@nyte-ai/host 0.0.21 → 0.0.24

package/README.md

@@ -1,7 +1,7 @@
 # @nyte-ai/host
 
-The Node and edge sides of a Nyte host, around the host `composeHost` builds in `@nyte-ai/core`: `listen` serves it over `node:http` or as a bare fetch handler, and `listenFetch` (`@nyte-ai/host/listen-fetch`, node-free) is that fetch handler for Workers, both through `src/serve`'s handler, which binds `@nyte-ai/protocol`'s table to the server port `composeHost` returns, with token, pairing and custom authentication, CORS, the `/.nyte/identity` and `/.nyte/describe` routes, and in-process driving when the kernel only admits; `sqliteStore` (`node:sqlite`), `postgresStore` (any `pg`-shaped pool) and `durableObjectStore` (`@nyte-ai/host/durable-object`, a Durable Object's SQLite) implement core's `Store`, each publish one transaction with its compare-and-set and log append; `localProvider` serves a folder on this machine, with files over `node:fs` versioned by content, `.gitignore`-aware scan, find, search (ripgrep, else a scan) and watch, processes over pipes or a pty (`@lydell/node-pty`, loaded on first use), git over its CLI, each file's patch sent as its unified diff text, and run snapshots kept as hidden git refs or a content-addressed tree walk; `chatOnlyProvider` and `sandboxProvider` (`@nyte-ai/host/providers`, node-free) serve a workspace with no files and one in a remote sandbox; `loadPluginFiles` and `pluginLoader` import the core plugins in `.nyte/plugins` directories; and `src/deploy` holds two deployments, a Cloudflare Worker whose Durable Object runs one host from its alarm (`@nyte-ai/host/deploy/cloudflare`) and a Nitro app for Vercel whose heads run as workflows (`@nyte-ai/host/deploy/vercel`).
+The Node and edge sides of a Nyte host, around the host `composeHost` builds in `@nyte-ai/core`: `listen` serves it over `node:http` or as a bare fetch handler, and `listenFetch` (`@nyte-ai/host/listen-fetch`, node-free) is that fetch handler for Workers, both through `src/serve`'s handler, which binds `@nyte-ai/protocol`'s table to the server port `composeHost` returns, with token, pairing and custom authentication, CORS, the `/.nyte/identity` and `/.nyte/describe` routes, and in-process driving when the kernel only admits; `sqliteStore` (`node:sqlite`), `postgresStore` (any `pg`-shaped pool) and `durableObjectStore` (`@nyte-ai/host/durable-object`, a Durable Object's SQLite) implement core's `Store`, each publish one transaction with its compare-and-set and log append; `localProvider` serves a folder on this machine, with files over `node:fs` versioned by content, `.gitignore`-aware scan, find, search (ripgrep, else a scan) and watch, processes over pipes or a pty (`@lydell/node-pty`, loaded on first use), git over its CLI, each file's patch sent as its unified diff text, and run snapshots kept as hidden git refs or a content-addressed tree walk; `chatOnlyProvider` and `sandboxProvider` (`@nyte-ai/host/providers`, node-free) serve a workspace with no files and one in a remote sandbox; and `loadPluginFiles` and `pluginLoader` import the core plugins in `.nyte/plugins` directories. Deployments built on these live in `packages/examples`: a Cloudflare Worker whose Durable Object runs one host from its alarm, and a Nitro app for Vercel whose heads run as workflows.
 
 ## Tests
 
-`pnpm --dir packages/host test` runs every store against one conformance suite: sqlite, postgres over pglite, and the Durable Object store over a `node:sqlite` stand-in of its SQL storage (`test/do-sql-stub.ts`), the same stand-in the alarm `pass` and the `NyteHost` cold-start tests use. Deferred (Part 2 §43i): running the Worker and the Durable Object store inside workerd, and checking that the Worker's import graph reaches no `node:*` module, until a package that already depends on `wrangler` takes them; host itself carries neither `miniflare` nor `esbuild`.
+`pnpm --dir packages/host test` runs every store against one conformance suite: sqlite, postgres over pglite, and the Durable Object store over a `node:sqlite` stand-in of its SQL storage (`test/do-sql-stub.ts`). The Worker's alarm `pass` and `NyteHost` cold-start tests live with the Worker in `packages/examples/cloudflare`. Deferred (Part 2 §43i): running the Worker and the Durable Object store inside workerd, and checking that the Worker's import graph reaches no `node:*` module, until a package that already depends on `wrangler` takes them; host itself carries neither `miniflare` nor `esbuild`.

package/THIRD-PARTY-NOTICES.md

@@ -45,39 +45,6 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## pi-claude-code (`earendil-works/pi-claude-code`)
-
-- Repository: https://github.com/earendil-works/pi-claude-code
-- What: the Claude Code CLI provider, single-turn relay, transcript replay,
-  process reuse, and billing guards in `packages/plugin/examples/claude-code`
-  are adapted from commit `70abb65186592ca788b29b3db22c3160d629c41f`.
-
-License: MIT, with the following notice:
-
-```text
-MIT License
-
-Copyright (c) 2026 Armin Ronacher
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```
-
 ## pi (`earendil-works/pi`)
 
 - Repository: https://github.com/earendil-works/pi
@@ -345,8 +312,8 @@ Copyright 2025 OpenAI
   front of the queue (`packages/tui/src/model/interactions.ts`) is its
   `onEmptySubmit`. The rename
   plugin's context construction, prompt, model fallback, and output cleanup
-  (`packages/plugin/examples/rename.ts`) port OpenCode v2. The web-search
-  plugin set (`packages/plugin/examples/web-search/`) ports its Exa, Firecrawl,
+  (`packages/plugin/src/rename.ts`) port OpenCode v2. The web-search
+  plugin set (`packages/plugin/src/web-search.ts`) ports its Exa, Firecrawl,
   Parallel, and Tavily adapters, its stateless MCP `tools/call` transport and
   response bounds, its result and error vocabulary, and its arrangement of one
   plugin per provider from OpenCode v2.
@@ -429,9 +396,6 @@ SOFTWARE.
   bypass, and connection tuning in `packages/host/src/sqlite*.ts` are adapted
   from `bf8ffe81a63c82d3de5fbaa9991fd5f30034a452`.
 - Homepage: https://t3.codes
-- What: the demo desktop app (`packages/demo/desktop`) follows T3 Code's
-  control-surface shape — agents in a sidebar, a conversation workspace, a
-  shared composer, and settings behind a dialog.
 
 License: MIT, with the following notice:
 

package/dist/chunks/{canvas-preview-w54ymtb3.js → canvas-preview-9e15hp6q.js}

@@ -1,6 +1,6 @@
 import {
   createHandler2
-} from "./canvas-preview-aq5j4p25.js";
+} from "./canvas-preview-d97wvref.js";
 
 // src/listen-fetch.ts
 import { SdkError } from "@nyte-ai/schema";

package/dist/chunks/{canvas-preview-aq5j4p25.js → canvas-preview-d97wvref.js}

@@ -1,6 +1,6 @@
 import {
   bindConnection2
-} from "./canvas-preview-55s0y68g.js";
+} from "./canvas-preview-gm0frf4b.js";
 import {
   createStreamChannels2
 } from "./canvas-preview-rp4x6y1h.js";

package/dist/chunks/{canvas-preview-55s0y68g.js → canvas-preview-gm0frf4b.js}

@@ -1,6 +1,6 @@
 // src/serve/binding.ts
 import { isJson, SdkError } from "@nyte-ai/schema";
-import { mapped, viewFrames } from "@nyte-ai/protocol";
+import { mapped, sessionsFrames, viewFrames } from "@nyte-ai/protocol";
 var LOGIN_LIFETIME = 10 * 60 * 1000;
 var attempts = new WeakMap;
 var holds = new WeakMap;
@@ -116,7 +116,7 @@ function bindConnection2(connection, options) {
     "workspaces.inspect": ({ target }) => connection.workspaces.inspect(target),
     "workspaces.add": ({ target, options }) => connection.workspaces.add(target, options),
     "workspaces.forget": ({ id }) => connection.workspaces.forget(id),
-    "sessions.watch": async (input) => connection.sessions.watch(input),
+    "sessions.watch": async (input) => sessionsFrames(connection.sessions.watch(input)),
     "sessions.start": async (input) => {
       const { session, receipt } = await connection.sessions.start(input);
       return { session: session.id, receipt: receipt.id, message: receipt.message };

package/dist/chunks/{canvas-preview-y7kq0c8q.js → canvas-preview-w0mr5bkn.js}

@@ -21,7 +21,7 @@ import {
 } from "./canvas-preview-4e0pxa32.js";
 import {
   listen2
-} from "./canvas-preview-ycepb05s.js";
+} from "./canvas-preview-whfdhma6.js";
 import {
   nodeImages2
 } from "./canvas-preview-y5y6ghaw.js";
@@ -39,9 +39,6 @@ import {
   storePath2,
   sqliteStore2
 } from "./canvas-preview-mstbvwz3.js";
-import {
-  package_default
-} from "./canvas-preview-8hr08aeh.js";
 
 // src/open.ts
 import { watch } from "node:fs";
@@ -70,6 +67,148 @@ import question from "@nyte-ai/plugin/core/question";
 import rename from "@nyte-ai/plugin/core/rename";
 import telemetry from "@nyte-ai/plugin/core/telemetry";
 import webSearch from "@nyte-ai/plugin/core/web-search";
+// package.json
+var package_default = {
+  name: "@nyte-ai/host",
+  version: "0.0.24",
+  private: false,
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/interfaces-lab/nyte.git",
+    directory: "packages/host"
+  },
+  files: [
+    "dist",
+    "src",
+    "LICENSE",
+    "THIRD-PARTY-NOTICES.md"
+  ],
+  type: "module",
+  exports: {
+    ".": "./src/index.ts",
+    "./canvas-preview": "./src/canvas-preview.ts",
+    "./credentials": "./src/credentials.ts",
+    "./durable-object": "./src/durable-object.ts",
+    "./identity": "./src/identity.ts",
+    "./images": "./src/images/node.ts",
+    "./image-worker": "./src/images/worker.ts",
+    "./listen-fetch": "./src/listen-fetch.ts",
+    "./providers": "./src/providers.ts",
+    "./secrets": "./src/secrets.ts",
+    "./shell-env": "./src/shell-env.ts",
+    "./usage": "./src/usage.ts",
+    "./store-usage": "./src/store-usage.ts",
+    "./usage-service": "./src/usage-service.ts",
+    "./usage-scan": "./src/usage-scan.ts",
+    "./usage-worker": "./src/usage-worker.ts"
+  },
+  publishConfig: {
+    exports: {
+      ".": {
+        types: "./dist/src/index.d.ts",
+        import: "./dist/src/index.js"
+      },
+      "./canvas-preview": {
+        types: "./dist/src/canvas-preview.d.ts",
+        import: "./dist/src/canvas-preview.js"
+      },
+      "./credentials": {
+        types: "./dist/src/credentials.d.ts",
+        import: "./dist/src/credentials.js"
+      },
+      "./durable-object": {
+        types: "./dist/src/durable-object.d.ts",
+        import: "./dist/src/durable-object.js"
+      },
+      "./identity": {
+        types: "./dist/src/identity.d.ts",
+        import: "./dist/src/identity.js"
+      },
+      "./images": {
+        types: "./dist/src/images/node.d.ts",
+        import: "./dist/src/images/node.js"
+      },
+      "./image-worker": {
+        types: "./dist/src/images/worker.d.ts",
+        import: "./dist/src/images/worker.js"
+      },
+      "./listen-fetch": {
+        types: "./dist/src/listen-fetch.d.ts",
+        import: "./dist/src/listen-fetch.js"
+      },
+      "./providers": {
+        types: "./dist/src/providers.d.ts",
+        import: "./dist/src/providers.js"
+      },
+      "./secrets": {
+        types: "./dist/src/secrets.d.ts",
+        import: "./dist/src/secrets.js"
+      },
+      "./shell-env": {
+        types: "./dist/src/shell-env.d.ts",
+        import: "./dist/src/shell-env.js"
+      },
+      "./usage": {
+        types: "./dist/src/usage.d.ts",
+        import: "./dist/src/usage.js"
+      },
+      "./store-usage": {
+        types: "./dist/src/store-usage.d.ts",
+        import: "./dist/src/store-usage.js"
+      },
+      "./usage-service": {
+        types: "./dist/src/usage-service.d.ts",
+        import: "./dist/src/usage-service.js"
+      },
+      "./usage-scan": {
+        types: "./dist/src/usage-scan.d.ts",
+        import: "./dist/src/usage-scan.js"
+      },
+      "./usage-worker": {
+        types: "./dist/src/usage-worker.d.ts",
+        import: "./dist/src/usage-worker.js"
+      }
+    },
+    access: "public",
+    provenance: true
+  },
+  scripts: {
+    clean: "rm -rf node_modules .turbo",
+    typecheck: "tsrs --noEmit",
+    test: "vitest --run",
+    "check:store": "node scripts/check-store.ts",
+    "build:package": "bun ../../scripts/sdk-packages.mjs build host"
+  },
+  dependencies: {
+    "@earendil-works/pi-mcp": "^1.3.0",
+    "@lydell/node-pty": "^1.2.0-beta.15",
+    "@nyte-ai/ai": "workspace:*",
+    "@nyte-ai/core": "workspace:*",
+    "@nyte-ai/plugin": "workspace:*",
+    "@nyte-ai/protocol": "workspace:*",
+    "@nyte-ai/schema": "workspace:*",
+    "@silvia-odwyer/photon": "^0.3.3",
+    fflate: "^0.8.3",
+    ignore: "^7.0.13",
+    pg: "^8.23.1",
+    typebox: "^1.4.2"
+  },
+  devDependencies: {
+    "@electric-sql/pglite": "^0.5.11",
+    "@nyte-ai/canvas": "workspace:*",
+    "@types/node": "^26.6.5",
+    "@types/pg": "^8.23.1",
+    "fast-check": "^4.10.2",
+    typescript: "6.0.3",
+    vitest: "^5.0.5"
+  },
+  engines: {
+    node: ">=26.4.0"
+  }
+};
+
+// src/open.ts
 var RELOAD_DEBOUNCE_MS = 250;
 var STORE_POLL_MS = 500;
 async function openHost2(options) {
@@ -343,7 +482,11 @@ async function settingsSeed(home) {
   return { seed: { settings, path }, issue: null };
 }
 function hostDescription() {
-  return { name: hostname(), platform: process.platform, version: package_default.version };
+  return {
+    name: hostname(),
+    platform: process.platform,
+    version: typeof NYTE_BUILT_VERSION === "string" ? NYTE_BUILT_VERSION : package_default.version
+  };
 }
 function settingsPath(home) {
   return join(home, ".nyte", "settings.json");

package/dist/chunks/{canvas-preview-ycepb05s.js → canvas-preview-whfdhma6.js}

@@ -1,6 +1,6 @@
 import {
   listenFetch2
-} from "./canvas-preview-w54ymtb3.js";
+} from "./canvas-preview-9e15hp6q.js";
 
 // src/listen.ts
 import { createServer } from "node:http";

package/dist/src/durable-object.d.ts

@@ -10,5 +10,5 @@ export type DurableObjectSql = {
     };
     transactionSync<T>(closure: () => T): T;
 };
-/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `deploy/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
+/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `packages/examples/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
 export declare function durableObjectStore(storage: DurableObjectSql): Store;

package/dist/src/index.js

@@ -11,15 +11,15 @@ import"../chunks/canvas-preview-wg80rbc2.js";
 import {
   identitySigner2
 } from "../chunks/canvas-preview-5mex725c.js";
-import"../chunks/canvas-preview-55s0y68g.js";
+import"../chunks/canvas-preview-gm0frf4b.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
-import"../chunks/canvas-preview-aq5j4p25.js";
+import"../chunks/canvas-preview-d97wvref.js";
 import {
   listenFetch2
-} from "../chunks/canvas-preview-w54ymtb3.js";
+} from "../chunks/canvas-preview-9e15hp6q.js";
 import {
   listen2
-} from "../chunks/canvas-preview-ycepb05s.js";
+} from "../chunks/canvas-preview-whfdhma6.js";
 import"../chunks/canvas-preview-0nq75h9k.js";
 import"../chunks/canvas-preview-bxnqt8cd.js";
 import"../chunks/canvas-preview-yjz0f7n4.js";
@@ -84,7 +84,7 @@ import {
 } from "../chunks/canvas-preview-mstbvwz3.js";
 import {
   openHost2
-} from "../chunks/canvas-preview-y7kq0c8q.js";
+} from "../chunks/canvas-preview-w0mr5bkn.js";
 import {
   postgresStore2
 } from "../chunks/canvas-preview-4b6sayhg.js";

package/dist/src/listen-fetch.js

@@ -1,8 +1,8 @@
 import {
   listenFetch2
-} from "../chunks/canvas-preview-w54ymtb3.js";
-import"../chunks/canvas-preview-aq5j4p25.js";
-import"../chunks/canvas-preview-55s0y68g.js";
+} from "../chunks/canvas-preview-9e15hp6q.js";
+import"../chunks/canvas-preview-d97wvref.js";
+import"../chunks/canvas-preview-gm0frf4b.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
 export {
   listenFetch2 as listenFetch

package/dist/src/listen.js

@@ -1,9 +1,9 @@
 import {
   listen2
-} from "../chunks/canvas-preview-ycepb05s.js";
-import"../chunks/canvas-preview-w54ymtb3.js";
-import"../chunks/canvas-preview-aq5j4p25.js";
-import"../chunks/canvas-preview-55s0y68g.js";
+} from "../chunks/canvas-preview-whfdhma6.js";
+import"../chunks/canvas-preview-9e15hp6q.js";
+import"../chunks/canvas-preview-d97wvref.js";
+import"../chunks/canvas-preview-gm0frf4b.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
 export {
   listen2 as listen

package/dist/src/open.js

@@ -1,6 +1,6 @@
 import {
   openHost2
-} from "../chunks/canvas-preview-y7kq0c8q.js";
+} from "../chunks/canvas-preview-w0mr5bkn.js";
 import"../chunks/canvas-preview-4e0pxa32.js";
 import"../chunks/canvas-preview-y5y6ghaw.js";
 import"../chunks/canvas-preview-ec2mt7es.js";
@@ -26,10 +26,10 @@ import"../chunks/canvas-preview-s94ebwf5.js";
 import"../chunks/canvas-preview-kdqgrstc.js";
 import"../chunks/canvas-preview-mstbvwz3.js";
 import"../chunks/canvas-preview-zaaj99wd.js";
-import"../chunks/canvas-preview-ycepb05s.js";
-import"../chunks/canvas-preview-w54ymtb3.js";
-import"../chunks/canvas-preview-aq5j4p25.js";
-import"../chunks/canvas-preview-55s0y68g.js";
+import"../chunks/canvas-preview-whfdhma6.js";
+import"../chunks/canvas-preview-9e15hp6q.js";
+import"../chunks/canvas-preview-d97wvref.js";
+import"../chunks/canvas-preview-gm0frf4b.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
 import"../chunks/canvas-preview-skzwvw4d.js";
 import"../chunks/canvas-preview-bxnqt8cd.js";

package/dist/src/serve/binding.d.ts

@@ -34,6 +34,6 @@ export type Binding = CallBinding & FrameBinding & ByteBinding & OutputBinding;
 export type BindingOptions = {
     readonly server: ServerHost;
 };
-/** Returns each row bound to the call it names: ids bind handles on the connection, handles returned become ids, `Set`s and `Map`s become their wire forms; `head.move`, `files.batch` and `browser.open` go through the server port's wire operations with their wire id (§40o, §40x). `head.watch` sends the head's view from the host's fold whole, then each later view as its changes (`viewFrames`), the core watch marking the principal's seen tip (§40a, §54a). Authority is the caller's gate: the server checks each row's before binding. */
+/** Returns each row bound to the call it names: ids bind handles on the connection, handles returned become ids, `Set`s and `Map`s become their wire forms; `head.move`, `files.batch` and `browser.open` go through the server port's wire operations with their wire id (§40o, §40x). `head.watch` sends the head's view from the host's fold whole, then each later view as its changes (`viewFrames`), the core watch marking the principal's seen tip (§40a, §54a); `sessions.watch` sends the list whole, then each later list as its order and changed rows (`sessionsFrames`). Authority is the caller's gate: the server checks each row's before binding. */
 export declare function bindConnection(connection: Connection, options: BindingOptions): Binding;
 export {};

package/dist/src/serve/binding.js

@@ -1,6 +1,6 @@
 import {
   bindConnection2
-} from "../../chunks/canvas-preview-55s0y68g.js";
+} from "../../chunks/canvas-preview-gm0frf4b.js";
 export {
   bindConnection2 as bindConnection
 };

package/dist/src/serve/handler.js

@@ -1,7 +1,7 @@
 import {
   createHandler2
-} from "../../chunks/canvas-preview-aq5j4p25.js";
-import"../../chunks/canvas-preview-55s0y68g.js";
+} from "../../chunks/canvas-preview-d97wvref.js";
+import"../../chunks/canvas-preview-gm0frf4b.js";
 import"../../chunks/canvas-preview-rp4x6y1h.js";
 export {
   createHandler2 as createHandler

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nyte-ai/host",
-  "version": "0.0.21",
+  "version": "0.0.24",
   "private": false,
   "license": "MIT",
   "repository": {
@@ -79,14 +79,6 @@
     "./usage-worker": {
       "types": "./dist/src/usage-worker.d.ts",
       "import": "./dist/src/usage-worker.js"
-    },
-    "./deploy/cloudflare": {
-      "types": "./dist/src/deploy/cloudflare/worker.d.ts",
-      "import": "./dist/src/deploy/cloudflare/worker.js"
-    },
-    "./deploy/vercel": {
-      "types": "./dist/src/deploy/vercel/nitro.config.d.ts",
-      "import": "./dist/src/deploy/vercel/nitro.config.js"
     }
   },
   "publishConfig": {
@@ -94,48 +86,34 @@
     "provenance": true
   },
   "dependencies": {
-    "@earendil-works/pi-mcp": "1.3.0",
-    "@lydell/node-pty": "1.2.0-beta.15",
-    "@nyte-ai/ai": "0.0.21",
-    "@nyte-ai/core": "0.0.21",
-    "@nyte-ai/plugin": "0.0.21",
-    "@nyte-ai/protocol": "0.0.21",
-    "@nyte-ai/schema": "0.0.21",
-    "@silvia-odwyer/photon": "0.3.3",
-    "fflate": "0.8.3",
-    "ignore": "7.0.9",
-    "pg": "8.23.0",
-    "typebox": "1.3.36"
+    "@earendil-works/pi-mcp": "^1.3.0",
+    "@lydell/node-pty": "^1.2.0-beta.15",
+    "@nyte-ai/ai": "0.0.24",
+    "@nyte-ai/core": "0.0.24",
+    "@nyte-ai/plugin": "0.0.24",
+    "@nyte-ai/protocol": "0.0.24",
+    "@nyte-ai/schema": "0.0.24",
+    "@silvia-odwyer/photon": "^0.3.3",
+    "fflate": "^0.8.3",
+    "ignore": "^7.0.13",
+    "pg": "^8.23.1",
+    "typebox": "^1.4.2"
   },
   "devDependencies": {
-    "@electric-sql/pglite": "0.5.8",
+    "@electric-sql/pglite": "^0.5.11",
     "@nyte-ai/canvas": "0.0.0",
     "@types/node": "^26.6.5",
-    "@types/pg": "8.23.1",
-    "fast-check": "4.10.2",
-    "nitro": "3.0.260903-beta",
+    "@types/pg": "^8.23.1",
+    "fast-check": "^4.10.2",
     "typescript": "6.0.3",
-    "vitest": "^5.0.5",
-    "workflow": "4.8.8"
-  },
-  "peerDependencies": {
-    "nitro": "3.0.260903-beta",
-    "workflow": "4.8.8"
-  },
-  "peerDependenciesMeta": {
-    "nitro": {
-      "optional": true
-    },
-    "workflow": {
-      "optional": true
-    }
+    "vitest": "^5.0.5"
   },
   "engines": {
     "node": ">=26.4.0"
   },
   "scripts": {
     "clean": "rm -rf node_modules .turbo",
-    "typecheck": "tsrs --noEmit && tsrs --noEmit -p src/deploy/vercel",
+    "typecheck": "tsrs --noEmit",
     "test": "vitest --run",
     "check:store": "node scripts/check-store.ts",
     "build:package": "bun ../../scripts/sdk-packages.mjs build host"

package/src/durable-object.ts

@@ -44,7 +44,7 @@ const ROW_LIMIT = 2_000_000;
 
 const encoder = new TextEncoder();
 
-/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `deploy/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
+/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `packages/examples/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
 export function durableObjectStore(storage: DurableObjectSql): Store {
   let connection: StoreConnection | null = null;
 

package/src/open.ts

@@ -50,6 +50,8 @@ import { defaultSecrets } from "./secrets.ts";
 import type { SecretsSource } from "./secrets.ts";
 import { sqliteStore, storePath } from "./sqlite.ts";
 
+declare const NYTE_BUILT_VERSION: string | undefined;
+
 const RELOAD_DEBOUNCE_MS = 250;
 
 const STORE_POLL_MS = 500;
@@ -441,7 +443,11 @@ async function settingsSeed(home: string): Promise<{
 }
 
 function hostDescription(): HostDescription {
-  return { name: hostname(), platform: process.platform, version: manifest.version };
+  return {
+    name: hostname(),
+    platform: process.platform,
+    version: typeof NYTE_BUILT_VERSION === "string" ? NYTE_BUILT_VERSION : manifest.version,
+  };
 }
 
 function settingsPath(home: string): string {

package/src/serve/binding.ts

@@ -30,7 +30,7 @@ import type {
   Receipt,
 } from "@nyte-ai/core";
 import type { ServerHost } from "@nyte-ai/core/server";
-import { mapped, viewFrames } from "@nyte-ai/protocol";
+import { mapped, sessionsFrames, viewFrames } from "@nyte-ai/protocol";
 import type {
   ByteName,
   CallName,
@@ -103,7 +103,7 @@ const attempts = new WeakMap<ServerHost, Map<string, Attempt>>();
 
 const holds = new WeakMap<ServerHost, Map<string, Page[]>>();
 
-/** Returns each row bound to the call it names: ids bind handles on the connection, handles returned become ids, `Set`s and `Map`s become their wire forms; `head.move`, `files.batch` and `browser.open` go through the server port's wire operations with their wire id (§40o, §40x). `head.watch` sends the head's view from the host's fold whole, then each later view as its changes (`viewFrames`), the core watch marking the principal's seen tip (§40a, §54a). Authority is the caller's gate: the server checks each row's before binding. */
+/** Returns each row bound to the call it names: ids bind handles on the connection, handles returned become ids, `Set`s and `Map`s become their wire forms; `head.move`, `files.batch` and `browser.open` go through the server port's wire operations with their wire id (§40o, §40x). `head.watch` sends the head's view from the host's fold whole, then each later view as its changes (`viewFrames`), the core watch marking the principal's seen tip (§40a, §54a); `sessions.watch` sends the list whole, then each later list as its order and changed rows (`sessionsFrames`). Authority is the caller's gate: the server checks each row's before binding. */
 export function bindConnection(connection: Connection, options: BindingOptions): Binding {
   const { wire } = options.server;
   const { principal } = connection;
@@ -257,7 +257,7 @@ export function bindConnection(connection: Connection, options: BindingOptions):
     "workspaces.add": ({ target, options }) => connection.workspaces.add(target, options),
     "workspaces.forget": ({ id }) => connection.workspaces.forget(id),
 
-    "sessions.watch": async (input) => connection.sessions.watch(input),
+    "sessions.watch": async (input) => sessionsFrames(connection.sessions.watch(input)),
     "sessions.start": async (input) => {
       const { session, receipt } = await connection.sessions.start(input);
 

package/src/usage-history.ts

@@ -159,7 +159,6 @@ async function* historyLines(path: string, start: number, signal: AbortSignal |
       const chunk = pending.length === 0 ? read : Buffer.concat([pending, read]);
       let from = 0;
 
-      // oxlint-disable-next-line nyte-code/no-index-of -- a byte search keeps offsets exact, which decoded text cannot
       for (let newline = chunk.indexOf(0x0a); newline !== -1; newline = chunk.indexOf(0x0a, from)) {
         yield {
           text: chunk.toString("utf8", from, newline),

package/dist/chunks/canvas-preview-2zdyh9ny.js

@@ -1,26 +0,0 @@
-// src/deploy/vercel/server/utils/repair.ts
-import { createHash, timingSafeEqual } from "node:crypto";
-import { SdkError } from "@nyte-ai/schema";
-import { encodeError, errorStatus } from "@nyte-ai/protocol";
-async function answerRepair2(request, secret, repair) {
-  if (request.method !== "GET" || new URL(request.url).pathname !== "/.nyte/repair")
-    return;
-  if (secret === undefined || secret === "")
-    return failure(new SdkError("unknown", "This deployment sets no CRON_SECRET."));
-  const given = /^Bearer\s+(\S+)\s*$/i.exec(request.headers.get("Authorization") ?? "")?.[1] ?? "";
-  if (!timingSafeEqual(digest(given), digest(secret)))
-    return failure(new SdkError("unauthenticated", "Send Authorization: Bearer <CRON_SECRET>."));
-  await repair();
-  return new Response(null, { status: 204 });
-}
-function digest(text) {
-  return createHash("sha256").update(text).digest();
-}
-function failure(error) {
-  return new Response(JSON.stringify(encodeError(error)), {
-    status: errorStatus[error.code],
-    headers: { "Content-Type": "application/json" }
-  });
-}
-
-export { answerRepair2 };