workerdeck 2.7.2 → 2.9.0

package/build/{instance-DP3af4H-.mjs → instance-vQe2VlGq.mjs}

@@ -393,7 +393,7 @@ async function loadApnsKey(keyFile) {
 	} catch (error) {
 		throw new Error(`apns: ${keyFile} is not a private key (${error instanceof Error ? error.message : String(error)})`, { cause: error });
 	}
-	if (key.asymmetricKeyType !== "ec") throw new Error(`apns: ${keyFile} is a ${key.asymmetricKeyType ?? "unknown"} key, not EC — an APNs auth key is the .p8 downloaded from Keys in the developer portal, not a certificate`);
+	if (key.asymmetricKeyType !== "ec") throw new Error(`apns: ${keyFile} is a ${key.asymmetricKeyType ?? "unknown"} key, not EC - an APNs auth key is the .p8 downloaded from Keys in the developer portal, not a certificate`);
 	return key;
 }
 function createProviderToken(key, keyId, teamId) {
@@ -834,10 +834,10 @@ const COLLAPSE_PREFIX = {
 };
 function titleFor(notification, name) {
 	switch (notification.type) {
-		case "permission_requested": return `Approval needed — ${name}`;
-		case "turn_completed": return notification.result?.isError === true ? `Turn failed — ${name}` : name;
-		case "session_error": return `Session error — ${name}`;
-		case "session_closed": return `Session ended — ${name}`;
+		case "permission_requested": return `Approval needed - ${name}`;
+		case "turn_completed": return notification.result?.isError === true ? `Turn failed - ${name}` : name;
+		case "session_error": return `Session error - ${name}`;
+		case "session_closed": return `Session ended - ${name}`;
 		default: return name;
 	}
 }
@@ -1241,7 +1241,7 @@ async function materializeAuthKey(stateDir, options = {}) {
 		if (key !== null) {
 			try {
 				const { mode } = await stat(path);
-				if ((mode & 63) !== 0) warn(`auth key file ${path} is readable by other users (mode ${(mode & 511).toString(8)}) — run: chmod 600 ${path}`);
+				if ((mode & 63) !== 0) warn(`auth key file ${path} is readable by other users (mode ${(mode & 511).toString(8)}) - run: chmod 600 ${path}`);
 			} catch {}
 			return {
 				key,
@@ -1295,7 +1295,7 @@ async function createAuthSessionStore(options) {
 		initial = parseSessions(await readFile(path, "utf8"), now());
 		try {
 			const { mode } = await stat(path);
-			if ((mode & 63) !== 0) warn(`session file ${path} is readable by other users (mode ${(mode & 511).toString(8)}) — run: chmod 600 ${path}`);
+			if ((mode & 63) !== 0) warn(`session file ${path} is readable by other users (mode ${(mode & 511).toString(8)}) - run: chmod 600 ${path}`);
 		} catch {}
 	} catch {
 		initial = [];
@@ -1353,7 +1353,7 @@ function sha256(value) {
 function createCliAuth(options = {}) {
 	const { secret } = options;
 	const enabled = secret !== void 0;
-	if (secret !== void 0 && secret.length < MIN_SECRET_LENGTH) throw new Error(`createCliAuth: secret must be at least ${MIN_SECRET_LENGTH} characters — use a long random value, or leave it unset to run without auth on loopback`);
+	if (secret !== void 0 && secret.length < MIN_SECRET_LENGTH) throw new Error(`createCliAuth: secret must be at least ${MIN_SECRET_LENGTH} characters - use a long random value, or leave it unset to run without auth on loopback`);
 	const cookieName = options.cookieName ?? DEFAULT_COOKIE_NAME;
 	const ttlMs = options.ttlMs ?? DEFAULT_TTL_MS;
 	if (!(ttlMs > 0)) throw new Error("createCliAuth: ttlMs must be positive");
@@ -1666,7 +1666,7 @@ var ConfigError = class extends Error {};
 function parseDuration(raw, source) {
 	if (raw === "none" || raw === "never") return null;
 	const match = /^(\d+(?:\.\d+)?)(ms|s|m|h)?$/.exec(raw);
-	if (!match) throw new ConfigError(`${source}: expected a duration like 300000, 30s, 5m — or 'none'; got: ${raw}`);
+	if (!match) throw new ConfigError(`${source}: expected a duration like 300000, 30s, 5m - or 'none'; got: ${raw}`);
 	const scale = {
 		ms: 1,
 		s: 1e3,
@@ -1803,6 +1803,9 @@ function parseArgs(argv) {
 			case "--open":
 				flags.open = true;
 				break;
+			case "--hot-reload":
+				flags.hotReload = true;
+				break;
 			default: throw new ConfigError(`unknown option: ${arg}`);
 		}
 	}
@@ -1866,7 +1869,7 @@ function normalizeInsecureHost(raw) {
 	} catch {
 		throw new ConfigError(`not a host name or address in insecureHosts: ${JSON.stringify(raw)}`);
 	}
-	if (url.port !== "") throw new ConfigError(`insecureHosts entry ${JSON.stringify(raw)} carries a port — name the host alone; the bind host and the Host header are both compared portless`);
+	if (url.port !== "") throw new ConfigError(`insecureHosts entry ${JSON.stringify(raw)} carries a port - name the host alone; the bind host and the Host header are both compared portless`);
 	return url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
 }
 function resolveInstanceConfig(flags, loaded, env = process.env, cwd = process.cwd()) {
@@ -2071,11 +2074,9 @@ function lockCommand(pid) {
 }
 function driveWakeLock(source, lock) {
 	const sync = () => lock.set(sessionsNeedTheMachine(source.list()));
-	source.observe((runner) => {
-		runner.subscribe((event) => {
-			if (event.type === "status_changed" || event.type === "session_closed" || event.type === "session_error") sync();
-		}, runner.info().lastSeq);
-	});
+	source.observe((runner) => runner.subscribe((event) => {
+		if (event.type === "status_changed" || event.type === "session_closed" || event.type === "session_error") sync();
+	}, runner.info().lastSeq));
 	sync();
 }
 function createWakeLock(options = {}) {
@@ -2284,8 +2285,8 @@ async function startInstance(config, options = {}) {
 		...authOptions,
 		sessions
 	} : authOptions);
-	if (config.allowedHosts === null && !config.hostAuthenticates && !auth.enabled) throw new Error("refusing to serve: the resolved config expects auth but no shared secret was materialized — this instance would be open while believing itself authenticated");
-	if (config.corsOrigins.length > 0 && !config.hostAuthenticates && !auth.enabled) throw new Error("refusing to serve: corsOrigins is set but this instance has no auth — a cross-origin page could drive it with no credential. Set --auth-key.");
+	if (config.allowedHosts === null && !config.hostAuthenticates && !auth.enabled) throw new Error("refusing to serve: the resolved config expects auth but no shared secret was materialized - this instance would be open while believing itself authenticated");
+	if (config.corsOrigins.length > 0 && !config.hostAuthenticates && !auth.enabled) throw new Error("refusing to serve: corsOrigins is set but this instance has no auth - a cross-origin page could drive it with no credential. Set --auth-key.");
 	const hostAllowed = createHostGuard(config.allowedHosts);
 	const authenticateHost = (req) => hostAllowed(req) ? auth.authenticate(req) : null;
 	const apns = config.apns === void 0 ? void 0 : await createApnsForwarder({
@@ -2335,7 +2336,16 @@ async function startInstance(config, options = {}) {
 			target: apns.activity
 		});
 	}
-	const { port } = await server.listen(config.port, config.host);
+	const adopted = [];
+	for (const carried of options.carried ?? []) if (server.adoptSession(carried)) adopted.push(carried);
+	let port;
+	try {
+		({port} = await server.listen(config.port, config.host));
+	} catch (error) {
+		for (const carried of adopted) server.releaseSession(carried.runner.id);
+		await server.close();
+		throw error;
+	}
 	const displayHost = config.host === "0.0.0.0" || config.host === "::" ? "localhost" : config.host;
 	const url = `http://${displayHost.includes(":") ? `[${displayHost}]` : displayHost}:${port}`;
 	let resolveClosed = () => {};
@@ -2349,27 +2359,28 @@ async function startInstance(config, options = {}) {
 		if (config.hostAuthenticates) line("  auth: the config file supplies its own `authenticate`");
 		else if (generated?.source === "created") {
 			line(`  auth: generated key  ${generated.key}`);
-			line(`        stored in ${generated.path} — later starts reuse it without printing it`);
+			line(`        stored in ${generated.path} - later starts reuse it without printing it`);
 		} else if (generated?.source === "ephemeral") {
 			line(`  auth: generated key  ${generated.key}`);
-			line("        ephemeral — no state dir to keep it, so the next start mints a new one");
+			line("        ephemeral - no state dir to keep it, so the next start mints a new one");
 		} else if (generated?.source === "stored") line(`  auth: shared key from ${generated.path}`);
-		else if (auth.enabled) line("  auth: shared key — browsers sign in, services send a header");
-		else line("  NO AUTH — anyone who can reach this port gets a session");
-		if (!config.web) line("  dashboard: off — bare gateway, /v1 and /auth only");
-		if (!config.keepAwake) line("  keep-awake: off — this machine may sleep mid-turn");
+		else if (auth.enabled) line("  auth: shared key - browsers sign in, services send a header");
+		else line("  NO AUTH - anyone who can reach this port gets a session");
+		if (!config.web) line("  dashboard: off - bare gateway, /v1 and /auth only");
+		if (!config.keepAwake) line("  keep-awake: off - this machine may sleep mid-turn");
 		if (config.corsOrigins.length) line(`  cors: ${config.corsOrigins.join(", ")} may call /v1 (still key-gated)`);
-		line(config.stateDir ? `  parked sessions persist in ${join(config.stateDir, "parked")}` : "  parked sessions are in memory only — a restart drops them");
+		line(config.stateDir ? `  parked sessions persist in ${join(config.stateDir, "parked")}` : "  parked sessions are in memory only - a restart drops them");
 		if (apns) {
 			const count = apns.deviceCount();
 			const cards = apns.activity.count();
-			line(`  push: APNs forwarder on ${config.apns?.topic} — ${count === 0 ? "no devices registered yet" : `${count} device(s)`}${cards === 0 ? "" : `, ${cards} live card(s)`}`);
+			line(`  push: APNs forwarder on ${config.apns?.topic} - ${count === 0 ? "no devices registered yet" : `${count} device(s)`}${cards === 0 ? "" : `, ${cards} live card(s)`}`);
 		}
 		if (config.configPath) line(`  config ${config.configPath}`);
 		line("");
 	}
 	return {
 		server,
+		adopted: adopted.map((carried) => carried.runner.id),
 		url,
 		port,
 		closed,
@@ -2389,4 +2400,4 @@ async function startInstance(config, options = {}) {
 //#endregion
 export { createActivityRegistry as C, createDeviceRoute as S, createApnsForwarder as _, ConfigError as a, createApnsRoute as b, isLoopback as c, parseArgs as d, resolveInstanceConfig as f, buildPush as g, materializeAuthKey as h, renderLoginPage as i, isLoopbackHostname as l, createAuthSessionStore as m, resolveWebRoot as n, defaultStateDir as o, createCliAuth as p, startInstance as r, hostnameOf as s, createHostGuard as t, loadConfigFile as u, createApnsClient as v, createActivityRoute as w, createDeviceRegistry as x, loadApnsKey as y };
 
-//# sourceMappingURL=instance-DP3af4H-.mjs.map
+//# sourceMappingURL=instance-vQe2VlGq.mjs.map