@nimbus-sh/worker 0.8.0 → 0.10.0

package/dist/facets/real-vite-hmr.d.ts

@@ -35,6 +35,7 @@
  * fs shim is streaming VFS events.
  */
 import { WorkerEntrypoint } from 'cloudflare:workers';
+import type { HostRoute } from '@nimbus-sh/fabric/composition.js';
 /**
  * Supervisor-side registry of active HMR connections for a single
  * real-vite session. One instance lives on each NimbusSession that has
@@ -110,6 +111,7 @@ export declare function registerHmrBridge(doId: string, holder: {
  */
 export declare class CirrusHmrRPC extends WorkerEntrypoint<object, {
     doId?: string;
+    route?: HostRoute;
 }> {
     private _bridge;
     private _stub;

package/dist/facets/real-vite-hmr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"real-vite-hmr.d.ts","sourceRoot":"","sources":["../../src/facets/real-vite-hmr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AASH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAetD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,SAAS;IACpB,2BAA2B;IAC3B,OAAO,CAAC,OAAO,CAAgC;IAC/C,kDAAkD;IAClD,OAAO,CAAC,OAAO,CAAiH;IAChI,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAA0C;IAC1D,oEAAoE;IAC7D,kBAAkB,UAAS;IAClC,OAAO,CAAC,OAAO,CAAK;IAEpB,wEAAwE;IACxE,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM;IAOnC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAK9B,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAInD,6EAA6E;IAC7E,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAapD;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAIjE,OAAO,CAAC,IAAI;IAWZ;;;;OAIG;IACG,UAAU,CAAC,SAAS,GAAE,MAAe,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAkB5D,2BAA2B;IAC3B,IAAI,IAAI,IAAI,MAAM,CAA8B;IAEhD,uDAAuD;IACvD,QAAQ,IAAI,IAAI;CAYjB;AAUD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,GAAG,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAEhF;AAKD;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAa,SAAQ,gBAAgB,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;IAC3E,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,KAAK;IAcP,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5D,YAAY,CAAC,SAAS,GAAE,MAAe,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;CAO/D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CA2HjD;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,CA0EvD"}
+{"version":3,"file":"real-vite-hmr.d.ts","sourceRoot":"","sources":["../../src/facets/real-vite-hmr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AASH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAalE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,SAAS;IACpB,2BAA2B;IAC3B,OAAO,CAAC,OAAO,CAAgC;IAC/C,kDAAkD;IAClD,OAAO,CAAC,OAAO,CAAiH;IAChI,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAA0C;IAC1D,oEAAoE;IAC7D,kBAAkB,UAAS;IAClC,OAAO,CAAC,OAAO,CAAK;IAEpB,wEAAwE;IACxE,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM;IAOnC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAK9B,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAInD,6EAA6E;IAC7E,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAapD;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAIjE,OAAO,CAAC,IAAI;IAWZ;;;;OAIG;IACG,UAAU,CAAC,SAAS,GAAE,MAAe,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAkB5D,2BAA2B;IAC3B,IAAI,IAAI,IAAI,MAAM,CAA8B;IAEhD,uDAAuD;IACvD,QAAQ,IAAI,IAAI;CAYjB;AAUD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,GAAG,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAEhF;AAKD;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAa,SAAQ,gBAAgB,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;IAC9F,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,KAAK;IAeP,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5D,YAAY,CAAC,SAAS,GAAE,MAAe,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;CAO/D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CA2HjD;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,IAAI,MAAM,CA0EvD"}

package/dist/facets/real-vite-hmr.js

@@ -233,9 +233,10 @@ export class CirrusHmrRPC extends WorkerEntrypoint {
             return null;
         let stub = null;
         try {
-            const binding = hostNamespaceBinding(this.env, 'CirrusHmrRPC');
+            const route = this.ctx.props?.route;
+            const binding = hostNamespaceBinding(this.env, 'CirrusHmrRPC', route);
             stub = binding.get(binding.idFromString(doId));
-            return { stub, dispatch: hostOpDispatch(stub, 'CirrusHmrRPC') };
+            return { stub, dispatch: hostOpDispatch(stub, 'CirrusHmrRPC', route) };
         }
         catch (error) {
             disposeRpcResource(stub);

package/dist/git/commands.d.ts

@@ -23,6 +23,20 @@ type Ctx = {
     cwd: string;
     env: Record<string, string>;
 };
+export interface ParsedGitGlobals {
+    sub: string | undefined;
+    subArgs: string[];
+    /** The directory the subcommand runs in, after every `-C`. */
+    dir: string;
+}
+/**
+ * The options git accepts BEFORE the subcommand. `-C <path>` runs the
+ * command as if started from <path>; repeated, each is relative to the
+ * previous (`git -C a -C b` runs in `a/b`). `--no-pager` and `-P` are
+ * accepted and mean nothing here, there is no pager. Any other leading
+ * option is refused: swallowing it would run the next word as a subcommand.
+ */
+export declare function parseGitGlobals(args: string[], cwd: string): ParsedGitGlobals;
 export interface ParsedCloneArgs {
     url: string | undefined;
     dest: string | undefined;
@@ -30,8 +44,10 @@ export interface ParsedCloneArgs {
     noShallow: boolean;
     isBg: boolean;
     branch: string | undefined;
+    /** `-q`/`--quiet`: no progress on stdout; errors still reach stderr. */
+    quiet: boolean;
 }
-export declare const CLONE_USAGE = "usage: git clone [--depth <n>] [--no-shallow] [--branch <name> | -b <name>] [--bg] <url> [dir]";
+export declare const CLONE_USAGE = "usage: git clone [-q | --quiet] [--depth <n>] [--no-shallow] [--branch <name> | -b <name>] [--bg] <url> [dir]";
 /**
  * Every flag is either handled or refused loudly. Silently skipping unknown
  * flags corrupted positionals for value-taking ones (`--branch dev URL`

package/dist/git/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/git/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,yCAAyC,CAAC;AA8JvF,KAAK,GAAG,GAAG;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,CAAC;AAaF,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,eAAO,MAAM,WAAW,mGAC0E,CAAC;AAEnG;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA4C9D;AAWD;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,SAAS,EACd,KAAK,CAAC,EAAE,kBAAkB,EAC1B,KAAK,CAAC,EAAE,GAAG,GACV,OAAO,CAAC,MAAM,CAAC,CA0bjB"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/git/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAmB,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,yCAAyC,CAAC;AA8JvF,KAAK,GAAG,GAAG;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,MAAM,EAAE;QAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,CAAC;AAMF,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAuB7E;AASD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,wEAAwE;IACxE,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,eAAO,MAAM,WAAW,kHACyF,CAAC;AAElH;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAiD9D;AAWD;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,SAAS,EACd,KAAK,CAAC,EAAE,kBAAkB,EAC1B,KAAK,CAAC,EAAE,GAAG,GACV,OAAO,CAAC,MAAM,CAAC,CA8cjB"}

package/dist/git/commands.js

@@ -176,6 +176,42 @@ function createGitFs(vfs) {
 function getDir(ctx) {
     return '/' + (ctx.cwd || '/home/user').replace(/^\/+/, '');
 }
+/**
+ * The options git accepts BEFORE the subcommand. `-C <path>` runs the
+ * command as if started from <path>; repeated, each is relative to the
+ * previous (`git -C a -C b` runs in `a/b`). `--no-pager` and `-P` are
+ * accepted and mean nothing here, there is no pager. Any other leading
+ * option is refused: swallowing it would run the next word as a subcommand.
+ */
+export function parseGitGlobals(args, cwd) {
+    let dir = cwd;
+    let i = 0;
+    for (; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '-C') {
+            const path = args[++i];
+            if (path === undefined)
+                throw new Error("option '-C' requires a value");
+            dir = path.startsWith('/') ? path : dir + '/' + path;
+            dir = '/' + dir.split('/').filter((seg) => seg && seg !== '.').join('/');
+        }
+        else if (arg.startsWith('-C') && arg.length > 2) {
+            const path = arg.slice(2);
+            dir = path.startsWith('/') ? path : dir + '/' + path;
+            dir = '/' + dir.split('/').filter((seg) => seg && seg !== '.').join('/');
+        }
+        else if (arg === '--no-pager' || arg === '-P') {
+            // no pager to disable
+        }
+        else if (arg.startsWith('-') && arg !== '--version' && arg !== '-v' && arg !== '--help' && arg !== '-h') {
+            throw new Error(`unknown option '${arg}'\nusage: git [-C <path>] [--no-pager] <command> [<args>]`);
+        }
+        else {
+            break;
+        }
+    }
+    return { sub: args[i], subArgs: args.slice(i + 1), dir };
+}
 function getFlag(args, flag) {
     const idx = args.indexOf(flag);
     if (idx >= 0)
@@ -183,7 +219,7 @@ function getFlag(args, flag) {
     const prefix = `${flag}=`;
     return args.find((arg) => arg.startsWith(prefix))?.slice(prefix.length) || undefined;
 }
-export const CLONE_USAGE = 'usage: git clone [--depth <n>] [--no-shallow] [--branch <name> | -b <name>] [--bg] <url> [dir]';
+export const CLONE_USAGE = 'usage: git clone [-q | --quiet] [--depth <n>] [--no-shallow] [--branch <name> | -b <name>] [--bg] <url> [dir]';
 /**
  * Every flag is either handled or refused loudly. Silently skipping unknown
  * flags corrupted positionals for value-taking ones (`--branch dev URL`
@@ -195,6 +231,7 @@ export function parseCloneArgs(args) {
     let branch;
     let noShallow = false;
     let isBg = false;
+    let quiet = false;
     const positionals = [];
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
@@ -217,6 +254,10 @@ export function parseCloneArgs(args) {
             noShallow = true;
         else if (arg === '--bg' || arg === '&')
             isBg = true;
+        else if (arg === '-q' || arg === '--quiet')
+            quiet = true;
+        // Progress is already the default; there is no more of it to ask for.
+        else if (arg === '-v' || arg === '--verbose') { /* accepted */ }
         else if (name === '--filter') {
             throw new Error("clone does not support '--filter': the bundled isomorphic-git has no " +
                 'partial-clone support, so a filter would silently download every object. ' +
@@ -236,6 +277,7 @@ export function parseCloneArgs(args) {
         noShallow,
         isBg,
         branch,
+        quiet,
     };
 }
 function getAuthor(ctx) {
@@ -254,10 +296,18 @@ function getAuthor(ctx) {
 export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
     const credentialedVfs = vfs.as(requireVfsCred(ctx.cred, 'git'));
     const fs = createGitFs(credentialedVfs);
-    const args = ctx.args;
-    const sub = args[0];
-    const subArgs = args.slice(1);
-    const dir = getDir(ctx);
+    let globals;
+    try {
+        globals = parseGitGlobals(ctx.args, getDir(ctx));
+    }
+    catch (e) {
+        ctx.stderr.write(`git: ${e?.message}\n`);
+        return 129;
+    }
+    const { sub, subArgs, dir } = globals;
+    // Every subcommand below reads `dir` and the clone's `getDir(ctx)`; `-C`
+    // moves both, exactly as `git -C <path>` runs the command from <path>.
+    ctx = { ...ctx, cwd: dir };
     if (sub === '--version' || sub === '-v') {
         ctx.stdout.write('git version 2.44.0 (isomorphic-git/cf-git)\n');
         return 0;
@@ -299,7 +349,8 @@ export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
                 return 0;
             }
             case 'clone': {
-                const { url, dest: destArg, depth, isBg, branch } = parseCloneArgs(subArgs);
+                const { url, dest: destArg, depth, isBg, branch, quiet } = parseCloneArgs(subArgs);
+                const progress = quiet ? { write() { } } : ctx.stdout;
                 if (!url) {
                     ctx.stderr.write(CLONE_USAGE + '\n');
                     return 1;
@@ -322,7 +373,7 @@ export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
                     ctx.stderr.write('[git] clone requires DO ctx + env (internal configuration error)\n');
                     return 1;
                 }
-                ctx.stdout.write(`Cloning into '${dest}'...${depth ? ' (shallow, depth=' + depth + ')' : ''}\n`);
+                progress.write(`Cloning into '${dest}'...${depth ? ' (shallow, depth=' + depth + ')' : ''}\n`);
                 // A clone's closed-world filesystem view is correct only while no
                 // other session surface can mutate its destination subtree. Acquire
                 // the lease before the facet performs its lstat/readdir emptiness
@@ -342,6 +393,7 @@ export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
                             url,
                             ref: branch,
                             depth,
+                            quiet,
                             exclusiveDestination: true,
                             exclusiveMutationRoot: mutationLease.root,
                             mutationOwner: mutationLease.owner,
@@ -357,7 +409,7 @@ export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
                             },
                         });
                         if (result.success) {
-                            ctx.stdout.write(`\n[git] clone complete (${result.filesWritten} files, ` +
+                            progress.write(`\n[git] clone complete (${result.filesWritten} files, ` +
                                 `${(result.bytesWritten / 1024).toFixed(1)}KB in ${(result.elapsed / 1000).toFixed(1)}s)\n`);
                         }
                         else {
@@ -372,7 +424,7 @@ export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
                 if (isBg) {
                     const task = doClone();
                     doCtx.waitUntil(task);
-                    ctx.stdout.write('[git] clone running in background...\n');
+                    progress.write('[git] clone running in background...\n');
                     return 0;
                 }
                 else {
@@ -458,6 +510,18 @@ export async function runGitCommand(ctx, vfs, doCtx, doEnv) {
                 return 0;
             }
             case 'branch': {
+                if (subArgs[0] === '--show-current') {
+                    // Empty output on a detached HEAD, like git.
+                    const current = await git.currentBranch({ fs, dir });
+                    if (current)
+                        ctx.stdout.write(`${current}\n`);
+                    return 0;
+                }
+                const unknown = subArgs.find((a) => a.startsWith('-') && !['-a', '--list', '-d', '-D'].includes(a));
+                if (unknown) {
+                    ctx.stderr.write(`error: unknown option '${unknown}'\nusage: git branch [-a | --list | --show-current | -d <name> | -D <name> | <name>]\n`);
+                    return 129;
+                }
                 if (subArgs.length === 0 || subArgs[0] === '-a' || subArgs[0] === '--list') {
                     const branches = await git.listBranches({ fs, dir });
                     const current = await git.currentBranch({ fs, dir });

package/dist/git/network-facet.d.ts

@@ -33,6 +33,8 @@ export interface GitNetworkOpts {
     dir: string;
     /** For clone: repository URL */
     url?: string;
+    /** `git clone -q`: no progress on the terminal; the result is unchanged. */
+    quiet?: boolean;
     /** For fetch/pull: remote name (default "origin") */
     remote?: string;
     /** For clone: branch to clone (default remote HEAD); for pull: branch name (default current) */

package/dist/git/network-facet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network-facet.d.ts","sourceRoot":"","sources":["../../src/git/network-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAcH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,YAAY,CAAC;IACjB,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,IAAI,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,+BAA+B;IAC/B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gEAAgE;IAChE,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,wEAAwE;IACxE,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,gBAAgB,GAChB,aAAa,CAAC;AAElB,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,uBAAuB,GAAG,WAAW,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACzC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,wBAAwB,CAAC;IACxC,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAC3B,wBAAwB,GACxB,kCAAkC,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,wBAAwB,CAAC;IACxC,eAAe,EAAE,uBAAuB,CAAC;IACzC,MAAM,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,uBAAuB,GAAG,WAAW,CAAC;IACnD,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,uBAAuB,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AA6BD,UAAU,cAAc;IACtB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC/D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,OAAO;IACf,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACxD;AAED,UAAU,mBAAmB;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAgdD;;GAEG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAuU3B;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAuDT;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD"}
+{"version":3,"file":"network-facet.d.ts","sourceRoot":"","sources":["../../src/git/network-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAcH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,YAAY,CAAC;IACjB,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,IAAI,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,+BAA+B;IAC/B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,kFAAkF;IAClF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gEAAgE;IAChE,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,wEAAwE;IACxE,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,gBAAgB,GAChB,aAAa,CAAC;AAElB,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,uBAAuB,GAAG,WAAW,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACzC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,wBAAwB,CAAC;IACxC,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAC3B,wBAAwB,GACxB,kCAAkC,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,wBAAwB,CAAC;IACxC,eAAe,EAAE,uBAAuB,CAAC;IACzC,MAAM,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,uBAAuB,GAAG,WAAW,CAAC;IACnD,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,uBAAuB,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AA6BD,UAAU,cAAc;IACtB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAC/D,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,OAAO;IACf,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACxD;AAED,UAAU,mBAAmB;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAgdD;;GAEG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAoU3B;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAuDT;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD"}

package/dist/git/network-facet.js

@@ -24,7 +24,7 @@
  * See docs/analysis in git-network-facet plan — the canonical write-up lives
  * in the PR that introduced this file.
  */
-import { getCtxExports } from '@nimbus-sh/fabric/composition.js';
+import { getCtxExports, hostRoute } from '@nimbus-sh/fabric/composition.js';
 import { CF_COMPAT_DATE } from '@nimbus-sh/core/constants.js';
 import { MAX_RPC_SAFE_PAYLOAD_BYTES } from '@nimbus-sh/platform/limits.js';
 import { GIT_BUNDLE_CODE } from '../git-bundle.generated.js';
@@ -407,7 +407,7 @@ export async function execGitNetwork(ctx, env, opts) {
         const ctxExports = getCtxExports();
         const supervisorBinding = ctxExports?.SupervisorRPC
             ? ctxExports.SupervisorRPC({
-                props: { doId: ctx.id.toString(), pid: opts.pid, mutationOwner },
+                props: { doId: ctx.id.toString(), pid: opts.pid, mutationOwner, route: hostRoute() ?? undefined },
             })
             : undefined;
         if (!supervisorBinding) {
@@ -482,7 +482,8 @@ export async function execGitNetwork(ctx, env, opts) {
                             ? prepare.result.error
                             : 'clone-prepare returned an invalid result', prepare.diagnostic);
                     }
-                    await writeClonePhaseProgress(supervisorBinding, prepare.diagnostic);
+                    if (!opts.quiet)
+                        await writeClonePhaseProgress(supervisorBinding, prepare.diagnostic);
                     let checkoutCursor = null;
                     let checkoutChunk = 0;
                     do {
@@ -513,7 +514,9 @@ export async function execGitNetwork(ctx, env, opts) {
                         budgetContext.chunksCompleted++;
                         budgetContext.processedEntries += progress.treeEntriesVisited;
                         budgetContext.decodedBytes += progress.decodedBytes;
-                        await writeCloneChunkProgress(supervisorBinding, checkout.diagnostic, checkoutChunk, progress);
+                        if (!opts.quiet) {
+                            await writeCloneChunkProgress(supervisorBinding, checkout.diagnostic, checkoutChunk, progress);
+                        }
                     } while (checkoutCursor !== null);
                     return {
                         success: true,
@@ -550,7 +553,8 @@ export async function execGitNetwork(ctx, env, opts) {
                             const abort = await invokeFacet(entrypoint, 'clone-abort', crypto.randomUUID(), { ...facetOpts, jobId, optionsHash }, Date.now() + CLONE_ABORT_TIMEOUT_MS, CLONE_ABORT_TIMEOUT_MS);
                             phases.push(abort.diagnostic);
                             accountResult(abort.result);
-                            await writeClonePhaseProgress(supervisorBinding, abort.diagnostic);
+                            if (!opts.quiet)
+                                await writeClonePhaseProgress(supervisorBinding, abort.diagnostic);
                             if (abort.result.success !== true) {
                                 cleanupError = typeof abort.result.error === 'string'
                                     ? abort.result.error
@@ -2185,6 +2189,7 @@ export default {
       }
     }
     const log = (msg) => {
+      if (opts.quiet) return;
       stats.supervisorRpc.stdout++;
       try { useRpcResult(supervisor.stdout(new TextEncoder().encode(msg)), () => undefined).catch(() => {}); } catch {}
     };

package/dist/hosted/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/hosted/commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAsB5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGvE,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,EACnD,oBAAoB,GAAG,gBAAgB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,iBAAiB,GAAG,UAAU,GAAG,cAAc,GAAG,eAAe,GAAG,0BAA0B,CAClV,GAAG;IACF,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAChD,sBAAsB,EAAE,eAAe,CAAC,wBAAwB,CAAC,CAAC;CACnE,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA2rDhH"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/hosted/commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAuB5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGvE,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,EACnD,oBAAoB,GAAG,gBAAgB,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,iBAAiB,GAAG,UAAU,GAAG,cAAc,GAAG,eAAe,GAAG,0BAA0B,CAClV,GAAG;IACF,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC;IAChD,sBAAsB,EAAE,eAAe,CAAC,wBAAwB,CAAC,CAAC;CACnE,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA8qDhH"}

package/dist/hosted/commands.js

@@ -1,7 +1,8 @@
 import { Shell, createCurlCommand, createNpmCommand, NPM_VERSION, createTopCommand, createWatchCommand, createHelpCommand, rehydrateGlobalPackages } from '@nimbus-sh/core/substrate/lifo/index.js';
 import { createKillCommand } from '@nimbus-sh/core/substrate/lifo/commands/system/kill.js';
 import { textSink } from '@nimbus-sh/core/_shared/bytes.js';
-import { CRED_KERNEL, requireVfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { BASH_RUNNER, CRED_KERNEL, requireVfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { ExecutionFs } from '@nimbus-sh/core/shell/execution-fs.js';
 import { EsbuildService } from '@nimbus-sh/core/runtime/esbuild-service.js';
 import { runFresh } from '../runtime/node-runner.js';
 import { runBunScript, BUN_VERSION } from '../runtime/bun-runner.js';
@@ -45,7 +46,7 @@ export async function registerHostedCommands(self, workspace) {
     });
     self._setCpRegistry(registry);
     registry.register('chsh', makeChshCommand({
-        isBashInstalled: (home) => listInstalledRuntimes(sqliteFs, home).some((runtime) => runtime.name === 'bash'),
+        isBashInstalled: async (home) => (await listInstalledRuntimes(sqliteFs, home)).some((runtime) => runtime.name === 'bash'),
     }));
     // ── Git integration (isomorphic-git) ──
     // ctx + env are passed for clone/fetch/pull which run in a facet to avoid
@@ -67,7 +68,7 @@ export async function registerHostedCommands(self, workspace) {
     workspace.runtimes.registerRunner('clang-runner', (manifest, installRoot, binName, binKind) => async (ctx) => {
         const { makeClangRunnerFactory } = await import('@nimbus-sh/core/runtime/clang-runner.js');
         const { facetHostForManager } = await import('../runtime/facet-loader-host.js');
-        return await makeClangRunnerFactory({ facets: facetHostForManager(facetMgr), vfs: sqliteFs })(manifest, installRoot, binName, binKind)(ctx);
+        return await makeClangRunnerFactory({ facets: facetHostForManager(facetMgr), filesystem: workspace.filesystem })(manifest, installRoot, binName, binKind)(ctx);
     });
     // Pyodide v1 — Python 3.13 via the same R2-package-manager
     // substrate that ships clang. Manifest entrypoints `python` and
@@ -88,7 +89,7 @@ export async function registerHostedCommands(self, workspace) {
             const { runPythonRepl } = await import('../runtime/python-repl.js');
             return await runPythonRepl({
                 facetMgr,
-                vfs: sqliteFs,
+                authority: workspace.filesystem,
                 terminal: terminal,
                 installRoot,
                 manifest,
@@ -108,7 +109,6 @@ export async function registerHostedCommands(self, workspace) {
         const { cpythonResidentStart } = await import('../runtime/cpython-resident.js');
         return await makeCPythonRunnerFactory({
             facets: facetHostForManager(facetMgr),
-            vfs: sqliteFs,
             startResident: cpythonResidentStart(facetMgr),
         })(manifest, installRoot, binName, binKind)(ctx);
     });
@@ -127,7 +127,7 @@ export async function registerHostedCommands(self, workspace) {
             const { runRubyRepl } = await import('../runtime/ruby-repl.js');
             return await runRubyRepl({
                 facetMgr,
-                vfs: sqliteFs,
+                authority: workspace.filesystem,
                 terminal: terminal,
                 installRoot,
             });
@@ -135,19 +135,20 @@ export async function registerHostedCommands(self, workspace) {
         const { makeRubyRunnerFactory } = await import('@nimbus-sh/core/runtime/ruby-runner.js');
         const { facetHostForManager } = await import('../runtime/facet-loader-host.js');
         const { rubyResidentStart } = await import('../runtime/ruby-resident.js');
-        return await makeRubyRunnerFactory({
+        const runner = await makeRubyRunnerFactory({
             facets: facetHostForManager(facetMgr),
-            vfs: sqliteFs,
+            filesystem: workspace.filesystem,
             registry,
             startResident: rubyResidentStart(facetMgr),
-        })(manifest, installRoot, binName, binKind)(ctx);
+        })(manifest, installRoot, binName, binKind);
+        return runner(ctx);
     });
     // GNU bash 5.2.37 (wasm32-wasi, asyncified) — dedicated facet
     // runner driving the fork/pipe/exec/setjmp scheduler (fork M1-M3
     // mechanisms). Interactive terminal invocations use the shared
     // ReplSession line editor; -c, scripts, and piped stdin retain the
     // canonical one-shot handler.
-    workspace.runtimes.registerRunner('bash-runner', (manifest, installRoot, binName, binKind) => async (ctx) => {
+    workspace.runtimes.registerRunner(BASH_RUNNER, (manifest, installRoot, binName, binKind) => async (ctx) => {
         const argv = ctx.args || [];
         const explicitInteractive = argv.includes('-i');
         const terminalStdin = ctx.isFdTerminal?.(0) ?? !ctx.stdin;
@@ -155,11 +156,13 @@ export async function registerHostedCommands(self, workspace) {
             const { runBashRepl } = await import('../runtime/bash-repl.js');
             return await runBashRepl({
                 facetMgr,
-                vfs: sqliteFs,
+                authority: workspace.filesystem,
                 terminal: terminal,
                 installRoot,
                 manifest,
                 cred: ctx.cred,
+                pid: ctx.pid,
+                filesystem: workspace.filesystem.bind({ pid: ctx.pid, cred: ctx.cred, signal: ctx.signal }),
                 env: ctx.env,
                 cwd: ctx.cwd || '/home/user',
                 shell: shell ?? undefined,
@@ -167,7 +170,7 @@ export async function registerHostedCommands(self, workspace) {
         }
         const { makeBashRunnerFactory } = await import('@nimbus-sh/core/runtime/bash-runner.js');
         const { facetHostForManager } = await import('../runtime/facet-loader-host.js');
-        return await makeBashRunnerFactory({ facets: facetHostForManager(facetMgr), vfs: sqliteFs })(manifest, installRoot, binName, binKind)(ctx);
+        return await makeBashRunnerFactory({ facets: facetHostForManager(facetMgr), filesystem: workspace.filesystem })(manifest, installRoot, binName, binKind)(ctx);
     });
     {
         // Cast registry to the minimal package-manager shape. CommandRegistry
@@ -198,24 +201,16 @@ export async function registerHostedCommands(self, workspace) {
                 const stderr = { write: (s) => { stderrText.push(String(s)); } };
                 const py = await registry.resolve('python');
                 if (py) {
-                    const pid = 'pid' in ctx ? ctx.pid : undefined;
-                    const setUmask = 'setUmask' in ctx ? ctx.setUmask : undefined;
-                    const runAs = 'runAs' in ctx ? ctx.runAs : undefined;
-                    if (typeof pid !== 'number'
-                        || typeof setUmask !== 'function'
-                        || typeof runAs !== 'function'
-                        || kernel === null) {
-                        throw new Error('python warm-up requires a process identity');
-                    }
-                    const cred = requireVfsCred('cred' in ctx ? ctx.cred : undefined, 'python warm-up');
+                    const pid = ctx.pid;
+                    const cred = requireVfsCred(ctx.cred, 'python warm-up');
                     const code = await py({
                         ...ctx,
                         args: ['-c', 'pass'],
                         pid,
                         cred,
-                        setUmask: (mask) => setUmask(mask),
-                        runAs: (targetCred, argv) => runAs(targetCred, argv),
-                        vfs: kernel.vfs,
+                        setUmask: (mask) => ctx.setUmask(mask),
+                        runAs: (targetCred, argv) => ctx.runAs(targetCred, argv),
+                        vfs: new ExecutionFs(workspace.filesystem.bind({ pid, cred })),
                         signal: new AbortController().signal,
                         stdout,
                         stderr,
@@ -227,7 +222,7 @@ export async function registerHostedCommands(self, workspace) {
                 const { warmPythonRepl } = await import('../runtime/python-repl.js');
                 await warmPythonRepl({
                     facetMgr,
-                    vfs: sqliteFs,
+                    authority: workspace.filesystem,
                     installRoot: target.root,
                     manifest: target.manifest,
                 });
@@ -284,7 +279,6 @@ export async function registerHostedCommands(self, workspace) {
     };
     {
         const oneShotNode = buildRuntimeHandler(nodeSpec, {
-            vfs: sqliteFs,
             getEsbuild: () => {
                 if (!self.esbuildService) {
                     self.ensureSqliteFs();
@@ -418,9 +412,9 @@ export async function registerHostedCommands(self, workspace) {
                         return 1;
                     }
                 }
-                const resolved = resolveRuntimeScriptPath(kernelFs, cwd, target, {
+                const resolved = (await resolveRuntimeScriptPath(kernelFs, cwd, target, {
                     preferModuleField: true,
-                });
+                }));
                 if (resolved === null) {
                     ctx.stderr.write(pathShaped
                         ? `error: Module not found "${target}"\n`
@@ -433,7 +427,6 @@ export async function registerHostedCommands(self, workspace) {
     };
     {
         const oneShotBun = buildRuntimeHandler(bunSpec, {
-            vfs: sqliteFs,
             getEsbuild: () => {
                 if (!self.esbuildService) {
                     self.ensureSqliteFs();
@@ -473,15 +466,11 @@ export async function registerHostedCommands(self, workspace) {
                 const { wasmRunnerSpec } = await import('@nimbus-sh/core/runtime/wasm-runner.js');
                 const { loaderFacetHost } = await import('../runtime/facet-loader-host.js');
                 const wasmSpec = wasmRunnerSpec({
-                    // filesystem WASI: extended VFS surface for WASI file-IO. The
-                    // wasm-runner snapshots a session subtree into the facet, flushes
-                    // the diff back via this surface after _start returns.
-                    vfs: sqliteFs,
+                    filesystem: workspace.filesystem,
                     facets: loaderFacetHost(self.env, self.ctx),
                     processes: self.processes,
                 });
                 wasmHandler = buildRuntimeHandler(wasmSpec, {
-                    vfs: sqliteFs,
                     getEsbuild: () => {
                         if (!self.esbuildService) {
                             self.ensureSqliteFs();
@@ -832,7 +821,7 @@ export async function registerHostedCommands(self, workspace) {
         await self.ensureNpmInstaller((msg) => {
             ctx.stdout.write('[npm] ' + msg + '\n');
         });
-        const result = await self.npmInstaller.install(cwd, { packages, pid: ctx.pid });
+        const result = await self.npmInstaller.install(cwd, { packages, pid: ctx.pid, registry: ctx.env?.NPM_REGISTRY });
         if (result.failed.length > 0) {
             ctx.stderr.write('\x1b[31mFailed: ' + result.failed.join(', ') + '\x1b[0m\n');
         }
@@ -896,7 +885,7 @@ export async function registerHostedCommands(self, workspace) {
             try {
                 const identity = commandIdentityFor(childProcess.pid);
                 const terminal = new HeadlessTerminal();
-                const childShell = new Shell(terminal, kernel.vfs, registry, { ...env, ...(options?.env || {}) }, processRegistry, identity);
+                const childShell = new Shell(terminal, workspace.filesystem, registry, { ...env, ...(options?.env || {}) }, processRegistry, identity);
                 HeredocHandler.install(childShell, terminal);
                 if (options?.cwd)
                     childShell.setCwd(options.cwd);
@@ -918,7 +907,7 @@ export async function registerHostedCommands(self, workspace) {
             }
         },
     };
-    registerShellEntrypointCommands(registry, shellEntrypointExecutor, kernelFs);
+    registerShellEntrypointCommands(registry, shellEntrypointExecutor);
     // Shell scripts that execute through the local shell still need the same
     // process-table and log-store contract as facet-backed processes.
     const shellExecuteTracked = async (cmd, cmdCtx, opts = {}) => {
@@ -1385,7 +1374,7 @@ export async function registerHostedCommands(self, workspace) {
         await self.ensureNpmInstaller((msg) => ctx.stdout.write('[npm] ' + msg + '\n'));
         self.ensureSqliteFs();
         const installer = self.npmInstaller;
-        const resolveResult = await resolveNpxBinary(installer, sqliteFs.as(requireVfsCred('cred' in ctx ? ctx.cred : undefined, 'npx')), ctx.cwd || '/home/user', npxArgs, (msg) => ctx.stdout.write(msg + '\n'), ctx.pid);
+        const resolveResult = await resolveNpxBinary(installer, sqliteFs.as(requireVfsCred(ctx.cred, 'npx')), ctx.cwd || '/home/user', npxArgs, (msg) => ctx.stdout.write(msg + '\n'), ctx.pid, ctx.env?.NPM_REGISTRY);
         if (resolveResult.ok && resolveResult.binPath) {
             const nodeCmd = await registry.resolve('node');
             if (nodeCmd) {

package/dist/hosted/runtime.d.ts

@@ -4,6 +4,7 @@ import type { ProcessLogReadOptions } from '@nimbus-sh/core/runtime/process-logs
 import type { VfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
 import type { SandboxFs } from '@nimbus-sh/core/substrate/lifo/sandbox/types.js';
 import { type SupervisorOpEnvelope } from '@nimbus-sh/core/workspace/supervisor-op.js';
+import type { ComposedFacetManager, FacetManagerHostHooks } from '../facets/compose.js';
 import { WebSocketTerminal } from '../facets/ws-terminal.js';
 import * as operations from '../session/programmatic.js';
 import * as services from './services.js';
@@ -25,6 +26,7 @@ export interface HostedRuntimeOptions {
     env: services.HostedRuntimeEnv;
     ports: PortRegistry;
     lifecycle: HostedRuntimeLifecycle;
+    resolveWorkerLaunch?: FacetManagerHostHooks['resolveWorkerLaunch'];
     basePath?: string;
     origin?: string;
 }
@@ -36,6 +38,7 @@ export declare function composeHostedRuntime(options: HostedRuntimeOptions): Pro
     terminal: WebSocketTerminal;
     files: RuntimeFiles;
     runtimes: import("@nimbus-sh/core/runtime/runtime-manager.js").RuntimeManager;
+    facets: () => ComposedFacetManager;
     ready: (options?: operations.ProgrammaticReadyOptions | undefined) => Promise<{
         ok: true;
         preinstalled: string[];
@@ -80,6 +83,25 @@ export declare function composeHostedRuntime(options: HostedRuntimeOptions): Pro
     }>;
     listPorts: () => Promise<operations.SerializedPort[]>;
     listApps: () => Promise<operations.ListedApp[]>;
+    ensureDurableApp: (input: {
+        owner: string;
+        preferredPort?: number;
+        visibility?: "scoped" | "public";
+        name?: string;
+    }) => Promise<{
+        port: number;
+        capability: string | null;
+        visibility: "scoped" | "public";
+    }>;
+    unexposePort: (port: number) => Promise<{
+        port: number;
+        ok: boolean;
+    }>;
+    removeDurableApp: (owner: string) => Promise<{
+        owner: string;
+        removed: boolean;
+        port: number | null;
+    }>;
     exposeApp: (target: operations.AppTarget, options?: {
         visibility?: "scoped" | "public";
         name?: string;
@@ -100,8 +122,8 @@ export declare function composeHostedRuntime(options: HostedRuntimeOptions): Pro
         installed: import("@nimbus-sh/core/runtime/installed-runtimes.js").RuntimeSummary[];
         available: import("@nimbus-sh/core/runtime/runtime-package.js").RuntimeAvailability[];
     }>;
-    spawnWorker: (workerCode: string, command: string, cwd: string, opts?: import("../facets/manager.js").LongRunningWorkerSpawnOptions | undefined) => Promise<import("../facets/manager.js").SpawnedWorker>;
-    routeCapabilityPort: (port: number, capability: string, request: Request<unknown, CfProperties<unknown>>, pathname: string) => Promise<Response>;
+    spawnWorker: (workerCode: string, command: string, cwd: string, opts?: import("../workspace-host.js").LongRunningWorkerSpawnOptions | undefined) => Promise<import("../facets/manager.js").SpawnedWorker>;
+    routeCapabilityPort: (port: number, capability: string, request: Request<unknown, CfProperties<unknown>>, innerPath: string) => Promise<Response>;
     supervisorOp: (envelope: SupervisorOpEnvelope) => Promise<unknown>;
     onScheduled: (task: HostedRuntimeTask) => Promise<void>;
     attachTerminal: (ws: WebSocket) => Promise<void>;

package/dist/hosted/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/hosted/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAGvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAW7G,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAO7D,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAI3B,QAAA,MAAM,UAAU;;;;EAA0D,CAAC;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE3D,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,EAAE,kBAAkB,CAAC;IACxB,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,sBAAsB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,EAAE,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CAAC;CACjC;AAsOD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAkBjD,MAAM,YAAY,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAWjC,oBAAoB;wBACzB,iBAAiB;yBAChB,SAAS;wBACV,SAAS,WAAW,MAAM,GAAG,WAAW;wBACxC,SAAS;;GAGhC;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/hosted/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,KAAK,EAA6B,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAIlG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAqD,KAAK,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAE1I,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AASxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAO7D,OAAO,KAAK,UAAU,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAI3B,QAAA,MAAM,UAAU;;;;EAA0D,CAAC;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE3D,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,EAAE,kBAAkB,CAAC;IACxB,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,sBAAsB,CAAC;IAClC,mBAAmB,CAAC,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,EAAE,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CAAC;CACjC;AAqRD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAmBjD,MAAM,YAAY,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAiBjC,oBAAoB;wBACzB,iBAAiB;yBAChB,SAAS;wBACV,SAAS,WAAW,MAAM,GAAG,WAAW;wBACxC,SAAS;;GAGhC;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC"}