@vibesdotdev/agent-execution 0.0.0-stage → 1.0.0-rc.2

package/dist/code-session-relay/agent-code-session-relay.descriptor.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Fleet-host `agent/code-session` descriptor instance.
+ *
+ * Backed by an enrolled machine's fleet daemon, reached through the HostRelay
+ * broker (the daemon dials OUT to the broker; NAT'd machines need no inbound
+ * path). Every operation is a `runtime/execution` invoke over the relay wire —
+ * the same L5-gated pipeline the daemon applies to every remote peer.
+ *
+ * `hardware: ['cloud']` — the IMPL runs in a cloud worker (it is the broker
+ * side of the wire); the SESSION runs on the machine, which is what
+ * `hostTarget: { kind: 'host' }` advertises to `resolveCodeSession`. The
+ * `hostId: 'relay'` here is a documentation placeholder exactly like the
+ * consumer descriptor's `'local'` — the REAL hostId arrives per-session via
+ * `CodeSessionInitializeInput.hostTarget` (validated + owner-checked by the
+ * platform route before the impl is ever reached).
+ *
+ * `trustLevel: '2b'` — writable-FS tier, same as the other two impls: the
+ * session edits a cloned repo on the owner's machine.
+ */
+declare const relayCodeSessionDescriptor: {
+    id: string;
+    kind: "agent/code-session";
+    name: string;
+    priority: number;
+    surfaces: ("agent" | "worker" | "direct")[];
+    timeoutMs: number;
+    memoryLimit: number;
+    trustLevel: "0" | "1" | "3" | "2a" | "2b";
+    os: ("linux" | "macos" | "windows")[];
+    arch: ("x64" | "arm64")[];
+    runtimeConfig: {
+        environmentName?: string | undefined;
+        node?: string | undefined;
+        bun?: string | undefined;
+        setupScript?: string | undefined;
+    };
+    exposedPorts: string[];
+    allowInteractiveShell: boolean;
+    billingGates: {
+        feature: string;
+        deniedMessage: string;
+    }[];
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    config?: unknown;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    hostTarget?: {
+        kind: "cloud";
+    } | {
+        kind: "host";
+        hostId: string;
+    } | {
+        kind: "provisioned";
+        adapter: string;
+        region?: string | undefined;
+        size?: string | undefined;
+        image?: string | undefined;
+        repo?: string | undefined;
+        branch?: string | undefined;
+        ttlHours?: number | undefined;
+        providerConfig?: Record<string, unknown> | undefined;
+    } | undefined;
+};
+export default relayCodeSessionDescriptor;
+//# sourceMappingURL=agent-code-session-relay.descriptor.d.ts.map

package/dist/code-session-relay/agent-code-session-relay.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-code-session-relay.descriptor.d.ts","sourceRoot":"","sources":["../../src/code-session-relay/agent-code-session-relay.descriptor.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,QAAA,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgB9B,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/code-session-relay/agent-code-session-relay.descriptor.js

@@ -0,0 +1,38 @@
+import { createAgentCodeSessionDescriptor } from '@vibesdotdev/agent-execution/code-session/descriptor';
+/**
+ * Fleet-host `agent/code-session` descriptor instance.
+ *
+ * Backed by an enrolled machine's fleet daemon, reached through the HostRelay
+ * broker (the daemon dials OUT to the broker; NAT'd machines need no inbound
+ * path). Every operation is a `runtime/execution` invoke over the relay wire —
+ * the same L5-gated pipeline the daemon applies to every remote peer.
+ *
+ * `hardware: ['cloud']` — the IMPL runs in a cloud worker (it is the broker
+ * side of the wire); the SESSION runs on the machine, which is what
+ * `hostTarget: { kind: 'host' }` advertises to `resolveCodeSession`. The
+ * `hostId: 'relay'` here is a documentation placeholder exactly like the
+ * consumer descriptor's `'local'` — the REAL hostId arrives per-session via
+ * `CodeSessionInitializeInput.hostTarget` (validated + owner-checked by the
+ * platform route before the impl is ever reached).
+ *
+ * `trustLevel: '2b'` — writable-FS tier, same as the other two impls: the
+ * session edits a cloned repo on the owner's machine.
+ */
+const relayCodeSessionDescriptor = createAgentCodeSessionDescriptor({
+    id: 'agent-code-session-relay',
+    name: 'Agent Code Session — Fleet Host (relay)',
+    description: 'Runs a persistent code session on an enrolled fleet machine over the HostRelay broker. Clones into the machine\'s declared session root (${runtime.localEnvironment.home}/code-sessions) and executes commands via the daemon-exposed runtime/execution kind (L5-gated).',
+    hardware: ['cloud'],
+    os: ['linux'],
+    arch: ['x64'],
+    priority: 100,
+    timeoutMs: 300_000,
+    memoryLimit: 1024,
+    trustLevel: '2b',
+    hostTarget: { kind: 'host', hostId: 'relay' },
+    runtimeConfig: {},
+    exposedPorts: [],
+    allowInteractiveShell: false
+});
+export default relayCodeSessionDescriptor;
+//# sourceMappingURL=agent-code-session-relay.descriptor.js.map

package/dist/code-session-relay/agent-code-session-relay.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-code-session-relay.descriptor.js","sourceRoot":"","sources":["../../src/code-session-relay/agent-code-session-relay.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sDAAsD,CAAC;AAExG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;IACnE,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,yCAAyC;IAC/C,WAAW,EACV,0QAA0Q;IAC3Q,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,EAAE,EAAE,CAAC,OAAO,CAAC;IACb,IAAI,EAAE,CAAC,KAAK,CAAC;IACb,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,OAAO;IAClB,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAC7C,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,qBAAqB,EAAE,KAAK;CAC5B,CAAC,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/code-session-relay/agent-code-session-relay.impl.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Fleet-host Agent Code Session — relay impl.
+ *
+ * Implements `CodeSessionInterface` against an enrolled machine's fleet daemon,
+ * reached through the HostRelay broker: `connectRelay` → `wireConsumer` → the
+ * daemon root's `runtime/execution` kind (the daemon's `LocalExecution`).
+ *
+ * Operations use the existing invoke/stream relay wire and pass the daemon's
+ * L5 pipeline (authz + friction) — the machine grants remote execution only
+ * when its daemon runs with `--labels sandbox:code-execution`, and the platform
+ * route has already owner-checked + label-checked the host before this impl is
+ * resolved.
+ *
+ * Every dial acts for the invocation's user (`runtime.scope.actor.userId`) and
+ * names that user to the broker on every leg, which authorizes the user against
+ * the host. Dials are cached per host AND user, so one user never rides another
+ * user's authorized connection. An invocation without a user fails with
+ * `AUTH_REQUIRED` before anything is dialed. The reverse leg (callbacks) is deliberately NOT wired: v1 needs no
+ * daemon→consumer invokes, so no reverse SSE channel is ever opened.
+ *
+ * workerd-safe: imports ONLY Node-free subpaths — the interface/descriptor from
+ * `@vibesdotdev/agent-execution/code-session`, the consumer transport from
+ * `@vibesdotdev/kernel-rpc(-relay)`, and the runner-agnostic git core from
+ * `@vibesdotdev/git-operations/core`. Never the Node-only consumer impl.
+ *
+ * Session ids are self-describing: `rly.<hostId>.<random>`. hostIds are
+ * platform-validated kebab-case (`[a-z0-9-]{2,64}` — never a dot), so parsing
+ * the machine back out of a sessionId is unambiguous. That makes `attach`/
+ * `runCommand`/etc. work from a fresh isolate with no session→host lookup —
+ * the same move the cloudflare impl makes by using the sessionId as the
+ * Sandbox DO name.
+ *
+ * Workspace: `<activeHome>/code-sessions/<sessionId>` on the receiving machine,
+ * using that runtime's canonical path roots. POSIX hosts only for
+ * now (commands run via the daemon's `sh`/`git`/`base64`).
+ */
+import { type AgentCodeSessionDescriptor } from '@vibesdotdev/agent-execution/code-session/descriptor';
+import type { CodeSessionInterface, CodeSessionInitializeInput, CodeSessionCreateOrGetInput, CodeSessionHandle, RunCommandInput, RunCommandResult, PatchFileInput, GitApplyInput, GitApplyResult, GitStatusResult, GitCommitInput, GitCommitOptions, GitCommitResult, GitPushInput, ExposePortInput, ExposePortResult, PushCredentialResolver } from '@vibesdotdev/agent-execution/code-session/interface';
+import { type KindContext, type RuntimeDescriptor, type RuntimeRef } from '@vibesdotdev/kernel';
+import { type ResolveRelayBrokerOptions } from './relay-dial.ts';
+/** Recover the machine a session lives on from its self-describing id. */
+export declare function hostIdFromSessionId(sessionId: string): string;
+export declare class RelayCodeSession implements CodeSessionInterface {
+    readonly descriptor: AgentCodeSessionDescriptor;
+    private readonly runtime;
+    private readonly dialOptions;
+    private pushCredentialResolver?;
+    /** sessionId -> repositoryId, recorded at initialize() for the push-credential fallback. */
+    private readonly sessionRepositoryIds;
+    /** (hostId, userId) -> in-flight/settled dial; evicted on close or DISCONNECTED. */
+    private readonly hosts;
+    private readonly pinnedRoots;
+    constructor(descriptor: AgentCodeSessionDescriptor, runtime: RuntimeRef, dialOptions?: ResolveRelayBrokerOptions);
+    /** This session's logger, on the runtime that owns it. */
+    private get log();
+    setPushCredentialResolver(resolver: PushCredentialResolver): void;
+    private dialHost;
+    private remoteHost;
+    /**
+     * Run `fn` against the machine's remote execution; on a DISCONNECTED wire
+     * (stale cached socket), evict + redial ONCE before giving up.
+     */
+    private withHost;
+    private prepareEnvironment;
+    private withExecution;
+    private exec;
+    /** Run a compound shell script on the machine (paths pre-validated). */
+    private shell;
+    /** A foreground Git stage owns its remote process through exit and output EOF. */
+    private execGit;
+    private gitRunner;
+    /** Join required cleanup to the operation without masking either failure. */
+    private withRequiredCleanup;
+    private sessionRoot;
+    private sessionDir;
+    private metadataPath;
+    private persistSessionMetadata;
+    private readPersistedSessionMetadata;
+    private requireReadySessionMetadata;
+    private operationDirectory;
+    private operationRecordPath;
+    private readRemoteText;
+    private readOperationRecord;
+    private writeOperationRecord;
+    private prepareOperation;
+    /** Initial publication is serialized for both create-or-get and legacy adoption. */
+    private claimOperationRecord;
+    private withOperationLease;
+    /** Write a file at an ABSOLUTE machine path via base64 through the env (no quoting risk). */
+    private writeRemoteFile;
+    initialize(input: CodeSessionInitializeInput): Promise<CodeSessionHandle>;
+    createOrGet(input: CodeSessionCreateOrGetInput): Promise<CodeSessionHandle>;
+    attach(sessionId: string): Promise<CodeSessionHandle>;
+    /** Persist the paused flag; the remote workspace is kept and `runCommand` refuses until resume. */
+    pause(sessionId: string): Promise<CodeSessionHandle>;
+    resume(sessionId: string): Promise<CodeSessionHandle>;
+    runCommand(sessionId: string, input: RunCommandInput): Promise<RunCommandResult>;
+    listBackgroundProcesses(sessionId: string): Promise<[]>;
+    stopBackgroundProcess(sessionId: string, procId: string, signal?: string): Promise<boolean>;
+    readFile(sessionId: string, path: string): Promise<string>;
+    writeFile(sessionId: string, path: string, content: string): Promise<void>;
+    patchFile(sessionId: string, input: PatchFileInput): Promise<void>;
+    gitApply(sessionId: string, input: GitApplyInput): Promise<GitApplyResult>;
+    private applyDiff;
+    gitStatus(sessionId: string): Promise<GitStatusResult>;
+    gitCommit(sessionId: string, input: GitCommitInput, options?: GitCommitOptions): Promise<GitCommitResult>;
+    gitPush(sessionId: string, input?: GitPushInput): Promise<void>;
+    exposePort(sessionId: string, input: ExposePortInput): Promise<ExposePortResult>;
+    /** Find durable ownership without depending on metadata inside a deleting tree. */
+    private teardownOperation;
+    teardown(sessionId: string): Promise<void>;
+    /** Close every cached relay connection (tests + orderly shutdown). */
+    close(): Promise<void>;
+}
+declare class RelayCodeSessionImpl extends RelayCodeSession {
+    constructor(descriptor: RuntimeDescriptor, context: KindContext);
+}
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof RelayCodeSessionImpl>;
+export default _default;
+//# sourceMappingURL=agent-code-session-relay.impl.d.ts.map

package/dist/code-session-relay/agent-code-session-relay.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-code-session-relay.impl.d.ts","sourceRoot":"","sources":["../../src/code-session-relay/agent-code-session-relay.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,sDAAsD,CAAC;AAE9D,OAAO,KAAK,EACX,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EAEtB,MAAM,qDAAqD,CAAC;AA6C7D,OAAO,EASN,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EAEf,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAGN,KAAK,yBAAyB,EAC9B,MAAM,iBAAiB,CAAC;AAyMzB,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAe7D;AA4HD,qBAAa,gBAAiB,YAAW,oBAAoB;IAS3D,QAAQ,CAAC,UAAU,EAAE,0BAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAV7B,OAAO,CAAC,sBAAsB,CAAC,CAAyB;IACxD,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA6B;IAClE,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgD;IACtE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;gBAG/C,UAAU,EAAE,0BAA0B,EAC9B,OAAO,EAAE,UAAU,EACnB,WAAW,GAAE,yBAA8B;IAG7D,0DAA0D;IAC1D,OAAO,KAAK,GAAG,GAEd;IAED,yBAAyB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI;YAQnD,QAAQ;IAmDtB,OAAO,CAAC,UAAU;IA+BlB;;;OAGG;YACW,QAAQ;YAsBR,kBAAkB;YAiBlB,aAAa;YAYb,IAAI;IAYlB,wEAAwE;YAC1D,KAAK;IAQnB,kFAAkF;YACpE,OAAO;IA6DrB,OAAO,CAAC,SAAS;IAOjB,6EAA6E;YAC/D,mBAAmB;YAyBnB,WAAW;YAIX,UAAU;YAIV,YAAY;YAIZ,sBAAsB;YAyBtB,4BAA4B;YAS5B,2BAA2B;YA0C3B,kBAAkB;YAIlB,mBAAmB;YAInB,cAAc;YAUd,mBAAmB;YAmBnB,oBAAoB;YAyBpB,gBAAgB;IAkC9B,oFAAoF;YACtE,oBAAoB;YAwBpB,kBAAkB;IA+FhC,6FAA6F;YAC/E,eAAe;IAsBvB,UAAU,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BzE,WAAW,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA4M3E,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsB3D,mGAAmG;IAC7F,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IASpD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IASrD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA6BhF,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAKvD,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3F,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB1D,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1E,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;YAOlE,SAAS;IA0BjB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAOtD,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;IAiB7G,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBnE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAStF,mFAAmF;YACrE,iBAAiB;IA2CzB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyDhD,sEAAsE;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAoB5B;AAID,cAAM,oBAAqB,SAAQ,gBAAgB;gBACtC,UAAU,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW;CAG/D;;AAED,wBAKG"}