@vibesdotdev/agent-execution 0.0.0-stage → 1.0.0-rc.1

package/dist/code-session/client/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/code-session/client/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gCAAgC,EAAmC,MAAM,qCAAqC,CAAC;AAIxH,OAAO,EAAE,+BAA+B,EAAkC,MAAM,0CAA0C,CAAC;AAC3H,OAAO,EAAE,+BAA+B,EAAkC,MAAM,0CAA0C,CAAC;AAE3H,SAAS,cAAc,CAAC,KAAa,EAAE,KAA2C;IACjF,OAAO,IAAI,eAAe,CAAC,iDAAiD,EAAE,eAAe,EAAE;QAC9F,MAAM,EAAE,8BAA8B;QACtC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,KAAK,EAAE;QAClB,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CACjC,UAAsC;IAEtC,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QACrC,IAAI,CAAC,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IACnD,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,QAAQ,KAAK,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAmB,EACnB,UAAqC,EAAE;IAEvC,IAAI,QAAyD,CAAC;IAC9D,IAAI,CAAC;QACJ,QAAQ,GAAG,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,cAAc,CACnB,SAAS,EACT,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAC3D,CAAC;IACH,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,sBAAsB,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IAEvF,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO;aACZ,KAAK,CAAmD,oBAAoB,CAAC;aAC7E,MAAM,CAAC,UAAU,CAAC;aAClB,OAAO,EAAE,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAmD,oBAAoB,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAExC,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAC1D,IAAI,CAAC;YACJ,OAAO,gCAAgC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE,aAAa,EAAE;gBAC5F,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE,KAAK;gBACrD,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;gBACnF,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;aAC1D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAEvE,MAAM,cAAc,GACnB,sBAAsB,KAAK,SAAS;QACnC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACzF,IAAI,sBAAsB,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,eAAe;IACf,MAAM,UAAU,GACf,UAAU,KAAK,SAAS;QACvB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GACjB,YAAY,KAAK,SAAS;QACzB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC;IAExF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,uDAAuD,EAAE,aAAa,EAAE;YACjG,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE;SAC9B,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,OAAO,MAAM,OAAO;iBAClB,KAAK,CAAmD,oBAAoB,CAAC;iBAC7E,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;iBACpB,OAAO,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,eAAe,CAAC,WAAW,CAAC,OAAO,EAAE,oBAAoB,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9E,YAAY,IAAI,CAAC,CAAC;gBAClB,SAAS;YACV,CAAC;YACD,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,MAAM,IAAI,eAAe,CACxB,yEAAyE,EACzE,aAAa,EACb;QACC,MAAM,EAAE,2BAA2B;QACnC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE;KAC1D,CACD,CAAC;AACH,CAAC"}

package/dist/code-session/docs/agent-code-session.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=agent-code-session.docs.descriptor.d.ts.map

package/dist/code-session/docs/agent-code-session.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-code-session.docs.descriptor.d.ts","sourceRoot":"","sources":["../../../src/code-session/docs/agent-code-session.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAgFvE,QAAA,MAAM,UAAU,EAAE,mBA8BjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/code-session/docs/agent-code-session.docs.descriptor.js

@@ -0,0 +1,109 @@
+/**
+ * Docs/topic descriptor for @vibesdotdev/agent-execution/code-session (Rule 11).
+ * Registered by `agentCodeSessionPlugin`.
+ */
+const markdown = `---
+title: Agent Code Session
+summary: Persistent repo-bound workspace for Build mode via the agent/code-session runtime kind
+tags: [agent, code-session, build, repository, git, runtime]
+parent: agents
+order: 12
+surfaces: [cli, web, in-app, mcp]
+hardware: [consumer, cloud]
+---
+
+# Agent Code Session
+
+\`@vibesdotdev/agent-execution/code-session\` owns the \`agent/code-session\` runtime kind: a
+*persistent* workspace bound to a repository + host target. It extends the
+one-shot [\`agent/sandbox\`](agent.sandbox) contract into a long-lived session
+that survives across tool calls — the runtime substrate of Build mode.
+
+A session can clone a repo, run foreground/background commands, read/write/patch
+files, perform git ops (status/commit/push), and expose a port for preview.
+
+## Host targets
+
+A session resolves to one of two execution targets:
+
+- \`{ kind: 'cloud' }\` — a per-session Cloudflare Sandbox (persistent FS,
+  background procs, native preview URLs), resolved by the cloud adapter.
+- \`{ kind: 'host', hostId }\` — a platform Host daemon that advertises the
+  \`sandbox:code-execution\` capability. The default is the local host.
+
+## Consumer vs cloud
+
+- **Consumer** (this package): clones under the active Vibes profile, runs
+  long-lived processes via \`Bun.spawn\`, git ops via the git CLI.
+- **Cloud** ([\`agent.code-session.cloudflare\`](agent.code-session.cloudflare)):
+  routes through a host-composed provider sandbox-session capability.
+
+## Usage
+
+\`\`\`ts
+import { resolveCodeSession } from '@vibesdotdev/agent-execution/code-session';
+
+const sessions = await resolveCodeSession(runtime);
+const handle = await sessions.initialize({ cloneUrl, checkoutRef: 'main' });
+await sessions.runCommand(handle.sessionId, { command: ['bun', 'install'] });
+const status = await sessions.gitStatus(handle.sessionId);
+\`\`\`
+
+Register \`@vibesdotdev/agent-execution/code-session/plugin\` in an app's \`vibes.config.ts\`.
+The agent loop reaches the session through the code-session \`ai/tool\`s
+registered by \`@vibesdotdev/agents\`.
+
+## Pause and resume
+
+\`pause(sessionId)\` stops the session's background processes and keeps its files; \`runCommand\` then refuses \`code-session-paused\` until \`resume(sessionId)\`. See [workspace.isolation](workspace.isolation) for isolated worktrees with the same lifecycle plus accept, purge and idle cleanup.
+
+## Relay teardown recovery
+
+Fleet relay teardown records durable cleanup authorization outside the workspace
+before moving it into quarantine. Legacy metadata without an operation identity
+is adopted first. Pending cleanup refuses ordinary work; retry teardown after a
+failure, including from a fresh runtime after the old operation lease expires.
+Concurrent legacy adoption preserves already-published cleanup state. Unconfirmed removal refuses
+\`UNAVAILABLE / code-session-cleanup-unconfirmed\`. Confirmed removal leaves an
+idempotent tombstone; create-or-get cannot revive the operation.
+
+## Related
+
+:::card{title="See also"}
+- [\`agent.code-session.cloudflare\`](agent.code-session.cloudflare) — the cloud adapter
+- [\`agent.sandbox\`](agent.sandbox) — the one-shot sandbox this extends
+- [\`agents\`](agents) — the agent loop + code-session tools
+:::
+`;
+const descriptor = {
+    kind: 'docs/topic',
+    id: 'agent.code-session',
+    title: 'Agent Code Session',
+    summary: 'Persistent repo-bound workspace for Build mode via the agent/code-session runtime kind',
+    body: {
+        type: 'markdown',
+        sourceType: 'raw',
+        source: markdown
+    },
+    parent: 'agents',
+    order: 12,
+    tags: ['agent', 'code-session', 'build', 'repository', 'git', 'runtime'],
+    surfaces: ['cli', 'web', 'in-app', 'mcp'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    man: {
+        name: 'agent.code-session — persistent repo-bound agent workspace',
+        section: 1,
+        synopsis: 'vibes man agent.code-session',
+        options: [],
+        examples: [
+            {
+                description: 'Initialize a session and run a command',
+                command: "const s = await resolveCodeSession(runtime); const h = await s.initialize({ cloneUrl }); await s.runCommand(h.sessionId, { command: ['bun', 'install'] })"
+            }
+        ],
+        seeAlso: ['agent.code-session.cloudflare', 'agent.sandbox', 'agents']
+    }
+};
+export default descriptor;
+//# sourceMappingURL=agent-code-session.docs.descriptor.js.map

package/dist/code-session/docs/agent-code-session.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-code-session.docs.descriptor.js","sourceRoot":"","sources":["../../../src/code-session/docs/agent-code-session.docs.descriptor.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwEhB,CAAC;AAEF,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,wFAAwF;IACjG,IAAI,EAAE;QACL,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,QAAQ;KAChB;IACD,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC;IACxE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;IACzC,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,GAAG,EAAE;QACJ,IAAI,EAAE,4DAA4D;QAClE,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,8BAA8B;QACxC,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE;YACT;gBACC,WAAW,EAAE,wCAAwC;gBACrD,OAAO,EACN,2JAA2J;aAC5J;SACD;QACD,OAAO,EAAE,CAAC,+BAA+B,EAAE,eAAe,EAAE,QAAQ,CAAC;KACrE;CACD,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/code-session/git-credential.d.ts

@@ -0,0 +1,87 @@
+/**
+ * The ONE place a code session turns a credential into git arguments.
+ *
+ * This exists because `buildCredentialArgs` had been reimplemented three times —
+ * here, in `code-sessions`' cloud transcript impl, and inline in the Cloudflare
+ * impl — and every copy kept the convenient half (a helper that answers with the
+ * token) while dropping the security-bearing half (binding that answer to one
+ * protocol+host+path with an expiry). Two of the copies said in their own
+ * comments that they "mirror `@vibesdotdev/git-operations`". A mirror that
+ * reflects half of a credential guard is not a mirror.
+ *
+ * So this module does not reimplement anything: it delegates to the canonical
+ * `buildCredentialArgs` and exists only to adapt the code-session credential
+ * shape to the git-operations one. When a session is ready to carry a
+ * `GitCredentialLease`, the lease branch is already live in the canonical
+ * implementation — it starts working here the moment a lease is passed in,
+ * with no further change to this file.
+ */
+import type { GitCredential, GitNetworkOperation } from '@vibesdotdev/git-operations/interface';
+import { type ValueFreeFailure } from '@vibesdotdev/kernel';
+import type { CodeSessionCloneCredential } from './interfaces/code-session.ts';
+export interface CodeSessionCredentialArgs {
+    readonly args: string[];
+    readonly env: Record<string, string>;
+}
+export interface CodeSessionCredentialLeaseInput {
+    readonly token: string;
+    readonly username?: string;
+    readonly repositoryId: string;
+    readonly remoteUrl: string | null | undefined;
+    readonly ttlSeconds: number;
+    readonly operations?: GitNetworkOperation[];
+    readonly nowEpochMs: number;
+}
+export type CodeSessionCredentialLeaseResult = {
+    readonly credential: CodeSessionCloneCredential;
+    readonly bound: true;
+} | {
+    readonly credential: CodeSessionCloneCredential;
+    readonly bound: false;
+    readonly reason: 'repository-no-clone-url' | 'remote-not-canonical';
+    readonly failure?: ValueFreeFailure;
+};
+/**
+ * Adapt a code-session credential to the canonical git-operations shape.
+ *
+ * `kind: 'token'` is NOT decoration. The canonical builder returns
+ * `{args: [], env: {}}` for anything whose `kind` is not `'token'`, so a
+ * credential that arrives without the discriminant is silently dropped and the
+ * clone proceeds with no auth at all — which on a private repo surfaces as a
+ * confusing 403 far from its cause rather than as an error here. The test beside
+ * this file exists specifically to catch that.
+ */
+export declare function toGitCredential(credential: CodeSessionCloneCredential): GitCredential;
+/**
+ * Build the `-c credential.helper=...` args + child env that feed a token to git
+ * WITHOUT writing it into the remote URL or the persisted `.git/config`.
+ *
+ * The token lives only in the process env for a single invocation. Note what
+ * that does NOT promise on every backend: the Cloudflare Sandbox Bridge exec
+ * protocol has no env channel, so its transport folds env into argv and the
+ * token lands in the request body. That is a transport gap, measured in
+ * provider integration's "KNOWN EXPOSURE" tests, not something this function can
+ * fix — but a caller reasoning about where the token can be observed needs it.
+ */
+export declare function codeSessionCredentialArgs(credential?: CodeSessionCloneCredential): CodeSessionCredentialArgs;
+/**
+ * Turn a freshly minted token into a REPOSITORY-BOUND lease when the remote
+ * allows it, and fall back to the raw shape when it does not.
+ *
+ * Why the fallback rather than a throw. `parseCanonicalGitRemote` is
+ * deliberately unforgiving — it rejects anything but one exact canonical HTTPS
+ * spelling (no credentials in the URL, no query or hash, at least two path
+ * segments, a `.git` suffix, and `href` equal to the input). That strictness is
+ * correct for deciding what a token may be used for, but a caller minting a
+ * credential is on the critical path of "can this session start at all". If a
+ * stored `cloneUrl` is spelled any other way, throwing here would take out
+ * session creation for that repository entirely — trading a working clone for
+ * no clone, in the name of security that the raw path never had either.
+ *
+ * So a non-canonical remote degrades to exactly today's behaviour and says so
+ * through `bound: false`, which callers should log. Anything that parses gets
+ * the binding: the token stops answering for any other host or path, and stops
+ * answering at all once it expires.
+ */
+export declare function codeSessionCredentialLease(input: CodeSessionCredentialLeaseInput): CodeSessionCredentialLeaseResult;
+//# sourceMappingURL=git-credential.d.ts.map

package/dist/code-session/git-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-credential.d.ts","sourceRoot":"","sources":["../../src/code-session/git-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAChG,OAAO,EAAyC,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,gCAAgC,GACzC;IAAE,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACzE;IACA,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,sBAAsB,CAAC;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEL;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,0BAA0B,GAAG,aAAa,CAIrF;AACD;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,CAAC,EAAE,0BAA0B,GAAG,yBAAyB,CAG5G;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,+BAA+B,GAAG,gCAAgC,CA6BnH"}

package/dist/code-session/git-credential.js

@@ -0,0 +1,107 @@
+/**
+ * The ONE place a code session turns a credential into git arguments.
+ *
+ * This exists because `buildCredentialArgs` had been reimplemented three times —
+ * here, in `code-sessions`' cloud transcript impl, and inline in the Cloudflare
+ * impl — and every copy kept the convenient half (a helper that answers with the
+ * token) while dropping the security-bearing half (binding that answer to one
+ * protocol+host+path with an expiry). Two of the copies said in their own
+ * comments that they "mirror `@vibesdotdev/git-operations`". A mirror that
+ * reflects half of a credential guard is not a mirror.
+ *
+ * So this module does not reimplement anything: it delegates to the canonical
+ * `buildCredentialArgs` and exists only to adapt the code-session credential
+ * shape to the git-operations one. When a session is ready to carry a
+ * `GitCredentialLease`, the lease branch is already live in the canonical
+ * implementation — it starts working here the moment a lease is passed in,
+ * with no further change to this file.
+ */
+// Narrow subpaths on purpose: the seam needs one pure function and one type,
+// and the package root also exports the consumer impl. Importing `./core`
+// keeps a worker bundle from pulling in a host-side git implementation it can
+// never run.
+import { buildCredentialArgs, parseCanonicalGitRemote } from '@vibesdotdev/git-operations/core';
+import { CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+/**
+ * Adapt a code-session credential to the canonical git-operations shape.
+ *
+ * `kind: 'token'` is NOT decoration. The canonical builder returns
+ * `{args: [], env: {}}` for anything whose `kind` is not `'token'`, so a
+ * credential that arrives without the discriminant is silently dropped and the
+ * clone proceeds with no auth at all — which on a private repo surfaces as a
+ * confusing 403 far from its cause rather than as an error here. The test beside
+ * this file exists specifically to catch that.
+ */
+export function toGitCredential(credential) {
+    // A lease already carries `kind`; spreading last preserves it and every other
+    // lease field, so passing a lease through here binds it for free.
+    return { kind: 'token', ...credential };
+}
+/**
+ * Build the `-c credential.helper=...` args + child env that feed a token to git
+ * WITHOUT writing it into the remote URL or the persisted `.git/config`.
+ *
+ * The token lives only in the process env for a single invocation. Note what
+ * that does NOT promise on every backend: the Cloudflare Sandbox Bridge exec
+ * protocol has no env channel, so its transport folds env into argv and the
+ * token lands in the request body. That is a transport gap, measured in
+ * provider integration's "KNOWN EXPOSURE" tests, not something this function can
+ * fix — but a caller reasoning about where the token can be observed needs it.
+ */
+export function codeSessionCredentialArgs(credential) {
+    if (!credential)
+        return { args: [], env: {} };
+    return buildCredentialArgs(toGitCredential(credential));
+}
+/**
+ * Turn a freshly minted token into a REPOSITORY-BOUND lease when the remote
+ * allows it, and fall back to the raw shape when it does not.
+ *
+ * Why the fallback rather than a throw. `parseCanonicalGitRemote` is
+ * deliberately unforgiving — it rejects anything but one exact canonical HTTPS
+ * spelling (no credentials in the URL, no query or hash, at least two path
+ * segments, a `.git` suffix, and `href` equal to the input). That strictness is
+ * correct for deciding what a token may be used for, but a caller minting a
+ * credential is on the critical path of "can this session start at all". If a
+ * stored `cloneUrl` is spelled any other way, throwing here would take out
+ * session creation for that repository entirely — trading a working clone for
+ * no clone, in the name of security that the raw path never had either.
+ *
+ * So a non-canonical remote degrades to exactly today's behaviour and says so
+ * through `bound: false`, which callers should log. Anything that parses gets
+ * the binding: the token stops answering for any other host or path, and stops
+ * answering at all once it expires.
+ */
+export function codeSessionCredentialLease(input) {
+    const raw = {
+        token: input.token
+    };
+    if (input.username)
+        raw.username = input.username;
+    if (!input.remoteUrl) {
+        return { credential: raw, bound: false, reason: 'repository-no-clone-url' };
+    }
+    try {
+        parseCanonicalGitRemote(input.remoteUrl);
+    }
+    catch (caught) {
+        return {
+            credential: raw,
+            bound: false,
+            reason: 'remote-not-canonical',
+            failure: valueFreeFailure(CaughtFailureSchema.parse(caught))
+        };
+    }
+    return {
+        credential: {
+            ...raw,
+            kind: 'token',
+            repositoryId: input.repositoryId,
+            remoteUrl: input.remoteUrl,
+            operations: input.operations ?? ['clone', 'fetch'],
+            expiresAtEpochMs: input.nowEpochMs + input.ttlSeconds * 1_000
+        },
+        bound: true
+    };
+}
+//# sourceMappingURL=git-credential.js.map

package/dist/code-session/git-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-credential.js","sourceRoot":"","sources":["../../src/code-session/git-credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,aAAa;AACb,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhG,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAyB,MAAM,qBAAqB,CAAC;AA2BnG;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,UAAsC;IACrE,8EAA8E;IAC9E,kEAAkE;IAClE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;AACzC,CAAC;AACD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CAAC,UAAuC;IAChF,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC9C,OAAO,mBAAmB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAsC;IAChF,MAAM,GAAG,GAA+B;QACvC,KAAK,EAAE,KAAK,CAAC,KAAK;KAClB,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC;QACJ,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QACjB,OAAO;YACN,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,sBAAsB;YAC9B,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SAC5D,CAAC;IACH,CAAC;IACD,OAAO;QACN,UAAU,EAAE;YACX,GAAG,GAAG;YACN,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;YAClD,gBAAgB,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,GAAG,KAAK;SAC7D;QACD,KAAK,EAAE,IAAI;KACX,CAAC;AACH,CAAC"}

package/dist/code-session/host-target.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Session Host Target
+ *
+ * A code session resolves its execution environment to one of three targets:
+ *
+ *   - `{ kind: 'cloud' }` — a per-session sandbox with a persistent
+ *     filesystem, background processes, and native preview URLs.
+ *
+ *   - `{ kind: 'host', hostId }` — an enrolled host whose daemon runs the
+ *     session. `hostId: 'local'` addresses the current host.
+ *
+ *   - `{ kind: 'provisioned', adapter, ... }` — a machine created on demand
+ *     through a registered provisioning adapter. `adapter` is the required id
+ *     of that adapter; `providerConfig` carries adapter-specific options, and
+ *     the generic `region` / `size` / `image` / `repo` / `branch` / `ttlHours`
+ *     fields cover the common placement, checkout, and lifecycle options.
+ *
+ * Resolution derives the allowed `requiredHostTargetKind` values from this
+ * schema's discriminator, so this file is the single owner of the target list.
+ */
+import * as z from 'zod/v4';
+/** Capability label a Host must advertise to run code sessions. */
+export declare const CODE_SESSION_HOST_CAPABILITY_LABEL = "sandbox:code-execution";
+export declare const CloudSessionHostTargetSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"cloud">;
+}, z.core.$strip>;
+export declare const PlatformSessionHostTargetSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"host">;
+    hostId: z.ZodString;
+}, z.core.$strip>;
+export declare const ProvisionedSessionHostTargetSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"provisioned">;
+    adapter: z.ZodString;
+    region: z.ZodOptional<z.ZodString>;
+    size: z.ZodOptional<z.ZodString>;
+    image: z.ZodOptional<z.ZodString>;
+    repo: z.ZodOptional<z.ZodString>;
+    branch: z.ZodOptional<z.ZodString>;
+    ttlHours: z.ZodOptional<z.ZodNumber>;
+    providerConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const SessionHostTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"cloud">;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"host">;
+    hostId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"provisioned">;
+    adapter: z.ZodString;
+    region: z.ZodOptional<z.ZodString>;
+    size: z.ZodOptional<z.ZodString>;
+    image: z.ZodOptional<z.ZodString>;
+    repo: z.ZodOptional<z.ZodString>;
+    branch: z.ZodOptional<z.ZodString>;
+    ttlHours: z.ZodOptional<z.ZodNumber>;
+    providerConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>], "kind">;
+export type CloudSessionHostTarget = z.infer<typeof CloudSessionHostTargetSchema>;
+export type PlatformSessionHostTarget = z.infer<typeof PlatformSessionHostTargetSchema>;
+export type ProvisionedSessionHostTarget = z.infer<typeof ProvisionedSessionHostTargetSchema>;
+export type SessionHostTarget = z.infer<typeof SessionHostTargetSchema>;
+export declare const SessionHostTargetKindSchema: z.ZodEnum<{
+    cloud: "cloud";
+    host: "host";
+    provisioned: "provisioned";
+}>;
+export type SessionHostTargetKind = z.infer<typeof SessionHostTargetKindSchema>;
+/** The conventional default target when none is specified: the local Host. */
+export declare const DEFAULT_SESSION_HOST_TARGET: SessionHostTarget;
+/** Narrow a target to the platform-Host variant. */
+export declare function isPlatformHostTarget(target: SessionHostTarget): target is PlatformSessionHostTarget;
+/** Narrow a target to the cloud variant. */
+export declare function isCloudHostTarget(target: SessionHostTarget): target is CloudSessionHostTarget;
+/** Narrow a target to the generic provisioned variant. */
+export declare function isProvisionedHostTarget(target: SessionHostTarget): target is ProvisionedSessionHostTarget;
+//# sourceMappingURL=host-target.d.ts.map

package/dist/code-session/host-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-target.d.ts","sourceRoot":"","sources":["../../src/code-session/host-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,2BAA2B,CAAC;AAE3E,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;iBAI1C,CAAC;AAEH,eAAO,MAAM,kCAAkC;;;;;;;;;;iBAkB7C,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;2BAIlC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAQxE,eAAO,MAAM,2BAA2B;;;;EAIvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,EAAE,iBAAqD,CAAC;AAEhG,oDAAoD;AACpD,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,iBAAiB,GACvB,MAAM,IAAI,yBAAyB,CAErC;AAED,4CAA4C;AAC5C,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,IAAI,sBAAsB,CAE7F;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,iBAAiB,GACvB,MAAM,IAAI,4BAA4B,CAExC"}

package/dist/code-session/host-target.js

@@ -0,0 +1,81 @@
+/**
+ * Session Host Target
+ *
+ * A code session resolves its execution environment to one of three targets:
+ *
+ *   - `{ kind: 'cloud' }` — a per-session sandbox with a persistent
+ *     filesystem, background processes, and native preview URLs.
+ *
+ *   - `{ kind: 'host', hostId }` — an enrolled host whose daemon runs the
+ *     session. `hostId: 'local'` addresses the current host.
+ *
+ *   - `{ kind: 'provisioned', adapter, ... }` — a machine created on demand
+ *     through a registered provisioning adapter. `adapter` is the required id
+ *     of that adapter; `providerConfig` carries adapter-specific options, and
+ *     the generic `region` / `size` / `image` / `repo` / `branch` / `ttlHours`
+ *     fields cover the common placement, checkout, and lifecycle options.
+ *
+ * Resolution derives the allowed `requiredHostTargetKind` values from this
+ * schema's discriminator, so this file is the single owner of the target list.
+ */
+import * as z from 'zod/v4';
+/** Capability label a Host must advertise to run code sessions. */
+export const CODE_SESSION_HOST_CAPABILITY_LABEL = 'sandbox:code-execution';
+export const CloudSessionHostTargetSchema = z.object({
+    kind: z.literal('cloud')
+});
+export const PlatformSessionHostTargetSchema = z.object({
+    kind: z.literal('host'),
+    /** The platform Host id whose daemon runs the session. */
+    hostId: z.string().min(1, 'hostId is required for a host target')
+});
+export const ProvisionedSessionHostTargetSchema = z.object({
+    kind: z.literal('provisioned'),
+    /** The id of a registered provisioning adapter. */
+    adapter: z.string().min(1),
+    /** Target region or zone. */
+    region: z.string().optional(),
+    /** Compute instance size or shape. */
+    size: z.string().optional(),
+    /** Custom OS image or snapshot ID. */
+    image: z.string().optional(),
+    /** Repository to checkout in the session workspace. */
+    repo: z.string().optional(),
+    /** Branch or commit SHA to checkout. */
+    branch: z.string().optional(),
+    /** Time-to-live in hours before automatic reaping. */
+    ttlHours: z.number().int().positive().max(168).optional(),
+    /** Provider-specific extra parameters. */
+    providerConfig: z.record(z.string(), z.unknown()).optional()
+});
+export const SessionHostTargetSchema = z.discriminatedUnion('kind', [
+    CloudSessionHostTargetSchema,
+    PlatformSessionHostTargetSchema,
+    ProvisionedSessionHostTargetSchema
+]);
+/** The target kinds, derived from the owning union so there is one owner. */
+const sessionHostTargetKinds = SessionHostTargetSchema.options.map((option) => {
+    const [kind] = [...option.shape.kind.values];
+    if (kind === undefined)
+        throw new Error('Each host-target kind literal holds exactly one value.');
+    return kind;
+});
+export const SessionHostTargetKindSchema = z.enum(
+// SAFETY: the union above declares exactly the cloud, host, and provisioned
+// options, so the derived array is a non-empty tuple of those kinds.
+sessionHostTargetKinds);
+/** The conventional default target when none is specified: the local Host. */
+export const DEFAULT_SESSION_HOST_TARGET = { kind: 'host', hostId: 'local' };
+/** Narrow a target to the platform-Host variant. */
+export function isPlatformHostTarget(target) {
+    return target.kind === 'host';
+}
+/** Narrow a target to the cloud variant. */
+export function isCloudHostTarget(target) {
+    return target.kind === 'cloud';
+}
+/** Narrow a target to the generic provisioned variant. */
+export function isProvisionedHostTarget(target) {
+    return target.kind === 'provisioned';
+}
+//# sourceMappingURL=host-target.js.map

package/dist/code-session/host-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-target.js","sourceRoot":"","sources":["../../src/code-session/host-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,mEAAmE;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAAG,wBAAwB,CAAC;AAE3E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,0DAA0D;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,mDAAmD;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,6BAA6B;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,sCAAsC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,sCAAsC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,uDAAuD;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,wCAAwC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,sDAAsD;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,0CAA0C;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,4BAA4B;IAC5B,+BAA+B;IAC/B,kCAAkC;CAClC,CAAC,CAAC;AAOH,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IAC7E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC;AACb,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI;AAChD,4EAA4E;AAC5E,qEAAqE;AACrE,sBAAqF,CACrF,CAAC;AAGF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAsB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAEhG,oDAAoD;AACpD,MAAM,UAAU,oBAAoB,CACnC,MAAyB;IAEzB,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;AAC/B,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IAC1D,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;AAChC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CACtC,MAAyB;IAEzB,OAAO,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC;AACtC,CAAC"}

package/dist/code-session/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @vibesdotdev/agent-execution/code-session
+ *
+ * The `agent/code-session` runtime kind (a persistent workspace bound to a
+ * repository + host target, extending the `agent/sandbox` one-shot contract) +
+ * its consumer (Bun-on-a-Host) impl, the session host-target model (WS2), the
+ * scope-aware resolver, and the session interface/types. The cloud impl lives
+ * in its provider-owned Integrations package.
+ */
+export { AgentCodeSessionDescriptorSchema, CodeSessionTrustLevelSchema, CodeSessionSurfaceSchema, CodeSessionRuntimeConfigSchema, CodeSessionBillingGateSchema, CODE_SESSION_MIN_TRUST_LEVEL, createAgentCodeSessionDescriptor, type AgentCodeSessionDescriptor, type CodeSessionTrustLevel, type CodeSessionSurface, type CodeSessionRuntimeConfig, type CodeSessionBillingGate } from './agent-code-session.descriptor.ts';
+export { enforceCodeSessionBillingGates, CodeSessionBillingDenied, CodeSessionBillingUnavailable, type BillingGateCheck } from './billing/gates.ts';
+export { SessionHostTargetSchema, SessionHostTargetKindSchema, CloudSessionHostTargetSchema, PlatformSessionHostTargetSchema, ProvisionedSessionHostTargetSchema, CODE_SESSION_HOST_CAPABILITY_LABEL, DEFAULT_SESSION_HOST_TARGET, isPlatformHostTarget, isCloudHostTarget, isProvisionedHostTarget, type SessionHostTarget, type SessionHostTargetKind, type CloudSessionHostTarget, type PlatformSessionHostTarget, type ProvisionedSessionHostTarget } from './host-target.ts';
+export { codeSessionCredentialArgs, codeSessionCredentialLease } from './git-credential.ts';
+export { agentCodeSessionKind } from './agent-code-session.kind.ts';
+export { default as consumerCodeSessionDescriptor } from './agent-code-session.consumer.descriptor.ts';
+export { agentCodeSessionPlugin, default } from './agent-code-session.plugin.ts';
+export { resolveCodeSession, type ResolveCodeSessionOptions } from './client/resolve.ts';
+export { BackgroundProcessInfoSchema, BackgroundProcessOutputSchema, BackgroundProcessReadInputSchema, BackgroundProcessWaitInputSchema, CodeSessionCloneCredentialSchema, CodeSessionCreateOrGetInputSchema, CodeSessionHandleSchema, CodeSessionInitializeInputSchema, CodeSessionOperationCleanupSchema, CodeSessionOperationConfigurationSchema, CodeSessionOperationIdSchema, CodeSessionOperationStageSchema, ExposePortInputSchema, ExposePortResultSchema, GitApplyInputSchema, GitApplyResultSchema, GitCommitInputSchema, GitCommitOptionsSchema, GitCommitResultSchema, GitPushInputSchema, GitStatusResultSchema, PatchFileInputSchema, PersistedCodeSessionOperationSchema, RunCommandInputSchema, RunCommandResultSchema, codeSessionOperationFingerprint, codeSessionOperationKey, parseCodeSessionCreateOrGetInput, parseCodeSessionId, parseCodeSessionInitializeInput, parseCodeSessionPath, parseCodeSessionText, parseExposePortInput, parseGitApplyInput, parseGitCommitInput, parseGitCommitOptions, parseGitPushInput, parsePatchFileInput, parseProcessId, parseBackgroundProcessReadInput, parseBackgroundProcessWaitInput, parseProcessSignal, parsePushCredentialResolver, parseRunCommandInput, parseWriteFileInput, type BackgroundProcessInfo, type BackgroundProcessOutput, type BackgroundProcessReadInput, type BackgroundProcessWaitInput, type CodeSessionCloneCredential, type CodeSessionCreateOrGetInput, type CodeSessionInterface, type CodeSessionInitializeInput, type CodeSessionHandle, type RunCommandInput, type RunCommandResult, type PatchFileInput, type GitApplyInput, type GitApplyResult, type GitStatusResult, type GitCommitInput, type GitCommitOptions, type GitCommitResult, type GitPushInput, type ExposePortInput, type ExposePortResult, type CodeSessionOperationConfiguration, type CodeSessionOperationStage, type PersistedCodeSessionOperation, type PushCredentialResolver } from './interfaces/code-session.ts';
+export { CODE_SESSION_METADATA_FILENAME, parseCodeSessionMetadata, serializeCodeSessionMetadata, type PersistedCodeSessionMetadata } from './session-metadata.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/code-session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/code-session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACN,gCAAgC,EAChC,2BAA2B,EAC3B,wBAAwB,EACxB,8BAA8B,EAC9B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACN,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,KAAK,gBAAgB,EACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACN,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,kCAAkC,EAClC,kCAAkC,EAClC,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,EACjC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EACN,2BAA2B,EAC3B,6BAA6B,EAC7B,gCAAgC,EAChC,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,gCAAgC,EAChC,iCAAiC,EACjC,uCAAuC,EACvC,4BAA4B,EAC5B,+BAA+B,EAC/B,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,mCAAmC,EACnC,qBAAqB,EACrB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,EAClB,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,+BAA+B,EAC/B,+BAA+B,EAC/B,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,iCAAiC,EACtC,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,KAAK,4BAA4B,EACjC,MAAM,uBAAuB,CAAC"}

package/dist/code-session/index.js

@@ -0,0 +1,20 @@
+/**
+ * @vibesdotdev/agent-execution/code-session
+ *
+ * The `agent/code-session` runtime kind (a persistent workspace bound to a
+ * repository + host target, extending the `agent/sandbox` one-shot contract) +
+ * its consumer (Bun-on-a-Host) impl, the session host-target model (WS2), the
+ * scope-aware resolver, and the session interface/types. The cloud impl lives
+ * in its provider-owned Integrations package.
+ */
+export { AgentCodeSessionDescriptorSchema, CodeSessionTrustLevelSchema, CodeSessionSurfaceSchema, CodeSessionRuntimeConfigSchema, CodeSessionBillingGateSchema, CODE_SESSION_MIN_TRUST_LEVEL, createAgentCodeSessionDescriptor } from "./agent-code-session.descriptor.js";
+export { enforceCodeSessionBillingGates, CodeSessionBillingDenied, CodeSessionBillingUnavailable } from "./billing/gates.js";
+export { SessionHostTargetSchema, SessionHostTargetKindSchema, CloudSessionHostTargetSchema, PlatformSessionHostTargetSchema, ProvisionedSessionHostTargetSchema, CODE_SESSION_HOST_CAPABILITY_LABEL, DEFAULT_SESSION_HOST_TARGET, isPlatformHostTarget, isCloudHostTarget, isProvisionedHostTarget } from "./host-target.js";
+export { codeSessionCredentialArgs, codeSessionCredentialLease } from "./git-credential.js";
+export { agentCodeSessionKind } from "./agent-code-session.kind.js";
+export { default as consumerCodeSessionDescriptor } from "./agent-code-session.consumer.descriptor.js";
+export { agentCodeSessionPlugin, default } from "./agent-code-session.plugin.js";
+export { resolveCodeSession } from "./client/resolve.js";
+export { BackgroundProcessInfoSchema, BackgroundProcessOutputSchema, BackgroundProcessReadInputSchema, BackgroundProcessWaitInputSchema, CodeSessionCloneCredentialSchema, CodeSessionCreateOrGetInputSchema, CodeSessionHandleSchema, CodeSessionInitializeInputSchema, CodeSessionOperationCleanupSchema, CodeSessionOperationConfigurationSchema, CodeSessionOperationIdSchema, CodeSessionOperationStageSchema, ExposePortInputSchema, ExposePortResultSchema, GitApplyInputSchema, GitApplyResultSchema, GitCommitInputSchema, GitCommitOptionsSchema, GitCommitResultSchema, GitPushInputSchema, GitStatusResultSchema, PatchFileInputSchema, PersistedCodeSessionOperationSchema, RunCommandInputSchema, RunCommandResultSchema, codeSessionOperationFingerprint, codeSessionOperationKey, parseCodeSessionCreateOrGetInput, parseCodeSessionId, parseCodeSessionInitializeInput, parseCodeSessionPath, parseCodeSessionText, parseExposePortInput, parseGitApplyInput, parseGitCommitInput, parseGitCommitOptions, parseGitPushInput, parsePatchFileInput, parseProcessId, parseBackgroundProcessReadInput, parseBackgroundProcessWaitInput, parseProcessSignal, parsePushCredentialResolver, parseRunCommandInput, parseWriteFileInput } from "./interfaces/code-session.js";
+export { CODE_SESSION_METADATA_FILENAME, parseCodeSessionMetadata, serializeCodeSessionMetadata } from "./session-metadata.js";
+//# sourceMappingURL=index.js.map

package/dist/code-session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/code-session/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACN,gCAAgC,EAChC,2BAA2B,EAC3B,wBAAwB,EACxB,8BAA8B,EAC9B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAMhC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACN,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAE7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACN,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,kCAAkC,EAClC,kCAAkC,EAClC,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EAMvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAkC,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EACN,2BAA2B,EAC3B,6BAA6B,EAC7B,gCAAgC,EAChC,gCAAgC,EAChC,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,gCAAgC,EAChC,iCAAiC,EACjC,uCAAuC,EACvC,4BAA4B,EAC5B,+BAA+B,EAC/B,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,mCAAmC,EACnC,qBAAqB,EACrB,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,EAClB,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,+BAA+B,EAC/B,+BAA+B,EAC/B,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EA0BnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAE5B,MAAM,uBAAuB,CAAC"}