@nimbus-sh/worker 0.3.0 → 0.5.0

package/dist/session/port-capability.js

@@ -11,20 +11,139 @@
  * back. Everything else is the security half of the same rule: a capability
  * names ONE registration, so any other registration on that port retires the
  * durable copy. Only a deliberate restore extends a capability's life, which
- * is why `clearPortCapability` sits next to every `portRegistry.register` and
+ * is why `clearPortCapability` sits next to every `portRegistry.register`,
  * `restorePortCapability` sits only at the two places a dev server is
- * deliberately brought back.
+ * deliberately brought back, and `restoreReservedPortCapability` sits only
+ * on the durable spawn's re-adopt path, gated on the stored reservation's
+ * owner.
+ *
+ * The same per-port record also carries a RESERVATION: an owner may hold a
+ * port with no capability yet, so a durable application keeps its port across
+ * instances whether or not it is currently exposed. Clearing a capability
+ * keeps the owner's reservation; only `releasePortReservation` ends it.
  */
 import { z } from 'zod/v4';
 import { PORT_CAPABILITY_KEY_PREFIX } from './keys.js';
 /** The shape `createPortCapability` mints: 12 random bytes, hex. */
 const PortCapabilitySchema = z.string().regex(/^[a-f0-9]{24}$/);
-function key(port) {
+/** 'scoped' is the default: capability-checked but never the public bearer. */
+const PortVisibilitySchema = z.enum(['scoped', 'public']);
+export const PortRecordSchema = z.object({
+    capability: PortCapabilitySchema.nullable(),
+    owner: z.string().nullable(),
+    visibility: PortVisibilitySchema.optional(),
+});
+const RESERVATION_FIRST_PORT = 20000;
+const RESERVATION_LAST_PORT = 65535;
+export function portRecordKey(port) {
     return `${PORT_CAPABILITY_KEY_PREFIX}${Number(port)}`;
 }
+function conflict(detail) {
+    return new Error(`port reservation conflict: ${detail}`);
+}
+/** Read the raw per-port record: a reservation, an exposure, or nothing. */
+export async function readPortReservation(ctx, port) {
+    const stored = PortRecordSchema.safeParse(await ctx.storage.get(portRecordKey(port)));
+    if (!stored.success)
+        return null;
+    return { ...stored.data, visibility: stored.data.visibility ?? 'scoped' };
+}
+/** Read retained exposure metadata without starting a session or restoring a listener. */
+export async function readPortExposure(ctx, port) {
+    const stored = await readPortReservation(ctx, port);
+    return stored !== null && stored.capability !== null
+        ? { capability: stored.capability, owner: stored.owner, visibility: stored.visibility }
+        : null;
+}
+/**
+ * Hold a port for `owner` across instances. The owner's existing port is
+ * answered again; otherwise the preferred port is claimed, or the lowest
+ * free one. A preferred port that another record or a live listener holds
+ * is refused, never silently moved.
+ *
+ * `capability`/`visibility` give the embedder-durable path its URL material
+ * up front: a reservation can carry the capability the application will
+ * re-adopt when it binds, and the visibility the public bearer form is
+ * gated on. An existing reservation for the same owner is answered again,
+ * upgraded in place when the caller supplies values it lacks — an existing
+ * capability is never rotated, a URL already handed out stays good.
+ */
+export async function reservePort(ctx, input) {
+    const claim = async (txn) => {
+        const records = await txn.list({ prefix: PORT_CAPABILITY_KEY_PREFIX });
+        const taken = new Set(input.occupiedPorts);
+        let held = null;
+        for (const [storedKey, value] of records) {
+            const port = Number(storedKey.slice(PORT_CAPABILITY_KEY_PREFIX.length));
+            if (!Number.isInteger(port))
+                continue;
+            taken.add(port);
+            const parsed = PortRecordSchema.safeParse(value);
+            if (parsed.success && parsed.data.owner === input.owner) {
+                held = { port, stored: parsed.data };
+            }
+        }
+        const preferred = input.preferredPort;
+        if (held !== null) {
+            if (preferred !== undefined && preferred !== held.port) {
+                throw conflict(`owner already holds port ${held.port}, cannot reserve ${preferred}`);
+            }
+            // Upgrade in place: adopt a caller-supplied capability the row lacks
+            // and/or apply the caller's visibility — never rotate an existing one.
+            const stored = held.stored;
+            const capability = stored?.capability ?? input.capability ?? null;
+            const visibility = input.visibility ?? stored?.visibility ?? 'scoped';
+            if (stored === null || capability !== stored.capability || visibility !== (stored.visibility ?? 'scoped')) {
+                await txn.put(portRecordKey(held.port), { owner: input.owner, capability, visibility });
+            }
+            return held.port;
+        }
+        let port;
+        if (preferred !== undefined) {
+            if (!Number.isInteger(preferred) || preferred < 1 || preferred > RESERVATION_LAST_PORT) {
+                throw conflict(`port ${preferred} is outside 1..${RESERVATION_LAST_PORT}`);
+            }
+            if (taken.has(preferred))
+                throw conflict(`port ${preferred} is held by another owner or listener`);
+            port = preferred;
+        }
+        else {
+            port = RESERVATION_FIRST_PORT;
+            while (port <= RESERVATION_LAST_PORT && taken.has(port))
+                port += 1;
+            if (port > RESERVATION_LAST_PORT)
+                throw conflict('no free port left to reserve');
+        }
+        await txn.put(portRecordKey(port), {
+            owner: input.owner,
+            capability: input.capability ?? null,
+            visibility: input.visibility ?? 'scoped',
+        });
+        return port;
+    };
+    return ctx.storage.transaction(claim);
+}
+/** End an owner's hold on a port. Another owner's record is left alone and refused. */
+export async function releasePortReservation(ctx, input) {
+    // The read, the owner check and the delete are one transaction: a concurrent
+    // claim or a foreign release cannot interleave between them.
+    return ctx.storage.transaction(async (txn) => {
+        const stored = await readPortReservation({ storage: txn }, input.port);
+        if (stored === null)
+            return false;
+        if (stored.owner !== input.owner)
+            throw conflict(`port ${input.port} is held by another owner`);
+        await txn.delete(portRecordKey(input.port));
+        return true;
+    });
+}
 export async function readPortCapability(self, port) {
-    const stored = PortCapabilitySchema.safeParse(await self.ctx.storage.get(key(port)));
-    return stored.success ? stored.data : null;
+    // The stored record is the only source of truth: a capability belongs to
+    // whoever is registered on the port, and its owner field is preserved by
+    // persist, never consulted as a gate. Durable ownership rides the
+    // reservation's own restore path (restoreReservedPortCapability).
+    const stored = await readPortExposure(self.ctx, port);
+    return stored?.capability ?? null;
 }
 /**
  * Re-adopt the persisted capability into whatever the registry holds now.
@@ -36,14 +155,52 @@ export async function restorePortCapability(self, port) {
         return null;
     return self.portRegistry.restoreCapability(Number(port), stored) ? stored : null;
 }
+/**
+ * Re-adopt the persisted capability ONLY for the owner the stored record
+ * names. The durable re-drive calls this with its own owner: the reservation
+ * is the same source of truth the preflight reads, so a release or a foreign
+ * claim mid-boot cannot smuggle an exposure across.
+ */
+export async function restoreReservedPortCapability(self, port, owner) {
+    const stored = await readPortReservation(self.ctx, port);
+    if (stored === null || stored.owner !== owner || stored.capability === null)
+        return null;
+    return self.portRegistry.restoreCapability(Number(port), stored.capability) ? stored.capability : null;
+}
 export async function persistPortCapability(self, port, capability) {
-    await self.ctx.storage.put(key(port), PortCapabilitySchema.parse(capability));
+    // Read-modify-write inside the reservation's own transaction, and the stored
+    // record is the ONLY source of truth for owner: an SDK ports.list()/expose
+    // on a durable application's port must not rewrite the row it is reporting
+    // on, or the next durable preflight sees a reservation nobody owns.
+    await self.ctx.storage.transaction(async (txn) => {
+        const stored = await txn.get(portRecordKey(port));
+        const parsed = PortRecordSchema.safeParse(stored);
+        await txn.put(portRecordKey(port), {
+            capability: PortCapabilitySchema.parse(capability),
+            owner: parsed.success ? parsed.data.owner : null,
+            ...(parsed.success && parsed.data.visibility !== undefined
+                ? { visibility: parsed.data.visibility }
+                : {}),
+        });
+    });
 }
 /**
  * Retire the durable capability for a port. Called before every registration
  * that is not a restore, so a token handed out for the previous occupant of a
- * port cannot reach the next one.
+ * port cannot reach the next one. An owner's reservation survives it.
  */
 export async function clearPortCapability(self, port) {
-    await self.ctx.storage.delete(key(port));
+    await self.ctx.storage.transaction(async (txn) => {
+        const stored = PortRecordSchema.safeParse(await txn.get(portRecordKey(port)));
+        const record = stored.success ? stored.data : null;
+        if (record !== null && record.owner !== null) {
+            await txn.put(portRecordKey(port), {
+                owner: record.owner,
+                capability: null,
+                ...(record.visibility !== undefined ? { visibility: record.visibility } : {}),
+            });
+            return;
+        }
+        await txn.delete(portRecordKey(port));
+    });
 }

package/dist/session/programmatic.d.ts

@@ -32,20 +32,36 @@ interface ProgrammaticShellExecuteOptions {
     commandContext?: Record<string, unknown>;
 }
 interface ProgrammaticContext {
+    /** The session DO's own id — the public-directory binding reads its name. */
+    id?: {
+        name?: unknown;
+    };
     getWebSockets?(tag?: string): WebSocket[];
     /** Holds a background process's work open for the life of the process. */
     waitUntil?(promise: Promise<unknown>): void;
     storage: {
         get(key: string): Promise<unknown>;
+        put(key: string, value: unknown): Promise<void>;
         delete(key: string): Promise<void>;
         deleteAll(): Promise<void>;
         deleteAlarm(): Promise<void>;
-        put(key: string, value: unknown): Promise<void>;
+        list<T = unknown>(options: {
+            prefix: string;
+        }): Promise<Map<string, T>>;
+        transaction<T>(body: (txn: {
+            get(key: string): Promise<unknown>;
+            put(key: string, value: unknown): Promise<void>;
+            delete(key: string): Promise<unknown>;
+            list<T2 = unknown>(options: {
+                prefix: string;
+            }): Promise<Map<string, T2>>;
+        }) => Promise<T>): Promise<T>;
     };
 }
 interface ProgrammaticFacetManager {
     kill(pid: number): boolean;
     hasResidentProcess(pid: number): boolean;
+    removeDurableApp(owner: string): Promise<boolean>;
 }
 interface ProgrammaticViteServer {
     isRunning: boolean;
@@ -93,8 +109,6 @@ export interface ProgrammaticHost {
     _w9PersistWired?: boolean;
     _w9FlushTimer?: ReturnType<typeof setTimeout> | null;
     _w9SchemaInit?: boolean;
-    _isolateGen?: number;
-    _isolateGenPersisted?: boolean;
     _w9WireProcessLogPersist?(): void;
     ensureSqliteFs(): void;
     ensureFacetManager(): void;
@@ -251,17 +265,49 @@ export declare function rpcProcessLogs(self: ProgrammaticHost, pid: number, opti
     exit: import("@nimbus-sh/core/runtime/process-logs.js").ProcessExitInfo | null;
 }>;
 export declare function rpcListPorts(self: ProgrammaticHost): Promise<SerializedPort[]>;
-export declare function rpcExposePort(self: ProgrammaticHost, port: number): Promise<{
+export declare function rpcExposePort(self: ProgrammaticHost, port: number, options?: {
+    visibility?: 'scoped' | 'public';
+}): Promise<{
     port: number;
     listening: boolean;
     pid: number | null;
     registeredAt: number | null;
     capability: string | null;
+    visibility: "scoped" | "public";
+}>;
+/**
+ * The embedder's durable-application seam: reserve (or re-answer) the port
+ * `owner` holds, minting the capability the application's public URL is
+ * built on — minted HERE, stored on the reservation, so a URL handed out
+ * before the application has ever booted is the one its eventual binding
+ * re-adopts, and the one a reset re-adopts again. Answers the port, the
+ * capability, and the record's visibility.
+ */
+export declare function rpcEnsureDurableApp(self: ProgrammaticHost, input: {
+    owner: string;
+    preferredPort?: number;
+    visibility?: 'scoped' | 'public';
+}): Promise<{
+    port: number;
+    capability: string | null;
+    visibility: 'scoped' | 'public';
 }>;
 export declare function rpcUnexposePort(self: ProgrammaticHost, port: number): Promise<{
     port: number;
     ok: boolean;
 }>;
+/**
+ * End a durable application's contract. The reservation's port is read first
+ * so the caller learns which durable address was released; the manager then
+ * kills every launch the owner claims, purges its journal rows, releases the
+ * port, and frees the durable slot. `removed` is false only when no durable
+ * application held that owner at all.
+ */
+export declare function rpcRemoveDurableApp(self: ProgrammaticHost, owner: string): Promise<{
+    owner: string;
+    removed: boolean;
+    port: number | null;
+}>;
 /**
  * Route an embedder request that carries a port capability. The embedder has
  * authenticated the capability at its edge and stripped its own credentials,

package/dist/session/programmatic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"programmatic.d.ts","sourceRoot":"","sources":["../../src/session/programmatic.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,KAAK,EAAY,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAC/F,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,YAAY,EAAkB,MAAM,0CAA0C,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAiBpF,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,MAAM,CAAC;IACjB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,+BAA+B,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpG;AAYD,UAAU,+BAA+B;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED,UAAU,mBAAmB;IAC3B,aAAa,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC;IAC1C,0EAA0E;IAC1E,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE;QACP,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACjD,CAAC;CACH;AAED,UAAU,wBAAwB;IAChC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1C;AAED,UAAU,sBAAsB;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,UAAU,wBAAwB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,mBAAmB,CAAC;IACzB,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC9C,aAAa,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC7C,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC5C,WAAW,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC,6EAA6E;IAC7E,wBAAwB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE;QAAE,KAAK,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,EAAE,CAAC,YAAY,GAAG;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,IAAI,IAAI,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAChF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,wBAAwB,CAAC,IAAI,IAAI,CAAC;IAClC,cAAc,IAAI,IAAI,CAAC;IACvB,kBAAkB,IAAI,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAClD,iBAAiB,CAkBnB;AAoED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAgED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,gBAAgB,EACtB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAwB/C;AA2FD,wBAAsB,OAAO,CAC3B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAGjC;AAyFD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,uBAAuB,CAAC,CAGlC;AAkED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,uBAAuB,GAAG;IACjC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACrE,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CAC5B,GACL,OAAO,CAAC,sBAAsB,CAAC,CAcjC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,0EAIlC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,4EAQlC;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,gBAAgB;;;;;;;;;;;;GAM3D;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAG3F;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B/G;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAInI;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAInH;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAGvC;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAGvC;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,qBAA0B;;;;;;;GAiBpC;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAQpF;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM;;;;;;GAYvE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM;;;GAOzE;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC,CAenB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,gBAAgB,EACtB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CA8EpC"}
+{"version":3,"file":"programmatic.d.ts","sourceRoot":"","sources":["../../src/session/programmatic.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,KAAK,EAAY,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAC/F,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,YAAY,EAAwC,MAAM,0CAA0C,CAAC;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAuBpF,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,MAAM,CAAC;IACjB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,+BAA+B,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpG;AAYD,UAAU,+BAA+B;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED,UAAU,mBAAmB;IAC3B,6EAA6E;IAC7E,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACxB,aAAa,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC;IAC1C,0EAA0E;IAC1E,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE;QACP,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE;YACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;SAC3E,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KAC/B,CAAC;CACH;AAED,UAAU,wBAAwB;IAChC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD;AAED,UAAU,sBAAsB;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,UAAU,wBAAwB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,GAAG,EAAE,iBAAiB,CAAC;IACvB,GAAG,EAAE,mBAAmB,CAAC;IACzB,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC9C,aAAa,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC7C,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC5C,WAAW,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC,6EAA6E;IAC7E,wBAAwB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE;QAAE,KAAK,IAAI,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,EAAE,CAAC,YAAY,GAAG;QAAE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,IAAI,IAAI,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAChF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wBAAwB,CAAC,IAAI,IAAI,CAAC;IAClC,cAAc,IAAI,IAAI,CAAC;IACvB,kBAAkB,IAAI,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAClD,iBAAiB,CAkBnB;AAoED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAgED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,gBAAgB,EACtB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAwB/C;AA2FD,wBAAsB,OAAO,CAC3B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAGjC;AAyFD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,uBAAuB,CAAC,CAGlC;AAkED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,uBAAuB,GAAG;IACjC,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACrE,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;CAC5B,GACL,OAAO,CAAC,sBAAsB,CAAC,CAcjC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,0EAIlC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,4EAQlC;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,gBAAgB;;;;;;;;;;;;GAM3D;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAG3F;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B/G;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAInI;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAInH;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtC,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAGvC;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAGvC;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,qBAA0B;;;;;;;GAiBpC;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAQpF;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE;;;;;;;GAsC/C;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GACjF,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC,CA4BvF;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM;;;GAWzE;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAkBnE;AAGD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,QAAQ,CAAC,CAenB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,gBAAgB,EACtB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CA8EpC"}

package/dist/session/programmatic.js

@@ -10,13 +10,15 @@ import { listInstalledRuntimes, } from '@nimbus-sh/core/runtime/installed-runtim
 import { PID_GEN_STRIDE } from '@nimbus-sh/core/runtime/process-table.js';
 import { notifyTerminalEvent } from '../runtime/process-logs-api.js';
 import { SessionProcessSupervisor } from '@nimbus-sh/core/runtime/session-process-supervisor.js';
-import { PortRegistry } from '@nimbus-sh/core/runtime/port-registry.js';
+import { PortRegistry, createPortCapability } from '@nimbus-sh/core/runtime/port-registry.js';
 import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
 import { endProcessInput, resizeProcess, signalProcess, writeProcessInput, } from '@nimbus-sh/core/runtime/process-input-routing.js';
 import { z } from 'zod/v4';
 import { SESSION_DESTROYED_KEY, SHELL_STATE_KEY_PREFIX, VITE_CONFIG_KEY } from './keys.js';
-import { clearPortCapability, persistPortCapability, restorePortCapability, } from './port-capability.js';
-import { ISOLATE_GEN_KEY } from '@nimbus-sh/fabric/alarms.js';
+import { clearPortCapability, persistPortCapability, PortRecordSchema, portRecordKey, readPortReservation, reservePort, restorePortCapability, } from './port-capability.js';
+import { PORT_CAPABILITY_KEY_PREFIX } from './keys.js';
+import { bindPublicPortCapability, unbindPublicPortCapability } from '../router/public-directory.js';
+import { GENERATION_KEY, assumeGeneration, generation } from '@nimbus-sh/fabric/generation.js';
 import { HeadlessTerminal, Shell } from '@nimbus-sh/core/substrate/lifo/index.js';
 const ShellIdSchema = z.string().min(1).max(160).regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/);
 const ShellStateSchema = z.object({
@@ -169,8 +171,8 @@ function runtimeDeps(self) {
 export async function ensureProgrammaticReady(self, options = {}) {
     if (!self.shell) {
         await self.initSession(makeHeadlessWebSocket());
-        // Programmatic boot owns no real terminal socket. Mark the session
-        // drained so a later browser /ws can warm-join instead of 409ing.
+        // A programmatic boot owns no terminal socket, which is what
+        // 'drained' reports to the diagnostics and the recovery ring.
         self._b4Phase = 'drained';
     }
     else {
@@ -522,28 +524,124 @@ export async function rpcListPorts(self) {
     await Promise.all(entries.map((entry) => persistPortCapability(self, entry.port, entry.capability)));
     return entries.map(serializePort);
 }
-export async function rpcExposePort(self, port) {
+export async function rpcExposePort(self, port, options) {
     await ensureProgrammaticReady(self);
     const n = Number(port);
     const entry = self.portRegistry.get(n);
     if (entry)
         await persistPortCapability(self, n, entry.capability);
+    // The stored record decides visibility: a reservation's mark is sticky,
+    // so 'public' survives persists of unrelated fields — and the caller's
+    // explicit choice, when given, lands on the row the same way.
+    if (options?.visibility !== undefined) {
+        // A visibility choice is a write on the stored row, not a reservation
+        // claim: owner and capability stay exactly as they were.
+        await self.ctx.storage.transaction(async (txn) => {
+            const stored = await readPortReservation({ storage: txn }, n);
+            if (stored !== null && stored.visibility !== options.visibility) {
+                await txn.put(portRecordKey(n), {
+                    owner: stored.owner,
+                    capability: stored.capability,
+                    visibility: options.visibility,
+                });
+            }
+        });
+    }
+    const record = await readPortReservation(self.ctx, n);
+    if (record?.visibility === 'public' && entry) {
+        // A port that goes public must be resolvable: the capability the URL
+        // carries has to name this session in the directory, and a non-legacy
+        // deployment without the binding is refused loudly — never half-public.
+        await bindPublicPortCapability(self, entry.capability, n);
+    }
     return {
         port: n,
         listening: !!entry,
         pid: entry?.pid ?? null,
         registeredAt: entry?.registeredAt ?? null,
         capability: entry?.capability ?? null,
+        visibility: record?.visibility ?? 'scoped',
+    };
+}
+/**
+ * The embedder's durable-application seam: reserve (or re-answer) the port
+ * `owner` holds, minting the capability the application's public URL is
+ * built on — minted HERE, stored on the reservation, so a URL handed out
+ * before the application has ever booted is the one its eventual binding
+ * re-adopts, and the one a reset re-adopts again. Answers the port, the
+ * capability, and the record's visibility.
+ */
+export async function rpcEnsureDurableApp(self, input) {
+    await ensureProgrammaticReady(self);
+    const owner = input.owner;
+    if (typeof owner !== 'string' || owner.length === 0) {
+        throw new Error('ensureDurableApp: owner must be a non-empty string');
+    }
+    const occupied = new Set(self.portRegistry.getAll().map((entry) => entry.port));
+    const port = await reservePort(self.ctx, {
+        owner,
+        preferredPort: input.preferredPort,
+        occupiedPorts: occupied,
+        // Minted here, not at boot: the URL is built from this capability, and
+        // re-drive re-adopts it out of the same row.
+        capability: createPortCapability(),
+        ...(input.visibility !== undefined ? { visibility: input.visibility } : {}),
+    });
+    const record = await readPortReservation(self.ctx, port);
+    if (record?.visibility === 'public' && record.capability !== null) {
+        // The URL is built on this capability before the app has ever run:
+        // publish it to the directory now, loudly refusing a deployment whose
+        // binding is missing rather than minting an unroutable URL.
+        await bindPublicPortCapability(self, record.capability, port);
+    }
+    return {
+        port,
+        capability: record?.capability ?? null,
+        visibility: record?.visibility ?? 'scoped',
     };
 }
 export async function rpcUnexposePort(self, port) {
     await ensureProgrammaticReady(self);
     const n = Number(port);
     // Before the unregister, so a crash between the two leaves a dead token
-    // rather than a live one.
+    // rather than a live one. A public capability also leaves the directory.
+    const record = await readPortReservation(self.ctx, n);
     await clearPortCapability(self, n);
+    if (record?.visibility === 'public' && record.capability !== null) {
+        await unbindPublicPortCapability(self, record.capability);
+    }
     return { port: n, ok: self.portRegistry.unregister(n) };
 }
+/**
+ * End a durable application's contract. The reservation's port is read first
+ * so the caller learns which durable address was released; the manager then
+ * kills every launch the owner claims, purges its journal rows, releases the
+ * port, and frees the durable slot. `removed` is false only when no durable
+ * application held that owner at all.
+ */
+export async function rpcRemoveDurableApp(self, owner) {
+    await ensureProgrammaticReady(self);
+    if (typeof owner !== 'string' || owner.length === 0) {
+        throw new Error('removeDurableApp: owner must be a non-empty string');
+    }
+    // Which durable address is being released — the reservation's row names it
+    // before the manager retires it.
+    const rows = await self.ctx.storage.list({ prefix: PORT_CAPABILITY_KEY_PREFIX });
+    let port = null;
+    for (const [key, record] of rows) {
+        const parsed = PortRecordSchema.safeParse(record);
+        if (!parsed.success || parsed.data.owner !== owner)
+            continue;
+        const n = Number(key.slice(PORT_CAPABILITY_KEY_PREFIX.length));
+        if (Number.isInteger(n) && n > 0) {
+            port = n;
+            break;
+        }
+    }
+    self.ensureFacetManager();
+    const removed = await self.facetManager.removeDurableApp(owner);
+    return { owner, removed, port };
+}
 /**
  * Route an embedder request that carries a port capability. The embedder has
  * authenticated the capability at its edge and stripped its own credentials,
@@ -677,7 +775,7 @@ export async function rpcDestroy(self, options = {}) {
         // current-generation (pid > pidBase) — landing its output on the
         // destroyed/recreated session. Keep {tombstone, isolateGen} consistent.
         try {
-            await self.ctx.storage.put(ISOLATE_GEN_KEY, self._isolateGen ?? 0);
+            await self.ctx.storage.put(GENERATION_KEY, generation(self.ctx));
         }
         catch { /* best-effort */ }
         resetInMemorySessionState(self);
@@ -713,10 +811,10 @@ async function quiesceInMemorySessionState(self) {
  * The generation the NEXT boot of this session will run as.
  *
  * rpcDestroy re-persists the pre-destroy generation after wiping storage,
- * so `maybeBumpIsolateGen` reads it back and bumps once — landing here.
+ * so `adoptGeneration` reads it back and bumps once — landing here.
  */
 function successorGeneration(self) {
-    return (self._isolateGen ?? 0) + 1;
+    return generation(self.ctx) + 1;
 }
 /**
  * Install the empty process/port state a destroyed session leaves behind.
@@ -810,12 +908,11 @@ function resetInMemorySessionState(self) {
     // Adopt the generation the next boot will derive from the counter
     // rpcDestroy just re-persisted, so the in-memory pid floor and the
     // persisted one agree. Deliberately left unpersisted: storage keeps the
-    // pre-destroy value, and maybeBumpIsolateGen re-derives this one from it.
-    const generation = successorGeneration(self);
-    installEmptyProcessState(self, generation);
+    // pre-destroy value, and adoptGeneration re-derives this one from it.
+    const successor = successorGeneration(self);
+    installEmptyProcessState(self, successor);
     self._w9SchemaInit = false;
-    self._isolateGen = generation;
-    self._isolateGenPersisted = false;
+    assumeGeneration(self.ctx, successor);
     try {
         self._w9WireProcessLogPersist?.();
     }

package/dist/session/routes.d.ts

@@ -24,6 +24,23 @@
  * (~30 sites). RoutesHost = any pragmatic deviation, like InitHost in S6.
  */
 type RoutesHost = any;
+/**
+ * Route a request to whatever is listening on a session port.
+ *
+ * The one implementation behind every port-addressed surface: `/port/<n>/`,
+ * `/preview/?port=N`, and the `<port>--<sid>` preview hostname, which the
+ * router forwards as `/port/<n>/`. They differ only in how the port and the
+ * inner path are spelled, so they must not differ in what answers.
+ *
+ * `mountBase` is the public URL prefix the served app is mounted at for THIS
+ * request — '' for a root-mounted `<port>--<sid>` host, '/s/<sid>/preview' for
+ * the preview path. The in-process Cirrus dev server rewrites base-relative
+ * URLs (module URLs, <base href>, BASE_URL, router basename), so it is handed
+ * the base directly: the generic port proxy strips the Nimbus base header at
+ * the untrusted-code boundary and cannot carry it, and a plain user server on
+ * any other port is mounted at root and needs no rewriting.
+ */
+export declare function routeToSessionPort(self: RoutesHost, port: number, request: Request, innerPath: string, mountBase: string, capability?: string): Promise<Response>;
 /** Route a capability-authenticated embedder request to a guest HTTP server. */
 export declare function routeCapabilityPort(self: RoutesHost, port: number, capability: string, request: Request, innerPath: string): Promise<Response>;
 export declare function handleFetch(self: RoutesHost, request: Request): Promise<Response>;

package/dist/session/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/session/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAoDH,KAAK,UAAU,GAAG,GAAG,CAAC;AA6LtB,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAyGD,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8+BvF"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/session/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAuDH,KAAK,UAAU,GAAG,GAAG,CAAC;AA2HtB;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC,CAyDnB;AA2BD,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAyGD,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAugCvF"}