@nimbus-sh/worker 0.10.0 → 0.11.0

package/dist/hosted/runtime.js

@@ -1,10 +1,11 @@
 import { requireVfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
-import { SandboxFsImpl } from '@nimbus-sh/core/substrate/lifo/sandbox/SandboxFs.js';
-import { ExecutionFs } from '@nimbus-sh/core/shell/execution-fs.js';
+import { ProcessView } from '@nimbus-sh/core/runtime/process-files.js';
 import { SUPERVISOR_OP_ROUTES, createSupervisorBridgeStore } from '@nimbus-sh/core/workspace/supervisor-op.js';
+import { openSupervisorDeliveries } from '@nimbus-sh/core/workspace/supervisor-delivery.js';
 import { WebSocketTerminal } from '../facets/ws-terminal.js';
 import { buildSessionSupervisorOps } from '../session/supervisor-op.js';
-import { installLogPersistence } from '../session/hibernation.js';
+import { armResidentKeepalive, installLogPersistence, noteResidentClient, residentKeepaliveFired } from '../session/hibernation.js';
+import { takeLegacyResetNotice } from '../session/legacy-reset.js';
 import { appendScrollback, ensureSessionStateSchema, loadScrollback, loadShellState, persistShellState } from '../session/state-store.js';
 import { wireProcessLogSocketBroadcast } from '../runtime/process-logs-api.js';
 import { routeRuntimeLoopback } from '../session/loopback.js';
@@ -12,10 +13,11 @@ import * as rpc from '../session/rpc.js';
 import * as operations from '../session/programmatic.js';
 import * as services from './services.js';
 import { registerHostedCommands } from './commands.js';
+import { HostedSession } from './session.js';
 import { z } from 'zod/v4';
 import { adoptCtxExports, supervisorEntrypoint } from '@nimbus-sh/fabric/composition.js';
 import { hostNamespaceBinding } from '@nimbus-sh/fabric/host-dispatch.js';
-const HostedTask = z.enum(['resident-launch', 'log-flush', 'log-janitor']);
+const HostedTask = z.enum(['resident-launch', 'resident-keepalive', 'log-flush', 'log-janitor']);
 const InputFrame = z.discriminatedUnion('type', [
     z.object({ type: z.literal('input'), data: z.string() }),
     z.object({ type: z.literal('resize'), cols: z.number().int().positive(), rows: z.number().int().positive() }),
@@ -31,6 +33,8 @@ class RuntimeOwner {
     closing = null;
     _w9PersistWired = false;
     _w9SchemaInit = false;
+    _w1KeepaliveArmed = false;
+    _w1LastClientActivityAt = 0;
     _viteShimPid = null;
     _viteShimPort = null;
     wranglerAliasBannerShown = false;
@@ -49,12 +53,18 @@ class RuntimeOwner {
     flushScheduled = false;
     janitorScheduled = false;
     recoveryNotice = false;
+    legacyNotice = null;
     scheduling = new Set();
     fileLeases = new Map();
     services;
+    /** The workspace's namespace and process bindings. */
+    getFilesystemAuthority() { return this.options.workspace.filesystem; }
+    /** This instance's receipts for its processes' mutations delivered exactly once (see NimbusSession). */
+    supervisorDeliveries;
     constructor(options) {
         this.options = options;
         hostNamespaceBinding(options.env, 'HostedRuntime');
+        this.supervisorDeliveries = openSupervisorDeliveries(options.ctx);
         const exports = Reflect.get(options.ctx, 'exports');
         if (!supervisorEntrypoint(exports)) {
             throw new Error('Export the configured supervisor entrypoint and call composeFabric before composing a hosted runtime');
@@ -73,6 +83,7 @@ class RuntimeOwner {
             requestLaunchTurn: (at) => this._scheduleLaunchTurn(at),
             resolveWorkerLaunch: options.resolveWorkerLaunch,
             filesystem: () => options.workspace.filesystem,
+            armResidentKeepalive: () => armResidentKeepalive(this, (at) => this.scheduleKeepalive(at)),
         });
         options.workspace.shell.bindTerminal(this.terminal);
         installLogPersistence(this, options.ctx, () => this.scheduleLogs());
@@ -100,6 +111,8 @@ class RuntimeOwner {
     ensureRuntimeReady() {
         this.assertOpen();
         this.readyPromise ??= (async () => {
+            // Files a pre-v2 Nimbus wrote are not read: say so, and start cold.
+            this.legacyNotice = takeLegacyResetNotice(this.sqliteFs, this.ctx);
             const saved = loadShellState(this.ctx);
             this.recoveryNotice = saved.hasPersistedState;
             if (saved.cwd)
@@ -132,6 +145,14 @@ class RuntimeOwner {
         this.options.lifecycle.waitUntil(pending);
         return pending;
     }
+    noteClientActivity() {
+        noteResidentClient(this, (at) => this.scheduleKeepalive(at));
+    }
+    scheduleKeepalive(at) {
+        const pending = this.schedule('resident-keepalive', at);
+        this.options.lifecycle.waitUntil(pending);
+        return pending.then(() => true, () => false);
+    }
     schedule(reason, at) {
         if (this._w1SessionDestroyed)
             return Promise.reject(new Error('Nimbus runtime is closed'));
@@ -195,6 +216,11 @@ class RuntimeOwner {
         if (task === 'resident-launch') {
             await this.ensureFacetManager().pumpLaunches();
         }
+        else if (task === 'resident-keepalive') {
+            const next = residentKeepaliveFired(this, this.ctx, Date.now());
+            if (next !== null && !(await this.scheduleKeepalive(next)))
+                this._w1KeepaliveArmed = false;
+        }
         else if (task === 'log-flush') {
             this.flushScheduled = false;
             this.processes.flushLogs();
@@ -217,6 +243,10 @@ class RuntimeOwner {
             this.terminal.write('\r\n[Runtime resumed; files and shell settings restored. Previous interpreter state was not retained.]\r\n');
             this.recoveryNotice = false;
         }
+        if (this.legacyNotice) {
+            this.terminal.write(`\r\n[${this.legacyNotice}]\r\n`);
+            this.legacyNotice = null;
+        }
         if (!this.shell.running)
             this.shell.printPrompt();
         this.terminal.flushNow();
@@ -226,7 +256,16 @@ class RuntimeOwner {
         await this.attachTerminal(ws, 'wake');
         const text = typeof frame === 'string' ? frame : new TextDecoder().decode(frame);
         const input = InputFrame.parse(JSON.parse(text));
-        this.terminal.handleMessage(input);
+        const completion = this.terminal.handleMessage(input);
+        if (completion) {
+            this.options.lifecycle.waitUntil(completion.catch((error) => {
+                const message = error instanceof Error ? error.message : String(error);
+                console.error('[nimbus] terminal input failed:', message);
+                this.terminal.writeln(`terminal input failed: ${message}`);
+            }).finally(() => {
+                persistShellState(this.ctx, { cwd: this.shell.getCwd(), env: this.shell.getEnv() });
+            }));
+        }
         persistShellState(this.ctx, { cwd: this.shell.getCwd(), env: this.shell.getEnv() });
     }
     terminalClose(ws) {
@@ -250,8 +289,7 @@ class RuntimeOwner {
             lease = workspace.filesystem.openHost(identity);
             this.fileLeases.set(key, lease);
         }
-        const view = new SandboxFsImpl(new ExecutionFs(lease.fs), () => workspace.shell.getCwd());
-        return Object.assign(view, { as: (next) => this.files(next) });
+        return Object.assign(new ProcessView(lease.fs), { as: (next) => this.files(next) });
     }
     close() {
         this.closing ??= Promise.resolve().then(async () => {
@@ -299,17 +337,24 @@ class RuntimeOwner {
         return this.closing;
     }
 }
+/** Every call an embedder makes is a client's: it notes activity for the resident keep-alive. */
+function clientCalls(owner, calls) {
+    const wrapped = Object.fromEntries(Object.entries(calls).map(([name, call]) => [name, (...args) => {
+            owner.noteClientActivity();
+            return Reflect.apply(call, undefined, args);
+        }]));
+    // Same keys, same signatures: each entry forwards its arguments unchanged.
+    return wrapped;
+}
 export async function composeHostedRuntime(options) {
     const owner = new RuntimeOwner(options);
     await owner.ensureRuntimeReady();
-    return {
-        workspace: options.workspace,
-        terminal: owner.terminal,
-        files: owner.files(owner.processes.cred(owner.shellProcessPid)),
-        runtimes: owner.runtimeManager,
+    // Facet RPCs (supervisorOp), alarms and teardown are not clients.
+    const client = clientCalls(owner, {
         facets: () => owner.ensureFacetManager(),
         ready: operations.ensureProgrammaticReady.bind(null, owner),
         exec: operations.rpcExec.bind(null, owner),
+        execStream: operations.rpcExecStream.bind(null, owner),
         runCode: operations.rpcRunCode.bind(null, owner),
         startProcess: operations.rpcStartProcess.bind(null, owner),
         listProcesses: operations.rpcListProcesses.bind(null, owner),
@@ -335,10 +380,22 @@ export async function composeHostedRuntime(options) {
             await operations.ensureProgrammaticReady(owner);
             return owner.ensureFacetManager().apps.routeCapabilityPort(...args);
         },
-        supervisorOp: (envelope) => owner.supervisorOp(envelope),
-        onScheduled: (task) => owner.onScheduled(task),
         attachTerminal: (ws) => owner.attachTerminal(ws),
         terminalFrame: (ws, message) => owner.terminalFrame(ws, message),
+    });
+    return {
+        workspace: options.workspace,
+        terminal: owner.terminal,
+        files: owner.files(owner.processes.cred(owner.shellProcessPid)),
+        runtimes: owner.runtimeManager,
+        ...client,
+        supervisorOp: (envelope) => owner.supervisorOp(envelope),
+        /** The SDK's session surface for `Nimbus.fromSession`, optionally bound to one shell and identity. */
+        session: (scope = {}) => {
+            owner.assertOpen();
+            return new HostedSession(owner, scope);
+        },
+        onScheduled: (task) => owner.onScheduled(task),
         terminalClose: (ws) => owner.terminalClose(ws),
         close: () => owner.close(),
     };

package/dist/hosted/services.d.ts

@@ -9,7 +9,7 @@ import type { IsolatePoolEnv } from '@nimbus-sh/fabric/isolate-pool.js';
 export interface HostedRuntimeEnv extends RuntimeCatalogEnv, IsolatePoolEnv {
     ASSETS?: Fetcher;
 }
-export type RuntimeServiceHost = Pick<SessionInternal, '_cpRegistry' | '_envFlagDefaultOn' | '_reportExternalExit' | 'buildFetchFn' | 'bundlePool' | 'ensureBundlePool' | 'ensureFacetManager' | 'ensureFetchProxy' | 'ensureSqliteFs' | 'esbuildService' | 'facetManagerComposed' | 'facetProcessManager' | 'fetchProxyEntrypoint' | 'npmInstaller' | 'portRegistry' | 'processes' | 'shell' | 'sqliteFs' | 'terminal'> & {
+export type RuntimeServiceHost = Pick<SessionInternal, '_cpRegistry' | '_envFlagDefaultOn' | '_reportExternalExit' | 'buildFetchFn' | 'bundlePool' | 'ensureBundlePool' | 'ensureFacetManager' | 'ensureFetchProxy' | 'ensureSqliteFs' | 'esbuildService' | 'facetManagerComposed' | 'getFilesystemAuthority' | 'facetProcessManager' | 'fetchProxyEntrypoint' | 'npmInstaller' | 'portRegistry' | 'processes' | 'shell' | 'sqliteFs' | 'terminal'> & {
     webSocketRelay: WebSocketRelay | null;
 };
 export interface RuntimeServiceContext {
@@ -19,13 +19,12 @@ export interface RuntimeServiceContext {
     requestLaunchTurn(notBefore?: number): Promise<void>;
     resolveWorkerLaunch?: FacetManagerHostHooks['resolveWorkerLaunch'];
     /**
-     * Hold the host actor in memory while a resident process runs — the
-     * session DO's `ensureResidentKeepalive` (session/hibernation.ts), bound
-     * to the host and its `ctx`. Optional because it is the one thing only the
-     * session DO can do: it alone runs the fabric timer mux this alarm rides,
-     * and the hosted runtime schedules through its own lifecycle instead.
+     * Hold the host actor in memory while a resident process runs:
+     * `armResidentKeepalive` (session/hibernation.ts) bound to the host's own
+     * scheduler — the fabric timer mux for the session DO, the embedder's
+     * lifecycle for a hosted runtime.
      */
-    armResidentKeepalive?: () => void;
+    armResidentKeepalive: () => void;
     /** The host's own authority: a session has exactly one, and this is it. */
     filesystem: () => NimbusFilesystemAuthority;
 }

package/dist/hosted/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/hosted/services.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAGlH,OAAO,EAAkC,KAAK,yBAAyB,EAAgB,MAAM,yCAAyC,CAAC;AAEvI,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAoBxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB,EAAE,cAAc;IACzE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,EACnD,aAAa,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,cAAc,GAAG,YAAY,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,sBAAsB,GAAG,qBAAqB,GAAG,sBAAsB,GAAG,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CACjW,GAAG;IAAE,cAAc,EAAE,cAAc,GAAG,IAAI,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,mBAAmB,CAAC,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACnE;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC;IAClC,2EAA2E;IAC3E,UAAU,EAAE,MAAM,yBAAyB,CAAC;CAC7C;AA0BD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,GAAG,iBAAiB,CAGjH;AAEH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,GAAG,oBAAoB,CA8DtH;AAEH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,GAAG,cAAc,CAGnH;AAEH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,OAsQvG;AAEH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,GAAG,GAAG,IAAI,CA8EvI;AAEH,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAkB7L;AAEH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CA0CjK;AAEH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtH;AAEH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAW1H;AAEH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB;;;;;oCArKkB,MAAM,KAAK,IAAI;gCAgFnB,MAAM,KAAK,IAAI,yBAAU,MAAM,SAAS,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;6CAoBtD,MAAM,KAAK,IAAI;;;EA6E3I"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/hosted/services.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAGlH,OAAO,EAAkC,KAAK,yBAAyB,EAAgB,MAAM,yCAAyC,CAAC;AAEvI,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAoBxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB,EAAE,cAAc;IACzE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,EACnD,aAAa,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,cAAc,GAAG,YAAY,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,sBAAsB,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,sBAAsB,GAAG,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAC5X,GAAG;IAAE,cAAc,EAAE,cAAc,GAAG,IAAI,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,mBAAmB,CAAC,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACnE;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,IAAI,CAAC;IACjC,2EAA2E;IAC3E,UAAU,EAAE,MAAM,yBAAyB,CAAC;CAC7C;AA0BD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,GAAG,iBAAiB,CAGjH;AAEH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,GAAG,oBAAoB,CA0DtH;AAEH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,GAAG,cAAc,CAGnH;AAEH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,OAsQvG;AAEH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,GAAG,GAAG,IAAI,CA8EvI;AAEH,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAkB7L;AAEH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CA0CjK;AAEH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtH;AAEH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAW1H;AAEH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB;;;;;oCArKkB,MAAM,KAAK,IAAI;gCAgFnB,MAAM,KAAK,IAAI,yBAAU,MAAM,SAAS,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;6CAoBtD,MAAM,KAAK,IAAI;;;EA6E3I"}

package/dist/hosted/services.js

@@ -3,15 +3,15 @@ import { composeFacetManager } from "../facets/compose.js";
 import { FacetProcessManager, textBytes } from "../facets/process.js";
 import { ChildProcessSpawnPool } from "../loaders/child-process/spawn-pool.js";
 import { CRED_KERNEL, CRED_SESSION_USER } from "@nimbus-sh/core/runtime/os-contracts.js";
-import { SqliteFilesystemAuthority } from "@nimbus-sh/core/runtime/filesystem-authority.js";
+import { ProcessFiles } from "@nimbus-sh/core/runtime/process-files.js";
 import { EsbuildBundlePool } from "../facets/esbuild-bundle-pool.js";
-import { EsbuildService } from "@nimbus-sh/core/runtime/esbuild-service.js";
+import { supervisorEsbuildService } from "../facets/esbuild-transform.js";
 import { CF_COMPAT_DATE } from "@nimbus-sh/core/constants.js";
 import { notifyTerminalEvent } from "../runtime/process-logs-api.js";
 // The supervisor terminates a facet's outbound sockets so inbound frames
 // arrive as supervisor replies (VFS coherence witness 3).
 import { WebSocketRelay } from "../session/ws-relay.js";
-// ── Pure helpers extracted to ./nimbus-session-helpers.ts (S1) ────────
+// ── Pure helpers in ../session/helpers.ts ────────
 //
 // renderNoDevServerHtml, BUNDLER_BIN_PREFIXES, NIMBUS_UNSUPPORTED_BINS,
 // WRANGLER_IGNORED_FLAGS{,_WITH_VALUE}, WRANGLER_UNSUPPORTED_CONFIG_FIELDS,
@@ -69,15 +69,15 @@ export function ensureFacetManager(self, runtimeContext) {
         // The manager reaches the disk behind the authority (boot images, the
         // launch journal), so a host that credentials something other than this
         // session's SQLite filesystem cannot compose one.
-        if (!(filesystem instanceof SqliteFilesystemAuthority)) {
-            throw new Error('Nimbus: the facet manager needs the session SqliteFilesystemAuthority, not a foreign filesystem authority');
+        if (!(filesystem instanceof ProcessFiles)) {
+            throw new Error('Nimbus: the facet manager needs the session ProcessFiles, not a foreign filesystem authority');
         }
         self.facetManagerComposed = composeFacetManager({
             ctx: runtimeContext.ctx,
             env: runtimeContext.env,
             processes: self.processes,
             portRegistry: self.portRegistry,
-            vfs: filesystem.vfs,
+            vfs: filesystem.engine,
             filesystem,
             ...(self.esbuildService ? { esbuild: self.esbuildService } : {}),
             hooks: {
@@ -94,7 +94,7 @@ export function ensureFacetManager(self, runtimeContext) {
                         catch { }
                         // The one arming site: the journal's re-drive path comes back
                         // through this same hook. See ensureResidentKeepalive.
-                        runtimeContext.armResidentKeepalive?.();
+                        runtimeContext.armResidentKeepalive();
                     }
                     // Only surface long-running / user-visible spawns to keep
                     // the terminal uncluttered. Short `node <file>` evals also
@@ -113,12 +113,8 @@ export function ensureFacetManager(self, runtimeContext) {
         });
     }
     const composed = self.facetManagerComposed;
-    // W3.5 Fix B: share the session's lazy esbuildService with the
-    // FacetManager so the bundle's ESM→CJS pre-pass doesn't pay
-    // wasm-init twice. The session may construct it after the manager
-    // exists, so the share is re-offered on every call; FacetManager
-    // otherwise lazy-creates its own on first exec — same wasm bytes,
-    // same ~10ms init cost, just paid once per surface.
+    // The session may create its esbuild after the manager exists, so it is
+    // offered on every call. Either one runs in the session's esbuild facet.
     if (self.esbuildService) {
         composed.manager.setEsbuildService(self.esbuildService);
     }
@@ -453,7 +449,7 @@ export async function ensureNpmInstaller(self, runtimeContext, onProgress) {
     if (!self.esbuildService) {
         if (!self.sqliteFs)
             throw new Error('Session VFS is not initialized');
-        self.esbuildService = new EsbuildService(self.sqliteFs.as(CRED_KERNEL));
+        self.esbuildService = supervisorEsbuildService(runtimeContext.ctx, runtimeContext.env, self.getFilesystemAuthority().namespaceFs(CRED_KERNEL));
     }
     // Lazy-load the installer (+ its ~216 KB resolver/facet/loader-pool
     // subgraph) on first npm use so it stays out of the cold script-eval

package/dist/hosted/session.d.ts

@@ -0,0 +1,165 @@
+/**
+ * The SDK's session surface, served by a hosted runtime.
+ *
+ * `Nimbus.fromSession` drives a `NimbusSandbox` over any object with the
+ * `_rpc*` methods a `NimbusSession` Durable Object answers. A hosted runtime
+ * has no such object of its own: its embedder's Durable Object owns it. So the
+ * runtime hands out this `RpcTarget`, and the embedder passes it wherever a
+ * sandbox client runs — another isolate included, since an `RpcTarget`
+ * crosses RPC as a stub whose calls run here.
+ *
+ * A session may be scoped. A scope confines two things: the one named shell
+ * its commands run in, and the identity every command and file operation
+ * runs as. The stub is the capability, so a caller that names another shell
+ * or identity is refused rather than obeyed; a scope that names no shell
+ * runs no command, since the only shell left to it is the embedder's own.
+ * The workspace's destruction stays with the embedder. Processes, ports,
+ * logs and applications are not confined: they are workspace-wide, as they
+ * are to the shell's own `ps`, `kill`, `logs` and `nimbus expose`/`app`.
+ */
+import { RpcTarget } from 'cloudflare:workers';
+import { type VfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
+import * as operations from '../session/programmatic.js';
+export interface HostedSessionScope {
+    /** The only named shell a command may run in; every command must name it (`sandbox(id, { shellId })`). */
+    readonly shellId?: string;
+    /** The identity every command and file operation runs as. */
+    readonly cred?: VfsCred;
+}
+type RunCodeOptions = operations.ProgrammaticExecOptions & {
+    language?: 'javascript' | 'typescript' | 'python' | 'ruby' | 'shell';
+    install?: 'never' | 'ifMissing';
+};
+type Visibility = {
+    visibility?: 'scoped' | 'public';
+    name?: string;
+};
+export interface HostedSessionOwner extends operations.ProgrammaticHost {
+    noteClientActivity(): void;
+}
+export declare class HostedSession extends RpcTarget {
+    private readonly owner;
+    private readonly scope;
+    constructor(owner: HostedSessionOwner, scope: HostedSessionScope);
+    /** Every call is a client's, as every `composeHostedRuntime` call is: it notes activity for the resident keep-alive. */
+    private client;
+    /**
+     * The identity a call acts as. A scoped session always names one: its own,
+     * or the session user every command runs as by default, so no verb's own
+     * default (the kernel, for `files.delete`) applies to it.
+     */
+    private cred;
+    private exec;
+    _rpcReady(options?: operations.ProgrammaticReadyOptions): Promise<{
+        ok: true;
+        preinstalled: string[];
+    }>;
+    _rpcExecStream(command: string, options?: operations.ProgrammaticExecOptions): Promise<ReadableStream<Uint8Array>>;
+    _rpcStartProcess(command: string, options?: operations.ProgrammaticExecOptions): Promise<operations.ProgrammaticStartResult>;
+    _rpcRunCode(code: string, options?: RunCodeOptions): Promise<import("@nimbus-sh/core/runtime/exec-stream.js").ExecOutput>;
+    _rpcReadFile(path: string, _pid?: undefined, cred?: VfsCred): Promise<string | null>;
+    _rpcReadFileBytes(path: string, _pid?: undefined, cred?: VfsCred): Promise<Uint8Array | null>;
+    _rpcWriteFile(path: string, content: string | Uint8Array, _pid?: undefined, cred?: VfsCred): Promise<void>;
+    _rpcStat(path: string, _pid?: undefined, cred?: VfsCred): Promise<any>;
+    _rpcLstat(path: string, _pid?: undefined, cred?: VfsCred): Promise<any>;
+    _rpcReaddir(path: string, _pid?: undefined, cred?: VfsCred): Promise<{
+        name: string;
+        type: string;
+    }[]>;
+    _rpcRename(from: string, to: string, _pid?: undefined, cred?: VfsCred): Promise<void>;
+    _rpcChmod(path: string, mode: number, _pid?: undefined, cred?: VfsCred): Promise<void>;
+    _rpcFsReadRange(path: string, offset: number, length: number, _pid?: undefined, cred?: VfsCred): Promise<Uint8Array<ArrayBufferLike> | null>;
+    _rpcExists(path: string, _pid?: undefined, cred?: VfsCred): Promise<boolean>;
+    _rpcMkdir(path: string, _pid?: undefined, cred?: VfsCred): Promise<void>;
+    _rpcDeleteFile(path: string, options?: {
+        recursive?: boolean;
+    }, cred?: VfsCred): Promise<void>;
+    _rpcInstallRuntime(spec: string, options?: {
+        force?: boolean;
+    }): Promise<import("../runtime/package-manager.js").RuntimeInstallSummary>;
+    _rpcEnsureRuntimes(specs: string[], options?: {
+        force?: boolean;
+    }): Promise<import("../runtime/package-manager.js").RuntimeInstallSummary[]>;
+    _rpcListRuntimes(): Promise<{
+        installed: import("@nimbus-sh/core/runtime/installed-runtimes.js").RuntimeSummary[];
+        available: import("@nimbus-sh/core/runtime/runtime-package.js").RuntimeAvailability[];
+    }>;
+    _rpcListProcesses(): Promise<operations.SerializedProcess[]>;
+    _rpcKillProcess(pid: number): Promise<{
+        ok: boolean;
+        pid: number;
+    }>;
+    _rpcWriteProcessInput(pid: number, data: string): Promise<{
+        ok: boolean;
+        pid: number;
+    }>;
+    _rpcEndProcessInput(pid: number): Promise<{
+        ok: boolean;
+        pid: number;
+    }>;
+    _rpcResizeProcess(pid: number, size: {
+        columns: number;
+        rows: number;
+    }): Promise<{
+        ok: boolean;
+        pid: number;
+    }>;
+    _rpcSignalProcess(pid: number, signal: string): Promise<{
+        ok: boolean;
+        pid: number;
+    }>;
+    _rpcProcessLogs(pid: number, options?: {
+        cursor?: number;
+        lines?: number;
+        bytes?: number;
+    }): Promise<{
+        pid: number;
+        chunks: import("@nimbus-sh/core/runtime/process-logs.js").SequencedLogChunk[];
+        text: string;
+        cursor: number;
+        truncated: boolean;
+        exit: import("@nimbus-sh/core/runtime/process-logs.js").ProcessExitInfo | null;
+    }>;
+    _rpcListPorts(): Promise<operations.SerializedPort[]>;
+    _rpcExposePort(port: number, options?: Visibility): Promise<{
+        port: number;
+        listening: boolean;
+        pid: number | null;
+        registeredAt: number | null;
+        capability: string | null;
+        visibility: "scoped" | "public";
+        owner: string | null;
+        name: string | null;
+    }>;
+    _rpcUnexposePort(port: number): Promise<{
+        port: number;
+        ok: boolean;
+    }>;
+    _rpcListApps(): Promise<operations.ListedApp[]>;
+    _rpcExposeApp(target: operations.AppTarget, options?: Visibility): Promise<operations.ExposedAppResult>;
+    _rpcRotateLink(target: operations.AppTarget): Promise<operations.ExposedAppResult>;
+    _rpcRemoveApp(target: operations.AppTarget): Promise<{
+        owner: string;
+        removed: boolean;
+        port: number | null;
+    }>;
+    _rpcEnsureDurableApp(input: {
+        owner: string;
+        preferredPort?: number;
+        visibility?: 'scoped' | 'public';
+        name?: string;
+    }): Promise<{
+        port: number;
+        capability: string | null;
+        visibility: "scoped" | "public";
+    }>;
+    _rpcRemoveDurableApp(owner: string): Promise<{
+        owner: string;
+        removed: boolean;
+        port: number | null;
+    }>;
+    /** The embedder owns the workspace's life; a session it handed out cannot end it. */
+    _rpcDestroy(): Promise<never>;
+}
+export {};
+//# sourceMappingURL=session.d.ts.map

package/dist/hosted/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/hosted/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAqB,KAAK,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAG1F,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,0GAA0G;IAC1G,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,KAAK,cAAc,GAAG,UAAU,CAAC,uBAAuB,GAAG;IACzD,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACrE,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CACjC,CAAC;AAEF,KAAK,UAAU,GAAG;IAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtE,MAAM,WAAW,kBAAmB,SAAQ,UAAU,CAAC,gBAAgB;IACrE,kBAAkB,IAAI,IAAI,CAAC;CAC5B;AAOD,qBAAa,aAAc,SAAQ,SAAS;IAG9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;gBAErB,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB;IAMjF,wHAAwH;IACxH,OAAO,CAAC,MAAM;IAKd;;;;OAIG;IACH,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,IAAI;IAcZ,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,wBAAwB;;;;IACjD,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,uBAAuB,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAGlH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,uBAAuB;IAG9E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc;IAIlD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAGpF,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAG7F,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAG1G,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IACvD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IACxD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;;;;IAC1D,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IAGrE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IAGtE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IAG9F,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IACzD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO;IACxD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,OAAO;IAIpF,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;IAC9D,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;IACjE,gBAAgB;;;;IAEhB,iBAAiB;IACjB,eAAe,CAAC,GAAG,EAAE,MAAM;;;;IAC3B,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;IAC/C,mBAAmB,CAAC,GAAG,EAAE,MAAM;;;;IAC/B,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;;;;IACtE,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;IAC7C,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;IAG1F,aAAa;IACb,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU;;;;;;;;;;IACjD,gBAAgB,CAAC,IAAI,EAAE,MAAM;;;;IAC7B,YAAY;IACZ,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,UAAU;IAChE,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS;IAC3C,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS;;;;;IAC1C,oBAAoB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAGtH,oBAAoB,CAAC,KAAK,EAAE,MAAM;;;;;IAElC,qFAAqF;IAC/E,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;CAGpC"}

package/dist/hosted/session.js

@@ -0,0 +1,132 @@
+/**
+ * The SDK's session surface, served by a hosted runtime.
+ *
+ * `Nimbus.fromSession` drives a `NimbusSandbox` over any object with the
+ * `_rpc*` methods a `NimbusSession` Durable Object answers. A hosted runtime
+ * has no such object of its own: its embedder's Durable Object owns it. So the
+ * runtime hands out this `RpcTarget`, and the embedder passes it wherever a
+ * sandbox client runs — another isolate included, since an `RpcTarget`
+ * crosses RPC as a stub whose calls run here.
+ *
+ * A session may be scoped. A scope confines two things: the one named shell
+ * its commands run in, and the identity every command and file operation
+ * runs as. The stub is the capability, so a caller that names another shell
+ * or identity is refused rather than obeyed; a scope that names no shell
+ * runs no command, since the only shell left to it is the embedder's own.
+ * The workspace's destruction stays with the embedder. Processes, ports,
+ * logs and applications are not confined: they are workspace-wide, as they
+ * are to the shell's own `ps`, `kill`, `logs` and `nimbus expose`/`app`.
+ */
+import { RpcTarget } from 'cloudflare:workers';
+import { CRED_SESSION_USER } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { encodeExecStream } from '@nimbus-sh/core/runtime/exec-stream.js';
+import * as rpc from '../session/rpc.js';
+import * as operations from '../session/programmatic.js';
+function sameCred(a, b) {
+    return a.uid === b.uid && a.gid === b.gid && a.umask === b.umask
+        && a.groups.length === b.groups.length && a.groups.every((group, index) => group === b.groups[index]);
+}
+export class HostedSession extends RpcTarget {
+    owner;
+    scope;
+    constructor(owner, scope) {
+        super();
+        this.owner = owner;
+        const { shellId, cred } = scope;
+        this.scope = shellId === undefined && cred === undefined ? null : Object.freeze({ shellId, cred });
+    }
+    /** Every call is a client's, as every `composeHostedRuntime` call is: it notes activity for the resident keep-alive. */
+    client() {
+        this.owner.noteClientActivity();
+        return this.owner;
+    }
+    /**
+     * The identity a call acts as. A scoped session always names one: its own,
+     * or the session user every command runs as by default, so no verb's own
+     * default (the kernel, for `files.delete`) applies to it.
+     */
+    cred(asked) {
+        if (this.scope === null)
+            return asked;
+        const bound = this.scope.cred ?? CRED_SESSION_USER;
+        if (asked !== undefined && !sameCred(bound, asked))
+            throw new Error('EPERM: this session is bound to another identity');
+        return bound;
+    }
+    exec(options) {
+        if (this.scope !== null && (this.scope.shellId === undefined || options?.shellId !== this.scope.shellId)) {
+            // Named, never defaulted: a client that omits the shell also sends a cwd
+            // for the session's one shell, which would pin the named shell's cwd.
+            // A scope without a shell would run on the embedder's workspace shell,
+            // reading and planting its environment, so it runs nothing.
+            throw new Error(this.scope.shellId === undefined
+                ? 'EPERM: this session names no shell, so it runs no command'
+                : `EPERM: this session runs commands only in shell '${this.scope.shellId}'; name it`);
+        }
+        const cred = this.cred(options?.cred);
+        return { ...options, ...(cred === undefined ? {} : { cred }) };
+    }
+    _rpcReady(options) { return operations.ensureProgrammaticReady(this.client(), options); }
+    async _rpcExecStream(command, options) {
+        return encodeExecStream(await operations.rpcExecStream(this.client(), command, this.exec(options)));
+    }
+    async _rpcStartProcess(command, options) {
+        return operations.rpcStartProcess(this.client(), command, this.exec(options));
+    }
+    async _rpcRunCode(code, options) { return operations.rpcRunCode(this.client(), code, this.exec(options)); }
+    // The file methods keep the session's wire shape: the third slot is a
+    // process claim no SDK caller makes, and is not accepted here either.
+    async _rpcReadFile(path, _pid, cred) {
+        return rpc._rpcReadFile(this.client(), path, undefined, this.cred(cred));
+    }
+    async _rpcReadFileBytes(path, _pid, cred) {
+        return rpc._rpcReadFileBytes(this.client(), path, undefined, this.cred(cred));
+    }
+    async _rpcWriteFile(path, content, _pid, cred) {
+        await rpc._rpcWriteFile(this.client(), path, content, undefined, this.cred(cred));
+    }
+    async _rpcStat(path, _pid, cred) { return rpc._rpcStat(this.client(), path, undefined, this.cred(cred)); }
+    async _rpcLstat(path, _pid, cred) { return rpc._rpcLstat(this.client(), path, undefined, this.cred(cred)); }
+    async _rpcReaddir(path, _pid, cred) { return rpc._rpcReaddir(this.client(), path, undefined, this.cred(cred)); }
+    async _rpcRename(from, to, _pid, cred) {
+        return rpc._rpcRename(this.client(), from, to, undefined, this.cred(cred));
+    }
+    async _rpcChmod(path, mode, _pid, cred) {
+        return rpc._rpcChmod(this.client(), path, mode, undefined, this.cred(cred));
+    }
+    async _rpcFsReadRange(path, offset, length, _pid, cred) {
+        return rpc._rpcFsReadRange(this.client(), path, offset, length, undefined, this.cred(cred));
+    }
+    async _rpcExists(path, _pid, cred) { return rpc._rpcExists(this.client(), path, undefined, this.cred(cred)); }
+    async _rpcMkdir(path, _pid, cred) { return rpc._rpcMkdir(this.client(), path, undefined, this.cred(cred)); }
+    async _rpcDeleteFile(path, options, cred) {
+        return operations.rpcDeleteFile(this.client(), path, options, this.cred(cred));
+    }
+    _rpcInstallRuntime(spec, options) { return operations.rpcInstallRuntime(this.client(), spec, options); }
+    _rpcEnsureRuntimes(specs, options) { return operations.rpcEnsureRuntimes(this.client(), specs, options); }
+    _rpcListRuntimes() { return operations.rpcListRuntimes(this.client()); }
+    _rpcListProcesses() { return operations.rpcListProcesses(this.client()); }
+    _rpcKillProcess(pid) { return operations.rpcKillProcess(this.client(), pid); }
+    _rpcWriteProcessInput(pid, data) { return operations.rpcWriteProcessInput(this.client(), pid, data); }
+    _rpcEndProcessInput(pid) { return operations.rpcEndProcessInput(this.client(), pid); }
+    _rpcResizeProcess(pid, size) { return operations.rpcResizeProcess(this.client(), pid, size); }
+    _rpcSignalProcess(pid, signal) { return operations.rpcSignalProcess(this.client(), pid, signal); }
+    _rpcProcessLogs(pid, options) {
+        return operations.rpcProcessLogs(this.client(), pid, options);
+    }
+    _rpcListPorts() { return operations.rpcListPorts(this.client()); }
+    _rpcExposePort(port, options) { return operations.rpcExposePort(this.client(), port, options); }
+    _rpcUnexposePort(port) { return operations.rpcUnexposePort(this.client(), port); }
+    _rpcListApps() { return operations.rpcListApps(this.client()); }
+    _rpcExposeApp(target, options) { return operations.rpcExposeApp(this.client(), target, options); }
+    _rpcRotateLink(target) { return operations.rpcRotateLink(this.client(), target); }
+    _rpcRemoveApp(target) { return operations.rpcRemoveApp(this.client(), target); }
+    _rpcEnsureDurableApp(input) {
+        return operations.rpcEnsureDurableApp(this.client(), input);
+    }
+    _rpcRemoveDurableApp(owner) { return operations.rpcRemoveDurableApp(this.client(), owner); }
+    /** The embedder owns the workspace's life; a session it handed out cannot end it. */
+    async _rpcDestroy() {
+        throw new Error('EPERM: a hosted session cannot destroy the workspace; its embedder closes the runtime');
+    }
+}

package/dist/loaders/generated-workers.d.ts

@@ -4,8 +4,9 @@
  * Produced by scripts/bundle-facet-workers.mjs from:
  *   - @nimbus-sh/core src/_shared/tarball-stream.ts (streaming tar primitives)
  *   - @nimbus-sh/platform src/w7-frame.ts (W7 streaming bulk-write encoder)
+ *   - @nimbus-sh/core src/_shared/esm-resolver.ts (Node's ESM resolver, for the node shims)
  *
- * Consumed by src/loaders/loader-pool.ts callers via the `preamble`
+ * Consumed by fabric/isolate-pool.ts callers via the `preamble`
  * option. The preamble is injected at the top of every generated
  * worker module so user functions can reference the exported
  * helpers by name.
@@ -16,8 +17,10 @@
  *   W7_MAGIC, W7_MAX_RECORD_BYTES.
  *
  * Tar size: 4.58 KiB
- * W7 size:  29.19 KiB
+ * W7 size:  30.14 KiB
  */
 export declare const TAR_STREAM_PREAMBLE: string;
 export declare const W7_FRAME_PREAMBLE: string;
+/** Declares `function createEsmResolver(host)`; the node shims call it. */
+export declare const ESM_RESOLVER_PREAMBLE: string;
 //# sourceMappingURL=generated-workers.d.ts.map

package/dist/loaders/generated-workers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generated-workers.d.ts","sourceRoot":"","sources":["../../src/loaders/generated-workers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,mBAAmB,EAAE,MAAwyJ,CAAC;AAE30J,eAAO,MAAM,iBAAiB,EAAE,MAAqv8B,CAAC"}
+{"version":3,"file":"generated-workers.d.ts","sourceRoot":"","sources":["../../src/loaders/generated-workers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,mBAAmB,EAAE,MAAwyJ,CAAC;AAE30J,eAAO,MAAM,iBAAiB,EAAE,MAAyt+B,CAAC;AAE1v+B,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,EAAE,MAA6uuB,CAAC"}