@nimbus-sh/worker 0.9.0 → 0.11.0

package/dist/runtime/node-shims-artifact.js

@@ -1,83 +1,53 @@
 /**
- * node-shims-artifact.ts — supervisor-side fetcher for the staged node-compat
- * shim source.
+ * node-shims-artifact.ts — supervisor-side fetcher for the staged sources of
+ * the node-compat layer: the shims, the VFS write ledger and the resident store.
  *
- * The ~230 KiB generateShimsCode() output is staged as a static asset by
- * scripts/bundle-node-shims.mjs (promoted out of the worker bundle for the
- * ≤6 MiB bundle gate). Every node facet's generated worker text interpolates
- * it, so this fetch sits on the exec hot path: the result is memoized at
- * module scope (one fetch per isolate), fronted by L2 (caches.default) keyed
- * on the content-hash build id, with ASSETS as the source of truth and a
- * sha-256 integrity check so a stale or partial asset can never reach a facet.
- *
- * Mirrors opencode-artifact.ts / sqlite-wasm-bytes.ts. ASSETS is already a
- * mandatory embed binding (it serves the shell, sqlite wasm, opencode
- * artifacts); a missing binding fails loud here rather than producing a
- * facet with no node-compat layer.
+ * All three are staged as static assets by scripts/bundle-node-shims.mjs and
+ * promoted out of the worker bundle for its size gate: only a node facet ever
+ * runs them, and every node facet's generated worker text splices them. This
+ * fetch therefore sits on the exec hot path: the result is memoized at module
+ * scope (one fetch per isolate); each source is read and verified by
+ * runtime/staged-source.ts. A missing ASSETS binding fails loud rather than
+ * producing a facet with no node-compat layer.
  */
-import { NODE_SHIMS_BUILD_ID, NODE_SHIMS_ENTRY, NODE_SHIMS_SHA256, } from '../node-shims-artifact.generated.js';
-import { disposeRpcResource } from '@nimbus-sh/platform/rpc-dispose.js';
-import { sha256Hex } from '@nimbus-sh/core/_shared/crypto.js';
-const L2_KEY = `https://nimbus-cache.invalid${NODE_SHIMS_ENTRY}?build=${NODE_SHIMS_BUILD_ID}`;
-const ASSET_URL = `https://nimbus-internal.invalid${NODE_SHIMS_ENTRY}`;
-let memo = null;
-async function fetchAndVerify(env) {
-    if (!env.ASSETS) {
-        throw new Error('Nimbus: the node runtime requires an env.ASSETS binding (serves the ' +
-            'staged node-compat shim at ' + NODE_SHIMS_ENTRY + ') — add the assets ' +
-            'binding from the embed config (see packages/worker README)');
-    }
-    const caches = globalThis.caches;
-    let text = null;
-    try {
-        if (caches?.default) {
-            const hit = await caches.default.match(new Request(L2_KEY));
-            if (hit && hit.ok)
-                text = await hit.text();
-        }
-    }
-    catch { /* fall through to ASSETS */ }
-    if (text === null) {
-        const res = await env.ASSETS.fetch(new Request(ASSET_URL));
-        try {
-            if (!res.ok) {
-                throw new Error(`node-shims asset fetch failed: ${res.status} ${res.statusText} for ` +
-                    `${NODE_SHIMS_ENTRY} — deploy is missing the staged shim ` +
-                    `(run scripts/bundle-node-shims.mjs)`);
-            }
-            text = await res.text();
-        }
-        finally {
-            disposeRpcResource(res);
-        }
-        try {
-            if (caches?.default) {
-                await caches.default.put(new Request(L2_KEY), new Response(text, {
-                    headers: { 'Cache-Control': 'public, max-age=31536000, immutable' },
-                }));
-            }
-        }
-        catch { /* silent */ }
-    }
-    const digest = await sha256Hex(text);
-    if (digest !== NODE_SHIMS_SHA256) {
-        throw new Error(`node-shims asset integrity mismatch for ${NODE_SHIMS_ENTRY}: ` +
-            `expected ${NODE_SHIMS_SHA256.slice(0, 16)}…, got ${digest.slice(0, 16)}… — ` +
-            'the staged asset is stale; rerun scripts/bundle-node-shims.mjs and redeploy');
-    }
-    return text;
-}
+import { NODE_SHIMS_BUILD_ID, NODE_SHIMS_ENTRY, NODE_SHIMS_SHA256, RESIDENT_STORE_BUILD_ID, RESIDENT_STORE_ENTRY, RESIDENT_STORE_SHA256, VFS_WRITE_LEDGER_BUILD_ID, VFS_WRITE_LEDGER_ENTRY, VFS_WRITE_LEDGER_SHA256, } from '../node-shims-artifact.generated.js';
+import { fetchStagedText, memoizeUntilRejected, stagedRuntimeSource, } from './staged-source.js';
+const STAGED_BY = 'scripts/bundle-node-shims.mjs';
+const REQUIRED_BY = 'the node runtime';
+const NODE_SHIMS = stagedRuntimeSource({
+    label: 'node-shims',
+    entry: NODE_SHIMS_ENTRY,
+    buildId: NODE_SHIMS_BUILD_ID,
+    sha256: NODE_SHIMS_SHA256,
+    stagedBy: STAGED_BY,
+    requiredBy: REQUIRED_BY,
+});
+const VFS_WRITE_LEDGER = stagedRuntimeSource({
+    label: 'vfs-write-ledger',
+    entry: VFS_WRITE_LEDGER_ENTRY,
+    buildId: VFS_WRITE_LEDGER_BUILD_ID,
+    sha256: VFS_WRITE_LEDGER_SHA256,
+    stagedBy: STAGED_BY,
+    requiredBy: REQUIRED_BY,
+});
+const RESIDENT_STORE = stagedRuntimeSource({
+    label: 'resident-store',
+    entry: RESIDENT_STORE_ENTRY,
+    buildId: RESIDENT_STORE_BUILD_ID,
+    sha256: RESIDENT_STORE_SHA256,
+    stagedBy: STAGED_BY,
+    requiredBy: REQUIRED_BY,
+});
 /**
- * The node-compat shim source for facet worker codegen. Memoized per isolate;
- * a failed fetch clears the memo so the next exec retries instead of pinning
- * the error.
+ * The node-compat layer's sources for facet worker codegen. Memoized per
+ * isolate; a failed fetch clears the memo so the next exec retries instead of
+ * pinning the error.
  */
-export function fetchNodeShimsCode(env) {
-    if (!memo) {
-        memo = fetchAndVerify(env).catch((e) => {
-            memo = null;
-            throw e;
-        });
-    }
-    return memo;
-}
+export const fetchNodeFacetSources = memoizeUntilRejected(async (env) => {
+    const [shims, ledger, residentStore] = await Promise.all([
+        fetchStagedText(env, NODE_SHIMS),
+        fetchStagedText(env, VFS_WRITE_LEDGER),
+        fetchStagedText(env, RESIDENT_STORE),
+    ]);
+    return { shims, ledger, residentStore };
+});

package/dist/runtime/node-shims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-shims.d.ts","sourceRoot":"","sources":["../../src/runtime/node-shims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgDH,wBAAgB,iBAAiB,IAAI,MAAM,CAgiP1C"}
+{"version":3,"file":"node-shims.d.ts","sourceRoot":"","sources":["../../src/runtime/node-shims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA2DH,wBAAgB,iBAAiB,IAAI,MAAM,CA22R1C"}