@vibesdotdev/bin 1.0.1 → 1.0.3-rc.1

package/checkout.mjs

@@ -0,0 +1,17 @@
+#!/usr/bin/env bun
+import { captureCheckoutCliLaunch } from '@vibesdotdev/host-bun/cli-checkout';
+import { startHost } from '@vibesdotdev/plugins/host-start.mjs';
+// The checkout command is the same public CLI rooted at the declared checkout:
+// it declares the published package's version, `vibes.plugins` selection and
+// `vibes.config` block, resolved in the checkout's own graph.
+import manifest from './package.json' with { type: 'json' };
+
+const launch = captureCheckoutCliLaunch(import.meta.url);
+await startHost({
+	...launch,
+	host: { ...launch.host, version: manifest.version },
+	hostPluginSpecifiers: manifest.vibes.plugins,
+	hostConfig: manifest.vibes.config,
+	attestHostGraph: true,
+	globalPackagePlugins: false
+});

package/package.json

@@ -1,42 +1,116 @@
 {
   "name": "@vibesdotdev/bin",
-  "version": "1.0.1",
-  "description": "Vibes CLI - the command-line interface for the Vibes platform",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/vibesdotdev/monorepo.git",
-    "directory": "packages/cli-bin"
-  },
-  "homepage": "https://vibes.dev",
-  "bin": {
-    "vibes": "bin/vibes"
+  "version": "1.0.3-rc.1",
+  "dependencies": {
+    "@vibesdotdev/account": "^1.0.0-rc.2",
+    "@vibesdotdev/agent-execution": "^1.0.0-rc.1",
+    "@vibesdotdev/ai": "^1.0.0-rc.3",
+    "@vibesdotdev/ai-schemas": "^1.0.0-rc.3",
+    "@vibesdotdev/applets": "^1.0.0-rc.2",
+    "@vibesdotdev/auth": "^1.0.0-rc.3",
+    "@vibesdotdev/bridge": "^1.0.0-rc.0",
+    "@vibesdotdev/chat": "^1.0.0-rc.0",
+    "@vibesdotdev/cli": "^1.0.0-rc.2",
+    "@vibesdotdev/code-sessions": "^1.0.0-rc.0",
+    "@vibesdotdev/command-palette": "^1.0.0-rc.3",
+    "@vibesdotdev/control": "^1.0.0-rc.2",
+    "@vibesdotdev/execution-local": "^1.0.0-rc.3",
+    "@vibesdotdev/filesystem": "^1.0.0-rc.2",
+    "@vibesdotdev/git-operations": "^1.0.0-rc.2",
+    "@vibesdotdev/host-bun": "^1.0.0-rc.2",
+    "@vibesdotdev/hq": "^1.0.0-rc.1",
+    "@vibesdotdev/infra-core": "^1.0.0-rc.4",
+    "@vibesdotdev/infra-deploy": "^1.0.0-rc.4",
+    "@vibesdotdev/integrations": "^1.0.0-rc.2",
+    "@vibesdotdev/integrations-vibes": "^1.0.0-rc.1",
+    "@vibesdotdev/kernel": "^1.0.0-rc.6",
+    "@vibesdotdev/kernel-rpc": "^1.0.0-rc.2",
+    "@vibesdotdev/kit": "^1.0.0-rc.3",
+    "@vibesdotdev/knowledge": "^1.0.0-rc.1",
+    "@vibesdotdev/mcp": "^1.0.0-rc.0",
+    "@vibesdotdev/notifications": "^1.0.0-rc.2",
+    "@vibesdotdev/platform": "^1.0.0-rc.1",
+    "@vibesdotdev/plugins": "^1.0.0-rc.0",
+    "@vibesdotdev/pm": "^1.0.0-rc.2",
+    "@vibesdotdev/projects": "^1.0.0-rc.0",
+    "@vibesdotdev/prompts": "^1.0.0-rc.0",
+    "@vibesdotdev/registry": "^1.0.0-rc.3",
+    "@vibesdotdev/scope": "^1.0.0-rc.2",
+    "@vibesdotdev/secrets": "^1.0.0-rc.3",
+    "@vibesdotdev/session": "^1.0.0-rc.1",
+    "@vibesdotdev/storage": "^1.0.0-rc.3",
+    "@vibesdotdev/studio": "^1.0.0-rc.0",
+    "@vibesdotdev/surface-sveltekit": "^1.0.0-rc.3",
+    "@vibesdotdev/sync": "^1.0.0-rc.2",
+    "@vibesdotdev/terminal-client": "^1.0.0-rc.2",
+    "@vibesdotdev/testing": "^1.0.0-rc.2",
+    "@vibesdotdev/tui": "^1.0.0-rc.2",
+    "@vibesdotdev/vessel": "^1.0.0-rc.2",
+    "@vibesdotdev/workboard": "^1.0.0-rc.0",
+    "@vibesdotdev/workspace": "^1.0.0-rc.1"
   },
   "files": [
-    "bin/vibes",
-    "scripts/postinstall.js",
-    "README.md"
+    "vibes.mjs",
+    "checkout.mjs"
   ],
-  "scripts": {
-    "postinstall": "node scripts/postinstall.js",
-    "pack:dry-run": "npm pack --dry-run --json --ignore-scripts",
-    "publish:npm": "npm publish --access public --registry=https://registry.npmjs.org",
-    "check": "bun --bun tsc -p tsconfig.json --noEmit"
-  },
-  "os": [
-    "darwin",
-    "linux",
-    "win32"
-  ],
-  "cpu": [
-    "x64",
-    "arm64"
-  ],
-  "engines": {
-    "node": ">=18"
-  },
   "publishConfig": {
-    "registry": "https://registry.npmjs.org",
+    "registry": "https://packages.vibes.dev",
     "access": "public"
+  },
+  "vibes": {
+    "visibility": "public",
+    "tier": "public",
+    "compositionRoots": [
+      "vibes.mjs",
+      "checkout.mjs"
+    ],
+    "plugins": [
+      "@vibesdotdev/plugins/consumer.plugin",
+      "@vibesdotdev/infra-core/service",
+      "@vibesdotdev/integrations-vibes/services",
+      "@vibesdotdev/infra-core/plugin",
+      "@vibesdotdev/infra-core/generate/plugin",
+      "@vibesdotdev/infra-deploy/plugin",
+      "@vibesdotdev/infra-deploy/cli/plugin",
+      "@vibesdotdev/pm/plugin",
+      "@vibesdotdev/pm/cli/plugin",
+      "@vibesdotdev/platform/cli/plugin",
+      "@vibesdotdev/platform/fleets/cli/plugin",
+      "@vibesdotdev/workboard/marshal/cli/plugin",
+      "@vibesdotdev/sync/plugin",
+      "@vibesdotdev/sync/cli/plugin",
+      "@vibesdotdev/studio/cli/plugin",
+      "@vibesdotdev/projects/app/cli/plugin",
+      "@vibesdotdev/plugins/tui/plugin"
+    ],
+    "config": {
+      "runtime.host": {
+        "environmentTier": "local"
+      },
+      "infra.services": {
+        "environment": "production"
+      }
+    },
+    "registry": {
+      "repositoryId": "80ee5ed7-a88d-49f8-86e8-f867006d1b4d",
+      "directory": "npm-bin"
+    }
+  },
+  "description": "Vibes CLI. Starts the public plugin host with no setup command.",
+  "type": "module",
+  "license": "MIT",
+  "bin": {
+    "vibes": "./vibes.mjs"
+  },
+  "repository": {
+    "type": "git",
+    "url": "ssh://git@git.vibes.dev/vibesdotdev/cli-bin.git",
+    "directory": "npm-bin"
+  },
+  "gitHead": "a7f6e9d14b82eb7b4e792d85047b071108d7f190",
+  "_vibes_source": {
+    "repo": "ssh://git@git.vibes.dev/vibesdotdev/cli-bin.git",
+    "sha": "a7f6e9d14b82eb7b4e792d85047b071108d7f190",
+    "workspaceDigest": "sha256:5d4d9f9b903fb38485a09b0f2c4cc1c33d839d24c11048f23dff55177ab7a24a"
   }
 }

package/vibes.mjs

@@ -0,0 +1,22 @@
+#!/usr/bin/env bun
+import { loadedCliHostDeclaration } from '@vibesdotdev/host-bun/resolution-root';
+import { startHost } from '@vibesdotdev/plugins/host-start.mjs';
+// The published package identity is the executable's declaration: its version
+// is what `vibes --version` reports, and `vibes.plugins` is the public plugin
+// selection this package installs as `dependencies` and composes at the graph
+// it was installed into. `vibes.config` is the executable's own config block
+// (the environment tier credentials resolve under, the services environment).
+// Nothing here lists a plugin or a setting.
+import manifest from './package.json' with { type: 'json' };
+
+await startHost({
+	host: {
+		...loadedCliHostDeclaration({
+			scriptUrl: import.meta.url,
+			hostEntryUrl: import.meta.resolve('@vibesdotdev/plugins/host-start.mjs')
+		}),
+		version: manifest.version
+	},
+	hostPluginSpecifiers: manifest.vibes.plugins,
+	hostConfig: manifest.vibes.config
+});

package/README.md

@@ -1,37 +0,0 @@
-# Vibes CLI
-
-Published npm wrapper for the public `vibes` binary.
-
-## Installation
-
-```bash
-npm install -g @vibesdotdev/bin
-```
-
-Or with bun:
-
-```bash
-bun add -g @vibesdotdev/bin
-```
-
-## Usage
-
-The package downloads a platform-specific `vibes` binary during `postinstall` and exposes it through the package `bin` field.
-
-Set `VIBES_BINARY_MIRROR` to override the release download base URL. The default
-mirror is `https://assets.vibes.dev/downloads/cli`. The installer verifies the
-download against `SHA256SUMS.txt` from the same mirror before completing.
-
-To inspect the exact npm tarball before release:
-
-```bash
-npm run pack:dry-run
-```
-
-To publish from this package after npm auth is configured:
-
-```bash
-npm run publish:npm
-```
-
-See [https://vibes.dev](https://vibes.dev) for documentation.

package/bin/vibes

@@ -1,90 +0,0 @@
-#!/usr/bin/env node
-// Cross-platform launcher for the vibes CLI binary.
-//
-// npm's bin field is static, but the published package downloads a
-// platform-specific binary at install time (scripts/postinstall.js):
-//   - Unix:    overwrites THIS file (bin/vibes) with the binary itself,
-//              so subsequent invocations skip Node entirely.
-//   - Windows: writes bin/vibes.exe alongside this file. npm-on-Windows
-//              generates a vibes.cmd that does `node bin/vibes`, so this
-//              shim has to be a JS file that spawns the .exe. Without it,
-//              Windows would try to execute a shell script and fail.
-//
-// If neither artifact is present, postinstall didn't complete — surface a
-// clear error rather than silently doing nothing.
-
-'use strict';
-
-const { spawnSync } = require('child_process');
-const fs = require('fs');
-const path = require('path');
-
-const binDir = __dirname;
-const installerPath = path.join(binDir, '..', 'scripts', 'postinstall.js');
-const exePath = path.join(binDir, 'vibes.exe');
-
-function runInstaller() {
-	const result = spawnSync(process.execPath, [installerPath], {
-		stdio: 'inherit',
-		windowsHide: false
-	});
-	if (result.error) {
-		process.stderr.write(`Failed to run installer: ${result.error.message}\n`);
-		process.exit(1);
-	}
-	if (result.status !== 0) {
-		process.exit(result.status === null ? 1 : result.status);
-	}
-}
-
-function reportMissingBinary() {
-	process.stderr.write('Error: vibes binary not installed.\n');
-	process.stderr.write('\n');
-	process.stderr.write('The installer could not place the platform binary.\n');
-	process.stderr.write('\n');
-	process.stderr.write('If the problem persists, see https://github.com/vibesdotdev/monorepo/issues\n');
-	process.exit(1);
-}
-
-function isStillNodeShim(filePath) {
-	try {
-		const content = fs.readFileSync(filePath, 'utf8');
-		return content.includes('Cross-platform launcher for the vibes CLI binary');
-	} catch {
-		return false;
-	}
-}
-
-if (process.platform === 'win32') {
-	if (!fs.existsSync(exePath)) {
-		runInstaller();
-	}
-	if (!fs.existsSync(exePath)) {
-		reportMissingBinary();
-	}
-	const result = spawnSync(exePath, process.argv.slice(2), {
-		stdio: 'inherit',
-		windowsHide: false
-	});
-	if (result.error) {
-		process.stderr.write(`Failed to spawn vibes.exe: ${result.error.message}\n`);
-		process.exit(1);
-	}
-	process.exit(result.status === null ? 1 : result.status);
-}
-
-runInstaller();
-
-if (isStillNodeShim(path.join(binDir, 'vibes'))) {
-	reportMissingBinary();
-}
-
-const result = spawnSync(path.join(binDir, 'vibes'), process.argv.slice(2), {
-	stdio: 'inherit',
-	windowsHide: false
-});
-if (result.error) {
-	process.stderr.write(`Failed to spawn vibes: ${result.error.message}\n`);
-	process.exit(1);
-}
-process.exit(result.status === null ? 1 : result.status);

package/scripts/postinstall.js

@@ -1,260 +0,0 @@
-#!/usr/bin/env node
-
-const https = require('https');
-const http = require('http');
-const crypto = require('crypto');
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const BASE_URL = process.env.VIBES_BINARY_MIRROR || 'https://assets.vibes.dev/downloads/cli';
-
-function getPlatform() {
-  const platform = os.platform();
-  if (platform === 'win32') return 'win32';
-  if (platform === 'darwin') return 'darwin';
-  return 'linux';
-}
-
-function getArch() {
-  const arch = os.arch();
-  if (arch === 'x64') return 'x64';
-  if (arch === 'arm64') return 'arm64';
-  // Node on macOS can report 'arm' for Apple Silicon
-  if (arch === 'arm' && getPlatform() === 'darwin') return 'arm64';
-  return 'x64';
-}
-
-function getBinaryName() {
-  const platform = getPlatform();
-  const arch = getArch();
-  const baseName = `vibes-${platform}-${arch}`;
-  return platform === 'win32' ? `${baseName}.exe` : baseName;
-}
-
-function getOutputPath() {
-  const platform = getPlatform();
-  const dir = path.join(__dirname, '..', 'bin');
-  const outputName = platform === 'win32' ? 'vibes.exe' : 'vibes';
-  return path.join(dir, outputName);
-}
-
-function showProgress(total, current) {
-  if (total > 0) {
-    const percent = Math.round((current / total) * 100);
-    const bar = '[' + '='.repeat(Math.floor(percent / 5)) + ' '.repeat(20 - Math.floor(percent / 5)) + ']';
-    process.stdout.write(`\r${bar} ${percent}%`);
-  } else {
-    process.stdout.write('.');
-  }
-}
-
-function download(url, dest, callback) {
-  const protocol = url.startsWith('https') ? https : http;
-
-  const request = protocol.get(url, { timeout: 30000 }, (response) => {
-    // Handle redirects
-    if (response.statusCode >= 300 && response.statusCode < 400 && response.headers.location) {
-      download(response.headers.location, dest, callback);
-      return;
-    }
-
-    if (response.statusCode !== 200) {
-      callback(new Error(`Failed to download: HTTP ${response.statusCode}`));
-      return;
-    }
-
-    const total = parseInt(response.headers['content-length'], 10);
-    let downloaded = 0;
-
-    const fp = fs.openSync(dest, 'w');
-    response.on('data', (chunk) => {
-      downloaded += chunk.length;
-      showProgress(total, downloaded);
-      fs.writeSync(fp, chunk);
-    });
-
-    response.on('end', () => {
-      fs.closeSync(fp);
-      console.log();
-      callback(null);
-    });
-
-    response.on('error', (err) => {
-      fs.closeSync(fp);
-      callback(err);
-    });
-  });
-
-  request.on('error', (err) => {
-    callback(err);
-  });
-
-  request.on('timeout', () => {
-    request.destroy();
-    callback(new Error('Download timed out'));
-  });
-}
-
-function fetchText(url, callback) {
-  const protocol = url.startsWith('https') ? https : http;
-
-  const request = protocol.get(url, { timeout: 30000 }, (response) => {
-    if (response.statusCode >= 300 && response.statusCode < 400 && response.headers.location) {
-      fetchText(response.headers.location, callback);
-      return;
-    }
-
-    if (response.statusCode !== 200) {
-      callback(new Error(`HTTP ${response.statusCode}`));
-      return;
-    }
-
-    let body = '';
-    response.setEncoding('utf8');
-    response.on('data', (chunk) => {
-      body += chunk;
-    });
-    response.on('end', () => callback(null, body));
-    response.on('error', callback);
-  });
-
-  request.on('error', callback);
-  request.on('timeout', () => {
-    request.destroy();
-    callback(new Error('Download timed out'));
-  });
-}
-
-function verifyChecksum(binaryName, filePath) {
-  return new Promise((resolve, reject) => {
-    if (process.env.VIBES_SKIP_CHECKSUM === '1') {
-      console.warn('Warning: VIBES_SKIP_CHECKSUM=1 set; skipping checksum verification.');
-      resolve();
-      return;
-    }
-
-    const checksumUrl = `${BASE_URL}/SHA256SUMS.txt`;
-    fetchText(checksumUrl, (err, text) => {
-      if (err) {
-        reject(new Error(`Could not fetch checksum file from ${checksumUrl}: ${err.message}`));
-        return;
-      }
-
-      const line = text
-        .split(/\r?\n/)
-        .find((entry) => entry.trim().endsWith(`  ${binaryName}`));
-      if (!line) {
-        reject(new Error(`No checksum entry for ${binaryName} in ${checksumUrl}`));
-        return;
-      }
-
-      const expected = line.trim().split(/\s+/)[0];
-      const actual = crypto.createHash('sha256').update(fs.readFileSync(filePath)).digest('hex');
-      if (actual !== expected) {
-        reject(new Error(`Checksum mismatch for ${binaryName}`));
-        return;
-      }
-
-      console.log('Verified release checksum');
-      resolve();
-    });
-  });
-}
-
-function makeExecutable(filePath) {
-  const platform = getPlatform();
-  if (platform === 'win32') return;
-
-  try {
-    fs.chmodSync(filePath, 0o755);
-  } catch (err) {
-    console.error('Warning: Could not chmod +x:', err.message);
-  }
-}
-
-function isWorkspaceInstall() {
-  // Explicit opt-out (set in CI, the monorepo's bun install, or any env that
-  // already has the binary built locally and doesn't want network on install).
-  if (process.env.VIBES_SKIP_BINARY_DOWNLOAD === '1') return true;
-
-  // When this package is installed from the npm registry, the realpath of the
-  // script location includes `/node_modules/` (the unpacked tarball path). When
-  // bun installs us via a workspace link, realpath dereferences the symlink to
-  // the monorepo source — which lives outside any `node_modules` directory. We
-  // use this asymmetry to skip downloads cleanly inside the workspace while
-  // failing loudly for real end-user installs.
-  try {
-    const real = fs.realpathSync(__dirname);
-    const sep = path.sep;
-    return !real.includes(`${sep}node_modules${sep}`);
-  } catch {
-    return false;
-  }
-}
-
-async function main() {
-  if (isWorkspaceInstall()) {
-    console.log('Vibes CLI installer: workspace install detected, skipping binary download.');
-    return;
-  }
-
-  const binaryName = getBinaryName();
-  const outputPath = getOutputPath();
-  const url = `${BASE_URL}/${binaryName}`;
-
-  console.log(`Vibes CLI installer`);
-  console.log(`Platform: ${getPlatform()}, Arch: ${getArch()}`);
-  console.log(`Downloading ${binaryName}...`);
-
-  // Ensure bin directory exists
-  const binDir = path.dirname(outputPath);
-  if (!fs.existsSync(binDir)) {
-    fs.mkdirSync(binDir, { recursive: true });
-  }
-
-  // Check if already exists and up-to-date
-  if (fs.existsSync(outputPath)) {
-    try {
-      fs.unlinkSync(outputPath);
-    } catch (err) {
-      console.error('Could not remove existing binary:', err.message);
-    }
-  }
-
-  return new Promise((resolve, reject) => {
-    download(url, outputPath, (err) => {
-      if (err) {
-        console.error();
-        console.error('Error:', err.message);
-        console.error(`Could not download binary from ${url}`);
-        console.error();
-        console.error('To resolve:');
-        console.error(`  - Confirm a release exists at ${BASE_URL}`);
-        console.error(`  - Confirm ${BASE_URL}/SHA256SUMS.txt is reachable and contains ${binaryName}`);
-        console.error('  - Or point VIBES_BINARY_MIRROR at an alternate download base URL');
-        console.error('  - Or download the binary manually and place it at:');
-        console.error(`      ${outputPath}`);
-        console.error('  - Or set VIBES_SKIP_BINARY_DOWNLOAD=1 to skip this step');
-        console.error('  - Or set VIBES_SKIP_CHECKSUM=1 only if you trust the mirror and need to bypass checksum verification');
-        reject(err);
-        return;
-      }
-
-      verifyChecksum(binaryName, outputPath)
-        .then(() => {
-          makeExecutable(outputPath);
-          console.log(`Installed to ${outputPath}`);
-          resolve();
-        })
-        .catch(reject);
-    });
-  });
-}
-
-main().catch((err) => {
-  console.error('Installation failed:', err.message);
-  // End-user installs reach here when isWorkspaceInstall() was false above
-  // (i.e., the script lives under node_modules) and the download failed. Fail
-  // loud so the user sees a broken install instead of a silently empty bin/.
-  process.exit(1);
-});