@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.1

package/dist/ambient/agent-roster-heartbeat.js

@@ -0,0 +1,257 @@
+/** Resolve and publish the current runtime's agent-session identity. */
+import * as z from 'zod/v4';
+import { CaughtFailureSchema, isCapabilityError } from '@vibesdotdev/kernel';
+import { ACCOUNT_AGENT_ROSTER_PROVIDER_ID, AGENT_ROSTER_PROVIDER_QUALIFIER, AGENT_ROSTER_UNAUTHORIZED_REASON, EXTERNAL_AGENT_ROSTER_PROVIDER_KIND } from "../runtime/agent-roster-provider.js";
+import { resolveTouchIdentity } from "../storage/touch-identity.js";
+import { attempt } from "./attempt.js";
+const HeartbeatMetadataSchema = z.object({
+    agentId: z.unknown().optional(),
+    modelId: z.unknown().optional(),
+    providerId: z.unknown().optional(),
+    clientInfo: z.unknown().optional(),
+    externalToolId: z.unknown().optional(),
+    name: z.unknown().optional(),
+    workItemTitle: z.unknown().optional()
+});
+const AgentsReaderSchema = z.custom((value) => value instanceof Object &&
+    (!('definitions' in value) || Object(value).definitions instanceof Object));
+const AiReaderSchema = z.custom((value) => value instanceof Object &&
+    (!('models' in value) || Object(value).models instanceof Object));
+function nonEmpty(value) {
+    const parsed = z.string().trim().min(1).safeParse(value);
+    return parsed.success ? parsed.data : undefined;
+}
+function record(value) {
+    const parsed = HeartbeatMetadataSchema.safeParse(value);
+    return parsed.success ? parsed.data : {};
+}
+async function enrichConfiguredModel(runtime, agentId, modelId, providerId) {
+    let resolvedModelId = modelId;
+    let resolvedProviderId = providerId;
+    if (!resolvedModelId) {
+        const agentsOutcome = await attempt(runtime, async () => AgentsReaderSchema.parse(await runtime.query('runtime/client').withId('agents').resolve()));
+        const definitions = agentsOutcome.ok ? agentsOutcome.value.definitions : undefined;
+        if (definitions) {
+            const modelOutcome = await attempt(runtime, () => definitions.get(agentId));
+            if (modelOutcome.ok)
+                resolvedModelId = nonEmpty(modelOutcome.value?.modelId);
+        }
+    }
+    const modelIdForProvider = resolvedModelId;
+    if (modelIdForProvider && !resolvedProviderId) {
+        const aiOutcome = await attempt(runtime, async () => AiReaderSchema.parse(await runtime.query('runtime/client').withId('ai').resolve()));
+        const models = aiOutcome.ok ? aiOutcome.value.models : undefined;
+        if (models) {
+            const modelOutcome = await attempt(runtime, () => models.get(modelIdForProvider));
+            if (modelOutcome.ok) {
+                resolvedProviderId = nonEmpty(modelOutcome.value?.descriptor?.providerId);
+            }
+        }
+    }
+    return { modelId: resolvedModelId, providerId: resolvedProviderId };
+}
+/**
+ * Build the portable heartbeat from runtime/session facts.
+ *
+ * Provider/model are never guessed from a brand name. A harness may report
+ * them via participant/client metadata or runtime env; configured Vibes agents
+ * can be enriched from the Agents + AI clients. Otherwise the wire carries
+ * explicit nulls and `vibes who` renders `unreported`.
+ */
+export async function resolveCurrentAgentSessionAnnouncement(runtime, now = new Date()) {
+    const managerOutcome = await attempt(runtime, () => runtime.context('session/manager'));
+    if (!managerOutcome.ok)
+        return null;
+    const manager = managerOutcome.value;
+    if (!manager)
+        return null;
+    // Identity is the active invocation's actor, never a declared qualifier.
+    const actor = runtime.scope.actor ?? {};
+    let sessionId = nonEmpty(actor.sessionId) ?? nonEmpty(manager.activeSessionId);
+    if (!sessionId) {
+        const defaultSessionOutcome = await attempt(runtime, async () => manager.getDefaultActiveSession
+            ? nonEmpty(await manager.getDefaultActiveSession())
+            : undefined);
+        if (defaultSessionOutcome.ok)
+            sessionId = defaultSessionOutcome.value;
+    }
+    if (!sessionId || !manager.getSession)
+        return null;
+    const sessionOutcome = await attempt(runtime, () => manager.getSession(sessionId));
+    if (!sessionOutcome.ok)
+        return null;
+    const session = sessionOutcome.value;
+    if (!session)
+        return null;
+    const participantId = nonEmpty(actor.participantId) ?? nonEmpty(session.ownerParticipant);
+    let participant;
+    if (participantId && manager.getParticipant) {
+        const participantOutcome = await attempt(runtime, () => manager.getParticipant(participantId));
+        if (participantOutcome.ok)
+            participant = participantOutcome.value;
+    }
+    const participantMetadata = record(participant?.metadata);
+    const clientInfo = record(participantMetadata.clientInfo);
+    const sessionMetadata = record(session.metadata);
+    const agentId = nonEmpty(participantMetadata.agentId) ??
+        nonEmpty(clientInfo.agentId) ??
+        nonEmpty(actor.agentId) ??
+        nonEmpty(runtime.getEnv('VIBES_AGENT_ID')) ??
+        participantId ??
+        sessionId;
+    const configured = await enrichConfiguredModel(runtime, agentId, nonEmpty(participantMetadata.modelId) ??
+        nonEmpty(clientInfo.modelId) ??
+        nonEmpty(runtime.getEnv('VIBES_MODEL_ID')), nonEmpty(participantMetadata.providerId) ??
+        nonEmpty(clientInfo.providerId) ??
+        nonEmpty(runtime.getEnv('VIBES_PROVIDER_ID')));
+    const identityOutcome = await attempt(runtime, () => resolveTouchIdentity(runtime));
+    const identity = identityOutcome.ok ? identityOutcome.value : {};
+    const started = new Date(session.createdAt);
+    if (Number.isNaN(started.getTime()))
+        return null;
+    return {
+        agentId,
+        providerId: configured.providerId ?? null,
+        modelId: configured.modelId ?? null,
+        sessionId: session.id,
+        sessionStartedAt: started,
+        observedAt: now,
+        participantId,
+        participantSlug: identity.participantSlug,
+        runtimeEnvironment: nonEmpty(clientInfo.externalToolId) ??
+            nonEmpty(clientInfo.name) ??
+            nonEmpty(runtime.scope.surface) ??
+            nonEmpty(runtime.scope.hardware),
+        machineId: identity.machineId,
+        machineName: identity.machineName,
+        workspaceRoot: identity.workspaceRoot,
+        gitBranch: identity.gitBranch,
+        workItemId: identity.workItemId ?? nonEmpty(session.workItemId),
+        workItemTitle: identity.workItemTitle ?? nonEmpty(sessionMetadata.workItemTitle)
+    };
+}
+export async function resolveAgentRosterProvider(runtime, providerId) {
+    if (runtime.hasKind(EXTERNAL_AGENT_ROSTER_PROVIDER_KIND)) {
+        const qualifier = z
+            .object({ [AGENT_ROSTER_PROVIDER_QUALIFIER]: z.unknown().optional() })
+            .safeParse(runtime.scope.qualifiers);
+        const selectedProviderId = nonEmpty(providerId) ??
+            nonEmpty(qualifier.success ? qualifier.data[AGENT_ROSTER_PROVIDER_QUALIFIER] : undefined) ??
+            ACCOUNT_AGENT_ROSTER_PROVIDER_ID;
+        const resolved = await runtime
+            .query(EXTERNAL_AGENT_ROSTER_PROVIDER_KIND)
+            .withId(selectedProviderId)
+            .resolve();
+        if (resolved)
+            return resolved;
+    }
+    const { CloudAgentRosterProvider } = await import("./cloud-agent-roster-provider.impl.js");
+    const { asCallerBearerRuntime } = await import("./cloud-authenticated-json.js");
+    return new CloudAgentRosterProvider(asCallerBearerRuntime(runtime));
+}
+export async function announceCurrentAgentSession(runtime, now = new Date()) {
+    const entry = await resolveCurrentAgentSessionAnnouncement(runtime, now);
+    if (!entry)
+        return null;
+    const provider = await resolveAgentRosterProvider(runtime);
+    if (provider)
+        await provider.announce(entry);
+    return entry;
+}
+/**
+ * Longest gap the runtime leaves between roster writes while the session is
+ * unchanged.
+ *
+ * The server holds an announcement for its own TTL (15 minutes, see hq-web's
+ * `AGENT_ROSTER_TTL_SECONDS`) and expires crashed sessions on read, so staying
+ * listed only requires a write comfortably inside that window — not one per
+ * tick. This keepalive leaves a 10x margin under the TTL while still sitting
+ * under the 3-minute freshness convention used elsewhere for hosts.
+ */
+export const AGENT_ROSTER_KEEPALIVE_MS = 90 * 1000;
+/**
+ * Everything the roster row carries except the observation timestamp.
+ *
+ * `observedAt` advances on every tick by construction, so comparing whole
+ * entries would report "changed" forever. Two entries with the same fingerprint
+ * describe the same session doing the same work, and the later one tells the
+ * server nothing it does not already hold.
+ */
+export function agentSessionAnnouncementFingerprint(entry) {
+    const { observedAt: _observedAt, ...rest } = entry;
+    const normalized = Object.entries(rest)
+        .filter(([, value]) => value !== undefined)
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+        .map(([key, value]) => [key, value instanceof Date ? value.toISOString() : value]);
+    return JSON.stringify(normalized);
+}
+/** Whether `failure` is the provider refusing the presented credential. */
+function isRosterRefusal(failure) {
+    return isCapabilityError(failure) && failure.reason === AGENT_ROSTER_UNAUTHORIZED_REASON;
+}
+/**
+ * A digest naming the credential the runtime presents now, so a refusal can
+ * be remembered without holding the credential. A runtime with no bearer, or
+ * one whose bearer cannot be resolved, is named by that fact.
+ */
+async function presentedCredential(runtime) {
+    const { asCallerBearerRuntime, resolveAmbientBearer } = await import("./cloud-authenticated-json.js");
+    const outcome = await attempt(runtime, () => resolveAmbientBearer(asCallerBearerRuntime(runtime)), 'roster credential read');
+    if (!outcome.ok)
+        return 'unresolved';
+    if (outcome.value === null)
+        return 'none';
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(outcome.value));
+    return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Announce the current session only when it actually changed, or when the
+ * keepalive falls due.
+ *
+ * Resolution stays local (session manager + model enrichment); only the write
+ * crosses the network, so an idle body costs nothing but the resolve it was
+ * already doing. Returns the entry when it published, `null` when it had
+ * nothing new to say — callers that must publish unconditionally should use
+ * `announceCurrentAgentSession`.
+ *
+ * `signal` is the caller's run: once it aborts (its runtime's disposal began)
+ * the announce publishes nothing and rejects with the signal's reason, and a
+ * publish in flight is aborted.
+ *
+ * A provider refusal (`agent-roster-unauthorized`) rejects once; later calls
+ * return `null` without publishing until the runtime presents a different
+ * credential.
+ */
+export async function announceCurrentAgentSessionIfDue(runtime, state, now = new Date(), signal) {
+    const entry = await resolveCurrentAgentSessionAnnouncement(runtime, now);
+    if (!entry)
+        return null;
+    const fingerprint = agentSessionAnnouncementFingerprint(entry);
+    const keepaliveDueAt = (state.announcedAt ?? 0) + AGENT_ROSTER_KEEPALIVE_MS;
+    if (state.fingerprint === fingerprint && now.getTime() < keepaliveDueAt)
+        return null;
+    if (state.refusedCredential !== undefined) {
+        if ((await presentedCredential(runtime)) === state.refusedCredential)
+            return null;
+        state.refusedCredential = undefined;
+    }
+    signal?.throwIfAborted();
+    const provider = await resolveAgentRosterProvider(runtime);
+    signal?.throwIfAborted();
+    if (provider) {
+        try {
+            await provider.announce(entry, { signal });
+        }
+        catch (error) {
+            // Refused once: reported by the caller, then quiet until the
+            // credential changes, never retried against the same refusal.
+            if (isRosterRefusal(CaughtFailureSchema.parse(error)))
+                state.refusedCredential = await presentedCredential(runtime);
+            throw error;
+        }
+    }
+    state.fingerprint = fingerprint;
+    state.announcedAt = now.getTime();
+    return entry;
+}
+//# sourceMappingURL=agent-roster-heartbeat.js.map

package/dist/ambient/agent-roster-heartbeat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-roster-heartbeat.js","sourceRoot":"","sources":["../../src/ambient/agent-roster-heartbeat.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,mBAAmB,EACnB,iBAAiB,EAIjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,gCAAgC,EAChC,+BAA+B,EAC/B,gCAAgC,EAChC,mCAAmC,EAEnC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAavC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAwBH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,YAAY,MAAM;IACvB,CAAC,CAAC,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,YAAY,MAAM,CAAC,CAC3E,CAAC;AAQF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAC9B,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,YAAY,MAAM;IACvB,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC,CACjE,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC7B,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,OAAmB,EACnB,OAAe,EACf,OAA2B,EAC3B,UAA8B;IAE9B,IAAI,eAAe,GAAG,OAAO,CAAC;IAC9B,IAAI,kBAAkB,GAAG,UAAU,CAAC;IAEpC,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CACvD,kBAAkB,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAC1F,CAAC;QACF,MAAM,WAAW,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,IAAI,YAAY,CAAC,EAAE;gBAAE,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9E,CAAC;IACF,CAAC;IACD,MAAM,kBAAkB,GAAG,eAAe,CAAC;IAC3C,IAAI,kBAAkB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CACnD,cAAc,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAClF,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAClF,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,kBAAkB,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAC3E,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC3D,OAAmB,EACnB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAgB,iBAAiB,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,yEAAyE;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAExC,IAAI,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/E,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,qBAAqB,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAC/D,OAAO,CAAC,uBAAuB;YAC9B,CAAC,CAAC,QAAQ,CAAC,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACnD,CAAC,CAAC,SAAS,CACZ,CAAC;QACF,IAAI,qBAAqB,CAAC,EAAE;YAAE,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,aAAa,GAClB,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrE,IAAI,WAA0F,CAAC;IAC/F,IAAI,aAAa,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAe,CAAC,aAAa,CAAC,CAAC,CAAC;QAChG,IAAI,kBAAkB,CAAC,EAAE;YAAE,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC;IACnE,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,OAAO,GACZ,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;QACrC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAC5B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QACvB,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1C,aAAa;QACb,SAAS,CAAC;IACX,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAC7C,OAAO,EACP,OAAO,EACP,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;QACpC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAC5B,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAC3C,QAAQ,CAAC,mBAAmB,CAAC,UAAU,CAAC;QACvC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAC/B,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAC9C,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,OAAO;QACN,OAAO;QACP,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,IAAI;QACzC,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,IAAI;QACnC,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,gBAAgB,EAAE,OAAO;QACzB,UAAU,EAAE,GAAG;QACf,aAAa;QACb,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,kBAAkB,EACjB,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;YACnC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YACzB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/B,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/D,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,eAAe,CAAC,aAAa,CAAC;KAChF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAAmB,EACnB,UAAmB;IAEnB,IAAI,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,CAAC;aACjB,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;aACrE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,kBAAkB,GACvB,QAAQ,CAAC,UAAU,CAAC;YACpB,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,gCAAgC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,OAAO;aAC5B,KAAK,CAAyC,mCAAmC,CAAC;aAClF,MAAM,CAAC,kBAAkB,CAAC;aAC1B,OAAO,EAAE,CAAC;QACZ,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAC/B,CAAC;IACD,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;IAC3F,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAChF,OAAO,IAAI,wBAAwB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAAmB,EACnB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,KAAK,GAAG,MAAM,sCAAsC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,QAAQ;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,UAAU,mCAAmC,CAAC,KAA+B;IAClF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAeD,2EAA2E;AAC3E,SAAS,eAAe,CAAC,OAAsB;IAC9C,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,gCAAgC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,OAAmB;IACrD,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,MAAM,OAAO,CAC5B,OAAO,EACP,GAAG,EAAE,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,EAC1D,wBAAwB,CACxB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,OAAmB,EACnB,KAA+B,EAC/B,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,MAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,sCAAsC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,yBAAyB,CAAC;IAC5E,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAClF,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACrC,CAAC;IACD,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,6DAA6D;YAC7D,8DAA8D;YAC9D,IAAI,eAAe,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAAE,KAAK,CAAC,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACpH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAChC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/ambient/attempt.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Shared "never throw into the tool/event path" wrapper for ambient handlers.
+ *
+ * Ambient work is a declared-optional path: a failure degrades to silence, but
+ * the reason is always logged (never swallowed) and travels on the outcome, so
+ * a caller that can say more keeps the failure instead of re-reading absence.
+ */
+import { type RuntimeRef, type Settled } from '@vibesdotdev/kernel';
+/** Ambient work's value or the failure that was logged before it degraded. */
+export type AttemptOutcome<T> = Settled<T>;
+/** Run `fn`; on failure log the reason and resolve the failure as the outcome. */
+export declare function attempt<T>(runtime: RuntimeRef, fn: () => Promise<T> | T, what?: string): Promise<AttemptOutcome<T>>;
+/**
+ * Time-box a promise on the runtime's lifecycle. A budget expiry is the
+ * declared degrade-to-silence path (no log line: the budget firing is normal);
+ * any other failure is logged with its reason. Both resolve as the outcome.
+ */
+export declare function withBudget<T>(runtime: RuntimeRef, promise: Promise<T>, ms: number, reason?: string): Promise<AttemptOutcome<T>>;
+//# sourceMappingURL=attempt.d.ts.map

package/dist/ambient/attempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt.d.ts","sourceRoot":"","sources":["../../src/ambient/attempt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAA+C,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGjH,8EAA8E;AAC9E,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3C,kFAAkF;AAClF,wBAAsB,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,SAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CASjI;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,CAAC,EACjC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,EAAE,EAAE,MAAM,EACV,MAAM,SAAmB,GACvB,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAY5B"}

package/dist/ambient/attempt.js

@@ -0,0 +1,39 @@
+/**
+ * Shared "never throw into the tool/event path" wrapper for ambient handlers.
+ *
+ * Ambient work is a declared-optional path: a failure degrades to silence, but
+ * the reason is always logged (never swallowed) and travels on the outcome, so
+ * a caller that can say more keeps the failure instead of re-reading absence.
+ */
+import { isCapabilityError, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+/** Run `fn`; on failure log the reason and resolve the failure as the outcome. */
+export async function attempt(runtime, fn, what = 'ambient work') {
+    const outcome = await settle(fn);
+    if (!outcome.ok) {
+        const failure = outcome.cause;
+        getLogger('external.ambient.attempt', runtime).debug(`${what} failed; degrading to silence`, {
+            error: valueFreeFailure(failure)
+        });
+    }
+    return outcome;
+}
+/**
+ * Time-box a promise on the runtime's lifecycle. A budget expiry is the
+ * declared degrade-to-silence path (no log line: the budget firing is normal);
+ * any other failure is logged with its reason. Both resolve as the outcome.
+ */
+export async function withBudget(runtime, promise, ms, reason = 'ambient-budget') {
+    const outcome = await settle(() => runtime.lifecycle.wait(() => promise, { timeoutMs: ms, reason }));
+    if (!outcome.ok) {
+        const failure = outcome.cause;
+        if (failure instanceof Error && isCapabilityError(failure) && failure.reason === 'wait-timeout') {
+            return outcome;
+        }
+        getLogger('external.ambient.attempt', runtime).debug(`${reason} failed; degrading to silence`, {
+            error: valueFreeFailure(failure)
+        });
+    }
+    return outcome;
+}
+//# sourceMappingURL=attempt.js.map

package/dist/ambient/attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt.js","sourceRoot":"","sources":["../../src/ambient/attempt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAiC,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAKjD,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,OAAmB,EAAE,EAAwB,EAAE,IAAI,GAAG,cAAc;IACpG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9B,SAAS,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,+BAA+B,EAAE;YAC5F,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,OAAmB,EACnB,OAAmB,EACnB,EAAU,EACV,MAAM,GAAG,gBAAgB;IAEzB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9B,IAAI,OAAO,YAAY,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACjG,OAAO,OAAO,CAAC;QAChB,CAAC;QACD,SAAS,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,+BAA+B,EAAE;YAC9F,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC;SAChC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/ambient/cloud-agent-roster-provider.impl.d.ts

@@ -0,0 +1,13 @@
+/** Official account-roster provider; replaceable through the runtime kind. */
+import { type AgentSessionAnnouncement } from '../schemas/agent-roster.ts';
+import { type AgentRosterAnnounceOptions, type AgentRosterProvider } from '../runtime/agent-roster-provider.ts';
+import { type AmbientRuntime } from './cloud-authenticated-json.ts';
+export declare class CloudAgentRosterProvider implements AgentRosterProvider {
+    private readonly runtime;
+    /** `runtime` is the one whose caller's bearer every request presents. */
+    constructor(runtime: AmbientRuntime);
+    announce(entry: AgentSessionAnnouncement, options?: AgentRosterAnnounceOptions): Promise<void>;
+    list(): Promise<AgentSessionAnnouncement[]>;
+}
+export default CloudAgentRosterProvider;
+//# sourceMappingURL=cloud-agent-roster-provider.impl.d.ts.map

package/dist/ambient/cloud-agent-roster-provider.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-agent-roster-provider.impl.d.ts","sourceRoot":"","sources":["../../src/ambient/cloud-agent-roster-provider.impl.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAG9E,OAAO,EAGN,KAAK,wBAAwB,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEN,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAsCxF,qBAAa,wBAAyB,YAAW,mBAAmB;IAEvD,OAAO,CAAC,QAAQ,CAAC,OAAO;IADpC,yEAAyE;gBAC5C,OAAO,EAAE,cAAc;IAE9C,QAAQ,CAAC,KAAK,EAAE,wBAAwB,EAAE,OAAO,GAAE,0BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC;IAelG,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;CAejD;AAED,eAAe,wBAAwB,CAAC"}

package/dist/ambient/cloud-agent-roster-provider.impl.js

@@ -0,0 +1,73 @@
+/** Official account-roster provider; replaceable through the runtime kind. */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { AccountAgentRosterResponseSchema, AgentSessionAnnouncementSchema } from "../schemas/agent-roster.js";
+import { AGENT_ROSTER_UNAUTHORIZED_REASON } from "../runtime/agent-roster-provider.js";
+import { requestAmbientJson } from "./cloud-authenticated-json.js";
+const ROSTER_PATH = '/api/ambient/roster';
+const READ_TIMEOUT_MS = 2_000;
+// HQ's roster write lands in D1 and routinely takes longer than a read; at 2 s
+// most CLI runs and heartbeats timed out (measured 2026-10-29, 3 of 4 runs).
+const WRITE_TIMEOUT_MS = 6_000;
+function unavailable(operation, status, cause) {
+    return new CapabilityError(`Could not ${operation} the account agent roster${status ? ` (HTTP ${status})` : ''}.`, 'UNAVAILABLE', {
+        retryable: true,
+        cause,
+        recoveryHint: 'The account roster provider is configured but unreachable. Restore the linked HQ/provider connection; do not treat a partial local roster as complete.'
+    });
+}
+/**
+ * The account refused the bearer it was shown (HTTP 401 or 403). The bearer
+ * will be refused again until it changes, so this is not retryable.
+ */
+function unauthorized(status) {
+    return new CapabilityError(`The account agent roster refused this runtime's credential (HTTP ${status}).`, status === 401 ? 'AUTH_REQUIRED' : 'PERMISSION_DENIED', {
+        reason: AGENT_ROSTER_UNAUTHORIZED_REASON,
+        retryable: false,
+        details: { status },
+        recoveryHint: 'Sign in again (vibes auth login) so the runtime presents a credential the account accepts.'
+    });
+}
+export class CloudAgentRosterProvider {
+    runtime;
+    /** `runtime` is the one whose caller's bearer every request presents. */
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    async announce(entry, options = {}) {
+        const announcement = AgentSessionAnnouncementSchema.parse(entry);
+        const result = await requestAmbientJson(this.runtime, ROSTER_PATH, {
+            method: 'POST',
+            body: announcement,
+            timeoutMs: WRITE_TIMEOUT_MS,
+            signal: options.signal
+        });
+        // An unlinked/local-only runtime has no account provider by design, and a
+        // runtime that ended mid-announce has nobody left to announce.
+        if (!result.configured || result.cancelled)
+            return;
+        if (result.status === 401 || result.status === 403)
+            throw unauthorized(result.status);
+        if (!result.ok)
+            throw unavailable('publish', result.status, result.failure);
+    }
+    async list() {
+        const result = await requestAmbientJson(this.runtime, ROSTER_PATH, {
+            method: 'GET',
+            timeoutMs: READ_TIMEOUT_MS
+        });
+        if (!result.configured)
+            return [];
+        if (result.cancelled) {
+            throw new CapabilityError('Reading the account agent roster was cancelled: the runtime ended.', 'CANCELLED', {
+                reason: 'wait-aborted'
+            });
+        }
+        if (result.status === 401 || result.status === 403)
+            throw unauthorized(result.status);
+        if (!result.ok)
+            throw unavailable('read', result.status, result.failure);
+        return AccountAgentRosterResponseSchema.parse(result.body).agents;
+    }
+}
+export default CloudAgentRosterProvider;
+//# sourceMappingURL=cloud-agent-roster-provider.impl.js.map

package/dist/ambient/cloud-agent-roster-provider.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-agent-roster-provider.impl.js","sourceRoot":"","sources":["../../src/ambient/cloud-agent-roster-provider.impl.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACN,gCAAgC,EAChC,8BAA8B,EAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACN,gCAAgC,EAGhC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAuB,MAAM,+BAA+B,CAAC;AAExF,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAC1C,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,SAAS,WAAW,CAAC,SAA6B,EAAE,MAAe,EAAE,KAAuB;IAC3F,OAAO,IAAI,eAAe,CACzB,aAAa,SAAS,4BAA4B,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EACtF,aAAa,EACb;QACC,SAAS,EAAE,IAAI;QACf,KAAK;QACL,YAAY,EACX,wJAAwJ;KACzJ,CACD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAiB;IACtC,OAAO,IAAI,eAAe,CACzB,oEAAoE,MAAM,IAAI,EAC9E,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,EACtD;QACC,MAAM,EAAE,gCAAgC;QACxC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,MAAM,EAAE;QACnB,YAAY,EAAE,4FAA4F;KAC1G,CACD,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IAEP;IAD7B,yEAAyE;IACzE,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,QAAQ,CAAC,KAA+B,EAAE,UAAsC,EAAE;QACvF,MAAM,YAAY,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,0EAA0E;QAC1E,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,IAAI;QACT,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;YAClE,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,oEAAoE,EAAE,WAAW,EAAE;gBAC5G,MAAM,EAAE,cAAc;aACtB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,OAAO,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACnE,CAAC;CACD;AAED,eAAe,wBAAwB,CAAC"}

package/dist/ambient/cloud-authenticated-json.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Shared authenticated JSON transport for account-scoped ambient providers.
+ *
+ * The official HQ origin is one provider, not an architectural dependency:
+ * the provider is the host's declared `hq` `infra/service`, so self-hosted and
+ * white-label runtimes declare another origin with the same contract (rc04
+ * §2.4). A host that composes no service catalog, or declares no `hq`
+ * service, is local-only. The credential is the caller's bearer, read through
+ * the `auth/caller-bearer` runtime context (auth's `resolveCallerBearer`,
+ * chosen by the host's declared capability (rc05 §2.2)): nothing is read from
+ * ambient auth env vars. External never imports auth — a public package cannot
+ * require an internal one — so the context is consumed structurally, and a
+ * host that composes no auth fails closed resolving it.
+ */
+import { CapabilityError, type RuntimeRef } from '@vibesdotdev/kernel';
+export declare function ambientProjectionOptedOut(runtime: RuntimeRef): Promise<boolean>;
+/** The runtime an ambient provider is handed: bearer, service, and lifecycle reads. */
+export type AmbientRuntime = RuntimeRef;
+/**
+ * The ambient provider's origin: the declared `hq` `infra/service` in the
+ * runtime's configured service environment. `null` (local-only) when
+ * projection is opted out, or when the host declares no `hq` service. A
+ * declared service with no usable origin is a typed failure, never an empty
+ * success.
+ */
+export declare function resolveAmbientOrigin(runtime: RuntimeRef): Promise<string | null>;
+/**
+ * Narrow a runtime handle to what an ambient provider reads: the bearer
+ * context, the service query, and lifecycle-owned waits. A handle without
+ * them is a composition fault.
+ */
+export declare function asCallerBearerRuntime(runtime: RuntimeRef): AmbientRuntime;
+/**
+ * The caller's bearer for ambient requests, or `null` when there is none to
+ * present: an anonymous request, a signed-out interactive host, a host that
+ * declares no environment tier (so no credential can be resolved — the
+ * ambient projection is simply unprovisioned there), or a request-principal
+ * host outside an invocation (no caller to name). Every other failure is
+ * thrown, including a host that composes no auth: it fails closed resolving
+ * the context.
+ */
+export declare function resolveAmbientBearer(runtime: RuntimeRef): Promise<string | null>;
+/**
+ * An ambient request's outcome. `configured: false` means no HQ origin or
+ * bearer (declared-optional). `cancelled` means the runtime ended mid-request:
+ * a confirmed cancellation, not an unreachable HQ.
+ */
+export type AmbientJsonResult = {
+    configured: boolean;
+    ok: boolean;
+    cancelled?: true;
+    /** Why a configured request failed to reach HQ (network, timeout), with the original as its cause. */
+    failure?: CapabilityError;
+    status?: number;
+    body?: unknown;
+};
+export declare function requestAmbientJson(runtime: AmbientRuntime, path: string, options: {
+    method?: 'GET' | 'POST' | 'DELETE';
+    body?: unknown;
+    timeoutMs: number;
+    /**
+     * The caller's run. Once it aborts the request is never sent, or the one
+     * in flight is aborted, and the outcome is `cancelled`. A runtime's own
+     * disposal does not end a request started while it finalizes, so owned
+     * work passes its run's signal here.
+     */
+    signal?: AbortSignal;
+}): Promise<AmbientJsonResult>;
+//# sourceMappingURL=cloud-authenticated-json.d.ts.map

package/dist/ambient/cloud-authenticated-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-authenticated-json.d.ts","sourceRoot":"","sources":["../../src/ambient/cloud-authenticated-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAyC,KAAK,UAAU,EAAuB,MAAM,qBAAqB,CAAC;AASnI,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAErF;AAED,uFAAuF;AACvF,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC;AAExC;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKtF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,GAAG,cAAc,CAOzE;AAaD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAatF;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,sGAAsG;IACtG,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CACf,CAAC;AAEF,wBAAsB,kBAAkB,CACvC,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACR,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB,GACC,OAAO,CAAC,iBAAiB,CAAC,CAwB5B"}

package/dist/ambient/cloud-authenticated-json.js

@@ -0,0 +1,108 @@
+/**
+ * Shared authenticated JSON transport for account-scoped ambient providers.
+ *
+ * The official HQ origin is one provider, not an architectural dependency:
+ * the provider is the host's declared `hq` `infra/service`, so self-hosted and
+ * white-label runtimes declare another origin with the same contract (rc04
+ * §2.4). A host that composes no service catalog, or declares no `hq`
+ * service, is local-only. The credential is the caller's bearer, read through
+ * the `auth/caller-bearer` runtime context (auth's `resolveCallerBearer`,
+ * chosen by the host's declared capability (rc05 §2.2)): nothing is read from
+ * ambient auth env vars. External never imports auth — a public package cannot
+ * require an internal one — so the context is consumed structurally, and a
+ * host that composes no auth fails closed resolving it.
+ */
+import { CapabilityError, isCapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { ambientProjectionIsOff } from "../config/read.js";
+export async function ambientProjectionOptedOut(runtime) {
+    return ambientProjectionIsOff(runtime);
+}
+/**
+ * The ambient provider's origin: the declared `hq` `infra/service` in the
+ * runtime's configured service environment. `null` (local-only) when
+ * projection is opted out, or when the host declares no `hq` service. A
+ * declared service with no usable origin is a typed failure, never an empty
+ * success.
+ */
+export async function resolveAmbientOrigin(runtime) {
+    if (await ambientProjectionIsOff(runtime))
+        return null;
+    if (!runtime.hasKind('infra/service'))
+        return null;
+    if (runtime.query('infra/service').withId('hq').descriptors().length === 0)
+        return null;
+    return (await serviceOrigin(runtime, 'hq')).replace(/\/$/, '');
+}
+/**
+ * Narrow a runtime handle to what an ambient provider reads: the bearer
+ * context, the service query, and lifecycle-owned waits. A handle without
+ * them is a composition fault.
+ */
+export function asCallerBearerRuntime(runtime) {
+    if (!runtime.context || !runtime.query || !runtime.hasKind || !runtime.lifecycle?.wait) {
+        throw new CapabilityError('The ambient provider was handed a runtime without a declared bearer dispatch and service query.', 'INTERNAL', {
+            reason: 'runtime-missing'
+        });
+    }
+    return runtime;
+}
+async function attemptAmbientBearer(runtime) {
+    try {
+        const bearerContext = await runtime.context('auth/caller-bearer');
+        return { bearer: await bearerContext.resolve() };
+    }
+    catch (error) {
+        return { failure: CaughtFailureSchema.parse(error) };
+    }
+}
+/**
+ * The caller's bearer for ambient requests, or `null` when there is none to
+ * present: an anonymous request, a signed-out interactive host, a host that
+ * declares no environment tier (so no credential can be resolved — the
+ * ambient projection is simply unprovisioned there), or a request-principal
+ * host outside an invocation (no caller to name). Every other failure is
+ * thrown, including a host that composes no auth: it fails closed resolving
+ * the context.
+ */
+export async function resolveAmbientBearer(runtime) {
+    const attempt = await attemptAmbientBearer(runtime);
+    if ('bearer' in attempt)
+        return attempt.bearer;
+    const failure = attempt.failure;
+    if (isCapabilityError(failure) &&
+        (failure.reason === 'not-signed-in' ||
+            failure.reason === 'tier-undeclared' ||
+            failure.reason === 'invocation-inactive')) {
+        return null;
+    }
+    throw failure;
+}
+export async function requestAmbientJson(runtime, path, options) {
+    const [origin, token] = await Promise.all([resolveAmbientOrigin(runtime), resolveAmbientBearer(runtime)]);
+    if (!origin || !token)
+        return { configured: false, ok: false };
+    const method = options.method ?? 'GET';
+    const headers = { accept: 'application/json', authorization: `Bearer ${token}` };
+    const init = options.body === undefined
+        ? { method, headers }
+        : { method, headers: { ...headers, 'content-type': 'application/json' }, body: JSON.stringify(options.body) };
+    try {
+        const response = await runtime.lifecycle.wait((signal) => fetch(`${origin}${path}`, { ...init, signal }), {
+            timeoutMs: options.timeoutMs,
+            reason: `ambient-request:${path}`,
+            signal: options.signal
+        });
+        if (!response.ok)
+            return { configured: true, ok: false, status: response.status };
+        return { configured: true, ok: true, status: response.status, body: await response.json() };
+    }
+    catch (error) {
+        if (error instanceof Error && isCapabilityError(error) && error.code === 'CANCELLED')
+            return { configured: true, ok: false, cancelled: true };
+        // Declared-optional ambient provider: an unreachable HQ degrades to "not ok",
+        // and the failure travels with the outcome for the caller to report.
+        return { configured: true, ok: false, failure: CapabilityError.from(CaughtFailureSchema.parse(error)) };
+    }
+}
+//# sourceMappingURL=cloud-authenticated-json.js.map

package/dist/ambient/cloud-authenticated-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-authenticated-json.js","sourceRoot":"","sources":["../../src/ambient/cloud-authenticated-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAuC,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACnI,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAO3D,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAmB;IAClE,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAKD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAmB;IAC7D,IAAI,MAAM,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACxD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QACxF,MAAM,IAAI,eAAe,CAAC,iGAAiG,EAAE,UAAU,EAAE;YACxI,MAAM,EAAE,iBAAiB;SACzB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAID,KAAK,UAAU,oBAAoB,CAAC,OAAmB;IACtD,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CAAsB,oBAAoB,CAAC,CAAC;QACvF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACtD,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAmB;IAC7D,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,QAAQ,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IACC,iBAAiB,CAAC,OAAO,CAAC;QAC1B,CAAC,OAAO,CAAC,MAAM,KAAK,eAAe;YAClC,OAAO,CAAC,MAAM,KAAK,iBAAiB;YACpC,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,EACzC,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,CAAC;AACf,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAuB,EACvB,IAAY,EACZ,OAWC;IAED,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAE/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;IACjF,MAAM,IAAI,GACT,OAAO,CAAC,IAAI,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;QACrB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAChH,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;YACzG,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,mBAAmB,IAAI,EAAE;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9I,8EAA8E;QAC9E,qEAAqE;QACrE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACzG,CAAC;AACF,CAAC"}