@vibesdotdev/agent-execution 0.0.0-stage → 1.0.0-rc.1

package/dist/code-session/remote-setup-custody.js

@@ -0,0 +1,78 @@
+/**
+ * Per-runtime custody of in-flight remote process setups (consumer code session).
+ *
+ * A remote spawn is owned from dispatch until its handle is delivered or its
+ * cancellation cleanup settles (`acquireWireProcess`). The consumer plugin's
+ * `onDispose` drains this custody: it cancels every in-flight setup and refuses
+ * new work. It never waits for the remote side (no bounded-wait port exists
+ * before RC07, C13) and never deletes an unresolved record: a setup whose cleanup
+ * is not confirmed at disposal fails disposal, typed, while its late-result
+ * observer stays attached so a late port is still killed once and observed.
+ */
+import { CapabilityError, rootIdentityOf } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient, RuntimeClientDescriptorSchema, tryGetVibesClient } from '@vibesdotdev/kernel/client';
+export class RemoteSetupCustody {
+    pending = new Set();
+    unresolved = new Set();
+    disposed = false;
+    /** Refuse new remote work once the owning runtime is disposing. */
+    admit() {
+        if (this.disposed) {
+            throw new CapabilityError('The code session runtime is disposed; no new remote process may start', 'UNAVAILABLE', {
+                reason: 'code-session-disposed', retryable: false
+            });
+        }
+    }
+    /** Retain `acquisition` until it is terminal; only confirmed outcomes release it. */
+    retain(acquisition) {
+        this.admit();
+        this.pending.add(acquisition);
+        void acquisition.settled.then(({ outcome }) => {
+            this.pending.delete(acquisition);
+            if (outcome === 'delivered' || outcome === 'exited')
+                this.unresolved.delete(acquisition);
+            else
+                this.unresolved.add(acquisition);
+        });
+        return acquisition;
+    }
+    /** Cancel every in-flight setup; fail typed while any cleanup is unconfirmed. */
+    dispose() {
+        this.disposed = true;
+        for (const acquisition of this.pending)
+            acquisition.cancel();
+        const open = this.pending.size + this.unresolved.size;
+        if (open > 0) {
+            throw new CapabilityError('Remote process setup cleanup is unconfirmed at disposal', 'UNAVAILABLE', {
+                reason: 'code-session-cleanup-unconfirmed', retryable: false, details: { unconfirmed: open }
+            });
+        }
+    }
+}
+export const remoteSetupCustodyDescriptor = RuntimeClientDescriptorSchema.parse({
+    id: 'code-session-custody', kind: 'runtime/client', name: 'Code Session Remote Setup Custody'
+});
+/** The kernel owns this client and drains its acquisitions at disposal. */
+export class RemoteSetupCustodyClient extends BaseRuntimeClient {
+    custody = new RemoteSetupCustody();
+    onDispose() {
+        this.custody.dispose();
+    }
+}
+/** Synchronous access after the consumer plugin has activated the client. */
+export function remoteSetupCustody(runtime) {
+    if (!rootIdentityOf(runtime)) {
+        throw new CapabilityError('Remote setup custody belongs to a runtime the kernel constructed or viewed.', 'INVALID_INPUT', {
+            reason: 'code-session-runtime-unidentified', retryable: false
+        });
+    }
+    const client = tryGetVibesClient(remoteSetupCustodyDescriptor.id, runtime);
+    if (!client) {
+        throw new CapabilityError('The code session runtime custody is unavailable.', 'UNAVAILABLE', {
+            reason: 'code-session-disposed', retryable: false
+        });
+    }
+    return client.custody;
+}
+export default RemoteSetupCustodyClient;
+//# sourceMappingURL=remote-setup-custody.js.map

package/dist/code-session/remote-setup-custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-setup-custody.js","sourceRoot":"","sources":["../../src/code-session/remote-setup-custody.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAmB,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGjH,MAAM,OAAO,kBAAkB;IACb,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxD,QAAQ,GAAG,KAAK,CAAC;IAEzB,mEAAmE;IACnE,KAAK;QACJ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,uEAAuE,EAAE,aAAa,EAAE;gBACjH,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,KAAK;aACjD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,qFAAqF;IACrF,MAAM,CAAC,WAAmC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9B,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAA6B,EAAE,EAAE;YACxE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjC,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,QAAQ;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;;gBACpF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACpB,CAAC;IAED,iFAAiF;IACjF,OAAO;QACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,OAAO;YAAE,WAAW,CAAC,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACtD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CAAC,yDAAyD,EAAE,aAAa,EAAE;gBACnG,MAAM,EAAE,kCAAkC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;aAC5F,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD;AAGD,MAAM,CAAC,MAAM,4BAA4B,GAAG,6BAA6B,CAAC,KAAK,CAAC;IAC/E,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,mCAAmC;CAC7F,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,OAAO,wBAAyB,SAAQ,iBAAiB;IACrD,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEzB,SAAS;QAC3B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;CACD;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IACrD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,6EAA6E,EAAE,eAAe,EAAE;YACzH,MAAM,EAAE,mCAAmC,EAAE,SAAS,EAAE,KAAK;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAA2B,4BAA4B,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,kDAAkD,EAAE,aAAa,EAAE;YAC5F,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,KAAK;SACjD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,eAAe,wBAAwB,CAAC"}

package/dist/code-session/remote-workspace-fs.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Remote workspace filesystem (UNIT-B3 / D-DAEMON-CLIENT).
+ *
+ * A `{ kind:'host', hostId }` code session lives on a REMOTE fleet host. Its
+ * workspace file operations must reach that host's `filesystem/adapter` over the
+ * `runtime/rpc` wire (the fleet daemon proxies the kind — see
+ * `fleet-daemon/src/daemon-root.ts` `resolveKind`), mirroring A1's `execution()`
+ * remote branch.
+ *
+ * THE PATH-UTILITY SPLIT. `FileSystemAdapterInterface` mixes async I/O (`readFile`,
+ * `writeFile`, `list`, …) with SYNCHRONOUS path math (`join`, `dirname`,
+ * `normalize`, `resolve`, …). The async surface routes over the wire (each call is
+ * an `invoke`), but the sync path utilities CANNOT: an `invoke` is async, so a
+ * proxied `join` would return a `Promise`, breaking `resolveInWorkspace`'s
+ * synchronous guard. The path math is PURE POSIX string computation, identical on
+ * every host, so it runs LOCALLY here (`node:path/posix`) — the workspace paths a
+ * fleet host uses are POSIX. Only the async I/O crosses the wire.
+ *
+ * THE WATCH STREAM (UNIT-A8). `watch(path, callback)` is a LIVE change-callback —
+ * it has no inline wire representation, so it rides the rpc `stream` verb, the SAME
+ * wire the PTY byte channel uses. `io.watch(path)` opens a host-side watch and
+ * returns a handle; the consumer opens its {@link REMOTE_FILESYSTEM_WATCH_CHANNEL}
+ * stream, decodes each change event, and invokes the handler; the returned
+ * unsubscribe closes the stream, which releases the host watch (fleet-daemon
+ * `bindExecutionChannel`). No fs op degrades or throws "unsupported remote".
+ */
+import * as z from 'zod/v4';
+import { type FileEncoding, type FileSystemAdapterDescriptor, type FileSystemAdapterInterface, type FileSystemEntry, type FileSystemStat } from '@vibesdotdev/filesystem';
+import { type FileContentWire, type FileReadWireResult, type FileObservationWireResult, type ConditionalWriteWireResult } from '@vibesdotdev/filesystem/wire';
+/**
+ * The ASYNC I/O surface a remote host's `filesystem/adapter` exposes over the
+ * fleet wire. Exactly the methods the fleet daemon proxies (path utilities are
+ * pure and run consumer-side, so they are NOT part of this wire surface). Matches
+ * `FileSystemAdapterInterface`'s async members so the resolved wire proxy satisfies it.
+ */
+export interface RemoteFileSystemIO {
+    /** Optional owner metadata; older peers expose only the conservative legacy I/O contract. */
+    describe?(): Promise<FileSystemAdapterDescriptor>;
+    observeFile?(path: string): Promise<FileObservationWireResult>;
+    readFileObserved?(...args: Parameters<NonNullable<FileSystemAdapterInterface['readFileObserved']>>): Promise<FileReadWireResult>;
+    readFileVersioned?(...args: Parameters<NonNullable<FileSystemAdapterInterface['readFileVersioned']>>): Promise<FileReadWireResult>;
+    writeFileConditional?(path: string, data: number[], options: Parameters<NonNullable<FileSystemAdapterInterface['writeFileConditional']>>[2]): Promise<ConditionalWriteWireResult>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<FileSystemStat>;
+    readFile(path: string, encoding?: FileEncoding): Promise<FileContentWire>;
+    writeFile(path: string, data: FileContentWire, options?: FileEncoding | {
+        encoding?: FileEncoding;
+    }): Promise<void>;
+    list(path: string): Promise<FileSystemEntry[]>;
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    remove(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    copy(source: string, destination: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    glob(pattern: string, options?: {
+        cwd?: string;
+        absolute?: boolean;
+    }): Promise<string[]>;
+    /**
+     * Open a host-side watch on `path` (UNIT-A8). Returns a stream-capable handle;
+     * change events ride its {@link REMOTE_FILESYSTEM_WATCH_CHANNEL} stream (a live
+     * callback has no inline wire representation). Distinct from the local
+     * `watch(path, callback)`: the callback is reconstructed consumer-side.
+     */
+    watch(path: string): Promise<RemoteWatchHandle>;
+}
+/** Read a remote runtime result exactly once and translate hostile proxy reads to the host refusal. */
+export declare function parseRemoteFileSystemIO<TInput>(value: TInput, hostId: string): RemoteFileSystemIO;
+/**
+ * The stream channel a proxied `filesystem/adapter` watch's change events ride.
+ * MUST match the daemon-side `WATCH_CHANNEL` (fleet-daemon `execution-listen-policy.ts`);
+ * the two packages are wire-independent, so they agree by convention — exactly as
+ * {@link REMOTE_FILESYSTEM_WIRE_METHODS} does with the daemon's I/O surface.
+ */
+export declare const REMOTE_FILESYSTEM_WATCH_CHANNEL = "fs-watch";
+/** One complete filesystem watch event frame carried by the remote stream. */
+export declare const RemoteFileSystemWatchEventSchema: z.ZodObject<{
+    eventType: z.ZodString;
+    filename: z.ZodString;
+}, z.core.$strict>;
+/** A raw byte stream channel opened on a remote ref (the rpc `stream` verb). */
+interface RemoteStreamChannel {
+    onData(handler: (data: Uint8Array) => void): () => void;
+    write(data: Uint8Array): void;
+    close(): void;
+}
+/**
+ * The host-side watch handle `io.watch(path)` resolves to: a stream-capable ref
+ * whose {@link REMOTE_FILESYSTEM_WATCH_CHANNEL} carries change events. `close()`
+ * releases the host watch; disposing frees the owner-side ref entry.
+ */
+export interface RemoteWatchHandle {
+    __openStream(channel: string): Promise<RemoteStreamChannel>;
+    close(): Promise<void>;
+    [Symbol.dispose]?(): void;
+}
+/**
+ * The wire method surface the daemon exposes for a proxied `filesystem/adapter`.
+ * Shared so the daemon-side `resolveKind` and this consumer-side wrapper agree on
+ * exactly one async contract. Sync path utilities are deliberately absent.
+ */
+export declare const REMOTE_FILESYSTEM_WIRE_METHODS: readonly (keyof RemoteFileSystemIO)[];
+/** Read the selected owner's declared guarantees before constructing its local wire projection. */
+export declare function resolveRemoteWorkspaceFileSystem(io: RemoteFileSystemIO, hostId: string): Promise<FileSystemAdapterInterface>;
+/**
+ * Wrap a remote host's `filesystem/adapter` I/O surface as a full
+ * {@link FileSystemAdapterInterface}: async I/O delegates to `io` over the wire;
+ * path utilities run locally (pure POSIX). `hostId` remains part of the public
+ * constructor seam because the binding selects the remote host before handing
+ * this wrapper its resolved I/O surface.
+ */
+export declare function createRemoteWorkspaceFileSystem(io: RemoteFileSystemIO, _hostId: string, description?: FileSystemAdapterDescriptor): FileSystemAdapterInterface;
+export {};
+//# sourceMappingURL=remote-workspace-fs.d.ts.map

package/dist/code-session/remote-workspace-fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-workspace-fs.d.ts","sourceRoot":"","sources":["../../src/code-session/remote-workspace-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAGN,KAAK,YAAY,EACjB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,cAAc,EASnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGN,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,KAAK,yBAAyB,EAC7E,KAAK,0BAA0B,EAC/B,MAAM,8BAA8B,CAAC;AAQtC;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,6FAA6F;IAC7F,QAAQ,CAAC,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAClD,WAAW,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC/D,gBAAgB,CAAC,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjI,iBAAiB,CAAC,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnI,oBAAoB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAClL,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1E,SAAS,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,eAAe,EACrB,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,QAAQ,CAAC,EAAE,YAAY,CAAA;KAAE,GAClD,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF;;;;;OAKG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAChD;AA4BD,uGAAuG;AACvG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAmBjG;AAED;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,aAAa,CAAC;AAE1D,8EAA8E;AAC9E,eAAO,MAAM,gCAAgC;;;kBAKnC,CAAC;AAmBX,gFAAgF;AAChF,UAAU,mBAAmB;IAC5B,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACxD,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAC9B,KAAK,IAAI,IAAI,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,CAAC,MAAM,kBAAkB,CAAC,EAY/E,CAAC;AAeF,mGAAmG;AACnG,wBAAsB,gCAAgC,CAAC,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAQlI;AA2BD;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,kBAAkB,EACtB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,2BAA2B,GACvC,0BAA0B,CA8E5B"}

package/dist/code-session/remote-workspace-fs.js

@@ -0,0 +1,257 @@
+/**
+ * Remote workspace filesystem (UNIT-B3 / D-DAEMON-CLIENT).
+ *
+ * A `{ kind:'host', hostId }` code session lives on a REMOTE fleet host. Its
+ * workspace file operations must reach that host's `filesystem/adapter` over the
+ * `runtime/rpc` wire (the fleet daemon proxies the kind — see
+ * `fleet-daemon/src/daemon-root.ts` `resolveKind`), mirroring A1's `execution()`
+ * remote branch.
+ *
+ * THE PATH-UTILITY SPLIT. `FileSystemAdapterInterface` mixes async I/O (`readFile`,
+ * `writeFile`, `list`, …) with SYNCHRONOUS path math (`join`, `dirname`,
+ * `normalize`, `resolve`, …). The async surface routes over the wire (each call is
+ * an `invoke`), but the sync path utilities CANNOT: an `invoke` is async, so a
+ * proxied `join` would return a `Promise`, breaking `resolveInWorkspace`'s
+ * synchronous guard. The path math is PURE POSIX string computation, identical on
+ * every host, so it runs LOCALLY here (`node:path/posix`) — the workspace paths a
+ * fleet host uses are POSIX. Only the async I/O crosses the wire.
+ *
+ * THE WATCH STREAM (UNIT-A8). `watch(path, callback)` is a LIVE change-callback —
+ * it has no inline wire representation, so it rides the rpc `stream` verb, the SAME
+ * wire the PTY byte channel uses. `io.watch(path)` opens a host-side watch and
+ * returns a handle; the consumer opens its {@link REMOTE_FILESYSTEM_WATCH_CHANNEL}
+ * stream, decodes each change event, and invokes the handler; the returned
+ * unsubscribe closes the stream, which releases the host watch (fleet-daemon
+ * `bindExecutionChannel`). No fs op degrades or throws "unsupported remote".
+ */
+import * as z from 'zod/v4';
+import { FileSystemAdapterDescriptorSchema, VersionedReadResultSchema, resolve, dirname, basename, join, relative, isAbsolute, normalize, extname } from '@vibesdotdev/filesystem';
+import { encodeFileContent, encodeFileBytes, decodeFileContent, decodeFileRead, decodeFileObservation, decodeConditionalWrite, FileTextWireSchema } from '@vibesdotdev/filesystem/wire';
+import { CapabilityError, CaughtFailureSchema, isCapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+const RemoteFileSystemIOContractSchema = z
+    .object({
+    describe: z.function().optional(),
+    observeFile: z.function().optional(),
+    readFileObserved: z.function().optional(),
+    readFileVersioned: z.function().optional(),
+    writeFileConditional: z.function().optional(),
+    exists: z.function(),
+    stat: z.function(),
+    readFile: z.function(),
+    writeFile: z.function(),
+    list: z.function(),
+    mkdir: z.function(),
+    remove: z.function(),
+    rename: z.function(),
+    copy: z.function(),
+    glob: z.function(),
+    watch: z.function()
+})
+    .passthrough();
+/** Admit the exact live proxy object only after its complete wire method surface is present. */
+const RemoteFileSystemIOSchema = z.custom((value) => RemoteFileSystemIOContractSchema.safeParse(value).success);
+/** Read a remote runtime result exactly once and translate hostile proxy reads to the host refusal. */
+export function parseRemoteFileSystemIO(value, hostId) {
+    try {
+        const parsed = RemoteFileSystemIOSchema.safeParse(value);
+        if (!parsed.success) {
+            throw new CapabilityError('The remote host exposes no complete workspace filesystem capability.', 'UNAVAILABLE', {
+                reason: 'code-session-host-unavailable', retryable: false, details: { hostId }
+            });
+        }
+        return parsed.data;
+    }
+    catch (caught) {
+        const failure = CaughtFailureSchema.parse(caught);
+        if (isCapabilityError(failure))
+            throw failure;
+        throw new CapabilityError('The remote workspace filesystem contract could not be read.', 'UNAVAILABLE', {
+            reason: 'code-session-host-unavailable',
+            retryable: false,
+            details: { hostId },
+            cause: valueFreeFailure(failure)
+        });
+    }
+}
+/**
+ * The stream channel a proxied `filesystem/adapter` watch's change events ride.
+ * MUST match the daemon-side `WATCH_CHANNEL` (fleet-daemon `execution-listen-policy.ts`);
+ * the two packages are wire-independent, so they agree by convention — exactly as
+ * {@link REMOTE_FILESYSTEM_WIRE_METHODS} does with the daemon's I/O surface.
+ */
+export const REMOTE_FILESYSTEM_WATCH_CHANNEL = 'fs-watch';
+/** One complete filesystem watch event frame carried by the remote stream. */
+export const RemoteFileSystemWatchEventSchema = z
+    .object({
+    eventType: z.string().trim().min(1).max(64),
+    filename: z.string().max(4_096)
+})
+    .strict();
+function parseRemoteFileSystemWatchEvent(bytes, decoder) {
+    try {
+        return RemoteFileSystemWatchEventSchema.parse(JSON.parse(decoder.decode(bytes)));
+    }
+    catch (caught) {
+        return new CapabilityError('The remote filesystem watch emitted an invalid frame.', 'INTERNAL', {
+            reason: 'code-session-remote-watch-frame-invalid',
+            retryable: false,
+            cause: valueFreeFailure(CaughtFailureSchema.parse(caught))
+        });
+    }
+}
+/**
+ * The wire method surface the daemon exposes for a proxied `filesystem/adapter`.
+ * Shared so the daemon-side `resolveKind` and this consumer-side wrapper agree on
+ * exactly one async contract. Sync path utilities are deliberately absent.
+ */
+export const REMOTE_FILESYSTEM_WIRE_METHODS = [
+    'exists',
+    'stat',
+    'readFile',
+    'writeFile',
+    'list',
+    'mkdir',
+    'remove',
+    'rename',
+    'copy',
+    'glob',
+    'watch'
+];
+/** The synthetic descriptor for a remote fleet workspace adapter. */
+const REMOTE_DESCRIPTOR = FileSystemAdapterDescriptorSchema.parse({
+    id: 'filesystem-adapter-remote',
+    kind: 'filesystem/adapter',
+    name: 'Remote Fleet Workspace',
+    description: 'A fleet-host code-session workspace filesystem reached over the runtime/rpc wire (D-DAEMON-CLIENT). Async I/O crosses the wire; path math runs locally.',
+    protocols: ['file', 'directory'],
+    hardware: ['fleet-host'],
+    capabilities: ['read', 'write', 'list', 'stat', 'move', 'copy', 'glob', 'watch'],
+    supportsWatch: true
+});
+/** Read the selected owner's declared guarantees before constructing its local wire projection. */
+export async function resolveRemoteWorkspaceFileSystem(io, hostId) {
+    if (!io.describe)
+        return createRemoteWorkspaceFileSystem(io, hostId);
+    const description = FileSystemAdapterDescriptorSchema.safeParse(await io.describe());
+    if (!description.success)
+        throw new CapabilityError('The remote filesystem owner returned invalid descriptor metadata.', 'UNAVAILABLE', {
+            reason: 'remote-filesystem-descriptor-invalid', retryable: false, details: { hostId },
+            cause: valueFreeFailure(description.error)
+        });
+    return createRemoteWorkspaceFileSystem(io, hostId, description.data);
+}
+function remoteDescriptor(io, description) {
+    if (!description)
+        return REMOTE_DESCRIPTOR;
+    const descriptor = {
+        ...REMOTE_DESCRIPTOR,
+        capabilities: description.capabilities.filter(capability => REMOTE_DESCRIPTOR.capabilities.includes(capability)),
+        supportsWatch: description.supportsWatch,
+        supportsRecursive: description.supportsRecursive,
+        persistent: description.persistent
+    };
+    if (description.capabilities.includes('file-observation') && io.observeFile && io.readFileObserved) {
+        descriptor.capabilities.push('file-observation');
+    }
+    if (description.versionedFile && io.readFileVersioned) {
+        descriptor.capabilities.push('versioned-file');
+        descriptor.versionedFile = {
+            revisionScheme: description.versionedFile.revisionScheme,
+            revisionScope: description.versionedFile.revisionScope
+        };
+        if (io.writeFileConditional && description.versionedFile.conditionalWrite) {
+            descriptor.versionedFile.conditionalWrite = description.versionedFile.conditionalWrite;
+        }
+    }
+    return FileSystemAdapterDescriptorSchema.parse(descriptor);
+}
+/**
+ * Wrap a remote host's `filesystem/adapter` I/O surface as a full
+ * {@link FileSystemAdapterInterface}: async I/O delegates to `io` over the wire;
+ * path utilities run locally (pure POSIX). `hostId` remains part of the public
+ * constructor seam because the binding selects the remote host before handing
+ * this wrapper its resolved I/O surface.
+ */
+export function createRemoteWorkspaceFileSystem(io, _hostId, description) {
+    const observeFile = io.observeFile?.bind(io);
+    const readFileObserved = io.readFileObserved?.bind(io);
+    const readFileVersioned = io.readFileVersioned?.bind(io);
+    const writeFileConditional = io.writeFileConditional?.bind(io);
+    const requireBinaryWire = () => {
+        if (!io.describe)
+            throw new CapabilityError('This filesystem peer has no binary wire codec.', 'UNAVAILABLE', {
+                reason: 'remote-filesystem-binary-unavailable', retryable: false
+            });
+    };
+    return {
+        descriptor: remoteDescriptor(io, description),
+        // --- async I/O — routed over the fleet wire ---
+        exists: (path) => io.exists(path),
+        stat: (path) => io.stat(path),
+        readFile: async (path, encoding) => {
+            const content = await io.readFile(path, encoding);
+            if (!FileTextWireSchema.safeParse(content).success)
+                requireBinaryWire();
+            return decodeFileContent(content);
+        },
+        observeFile: observeFile ? async (...args) => decodeFileObservation(await observeFile(...args)) : undefined,
+        readFileObserved: readFileObserved ? async (...args) => decodeFileRead(await readFileObserved(...args)) : undefined,
+        readFileVersioned: readFileVersioned ? async (...args) => VersionedReadResultSchema.parse(decodeFileRead(await readFileVersioned(...args))) : undefined,
+        writeFileConditional: writeFileConditional ? async (path, data, options) => {
+            requireBinaryWire();
+            return decodeConditionalWrite(await writeFileConditional(path, encodeFileBytes(data), options));
+        } : undefined,
+        writeFile: async (path, data, options) => {
+            if (!FileTextWireSchema.safeParse(data).success)
+                requireBinaryWire();
+            await io.writeFile(path, encodeFileContent(data), options);
+        },
+        list: (path) => io.list(path),
+        mkdir: (path, options) => io.mkdir(path, options),
+        remove: (path, options) => io.remove(path, options),
+        rename: (oldPath, newPath) => io.rename(oldPath, newPath),
+        copy: (source, destination, options) => io.copy(source, destination, options),
+        glob: (pattern, options) => io.glob(pattern, options),
+        // A live change callback rides the rpc `stream` verb (UNIT-A8): open a
+        // host-side watch, subscribe to its change-event stream, and reconstruct the
+        // (eventType, filename) callback. The returned unsubscribe closes the stream,
+        // which releases the host watch (fleet-daemon bindExecutionChannel).
+        watch: async (path, callback) => {
+            const handle = await io.watch(path);
+            const channel = await handle.__openStream(REMOTE_FILESYSTEM_WATCH_CHANNEL);
+            const decoder = new TextDecoder();
+            let stopped = false;
+            let stopData;
+            const stop = () => {
+                if (stopped)
+                    return;
+                stopped = true;
+                stopData?.();
+                channel.close();
+                handle[Symbol.dispose]?.();
+            };
+            stopData = channel.onData((bytes) => {
+                if (stopped)
+                    return;
+                const event = parseRemoteFileSystemWatchEvent(bytes, decoder);
+                if ('eventType' in event)
+                    return callback(event.eventType, event.filename);
+                // FileSystemWatchCallback is the filesystem contract's failure channel.
+                // Close first so even a throwing subscriber cannot leave the remote watch live.
+                stop();
+                return callback('error', '', event);
+            });
+            return stop;
+        },
+        // --- pure POSIX path math — runs LOCALLY (host-independent), never the wire ---
+        resolve: (...segments) => resolve(...segments),
+        dirname: (path) => dirname(path),
+        basename: (path, ext) => basename(path, ext),
+        join: (...segments) => join(...segments),
+        relative: (from, to) => relative(from, to),
+        isAbsolute: (path) => isAbsolute(path),
+        normalize: (path) => normalize(path),
+        extname: (path) => extname(path)
+    };
+}
+//# sourceMappingURL=remote-workspace-fs.js.map

package/dist/code-session/remote-workspace-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-workspace-fs.js","sourceRoot":"","sources":["../../src/code-session/remote-workspace-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,iCAAiC,EACjC,yBAAyB,EAMzB,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,SAAS,EACT,OAAO,EACP,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACN,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EACrE,qBAAqB,EAAE,sBAAsB,EAAE,kBAAkB,EAGjE,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,MAAM,qBAAqB,CAAC;AAsC7B,MAAM,gCAAgC,GAAG,CAAC;KACxC,MAAM,CAAC;IACP,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,oBAAoB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnB,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB,gGAAgG;AAChG,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACpE,CAAC;AAEF,uGAAuG;AACvG,MAAM,UAAU,uBAAuB,CAAS,KAAa,EAAE,MAAc;IAC5E,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,sEAAsE,EAAE,aAAa,EAAE;gBAChH,MAAM,EAAE,+BAA+B,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;aAC9E,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,iBAAiB,CAAC,OAAO,CAAC;YAAE,MAAM,OAAO,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,6DAA6D,EAAE,aAAa,EAAE;YACvG,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,UAAU,CAAC;AAE1D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAIX,SAAS,+BAA+B,CACvC,KAAiB,EACjB,OAAoB;IAEpB,IAAI,CAAC;QACJ,OAAO,gCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QACjB,OAAO,IAAI,eAAe,CAAC,uDAAuD,EAAE,UAAU,EAAE;YAC/F,MAAM,EAAE,yCAAyC;YACjD,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SAC1D,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAoBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAA0C;IACpF,QAAQ;IACR,MAAM;IACN,UAAU;IACV,WAAW;IACX,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;CACP,CAAC;AAEF,qEAAqE;AACrE,MAAM,iBAAiB,GAAgC,iCAAiC,CAAC,KAAK,CAAC;IAC9F,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACV,yJAAyJ;IAC1J,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;IAChC,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;IAChF,aAAa,EAAE,IAAI;CACnB,CAAC,CAAC;AAEH,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EAAsB,EAAE,MAAc;IAC5F,IAAI,CAAC,EAAE,CAAC,QAAQ;QAAE,OAAO,+BAA+B,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,iCAAiC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,WAAW,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,mEAAmE,EAAE,aAAa,EAAE;YACvI,MAAM,EAAE,sCAAsC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;YACrF,KAAK,EAAE,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC;SAC1C,CAAC,CAAC;IACH,OAAO,+BAA+B,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAsB,EAAE,WAAyC;IAC1F,IAAI,CAAC,WAAW;QAAE,OAAO,iBAAiB,CAAC;IAC3C,MAAM,UAAU,GAAgC;QAC/C,GAAG,iBAAiB;QACpB,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChH,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,UAAU,EAAE,WAAW,CAAC,UAAU;KAClC,CAAC;IACF,IAAI,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACpG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;QACvD,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/C,UAAU,CAAC,aAAa,GAAG;YAC1B,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,cAAc;YACxD,aAAa,EAAE,WAAW,CAAC,aAAa,CAAC,aAAa;SACtD,CAAC;QACF,IAAI,EAAE,CAAC,oBAAoB,IAAI,WAAW,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;YAC3E,UAAU,CAAC,aAAa,CAAC,gBAAgB,GAAG,WAAW,CAAC,aAAa,CAAC,gBAAgB,CAAC;QACxF,CAAC;IACF,CAAC;IACD,OAAO,iCAAiC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC9C,EAAsB,EACtB,OAAe,EACf,WAAyC;IAEzC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,EAAE,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,iBAAiB,GAAG,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,oBAAoB,GAAG,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACpC,IAAI,CAAC,EAAE,CAAC,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE,aAAa,EAAE;gBAC5G,MAAM,EAAE,sCAAsC,EAAE,SAAS,EAAE,KAAK;aAChE,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACN,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC;QAE7C,iDAAiD;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO;gBAAE,iBAAiB,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3G,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACnH,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACvJ,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC1E,iBAAiB,EAAE,CAAC;YACpB,OAAO,sBAAsB,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YACxC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO;gBAAE,iBAAiB,EAAE,CAAC;YACrE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;QACnD,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;QACzD,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC;QAC7E,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;QAErD,uEAAuE;QACvE,6EAA6E;QAC7E,8EAA8E;QAC9E,qEAAqE;QACrE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,QAAkC,CAAC;YACvC,MAAM,IAAI,GAAG,GAAG,EAAE;gBACjB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,QAAQ,EAAE,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAC5B,CAAC,CAAC;YACF,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnC,IAAI,OAAO;oBAAE,OAAO;gBACpB,MAAM,KAAK,GAAG,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC9D,IAAI,WAAW,IAAI,KAAK;oBAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC3E,wEAAwE;gBACxE,gFAAgF;gBAChF,IAAI,EAAE,CAAC;gBACP,OAAO,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;QAED,iFAAiF;QACjF,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;QAC9C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;QAC5C,IAAI,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACxC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;QACpC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAChC,CAAC;AACH,CAAC"}

package/dist/code-session/session-metadata.d.ts

@@ -0,0 +1,40 @@
+import * as z from 'zod/v4';
+export declare const CODE_SESSION_METADATA_FILENAME = ".vibes-code-session.json";
+export declare const PersistedCodeSessionMetadataSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    operationId: z.ZodOptional<z.ZodString>;
+    operationFingerprint: z.ZodOptional<z.ZodString>;
+    workspacePath: z.ZodOptional<z.ZodString>;
+    workspaceOwnership: z.ZodOptional<z.ZodEnum<{
+        owned: "owned";
+        borrowed: "borrowed";
+    }>>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    hostTarget: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"cloud">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"host">;
+        hostId: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"provisioned">;
+        adapter: z.ZodString;
+        region: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodString>;
+        image: z.ZodOptional<z.ZodString>;
+        repo: z.ZodOptional<z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        ttlHours: z.ZodOptional<z.ZodNumber>;
+        providerConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>], "kind">;
+    repositoryId: z.ZodOptional<z.ZodString>;
+    cloneUrl: z.ZodOptional<z.ZodString>;
+    ephemeral: z.ZodOptional<z.ZodBoolean>;
+    checkoutRef: z.ZodOptional<z.ZodString>;
+    exposedPorts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    previewUrl: z.ZodOptional<z.ZodString>;
+    pausedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PersistedCodeSessionMetadata = z.infer<typeof PersistedCodeSessionMetadataSchema>;
+export declare function serializeCodeSessionMetadata(metadata: PersistedCodeSessionMetadata): string;
+export declare function parseCodeSessionMetadata(value: string | null | undefined): PersistedCodeSessionMetadata | null;
+//# sourceMappingURL=session-metadata.d.ts.map

package/dist/code-session/session-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-metadata.d.ts","sourceRoot":"","sources":["../../src/code-session/session-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,eAAO,MAAM,8BAA8B,6BAA6B,CAAC;AAEzE,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0B7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAU9F,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,4BAA4B,GAAG,MAAM,CAI3F;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,4BAA4B,GAAG,IAAI,CAkBrC"}

package/dist/code-session/session-metadata.js

@@ -0,0 +1,69 @@
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { SessionHostTargetSchema } from "./host-target.js";
+export const CODE_SESSION_METADATA_FILENAME = '.vibes-code-session.json';
+export const PersistedCodeSessionMetadataSchema = z.object({
+    sessionId: z.string().trim().min(1),
+    /** Stable create operation that owns this allocation, when supplied. */
+    operationId: z.string().trim().min(1).optional(),
+    /** Hash of the immutable, non-secret initialization configuration. */
+    operationFingerprint: z.string().trim().min(1).optional(),
+    /** Managed location for borrowed workspaces; owned sessions infer this from their session root. */
+    workspacePath: z.string().trim().min(1).optional(),
+    workspaceOwnership: z.enum(['owned', 'borrowed']).optional(),
+    createdAt: z.string().trim().min(1).optional(),
+    hostTarget: SessionHostTargetSchema,
+    repositoryId: z.string().optional(),
+    cloneUrl: z.string().optional(),
+    ephemeral: z.boolean().optional(),
+    checkoutRef: z.string().optional(),
+    exposedPorts: z.array(z.string()).optional(),
+    previewUrl: z.string().optional(),
+    /** ISO time the session was paused; absent when running. */
+    pausedAt: z.string().optional()
+}).superRefine((metadata, context) => {
+    if ((metadata.operationId === undefined) === (metadata.operationFingerprint === undefined))
+        return;
+    context.addIssue({
+        code: 'custom',
+        message: 'operationId and operationFingerprint must be present together',
+        path: ['operationId']
+    });
+});
+function metadataInvalid(failureClass) {
+    return new CapabilityError('Code-session metadata is invalid.', 'INVALID_INPUT', {
+        reason: 'code-session-metadata-invalid',
+        retryable: false,
+        details: { failureClass }
+    });
+}
+export function serializeCodeSessionMetadata(metadata) {
+    const parsed = PersistedCodeSessionMetadataSchema.safeParse(metadata);
+    if (!parsed.success)
+        throw metadataInvalid('ZodError');
+    return JSON.stringify(parsed.data, null, 2);
+}
+export function parseCodeSessionMetadata(value) {
+    if (value === null || value === undefined)
+        return null;
+    let raw;
+    try {
+        raw = JsonValueSchema.parse(JSON.parse(value));
+    }
+    catch (caught) {
+        const failure = CaughtFailureSchema.parse(caught);
+        const facts = valueFreeFailure(failure);
+        throw new CapabilityError('Code-session metadata is not valid JSON.', 'INVALID_INPUT', {
+            reason: 'code-session-metadata-invalid',
+            retryable: false,
+            details: { failureClass: facts.name },
+            cause: facts
+        });
+    }
+    const parsed = PersistedCodeSessionMetadataSchema.safeParse(raw);
+    if (!parsed.success)
+        throw metadataInvalid('ZodError');
+    return parsed.data;
+}
+//# sourceMappingURL=session-metadata.js.map

package/dist/code-session/session-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-metadata.js","sourceRoot":"","sources":["../../src/code-session/session-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAEzE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,wEAAwE;IACxE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,sEAAsE;IACtE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,mGAAmG;IACnG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,uBAAuB;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,4DAA4D;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,CAAC;QAAE,OAAO;IACnG,OAAO,CAAC,QAAQ,CAAC;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+DAA+D;QACxE,IAAI,EAAE,CAAC,aAAa,CAAC;KACrB,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AAIH,SAAS,eAAe,CAAC,YAAoB;IAC5C,OAAO,IAAI,eAAe,CAAC,mCAAmC,EAAE,eAAe,EAAE;QAChF,MAAM,EAAE,+BAA+B;QACvC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,YAAY,EAAE;KACzB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAsC;IAClF,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,KAAgC;IAEhC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACJ,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE,eAAe,EAAE;YACtF,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE;YACrC,KAAK,EAAE,KAAK;SACZ,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC"}