root
+ * per host process, created here, so no host has to know cordis to run one.
+ *
+ * Facets are awaited one at a time and each is a single fiber, because a
+ * facet declares its `inject` on itself. `fiber.await()` therefore settles
+ * once `apply` has run, and the caller can read a complete mount table before
+ * deciding whether to open a listener.
+ */
+export declare function installServerFacets(options: InstallServerFacetsOptions): Promise<InstalledServerFacets>;
+//#endregion
+//# sourceMappingURL=serverFacetLoader.d.mts.map

package/dist/src/server/serverFacetLoader.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverFacetLoader.d.mts","names":[],"sources":["../../../src/server/serverFacetLoader.ts"],"mappings":";;;;;;iBAciB;WACN,aAAa;WACb,OAAO;WACP;WACA;;;iBAIM,6BAA6B;;WAEnC;;iBAGM,gCAAgC;WACtC,kBAAkB;WAClB;WACA;WACA,YAAY;;WAEZ;;WAEA,YAAY,gBAAgB;;iBAGtB;WACN,kBAAkB;WAClB,iBAAiB;;;wBAIZ,gCACd,iBAAiB,qBACjB,aAAa,SAAS,+CACZ;;;;;;;;wBAuDU,iBACpB,OAAO,cACP,SAAS,0BACR,QAAQ;iBASM;EACf,MAAM;EACN,kBAAkB,kBAAkB;EACpC,YAAY;;EAEZ,WAAW,MAAM,mBAAmB;;EAEpC;;iBAGe;;WAEN,MAAM;WACN;EACT,WAAW;;;;;;;;;;;;;;;wBAoGS,oBAAoB,SAAS,6BAA6B,QAAQ"}

package/dist/src/server/serverFacetLoader.mjs

@@ -0,0 +1,212 @@
+import { DOOM_HEADLESS_OWNER, readDoomHeadlessHost } from "../schemas/headless.mjs";
+import { guardedImport, withTimeout } from "./liveImport.mjs";
+import { DOOM_SERVER_HOST_SERVICE, isDoomServerFacet } from "../schemas/serverFacet.mjs";
+import { Context, Service } from "@deepseek-ai/cordis";
+//#region src/server/serverFacetLoader.ts
+/** Pure pre-model metadata from initially admitted session facets, never from retained candidates. */
+function selectedServerProviderOverrides(facets, environment) {
+	return facets.flatMap(({ declaration, facet, initiallyEligible }) => initiallyEligible === false || !declaration.scopes.includes("session") ? [] : facet.providerOverrides?.({ environment }) ?? []);
+}
+function ownedBy(owners, majorMode, activeLayers) {
+	return owners.some((owner) => owner.majorMode === majorMode && (owner.layer === "default" || activeLayers.includes(owner.layer)));
+}
+async function loadFacetEntries(scope, entries, options, importUrl) {
+	const facets = [];
+	for (const declaration of entries) {
+		if (!declaration.scopes.includes(scope)) continue;
+		const eligible = ownedBy(declaration.owners, options.majorMode, options.activeLayers);
+		if (!(scope === "session" && options.retainCandidates === true) && !eligible) continue;
+		try {
+			const imported = await importUrl(declaration);
+			if (!isDoomServerFacet(imported?.default)) throw new Error("default export is not a server object facet");
+			facets.push({
+				declaration,
+				facet: imported.default,
+				...scope === "session" && options.retainCandidates ? {
+					retained: true,
+					initiallyEligible: eligible
+				} : {}
+			});
+		} catch (error) {
+			const message = `Server facet '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;
+			if (declaration.required && eligible) throw new Error(message, { cause: error });
+			options.onNotice?.(message);
+		}
+	}
+	return facets;
+}
+/**
+* Live reader: imports each package's built entry from its content-addressed URL.
+*
+* Applies the scope, ownership and `required` rules of each entry. Each import is bounded and a URL that
+* timed out or threw is poisoned (see `guardedImport`); a poisoned required facet fails
+* exactly as a load failure does.
+*/
+async function loadServerFacets(scope, options) {
+	const importer = options.importer ?? ((url) => import(url));
+	const urls = new Map(options.entries.map((entry) => [entry, entry.url]));
+	const facets = await loadFacetEntries(scope, options.entries, options, (declaration) => guardedImport(urls.get(declaration), importer, options));
+	return {
+		entries: options.entries,
+		facets
+	};
+}
+/**
+* Binds registrations to the Cordis fiber that calls the host service.
+*
+* The host itself is shared, but Cordis traceable services rebind `ctx` to the
+* caller. That lets a facet's registration unwind even when `apply` throws
+* before it can return its disposer.
+*/
+var ScopedDoomServerHost = class extends Service {
+	host;
+	scope;
+	context;
+	constructor(ctx, host) {
+		super(ctx, DOOM_SERVER_HOST_SERVICE);
+		this.host = host;
+		this.scope = host.scope;
+		this.context = host.context;
+	}
+	registerApi(api) {
+		const headless = this.scope === "session" ? readDoomHeadlessHost(this.ctx) : void 0;
+		if (headless) {
+			const activity = headless.registerActivity({
+				name: `api:${api.basePath}`,
+				start: () => {
+					const registration = this.host.registerApi(api);
+					if (registration.mounted !== true) {
+						registration.dispose();
+						throw new Error(`package API '${api.basePath}' did not mount.`);
+					}
+					return () => {
+						registration.dispose();
+					};
+				}
+			});
+			return {
+				mounted: true,
+				dispose: () => activity.dispose()
+			};
+		}
+		const registration = this.host.registerApi(api);
+		if (registration.mounted !== true) {
+			registration.dispose();
+			throw new Error(`package API '${api.basePath}' did not mount.`);
+		}
+		this.ctx.effect(() => () => registration.dispose(), "server facet API registration");
+		return registration;
+	}
+	registerChannel(channel) {
+		const registration = this.host.registerChannel(channel);
+		if (registration.mounted !== true) {
+			registration.dispose();
+			throw new Error(`hub channel '${channel.frameType}' did not mount.`);
+		}
+		this.ctx.effect(() => () => registration.dispose(), "server facet channel registration");
+		return registration;
+	}
+	registerMethod = (definition, handler) => {
+		const registration = this.host.registerMethod(definition, handler);
+		if (registration.mounted !== true) {
+			registration.dispose();
+			throw new Error(`plugin method '${definition.service}.${definition.method}' did not mount.`);
+		}
+		this.ctx.effect(() => () => registration.dispose(), "server facet method registration");
+		return registration;
+	};
+	mounted() {
+		return this.host.mounted();
+	}
+	mountedChannels() {
+		return this.host.mountedChannels();
+	}
+};
+/** Publishes the host service from inside a mounted plugin, so it unwinds with the root. */
+function serverHostProvider(context, host) {
+	new ScopedDoomServerHost(context, host);
+}
+/**
+* Installs server facets into a cordis root that provides the server host.
+*
+* A cordis root rather than plain calls, because a facet is a Doom
+* contribution like any other: it may inject services a host provides later,
+* and it unwinds through the same fiber disposal the Pi facet uses. One root
+* per host process, created here, so no host has to know cordis to run one.
+*
+* Facets are awaited one at a time and each is a single fiber, because a
+* facet declares its `inject` on itself. `fiber.await()` therefore settles
+* once `apply` has run, and the caller can read a complete mount table before
+* deciding whether to open a listener.
+*/
+async function installServerFacets(options) {
+	const notice = options.onNotice ?? (() => {});
+	const root = new Context();
+	await root.plugin(serverHostProvider, options.host).await();
+	try {
+		await options.prepare?.(root);
+	} catch (error) {
+		await root.fiber.dispose();
+		throw error;
+	}
+	if (options.facets.some((candidate) => "retained" in candidate && candidate.retained === true) && !readDoomHeadlessHost(root)) {
+		await root.fiber.dispose();
+		throw new Error("Retained server candidates require a gated headless host");
+	}
+	const installed = [];
+	const installedPackages = [];
+	const disposeInstalled = async () => {
+		for (const fiber of [...installed].reverse()) await fiber.dispose();
+	};
+	const factoryTimeoutMs = options.factoryTimeoutMs ?? 1e4;
+	let abandoned = false;
+	const disposeRoot = async () => {
+		if (!abandoned) return root.fiber.dispose();
+		await withTimeout(root.fiber.dispose(), factoryTimeoutMs, "server facet root dispose").catch((error) => notice(error instanceof Error ? error.message : String(error)));
+	};
+	for (const candidate of options.facets) {
+		const facet = "declaration" in candidate ? candidate.facet : candidate;
+		const declaration = "declaration" in candidate ? candidate.declaration : void 0;
+		let fiber;
+		let applySettled = false;
+		try {
+			fiber = (declaration ? root.extend({ [DOOM_HEADLESS_OWNER]: declaration }) : root).plugin(facet);
+			const applied = fiber.await();
+			const markSettled = () => {
+				applySettled = true;
+			};
+			applied.then(markSettled, markSettled);
+			await withTimeout(applied, factoryTimeoutMs, declaration === void 0 ? "server facet apply" : `server facet '${declaration.packageName}' apply`);
+			installed.push(fiber);
+			if (declaration) installedPackages.push(declaration.packageName);
+		} catch (error) {
+			if (fiber && !applySettled) {
+				abandoned = true;
+				fiber.dispose().catch((disposeError) => notice(`abandoned server facet did not dispose (${disposeError instanceof Error ? disposeError.message : String(disposeError)})`));
+			} else await fiber?.dispose();
+			const message = `${declaration === void 0 ? "a server facet" : `server facet '${declaration.packageName}'`} did not install (${error instanceof Error ? error.message : String(error)})`;
+			if (declaration?.required === true && !("initiallyEligible" in candidate && candidate.initiallyEligible === false)) {
+				await disposeInstalled();
+				await disposeRoot();
+				throw new Error(message, { cause: error });
+			}
+			notice(message);
+		}
+	}
+	let disposePromise;
+	return {
+		root,
+		installedPackages,
+		dispose: () => {
+			disposePromise ??= (async () => {
+				await disposeInstalled();
+				await disposeRoot();
+			})();
+			return disposePromise;
+		}
+	};
+}
+//#endregion
+export { installServerFacets, loadServerFacets, selectedServerProviderOverrides };
+
+//# sourceMappingURL=serverFacetLoader.mjs.map

package/dist/src/server/serverFacetLoader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverFacetLoader.mjs","names":[],"sources":["../../../src/server/serverFacetLoader.ts"],"sourcesContent":["import { Context, Service, type Fiber } from '@deepseek-ai/cordis';\n\nimport { DOOM_HEADLESS_OWNER, readDoomHeadlessHost } from '../schemas/headless';\nimport type { DoomApiScope } from '../schemas/packageApi';\nimport type { DoomServerBundleEntry } from '../schemas/serverBundle';\nimport {\n  DOOM_SERVER_HOST_SERVICE,\n  type DoomServerFacet,\n  type DoomServerProviderOverride,\n  type DoomServerHostService,\n  isDoomServerFacet,\n} from '../schemas/serverFacet';\nimport { guardedImport, LIVE_FACTORY_TIMEOUT_MS, type LiveImportGuard, withTimeout } from './liveImport';\n\nexport interface LoadedServerFacet {\n  readonly declaration: DoomServerBundleEntry;\n  readonly facet: DoomServerFacet;\n  readonly retained?: true;\n  readonly initiallyEligible?: boolean;\n}\n\n/** One live server facet: the bundle entry shape plus the URL its package module imports from. */\nexport interface LiveServerFacetEntry extends DoomServerBundleEntry {\n  /** Content-addressed import URL for `module`, see the po server's `packageUrl`. */\n  readonly url: string;\n}\n\nexport interface LoadServerFacetsOptions extends LiveImportGuard {\n  readonly entries: readonly LiveServerFacetEntry[];\n  readonly majorMode: string;\n  readonly activeLayers: readonly string[];\n  readonly onNotice?: (message: string) => void;\n  /** Only a session host with declarative contribution gating may retain all candidates. */\n  readonly retainCandidates?: boolean;\n  /** Test seam; defaults to native `import()`. */\n  readonly importer?: (url: string) => Promise<unknown>;\n}\n\nexport interface LoadedServerFacets {\n  readonly entries: readonly LiveServerFacetEntry[];\n  readonly facets: readonly LoadedServerFacet[];\n}\n\n/** Pure pre-model metadata from initially admitted session facets, never from retained candidates. */\nexport function selectedServerProviderOverrides(\n  facets: readonly LoadedServerFacet[],\n  environment: Readonly<Record<string, string | undefined>>,\n): readonly DoomServerProviderOverride[] {\n  return facets.flatMap(({ declaration, facet, initiallyEligible }) =>\n    initiallyEligible === false || !declaration.scopes.includes('session')\n      ? []\n      : (facet.providerOverrides?.({ environment }) ?? []),\n  );\n}\n\nfunction ownedBy(\n  owners: readonly { readonly majorMode: string; readonly layer: string }[],\n  majorMode: string,\n  activeLayers: readonly string[],\n): boolean {\n  return owners.some(\n    (owner) => owner.majorMode === majorMode && (owner.layer === 'default' || activeLayers.includes(owner.layer)),\n  );\n}\n\nasync function loadFacetEntries(\n  scope: DoomApiScope,\n  entries: readonly DoomServerBundleEntry[],\n  options: Pick<LoadServerFacetsOptions, 'majorMode' | 'activeLayers' | 'onNotice' | 'retainCandidates'>,\n  importUrl: (declaration: DoomServerBundleEntry) => Promise<unknown>,\n): Promise<LoadedServerFacet[]> {\n  const facets: LoadedServerFacet[] = [];\n  for (const declaration of entries) {\n    if (!declaration.scopes.includes(scope)) continue;\n    const eligible = ownedBy(declaration.owners, options.majorMode, options.activeLayers);\n    if (!(scope === 'session' && options.retainCandidates === true) && !eligible) continue;\n    try {\n      const imported = (await importUrl(declaration)) as { default?: unknown } | undefined;\n      if (!isDoomServerFacet(imported?.default)) throw new Error('default export is not a server object facet');\n      facets.push({\n        declaration,\n        facet: imported.default,\n        ...(scope === 'session' && options.retainCandidates\n          ? { retained: true as const, initiallyEligible: eligible }\n          : {}),\n      });\n    } catch (error) {\n      const message = `Server facet '${declaration.packageName}' could not load (${error instanceof Error ? error.message : String(error)})`;\n      if (declaration.required && eligible) throw new Error(message, { cause: error });\n      options.onNotice?.(message);\n    }\n  }\n  return facets;\n}\n\n/**\n * Live reader: imports each package's built entry from its content-addressed URL.\n *\n * Applies the scope, ownership and `required` rules of each entry. Each import is bounded and a URL that\n * timed out or threw is poisoned (see `guardedImport`); a poisoned required facet fails\n * exactly as a load failure does.\n */\nexport async function loadServerFacets(\n  scope: DoomApiScope,\n  options: LoadServerFacetsOptions,\n): Promise<LoadedServerFacets> {\n  const importer = options.importer ?? ((url: string) => import(url));\n  const urls = new Map(options.entries.map((entry) => [entry as DoomServerBundleEntry, entry.url]));\n  const facets = await loadFacetEntries(scope, options.entries, options, (declaration) =>\n    guardedImport(urls.get(declaration)!, importer, options),\n  );\n  return { entries: options.entries, facets };\n}\n\nexport interface InstallServerFacetsOptions {\n  host: DoomServerHostService;\n  facets: readonly (DoomServerFacet | LoadedServerFacet)[];\n  onNotice?: (message: string) => void;\n  /** Install additional typed services before any package facet is applied. */\n  prepare?: (root: Context) => void | Promise<void>;\n  /** Bound on each facet's `apply`; defaults to `LIVE_FACTORY_TIMEOUT_MS`. */\n  factoryTimeoutMs?: number;\n}\n\nexport interface InstalledServerFacets {\n  /** The cordis root the facets were installed into, for a host that provides more services. */\n  readonly root: Context;\n  readonly installedPackages: readonly string[];\n  dispose(): Promise<void>;\n}\n\n/**\n * Binds registrations to the Cordis fiber that calls the host service.\n *\n * The host itself is shared, but Cordis traceable services rebind `ctx` to the\n * caller. That lets a facet's registration unwind even when `apply` throws\n * before it can return its disposer.\n */\nclass ScopedDoomServerHost extends Service<DoomServerHostService> implements DoomServerHostService {\n  readonly scope: DoomServerHostService['scope'];\n  readonly context: DoomServerHostService['context'];\n\n  constructor(\n    ctx: Context,\n    private readonly host: DoomServerHostService,\n  ) {\n    super(ctx, DOOM_SERVER_HOST_SERVICE);\n    this.scope = host.scope;\n    this.context = host.context;\n  }\n\n  registerApi(api: Parameters<DoomServerHostService['registerApi']>[0]) {\n    const headless = this.scope === 'session' ? readDoomHeadlessHost(this.ctx) : undefined;\n    if (headless) {\n      const activity = headless.registerActivity({\n        name: `api:${api.basePath}`,\n        start: () => {\n          const registration = this.host.registerApi(api);\n          if (registration.mounted !== true) {\n            registration.dispose();\n            throw new Error(`package API '${api.basePath}' did not mount.`);\n          }\n          return () => {\n            registration.dispose();\n          };\n        },\n      });\n      return {\n        mounted: true,\n        dispose: () => activity.dispose(),\n      };\n    }\n    const registration = this.host.registerApi(api);\n    if (registration.mounted !== true) {\n      registration.dispose();\n      throw new Error(`package API '${api.basePath}' did not mount.`);\n    }\n    this.ctx.effect(() => () => registration.dispose(), 'server facet API registration');\n    return registration;\n  }\n\n  registerChannel(channel: Parameters<DoomServerHostService['registerChannel']>[0]) {\n    const registration = this.host.registerChannel(channel);\n    if (registration.mounted !== true) {\n      registration.dispose();\n      throw new Error(`hub channel '${channel.frameType}' did not mount.`);\n    }\n    this.ctx.effect(() => () => registration.dispose(), 'server facet channel registration');\n    return registration;\n  }\n\n  registerMethod: DoomServerHostService['registerMethod'] = (definition, handler) => {\n    const registration = this.host.registerMethod(definition, handler);\n    if (registration.mounted !== true) {\n      registration.dispose();\n      throw new Error(`plugin method '${definition.service}.${definition.method}' did not mount.`);\n    }\n    this.ctx.effect(() => () => registration.dispose(), 'server facet method registration');\n    return registration;\n  };\n\n  mounted(): readonly string[] {\n    return this.host.mounted();\n  }\n\n  mountedChannels(): readonly string[] {\n    return this.host.mountedChannels();\n  }\n}\n\n/** Publishes the host service from inside a mounted plugin, so it unwinds with the root. */\nfunction serverHostProvider(context: Context, host: DoomServerHostService): void {\n  new ScopedDoomServerHost(context, host);\n}\n\n/**\n * Installs server facets into a cordis root that provides the server host.\n *\n * A cordis root rather than plain calls, because a facet is a Doom\n * contribution like any other: it may inject services a host provides later,\n * and it unwinds through the same fiber disposal the Pi facet uses. One root\n * per host process, created here, so no host has to know cordis to run one.\n *\n * Facets are awaited one at a time and each is a single fiber, because a\n * facet declares its `inject` on itself. `fiber.await()` therefore settles\n * once `apply` has run, and the caller can read a complete mount table before\n * deciding whether to open a listener.\n */\nexport async function installServerFacets(options: InstallServerFacetsOptions): Promise<InstalledServerFacets> {\n  const notice = options.onNotice ?? ((): void => {});\n  const root = new Context();\n  await root.plugin(serverHostProvider, options.host).await();\n  try {\n    await options.prepare?.(root);\n  } catch (error) {\n    await root.fiber.dispose();\n    throw error;\n  }\n  if (\n    options.facets.some((candidate) => 'retained' in candidate && candidate.retained === true) &&\n    !readDoomHeadlessHost(root)\n  ) {\n    await root.fiber.dispose();\n    throw new Error('Retained server candidates require a gated headless host');\n  }\n  const installed: Fiber[] = [];\n  const installedPackages: string[] = [];\n\n  const disposeInstalled = async (): Promise<void> => {\n    for (const fiber of [...installed].reverse()) await fiber.dispose();\n  };\n  const factoryTimeoutMs = options.factoryTimeoutMs ?? LIVE_FACTORY_TIMEOUT_MS;\n  // A fiber whose apply never settles also never finishes disposing, and holds its root\n  // open. Once one is abandoned, root disposal is bounded so teardown cannot hang.\n  let abandoned = false;\n  const disposeRoot = async (): Promise<void> => {\n    if (!abandoned) return root.fiber.dispose();\n    await withTimeout(root.fiber.dispose(), factoryTimeoutMs, 'server facet root dispose').catch((error: unknown) =>\n      notice(error instanceof Error ? error.message : String(error)),\n    );\n  };\n\n  for (const candidate of options.facets) {\n    const facet = 'declaration' in candidate ? candidate.facet : candidate;\n    const declaration = 'declaration' in candidate ? candidate.declaration : undefined;\n    let fiber: Fiber | undefined;\n    let applySettled = false;\n    try {\n      const scope = declaration ? root.extend({ [DOOM_HEADLESS_OWNER]: declaration }) : root;\n      fiber = scope.plugin(facet);\n      const applied = fiber.await();\n      const markSettled = (): void => {\n        applySettled = true;\n      };\n      applied.then(markSettled, markSettled);\n      await withTimeout(\n        applied,\n        factoryTimeoutMs,\n        declaration === undefined ? 'server facet apply' : `server facet '${declaration.packageName}' apply`,\n      );\n      installed.push(fiber);\n      if (declaration) installedPackages.push(declaration.packageName);\n    } catch (error) {\n      if (fiber && !applySettled) {\n        abandoned = true;\n        void fiber\n          .dispose()\n          .catch((disposeError: unknown) =>\n            notice(\n              `abandoned server facet did not dispose (${disposeError instanceof Error ? disposeError.message : String(disposeError)})`,\n            ),\n          );\n      } else await fiber?.dispose();\n      const message = `${declaration === undefined ? 'a server facet' : `server facet '${declaration.packageName}'`} did not install (${error instanceof Error ? error.message : String(error)})`;\n      if (\n        declaration?.required === true &&\n        !('initiallyEligible' in candidate && candidate.initiallyEligible === false)\n      ) {\n        await disposeInstalled();\n        await disposeRoot();\n        throw new Error(message, { cause: error });\n      }\n      notice(message);\n    }\n  }\n\n  let disposePromise: Promise<void> | undefined;\n  return {\n    root,\n    installedPackages,\n    dispose: () => {\n      disposePromise ??= (async () => {\n        await disposeInstalled();\n        await disposeRoot();\n      })();\n      return disposePromise;\n    },\n  };\n}\n"],"mappings":";;;;;;AA4CA,SAAgB,gCACd,QACA,aACuC;CACvC,OAAO,OAAO,SAAS,EAAE,aAAa,OAAO,wBAC3C,sBAAsB,SAAS,CAAC,YAAY,OAAO,SAAS,SAAS,IACjE,CAAC,IACA,MAAM,oBAAoB,EAAE,YAAY,CAAC,KAAK,CAAC,CACtD;AACF;AAEA,SAAS,QACP,QACA,WACA,cACS;CACT,OAAO,OAAO,MACX,UAAU,MAAM,cAAc,cAAc,MAAM,UAAU,aAAa,aAAa,SAAS,MAAM,KAAK,EAC7G;AACF;AAEA,eAAe,iBACb,OACA,SACA,SACA,WAC8B;CAC9B,MAAM,SAA8B,CAAC;CACrC,KAAK,MAAM,eAAe,SAAS;EACjC,IAAI,CAAC,YAAY,OAAO,SAAS,KAAK,GAAG;EACzC,MAAM,WAAW,QAAQ,YAAY,QAAQ,QAAQ,WAAW,QAAQ,YAAY;EACpF,IAAI,EAAE,UAAU,aAAa,QAAQ,qBAAqB,SAAS,CAAC,UAAU;EAC9E,IAAI;GACF,MAAM,WAAY,MAAM,UAAU,WAAW;GAC7C,IAAI,CAAC,kBAAkB,UAAU,OAAO,GAAG,MAAM,IAAI,MAAM,6CAA6C;GACxG,OAAO,KAAK;IACV;IACA,OAAO,SAAS;IAChB,GAAI,UAAU,aAAa,QAAQ,mBAC/B;KAAE,UAAU;KAAe,mBAAmB;IAAS,IACvD,CAAC;GACP,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,YAAY,YAAY,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GACpI,IAAI,YAAY,YAAY,UAAU,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GAC/E,QAAQ,WAAW,OAAO;EAC5B;CACF;CACA,OAAO;AACT;;;;;;;;AASA,eAAsB,iBACpB,OACA,SAC6B;CAC7B,MAAM,WAAW,QAAQ,cAAc,QAAgB,OAAO;CAC9D,MAAM,OAAO,IAAI,IAAI,QAAQ,QAAQ,KAAK,UAAU,CAAC,OAAgC,MAAM,GAAG,CAAC,CAAC;CAChG,MAAM,SAAS,MAAM,iBAAiB,OAAO,QAAQ,SAAS,UAAU,gBACtE,cAAc,KAAK,IAAI,WAAW,GAAI,UAAU,OAAO,CACzD;CACA,OAAO;EAAE,SAAS,QAAQ;EAAS;CAAO;AAC5C;;;;;;;;AA0BA,IAAM,uBAAN,cAAmC,QAAgE;CAM9E;CALnB;CACA;CAEA,YACE,KACA,MACA;EACA,MAAM,KAAK,wBAAwB;EAFlB,KAAA,OAAA;EAGjB,KAAK,QAAQ,KAAK;EAClB,KAAK,UAAU,KAAK;CACtB;CAEA,YAAY,KAA0D;EACpE,MAAM,WAAW,KAAK,UAAU,YAAY,qBAAqB,KAAK,GAAG,IAAI,KAAA;EAC7E,IAAI,UAAU;GACZ,MAAM,WAAW,SAAS,iBAAiB;IACzC,MAAM,OAAO,IAAI;IACjB,aAAa;KACX,MAAM,eAAe,KAAK,KAAK,YAAY,GAAG;KAC9C,IAAI,aAAa,YAAY,MAAM;MACjC,aAAa,QAAQ;MACrB,MAAM,IAAI,MAAM,gBAAgB,IAAI,SAAS,iBAAiB;KAChE;KACA,aAAa;MACX,aAAa,QAAQ;KACvB;IACF;GACF,CAAC;GACD,OAAO;IACL,SAAS;IACT,eAAe,SAAS,QAAQ;GAClC;EACF;EACA,MAAM,eAAe,KAAK,KAAK,YAAY,GAAG;EAC9C,IAAI,aAAa,YAAY,MAAM;GACjC,aAAa,QAAQ;GACrB,MAAM,IAAI,MAAM,gBAAgB,IAAI,SAAS,iBAAiB;EAChE;EACA,KAAK,IAAI,mBAAmB,aAAa,QAAQ,GAAG,+BAA+B;EACnF,OAAO;CACT;CAEA,gBAAgB,SAAkE;EAChF,MAAM,eAAe,KAAK,KAAK,gBAAgB,OAAO;EACtD,IAAI,aAAa,YAAY,MAAM;GACjC,aAAa,QAAQ;GACrB,MAAM,IAAI,MAAM,gBAAgB,QAAQ,UAAU,iBAAiB;EACrE;EACA,KAAK,IAAI,mBAAmB,aAAa,QAAQ,GAAG,mCAAmC;EACvF,OAAO;CACT;CAEA,kBAA2D,YAAY,YAAY;EACjF,MAAM,eAAe,KAAK,KAAK,eAAe,YAAY,OAAO;EACjE,IAAI,aAAa,YAAY,MAAM;GACjC,aAAa,QAAQ;GACrB,MAAM,IAAI,MAAM,kBAAkB,WAAW,QAAQ,GAAG,WAAW,OAAO,iBAAiB;EAC7F;EACA,KAAK,IAAI,mBAAmB,aAAa,QAAQ,GAAG,kCAAkC;EACtF,OAAO;CACT;CAEA,UAA6B;EAC3B,OAAO,KAAK,KAAK,QAAQ;CAC3B;CAEA,kBAAqC;EACnC,OAAO,KAAK,KAAK,gBAAgB;CACnC;AACF;;AAGA,SAAS,mBAAmB,SAAkB,MAAmC;CAC/E,IAAI,qBAAqB,SAAS,IAAI;AACxC;;;;;;;;;;;;;;AAeA,eAAsB,oBAAoB,SAAqE;CAC7G,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,KAAK,OAAO,oBAAoB,QAAQ,IAAI,CAAC,CAAC,MAAM;CAC1D,IAAI;EACF,MAAM,QAAQ,UAAU,IAAI;CAC9B,SAAS,OAAO;EACd,MAAM,KAAK,MAAM,QAAQ;EACzB,MAAM;CACR;CACA,IACE,QAAQ,OAAO,MAAM,cAAc,cAAc,aAAa,UAAU,aAAa,IAAI,KACzF,CAAC,qBAAqB,IAAI,GAC1B;EACA,MAAM,KAAK,MAAM,QAAQ;EACzB,MAAM,IAAI,MAAM,0DAA0D;CAC5E;CACA,MAAM,YAAqB,CAAC;CAC5B,MAAM,oBAA8B,CAAC;CAErC,MAAM,mBAAmB,YAA2B;EAClD,KAAK,MAAM,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,GAAG,MAAM,MAAM,QAAQ;CACpE;CACA,MAAM,mBAAmB,QAAQ,oBAAA;CAGjC,IAAI,YAAY;CAChB,MAAM,cAAc,YAA2B;EAC7C,IAAI,CAAC,WAAW,OAAO,KAAK,MAAM,QAAQ;EAC1C,MAAM,YAAY,KAAK,MAAM,QAAQ,GAAG,kBAAkB,2BAA2B,CAAC,CAAC,OAAO,UAC5F,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAC/D;CACF;CAEA,KAAK,MAAM,aAAa,QAAQ,QAAQ;EACtC,MAAM,QAAQ,iBAAiB,YAAY,UAAU,QAAQ;EAC7D,MAAM,cAAc,iBAAiB,YAAY,UAAU,cAAc,KAAA;EACzE,IAAI;EACJ,IAAI,eAAe;EACnB,IAAI;GAEF,SADc,cAAc,KAAK,OAAO,GAAG,sBAAsB,YAAY,CAAC,IAAI,KAAA,CACpE,OAAO,KAAK;GAC1B,MAAM,UAAU,MAAM,MAAM;GAC5B,MAAM,oBAA0B;IAC9B,eAAe;GACjB;GACA,QAAQ,KAAK,aAAa,WAAW;GACrC,MAAM,YACJ,SACA,kBACA,gBAAgB,KAAA,IAAY,uBAAuB,iBAAiB,YAAY,YAAY,QAC9F;GACA,UAAU,KAAK,KAAK;GACpB,IAAI,aAAa,kBAAkB,KAAK,YAAY,WAAW;EACjE,SAAS,OAAO;GACd,IAAI,SAAS,CAAC,cAAc;IAC1B,YAAY;IACZ,MACG,QAAQ,CAAC,CACT,OAAO,iBACN,OACE,2CAA2C,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,EAAE,EACzH,CACF;GACJ,OAAO,MAAM,OAAO,QAAQ;GAC5B,MAAM,UAAU,GAAG,gBAAgB,KAAA,IAAY,mBAAmB,iBAAiB,YAAY,YAAY,GAAG,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GACzL,IACE,aAAa,aAAa,QAC1B,EAAE,uBAAuB,aAAa,UAAU,sBAAsB,QACtE;IACA,MAAM,iBAAiB;IACvB,MAAM,YAAY;IAClB,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;GAC3C;GACA,OAAO,OAAO;EAChB;CACF;CAEA,IAAI;CACJ,OAAO;EACL;EACA;EACA,eAAe;GACb,oBAAoB,YAAY;IAC9B,MAAM,iBAAiB;IACvB,MAAM,YAAY;GACpB,EAAA,CAAG;GACH,OAAO;EACT;CACF;AACF"}