@nimbus-sh/worker 0.7.0 → 0.9.0

package/dist/runtime/wasi/preamble.js

@@ -1,3 +1,6 @@
+import { installAuthorityFilesystem, WASI_ACCEPTED_PATH_PREFIX, WASI_LISTEN_PATH_PREFIX, WASI_TCP_PATH_PREFIX, } from '@nimbus-sh/core/runtime/wasi/filesystem.js';
+import { supervisorFilesystem } from '@nimbus-sh/core/runtime/vfs-supervisor.js';
+import { WASI_RESIDENT_FILE_CAP_BYTES } from '@nimbus-sh/core/constants.js';
 // errno constants
 const __WASI_ESUCCESS = 0;
 const __WASI_EAGAIN = 6;
@@ -65,21 +68,6 @@ const __WASI_EVENTTYPE_CLOCK = 0;
 const __WASI_EVENTTYPE_FD_READ = 1;
 const __WASI_EVENTTYPE_FD_WRITE = 2;
 const __WASI_SUBCLOCKFLAGS_ABSTIME = 1; // SUBSCRIPTION_CLOCK_ABSTIME
-// WASI socket and polling support B7: synthetic-path prefix recognised by path_open as a request
-// to open a TCP socket. Mirrors bash's /dev/tcp/<host>/<port> convention
-// (https://www.gnu.org/software/bash/manual/html_node/Redirections.html).
-const __WASI_TCP_PATH_PREFIX = '/dev/tcp/';
-// The accept half of the same synthetic-socket family: binds a connection the
-// virtual socket kernel has already accepted to a file descriptor. It has to go
-// through path_open like the dial half - guests layered over wasi-vfs
-// (ruby.wasm) resolve descriptors through their own fd table, so a descriptor
-// handed to them out of band is not one they can use.
-const __WASI_ACCEPTED_PATH_PREFIX = '/dev/nimbus/socket/';
-// A listening socket, as a descriptor. Reading it is accept(2): the read
-// suspends until a connection is queued and yields that connection's id, so a
-// server's accept loop is an ordinary blocking read and needs no cooperative
-// pump driving it from outside.
-const __WASI_LISTEN_PATH_PREFIX = '/dev/nimbus/listen/';
 // WASI socket and polling support B7: resolved at preamble module-init via dynamic import.
 // CF docs: "TCP sockets cannot be created in global scope and shared
 // across requests" — so we only IMPORT the module here (cheap symbol
@@ -139,7 +127,7 @@ function __wasiEmptyFS() {
         root: '',
         files: new Map(), dirs: new Set(), times: new Map(), symlinks: new Map(),
         modes: new Map(), sizes: new Map(), origFiles: new Map(),
-        residentFileCap: 8 * 1024 * 1024,
+        residentFileCap: WASI_RESIDENT_FILE_CAP_BYTES,
         enumeratedRoots: [],
         revision: null,
     };
@@ -456,7 +444,7 @@ export function __wasiInitFS(opts) {
         origFiles,
         // Files at or above this size are never held whole; reads window through
         // the supervisor instead. Keeps a 200 MiB blob from ending the isolate.
-        residentFileCap: Number(opts.residentFileCap ?? (8 * 1024 * 1024)),
+        residentFileCap: Number(opts.residentFileCap ?? WASI_RESIDENT_FILE_CAP_BYTES),
         // Roots the seed claims to have listed COMPLETELY. Only a producer that
         // walked a subtree without exclusions may claim one. Inside such a root a
         // path the manifest lacks is genuinely absent, so the miss is answered
@@ -470,6 +458,9 @@ export function __wasiInitFS(opts) {
         revision: opts.revision ?? null,
     };
     // Reset fd table baseline; install preopens as fd 3, 4, 5, ...
+    // Emptied rather than replaced: the authority codec and the socket helpers
+    // are handed this Map, and a swap would leave half of them writing into a
+    // table nothing reads.
     __wasiPreopens = [];
     fdTable.clear();
     fdTable.set(0, { kind: 'stdin' });
@@ -477,7 +468,7 @@ export function __wasiInitFS(opts) {
     fdTable.set(2, { kind: 'stderr' });
     nextFd = 3;
     for (const po of (opts.preopens || [])) {
-        const fd = nextFd++;
+        const fd = __wasiAllocateFd();
         const vfsPath = __wasiCanonicalize(po.vfsPath);
         fdTable.set(fd, { kind: 'preopen', wasiPath: po.wasiPath, vfsPath });
         __wasiPreopens.push({ fd, wasiPath: po.wasiPath, vfsPath });
@@ -565,7 +556,7 @@ function __wasiConnectRemote(host, port) {
 // Returns a WASI errno and writes the new fd to fdOutPtr.
 function __wasiOpenTcpSocket(pathArg, fdflags, fdOutPtr, writeU32LE) {
     // pathArg shape: "/dev/tcp/<host>/<port>".
-    const tail = pathArg.substring(__WASI_TCP_PATH_PREFIX.length);
+    const tail = pathArg.substring(WASI_TCP_PATH_PREFIX.length);
     const slashIdx = tail.lastIndexOf('/');
     if (slashIdx <= 0 || slashIdx === tail.length - 1)
         return __WASI_EINVAL;
@@ -593,7 +584,7 @@ function __wasiKernelOrNull(what) {
 // Open a listening socket as a descriptor. The port must already be bound; the
 // descriptor is the accept queue, not the bind.
 function __wasiOpenListener(pathArg, fdflags, fdOutPtr, writeU32LE) {
-    const port = parseInt(pathArg.substring(__WASI_LISTEN_PATH_PREFIX.length), 10);
+    const port = parseInt(pathArg.substring(WASI_LISTEN_PATH_PREFIX.length), 10);
     if (!Number.isInteger(port) || port <= 0 || port >= 65536)
         return __WASI_EINVAL;
     const kernel = __wasiKernelOrNull('ports cannot be listened on');
@@ -620,7 +611,7 @@ function __wasiOpenListener(pathArg, fdflags, fdOutPtr, writeU32LE) {
         if (typeof announce === 'function')
             announce(port);
     }
-    const fd = nextFd++;
+    const fd = __wasiAllocateFd();
     fdTable.set(fd, { kind: 'listener', port, fdflags: fdflags | 0 });
     writeU32LE(fdOutPtr, fd);
     return __WASI_ESUCCESS;
@@ -670,7 +661,7 @@ async function __wasiAcceptRead(entry, iovsPtr, iovsLen, nreadPtr, writeU32LE, v
 // Bind an already-accepted kernel connection to a file descriptor, so a
 // server's accepted socket is the same kind of fd as a client's dialed one.
 function __wasiOpenAcceptedSocket(pathArg, fdflags, fdOutPtr, writeU32LE) {
-    const id = parseInt(pathArg.substring(__WASI_ACCEPTED_PATH_PREFIX.length), 10);
+    const id = parseInt(pathArg.substring(WASI_ACCEPTED_PATH_PREFIX.length), 10);
     if (!Number.isInteger(id) || id <= 0)
         return __WASI_EINVAL;
     const kernel = globalThis.__nimbusVirtualSockets;
@@ -695,7 +686,7 @@ function __wasiOpenAcceptedSocket(pathArg, fdflags, fdOutPtr, writeU32LE) {
 // connection, or an accepted one. Every socket fd in the table comes from here,
 // which is why nothing downstream has to tell them apart.
 function __wasiAdoptSocket(socket, fdflags) {
-    const fd = nextFd++;
+    const fd = __wasiAllocateFd();
     fdTable.set(fd, {
         kind: 'socket',
         socket,
@@ -776,6 +767,10 @@ export function __wasiReadFilesB64(paths) {
 // rights checks in v1 — single-tenant facet, no untrusted callers).
 export const fdTable = new Map();
 let nextFd = 3;
+// The only source of descriptor numbers. A second counter — one for files, one
+// for sockets — hands the same number out twice and the later open silently
+// destroys the earlier fd's entry.
+function __wasiAllocateFd() { return nextFd++; }
 // Resolve a WASI path against a preopen fd; returns the canonical VFS path
 // WITHOUT following symlinks. WASI socket and polling support kept this name compatible with all
 // existing call sites (~10 of them inside the imports object).
@@ -1102,7 +1097,9 @@ export function __wasiMakeImports(opts) {
             await __wasiDrainPersist();
             if (size <= __wasiFS.residentFileCap) {
                 const whole = await __wasiSup.fsReadRange(vfsPath, 0, size);
-                const bytes = whole instanceof Uint8Array ? whole : new Uint8Array(whole);
+                if (whole === null)
+                    throw new Error('ENOENT: ' + vfsPath);
+                const bytes = whole;
                 __wasiFS.files.set(vfsPath, bytes);
                 // The diff-back mirror must agree, or a demand-loaded file would be
                 // reported as newly written by every runner still using the diff.
@@ -1115,7 +1112,9 @@ export function __wasiMakeImports(opts) {
             if (want === 0)
                 return new Uint8Array(0);
             const win = await __wasiSup.fsReadRange(vfsPath, offset, want);
-            return win instanceof Uint8Array ? win : new Uint8Array(win);
+            if (win === null)
+                throw new Error('ENOENT: ' + vfsPath);
+            return win;
         })();
     }
     /** Scatter the given bytes across the iovec list; returns bytes consumed. */
@@ -1583,13 +1582,13 @@ export function __wasiMakeImports(opts) {
             // the in-memory FS — __wasiResolvePath would canonicalize it but
             // not find any entry.
             const guestPath = __wasiGuestPath(baseFd, pathArg);
-            if (guestPath.startsWith(__WASI_TCP_PATH_PREFIX)) {
+            if (guestPath.startsWith(WASI_TCP_PATH_PREFIX)) {
                 return __wasiOpenTcpSocket(guestPath, fdflags, fdOutPtr, writeU32LE);
             }
-            if (guestPath.startsWith(__WASI_ACCEPTED_PATH_PREFIX)) {
+            if (guestPath.startsWith(WASI_ACCEPTED_PATH_PREFIX)) {
                 return __wasiOpenAcceptedSocket(guestPath, fdflags, fdOutPtr, writeU32LE);
             }
-            if (guestPath.startsWith(__WASI_LISTEN_PATH_PREFIX)) {
+            if (guestPath.startsWith(WASI_LISTEN_PATH_PREFIX)) {
                 return __wasiOpenListener(guestPath, fdflags, fdOutPtr, writeU32LE);
             }
             // Honor LOOKUPFLAGS_SYMLINK_FOLLOW strictly: bit 0 set → follow.
@@ -1624,7 +1623,7 @@ export function __wasiMakeImports(opts) {
                 const access = __wasiCheckMode(resolved, 1);
                 if (access !== __WASI_ESUCCESS)
                     return access;
-                const fd = nextFd++;
+                const fd = __wasiAllocateFd();
                 fdTable.set(fd, { kind: 'dir', vfsPath: resolved, readdirEntries: null, cookie: 0n, oflags, fdflags });
                 writeU32LE(fdOutPtr, fd);
                 return __WASI_ESUCCESS;
@@ -1665,7 +1664,7 @@ export function __wasiMakeImports(opts) {
                 if (access !== __WASI_ESUCCESS)
                     return access;
             }
-            const fd = nextFd++;
+            const fd = __wasiAllocateFd();
             fdTable.set(fd, { kind: 'file', vfsPath: resolved, offset: 0, oflags, fdflags });
             writeU32LE(fdOutPtr, fd);
             return __WASI_ESUCCESS;
@@ -2196,7 +2195,7 @@ export function __wasiMakeImports(opts) {
             writeU32LE(bufusedPtr, written);
             return __WASI_ESUCCESS;
         },
-        fd_advise() { return __WASI_ESUCCESS; },
+        fd_advise(_fd, _offset, _len, _advice) { return __WASI_ESUCCESS; },
         // WASI socket and polling support B4: real fd_allocate. Extends the file's byte buffer with
         // zeros so [offset, offset+len) is allocated. POSIX posix_fallocate
         // semantics. ENOSPC is not reachable in our in-memory FS (the
@@ -2428,9 +2427,11 @@ export function __wasiMakeImports(opts) {
                     });
                 }
                 // Regular files, dirs, stdio: always ready (POSIX: regular files
-                // never block — read returns immediately even if at EOF).
+                // never block — read returns immediately even if at EOF). A file the
+                // authority owns is a regular file too; leaving 'authority' out made
+                // polling one EBADF, which a guest reads as "this fd is gone".
                 if (entry.kind === 'file' || entry.kind === 'dir' ||
-                    entry.kind === 'preopen' ||
+                    entry.kind === 'preopen' || entry.kind === 'authority' ||
                     entry.kind === 'stdin' || entry.kind === 'stdout' || entry.kind === 'stderr') {
                     let nbytes = 0n;
                     if (entry.kind === 'file' && s.tag === __WASI_EVENTTYPE_FD_READ) {
@@ -2843,6 +2844,15 @@ export function __wasiMakeImports(opts) {
             }
         },
     };
+    installAuthorityFilesystem(imports, {
+        fs: () => __wasiSup ? supervisorFilesystem(__wasiSup, opts.parking === 'none' ? __wasiSup.synchronous : undefined) : null,
+        memory: opts.getMemory,
+        fds: fdTable,
+        allocateFd: __wasiAllocateFd,
+        abi: opts.abi,
+        synchronous: opts.parking === 'none',
+        residentBytes: __wasiFS.residentFileCap,
+    });
     // Raw async socket bodies, captured BEFORE JSPI-wrapping so fd_read /
     // fd_write can route socket fds through them (wasi-libc maps read(2)/
     // write(2) to fd_read/fd_write for every fd kind, sockets included).
@@ -2858,7 +2868,13 @@ export function __wasiMakeImports(opts) {
     // Every import that can park.
     const parkable = [
         'sock_send', 'sock_recv', 'sock_shutdown', 'sock_accept', 'poll_oneoff',
-        'fd_read', 'fd_write', 'fd_pread', 'path_filestat_get',
+        'fd_read', 'fd_write', 'fd_pread', 'fd_pwrite', 'path_filestat_get',
+        'path_open', 'fd_close', 'fd_renumber', 'fd_seek', 'fd_tell', 'fd_filestat_get',
+        'fd_fdstat_set_flags', 'fd_fdstat_set_rights', 'fd_filestat_set_size',
+        'fd_sync', 'fd_datasync', 'fd_allocate', 'fd_advise', 'fd_readdir',
+        'path_create_directory', 'path_remove_directory', 'path_unlink_file',
+        'path_rename', 'path_symlink', 'path_readlink', 'path_link',
+        'fd_filestat_set_times', 'path_filestat_set_times',
     ];
     // Applied before Suspending wraps them.
     for (const name of parkable) {
@@ -2908,33 +2924,35 @@ export function __wasiMakeImports(opts) {
         imports.sock_recv = new WebAssembly.Suspending(imports.sock_recv);
         imports.sock_shutdown = new WebAssembly.Suspending(imports.sock_shutdown);
         imports.sock_accept = new WebAssembly.Suspending(imports.sock_accept);
-        // WASI socket and polling support B8: poll_oneoff also needs JSPI to support CLOCK
-        // subscriptions (await setTimeout) and socket-fd readiness
-        // (await reader.read()). Same Suspending shape as sock_*.
         imports.poll_oneoff = new WebAssembly.Suspending(imports.poll_oneoff);
-        // fd_read/fd_write become suspending too: a socket fd routes to the
-        // async sock bodies (Promise → JSPI suspends). File/stdio ops return a
-        // plain errno number, which JSPI passes through UNDER AN ACTIVE
-        // SUSPENDER. There is no passthrough without one: V8 traps ANY call
-        // into a Suspending import off a non-promising stack with SuspendError
-        // "trying to suspend without WebAssembly.promising", even when the
-        // import returns a plain number (measured on workerd, compat
-        // 2026-04-01). Every export that can reach these imports must be
-        // entered via WebAssembly.promising — assuming sync callers were
-        // unaffected is exactly how the Ruby VM boot went dark.
         imports.fd_read = new WebAssembly.Suspending(imports.fd_read);
         imports.fd_write = new WebAssembly.Suspending(imports.fd_write);
-        // fd_pread reaches the same file bodies as fd_read and so can equally
-        // land on a cache miss that must go to the supervisor. Leaving it
-        // unwrapped would trap the guest the first time a demand load happened
-        // to arrive through pread(2) rather than read(2).
         imports.fd_pread = new WebAssembly.Suspending(imports.fd_pread);
-        // path_filestat_get resolves a path the seed manifest never listed by
-        // asking the supervisor, so it too can return a Promise.
+        imports.fd_pwrite = new WebAssembly.Suspending(imports.fd_pwrite);
         imports.path_filestat_get = new WebAssembly.Suspending(imports.path_filestat_get);
-        // sched_yield parks only in a threaded process, so it is wrapped only for
-        // one: every other guest keeps the plain i32 return it has today, and no
-        // existing runtime changes shape.
+        imports.path_open = new WebAssembly.Suspending(imports.path_open);
+        imports.fd_close = new WebAssembly.Suspending(imports.fd_close);
+        imports.fd_renumber = new WebAssembly.Suspending(imports.fd_renumber);
+        imports.fd_seek = new WebAssembly.Suspending(imports.fd_seek);
+        imports.fd_tell = new WebAssembly.Suspending(imports.fd_tell);
+        imports.fd_filestat_get = new WebAssembly.Suspending(imports.fd_filestat_get);
+        imports.fd_fdstat_set_flags = new WebAssembly.Suspending(imports.fd_fdstat_set_flags);
+        imports.fd_fdstat_set_rights = new WebAssembly.Suspending(imports.fd_fdstat_set_rights);
+        imports.fd_filestat_set_size = new WebAssembly.Suspending(imports.fd_filestat_set_size);
+        imports.fd_sync = new WebAssembly.Suspending(imports.fd_sync);
+        imports.fd_datasync = new WebAssembly.Suspending(imports.fd_datasync);
+        imports.fd_allocate = new WebAssembly.Suspending(imports.fd_allocate);
+        imports.fd_advise = new WebAssembly.Suspending(imports.fd_advise);
+        imports.fd_readdir = new WebAssembly.Suspending(imports.fd_readdir);
+        imports.path_create_directory = new WebAssembly.Suspending(imports.path_create_directory);
+        imports.path_remove_directory = new WebAssembly.Suspending(imports.path_remove_directory);
+        imports.path_unlink_file = new WebAssembly.Suspending(imports.path_unlink_file);
+        imports.path_rename = new WebAssembly.Suspending(imports.path_rename);
+        imports.path_symlink = new WebAssembly.Suspending(imports.path_symlink);
+        imports.path_readlink = new WebAssembly.Suspending(imports.path_readlink);
+        imports.path_link = new WebAssembly.Suspending(imports.path_link);
+        imports.fd_filestat_set_times = new WebAssembly.Suspending(imports.fd_filestat_set_times);
+        imports.path_filestat_set_times = new WebAssembly.Suspending(imports.path_filestat_set_times);
         if (opts.threads)
             imports.sched_yield = new WebAssembly.Suspending(imports.sched_yield);
     }

package/dist/runtime-catalog.generated.js

@@ -24,4 +24,4 @@
  * The empty string means "not pinned yet" — the catalog stays out of L2 and
  * the supervisor warns once per isolate.
  */
-export const RUNTIME_CATALOG_SHA256 = "de5f40e035887976ba2fd4611cada83c4fcbff774637eb7c954c55dd1d1c5eae";
+export const RUNTIME_CATALOG_SHA256 = "9cdc9cc0d96667234c6fed2adc81e7890fef96b3afe5bd80dd80612e822d3d3a";

package/dist/session/agent.d.ts

@@ -9,28 +9,8 @@
  */
 import { type SessionAiHost } from './ai.js';
 import { type ProgrammaticHost } from './programmatic.js';
-interface AgentStorage {
-    get(key: string): Promise<unknown>;
-    put(key: string, value: unknown): Promise<void>;
-    delete(key: string): Promise<void>;
-    deleteAll(): Promise<void>;
-    deleteAlarm(): Promise<void>;
-    list<T = unknown>(options: {
-        prefix: string;
-    }): Promise<Map<string, T>>;
-    transaction<T>(body: (txn: {
-        get(key: string): Promise<unknown>;
-        put(key: string, value: unknown): Promise<void>;
-        delete(key: string): Promise<unknown>;
-        list<T2 = unknown>(options: {
-            prefix: string;
-        }): Promise<Map<string, T2>>;
-    }) => Promise<T>): Promise<T>;
-}
 interface Host extends ProgrammaticHost, SessionAiHost {
-    ctx: {
-        storage: AgentStorage;
-    };
+    ctx: ProgrammaticHost['ctx'];
     env: ProgrammaticHost['env'] & Record<string, unknown>;
 }
 interface OAuthStatePayload {

package/dist/session/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/session/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAYL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAiB3B,UAAU,YAAY;IACpB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;KAC3E,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED,UAAU,IAAK,SAAQ,gBAAgB,EAAE,aAAa;IACpD,GAAG,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE,CAAC;IAC/B,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxD;AAED,UAAU,iBAAiB;IACzB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2ClG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAQxF"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/session/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgCH,OAAO,EASL,KAAK,aAAa,EACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAYL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAkB3B,UAAU,IAAK,SAAQ,gBAAgB,EAAE,aAAa;IACpD,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC7B,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxD;AAED,UAAU,iBAAiB;IACzB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2ClG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAQxF"}

package/dist/session/ai.d.ts

@@ -40,6 +40,7 @@
  */
 import type { LanguageModel } from 'ai';
 import { z } from 'zod/v4';
+import type { PortRegistry } from '@nimbus-sh/core/runtime/port-registry.js';
 import { type NimbusCloudflareAccount } from './agent-oauth.js';
 export interface SessionAiHost {
     env: Record<string, unknown>;
@@ -47,10 +48,13 @@ export interface SessionAiHost {
         storage: {
             get(key: string): Promise<unknown>;
             put(key: string, value: unknown): Promise<void>;
-            delete(key: string): Promise<void>;
+            delete(key: string): Promise<boolean | void>;
         };
     };
 }
+export declare function routeSessionLoopback(host: SessionAiHost & {
+    portRegistry: PortRegistry;
+}, port: number, request: Request): Promise<Response | null>;
 /** DO storage key holding this session's Cloudflare credential of record. */
 export declare const SESSION_AI_CREDENTIAL_KEY = "nimbus:ai:credential";
 export declare const DEFAULT_SESSION_AI_MODEL = "@cf/zai-org/glm-5.2";

package/dist/session/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/session/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,OAAO,EAUL,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE;QACH,OAAO,EAAE;YACP,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SACpC,CAAC;KACH,CAAC;CACH;AAED,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAShE,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,YAAY,CAAC;AAmBvD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEhD,QAAA,MAAM,sBAAsB;;;;;iBAK1B,CAAC;AAEH,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAyC/D,iFAAiF;AACjF,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUrD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAQjF;AAID;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBrG;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+BlG;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC,CASD;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1G;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAQvE;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKlG;AAED,uDAAuD;AACvD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjF;AAED,wEAAwE;AACxE,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAEnG;AAID;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkCrG"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/session/ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAG7E,OAAO,EAUL,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,GAAG,EAAE;QACH,OAAO,EAAE;YACP,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;SAC9C,CAAC;KACH,CAAC;CACH;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,GAAG;IAAE,YAAY,EAAE,YAAY,CAAA;CAAE,EACpD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAI1B;AAED,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAShE,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,6BAA6B,YAAY,CAAC;AAmBvD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEhD,QAAA,MAAM,sBAAsB;;;;;iBAK1B,CAAC;AAEH,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAyC/D,iFAAiF;AACjF,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUrD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAQjF;AAID;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBrG;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+BlG;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC,CASD;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM1G;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAQvE;AAED,iFAAiF;AACjF,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKlG;AAED,uDAAuD;AACvD,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGjF;AAED,wEAAwE;AACxE,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAEnG;AAID;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkCrG"}

package/dist/session/ai.js

@@ -41,8 +41,15 @@
 import { createOpenAICompatible } from '@ai-sdk/openai-compatible';
 import { z } from 'zod/v4';
 import { NIMBUS_AI_GATEWAY_PORT } from '@nimbus-sh/core/constants.js';
+import { routeRuntimeLoopback } from './loopback.js';
 import { NIMBUS_AI_TOKEN_ENV, mintSessionAiToken } from '@nimbus-sh/core/_shared/ai-egress.js';
 import { NIMBUS_AGENT_AUTH_COOKIE, NIMBUS_CLOUDFLARE_API, fetchNimbusCloudflareAccounts, fetchNimbusCloudflareUserInfo, loadNimbusAgentOAuthFromRequest, readNimbusAgentCookieSecret, readNimbusAgentOAuthConfig, readNimbusCookie, requestNimbusCloudflareOAuthToken, } from './agent-oauth.js';
+export function routeSessionLoopback(host, port, request) {
+    // A credential-backed gateway is private, not a shareable port entry.
+    if (port === NIMBUS_AI_GATEWAY_PORT)
+        return handleSessionAiRequest(host, request);
+    return routeRuntimeLoopback(host.portRegistry, port, request);
+}
 /** DO storage key holding this session's Cloudflare credential of record. */
 export const SESSION_AI_CREDENTIAL_KEY = 'nimbus:ai:credential';
 /**

package/dist/session/hibernation.d.ts

@@ -80,6 +80,7 @@ export declare function wireHibernationOnConstruct(ctx: any): WsHibernationConfi
  * (per /api/_test/hib/simulate flow; plan §VI.7 F.2 invariant).
  */
 export declare function wireProcessLogPersist(host: HibHost, ctx: any): void;
+export declare function installLogPersistence(host: Pick<HibHost, '_w9PersistWired' | '_w9SchemaInit' | 'processes'>, ctx: DurableObjectState, onActivity: () => void): void;
 /**
  * W1: arm the log-janitor alarm cycle for this instance. Called from the
  * log-activity hook so only sessions that actually produce process logs
@@ -103,7 +104,7 @@ export declare function wireProcessLogPersist(host: HibHost, ctx: any): void;
 export declare function clearDestroyedTombstone(host: HibHost, ctx: any): void;
 export declare function ensureLogJanitor(host: HibHost, ctx: any): void;
 /** W9: idempotent SQL schema bootstrap. */
-export declare function ensureHibSchema(host: HibHost, ctx: any): void;
+export declare function ensureHibSchema(host: Pick<HibHost, '_w9SchemaInit'>, ctx: any): void;
 /**
  * W1: this session's canonical alarm-reason strings, registered on the
  * fabric's reason map. Forward-compat: the dispatcher silently drops unknown

package/dist/session/hibernation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hibernation.d.ts","sourceRoot":"","sources":["../../src/session/hibernation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAA0B,KAAK,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACpH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGrE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,SAAS,EAAE,wBAAwB,CAAC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,GAAG,CAAC;IACnB,4EAA4E;IAC5E,eAAe,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG,yBAAyB,CAY9E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CA6GnE;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAMrE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAc9D;AAED,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqB7D;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,iBAAiB,CAAC;AAEzE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqB9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,GAAG,EACR,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EAC7C,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC1C,SAAS,CAAC,EAAE,mBAAmB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAMhD"}
+{"version":3,"file":"hibernation.d.ts","sourceRoot":"","sources":["../../src/session/hibernation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAA0B,KAAK,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACpH,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGrE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,SAAS,EAAE,wBAAwB,CAAC;IACpC,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,GAAG,CAAC;IACnB,4EAA4E;IAC5E,eAAe,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG,yBAAyB,CAY9E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAKnE;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,GAAG,WAAW,CAAC,EACtE,GAAG,EAAE,kBAAkB,EACvB,UAAU,EAAE,MAAM,IAAI,GACrB,IAAI,CA0GN;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAMrE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAc9D;AAED,2CAA2C;AAC3C,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqBpF;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,iBAAiB,CAAC;AAEzE;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqB9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,GAAG,EACR,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EAC7C,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC1C,SAAS,CAAC,EAAE,mBAAmB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAMhD"}

package/dist/session/hibernation.js

@@ -75,6 +75,12 @@ export function wireHibernationOnConstruct(ctx) {
  * (per /api/_test/hib/simulate flow; plan §VI.7 F.2 invariant).
  */
 export function wireProcessLogPersist(host, ctx) {
+    installLogPersistence(host, ctx, () => {
+        scheduleHibFlush(host, ctx);
+        ensureLogJanitor(host, ctx);
+    });
+}
+export function installLogPersistence(host, ctx, onActivity) {
     if (host._w9PersistWired)
         return;
     host._w9PersistWired = true;
@@ -174,10 +180,7 @@ export function wireProcessLogPersist(host, ctx) {
     // every boot, including boots caused by a destroyed session's own
     // leftover alarm, making every session DO ever created fire an alarm
     // every ~60s forever (see dispatchAlarm's re-arm condition below).
-    host.processes.setLogPersist(adapter, () => {
-        scheduleHibFlush(host, ctx);
-        ensureLogJanitor(host, ctx);
-    });
+    host.processes.setLogPersist(adapter, onActivity);
 }
 /**
  * W1: arm the log-janitor alarm cycle for this instance. Called from the

package/dist/session/init.d.ts

@@ -1,38 +1,3 @@
-/**
- * session/init.ts — initSession boot + shell-command registrations.
- *
- * Why this is one big function and not a class:
- * initSession runs once per /ws upgrade and walks the session
- * through Phase R (rehydrate from SQL), Phase B (compose the
- * workspace + register the session's commands), Phase W (attach
- * terminal), and (cold-only) Phase O (MOTD + framework hint). The
- * phases share lots of locals (vfs, kernel, registry, shell) and
- * ordering matters strictly — there's no interesting reuse boundary
- * that a class decomposition would expose.
- *
- * What it no longer does is COMPOSE the operating system. The kernel,
- * the provider mounts, the command registry, the coreutils, the exec
- * resolver, the default environment and the shell come from
- * `NimbusWorkspace` (@nimbus-sh/core/workspace), which an embedder off
- * Cloudflare builds the same way. What stays here is everything that
- * only makes sense with a socket, a Durable Object and a product behind
- * it: the terminal and its scrollback, the phase machine, the persisted
- * shell state, npm, git, vite, wrangler and the facet-backed runtimes.
- *
- * The function is intentionally written so that a reader sees:
- *   1. setPhase('rehydrate') ...
- *   2. setPhase('build')    ... (~95% of the LOC)
- *   3. setPhase('online')   if (cold)
- *   4. self._b4Phase = 'hydrated'
- *
- * `self` is typed as InitHost, a narrow view of SessionInternal plus readonly
- * ctx/env, so this module can use the session internals it owns without
- * depending on the full Durable Object class surface.
- *
- * Imports and class delegators on NimbusSession preserve back-compat:
- *   - acceptShellWebSocket → self.initSession(ws)  (S7 will extract).
- *   - The class still has `initSession(ws)` as a delegator method.
- */
 import type { SessionInternal } from './internal.js';
 /**
  * `initSession` reads `this.ctx` and `this.env` extensively (~14 sites).
@@ -61,6 +26,6 @@ type InitHost = SessionInternal & {
 export interface InitSessionOptions {
     resume?: 'reconnect' | 'wake';
 }
-export declare function initSession(self: InitHost, ws: WebSocket, options?: InitSessionOptions): Promise<void>;
+export declare function initSession(self: InitHost, ws: WebSocket | null, options?: InitSessionOptions): Promise<void>;
 export {};
 //# sourceMappingURL=init.d.ts.map

package/dist/session/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAkFH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAQ3E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;CAC/B;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,SAAS,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAgsEf"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/session/init.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD;;;;;;;;GAQG;AACH,KAAK,QAAQ,GAAG,eAAe,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAQ3E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;CAC/B;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,QAAQ,EACd,EAAE,EAAE,SAAS,GAAG,IAAI,EACpB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAkcf"}