@nimbus-sh/worker 0.4.0 → 0.6.0

package/dist/session/agent.d.ts

@@ -15,6 +15,17 @@ interface AgentStorage {
     delete(key: string): Promise<void>;
     deleteAll(): Promise<void>;
     deleteAlarm(): Promise<void>;
+    list<T = unknown>(options: {
+        prefix: string;
+    }): Promise<Map<string, T>>;
+    transaction<T>(body: (txn: {
+        get(key: string): Promise<unknown>;
+        put(key: string, value: unknown): Promise<void>;
+        delete(key: string): Promise<unknown>;
+        list<T2 = unknown>(options: {
+            prefix: string;
+        }): Promise<Map<string, T2>>;
+    }) => Promise<T>): Promise<T>;
 }
 interface Host extends ProgrammaticHost, SessionAiHost {
     ctx: {

package/dist/session/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/session/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAUL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAiB3B,UAAU,YAAY;IACpB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,UAAU,IAAK,SAAQ,gBAAgB,EAAE,aAAa;IACpD,GAAG,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE,CAAC;IAC/B,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxD;AAED,UAAU,iBAAiB;IACzB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2ClG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAQxF"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/session/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAYL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAiB3B,UAAU,YAAY;IACpB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;KAC3E,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED,UAAU,IAAK,SAAQ,gBAAgB,EAAE,aAAa;IACpD,GAAG,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE,CAAC;IAC/B,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxD;AAED,UAAU,iBAAiB;IACzB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2ClG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAQxF"}

package/dist/session/agent.js

@@ -12,7 +12,7 @@ import { BASE_PATH_HEADER, TENANT_HEADER } from '../_shared/session-router.js';
 import { decodeJsonBase64Url, encodeJsonBase64Url, pkceChallenge, randomBase64Url, sealJson, unsealJson, } from '@nimbus-sh/core/_shared/crypto.js';
 import { clearNimbusAgentOAuthCookie, fetchNimbusCloudflareAccounts, isNimbusCloudflareAccountId, isNimbusTenantSegment, NIMBUS_CF_OAUTH_AUTH_URL, readNimbusCookie, readNimbusAgentCookieSecret, readNimbusAgentOAuthConfig, requestNimbusCloudflareOAuthToken, serializeNimbusCookie, } from './agent-oauth.js';
 import { clearSessionAiCredential, createSessionAiModel, describeSessionAiConnection, readSessionAiConfig, resolveSessionAiCredential, sessionAiAccountIsAvailable, setSessionAiAccount, storeSessionAiCredential, } from './ai.js';
-import { ensureProgrammaticReady, rpcExec, rpcEnsureRuntimes, rpcInstallRuntime, rpcKillProcess, rpcListPorts, rpcListProcesses, rpcProcessLogs, rpcStartProcess, } from './programmatic.js';
+import { ensureProgrammaticReady, rpcExec, rpcEnsureRuntimes, rpcInstallRuntime, rpcExposeApp, rpcKillProcess, rpcListApps, rpcListPorts, rpcListProcesses, rpcProcessLogs, rpcStartProcess, } from './programmatic.js';
 import { resolveVfsPath } from '@nimbus-sh/core/vfs/path.js';
 import { appendTextPart, interruptRunningTools, textFromParts, upsertStoredMessage, upsertToolPart, } from './agent-contract.js';
 import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
@@ -645,6 +645,20 @@ function createAiSdkTools(self) {
             inputSchema: toolSchema({}, []),
             execute: async (args) => runTool(self, 'list_ports', args),
         }),
+        expose_app: aiTool({
+            description: 'Expose a running application by port, pid or name: reserves its port under its identity, optionally names it and makes it public, and returns its URL.',
+            inputSchema: toolSchema({
+                target: stringProp('Port number, process id, or app name.'),
+                visibility: stringProp("'scoped' (default) or 'public' — public mints a shareable capability URL."),
+                name: stringProp('Optional DNS-label name for the app, e.g. "api".'),
+            }, ['target']),
+            execute: async (args) => runTool(self, 'expose_app', args),
+        }),
+        list_apps: aiTool({
+            description: 'List every application the session knows: owner, name, port, pid, status, visibility, restart policy and URL.',
+            inputSchema: toolSchema({}, []),
+            execute: async (args) => runTool(self, 'list_apps', args),
+        }),
     };
 }
 function collectTurnParts(result) {
@@ -872,6 +886,19 @@ async function runTool(self, name, args) {
         }
         if (name === 'list_ports')
             return rpcListPorts(self);
+        if (name === 'expose_app') {
+            const raw = String(args.target ?? '').trim();
+            if (!raw)
+                return { error: 'target is required' };
+            const visibility = args.visibility === 'public' ? 'public' : args.visibility === 'scoped' ? 'scoped' : undefined;
+            const appName = typeof args.name === 'string' && args.name.trim() ? args.name.trim() : undefined;
+            return rpcExposeApp(self, /^\d+$/.test(raw) ? Number(raw) : raw, {
+                ...(visibility !== undefined ? { visibility } : {}),
+                ...(appName !== undefined ? { name: appName } : {}),
+            });
+        }
+        if (name === 'list_apps')
+            return rpcListApps(self);
         return { error: `unknown tool: ${name}` };
     }
     catch (e) {

package/dist/session/helpers.js

@@ -370,7 +370,7 @@ export const _CP_PURE_BUILTIN = new Set([
     'sleep', 'date', 'whoami', 'id', 'hostname', 'uname', 'clear',
     'tree', 'find', 'grep', 'head', 'tail', 'wc', 'sort', 'uniq', 'sed',
     'awk', 'xargs', 'tee', 'du', 'diff', 'base64', 'seq', 'realpath',
-    'basename', 'dirname', 'printf', 'sha256sum', 'file', 'xxd',
+    'basename', 'dirname', 'printf', 'sha256sum', 'file', 'xxd', 'od', 'hexdump',
     'chmod', 'chown', 'ln', 'test', '[', 'read', 'exit', 'set', 'shopt',
     'trap', 'umask', 'ulimit', 'which', 'uptime',
 ]);

package/dist/session/init-phases.d.ts

@@ -33,6 +33,7 @@
  * additional ring entries, not replacements.
  */
 import { type SessionState } from '@nimbus-sh/platform/oom-discriminator.js';
+import { type AutoResponseHost } from './shell-socket.js';
 /**
  * Set the current phase + record a transition. Fail-soft on the
  * observability call; the phase update on `self` is direct and
@@ -42,37 +43,30 @@ export declare function setPhase(self: {
     _b4Phase: SessionState | null;
     ctx?: unknown;
 }, toState: SessionState, trigger: string): void;
+type WsUpgradeDecision = 'warm-join' | 'conflict' | 'cold';
 /**
- * [B'.5] Identify the original phase-based warm-rejoin case. The /ws
- * upgrade classifier below also recognizes headless sessions whose
- * lifecycle phase does not describe a real terminal attachment.
+ * Decide what a /ws upgrade should do with the session it lands on.
  *
- * Conditions for warm rejoin:
- *   1. Phase = 'drained' (a wsClose / wsError fired since last init).
- *   2. Kernel + Shell + Terminal are still alive in-memory (the
- *      [B'.5] change to wsClose stopped nulling them).
- *   3. Same isolate (no DO eviction since the close).
+ *   - cold:      no session to join. Either nothing was ever built, or a
+ *                previous teardown left the object half-built. A Shell
+ *                without its Kernel or its Terminal serves nobody, and
+ *                nothing else rebuilds one, so the upgrade does.
+ *   - conflict:  another browser terminal holds this session. The caller
+ *                answers 409, which is what stops two tabs from driving
+ *                one shell. See `shell-socket.ts` for what proves that a
+ *                socket still has a peer on it.
+ *   - warm-join: the session is built and unattended. Skip the rebuild
+ *                and hand the live Shell to the incoming socket.
  *
- */
-export declare function isWarmRejoin(self: {
-    _b4Phase: SessionState | null;
-    shell: any;
-    terminal: any;
-    kernel: any;
-}): boolean;
-type WsUpgradeDecision = 'warm-join' | 'conflict' | 'cold';
-/**
- * Classify a shell WebSocket upgrade from the actual attachment state.
- * A non-null Shell can belong to a headless programmatic boot, so only an
- * open socket tagged as `shell` proves that another browser terminal is
- * currently attached.
+ * The caller classifies BEFORE it accepts the incoming socket, so the
+ * upgrade cannot count itself as the incumbent.
  */
 export declare function classifyWsUpgrade(self: {
-    _b4Phase: SessionState | null;
     shell: unknown;
     terminal: unknown;
     kernel: unknown;
-}, sockets: readonly WebSocket[]): WsUpgradeDecision;
+    ctx?: AutoResponseHost;
+}, sockets: readonly WebSocket[], now?: number): WsUpgradeDecision;
 /**
  * [B'.5] Run the warm-rejoin path. Skips Phase B (kernel + shell are
  * already built and alive in-memory). Phase R loads any state that

package/dist/session/init-phases.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init-phases.d.ts","sourceRoot":"","sources":["../../src/session/init-phases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAGlG;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,EACtD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,MAAM,GACd,IAAI,CAcN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;CACxC,GAAG,OAAO,CAKV;AAED,KAAK,iBAAiB,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE3D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB,EAAE,OAAO,EAAE,SAAS,SAAS,EAAE,GAAG,iBAAiB,CAmBnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE;IACJ,GAAG,EAAE,GAAG,CAAC;IACT,QAAQ,EAAE;QAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpG,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,EACD,EAAE,EAAE,SAAS,EACb,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,EAChE,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GACnC,IAAI,CAsCN"}
+{"version":3,"file":"init-phases.d.ts","sourceRoot":"","sources":["../../src/session/init-phases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAElG,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE7E;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE;IAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,EACtD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,MAAM,GACd,IAAI,CAcN;AAED,KAAK,iBAAiB,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE3D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,gBAAgB,CAAC;CACxB,EAAE,OAAO,EAAE,SAAS,SAAS,EAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,iBAAiB,CAG7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE;IACJ,GAAG,EAAE,GAAG,CAAC;IACT,QAAQ,EAAE;QAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpG,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,EACD,EAAE,EAAE,SAAS,EACb,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,EAChE,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GACnC,IAAI,CAsCN"}

package/dist/session/init-phases.js

@@ -34,6 +34,7 @@
  */
 import { recordRecoveryEvent } from '@nimbus-sh/platform/oom-discriminator.js';
 import { generation } from '@nimbus-sh/fabric/generation.js';
+import { hasLiveShellOwner } from './shell-socket.js';
 /**
  * Set the current phase + record a transition. Fail-soft on the
  * observability call; the phase update on `self` is direct and
@@ -56,51 +57,26 @@ export function setPhase(self, toState, trigger) {
     catch { /* observability is non-critical */ }
 }
 /**
- * [B'.5] Identify the original phase-based warm-rejoin case. The /ws
- * upgrade classifier below also recognizes headless sessions whose
- * lifecycle phase does not describe a real terminal attachment.
+ * Decide what a /ws upgrade should do with the session it lands on.
  *
- * Conditions for warm rejoin:
- *   1. Phase = 'drained' (a wsClose / wsError fired since last init).
- *   2. Kernel + Shell + Terminal are still alive in-memory (the
- *      [B'.5] change to wsClose stopped nulling them).
- *   3. Same isolate (no DO eviction since the close).
+ *   - cold:      no session to join. Either nothing was ever built, or a
+ *                previous teardown left the object half-built. A Shell
+ *                without its Kernel or its Terminal serves nobody, and
+ *                nothing else rebuilds one, so the upgrade does.
+ *   - conflict:  another browser terminal holds this session. The caller
+ *                answers 409, which is what stops two tabs from driving
+ *                one shell. See `shell-socket.ts` for what proves that a
+ *                socket still has a peer on it.
+ *   - warm-join: the session is built and unattended. Skip the rebuild
+ *                and hand the live Shell to the incoming socket.
  *
+ * The caller classifies BEFORE it accepts the incoming socket, so the
+ * upgrade cannot count itself as the incumbent.
  */
-export function isWarmRejoin(self) {
-    return self._b4Phase === 'drained'
-        && self.shell != null
-        && self.terminal != null
-        && self.kernel != null;
-}
-/**
- * Classify a shell WebSocket upgrade from the actual attachment state.
- * A non-null Shell can belong to a headless programmatic boot, so only an
- * open socket tagged as `shell` proves that another browser terminal is
- * currently attached.
- */
-export function classifyWsUpgrade(self, sockets) {
-    if (isWarmRejoin(self))
-        return 'warm-join';
-    if (self.shell == null)
+export function classifyWsUpgrade(self, sockets, now = Date.now()) {
+    if (self.shell == null || self.terminal == null || self.kernel == null)
         return 'cold';
-    if (self.terminal == null || self.kernel == null)
-        return 'conflict';
-    const hasOpenShellSocket = sockets.some((socket) => {
-        if (socket.readyState !== WebSocket.OPEN)
-            return false;
-        try {
-            const attachment = socket.deserializeAttachment();
-            return typeof attachment === 'object'
-                && attachment !== null
-                && 'kind' in attachment
-                && attachment.kind === 'shell';
-        }
-        catch {
-            return false;
-        }
-    });
-    return hasOpenShellSocket ? 'conflict' : 'warm-join';
+    return hasLiveShellOwner(self.ctx, sockets, now) ? 'conflict' : 'warm-join';
 }
 /**
  * [B'.5] Run the warm-rejoin path. Skips Phase B (kernel + shell are

package/dist/session/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA+EH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAa3E,wBAAsB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAosF9E"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA+EH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAa3E,wBAAsB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAitF9E"}

package/dist/session/init.js

@@ -58,8 +58,8 @@ import { installNpmBinFallbackResolver } from '../shell/npm-bin-entrypoints.js';
 import { parseNpmInstallInvocation } from '../npm/install-args.js';
 import { npmLogEnabled } from '../npm/npm-log.js';
 import { materializeNpmBinShims } from '../npm/bin-links.js';
-import { registerGitCommands } from '../git/commands.js';
 import { makeNimbusVerbHandler, createRuntimeCommandHintResolver, } from '../runtime/package-manager.js';
+import { rpcExposeApp, rpcListApps, rpcRemoveApp, rpcRotateLink } from './programmatic.js';
 import { listInstalledRuntimes, rehydrateInstalledRuntimes, registerRunnerFactory, } from '@nimbus-sh/core/runtime/installed-runtimes.js';
 // Runtime factories (clang/python/ruby/bash/wasm) are imported lazily at
 // first-use inside their registered handlers — see the registrations below.
@@ -454,8 +454,13 @@ export async function initSession(self, ws) {
     }));
     // ── Git integration (isomorphic-git) ──
     // ctx + env are passed for clone/fetch/pull which run in a facet to avoid
-    // exhausting the supervisor DO's CPU budget on large repos.
-    registerGitCommands(registry, sqliteFs, self.ctx, self.env);
+    // exhausting the supervisor DO's CPU budget on large repos. The command
+    // module (+ its ~106 KB network-facet dependency) is loaded lazily on the
+    // first `git` invocation so it stays out of the cold script-eval graph.
+    registry.register('git', async (ctx) => {
+        const { runGitCommand } = await import('../git/commands.js');
+        return runGitCommand(ctx, sqliteFs, self.ctx, self.env);
+    });
     // ── runtime package manager: `nimbus install` package manager + runner registry.
     //
     // 1. Register the clang-runner factory FIRST so the rehydration step
@@ -585,6 +590,14 @@ export async function initSession(self, ws) {
             vfs: sqliteFs,
             registry: pkgRegistry,
             getHome: nimbusGetHome,
+            // The application verbs are the session's own (programmatic.ts):
+            // the shell, the SDK and the Agent all reach the same policy.
+            apps: {
+                expose: (target, options) => rpcExposeApp(self, target, options),
+                list: () => rpcListApps(self),
+                rotateLink: (target) => rpcRotateLink(self, target),
+                remove: (target) => rpcRemoveApp(self, target),
+            },
             warmRuntime: async (target, ctx) => {
                 // The runtime name, which is what `nimbus install python` installs
                 // — not the name the user typed. Left as 'python' through the
@@ -689,7 +702,7 @@ export async function initSession(self, ws) {
             getEsbuild: () => {
                 if (!self.esbuildService) {
                     self.ensureSqliteFs();
-                    self.esbuildService = new EsbuildService(self.sqliteFs);
+                    self.esbuildService = new EsbuildService(kernelFs);
                 }
                 return self.esbuildService;
             },
@@ -838,7 +851,7 @@ export async function initSession(self, ws) {
             getEsbuild: () => {
                 if (!self.esbuildService) {
                     self.ensureSqliteFs();
-                    self.esbuildService = new EsbuildService(self.sqliteFs);
+                    self.esbuildService = new EsbuildService(kernelFs);
                 }
                 return self.esbuildService;
             },
@@ -886,7 +899,7 @@ export async function initSession(self, ws) {
                     getEsbuild: () => {
                         if (!self.esbuildService) {
                             self.ensureSqliteFs();
-                            self.esbuildService = new EsbuildService(self.sqliteFs);
+                            self.esbuildService = new EsbuildService(kernelFs);
                         }
                         return self.esbuildService;
                     },
@@ -956,7 +969,7 @@ export async function initSession(self, ws) {
         // Lazy-init esbuild service
         if (!self.esbuildService) {
             self.ensureSqliteFs();
-            self.esbuildService = new EsbuildService(self.sqliteFs);
+            self.esbuildService = new EsbuildService(kernelFs);
         }
         // Parse flags
         const flags = {};
@@ -1091,7 +1104,7 @@ export async function initSession(self, ws) {
                     // Transform TS to JS
                     if (cfgName.endsWith('.ts')) {
                         if (!self.esbuildService)
-                            self.esbuildService = new EsbuildService(self.sqliteFs);
+                            self.esbuildService = new EsbuildService(kernelFs);
                         const t = await self.esbuildService.transform(cfgCode, { loader: 'ts', format: 'esm' });
                         cfgCode = t.code;
                     }
@@ -1106,7 +1119,7 @@ export async function initSession(self, ws) {
         // ── vite build ──
         if (args[0] === 'build') {
             if (!self.esbuildService)
-                self.esbuildService = new EsbuildService(self.sqliteFs);
+                self.esbuildService = new EsbuildService(kernelFs);
             const htmlPath = cwd + '/index.html';
             let entryPoint = cwd + '/src/main.tsx';
             let origHtml = '';
@@ -1222,7 +1235,7 @@ export async function initSession(self, ws) {
             }
             // Start vite on the dist directory
             if (!self.esbuildService)
-                self.esbuildService = new EsbuildService(self.sqliteFs);
+                self.esbuildService = new EsbuildService(kernelFs);
             if (self.viteDevServer?.isRunning)
                 self.viteDevServer.stop();
             const previewBasePath = self.viteBasePath;
@@ -1395,7 +1408,7 @@ export async function initSession(self, ws) {
             }
         }
         if (!self.esbuildService)
-            self.esbuildService = new EsbuildService(self.sqliteFs);
+            self.esbuildService = new EsbuildService(kernelFs);
         const previewBasePath = self.viteBasePath;
         const viteDefine = viteConfig.define;
         // Vite dev servers are represented as long-running process-table
@@ -1563,7 +1576,7 @@ export async function initSession(self, ws) {
         // Lazy-init esbuild
         if (!self.esbuildService) {
             self.ensureSqliteFs();
-            self.esbuildService = new EsbuildService(self.sqliteFs);
+            self.esbuildService = new EsbuildService(kernelFs);
         }
         // Parse --root flag; default to the shell cwd so `npm run dev` from
         // a project directory picks up that project's wrangler.jsonc.
@@ -1666,7 +1679,7 @@ export async function initSession(self, ws) {
             kernelFs.writeFile(pkgJsonPath, '{"name":"project","version":"1.0.0","dependencies":{}}\n');
         }
         ctx.stdout.write('\x1b[36mNimbus npm v2 (batched writes)\x1b[0m\n');
-        self.ensureNpmInstaller((msg) => {
+        await self.ensureNpmInstaller((msg) => {
             ctx.stdout.write('[npm] ' + msg + '\n');
         });
         const result = await self.npmInstaller.install(cwd, { packages, pid: ctx.pid });
@@ -2164,7 +2177,7 @@ export async function initSession(self, ws) {
                 ? `${explicitPkgs.length} packages`
                 : 'dependencies from package.json';
             ctx.stdout.write(`\x1b[36mInstalling ${pkgLabel} (npm v2 — batched writes)...\x1b[0m\n`);
-            self.ensureNpmInstaller((msg) => {
+            await self.ensureNpmInstaller((msg) => {
                 ctx.stdout.write('[npm] ' + msg + '\n');
             });
             // `--loglevel` selects npm's own log protocol on stderr, where npm
@@ -2333,7 +2346,7 @@ export async function initSession(self, ws) {
         }
         // Nimbus-native npx install + run path. Routes package installation
         // through NpmInstaller's full-packument resolver.
-        self.ensureNpmInstaller((msg) => ctx.stdout.write('[npm] ' + msg + '\n'));
+        await self.ensureNpmInstaller((msg) => ctx.stdout.write('[npm] ' + msg + '\n'));
         self.ensureSqliteFs();
         const installer = self.npmInstaller;
         const resolveResult = await resolveNpxBinary(installer, self.sqliteFs.as(requireVfsCred('cred' in ctx ? ctx.cred : undefined, 'npx')), ctx.cwd || '/home/user', npxArgs, (msg) => ctx.stdout.write(msg + '\n'), ctx.pid);

package/dist/session/keys.d.ts

@@ -51,6 +51,18 @@ export declare const ATTACH_BOOTSTRAP_JTI_KEY_PREFIX = "attach-bootstrap-jti:";
  * these rows.
  */
 export declare const PORT_CAPABILITY_KEY_PREFIX = "nimbus_preview_capability:";
+/**
+ * Prefix for a durable application's facet-slot row, keyed by owner.
+ * `durable-slot:next` and `durable-slot:free` under the same prefix are the
+ * allocator's counter and free list; `durable-slot:<owner>` pins the owner to
+ * its `app-slot-<n>` facet name for the application's whole life. Owned by
+ * `facets/durable-slots.ts`, the only module that reads or writes these rows.
+ */
+export declare const DURABLE_SLOT_KEY_PREFIX = "durable-slot:";
+/** Atomic resident identity claim: owner → winning pid, released at process termination. */
+export declare const RESIDENT_OWNER_KEY_PREFIX = "resident-owner:";
+/** Owner → retained durable image digests, including images of stopped processes. */
+export declare const DURABLE_IMAGES_KEY_PREFIX = "durable-images:";
 /**
  * Prefix for a named programmatic shell's durable cwd+env, keyed by shell id.
  * One row per id the embedder has actually used; bounded by the embedder's own

package/dist/session/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/session/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH;2EAC2E;AAC3E,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;yDAEyD;AACzD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;0DAC0D;AAC1D,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;uBAEuB;AACvB,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;;4EAG4E;AAC5E,eAAO,MAAM,+BAA+B,0BAA0B,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/session/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH;2EAC2E;AAC3E,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;yDAEyD;AACzD,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;0DAC0D;AAC1D,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;uBAEuB;AACvB,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;;4EAG4E;AAC5E,eAAO,MAAM,+BAA+B,0BAA0B,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AAEvD,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAE3D,qFAAqF;AACrF,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC"}

package/dist/session/keys.js

@@ -55,6 +55,18 @@ export const ATTACH_BOOTSTRAP_JTI_KEY_PREFIX = 'attach-bootstrap-jti:';
  * these rows.
  */
 export const PORT_CAPABILITY_KEY_PREFIX = 'nimbus_preview_capability:';
+/**
+ * Prefix for a durable application's facet-slot row, keyed by owner.
+ * `durable-slot:next` and `durable-slot:free` under the same prefix are the
+ * allocator's counter and free list; `durable-slot:<owner>` pins the owner to
+ * its `app-slot-<n>` facet name for the application's whole life. Owned by
+ * `facets/durable-slots.ts`, the only module that reads or writes these rows.
+ */
+export const DURABLE_SLOT_KEY_PREFIX = 'durable-slot:';
+/** Atomic resident identity claim: owner → winning pid, released at process termination. */
+export const RESIDENT_OWNER_KEY_PREFIX = 'resident-owner:';
+/** Owner → retained durable image digests, including images of stopped processes. */
+export const DURABLE_IMAGES_KEY_PREFIX = 'durable-images:';
 /**
  * Prefix for a named programmatic shell's durable cwd+env, keyed by shell id.
  * One row per id the embedder has actually used; bounded by the embedder's own

package/dist/session/nimbus-session.d.ts

@@ -15,13 +15,14 @@ import { SqliteRuntimeFsBridge } from '@nimbus-sh/core/runtime/sqlite-runtime-fs
 import { type VfsAcquireResult, type VfsListPage } from '@nimbus-sh/core/runtime/os-contracts.js';
 import type { WsHibernationConfigResult } from './hibernation.js';
 import { PortRegistry } from '@nimbus-sh/core/runtime/port-registry.js';
-import { EsbuildService } from '@nimbus-sh/core/runtime/esbuild-service.js';
 import { ViteDevServer } from '../facets/vite-dev-server.js';
 import { CirrusReal } from '../facets/cirrus-real.js';
+import { EsbuildService } from '@nimbus-sh/core/runtime/esbuild-service.js';
 import { NimbusWrangler } from '../wrangler/nimbus-wrangler.js';
-import { NpmInstaller } from '../npm/installer.js';
+import type { NpmInstaller } from '../npm/installer.js';
 import { type TryEnableReplicasResult as _W12EnableResult } from '../replica/routing.js';
 import * as _rpc from './rpc.js';
+import type { SupervisorOpEnvelope } from '@nimbus-sh/core/workspace/supervisor-op.js';
 import type { HostedHttpRequest, HostedHttpResponse } from '@nimbus-sh/fabric/process-host.js';
 import { WebSocketRelay } from './ws-relay.js';
 import * as _programmatic from './programmatic.js';
@@ -48,7 +49,6 @@ export declare function renderMotdBanner(version: string): string;
 export declare function renderWelcomeMarkdown(version: string): string;
 export declare class NimbusSession extends CloudflareDurableObject {
     sqliteFs: SqliteVFS | null;
-    runtimeFsBridges: Map<number, SqliteRuntimeFsBridge> | null;
     kernel: Kernel | null;
     shell: Shell | null;
     shellProcessPid: number | null;
@@ -179,6 +179,13 @@ export declare class NimbusSession extends CloudflareDurableObject {
     sessionBasePath: string;
     /** Have we attempted to hydrate sessionBasePath from storage yet? */
     sessionBasePathHydrated: boolean;
+    /**
+     * The origin this session was last reached at (`https://host`), remembered
+     * beside the base path so the session can spell a path-form URL for one
+     * of its own applications — `nimbus expose` printing one, `apps.list`
+     * carrying one — on a deployment with no preview-host suffix.
+     */
+    sessionOrigin: string;
     /**
      * Has the "wrangler is aliased to nimbus-wrangler" banner been shown
      * this session? Reset on WebSocket close/reopen so a reconnecting user
@@ -249,6 +256,20 @@ export declare class NimbusSession extends CloudflareDurableObject {
      * get/put, so two concurrent exchanges cannot both observe "absent".
      */
     _rpcConsumeAttachBootstrap(jti: string): Promise<boolean>;
+    /**
+     * The one supervisor-op handler this session's bindings, loopback stubs and
+     * `_rpc*` delegates all dispatch through — native filesystem ops against
+     * the shared bridge store, session overrides for the accounting-carrying
+     * reads and the output stream, and the canonical route table for the rest.
+     * Lazy: sqliteFs exists only after ensureSqliteFs().
+     */
+    private _supervisorOps;
+    private supervisorOps;
+    /** The pid-keyed filesystem bridge behind the supervisor ops. */
+    supervisorBridge(pid?: number): SqliteRuntimeFsBridge;
+    /** Drop a dead pid's supervisor bridge — its credential stops being valid. */
+    supervisorForgetBridge(pid: number): void;
+    supervisorOp(envelope: SupervisorOpEnvelope): Promise<unknown>;
     _rpcReadFile(path: string, pid?: number): Promise<string | null>;
     _rpcReadFileBytes(path: string, pid?: number): Promise<Uint8Array | null>;
     _rpcInnerDoFetch(req: any): Promise<any>;
@@ -437,12 +458,43 @@ export declare class NimbusSession extends CloudflareDurableObject {
         exit: import("@nimbus-sh/core/runtime/process-logs.js").ProcessExitInfo | null;
     }>;
     _rpcListPorts(): Promise<_programmatic.SerializedPort[]>;
-    _rpcExposePort(port: number): Promise<{
+    _rpcExposePort(port: number, options?: {
+        visibility?: 'scoped' | 'public';
+        name?: string;
+    }): Promise<{
         port: number;
         listening: boolean;
         pid: number | null;
         registeredAt: number | null;
         capability: string | null;
+        visibility: "scoped" | "public";
+        owner: string | null;
+        name: string | null;
+    }>;
+    _rpcExposeApp(target: _programmatic.AppTarget, options?: {
+        visibility?: 'scoped' | 'public';
+        name?: string;
+    }): Promise<_programmatic.ExposedAppResult>;
+    _rpcListApps(): Promise<_programmatic.ListedApp[]>;
+    _rpcRotateLink(target: _programmatic.AppTarget): Promise<_programmatic.ExposedAppResult>;
+    _rpcRemoveApp(target: _programmatic.AppTarget): Promise<{
+        owner: string;
+        removed: boolean;
+        port: number | null;
+    }>;
+    _rpcEnsureDurableApp(input: {
+        owner: string;
+        preferredPort?: number;
+        visibility?: 'scoped' | 'public';
+    }): Promise<{
+        port: number;
+        capability: string | null;
+        visibility: "scoped" | "public";
+    }>;
+    _rpcRemoveDurableApp(owner: string): Promise<{
+        owner: string;
+        removed: boolean;
+        port: number | null;
     }>;
     _rpcUnexposePort(port: number): Promise<{
         port: number;
@@ -450,6 +502,12 @@ export declare class NimbusSession extends CloudflareDurableObject {
     }>;
     /** Capability-authenticated port route, for an embedder holding the token. */
     _rpcRouteCapabilityPort(port: number, capability: string, request: Request, innerPath: string): Promise<Response>;
+    /**
+     * The port route's recovery seam: a durable application journalled but
+     * dead is re-driven on demand rather than left for the alarm pump. The
+     * manager decides 'started' | 'absent' | 'failed'; the route maps them.
+     */
+    ensureDurableAppOnPort(port: number): Promise<'started' | 'absent' | 'failed'>;
     _rpcDeleteFile(path: string, options?: {
         recursive?: boolean;
     }): Promise<void>;
@@ -546,7 +604,7 @@ export declare class NimbusSession extends CloudflareDurableObject {
      * All concurrent fetches share ONE worker — no port exhaustion.
      */
     buildFetchFn(log?: (msg: string) => void): ((url: string, init?: RequestInit) => Promise<Response>) | undefined;
-    ensureNpmInstaller(onProgress?: (msg: string) => void): void;
+    ensureNpmInstaller(onProgress?: (msg: string) => void): Promise<void>;
     /**
      * Read an environment flag with default-on semantics. Mirrors the
      * shouldUseFacetPool / shouldUseFacetResolver / shouldUseBatchFacet