@nimbus-sh/worker 0.6.0 → 0.7.0

package/dist/session/rpc.js

@@ -21,7 +21,7 @@
  * these ~3 sites would each need ctx threaded through; cast at boundary
  * is acceptable per plan §IX recommendation 1.
  */
-import { enc } from '@nimbus-sh/core/_shared/bytes.js';
+import { enc, StreamTextDecoders } from '@nimbus-sh/core/_shared/bytes.js';
 import { normalizeTerminalNewlines } from '@nimbus-sh/core/_shared/terminal.js';
 import { disposeRpcResource } from '@nimbus-sh/platform/rpc-dispose.js';
 import { getInnerDoClass } from '@nimbus-sh/fabric/inner-do-registry.js';
@@ -38,11 +38,11 @@ import { recordFailure, getLastRpcFrame, getLastFacetId, } from '@nimbus-sh/plat
 import { classifyError } from '@nimbus-sh/platform/oom-classify.js';
 import { acquireSupervisorReadAllocation, } from '@nimbus-sh/platform/heavy-alloc-coord.js';
 import { rpcPayloadEnd, rpcPayloadStart, } from '@nimbus-sh/platform/diag-counters.js';
-import { CRED_KERNEL, CRED_SESSION_USER, } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { CRED_KERNEL, CRED_SESSION_USER, requireVfsCred, } from '@nimbus-sh/core/runtime/os-contracts.js';
 import { MAX_RPC_SAFE_PAYLOAD_BYTES } from '@nimbus-sh/platform/limits.js';
 import { FS_LIST_PAGE_LIMIT, FS_READ_BATCH_PATH_LIMIT, FS_READ_BATCH_REQUEST_BYTES, } from '@nimbus-sh/core/constants.js';
 import { routeSessionLoopback } from './loopback.js';
-import { clearPortCapability } from './port-capability.js';
+import { registerServingPort } from './serving-port.js';
 import { normalizeVfsPath, parentVfsPath } from '@nimbus-sh/core/vfs/path.js';
 import { z } from 'zod/v4';
 const WriteBatchInodeSchema = z.object({
@@ -81,9 +81,22 @@ function processPid(pid) {
  * binding, the remote `/rpc` dispatcher, the static asset server — and those
  * act as the unprivileged session user, the same identity `exec` runs as.
  * A supplied-but-invalid pid still throws: only an absent pid is a host call.
+ *
+ * A host call may name the credential it acts as (`cred`) — the same
+ * `SqliteVFS.as(cred)` view an in-process caller has, reached over the RPC
+ * surface. That is the embedder's trusted surface: the SDK over the DO
+ * binding hands it through `files.as(cred)`; the remote `/rpc` dispatcher
+ * refuses it, exactly as it refuses `cred` on exec, because a token
+ * authenticates a session and not a user inside it. Absent, every file op
+ * keeps the identity it has always had. A pid and a cred together are
+ * refused, so a process can never widen its own identity.
  */
-function callerCred(self, pid) {
-    return pid === undefined ? CRED_SESSION_USER : self.processes.cred(processPid(pid));
+function callerCred(self, pid, cred) {
+    if (pid === undefined)
+        return cred === undefined ? CRED_SESSION_USER : requireVfsCred(cred, 'filesystem RPC');
+    if (cred !== undefined)
+        throw new Error('filesystem RPC: a process acts as its own credential; cred cannot ride a pid');
+    return self.processes.cred(processPid(pid));
 }
 export function checkedReadPayloadBytes(bytes) {
     if (!Number.isSafeInteger(bytes) || bytes < 0) {
@@ -128,16 +141,16 @@ export async function withReadAllocation(bytes, read) {
  * The body lives in `buildSessionSupervisorOps`'s `readFile` override so
  * direct `_rpc*` calls and the supervisor envelope share it.
  */
-export async function _rpcReadFile(self, path, pid) {
-    return self.supervisorOp({ op: 'readFile', args: [path], pid });
+export async function _rpcReadFile(self, path, pid, cred) {
+    return self.supervisorOp({ op: 'readFile', args: [path], pid, cred });
 }
 /**
  * Read a file as raw bytes (Uint8Array). Used by git network facet for
  * binary .git/objects/** and packfile reads, where TextDecoder/TextEncoder
  * round-tripping through readFile (string) would corrupt bytes.
  */
-export async function _rpcReadFileBytes(self, path, pid) {
-    return self.supervisorOp({ op: 'readFileBytes', args: [path], pid });
+export async function _rpcReadFileBytes(self, path, pid, cred) {
+    return self.supervisorOp({ op: 'readFileBytes', args: [path], pid, cred });
 }
 /**
  * Phase-3 inner-DO fetch dispatcher. Called by NimbusDOStub.fetch()
@@ -202,11 +215,11 @@ export async function _rpcInnerDoFetch(self, req) {
         };
     }
 }
-export async function _rpcWriteFile(self, path, content, pid) {
+export async function _rpcWriteFile(self, path, content, pid, cred) {
     // binary-fs wave: the bridge's writeFile already accepts
     // string | Uint8Array — the shape arrives unchanged across structured
     // clone.
-    return self.supervisorOp({ op: 'writeFile', args: [path, content], pid });
+    return self.supervisorOp({ op: 'writeFile', args: [path, content], pid, cred });
 }
 /**
  * Write one host-governed file at a session root and let ordinary Unix
@@ -239,11 +252,11 @@ export async function _rpcWriteProtectedRootFile(self, rootPath, path, content)
     fs.chown(protectedPath, CRED_KERNEL.uid, CRED_KERNEL.gid);
     fs.chmod(protectedPath, 0o444);
 }
-export async function _rpcStat(self, path, pid) {
-    return self.supervisorOp({ op: 'stat', args: [path], pid });
+export async function _rpcStat(self, path, pid, cred) {
+    return self.supervisorOp({ op: 'stat', args: [path], pid, cred });
 }
-export async function _rpcLstat(self, path, pid) {
-    return self.supervisorOp({ op: 'lstat', args: [path], pid });
+export async function _rpcLstat(self, path, pid, cred) {
+    return self.supervisorOp({ op: 'lstat', args: [path], pid, cred });
 }
 export async function _rpcHasLegacySymlinkUnder(self, path, pid) {
     return self.supervisorOp({ op: 'hasLegacySymlinkUnder', args: [path], pid });
@@ -251,8 +264,8 @@ export async function _rpcHasLegacySymlinkUnder(self, path, pid) {
 export async function _rpcUtimes(self, path, atimeMs, mtimeMs, pid) {
     await self.supervisorOp({ op: 'utimes', args: [path, atimeMs, mtimeMs], pid });
 }
-export async function _rpcChmod(self, path, mode, pid) {
-    await self.supervisorOp({ op: 'chmod', args: [path, mode], pid });
+export async function _rpcChmod(self, path, mode, pid, cred) {
+    await self.supervisorOp({ op: 'chmod', args: [path, mode], pid, cred });
 }
 export async function _rpcAccess(self, path, mode, pid) {
     await self.supervisorBridge(pid).access(path, mode);
@@ -263,20 +276,20 @@ export async function _rpcChown(self, path, uid, gid, pid, options) {
 export async function _rpcSetUmask(self, mask, pid) {
     return self.processes.setUmask(processPid(pid), mask);
 }
-export async function _rpcReaddir(self, path, pid) {
-    return self.supervisorOp({ op: 'readdir', args: [path], pid });
+export async function _rpcReaddir(self, path, pid, cred) {
+    return self.supervisorOp({ op: 'readdir', args: [path], pid, cred });
 }
-export async function _rpcExists(self, path, pid) {
-    return self.supervisorOp({ op: 'exists', args: [path], pid });
+export async function _rpcExists(self, path, pid, cred) {
+    return self.supervisorOp({ op: 'exists', args: [path], pid, cred });
 }
-export async function _rpcMkdir(self, path, pid) {
-    await self.supervisorOp({ op: 'mkdir', args: [path], pid });
+export async function _rpcMkdir(self, path, pid, cred) {
+    await self.supervisorOp({ op: 'mkdir', args: [path], pid, cred });
 }
 export async function _rpcRmdir(self, path, pid) {
     await self.supervisorOp({ op: 'rmdir', args: [path], pid });
 }
-export async function _rpcRename(self, from, to, pid) {
-    await self.supervisorOp({ op: 'rename', args: [from, to], pid });
+export async function _rpcRename(self, from, to, pid, cred) {
+    await self.supervisorOp({ op: 'rename', args: [from, to], pid, cred });
 }
 export async function _rpcReadlink(self, path, pid) {
     return self.supervisorOp({ op: 'readlink', args: [path], pid });
@@ -393,8 +406,8 @@ export async function _rpcFsList(self, after, limit, pid) {
     const args = FsListArgsSchema.parse({ after: after ?? null, limit: limit ?? null });
     return self.supervisorBridge(pid).list(args.after, args.limit ?? undefined);
 }
-export async function _rpcFsReadRange(self, path, offset, length, pid) {
-    return self.supervisorOp({ op: 'fsReadRange', args: [path, offset, length], pid });
+export async function _rpcFsReadRange(self, path, offset, length, pid, cred) {
+    return self.supervisorOp({ op: 'fsReadRange', args: [path, offset, length], pid, cred });
 }
 /**
  * The same read, through the same process credential and the same bridge, with
@@ -652,6 +665,17 @@ function isPriorGenerationPid(self, pid) {
     return pid > 0 && pid <= self.processes.pidBase;
 }
 export const PRIOR_GENERATION_EXIT_REASON = 'process lost: instance reset';
+/**
+ * A process's output arrives as bytes: the relay from the facet carries
+ * Uint8Array so a binary protocol or an image survives it. The two text
+ * consumers here decode at their own edge — the log ring inside
+ * `appendOutputBytes`, and the terminal tee through these per-(pid, stream)
+ * streaming decoders, dropped when the process reports its exit.
+ */
+const _terminalTeeDecoders = new StreamTextDecoders();
+function decodeForTerminal(pid, stream, data) {
+    return _terminalTeeDecoders.decode(`${pid}:${stream}`, data);
+}
 export async function _rpcStdout(self, pid, data) {
     // Prior-generation straggler (facet outlived a DO instance reset): drop —
     // its output must not merge into this generation's logs or shell.
@@ -664,9 +688,11 @@ export async function _rpcStdout(self, pid, data) {
     // un-traceable facets.
     try {
         if (pid > 0)
-            self.processes.appendOutput(pid, 'stdout', data);
+            self.processes.appendOutputBytes(pid, 'stdout', data);
         if (self.terminal && shouldMirrorProcessOutputToShell(self, pid)) {
-            self.terminal.write(normalizeTerminalNewlines(data));
+            const text = decodeForTerminal(pid, 'stdout', data);
+            if (text.length > 0)
+                self.terminal.write(normalizeTerminalNewlines(text));
         }
     }
     catch (e) {
@@ -687,11 +713,13 @@ export async function _rpcStderr(self, pid, data) {
         return;
     try {
         if (pid > 0)
-            self.processes.appendOutput(pid, 'stderr', data);
+            self.processes.appendOutputBytes(pid, 'stderr', data);
         // Terminal gets red wrapping; the ring buffer keeps it raw so the
         // stream tag can drive color decisions at replay time.
         if (self.terminal && shouldMirrorProcessOutputToShell(self, pid)) {
-            self.terminal.write(`\x1b[31m${normalizeTerminalNewlines(data)}\x1b[0m`);
+            const text = decodeForTerminal(pid, 'stderr', data);
+            if (text.length > 0)
+                self.terminal.write(`\x1b[31m${normalizeTerminalNewlines(text)}\x1b[0m`);
         }
     }
     catch (e) {
@@ -739,6 +767,12 @@ export async function _rpcReportExit(self, pid, code, tail) {
         self.processes.closeInput(pid);
     }
     catch { }
+    for (const stream of ['stdout', 'stderr']) {
+        const rest = _terminalTeeDecoders.drop(`${pid}:${stream}`);
+        if (rest.length > 0 && self.terminal && shouldMirrorProcessOutputToShell(self, pid)) {
+            self.terminal.write(normalizeTerminalNewlines(rest));
+        }
+    }
     // A relayed socket is held open by the supervisor on the process's behalf,
     // so it does not die when the facet does. Nothing else would ever close
     // it, and a live one keeps buffering into the supervisor's heap.
@@ -962,23 +996,21 @@ export async function _rpcPrefetch(self, cwd, entryCode) {
     // want to refresh the bundle mid-execution; today only the
     // SupervisorRPC.prefetch surface exposes it externally.
     self.ensureSqliteFs();
-    const { prefetchForRequire } = await import('@nimbus-sh/core/runtime/require-resolver.js');
-    return prefetchForRequire(self.sqliteFs, entryCode, cwd).bundle;
+    // Dynamic import stays: keeps the resolver out of this module's eager
+    // graph (the original reason for the lazy load above).
+    const { prefetchForRequire, ClosureBoundExceededError } = await import('@nimbus-sh/core/runtime/require-resolver.js');
+    const outcome = prefetchForRequire(self.sqliteFs, entryCode, cwd);
+    if ('kind' in outcome)
+        throw new ClosureBoundExceededError(outcome);
+    return outcome.bundle;
 }
 export async function _rpcRegisterPort(self, pid, port) {
     // Port registration stores the facet association — the actual facet stub
-    // is stored by FacetManager separately. Registration goes through the
-    // manager so a pid binding a reserved port inherits the reservation's
-    // durable contract: its journal row is stamped with the port's owner and
-    // the stored capability is re-adopted rather than retired.
-    if (self.facetManager) {
-        await self.facetManager.registerPort(pid, port);
-        return;
-    }
-    // No facet manager yet means nothing resident is running — a bare
-    // registration retires the previous occupant's preview capability.
-    await clearPortCapability(self, port);
-    self.portRegistry.register(port, pid);
+    // is stored by FacetManager separately. The same registration every
+    // serving process uses: through the manager, so the pid's identity —
+    // its journal row, or the process table — decides whether a reservation's
+    // capability is re-adopted or retired.
+    await registerServingPort(self, pid, port);
 }
 export async function _rpcUnregisterPort(self, port) {
     self.portRegistry.unregister(port);
@@ -1019,14 +1051,29 @@ export async function _rpcCpSpawn(self, req) {
     const fpm = self._ensureFacetProcessManager();
     return fpm.spawn(req);
 }
+/**
+ * A child's stdin is bytes: esbuild's service protocol is binary packets,
+ * and so is any pipe carrying an image or an archive. The facet queue and
+ * this contract carry Uint8Array; the interactive input store is a text
+ * channel fed by a terminal, so it decodes at its own edge with a streaming
+ * decoder held per child, which keeps a multibyte character split across two
+ * writes correct.
+ */
+const _cpStdinDecoders = new Map();
 export async function _rpcCpStdinWrite(self, childPid, data) {
     if (self.processes.hasInput(childPid)) {
-        return self.processes.writeInput(childPid, data);
+        let decoder = _cpStdinDecoders.get(childPid);
+        if (!decoder) {
+            decoder = new TextDecoder('utf-8');
+            _cpStdinDecoders.set(childPid, decoder);
+        }
+        return self.processes.writeInput(childPid, decoder.decode(data, { stream: true }));
     }
     const fpm = self._ensureFacetProcessManager();
     return fpm.stdinWrite(childPid, data);
 }
 export async function _rpcCpStdinEnd(self, childPid) {
+    _cpStdinDecoders.delete(childPid);
     if (self.processes.hasInput(childPid)) {
         self.processes.endInput(childPid);
         return;
@@ -1043,7 +1090,10 @@ export async function _rpcCpReadStdin(self, childPid, waitMs) {
         return { signal: 'SIGKILL', ended: true };
     }
     if (self.processes.hasInput(childPid)) {
-        return self.processes.readInput(childPid, waitMs);
+        // The interactive input store holds text packets; the child's stdin
+        // pump takes bytes, so this text producer encodes at its edge.
+        const packet = await self.processes.readInput(childPid, waitMs);
+        return { ...packet, data: enc.encode(packet.data) };
     }
     const fpm = self._ensureFacetProcessManager();
     return fpm.cpReadStdin(childPid, waitMs);

package/dist/session/serving-port.d.ts

@@ -0,0 +1,27 @@
+/**
+ * session/serving-port.ts — how a process that serves a port is registered.
+ *
+ * One path for every serving pid, whether the facet manager launched it (a
+ * node/runtime resident with a journal row) or the session runs it in
+ * process (the Cirrus Vite shim, real-vite, `vite preview`, a builtin that
+ * adopted a shell wrapper pid). The manager's registration stamps the
+ * journal row when there is one, reads the process table's identity when
+ * there is not, and re-adopts a reservation the identity owns instead of
+ * retiring its capability — which is what lets a dev server exposed under a
+ * name come back on the same shared link after a restart or a hibernation.
+ *
+ * The bare registration below is only for a session that has no manager at
+ * all; every DO route that serves a port stands one up first.
+ */
+import type { PortRegistry } from '@nimbus-sh/core/runtime/port-registry.js';
+import { type PortCapabilityHost } from './port-capability.js';
+export interface ServingPortHost {
+    ctx: PortCapabilityHost['ctx'];
+    portRegistry: PortRegistry;
+    facetManager: {
+        registerPort(pid: number, port: number): Promise<void>;
+    } | null;
+    ensureFacetManager?(): void;
+}
+export declare function registerServingPort(self: ServingPortHost, pid: number, port: number): Promise<void>;
+//# sourceMappingURL=serving-port.d.ts.map

package/dist/session/serving-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serving-port.d.ts","sourceRoot":"","sources":["../../src/session/serving-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAuB,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE;QAAE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IAChF,kBAAkB,CAAC,IAAI,IAAI,CAAC;CAC7B;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUzG"}

package/dist/session/serving-port.js

@@ -0,0 +1,27 @@
+/**
+ * session/serving-port.ts — how a process that serves a port is registered.
+ *
+ * One path for every serving pid, whether the facet manager launched it (a
+ * node/runtime resident with a journal row) or the session runs it in
+ * process (the Cirrus Vite shim, real-vite, `vite preview`, a builtin that
+ * adopted a shell wrapper pid). The manager's registration stamps the
+ * journal row when there is one, reads the process table's identity when
+ * there is not, and re-adopts a reservation the identity owns instead of
+ * retiring its capability — which is what lets a dev server exposed under a
+ * name come back on the same shared link after a restart or a hibernation.
+ *
+ * The bare registration below is only for a session that has no manager at
+ * all; every DO route that serves a port stands one up first.
+ */
+import { clearPortCapability } from './port-capability.js';
+export async function registerServingPort(self, pid, port) {
+    self.ensureFacetManager?.();
+    if (self.facetManager) {
+        await self.facetManager.registerPort(pid, port);
+        return;
+    }
+    // No manager means nothing resident is running — a bare registration
+    // retires the previous occupant's preview capability.
+    await clearPortCapability(self, port);
+    self.portRegistry.register(port, pid);
+}

package/dist/session/start-real-vite.d.ts

@@ -26,6 +26,18 @@ export interface StartRealViteOptions {
     /** Directory the user's vite.config.{ts,js,mjs} is searched in (the shell
      *  cwd at start). Persisted so restore can re-bundle it. */
     configDir: string;
+    /**
+     * The process-table cwd+argv the dev server's pid is given — what the app
+     * verbs derive its identity from. The `vite` builtin passes the wrapper
+     * pid's own (or the argv it was invoked with); restore passes what was
+     * persisted, so the restored server is the same application. Absent for
+     * configs written before identity was persisted: those keep the bare
+     * `[]` at the root, the same across every restore.
+     */
+    identity?: {
+        cwd: string;
+        argv: string[];
+    };
     /** Optional abort signal threaded into the heavy-alloc gate. */
     signal?: AbortSignal;
     /** Called with a human message if vite.config pre-bundling fails (so the

package/dist/session/start-real-vite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start-real-vite.d.ts","sourceRoot":"","sources":["../../src/session/start-real-vite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAMtD,MAAM,WAAW,oBAAoB;IACnC,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB;gEAC4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;4EACwE;IACxE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8GvG"}
+{"version":3,"file":"start-real-vite.d.ts","sourceRoot":"","sources":["../../src/session/start-real-vite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAMtD,MAAM,WAAW,oBAAoB;IACnC,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB;gEAC4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3C,gEAAgE;IAChE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;4EACwE;IACxE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8GvG"}

package/dist/session/start-real-vite.js

@@ -22,7 +22,7 @@ import { CirrusReal } from '../facets/cirrus-real.js';
 import { makeLongRunningPortStub } from '@nimbus-sh/core/runtime/long-running-handle.js';
 import { acquireHeavyAlloc } from '@nimbus-sh/platform/heavy-alloc-coord.js';
 import { VITE_CONFIG_KEY } from './keys.js';
-import { clearPortCapability } from './port-capability.js';
+import { registerServingPort } from './serving-port.js';
 /**
  * Boot a cirrus-real dev server on `self`, register its port, and persist the
  * config restore needs. `self` is the session host (RoutesHost/InitHost = any).
@@ -103,7 +103,7 @@ export async function startRealVite(self, opts) {
         });
         self.cirrusReal = cirrusReal;
         // Reserve a PID so `ps`/logs show it like any other facet.
-        const entry = self.processes.spawn('vite (real, ' + opts.root + ')', [], opts.root, { longRunning: true });
+        const entry = self.processes.spawn('vite (real, ' + opts.root + ')', opts.identity?.argv ?? [], opts.identity?.cwd ?? opts.root, { longRunning: true });
         // start() is async — it ASSETS-fetches the Vite/plugin-react bundles on
         // first invocation (cached per-isolate after).
         await cirrusReal.start(self.ctx, entry.pid);
@@ -111,8 +111,7 @@ export async function startRealVite(self, opts) {
         // only difference is which handler.handleRequest the stub forwards into.
         const cirrusStub = makeLongRunningPortStub(cirrusReal);
         self.portRegistry.bindFacetStub(entry.pid, cirrusStub);
-        await clearPortCapability(self, opts.port);
-        self.portRegistry.register(opts.port, entry.pid);
+        await registerServingPort(self, entry.pid, opts.port);
         self._viteShimPid = entry.pid;
         self._viteShimPort = opts.port;
         // Persist so the session recovers after hibernation — same key the shim
@@ -125,6 +124,7 @@ export async function startRealVite(self, opts) {
                 port: opts.port,
                 basePath: opts.basePath,
                 configDir: opts.configDir,
+                identity: { cwd: entry.cwd, argv: entry.argv },
             });
         }
         catch { /* persistence is best-effort; the server still serves now */ }

package/dist/session/supervisor-op.d.ts

@@ -29,8 +29,8 @@ export interface SessionSupervisorHost {
     ensureSqliteFs(): void;
     readonly sqliteFs: SqliteVFS | null;
     readonly processes: SessionProcessSupervisor;
-    _rpcStdout(pid: number, data: string): Promise<void>;
-    _rpcStderr(pid: number, data: string): Promise<void>;
+    _rpcStdout(pid: number, data: Uint8Array): Promise<void>;
+    _rpcStderr(pid: number, data: Uint8Array): Promise<void>;
 }
 export interface SessionSupervisorOps {
     readonly dispatch: (envelope: SupervisorOpEnvelope) => Promise<unknown>;

package/dist/session/supervisor-op.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor-op.d.ts","sourceRoot":"","sources":["../../src/session/supervisor-op.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAI1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AAQtG;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,IAAI,IAAI,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,qBAAqB,CAAC;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,qBAAqB,EAC3B,KAAK,CAAC,EAAE,uBAAuB,GAC9B,oBAAoB,CA8EtB"}
+{"version":3,"file":"supervisor-op.d.ts","sourceRoot":"","sources":["../../src/session/supervisor-op.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAI1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AAQtG;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,IAAI,IAAI,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,qBAAqB,CAAC;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAQD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,qBAAqB,EAC3B,KAAK,CAAC,EAAE,uBAAuB,GAC9B,oBAAoB,CA8EtB"}

package/dist/session/supervisor-op.js

@@ -18,6 +18,12 @@
 import { createSupervisorOpHandler, createSupervisorBridgeStore, } from '@nimbus-sh/core/workspace/supervisor-op.js';
 import { FsReadRangeArgsSchema, rangeReadBytes, withReadAllocation, } from './rpc.js';
 import { dec } from '@nimbus-sh/core/_shared/bytes.js';
+/** The stdout/stderr ops carry bytes; anything else is a caller bug, named. */
+function outputBytesArg(value) {
+    if (value instanceof Uint8Array)
+        return value;
+    throw new Error(`supervisor op stdout/stderr: expected bytes, got ${typeof value}`);
+}
 export function buildSessionSupervisorOps(host, store) {
     host.ensureSqliteFs();
     store ??= createSupervisorBridgeStore({ vfs: host.sqliteFs, processes: host.processes });
@@ -26,7 +32,7 @@ export function buildSessionSupervisorOps(host, store) {
         // alone doesn't know: a read lease sized to what the file can return.
         readFile: async (envelope, tools) => {
             const path = envelope.args?.[0];
-            const fs = tools.bridge(envelope.pid);
+            const fs = tools.bridge(envelope.pid, envelope.cred);
             const stat = await fs.stat(path);
             if (!stat)
                 return null;
@@ -37,7 +43,7 @@ export function buildSessionSupervisorOps(host, store) {
         },
         readFileBytes: async (envelope, tools) => {
             const path = envelope.args?.[0];
-            const fs = tools.bridge(envelope.pid);
+            const fs = tools.bridge(envelope.pid, envelope.cred);
             const stat = await fs.stat(path);
             if (!stat)
                 return null;
@@ -49,7 +55,7 @@ export function buildSessionSupervisorOps(host, store) {
                 offset: envelope.args?.[1],
                 length: envelope.args?.[2],
             });
-            const fs = tools.bridge(envelope.pid);
+            const fs = tools.bridge(envelope.pid, envelope.cred);
             return withReadAllocation(await rangeReadBytes(fs, args.path, args.offset, args.length), () => fs.readRange(args.path, args.offset, args.length));
         },
         fsReadRangeUncached: async (envelope, tools) => {
@@ -58,7 +64,7 @@ export function buildSessionSupervisorOps(host, store) {
                 offset: envelope.args?.[1],
                 length: envelope.args?.[2],
             });
-            const fs = tools.bridge(envelope.pid);
+            const fs = tools.bridge(envelope.pid, envelope.cred);
             return withReadAllocation(await rangeReadBytes(fs, args.path, args.offset, args.length), () => fs.readRange(args.path, args.offset, args.length, { cached: false }));
         },
         // The write stream's decode-drain timestamp starts when the envelope
@@ -73,15 +79,15 @@ export function buildSessionSupervisorOps(host, store) {
             if (pid !== undefined && (!Number.isInteger(pid) || pid <= 0)) {
                 throw new Error('filesystem RPC requires a valid process pid');
             }
-            return tools.vfs.as(tools.cred(pid)).writeStream(envelope.stream, {
+            return tools.vfs.as(tools.cred(pid, envelope.cred)).writeStream(envelope.stream, {
                 decodeDrainStartedAt: performance.now(),
                 mutationOwner: envelope.mutationOwner,
             });
         },
         // stdout/stderr are session methods, not bridge ops: mirroring,
         // log-append and prior-generation filtering all live in _rpcStdout.
-        stdout: (envelope) => host._rpcStdout(envelope.pid ?? 0, envelope.args?.[0]),
-        stderr: (envelope) => host._rpcStderr(envelope.pid ?? 0, envelope.args?.[0]),
+        stdout: (envelope) => host._rpcStdout(envelope.pid ?? 0, outputBytesArg(envelope.args?.[0])),
+        stderr: (envelope) => host._rpcStderr(envelope.pid ?? 0, outputBytesArg(envelope.args?.[0])),
     };
     const dispatch = createSupervisorOpHandler({
         vfs: host.sqliteFs,

package/dist/session/supervisor-rpc.d.ts

@@ -274,8 +274,8 @@ export declare class SupervisorRPC extends WorkerEntrypoint {
     }): Promise<PackumentReadThrough & {
         events: SupervisorCacheStatEvent[];
     }>;
-    stdout(data: string): Promise<void>;
-    stderr(data: string): Promise<void>;
+    stdout(data: Uint8Array): Promise<void>;
+    stderr(data: Uint8Array): Promise<void>;
     /**
      * Report process exit to the supervisor. Called from the facet's own
      * `finally` block after I/O has drained. The supervisor uses this to
@@ -309,12 +309,12 @@ export declare class SupervisorRPC extends WorkerEntrypoint {
     cpSpawn(req: any): Promise<{
         childPid: number;
     }>;
-    cpStdinWrite(childPid: number, data: string): Promise<{
+    cpStdinWrite(childPid: number, data: Uint8Array): Promise<{
         ok: boolean;
     }>;
     cpStdinEnd(childPid: number): Promise<void>;
     cpReadStdin(childPid: number, waitMs: number): Promise<{
-        data: string;
+        data: Uint8Array;
         ended: boolean;
         resize?: {
             columns: number;
@@ -325,14 +325,14 @@ export declare class SupervisorRPC extends WorkerEntrypoint {
     cpReadOutput(childPid: number, fd: 1 | 2, sinceSeq: number, waitMs: number): Promise<{
         chunks: {
             seq: number;
-            data: string;
+            data: Uint8Array;
         }[];
         closed: boolean;
         maxSeq: number;
     }>;
     cpDrainOutput(childPid: number): Promise<{
-        stdout: string;
-        stderr: string;
+        stdout: Uint8Array;
+        stderr: Uint8Array;
         stdoutClosed: boolean;
         stderrClosed: boolean;
     }>;

package/dist/session/supervisor-rpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor-rpc.d.ts","sourceRoot":"","sources":["../../src/session/supervisor-rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAUrE,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAEnF;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AA0C5D,qBAAa,aAAc,SAAQ,gBAAgB;IACjD,2EAA2E;IAC3E,OAAO,CAAC,SAAS;IAyBjB,OAAO,CAAC,GAAG;IAQX,iFAAiF;IACjF,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,SAAS;IAUX,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIpD;;;OAGG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIvD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAStE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIhC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIjC,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAIV,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAIhE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D;;;;;;;;;;OAUG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI1E,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhD;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAIhF;;;;;;;OAOG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAInF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAItD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhF,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAI9C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIpF,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7G,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;OAIG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI3F;;;;;OAKG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAInG;;;;;;;;;;;;OAYG;IACG,WAAW,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAexE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAI5F,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,UAAU,GAAG,WAAW,GAC9B,OAAO,CAAC,MAAM,CAAC;IAMZ,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D;;;;;;;;;;OAUG;IACG,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAgB3E;;;;;;;;;;;;;;;OAeG;IACG,gBAAgB,CACpB,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GACjC,OAAO,CAAC,sBAAsB,CAAC;IAelC;;;;;;;;;;;;OAYG;IACG,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA+BtF;;;;;OAKG;IACH,OAAO,CAAC,GAAG;IAMX;;;;;;;;;;;;;;;;OAgBG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,wBAAwB,EAAE,CAAA;KAAE,CAAC;IAU5E;;;;;OAKG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,UAAU,GAAG,WAAW,GAC9B,OAAO,CAAC,OAAO,CAAC;IAUnB;;;;;;;;;;;;OAYG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,oBAAoB,GAAG;QAAE,MAAM,EAAE,wBAAwB,EAAE,CAAA;KAAE,CAAC;IAQnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC;;;;;;;;OAQG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAMzE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMhE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAWtF,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAIhD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IAItE,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC3D,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAII,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,GAAG,CAAC,EACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAIlF,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;IAI1H,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI1H;;;;;;;OAOG;IACG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACtD,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;KAClD,CAAC;CAGH"}
+{"version":3,"file":"supervisor-rpc.d.ts","sourceRoot":"","sources":["../../src/session/supervisor-rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAStD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAUrE,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAEnF;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AA0C5D,qBAAa,aAAc,SAAQ,gBAAgB;IACjD,2EAA2E;IAC3E,OAAO,CAAC,SAAS;IAyBjB,OAAO,CAAC,GAAG;IAQX,iFAAiF;IACjF,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,SAAS;IAUX,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIpD;;;OAGG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIvD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAStE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIhC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIjC,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACrC,OAAO,CAAC,IAAI,CAAC;IAIV,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAIhE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9C,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D;;;;;;;;;;OAUG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI1E,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhD;;;;;;;;;;;;;;;;OAgBG;IACG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAIhF;;;;;;;OAOG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAInF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAItD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhF,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAI9C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIpF,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7G,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;OAIG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI3F;;;;;OAKG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAInG;;;;;;;;;;;;OAYG;IACG,WAAW,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAexE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAI5F,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,UAAU,GAAG,WAAW,GAC9B,OAAO,CAAC,MAAM,CAAC;IAMZ,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D;;;;;;;;;;OAUG;IACG,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAgB3E;;;;;;;;;;;;;;;OAeG;IACG,gBAAgB,CACpB,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GACjC,OAAO,CAAC,sBAAsB,CAAC;IAelC;;;;;;;;;;;;OAYG;IACG,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA+BtF;;;;;OAKG;IACH,OAAO,CAAC,GAAG;IAMX;;;;;;;;;;;;;;;;OAgBG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,wBAAwB,EAAE,CAAA;KAAE,CAAC;IAU5E;;;;;OAKG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,UAAU,GAAG,WAAW,GAC9B,OAAO,CAAC,OAAO,CAAC;IAUnB;;;;;;;;;;;;OAYG;IACG,YAAY,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,oBAAoB,GAAG;QAAE,MAAM,EAAE,wBAAwB,EAAE,CAAA;KAAE,CAAC;IAYnE,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C;;;;;;;;OAQG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAMzE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMhE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAWtF,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAIhD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IAI1E,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAC3D,IAAI,EAAE,UAAU,CAAC;QACjB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAII,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,CAAC,GAAG,CAAC,EACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,UAAU,CAAA;SAAE,EAAE,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAItF,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;IAIlI,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI1H;;;;;;;OAOG;IACG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACtD,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;KAClD,CAAC;CAGH"}

package/dist/session/supervisor-rpc.js

@@ -497,6 +497,10 @@ export class SupervisorRPC extends WorkerEntrypoint {
         return { ...result, events: _drainCacheEvents(r2) };
     }
     // ── Process I/O ───────────────────────────────────────────────────────
+    //
+    // A process's stdio is bytes end to end: stdout/stderr up, cpStdinWrite
+    // down, cpReadStdin/cpReadOutput/cpDrainOutput in a child's direction. A
+    // text producer encodes at its own edge; a text consumer decodes at its.
     async stdout(data) {
         return this._call(this._op('stdout', [data], { pid: this._reportingPid() }));
     }

package/dist/session/vite-command.d.ts

@@ -0,0 +1,18 @@
+/**
+ * session/vite-command.ts — the `vite` builtin command.
+ *
+ * Extracted from init.ts so the handler can be driven through the
+ * command registry in unit tests — the module's only session coupling
+ * is `self`, the same InitHost view initSession passes to every other
+ * registration.
+ *
+ * Subcommands: `vite` (dev server), `vite build`, `vite preview`,
+ * `vite stop`. Build honours build.outDir with Vite parity: output
+ * writes to the resolved path, only an outDir strictly inside the
+ * project root is emptied first, and the bundle is validated before
+ * old output is cleared.
+ */
+type ViteHost = any;
+export declare function createViteCommand(self: ViteHost): (ctx: any) => Promise<number>;
+export {};
+//# sourceMappingURL=vite-command.d.ts.map

package/dist/session/vite-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vite-command.d.ts","sourceRoot":"","sources":["../../src/session/vite-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAyBH,KAAK,QAAQ,GAAG,GAAG,CAAC;AAEpB,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,IAChC,KAAK,GAAG,KAAG,OAAO,CAAC,MAAM,CAAC,CAmlBzC"}