@nimbus-sh/worker 0.2.0 → 0.2.1

package/dist/runtime/facet-loader-host.js

@@ -1,3 +1,39 @@
+import { manifestVfs } from '@nimbus-sh/core/runtime/vfs-manifest.js';
+import { NimbusLoaderPool } from '../loaders/loader-pool.js';
+export function loaderFacetHost(env, ctx) {
+    return {
+        // workerd suspends a guest through JSPI, which is what lets a syscall reach
+        // back to the session mid-instruction.
+        parking: 'jspi',
+        /**
+         * A manifest, not a copy: sizes and modes, with the facet demand-loading
+         * whatever the program opens through its supervisor. It has to be — the
+         * whole seed crosses one RPC, and a session filesystem does not fit in one.
+         */
+        seedFilesystem(vfs, root, options) {
+            return manifestVfs(vfs, root, options);
+        },
+        open(spec) {
+            return new NimbusLoaderPool(env, ctx, {
+                tag: spec.tag,
+                concurrency: spec.concurrency,
+                preamble: spec.preamble,
+                wasmModules: spec.wasmModules,
+                omitSupervisor: spec.syscalls === undefined,
+                supervisorPid: spec.syscalls?.pid,
+            });
+        },
+    };
+}
+/**
+ * The two objects a NimbusLoaderPool needs from a FacetManager.
+ *
+ * FacetManager does not expose its `env` and `ctx` in its type, but a loader
+ * pool is constructed from exactly those, so every runtime that spawns facets
+ * needs the same reach-through. Reflect.get rather than a cast: the shape is
+ * checked here once, and a FacetManager built on something other than a
+ * DurableObjectState fails with a sentence instead of at the first RPC.
+ */
 export function getFacetManagerLoaderHost(facetMgr) {
     const env = Reflect.get(facetMgr, 'env');
     const ctx = Reflect.get(facetMgr, 'ctx');
@@ -6,6 +42,11 @@ export function getFacetManagerLoaderHost(facetMgr) {
     }
     return { env, ctx };
 }
+/** The facet host a runtime reached through a FacetManager runs on. */
+export function facetHostForManager(facetMgr) {
+    const { env, ctx } = getFacetManagerLoaderHost(facetMgr);
+    return loaderFacetHost(env, ctx);
+}
 function isDurableObjectState(value) {
     if (typeof value !== 'object' || value === null)
         return false;

package/dist/runtime/package-manager.d.ts

@@ -25,9 +25,11 @@
  *
  * Errors throw and bubble up to the user as a single diagnostic line.
  */
-import { type RuntimeCatalogEnv, type RuntimeManifest, type ManifestEntrypoint } from './runtime-catalog.js';
+import { type RuntimeCatalogEnv } from './runtime-catalog.js';
+import { type RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
 import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
 import { type RuntimePackageAbi } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { type MinShellRegistry } from '@nimbus-sh/core/runtime/installed-runtimes.js';
 import type { CommandContext } from '@nimbus-sh/core/substrate/lifo/commands/types.js';
 /** Minimal shell ctx shape we depend on (matches existing handlers). */
 export interface ShellCtx extends Pick<CommandContext, 'pid' | 'cred' | 'setUmask' | 'runAs'> {
@@ -41,12 +43,6 @@ export interface ShellCtx extends Pick<CommandContext, 'pid' | 'cred' | 'setUmas
         write(s: string): void;
     };
 }
-/** Minimal shell-registry shape we depend on. */
-export interface MinShellRegistry {
-    register(name: string, handler: (ctx: any) => Promise<number>): void;
-    unregister?(name: string): void;
-    resolve?(name: string): any;
-}
 export interface RuntimeWarmTarget {
     name: string;
     version: string;
@@ -54,29 +50,12 @@ export interface RuntimeWarmTarget {
     manifest: RuntimeManifest;
 }
 export type RuntimeWarmHook = (target: RuntimeWarmTarget, ctx: ShellCtx) => Promise<void>;
-/** Runner-factory contract. Each registered runner produces a shell-
- *  command handler given the manifest + the installed root dir. The
- *  package manager invokes the factory at install-time + at boot-time
- *  rehydration. */
-export type RunnerFactory = (manifest: RuntimeManifest, installRoot: string, binName: string, binKind: string | undefined) => (ctx: any) => Promise<number>;
-export declare function registerRunnerFactory(key: string, factory: RunnerFactory): void;
-export declare function getRegisteredRunners(): string[];
 export interface RuntimeInstallSummary {
     spec: string;
     exitCode: number;
     stdout: string;
     stderr: string;
 }
-export interface RuntimeSummary {
-    name: string;
-    version: string;
-    root: string;
-    abi: RuntimePackageAbi;
-    bins: string[];
-    sizeBytes: number;
-    license: string;
-}
-export declare function runtimeAbiForManifest(manifest: RuntimeManifest): RuntimePackageAbi;
 export interface RuntimeInstallTarget {
     runtimeName: string;
     versionOverride: string | null;
@@ -87,41 +66,7 @@ export interface RuntimeCommandHint {
     runtimeName: string;
     installSpec: string;
 }
-/**
- * Commands a runtime provides beyond its manifest entrypoints. The
- * python/ruby package-manager front-ends (pip, gem, bundler) ride the
- * language runner rather than shipping as manifest files, and already-
- * deployed R2 manifests cannot retroactively declare them.
- *
- * This is the ONE hand-maintained command table: install aliasing
- * (`nimbus install pip` → python), command-not-found hints, and bin
- * registration all derive from `runtimeEntrypoints`, which merges this
- * with the catalog manifest. Catalog-declared aliases (python3, ruby3,
- * wasm-ld, …) come from manifest entrypoints and must NOT be repeated
- * here. Mechanically validated against `NIMBUS_RUNTIME_ABIS` by
- * tests/unit/runtime-command-aliases.mjs.
- */
-export declare const RUNTIME_EXTRA_ENTRYPOINTS: Readonly<Record<string, readonly ManifestEntrypoint[]>>;
 export declare function createRuntimeCommandHintResolver(env: RuntimeCatalogEnv): (command: string) => Promise<RuntimeCommandHint | null>;
-/** Compute the per-user install root for (name, version). Uses
- *  `process.env.HOME` if present; falls back to `/home/user`. */
-export declare function installRoot(homeDir: string, name: string, version: string): string;
-/** Read all installed manifests off SqliteFS. Used by both `--list`
- *  and boot-time rehydration. */
-export declare function listInstalledManifests(vfs: SqliteVFS, homeDir: string): Array<{
-    root: string;
-    manifest: RuntimeManifest;
-}>;
-/**
- * Re-register every installed runtime's entrypoints in the shell
- * registry. Call once at session-init time after all runner factories
- * are registered (init.ts:registerRunnerFactory blocks).
- */
-export declare function rehydrateInstalledRuntimes(vfs: SqliteVFS, registry: MinShellRegistry, homeDir: string): {
-    count: number;
-    bins: string[];
-};
-export declare function listInstalledRuntimes(vfs: SqliteVFS, homeDir: string): RuntimeSummary[];
 export declare function listAvailableRuntimes(env: RuntimeCatalogEnv): Promise<Array<{
     name: string;
     abi: RuntimePackageAbi;

package/dist/runtime/package-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../src/runtime/package-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAgE,KAAK,iBAAiB,EAAuB,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAChM,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAA+E,KAAK,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC9J,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAEvF,wEAAwE;AACxE,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;IAC3F,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACpC;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACrE,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAU1F;;;mBAGmB;AACnB,MAAM,MAAM,aAAa,GAAG,CAC1B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,SAAS,KACxB,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAKnC,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAE/E;AAED,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAE/C;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,eAAe,GAAG,iBAAiB,CAQlF;AAMD,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAiB7F,CAAC;AA8FF,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAyChI;AAED;iEACiE;AACjE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAKlF;AAED;iCACiC;AACjC,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,GACd,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC,CAEpD;AAgCD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,GACd;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAEnC;AAoBD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,GACd,cAAc,EAAE,CAUlB;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1E,CAAC,CAAC,CAgBF;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,IAAI,MAAM,CAAC;CACnB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAuB/E;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,IAAI,MAAM,CAAC;CACnB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAMpF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B;+CAC2C;IAC3C,OAAO,IAAI,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,CAqBhC"}
+{"version":3,"file":"package-manager.d.ts","sourceRoot":"","sources":["../../src/runtime/package-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAA0C,KAAK,iBAAiB,EAAuB,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,6CAA6C,CAAC;AACzG,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAA4D,KAAK,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAC3I,OAAO,EAOL,KAAK,gBAAgB,EACtB,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAC;AAEvF,wEAAwE;AACxE,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;IAC3F,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAU1F,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAmFD,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAyChI;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1E,CAAC,CAAC,CAgBF;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,IAAI,MAAM,CAAC;CACnB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAuB/E;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,IAAI,MAAM,CAAC;CACnB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAMpF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,gBAAgB,CAAC;IAC3B;+CAC2C;IAC3C,OAAO,IAAI,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,CAqBhC"}

package/dist/runtime/package-manager.js

@@ -25,73 +25,13 @@
  *
  * Errors throw and bubble up to the user as a single diagnostic line.
  */
-import { fetchCatalog, fetchManifest, fetchBlob, parseRuntimeManifest } from './runtime-catalog.js';
-import { CRED_KERNEL, NIMBUS_ABI_TARGET, NIMBUS_RUNTIME_ABIS, NATIVE_UNSUPPORTED_ABI } from '@nimbus-sh/core/runtime/os-contracts.js';
-/** Map of runner-key → factory. Populated by init.ts before install. */
-const runnerFactories = {};
-export function registerRunnerFactory(key, factory) {
-    runnerFactories[key] = factory;
-}
-export function getRegisteredRunners() {
-    return Object.keys(runnerFactories);
-}
-export function runtimeAbiForManifest(manifest) {
-    const byName = NIMBUS_RUNTIME_ABIS[manifest.name];
-    if (byName)
-        return byName;
-    if (manifest.wasi_namespace)
-        return NIMBUS_ABI_TARGET;
-    if (manifest.entrypoints.some((entrypoint) => entrypoint.runner === 'clang-runner')) {
-        return NIMBUS_ABI_TARGET;
-    }
-    return NATIVE_UNSUPPORTED_ABI;
-}
+import { fetchCatalog, fetchManifest, fetchBlob } from './runtime-catalog.js';
+import { parseRuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
+import { CRED_KERNEL, NIMBUS_RUNTIME_ABIS, NATIVE_UNSUPPORTED_ABI } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { installRoot, listInstalledManifestsView, rehydrateInstalledRuntimesView, runnerFactoryFor, runtimeAbiForManifest, runtimeEntrypoints, } from '@nimbus-sh/core/runtime/installed-runtimes.js';
 function runtimeAbiForCatalogName(name) {
     return NIMBUS_RUNTIME_ABIS[name] ?? NATIVE_UNSUPPORTED_ABI;
 }
-/**
- * Commands a runtime provides beyond its manifest entrypoints. The
- * python/ruby package-manager front-ends (pip, gem, bundler) ride the
- * language runner rather than shipping as manifest files, and already-
- * deployed R2 manifests cannot retroactively declare them.
- *
- * This is the ONE hand-maintained command table: install aliasing
- * (`nimbus install pip` → python), command-not-found hints, and bin
- * registration all derive from `runtimeEntrypoints`, which merges this
- * with the catalog manifest. Catalog-declared aliases (python3, ruby3,
- * wasm-ld, …) come from manifest entrypoints and must NOT be repeated
- * here. Mechanically validated against `NIMBUS_RUNTIME_ABIS` by
- * tests/unit/runtime-command-aliases.mjs.
- */
-export const RUNTIME_EXTRA_ENTRYPOINTS = {
-    bash: [
-        { binName: '/bin/bash', runner: 'bash-runner', args: [] },
-        { binName: '/usr/bin/bash', runner: 'bash-runner', args: [] },
-    ],
-    // `pip` belongs to whichever runtime provides the interpreter, and only one
-    // may claim it. The python row went with python-runner: Pyodide's manifest
-    // still names that runner, so it could not serve pip even if it were listed.
-    cpython: [
-        { binName: 'pip', runner: 'cpython-runner', kind: 'pip', args: [] },
-        { binName: 'pip3', runner: 'cpython-runner', kind: 'pip', args: [] },
-    ],
-    ruby: [
-        { binName: 'gem', runner: 'ruby-runner', kind: 'gem', args: [] },
-        { binName: 'bundle', runner: 'ruby-runner', kind: 'bundle', args: [] },
-        { binName: 'bundler', runner: 'ruby-runner', kind: 'bundle', args: [] },
-    ],
-};
-function runtimeEntrypoints(manifest) {
-    const out = [...manifest.entrypoints];
-    const seen = new Set(out.map((ep) => ep.binName));
-    for (const ep of RUNTIME_EXTRA_ENTRYPOINTS[manifest.name] ?? []) {
-        if (seen.has(ep.binName))
-            continue;
-        out.push({ ...ep });
-        seen.add(ep.binName);
-    }
-    return out;
-}
 function splitRuntimeSpec(spec) {
     const atIdx = spec.indexOf('@');
     return {
@@ -212,83 +152,6 @@ export function createRuntimeCommandHintResolver(env) {
         return hints.get(command) ?? null;
     };
 }
-/** Compute the per-user install root for (name, version). Uses
- *  `process.env.HOME` if present; falls back to `/home/user`. */
-export function installRoot(homeDir, name, version) {
-    // Strip leading slash so SqliteFS sees a relative-looking VFS path,
-    // matching the convention used elsewhere in src/session/init.ts.
-    const home = homeDir.replace(/^\/+/, '').replace(/\/+$/, '');
-    return `${home}/.nimbus/runtimes/${name}/${version}`;
-}
-/** Read all installed manifests off SqliteFS. Used by both `--list`
- *  and boot-time rehydration. */
-export function listInstalledManifests(vfs, homeDir) {
-    return listInstalledManifestsView(vfs.as(CRED_KERNEL), homeDir);
-}
-function listInstalledManifestsView(fs, homeDir) {
-    const home = homeDir.replace(/^\/+/, '').replace(/\/+$/, '');
-    const runtimesRoot = `${home}/.nimbus/runtimes`;
-    const out = [];
-    if (!fs.exists(runtimesRoot))
-        return out;
-    // Each entry under runtimesRoot is a <name>; each entry under that
-    // is a <version>; each <version> dir has a manifest.json.
-    for (const nameEntry of fs.readdir(runtimesRoot)) {
-        if (nameEntry.type !== 'directory')
-            continue;
-        const nameDir = `${runtimesRoot}/${nameEntry.name}`;
-        for (const verEntry of fs.readdir(nameDir)) {
-            if (verEntry.type !== 'directory')
-                continue;
-            const verDir = `${nameDir}/${verEntry.name}`;
-            const manifestPath = `${verDir}/manifest.json`;
-            if (!fs.exists(manifestPath))
-                continue;
-            try {
-                const manifest = parseRuntimeManifest(JSON.parse(fs.readFileString(manifestPath)));
-                out.push({ root: verDir, manifest });
-            }
-            catch {
-                // Malformed manifest — skip silently. Surfacing via stderr
-                // would require a ctx we don't have at boot-time rehydration.
-            }
-        }
-    }
-    return out;
-}
-/**
- * Re-register every installed runtime's entrypoints in the shell
- * registry. Call once at session-init time after all runner factories
- * are registered (init.ts:registerRunnerFactory blocks).
- */
-export function rehydrateInstalledRuntimes(vfs, registry, homeDir) {
-    return rehydrateInstalledRuntimesView(vfs.as(CRED_KERNEL), registry, homeDir);
-}
-function rehydrateInstalledRuntimesView(vfs, registry, homeDir) {
-    const bins = [];
-    for (const { root, manifest } of listInstalledManifestsView(vfs, homeDir)) {
-        for (const ep of runtimeEntrypoints(manifest)) {
-            const factory = runnerFactories[ep.runner];
-            if (!factory)
-                continue; // runner not registered yet — skip
-            const handler = factory(manifest, root, ep.binName, ep.kind);
-            registry.register(ep.binName, handler);
-            bins.push(ep.binName);
-        }
-    }
-    return { count: bins.length, bins };
-}
-export function listInstalledRuntimes(vfs, homeDir) {
-    return listInstalledManifests(vfs, homeDir).map(({ root, manifest }) => ({
-        name: manifest.name,
-        version: manifest.version,
-        root,
-        abi: runtimeAbiForManifest(manifest),
-        bins: runtimeEntrypoints(manifest).map((e) => e.binName),
-        sizeBytes: manifest.files.reduce((a, f) => a + f.size, 0),
-        license: manifest.license,
-    }));
-}
 export async function listAvailableRuntimes(env) {
     const catalog = await fetchCatalog(env);
     return Object.entries(catalog.runtimes)
@@ -409,7 +272,7 @@ async function runInstall(args, ctx, deps) {
         // manifest's presence implies the install completed; we trust it.
         ctx.stdout.write(`[${name}] already installed at ${root} (use --reinstall to refetch)\n`);
         // Still re-register bins in case the registry lost them — idempotent.
-        rehydrateInstalledRuntimesView(deps.vfs, deps.registry, home);
+        rehydrateInstalledRuntimesView(deps.vfs, deps.registry, home, runnerFactoryFor);
         let manifest = null;
         try {
             manifest = parseRuntimeManifest(JSON.parse(deps.vfs.readFileString(`${root}/manifest.json`)));
@@ -505,7 +368,7 @@ async function runInstall(args, ctx, deps) {
     await Promise.all(workers);
     // Register entrypoints.
     for (const ep of runtimeEntrypoints(manifest)) {
-        const factory = runnerFactories[ep.runner];
+        const factory = runnerFactoryFor(ep.runner);
         if (!factory) {
             ctx.stderr.write(`[${name}] warning: runner '${ep.runner}' not registered; bin '${ep.binName}' will not be invokable\n`);
             continue;

package/dist/runtime/python-repl.d.ts

@@ -22,7 +22,7 @@
 import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
 import type { FacetManager } from '../facets/manager.js';
 import type { WebSocketTerminal } from '../facets/ws-terminal.js';
-import type { RuntimeManifest } from './runtime-catalog.js';
+import type { RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
 export interface PythonReplDeps {
     facetMgr: FacetManager;
     vfs: SqliteVFS;

package/dist/runtime/python-repl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"python-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/python-repl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAoB5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA0QD,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,KAAK,GAAG,aAAa,GAAG,UAAU,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"python-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/python-repl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAoBnF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA0QD,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,KAAK,GAAG,aAAa,GAAG,UAAU,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/runtime/python-repl.js

@@ -20,8 +20,8 @@
  * deciding what counts as a result.
  */
 import { ReplSession } from './repl-session.js';
-import { sessionUsesSciVariant } from './python-pip.js';
-import { buildCPythonPreamble } from './cpython-runner.js';
+import { sessionUsesSciVariant } from '@nimbus-sh/core/runtime/python-pip.js';
+import { buildCPythonPreamble } from '@nimbus-sh/core/runtime/cpython-runner.js';
 import { getFacetManagerLoaderHost } from './facet-loader-host.js';
 import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
 /** Written by the driver when the source so far cannot yet be run. */

package/dist/runtime/ruby-runner.d.ts

@@ -33,7 +33,7 @@
  *     ruby-init-loadpath, rb-eval-string-protect, cabi_realloc,
  *     canonical_abi_drop_rb-abi-value, memory.
  */
-import type { RuntimeManifest } from './runtime-catalog.js';
+import type { RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
 import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
 import type { FacetManager } from '../facets/manager.js';
 import type { Command } from '@nimbus-sh/core/substrate/lifo/commands/types.js';

package/dist/runtime/ruby-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ruby-runner.d.ts","sourceRoot":"","sources":["../../src/runtime/ruby-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAkB,MAAM,kDAAkD,CAAC;AAwBhG,KAAK,iBAAiB,GAAG,CACvB,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,SAAS,KACxB,OAAO,CAAC;AAEb;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;KAC1F,CAAC;CACH,GAAG,iBAAiB,CA8KpB;AAkcD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAiLrE;AA6FD;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CA2B1C;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,0jjCAmqBrC,CAAC"}
+{"version":3,"file":"ruby-runner.d.ts","sourceRoot":"","sources":["../../src/runtime/ruby-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,OAAO,EAAkB,MAAM,kDAAkD,CAAC;AAwBhG,KAAK,iBAAiB,GAAG,CACvB,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,SAAS,KACxB,OAAO,CAAC;AAEb;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;KAC1F,CAAC;CACH,GAAG,iBAAiB,CA8KpB;AAkcD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAiLrE;AA6FD;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CA2B1C;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,0jjCAmqBrC,CAAC"}

package/dist/runtime/ruby-runner.js

@@ -40,7 +40,7 @@ import { CRED_KERNEL, requireVfsCred } from '@nimbus-sh/core/runtime/os-contract
 import { WASI_INSTANCE_PREAMBLE_SRC } from '@nimbus-sh/core/runtime/wasi-instance.js';
 import { manifestVfs } from '@nimbus-sh/core/runtime/vfs-manifest.js';
 import { resolveVfsPath } from '@nimbus-sh/core/vfs/path.js';
-import { VIRTUAL_SOCKET_KERNEL_SRC } from './virtual-socket-kernel.generated.js';
+import { VIRTUAL_SOCKET_KERNEL_SRC } from '@nimbus-sh/core/runtime/virtual-socket-kernel.generated.js';
 import { RUBY_SOCKET_SHIM } from '@nimbus-sh/core/runtime/ruby-socket-shim.js';
 import { RUBY_GREEN_THREADS } from '@nimbus-sh/core/runtime/ruby-green-threads.js';
 import { defaultGemHome, installRubyBundle, installRubyGems, installedGemBins, installedGemLibRoots, parseRubyGemRequirements, } from './ruby-gems.js';

package/dist/runtime/runtime-catalog.d.ts

@@ -15,17 +15,9 @@
  * Catalog schema (RuntimeCatalog):
  *   { version: 1, runtimes: { <name>: { default, versions: { <ver>: { manifest, manifest_sha256, size_bytes, license } } } } }
  *
- * Manifest schema (RuntimeManifest):
- *   { name, version, license, wasi_namespace,
- *     files: [{ path, content, sha256, size, mode? }],
- *     entrypoints: [{ binName, runner, args[], kind? }],
- *     runtime_artifacts?: [
- *       { path, kind: "workerd-adapter", id, source_sha256?, sha256 },
- *       { path, kind: "python-package", id, language: "python", packageName,
- *         version, abi, pyodideVersion, pythonVersion, wheelFileName,
- *         wheelSha256, loadMode: "startup-module", imports[], dependencies[],
- *         extensionModules[] }
- *     ] }
+ * Manifest schema: `@nimbus-sh/core` runtime/runtime-manifest.ts. What a
+ * runtime IS does not depend on which tier served it, so this module only
+ * fetches and verifies manifests; it does not describe them.
  *
  * R2 and Cache API failures throw; the shell verb formats the diagnostic for
  * the user.
@@ -53,8 +45,7 @@
  * that happens — there is no "trust the key instead" fallback. That also
  * makes a stale pin a cache miss rather than an outage.
  */
-import { z } from 'zod/v4';
-import { PYODIDE_PACKAGE_ABI } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { type ManifestFile, type RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
 /** Minimal R2Bucket shape we depend on. */
 type R2BucketLike = {
     get(key: string): Promise<{
@@ -82,74 +73,7 @@ export interface RuntimeCatalog {
     version: 1;
     runtimes: Record<string, CatalogRuntimeEntry>;
 }
-export interface ManifestFile {
-    /** VFS path relative to ~/.nimbus/runtimes/<name>/<version>/. */
-    path: string;
-    /** R2 key for the content blob. */
-    content: string;
-    /** Hex sha256 of the content blob bytes. */
-    sha256: string;
-    /** Byte size. */
-    size: number;
-    /** Optional file mode hint ("exec" → registered as a shell bin). */
-    mode?: 'exec';
-}
-export interface ManifestEntrypoint {
-    /** Shell command name. */
-    binName: string;
-    /** Runner key (e.g. "clang-runner") — package manager dispatches to
-     *  the right runner factory by this. */
-    runner: string;
-    /** Default args prepended to user args at invocation. */
-    args: string[];
-    /** Optional secondary classification (e.g. "linker" for wasm-ld). */
-    kind?: string;
-}
-export interface RuntimeArtifactMetadata {
-    path: string;
-    kind: string;
-    id: string;
-    source_sha256?: string;
-    sha256: string;
-}
-export type RuntimePythonPackageAbi = typeof PYODIDE_PACKAGE_ABI;
-export interface RuntimePythonExtensionModuleMetadata {
-    /** Path inside Python site-packages, as stored in the wheel. */
-    path: string;
-    /** Path inside the installed Nimbus runtime root. */
-    runtimePath: string;
-    sha256: string;
-}
-export interface RuntimePythonPackageArtifactMetadata extends RuntimeArtifactMetadata {
-    kind: 'python-package';
-    language: 'python';
-    packageName: string;
-    version: string;
-    abi: RuntimePythonPackageAbi;
-    pyodideVersion: string;
-    pythonVersion: string;
-    wheelFileName: string;
-    wheelSha256: string;
-    loadMode: 'startup-module';
-    imports: string[];
-    dependencies: string[];
-    extensionModules: RuntimePythonExtensionModuleMetadata[];
-}
-export interface RuntimeManifest {
-    name: string;
-    version: string;
-    license: string;
-    /** Which WASI namespace the binaries import — `wasi_unstable` for
-     *  binji clang. `null` for non-WASI runtimes (e.g. Pyodide). */
-    wasi_namespace: string | null;
-    files: ManifestFile[];
-    entrypoints: ManifestEntrypoint[];
-    runtime_artifacts?: RuntimeArtifactMetadata[];
-}
-export declare const RuntimePythonPackageArtifactMetadataSchema: z.ZodType<RuntimePythonPackageArtifactMetadata>;
 export declare function parseRuntimeCatalog(value: unknown): RuntimeCatalog;
-export declare function parseRuntimeManifest(value: unknown): RuntimeManifest;
-export declare function isRuntimePythonPackageArtifactMetadata(artifact: RuntimeArtifactMetadata): artifact is RuntimePythonPackageArtifactMetadata;
 /**
  * Fetch the top-level catalog, verified against the build-time pin.
  *

package/dist/runtime/runtime-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-catalog.d.ts","sourceRoot":"","sources":["../../src/runtime/runtime-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAE9E,2CAA2C;AAC3C,KAAK,YAAY,GAAG;IAClB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACxB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KACzB,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,IAAI,GAAG,SAAS,CAAC;AAErB,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,EAAE,YAAY,CAAC;CACrC;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB;2EACuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB;4CACwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,mBAAmB,CAAC;AAEjE,MAAM,WAAW,oCAAoC;IACnD,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oCAAqC,SAAQ,uBAAuB;IACnF,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,uBAAuB,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,oCAAoC,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;oEACgE;IAChE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,iBAAiB,CAAC,EAAE,uBAAuB,EAAE,CAAC;CAC/C;AA0CD,eAAO,MAAM,0CAA0C,EAAE,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAmBlG,CAAC;AAYN,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAElE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAEpE;AAED,wBAAgB,sCAAsC,CACpD,QAAQ,EAAE,uBAAuB,GAChC,QAAQ,IAAI,oCAAoC,CAElD;AA4DD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBlF;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,UAAU,CAAC,CA4BrB"}
+{"version":3,"file":"runtime-catalog.d.ts","sourceRoot":"","sources":["../../src/runtime/runtime-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAKH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,6CAA6C,CAAC;AAErD,2CAA2C;AAC3C,KAAK,YAAY,GAAG;IAClB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACxB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KACzB,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,IAAI,GAAG,SAAS,CAAC;AAErB,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,EAAE,YAAY,CAAC;CACrC;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB;2EACuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAiBD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAElE;AA4DD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBlF;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,UAAU,CAAC,CA4BrB"}

package/dist/runtime/runtime-catalog.js

@@ -15,17 +15,9 @@
  * Catalog schema (RuntimeCatalog):
  *   { version: 1, runtimes: { <name>: { default, versions: { <ver>: { manifest, manifest_sha256, size_bytes, license } } } } }
  *
- * Manifest schema (RuntimeManifest):
- *   { name, version, license, wasi_namespace,
- *     files: [{ path, content, sha256, size, mode? }],
- *     entrypoints: [{ binName, runner, args[], kind? }],
- *     runtime_artifacts?: [
- *       { path, kind: "workerd-adapter", id, source_sha256?, sha256 },
- *       { path, kind: "python-package", id, language: "python", packageName,
- *         version, abi, pyodideVersion, pythonVersion, wheelFileName,
- *         wheelSha256, loadMode: "startup-module", imports[], dependencies[],
- *         extensionModules[] }
- *     ] }
+ * Manifest schema: `@nimbus-sh/core` runtime/runtime-manifest.ts. What a
+ * runtime IS does not depend on which tier served it, so this module only
+ * fetches and verifies manifests; it does not describe them.
  *
  * R2 and Cache API failures throw; the shell verb formats the diagnostic for
  * the user.
@@ -56,8 +48,7 @@
 import { z } from 'zod/v4';
 import { sha256Hex } from '@nimbus-sh/core/_shared/crypto.js';
 import { RUNTIME_CATALOG_SHA256 } from '../runtime-catalog.generated.js';
-import { PYODIDE_PACKAGE_ABI } from '@nimbus-sh/core/runtime/os-contracts.js';
-const HexSha256Schema = z.string().regex(/^[a-f0-9]{64}$/);
+import { HexSha256Schema, parseRuntimeManifest, } from '@nimbus-sh/core/runtime/runtime-manifest.js';
 const CatalogVersionEntrySchema = z.object({
     manifest: z.string().min(1),
     manifest_sha256: HexSha256Schema.optional(),
@@ -71,63 +62,9 @@ const RuntimeCatalogSchema = z.object({
         versions: z.record(z.string(), CatalogVersionEntrySchema),
     })),
 });
-const ManifestFileSchema = z.object({
-    path: z.string().min(1),
-    content: z.string().min(1),
-    sha256: HexSha256Schema,
-    size: z.number().int().nonnegative(),
-    mode: z.literal('exec').optional(),
-});
-const ManifestEntrypointSchema = z.object({
-    binName: z.string().min(1),
-    runner: z.string().min(1),
-    args: z.array(z.string()),
-    kind: z.string().optional(),
-});
-const RuntimeArtifactMetadataSchema = z.object({
-    path: z.string().min(1),
-    kind: z.string().min(1),
-    id: z.string().min(1),
-    source_sha256: HexSha256Schema.optional(),
-    sha256: HexSha256Schema,
-}).passthrough();
-export const RuntimePythonPackageArtifactMetadataSchema = RuntimeArtifactMetadataSchema.and(z.object({
-    kind: z.literal('python-package'),
-    language: z.literal('python'),
-    packageName: z.string().min(1),
-    version: z.string().min(1),
-    abi: z.literal(PYODIDE_PACKAGE_ABI),
-    pyodideVersion: z.string().min(1),
-    pythonVersion: z.string().min(1),
-    wheelFileName: z.string().min(1),
-    wheelSha256: HexSha256Schema,
-    loadMode: z.literal('startup-module'),
-    imports: z.array(z.string()),
-    dependencies: z.array(z.string()),
-    extensionModules: z.array(z.object({
-        path: z.string().min(1),
-        runtimePath: z.string().min(1),
-        sha256: HexSha256Schema,
-    })),
-}));
-const RuntimeManifestSchema = z.object({
-    name: z.string().min(1),
-    version: z.string().min(1),
-    license: z.string(),
-    wasi_namespace: z.string().nullable(),
-    files: z.array(ManifestFileSchema),
-    entrypoints: z.array(ManifestEntrypointSchema),
-    runtime_artifacts: z.array(RuntimeArtifactMetadataSchema).optional(),
-});
 export function parseRuntimeCatalog(value) {
     return RuntimeCatalogSchema.parse(value);
 }
-export function parseRuntimeManifest(value) {
-    return RuntimeManifestSchema.parse(value);
-}
-export function isRuntimePythonPackageArtifactMetadata(artifact) {
-    return RuntimePythonPackageArtifactMetadataSchema.safeParse(artifact).success;
-}
 // ── L2 content addressing ────────────────────────────────────────────
 /** R2 key of the top-level catalog. */
 const CATALOG_R2_KEY = 'catalog/v1.json';

package/dist/session/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAkFH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAa3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAivF/D"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAoFH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAa3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAguF/D"}