@nimbus-sh/worker 0.7.0 → 0.8.0

package/dist/runtime/repl-session.js

@@ -11,46 +11,12 @@
  * live in src/runtime/<name>-repl.ts and implement the ReplAdapter
  * interface declared below.
  */
+import { errorText } from '@nimbus-sh/core/_shared/error-text.js';
 import { normalizeTerminalNewlines } from '@nimbus-sh/core/_shared/terminal.js';
-/**
- * Manages an interactive REPL session: stdin buffering with minimal
- * readline UX (line-mode), output routing to the WS terminal, prompt
- * rendering, and adapter dispatch.
- *
- * The shell creates a ReplSession when a runtime's `startRepl` hook
- * fires; the session installs a `replCallback` on the WebSocketTerminal
- * (via attachRepl()) and runs until the adapter signals 'exit' or the
- * user presses Ctrl-D on an empty line.
- *
- * No setTimeout in the read loop — the session is driven entirely by
- * keystroke arrival on the WS, with awaits gating the adapter's push().
- */
 export class ReplSession {
     adapter;
+    detachRepl = null;
     terminal;
-    detachReplCb = null;
-    /**
-     * REPL-R7-1 (2026-05-12): optional reference to the Nimbus shell.
-     *
-     * Required when the REPL is launched from a multi-line WS frame
-     * (e.g. user pastes `python\nexit(7)`). The shell input handler
-     * splits the frame on \r\n and pushes lines AFTER
-     * the first into `shell.pasteQueue`, which is drained ONLY when
-     * the shell becomes idle (after executeLine returns). While our
-     * REPL is running, those pasteQueue lines sit there waiting and
-     * the REPL itself receives no input → user sees a hung `>>> `
-     * prompt that never responds.
-     *
-     * If `shell` is provided, ReplSession will, immediately after
-     * attaching its replCallback, drain shell.pasteQueue and feed the
-     * lines into the callback (suffixed with \r each — matches what
-     * the WS frame originally would have looked like). This makes the
-     * paste path work transparently for REPL launches.
-     *
-     * The shell reference is optional so existing adapters (bun, node,
-     * ruby) that haven't been updated keep working with their
-     * pre-fix behavior.
-     */
     shellRef = null;
     /** Current line buffer (chars typed since the last enter). */
     lineBuf = '';
@@ -63,9 +29,11 @@ export class ReplSession {
     /** Per-session history ring (most recent first). Capped at 100. */
     history = [];
     historyIdx = -1;
-    /** Resolves when close() has been called and the session ended. */
     closedResolve = null;
     closedPromise;
+    pendingInterrupt = null;
+    activePush = null;
+    ending = null;
     /** Exit code captured from adapter's last 'exit' return. */
     exitCode = 0;
     /**
@@ -109,68 +77,64 @@ export class ReplSession {
         // 3. Install the input handler.
         // REPL-A1b: per-frame data appended to inputQueue; single drain
         // task ensures serial processing across multiple WS frames.
-        this.detachReplCb = this.terminal.attachRepl((data) => {
+        this.detachRepl = this.terminal.attachRepl((data) => {
+            // Ctrl-C is the one input byte that must not queue behind a busy
+            // push: it is the user's abort, and it only works if it runs now.
+            if (this.busy && data.includes('\x03')) {
+                this.inputQueue = '';
+                data = data.slice(data.lastIndexOf('\x03') + 1);
+                this.interruptBusy();
+                if (data.length === 0)
+                    return;
+            }
+            if (this.ending)
+                return;
             this.inputQueue += data;
             if (!this.draining) {
                 this.draining = true;
                 void this.drainInput();
             }
-        });
-        // REPL-R7-1: drain any input that the shell received in the SAME
-        // WS frame as the REPL-launching command (`python\nexit(7)` style
-        // pastes). Without this drain, those lines sit forever in
-        // shell.pasteQueue while the REPL hangs at `>>> `.
-        //
-        // Each pasteQueue entry is a single line (no \r/\n). We re-frame
-        // each into the replCallback as `line + \r` so handleInput
-        // processes it through the normal Enter-triggered submitLine
-        // path — same behavior as if the user had typed and pressed
-        // Enter for each line.
-        //
-        // Best-effort: if shellRef is null or pasteQueue is missing,
-        // skip silently. Mutate the queue (shift) so the shell doesn't
-        // try to re-process the same items when it drains its own queue
-        // after this REPL exits.
-        if (this.shellRef && Array.isArray(this.shellRef.pasteQueue)) {
-            const pq = this.shellRef.pasteQueue;
-            if (pq.length > 0) {
-                const drained = pq.splice(0).filter(line => line !== undefined && line !== null);
-                if (drained.length > 0) {
-                    // Feed via inputQueue + draining (same path as a real WS
-                    // frame). Each line ends with \r so handleInput's
-                    // submitLine fires per line.
-                    this.inputQueue += drained.join('\r') + '\r';
-                    if (!this.draining) {
-                        this.draining = true;
-                        void this.drainInput();
-                    }
-                }
+        }, () => this.endSession(this.exitCode));
+        const queued = this.shellRef?.takeQueuedInput() ?? [];
+        if (queued.length > 0) {
+            this.inputQueue += queued.join('\r') + '\r';
+            if (!this.draining) {
+                this.draining = true;
+                void this.drainInput();
             }
         }
         // 4. Wait until close() is called.
         await this.closedPromise;
         return this.exitCode;
     }
-    /**
-     * REPL-A1b: drain the input queue serially. Pulls data off
-     * inputQueue, runs handleInput, and reads any data that arrived
-     * during the await. Exits when queue is empty. Only ONE drainInput
-     * runs at a time (guarded by draining flag set in attachRepl
-     * callback).
-     */
     async drainInput() {
-        while (this.inputQueue.length > 0) {
-            const chunk = this.inputQueue;
-            this.inputQueue = '';
-            await this.handleInput(chunk);
+        try {
+            while (this.inputQueue.length > 0 && !this.ending) {
+                const chunk = this.inputQueue;
+                this.inputQueue = '';
+                await this.handleInput(chunk);
+            }
+        }
+        catch (error) {
+            if (!this.ending) {
+                this.terminal.write('[repl] ' + errorText(error) + '\r\n');
+                try {
+                    await this.endSession(1);
+                }
+                catch { /* run() reports the cleanup failure as exit 1. */ }
+            }
+        }
+        finally {
+            this.draining = false;
         }
-        this.draining = false;
     }
     /** Process an input chunk. May contain multiple characters (paste
      *  or rapid typing) — we iterate char-by-char to handle each
      *  control byte individually. */
     async handleInput(data) {
         for (let i = 0; i < data.length; i++) {
+            if (this.ending)
+                return;
             const ch = data[i];
             // CTRL-D (0x04): on empty line, close cleanly.
             if (ch === '\x04') {
@@ -185,10 +149,7 @@ export class ReplSession {
             // CTRL-C (0x03): cancel current line / block.
             if (ch === '\x03') {
                 if (this.busy) {
-                    // Mid-execution: we can't actually interrupt the wasm runtime
-                    // in v1 (no SIGINT plumbing). Buffer the cancel for after.
-                    // For now: just display ^C and let the runtime finish.
-                    this.terminal.write('^C\r\n');
+                    this.interruptBusy();
                     continue;
                 }
                 // Idle: discard current buffer, reset, fresh prompt.
@@ -255,7 +216,20 @@ export class ReplSession {
             }
         }
     }
-    /** Submit the current line buffer to the adapter. */
+    interruptBusy() {
+        if (this.ending || this.pendingInterrupt)
+            return;
+        this.terminal.write('^C\r\n');
+        this.terminal.flushNow();
+        if (!this.adapter.interrupt)
+            return;
+        try {
+            this.pendingInterrupt = Promise.resolve(this.adapter.interrupt()).then(() => ({ kind: 'interrupted' }), (error) => ({ kind: 'failed', message: errorText(error) }));
+        }
+        catch (error) {
+            this.pendingInterrupt = Promise.resolve({ kind: 'failed', message: errorText(error) });
+        }
+    }
     async submitLine() {
         this.terminal.write('\r\n');
         const line = this.lineBuf;
@@ -274,15 +248,31 @@ export class ReplSession {
         this.busy = true;
         let result;
         try {
-            result = await this.adapter.push(fullSource);
+            this.activePush = this.adapter.push(fullSource);
+            result = await this.activePush;
+        }
+        catch (error) {
+            result = { kind: 'error', stderr: '[repl] adapter threw: ' + errorText(error) + '\n' };
         }
-        catch (e) {
-            result = {
-                kind: 'error',
-                stderr: `[repl] adapter threw: ${e?.message || e}\n`,
-            };
+        finally {
+            this.activePush = null;
+        }
+        const pending = this.pendingInterrupt;
+        if (pending) {
+            const outcome = await pending;
+            if (this.pendingInterrupt === pending)
+                this.pendingInterrupt = null;
+            if (outcome.kind === 'interrupted') {
+                result = { kind: 'error', stderr: 'KeyboardInterrupt\n[repl] execution interrupted; interpreter state reset.\n' };
+            }
+            else {
+                this.terminal.write('[repl] interrupt failed: ' + outcome.message + '\r\n');
+                this.terminal.flushNow();
+            }
         }
         this.busy = false;
+        if (this.ending)
+            return;
         // REPL-A1 (master plan §1): emit stdout, stderr, and the next-prompt
         // as three discrete WS frames in deterministic order. Without
         // flushNow() between them, the 5 ms coalescer in WebSocketTerminal
@@ -364,23 +354,33 @@ export class ReplSession {
         this.cursorPos = text.length;
         this.terminal.write(text);
     }
-    /** Close the session: detach input hook, free adapter, resolve. */
-    async endSession(code) {
+    endSession(code) {
+        if (this.ending)
+            return this.ending;
         this.exitCode = code;
-        if (this.detachReplCb) {
+        this.inputQueue = '';
+        this.ending = Promise.resolve().then(async () => {
+            let failure = null;
             try {
-                this.detachReplCb();
+                await this.adapter.close();
             }
-            catch { /* fail-soft */ }
-            this.detachReplCb = null;
-        }
-        try {
-            await this.adapter.close();
-        }
-        catch { /* fail-soft */ }
-        if (this.closedResolve) {
-            this.closedResolve();
+            catch (error) {
+                failure = error instanceof Error ? error : new Error(String(error));
+                this.exitCode = 1;
+                this.terminal.write('[repl] cleanup failed: ' + failure.message + '\r\n');
+                this.terminal.flushNow();
+            }
+            if (this.activePush)
+                await this.activePush.catch(() => { });
+            if (this.pendingInterrupt)
+                await this.pendingInterrupt;
+            this.detachRepl?.();
+            this.detachRepl = null;
+            this.closedResolve?.();
             this.closedResolve = null;
-        }
+            if (failure)
+                throw failure;
+        });
+        return this.ending;
     }
 }

package/dist/runtime/runtime-catalog.d.ts

@@ -46,6 +46,8 @@
  * makes a stale pin a cache miss rather than an outage.
  */
 import { type ManifestFile, type RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
+import { type RuntimeSource } from '@nimbus-sh/core/runtime/runtime-package.js';
+import { type RuntimePackageAbi } from '@nimbus-sh/core/runtime/os-contracts.js';
 /** Minimal R2Bucket shape we depend on. */
 type R2BucketLike = {
     get(key: string): Promise<{
@@ -102,5 +104,16 @@ export declare function fetchManifest(env: RuntimeCatalogEnv, entry: CatalogVers
  * execution in whichever session installs it.
  */
 export declare function fetchBlob(env: RuntimeCatalogEnv, file: ManifestFile): Promise<Uint8Array>;
+export declare function runtimeAbiForCatalogName(name: string): RuntimePackageAbi;
+/**
+ * The R2 catalog as a core `RuntimeSource` — the worker adapter half of the
+ * install path, so a workspace composed inside this Worker resolves
+ * `nimbus install <spec>` against the same bucket and digest chain the
+ * session's installer always used. Aliases resolve the way the old
+ * resolver did: `python` redirects to `cpython` unless a version pins it,
+ * and any bin a runtime's default manifest declares resolves to that
+ * runtime — except a superseded one, which never answers for a bin.
+ */
+export declare function runtimeCatalogSource(env: RuntimeCatalogEnv): RuntimeSource;
 export {};
 //# sourceMappingURL=runtime-catalog.d.ts.map

package/dist/runtime/runtime-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-catalog.d.ts","sourceRoot":"","sources":["../../src/runtime/runtime-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAKH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,6CAA6C,CAAC;AAErD,2CAA2C;AAC3C,KAAK,YAAY,GAAG;IAClB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACxB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KACzB,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,IAAI,GAAG,SAAS,CAAC;AAErB,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,EAAE,YAAY,CAAC;CACrC;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB;2EACuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAiBD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAElE;AA4DD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBlF;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,UAAU,CAAC,CA4BrB"}
+{"version":3,"file":"runtime-catalog.d.ts","sourceRoot":"","sources":["../../src/runtime/runtime-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAKH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,yCAAyC,CAAC;AAEjD,2CAA2C;AAC3C,KAAK,YAAY,GAAG;IAClB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACxB,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;KACzB,GAAG,IAAI,CAAC,CAAC;CACX,GAAG,IAAI,GAAG,SAAS,CAAC;AAErB,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,EAAE,YAAY,CAAC;CACrC;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB;2EACuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC/C;AAiBD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAElE;AA4DD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBlF;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,UAAU,CAAC,CA4BrB;AAID,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAExE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,GAAG,aAAa,CAwE1E"}

package/dist/runtime/runtime-catalog.js

@@ -49,6 +49,9 @@ import { z } from 'zod/v4';
 import { sha256Hex } from '@nimbus-sh/core/_shared/crypto.js';
 import { RUNTIME_CATALOG_SHA256 } from '../runtime-catalog.generated.js';
 import { HexSha256Schema, parseRuntimeManifest, } from '@nimbus-sh/core/runtime/runtime-manifest.js';
+import { runtimeEntrypoints } from '@nimbus-sh/core/runtime/installed-runtimes.js';
+import { splitRuntimeSpec, SUPERSEDED_RUNTIMES, } from '@nimbus-sh/core/runtime/runtime-package.js';
+import { NIMBUS_RUNTIME_ABIS, NATIVE_UNSUPPORTED_ABI, } from '@nimbus-sh/core/runtime/os-contracts.js';
 const CatalogVersionEntrySchema = z.object({
     manifest: z.string().min(1),
     manifest_sha256: HexSha256Schema.optional(),
@@ -192,6 +195,91 @@ export async function fetchBlob(env, file) {
     await l2Put(verified, 'application/octet-stream');
     return verified.bytes;
 }
+// ── RuntimeSource ────────────────────────────────────────────────────
+export function runtimeAbiForCatalogName(name) {
+    return NIMBUS_RUNTIME_ABIS[name] ?? NATIVE_UNSUPPORTED_ABI;
+}
+/**
+ * The R2 catalog as a core `RuntimeSource` — the worker adapter half of the
+ * install path, so a workspace composed inside this Worker resolves
+ * `nimbus install <spec>` against the same bucket and digest chain the
+ * session's installer always used. Aliases resolve the way the old
+ * resolver did: `python` redirects to `cpython` unless a version pins it,
+ * and any bin a runtime's default manifest declares resolves to that
+ * runtime — except a superseded one, which never answers for a bin.
+ */
+export function runtimeCatalogSource(env) {
+    return {
+        async list() {
+            const catalog = await fetchCatalog(env);
+            return Object.entries(catalog.runtimes)
+                .sort(([a], [b]) => a.localeCompare(b))
+                .map(([name, entry]) => ({
+                name,
+                abi: runtimeAbiForCatalogName(name),
+                defaultVersion: entry.default,
+                versions: Object.entries(entry.versions)
+                    .sort(([a], [b]) => a.localeCompare(b))
+                    .map(([version, v]) => ({
+                    version,
+                    sizeBytes: v.size_bytes,
+                    license: v.license,
+                })),
+            }));
+        },
+        async resolve(spec) {
+            const { name, versionOverride } = splitRuntimeSpec(spec);
+            const catalog = await fetchCatalog(env);
+            // `python` is CPython now: a bare spec follows the supersession, an
+            // explicit `python@<version>` is a deliberate request and bypasses it.
+            const superseding = versionOverride === null ? SUPERSEDED_RUNTIMES[name] : undefined;
+            const runtimeName = (superseding !== undefined && catalog.runtimes[superseding] ? superseding : null)
+                ?? (catalog.runtimes[name] ? name : null);
+            let resolved = runtimeName;
+            if (resolved === null) {
+                // Bin-name aliasing is catalog-driven: any command a runtime
+                // provides resolves to that runtime. A superseded runtime does not
+                // answer for a command name either — its runner is no longer
+                // registered, and the successor declares the same commands further
+                // down this same loop.
+                for (const [candidate, entry] of Object.entries(catalog.runtimes)) {
+                    if (versionOverride === null
+                        && SUPERSEDED_RUNTIMES[candidate] !== undefined
+                        && catalog.runtimes[SUPERSEDED_RUNTIMES[candidate]])
+                        continue;
+                    const versionEntry = entry.versions[entry.default];
+                    if (!versionEntry)
+                        continue;
+                    try {
+                        const manifest = await fetchManifest(env, versionEntry);
+                        if (runtimeEntrypoints(manifest).some((ep) => ep.binName === name)) {
+                            resolved = candidate;
+                            break;
+                        }
+                    }
+                    catch {
+                        // A bad manifest should not prevent canonical catalog names from
+                        // resolving; it only suppresses bin-name aliasing for that runtime.
+                    }
+                }
+            }
+            if (resolved === null)
+                return null;
+            const entry = catalog.runtimes[resolved];
+            const version = versionOverride ?? entry.default;
+            const versionEntry = entry.versions[version];
+            if (!versionEntry) {
+                throw new Error(`'${resolved}@${version}' not in catalog`);
+            }
+            const manifest = await fetchManifest(env, versionEntry);
+            const pkg = {
+                manifest,
+                readBlob: (file) => fetchBlob(env, file),
+            };
+            return pkg;
+        },
+    };
+}
 /** Read the entry at `address`, or null on miss, on a stripped Cache API,
  *  or when what came back does not hash to the key it was found under. */
 async function l2Get(address) {

package/dist/session/agent.d.ts

@@ -9,28 +9,8 @@
  */
 import { type SessionAiHost } from './ai.js';
 import { type ProgrammaticHost } from './programmatic.js';
-interface AgentStorage {
-    get(key: string): Promise<unknown>;
-    put(key: string, value: unknown): Promise<void>;
-    delete(key: string): Promise<void>;
-    deleteAll(): Promise<void>;
-    deleteAlarm(): Promise<void>;
-    list<T = unknown>(options: {
-        prefix: string;
-    }): Promise<Map<string, T>>;
-    transaction<T>(body: (txn: {
-        get(key: string): Promise<unknown>;
-        put(key: string, value: unknown): Promise<void>;
-        delete(key: string): Promise<unknown>;
-        list<T2 = unknown>(options: {
-            prefix: string;
-        }): Promise<Map<string, T2>>;
-    }) => Promise<T>): Promise<T>;
-}
 interface Host extends ProgrammaticHost, SessionAiHost {
-    ctx: {
-        storage: AgentStorage;
-    };
+    ctx: ProgrammaticHost['ctx'];
     env: ProgrammaticHost['env'] & Record<string, unknown>;
 }
 interface OAuthStatePayload {

package/dist/session/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/session/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAYL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAiB3B,UAAU,YAAY;IACpB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;KAC3E,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED,UAAU,IAAK,SAAQ,gBAAgB,EAAE,aAAa;IACpD,GAAG,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE,CAAC;IAC/B,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxD;AAED,UAAU,iBAAiB;IACzB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2ClG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAQxF"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/session/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAYL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAkB3B,UAAU,IAAK,SAAQ,gBAAgB,EAAE,aAAa;IACpD,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7B,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxD;AAED,UAAU,iBAAiB;IACzB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2ClG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAQxF"}

package/dist/session/ai.d.ts

@@ -40,6 +40,7 @@
  */
 import type { LanguageModel } from 'ai';
 import { z } from 'zod/v4';
+import type { PortRegistry } from '@nimbus-sh/core/runtime/port-registry.js';
 import { type NimbusCloudflareAccount } from './agent-oauth.js';
 export interface SessionAiHost {
     env: Record<string, unknown>;
@@ -47,10 +48,13 @@ export interface SessionAiHost {
         storage: {
             get(key: string): Promise<unknown>;
             put(key: string, value: unknown): Promise<void>;
-            delete(key: string): Promise<void>;
+            delete(key: string): Promise<boolean | void>;
         };
     };
 }
+export declare function routeSessionLoopback(host: SessionAiHost & {
+    portRegistry: PortRegistry;
+}, port: number, request: Request): Promise<Response | null>;
 /** DO storage key holding this session's Cloudflare credential of record. */
 export declare const SESSION_AI_CREDENTIAL_KEY = "nimbus:ai:credential";
 export declare const DEFAULT_SESSION_AI_MODEL = "@cf/zai-org/glm-5.2";

package/dist/session/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/session/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,OAAO,EAUL,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE;QACH,OAAO,EAAE;YACP,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SACpC,CAAC;KACH,CAAC;CACH;AAED,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAShE,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,YAAY,CAAC;AAmBvD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEhD,QAAA,MAAM,sBAAsB;;;;;iBAK1B,CAAC;AAEH,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAyC/D,iFAAiF;AACjF,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUrD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAQjF;AAID;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBrG;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+BlG;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC,CASD;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1G;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAQvE;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKlG;AAED,uDAAuD;AACvD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjF;AAED,wEAAwE;AACxE,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAEnG;AAID;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkCrG"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/session/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAG7E,OAAO,EAUL,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE;QACH,OAAO,EAAE;YACP,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;SAC9C,CAAC;KACH,CAAC;CACH;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,GAAG;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,EACpD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAI1B;AAED,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAShE,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,YAAY,CAAC;AAmBvD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEhD,QAAA,MAAM,sBAAsB;;;;;iBAK1B,CAAC;AAEH,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAyC/D,iFAAiF;AACjF,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUrD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAQjF;AAID;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBrG;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+BlG;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC,CASD;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1G;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAQvE;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKlG;AAED,uDAAuD;AACvD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjF;AAED,wEAAwE;AACxE,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAEnG;AAID;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkCrG"}

package/dist/session/ai.js

@@ -41,8 +41,15 @@
 import { createOpenAICompatible } from '@ai-sdk/openai-compatible';
 import { z } from 'zod/v4';
 import { NIMBUS_AI_GATEWAY_PORT } from '@nimbus-sh/core/constants.js';
+import { routeRuntimeLoopback } from './loopback.js';
 import { NIMBUS_AI_TOKEN_ENV, mintSessionAiToken } from '@nimbus-sh/core/_shared/ai-egress.js';
 import { NIMBUS_AGENT_AUTH_COOKIE, NIMBUS_CLOUDFLARE_API, fetchNimbusCloudflareAccounts, fetchNimbusCloudflareUserInfo, loadNimbusAgentOAuthFromRequest, readNimbusAgentCookieSecret, readNimbusAgentOAuthConfig, readNimbusCookie, requestNimbusCloudflareOAuthToken, } from './agent-oauth.js';
+export function routeSessionLoopback(host, port, request) {
+    // A credential-backed gateway is private, not a shareable port entry.
+    if (port === NIMBUS_AI_GATEWAY_PORT)
+        return handleSessionAiRequest(host, request);
+    return routeRuntimeLoopback(host.portRegistry, port, request);
+}
 /** DO storage key holding this session's Cloudflare credential of record. */
 export const SESSION_AI_CREDENTIAL_KEY = 'nimbus:ai:credential';
 /**

package/dist/session/hibernation.d.ts

@@ -80,6 +80,7 @@ export declare function wireHibernationOnConstruct(ctx: any): WsHibernationConfi
  * (per /api/_test/hib/simulate flow; plan §VI.7 F.2 invariant).
  */
 export declare function wireProcessLogPersist(host: HibHost, ctx: any): void;
+export declare function installLogPersistence(host: Pick<HibHost, '_w9PersistWired' | '_w9SchemaInit' | 'processes'>, ctx: DurableObjectState, onActivity: () => void): void;
 /**
  * W1: arm the log-janitor alarm cycle for this instance. Called from the
  * log-activity hook so only sessions that actually produce process logs
@@ -103,7 +104,7 @@ export declare function wireProcessLogPersist(host: HibHost, ctx: any): void;
 export declare function clearDestroyedTombstone(host: HibHost, ctx: any): void;
 export declare function ensureLogJanitor(host: HibHost, ctx: any): void;
 /** W9: idempotent SQL schema bootstrap. */
-export declare function ensureHibSchema(host: HibHost, ctx: any): void;
+export declare function ensureHibSchema(host: Pick<HibHost, '_w9SchemaInit'>, ctx: any): void;
 /**
  * W1: this session's canonical alarm-reason strings, registered on the
  * fabric's reason map. Forward-compat: the dispatcher silently drops unknown

package/dist/session/hibernation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hibernation.d.ts","sourceRoot":"","sources":["../../src/session/hibernation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAA0B,KAAK,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACpH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGrE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,SAAS,EAAE,wBAAwB,CAAC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,GAAG,CAAC;IACnB,4EAA4E;IAC5E,eAAe,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG,yBAAyB,CAY9E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CA6GnE;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAMrE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAc9D;AAED,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqB7D;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,iBAAiB,CAAC;AAEzE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqB9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,GAAG,EACR,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EAC7C,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC1C,SAAS,CAAC,EAAE,mBAAmB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAMhD"}
+{"version":3,"file":"hibernation.d.ts","sourceRoot":"","sources":["../../src/session/hibernation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAA0B,KAAK,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACpH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGrE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,SAAS,EAAE,wBAAwB,CAAC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,GAAG,CAAC;IACnB,4EAA4E;IAC5E,eAAe,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG,yBAAyB,CAY9E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAKnE;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,GAAG,WAAW,CAAC,EACtE,GAAG,EAAE,kBAAkB,EACvB,UAAU,EAAE,MAAM,IAAI,GACrB,IAAI,CA0GN;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAMrE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAc9D;AAED,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqBpF;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,iBAAiB,CAAC;AAEzE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqB9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,GAAG,EACR,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EAC7C,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC1C,SAAS,CAAC,EAAE,mBAAmB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAMhD"}

package/dist/session/hibernation.js

@@ -75,6 +75,12 @@ export function wireHibernationOnConstruct(ctx) {
  * (per /api/_test/hib/simulate flow; plan §VI.7 F.2 invariant).
  */
 export function wireProcessLogPersist(host, ctx) {
+    installLogPersistence(host, ctx, () => {
+        scheduleHibFlush(host, ctx);
+        ensureLogJanitor(host, ctx);
+    });
+}
+export function installLogPersistence(host, ctx, onActivity) {
     if (host._w9PersistWired)
         return;
     host._w9PersistWired = true;
@@ -174,10 +180,7 @@ export function wireProcessLogPersist(host, ctx) {
     // every boot, including boots caused by a destroyed session's own
     // leftover alarm, making every session DO ever created fire an alarm
     // every ~60s forever (see dispatchAlarm's re-arm condition below).
-    host.processes.setLogPersist(adapter, () => {
-        scheduleHibFlush(host, ctx);
-        ensureLogJanitor(host, ctx);
-    });
+    host.processes.setLogPersist(adapter, onActivity);
 }
 /**
  * W1: arm the log-janitor alarm cycle for this instance. Called from the

package/dist/session/init.d.ts

@@ -1,38 +1,3 @@
-/**
- * session/init.ts — initSession boot + shell-command registrations.
- *
- * Why this is one big function and not a class:
- * initSession runs once per /ws upgrade and walks the session
- * through Phase R (rehydrate from SQL), Phase B (compose the
- * workspace + register the session's commands), Phase W (attach
- * terminal), and (cold-only) Phase O (MOTD + framework hint). The
- * phases share lots of locals (vfs, kernel, registry, shell) and
- * ordering matters strictly — there's no interesting reuse boundary
- * that a class decomposition would expose.
- *
- * What it no longer does is COMPOSE the operating system. The kernel,
- * the provider mounts, the command registry, the coreutils, the exec
- * resolver, the default environment and the shell come from
- * `NimbusWorkspace` (@nimbus-sh/core/workspace), which an embedder off
- * Cloudflare builds the same way. What stays here is everything that
- * only makes sense with a socket, a Durable Object and a product behind
- * it: the terminal and its scrollback, the phase machine, the persisted
- * shell state, npm, git, vite, wrangler and the facet-backed runtimes.
- *
- * The function is intentionally written so that a reader sees:
- *   1. setPhase('rehydrate') ...
- *   2. setPhase('build')    ... (~95% of the LOC)
- *   3. setPhase('online')   if (cold)
- *   4. self._b4Phase = 'hydrated'
- *
- * `self` is typed as InitHost, a narrow view of SessionInternal plus readonly
- * ctx/env, so this module can use the session internals it owns without
- * depending on the full Durable Object class surface.
- *
- * Imports and class delegators on NimbusSession preserve back-compat:
- *   - acceptShellWebSocket → self.initSession(ws)  (S7 will extract).
- *   - The class still has `initSession(ws)` as a delegator method.
- */
 import type { SessionInternal } from './internal.js';
 /**
  * `initSession` reads `this.ctx` and `this.env` extensively (~14 sites).
@@ -61,6 +26,6 @@ type InitHost = SessionInternal & {
 export interface InitSessionOptions {
     resume?: 'reconnect' | 'wake';
 }
-export declare function initSession(self: InitHost, ws: WebSocket, options?: InitSessionOptions): Promise<void>;
+export declare function initSession(self: InitHost, ws: WebSocket | null, options?: InitSessionOptions): Promise<void>;
 export {};
 //# sourceMappingURL=init.d.ts.map

package/dist/session/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAkFH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAQ3E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;CAC/B;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,SAAS,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAgsEf"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAQ3E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;CAC/B;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,SAAS,GAAG,IAAI,EACpB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAicf"}