@rip-lang/server 1.3.125 → 1.4.1

package/acme/crypto.rip

@@ -13,8 +13,6 @@ export b64url = (buf) ->
   s = if typeof buf is 'string' then Buffer.from(buf).toString('base64') else Buffer.from(buf).toString('base64')
   s.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '')
 
-b64urlBuf = (buf) -> b64url(buf)
-
 # --- Key generation ---
 
 export generateAccountKeyPair = ->

package/browse.rip

@@ -0,0 +1,62 @@
+# ==============================================================================
+# @rip-lang/server — Directory Browser
+# ==============================================================================
+#
+# Built-in file browser when no index.rip or index.ts exists in the target
+# directory. Activated automatically by `rip server` when no app entry is found.
+#
+# Delegates rendering to serving/static.rip for unified directory listing,
+# markdown rendering, and file serving across all serving modes.
+# ==============================================================================
+
+import { use, start, notFound } from '@rip-lang/server'
+import { serve } from '@rip-lang/server/middleware'
+import { statSync } from 'node:fs'
+import { join, resolve, basename } from 'node:path'
+import { renderDirectoryListing, renderMarkdown, renderTextFile, isTextFile, serveRipHighlightGrammar } from './serving/static.rip'
+
+root = resolve(process.env.APP_BASE_DIR or process.cwd())
+rootSlash = root + '/'
+rootName = basename(root) or root
+
+use serve dir: root, bundle: [], watch: true
+
+notFound ->
+  if @req.path is '/_rip/hljs-rip.js'
+    res = serveRipHighlightGrammar()
+    return res if res
+
+  reqPath = try decodeURIComponent(@req.path) catch then @req.path
+  path = resolve(root, reqPath.slice(1))
+
+  unless path is root or path.startsWith(rootSlash)
+    return new Response 'Not Found', { status: 404 }
+
+  try
+    stat = statSync(path)
+  catch
+    return new Response 'Not Found', { status: 404 }
+
+  if stat.isFile()
+    accept = @req.header('accept') or ''
+    if accept.includes('text/html')
+      if path.endsWith('.md')
+        try
+          html = renderMarkdown(path)
+          return new Response html, { headers: { 'Content-Type': 'text/html; charset=UTF-8' } }
+      if isTextFile(path) and not path.endsWith('.rip')
+        try
+          html = renderTextFile(path)
+          return new Response html, { headers: { 'Content-Type': 'text/html; charset=UTF-8' } }
+    return @send path
+
+  if stat.isDirectory()
+    return new Response(null, { status: 301, headers: { Location: "#{reqPath}/" } }) unless reqPath.endsWith('/')
+    indexPath = join(path, 'index.html')
+    if (try statSync(indexPath).isFile())
+      return @send indexPath, 'text/html; charset=UTF-8'
+    return new Response renderDirectoryListing(reqPath, path, rootName), { headers: { 'Content-Type': 'text/html; charset=UTF-8' } }
+
+  new Response 'Not Found', { status: 404 }
+
+start()

package/control/cli.rip

@@ -48,7 +48,6 @@ export resolveAppEntry = (appPathInput, defaultEntryPath = null) ->
     else if existsSync(two)
       entryPath = two
     else
-      p "rip-server: no index.rip found, serving static files from #{abs}\n             Create an index.rip to customize, or run 'rip server --help' for options."
       entryPath = defaultEntryPath or abs
   else
     unless existsSync(abs)
@@ -60,6 +59,13 @@ export resolveAppEntry = (appPathInput, defaultEntryPath = null) ->
   appName = basename(baseDir)
   { baseDir, entryPath, appName }
 
+export VALUE_FLAGS = new Set(%w[
+  -f --file --cert --key --watch --env --https-port
+  --socket-prefix --acme --acme-staging --realtime-path --publish-secret
+  --max-queue --queue-timeout-ms --connect-timeout-ms --read-timeout-ms
+  --rate-limit --rate-limit-window -o --output
+])
+
 export parseFlags = (argv, defaultEntryPath = null) ->
   rawFlags = new Set()
   appPathInput = null
@@ -78,8 +84,17 @@ export parseFlags = (argv, defaultEntryPath = null) ->
     catch
       undefined
 
+  skipNext = false
   for i in [2...argv.length]
+    if skipNext
+      rawFlags.add(argv[i])
+      skipNext = false
+      continue
     tok = argv[i]
+    if VALUE_FLAGS.has(tok)
+      rawFlags.add(tok)
+      skipNext = true
+      continue
     unless appPathInput
       if tok.includes('@') and not tok.startsWith('-')
         [pathPart, aliasesPart] = tok.split('@')
@@ -91,7 +106,14 @@ export parseFlags = (argv, defaultEntryPath = null) ->
             appNameOverride = aliases[0]
             appAliases = aliases
           continue
-        else if not pathPart.includes('/') and not pathPart.startsWith('.')
+        looksLikePath = pathPart.includes('/') or pathPart.startsWith('.') or pathPart.endsWith('.rip') or pathPart.endsWith('.ts')
+        if looksLikePath
+          appPathInput = pathPart
+          if aliases.length > 0
+            appNameOverride = aliases[0]
+            appAliases = aliases
+          continue
+        else
           appNameOverride = pathPart
           appAliases = [pathPart].concat(aliases)
           continue
@@ -123,8 +145,12 @@ export parseFlags = (argv, defaultEntryPath = null) ->
       appPathInput = cwd
 
   getKV = (prefix) ->
-    for f as rawFlags
-      return f.slice(prefix.length) if f.startsWith(prefix)
+    tokens = Array.from(rawFlags)
+    bare = prefix.slice(0, -1)
+    for i in [0...tokens.length]
+      return tokens[i].slice(prefix.length) if tokens[i].startsWith(prefix)
+      if tokens[i] is bare and tokens[i + 1] and not tokens[i + 1].startsWith('-')
+        return tokens[i + 1]
     undefined
 
   has = (name) -> rawFlags.has(name)
@@ -213,17 +239,20 @@ export parseFlags = (argv, defaultEntryPath = null) ->
     readTimeoutMs: coerceInt(getKV('--read-timeout-ms='), coerceInt(process.env.RIP_READ_TIMEOUT_MS, 30000))
     jsonLogging: has('--json-logging')
     accessLog: not has('--no-access-log')
-    acme: has('--acme')
-    acmeStaging: has('--acme-staging')
-    acmeDomain: getKV('--acme-domain=')
+    acme: Boolean(getKV('--acme=') or getKV('--acme-staging='))
+    acmeStaging: Boolean(getKV('--acme-staging='))
+    acmeDomain: getKV('--acme=') or getKV('--acme-staging=') or null
+    noAcme: has('--no-acme')
     realtimePath: getKV('--realtime-path=') or '/realtime'
     publishSecret: getKV('--publish-secret=') or process.env.RIP_PUBLISH_SECRET or null
     rateLimit: coerceInt(getKV('--rate-limit='), 0)
     rateLimitWindow: coerceInt(getKV('--rate-limit-window='), 60000)
     watch: watch
-    edgefilePath: getKV('--edgefile=') or getKV('--file=') or getKV('-f=')
+    configPath: getKV('--file=') or getKV('-f=')
     checkConfig: has('--check-config') or has('--check') or has('-c')
+    showInfo: has('--info') or has('-i')
     reloadConfig: has('--reload') or has('-r')
+    listApps: has('--list') or has('-l')
     stopServer: has('--stop') or has('-s')
     envOverride: envOverride
     debug: has('--debug')
@@ -288,10 +317,12 @@ export runHelpOutput = (argv) ->
     Options:
       -h, --help              Show this help
       -v, --version           Show version
-      -c, --check             Validate Edgefile.rip or config.rip and exit
-      -r, --reload            Reload config on a running server
-      -s, --stop              Stop a running server
-      -f, --file=<path>       Load Edgefile.rip from an explicit path
+      -c, --check             Validate config and exit
+      -f, --file <path>       Specify config file path
+      -i, --info              Show running server status
+      -l, --list              List registered hosts
+      -r, --reload            Reload config on running server
+      -s, --stop              Stop running server
       --watch=<glob>          Watch glob pattern (default: *.rip)
       --static                Disable hot reload and file watching
       --env=<mode>            Set environment (dev, production)
@@ -302,15 +333,15 @@ export runHelpOutput = (argv) ->
       http                    HTTP only (no TLS)
       https                   HTTPS with trusted *.ripdev.io cert (default)
       <port>                  Listen on specific port
-      --cert=<path>           TLS certificate file (overrides shipped cert)
-      --key=<path>            TLS key file (overrides shipped cert)
+      --cert <path>           TLS certificate file (overrides shipped cert)
+      --key <path>            TLS key file (overrides shipped cert)
       --hsts                  Enable HSTS header
       --no-redirect-http      Don't redirect HTTP to HTTPS
 
     ACME (auto TLS):
-      --acme                  Enable auto TLS via Let's Encrypt
-      --acme-staging          Use Let's Encrypt staging CA (for testing)
-      --acme-domain=<domain>  Domain for ACME cert (required with --acme)
+      --acme <domain>         Obtain TLS cert via Let's Encrypt for <domain>
+      --acme-staging <domain> Same as --acme but use Let's Encrypt staging CA
+      --no-acme               Disable ACME even if serve.rip configures it
 
     Realtime (WebSocket):
       --realtime-path=<path>  WebSocket endpoint path (default: /realtime)
@@ -326,10 +357,12 @@ export runHelpOutput = (argv) ->
       rip server http          HTTP only (no TLS)
       rip server --static w:8  Production: no reload, 8 workers
       rip server -c            Validate config and exit
-      rip server -c -f=./Edgefile.rip
-      rip server -r            Reload running server config
-      rip server -s            Stop running server
-      rip server -f=./Edgefile.rip
+      rip server -c -f hosts.rip
+      rip server -i            Show server status
+      rip server -l            List registered hosts
+      rip server -r            Reload config
+      rip server -s            Stop server
+      rip server -f hosts.rip
 
     If no index.rip or index.ts is found, a built-in static file server
     activates with directory indexes, auto-detected MIME types, and
@@ -352,21 +385,7 @@ export stopServer = (prefix, getPidFilePathFn, existsSyncFn, readFileSyncFn, kil
   catch e
     console.error "rip-server: stop failed: #{e.message}"
 
-export runListSubcommand = (argv, prefix, getControlSocketPathFn, fetchFn, exitFn) ->
-  return false unless 'list' in argv
-  controlUnix = getControlSocketPathFn(prefix)
-  try
-    res = fetchFn!('http://localhost/registry', { unix: controlUnix, method: 'GET' })
-    throw new Error("list failed: #{res.status}") unless res.ok
-    j = res.json!
-    hosts = if Array.isArray(j?.hosts) then j.hosts else []
-    p if hosts.length then hosts.join('\n') else '(no hosts)'
-  catch e
-    console.error "list command failed: #{e?.message or e}"
-    exitFn(1)
-  true
-
-export runReloadSubcommand = (prefix, getControlSocketPathFn, fetchFn, exitFn) ->
+export reloadConfig = (prefix, getControlSocketPathFn, fetchFn, exitFn) ->
   controlUnix = getControlSocketPathFn(prefix)
   try
     res = fetchFn!('http://localhost/reload', { unix: controlUnix, method: 'POST' })
@@ -380,3 +399,43 @@ export runReloadSubcommand = (prefix, getControlSocketPathFn, fetchFn, exitFn) -
   catch e
     console.error "rip-server: reload failed: #{e?.message or e}"
     exitFn(1)
+
+export listApps = (prefix, getControlSocketPathFn, fetchFn, exitFn) ->
+  controlUnix = getControlSocketPathFn(prefix)
+  try
+    res = fetchFn!('http://localhost/registry', { unix: controlUnix, method: 'GET' })
+    throw new Error("list failed: #{res.status}") unless res.ok
+    j = res.json!
+    hosts = if Array.isArray(j?.hosts) then j.hosts else []
+    p if hosts.length then hosts.join('\n') else '(no hosts)'
+  catch e
+    console.error "rip-server: list failed: #{e?.message or e}"
+    exitFn(1)
+
+formatUptime = (seconds) ->
+  return "#{seconds}s" if seconds < 60
+  return "#{Math.floor(seconds / 60)}m" if seconds < 3600
+  hours = Math.floor(seconds / 3600)
+  mins = Math.floor((seconds %% 3600) / 60)
+  if mins > 0 then "#{hours}h #{mins}m" else "#{hours}h"
+
+export showInfo = (fetchFn, exitFn) ->
+  try
+    res = fetchFn!('https://localhost/diagnostics', { tls: { rejectUnauthorized: false } })
+    throw new Error("status #{res.status}") unless res.ok
+    d = res.json!
+    version = d.version?.server or 'unknown'
+    workers = d.gauges?.workersActive or 0
+    hosts = d.hosts?.length or 0
+    upstreamsTotal = d.proxies?.length or 0
+    healthy = d.gauges?.upstreamTargetsHealthy or 0
+    unhealthy = d.gauges?.upstreamTargetsUnhealthy or 0
+    upstreamStatus = if unhealthy > 0 then "#{healthy} healthy, #{unhealthy} unhealthy" else "#{healthy} healthy"
+    upstreamPart = if upstreamsTotal > 0 then " | #{upstreamsTotal} proxy (#{upstreamStatus})" else ''
+    uptime = formatUptime(d.uptime or 0)
+    status = d.status or 'unknown'
+    p "rip server v#{version} | #{status} | #{workers} workers | #{hosts} hosts#{upstreamPart} | uptime #{uptime}"
+    exitFn(if status is 'healthy' then 0 else 1)
+  catch e
+    console.error "rip-server: info failed: #{e?.message or e}"
+    exitFn(1)

package/control/lifecycle.rip

@@ -25,11 +25,76 @@ export computeHideUrls = (appEntry, joinFn, dirnameFn, existsSyncFn) ->
   existsSyncFn(setupFile)
 
 export logStartupSummary = (server, flags, buildRipdevUrlFn, formatPortFn) ->
+  return if flags.quiet
+
+  d = '\x1b[2m'
+  r = '\x1b[0m'
+  b = '\x1b[1m'
+  c = '\x1b[36m'
+  g = '\x1b[32m'
+  y = '\x1b[33m'
+
   httpOnly = flags.httpsPort is null
   protocol = if httpOnly then 'http' else 'https'
   port = flags.httpsPort or flags.httpPort or 80
   url = buildRipdevUrlFn(flags.appName, protocol, port, formatPortFn)
-  p "rip-server: rip=#{server.ripVersion} server=#{server.serverVersion} app=#{flags.appName} workers=#{flags.workers} url=#{url}/server"
+
+  configInfo = server.servingRuntime?.configInfo
+  certs = configInfo?.certs or {}
+  routeDescs = configInfo?.activeRouteDescriptions or []
+  streamRoutes = server.streamRuntime?.routeTable?.routes or []
+
+  hosts = []
+  for route in streamRoutes
+    sni = route.sni or route.id
+    hosts.push { name: sni, action: 'passthrough', tls: false }
+  for desc in routeDescs
+    parts = desc.split(' ')
+    host = parts[0]
+    raw = parts.slice(2).join(' ')
+    action = if raw.startsWith('proxy:') then "proxy #{d}→#{r} #{raw.slice(6)}"
+    else if raw.startsWith('app:') then 'app'
+    else if raw.startsWith('static') then 'static'
+    else raw
+    hosts.push { name: host, action, tls: !!certs[host] }
+
+  upstreamList = []
+  pool = server.servingRuntime?.upstreamPool
+  if pool
+    for [id, upstream] as pool.upstreams
+      targets = upstream.targets.map((t) -> t.url).join(', ')
+      upstreamList.push { id, targets }
+
+  maxHost = 0
+  maxHost = Math.max(maxHost, h.name.length) for h in hosts
+
+  lines = []
+  lines.push ''
+  lines.push "  #{b}rip server#{r} #{d}v#{server.serverVersion}#{r}"
+  lines.push ''
+
+  if configInfo?.path
+    lines.push "  #{d}config#{r}   #{configInfo.path}"
+  lines.push "  #{d}workers#{r}  #{flags.workers}"
+
+  if hosts.length > 0
+    lines.push ''
+    for h in hosts
+      scheme = if h.tls or h.action is 'passthrough' then 'https://' else 'http://'
+      pad = ' '.repeat(maxHost - h.name.length + 2)
+      tls = if h.tls then " #{g}✓#{r}#{d}tls#{r}" else ''
+      lines.push "  #{c}#{scheme}#{h.name}#{r}#{pad}#{d}#{h.action}#{r}#{tls}"
+
+  if upstreamList.length > 0
+    lines.push ''
+    for u in upstreamList
+      lines.push "  #{d}↑#{r} #{y}#{u.id}#{r} #{d}→#{r} #{u.targets}"
+
+  lines.push ''
+  lines.push "  #{g}#{b}→#{r} #{g}#{url}#{r}"
+  lines.push ''
+
+  p lines.join('\n')
 
 FORCED_EXIT_MS = 35000
 
@@ -38,6 +103,7 @@ export createCleanup = (pidFile, server, manager, unlinkSyncFn, fetchFn, process
   ->
     return if called
     called = true
+    process.stdout.write('\r\x1b[K')
     p 'rip-server: shutting down...'
 
     # Safety net: force exit if graceful shutdown stalls

package/control/manager.rip

@@ -0,0 +1,250 @@
+# ==============================================================================
+# control/manager.rip — worker pool manager
+# ==============================================================================
+
+import { existsSync, statSync, unlinkSync, watch, utimesSync } from 'node:fs'
+import { basename, dirname, join } from 'node:path'
+import { spawnTrackedWorker, postWorkerQuit, waitForWorkerReady } from './workers.rip'
+import { shouldTriggerCodeReload, registerAppWatchDirs } from './watchers.rip'
+import { logEvent } from './lifecycle.rip'
+
+MAX_BACKOFF_MS = 30000
+MAX_RESTART_COUNT = 10
+STABILITY_THRESHOLD_MS = 60000
+
+nowMs = -> Date.now()
+
+export class Manager
+  constructor: (@flags, @serverPath) ->
+    @appWorkers = new Map()
+    @shuttingDown = false
+    @lastCheck = 0
+    @currentMtimes = new Map()
+    @rollingApps = new Set()
+    @lastRollAt = new Map()
+    @nextWorkerId = -1
+    @retiringIds = new Set()
+    @restartBudgets = new Map()
+    @deferredDeaths = new Set()
+    @currentVersion = 1
+    @server = null
+    @dbUrl = null
+    @appWatchers = new Map()
+    @codeWatchers = new Map()
+    @defaultAppId = @flags.appName
+
+  getWorkers: (appId) ->
+    appId = appId or @defaultAppId
+    unless @appWorkers.has(appId)
+      @appWorkers.set(appId, [])
+    @appWorkers.get(appId)
+
+  getAppState: (appId) ->
+    @server?.appRegistry?.apps?.get(appId) or null
+
+  allAppStates: ->
+    return [] unless @server?.appRegistry?.apps
+    Array.from(@server.appRegistry.apps.values())
+
+  runSetupForApp: (app) ->
+    setupFile = join(app.config.appBaseDir or dirname(app.config.entry or @flags.appEntry), 'setup.rip')
+    return unless existsSync(setupFile)
+
+    dbUrl = process.env.DB_URL or 'http://localhost:4213'
+    dbAlreadyRunning = try
+      fetch! dbUrl + '/health'
+      true
+    catch
+      false
+    @dbUrl = dbUrl unless dbAlreadyRunning
+
+    setupEnv = Object.assign {}, process.env, app.config.env or {},
+      RIP_SETUP_MODE: '1'
+      RIP_SETUP_FILE: setupFile
+      APP_ID: String(app.appId)
+      APP_ENTRY: app.config.entry or @flags.appEntry
+      APP_BASE_DIR: app.config.appBaseDir or @flags.appBaseDir
+    proc = Bun.spawn ['rip', @serverPath],
+      stdout: 'inherit'
+      stderr: 'inherit'
+      stdin: 'ignore'
+      cwd: process.cwd()
+      env: setupEnv
+
+    code = await proc.exited
+    if code isnt 0
+      console.error "rip-server: setup exited with code #{code} for app #{app.appId}"
+      exit 1
+
+  start: ->
+    @stop!
+
+    for app in @allAppStates()
+      @runSetupForApp!(app) if app.config.entry
+
+    for app in @allAppStates()
+      workers = @getWorkers(app.appId)
+      workers.length = 0
+      desiredWorkers = app.config.workers or @flags.workers
+      for i in [0...desiredWorkers]
+        w = @spawnWorker!(app.appId, @currentVersion)
+        workers.push(w)
+
+    if @flags.reload
+      for app in @allAppStates()
+        @currentMtimes.set(app.appId, @getEntryMtime(app.appId))
+
+      interval = setInterval =>
+        return clearInterval(interval) if @shuttingDown
+        now = Date.now()
+        return if now - @lastCheck < 100
+        @lastCheck = now
+        for app in @allAppStates()
+          appId = app.appId
+          mt = @getEntryMtime(appId)
+          previous = @currentMtimes.get(appId) or 0
+          if mt > previous
+            continue if @rollingApps.has(appId)
+            continue if now - (@lastRollAt.get(appId) or 0) < 200
+            @currentMtimes.set(appId, mt)
+            @rollingApps.add(appId)
+            @lastRollAt.set(appId, now)
+            @rollingRestart(appId).finally => @rollingApps.delete(appId)
+      , 50
+
+      if @flags.watch
+        for app in @allAppStates()
+          continue unless app.config.entry and app.config.appBaseDir
+          entryFile = app.config.entry
+          entryBase = basename(entryFile)
+          try
+            watcher = watch app.config.appBaseDir, { recursive: true }, (event, filename) =>
+              return unless shouldTriggerCodeReload(filename, @flags.watch, entryBase)
+              try
+                now = new Date()
+                utimesSync(entryFile, now, now)
+              catch
+                null
+            @codeWatchers.set(app.appId, watcher)
+          catch e
+            warn "rip-server: directory watch failed for #{app.appId}: #{e.message}"
+
+  stop: ->
+    for [appId, workers] as @appWorkers
+      for w in workers
+        try w.process.kill()
+        try unlinkSync(w.socketPath)
+    @appWorkers.clear()
+
+    for [prefix, entry] as @appWatchers
+      clearTimeout(entry.timer) if entry.timer
+      for watcher in (entry.watchers or [])
+        try watcher.close()
+    @appWatchers.clear()
+    for [appId, watcher] as @codeWatchers
+      try watcher.close()
+    @codeWatchers.clear()
+
+  watchDirs: (prefix, dirs) ->
+    registerAppWatchDirs(@appWatchers, prefix, dirs, @server, (-> process.cwd()))
+
+  spawnWorker: (appId, version) ->
+    workerId = ++@nextWorkerId
+    app = @getAppState(appId) or { appId: appId, config: {} }
+    tracked = spawnTrackedWorker(@flags, workerId, (version or @currentVersion), nowMs, @serverPath, appId, app.config)
+    @monitor(tracked)
+    tracked
+
+  monitor: (w) ->
+    w.process.exited.then =>
+      return if @shuttingDown
+      return if @retiringIds.has(w.id)
+      if @rollingApps.has(w.appId)
+        @deferredDeaths.add(w.id)
+        return
+
+      postWorkerQuit(@flags.socketPrefix, w.id)
+
+      workers = @getWorkers(w.appId)
+      slotIdx = workers.findIndex((x) -> x.id is w.id)
+      return if slotIdx < 0
+
+      budget = @restartBudgets.get(slotIdx) or { count: 0, backoffMs: 1000 }
+
+      if nowMs() - w.startedAt > STABILITY_THRESHOLD_MS
+        budget.count = 0
+        budget.backoffMs = 1000
+
+      budget.count++
+      budget.backoffMs = Math.min(budget.backoffMs * 2, MAX_BACKOFF_MS)
+      @restartBudgets.set(slotIdx, budget)
+
+      if budget.count > MAX_RESTART_COUNT
+        logEvent('worker_abandon', { workerId: w.id, slot: slotIdx, restarts: budget.count })
+        return
+      @server?.metrics and @server.metrics.workerRestarts++
+      logEvent('worker_restart', { workerId: w.id, slot: slotIdx, attempt: budget.count, backoffMs: budget.backoffMs })
+      setTimeout =>
+        workers[slotIdx] = @spawnWorker(w.appId, @currentVersion) if slotIdx < workers.length
+      , budget.backoffMs
+
+  waitWorkerReady: (socketPath, timeoutMs = 5000) ->
+    waitForWorkerReady(socketPath, timeoutMs)
+
+  rollingRestart: (appId = null) ->
+    apps = if appId then [@getAppState(appId)].filter(Boolean) else @allAppStates()
+    nextVersion = @currentVersion + 1
+
+    for app in apps
+      workers = @getWorkers(app.appId)
+      olds = [...workers]
+      pairs = []
+
+      for oldWorker in olds
+        replacement = @spawnWorker!(app.appId, nextVersion)
+        workers.push(replacement)
+        pairs.push({ old: oldWorker, replacement })
+
+      readyResults = Promise.all!(pairs.map((p) => @waitWorkerReady(p.replacement.socketPath, 3000)))
+      allReady = readyResults.every((ready) -> ready)
+      unless allReady
+        console.error "[manager] Rolling restart aborted: not all new workers ready for app #{app.appId}"
+        for pair, i in pairs
+          unless readyResults[i]
+            try pair.replacement.process.kill()
+            idx = workers.indexOf(pair.replacement)
+            workers.splice(idx, 1) if idx >= 0
+        if @deferredDeaths.size > 0
+          for deadId as @deferredDeaths
+            idx = workers.findIndex((x) -> x.id is deadId)
+            workers[idx] = @spawnWorker(app.appId, @currentVersion) if idx >= 0
+          @deferredDeaths.clear()
+        return
+
+      @currentVersion = nextVersion
+
+      for { old } in pairs
+        @retiringIds.add(old.id)
+        try old.process.kill()
+
+      Promise.all!(pairs.map(({ old }) -> old.process.exited.catch(-> null)))
+
+      for { old } in pairs
+        postWorkerQuit(@flags.socketPrefix, old.id)
+
+      retiring = new Set(pairs.map((p) -> p.old.id))
+      filtered = workers.filter((w) -> not retiring.has(w.id))
+      workers.length = 0
+      workers.push(...filtered)
+      @retiringIds.delete(id) for id as retiring
+
+      if @deferredDeaths.size > 0
+        for deadId as @deferredDeaths
+          idx = workers.findIndex((x) -> x.id is deadId)
+          workers[idx] = @spawnWorker(app.appId, @currentVersion) if idx >= 0
+        @deferredDeaths.clear()
+
+  getEntryMtime: (appId = null) ->
+    app = @getAppState(appId or @defaultAppId)
+    entry = app?.config?.entry or @flags.appEntry
+    try statSync(entry).mtimeMs catch then 0

package/control/mdns.rip

@@ -34,6 +34,9 @@ export startMdnsAdvertisement = (host, mdnsProcesses, getLanIP, flags, formatPor
   serviceName = host.replace('.local', '')
 
   try
+    which = Bun.spawnSync(['which', 'dns-sd'], { stdout: 'ignore', stderr: 'ignore' })
+    return if which.exitCode
+
     proc = Bun.spawn [
       'dns-sd', '-P'
       serviceName

package/middleware.rip

@@ -476,7 +476,7 @@ pre{margin:0;white-space:pre-wrap;word-break:break-word}
 #   dir:        string          — app directory on disk (default: '.')
 #   routes:     string          — page components directory, relative to dir (default: 'routes')
 #   bundle:     string[]|object — directories for bundle endpoint(s) (default: ['components'])
-#                                 Array: single bundle at {prefix}/bundle (legacy)
+#                                 Array: single bundle at {prefix}/bundle
 #                                 Object: named bundles — { ui: [...], app: [...] } → {prefix}/ui, {prefix}/app
 #   app:        string          — URL mount point (default: '')
 #   title:      string          — document title