@nimbus-sh/worker 0.12.0 → 0.13.1

package/dist/esbuild-cli-artifact.generated.d.ts

@@ -10,7 +10,7 @@
  * ESBUILD_CLI_BUILD_ID is a content-hash prefix, ESBUILD_CLI_SHA256 the
  * digest every fetch is verified against.
  *
- * Size: 342.67 KiB
+ * Size: 36.44 KiB
  */
 export declare const ESBUILD_CLI_ASSET_PATH: string;
 export declare const ESBUILD_CLI_BUILD_ID: string;

package/dist/esbuild-cli-artifact.generated.js

@@ -10,8 +10,8 @@
  * ESBUILD_CLI_BUILD_ID is a content-hash prefix, ESBUILD_CLI_SHA256 the
  * digest every fetch is verified against.
  *
- * Size: 342.67 KiB
+ * Size: 36.44 KiB
  */
-export const ESBUILD_CLI_ASSET_PATH = "/_assets/runtime/esbuild-cli-b7aecffd4c6a36fe.js";
-export const ESBUILD_CLI_BUILD_ID = "b7aecffd4c6a36fe";
-export const ESBUILD_CLI_SHA256 = "b7aecffd4c6a36fea08c64b1750fd6ad83d13e2176121ae58c07b7fdfd1750ed";
+export const ESBUILD_CLI_ASSET_PATH = "/_assets/runtime/esbuild-cli-f13e6a112b03ac07.js";
+export const ESBUILD_CLI_BUILD_ID = "f13e6a112b03ac07";
+export const ESBUILD_CLI_SHA256 = "f13e6a112b03ac0722a2e7b242ec8281e01bd01120f0d3abbc45d63e422470ab";

package/dist/esbuild-wasm-bundle.generated.d.ts

@@ -2,11 +2,11 @@
  * esbuild-wasm-bundle.generated.ts — AUTO-GENERATED by scripts/bundle-esbuild-wasm.mjs
  * DO NOT EDIT.
  *
- * The esbuild-wasm 0.24.2 artifacts facets use. The wasm is the host
- * Worker's own bundled module (`esbuild-wasm/esbuild.wasm`), handed over
- * compiled by src/runtime/host-wasm.ts; the JS adapter lives in the
- * static-assets layer, public/_assets/esbuild-0.24.2.js, fetched on
- * demand and verified by src/runtime/esbuild-wasm-bytes.ts.
+ * The esbuild-wasm 0.24.2 artifacts the esbuild facet runs: the wasm,
+ * public/_assets/esbuild-0.24.2.wasm, and the JS adapter,
+ * public/_assets/esbuild-0.24.2.js, both in the static-assets layer,
+ * fetched when the facet is loaded and verified by
+ * src/runtime/esbuild-wasm-bytes.ts. The host Worker bundles neither.
  *
  * The JS adapter is node_modules/esbuild-wasm/esm/browser.js with the
  * trailing `export { ... }` rewritten to `return { ... };`, so that
@@ -37,11 +37,12 @@ export declare const ESBUILD_WASM_VERSION: string;
  * check, which discovers asset paths by value in generated modules.
  */
 export declare const ESBUILD_JS_ASSET_PATH: string;
-/**
- * Bytes of the esbuild.wasm the host bundles: what a facet carrying the
- * host's compiled module counts toward the dynamic-worker code budget.
- */
-export declare const ESBUILD_WASM_BYTES: number;
 /** SHA-256 of the staged public/_assets/esbuild-0.24.2.js adapter, checked before it is evaluated. */
 export declare const ESBUILD_JS_SHA256: string;
+/** Where esbuild.wasm lives inside env.ASSETS, version-named like the adapter. */
+export declare const ESBUILD_WASM_ASSET_PATH: string;
+/** SHA-256 of the staged esbuild.wasm, checked before the facet compiles it. */
+export declare const ESBUILD_WASM_SHA256: string;
+/** Bytes of the staged esbuild.wasm: what the facet's module map counts toward the dynamic-worker code budget. */
+export declare const ESBUILD_WASM_BYTES: number;
 //# sourceMappingURL=esbuild-wasm-bundle.generated.d.ts.map

package/dist/esbuild-wasm-bundle.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"esbuild-wasm-bundle.generated.d.ts","sourceRoot":"","sources":["../src/esbuild-wasm-bundle.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAiB,CAAC;AACrD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAqC,CAAC;AAC1E;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAiB,CAAC;AACnD,sGAAsG;AACtG,eAAO,MAAM,iBAAiB,EAAE,MAA2E,CAAC"}
+{"version":3,"file":"esbuild-wasm-bundle.generated.d.ts","sourceRoot":"","sources":["../src/esbuild-wasm-bundle.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAiB,CAAC;AACrD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAqC,CAAC;AAC1E,sGAAsG;AACtG,eAAO,MAAM,iBAAiB,EAAE,MAA2E,CAAC;AAC5G,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,EAAE,MAAuC,CAAC;AAC9E,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,EAAE,MAA2E,CAAC;AAC9G,kHAAkH;AAClH,eAAO,MAAM,kBAAkB,EAAE,MAAiB,CAAC"}

package/dist/esbuild-wasm-bundle.generated.js

@@ -2,11 +2,11 @@
  * esbuild-wasm-bundle.generated.ts — AUTO-GENERATED by scripts/bundle-esbuild-wasm.mjs
  * DO NOT EDIT.
  *
- * The esbuild-wasm 0.24.2 artifacts facets use. The wasm is the host
- * Worker's own bundled module (`esbuild-wasm/esbuild.wasm`), handed over
- * compiled by src/runtime/host-wasm.ts; the JS adapter lives in the
- * static-assets layer, public/_assets/esbuild-0.24.2.js, fetched on
- * demand and verified by src/runtime/esbuild-wasm-bytes.ts.
+ * The esbuild-wasm 0.24.2 artifacts the esbuild facet runs: the wasm,
+ * public/_assets/esbuild-0.24.2.wasm, and the JS adapter,
+ * public/_assets/esbuild-0.24.2.js, both in the static-assets layer,
+ * fetched when the facet is loaded and verified by
+ * src/runtime/esbuild-wasm-bytes.ts. The host Worker bundles neither.
  *
  * The JS adapter is node_modules/esbuild-wasm/esm/browser.js with the
  * trailing `export { ... }` rewritten to `return { ... };`, so that
@@ -37,10 +37,11 @@ export const ESBUILD_WASM_VERSION = "0.24.2";
  * check, which discovers asset paths by value in generated modules.
  */
 export const ESBUILD_JS_ASSET_PATH = "/_assets/esbuild-0.24.2.js";
-/**
- * Bytes of the esbuild.wasm the host bundles: what a facet carrying the
- * host's compiled module counts toward the dynamic-worker code budget.
- */
-export const ESBUILD_WASM_BYTES = 11907565;
 /** SHA-256 of the staged public/_assets/esbuild-0.24.2.js adapter, checked before it is evaluated. */
 export const ESBUILD_JS_SHA256 = "686b1cf18b0e47be54e74359a14daebb3cc2e2be1971ea57162242f60ca88266";
+/** Where esbuild.wasm lives inside env.ASSETS, version-named like the adapter. */
+export const ESBUILD_WASM_ASSET_PATH = "/_assets/esbuild-0.24.2.wasm";
+/** SHA-256 of the staged esbuild.wasm, checked before the facet compiles it. */
+export const ESBUILD_WASM_SHA256 = "e2b4b98297e04ef12981bafabf0a3c2d7c3c5cf6af603ef79d886deac3b5eeb3";
+/** Bytes of the staged esbuild.wasm: what the facet's module map counts toward the dynamic-worker code budget. */
+export const ESBUILD_WASM_BYTES = 11907565;

package/dist/facets/build-facet.d.ts

@@ -0,0 +1,53 @@
+import type { EsbuildBuildHost } from '@nimbus-sh/core/runtime/esbuild-service.js';
+import type { WorkerCode } from '@nimbus-sh/fabric/vendor/types.js';
+import { type StagedSourceEnv } from '../runtime/staged-source.js';
+import type { PrebundleResult, PrebundleSpec } from '@nimbus-sh/core/runtime/prebundle-slice.js';
+export declare const BUILD_FACET_WORKER_ID: string;
+/** The staged parts of the build facet, each verified against its pinned digest. */
+export interface BuildFacetParts {
+    loader: string;
+    trampoline: ArrayBuffer;
+    rolldown: ArrayBuffer;
+    runtime: string;
+}
+export declare function fetchBuildFacetParts(env: StagedSourceEnv): Promise<BuildFacetParts>;
+/** The build facet's Worker Loader module: the class that owns rolldown, and its staged parts. */
+export declare function buildFacetWorkerCode(parts: BuildFacetParts): WorkerCode;
+/**
+ * Loads the Durable Object's build facet ahead of its first build: the staged
+ * parts fetched and verified, the binding instantiated and rolldown's
+ * JavaScript evaluated, which a fresh session's first build would otherwise
+ * wait on (a 13 MiB binding), while `wrangler dev` reads its config. (A
+ * warm-up as `vite build` starts measured no gain: that build's first
+ * seconds go to resolving through the VFS plugin.) Best effort: a failed
+ * warm-up only drops the stub, as a failed call does.
+ */
+export declare function prewarmBuildFacet(ctx: DurableObjectState, env: unknown): void;
+/**
+ * The build host a Durable Object's builds run on: its build facet, which runs
+ * rolldown. The plugin, and with it every file read, stays with the caller.
+ *
+ * A build whose binding died under it (`crashed`: a trap, or a module nested
+ * past the stack) retires that generation: the next build mints a fresh
+ * isolate. The build itself, and every other one that was in flight on that
+ * binding, goes to `fallback` (the esbuild facet in production), each logged;
+ * without one, its failure says what happened.
+ */
+export declare function rolldownBuildHost(ctx: DurableObjectState, env: unknown, fallback?: EsbuildBuildHost): EsbuildBuildHost;
+/**
+ * Pre-bundles one npm specifier from its slice in the Durable Object's build
+ * facet (core runtime/prebundle-slice.ts on rolldown): the slice crosses
+ * once, with the call, and the bundle comes back. A failed pre-bundle is a
+ * result (`ok: false`), as is one whose binding died under it, which also
+ * retires that generation; a call that throws drops the stub, as a build's
+ * does.
+ */
+export declare function buildFacetPrebundler(ctx: DurableObjectState, env: unknown): (spec: PrebundleSpec) => Promise<PrebundleResult>;
+/**
+ * Loads the Durable Object's build facet and waits for it: the staged parts
+ * fetched and verified, the binding instantiated. What prewarmBuildFacet
+ * starts, for a caller that wants the load behind it before it allocates
+ * (a pre-bundle's slice). Rejects as the load does.
+ */
+export declare function loadBuildFacet(ctx: DurableObjectState, env: unknown): Promise<void>;
+//# sourceMappingURL=build-facet.d.ts.map

package/dist/facets/build-facet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-facet.d.ts","sourceRoot":"","sources":["../../src/facets/build-facet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAIjB,MAAM,4CAA4C,CAAC;AAIpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAEpE,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAkGjG,eAAO,MAAM,qBAAqB,QAOvB,CAAC;AAcZ,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAmBzF;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CAsBvE;AAqFD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAI7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CA0BtH;AAkBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,eAAe,CAAC,CAuB7H;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAWzF"}

package/dist/facets/build-facet.js

@@ -0,0 +1,346 @@
+import { CF_COMPAT_DATE, GUEST_COMPAT_FLAGS } from '@nimbus-sh/core/constants.js';
+import { beginLoaderFetch } from '@nimbus-sh/fabric/budgets.js';
+import { hashSource } from '@nimbus-sh/fabric/vendor/serialize.js';
+import { ROLLDOWN_FACET_ASSET_PATH, ROLLDOWN_FACET_BUILD_ID, ROLLDOWN_FACET_SHA256 } from '../rolldown-facet-artifact.generated.js';
+import { fetchStagedText } from '../runtime/staged-source.js';
+import { NAPI_WASM_LOADER, NAPI_WASM_TRAMPOLINE, fetchStagedBindingAsset, stagedBinding, } from '../runtime/staged-bindings.js';
+const ROLLDOWN = stagedBinding('rolldown');
+/**
+ * The binding's linear memory past which the facet asks to be retired after
+ * a call. It starts at 5.4 MiB and grows to the largest graph built, and never
+ * shrinks; pre-bundles measured 17.6 MiB after react-dom/client, 27.9 after
+ * framer-motion, 53.8 after recharts and 60.5 after @mui/material (slices of
+ * up to 23 MiB). A binding past this leaves the next call's slice too little
+ * of the isolate's 128 MiB, so the next call starts a fresh isolate.
+ */
+const BUILD_BINDING_HIGH_WATER_BYTES = 64 * 1024 * 1024;
+/**
+ * Everything of the build facet's module but its staged parts: the napi-rs
+ * wasm loader (scripts/napi-wasm/loader), the threadless rolldown binding and
+ * its wasi trampoline, and the facet's runtime (scripts/rolldown-facet: rolldown's
+ * JavaScript and core's esbuild-contract adapter, runtime/rolldown-build.ts).
+ * The binding is instantiated by the first build and kept: its linear memory
+ * starts at the binding's declared minimum and grows with the largest module
+ * graph built. Nothing here reads a file: every module comes from the
+ * caller's plugin, so the binding's WASI filesystem is the facet's own empty
+ * node:fs.
+ *
+ * A binding that dies (a trap, or the stack overflowing inside it: a module
+ * nested too deeply) holds promises that never settle. The loader says so
+ * (`onFatal`), and every build or pre-bundle on it, in flight or later, is
+ * answered at once with `crashed`; rolldown's JavaScript keeps the binding it
+ * imported, so only a fresh isolate (the host's next generation) builds again.
+ */
+const BUILD_FACET_BODY = [
+    // One load for every caller, overlapping ones included.
+    'let runtime = null;',
+    'let crashed = null;',
+    'const inFlight = new Set();',
+    'let memory = null;',
+    'function rolldownRuntime() {',
+    '  if (runtime === null) {',
+    `    memory = new WebAssembly.Memory({ initial: ${ROLLDOWN.memoryPages}, maximum: 65536 });`,
+    '    globalThis.__nimbusRolldownBinding = createNapiWasmBinding({',
+    '      fs, env: {}, writeStdout() {}, writeStderr() {},',
+    `      binding: rolldownWasm, trampoline: trampolineWasm, memoryPages: ${ROLLDOWN.memoryPages}, memory, name: "rolldown",`,
+    '      onFatal(error) {',
+    '        crashed = { stackExhausted: error instanceof RangeError, message: String((error && error.message) || error) };',
+    '        for (const answer of inFlight) answer();',
+    '        inFlight.clear();',
+    '      },',
+    '    });',
+    // Dynamic: rolldown's JavaScript reads the binding as it evaluates, so it is imported once the binding exists.
+    '    runtime = import("rolldown-runtime.js");',
+    '  }',
+    '  return runtime;',
+    '}',
+    'function crashText() {',
+    '  return crashed.stackExhausted',
+    '    ? "Nimbus\'s bundler ran out of stack: a module nests too deeply for it (" + crashed.message + ")"',
+    '    : "Nimbus\'s bundler crashed: " + crashed.message;',
+    '}',
+    // One call on the binding, answered by `crashedAnswer()` if the binding is
+    // or becomes dead, and marked `retire` once the binding has outgrown its mark.
+    'async function onBinding(call, crashedAnswer) {',
+    '  if (crashed) return crashedAnswer();',
+    '  const loaded = await rolldownRuntime();',
+    '  if (crashed) return crashedAnswer();',
+    '  return new Promise((resolve, reject) => {',
+    '    const answer = () => resolve(crashedAnswer());',
+    '    inFlight.add(answer);',
+    `    const outgrown = (value) => (memory.buffer.byteLength > ${BUILD_BINDING_HIGH_WATER_BYTES} ? { ...value, retire: true } : value);`,
+    '    call(loaded).then((value) => resolve(outgrown(value)), reject).finally(() => inFlight.delete(answer));',
+    '  });',
+    '}',
+    'export class BuildFacet extends DurableObject {',
+    '  async warm() {',
+    '    if (!crashed) await rolldownRuntime();',
+    '  }',
+    '  build(options, plugin) {',
+    '    return onBinding((loaded) => loaded.build(options, plugin), () => ({',
+    '      outputFiles: [], warnings: [], failure: "Build failed with 1 error:\\nerror: " + crashText(),',
+    '      errors: [{ id: "", pluginName: "", text: crashText(), location: null, notes: [], detail: undefined }],',
+    '      crashed,',
+    '    }));',
+    '  }',
+    '  prebundle(spec) {',
+    '    return onBinding((loaded) => loaded.prebundle(spec), () => ({',
+    '      specifier: spec.specifier, ok: false, esmCode: "", errorText: crashText(), elapsed: 0, warnings: [], crashed,',
+    '    }));',
+    '  }',
+    '}',
+].join('\n');
+// The loader serves the code it cached under an id, so the id carries the code.
+export const BUILD_FACET_WORKER_ID = [
+    'nimbus-build',
+    `rolldown-${ROLLDOWN.version}-${ROLLDOWN.wasm.sha256.slice(0, 16)}`,
+    NAPI_WASM_LOADER.sha256.slice(0, 16),
+    NAPI_WASM_TRAMPOLINE.sha256.slice(0, 16),
+    ROLLDOWN_FACET_BUILD_ID,
+    hashSource(BUILD_FACET_BODY),
+].join(':');
+export async function fetchBuildFacetParts(env) {
+    const [loader, trampoline, rolldown, runtime] = await Promise.all([
+        fetchStagedBindingAsset(env, NAPI_WASM_LOADER).then((bytes) => new TextDecoder().decode(bytes)),
+        fetchStagedBindingAsset(env, NAPI_WASM_TRAMPOLINE),
+        fetchStagedBindingAsset(env, ROLLDOWN.wasm),
+        fetchStagedText(env, {
+            path: ROLLDOWN_FACET_ASSET_PATH,
+            l2Key: `https://nimbus-cache.invalid${ROLLDOWN_FACET_ASSET_PATH}`,
+            sha256: ROLLDOWN_FACET_SHA256,
+            contentType: 'text/javascript; charset=utf-8',
+            poisonedCache: 'reject',
+            missingBinding: `Nimbus: the build facet requires an env.ASSETS binding (serves ${ROLLDOWN_FACET_ASSET_PATH})`,
+            fetchFailed: (res) => `build facet runtime asset fetch failed: ${res.status} ${res.statusText} for ${ROLLDOWN_FACET_ASSET_PATH} — deploy is missing the asset`,
+            integrityFailed: (digest, from) => `build facet runtime integrity check failed: expected ${ROLLDOWN_FACET_SHA256}, got ${digest} (${from}) for ` +
+                `${ROLLDOWN_FACET_ASSET_PATH} — the staged asset is corrupt or out of sync; rerun scripts/bundle-facet-workers.mjs and redeploy`,
+        }),
+    ]);
+    return { loader, trampoline, rolldown, runtime };
+}
+/** The build facet's Worker Loader module: the class that owns rolldown, and its staged parts. */
+export function buildFacetWorkerCode(parts) {
+    const source = [
+        'import { DurableObject } from "cloudflare:workers";',
+        'import * as fs from "node:fs";',
+        'import { createNapiWasmBinding } from "napi-wasm-loader.js";',
+        'import rolldownWasm from "rolldown.wasm";',
+        'import trampolineWasm from "trampoline.wasm";',
+        BUILD_FACET_BODY,
+    ].join('\n');
+    return {
+        compatibilityDate: CF_COMPAT_DATE,
+        compatibilityFlags: [...GUEST_COMPAT_FLAGS],
+        mainModule: 'worker.js',
+        modules: {
+            'worker.js': source,
+            'napi-wasm-loader.js': parts.loader,
+            'rolldown-runtime.js': parts.runtime,
+            'rolldown.wasm': { wasm: parts.rolldown },
+            'trampoline.wasm': { wasm: parts.trampoline },
+        },
+        globalOutbound: null,
+    };
+}
+/**
+ * Which isolate of the build facet's code builds: a binding that died is
+ * left behind with its isolate, and every Durable Object this isolate hosts
+ * moves to the next generation's, whose loader id and facet name are new.
+ */
+let generation = 0;
+const generationId = (n) => `${BUILD_FACET_WORKER_ID}:g${n}`;
+async function buildFacet(ctx, env, id) {
+    const loader = Reflect.get(Object(env), 'LOADER');
+    if (!loader || typeof loader.get !== 'function')
+        throw new Error('Nimbus: env.LOADER unavailable for the build facet');
+    const assets = Reflect.get(Object(env), 'ASSETS');
+    if (!assets || typeof assets.fetch !== 'function')
+        throw new Error('Nimbus: env.ASSETS unavailable for the build facet');
+    const worker = await loader.get(id, async () => buildFacetWorkerCode(await fetchBuildFacetParts({ ASSETS: assets })));
+    const facetClass = worker.getDurableObjectClass('BuildFacet');
+    return ctx.facets.get(id, async () => ({ class: facetClass }));
+}
+/**
+ * One stub per Durable Object: callers that overlap wait on one facet load.
+ * A load or call that failed drops the entry; the next caller mints a fresh one.
+ * An entry of a retired generation is dropped, and its facet aborted once
+ * the calls still on it are answered.
+ */
+const sharedFacets = new WeakMap();
+function sharedBuildFacet(ctx, env) {
+    const current = sharedFacets.get(ctx);
+    if (current && current.generation === generation)
+        return current;
+    if (current)
+        retireFacet(ctx, current);
+    const minted = { generation, stub: buildFacet(ctx, env, generationId(generation)), calls: 0, retired: false, crashed: false };
+    sharedFacets.set(ctx, minted);
+    minted.stub.catch(() => forgetBuildFacet(ctx, minted));
+    return minted;
+}
+function forgetBuildFacet(ctx, facet) {
+    if (sharedFacets.get(ctx) === facet)
+        sharedFacets.delete(ctx);
+}
+function retireFacet(ctx, facet) {
+    forgetBuildFacet(ctx, facet);
+    // Once: every answer on an outgrown binding says to retire it.
+    if (facet.retired)
+        return;
+    facet.retired = true;
+    if (facet.calls === 0)
+        abortFacet(ctx, facet);
+}
+function abortFacet(ctx, facet) {
+    try {
+        ctx.facets.abort(generationId(facet.generation), new Error('Nimbus: the build facet was retired'));
+    }
+    catch {
+        // already gone
+    }
+}
+/**
+ * A call on `facet` began: it is counted until it is answered, on the
+ * Durable Object's Dynamic Worker ledger under its generation's own worker
+ * id, since a retired generation's call and the next one's can be in flight
+ * at once as two workers.
+ */
+function beginCall(ctx, facet) {
+    const endFetch = beginLoaderFetch(ctx, generationId(facet.generation));
+    facet.calls++;
+    return () => {
+        endFetch();
+        facet.calls--;
+        if (facet.retired && facet.calls === 0)
+            abortFacet(ctx, facet);
+    };
+}
+/**
+ * Loads the Durable Object's build facet ahead of its first build: the staged
+ * parts fetched and verified, the binding instantiated and rolldown's
+ * JavaScript evaluated, which a fresh session's first build would otherwise
+ * wait on (a 13 MiB binding), while `wrangler dev` reads its config. (A
+ * warm-up as `vite build` starts measured no gain: that build's first
+ * seconds go to resolving through the VFS plugin.) Best effort: a failed
+ * warm-up only drops the stub, as a failed call does.
+ */
+export function prewarmBuildFacet(ctx, env) {
+    // loadBuildFacet keeps the stub call a direct call awaited by the frame
+    // that made it, as every facet call must (see beginLoaderFetch).
+    loadBuildFacet(ctx, env).catch(() => { });
+}
+/**
+ * The build host a Durable Object's builds run on: its build facet, which runs
+ * rolldown. The plugin, and with it every file read, stays with the caller.
+ *
+ * A build whose binding died under it (`crashed`: a trap, or a module nested
+ * past the stack) retires that generation: the next build mints a fresh
+ * isolate. The build itself, and every other one that was in flight on that
+ * binding, goes to `fallback` (the esbuild facet in production), each logged;
+ * without one, its failure says what happened.
+ */
+export function rolldownBuildHost(ctx, env, fallback) {
+    return async (options, plugin) => {
+        const facet = sharedBuildFacet(ctx, env);
+        const endCall = beginCall(ctx, facet);
+        let outcome;
+        try {
+            outcome = await (await facet.stub).build(options, plugin);
+        }
+        catch (error) {
+            forgetBuildFacet(ctx, facet);
+            if (!facet.crashed)
+                throw error;
+            // The binding died under this build too, and its answer did not make it back.
+            outcome = { outputFiles: [], errors: [], warnings: [], crashed: { stackExhausted: false, message: error instanceof Error ? error.message : String(error) } };
+        }
+        finally {
+            endCall();
+        }
+        const { crashed, retire, ...built } = outcome;
+        if (retire)
+            retireGeneration(ctx, facet);
+        if (!crashed)
+            return built;
+        retireCrashed(ctx, facet);
+        const entries = Array.isArray(options.entryPoints) ? options.entryPoints.join(', ') : '<entries>';
+        console.warn(`[build-facet] rolldown's binding died building ${entries} (${crashed.message}); ${fallback ? 'building it with esbuild' : 'the build fails'}`);
+        if (fallback)
+            return fallback(options, plugin);
+        if (built.failure)
+            return built;
+        const text = `Nimbus's bundler crashed: ${crashed.message}`;
+        return { ...built, failure: `Build failed with 1 error:\nerror: ${text}`, errors: [{ id: '', pluginName: '', text, location: null, notes: [], detail: undefined }] };
+    };
+}
+/**
+ * Leaves a dead binding's generation behind: the next call on any Durable
+ * Object mints the next. Its calls still in flight are answered (the facet
+ * answers each one, crashed) before the facet is aborted.
+ */
+function retireCrashed(ctx, facet) {
+    facet.crashed = true;
+    retireGeneration(ctx, facet);
+}
+/** Moves every Durable Object this isolate hosts past `facet`'s generation, and retires it. */
+function retireGeneration(ctx, facet) {
+    if (facet.generation === generation)
+        generation++;
+    retireFacet(ctx, facet);
+}
+/**
+ * Pre-bundles one npm specifier from its slice in the Durable Object's build
+ * facet (core runtime/prebundle-slice.ts on rolldown): the slice crosses
+ * once, with the call, and the bundle comes back. A failed pre-bundle is a
+ * result (`ok: false`), as is one whose binding died under it, which also
+ * retires that generation; a call that throws drops the stub, as a build's
+ * does.
+ */
+export function buildFacetPrebundler(ctx, env) {
+    return async (spec) => {
+        const facet = sharedBuildFacet(ctx, env);
+        const endCall = beginCall(ctx, facet);
+        let result;
+        try {
+            result = await (await facet.stub).prebundle(spec);
+        }
+        catch (error) {
+            forgetBuildFacet(ctx, facet);
+            if (!facet.crashed)
+                throw error;
+            const message = error instanceof Error ? error.message : String(error);
+            result = { specifier: spec.specifier, ok: false, esmCode: '', errorText: `Nimbus's bundler crashed: ${message}`, elapsed: 0, warnings: [], crashed: { stackExhausted: false, message } };
+        }
+        finally {
+            endCall();
+        }
+        const { crashed, retire, ...answer } = result;
+        if (retire)
+            retireGeneration(ctx, facet);
+        if (crashed) {
+            retireCrashed(ctx, facet);
+            console.warn(`[build-facet] rolldown's binding died pre-bundling ${spec.specifier} (${crashed.message})`);
+        }
+        return answer;
+    };
+}
+/**
+ * Loads the Durable Object's build facet and waits for it: the staged parts
+ * fetched and verified, the binding instantiated. What prewarmBuildFacet
+ * starts, for a caller that wants the load behind it before it allocates
+ * (a pre-bundle's slice). Rejects as the load does.
+ */
+export async function loadBuildFacet(ctx, env) {
+    const facet = sharedBuildFacet(ctx, env);
+    const endCall = beginCall(ctx, facet);
+    try {
+        await (await facet.stub).warm();
+    }
+    catch (error) {
+        forgetBuildFacet(ctx, facet);
+        throw error;
+    }
+    finally {
+        endCall();
+    }
+}

package/dist/facets/cirrus-real.d.ts

@@ -52,6 +52,7 @@
  */
 import { HmrBridge } from './real-vite-hmr.js';
 import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
+import type { VfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
 import type { VfsEventEmitter } from '@nimbus-sh/core/vfs/events.js';
 import type { ParsedViteConfig } from '@nimbus-sh/core/runtime/vite-config-parser.js';
 /**
@@ -109,6 +110,8 @@ export declare class CirrusReal {
         root: string;
         basePath: string;
         vfs: SqliteVFS;
+        /** Who the server reads its project as: the credential of the process it runs under. */
+        cred: VfsCred;
         vfsEvents?: VfsEventEmitter | null;
         userConfigBundle?: string | null;
         extraSyntheticFiles?: Record<string, string>;

package/dist/facets/cirrus-real.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cirrus-real.d.ts","sourceRoot":"","sources":["../../src/facets/cirrus-real.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AA2BH,OAAO,EACL,SAAS,EAGV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAYtF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,UAAU,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,mBAAmB,CAAC,GAAG,SAAS,CAAC;CACpF,GAAG,OAAO,CAiBV;AAqcD,qBAAa,UAAU;IACrB,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,GAAG,CAAkB;IAC7B,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,mBAAmB,CAAyB;IAEpD,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,UAAU,CAAa;IAC/B;6BACyB;IACzB,OAAO,CAAC,UAAU,CAAuB;IACzC;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK,CAAgD;IAC7D;;;;4CAIwC;IACxC,OAAO,CAAC,gBAAgB,CAAa;IACrC;2BACuB;IACvB,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,cAAc,CAON;IAEhB,kEAAkE;IAC3D,GAAG,EAAE,SAAS,CAAmB;IAExC,6CAA6C;IAC7C,OAAO,CAAC,SAAS,CAA6B;gBAElC,IAAI,EAAE;QAChB,GAAG,EAAE,GAAG,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,GAAG,EAAE,SAAS,CAAC;QACf,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;QACnC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC9C;IAWD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBnC;IAED;;;iEAG6D;IAC7D,OAAO,CAAC,YAAY,CAAc;IAE5B,KAAK,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiQhE,IAAI,CAAC,GAAG,CAAC,EAAE,kBAAkB,GAAG,IAAI;IAiBpC;;;;OAIG;IACH,eAAe,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM;IAItC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIjC,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAItD;;;;OAIG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA8C1E;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAsBzD"}
+{"version":3,"file":"cirrus-real.d.ts","sourceRoot":"","sources":["../../src/facets/cirrus-real.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AA2BH,OAAO,EACL,SAAS,EAGV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yCAAyC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAYtF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,UAAU,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,mBAAmB,CAAC,GAAG,SAAS,CAAC;CACpF,GAAG,OAAO,CAiBV;AAqcD,qBAAa,UAAU;IACrB,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,GAAG,CAAkB;IAC7B,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,mBAAmB,CAAyB;IAEpD,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,UAAU,CAAa;IAC/B;6BACyB;IACzB,OAAO,CAAC,UAAU,CAAuB;IACzC;;;;;;;;OAQG;IACH,OAAO,CAAC,KAAK,CAAgD;IAC7D;;;;4CAIwC;IACxC,OAAO,CAAC,gBAAgB,CAAa;IACrC;2BACuB;IACvB,OAAO,CAAC,YAAY,CAAa;IACjC,OAAO,CAAC,cAAc,CAON;IAEhB,kEAAkE;IAC3D,GAAG,EAAE,SAAS,CAAmB;IAExC,6CAA6C;IAC7C,OAAO,CAAC,SAAS,CAA6B;gBAElC,IAAI,EAAE;QAChB,GAAG,EAAE,GAAG,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,GAAG,EAAE,SAAS,CAAC;QACf,wFAAwF;QACxF,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;QACnC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC9C;IAWD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBnC;IAED;;;iEAG6D;IAC7D,OAAO,CAAC,YAAY,CAAc;IAE5B,KAAK,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiQhE,IAAI,CAAC,GAAG,CAAC,EAAE,kBAAkB,GAAG,IAAI;IAiBpC;;;;OAIG;IACH,eAAe,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM;IAItC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIjC,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAItD;;;;OAIG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA8C1E;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAsBzD"}

package/dist/facets/cirrus-real.js

@@ -62,7 +62,6 @@ import { supervisorBindingProps, supervisorLoaderKey } from '@nimbus-sh/fabric/s
 import { deleteFacetStorage } from '@nimbus-sh/fabric/workerd-facet-host.js';
 import { buildFsSnapshot, generateFsShimModuleCode, generateFsPromisesShimModuleCode, generateSyntheticModuleCode, } from './real-vite-fs-shim.js';
 import { HmrBridge, generateWsShimModuleCode, generateChokidarShimModuleCode, } from './real-vite-hmr.js';
-import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
 import { stripLeadingSlashes } from '@nimbus-sh/core/vfs/path.js';
 /**
  * The real-vite facet needs Node's http client and server modules. At
@@ -587,7 +586,7 @@ export class CirrusReal {
         this.port = opts.port;
         this.root = opts.root;
         this.basePath = opts.basePath;
-        this.vfs = opts.vfs.as(CRED_KERNEL);
+        this.vfs = opts.vfs.as(opts.cred);
         this.vfsEvents = opts.vfsEvents || null;
         this.userConfigBundle = opts.userConfigBundle || null;
         this.extraSyntheticFiles = opts.extraSyntheticFiles || {};

package/dist/facets/compose.d.ts

@@ -134,6 +134,7 @@ export interface ComposedFacetManager {
             pid: number;
             registeredAt: number;
             capability: string;
+            execId?: string;
         }>>;
         /**
          * Route a request carrying a port capability to the process on `port`:

package/dist/facets/compose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../src/facets/compose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAGjF,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAqB,MAAM,cAAc,CAAC;AAGvF,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,YAAY,EACV,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACvC,mBAAmB,CAAC,EAAE,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;CAChE;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,kBAAkB,CAAC;IACxB,qFAAqF;IACrF,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,GAAG,EAAE,SAAS,CAAC;IACf,2EAA2E;IAC3E,UAAU,EAAE,YAAY,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,qBAAqB,CAAC;CAC9B;AAED,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,CAAC;IACtB;;;;;;;;OAQG;IACH,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC;;;;;;;;OAQG;IACH,IAAI,EAAE;QACJ;;;;;WAKG;QACH,gBAAgB,CAAC,KAAK,EAAE;YACtB,KAAK,EAAE,MAAM,CAAC;YACd,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,UAAU,CAAC,EAAE,cAAc,CAAC;YAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,EAAE,cAAc,CAAA;SAAE,CAAC,CAAC;QACrF;;;;;WAKG;QACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QACnG;;;;WAIG;QACH,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QACrG;;;;;;;;WAQG;QACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC/G,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,CA6EhF"}
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../src/facets/compose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAIjF,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAqB,MAAM,cAAc,CAAC;AAGvF,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,YAAY,EACV,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,WAAW,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACvC,mBAAmB,CAAC,EAAE,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;CAChE;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,kBAAkB,CAAC;IACxB,qFAAqF;IACrF,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,GAAG,EAAE,SAAS,CAAC;IACf,2EAA2E;IAC3E,UAAU,EAAE,YAAY,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,qBAAqB,CAAC;CAC9B;AAED,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,YAAY,CAAC;IACtB;;;;;;;;OAQG;IACH,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC;;;;;;;;OAQG;IACH,IAAI,EAAE;QACJ;;;;;WAKG;QACH,gBAAgB,CAAC,KAAK,EAAE;YACtB,KAAK,EAAE,MAAM,CAAC;YACd,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,UAAU,CAAC,EAAE,cAAc,CAAC;YAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,EAAE,cAAc,CAAA;SAAE,CAAC,CAAC;QACrF;;;;;WAKG;QACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QACnG;;;;WAIG;QACH,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QACtH;;;;;;;;WAQG;QACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC/G,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,CA+EhF"}

package/dist/facets/compose.js

@@ -35,6 +35,7 @@
  */
 import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
 import { createPortCapability } from '@nimbus-sh/core/runtime/port-registry.js';
+import { execIdField } from '@nimbus-sh/core/runtime/process-table.js';
 import { FacetManager } from './manager.js';
 import { processHostFor } from '../loaders/process-host.js';
 import { resolveDurableWorkerImage } from './durable-images.js';
@@ -109,6 +110,8 @@ export function composeFacetManager(deps) {
                     pid: Number(entry.pid),
                     registeredAt: Number(entry.registeredAt),
                     capability: String(entry.capability),
+                    // The listener's exec id, read from its process: the one place it lives.
+                    ...execIdField(deps.processes.get(entry.pid)),
                 }));
             },
             routeCapabilityPort(port, capability, request, innerPath) {