@nyte-ai/host 0.0.23 → 0.0.25-beta.1

package/README.md

@@ -1,7 +1,7 @@
 # @nyte-ai/host
 
-The Node and edge sides of a Nyte host, around the host `composeHost` builds in `@nyte-ai/core`: `listen` serves it over `node:http` or as a bare fetch handler, and `listenFetch` (`@nyte-ai/host/listen-fetch`, node-free) is that fetch handler for Workers, both through `src/serve`'s handler, which binds `@nyte-ai/protocol`'s table to the server port `composeHost` returns, with token, pairing and custom authentication, CORS, the `/.nyte/identity` and `/.nyte/describe` routes, and in-process driving when the kernel only admits; `sqliteStore` (`node:sqlite`), `postgresStore` (any `pg`-shaped pool) and `durableObjectStore` (`@nyte-ai/host/durable-object`, a Durable Object's SQLite) implement core's `Store`, each publish one transaction with its compare-and-set and log append; `localProvider` serves a folder on this machine, with files over `node:fs` versioned by content, `.gitignore`-aware scan, find, search (ripgrep, else a scan) and watch, processes over pipes or a pty (`@lydell/node-pty`, loaded on first use), git over its CLI, each file's patch sent as its unified diff text, and run snapshots kept as hidden git refs or a content-addressed tree walk; `chatOnlyProvider` and `sandboxProvider` (`@nyte-ai/host/providers`, node-free) serve a workspace with no files and one in a remote sandbox; `loadPluginFiles` and `pluginLoader` import the core plugins in `.nyte/plugins` directories; and `src/deploy` holds two deployments, a Cloudflare Worker whose Durable Object runs one host from its alarm (`@nyte-ai/host/deploy/cloudflare`) and a Nitro app for Vercel whose heads run as workflows (`@nyte-ai/host/deploy/vercel`).
+The Node and edge sides of a Nyte host, around the host `composeHost` builds in `@nyte-ai/core`: `listen` serves it over `node:http` or as a bare fetch handler, and `listenFetch` (`@nyte-ai/host/listen-fetch`, node-free) is that fetch handler for Workers, both through `src/serve`'s handler, which binds `@nyte-ai/protocol`'s table to the server port `composeHost` returns, with token, pairing and custom authentication, CORS, the `/.nyte/identity` and `/.nyte/describe` routes, and in-process driving when the kernel only admits; `sqliteStore` (`node:sqlite`), `postgresStore` (any `pg`-shaped pool) and `durableObjectStore` (`@nyte-ai/host/durable-object`, a Durable Object's SQLite) implement core's `Store`, each publish one transaction with its compare-and-set and log append; `localProvider` serves a folder on this machine, with files over `node:fs` versioned by content, `.gitignore`-aware scan, find, search (ripgrep, else a scan) and watch, processes over pipes or a pty (`@lydell/node-pty`, loaded on first use), git over its CLI, each file's patch sent as its unified diff text, and run snapshots kept as hidden git refs or a content-addressed tree walk; `chatOnlyProvider` and `sandboxProvider` (`@nyte-ai/host/providers`, node-free) serve a workspace with no files and one in a remote sandbox; and `loadPluginFiles` and `pluginLoader` import the core plugins in `.nyte/plugins` directories. Deployments built on these live in `packages/examples`: a Cloudflare Worker whose Durable Object runs one host from its alarm, and a Nitro app for Vercel whose heads run as workflows.
 
 ## Tests
 
-`pnpm --dir packages/host test` runs every store against one conformance suite: sqlite, postgres over pglite, and the Durable Object store over a `node:sqlite` stand-in of its SQL storage (`test/do-sql-stub.ts`), the same stand-in the alarm `pass` and the `NyteHost` cold-start tests use. Deferred (Part 2 §43i): running the Worker and the Durable Object store inside workerd, and checking that the Worker's import graph reaches no `node:*` module, until a package that already depends on `wrangler` takes them; host itself carries neither `miniflare` nor `esbuild`.
+`pnpm --dir packages/host test` runs every store against one conformance suite: sqlite, postgres over pglite, and the Durable Object store over a `node:sqlite` stand-in of its SQL storage (`test/do-sql-stub.ts`). The Worker's alarm `pass` and `NyteHost` cold-start tests live with the Worker in `packages/examples/cloudflare`. Deferred (Part 2 §43i): running the Worker and the Durable Object store inside workerd, and checking that the Worker's import graph reaches no `node:*` module, until a package that already depends on `wrangler` takes them; host itself carries neither `miniflare` nor `esbuild`.

package/THIRD-PARTY-NOTICES.md

@@ -45,39 +45,6 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
-## pi-claude-code (`earendil-works/pi-claude-code`)
-
-- Repository: https://github.com/earendil-works/pi-claude-code
-- What: the Claude Code CLI provider, single-turn relay, transcript replay,
-  process reuse, and billing guards in `packages/plugin/examples/claude-code`
-  are adapted from commit `70abb65186592ca788b29b3db22c3160d629c41f`.
-
-License: MIT, with the following notice:
-
-```text
-MIT License
-
-Copyright (c) 2026 Armin Ronacher
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-```
-
 ## pi (`earendil-works/pi`)
 
 - Repository: https://github.com/earendil-works/pi
@@ -345,8 +312,8 @@ Copyright 2025 OpenAI
   front of the queue (`packages/tui/src/model/interactions.ts`) is its
   `onEmptySubmit`. The rename
   plugin's context construction, prompt, model fallback, and output cleanup
-  (`packages/plugin/examples/rename.ts`) port OpenCode v2. The web-search
-  plugin set (`packages/plugin/examples/web-search/`) ports its Exa, Firecrawl,
+  (`packages/plugin/src/rename.ts`) port OpenCode v2. The web-search
+  plugin set (`packages/plugin/src/web-search.ts`) ports its Exa, Firecrawl,
   Parallel, and Tavily adapters, its stateless MCP `tools/call` transport and
   response bounds, its result and error vocabulary, and its arrangement of one
   plugin per provider from OpenCode v2.
@@ -429,9 +396,6 @@ SOFTWARE.
   bypass, and connection tuning in `packages/host/src/sqlite*.ts` are adapted
   from `bf8ffe81a63c82d3de5fbaa9991fd5f30034a452`.
 - Homepage: https://t3.codes
-- What: the demo desktop app (`packages/demo/desktop`) follows T3 Code's
-  control-surface shape — agents in a sidebar, a conversation workspace, a
-  shared composer, and settings behind a dialog.
 
 License: MIT, with the following notice:
 

package/dist/chunks/{canvas-preview-d97wvref.js → canvas-preview-1r9sgbj3.js}

@@ -1,6 +1,6 @@
 import {
   bindConnection2
-} from "./canvas-preview-gm0frf4b.js";
+} from "./canvas-preview-2yzyt077.js";
 import {
   createStreamChannels2
 } from "./canvas-preview-rp4x6y1h.js";

package/dist/chunks/{canvas-preview-gm0frf4b.js → canvas-preview-2yzyt077.js}

@@ -138,12 +138,22 @@ function bindConnection2(connection, options) {
       await session(id).info();
       return viewFrames(session(id).head(head).watch(options));
     },
+    "head.see": async ({ session: id, head, commit }) => {
+      await session(id).head(head).see(commit);
+      return null;
+    },
     "head.history": ({ session: id, head, before, limit }) => session(id).head(head).history({ before, limit }),
     "head.tree": ({ session: id, head }) => session(id).head(head).tree(),
     "head.move": async ({ session: id, head, position, options, id: receipt }) => ({
       receipt: (await wire.move(id, head, position, { ...options, id: receipt })).id
     }),
     "head.compact": ({ session: id, head, instructions }) => session(id).head(head).compact({ instructions }),
+    "head.revise": ({ session: id, head, message, content, options }) => session(id).head(head).revise(message, content, options),
+    "head.hold": ({ session: id, head, message }) => wire.hold(id, head, message),
+    "head.release": async ({ session: id, head, message }) => {
+      await wire.release(id, head, message);
+      return null;
+    },
     "heads.create": ({ session: id, name, input }) => session(id).heads.create(name, input),
     "heads.merge": ({ session: id, name, options }) => session(id).heads.merge(name, options),
     "heads.remove": ({ session: id, name, options }) => session(id).heads.remove(name, options),
@@ -175,6 +185,10 @@ function bindConnection2(connection, options) {
       const answer = await session(id).part(part).answer({ signal });
       return answer === null ? null : { action: String(answer.action), input: toJson(answer.input) };
     },
+    "part.watch": async ({ session: id, part }) => {
+      await session(id).info();
+      return session(id).part(part).watch();
+    },
     "part.close": async ({ session: id, part }) => {
       await session(id).part(part).close();
       return null;

package/dist/chunks/{canvas-preview-whfdhma6.js → canvas-preview-8sv3j0vt.js}

@@ -1,6 +1,6 @@
 import {
   listenFetch2
-} from "./canvas-preview-9e15hp6q.js";
+} from "./canvas-preview-da6dwy05.js";
 
 // src/listen.ts
 import { createServer } from "node:http";

package/dist/chunks/{canvas-preview-e3vnkkc5.js → canvas-preview-9bxhwjrh.js}

@@ -21,7 +21,7 @@ import {
 } from "./canvas-preview-crmzxxt8.js";
 import {
   localWorktrees2
-} from "./canvas-preview-2jwbe14k.js";
+} from "./canvas-preview-bg63k8n7.js";
 
 // src/local/provider.ts
 import { constants, realpathSync } from "node:fs";
@@ -87,6 +87,7 @@ function localProvider2(options) {
       return nests(env.cwd, state) || nests(state, env.cwd) && !nests(join(state, "worktrees"), env.cwd) ? undefined : localSnapshots2(env, { store, git: options?.git });
     },
     worktrees: localWorktrees2({ home, git: options?.git }),
+    realpath: (env, path) => realpath(isAbsolute(path) ? path : join(env.cwd, path)).catch(() => null),
     async destroy() {
       throw new SdkError("unavailable", "A local folder is never torn down.");
     }

package/dist/chunks/{canvas-preview-2jwbe14k.js → canvas-preview-bg63k8n7.js}

@@ -1,6 +1,3 @@
-import {
-  sha2562
-} from "./canvas-preview-0nq75h9k.js";
 import {
   run2
 } from "./canvas-preview-bxnqt8cd.js";
@@ -9,9 +6,54 @@ import {
 import { randomUUID } from "node:crypto";
 import { copyFile, mkdir, realpath, rm, stat } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
-import { basename, dirname, join, resolve } from "node:path";
+import { basename, join, resolve } from "node:path";
 import { SdkError } from "@nyte-ai/schema";
 var ENV = { GIT_TERMINAL_PROMPT: "0", LC_ALL: "C" };
+var SESSION_KEY = "nyte-session";
+var STOPWORDS = new Set([
+  "a",
+  "an",
+  "the",
+  "and",
+  "or",
+  "of",
+  "to",
+  "in",
+  "on",
+  "for",
+  "with",
+  "from",
+  "by",
+  "at",
+  "into",
+  "as",
+  "is",
+  "are",
+  "be",
+  "it",
+  "its",
+  "this",
+  "that",
+  "my",
+  "our",
+  "your"
+]);
+var TYPE_WORDS = new Set([
+  "feat",
+  "feature",
+  "fix",
+  "add",
+  "chore",
+  "refactor",
+  "docs",
+  "test",
+  "perf",
+  "build",
+  "ci",
+  "revert",
+  "update"
+]);
+var MAX_ATTEMPTS = 100;
 function gitCommand(binary = "git") {
   return async (cwd, args, env) => {
     const ran = await run2(binary, ["-c", "core.quotepath=off", ...args], {
@@ -55,6 +97,51 @@ function localWorktrees2(options) {
       await rm(index, { force: true });
     }
   };
+  const findClaimedBranch = async (root, name) => {
+    const out = await git(root, [
+      "config",
+      "-z",
+      "--get-regexp",
+      `^branch\\..*\\.${SESSION_KEY}$`
+    ]).catch(() => "");
+    for (const entry of out.split("\x00")) {
+      const newline = entry.indexOf(`
+`);
+      const branch = entry.slice("branch.".length, newline - SESSION_KEY.length - 1);
+      if (newline > 0 && entry.slice(newline + 1) === name && await hasBranch2(root, branch, options))
+        return branch;
+    }
+    return null;
+  };
+  const claimBranch = async (root, parent, listed, input, head) => {
+    for (let attempt = 1;attempt <= MAX_ATTEMPTS; attempt++) {
+      const branch = branchName(input.title, attempt);
+      const folder = join(parent, branch);
+      if (listed.some((worktree) => worktree.path === folder) || await stat(folder).catch(() => null) !== null)
+        continue;
+      const [created] = await Promise.allSettled([
+        git(root, ["branch", "--no-track", branch, head])
+      ]);
+      if (created.status === "rejected") {
+        if (await hasBranch2(root, branch, options))
+          continue;
+        throw created.reason;
+      }
+      await writeConfig(root, `branch.${branch}.${SESSION_KEY}`, input.name);
+      return branch;
+    }
+    throw new SdkError("unavailable", `Every worktree name for "${input.title ?? input.name}" is taken in ${root}.`);
+  };
+  const writeConfig = async (root, key, value) => {
+    for (let attempt = 1;; attempt++) {
+      const [written] = await Promise.allSettled([git(root, ["config", key, value])]);
+      if (written.status === "fulfilled")
+        return;
+      if (attempt >= 20)
+        throw written.reason;
+      await new Promise((settle) => setTimeout(settle, 10 * attempt));
+    }
+  };
   return {
     async create(env, input) {
       const repo = await readRepository(git, env.cwd);
@@ -63,30 +150,32 @@ function localWorktrees2(options) {
       const head = await commitAt(repo.root, "HEAD");
       if (head === null)
         throw new SdkError("unavailable", `${repo.root} has no commits yet, so a worktree has nothing to branch from.`);
-      const slug = worktreeSlug(input.name, input.title);
-      const branch = `nyte/${slug}`;
       const below = (root) => ({
         kind: "local",
         path: resolve(root, repo.prefix)
       });
-      const listed = (await listWorktrees2(repo.root, options)).find((worktree) => worktree.branch === branch);
-      if (listed !== undefined)
+      const listed = await listWorktrees2(repo.root, options);
+      const claimed = await findClaimedBranch(repo.root, input.name);
+      const open = listed.find((worktree) => claimed !== null && worktree.branch === claimed);
+      if (claimed !== null && open !== undefined)
         return {
-          target: below(listed.path),
-          branch,
-          base: await commitAt(repo.root, `refs/heads/${branch}`) ?? head
+          target: below(open.path),
+          branch: claimed,
+          base: await commitAt(repo.root, `refs/heads/${claimed}`) ?? head
         };
-      const folder = join(folders, basename(repo.root), slug);
-      const branched = await hasBranch2(repo.root, branch, options);
-      const base = branched ? await commitAt(repo.root, `refs/heads/${branch}`) ?? head : head;
+      const parent = join(folders, basename(repo.root));
+      await mkdir(parent, { recursive: true });
+      const realParent = await realpath(parent);
+      const branch = claimed ?? await claimBranch(repo.root, realParent, listed, input, head);
+      const base = claimed === null ? head : await commitAt(repo.root, `refs/heads/${claimed}`) ?? head;
+      const folder = join(realParent, branch);
       const tree = await workingTree(repo);
-      await mkdir(dirname(folder), { recursive: true });
-      await addWorktree2(repo.root, branched ? { path: folder, branch } : { path: folder, branch, from: head }, options);
+      await addWorktree2(repo.root, { path: folder, branch }, options);
       if (tree !== (await git(folder, ["rev-parse", "HEAD^{tree}"])).trim()) {
         await git(folder, ["read-tree", "-m", "-u", "HEAD", tree]);
         await git(folder, ["reset", "-q"]);
       }
-      return { target: below(await realpath(folder)), branch, base };
+      return { target: below(folder), branch, base };
     },
     async remove(worktree) {
       const path = "path" in worktree.target ? worktree.target.path : null;
@@ -121,10 +210,13 @@ async function readRepository(git, cwd) {
 `) ?? [];
   return root === undefined || gitDir === undefined || root === "" ? null : { root: resolve(root), gitDir: resolve(gitDir), prefix };
 }
-function worktreeSlug(name, title) {
-  const words = (title ?? "").toLowerCase().replace(/[^a-z0-9]+/gu, "-").slice(0, 40).replace(/^-+|-+$/gu, "");
-  const key = sha2562(name).slice(0, 8);
-  return words === "" ? key : `${words}-${key}`;
+function branchName(title, attempt) {
+  const words = (title ?? "").normalize("NFKD").toLowerCase().split(/[^a-z0-9]+/u).filter((word) => word !== "");
+  const kept = words.filter((word) => !STOPWORDS.has(word));
+  const content = kept.filter((word) => !TYPE_WORDS.has(word));
+  const chosen = content.length >= 2 ? content : kept.length > 0 ? kept : words;
+  const stem = chosen.length === 0 ? "worktree" : chosen.slice(0, attempt === 1 ? 3 : 2).join("-");
+  return attempt === 1 ? stem : `${stem}-${attempt}`;
 }
 
 export { listWorktrees2, addWorktree2, hasBranch2, localWorktrees2 };

package/dist/chunks/{canvas-preview-9e15hp6q.js → canvas-preview-da6dwy05.js}

@@ -1,6 +1,6 @@
 import {
   createHandler2
-} from "./canvas-preview-d97wvref.js";
+} from "./canvas-preview-1r9sgbj3.js";
 
 // src/listen-fetch.ts
 import { SdkError } from "@nyte-ai/schema";
@@ -104,6 +104,7 @@ async function listenFetch2(host, options) {
   };
   const unwatchCommits = server.onExternalCommit(externalCommit);
   const isListenerToken = auth.kind === "token" ? (token) => sameSecret(token, auth.token) : async () => false;
+  const listenerAuthority = auth.kind === "token" ? auth.authority ?? TOKEN_AUTHORITY : TOKEN_AUTHORITY;
   const fallback = auth.kind === "custom" ? async (request) => {
     const verdict = await auth.authorize(request);
     if ("deny" in verdict)
@@ -129,8 +130,8 @@ async function listenFetch2(host, options) {
     if (token !== undefined) {
       if (await isListenerToken(token))
         return {
-          connection: connectionFor(flight, TOKEN, TOKEN_AUTHORITY, token),
-          authority: TOKEN_AUTHORITY
+          connection: connectionFor(flight, TOKEN, listenerAuthority, token),
+          authority: listenerAuthority
         };
       const remembered = await findDevice(token);
       if (remembered !== null) {

package/dist/chunks/{canvas-preview-ayayyd43.js → canvas-preview-dt89p9pm.js}

@@ -12,7 +12,7 @@ import {
 } from "./canvas-preview-8xc0vn7v.js";
 import {
   localProvider2
-} from "./canvas-preview-e3vnkkc5.js";
+} from "./canvas-preview-9bxhwjrh.js";
 import {
   importLegacyTrust2
 } from "./canvas-preview-9aqczacs.js";
@@ -21,7 +21,7 @@ import {
 } from "./canvas-preview-4e0pxa32.js";
 import {
   listen2
-} from "./canvas-preview-whfdhma6.js";
+} from "./canvas-preview-8sv3j0vt.js";
 import {
   nodeImages2
 } from "./canvas-preview-y5y6ghaw.js";
@@ -39,9 +39,6 @@ import {
   storePath2,
   sqliteStore2
 } from "./canvas-preview-mstbvwz3.js";
-import {
-  package_default
-} from "./canvas-preview-dsb5829c.js";
 
 // src/open.ts
 import { watch } from "node:fs";
@@ -70,6 +67,147 @@ import question from "@nyte-ai/plugin/core/question";
 import rename from "@nyte-ai/plugin/core/rename";
 import telemetry from "@nyte-ai/plugin/core/telemetry";
 import webSearch from "@nyte-ai/plugin/core/web-search";
+// package.json
+var package_default = {
+  name: "@nyte-ai/host",
+  version: "0.0.25-beta.1",
+  private: false,
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/interfaces-lab/nyte.git",
+    directory: "packages/host"
+  },
+  files: [
+    "dist",
+    "src",
+    "LICENSE",
+    "THIRD-PARTY-NOTICES.md"
+  ],
+  type: "module",
+  exports: {
+    ".": "./src/index.ts",
+    "./canvas-preview": "./src/canvas-preview.ts",
+    "./credentials": "./src/credentials.ts",
+    "./durable-object": "./src/durable-object.ts",
+    "./identity": "./src/identity.ts",
+    "./images": "./src/images/node.ts",
+    "./image-worker": "./src/images/worker.ts",
+    "./listen-fetch": "./src/listen-fetch.ts",
+    "./providers": "./src/providers.ts",
+    "./secrets": "./src/secrets.ts",
+    "./shell-env": "./src/shell-env.ts",
+    "./usage": "./src/usage.ts",
+    "./store-usage": "./src/store-usage.ts",
+    "./usage-service": "./src/usage-service.ts",
+    "./usage-scan": "./src/usage-scan.ts",
+    "./usage-worker": "./src/usage-worker.ts"
+  },
+  publishConfig: {
+    exports: {
+      ".": {
+        types: "./dist/src/index.d.ts",
+        import: "./dist/src/index.js"
+      },
+      "./canvas-preview": {
+        types: "./dist/src/canvas-preview.d.ts",
+        import: "./dist/src/canvas-preview.js"
+      },
+      "./credentials": {
+        types: "./dist/src/credentials.d.ts",
+        import: "./dist/src/credentials.js"
+      },
+      "./durable-object": {
+        types: "./dist/src/durable-object.d.ts",
+        import: "./dist/src/durable-object.js"
+      },
+      "./identity": {
+        types: "./dist/src/identity.d.ts",
+        import: "./dist/src/identity.js"
+      },
+      "./images": {
+        types: "./dist/src/images/node.d.ts",
+        import: "./dist/src/images/node.js"
+      },
+      "./image-worker": {
+        types: "./dist/src/images/worker.d.ts",
+        import: "./dist/src/images/worker.js"
+      },
+      "./listen-fetch": {
+        types: "./dist/src/listen-fetch.d.ts",
+        import: "./dist/src/listen-fetch.js"
+      },
+      "./providers": {
+        types: "./dist/src/providers.d.ts",
+        import: "./dist/src/providers.js"
+      },
+      "./secrets": {
+        types: "./dist/src/secrets.d.ts",
+        import: "./dist/src/secrets.js"
+      },
+      "./shell-env": {
+        types: "./dist/src/shell-env.d.ts",
+        import: "./dist/src/shell-env.js"
+      },
+      "./usage": {
+        types: "./dist/src/usage.d.ts",
+        import: "./dist/src/usage.js"
+      },
+      "./store-usage": {
+        types: "./dist/src/store-usage.d.ts",
+        import: "./dist/src/store-usage.js"
+      },
+      "./usage-service": {
+        types: "./dist/src/usage-service.d.ts",
+        import: "./dist/src/usage-service.js"
+      },
+      "./usage-scan": {
+        types: "./dist/src/usage-scan.d.ts",
+        import: "./dist/src/usage-scan.js"
+      },
+      "./usage-worker": {
+        types: "./dist/src/usage-worker.d.ts",
+        import: "./dist/src/usage-worker.js"
+      }
+    },
+    access: "public",
+    provenance: true
+  },
+  scripts: {
+    clean: "rm -rf node_modules .turbo",
+    typecheck: "tsc --noEmit",
+    test: "vitest --run",
+    "check:store": "node scripts/check-store.ts",
+    "build:package": "bun ../../scripts/sdk-packages.mjs build host"
+  },
+  dependencies: {
+    "@earendil-works/pi-mcp": "^1.3.0",
+    "@lydell/node-pty": "^1.2.0-beta.15",
+    "@nyte-ai/ai": "workspace:*",
+    "@nyte-ai/core": "workspace:*",
+    "@nyte-ai/plugin": "workspace:*",
+    "@nyte-ai/protocol": "workspace:*",
+    "@nyte-ai/schema": "workspace:*",
+    "@silvia-odwyer/photon": "^0.3.3",
+    fflate: "^0.8.3",
+    ignore: "^7.0.13",
+    pg: "^8.23.1",
+    typebox: "^1.4.2"
+  },
+  devDependencies: {
+    "@electric-sql/pglite": "^0.5.11",
+    "@nyte-ai/canvas": "workspace:*",
+    "@types/node": "^26.6.5",
+    "@types/pg": "^8.23.1",
+    "fast-check": "^4.10.2",
+    vitest: "^5.0.5"
+  },
+  engines: {
+    node: ">=26.4.0"
+  }
+};
+
+// src/open.ts
 var RELOAD_DEBOUNCE_MS = 250;
 var STORE_POLL_MS = 500;
 async function openHost2(options) {
@@ -343,7 +481,11 @@ async function settingsSeed(home) {
   return { seed: { settings, path }, issue: null };
 }
 function hostDescription() {
-  return { name: hostname(), platform: process.platform, version: package_default.version };
+  return {
+    name: hostname(),
+    platform: process.platform,
+    version: typeof NYTE_BUILT_VERSION === "string" ? NYTE_BUILT_VERSION : package_default.version
+  };
 }
 function settingsPath(home) {
   return join(home, ".nyte", "settings.json");

package/dist/src/durable-object.d.ts

@@ -10,5 +10,5 @@ export type DurableObjectSql = {
     };
     transactionSync<T>(closure: () => T): T;
 };
-/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `deploy/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
+/** Returns a `Store` over a Durable Object's SQLite storage, node-free, with the sqlite store's tables, row helpers (`store-rows.ts`) and semantics (§41f): `objects(id TEXT PRIMARY KEY, body TEXT NULL, bytes BLOB NULL)`, `refs(name TEXT PRIMARY KEY, target TEXT NULL, revision TEXT NOT NULL)` and `log(session TEXT, seq INTEGER, at INTEGER, event TEXT, PRIMARY KEY (session, seq))`, brought to core's `STORE_VERSION` by `migrateStore` on first `open()`, each commit one `transactionSync` and no backup; the open rejects with `SdkError("unavailable")` for a store a newer Nyte migrated. `put` ids the value with core's `objectId` and stores its JSON once; `putBlob` buffers the stream, ids it with `blobId` and stores the bytes once as an `ArrayBuffer`; an object and a blob that share an id share the row, each column filled once; `blob` reads the bytes back with their size and a null mime; a body, blob or logged event past the Durable Object's 2 MB row limit throws `SdkError("invalid")` before anything is written (§42k). `refs.set` runs inside one `transactionSync` with no await between its reads and writes, first rejecting with `SdkError("unavailable")` when a newer Nyte has migrated the store, with `RefStore.set`'s semantics, each revision a random UUID, any throw inside rolling the whole batch back. `list(prefix)` reads the name range from `prefix` in name order; `log` returns the events after `after` in seq order up to `limit`, each validated as a `SessionEvent`; `tail` is the session's last seq, or 0. Every `open()` returns a connection over the one storage; `close()` releases nothing, the storage being the object's. In workerd, which allows code generation only while modules load, the Worker turns TypeBox acceleration off at startup (`Settings.Set({ useAcceleration: false })` from `typebox/system`, as `packages/examples/cloudflare/worker.ts` does), or `log`'s validation throws inside a request. */
 export declare function durableObjectStore(storage: DurableObjectSql): Store;

package/dist/src/index.js

@@ -11,15 +11,15 @@ import"../chunks/canvas-preview-wg80rbc2.js";
 import {
   identitySigner2
 } from "../chunks/canvas-preview-5mex725c.js";
-import"../chunks/canvas-preview-gm0frf4b.js";
+import"../chunks/canvas-preview-2yzyt077.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
-import"../chunks/canvas-preview-d97wvref.js";
+import"../chunks/canvas-preview-1r9sgbj3.js";
 import {
   listenFetch2
-} from "../chunks/canvas-preview-9e15hp6q.js";
+} from "../chunks/canvas-preview-da6dwy05.js";
 import {
   listen2
-} from "../chunks/canvas-preview-whfdhma6.js";
+} from "../chunks/canvas-preview-8sv3j0vt.js";
 import"../chunks/canvas-preview-0nq75h9k.js";
 import"../chunks/canvas-preview-bxnqt8cd.js";
 import"../chunks/canvas-preview-yjz0f7n4.js";
@@ -51,10 +51,10 @@ import {
   addWorktree2,
   hasBranch2,
   localWorktrees2
-} from "../chunks/canvas-preview-2jwbe14k.js";
+} from "../chunks/canvas-preview-bg63k8n7.js";
 import {
   localProvider2
-} from "../chunks/canvas-preview-e3vnkkc5.js";
+} from "../chunks/canvas-preview-9bxhwjrh.js";
 import"../chunks/canvas-preview-kdqgrstc.js";
 import"../chunks/canvas-preview-5z63am63.js";
 import"../chunks/canvas-preview-pkzqg96v.js";
@@ -84,7 +84,7 @@ import {
 } from "../chunks/canvas-preview-mstbvwz3.js";
 import {
   openHost2
-} from "../chunks/canvas-preview-ayayyd43.js";
+} from "../chunks/canvas-preview-dt89p9pm.js";
 import {
   postgresStore2
 } from "../chunks/canvas-preview-4b6sayhg.js";

package/dist/src/listen-fetch.d.ts

@@ -1,6 +1,6 @@
 import type { ListenOptions, Listener } from "@nyte-ai/core";
 import type { ServedHost } from "@nyte-ai/core/server";
-/** Serves a composed host as a bare fetch handler with no socket and no `node:*` import, so a Worker can serve it (§41j): `before`, the unauthenticated identity and describe routes, then `createHandler` over one cached connection per principal and authority, every response carrying `X-Nyte-Host` (§43a, §43j). A request authenticates by a pairing code, then the listener token (compared in constant time over SHA-256 digests) or a device token remembered until a commit from another process moves the host's principals, then `authorize` under `custom`; a revoke aborts that principal's open requests and streams. A `token` shorter than 16 characters throws `SdkError("invalid")`; `execution` (default: run covering all) drives covered sessions in process on an `admit-only` host, covers their leases otherwise and takes nothing on a `dispatch` host (§42v); `close()` disconnects the clients and releases the execution once, after which every request answers `unavailable`. */
+/** Serves a composed host as a bare fetch handler with no socket and no `node:*` import, so a Worker can serve it (§41j): `before`, the unauthenticated identity and describe routes, then `createHandler` over one cached connection per principal and authority, every response carrying `X-Nyte-Host` (§43a, §43j). A request authenticates by a pairing code, then the listener token (compared in constant time over SHA-256 digests, granting `auth.authority`) or a device token remembered until a commit from another process moves the host's principals, then `authorize` under `custom`; a revoke aborts that principal's open requests and streams. A `token` shorter than 16 characters throws `SdkError("invalid")`; `execution` (default: run covering all) drives covered sessions in process on an `admit-only` host, covers their leases otherwise and takes nothing on a `dispatch` host (§42v); `close()` disconnects the clients and releases the execution once, after which every request answers `unavailable`. */
 export declare function listenFetch(host: ServedHost, options: ListenOptions & {
     readonly transport: {
         readonly kind: "fetch";

package/dist/src/listen-fetch.js

@@ -1,8 +1,8 @@
 import {
   listenFetch2
-} from "../chunks/canvas-preview-9e15hp6q.js";
-import"../chunks/canvas-preview-d97wvref.js";
-import"../chunks/canvas-preview-gm0frf4b.js";
+} from "../chunks/canvas-preview-da6dwy05.js";
+import"../chunks/canvas-preview-1r9sgbj3.js";
+import"../chunks/canvas-preview-2yzyt077.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
 export {
   listenFetch2 as listenFetch

package/dist/src/listen.js

@@ -1,9 +1,9 @@
 import {
   listen2
-} from "../chunks/canvas-preview-whfdhma6.js";
-import"../chunks/canvas-preview-9e15hp6q.js";
-import"../chunks/canvas-preview-d97wvref.js";
-import"../chunks/canvas-preview-gm0frf4b.js";
+} from "../chunks/canvas-preview-8sv3j0vt.js";
+import"../chunks/canvas-preview-da6dwy05.js";
+import"../chunks/canvas-preview-1r9sgbj3.js";
+import"../chunks/canvas-preview-2yzyt077.js";
 import"../chunks/canvas-preview-rp4x6y1h.js";
 export {
   listen2 as listen

package/dist/src/local/provider.d.ts

@@ -1,5 +1,5 @@
 import type { EnvironmentProvider } from "@nyte-ai/core";
-/** Returns the local environment provider (`kind: "local"`): a folder on this machine. `inspect` answers a `{ kind: "local", path }` target's `folderIdentity` (§41d), `available` when the path is a readable directory (else `unavailable { unreachable }`; a target without a path `unavailable { unsupported }`, identified by the hash of its locator), and the project sources present under it, relative to it, in this order: the plugin files `.nyte/plugins/<name>.{ts,mts,js,mjs}` and `.nyte/plugins/<name>/index.<ext>`, the skills `.nyte/skills/<name>/SKILL.md` and `.agents/skills/<name>/SKILL.md`, the prompts `.nyte/prompts/<name>.md`, then `.nyte/SYSTEM.md`, `.nyte/APPEND_SYSTEM.md` and `.nyte/mcp.json`: the files project trust gates. Context files such as `AGENTS.md` load without trust and are not listed. `attach` resolves the real path (a target that is not a directory throws `SdkError("unavailable")`) and returns an `ExecutionEnv` with that identity, `cwd` the real path, `files` from `localFiles` (with `ripgrep` and `formatter`), `exec` from `localExec`, and a `close` that ends its file watches and the jobs' readers, leaving running jobs alone. `git` is `localGit` (with `git`), `github` is `localGitHub` (with `gh` and `git`; the login is the machine's, `localGitHubAccount`), `snapshots` is `localSnapshots` storing tree walks under `<home>/.nyte/snapshots` (`home` default `os.homedir()`), and absent for a folder that contains `<home>/.nyte` or lies inside it outside `<home>/.nyte/worktrees` (the home folder itself, its ancestors, Nyte's own state): there a snapshot would walk or stage everything under home, the store and secrets included, to report changes in the store it just wrote; `worktrees` is `localWorktrees` (with `home` and `git`); no `browser` (the desktop wraps one in); `destroy` rejects with `SdkError("unavailable")`: a local folder is never torn down. */
+/** Returns the local environment provider (`kind: "local"`): a folder on this machine. `inspect` answers a `{ kind: "local", path }` target's `folderIdentity` (§41d), `available` when the path is a readable directory (else `unavailable { unreachable }`; a target without a path `unavailable { unsupported }`, identified by the hash of its locator), and the project sources present under it, relative to it, in this order: the plugin files `.nyte/plugins/<name>.{ts,mts,js,mjs}` and `.nyte/plugins/<name>/index.<ext>`, the skills `.nyte/skills/<name>/SKILL.md` and `.agents/skills/<name>/SKILL.md`, the prompts `.nyte/prompts/<name>.md`, then `.nyte/SYSTEM.md`, `.nyte/APPEND_SYSTEM.md` and `.nyte/mcp.json`: the files project trust gates. Context files such as `AGENTS.md` load without trust and are not listed. `attach` resolves the real path (a target that is not a directory throws `SdkError("unavailable")`) and returns an `ExecutionEnv` with that identity, `cwd` the real path, `files` from `localFiles` (with `ripgrep` and `formatter`), `exec` from `localExec`, and a `close` that ends its file watches and the jobs' readers, leaving running jobs alone. `git` is `localGit` (with `git`), `github` is `localGitHub` (with `gh` and `git`; the login is the machine's, `localGitHubAccount`), `snapshots` is `localSnapshots` storing tree walks under `<home>/.nyte/snapshots` (`home` default `os.homedir()`), and absent for a folder that contains `<home>/.nyte` or lies inside it outside `<home>/.nyte/worktrees` (the home folder itself, its ancestors, Nyte's own state): there a snapshot would walk or stage everything under home, the store and secrets included, to report changes in the store it just wrote; `worktrees` is `localWorktrees` (with `home` and `git`); `realpath` is `fs.promises.realpath` (the native one, which spells each name as the disk stores it), a relative path resolved against `env.cwd`, null where it fails; no `browser` (the desktop wraps one in); `destroy` rejects with `SdkError("unavailable")`: a local folder is never torn down. */
 export declare function localProvider(options?: {
     readonly home?: string;
     readonly git?: string;