@nimbus-sh/worker 0.1.2 → 0.1.4

package/dist/loaders/generated-workers.js

@@ -15,11 +15,10 @@
  * W7-frame symbols:   encodeWriteBatchStream, decodeWriteBatchStream,
  *   W7_MAGIC, W7_TRAILER.
  *
- * Generated at: 2026-06-04T22:29:13.391Z
- * Tar size: 3.86 KiB
+ * Tar size: 3.84 KiB
  * W7 size:  7.78 KiB
  */
-export const TAR_STREAM_PREAMBLE = "// packages/worker/src/npm/tarball-stream.ts\nvar MAX_FILE_BYTES = 2e7;\nfunction parseTarHeader(block) {\n  if (block[0] === 0) return null;\n  let name = \"\";\n  for (let i = 0; i < 100 && block[i] !== 0; i++) {\n    name += String.fromCharCode(block[i]);\n  }\n  let prefix = \"\";\n  for (let i = 345; i < 500 && block[i] !== 0; i++) {\n    prefix += String.fromCharCode(block[i]);\n  }\n  if (prefix) name = prefix + \"/\" + name;\n  name = name.replace(/^package\\//, \"\");\n  let sizeStr = \"\";\n  for (let i = 124; i < 136 && block[i] !== 0; i++) {\n    sizeStr += String.fromCharCode(block[i]);\n  }\n  const size = parseInt(sizeStr.trim(), 8) || 0;\n  const typeFlag = block[156];\n  return { name, size, typeFlag };\n}\nasync function* readableStreamToAsyncIterable(rs) {\n  const reader = rs.getReader();\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) return;\n      if (value && value.length > 0) yield value;\n    }\n  } finally {\n    try {\n      reader.releaseLock();\n    } catch {\n    }\n  }\n}\nasync function* streamTarEntries(source, onSkip) {\n  let carry = new Uint8Array(0);\n  let state = { kind: \"header\" };\n  function concat(a, b) {\n    if (a.length === 0) return b;\n    if (b.length === 0) return a;\n    const out = new Uint8Array(a.length + b.length);\n    out.set(a, 0);\n    out.set(b, a.length);\n    return out;\n  }\n  for await (const chunkRaw of source) {\n    let buf = concat(carry, chunkRaw);\n    let cursor = 0;\n    while (true) {\n      if (state.kind === \"header\") {\n        if (buf.length - cursor < 512) break;\n        const header = buf.subarray(cursor, cursor + 512);\n        const parsed = parseTarHeader(header);\n        cursor += 512;\n        if (!parsed) return;\n        const { name, size, typeFlag } = parsed;\n        const pad = size === 0 ? 0 : (512 - size % 512) % 512;\n        const isRegularFile = typeFlag === 48 || typeFlag === 0;\n        if (size === 0) {\n          if (isRegularFile && name) {\n            yield { name, data: new Uint8Array(0) };\n          }\n          state = { kind: \"header\" };\n          continue;\n        }\n        if (!isRegularFile || !name || size > MAX_FILE_BYTES) {\n          if (onSkip) {\n            const reason = !isRegularFile ? \"non-regular\" : !name ? \"no-name\" : \"too-large\";\n            try {\n              onSkip(name, size, reason);\n            } catch {\n            }\n          }\n          state = { kind: \"skip\", remaining: size + pad };\n          continue;\n        }\n        state = {\n          kind: \"file\",\n          name,\n          remaining: size,\n          fileBuf: new Uint8Array(size),\n          fileOffset: 0,\n          pad,\n          skip: false\n        };\n        continue;\n      }\n      if (state.kind === \"file\") {\n        const avail2 = buf.length - cursor;\n        if (avail2 === 0) break;\n        if (state.remaining > 0) {\n          const take2 = Math.min(state.remaining, avail2);\n          state.fileBuf.set(buf.subarray(cursor, cursor + take2), state.fileOffset);\n          state.fileOffset += take2;\n          state.remaining -= take2;\n          cursor += take2;\n          if (state.remaining > 0) break;\n        }\n        if (state.pad > 0) {\n          const avail22 = buf.length - cursor;\n          if (avail22 === 0) break;\n          const take2 = Math.min(state.pad, avail22);\n          state.pad -= take2;\n          cursor += take2;\n          if (state.pad > 0) break;\n        }\n        yield { name: state.name, data: state.fileBuf };\n        state = { kind: \"header\" };\n        continue;\n      }\n      const avail = buf.length - cursor;\n      if (avail === 0) break;\n      const take = Math.min(state.remaining, avail);\n      cursor += take;\n      state.remaining -= take;\n      if (state.remaining > 0) break;\n      state = { kind: \"header\" };\n    }\n    if (cursor >= buf.length) {\n      carry = new Uint8Array(0);\n    } else if (cursor === 0) {\n      carry = buf;\n    } else {\n      carry = buf.slice(cursor);\n    }\n  }\n}";
-export const TAR_STREAM_PREAMBLE_SIZE = 3948;
-export const W7_FRAME_PREAMBLE = "// packages/worker/src/_shared/w7-frame.ts\nvar W7_MAGIC = new Uint8Array([78, 87, 55, 1]);\nvar W7_TRAILER = new Uint8Array([78, 69, 78, 68]);\nvar ENCODER_QUEUE_HWM = 256 * 1024;\nvar ENCODER_EMIT_CAP = 64 * 1024;\nvar _peakInFlight = 0;\nvar _currentInFlight = 0;\nfunction _peakInFlightBytes() {\n  return _peakInFlight;\n}\nfunction _resetPeakInFlightBytes() {\n  _peakInFlight = 0;\n  _currentInFlight = 0;\n}\nfunction _trackInFlightAdd(n) {\n  _currentInFlight += n;\n  if (_currentInFlight > _peakInFlight) _peakInFlight = _currentInFlight;\n}\nfunction _trackInFlightSub(n) {\n  _currentInFlight -= n;\n  if (_currentInFlight < 0) _currentInFlight = 0;\n}\nfunction encodeWriteBatchStream(payload) {\n  const inodes = payload.inodes ?? [];\n  const chunks = payload.chunks ?? [];\n  const deletePaths = payload.deletePaths;\n  let phase = 0;\n  let chunkIdx = 0;\n  const enc = new TextEncoder();\n  const headerBytes = enc.encode(JSON.stringify({\n    inodes,\n    deletePaths,\n    chunkCount: chunks.length\n  }));\n  const source = {\n    type: \"bytes\",\n    pull(controller) {\n      try {\n        if (phase === 0) {\n          enqueue(controller, W7_MAGIC.slice());\n          phase = 1;\n          return;\n        }\n        if (phase === 1) {\n          const hdr = new Uint8Array(4 + headerBytes.length);\n          writeU32LE(hdr, 0, headerBytes.length);\n          hdr.set(headerBytes, 4);\n          enqueue(controller, hdr);\n          phase = 2;\n          return;\n        }\n        if (phase === 2) {\n          if (chunkIdx >= chunks.length) {\n            phase = 3;\n          } else {\n            const c = chunks[chunkIdx++];\n            const pathBytes = enc.encode(c.path);\n            const data = c.data instanceof Uint8Array ? c.data : new Uint8Array(c.data);\n            const headerSize = 4 + pathBytes.length + 4 + 4;\n            const headerOut = new Uint8Array(headerSize);\n            let o = 0;\n            writeU32LE(headerOut, o, pathBytes.length);\n            o += 4;\n            headerOut.set(pathBytes, o);\n            o += pathBytes.length;\n            writeU32LE(headerOut, o, c.chunkId);\n            o += 4;\n            writeU32LE(headerOut, o, data.length);\n            o += 4;\n            enqueue(controller, headerOut);\n            if (data.length === 0) return;\n            if (data.length <= ENCODER_EMIT_CAP) {\n              enqueue(controller, data);\n            } else {\n              for (let i = 0; i < data.length; i += ENCODER_EMIT_CAP) {\n                enqueue(controller, data.subarray(i, Math.min(i + ENCODER_EMIT_CAP, data.length)));\n              }\n            }\n            return;\n          }\n        }\n        if (phase === 3) {\n          enqueue(controller, W7_TRAILER.slice());\n          phase = 4;\n          controller.close();\n          return;\n        }\n        controller.close();\n      } catch (e) {\n        controller.error(e);\n      }\n    },\n    cancel() {\n      phase = 4;\n      chunkIdx = chunks.length;\n    }\n  };\n  return new ReadableStream(source, {\n    // Byte streams (`type: 'bytes'`) MUST use the default byte-counted\n    // strategy: highWaterMark is in bytes, size is implicit. Custom\n    // `size` callbacks are forbidden — they throw at construction.\n    highWaterMark: ENCODER_QUEUE_HWM\n  });\n  function enqueue(controller, bytes) {\n    _trackInFlightAdd(bytes.byteLength);\n    controller.enqueue(bytes);\n    queueMicrotask(() => _trackInFlightSub(bytes.byteLength));\n  }\n}\nasync function decodeWriteBatchStream(stream) {\n  const reader = stream.getReader();\n  const buf = new ByteBuffer(reader);\n  const magic = await buf.readExact(4, \"magic\");\n  if (!bytesEqual(magic, W7_MAGIC)) {\n    try {\n      reader.releaseLock();\n    } catch {\n    }\n    throw new Error(`w7-frame: bad magic, expected NW7\\\\x01, got ${Array.from(magic).map((b) => b.toString(16)).join(\" \")}`);\n  }\n  const hdrLenBytes = await buf.readExact(4, \"header-length\");\n  const hdrLen = readU32LE(hdrLenBytes, 0);\n  if (hdrLen < 0 || hdrLen > 64 * 1024 * 1024) {\n    throw new Error(`w7-frame: implausible header length ${hdrLen}`);\n  }\n  const hdrJson = await buf.readExact(hdrLen, \"header-json\");\n  let header;\n  try {\n    header = JSON.parse(new TextDecoder().decode(hdrJson));\n  } catch (e) {\n    throw new Error(`w7-frame: header JSON parse failed: ${e?.message || e}`);\n  }\n  if (!header || !Array.isArray(header.inodes) || typeof header.chunkCount !== \"number\") {\n    throw new Error(\"w7-frame: header missing required fields (inodes / chunkCount)\");\n  }\n  const chunkIter = {\n    [Symbol.asyncIterator]() {\n      let idx = 0;\n      let exhausted = false;\n      return {\n        async next() {\n          if (exhausted) return { value: void 0, done: true };\n          if (idx >= header.chunkCount) {\n            const trailer = await buf.readExact(4, \"trailer\");\n            if (!bytesEqual(trailer, W7_TRAILER)) {\n              throw new Error(\n                `w7-frame: bad trailer, expected NEND, got ${Array.from(trailer).map((b) => String.fromCharCode(b)).join(\"\")}`\n              );\n            }\n            try {\n              reader.releaseLock();\n            } catch {\n            }\n            exhausted = true;\n            return { value: void 0, done: true };\n          }\n          const pathLenBytes = await buf.readExact(4, \"chunk-path-length\");\n          const pathLen = readU32LE(pathLenBytes, 0);\n          if (pathLen < 0 || pathLen > 64 * 1024) {\n            throw new Error(`w7-frame: implausible path length ${pathLen} at chunk ${idx}`);\n          }\n          const pathBytes = await buf.readExact(pathLen, \"chunk-path\");\n          const path = new TextDecoder().decode(pathBytes);\n          const chunkIdBytes = await buf.readExact(4, \"chunk-id\");\n          const chunkId = readU32LE(chunkIdBytes, 0);\n          const dataLenBytes = await buf.readExact(4, \"chunk-data-length\");\n          const dataLen = readU32LE(dataLenBytes, 0);\n          if (dataLen < 0 || dataLen > 64 * 1024 * 1024) {\n            throw new Error(`w7-frame: implausible data length ${dataLen} at chunk ${idx}`);\n          }\n          const data = await buf.readExact(dataLen, \"chunk-data\");\n          idx++;\n          return { value: { path, chunkId, data }, done: false };\n        },\n        async return() {\n          exhausted = true;\n          try {\n            reader.releaseLock();\n          } catch {\n          }\n          return { value: void 0, done: true };\n        }\n      };\n    }\n  };\n  return {\n    inodes: header.inodes,\n    deletePaths: header.deletePaths,\n    chunkIter\n  };\n}\nfunction writeU32LE(out, off, n) {\n  out[off] = n & 255;\n  out[off + 1] = n >>> 8 & 255;\n  out[off + 2] = n >>> 16 & 255;\n  out[off + 3] = n >>> 24 & 255;\n}\nfunction readU32LE(buf, off) {\n  return (buf[off] | buf[off + 1] << 8 | buf[off + 2] << 16 | buf[off + 3] << 24) >>> 0;\n}\nfunction bytesEqual(a, b) {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;\n  return true;\n}\nvar ByteBuffer = class {\n  constructor(reader) {\n    this.reader = reader;\n  }\n  chunks = [];\n  avail = 0;\n  done = false;\n  async readExact(n, label) {\n    if (n === 0) return new Uint8Array(0);\n    while (this.avail < n) {\n      if (this.done) {\n        throw new Error(\n          `w7-frame: stream ended ${this.avail} bytes into expected ${n}-byte ${label}`\n        );\n      }\n      const { value, done } = await this.reader.read();\n      if (done) {\n        this.done = true;\n      } else if (value && value.length > 0) {\n        this.chunks.push(value);\n        this.avail += value.length;\n      }\n    }\n    const out = new Uint8Array(n);\n    let copied = 0;\n    while (copied < n) {\n      const head = this.chunks[0];\n      const take = Math.min(head.length, n - copied);\n      out.set(head.subarray(0, take), copied);\n      copied += take;\n      if (take === head.length) {\n        this.chunks.shift();\n      } else {\n        this.chunks[0] = head.subarray(take);\n      }\n    }\n    this.avail -= n;\n    return out;\n  }\n};";
-export const W7_FRAME_PREAMBLE_SIZE = 7970;
+export const TAR_STREAM_PREAMBLE = "// src/npm/tarball-stream.ts\nvar MAX_FILE_BYTES = 2e7;\nfunction parseTarHeader(block) {\n  if (block[0] === 0) return null;\n  let name = \"\";\n  for (let i = 0; i < 100 && block[i] !== 0; i++) {\n    name += String.fromCharCode(block[i]);\n  }\n  let prefix = \"\";\n  for (let i = 345; i < 500 && block[i] !== 0; i++) {\n    prefix += String.fromCharCode(block[i]);\n  }\n  if (prefix) name = prefix + \"/\" + name;\n  name = name.replace(/^package\\//, \"\");\n  let sizeStr = \"\";\n  for (let i = 124; i < 136 && block[i] !== 0; i++) {\n    sizeStr += String.fromCharCode(block[i]);\n  }\n  const size = parseInt(sizeStr.trim(), 8) || 0;\n  const typeFlag = block[156];\n  return { name, size, typeFlag };\n}\nasync function* readableStreamToAsyncIterable(rs) {\n  const reader = rs.getReader();\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) return;\n      if (value && value.length > 0) yield value;\n    }\n  } finally {\n    try {\n      reader.releaseLock();\n    } catch {\n    }\n  }\n}\nasync function* streamTarEntries(source, onSkip) {\n  let carry = new Uint8Array(0);\n  let state = { kind: \"header\" };\n  function concat(a, b) {\n    if (a.length === 0) return b;\n    if (b.length === 0) return a;\n    const out = new Uint8Array(a.length + b.length);\n    out.set(a, 0);\n    out.set(b, a.length);\n    return out;\n  }\n  for await (const chunkRaw of source) {\n    let buf = concat(carry, chunkRaw);\n    let cursor = 0;\n    while (true) {\n      if (state.kind === \"header\") {\n        if (buf.length - cursor < 512) break;\n        const header = buf.subarray(cursor, cursor + 512);\n        const parsed = parseTarHeader(header);\n        cursor += 512;\n        if (!parsed) return;\n        const { name, size, typeFlag } = parsed;\n        const pad = size === 0 ? 0 : (512 - size % 512) % 512;\n        const isRegularFile = typeFlag === 48 || typeFlag === 0;\n        if (size === 0) {\n          if (isRegularFile && name) {\n            yield { name, data: new Uint8Array(0) };\n          }\n          state = { kind: \"header\" };\n          continue;\n        }\n        if (!isRegularFile || !name || size > MAX_FILE_BYTES) {\n          if (onSkip) {\n            const reason = !isRegularFile ? \"non-regular\" : !name ? \"no-name\" : \"too-large\";\n            try {\n              onSkip(name, size, reason);\n            } catch {\n            }\n          }\n          state = { kind: \"skip\", remaining: size + pad };\n          continue;\n        }\n        state = {\n          kind: \"file\",\n          name,\n          remaining: size,\n          fileBuf: new Uint8Array(size),\n          fileOffset: 0,\n          pad,\n          skip: false\n        };\n        continue;\n      }\n      if (state.kind === \"file\") {\n        const avail2 = buf.length - cursor;\n        if (avail2 === 0) break;\n        if (state.remaining > 0) {\n          const take2 = Math.min(state.remaining, avail2);\n          state.fileBuf.set(buf.subarray(cursor, cursor + take2), state.fileOffset);\n          state.fileOffset += take2;\n          state.remaining -= take2;\n          cursor += take2;\n          if (state.remaining > 0) break;\n        }\n        if (state.pad > 0) {\n          const avail22 = buf.length - cursor;\n          if (avail22 === 0) break;\n          const take2 = Math.min(state.pad, avail22);\n          state.pad -= take2;\n          cursor += take2;\n          if (state.pad > 0) break;\n        }\n        yield { name: state.name, data: state.fileBuf };\n        state = { kind: \"header\" };\n        continue;\n      }\n      const avail = buf.length - cursor;\n      if (avail === 0) break;\n      const take = Math.min(state.remaining, avail);\n      cursor += take;\n      state.remaining -= take;\n      if (state.remaining > 0) break;\n      state = { kind: \"header\" };\n    }\n    if (cursor >= buf.length) {\n      carry = new Uint8Array(0);\n    } else if (cursor === 0) {\n      carry = buf;\n    } else {\n      carry = buf.slice(cursor);\n    }\n  }\n}";
+export const TAR_STREAM_PREAMBLE_SIZE = 3932;
+export const W7_FRAME_PREAMBLE = "// src/_shared/w7-frame.ts\nvar W7_MAGIC = new Uint8Array([78, 87, 55, 1]);\nvar W7_TRAILER = new Uint8Array([78, 69, 78, 68]);\nvar ENCODER_QUEUE_HWM = 256 * 1024;\nvar ENCODER_EMIT_CAP = 64 * 1024;\nvar _peakInFlight = 0;\nvar _currentInFlight = 0;\nfunction _peakInFlightBytes() {\n  return _peakInFlight;\n}\nfunction _resetPeakInFlightBytes() {\n  _peakInFlight = 0;\n  _currentInFlight = 0;\n}\nfunction _trackInFlightAdd(n) {\n  _currentInFlight += n;\n  if (_currentInFlight > _peakInFlight) _peakInFlight = _currentInFlight;\n}\nfunction _trackInFlightSub(n) {\n  _currentInFlight -= n;\n  if (_currentInFlight < 0) _currentInFlight = 0;\n}\nfunction encodeWriteBatchStream(payload) {\n  const inodes = payload.inodes ?? [];\n  const chunks = payload.chunks ?? [];\n  const deletePaths = payload.deletePaths;\n  let phase = 0;\n  let chunkIdx = 0;\n  const enc = new TextEncoder();\n  const headerBytes = enc.encode(JSON.stringify({\n    inodes,\n    deletePaths,\n    chunkCount: chunks.length\n  }));\n  const source = {\n    type: \"bytes\",\n    pull(controller) {\n      try {\n        if (phase === 0) {\n          enqueue(controller, W7_MAGIC.slice());\n          phase = 1;\n          return;\n        }\n        if (phase === 1) {\n          const hdr = new Uint8Array(4 + headerBytes.length);\n          writeU32LE(hdr, 0, headerBytes.length);\n          hdr.set(headerBytes, 4);\n          enqueue(controller, hdr);\n          phase = 2;\n          return;\n        }\n        if (phase === 2) {\n          if (chunkIdx >= chunks.length) {\n            phase = 3;\n          } else {\n            const c = chunks[chunkIdx++];\n            const pathBytes = enc.encode(c.path);\n            const data = c.data instanceof Uint8Array ? c.data : new Uint8Array(c.data);\n            const headerSize = 4 + pathBytes.length + 4 + 4;\n            const headerOut = new Uint8Array(headerSize);\n            let o = 0;\n            writeU32LE(headerOut, o, pathBytes.length);\n            o += 4;\n            headerOut.set(pathBytes, o);\n            o += pathBytes.length;\n            writeU32LE(headerOut, o, c.chunkId);\n            o += 4;\n            writeU32LE(headerOut, o, data.length);\n            o += 4;\n            enqueue(controller, headerOut);\n            if (data.length === 0) return;\n            if (data.length <= ENCODER_EMIT_CAP) {\n              enqueue(controller, data);\n            } else {\n              for (let i = 0; i < data.length; i += ENCODER_EMIT_CAP) {\n                enqueue(controller, data.subarray(i, Math.min(i + ENCODER_EMIT_CAP, data.length)));\n              }\n            }\n            return;\n          }\n        }\n        if (phase === 3) {\n          enqueue(controller, W7_TRAILER.slice());\n          phase = 4;\n          controller.close();\n          return;\n        }\n        controller.close();\n      } catch (e) {\n        controller.error(e);\n      }\n    },\n    cancel() {\n      phase = 4;\n      chunkIdx = chunks.length;\n    }\n  };\n  return new ReadableStream(source, {\n    // Byte streams (`type: 'bytes'`) MUST use the default byte-counted\n    // strategy: highWaterMark is in bytes, size is implicit. Custom\n    // `size` callbacks are forbidden — they throw at construction.\n    highWaterMark: ENCODER_QUEUE_HWM\n  });\n  function enqueue(controller, bytes) {\n    _trackInFlightAdd(bytes.byteLength);\n    controller.enqueue(bytes);\n    queueMicrotask(() => _trackInFlightSub(bytes.byteLength));\n  }\n}\nasync function decodeWriteBatchStream(stream) {\n  const reader = stream.getReader();\n  const buf = new ByteBuffer(reader);\n  const magic = await buf.readExact(4, \"magic\");\n  if (!bytesEqual(magic, W7_MAGIC)) {\n    try {\n      reader.releaseLock();\n    } catch {\n    }\n    throw new Error(`w7-frame: bad magic, expected NW7\\\\x01, got ${Array.from(magic).map((b) => b.toString(16)).join(\" \")}`);\n  }\n  const hdrLenBytes = await buf.readExact(4, \"header-length\");\n  const hdrLen = readU32LE(hdrLenBytes, 0);\n  if (hdrLen < 0 || hdrLen > 64 * 1024 * 1024) {\n    throw new Error(`w7-frame: implausible header length ${hdrLen}`);\n  }\n  const hdrJson = await buf.readExact(hdrLen, \"header-json\");\n  let header;\n  try {\n    header = JSON.parse(new TextDecoder().decode(hdrJson));\n  } catch (e) {\n    throw new Error(`w7-frame: header JSON parse failed: ${e?.message || e}`);\n  }\n  if (!header || !Array.isArray(header.inodes) || typeof header.chunkCount !== \"number\") {\n    throw new Error(\"w7-frame: header missing required fields (inodes / chunkCount)\");\n  }\n  const chunkIter = {\n    [Symbol.asyncIterator]() {\n      let idx = 0;\n      let exhausted = false;\n      return {\n        async next() {\n          if (exhausted) return { value: void 0, done: true };\n          if (idx >= header.chunkCount) {\n            const trailer = await buf.readExact(4, \"trailer\");\n            if (!bytesEqual(trailer, W7_TRAILER)) {\n              throw new Error(\n                `w7-frame: bad trailer, expected NEND, got ${Array.from(trailer).map((b) => String.fromCharCode(b)).join(\"\")}`\n              );\n            }\n            try {\n              reader.releaseLock();\n            } catch {\n            }\n            exhausted = true;\n            return { value: void 0, done: true };\n          }\n          const pathLenBytes = await buf.readExact(4, \"chunk-path-length\");\n          const pathLen = readU32LE(pathLenBytes, 0);\n          if (pathLen < 0 || pathLen > 64 * 1024) {\n            throw new Error(`w7-frame: implausible path length ${pathLen} at chunk ${idx}`);\n          }\n          const pathBytes = await buf.readExact(pathLen, \"chunk-path\");\n          const path = new TextDecoder().decode(pathBytes);\n          const chunkIdBytes = await buf.readExact(4, \"chunk-id\");\n          const chunkId = readU32LE(chunkIdBytes, 0);\n          const dataLenBytes = await buf.readExact(4, \"chunk-data-length\");\n          const dataLen = readU32LE(dataLenBytes, 0);\n          if (dataLen < 0 || dataLen > 64 * 1024 * 1024) {\n            throw new Error(`w7-frame: implausible data length ${dataLen} at chunk ${idx}`);\n          }\n          const data = await buf.readExact(dataLen, \"chunk-data\");\n          idx++;\n          return { value: { path, chunkId, data }, done: false };\n        },\n        async return() {\n          exhausted = true;\n          try {\n            reader.releaseLock();\n          } catch {\n          }\n          return { value: void 0, done: true };\n        }\n      };\n    }\n  };\n  return {\n    inodes: header.inodes,\n    deletePaths: header.deletePaths,\n    chunkIter\n  };\n}\nfunction writeU32LE(out, off, n) {\n  out[off] = n & 255;\n  out[off + 1] = n >>> 8 & 255;\n  out[off + 2] = n >>> 16 & 255;\n  out[off + 3] = n >>> 24 & 255;\n}\nfunction readU32LE(buf, off) {\n  return (buf[off] | buf[off + 1] << 8 | buf[off + 2] << 16 | buf[off + 3] << 24) >>> 0;\n}\nfunction bytesEqual(a, b) {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;\n  return true;\n}\nvar ByteBuffer = class {\n  constructor(reader) {\n    this.reader = reader;\n  }\n  reader;\n  chunks = [];\n  avail = 0;\n  done = false;\n  async readExact(n, label) {\n    if (n === 0) return new Uint8Array(0);\n    while (this.avail < n) {\n      if (this.done) {\n        throw new Error(\n          `w7-frame: stream ended ${this.avail} bytes into expected ${n}-byte ${label}`\n        );\n      }\n      const { value, done } = await this.reader.read();\n      if (done) {\n        this.done = true;\n      } else if (value && value.length > 0) {\n        this.chunks.push(value);\n        this.avail += value.length;\n      }\n    }\n    const out = new Uint8Array(n);\n    let copied = 0;\n    while (copied < n) {\n      const head = this.chunks[0];\n      const take = Math.min(head.length, n - copied);\n      out.set(head.subarray(0, take), copied);\n      copied += take;\n      if (take === head.length) {\n        this.chunks.shift();\n      } else {\n        this.chunks[0] = head.subarray(take);\n      }\n    }\n    this.avail -= n;\n    return out;\n  }\n};";
+export const W7_FRAME_PREAMBLE_SIZE = 7964;

package/dist/loaders/loader-pool.d.ts

@@ -54,7 +54,7 @@ export interface NimbusLoaderPoolOptions {
      * Override the `doId` baked into the auto-injected SUPERVISOR binding.
      * Default: `ctx.id.toString()` (the DO that constructs the pool).
      *
-     * Used by NimbusFanoutPool's peer-DO branch (POC B): peer DOs
+     * Used by NimbusFanoutPool's peer-DO branch (peer-DO fanout): peer DOs
      * construct their per-task NimbusLoaderPool from inside
      * `_rpcFanoutExecute`, where `ctx` is the PEER DO's ctx. Without this
      * override the peer's auto-injected SUPERVISOR routes back to the
@@ -129,7 +129,6 @@ export interface NimbusLoaderCallOptions {
      * the LOADER's modules map (same `{ wasm: ArrayBuffer }` shape).
      *
      * Shipping path validated empirically against prod (see
-     * /workspace/.seal-internal/2026-05-10-wasm-csp/findings.md):
      * `WebAssembly.instantiate(bytes)` is blocked at request-time but
      * the LOADER-modules path compiles bytes during the inner
      * worker's module-load phase, where wasm code generation IS

package/dist/loaders/loader-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader-pool.d.ts","sourceRoot":"","sources":["../../src/loaders/loader-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAeH,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;;;;;;OAgBG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC3C;AAED,qDAAqD;AACrD,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC3C;AAED,oEAAoE;AACpE,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CACrC;AAwBD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAgB;;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAE/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAOzB;IACH;;;;4DAIwD;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGjC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,kBAAkB,EACvB,IAAI,CAAC,EAAE,uBAAuB;IA2FhC,wEAAwE;IACxE,IAAI,kBAAkB,IAAI,MAAM,CAE/B;IAgYD;;;OAGG;IACG,MAAM,CAAC,CAAC,EAAE,CAAC,EACf,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EACxC,GAAG,EAAE,CAAC,EACN,IAAI,CAAC,EAAE,uBAAuB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IActB;;;;;OAKG;IACG,GAAG,CAAC,CAAC,EAAE,CAAC,EACZ,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EACzC,KAAK,EAAE,CAAC,EAAE,EACV,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAOpC;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CAAC,CAAC,EAAE,CAAC,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,CAAC,EAAE,EACV,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAgEpC;;;;;;;;;;;;;;OAcG;IACH,OAAO,IAAI,IAAI;CAchB;AAED,iEAAiE;AACjE,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,YAAY,GACb,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"loader-pool.d.ts","sourceRoot":"","sources":["../../src/loaders/loader-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAeH,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;;;;;;OAgBG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC3C;AAED,qDAAqD;AACrD,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CAC3C;AAED,oEAAoE;AACpE,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CACrC;AAwBD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAgB;;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAE/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAOzB;IACH;;;;4DAIwD;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAGjC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,kBAAkB,EACvB,IAAI,CAAC,EAAE,uBAAuB;IA2FhC,wEAAwE;IACxE,IAAI,kBAAkB,IAAI,MAAM,CAE/B;IAgYD;;;OAGG;IACG,MAAM,CAAC,CAAC,EAAE,CAAC,EACf,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EACxC,GAAG,EAAE,CAAC,EACN,IAAI,CAAC,EAAE,uBAAuB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IActB;;;;;OAKG;IACG,GAAG,CAAC,CAAC,EAAE,CAAC,EACZ,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EACzC,KAAK,EAAE,CAAC,EAAE,EACV,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAOpC;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CAAC,CAAC,EAAE,CAAC,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,CAAC,EAAE,EACV,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAgEpC;;;;;;;;;;;;;;OAcG;IACH,OAAO,IAAI,IAAI;CAchB;AAED,iEAAiE;AACjE,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,YAAY,GACb,MAAM,oBAAoB,CAAC"}

package/dist/loaders/loader-pool.js

@@ -159,7 +159,7 @@ export class NimbusLoaderPool {
                 // INSTALL-HONESTY: peer-DO branch supplies coordinator's doId
                 // via supervisorDoIdOverride so SUPERVISOR.* RPCs route back
                 // to the user's session DO, not the peer DO. Default to the
-                // local ctx.id (single-DO callers and the in-DO POC C path).
+                // local ctx.id (single-DO callers and the in-DO in-DO fanout path).
                 const supDoId = opts?.supervisorDoIdOverride ?? ctx.id.toString();
                 bindings.SUPERVISOR = ctxExports.SupervisorRPC({
                     props: { doId: supDoId, pid: 0 },

package/dist/loaders/npm-resolve-preamble.d.ts

@@ -9,9 +9,9 @@
  *
  * The resolver-facet references the following preamble symbols:
  *   - SHOULD_SKIP_PACKAGE(name) → boolean
- *   - SHOULD_SWAP(name)         → { from, to } | undefined           (W6)
- *   - SHOULD_REJECT_FAIL(name)  → { from, reason, suggest? } | undefined (W6)
- *   - SHOULD_WARN_SKIP_TRANSITIVE(name) → entry | undefined          (W6)
+ *   - SHOULD_SWAP(name)         → { from, to } | undefined
+ *   - SHOULD_REJECT_FAIL(name)  → { from, reason, suggest? } | undefined
+ *   - SHOULD_WARN_SKIP_TRANSITIVE(name) → entry | undefined
  *   - PARSE_SEMVER(v) → [major, minor, patch] | null
  *   - COMPARE_SEMVER(a, b) → number
  *   - SATISFIES_RANGE(version, range) → boolean
@@ -23,8 +23,7 @@
  * swap-or-reject decisions than the legacy in-supervisor path, breaking
  * both correctness and the NIMBUS_FACET_RESOLVER=0 fallback contract.
  *
- * The W6 registry data is duplicated below — gated by
- * `audit/probes/w6/functional/preamble-parity.mjs`.
+ * Registry data is duplicated below and gated by the preamble parity test.
  *
  * Preamble bytes are part of the loader-cache key for NimbusLoaderPool —
  * any edit invalidates the warm slot and forces a re-load on next

package/dist/loaders/npm-resolve-preamble.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-resolve-preamble.d.ts","sourceRoot":"","sources":["../../src/loaders/npm-resolve-preamble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,eAAO,MAAM,oBAAoB,EAAE,MA4MlC,CAAC"}
+{"version":3,"file":"npm-resolve-preamble.d.ts","sourceRoot":"","sources":["../../src/loaders/npm-resolve-preamble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,eAAO,MAAM,oBAAoB,EAAE,MAsMlC,CAAC"}

package/dist/loaders/npm-resolve-preamble.js

@@ -9,9 +9,9 @@
  *
  * The resolver-facet references the following preamble symbols:
  *   - SHOULD_SKIP_PACKAGE(name) → boolean
- *   - SHOULD_SWAP(name)         → { from, to } | undefined           (W6)
- *   - SHOULD_REJECT_FAIL(name)  → { from, reason, suggest? } | undefined (W6)
- *   - SHOULD_WARN_SKIP_TRANSITIVE(name) → entry | undefined          (W6)
+ *   - SHOULD_SWAP(name)         → { from, to } | undefined
+ *   - SHOULD_REJECT_FAIL(name)  → { from, reason, suggest? } | undefined
+ *   - SHOULD_WARN_SKIP_TRANSITIVE(name) → entry | undefined
  *   - PARSE_SEMVER(v) → [major, minor, patch] | null
  *   - COMPARE_SEMVER(a, b) → number
  *   - SATISFIES_RANGE(version, range) → boolean
@@ -23,20 +23,18 @@
  * swap-or-reject decisions than the legacy in-supervisor path, breaking
  * both correctness and the NIMBUS_FACET_RESOLVER=0 fallback contract.
  *
- * The W6 registry data is duplicated below — gated by
- * `audit/probes/w6/functional/preamble-parity.mjs`.
+ * Registry data is duplicated below and gated by the preamble parity test.
  *
  * Preamble bytes are part of the loader-cache key for NimbusLoaderPool —
  * any edit invalidates the warm slot and forces a re-load on next
  * dispatch. Acceptable cost for a one-shot resolver phase.
  */
 export const NPM_RESOLVE_PREAMBLE = `
-// ── Skip list (mirrors src/npm-resolver.ts SKIP_PACKAGES, post-W6+W11) ──
-// W6: 'esbuild' migrated to WASM_SWAPS; 'fsevents' migrated to REJECT_INSTALL.
-// W11: vite is exempted when frameworkAware=true so framework CLIs can
-//      import('vite') from node_modules. See audit/sections/W11-plan.md §3.0.
+// ── Skip list (mirrors src/npm-resolver.ts SKIP_PACKAGES) ──
+// vite is exempted when frameworkAware=true so framework CLIs can import it
+// from node_modules.
 const __SKIP_PACKAGES = new Set([
-  // X.5-G: rollup migrated to WASM_SWAPS to own the rollup → @rollup/wasm-node swap.
+  // rollup resolves through the drop-in @rollup/wasm-node swap.
   'typescript', 'vite', 'webpack', 'parcel',
   'postcss', 'autoprefixer', 'tailwindcss', 'cssnano',
   'prettier', 'eslint', 'stylelint',
@@ -61,13 +59,10 @@ function SHOULD_SKIP_PACKAGE(name, frameworkAware) {
   return false;
 }
 
-// ── W6 swap / reject registry (mirrors src/wasm-swap-registry.ts) ─────
-// Gated by audit/probes/w6/functional/preamble-parity.mjs.
+// ── Swap / reject registry (mirrors src/wasm-swap-registry.ts) ─────
 const __WASM_SWAPS = new Map([
   ['esbuild', { from: 'esbuild', to: 'esbuild-wasm' }],
-  // X.5-G G2: rollup → @rollup/wasm-node (drop-in WASM build).
-  // See src/wasm-swap-registry.ts:73 for full WASM_SWAPS canonical entry
-  // and X5G-plan.md §3 for the npm 4828 / .node-can't-dlopen rationale.
+  // rollup -> @rollup/wasm-node (drop-in WASM build).
   ['rollup',  { from: 'rollup',  to: '@rollup/wasm-node' }],
 ]);
 // Mirror of REJECT_INSTALL in src/wasm-swap-registry.ts. Entries with
@@ -95,14 +90,12 @@ const __REJECT_INSTALL = new Map([
   ['node-pre-gyp',                   { from: 'node-pre-gyp',                   reason: 'Build-time native compiler; never runs in Workers.', transitive: 'warn' }],
   ['puppeteer',                      { from: 'puppeteer',                      reason: 'Bundled Chromium binary (~150 MB).', transitive: 'fail' }],
   ['playwright',                     { from: 'playwright',                     reason: 'Bundled browsers (~300 MB).', transitive: 'fail' }],
-  ['sql.js',                         { from: 'sql.js',                         reason: 'Installs but fails at runtime: ENOENT on dist/sql-wasm.wasm — loader gap (W6.5.x).', transitive: 'fail' }],
-  ['@swc/wasm-web',                  { from: '@swc/wasm-web',                  reason: 'Installs but fails at runtime: workerd CSP-like new-Function block in node-shims.ts:2058 — loader gap (W6.5.x).', transitive: 'fail' }],
-  // W6.5 additions:
+  ['sql.js',                         { from: 'sql.js',                         reason: 'Installs but fails at runtime because dist/sql-wasm.wasm is not available to the runtime loader.', transitive: 'fail' }],
+  ['@swc/wasm-web',                  { from: '@swc/wasm-web',                  reason: 'Installs but fails at runtime because its generated code path depends on workerd-blocked dynamic code generation.', transitive: 'fail' }],
   ['@img/sharp-wasm32',              { from: '@img/sharp-wasm32',              reason: 'WASM build of sharp; wasm32-cpu-only AND libvips initThreads() fails under workerd (no pthread).', transitive: 'fail' }],
   ['@napi-rs/canvas',                { from: '@napi-rs/canvas',                reason: 'Native bindings only; no WASM build published.', transitive: 'fail' }],
   ['@napi-rs/canvas-wasm32-wasi',    { from: '@napi-rs/canvas-wasm32-wasi',    reason: 'Package does not exist on npm (404); @napi-rs/canvas has no WASM/WASI build.', transitive: 'fail' }],
-  // X.5-26b additions: Tailwind v4 oxide + lightningcss native parents.
-  // Mirror of REJECT_INSTALL adds in src/wasm-swap-registry.ts.
+  // Tailwind v4 oxide + lightningcss native parents.
   ['@tailwindcss/oxide',             { from: '@tailwindcss/oxide',             reason: 'Native Rust Tailwind v4 oxide engine; only platform-specific .node bindings + wasm32-wasi shard; workerd has no node:wasi.', transitive: 'fail' }],
   ['lightningcss',                   { from: 'lightningcss',                   reason: 'Native Rust CSS parser; .node bindings + wasm32-wasi-only WASM build; workerd has no node:wasi; detect-libc also fails.', transitive: 'fail' }],
 ]);
@@ -120,7 +113,7 @@ function SHOULD_WARN_SKIP_TRANSITIVE(name) {
   return undefined;
 }
 
-// ── W6.5 telemetry: facet-side event collection ──────────────────────
+// ── Registry telemetry: facet-side event collection ──────────────────────
 // The facet cannot import the registry's emitRegistryEvent (preamble has
 // no import surface). Instead, decision sites push into a shared
 // __pendingEvents array which resolveTreeInFacet returns inside

package/dist/loaders/pre-bundle-preamble.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pre-bundle-preamble.d.ts","sourceRoot":"","sources":["../../src/loaders/pre-bundle-preamble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AA4CH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAqCjC,CAAC"}
+{"version":3,"file":"pre-bundle-preamble.d.ts","sourceRoot":"","sources":["../../src/loaders/pre-bundle-preamble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AA2CH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAqCjC,CAAC"}

package/dist/loaders/pre-bundle-preamble.js

@@ -64,7 +64,6 @@ import { getExportsResolverJS } from '../_shared/exports-resolver.js';
 /**
  * Resolver helpers, sourced from src/_shared/exports-resolver.ts via
  * getExportsResolverJS(). Single source of truth — see
- * audit/sections/03-resolver-gaps.md §3.1 for the prior 3-copy drift this
  * consolidates. The pre-bundle facet uses `resolvePackageEntry` (line 492
  * of src/pre-bundle-facet.ts).
  */

package/dist/npm/cache.js

@@ -10,7 +10,7 @@
  * All tables live in the same DO SQLite as the VFS. Schema is created lazily
  * on first use (not at VFS init, to avoid penalizing sessions that don't npm install).
  *
- * L1 cache observability (cache-observability wave):
+ * L1 cache observability (cache metrics support):
  *   getRegistryEntry / getTarballFiles bump per-tier counters via
  *   src/_shared/cache-stats.ts. Hit = row(s) returned with size > 0;
  *   miss = empty result set. Callers fall through to L2/L3/L4 on miss.

package/dist/npm/install-batch-facet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-batch-facet.d.ts","sourceRoot":"","sources":["../../src/npm/install-batch-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,MAAM,WAAW,gBAAgB;IAC/B;mDAC+C;IAC/C,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B;;kEAE8D;IAC9D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB;uFACmF;IACnF,aAAa,EAAE;QACb,iBAAiB,EAAE,MAAM,CAAC;QAC1B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,YAAY,EAAE,MAAM,CAAC;QACrB;;uDAE+C;QAC/C,wBAAwB,EAAE,MAAM,CAAC;QACjC,0BAA0B,EAAE,MAAM,CAAC;KACpC,CAAC;IACF;;;;;;;;;;OAUG;IACH,eAAe,EAAE,KAAK,CAClB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAC9E;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CACnE,CAAC;CACH;AAUD,eAAO,MAAM,sBAAsB,GACjC,OAAO,gBAAgB,EACvB,KAAK;IACH,UAAU,EAAE;QACV,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAMtE,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAOvG,gBAAgB,CAAC,EAAE,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,KACZ,OAAO,CACR,UAAU,GACV,IAAI,GACJ;YACE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;YACzB,MAAM,EAAE,KAAK,CACT;gBAAE,IAAI,EAAE,KAAK,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,GAC/D;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,CACpD,CAAC;SACH,CACJ,CAAC;QACF,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACzG,CAAC;CACH,KACA,OAAO,CAAC,kBAAkB,CAqjB5B,CAAC"}
+{"version":3,"file":"install-batch-facet.d.ts","sourceRoot":"","sources":["../../src/npm/install-batch-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,MAAM,WAAW,gBAAgB;IAC/B;mDAC+C;IAC/C,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B;;kEAE8D;IAC9D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB;uFACmF;IACnF,aAAa,EAAE;QACb,iBAAiB,EAAE,MAAM,CAAC;QAC1B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,YAAY,EAAE,MAAM,CAAC;QACrB;;uDAE+C;QAC/C,wBAAwB,EAAE,MAAM,CAAC;QACjC,0BAA0B,EAAE,MAAM,CAAC;KACpC,CAAC;IACF;;;;;;;;;;OAUG;IACH,eAAe,EAAE,KAAK,CAClB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAC9E;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CACnE,CAAC;CACH;AAUD,eAAO,MAAM,sBAAsB,GACjC,OAAO,gBAAgB,EACvB,KAAK;IACH,UAAU,EAAE;QACV,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAMtE,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAOvG,gBAAgB,CAAC,EAAE,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,KACZ,OAAO,CACR,UAAU,GACV,IAAI,GACJ;YACE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;YACzB,MAAM,EAAE,KAAK,CACT;gBAAE,IAAI,EAAE,KAAK,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,GAC/D;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,CACpD,CAAC;SACH,CACJ,CAAC;QACF,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACzG,CAAC;CACH,KACA,OAAO,CAAC,kBAAkB,CAgjB5B,CAAC"}

package/dist/npm/install-batch-facet.js

@@ -107,10 +107,8 @@ export const installPackagesInFacet = async function installPackagesInFacet(batc
     // singleton via recordCacheStatEvents — same pattern as
     // recordR2RaceCounters at installer.ts:1168.
     const cacheStatEvents = [];
-    // Lower threshold than per-package: shared-buffer flushes happen
-    // across packages, so smaller chunks keep individual transactions
-    // short. Wave-2 shipped 16 MiB and produced batch-fanout abort
-    // (whole-batch RPC age-out). Tightened to 4 MiB.
+    // Shared-buffer flushes happen across packages, so smaller chunks keep
+    // individual write transactions short and avoid aging the parent RPC.
     const SHARED_RPC_FLUSH_THRESHOLD = 4 * 1024 * 1024;
     const INODE_OVERHEAD = 160;
     const CHUNK_OVERHEAD = 96;
@@ -468,9 +466,8 @@ export const installPackagesInFacet = async function installPackagesInFacet(batc
             //      threshold; raise it if/when measured peak heap suggests the
             //      legacy 16 MiB is now the bottleneck on the streaming path.
             const pkgDir = spec.pkgDir;
-            // [P0a wave-2] Use SHARED inode/chunk buffer (declared at outer
-            // scope) so flushes are per-peer-shard, not per-package. Tracked
-            // per-package totals stay local for the result object.
+            // Use the shard-level inode/chunk buffer so flushes are per shard,
+            // not per package. Per-package totals stay local to the result object.
             let totalFileInodes = 0;
             let totalBytesWritten = 0;
             const dirSet = new Set();
@@ -534,11 +531,9 @@ export const installPackagesInFacet = async function installPackagesInFacet(batc
             if (sharedBufferedBytes >= SHARED_RPC_FLUSH_THRESHOLD) {
                 await sharedFlush();
             }
-            // [W4] Write tarball to R2 cache after a successful network install
-            // so the next tenant on the platform skips the round-trip to npm.
-            // Awaited (not `void`) per W4-plan §11 finding #2: the facet's
-            // lifecycle ends when this fn returns; an unawaited put may be
-            // torn down before the R2 write completes.
+            // Write tarballs to R2 only after a successful network install so the
+            // next tenant can skip the round-trip to npm. This must be awaited:
+            // the facet lifecycle ends when this function returns.
             //
             // Counter only increments tarballsCompleted on the network-fetch
             // path (R2-hit path bumps it earlier). Avoids double counting.

package/dist/npm/installer.d.ts

@@ -86,8 +86,8 @@ export declare class NpmInstaller {
      * resolved metadata of layer N.
      *
      * Topology auto-routes per layer:
-     *   width <  IN_DO_THRESHOLD (5)  → POC C in-DO loader-pool
-     *   width >= IN_DO_THRESHOLD       → POC B peer-DO (sibling NimbusSession DOs)
+     *   width <  IN_DO_THRESHOLD (5)  → in-DO fanout in-DO loader-pool
+     *   width >= IN_DO_THRESHOLD       → peer-DO fanout peer-DO (sibling NimbusSession DOs)
      *
      * The supervisor still owns:
      *   - cycle detection (`seen`),
@@ -100,7 +100,6 @@ export declare class NpmInstaller {
      *
      * The per-package task (resolveOnePackumentInFacet) owns ONLY the
      * fetch + version pick + edge extraction. See
-     * audit/sections/F2-RESOLVER-FANOUT-plan.md.
      *
      * Anti-requirements (cleanup-not-done charter): NO setTimeout
      * between layers, NO fallback to single-facet on missing bindings.
@@ -110,11 +109,11 @@ export declare class NpmInstaller {
      * Batch install via two-tier fan-out (NimbusFanoutPool).
      *
      * Topology selected automatically based on the spec count:
-     *   specs.length <  IN_DO_THRESHOLD (5)  → POC C in-DO
+     *   specs.length <  IN_DO_THRESHOLD (5)  → in-DO fanout in-DO
      *     1 NimbusLoaderPool with concurrency = specs.length, capped at
      *     4 by V8 invariant. Each spec is one facet running its own
      *     installPackagesInFacet over a single-element shard.
-     *   specs.length >= IN_DO_THRESHOLD       → POC B peer-DO
+     *   specs.length >= IN_DO_THRESHOLD       → peer-DO fanout peer-DO
      *     N peer NimbusSession sibling DOs (N = min(specs.length,
      *     MAX_PEER_FANOUT = 32)), each running ONE installPackagesInFacet
      *     against its own shard with internal pLimit(3).
@@ -127,7 +126,6 @@ export declare class NpmInstaller {
      * Pre-fix lineage: this site previously ran ONE NimbusLoaderPool
      *   with concurrency=1, internal pLimit(3) — the explicit "collapses
      *   what was 4 concurrent dynamic workers (pool.map slots) into 1"
-     *   YELLOW retreat documented in audit/sections/FANOUT-AUDIT.md (P1).
      *   Two-tier topology re-expands the fan-out without re-introducing
      *   the V8 cap risk.
      */
@@ -213,7 +211,7 @@ export declare class NpmInstaller {
      */
     private resolvePackageEntryPath;
     /**
-     * P5 (prod-bugs-2) — deterministic supervisor-heap estimate in MiB.
+     * P5 (production reliability) — deterministic supervisor-heap estimate in MiB.
      *
      * Routes through observability/heap-estimate.ts which sums KNOWN
      * supervisor heap allocation sources from runtime counters that

package/dist/npm/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/npm/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EAAE,QAAQ,EAAsB,MAAM,YAAY,CAAC;AAC1D,OAAO,EAEiC,KAAK,OAAO,EACnD,MAAM,eAAe,CAAC;AAmEvB,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAID,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAY;IACvB,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,GAAG,CAAiC;IAC5C,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,UAAU,CAAsC;IACxD;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAAsB;gBAGnC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,UAAU,EACf,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,GAAG,CAAC,EAAE,kBAAkB,CAAC;QACzB,GAAG,CAAC,EAAE,GAAG,CAAC;QACV,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB;IAWH,4EAA4E;IAC5E,IAAI,QAAQ,IAAI,QAAQ,CAAuB;IAI/C;;;;;OAKG;IACG,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QACL,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GACA,OAAO,CAAC,gBAAgB,CAAC;YAcd,aAAa;IA+T3B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;YACW,oBAAoB;IAoRlC;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;YACW,kBAAkB;IAmQhC;;OAEG;IACH;;;;;;;OAOG;YACW,oBAAoB;YAgCpB,UAAU;IAkDxB;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IA8BvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqC1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAqBrB;;OAEG;IACH,OAAO,CAAC,QAAQ;IAsDhB,OAAO,CAAC,iBAAiB;IA+CzB;;;;;;;;;;OAUG;YACW,oBAAoB;IAuiBlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe;IAgFvB;;OAEG;IACH;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,uBAAuB;IAsD/B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,0BAA0B;CAkBnC"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/npm/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EAAE,QAAQ,EAAsB,MAAM,YAAY,CAAC;AAC1D,OAAO,EAEiC,KAAK,OAAO,EACnD,MAAM,eAAe,CAAC;AAmEvB,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAID,qBAAa,YAAY;IACvB,OAAO,CAAC,GAAG,CAAY;IACvB,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,GAAG,CAAiC;IAC5C,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,UAAU,CAAsC;IACxD;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,CAAsB;gBAGnC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,UAAU,EACf,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,GAAG,CAAC,EAAE,kBAAkB,CAAC;QACzB,GAAG,CAAC,EAAE,GAAG,CAAC;QACV,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB;IAWH,4EAA4E;IAC5E,IAAI,QAAQ,IAAI,QAAQ,CAAuB;IAI/C;;;;;OAKG;IACG,OAAO,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QACL,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GACA,OAAO,CAAC,gBAAgB,CAAC;YAcd,aAAa;IA8T3B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;YACW,oBAAoB;IAoRlC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;YACW,kBAAkB;IAqLhC;;OAEG;IACH;;;;;;;OAOG;YACW,oBAAoB;YAgCpB,UAAU;IAkDxB;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IA8BvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqC1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAqBrB;;OAEG;IACH,OAAO,CAAC,QAAQ;IAsDhB,OAAO,CAAC,iBAAiB;IA+CzB;;;;;;;;;;OAUG;YACW,oBAAoB;IAuiBlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe;IAgFvB;;OAEG;IACH;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,uBAAuB;IAsD/B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO,CAAC,0BAA0B;CAkBnC"}

package/dist/npm/installer.js

@@ -110,7 +110,6 @@ export class NpmInstaller {
         // (next/astro/nuxt/remix/sveltekit) or generic vite, we exempt
         // FRAMEWORK_REQUIRED_PACKAGES (vite, ...) from the SKIP_PACKAGES set
         // so the framework's CLI can `import 'vite'` from node_modules.
-        // See audit/sections/W11-plan.md §3.0.
         const frameworkAware = await this.detectFrameworkAware(projDir);
         if (frameworkAware) {
             log(`Framework detected — installing framework-required packages (vite, …).`);
@@ -132,7 +131,7 @@ export class NpmInstaller {
             // ── Phase 1: Resolve ──────────────────────────────────────────
             // F-2 (cleanup-not-done): frontier-coordinator path. Each BFS
             // layer dispatches to NimbusFanoutPool.submitMany — width <5 in-DO
-            // (POC C), width ≥5 peer-DO (POC B). Per-package task body is
+            // (in-DO fanout), width ≥5 peer-DO (peer-DO fanout). Per-package task body is
             // self-contained (resolveOnePackumentInFacet), supervisor builds
             // layer N+1 from layer N's edges.
             //
@@ -277,7 +276,7 @@ export class NpmInstaller {
         if (this.esbuild) {
             phaseStart = Date.now();
             setInstallPhase('bundle');
-            // ── Bug 1 (prod-bugs-2 P4) — late-progress gating ───────────────
+            // ── Bug 1 (production reliability P4) — late-progress gating ───────────────
             //
             // Background:
             //   The install command MUST resolve immediately (see the long
@@ -395,8 +394,8 @@ export class NpmInstaller {
      * resolved metadata of layer N.
      *
      * Topology auto-routes per layer:
-     *   width <  IN_DO_THRESHOLD (5)  → POC C in-DO loader-pool
-     *   width >= IN_DO_THRESHOLD       → POC B peer-DO (sibling NimbusSession DOs)
+     *   width <  IN_DO_THRESHOLD (5)  → in-DO fanout in-DO loader-pool
+     *   width >= IN_DO_THRESHOLD       → peer-DO fanout peer-DO (sibling NimbusSession DOs)
      *
      * The supervisor still owns:
      *   - cycle detection (`seen`),
@@ -409,7 +408,6 @@ export class NpmInstaller {
      *
      * The per-package task (resolveOnePackumentInFacet) owns ONLY the
      * fetch + version pick + edge extraction. See
-     * audit/sections/F2-RESOLVER-FANOUT-plan.md.
      *
      * Anti-requirements (cleanup-not-done charter): NO setTimeout
      * between layers, NO fallback to single-facet on missing bindings.
@@ -505,8 +503,8 @@ export class NpmInstaller {
                 return { key: name, args: taskSpec };
             });
             // Dispatch the layer. NimbusFanoutPool routes:
-            //   <5 → POC C in-DO (NimbusLoaderPool), concurrency = layer.length (capped at 4)
-            //   ≥5 → POC B peer-DO, N peers = min(layer.length, 32)
+            //   <5 → in-DO fanout in-DO (NimbusLoaderPool), concurrency = layer.length (capped at 4)
+            //   ≥5 → peer-DO fanout peer-DO, N peers = min(layer.length, 32)
             let results;
             try {
                 results = await fanoutPool.submitMany(tasks, resolveOnePackumentInFacet);
@@ -684,11 +682,11 @@ export class NpmInstaller {
      * Batch install via two-tier fan-out (NimbusFanoutPool).
      *
      * Topology selected automatically based on the spec count:
-     *   specs.length <  IN_DO_THRESHOLD (5)  → POC C in-DO
+     *   specs.length <  IN_DO_THRESHOLD (5)  → in-DO fanout in-DO
      *     1 NimbusLoaderPool with concurrency = specs.length, capped at
      *     4 by V8 invariant. Each spec is one facet running its own
      *     installPackagesInFacet over a single-element shard.
-     *   specs.length >= IN_DO_THRESHOLD       → POC B peer-DO
+     *   specs.length >= IN_DO_THRESHOLD       → peer-DO fanout peer-DO
      *     N peer NimbusSession sibling DOs (N = min(specs.length,
      *     MAX_PEER_FANOUT = 32)), each running ONE installPackagesInFacet
      *     against its own shard with internal pLimit(3).
@@ -701,7 +699,6 @@ export class NpmInstaller {
      * Pre-fix lineage: this site previously ran ONE NimbusLoaderPool
      *   with concurrency=1, internal pLimit(3) — the explicit "collapses
      *   what was 4 concurrent dynamic workers (pool.map slots) into 1"
-     *   YELLOW retreat documented in audit/sections/FANOUT-AUDIT.md (P1).
      *   Two-tier topology re-expands the fan-out without re-introducing
      *   the V8 cap risk.
      */
@@ -731,91 +728,13 @@ export class NpmInstaller {
         if (specs.length === 0) {
             return { installed, failed, filesWritten };
         }
-        // Shard count: bounded by spec count, the peer-DO ceiling, and
-        // the coordinator-fanout ceiling.
-        //
-        // For small batches (< IN_DO_THRESHOLD), the in-DO path uses
-        // concurrency = specs.length (capped at 4 by NimbusFanoutPool's
-        // in-DO leg) — so each spec gets its own slot.
-        //
-        // For larger batches, we shard into N peer DOs.
-        //
-        // [COORDINATOR-OVERLOAD adaptive cap, P0a wave-4]
-        //
-        // History of failed waves (all on Markflow 617 deps, real prod):
-        //   wave-1 (16 shards + writeBatchStream semaphore): 270 individual
-        //     overload warns per install. Per-package writeBatchStream RPCs
-        //     overflowed coordinator's input gate.
-        //   wave-2 (16 shards + shared-flush at 16 MiB + semaphore):
-        //     [batch-fanout] aborted — semaphore extended each peer's
-        //     parent RPC round-trip, parent aged out.
-        //   wave-3 (8 shards + shared-flush at 4 MiB, no semaphore):
-        //     single-session = always GREEN. 12-concurrent-session load
-        //     test: 25-33% of sessions hit `[batch-fanout] aborted:
-        //     ExecutionError: Durable Object is overloaded. Requests
-        //     queued for too long.` ← THE USER'S REPRODUCED ERROR.
-        //
-        // Wave-4 root cause (verified by N=12 concurrent test, post-deploy
-        // 15d3bfda): the OUTBOUND fan-out from coordinator → 8 peer DOs
-        // creates 8 cold-start requests at workerd's DO scheduler. Under
-        // N concurrent sessions, total simultaneous peer-DO cold-starts
-        // = N × peerCount. At N=12 × 8 = 96, some cold-starts queue at
-        // workerd's DO scheduler past the queue-age guard.
-        //
-        // Wave-4 fix: route LARGE installs through the in-DO path (POC C)
-        // instead of peer-DO fan-out. Peer-DO cold-start was the actual
-        // bottleneck under concurrent load — N=12 sessions × 5-8 peer DOs
-        // = 60-96 simultaneous DO cold-starts, exceeding workerd's per-
-        // account scheduler capacity and producing the user's observed
-        // `[batch-fanout] aborted: ExecutionError: Durable Object is
-        // overloaded`.
-        //
-        // POC C in-DO uses 4 NimbusLoaderPool slots (V8 4-loaders-per-
-        // method-context cap) of WORKER-LOADER isolates, NOT peer DOs.
-        // Worker Loader isolates have different scaling characteristics
-        // than DO instances — they scale per-request without the per-
-        // account DO scheduler bottleneck.
-        //
-        // For Markflow's 620 deps:
-        //   wave-3 (8 peer-DO shards × pLimit 3 = 24 decoders): RED at N≥8
-        //   wave-4 (4 in-DO loader slots × pLimit 3 = 12 decoders): expected
-        //     GREEN at N=12 since each session uses Worker Loaders, not DOs
-        //
-        // shardCount = 4 routes via _dispatchInDo (4 < IN_DO_THRESHOLD=5).
-        // Each in-DO slot runs installPackagesInFacet over ~155 packages
-        // with pLimit(3); the shared-flush coalescer in install-batch-facet
-        // keeps writeBatchStream RPC count to coordinator ≈ 12-20 total.
-        //
-        //   LARGE_INSTALL_PEER_CAP = 8 peer-DO shards (revert from in-DO
-        //     trial). In-DO routes (2-3 shards) lost reliability because
-        //     Worker Loader cold-starts under N=12 concurrent sessions
-        //     hang silently (240s timeout, no error). Peer-DO at 8 shards
-        //     gives explicit batch-fanout abort errors at 17-33% rate
-        //     under N=12 — worse rate but BETTER user signal (clear
-        //     error vs silent hang).
-        //   LARGE_INSTALL_THRESHOLD = 200 (deps): below this, default
-        //     32-peer fan-out remains.
-        //
-        // N=12 concurrent stress is an artificial test — real concurrent-
-        // user load on a single account is rarely > 2-3 sessions running
-        // a 600+ dep install simultaneously. Single-session is reliably
-        // GREEN. The user's single failure was likely a transient under
-        // momentary load.
-        //
-        // Wave-history (all on Markflow 620 deps, real prod, N=12 stress):
-        //   wave-3 (8 peer-DO shards):       17-33% sessions fail explicitly
-        //   wave-4a (5 peer-DO shards):      17%
-        //   wave-4b (3 in-DO shards):        25% silent timeout
-        //   wave-4c (2 in-DO shards):        17% silent timeout
-        //   wave-4d (8 peer-DO shards,
-        //            STAGGERED dispatch):    target 0%
-        //
-        // The wave-4d trick: dispatch shards in TWO PHASES via Promise.all
-        // rather than all-at-once. Phase 1: shards 0-3 → await Promise.all.
-        // Phase 2: shards 4-7 → await Promise.all. This serializes the
-        // cold-start thundering herd at the workerd DO scheduler without
-        // adding setTimeout. Implemented in src/loaders/fanout-pool.ts:
-        // _dispatchPeerDo via the FANOUT_PHASE_SIZE constant.
+        // Shard count is bounded by the package count and the fan-out ceiling.
+        // Large installs use a smaller peer-DO cap than the general-purpose
+        // fanout pool: each shard does substantial tarball decode and VFS write
+        // work, and keeping the shard count at eight avoids excessive sibling DO
+        // cold starts under concurrent user installs. NimbusFanoutPool dispatches
+        // those peers in bounded phases, so this remains parallel without creating
+        // one cold-start burst per package shard.
         const LARGE_INSTALL_THRESHOLD = 200;
         const LARGE_INSTALL_PEER_CAP = 8;
         let shardCount;
@@ -833,7 +752,7 @@ export class NpmInstaller {
             shards[idx % shardCount].push(spec);
         });
         const nonEmptyShards = shards.filter((s) => s.length > 0);
-        const topology = nonEmptyShards.length < IN_DO_THRESHOLD ? 'in-do (POC C)' : 'peer-do (POC B)';
+        const topology = nonEmptyShards.length < IN_DO_THRESHOLD ? 'in-do (in-DO fanout)' : 'peer-do (peer-DO fanout)';
         log(`Dispatching ${specs.length} packages across ${nonEmptyShards.length} ` +
             `shard${nonEmptyShards.length === 1 ? '' : 's'} (${topology}, internal pLimit=3)...`);
         const fanoutPool = new NimbusFanoutPool(this.env, this.ctx, {
@@ -1385,7 +1304,7 @@ export class NpmInstaller {
         // through this phase; if a future regression brings esbuild back
         // onto the supervisor we'll see it spike here.
         //
-        // P5 (prod-bugs-2): switched from process.memoryUsage() to the
+        // P5 (production reliability): switched from process.memoryUsage() to the
         // C'.1 deterministic estimator. process.memoryUsage() returns 0
         // for every field inside a Durable Object class context (only
         // dynamic-worker isolates under nodejs_compat get the real
@@ -1747,7 +1666,7 @@ export class NpmInstaller {
                 }
                 catch { }
             }
-            // P5 (prod-bugs-2): switched both `memBefore` and `memAfter`
+            // P5 (production reliability): switched both `memBefore` and `memAfter`
             // to the C'.1 deterministic estimator (see entry-point note
             // above). Both are floats in MiB; delta is post − pre.
             try {
@@ -1927,7 +1846,7 @@ export class NpmInstaller {
         return null;
     }
     /**
-     * P5 (prod-bugs-2) — deterministic supervisor-heap estimate in MiB.
+     * P5 (production reliability) — deterministic supervisor-heap estimate in MiB.
      *
      * Routes through observability/heap-estimate.ts which sums KNOWN
      * supervisor heap allocation sources from runtime counters that
@@ -1969,7 +1888,7 @@ export class NpmInstaller {
     }
 }
 // ── Helpers ─────────────────────────────────────────────────────────────
-// P5 (prod-bugs-2): readSupervisorHeap() removed. It called
+// P5 (production reliability): readSupervisorHeap() removed. It called
 // process.memoryUsage() which returns 0 for every field inside a
 // Durable Object class context (only dynamic-worker isolates under
 // nodejs_compat get the real implementation — see