@nimbus-sh/worker 0.1.1 → 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ashish Kumar Singh and Nimbus contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/NOTICE.md

@@ -0,0 +1,6 @@
+# Notices
+
+This package is part of Nimbus. It includes the Worker runtime, generated
+browser assets, runtime packaging scripts, and integration code for third-party
+runtime components. See the project notices at
+https://github.com/AshishKumar4/Nimbus/blob/main/NOTICE.md.

package/README.md

@@ -32,6 +32,7 @@ import {
   CirrusHmrRPC,
   createNimbusHandler,
 } from '@nimbus-sh/sdk/worker';
+import { defineNimbusConfig } from '@nimbus-sh/config';
 
 // Re-export the DO + every RPC class so wrangler's `class_name` lookup +
 // `enable_ctx_exports` find them in your Worker's main-module exports.
@@ -47,7 +48,22 @@ export {
   CirrusHmrRPC,
 };
 
-export default createNimbusHandler();
+const nimbusConfig = defineNimbusConfig({
+  sandboxes: {
+    default: {
+      root: '/home/user',
+      runtimes: { preinstall: ['python'], onDemand: true },
+      tools: { namespace: 'sandbox', kind: 'sandbox' },
+    },
+  },
+});
+
+export default createNimbusHandler({
+  sdk: {
+    remote: true,
+    config: nimbusConfig,
+  },
+});
 ```
 
 `wrangler.jsonc` (use `@nimbus-sh/config` to generate, or adapt
@@ -63,7 +79,7 @@ export default createNimbusHandler();
   "assets": {
     "directory": "node_modules/@nimbus-sh/worker/public",
     "binding": "ASSETS",
-    "run_worker_first": ["/s/*", "/new"]
+    "run_worker_first": ["/api/*", "/s/*", "/new"]
   },
   "alias": {
     "@lifo-sh/ui": "./node_modules/@nimbus-sh/worker/dist/stubs/lifo-ui.js",
@@ -117,6 +133,10 @@ possession instead.
     onSessionEnd?:   (ctx) => void | Promise<void>;  // reserved v0.2
   };
   routes?: (request, env, ctx) => Response | null | Promise<Response | null>;
+  sdk?: {
+    remote?: boolean | { enabled?: boolean; basePath?: string; allowLegacy?: boolean };
+    config?: NimbusConfig;
+  };
 }
 ```
 
@@ -144,7 +164,7 @@ export default createNimbusHandler({
 Programmatic sandbox route:
 
 ```ts
-import { Nimbus } from '@nimbus-sh/sdk/sandbox';
+import { Nimbus } from '@nimbus-sh/sdk';
 
 export default createNimbusHandler({
   routes: async (req, env) => {
@@ -171,6 +191,21 @@ export default createNimbusHandler({
 });
 ```
 
+Remote SDK API:
+
+```ts
+export default createNimbusHandler({
+  sdk: {
+    remote: true,
+    config: nimbusConfig,
+  },
+});
+```
+
+Remote calls use `POST /api/nimbus/v1/sandboxes/<id>/rpc` internally.
+Applications normally call it through `Nimbus.connect({ endpoint, token,
+config })`. The route requires a valid Nimbus JWT and `sandbox:use` scope.
+
 For long-running app servers, start an explicit long-running process and
 expose the virtual port:
 

package/dist/_shared/cache-stats.d.ts

@@ -10,7 +10,7 @@
  *   L3 — R2 (cross-tenant global)                    ~30-100 ms regional
  *   L4 — registry.npmjs.org origin                   ~100-300 ms cross-region
  *
- * Pre-cache-observability wave: hit/miss counters lived in
+ * Pre-cache metrics support: hit/miss counters lived in
  * src/observability/diag-counters.ts but only tracked the RPC-call
  * boundary (`r2.tarballHit`, `r2.packumentMiss`), not per-tier. From
  * prod we couldn't tell whether L2 hit-rate was 90% or 30%.

package/dist/_shared/cache-stats.js

@@ -10,7 +10,7 @@
  *   L3 — R2 (cross-tenant global)                    ~30-100 ms regional
  *   L4 — registry.npmjs.org origin                   ~100-300 ms cross-region
  *
- * Pre-cache-observability wave: hit/miss counters lived in
+ * Pre-cache metrics support: hit/miss counters lived in
  * src/observability/diag-counters.ts but only tracked the RPC-call
  * boundary (`r2.tarballHit`, `r2.packumentMiss`), not per-tier. From
  * prod we couldn't tell whether L2 hit-rate was 90% or 30%.

package/dist/_shared/exports-resolver.d.ts

@@ -15,7 +15,6 @@
  *      the same JS source so `require()` from inside a user's `node` script
  *      sees the same exports map as the install pipeline.
  *
- * Audit reference: audit/sections/03-resolver-gaps.md §3.1, §3.2.
  *
  * Spec features supported:
  *   - String shorthand:                "exports": "./dist/index.mjs"
@@ -70,7 +69,6 @@ export declare function resolvePackageEntry(pkg: {
  *
  * This source must be byte-equivalent to the TS impl above (modulo type
  * annotations and `export` keywords). Keep them in sync — there is one
- * verification probe in audit/probes that compares parity.
  */
 export declare function getExportsResolverJS(): string;
 //# sourceMappingURL=exports-resolver.d.ts.map

package/dist/_shared/exports-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports-resolver.d.ts","sourceRoot":"","sources":["../../src/_shared/exports-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,UAA6C,CAAC;AAEjF,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,UAAiC,CAAC;AAErE;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,GAAG,EACjB,OAAO,GAAE,MAAY,EACrB,UAAU,GAAE,MAAM,EAA2B,GAC5C,MAAM,GAAG,IAAI,CAkEf;AAwCD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,GAAG,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACtD,OAAO,GAAE,MAAY,EACrB,UAAU,GAAE,MAAM,EAA2B,GAC5C,MAAM,GAAG,IAAI,CAqBf;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAiG7C"}
+{"version":3,"file":"exports-resolver.d.ts","sourceRoot":"","sources":["../../src/_shared/exports-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,UAA6C,CAAC;AAEjF,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,UAAiC,CAAC;AAErE;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,GAAG,EACjB,OAAO,GAAE,MAAY,EACrB,UAAU,GAAE,MAAM,EAA2B,GAC5C,MAAM,GAAG,IAAI,CAkEf;AAwCD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,GAAG,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACtD,OAAO,GAAE,MAAY,EACrB,UAAU,GAAE,MAAM,EAA2B,GAC5C,MAAM,GAAG,IAAI,CAqBf;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAiG7C"}

package/dist/_shared/exports-resolver.js

@@ -15,7 +15,6 @@
  *      the same JS source so `require()` from inside a user's `node` script
  *      sees the same exports map as the install pipeline.
  *
- * Audit reference: audit/sections/03-resolver-gaps.md §3.1, §3.2.
  *
  * Spec features supported:
  *   - String shorthand:                "exports": "./dist/index.mjs"
@@ -182,7 +181,6 @@ export function resolvePackageEntry(pkg, subpath = '.', conditions = DEFAULT_ESM
  *
  * This source must be byte-equivalent to the TS impl above (modulo type
  * annotations and `export` keywords). Keep them in sync — there is one
- * verification probe in audit/probes that compares parity.
  */
 export function getExportsResolverJS() {
     return `

package/dist/_shared/session-id.d.ts

@@ -1,7 +1,8 @@
 /**
  * session-id.ts — Friendly human-readable session identifiers.
  *
- * Format: `adjective-noun-NNNN` (e.g. `nimble-otter-4271`).
+ * Generated format: `adjective-noun-NNNN` (e.g. `nimble-otter-4271`).
+ * Programmatic callers may also use explicit IDs like `job-123`.
  *
  * Why friendly IDs rather than opaque crypto strings?
  *   - Shareable over voice/chat without character-by-character dictation.
@@ -16,15 +17,16 @@
  * sessions ≈ 0.12%. Acceptable for v1. If we ever push past that scale,
  * widen the suffix to 6 digits (≈ 4 × 10¹⁰).
  *
- * Validation is strict: lowercase ASCII only, exact shape enforced.
- * `idFromName` is case-sensitive, so accepting mixed-case would fragment
- * sessions. Reject anything non-conforming with 400 before touching a DO.
+ * Validation rejects empty, overly long, slash-bearing, or colon-bearing
+ * values before touching a DO. Colon remains reserved for tenant/sub/session
+ * DO-name composition.
  */
 /**
- * Validate a session ID before touching a DO. Returns true iff the string
- * matches the exact `adjective-noun-NNNN` shape. Length bounds on each part
- * are deliberately looser than our own word lists so future list growth
- * doesn't invalidate bookmarked URLs.
+ * Validate a session ID before touching a DO.
+ *
+ * Browser-created sessions use the friendly generated shape. SDK-created
+ * sandboxes can choose stable job IDs, so this also accepts the same compact
+ * identifier class used by Nimbus JWT `sid`.
  */
 export declare function isValidSessionId(id: string | null | undefined): boolean;
 /**

package/dist/_shared/session-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-id.d.ts","sourceRoot":"","sources":["../../src/_shared/session-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAiFH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAIvE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAO1C"}
+{"version":3,"file":"session-id.d.ts","sourceRoot":"","sources":["../../src/_shared/session-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAmFH;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGvE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAO1C"}

package/dist/_shared/session-id.js

@@ -1,7 +1,8 @@
 /**
  * session-id.ts — Friendly human-readable session identifiers.
  *
- * Format: `adjective-noun-NNNN` (e.g. `nimble-otter-4271`).
+ * Generated format: `adjective-noun-NNNN` (e.g. `nimble-otter-4271`).
+ * Programmatic callers may also use explicit IDs like `job-123`.
  *
  * Why friendly IDs rather than opaque crypto strings?
  *   - Shareable over voice/chat without character-by-character dictation.
@@ -16,10 +17,11 @@
  * sessions ≈ 0.12%. Acceptable for v1. If we ever push past that scale,
  * widen the suffix to 6 digits (≈ 4 × 10¹⁰).
  *
- * Validation is strict: lowercase ASCII only, exact shape enforced.
- * `idFromName` is case-sensitive, so accepting mixed-case would fragment
- * sessions. Reject anything non-conforming with 400 before touching a DO.
+ * Validation rejects empty, overly long, slash-bearing, or colon-bearing
+ * values before touching a DO. Colon remains reserved for tenant/sub/session
+ * DO-name composition.
  */
+import { isNimbusIdComponent } from '../auth/index.js';
 // Curated single-word adjectives. Lowercase ASCII, no profanity, no numbers,
 // no compounds. Sort order doesn't matter — we index randomly.
 const ADJECTIVES = [
@@ -94,20 +96,19 @@ const NOUNS = [
     'wheat', 'whippet', 'willow', 'wisp', 'wolf', 'wombat', 'woodland',
     'woodpecker', 'yak', 'yew', 'zebra', 'zinnia',
 ];
-/** Strict shape check. Rejects empty, uppercase, missing-parts, extra-parts. */
+/** Friendly ID shape emitted by {@link generateSessionId}. */
 const SESSION_ID_RE = /^[a-z]{3,14}-[a-z]{3,14}-\d{4}$/;
 /**
- * Validate a session ID before touching a DO. Returns true iff the string
- * matches the exact `adjective-noun-NNNN` shape. Length bounds on each part
- * are deliberately looser than our own word lists so future list growth
- * doesn't invalidate bookmarked URLs.
+ * Validate a session ID before touching a DO.
+ *
+ * Browser-created sessions use the friendly generated shape. SDK-created
+ * sandboxes can choose stable job IDs, so this also accepts the same compact
+ * identifier class used by Nimbus JWT `sid`.
  */
 export function isValidSessionId(id) {
     if (typeof id !== 'string')
         return false;
-    if (id.length < 9 || id.length > 40)
-        return false;
-    return SESSION_ID_RE.test(id);
+    return SESSION_ID_RE.test(id) || isNimbusIdComponent(id);
 }
 /**
  * Generate a fresh session ID. Uses crypto.getRandomValues for uniform

package/dist/_shared/session-router.d.ts

@@ -89,7 +89,6 @@ export interface ForwardOptions {
  *     We trust `opts.tenantSegment` verbatim.
  *   - Original request's method, body, and headers are preserved.
  *   - `X-Nimbus-Base` is injected so the DO can thread it into ViteDevServer.
- *   - `X-Nimbus-Tenant` is injected for audit/observability (NOT authority).
  *   - WebSocket upgrades flow naturally: `stub.fetch()` returns a Response
  *     with a `webSocket` field and status 101, which workerd passes through.
  *

package/dist/_shared/session-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-router.d.ts","sourceRoot":"","sources":["../../src/_shared/session-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAS1D,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAa7E;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,QAAQ,CAAC,CAoCnB;AAED,0EAA0E;AAC1E,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA6BpE"}
+{"version":3,"file":"session-router.d.ts","sourceRoot":"","sources":["../../src/_shared/session-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAS1D,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAa7E;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,QAAQ,CAAC,CAoCnB;AAED,0EAA0E;AAC1E,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA6BpE"}

package/dist/_shared/session-router.js

@@ -89,7 +89,6 @@ export function parseSessionRoute(pathname) {
  *     We trust `opts.tenantSegment` verbatim.
  *   - Original request's method, body, and headers are preserved.
  *   - `X-Nimbus-Base` is injected so the DO can thread it into ViteDevServer.
- *   - `X-Nimbus-Tenant` is injected for audit/observability (NOT authority).
  *   - WebSocket upgrades flow naturally: `stub.fetch()` returns a Response
  *     with a `webSocket` field and status 101, which workerd passes through.
  *

package/dist/auth/index.d.ts

@@ -12,5 +12,5 @@
  */
 export { issueNimbusToken, verifyNimbusToken, type NimbusAuthEnv, } from './token.js';
 export { extractBearerToken, verifyRequestToken, requireScopes, requireSessionPin, setNimbusTokenCookie, authErrorResponse, NIMBUS_TOKEN_COOKIE, NIMBUS_TOKEN_QUERY, } from './middleware.js';
-export { NimbusAuthError, NimbusAuthConfigError, NimbusTokenMalformedError, NimbusTokenSignatureError, NimbusTokenClaimsError, NimbusTokenExpiredError, NimbusTokenTtlError, NimbusScopeError, NimbusSessionPinError, DEFAULT_TOKEN_TTL_MS, MAX_TOKEN_TTL_MS, ID_COMPONENT_RE, type NimbusTokenClaims, type VerifiedNimbusToken, type IssueTokenOptions, } from './types.js';
+export { NimbusAuthError, NimbusAuthConfigError, NimbusTokenMalformedError, NimbusTokenSignatureError, NimbusTokenClaimsError, NimbusTokenExpiredError, NimbusTokenTtlError, NimbusScopeError, NimbusSessionPinError, DEFAULT_TOKEN_TTL_MS, MAX_TOKEN_TTL_MS, ID_COMPONENT_RE, isNimbusIdComponent, type NimbusTokenClaims, type VerifiedNimbusToken, type IssueTokenOptions, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC"}

package/dist/auth/index.js

@@ -12,4 +12,4 @@
  */
 export { issueNimbusToken, verifyNimbusToken, } from './token.js';
 export { extractBearerToken, verifyRequestToken, requireScopes, requireSessionPin, setNimbusTokenCookie, authErrorResponse, NIMBUS_TOKEN_COOKIE, NIMBUS_TOKEN_QUERY, } from './middleware.js';
-export { NimbusAuthError, NimbusAuthConfigError, NimbusTokenMalformedError, NimbusTokenSignatureError, NimbusTokenClaimsError, NimbusTokenExpiredError, NimbusTokenTtlError, NimbusScopeError, NimbusSessionPinError, DEFAULT_TOKEN_TTL_MS, MAX_TOKEN_TTL_MS, ID_COMPONENT_RE, } from './types.js';
+export { NimbusAuthError, NimbusAuthConfigError, NimbusTokenMalformedError, NimbusTokenSignatureError, NimbusTokenClaimsError, NimbusTokenExpiredError, NimbusTokenTtlError, NimbusScopeError, NimbusSessionPinError, DEFAULT_TOKEN_TTL_MS, MAX_TOKEN_TTL_MS, ID_COMPONENT_RE, isNimbusIdComponent, } from './types.js';

package/dist/auth/types.d.ts

@@ -136,6 +136,7 @@ export declare class NimbusSessionPinError extends NimbusAuthError {
     readonly attempted: string;
     constructor(pinnedTo: string, attempted: string);
 }
-/** Regex used to validate the `tn` and `sub` shape (per Mossaic §7.1). */
+/** Compact identifier rule for tenants, subjects, session pins, and SDK sandbox IDs. */
 export declare const ID_COMPONENT_RE: RegExp;
+export declare function isNimbusIdComponent(value: unknown): value is string;
 //# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,KAAK,EAAE,QAAQ,CAAC;IAChB,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,QAAiB,CAAC;AAEnD,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,MAAM,EAAE,iBAAiB,CAAC;IAC1B,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,MAAY;CAMpE;AAED,sEAAsE;AACtE,qBAAa,qBAAsB,SAAQ,eAAe;gBAC5C,OAAO,GAAE,MAAuC;CAI7D;AAED,kFAAkF;AAClF,qBAAa,yBAA0B,SAAQ,eAAe;gBAChD,MAAM,EAAE,MAAM;CAI3B;AAED,yEAAyE;AACzE,qBAAa,yBAA0B,SAAQ,eAAe;;CAK7D;AAED,8EAA8E;AAC9E,qBAAa,sBAAuB,SAAQ,eAAe;gBAC7C,MAAM,EAAE,MAAM;CAI3B;AAED,gFAAgF;AAChF,qBAAa,uBAAwB,SAAQ,eAAe;IAC1D,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM;CAKlC;AAED,mEAAmE;AACnE,qBAAa,mBAAoB,SAAQ,eAAe;gBAC1C,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQzC;AAED,oEAAoE;AACpE,qBAAa,gBAAiB,SAAQ,eAAe;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM;CAKlC;AAED,2EAA2E;AAC3E,qBAAa,qBAAsB,SAAQ,eAAe;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAUhD;AAED,0EAA0E;AAC1E,eAAO,MAAM,eAAe,QAA4B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,KAAK,EAAE,QAAQ,CAAC;IAChB,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,QAAiB,CAAC;AAEnD,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,MAAM,EAAE,iBAAiB,CAAC;IAC1B,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,MAAY;CAMpE;AAED,sEAAsE;AACtE,qBAAa,qBAAsB,SAAQ,eAAe;gBAC5C,OAAO,GAAE,MAAuC;CAI7D;AAED,kFAAkF;AAClF,qBAAa,yBAA0B,SAAQ,eAAe;gBAChD,MAAM,EAAE,MAAM;CAI3B;AAED,yEAAyE;AACzE,qBAAa,yBAA0B,SAAQ,eAAe;;CAK7D;AAED,8EAA8E;AAC9E,qBAAa,sBAAuB,SAAQ,eAAe;gBAC7C,MAAM,EAAE,MAAM;CAI3B;AAED,gFAAgF;AAChF,qBAAa,uBAAwB,SAAQ,eAAe;IAC1D,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM;CAKlC;AAED,mEAAmE;AACnE,qBAAa,mBAAoB,SAAQ,eAAe;gBAC1C,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQzC;AAED,oEAAoE;AACpE,qBAAa,gBAAiB,SAAQ,eAAe;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM;CAKlC;AAED,2EAA2E;AAC3E,qBAAa,qBAAsB,SAAQ,eAAe;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAUhD;AAED,wFAAwF;AACxF,eAAO,MAAM,eAAe,QAA4B,CAAC;AAEzD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEnE"}

package/dist/auth/types.js

@@ -110,5 +110,8 @@ export class NimbusSessionPinError extends NimbusAuthError {
         this.attempted = attempted;
     }
 }
-/** Regex used to validate the `tn` and `sub` shape (per Mossaic §7.1). */
+/** Compact identifier rule for tenants, subjects, session pins, and SDK sandbox IDs. */
 export const ID_COMPONENT_RE = /^[A-Za-z0-9._-]{1,128}$/;
+export function isNimbusIdComponent(value) {
+    return typeof value === 'string' && ID_COMPONENT_RE.test(value);
+}

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,eAAO,MAAM,cAAc,UAAU,CAAC;AA+BtC,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,aAAa;;;;CAAyD,CAAC;AACpF,eAAO,MAAM,eAAe,WAAW,CAAC;AAGxC,eAAO,MAAM,UAAU,QAAS,CAAC;AACjC,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,YAAY,QAA0B,CAAC;AAGpD,eAAO,MAAM,gBAAgB,QAAS,CAAC;AA0BvC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AACrD,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AAGzD,eAAO,MAAM,YAAY,+BAA+B,CAAC;AACzD,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAG7C,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAC/C,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAC7C,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAGxC,eAAO,MAAM,cAAc,eAAe,CAAC;AA2B3C,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAG9D,eAAO,MAAM,gBAAgB,WAAW,CAAC;AACzC,eAAO,MAAM,YAAY,eAAe,CAAC;AACzC,eAAO,MAAM,YAAY,SAAS,CAAC;AACnC,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,oBAAoB,UAAqD,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,eAAO,MAAM,cAAc,UAAU,CAAC;AA+BtC,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,aAAa;;;;CAAyD,CAAC;AACpF,eAAO,MAAM,eAAe,WAAW,CAAC;AAGxC,eAAO,MAAM,UAAU,QAAS,CAAC;AACjC,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,YAAY,QAA0B,CAAC;AAGpD,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAyBvC,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AACrD,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AAGzD,eAAO,MAAM,YAAY,+BAA+B,CAAC;AACzD,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAG7C,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAC/C,eAAO,MAAM,mBAAmB,YAAY,CAAC;AAC7C,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAGxC,eAAO,MAAM,cAAc,eAAe,CAAC;AA2B3C,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAG9D,eAAO,MAAM,gBAAgB,WAAW,CAAC;AACzC,eAAO,MAAM,YAAY,eAAe,CAAC;AACzC,eAAO,MAAM,YAAY,SAAS,CAAC;AACnC,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,oBAAoB,UAAqD,CAAC"}

package/dist/constants.js

@@ -50,7 +50,6 @@ export const FACET_TIMEOUT_MS = 30_000; // 30s execution timeout
 // `const __MODULE_VFS_BUNDLE = ${JSON.stringify(bundle)}`, so workerd's
 // per-module text-size limit applies to the JSON-escaped form (each
 // `\n` / `\"` / `\u` adds bytes, plus the per-key string-quote overhead).
-// Empirical W2.5b sweep (audit/sections/W2.6-plan.md §2.2) showed 6 MiB
 // raw → boots, 8 MiB raw → fails. Encoded as JSON that's roughly 18-25 MiB
 // of module text. We target 22 MiB encoded as the hard ceiling, leaving
 // ~2-3 MiB of headroom for the rest of the worker module (shims, runner

package/dist/facets/cirrus-real.d.ts

@@ -6,7 +6,7 @@
  * or `nimbusDevServer: 'real'` in vite.config.ts.
  *
  * Phase status (PHASE2-REAL-VITE-PLAN.md):
- *   0 (import + createServer + listen)        — GREEN, shipped
+ *   0 (import + createServer + listen)        — passing, shipped
  *   1 (VFS-backed fs shim)                    — implemented here
  *   2 (HMR over our /ws)                      — implemented here
  *   3 (real @vitejs/plugin-react)             — depends on plugin preload

package/dist/facets/cirrus-real.js

@@ -6,7 +6,7 @@
  * or `nimbusDevServer: 'real'` in vite.config.ts.
  *
  * Phase status (PHASE2-REAL-VITE-PLAN.md):
- *   0 (import + createServer + listen)        — GREEN, shipped
+ *   0 (import + createServer + listen)        — passing, shipped
  *   1 (VFS-backed fs shim)                    — implemented here
  *   2 (HMR over our /ws)                      — implemented here
  *   3 (real @vitejs/plugin-react)             — depends on plugin preload

package/dist/facets/manager.d.ts

@@ -241,7 +241,6 @@ export declare class FacetManager {
     /**
      * W5 Lever 5: push a DiagFailure into the OOM ring for every facet
      * termination with a non-zero exit code. This is the supervisor side
-     * of the zero-silent-OOM contract — the audit/probes/w5/e2e/
      * oom-stress probe asserts that every termination has a matching
      * ring entry.
      *

package/dist/facets/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/facets/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AAG9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAKhE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAO/D,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1E;AAslCD;;;;;;;;GAQG;AAMH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkJnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA2FnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAsHnB;AAwkBD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,oFAAoF;IACpF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;CACxE;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,GAAG,CAA0B;IACrC,qEAAqE;IACrE,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAoB;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAA+B;gBAG5C,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,GAAG,EACR,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,KAAK,GAAE,iBAAsB;IAS/B,MAAM,CAAC,GAAG,EAAE,SAAS;IACrB;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc;IAEzC;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;;;;;;;;;WAaG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,qEAAqE;QACrE,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,gEAAgE;QAChE,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,eAAe,CAAC;IAsJ3B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;YA+Bd,cAAc;YAqEd,cAAc;IAsC5B,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAwBvB,yBAAyB;YACX,gBAAgB;IAoC9B;;;;OAIG;IACH;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAmB,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAKvF;;;OAGG;IACG,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACV,GACL,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE,CAAC;IA8D3C;;;;;;;;;OASG;IACH,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3B;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAiClC,qCAAqC;IACrC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAa1B,IAAI,KAAK;;;;;;MAAsC;CAChD"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/facets/manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC;AAG9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAKhE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAO/D,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1E;AAglCD;;;;;;;;GAQG;AAKH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkJnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CA2FnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,EAC3C,WAAW,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAsHnB;AAkkBD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,oFAAoF;IACpF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;CACxE;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAqB;IAChC,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,GAAG,CAA0B;IACrC,qEAAqE;IACrE,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAoB;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAA+B;gBAG5C,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,GAAG,EACR,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,KAAK,GAAE,iBAAsB;IAS/B,MAAM,CAAC,GAAG,EAAE,SAAS;IACrB;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc;IAEzC;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;;;;;;;;;WAaG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,qEAAqE;QACrE,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,gEAAgE;QAChE,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC,eAAe,CAAC;IAsJ3B;;;;;;;;;OASG;IACH,OAAO,CAAC,oBAAoB;YA+Bd,cAAc;YAqEd,cAAc;IAsC5B,sEAAsE;IACtE,OAAO,CAAC,eAAe;IAwBvB,yBAAyB;YACX,gBAAgB;IAoC9B;;;;OAIG;IACH;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAmB,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAKvF;;;OAGG;IACG,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;QACJ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACV,GACL,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE,CAAC;IA8D3C;;;;;;;;;OASG;IACH,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3B;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAA;KAAE;IAiClC,qCAAqC;IACrC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAa1B,IAAI,KAAK;;;;;;MAAsC;CAChD"}

package/dist/facets/manager.js

@@ -253,8 +253,6 @@ const USER_CODE = ${safeCode};
 // only emits \`const\` in the requires block, but the broader regex
 // guards against drift.
 //
-// See VERIFY-23417C5 §4 #1, audit/sections/X5S-plan.md §3,
-// .seal-internal/2026-05-11-nuxt-process-redeclare/plan.md §6.
 function __mkCompiledFn(code, extraParams) {
   function renameIfDeclared(name) {
     const re = new RegExp("(?:^|\\\\n|;)\\\\s*(?:const|let|var|function|class)\\\\s+" + name + "\\\\b", "m");
@@ -372,7 +370,6 @@ ${SHIMS}
     //
     // workerd's globalThis.console descriptor is writable+configurable
     // (verified empirically — see smoketest-globalthis-write.mjs in
-    // /workspace/.seal-internal/2026-05-12-console-facet/), so a plain
     // assignment is sufficient. Do NOT touch globalThis.process /
     // globalThis.Buffer here — Pyodide / Ruby bootstrap paths detect a
     // Node-shaped env via globalThis.process and would take the wrong
@@ -400,7 +397,6 @@ ${SHIMS}
     // append stderr). Mirrors real Node's default
     // unhandled-rejection-is-fatal behaviour.
     //
-    // See .seal-internal/2026-05-11-unhandled-rejection/audit.md.
     let __unhandledFired = false;
     const __reportUnhandled = (label, reason) => {
       // framework-fixes-F3 (2026-05-12): suppress reports whose reason
@@ -1101,7 +1097,6 @@ function buildManifest(vfs, cwd, scriptPath) {
  * per package — sub-agent §Q3 quantified the worst-case cumulative
  * budget impact (~322 KiB for fastify, ~1.7 MiB for ts-jest).
  */
-// X.5-C: exported so audit/probes/x5c/functional/f2-hash-chunk-greedy.mjs
 // can verify the hash-chunk + shared/ oversample directly. Pre-X.5-C this
 // was a file-local helper. Adding the named export is a pure surface
 // addition — no callers other than buildPrefetchBundle (same file) and
@@ -1665,7 +1660,6 @@ function addBinTargetSiblings(vfs, scriptPath, bundle, budgetState) {
     // VFS_BUNDLE_MAX_BYTES = 24 MiB content cap, both of which retain the
     // defense against pathological 4000+ file barrel packages.
     //
-    // See /workspace/.seal-internal/2026-05-12-npm-create-gap/findings.md
     // for the prior wave's empirical investigation (243 manifest entries,
     // only 140/243 readable pre-bump on prod 11df6ca).
     const MAX_PKG_FILES = 1000;
@@ -1725,7 +1719,7 @@ function addBinTargetSiblings(vfs, scriptPath, bundle, budgetState) {
     return { added };
 }
 /**
- * BUG-SWEEP-R2-2 (2026-05-11): scan entry code (and any already-bundled
+ * shell compatibility (2026-05-11): scan entry code (and any already-bundled
  * .js/.mjs/.cjs sources) for ABSOLUTE-PATH string literals that look
  * like file reads. For every candidate that exists on the SqliteVFS,
  * pull it into the bundle so the facet's __vfsBundle can serve it.
@@ -1837,7 +1831,6 @@ function addEntryAbsPathReads(vfs, entryCode, bundle, budgetState) {
  *     plain new Function anyway (loader: 'js' rejects JSX).
  *   - Files inside a "type":"module" package that don't use import/export
  *     keywords (rare; nominally CJS-shaped). Accepted limitation, called
- *     out in audit/sections/W3.5-plan.md §6.
  */
 function looksLikeEsm(src) {
     // Cheap comment strip. Not a full parser — enough to avoid the
@@ -1848,7 +1841,6 @@ function looksLikeEsm(src) {
     // Trailing `[\s{]` catches the no-whitespace minified form `import{...}from"..."`
     // shipped by @tailwindcss/vite/dist/index.mjs and other minified ESM bundles.
     // Skips dynamic `import(...)` (which is fine in CJS) because `(` ∉ `[\s{]`.
-    // See audit/sections/X5Z5-plan.md §3 (both relaxations needed: leading
     // anchor [\n;}] AND trailing [\s{]).
     const importStmt = /(^|[\n;}])\s*import[\s{]/;
     // export STATEMENT: same dual relaxation. Trailing `[\s{*]` covers
@@ -2031,7 +2023,6 @@ async function transformEsmInBundle(bundle, esbuild) {
  * If `esbuild` is not provided, the pass is skipped (preserves prior
  * behaviour for code paths that don't have esbuild handy).
  *
- * See audit/sections/W2.6-plan.md §3 (B1+ verdict + sub-agent review).
  */
 async function buildPrefetchBundle(vfs, scriptPath, cwd, entryCode, esbuild) {
     // 1. Static reachable-set walk from entry.
@@ -2060,7 +2051,6 @@ async function buildPrefetchBundle(vfs, scriptPath, cwd, entryCode, esbuild) {
     //      `default-stylesheet.css` (and similar runtime asset reads in
     //      tldts, parse5, lookup-table packages, mime-db, etc.) ENOENT
     //      at facet runtime even though the file is on VFS-disk + in
-    //      the manifest. See audit/sections/X5Z3-plan.md §3.
     const assetAdd = addStaticReadFileAssets(vfs, cwd, bundle, budgetState);
     void assetAdd;
     totalBytes = budgetState.totalBytes;
@@ -2072,7 +2062,6 @@ async function buildPrefetchBundle(vfs, scriptPath, cwd, entryCode, esbuild) {
     //      pattern AND filenames outside the Z3 ASSET_EXT whitelist
     //      (dotfiles, no-extension sentinels, "digest/hash/version/sha/md5"
     //      shapes). Motivating case: ts-jest's `.ts-jest-digest`. See
-    //      audit/sections/X5U-plan.md §4.
     const dotAdd = addStaticReadFileDotfilesAndCompiled(vfs, cwd, bundle, budgetState);
     void dotAdd;
     totalBytes = budgetState.totalBytes;
@@ -2089,7 +2078,7 @@ async function buildPrefetchBundle(vfs, scriptPath, cwd, entryCode, esbuild) {
     void binSiblingAdd;
     totalBytes = budgetState.totalBytes;
     fileCount = budgetState.fileCount;
-    // 2.35 BUG-SWEEP-R2-2: absolute-path readFileSync scanner.
+    // 2.35 shell compatibility: absolute-path readFileSync scanner.
     //
     // Pre-fix `node -e 'fs.readFileSync("/home/user/er.txt")'` returned
     // ENOENT even when the file existed on the SqliteVFS (verified via
@@ -2354,7 +2343,6 @@ export class FacetManager {
     /**
      * W5 Lever 5: push a DiagFailure into the OOM ring for every facet
      * termination with a non-zero exit code. This is the supervisor side
-     * of the zero-silent-OOM contract — the audit/probes/w5/e2e/
      * oom-stress probe asserts that every termination has a matching
      * ring entry.
      *
@@ -2625,7 +2613,7 @@ export class FacetManager {
     spawn(workerCode, command, cwd, opts = {}) {
         this.processTable.reap();
         const entry = this.processTable.spawn(command, [], cwd);
-        // arch-gaps gap #2: stamp the explicit longRunning flag on the
+        // child-process isolation gap #2: stamp the explicit longRunning flag on the
         // process_table entry so /api/processes returns longRunning=true
         // independent of the LONG_RUNNING_CMD_RE heuristic. Vite, wrangler,
         // node servers, --watch, etc. all flow through this primitive.

package/dist/facets/process.d.ts

@@ -196,7 +196,7 @@ export interface FacetProcessManagerDeps {
         };
     };
     /**
-     * arch-gaps gap #1: optional ChildProcessSpawnPool. When supplied,
+     * child-process isolation gap #1: optional ChildProcessSpawnPool. When supplied,
      * `_dispatch` routes each spawn through the pool (one-task
      * NimbusFanoutPool.submitMany call per spawn), giving each spawn a
      * fresh Worker Loader isolate. When omitted, falls back to the
@@ -229,7 +229,7 @@ export declare class FacetProcessManager {
     /** Dispatch by kind. */
     private _dispatch;
     /**
-     * arch-gaps gap #1: inline dispatch — runs the existing
+     * child-process isolation gap #1: inline dispatch — runs the existing
      * pure-builtin / facet-direct logic with string-collecting hooks
      * and returns the final {exitCode, stdout, stderr} envelope.
      *

package/dist/facets/process.js

@@ -132,7 +132,7 @@ export class FacetProcessManager {
             onStdout: (d) => this._appendOutput(child, 1, d),
             onStderr: (d) => this._appendOutput(child, 2, d),
         };
-        // arch-gaps gap #1: if a spawnPool is configured (production
+        // child-process isolation gap #1: if a spawnPool is configured (production
         // wiring), route the dispatch through a fresh Worker Loader
         // isolate via NimbusFanoutPool. The pool's task body emits a
         // per-isolate marker token + delegates the actual command back
@@ -209,7 +209,7 @@ export class FacetProcessManager {
         }
     }
     /**
-     * arch-gaps gap #1: inline dispatch — runs the existing
+     * child-process isolation gap #1: inline dispatch — runs the existing
      * pure-builtin / facet-direct logic with string-collecting hooks
      * and returns the final {exitCode, stdout, stderr} envelope.
      *

package/dist/facets/vite-dev-server.d.ts

@@ -59,7 +59,7 @@ export interface ViteDevServerOptions {
     /** Durable Object state — needed alongside `env` for the facet pool. */
     ctx?: DurableObjectState;
     /**
-     * Primitives wave (P8): when set, every diagnostic the dev server
+     * process diagnostics support: when set, every diagnostic the dev server
      * would otherwise drop into Worker logs (console.warn / console.error)
      * is ALSO appended to the supervisor's per-PID ProcessLogStore at
      * this PID, on the 'stderr' stream. The Process tab in the frontend
@@ -137,7 +137,7 @@ export declare class ViteDevServer {
      */
     private onDemandQueue;
     /**
-     * Primitives wave (P8): the supervisor's per-PID log store. When set
+     * process diagnostics support: the supervisor's per-PID log store. When set
      * (alongside `pid`), every diagnostic emitted by the dev server is
      * appended here on the 'stderr' stream so the Process tab UI shows
      * a real, scrolling, trace of bundler activity. When unset, falls
@@ -168,7 +168,7 @@ export declare class ViteDevServer {
     stop(): void;
     get isRunning(): boolean;
     /**
-     * Primitives wave (P8): single chokepoint for dev-server diagnostics.
+     * process diagnostics support: single chokepoint for dev-server diagnostics.
      * Always writes to the workerd console (so wrangler tail / Worker
      * logs see it for ops triage) AND appends to the supervisor's
      * per-PID ProcessLogStore when one is wired (so the Process tab in

package/dist/facets/vite-dev-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite-dev-server.d.ts","sourceRoot":"","sources":["../../src/facets/vite-dev-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAoBpE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IACjC,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qFAAqF;IACrF,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,wEAAwE;IACxE,GAAG,CAAC,EAAE,kBAAkB,CAAC;IACzB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CAC5F;AAyrCD,qBAAa,aAAa;IACxB,OAAO,CAAC,GAAG,CAAY;IACvB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA0D;IAC7E,OAAO,CAAC,QAAQ,CAA6B;IAC7C,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAS;IAC7B,+DAA+D;IAC/D,OAAO,CAAC,OAAO,CAAyB;IACxC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAyB;IACvC,4CAA4C;IAC5C,OAAO,CAAC,WAAW,CAAS;IAC5B,oDAAoD;IACpD,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAyB;IACzC,oEAAoE;IACpE,OAAO,CAAC,cAAc,CAAU;IAChC;wDACoD;IACpD,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,GAAG,CAAmC;IAC9C;;sDAEkD;IAClD,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,mBAAmB,CAA6B;IACxD;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,cAAc,CAAwC;IAC9D;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa,CAAoC;IAEzD;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAA6F;gBAEjG,IAAI,EAAE,oBAAoB;IA8CtC;;;;;;;;OAQG;YACW,kBAAkB;IAgChC,8CAA8C;IAC9C,OAAO,CAAC,cAAc;IAmCtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB,8DAA8D;IAC9D,KAAK,IAAI,IAAI;IAWb,2BAA2B;IAC3B,IAAI,IAAI,IAAI;IAMZ,IAAI,SAAS,YAA2B;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,GAAG;IAYX,8CAA8C;IAC9C,OAAO,CAAC,eAAe;IA8CvB,sEAAsE;IACtE,OAAO,CAAC,YAAY;IASpB;;;;;;;;;;OAUG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;YAa5D,mBAAmB;IAoFjC,OAAO,CAAC,cAAc;YAqER,WAAW;IAmEzB;;;;;;OAMG;YACW,eAAe;IAmV7B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,cAAc;IAyFtB,OAAO,CAAC,cAAc;IAyBtB;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,oBAAoB;IAkE5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,eAAe;YAoDT,SAAS;YAiKT,gBAAgB;IAiF9B,IAAI,KAAK;;;;;;;MASR;CACF"}
+{"version":3,"file":"vite-dev-server.d.ts","sourceRoot":"","sources":["../../src/facets/vite-dev-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAoBpE,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,SAAS,CAAC;IACf,OAAO,EAAE,cAAc,CAAC;IACxB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IACjC,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qFAAqF;IACrF,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,wEAAwE;IACxE,GAAG,CAAC,EAAE,kBAAkB,CAAC;IACzB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;CAC5F;AAurCD,qBAAa,aAAa;IACxB,OAAO,CAAC,GAAG,CAAY;IACvB,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA0D;IAC7E,OAAO,CAAC,QAAQ,CAA6B;IAC7C,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAS;IAC7B,+DAA+D;IAC/D,OAAO,CAAC,OAAO,CAAyB;IACxC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAyB;IACvC,4CAA4C;IAC5C,OAAO,CAAC,WAAW,CAAS;IAC5B,oDAAoD;IACpD,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAyB;IACzC,oEAAoE;IACpE,OAAO,CAAC,cAAc,CAAU;IAChC;wDACoD;IACpD,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,GAAG,CAAmC;IAC9C;;sDAEkD;IAClD,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,mBAAmB,CAA6B;IACxD;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,cAAc,CAAwC;IAC9D;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa,CAAoC;IAEzD;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAA6F;gBAEjG,IAAI,EAAE,oBAAoB;IA8CtC;;;;;;;;OAQG;YACW,kBAAkB;IAgChC,8CAA8C;IAC9C,OAAO,CAAC,cAAc;IAmCtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB,8DAA8D;IAC9D,KAAK,IAAI,IAAI;IAWb,2BAA2B;IAC3B,IAAI,IAAI,IAAI;IAMZ,IAAI,SAAS,YAA2B;IAExC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,GAAG;IAYX,8CAA8C;IAC9C,OAAO,CAAC,eAAe;IA8CvB,sEAAsE;IACtE,OAAO,CAAC,YAAY;IASpB;;;;;;;;;;OAUG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;YAa5D,mBAAmB;IAoFjC,OAAO,CAAC,cAAc;YAqER,WAAW;IAmEzB;;;;;;OAMG;YACW,eAAe;IAmV7B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,cAAc;IAyFtB,OAAO,CAAC,cAAc;IAyBtB;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,oBAAoB;IAkE5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,eAAe;YAoDT,SAAS;YAiKT,gBAAgB;IAiF9B,IAAI,KAAK;;;;;;;MASR;CACF"}