@nimbus-sh/worker 0.8.0 → 0.9.0

package/dist/loaders/generated-workers.js

@@ -16,7 +16,7 @@
  *   W7_MAGIC, W7_MAX_RECORD_BYTES.
  *
  * Tar size: 4.62 KiB
- * W7 size:  28.97 KiB
+ * W7 size:  29.55 KiB
  */
 export const TAR_STREAM_PREAMBLE = "// ../core/src/_shared/tarball-stream.ts\nvar MAX_FILE_BYTES = 2e7;\nfunction canonicalTarName(name) {\n  const out = [];\n  for (const seg of name.split(\"/\")) {\n    if (seg === \"..\") {\n      if (out.length === 0) return \"\";\n      out.pop();\n    } else if (seg !== \"\" && seg !== \".\") {\n      out.push(seg);\n    }\n  }\n  return out.join(\"/\");\n}\nfunction parseTarHeader(block) {\n  if (block[0] === 0) return null;\n  let name = \"\";\n  for (let i = 0; i < 100 && block[i] !== 0; i++) {\n    name += String.fromCharCode(block[i]);\n  }\n  let prefix = \"\";\n  for (let i = 345; i < 500 && block[i] !== 0; i++) {\n    prefix += String.fromCharCode(block[i]);\n  }\n  if (prefix) name = prefix + \"/\" + name;\n  name = canonicalTarName(name);\n  let sizeStr = \"\";\n  for (let i = 124; i < 136 && block[i] !== 0; i++) {\n    sizeStr += String.fromCharCode(block[i]);\n  }\n  const size = parseInt(sizeStr.trim(), 8) || 0;\n  const typeFlag = block[156];\n  return { name, size, typeFlag };\n}\nasync function* readableStreamToAsyncIterable(rs) {\n  const reader = rs.getReader();\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) return;\n      if (value && value.length > 0) yield value;\n    }\n  } finally {\n    try {\n      reader.releaseLock();\n    } catch {\n    }\n  }\n}\nasync function* streamTarEntries(source, onSkip) {\n  let carry = new Uint8Array(0);\n  let state = { kind: \"header\" };\n  function concat(a, b) {\n    if (a.length === 0) return b;\n    if (b.length === 0) return a;\n    const out = new Uint8Array(a.length + b.length);\n    out.set(a, 0);\n    out.set(b, a.length);\n    return out;\n  }\n  for await (const chunkRaw of source) {\n    let buf = concat(carry, chunkRaw);\n    let cursor = 0;\n    while (true) {\n      if (state.kind === \"header\") {\n        if (buf.length - cursor < 512) break;\n        const header = buf.subarray(cursor, cursor + 512);\n        const parsed = parseTarHeader(header);\n        cursor += 512;\n        if (!parsed) return;\n        const { name, size, typeFlag } = parsed;\n        const pad = size === 0 ? 0 : (512 - size % 512) % 512;\n        const isRegularFile = typeFlag === 48 || typeFlag === 0;\n        if (size === 0) {\n          if (isRegularFile && name) {\n            yield { name, data: new Uint8Array(0) };\n          }\n          state = { kind: \"header\" };\n          continue;\n        }\n        if (!isRegularFile || !name || size > MAX_FILE_BYTES) {\n          if (onSkip) {\n            const reason = !isRegularFile ? \"non-regular\" : !name ? \"no-name\" : \"too-large\";\n            try {\n              onSkip(name, size, reason);\n            } catch {\n            }\n          }\n          state = { kind: \"skip\", remaining: size + pad };\n          continue;\n        }\n        state = {\n          kind: \"file\",\n          name,\n          remaining: size,\n          fileBuf: new Uint8Array(size),\n          fileOffset: 0,\n          pad,\n          skip: false\n        };\n        continue;\n      }\n      if (state.kind === \"file\") {\n        const avail2 = buf.length - cursor;\n        if (avail2 === 0) break;\n        if (state.remaining > 0) {\n          const take2 = Math.min(state.remaining, avail2);\n          state.fileBuf.set(buf.subarray(cursor, cursor + take2), state.fileOffset);\n          state.fileOffset += take2;\n          state.remaining -= take2;\n          cursor += take2;\n          if (state.remaining > 0) break;\n        }\n        if (state.pad > 0) {\n          const avail22 = buf.length - cursor;\n          if (avail22 === 0) break;\n          const take2 = Math.min(state.pad, avail22);\n          state.pad -= take2;\n          cursor += take2;\n          if (state.pad > 0) break;\n        }\n        yield { name: state.name, data: state.fileBuf };\n        state = { kind: \"header\" };\n        continue;\n      }\n      const avail = buf.length - cursor;\n      if (avail === 0) break;\n      const take = Math.min(state.remaining, avail);\n      cursor += take;\n      state.remaining -= take;\n      if (state.remaining > 0) break;\n      state = { kind: \"header\" };\n    }\n    if (cursor >= buf.length) {\n      carry = new Uint8Array(0);\n    } else if (cursor === 0) {\n      carry = buf;\n    } else {\n      carry = buf.slice(cursor);\n    }\n  }\n}\nasync function* streamPackageEntries(source, onSkip) {\n  let prefix = null;\n  for await (const entry of streamTarEntries(source, onSkip)) {\n    if (prefix === null) {\n      prefix = entry.name.split(\"/\", 1)[0];\n    }\n    if (entry.name === prefix) continue;\n    if (!entry.name.startsWith(prefix + \"/\")) {\n      throw new Error(\n        `package tarball is not single-rooted: entry \"${entry.name}\" sits outside \"${prefix}/\"`\n      );\n    }\n    yield { name: entry.name.slice(prefix.length + 1), data: entry.data };\n  }\n}";
-export const W7_FRAME_PREAMBLE = "// ../platform/src/limits.ts\nvar CHUNK_SIZE = 65536;\nvar MAX_TX_BLOB_BYTES = 1 * 1024 * 1024;\nvar SQLITE_MAX_STATEMENT_BYTES = 100 * 1024;\nvar MAX_RPC_SAFE_PAYLOAD_BYTES = 28 * 1024 * 1024;\nvar SUPERVISOR_HEAP_CEILING_BYTES = 64 * 1024 * 1024;\nvar SUPERVISOR_IN_FLIGHT_ALLOCATION_BUDGET_BYTES = 40 * 1024 * 1024;\nvar SUPERVISOR_READ_RESERVE_BYTES = 1024 * 1024;\nvar MAX_GLOBAL_WRITE_STREAM_CREDIT_BYTES = 8 * 1024 * 1024;\n\n// ../platform/src/w7-frame.ts\nvar W7_MAGIC = new Uint8Array([78, 87, 55, 3]);\nvar ENCODER_QUEUE_HWM = 0;\nvar MAX_METADATA_BYTES = 64 * 1024;\nvar MAX_PATH_BYTES = 64 * 1024;\nvar MAX_BATCH_ID_BYTES = 128;\nvar MAX_CONTENT_ID_BYTES = 256;\nvar W7_MAX_PATHS_PER_BATCH = 128;\nvar W7_MAX_OWNED_PATH_BYTES = 64 * 1024;\nvar W7_MAX_RECORD_BYTES = 5 + 4 + MAX_CONTENT_ID_BYTES + 8 + CHUNK_SIZE;\nvar MODE = \"path-atomic-committed-prefix\";\nfunction encodeWriteBatchStream(payload) {\n  const batchId = crypto.randomUUID();\n  const { deletes, directories, files } = preparePayload(payload, batchId);\n  const iterator = encodeRecords(batchId, deletes, directories, files);\n  let closed = false;\n  let magicEmitted = false;\n  const source = {\n    type: \"bytes\",\n    pull(controller) {\n      if (closed) return;\n      try {\n        if (!magicEmitted) {\n          magicEmitted = true;\n          controller.enqueue(W7_MAGIC.slice());\n          return;\n        }\n        const next = iterator.next();\n        if (next.done) {\n          closed = true;\n          controller.close();\n          return;\n        }\n        for (const part of next.value) controller.enqueue(part);\n      } catch (error) {\n        closed = true;\n        controller.error(error);\n      }\n    },\n    cancel() {\n      closed = true;\n      iterator.return?.(void 0);\n    }\n  };\n  return new ReadableStream(source, {\n    highWaterMark: ENCODER_QUEUE_HWM\n  });\n}\nasync function decodeWriteBatchStream(stream, options = {}) {\n  let reader;\n  try {\n    reader = stream.getReader({ mode: \"byob\" });\n  } catch {\n    throw new Error(\"w7-frame: stream must be a byte-oriented ReadableStream\");\n  }\n  const buffer = new ExactByteReader(reader);\n  let handedOff = false;\n  try {\n    throwIfAborted(options.signal);\n    const magic = await buffer.readExact(W7_MAGIC.length, \"magic\");\n    if (!bytesEqual(magic, W7_MAGIC)) {\n      const version = magic.length === 4 && magic[0] === 78 && magic[1] === 87 && magic[2] === 55 ? magic[3] : null;\n      if (version !== null) {\n        throw new Error(`w7-frame: unsupported protocol version ${version}; expected 3`);\n      }\n      throw new Error(`w7-frame: bad magic, expected NW7\\\\x03, got ${hex(magic)}`);\n    }\n    const beginEnvelope = await readEnvelope(buffer, \"batch-begin\");\n    if (beginEnvelope.tag !== 1 /* BatchBegin */) {\n      throw new Error(`w7-frame: first record must be batch-begin, got tag ${beginEnvelope.tag}`);\n    }\n    if (beginEnvelope.length > MAX_METADATA_BYTES) {\n      throw new Error(\n        `w7-frame: batch-begin length ${beginEnvelope.length} exceeds ${MAX_METADATA_BYTES}`\n      );\n    }\n    const beginPayload = await buffer.readExact(beginEnvelope.length, \"batch-begin payload\");\n    const begin = parseBatchBegin(beginPayload);\n    const initialCheck = updateRecordCheck(CRC_SEED, beginEnvelope.header, beginPayload);\n    handedOff = true;\n    return {\n      batchId: begin.id,\n      mode: begin.mode,\n      records: decodeRecords(stream, reader, buffer, options, initialCheck)\n    };\n  } catch (error) {\n    if (!handedOff) await cancelReader(reader, error);\n    throw error;\n  }\n}\nasync function* decodeRecords(stream, reader, buffer, options, initialCheck) {\n  const ownedPaths = new PathOwnership();\n  const contentIds = /* @__PURE__ */ new Set();\n  let active = null;\n  let batchCheck = initialCheck;\n  const summary = {\n    recordCount: 1,\n    pathCount: 0,\n    deleteCount: 0,\n    directoryCount: 0,\n    fileCount: 0,\n    chunkCount: 0,\n    byteCount: 0\n  };\n  let completed = false;\n  let failure = new DOMException(\"W7 consumer cancelled\", \"AbortError\");\n  try {\n    while (true) {\n      throwIfAborted(options.signal);\n      const envelope = await readEnvelope(buffer, \"record\");\n      if (active && envelope.tag !== 5 /* FileChunk */ && envelope.tag !== 6 /* FileEnd */) {\n        throw new Error(`w7-frame: file ${active.inode.path} ended without file-end`);\n      }\n      if (envelope.tag === 5 /* FileChunk */) {\n        if (!active) throw new Error(\"w7-frame: file-chunk without active file\");\n        const prefixLength = Math.min(envelope.length, 4 + MAX_CONTENT_ID_BYTES + 8);\n        const idLengthBytes = await buffer.readExact(4, \"file-chunk content-id length\");\n        const idLength = readU32LE(idLengthBytes, 0);\n        if (idLength === 0 || idLength > MAX_CONTENT_ID_BYTES) {\n          throw new Error(`w7-frame: invalid file-chunk content-id length ${idLength}`);\n        }\n        const remainingPrefixLength = idLength + 8;\n        if (4 + remainingPrefixLength > prefixLength || 4 + remainingPrefixLength > envelope.length) {\n          throw new Error(\"w7-frame: malformed file-chunk record length\");\n        }\n        const rest = await buffer.readExact(remainingPrefixLength, \"file-chunk header\");\n        const contentId = decodeText(rest.subarray(0, idLength), \"file-chunk content id\");\n        const chunkId = readU32LE(rest, idLength);\n        const dataLength = readU32LE(rest, idLength + 4);\n        if (envelope.length !== 4 + idLength + 8 + dataLength) {\n          throw new Error(\"w7-frame: file-chunk payload length mismatch\");\n        }\n        if (contentId !== active.metadata.contentId) {\n          throw new Error(`w7-frame: file-chunk content id ${contentId} does not own ${active.inode.path}`);\n        }\n        if (chunkId !== active.nextChunkId) {\n          throw new Error(\n            `w7-frame: ${active.inode.path}: expected chunk ${active.nextChunkId}, got ${chunkId}`\n          );\n        }\n        if (chunkId >= active.inode.chunkCount) {\n          throw new Error(`w7-frame: ${active.inode.path}: chunk ${chunkId} is out of range`);\n        }\n        const expectedBytes = Math.min(\n          CHUNK_SIZE,\n          active.inode.size - chunkId * CHUNK_SIZE\n        );\n        if (dataLength !== expectedBytes || dataLength > CHUNK_SIZE) {\n          throw new Error(\n            `w7-frame: ${active.inode.path}: chunk ${chunkId} has ${dataLength} bytes; expected ${expectedBytes}`\n          );\n        }\n        const headerPayload = concatBytes(idLengthBytes, rest);\n        let retention = null;\n        try {\n          retention = options.retainChunk ? await options.retainChunk(dataLength, options.signal) : noopRetention(dataLength);\n          throwIfAborted(options.signal);\n          const data = await buffer.readExact(dataLength, \"file-chunk data\");\n          batchCheck = updateRecordCheck(batchCheck, envelope.header, headerPayload, data);\n          active.check = crc32Update(active.check, data);\n          active.nextChunkId++;\n          active.receivedBytes += dataLength;\n          summary.recordCount++;\n          summary.chunkCount++;\n          summary.byteCount += dataLength;\n          const record = {\n            type: \"file-chunk\",\n            streamContentId: contentId,\n            path: active.inode.path,\n            chunkId,\n            data,\n            retention\n          };\n          retention = null;\n          yield record;\n        } finally {\n          retention?.release();\n        }\n        continue;\n      }\n      if (envelope.length > MAX_METADATA_BYTES) {\n        throw new Error(`w7-frame: metadata record length ${envelope.length} exceeds ${MAX_METADATA_BYTES}`);\n      }\n      const payload = await buffer.readExact(envelope.length, \"record payload\");\n      if (envelope.tag !== 7 /* BatchEnd */) {\n        batchCheck = updateRecordCheck(batchCheck, envelope.header, payload);\n        summary.recordCount++;\n      }\n      switch (envelope.tag) {\n        case 2 /* Delete */: {\n          const metadata = parseDelete(payload);\n          claimPath(ownedPaths, metadata.path);\n          summary.pathCount++;\n          summary.deleteCount++;\n          yield { type: \"delete\", path: metadata.path };\n          break;\n        }\n        case 3 /* Directory */: {\n          const metadata = parseDirectory(payload);\n          claimPath(ownedPaths, metadata.path);\n          summary.pathCount++;\n          summary.directoryCount++;\n          yield { type: \"directory\", inode: directoryInode(metadata) };\n          break;\n        }\n        case 4 /* FileBegin */: {\n          const metadata = parseFileBegin(payload);\n          claimPath(ownedPaths, metadata.path);\n          if (contentIds.has(metadata.contentId)) {\n            throw new Error(`w7-frame: duplicate stream content id ${metadata.contentId}`);\n          }\n          contentIds.add(metadata.contentId);\n          const inode = fileInode(metadata);\n          summary.pathCount++;\n          summary.fileCount++;\n          active = {\n            metadata,\n            inode,\n            nextChunkId: 0,\n            receivedBytes: 0,\n            check: CRC_SEED\n          };\n          yield { type: \"file-begin\", streamContentId: metadata.contentId, inode };\n          break;\n        }\n        case 6 /* FileEnd */: {\n          if (!active) throw new Error(\"w7-frame: file-end without active file\");\n          const metadata = parseFileEnd(payload);\n          const actualCheck = crc32Finish(active.check);\n          if (metadata.contentId !== active.metadata.contentId) {\n            throw new Error(`w7-frame: file-end content id mismatch for ${active.inode.path}`);\n          }\n          if (metadata.size !== active.receivedBytes || metadata.size !== active.inode.size) {\n            throw new Error(`w7-frame: file-end byte total mismatch for ${active.inode.path}`);\n          }\n          if (metadata.chunkCount !== active.nextChunkId || metadata.chunkCount !== active.inode.chunkCount) {\n            throw new Error(`w7-frame: file-end chunk count mismatch for ${active.inode.path}`);\n          }\n          if (metadata.check !== actualCheck) {\n            throw new Error(`w7-frame: file-end check mismatch for ${active.inode.path}`);\n          }\n          const record = {\n            type: \"file-end\",\n            streamContentId: metadata.contentId,\n            path: active.inode.path,\n            size: metadata.size,\n            chunkCount: metadata.chunkCount,\n            check: metadata.check\n          };\n          active = null;\n          yield record;\n          break;\n        }\n        case 7 /* BatchEnd */: {\n          if (active) throw new Error(`w7-frame: batch-end while file ${active.inode.path} is active`);\n          const actual = parseBatchEnd(payload);\n          const expected = { ...summary, check: crc32Finish(batchCheck) };\n          if (!sameSummary(actual, expected)) {\n            throw new Error(\n              `w7-frame: batch-end summary mismatch; expected ${JSON.stringify(expected)}, got ${JSON.stringify(actual)}`\n            );\n          }\n          await buffer.ensureEof(stream);\n          completed = true;\n          yield { type: \"batch-end\", summary: actual };\n          return;\n        }\n        case 1 /* BatchBegin */:\n          throw new Error(\"w7-frame: duplicate batch-begin\");\n        default:\n          throw new Error(`w7-frame: unknown record tag ${envelope.tag}`);\n      }\n    }\n  } catch (error) {\n    failure = error;\n    throw error;\n  } finally {\n    if (completed) {\n      try {\n        reader.releaseLock();\n      } catch {\n      }\n    } else {\n      await cancelReader(reader, failure);\n    }\n  }\n}\nfunction* encodeRecords(batchId, deletes, directories, files) {\n  const state = {\n    batchCheck: CRC_SEED,\n    summary: {\n      recordCount: 0,\n      pathCount: 0,\n      deleteCount: 0,\n      directoryCount: 0,\n      fileCount: 0,\n      chunkCount: 0,\n      byteCount: 0\n    }\n  };\n  yield encodeMetadataRecord(1 /* BatchBegin */, { id: batchId, mode: MODE }, state);\n  for (const path of deletes) {\n    state.summary.pathCount++;\n    state.summary.deleteCount++;\n    yield encodeMetadataRecord(2 /* Delete */, { path }, state);\n  }\n  for (const inode of directories) {\n    state.summary.pathCount++;\n    state.summary.directoryCount++;\n    yield encodeMetadataRecord(3 /* Directory */, {\n      ...inodeMetadata(inode),\n      kind: inode.kind\n    }, state);\n  }\n  for (const file of files) {\n    state.summary.pathCount++;\n    state.summary.fileCount++;\n    yield encodeMetadataRecord(4 /* FileBegin */, {\n      ...inodeMetadata(file.inode),\n      kind: file.inode.kind,\n      contentId: file.contentId,\n      size: file.inode.size,\n      chunkCount: file.inode.chunkCount\n    }, state);\n    let fileCheck = CRC_SEED;\n    for (const chunk of file.chunks) {\n      const data = chunk.data;\n      const contentBytes = new TextEncoder().encode(file.contentId);\n      const prefix = new Uint8Array(4 + contentBytes.length + 8);\n      writeU32LE(prefix, 0, contentBytes.length);\n      prefix.set(contentBytes, 4);\n      writeU32LE(prefix, 4 + contentBytes.length, chunk.chunkId);\n      writeU32LE(prefix, 8 + contentBytes.length, data.byteLength);\n      const header = recordHeader(5 /* FileChunk */, prefix.byteLength + data.byteLength);\n      state.batchCheck = updateRecordCheck(state.batchCheck, header, prefix, data);\n      state.summary.recordCount++;\n      state.summary.chunkCount++;\n      state.summary.byteCount += data.byteLength;\n      fileCheck = crc32Update(fileCheck, data);\n      yield [concatBytes(header, prefix), data];\n    }\n    yield encodeMetadataRecord(6 /* FileEnd */, {\n      contentId: file.contentId,\n      size: file.inode.size,\n      chunkCount: file.inode.chunkCount,\n      check: crc32Finish(fileCheck)\n    }, state);\n  }\n  const end = {\n    ...state.summary,\n    check: crc32Finish(state.batchCheck)\n  };\n  yield encodeMetadataRecord(7 /* BatchEnd */, end);\n}\nfunction encodeMetadataRecord(tag, value, state) {\n  const payload = new TextEncoder().encode(JSON.stringify(value));\n  if (payload.byteLength > MAX_METADATA_BYTES) {\n    throw new Error(`w7-frame: metadata record exceeds ${MAX_METADATA_BYTES} bytes`);\n  }\n  const header = recordHeader(tag, payload.byteLength);\n  if (state && tag !== 7 /* BatchEnd */) {\n    state.batchCheck = updateRecordCheck(state.batchCheck, header, payload);\n    state.summary.recordCount++;\n  }\n  return [concatBytes(header, payload)];\n}\nfunction preparePayload(payload, batchId) {\n  if (!payload || !Array.isArray(payload.inodes) || !Array.isArray(payload.chunks)) {\n    throw new Error(\"w7-frame: payload must contain inode and chunk arrays\");\n  }\n  const ownedPaths = new PathOwnership();\n  const deletes = [...payload.deletePaths ?? []];\n  for (const path of deletes) claimPath(ownedPaths, canonicalPath(path, \"delete path\"));\n  const chunksByPath = /* @__PURE__ */ new Map();\n  for (const chunk of payload.chunks) {\n    const path = canonicalPath(chunk.path, \"chunk path\");\n    const list = chunksByPath.get(path);\n    if (list) list.push(chunk);\n    else chunksByPath.set(path, [chunk]);\n  }\n  const directories = [];\n  const files = [];\n  let fileIndex = 0;\n  for (const inode of payload.inodes) {\n    const path = canonicalPath(inode.path, \"inode path\");\n    if (path !== inode.path) throw new Error(`w7-frame: noncanonical inode path ${inode.path}`);\n    claimPath(ownedPaths, path);\n    const normalizedInode = normalizeInode(inode);\n    const fileChunks = chunksByPath.get(path) ?? [];\n    if (normalizedInode.kind === \"directory\") {\n      if (fileChunks.length > 0) throw new Error(`w7-frame: directory ${path} has chunks`);\n      directories.push(normalizedInode);\n    } else {\n      validateChunks(normalizedInode, fileChunks);\n      files.push({\n        inode: normalizedInode,\n        contentId: `${batchId}:${fileIndex++}`,\n        chunks: fileChunks\n      });\n    }\n    chunksByPath.delete(path);\n  }\n  if (chunksByPath.size > 0) {\n    throw new Error(`w7-frame: chunk has no inode: ${chunksByPath.keys().next().value}`);\n  }\n  return { deletes, directories, files };\n}\nfunction parseBatchBegin(bytes) {\n  const value = parseObject(bytes, \"batch-begin\", [\"id\", \"mode\"]);\n  const id = boundedString(value.id, \"batch id\", MAX_BATCH_ID_BYTES);\n  if (value.mode !== MODE) throw new Error(`w7-frame: unsupported batch mode ${String(value.mode)}`);\n  return { id, mode: MODE };\n}\nfunction parseDelete(bytes) {\n  const value = parseObject(bytes, \"delete\", [\"path\"]);\n  return { path: canonicalPath(value.path, \"delete path\") };\n}\nfunction parseDirectory(bytes) {\n  const value = parseObject(bytes, \"directory\", [\"path\", \"kind\", \"mtime\", \"mode\"], [\"atime\"]);\n  if (value.kind !== \"directory\") {\n    throw new Error(`w7-frame: unsupported directory kind ${String(value.kind)}`);\n  }\n  return { ...parseInodeMetadata(value, \"directory\"), kind: \"directory\" };\n}\nfunction parseFileBegin(bytes) {\n  const value = parseObject(\n    bytes,\n    \"file-begin\",\n    [\"path\", \"kind\", \"contentId\", \"size\", \"chunkCount\", \"mtime\", \"mode\"],\n    [\"atime\"]\n  );\n  const base = parseInodeMetadata(value, \"file-begin\");\n  if (value.kind !== \"file\" && value.kind !== \"symlink\") {\n    throw new Error(`w7-frame: unsupported file-begin kind ${String(value.kind)}`);\n  }\n  const contentId = boundedString(value.contentId, \"stream content id\", MAX_CONTENT_ID_BYTES);\n  if (!/^[A-Za-z0-9._:-]+$/.test(contentId)) {\n    throw new Error(`w7-frame: invalid stream content id ${contentId}`);\n  }\n  const size = safeInteger(value.size, \"file size\");\n  const chunkCount = u32(value.chunkCount, \"file chunk count\");\n  const expected = size === 0 ? 0 : Math.ceil(size / CHUNK_SIZE);\n  if (chunkCount !== expected) {\n    throw new Error(`w7-frame: ${base.path}: expected ${expected} chunks, got ${chunkCount}`);\n  }\n  return { ...base, kind: value.kind, contentId, size, chunkCount };\n}\nfunction parseFileEnd(bytes) {\n  const value = parseObject(bytes, \"file-end\", [\"contentId\", \"size\", \"chunkCount\", \"check\"]);\n  return {\n    contentId: boundedString(value.contentId, \"stream content id\", MAX_CONTENT_ID_BYTES),\n    size: safeInteger(value.size, \"file-end size\"),\n    chunkCount: u32(value.chunkCount, \"file-end chunk count\"),\n    check: u32(value.check, \"file-end check\")\n  };\n}\nfunction parseBatchEnd(bytes) {\n  const keys = [\n    \"recordCount\",\n    \"pathCount\",\n    \"deleteCount\",\n    \"directoryCount\",\n    \"fileCount\",\n    \"chunkCount\",\n    \"byteCount\",\n    \"check\"\n  ];\n  const value = parseObject(bytes, \"batch-end\", keys);\n  return {\n    recordCount: safeInteger(value.recordCount, \"batch record count\"),\n    pathCount: safeInteger(value.pathCount, \"batch path count\"),\n    deleteCount: safeInteger(value.deleteCount, \"batch delete count\"),\n    directoryCount: safeInteger(value.directoryCount, \"batch directory count\"),\n    fileCount: safeInteger(value.fileCount, \"batch file count\"),\n    chunkCount: safeInteger(value.chunkCount, \"batch chunk count\"),\n    byteCount: safeInteger(value.byteCount, \"batch byte count\"),\n    check: u32(value.check, \"batch check\")\n  };\n}\nfunction parseInodeMetadata(value, label) {\n  return {\n    path: canonicalPath(value.path, `${label} path`),\n    ...value.atime === void 0 ? {} : { atime: safeInteger(value.atime, `${label} atime`) },\n    mtime: safeInteger(value.mtime, `${label} mtime`),\n    mode: u32(value.mode, `${label} mode`)\n  };\n}\nfunction parseObject(bytes, label, required, optional = []) {\n  let value;\n  try {\n    value = JSON.parse(decodeText(bytes, label));\n  } catch (error) {\n    if (error instanceof Error && error.message.startsWith(\"w7-frame:\")) throw error;\n    throw new Error(`w7-frame: invalid ${label} JSON: ${errorMessage(error)}`);\n  }\n  if (!isObject(value) || Array.isArray(value)) throw new Error(`w7-frame: ${label} must be an object`);\n  const allowed = /* @__PURE__ */ new Set([...required, ...optional]);\n  for (const key of required) {\n    if (!Object.hasOwn(value, key)) throw new Error(`w7-frame: ${label} missing ${key}`);\n  }\n  for (const key of Object.keys(value)) {\n    if (!allowed.has(key)) throw new Error(`w7-frame: ${label} has unknown field ${key}`);\n  }\n  return value;\n}\nfunction normalizeInode(inode) {\n  canonicalPath(inode.path, \"inode path\");\n  if (inode.parentPath !== parentPath(inode.path)) {\n    throw new Error(`w7-frame: ${inode.path}: noncanonical parent path ${inode.parentPath}`);\n  }\n  safeInteger(inode.size, `${inode.path} size`);\n  u32(inode.chunkCount, `${inode.path} chunk count`);\n  safeInteger(inode.mtime, `${inode.path} mtime`);\n  if (inode.atime !== void 0) safeInteger(inode.atime, `${inode.path} atime`);\n  u32(inode.mode, `${inode.path} mode`);\n  const rawKind = inode.kind ?? (inode.isDir ? \"directory\" : \"file\");\n  if (rawKind !== \"file\" && rawKind !== \"directory\" && rawKind !== \"symlink\") {\n    throw new Error(`w7-frame: unsupported inode kind ${String(rawKind)}`);\n  }\n  const kind = rawKind;\n  if (kind === \"directory\" && !inode.isDir) {\n    throw new Error(`w7-frame: directory inode ${inode.path} must be a directory`);\n  }\n  if (kind !== \"directory\" && inode.isDir) {\n    throw new Error(`w7-frame: ${kind} inode ${inode.path} cannot be a directory`);\n  }\n  if (kind === \"directory\" && (inode.size !== 0 || inode.chunkCount !== 0)) {\n    throw new Error(`w7-frame: directory ${inode.path} must have zero size and chunks`);\n  }\n  if (kind !== \"directory\") {\n    const expected = inode.size === 0 ? 0 : Math.ceil(inode.size / CHUNK_SIZE);\n    if (inode.chunkCount !== expected) {\n      throw new Error(`w7-frame: ${inode.path}: expected ${expected} chunks, got ${inode.chunkCount}`);\n    }\n    return { ...inode, kind, isDir: false };\n  }\n  return { ...inode, kind, isDir: true };\n}\nfunction validateChunks(inode, chunks) {\n  if (chunks.length !== inode.chunkCount) {\n    throw new Error(`w7-frame: ${inode.path}: expected ${inode.chunkCount} chunks, got ${chunks.length}`);\n  }\n  chunks.sort((left, right) => left.chunkId - right.chunkId);\n  for (let index = 0; index < chunks.length; index++) {\n    const chunk = chunks[index];\n    if (chunk.chunkId !== index) {\n      throw new Error(`w7-frame: ${inode.path}: expected chunk ${index}, got ${chunk.chunkId}`);\n    }\n    const expected = Math.min(CHUNK_SIZE, inode.size - index * CHUNK_SIZE);\n    if (!(chunk.data instanceof Uint8Array) || chunk.data.byteLength !== expected) {\n      throw new Error(`w7-frame: ${inode.path}: chunk ${index} must contain ${expected} bytes`);\n    }\n  }\n}\nfunction directoryInode(metadata) {\n  return {\n    path: metadata.path,\n    parentPath: parentPath(metadata.path),\n    kind: metadata.kind,\n    isDir: true,\n    size: 0,\n    atime: metadata.atime,\n    mtime: metadata.mtime,\n    mode: metadata.mode,\n    chunkCount: 0\n  };\n}\nfunction fileInode(metadata) {\n  return {\n    path: metadata.path,\n    parentPath: parentPath(metadata.path),\n    kind: metadata.kind,\n    isDir: false,\n    size: metadata.size,\n    atime: metadata.atime,\n    mtime: metadata.mtime,\n    mode: metadata.mode,\n    chunkCount: metadata.chunkCount\n  };\n}\nfunction inodeMetadata(inode) {\n  return {\n    path: inode.path,\n    ...inode.atime === void 0 ? {} : { atime: inode.atime },\n    mtime: inode.mtime,\n    mode: inode.mode\n  };\n}\nfunction canonicalPath(value, label) {\n  const path = boundedString(value, label, MAX_PATH_BYTES);\n  if (path.includes(\"\\0\")) throw new Error(`w7-frame: ${label} contains NUL`);\n  const normalized = normalizePath(path);\n  if (!path || normalized !== path) throw new Error(`w7-frame: noncanonical ${label}: ${path}`);\n  return path;\n}\nvar PathOwnership = class {\n  paths = /* @__PURE__ */ new Set();\n  pathBytes = 0;\n  claim(path) {\n    if (this.paths.has(path)) throw new Error(`w7-frame: duplicate path ownership: ${path}`);\n    if (this.paths.size >= W7_MAX_PATHS_PER_BATCH) {\n      throw new Error(`w7-frame: batch exceeds ${W7_MAX_PATHS_PER_BATCH} owned paths`);\n    }\n    const nextPathBytes = this.pathBytes + new TextEncoder().encode(path).byteLength;\n    if (nextPathBytes > W7_MAX_OWNED_PATH_BYTES) {\n      throw new Error(\n        `w7-frame: owned path bytes exceed ${W7_MAX_OWNED_PATH_BYTES}`\n      );\n    }\n    this.paths.add(path);\n    this.pathBytes = nextPathBytes;\n  }\n};\nfunction claimPath(paths, path) {\n  paths.claim(path);\n}\nfunction normalizePath(path) {\n  const out = [];\n  for (const segment of path.split(\"/\")) {\n    if (segment === \"..\") {\n      if (out.length > 0) out.pop();\n    } else if (segment !== \"\" && segment !== \".\") {\n      out.push(segment);\n    }\n  }\n  return out.join(\"/\");\n}\nfunction parentPath(path) {\n  const index = path.lastIndexOf(\"/\");\n  return index < 0 ? \"\" : path.slice(0, index);\n}\nfunction boundedString(value, label, maxBytes) {\n  if (typeof value !== \"string\" || value.length === 0) {\n    throw new Error(`w7-frame: ${label} must be a non-empty string`);\n  }\n  const length = new TextEncoder().encode(value).byteLength;\n  if (length > maxBytes) throw new Error(`w7-frame: ${label} exceeds ${maxBytes} bytes`);\n  return value;\n}\nfunction safeInteger(value, label) {\n  if (!Number.isSafeInteger(value) || value < 0) {\n    throw new Error(`w7-frame: ${label} must be a non-negative safe integer`);\n  }\n  return value;\n}\nfunction u32(value, label) {\n  const integer = safeInteger(value, label);\n  if (integer > 4294967295) throw new Error(`w7-frame: ${label} exceeds uint32`);\n  return integer;\n}\nfunction sameSummary(left, right) {\n  return left.recordCount === right.recordCount && left.pathCount === right.pathCount && left.deleteCount === right.deleteCount && left.directoryCount === right.directoryCount && left.fileCount === right.fileCount && left.chunkCount === right.chunkCount && left.byteCount === right.byteCount && left.check === right.check;\n}\nasync function readEnvelope(buffer, label) {\n  const header = await buffer.readExact(5, `${label} header`);\n  return { tag: header[0], length: readU32LE(header, 1), header };\n}\nfunction recordHeader(tag, length) {\n  const header = new Uint8Array(5);\n  header[0] = tag;\n  writeU32LE(header, 1, length);\n  return header;\n}\nfunction writeU32LE(out, offset, value) {\n  out[offset] = value & 255;\n  out[offset + 1] = value >>> 8 & 255;\n  out[offset + 2] = value >>> 16 & 255;\n  out[offset + 3] = value >>> 24 & 255;\n}\nfunction readU32LE(bytes, offset) {\n  return (bytes[offset] | bytes[offset + 1] << 8 | bytes[offset + 2] << 16 | bytes[offset + 3] << 24) >>> 0;\n}\nfunction updateRecordCheck(seed, ...parts) {\n  let check = seed;\n  for (const part of parts) check = crc32Update(check, part);\n  return check;\n}\nvar CRC_SEED = 4294967295;\nvar crcTable = null;\nfunction crc32Update(check, bytes) {\n  crcTable ??= createCrcTable();\n  const table = crcTable;\n  let value = check;\n  for (const byte of bytes) value = table[(value ^ byte) & 255] ^ value >>> 8;\n  return value >>> 0;\n}\nfunction crc32Finish(check) {\n  return (check ^ 4294967295) >>> 0;\n}\nfunction createCrcTable() {\n  const table = new Uint32Array(256);\n  for (let index = 0; index < table.length; index++) {\n    let value = index;\n    for (let bit = 0; bit < 8; bit++) {\n      value = (value & 1) !== 0 ? 3988292384 ^ value >>> 1 : value >>> 1;\n    }\n    table[index] = value >>> 0;\n  }\n  return table;\n}\nfunction noopRetention(bytes) {\n  return { bytes, release() {\n  } };\n}\nfunction decodeText(bytes, label) {\n  try {\n    return new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: false }).decode(bytes);\n  } catch (error) {\n    throw new Error(`w7-frame: invalid UTF-8 in ${label}: ${errorMessage(error)}`);\n  }\n}\nfunction concatBytes(...parts) {\n  const output = new Uint8Array(parts.reduce((total, part) => total + part.byteLength, 0));\n  let offset = 0;\n  for (const part of parts) {\n    output.set(part, offset);\n    offset += part.byteLength;\n  }\n  return output;\n}\nfunction bytesEqual(left, right) {\n  return left.length === right.length && left.every((byte, index) => byte === right[index]);\n}\nfunction hex(bytes) {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\" \");\n}\nfunction isObject(value) {\n  return typeof value === \"object\" && value !== null;\n}\nfunction errorMessage(error) {\n  return error instanceof Error ? error.message : String(error);\n}\nfunction throwIfAborted(signal) {\n  if (!signal?.aborted) return;\n  throw new DOMException(\n    signal.reason instanceof Error ? signal.reason.message : String(signal.reason ?? \"Aborted\"),\n    \"AbortError\"\n  );\n}\nasync function cancelReader(reader, reason) {\n  try {\n    await reader.cancel(reason);\n  } catch {\n  }\n  try {\n    reader.releaseLock();\n  } catch {\n  }\n}\nvar ExactByteReader = class {\n  constructor(reader) {\n    this.reader = reader;\n  }\n  reader;\n  done = false;\n  async readExact(length, label) {\n    if (length === 0) return new Uint8Array(0);\n    const output = new Uint8Array(length);\n    let offset = 0;\n    while (offset < length) {\n      if (this.done) {\n        throw new Error(\n          `w7-frame: stream ended ${offset} bytes into expected ${length}-byte ${label}`\n        );\n      }\n      const next = await this.reader.read(new Uint8Array(length - offset));\n      if (next.done) this.done = true;\n      else if (next.value.byteLength > 0) {\n        output.set(next.value, offset);\n        offset += next.value.byteLength;\n      }\n    }\n    return output;\n  }\n  async ensureEof(stream) {\n    if (this.done) return;\n    this.reader.releaseLock();\n    const reader = stream.getReader();\n    try {\n      const next = await reader.read();\n      if (!next.done && next.value.byteLength > 0) {\n        await reader.cancel(new Error(\"w7-frame: trailing bytes after batch-end\"));\n        throw new Error(\"w7-frame: trailing bytes after batch-end\");\n      }\n      this.done = true;\n    } finally {\n      try {\n        reader.releaseLock();\n      } catch {\n      }\n    }\n  }\n};";
+export const W7_FRAME_PREAMBLE = "// ../platform/src/limits.ts\nvar CHUNK_SIZE = 65536;\nvar MAX_TX_BLOB_BYTES = 1 * 1024 * 1024;\nvar SQLITE_MAX_STATEMENT_BYTES = 100 * 1024;\nvar MAX_RPC_SAFE_PAYLOAD_BYTES = 28 * 1024 * 1024;\nvar SUPERVISOR_HEAP_CEILING_BYTES = 64 * 1024 * 1024;\nvar SUPERVISOR_IN_FLIGHT_ALLOCATION_BUDGET_BYTES = 40 * 1024 * 1024;\nvar SUPERVISOR_READ_RESERVE_BYTES = 1024 * 1024;\nvar MAX_GLOBAL_WRITE_STREAM_CREDIT_BYTES = 8 * 1024 * 1024;\n\n// ../platform/src/w7-frame.ts\nvar W7_MAGIC = new Uint8Array([78, 87, 55, 3]);\nvar ENCODER_QUEUE_HWM = 0;\nvar MAX_METADATA_BYTES = 64 * 1024;\nvar MAX_PATH_BYTES = 64 * 1024;\nvar MAX_BATCH_ID_BYTES = 128;\nvar MAX_CONTENT_ID_BYTES = 256;\nvar W7_MAX_PATHS_PER_BATCH = 128;\nvar W7_MAX_OWNED_PATH_BYTES = 64 * 1024;\nvar W7_MAX_RECORD_BYTES = 5 + 4 + MAX_CONTENT_ID_BYTES + 8 + CHUNK_SIZE;\nvar MODE = \"path-atomic-committed-prefix\";\nfunction encodeWriteBatchStream(payload) {\n  const batchId = crypto.randomUUID();\n  const { deletes, directories, files } = preparePayload(payload, batchId);\n  const iterator = encodeRecords(batchId, deletes, directories, files);\n  let closed = false;\n  let magicEmitted = false;\n  const source = {\n    type: \"bytes\",\n    pull(controller) {\n      if (closed) return;\n      try {\n        if (!magicEmitted) {\n          magicEmitted = true;\n          controller.enqueue(W7_MAGIC.slice());\n          return;\n        }\n        const next = iterator.next();\n        if (next.done) {\n          closed = true;\n          controller.close();\n          return;\n        }\n        for (const part of next.value) controller.enqueue(part);\n      } catch (error) {\n        closed = true;\n        controller.error(error);\n      }\n    },\n    cancel() {\n      closed = true;\n      iterator.return?.(void 0);\n    }\n  };\n  return new ReadableStream(source, {\n    highWaterMark: ENCODER_QUEUE_HWM\n  });\n}\nasync function decodeWriteBatchStream(stream, options = {}) {\n  let reader;\n  try {\n    reader = stream.getReader({ mode: \"byob\" });\n  } catch {\n    throw new Error(\"w7-frame: stream must be a byte-oriented ReadableStream\");\n  }\n  const buffer = new ExactByteReader(reader, options.signal);\n  let handedOff = false;\n  try {\n    throwIfAborted(options.signal);\n    const magic = await buffer.readExact(W7_MAGIC.length, \"magic\");\n    if (!bytesEqual(magic, W7_MAGIC)) {\n      const version = magic.length === 4 && magic[0] === 78 && magic[1] === 87 && magic[2] === 55 ? magic[3] : null;\n      if (version !== null) {\n        throw new Error(`w7-frame: unsupported protocol version ${version}; expected 3`);\n      }\n      throw new Error(`w7-frame: bad magic, expected NW7\\\\x03, got ${hex(magic)}`);\n    }\n    const beginEnvelope = await readEnvelope(buffer, \"batch-begin\");\n    if (beginEnvelope.tag !== 1 /* BatchBegin */) {\n      throw new Error(`w7-frame: first record must be batch-begin, got tag ${beginEnvelope.tag}`);\n    }\n    if (beginEnvelope.length > MAX_METADATA_BYTES) {\n      throw new Error(\n        `w7-frame: batch-begin length ${beginEnvelope.length} exceeds ${MAX_METADATA_BYTES}`\n      );\n    }\n    const beginPayload = await buffer.readExact(beginEnvelope.length, \"batch-begin payload\");\n    const begin = parseBatchBegin(beginPayload);\n    const initialCheck = updateRecordCheck(CRC_SEED, beginEnvelope.header, beginPayload);\n    handedOff = true;\n    return {\n      batchId: begin.id,\n      mode: begin.mode,\n      records: decodeRecords(stream, reader, buffer, options, initialCheck)\n    };\n  } catch (error) {\n    if (!handedOff) await cancelReader(reader, error);\n    throw error;\n  }\n}\nasync function* decodeRecords(stream, reader, buffer, options, initialCheck) {\n  const ownedPaths = new PathOwnership();\n  const contentIds = /* @__PURE__ */ new Set();\n  let active = null;\n  let batchCheck = initialCheck;\n  const summary = {\n    recordCount: 1,\n    pathCount: 0,\n    deleteCount: 0,\n    directoryCount: 0,\n    fileCount: 0,\n    chunkCount: 0,\n    byteCount: 0\n  };\n  let completed = false;\n  let failure = new DOMException(\"W7 consumer cancelled\", \"AbortError\");\n  try {\n    while (true) {\n      throwIfAborted(options.signal);\n      const envelope = await readEnvelope(buffer, \"record\");\n      if (active && envelope.tag !== 5 /* FileChunk */ && envelope.tag !== 6 /* FileEnd */) {\n        throw new Error(`w7-frame: file ${active.inode.path} ended without file-end`);\n      }\n      if (envelope.tag === 5 /* FileChunk */) {\n        if (!active) throw new Error(\"w7-frame: file-chunk without active file\");\n        const prefixLength = Math.min(envelope.length, 4 + MAX_CONTENT_ID_BYTES + 8);\n        const idLengthBytes = await buffer.readExact(4, \"file-chunk content-id length\");\n        const idLength = readU32LE(idLengthBytes, 0);\n        if (idLength === 0 || idLength > MAX_CONTENT_ID_BYTES) {\n          throw new Error(`w7-frame: invalid file-chunk content-id length ${idLength}`);\n        }\n        const remainingPrefixLength = idLength + 8;\n        if (4 + remainingPrefixLength > prefixLength || 4 + remainingPrefixLength > envelope.length) {\n          throw new Error(\"w7-frame: malformed file-chunk record length\");\n        }\n        const rest = await buffer.readExact(remainingPrefixLength, \"file-chunk header\");\n        const contentId = decodeText(rest.subarray(0, idLength), \"file-chunk content id\");\n        const chunkId = readU32LE(rest, idLength);\n        const dataLength = readU32LE(rest, idLength + 4);\n        if (envelope.length !== 4 + idLength + 8 + dataLength) {\n          throw new Error(\"w7-frame: file-chunk payload length mismatch\");\n        }\n        if (contentId !== active.metadata.contentId) {\n          throw new Error(`w7-frame: file-chunk content id ${contentId} does not own ${active.inode.path}`);\n        }\n        if (chunkId !== active.nextChunkId) {\n          throw new Error(\n            `w7-frame: ${active.inode.path}: expected chunk ${active.nextChunkId}, got ${chunkId}`\n          );\n        }\n        if (chunkId >= active.inode.chunkCount) {\n          throw new Error(`w7-frame: ${active.inode.path}: chunk ${chunkId} is out of range`);\n        }\n        const expectedBytes = Math.min(\n          CHUNK_SIZE,\n          active.inode.size - chunkId * CHUNK_SIZE\n        );\n        if (dataLength !== expectedBytes || dataLength > CHUNK_SIZE) {\n          throw new Error(\n            `w7-frame: ${active.inode.path}: chunk ${chunkId} has ${dataLength} bytes; expected ${expectedBytes}`\n          );\n        }\n        const headerPayload = concatBytes(idLengthBytes, rest);\n        let retention = null;\n        try {\n          retention = options.retainChunk ? await options.retainChunk(dataLength, options.signal) : noopRetention(dataLength);\n          throwIfAborted(options.signal);\n          const data = await buffer.readExact(dataLength, \"file-chunk data\");\n          batchCheck = updateRecordCheck(batchCheck, envelope.header, headerPayload, data);\n          active.check = crc32Update(active.check, data);\n          active.nextChunkId++;\n          active.receivedBytes += dataLength;\n          summary.recordCount++;\n          summary.chunkCount++;\n          summary.byteCount += dataLength;\n          const record = {\n            type: \"file-chunk\",\n            streamContentId: contentId,\n            path: active.inode.path,\n            chunkId,\n            data,\n            retention\n          };\n          retention = null;\n          yield record;\n        } finally {\n          retention?.release();\n        }\n        continue;\n      }\n      if (envelope.length > MAX_METADATA_BYTES) {\n        throw new Error(`w7-frame: metadata record length ${envelope.length} exceeds ${MAX_METADATA_BYTES}`);\n      }\n      const payload = await buffer.readExact(envelope.length, \"record payload\");\n      if (envelope.tag !== 7 /* BatchEnd */) {\n        batchCheck = updateRecordCheck(batchCheck, envelope.header, payload);\n        summary.recordCount++;\n      }\n      switch (envelope.tag) {\n        case 2 /* Delete */: {\n          const metadata = parseDelete(payload);\n          claimPath(ownedPaths, metadata.path);\n          summary.pathCount++;\n          summary.deleteCount++;\n          yield { type: \"delete\", path: metadata.path };\n          break;\n        }\n        case 3 /* Directory */: {\n          const metadata = parseDirectory(payload);\n          claimPath(ownedPaths, metadata.path);\n          summary.pathCount++;\n          summary.directoryCount++;\n          yield { type: \"directory\", inode: directoryInode(metadata) };\n          break;\n        }\n        case 4 /* FileBegin */: {\n          const metadata = parseFileBegin(payload);\n          claimPath(ownedPaths, metadata.path);\n          if (contentIds.has(metadata.contentId)) {\n            throw new Error(`w7-frame: duplicate stream content id ${metadata.contentId}`);\n          }\n          contentIds.add(metadata.contentId);\n          const inode = fileInode(metadata);\n          summary.pathCount++;\n          summary.fileCount++;\n          active = {\n            metadata,\n            inode,\n            nextChunkId: 0,\n            receivedBytes: 0,\n            check: CRC_SEED\n          };\n          yield { type: \"file-begin\", streamContentId: metadata.contentId, inode };\n          break;\n        }\n        case 6 /* FileEnd */: {\n          if (!active) throw new Error(\"w7-frame: file-end without active file\");\n          const metadata = parseFileEnd(payload);\n          const actualCheck = crc32Finish(active.check);\n          if (metadata.contentId !== active.metadata.contentId) {\n            throw new Error(`w7-frame: file-end content id mismatch for ${active.inode.path}`);\n          }\n          if (metadata.size !== active.receivedBytes || metadata.size !== active.inode.size) {\n            throw new Error(`w7-frame: file-end byte total mismatch for ${active.inode.path}`);\n          }\n          if (metadata.chunkCount !== active.nextChunkId || metadata.chunkCount !== active.inode.chunkCount) {\n            throw new Error(`w7-frame: file-end chunk count mismatch for ${active.inode.path}`);\n          }\n          if (metadata.check !== actualCheck) {\n            throw new Error(`w7-frame: file-end check mismatch for ${active.inode.path}`);\n          }\n          const record = {\n            type: \"file-end\",\n            streamContentId: metadata.contentId,\n            path: active.inode.path,\n            size: metadata.size,\n            chunkCount: metadata.chunkCount,\n            check: metadata.check\n          };\n          active = null;\n          yield record;\n          break;\n        }\n        case 7 /* BatchEnd */: {\n          if (active) throw new Error(`w7-frame: batch-end while file ${active.inode.path} is active`);\n          const actual = parseBatchEnd(payload);\n          const expected = { ...summary, check: crc32Finish(batchCheck) };\n          if (!sameSummary(actual, expected)) {\n            throw new Error(\n              `w7-frame: batch-end summary mismatch; expected ${JSON.stringify(expected)}, got ${JSON.stringify(actual)}`\n            );\n          }\n          await buffer.ensureEof(stream);\n          completed = true;\n          yield { type: \"batch-end\", summary: actual };\n          return;\n        }\n        case 1 /* BatchBegin */:\n          throw new Error(\"w7-frame: duplicate batch-begin\");\n        default:\n          throw new Error(`w7-frame: unknown record tag ${envelope.tag}`);\n      }\n    }\n  } catch (error) {\n    failure = error;\n    throw error;\n  } finally {\n    if (completed) {\n      try {\n        reader.releaseLock();\n      } catch {\n      }\n    } else {\n      await cancelReader(reader, failure);\n    }\n  }\n}\nfunction* encodeRecords(batchId, deletes, directories, files) {\n  const state = {\n    batchCheck: CRC_SEED,\n    summary: {\n      recordCount: 0,\n      pathCount: 0,\n      deleteCount: 0,\n      directoryCount: 0,\n      fileCount: 0,\n      chunkCount: 0,\n      byteCount: 0\n    }\n  };\n  yield encodeMetadataRecord(1 /* BatchBegin */, { id: batchId, mode: MODE }, state);\n  for (const path of deletes) {\n    state.summary.pathCount++;\n    state.summary.deleteCount++;\n    yield encodeMetadataRecord(2 /* Delete */, { path }, state);\n  }\n  for (const inode of directories) {\n    state.summary.pathCount++;\n    state.summary.directoryCount++;\n    yield encodeMetadataRecord(3 /* Directory */, {\n      ...inodeMetadata(inode),\n      kind: inode.kind\n    }, state);\n  }\n  for (const file of files) {\n    state.summary.pathCount++;\n    state.summary.fileCount++;\n    yield encodeMetadataRecord(4 /* FileBegin */, {\n      ...inodeMetadata(file.inode),\n      kind: file.inode.kind,\n      contentId: file.contentId,\n      size: file.inode.size,\n      chunkCount: file.inode.chunkCount\n    }, state);\n    let fileCheck = CRC_SEED;\n    for (const chunk of file.chunks) {\n      const data = chunk.data;\n      const contentBytes = new TextEncoder().encode(file.contentId);\n      const prefix = new Uint8Array(4 + contentBytes.length + 8);\n      writeU32LE(prefix, 0, contentBytes.length);\n      prefix.set(contentBytes, 4);\n      writeU32LE(prefix, 4 + contentBytes.length, chunk.chunkId);\n      writeU32LE(prefix, 8 + contentBytes.length, data.byteLength);\n      const header = recordHeader(5 /* FileChunk */, prefix.byteLength + data.byteLength);\n      state.batchCheck = updateRecordCheck(state.batchCheck, header, prefix, data);\n      state.summary.recordCount++;\n      state.summary.chunkCount++;\n      state.summary.byteCount += data.byteLength;\n      fileCheck = crc32Update(fileCheck, data);\n      yield [concatBytes(header, prefix), data];\n    }\n    yield encodeMetadataRecord(6 /* FileEnd */, {\n      contentId: file.contentId,\n      size: file.inode.size,\n      chunkCount: file.inode.chunkCount,\n      check: crc32Finish(fileCheck)\n    }, state);\n  }\n  const end = {\n    ...state.summary,\n    check: crc32Finish(state.batchCheck)\n  };\n  yield encodeMetadataRecord(7 /* BatchEnd */, end);\n}\nfunction encodeMetadataRecord(tag, value, state) {\n  const payload = new TextEncoder().encode(JSON.stringify(value));\n  if (payload.byteLength > MAX_METADATA_BYTES) {\n    throw new Error(`w7-frame: metadata record exceeds ${MAX_METADATA_BYTES} bytes`);\n  }\n  const header = recordHeader(tag, payload.byteLength);\n  if (state && tag !== 7 /* BatchEnd */) {\n    state.batchCheck = updateRecordCheck(state.batchCheck, header, payload);\n    state.summary.recordCount++;\n  }\n  return [concatBytes(header, payload)];\n}\nfunction preparePayload(payload, batchId) {\n  if (!payload || !Array.isArray(payload.inodes) || !Array.isArray(payload.chunks)) {\n    throw new Error(\"w7-frame: payload must contain inode and chunk arrays\");\n  }\n  const ownedPaths = new PathOwnership();\n  const deletes = [...payload.deletePaths ?? []];\n  for (const path of deletes) claimPath(ownedPaths, canonicalPath(path, \"delete path\"));\n  const chunksByPath = /* @__PURE__ */ new Map();\n  for (const chunk of payload.chunks) {\n    const path = canonicalPath(chunk.path, \"chunk path\");\n    const list = chunksByPath.get(path);\n    if (list) list.push(chunk);\n    else chunksByPath.set(path, [chunk]);\n  }\n  const directories = [];\n  const files = [];\n  let fileIndex = 0;\n  for (const inode of payload.inodes) {\n    const path = canonicalPath(inode.path, \"inode path\");\n    if (path !== inode.path) throw new Error(`w7-frame: noncanonical inode path ${inode.path}`);\n    claimPath(ownedPaths, path);\n    const normalizedInode = normalizeInode(inode);\n    const fileChunks = chunksByPath.get(path) ?? [];\n    if (normalizedInode.kind === \"directory\") {\n      if (fileChunks.length > 0) throw new Error(`w7-frame: directory ${path} has chunks`);\n      directories.push(normalizedInode);\n    } else {\n      validateChunks(normalizedInode, fileChunks);\n      files.push({\n        inode: normalizedInode,\n        contentId: `${batchId}:${fileIndex++}`,\n        chunks: fileChunks\n      });\n    }\n    chunksByPath.delete(path);\n  }\n  if (chunksByPath.size > 0) {\n    throw new Error(`w7-frame: chunk has no inode: ${chunksByPath.keys().next().value}`);\n  }\n  return { deletes, directories, files };\n}\nfunction parseBatchBegin(bytes) {\n  const value = parseObject(bytes, \"batch-begin\", [\"id\", \"mode\"]);\n  const id = boundedString(value.id, \"batch id\", MAX_BATCH_ID_BYTES);\n  if (value.mode !== MODE) throw new Error(`w7-frame: unsupported batch mode ${String(value.mode)}`);\n  return { id, mode: MODE };\n}\nfunction parseDelete(bytes) {\n  const value = parseObject(bytes, \"delete\", [\"path\"]);\n  return { path: canonicalPath(value.path, \"delete path\") };\n}\nfunction parseDirectory(bytes) {\n  const value = parseObject(bytes, \"directory\", [\"path\", \"kind\", \"mtime\", \"mode\"], [\"atime\"]);\n  if (value.kind !== \"directory\") {\n    throw new Error(`w7-frame: unsupported directory kind ${String(value.kind)}`);\n  }\n  return { ...parseInodeMetadata(value, \"directory\"), kind: \"directory\" };\n}\nfunction parseFileBegin(bytes) {\n  const value = parseObject(\n    bytes,\n    \"file-begin\",\n    [\"path\", \"kind\", \"contentId\", \"size\", \"chunkCount\", \"mtime\", \"mode\"],\n    [\"atime\"]\n  );\n  const base = parseInodeMetadata(value, \"file-begin\");\n  if (value.kind !== \"file\" && value.kind !== \"symlink\") {\n    throw new Error(`w7-frame: unsupported file-begin kind ${String(value.kind)}`);\n  }\n  const contentId = boundedString(value.contentId, \"stream content id\", MAX_CONTENT_ID_BYTES);\n  if (!/^[A-Za-z0-9._:-]+$/.test(contentId)) {\n    throw new Error(`w7-frame: invalid stream content id ${contentId}`);\n  }\n  const size = safeInteger(value.size, \"file size\");\n  const chunkCount = u32(value.chunkCount, \"file chunk count\");\n  const expected = size === 0 ? 0 : Math.ceil(size / CHUNK_SIZE);\n  if (chunkCount !== expected) {\n    throw new Error(`w7-frame: ${base.path}: expected ${expected} chunks, got ${chunkCount}`);\n  }\n  return { ...base, kind: value.kind, contentId, size, chunkCount };\n}\nfunction parseFileEnd(bytes) {\n  const value = parseObject(bytes, \"file-end\", [\"contentId\", \"size\", \"chunkCount\", \"check\"]);\n  return {\n    contentId: boundedString(value.contentId, \"stream content id\", MAX_CONTENT_ID_BYTES),\n    size: safeInteger(value.size, \"file-end size\"),\n    chunkCount: u32(value.chunkCount, \"file-end chunk count\"),\n    check: u32(value.check, \"file-end check\")\n  };\n}\nfunction parseBatchEnd(bytes) {\n  const keys = [\n    \"recordCount\",\n    \"pathCount\",\n    \"deleteCount\",\n    \"directoryCount\",\n    \"fileCount\",\n    \"chunkCount\",\n    \"byteCount\",\n    \"check\"\n  ];\n  const value = parseObject(bytes, \"batch-end\", keys);\n  return {\n    recordCount: safeInteger(value.recordCount, \"batch record count\"),\n    pathCount: safeInteger(value.pathCount, \"batch path count\"),\n    deleteCount: safeInteger(value.deleteCount, \"batch delete count\"),\n    directoryCount: safeInteger(value.directoryCount, \"batch directory count\"),\n    fileCount: safeInteger(value.fileCount, \"batch file count\"),\n    chunkCount: safeInteger(value.chunkCount, \"batch chunk count\"),\n    byteCount: safeInteger(value.byteCount, \"batch byte count\"),\n    check: u32(value.check, \"batch check\")\n  };\n}\nfunction parseInodeMetadata(value, label) {\n  return {\n    path: canonicalPath(value.path, `${label} path`),\n    ...value.atime === void 0 ? {} : { atime: safeInteger(value.atime, `${label} atime`) },\n    mtime: safeInteger(value.mtime, `${label} mtime`),\n    mode: u32(value.mode, `${label} mode`)\n  };\n}\nfunction parseObject(bytes, label, required, optional = []) {\n  let value;\n  try {\n    value = JSON.parse(decodeText(bytes, label));\n  } catch (error) {\n    if (error instanceof Error && error.message.startsWith(\"w7-frame:\")) throw error;\n    throw new Error(`w7-frame: invalid ${label} JSON: ${errorMessage(error)}`);\n  }\n  if (!isObject(value) || Array.isArray(value)) throw new Error(`w7-frame: ${label} must be an object`);\n  const allowed = /* @__PURE__ */ new Set([...required, ...optional]);\n  for (const key of required) {\n    if (!Object.hasOwn(value, key)) throw new Error(`w7-frame: ${label} missing ${key}`);\n  }\n  for (const key of Object.keys(value)) {\n    if (!allowed.has(key)) throw new Error(`w7-frame: ${label} has unknown field ${key}`);\n  }\n  return value;\n}\nfunction normalizeInode(inode) {\n  canonicalPath(inode.path, \"inode path\");\n  if (inode.parentPath !== parentPath(inode.path)) {\n    throw new Error(`w7-frame: ${inode.path}: noncanonical parent path ${inode.parentPath}`);\n  }\n  safeInteger(inode.size, `${inode.path} size`);\n  u32(inode.chunkCount, `${inode.path} chunk count`);\n  safeInteger(inode.mtime, `${inode.path} mtime`);\n  if (inode.atime !== void 0) safeInteger(inode.atime, `${inode.path} atime`);\n  u32(inode.mode, `${inode.path} mode`);\n  const rawKind = inode.kind ?? (inode.isDir ? \"directory\" : \"file\");\n  if (rawKind !== \"file\" && rawKind !== \"directory\" && rawKind !== \"symlink\") {\n    throw new Error(`w7-frame: unsupported inode kind ${String(rawKind)}`);\n  }\n  const kind = rawKind;\n  if (kind === \"directory\" && !inode.isDir) {\n    throw new Error(`w7-frame: directory inode ${inode.path} must be a directory`);\n  }\n  if (kind !== \"directory\" && inode.isDir) {\n    throw new Error(`w7-frame: ${kind} inode ${inode.path} cannot be a directory`);\n  }\n  if (kind === \"directory\" && (inode.size !== 0 || inode.chunkCount !== 0)) {\n    throw new Error(`w7-frame: directory ${inode.path} must have zero size and chunks`);\n  }\n  if (kind !== \"directory\") {\n    const expected = inode.size === 0 ? 0 : Math.ceil(inode.size / CHUNK_SIZE);\n    if (inode.chunkCount !== expected) {\n      throw new Error(`w7-frame: ${inode.path}: expected ${expected} chunks, got ${inode.chunkCount}`);\n    }\n    return { ...inode, kind, isDir: false };\n  }\n  return { ...inode, kind, isDir: true };\n}\nfunction validateChunks(inode, chunks) {\n  if (chunks.length !== inode.chunkCount) {\n    throw new Error(`w7-frame: ${inode.path}: expected ${inode.chunkCount} chunks, got ${chunks.length}`);\n  }\n  chunks.sort((left, right) => left.chunkId - right.chunkId);\n  for (let index = 0; index < chunks.length; index++) {\n    const chunk = chunks[index];\n    if (chunk.chunkId !== index) {\n      throw new Error(`w7-frame: ${inode.path}: expected chunk ${index}, got ${chunk.chunkId}`);\n    }\n    const expected = Math.min(CHUNK_SIZE, inode.size - index * CHUNK_SIZE);\n    if (!(chunk.data instanceof Uint8Array) || chunk.data.byteLength !== expected) {\n      throw new Error(`w7-frame: ${inode.path}: chunk ${index} must contain ${expected} bytes`);\n    }\n  }\n}\nfunction directoryInode(metadata) {\n  return {\n    path: metadata.path,\n    parentPath: parentPath(metadata.path),\n    kind: metadata.kind,\n    isDir: true,\n    size: 0,\n    atime: metadata.atime,\n    mtime: metadata.mtime,\n    mode: metadata.mode,\n    chunkCount: 0\n  };\n}\nfunction fileInode(metadata) {\n  return {\n    path: metadata.path,\n    parentPath: parentPath(metadata.path),\n    kind: metadata.kind,\n    isDir: false,\n    size: metadata.size,\n    atime: metadata.atime,\n    mtime: metadata.mtime,\n    mode: metadata.mode,\n    chunkCount: metadata.chunkCount\n  };\n}\nfunction inodeMetadata(inode) {\n  return {\n    path: inode.path,\n    ...inode.atime === void 0 ? {} : { atime: inode.atime },\n    mtime: inode.mtime,\n    mode: inode.mode\n  };\n}\nfunction canonicalPath(value, label) {\n  const path = boundedString(value, label, MAX_PATH_BYTES);\n  if (path.includes(\"\\0\")) throw new Error(`w7-frame: ${label} contains NUL`);\n  const normalized = normalizePath(path);\n  if (!path || normalized !== path) throw new Error(`w7-frame: noncanonical ${label}: ${path}`);\n  return path;\n}\nvar PathOwnership = class {\n  paths = /* @__PURE__ */ new Set();\n  pathBytes = 0;\n  claim(path) {\n    if (this.paths.has(path)) throw new Error(`w7-frame: duplicate path ownership: ${path}`);\n    if (this.paths.size >= W7_MAX_PATHS_PER_BATCH) {\n      throw new Error(`w7-frame: batch exceeds ${W7_MAX_PATHS_PER_BATCH} owned paths`);\n    }\n    const nextPathBytes = this.pathBytes + new TextEncoder().encode(path).byteLength;\n    if (nextPathBytes > W7_MAX_OWNED_PATH_BYTES) {\n      throw new Error(\n        `w7-frame: owned path bytes exceed ${W7_MAX_OWNED_PATH_BYTES}`\n      );\n    }\n    this.paths.add(path);\n    this.pathBytes = nextPathBytes;\n  }\n};\nfunction claimPath(paths, path) {\n  paths.claim(path);\n}\nfunction normalizePath(path) {\n  const out = [];\n  for (const segment of path.split(\"/\")) {\n    if (segment === \"..\") {\n      if (out.length > 0) out.pop();\n    } else if (segment !== \"\" && segment !== \".\") {\n      out.push(segment);\n    }\n  }\n  return out.join(\"/\");\n}\nfunction parentPath(path) {\n  const index = path.lastIndexOf(\"/\");\n  return index < 0 ? \"\" : path.slice(0, index);\n}\nfunction boundedString(value, label, maxBytes) {\n  if (typeof value !== \"string\" || value.length === 0) {\n    throw new Error(`w7-frame: ${label} must be a non-empty string`);\n  }\n  const length = new TextEncoder().encode(value).byteLength;\n  if (length > maxBytes) throw new Error(`w7-frame: ${label} exceeds ${maxBytes} bytes`);\n  return value;\n}\nfunction safeInteger(value, label) {\n  if (!Number.isSafeInteger(value) || value < 0) {\n    throw new Error(`w7-frame: ${label} must be a non-negative safe integer`);\n  }\n  return value;\n}\nfunction u32(value, label) {\n  const integer = safeInteger(value, label);\n  if (integer > 4294967295) throw new Error(`w7-frame: ${label} exceeds uint32`);\n  return integer;\n}\nfunction sameSummary(left, right) {\n  return left.recordCount === right.recordCount && left.pathCount === right.pathCount && left.deleteCount === right.deleteCount && left.directoryCount === right.directoryCount && left.fileCount === right.fileCount && left.chunkCount === right.chunkCount && left.byteCount === right.byteCount && left.check === right.check;\n}\nasync function readEnvelope(buffer, label) {\n  const header = await buffer.readExact(5, `${label} header`);\n  return { tag: header[0], length: readU32LE(header, 1), header };\n}\nfunction recordHeader(tag, length) {\n  const header = new Uint8Array(5);\n  header[0] = tag;\n  writeU32LE(header, 1, length);\n  return header;\n}\nfunction writeU32LE(out, offset, value) {\n  out[offset] = value & 255;\n  out[offset + 1] = value >>> 8 & 255;\n  out[offset + 2] = value >>> 16 & 255;\n  out[offset + 3] = value >>> 24 & 255;\n}\nfunction readU32LE(bytes, offset) {\n  return (bytes[offset] | bytes[offset + 1] << 8 | bytes[offset + 2] << 16 | bytes[offset + 3] << 24) >>> 0;\n}\nfunction updateRecordCheck(seed, ...parts) {\n  let check = seed;\n  for (const part of parts) check = crc32Update(check, part);\n  return check;\n}\nvar CRC_SEED = 4294967295;\nvar crcTable = null;\nfunction crc32Update(check, bytes) {\n  crcTable ??= createCrcTable();\n  const table = crcTable;\n  let value = check;\n  for (const byte of bytes) value = table[(value ^ byte) & 255] ^ value >>> 8;\n  return value >>> 0;\n}\nfunction crc32Finish(check) {\n  return (check ^ 4294967295) >>> 0;\n}\nfunction createCrcTable() {\n  const table = new Uint32Array(256);\n  for (let index = 0; index < table.length; index++) {\n    let value = index;\n    for (let bit = 0; bit < 8; bit++) {\n      value = (value & 1) !== 0 ? 3988292384 ^ value >>> 1 : value >>> 1;\n    }\n    table[index] = value >>> 0;\n  }\n  return table;\n}\nfunction noopRetention(bytes) {\n  return { bytes, release() {\n  } };\n}\nfunction decodeText(bytes, label) {\n  try {\n    return new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: false }).decode(bytes);\n  } catch (error) {\n    throw new Error(`w7-frame: invalid UTF-8 in ${label}: ${errorMessage(error)}`);\n  }\n}\nfunction concatBytes(...parts) {\n  const output = new Uint8Array(parts.reduce((total, part) => total + part.byteLength, 0));\n  let offset = 0;\n  for (const part of parts) {\n    output.set(part, offset);\n    offset += part.byteLength;\n  }\n  return output;\n}\nfunction bytesEqual(left, right) {\n  return left.length === right.length && left.every((byte, index) => byte === right[index]);\n}\nfunction hex(bytes) {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\" \");\n}\nfunction isObject(value) {\n  return typeof value === \"object\" && value !== null;\n}\nfunction errorMessage(error) {\n  return error instanceof Error ? error.message : String(error);\n}\nfunction throwIfAborted(signal) {\n  if (!signal?.aborted) return;\n  throw new DOMException(\n    signal.reason instanceof Error ? signal.reason.message : String(signal.reason ?? \"Aborted\"),\n    \"AbortError\"\n  );\n}\nasync function cancelReader(reader, reason) {\n  try {\n    await reader.cancel(reason);\n  } catch {\n  }\n  try {\n    reader.releaseLock();\n  } catch {\n  }\n}\nvar ExactByteReader = class {\n  constructor(reader, signal) {\n    this.reader = reader;\n    this.signal = signal;\n  }\n  reader;\n  signal;\n  done = false;\n  async read(read, cancel) {\n    throwIfAborted(this.signal);\n    const abort = () => {\n      void cancel().catch(() => {\n      });\n    };\n    this.signal?.addEventListener(\"abort\", abort, { once: true });\n    try {\n      const result = await read();\n      throwIfAborted(this.signal);\n      return result;\n    } finally {\n      this.signal?.removeEventListener(\"abort\", abort);\n    }\n  }\n  async readExact(length, label) {\n    if (length === 0) return new Uint8Array(0);\n    const output = new Uint8Array(length);\n    let offset = 0;\n    while (offset < length) {\n      if (this.done) {\n        throw new Error(\n          `w7-frame: stream ended ${offset} bytes into expected ${length}-byte ${label}`\n        );\n      }\n      const next = await this.read(\n        () => this.reader.read(new Uint8Array(length - offset)),\n        () => this.reader.cancel(this.signal?.reason)\n      );\n      if (next.done) this.done = true;\n      else if (next.value.byteLength > 0) {\n        output.set(next.value, offset);\n        offset += next.value.byteLength;\n      }\n    }\n    return output;\n  }\n  async ensureEof(stream) {\n    if (this.done) return;\n    this.reader.releaseLock();\n    const reader = stream.getReader();\n    try {\n      const next = await this.read(() => reader.read(), () => reader.cancel(this.signal?.reason));\n      if (!next.done && next.value.byteLength > 0) {\n        await reader.cancel(new Error(\"w7-frame: trailing bytes after batch-end\"));\n        throw new Error(\"w7-frame: trailing bytes after batch-end\");\n      }\n      this.done = true;\n    } finally {\n      try {\n        reader.releaseLock();\n      } catch {\n      }\n    }\n  }\n};";

package/dist/node-shims-artifact.generated.js

@@ -7,6 +7,6 @@
  * prefix so cache layers never serve stale bytes after a rebuild;
  * NODE_SHIMS_SHA256 is the full digest verified at fetch time.
  */
-export const NODE_SHIMS_ENTRY = "/_assets/runtime/node-shims-8f8c64edd2a1f0f5.js";
-export const NODE_SHIMS_BUILD_ID = "8f8c64edd2a1f0f5";
-export const NODE_SHIMS_SHA256 = "8f8c64edd2a1f0f54037793c4f2dc8d77aca0da808aa5fdb9b1c179208c191cc";
+export const NODE_SHIMS_ENTRY = "/_assets/runtime/node-shims-acaa037e6d26ec0d.js";
+export const NODE_SHIMS_BUILD_ID = "acaa037e6d26ec0d";
+export const NODE_SHIMS_SHA256 = "acaa037e6d26ec0da144c015269c2c0a61cade7a9b82caabcc63a29161e8aac5";

package/dist/runtime/bash-repl.d.ts

@@ -1,16 +1,18 @@
 import type { FacetManager } from '../facets/manager.js';
 import type { WebSocketTerminal } from '../facets/ws-terminal.js';
-import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
 import type { Shell } from '@nimbus-sh/core/substrate/lifo/shell/Shell.js';
-import type { VfsCred } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { type VfsCred, type RuntimeFsBridge, type NimbusFilesystemAuthority } from '@nimbus-sh/core/runtime/os-contracts.js';
 import type { RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
 export interface BashReplDeps {
     facetMgr: FacetManager;
-    vfs: SqliteVFS;
+    /** Owns the installed runtime blobs the session is instantiated from. */
+    authority: NimbusFilesystemAuthority;
     terminal: WebSocketTerminal;
     installRoot: string;
     manifest: RuntimeManifest;
     cred: VfsCred;
+    pid: number;
+    filesystem: RuntimeFsBridge;
     env: Record<string, string>;
     cwd: string;
     shell?: Pick<Shell, 'env' | 'cwd' | 'takeQueuedInput'>;

package/dist/runtime/bash-repl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/bash-repl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+CAA+C,CAAC;AAE3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yCAAyC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAUnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,iBAAiB,CAAC,CAAC;CACxD;AA4LD,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAGrE"}
+{"version":3,"file":"bash-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/bash-repl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+CAA+C,CAAC;AAE3E,OAAO,EAAe,KAAK,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAE1I,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAUnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,yEAAyE;IACzE,SAAS,EAAE,yBAAyB,CAAC;IACrC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,eAAe,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,GAAG,iBAAiB,CAAC,CAAC;CACxD;AA+LD,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAGrE"}

package/dist/runtime/bash-repl.js

@@ -1,4 +1,6 @@
 import { formatShellPrompt } from '@nimbus-sh/core/substrate/lifo/shell/Shell.js';
+import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { withHostFilesystem } from '@nimbus-sh/core/shell/execution-fs.js';
 import { createBashFacetSession } from '@nimbus-sh/core/runtime/bash-runner.js';
 import { facetHostForManager } from './facet-loader-host.js';
 import { ReplSession, } from './repl-session.js';
@@ -82,9 +84,12 @@ class BashReplAdapter {
     async ensureSession(signal) {
         if (this.session)
             return null;
-        this.session = await createBashFacetSession({
+        this.session = await withHostFilesystem(this.deps.authority, CRED_KERNEL, (artifacts) => createBashFacetSession({
             facets: facetHostForManager(this.deps.facetMgr),
-            vfs: this.deps.vfs.as(this.deps.cred),
+            artifacts,
+            filesystem: this.deps.filesystem,
+            pid: this.deps.pid,
+            cred: this.deps.cred,
             manifest: this.deps.manifest,
             installRoot: this.deps.installRoot,
             argv: ['bash', '--noediting', '-i'],
@@ -98,7 +103,7 @@ class BashReplAdapter {
             stdinClosed: false,
             stdinTty: true,
             signal,
-        });
+        }));
         const initial = this.session.initial;
         if (initial.state !== 'need-input')
             return this.consumeSlice(initial, '');

package/dist/runtime/facet-loader-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"facet-loader-host.d.ts","sourceRoot":"","sources":["../../src/runtime/facet-loader-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAIV,SAAS,EAEV,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,GAAG,SAAS,CA6BhF;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,YAAY,GACrB;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,kBAAkB,CAAA;CAAE,CAM3C;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,CAGrE"}
+{"version":3,"file":"facet-loader-host.d.ts","sourceRoot":"","sources":["../../src/runtime/facet-loader-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAS,SAAS,EAAa,MAAM,uCAAuC,CAAC;AAEzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,GAAG,SAAS,CAuBhF;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,YAAY,GACrB;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,kBAAkB,CAAA;CAAE,CAM3C;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,CAGrE"}

package/dist/runtime/facet-loader-host.js

@@ -10,9 +10,7 @@ export function loaderFacetHost(env, ctx) {
          * whatever the program opens through its supervisor. It has to be — the
          * whole seed crosses one RPC, and a session filesystem does not fit in one.
          */
-        seedFilesystem(vfs, root, options) {
-            return manifestVfs(vfs, root, options);
-        },
+        seedFilesystem(vfs, root, options) { return manifestVfs(vfs, options.cred, root, options); },
         open(spec) {
             return new IsolatePool(env, ctx, {
                 tag: spec.tag,

package/dist/runtime/node-shims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-shims.d.ts","sourceRoot":"","sources":["../../src/runtime/node-shims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgDH,wBAAgB,iBAAiB,IAAI,MAAM,CAmhP1C"}
+{"version":3,"file":"node-shims.d.ts","sourceRoot":"","sources":["../../src/runtime/node-shims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgDH,wBAAgB,iBAAiB,IAAI,MAAM,CAgiP1C"}

package/dist/runtime/node-shims.js

@@ -6424,7 +6424,20 @@ builtins.tty = {
 // core and must not be reported as such — a package that sniffs this list
 // would otherwise conclude e.g. undici ships with node.
 const __nimbusFacetProvidedPackages = new Set(${FACET_PROVIDED_PACKAGES_LITERAL});
-	builtins.module = { get builtinModules() { return Object.keys(builtins).filter((n) => !__nimbusFacetProvidedPackages.has(n)); }, createRequire: (specifier) => __makeRequire(__requireBaseDir(specifier)), _resolveFilename: (id) => id, _cache: {} };
+	builtins.module = {
+	  get builtinModules() { return Object.keys(builtins).filter((n) => !__nimbusFacetProvidedPackages.has(n)); },
+	  createRequire: (specifier) => __makeRequire(__requireBaseDir(specifier)),
+	  isBuiltin: (specifier) => Object.hasOwn(builtins, String(specifier).replace(/^node:/, '')) && !__nimbusFacetProvidedPackages.has(String(specifier).replace(/^node:/, '')),
+	  // Node 22.1's on-disk compile cache. There is no disk to cache into and
+	  // nothing to compile ahead: callers (pi's CLI entry calls it
+	  // unconditionally) get Node's own answer for a cache that is off.
+	  enableCompileCache: () => ({ status: 3, message: 'compile cache is not available in this runtime' }),
+	  getCompileCacheDir: () => undefined,
+	  flushCompileCache: () => {},
+	  constants: { compileCacheStatus: { FAILED: 0, ENABLED: 1, ALREADY_ENABLED: 2, DISABLED: 3 } },
+	  _resolveFilename: (id) => id,
+	  _cache: {},
+	};
 // Bind to globalThis: workerd's timer globals throw "Illegal invocation"
 // when called with a receiver other than globalThis (i.e. as
 // timers.setInterval(...)), which clack's spinner — used by

package/dist/runtime/python-repl.d.ts

@@ -20,13 +20,14 @@ import type { Shell } from '@nimbus-sh/core/substrate/lifo/shell/Shell.js';
  * so `1 + 1` prints `2` and `x = 1` prints nothing, with no wrapper of ours
  * deciding what counts as a result.
  */
-import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
 import type { FacetManager } from '../facets/manager.js';
 import type { WebSocketTerminal } from '../facets/ws-terminal.js';
 import type { RuntimeManifest } from '@nimbus-sh/core/runtime/runtime-manifest.js';
+import { type NimbusFilesystemAuthority } from '@nimbus-sh/core/runtime/os-contracts.js';
 export interface PythonReplDeps {
     facetMgr: FacetManager;
-    vfs: SqliteVFS;
+    /** Owns the installed interpreter blobs the prompt is booted from. */
+    authority: NimbusFilesystemAuthority;
     terminal: WebSocketTerminal;
     /** Per-user-VFS install dir, e.g. 'home/user/.nimbus/runtimes/cpython/3.13.14'. */
     installRoot: string;
@@ -58,5 +59,5 @@ export declare function runPythonRepl(deps: PythonReplDeps): Promise<number>;
  * Pay the interpreter's boot before the user asks for a prompt. Pushing empty
  * source compiles to a no-op, so the only thing it does is bring the facet up.
  */
-export declare function warmPythonRepl(deps: Pick<PythonReplDeps, 'facetMgr' | 'vfs' | 'installRoot' | 'manifest'>): Promise<void>;
+export declare function warmPythonRepl(deps: Pick<PythonReplDeps, 'facetMgr' | 'authority' | 'installRoot' | 'manifest'>): Promise<void>;
 //# sourceMappingURL=python-repl.d.ts.map

package/dist/runtime/python-repl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"python-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/python-repl.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+CAA+C,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAoBnF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACvC;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAySD,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,KAAK,GAAG,aAAa,GAAG,UAAU,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"python-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/python-repl.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+CAA+C,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAMnF,OAAO,EAAe,KAAK,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AActG,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,sEAAsE;IACtE,SAAS,EAAE,yBAAyB,CAAC;IACrC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACvC;;;;;;;;OAQG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA2SD,wBAAsB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAIzE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC,GAChF,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/runtime/python-repl.js

@@ -1,5 +1,6 @@
 import { IsolatePool } from '@nimbus-sh/fabric/isolate-pool.js';
 import { manifestVfs } from '@nimbus-sh/core/runtime/vfs-manifest.js';
+import { withHostFilesystem } from '@nimbus-sh/core/shell/execution-fs.js';
 import { z } from 'zod/v4';
 import { ReplSession } from './repl-session.js';
 import { sessionUsesSciVariant } from '@nimbus-sh/core/runtime/python-pip.js';
@@ -164,9 +165,11 @@ class PythonReplAdapter {
         }
     }
     async ensurePool() {
-        const vfsForVariant = this.deps.vfs.as(CRED_KERNEL);
+        await withHostFilesystem(this.deps.authority, CRED_KERNEL, (vfs) => this.ensurePoolFrom(vfs));
+    }
+    async ensurePoolFrom(vfs) {
         const sciPath = `${this.deps.installRoot}/${CPYTHON_SCI_WASM_REL}`;
-        const wantsSci = sessionUsesSciVariant(vfsForVariant) && vfsForVariant.exists(sciPath);
+        const wantsSci = (await sessionUsesSciVariant(vfs)) && (await vfs.exists(sciPath));
         // A prompt that was open before `pip install numpy` is holding the
         // interpreter that does not have it. Dropping the pool rebuilds on the next
         // statement, which is the facet restart EXTENSIONS.md says this costs.
@@ -177,20 +180,19 @@ class PythonReplAdapter {
             return;
         this.poolUsesSci = wantsSci;
         const { installRoot, facetMgr } = this.deps;
-        const vfs = vfsForVariant;
         const wasmPath = wantsSci ? sciPath : `${installRoot}/${CPYTHON_WASM_REL}`;
         const stdlibPath = `${installRoot}/${CPYTHON_STDLIB_REL}`;
-        if (!vfs.exists(wasmPath)) {
+        if (!(await vfs.exists(wasmPath))) {
             throw new Error(`python.wasm missing at ${wasmPath} (run 'nimbus install python')`);
         }
-        if (!vfs.exists(stdlibPath)) {
+        if (!(await vfs.exists(stdlibPath))) {
             throw new Error(`python313.zip missing at ${stdlibPath} (run 'nimbus install python')`);
         }
-        this.wasmBytes = toArrayBuffer(vfs.readFile(wasmPath));
+        this.wasmBytes = toArrayBuffer(await vfs.readFile(wasmPath));
         // The install root is the Python prefix, so the manifest covers lib/ and
         // etc/ as they are — nothing is aliased into a path the supervisor could
         // not serve.
-        const built = manifestVfs(vfs, 'home/user', { extraRoots: [installRoot.replace(/^\/+/, '')] });
+        const built = await manifestVfs(vfs.authority, CRED_KERNEL, 'home/user', { extraRoots: [installRoot.replace(/^\/+/, '')] });
         if ('error' in built)
             throw new Error(built.error);
         // Same workaround as cpython-runner, and it belongs to the same open
@@ -198,7 +200,7 @@ class PythonReplAdapter {
         // demand-load, though the transport delivers it byte-identically. Seeding
         // it by value is what makes the interpreter start. Remove both together.
         const snapshot = built.snapshot;
-        const zipBytes = vfs.readFile(stdlibPath);
+        const zipBytes = await vfs.readFile(stdlibPath);
         let bin = '';
         const CH = 32768;
         for (let i = 0; i < zipBytes.length; i += CH) {

package/dist/runtime/ruby-repl.d.ts

@@ -24,12 +24,13 @@
  *   - Ctrl-C mid-execution.
  *   - irb history pickling.
  */
-import type { SqliteVFS } from '@nimbus-sh/core/vfs/sqlite-vfs.js';
 import type { FacetManager } from '../facets/manager.js';
 import type { WebSocketTerminal } from '../facets/ws-terminal.js';
+import { type NimbusFilesystemAuthority } from '@nimbus-sh/core/runtime/os-contracts.js';
 export interface RubyReplDeps {
     facetMgr: FacetManager;
-    vfs: SqliteVFS;
+    /** Owns the installed interpreter blob the prompt is booted from. */
+    authority: NimbusFilesystemAuthority;
     terminal: WebSocketTerminal;
     /** Per-user-VFS install dir for the ruby blob. */
     installRoot: string;

package/dist/runtime/ruby-repl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ruby-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/ruby-repl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAMlE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;CACrB;AA8MD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE"}
+{"version":3,"file":"ruby-repl.d.ts","sourceRoot":"","sources":["../../src/runtime/ruby-repl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,OAAO,EAAe,KAAK,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAGtG,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,qEAAqE;IACrE,SAAS,EAAE,yBAAyB,CAAC;IACrC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;CACrB;AA8MD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE"}

package/dist/runtime/ruby-repl.js

@@ -27,6 +27,7 @@
 import { ReplSession } from './repl-session.js';
 import { buildRubyPreamble } from '@nimbus-sh/core/runtime/ruby-runner.js';
 import { CRED_KERNEL } from '@nimbus-sh/core/runtime/os-contracts.js';
+import { withHostFilesystem } from '@nimbus-sh/core/shell/execution-fs.js';
 class RubyReplAdapter {
     pool = null;
     deps;
@@ -145,13 +146,13 @@ class RubyReplAdapter {
         if (this.pool)
             return;
         const { installRoot, facetMgr } = this.deps;
-        const vfs = this.deps.vfs.as(CRED_KERNEL);
         const wasmPath = `${installRoot}/share/ruby/ruby+stdlib.wasm`;
-        if (!vfs.exists(wasmPath)) {
-            throw new Error(`ruby+stdlib.wasm missing at ${wasmPath} (run 'nimbus install ruby')`);
-        }
-        const wasmBytes = vfs.readFile(wasmPath);
-        this.wasmBytesAB = toAB(wasmBytes);
+        this.wasmBytesAB = toAB(await withHostFilesystem(this.deps.authority, CRED_KERNEL, async (vfs) => {
+            if (!(await vfs.exists(wasmPath))) {
+                throw new Error(`ruby+stdlib.wasm missing at ${wasmPath} (run 'nimbus install ruby')`);
+            }
+            return vfs.readFile(wasmPath);
+        }));
         // The one canonical Ruby facet preamble. A hand-rolled copy here once
         // drifted (it lacked the language-prelude const __rubyRun requires, so
         // every REPL eval died on boot) — compose it in exactly one place.

package/dist/runtime/runtime-catalog.js

@@ -218,8 +218,8 @@ export function runtimeCatalogSource(env) {
                 name,
                 abi: runtimeAbiForCatalogName(name),
                 defaultVersion: entry.default,
+                // The publisher appends; the catalog's own order is publish order.
                 versions: Object.entries(entry.versions)
-                    .sort(([a], [b]) => a.localeCompare(b))
                     .map(([version, v]) => ({
                     version,
                     sizeBytes: v.size_bytes,

package/dist/runtime/wasi/preamble.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preamble.d.ts","sourceRoot":"","sources":["../../../src/runtime/wasi/preamble.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAGV,OAAO,EAOP,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EAGtB,aAAa,EAEb,iBAAiB,EACjB,kBAAkB,EAInB,MAAM,uCAAuC,CAAC;AAwL/C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAE1E;AAsHD;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAgB5D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOxD;AA+CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAkGxD;AAgPD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAc1E;AAeD,eAAO,MAAM,OAAO,sBAA6B,CAAC;AAiMlD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,GAAG,kBAAkB,CAwwDlF;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,CAcxF;AAeD,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAyB5G"}
+{"version":3,"file":"preamble.d.ts","sourceRoot":"","sources":["../../../src/runtime/wasi/preamble.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAGV,OAAO,EAOP,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EAGtB,aAAa,EAEb,iBAAiB,EACjB,kBAAkB,EAInB,MAAM,uCAAuC,CAAC;AAkL/C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAE1E;AAsHD;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAgB5D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOxD;AA+CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAqGxD;AAgPD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAc1E;AAeD,eAAO,MAAM,OAAO,sBAA6B,CAAC;AAqMlD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,GAAG,kBAAkB,CA8xDlF;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,CAcxF;AAeD,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAyB5G"}