@nyte-ai/host 0.0.23 → 0.0.24

package/README.md

@@ -1,7 +1,7 @@
 # @nyte-ai/host
 
-The Node and edge sides of a Nyte host, around the host `composeHost` builds in `@nyte-ai/core`: `listen` serves it over `node:http` or as a bare fetch handler, and `listenFetch` (`@nyte-ai/host/listen-fetch`, node-free) is that fetch handler for Workers, both through `src/serve`'s handler, which binds `@nyte-ai/protocol`'s table to the server port `composeHost` returns, with token, pairing and custom authentication, CORS, the `/.nyte/identity` and `/.nyte/describe` routes, and in-process driving when the kernel only admits; `sqliteStore` (`node:sqlite`), `postgresStore` (any `pg`-shaped pool) and `durableObjectStore` (`@nyte-ai/host/durable-object`, a Durable Object's SQLite) implement core's `Store`, each publish one transaction with its compare-and-set and log append; `localProvider` serves a folder on this machine, with files over `node:fs` versioned by content, `.gitignore`-aware scan, find, search (ripgrep, else a scan) and watch, processes over pipes or a pty (`@lydell/node-pty`, loaded on first use), git over its CLI, each file's patch sent as its unified diff text, and run snapshots kept as hidden git refs or a content-addressed tree walk; `chatOnlyProvider` and `sandboxProvider` (`@nyte-ai/host/providers`, node-free) serve a workspace with no files and one in a remote sandbox; `loadPluginFiles` and `pluginLoader` import the core plugins in `.nyte/plugins` directories; and `src/deploy` holds two deployments, a Cloudflare Worker whose Durable Object runs one host from its alarm (`@nyte-ai/host/deploy/cloudflare`) and a Nitro app for Vercel whose heads run as workflows (`@nyte-ai/host/deploy/vercel`).
+The Node and edge sides of a Nyte host, around the host `composeHost` builds in `@nyte-ai/core`: `listen` serves it over `node:http` or as a bare fetch handler, and `listenFetch` (`@nyte-ai/host/listen-fetch`, node-free) is that fetch handler for Workers, both through `src/serve`'s handler, which binds `@nyte-ai/protocol`'s table to the server port `composeHost` returns, with token, pairing and custom authentication, CORS, the `/.nyte/identity` and `/.nyte/describe` routes, and in-process driving when the kernel only admits; `sqliteStore` (`node:sqlite`), `postgresStore` (any `pg`-shaped pool) and `durableObjectStore` (`@nyte-ai/host/durable-object`, a Durable Object's SQLite) implement core's `Store`, each publish one transaction with its compare-and-set and log append; `localProvider` serves a folder on this machine, with files over `node:fs` versioned by content, `.gitignore`-aware scan, find, search (ripgrep, else a scan) and watch, processes over pipes or a pty (`@lydell/node-pty`, loaded on first use), git over its CLI, each file's patch sent as its unified diff text, and run snapshots kept as hidden git refs or a content-addressed tree walk; `chatOnlyProvider` and `sandboxProvider` (`@nyte-ai/host/providers`, node-free) serve a workspace with no files and one in a remote sandbox; and `loadPluginFiles` and `pluginLoader` import the core plugins in `.nyte/plugins` directories. Deployments built on these live in `packages/examples`: a Cloudflare Worker whose Durable Object runs one host from its alarm, and a Nitro app for Vercel whose heads run as workflows.
 
 ## Tests
 
-`pnpm --dir packages/host test` runs every store against one conformance suite: sqlite, postgres over pglite, and the Durable Object store over a `node:sqlite` stand-in of its SQL storage (`test/do-sql-stub.ts`), the same stand-in the alarm `pass` and the `NyteHost` cold-start tests use. Deferred (Part 2 §43i): running the Worker and the Durable Object store inside workerd, and checking that the Worker's import graph reaches no `node:*` module, until a package that already depends on `wrangler` takes them; host itself carries neither `miniflare` nor `esbuild`.
+`pnpm --dir packages/host test` runs every store against one conformance suite: sqlite, postgres over pglite, and the Durable Object store over a `node:sqlite` stand-in of its SQL storage (`test/do-sql-stub.ts`). The Worker's alarm `pass` and `NyteHost` cold-start tests live with the Worker in `packages/examples/cloudflare`. Deferred (Part 2 §43i): running the Worker and the Durable Object store inside workerd, and checking that the Worker's import graph reaches no `node:*` module, until a package that already depends on `wrangler` takes them; host itself carries neither `miniflare` nor `esbuild`.

package/THIRD-PARTY-NOTICES.md

@@ -45,39 +45,6 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## pi-claude-code (`earendil-works/pi-claude-code`)
-
-- Repository: https://github.com/earendil-works/pi-claude-code
-- What: the Claude Code CLI provider, single-turn relay, transcript replay,
-  process reuse, and billing guards in `packages/plugin/examples/claude-code`
-  are adapted from commit `70abb65186592ca788b29b3db22c3160d629c41f`.
-
-License: MIT, with the following notice:
-
-```text
-MIT License
-
-Copyright (c) 2026 Armin Ronacher
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```
-
 ## pi (`earendil-works/pi`)
 
 - Repository: https://github.com/earendil-works/pi
@@ -345,8 +312,8 @@ Copyright 2025 OpenAI
   front of the queue (`packages/tui/src/model/interactions.ts`) is its
   `onEmptySubmit`. The rename
   plugin's context construction, prompt, model fallback, and output cleanup
-  (`packages/plugin/examples/rename.ts`) port OpenCode v2. The web-search
-  plugin set (`packages/plugin/examples/web-search/`) ports its Exa, Firecrawl,
+  (`packages/plugin/src/rename.ts`) port OpenCode v2. The web-search
+  plugin set (`packages/plugin/src/web-search.ts`) ports its Exa, Firecrawl,
   Parallel, and Tavily adapters, its stateless MCP `tools/call` transport and
   response bounds, its result and error vocabulary, and its arrangement of one
   plugin per provider from OpenCode v2.
@@ -429,9 +396,6 @@ SOFTWARE.
   bypass, and connection tuning in `packages/host/src/sqlite*.ts` are adapted
   from `bf8ffe81a63c82d3de5fbaa9991fd5f30034a452`.
 - Homepage: https://t3.codes
-- What: the demo desktop app (`packages/demo/desktop`) follows T3 Code's
-  control-surface shape — agents in a sidebar, a conversation workspace, a
-  shared composer, and settings behind a dialog.
 
 License: MIT, with the following notice:
 

package/dist/chunks/{canvas-preview-ayayyd43.js → canvas-preview-w0mr5bkn.js}

@@ -39,9 +39,6 @@ import {
   storePath2,
   sqliteStore2
 } from "./canvas-preview-mstbvwz3.js";
-import {
-  package_default
-} from "./canvas-preview-dsb5829c.js";
 
 // src/open.ts
 import { watch } from "node:fs";
@@ -70,6 +67,148 @@ import question from "@nyte-ai/plugin/core/question";
 import rename from "@nyte-ai/plugin/core/rename";
 import telemetry from "@nyte-ai/plugin/core/telemetry";
 import webSearch from "@nyte-ai/plugin/core/web-search";
+// package.json
+var package_default = {
+  name: "@nyte-ai/host",
+  version: "0.0.24",
+  private: false,
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/interfaces-lab/nyte.git",
+    directory: "packages/host"
+  },
+  files: [
+    "dist",
+    "src",
+    "LICENSE",
+    "THIRD-PARTY-NOTICES.md"
+  ],
+  type: "module",
+  exports: {
+    ".": "./src/index.ts",
+    "./canvas-preview": "./src/canvas-preview.ts",
+    "./credentials": "./src/credentials.ts",
+    "./durable-object": "./src/durable-object.ts",
+    "./identity": "./src/identity.ts",
+    "./images": "./src/images/node.ts",
+    "./image-worker": "./src/images/worker.ts",
+    "./listen-fetch": "./src/listen-fetch.ts",
+    "./providers": "./src/providers.ts",
+    "./secrets": "./src/secrets.ts",
+    "./shell-env": "./src/shell-env.ts",
+    "./usage": "./src/usage.ts",
+    "./store-usage": "./src/store-usage.ts",
+    "./usage-service": "./src/usage-service.ts",
+    "./usage-scan": "./src/usage-scan.ts",
+    "./usage-worker": "./src/usage-worker.ts"
+  },
+  publishConfig: {
+    exports: {
+      ".": {
+        types: "./dist/src/index.d.ts",
+        import: "./dist/src/index.js"
+      },
+      "./canvas-preview": {
+        types: "./dist/src/canvas-preview.d.ts",
+        import: "./dist/src/canvas-preview.js"
+      },
+      "./credentials": {
+        types: "./dist/src/credentials.d.ts",
+        import: "./dist/src/credentials.js"
+      },
+      "./durable-object": {
+        types: "./dist/src/durable-object.d.ts",
+        import: "./dist/src/durable-object.js"
+      },
+      "./identity": {
+        types: "./dist/src/identity.d.ts",
+        import: "./dist/src/identity.js"
+      },
+      "./images": {
+        types: "./dist/src/images/node.d.ts",
+        import: "./dist/src/images/node.js"
+      },
+      "./image-worker": {
+        types: "./dist/src/images/worker.d.ts",
+        import: "./dist/src/images/worker.js"
+      },
+      "./listen-fetch": {
+        types: "./dist/src/listen-fetch.d.ts",
+        import: "./dist/src/listen-fetch.js"
+      },
+      "./providers": {
+        types: "./dist/src/providers.d.ts",
+        import: "./dist/src/providers.js"
+      },
+      "./secrets": {
+        types: "./dist/src/secrets.d.ts",
+        import: "./dist/src/secrets.js"
+      },
+      "./shell-env": {
+        types: "./dist/src/shell-env.d.ts",
+        import: "./dist/src/shell-env.js"
+      },
+      "./usage": {
+        types: "./dist/src/usage.d.ts",
+        import: "./dist/src/usage.js"
+      },
+      "./store-usage": {
+        types: "./dist/src/store-usage.d.ts",
+        import: "./dist/src/store-usage.js"
+      },
+      "./usage-service": {
+        types: "./dist/src/usage-service.d.ts",
+        import: "./dist/src/usage-service.js"
+      },
+      "./usage-scan": {
+        types: "./dist/src/usage-scan.d.ts",
+        import: "./dist/src/usage-scan.js"
+      },
+      "./usage-worker": {
+        types: "./dist/src/usage-worker.d.ts",
+        import: "./dist/src/usage-worker.js"
+      }
+    },
+    access: "public",
+    provenance: true
+  },
+  scripts: {
+    clean: "rm -rf node_modules .turbo",
+    typecheck: "tsrs --noEmit",
+    test: "vitest --run",
+    "check:store": "node scripts/check-store.ts",
+    "build:package": "bun ../../scripts/sdk-packages.mjs build host"
+  },
+  dependencies: {
+    "@earendil-works/pi-mcp": "^1.3.0",
+    "@lydell/node-pty": "^1.2.0-beta.15",
+    "@nyte-ai/ai": "workspace:*",
+    "@nyte-ai/core": "workspace:*",
+    "@nyte-ai/plugin": "workspace:*",
+    "@nyte-ai/protocol": "workspace:*",
+    "@nyte-ai/schema": "workspace:*",
+    "@silvia-odwyer/photon": "^0.3.3",
+    fflate: "^0.8.3",
+    ignore: "^7.0.13",
+    pg: "^8.23.1",
+    typebox: "^1.4.2"
+  },
+  devDependencies: {
+    "@electric-sql/pglite": "^0.5.11",
+    "@nyte-ai/canvas": "workspace:*",
+    "@types/node": "^26.6.5",
+    "@types/pg": "^8.23.1",
+    "fast-check": "^4.10.2",
+    typescript: "6.0.3",
+    vitest: "^5.0.5"
+  },
+  engines: {
+    node: ">=26.4.0"
+  }
+};
+
+// src/open.ts
 var RELOAD_DEBOUNCE_MS = 250;
 var STORE_POLL_MS = 500;
 async function openHost2(options) {
@@ -343,7 +482,11 @@ async function settingsSeed(home) {
   return { seed: { settings, path }, issue: null };
 }
 function hostDescription() {
-  return { name: hostname(), platform: process.platform, version: package_default.version };
+  return {
+    name: hostname(),
+    platform: process.platform,
+    version: typeof NYTE_BUILT_VERSION === "string" ? NYTE_BUILT_VERSION : package_default.version
+  };
 }
 function settingsPath(home) {
   return join(home, ".nyte", "settings.json");

package/dist/src/durable-object.d.ts

@@ -10,5 +10,5 @@ export type DurableObjectSql = {
     };
     transactionSync<T>(closure: () => T): T;
 };
-/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `deploy/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
+/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `packages/examples/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
 export declare function durableObjectStore(storage: DurableObjectSql): Store;

package/dist/src/index.js

@@ -84,7 +84,7 @@ import {
 } from "../chunks/canvas-preview-mstbvwz3.js";
 import {
   openHost2
-} from "../chunks/canvas-preview-ayayyd43.js";
+} from "../chunks/canvas-preview-w0mr5bkn.js";
 import {
   postgresStore2
 } from "../chunks/canvas-preview-4b6sayhg.js";

package/dist/src/open.js

@@ -1,6 +1,6 @@
 import {
   openHost2
-} from "../chunks/canvas-preview-ayayyd43.js";
+} from "../chunks/canvas-preview-w0mr5bkn.js";
 import"../chunks/canvas-preview-4e0pxa32.js";
 import"../chunks/canvas-preview-y5y6ghaw.js";
 import"../chunks/canvas-preview-ec2mt7es.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nyte-ai/host",
-  "version": "0.0.23",
+  "version": "0.0.24",
   "private": false,
   "license": "MIT",
   "repository": {
@@ -79,14 +79,6 @@
     "./usage-worker": {
       "types": "./dist/src/usage-worker.d.ts",
       "import": "./dist/src/usage-worker.js"
-    },
-    "./deploy/cloudflare": {
-      "types": "./dist/src/deploy/cloudflare/worker.d.ts",
-      "import": "./dist/src/deploy/cloudflare/worker.js"
-    },
-    "./deploy/vercel": {
-      "types": "./dist/src/deploy/vercel/nitro.config.d.ts",
-      "import": "./dist/src/deploy/vercel/nitro.config.js"
     }
   },
   "publishConfig": {
@@ -96,11 +88,11 @@
   "dependencies": {
     "@earendil-works/pi-mcp": "^1.3.0",
     "@lydell/node-pty": "^1.2.0-beta.15",
-    "@nyte-ai/ai": "0.0.23",
-    "@nyte-ai/core": "0.0.23",
-    "@nyte-ai/plugin": "0.0.23",
-    "@nyte-ai/protocol": "0.0.23",
-    "@nyte-ai/schema": "0.0.23",
+    "@nyte-ai/ai": "0.0.24",
+    "@nyte-ai/core": "0.0.24",
+    "@nyte-ai/plugin": "0.0.24",
+    "@nyte-ai/protocol": "0.0.24",
+    "@nyte-ai/schema": "0.0.24",
     "@silvia-odwyer/photon": "^0.3.3",
     "fflate": "^0.8.3",
     "ignore": "^7.0.13",
@@ -113,29 +105,15 @@
     "@types/node": "^26.6.5",
     "@types/pg": "^8.23.1",
     "fast-check": "^4.10.2",
-    "nitro": "^3.0.260903-beta",
     "typescript": "6.0.3",
-    "vitest": "^5.0.5",
-    "workflow": "^5.2.3"
-  },
-  "peerDependencies": {
-    "nitro": "^3.0.260903-beta",
-    "workflow": "^5.2.3"
-  },
-  "peerDependenciesMeta": {
-    "nitro": {
-      "optional": true
-    },
-    "workflow": {
-      "optional": true
-    }
+    "vitest": "^5.0.5"
   },
   "engines": {
     "node": ">=26.4.0"
   },
   "scripts": {
     "clean": "rm -rf node_modules .turbo",
-    "typecheck": "tsrs --noEmit && tsrs --noEmit -p src/deploy/vercel",
+    "typecheck": "tsrs --noEmit",
     "test": "vitest --run",
     "check:store": "node scripts/check-store.ts",
     "build:package": "bun ../../scripts/sdk-packages.mjs build host"

package/src/durable-object.ts

@@ -44,7 +44,7 @@ const ROW_LIMIT = 2_000_000;
 
 const encoder = new TextEncoder();
 
-/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `deploy/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
+/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `packages/examples/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
 export function durableObjectStore(storage: DurableObjectSql): Store {
   let connection: StoreConnection | null = null;
 

package/src/open.ts

@@ -50,6 +50,8 @@ import { defaultSecrets } from "./secrets.ts";
 import type { SecretsSource } from "./secrets.ts";
 import { sqliteStore, storePath } from "./sqlite.ts";
 
+declare const NYTE_BUILT_VERSION: string | undefined;
+
 const RELOAD_DEBOUNCE_MS = 250;
 
 const STORE_POLL_MS = 500;
@@ -441,7 +443,11 @@ async function settingsSeed(home: string): Promise<{
 }
 
 function hostDescription(): HostDescription {
-  return { name: hostname(), platform: process.platform, version: manifest.version };
+  return {
+    name: hostname(),
+    platform: process.platform,
+    version: typeof NYTE_BUILT_VERSION === "string" ? NYTE_BUILT_VERSION : manifest.version,
+  };
 }
 
 function settingsPath(home: string): string {

package/src/usage-history.ts

@@ -159,7 +159,6 @@ async function* historyLines(path: string, start: number, signal: AbortSignal |
       const chunk = pending.length === 0 ? read : Buffer.concat([pending, read]);
       let from = 0;
 
-      // oxlint-disable-next-line nyte-code/no-index-of -- a byte search keeps offsets exact, which decoded text cannot
       for (let newline = chunk.indexOf(0x0a); newline !== -1; newline = chunk.indexOf(0x0a, from)) {
         yield {
           text: chunk.toString("utf8", from, newline),

package/dist/chunks/canvas-preview-1f8h0he1.js

@@ -1,81 +0,0 @@
-import {
-  answerRepair2
-} from "./canvas-preview-2zdyh9ny.js";
-import {
-  package_default
-} from "./canvas-preview-dsb5829c.js";
-
-// src/deploy/vercel/server/utils/host.ts
-import process from "node:process";
-import { createModels } from "@nyte-ai/ai/models";
-import { SdkError } from "@nyte-ai/schema";
-import { composeHost } from "@nyte-ai/core/server";
-import { postgresStore } from "@nyte-ai/host";
-import { credentialStore } from "@nyte-ai/host/credentials";
-import { seedSigner } from "@nyte-ai/host/identity";
-import { listenFetch } from "@nyte-ai/host/listen-fetch";
-import { sandboxProvider } from "@nyte-ai/host/providers";
-var PAGE = 100;
-var boot = async () => {
-  throw new SdkError("unavailable", "Supply a boot over your sandbox SDK in server/utils/host.ts.");
-};
-var building = null;
-function vercelHost2(dispatch) {
-  const built = building ??= build(dispatch);
-  built.catch(() => {
-    if (building === built)
-      building = null;
-  });
-  return built;
-}
-async function build(dispatch) {
-  const connectionString = process.env.DATABASE_URL;
-  if (connectionString === undefined || connectionString === "")
-    throw new SdkError("unavailable", "Set DATABASE_URL to the Postgres database the host keeps.");
-  const identityKey = process.env.NYTE_IDENTITY_KEY;
-  const store = postgresStore({ connectionString });
-  const secrets = secretsFrom(process.env.NYTE_SECRET_KEY);
-  const description = { name: "nyte-host", platform: "vercel", version: package_default.version };
-  const host = await composeHost({
-    store,
-    models: createModels({ credentials: credentialStore(store, secrets) }),
-    plugins: [{ id: "sandbox", environment: sandboxProvider({ boot }) }],
-    workspace: { kind: "sandbox", locator: { name: process.env.NYTE_SANDBOX ?? "nyte" } },
-    execution: { kind: "dispatch", dispatch },
-    poll: 1000,
-    secrets,
-    home: null,
-    description
-  });
-  const repair = async () => {
-    let cursor;
-    do {
-      const page = await host.execution.repair({ cursor, limit: PAGE });
-      cursor = page.next ?? undefined;
-    } while (cursor !== undefined);
-  };
-  const listener = await listenFetch(host, {
-    transport: { kind: "fetch" },
-    auth: { kind: "token", token: process.env.NYTE_TOKEN ?? "" },
-    execution: { kind: "admit-only" },
-    describe: () => description,
-    ...identityKey === undefined || identityKey === "" ? {} : { identity: await seedSigner(host.hostId, Uint8Array.fromBase64(identityKey)) },
-    before: (request) => answerRepair2(request, process.env.CRON_SECRET, repair)
-  }).catch(async (error) => {
-    await host.close();
-    throw error;
-  });
-  return { host, listener };
-}
-function secretsFrom(key) {
-  if (key === undefined || key === "")
-    return {
-      key: async () => {
-        throw new SdkError("unavailable", "Set NYTE_SECRET_KEY to a base64 32-byte key.");
-      }
-    };
-  const bytes = new Uint8Array(Buffer.from(key, "base64"));
-  return { key: async () => bytes };
-}
-
-export { vercelHost2 };

package/dist/chunks/canvas-preview-2zdyh9ny.js

@@ -1,26 +0,0 @@
-// src/deploy/vercel/server/utils/repair.ts
-import { createHash, timingSafeEqual } from "node:crypto";
-import { SdkError } from "@nyte-ai/schema";
-import { encodeError, errorStatus } from "@nyte-ai/protocol";
-async function answerRepair2(request, secret, repair) {
-  if (request.method !== "GET" || new URL(request.url).pathname !== "/.nyte/repair")
-    return;
-  if (secret === undefined || secret === "")
-    return failure(new SdkError("unknown", "This deployment sets no CRON_SECRET."));
-  const given = /^Bearer\s+(\S+)\s*$/i.exec(request.headers.get("Authorization") ?? "")?.[1] ?? "";
-  if (!timingSafeEqual(digest(given), digest(secret)))
-    return failure(new SdkError("unauthenticated", "Send Authorization: Bearer <CRON_SECRET>."));
-  await repair();
-  return new Response(null, { status: 204 });
-}
-function digest(text) {
-  return createHash("sha256").update(text).digest();
-}
-function failure(error) {
-  return new Response(JSON.stringify(encodeError(error)), {
-    status: errorStatus[error.code],
-    headers: { "Content-Type": "application/json" }
-  });
-}
-
-export { answerRepair2 };

package/dist/chunks/canvas-preview-65xqjw7f.js

@@ -1,20 +0,0 @@
-// src/deploy/vercel/server/utils/step.ts
-function stepFrom2(report, now) {
-  switch (report.kind) {
-    case "continue":
-      return { kind: "advance" };
-    case "waiting":
-      return report.until === null ? { kind: "stop" } : untilStep(report.until, now);
-    case "retry":
-      return untilStep(report.until, now);
-    case "busy":
-    case "idle":
-    case "fenced":
-      return { kind: "stop" };
-  }
-}
-function untilStep(until, now) {
-  return until > now ? { kind: "sleep", ms: until - now } : { kind: "advance" };
-}
-
-export { stepFrom2 };