@vibesdotdev/host-bun 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/host-resources.d.ts

@@ -0,0 +1,85 @@
+/** A borrowed host owner retains identity; the composition root controls its lifetime. */
+import * as z from 'zod/v4';
+export declare const BunHostResourcesSchema: z.ZodCustom<Readonly<{
+    classifier: {
+        classifyExecutable: (facts: import("@vibesdotdev/execution-local").ExecutableClassificationFacts) => import("@vibesdotdev/execution-local").HostExecutableIdentity;
+        executableIdentityFrom: (env: import("@vibesdotdev/execution-local").HostEnvSnapshot) => import("@vibesdotdev/execution-local").HostExecutableIdentity;
+        executableIdentity: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => import("@vibesdotdev/execution-local").HostExecutableIdentity;
+        hostModulesOnDisk: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => boolean;
+        isStandaloneExecutable: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => boolean;
+        hostEntryPath: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => string | null;
+        resetForTest: () => void;
+    };
+    executable: {
+        isCompiledExecutable: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => boolean;
+        processStartedAtMs: () => number;
+        statExecutable: (path: string) => import("@vibesdotdev/execution-local").ExecutableFileStat | null;
+        executableHostFactsOf: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => import("@vibesdotdev/execution-local").ExecutableHostFacts;
+        describeExecutable: (path: string, host: import("@vibesdotdev/execution-local").ExecutableHostFacts) => import("@vibesdotdev/execution-local").ExecutableIdentity | null;
+        captureExecutableIdentity: (host: import("@vibesdotdev/execution-local").ExecutableHostFacts) => import("@vibesdotdev/execution-local").ExecutableIdentity | null;
+        getCapturedExecutableIdentity: () => import("@vibesdotdev/execution-local").ExecutableIdentity | null;
+        judgeExecutableReplaced: (loaded: import("@vibesdotdev/execution-local").ExecutableFileStat, current: import("@vibesdotdev/execution-local").ExecutableFileStat, processStartMs: number) => boolean;
+        checkExecutableFreshness: (host: import("@vibesdotdev/execution-local").ExecutableHostFacts) => import("@vibesdotdev/execution-local").ExecutableFreshness;
+        executableReplacedSince: (path: string, processStartMs: number) => import("@vibesdotdev/execution-local").ExecutableReplacedSince;
+        resetForTest: () => void;
+    };
+    outputPlane: {
+        install: (options: import("@vibesdotdev/kernel").RuntimeStdioTrackOptions) => void;
+        isInstalled: () => boolean;
+        uninstall: () => void;
+        setFormatter: (next: import("@vibesdotdev/execution-local").RuntimeOutputPlaneFormatter) => void;
+        formatConsoleArgs: (args: readonly unknown[]) => string;
+        flush: () => Promise<void>;
+    };
+    writeOutput(channel: "stdout" | "stderr", text: string): void;
+    readonly fatal: {
+        subscribe: (listener: import("@vibesdotdev/kernel").RuntimeFatalListener) => () => void;
+        subscriberCount: () => number;
+    };
+    setFormatter(next: import("@vibesdotdev/execution-local").RuntimeOutputPlaneFormatter): void;
+    retain(): () => Promise<void>;
+    streams(): import("@vibesdotdev/kernel").RuntimeStdioStreams;
+    dispose(): Promise<void>;
+}>, Readonly<{
+    classifier: {
+        classifyExecutable: (facts: import("@vibesdotdev/execution-local").ExecutableClassificationFacts) => import("@vibesdotdev/execution-local").HostExecutableIdentity;
+        executableIdentityFrom: (env: import("@vibesdotdev/execution-local").HostEnvSnapshot) => import("@vibesdotdev/execution-local").HostExecutableIdentity;
+        executableIdentity: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => import("@vibesdotdev/execution-local").HostExecutableIdentity;
+        hostModulesOnDisk: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => boolean;
+        isStandaloneExecutable: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => boolean;
+        hostEntryPath: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => string | null;
+        resetForTest: () => void;
+    };
+    executable: {
+        isCompiledExecutable: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => boolean;
+        processStartedAtMs: () => number;
+        statExecutable: (path: string) => import("@vibesdotdev/execution-local").ExecutableFileStat | null;
+        executableHostFactsOf: (runtime: import("@vibesdotdev/execution-local").HostIdentityRuntime) => import("@vibesdotdev/execution-local").ExecutableHostFacts;
+        describeExecutable: (path: string, host: import("@vibesdotdev/execution-local").ExecutableHostFacts) => import("@vibesdotdev/execution-local").ExecutableIdentity | null;
+        captureExecutableIdentity: (host: import("@vibesdotdev/execution-local").ExecutableHostFacts) => import("@vibesdotdev/execution-local").ExecutableIdentity | null;
+        getCapturedExecutableIdentity: () => import("@vibesdotdev/execution-local").ExecutableIdentity | null;
+        judgeExecutableReplaced: (loaded: import("@vibesdotdev/execution-local").ExecutableFileStat, current: import("@vibesdotdev/execution-local").ExecutableFileStat, processStartMs: number) => boolean;
+        checkExecutableFreshness: (host: import("@vibesdotdev/execution-local").ExecutableHostFacts) => import("@vibesdotdev/execution-local").ExecutableFreshness;
+        executableReplacedSince: (path: string, processStartMs: number) => import("@vibesdotdev/execution-local").ExecutableReplacedSince;
+        resetForTest: () => void;
+    };
+    outputPlane: {
+        install: (options: import("@vibesdotdev/kernel").RuntimeStdioTrackOptions) => void;
+        isInstalled: () => boolean;
+        uninstall: () => void;
+        setFormatter: (next: import("@vibesdotdev/execution-local").RuntimeOutputPlaneFormatter) => void;
+        formatConsoleArgs: (args: readonly unknown[]) => string;
+        flush: () => Promise<void>;
+    };
+    writeOutput(channel: "stdout" | "stderr", text: string): void;
+    readonly fatal: {
+        subscribe: (listener: import("@vibesdotdev/kernel").RuntimeFatalListener) => () => void;
+        subscriberCount: () => number;
+    };
+    setFormatter(next: import("@vibesdotdev/execution-local").RuntimeOutputPlaneFormatter): void;
+    retain(): () => Promise<void>;
+    streams(): import("@vibesdotdev/kernel").RuntimeStdioStreams;
+    dispose(): Promise<void>;
+}>>;
+export type BunHostResources = z.infer<typeof BunHostResourcesSchema>;
+//# sourceMappingURL=host-resources.d.ts.map

package/dist/schemas/host-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-resources.d.ts","sourceRoot":"","sources":["../../src/schemas/host-resources.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAqB5B,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAElC,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/schemas/host-resources.js

@@ -0,0 +1,22 @@
+/** A borrowed host owner retains identity; the composition root controls its lifetime. */
+import * as z from 'zod/v4';
+const HostResourcesPortSchema = z.object({
+    classifier: z.object({
+        classifyExecutable: z.function(), executableIdentityFrom: z.function(), executableIdentity: z.function(),
+        hostModulesOnDisk: z.function(), isStandaloneExecutable: z.function(), hostEntryPath: z.function(), resetForTest: z.function()
+    }),
+    executable: z.object({
+        isCompiledExecutable: z.function(), processStartedAtMs: z.function(), statExecutable: z.function(),
+        executableHostFactsOf: z.function(), describeExecutable: z.function(), captureExecutableIdentity: z.function(),
+        getCapturedExecutableIdentity: z.function(), judgeExecutableReplaced: z.function(),
+        checkExecutableFreshness: z.function(), executableReplacedSince: z.function(), resetForTest: z.function()
+    }),
+    outputPlane: z.object({
+        install: z.function(), uninstall: z.function(), isInstalled: z.function(),
+        setFormatter: z.function(), formatConsoleArgs: z.function(), flush: z.function()
+    }),
+    fatal: z.object({ subscribe: z.function(), subscriberCount: z.function() }),
+    writeOutput: z.function(), setFormatter: z.function(), retain: z.function(), streams: z.function(), dispose: z.function()
+});
+export const BunHostResourcesSchema = z.custom(value => HostResourcesPortSchema.safeParse(value).success);
+//# sourceMappingURL=host-resources.js.map

package/dist/schemas/host-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-resources.js","sourceRoot":"","sources":["../../src/schemas/host-resources.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,kBAAkB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxG,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC9H,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,oBAAoB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE;QAClG,qBAAqB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC9G,6BAA6B,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE;QAClF,wBAAwB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzG,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KAChF,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC3E,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzH,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAC7C,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACzD,CAAC"}

package/dist/schemas/native-image.d.ts

@@ -0,0 +1,128 @@
+import * as z from 'zod/v4';
+export declare const NativeImageSourceSchema: z.ZodObject<{
+    data: z.ZodInstanceOf<Uint8Array<ArrayBuffer>>;
+    maxPixels: z.ZodNumber;
+    autoOrient: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const NativeImageMetadataSchema: z.ZodObject<{
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+}, z.core.$strip>;
+export declare const NativeImageOutputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    format: z.ZodLiteral<"jpeg">;
+    quality: z.ZodNumber;
+    progressive: z.ZodBoolean;
+}, z.core.$strip>, z.ZodObject<{
+    format: z.ZodLiteral<"png">;
+    compressionLevel: z.ZodNumber;
+    palette: z.ZodBoolean;
+    colors: z.ZodNumber;
+    dither: z.ZodBoolean;
+}, z.core.$strip>, z.ZodObject<{
+    format: z.ZodLiteral<"webp">;
+    quality: z.ZodNumber;
+    lossless: z.ZodBoolean;
+}, z.core.$strip>, z.ZodObject<{
+    format: z.ZodLiteral<"heic">;
+    quality: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    format: z.ZodLiteral<"avif">;
+    quality: z.ZodNumber;
+}, z.core.$strip>], "format">;
+export declare const NativeImageEncodeSchema: z.ZodObject<{
+    data: z.ZodInstanceOf<Uint8Array<ArrayBuffer>>;
+    maxPixels: z.ZodNumber;
+    autoOrient: z.ZodOptional<z.ZodBoolean>;
+    rotate: z.ZodOptional<z.ZodNumber>;
+    flip: z.ZodOptional<z.ZodBoolean>;
+    flop: z.ZodOptional<z.ZodBoolean>;
+    resize: z.ZodOptional<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodOptional<z.ZodNumber>;
+        fit: z.ZodEnum<{
+            fill: "fill";
+            inside: "inside";
+        }>;
+        filter: z.ZodEnum<{
+            nearest: "nearest";
+            box: "box";
+            bilinear: "bilinear";
+            linear: "linear";
+            cubic: "cubic";
+            mitchell: "mitchell";
+            lanczos2: "lanczos2";
+            lanczos3: "lanczos3";
+            mks2013: "mks2013";
+            mks2021: "mks2021";
+        }>;
+        withoutEnlargement: z.ZodBoolean;
+    }, z.core.$strip>>;
+    modulate: z.ZodOptional<z.ZodObject<{
+        brightness: z.ZodOptional<z.ZodNumber>;
+        saturation: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    output: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        format: z.ZodLiteral<"jpeg">;
+        quality: z.ZodNumber;
+        progressive: z.ZodBoolean;
+    }, z.core.$strip>, z.ZodObject<{
+        format: z.ZodLiteral<"png">;
+        compressionLevel: z.ZodNumber;
+        palette: z.ZodBoolean;
+        colors: z.ZodNumber;
+        dither: z.ZodBoolean;
+    }, z.core.$strip>, z.ZodObject<{
+        format: z.ZodLiteral<"webp">;
+        quality: z.ZodNumber;
+        lossless: z.ZodBoolean;
+    }, z.core.$strip>, z.ZodObject<{
+        format: z.ZodLiteral<"heic">;
+        quality: z.ZodNumber;
+    }, z.core.$strip>, z.ZodObject<{
+        format: z.ZodLiteral<"avif">;
+        quality: z.ZodNumber;
+    }, z.core.$strip>], "format">;
+}, z.core.$strip>;
+export declare const NativeImageResultSchema: z.ZodObject<{
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    data: z.ZodInstanceOf<Uint8Array<ArrayBuffer>>;
+}, z.core.$strip>;
+export declare const NativeImageDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"host/native-image">;
+    hardware: z.ZodArray<z.ZodLiteral<"consumer">>;
+}, z.core.$strip>;
+export type NativeImageSource = z.infer<typeof NativeImageSourceSchema>;
+export type NativeImageMetadata = z.infer<typeof NativeImageMetadataSchema>;
+export type NativeImageEncode = z.infer<typeof NativeImageEncodeSchema>;
+export type NativeImageOutput = z.infer<typeof NativeImageOutputSchema>;
+export type NativeImageResult = z.infer<typeof NativeImageResultSchema>;
+export type NativeImageDescriptor = z.infer<typeof NativeImageDescriptorSchema>;
+/** Stateless native codec boundary. No native handles cross this contract. */
+export interface NativeImage {
+    metadata(request: NativeImageSource): Promise<NativeImageMetadata>;
+    encode(request: NativeImageEncode): Promise<NativeImageResult>;
+}
+export declare const NativeImageFailureFactsSchema: z.ZodObject<{
+    bunCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=native-image.d.ts.map

package/dist/schemas/native-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-image.d.ts","sourceRoot":"","sources":["../../src/schemas/native-image.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AACH,eAAO,MAAM,yBAAyB;;;iBAA8C,CAAC;AACrF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;6BASlC,CAAC;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAelC,CAAC;AACH,eAAO,MAAM,uBAAuB;;;;iBAAoD,CAAC;AACzF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;iBAGtC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/D;AAED,eAAO,MAAM,6BAA6B;;iBAExC,CAAC"}

package/dist/schemas/native-image.js

@@ -0,0 +1,45 @@
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+const pixels = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
+const bytes = z.instanceof(Uint8Array).refine(value => value.byteLength > 0);
+export const NativeImageSourceSchema = z.object({
+    data: bytes,
+    maxPixels: pixels,
+    autoOrient: z.boolean().optional()
+});
+export const NativeImageMetadataSchema = z.object({ width: pixels, height: pixels });
+export const NativeImageOutputSchema = z.discriminatedUnion('format', [
+    z.object({ format: z.literal('jpeg'), quality: z.number().int().min(1).max(100), progressive: z.boolean() }),
+    z.object({
+        format: z.literal('png'), compressionLevel: z.number().int().min(0).max(9),
+        palette: z.boolean(), colors: z.number().int().min(2).max(256), dither: z.boolean()
+    }),
+    z.object({ format: z.literal('webp'), quality: z.number().int().min(1).max(100), lossless: z.boolean() }),
+    z.object({ format: z.literal('heic'), quality: z.number().int().min(1).max(100) }),
+    z.object({ format: z.literal('avif'), quality: z.number().int().min(1).max(100) })
+]);
+export const NativeImageEncodeSchema = NativeImageSourceSchema.extend({
+    rotate: z.number().int().multipleOf(90).optional(),
+    flip: z.boolean().optional(),
+    flop: z.boolean().optional(),
+    resize: z.object({
+        width: pixels, height: pixels.optional(),
+        fit: z.enum(['fill', 'inside']),
+        filter: z.enum(['nearest', 'box', 'bilinear', 'linear', 'cubic', 'mitchell', 'lanczos2', 'lanczos3', 'mks2013', 'mks2021']),
+        withoutEnlargement: z.boolean()
+    }).optional(),
+    modulate: z.object({
+        brightness: z.number().positive().optional(),
+        saturation: z.number().nonnegative().optional()
+    }).optional(),
+    output: NativeImageOutputSchema
+});
+export const NativeImageResultSchema = NativeImageMetadataSchema.extend({ data: bytes });
+export const NativeImageDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('host/native-image'),
+    hardware: z.array(z.literal('consumer')).min(1)
+});
+export const NativeImageFailureFactsSchema = z.object({
+    bunCode: z.string().regex(/^ERR_IMAGE_[A-Z_]+$/).optional()
+});
+//# sourceMappingURL=native-image.js.map

package/dist/schemas/native-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-image.js","sourceRoot":"","sources":["../../src/schemas/native-image.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACxE,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACrE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5G,CAAC,CAAC,MAAM,CAAC;QACR,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACnF,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACzG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;CAClF,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACrE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;QACxC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3H,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;KAC/B,CAAC,CAAC,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAC/C,CAAC,CAAC,QAAQ,EAAE;IACb,MAAM,EAAE,uBAAuB;CAC/B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACzE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/C,CAAC,CAAC;AAcH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC"}

package/dist/schemas/native-network.d.ts

@@ -0,0 +1,56 @@
+import type { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import * as z from 'zod/v4';
+import type { ServerOptions, RequestListener } from 'node:http';
+import type { ServerConfig, ServerConnectionListener } from 'ssh2';
+import type { ClientOptions, ServerOptions as WebSocketServerOptions } from 'ws';
+/** Native SDK types are deliberately confined to this explicit host subpath. */
+export type { IncomingMessage, ServerResponse, Server as HttpServer, RequestListener } from 'node:http';
+export type { Duplex } from 'node:stream';
+export type { Socket, AddressInfo, Server as SshServer } from 'node:net';
+export type { Connection as SshConnection, ClientInfo as SshClientInfo, AuthContext as SshAuthContext, Session as SshSession, ServerChannel as SshChannel } from 'ssh2';
+export type { WebSocket, WebSocketServer, RawData } from 'ws';
+export declare const NativeCloseErrorSchema: z.ZodObject<{
+    code: z.ZodLiteral<"ERR_SERVER_NOT_RUNNING">;
+}, z.core.$strip>;
+export declare const NativeSshOptionsSchema: z.ZodCustom<ServerConfig, ServerConfig>;
+export declare const NativeSshListenerSchema: z.ZodCustom<ServerConnectionListener, ServerConnectionListener>;
+export declare const NativeHttpOptionsSchema: z.ZodCustom<ServerOptions<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>, ServerOptions<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>>;
+export declare const NativeHttpListenerSchema: z.ZodCustom<RequestListener, RequestListener>;
+export declare const NativeWebSocketServerOptionsSchema: z.ZodCustom<WebSocketServerOptions<typeof import("ws").default, typeof import("node:http").IncomingMessage>, WebSocketServerOptions<typeof import("ws").default, typeof import("node:http").IncomingMessage>>;
+export declare const NativeWebSocketOptionsSchema: z.ZodCustom<ClientOptions, ClientOptions>;
+export declare const NativeWebSocketUrlSchema: z.ZodString;
+export declare const NativeSshSignatureSchema: z.ZodObject<{
+    key: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+    data: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+    signature: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+    hashAlgorithm: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const NativeNetworkSettingsSchema: z.ZodObject<{
+    shutdownTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type NativeSshOptions = z.infer<typeof NativeSshOptionsSchema>;
+export type NativeSshListener = z.infer<typeof NativeSshListenerSchema>;
+export type NativeHttpOptions = z.infer<typeof NativeHttpOptionsSchema>;
+export type NativeHttpListener = z.infer<typeof NativeHttpListenerSchema>;
+export type NativeWebSocketServerOptions = z.infer<typeof NativeWebSocketServerOptionsSchema>;
+export type NativeWebSocketOptions = z.infer<typeof NativeWebSocketOptionsSchema>;
+export type NativeSshSignature = z.infer<typeof NativeSshSignatureSchema>;
+export type NativeNetworkSettings = z.infer<typeof NativeNetworkSettingsSchema>;
+export declare const WebSocketState: Readonly<{
+    readonly CONNECTING: 0;
+    readonly OPEN: 1;
+    readonly CLOSING: 2;
+    readonly CLOSED: 3;
+}>;
+/** Resolve with getVibesClient<NativeNetworkClient>('host.native-network', runtime).
+ * Resources remain caller-closeable and are also owned by runtime disposal.
+ * Native event/error/upgrade/backpressure semantics are preserved.
+ */
+export interface NativeNetworkClient extends BaseRuntimeClient {
+    createSshServer(options: NativeSshOptions, listener: NativeSshListener): import('node:net').Server;
+    createHttpServer(options: NativeHttpOptions, listener: NativeHttpListener): import('node:http').Server;
+    createWebSocketServer(options: NativeWebSocketServerOptions): import('ws').WebSocketServer;
+    connectWebSocket(url: string, options?: NativeWebSocketOptions): import('ws').WebSocket;
+    verifySshSignature(input: NativeSshSignature): boolean;
+}
+//# sourceMappingURL=native-network.d.ts.map

package/dist/schemas/native-network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-network.d.ts","sourceRoot":"","sources":["../../src/schemas/native-network.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAwB,MAAM,WAAW,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,MAAM,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,IAAI,sBAAsB,EAAE,MAAM,IAAI,CAAC;AAEjF,gFAAgF;AAChF,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,IAAI,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACxG,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,UAAU,CAAC;AACzE,YAAY,EACX,UAAU,IAAI,aAAa,EAAE,UAAU,IAAI,aAAa,EACxD,WAAW,IAAI,cAAc,EAAE,OAAO,IAAI,UAAU,EAAE,aAAa,IAAI,UAAU,EACjF,MAAM,MAAM,CAAC;AACd,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAK9D,eAAO,MAAM,sBAAsB;;iBAA0D,CAAC;AAoB9F,eAAO,MAAM,sBAAsB,yCAEC,CAAC;AACrC,eAAO,MAAM,uBAAuB,iEAAqF,CAAC;AAC1H,eAAO,MAAM,uBAAuB,yNAKP,CAAC;AAC9B,eAAO,MAAM,wBAAwB,+CAA4E,CAAC;AAClH,eAAO,MAAM,kCAAkC,+MAOnB,CAAC;AAC7B,eAAO,MAAM,4BAA4B,2CAIZ,CAAC;AAC9B,eAAO,MAAM,wBAAwB,aAAsF,CAAC;AAC5H,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AACH,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,cAAc;;;;;EAA4E,CAAC;AAExG;;;GAGG;AACH,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC7D,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,UAAU,EAAE,MAAM,CAAC;IACnG,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,WAAW,EAAE,MAAM,CAAC;IACvG,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,IAAI,EAAE,eAAe,CAAC;IAC3F,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,IAAI,EAAE,SAAS,CAAC;IACxF,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC;CACvD"}

package/dist/schemas/native-network.js

@@ -0,0 +1,55 @@
+import * as z from 'zod/v4';
+const NativeObjectSchema = z.object({}).loose();
+const PositiveLimitSchema = z.number().int().positive();
+const BytesSchema = z.custom(value => value instanceof Uint8Array);
+export const NativeCloseErrorSchema = z.object({ code: z.literal('ERR_SERVER_NOT_RUNNING') });
+const ParsedKeySchema = z.object({
+    type: z.string().min(1),
+    isPrivateKey: z.function(),
+    getPublicSSH: z.function(),
+    getPrivatePEM: z.function(),
+    sign: z.function(),
+    verify: z.function()
+}).loose();
+const KeyMaterialSchema = z.union([z.string().min(1), z.instanceof(Buffer), ParsedKeySchema]);
+const HostKeySchema = z.union([
+    KeyMaterialSchema,
+    z.object({
+        key: KeyMaterialSchema,
+        passphrase: z.union([z.string(), z.instanceof(Buffer)]).optional()
+    })
+]);
+// Native option bags retain SDK callbacks and identity; SDKs validate their
+// protocol-specific fields. The host admits resource and limit boundaries here.
+export const NativeSshOptionsSchema = z.custom(value => z.object({ hostKeys: z.array(HostKeySchema).min(1), maxPacketSize: PositiveLimitSchema.optional() })
+    .loose().safeParse(value).success);
+export const NativeSshListenerSchema = z.custom(value => z.function().safeParse(value).success);
+export const NativeHttpOptionsSchema = z.custom(value => NativeObjectSchema.extend({
+    headersTimeout: z.number().int().nonnegative().optional(),
+    requestTimeout: z.number().int().nonnegative().optional(),
+    maxHeaderSize: PositiveLimitSchema.optional()
+}).safeParse(value).success);
+export const NativeHttpListenerSchema = z.custom(value => z.function().safeParse(value).success);
+export const NativeWebSocketServerOptionsSchema = z.custom(value => NativeObjectSchema.extend({
+    noServer: z.boolean().optional(),
+    server: z.custom(server => NativeObjectSchema.safeParse(server).success).optional(),
+    port: z.number().int().min(0).max(65535).optional(),
+    maxPayload: PositiveLimitSchema.optional()
+}).refine(options => [options.noServer === true, options.server !== undefined, options.port !== undefined].filter(Boolean).length === 1)
+    .safeParse(value).success);
+export const NativeWebSocketOptionsSchema = z.custom(value => NativeObjectSchema.extend({
+    maxPayload: PositiveLimitSchema.optional(),
+    handshakeTimeout: PositiveLimitSchema.optional()
+}).safeParse(value).success);
+export const NativeWebSocketUrlSchema = z.string().url().refine(value => ['ws:', 'wss:'].includes(new URL(value).protocol));
+export const NativeSshSignatureSchema = z.object({
+    key: BytesSchema,
+    data: BytesSchema,
+    signature: BytesSchema,
+    hashAlgorithm: z.string().min(1).optional()
+});
+export const NativeNetworkSettingsSchema = z.object({
+    shutdownTimeoutMs: PositiveLimitSchema.default(5000)
+});
+export const WebSocketState = Object.freeze({ CONNECTING: 0, OPEN: 1, CLOSING: 2, CLOSED: 3 });
+//# sourceMappingURL=native-network.js.map

package/dist/schemas/native-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-network.js","sourceRoot":"","sources":["../../src/schemas/native-network.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAe5B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAChD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AACxD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAA8B,KAAK,CAAC,EAAE,CAAC,KAAK,YAAY,UAAU,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;AAC9F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1B,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1B,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpB,CAAC,CAAC,KAAK,EAAE,CAAC;AACX,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAC9F,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC;IAC7B,iBAAiB;IACjB,CAAC,CAAC,MAAM,CAAC;QACR,GAAG,EAAE,iBAAiB;QACtB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAClE,CAAC;CACF,CAAC,CAAC;AAEH,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAe,KAAK,CAAC,EAAE,CACpE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE,EAAE,CAAC;KAClG,KAAK,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAA2B,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAC1H,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAgB,KAAK,CAAC,EAAE,CACtE,kBAAkB,CAAC,MAAM,CAAC;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACzD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACzD,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAkB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAClH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAyB,KAAK,CAAC,EAAE,CAC1F,kBAAkB,CAAC,MAAM,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAa,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC/F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACnD,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;KACtI,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAC7B,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAgB,KAAK,CAAC,EAAE,CAC3E,kBAAkB,CAAC,MAAM,CAAC;IACzB,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5H,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,iBAAiB,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC;CACpD,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAW,CAAC,CAAC"}

package/dist/schemas/restricted-execute.d.ts

@@ -0,0 +1,40 @@
+/** The contracts of the Bun host's restricted (Seatbelt) execution (`../restricted-execute.darwin.impl.bun.ts`). */
+import type { ChildProcess, SpawnOptions } from 'node:child_process';
+import * as z from 'zod/v4';
+/**
+ * The fixed supervisor resource: the SHA-256 its bytes must have, and either those bytes (`source`, embedded in
+ * the module, so a compiled host needs no file) or the `file` they are read from.
+ */
+export interface RestrictedSupervisorResource {
+    readonly file: string;
+    readonly sha256: string;
+    readonly source?: string;
+}
+/**
+ * Deliver SIGKILL to a whole process group; a negative `pid` names the group.
+ * Throws the native failure (errno `code`) when the kernel refuses.
+ */
+export type RestrictedGroupSignal = (pid: number, signal: 'SIGKILL') => void;
+/** Start the enforcer process: `node:child_process` `spawn` for the supervision's one launch. */
+export type RestrictedEnforcerSpawn = (command: string, args: readonly string[], options: SpawnOptions) => ChildProcess;
+/**
+ * The supervision's own bounds, declared with their defaults. SIGKILL is not
+ * synchronous, so a run drains its killed group before it settles:
+ * `groupDrainTimeoutMs` is how long the group may take to leave the process
+ * table before its cleanup is unconfirmed, and `groupDrainPollMs` how often it
+ * is asked.
+ */
+export declare const RestrictedExecutorBoundsSchema: z.ZodObject<{
+    groupDrainTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    groupDrainPollMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type RestrictedExecutorBounds = z.output<typeof RestrictedExecutorBoundsSchema>;
+export interface RestrictedExecutorOptions {
+    /** The supervision's bounds; each absent one is its declared default. */
+    readonly bounds?: z.input<typeof RestrictedExecutorBoundsSchema>;
+    /** The group signal the supervision uses. Absent: the real `process.kill`; a probe declares its own to arrange a kernel failure. */
+    readonly signalGroup?: RestrictedGroupSignal;
+    /** How the enforcer is started. Absent: the real `spawn`; a probe declares its own to arrange a stream or spawn fault. */
+    readonly spawnEnforcer?: RestrictedEnforcerSpawn;
+}
+//# sourceMappingURL=restricted-execute.d.ts.map

package/dist/schemas/restricted-execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-execute.d.ts","sourceRoot":"","sources":["../../src/schemas/restricted-execute.ts"],"names":[],"mappings":"AAAA,oHAAoH;AAEpH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC;AAE7E,iGAAiG;AACjG,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,YAAY,CAAC;AAExH;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B;;;kBAGhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEvF,MAAM,WAAW,yBAAyB;IACzC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;IACjE,oIAAoI;IACpI,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,0HAA0H;IAC1H,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;CACjD"}

package/dist/schemas/restricted-execute.js

@@ -0,0 +1,14 @@
+/** The contracts of the Bun host's restricted (Seatbelt) execution (`../restricted-execute.darwin.impl.bun.ts`). */
+import * as z from 'zod/v4';
+/**
+ * The supervision's own bounds, declared with their defaults. SIGKILL is not
+ * synchronous, so a run drains its killed group before it settles:
+ * `groupDrainTimeoutMs` is how long the group may take to leave the process
+ * table before its cleanup is unconfirmed, and `groupDrainPollMs` how often it
+ * is asked.
+ */
+export const RestrictedExecutorBoundsSchema = z.object({
+    groupDrainTimeoutMs: z.number().int().positive().default(5_000),
+    groupDrainPollMs: z.number().int().positive().default(10)
+}).strict();
+//# sourceMappingURL=restricted-execute.js.map

package/dist/schemas/restricted-execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-execute.js","sourceRoot":"","sources":["../../src/schemas/restricted-execute.ts"],"names":[],"mappings":"AAAA,oHAAoH;AAGpH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAqB5B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/schemas/runtime-socket.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The host facts and lifecycle the Bun host's socket service (`../services/runtime-socket.impl.bun.ts`)
+ * is built from: the kernel's socket service host contract (`RuntimeSocketServiceHost`), which every
+ * host's socket service is composed with.
+ */
+import type { RuntimeSocketServiceHost } from '@vibesdotdev/execution-local';
+export type BunRuntimeSocketHost = RuntimeSocketServiceHost;
+//# sourceMappingURL=runtime-socket.d.ts.map

package/dist/schemas/runtime-socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-socket.d.ts","sourceRoot":"","sources":["../../src/schemas/runtime-socket.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,CAAC"}

package/dist/schemas/runtime-socket.js

@@ -0,0 +1,7 @@
+/**
+ * The host facts and lifecycle the Bun host's socket service (`../services/runtime-socket.impl.bun.ts`)
+ * is built from: the kernel's socket service host contract (`RuntimeSocketServiceHost`), which every
+ * host's socket service is composed with.
+ */
+export {};
+//# sourceMappingURL=runtime-socket.js.map

package/dist/schemas/runtime-socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-socket.js","sourceRoot":"","sources":["../../src/schemas/runtime-socket.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/schemas/self-spawn.d.ts

@@ -0,0 +1,11 @@
+/** The Bun host's script-runtime command: the argv that runs Bun itself. */
+import type { SelfSpawnSource } from '@vibesdotdev/execution-local';
+/** The command line that runs Bun itself from the current host, and the environment its child needs. */
+export interface BunArgv {
+    /** Command line that behaves as the Bun CLI: `[bun]` or `[<compiled host>]`. */
+    argv: [string, ...string[]];
+    /** Environment the child needs on top of the caller's (`BUN_BE_BUN=1` for a compiled host). */
+    env: Record<string, string>;
+    source: SelfSpawnSource;
+}
+//# sourceMappingURL=self-spawn.d.ts.map

package/dist/schemas/self-spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-spawn.d.ts","sourceRoot":"","sources":["../../src/schemas/self-spawn.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,wGAAwG;AACxG,MAAM,WAAW,OAAO;IACvB,gFAAgF;IAChF,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC5B,+FAA+F;IAC/F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,MAAM,EAAE,eAAe,CAAC;CACxB"}

package/dist/schemas/self-spawn.js

@@ -0,0 +1,3 @@
+/** The Bun host's script-runtime command: the argv that runs Bun itself. */
+export {};
+//# sourceMappingURL=self-spawn.js.map

package/dist/schemas/self-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-spawn.js","sourceRoot":"","sources":["../../src/schemas/self-spawn.ts"],"names":[],"mappings":"AAAA,4EAA4E"}

package/dist/schemas/standard-output.d.ts

@@ -0,0 +1,6 @@
+/** Text output plus the output plane's flush, over this Bun process's streams (`bunStandardOutput`). */
+export interface BunStandardOutput {
+    write(channel: 'stdout' | 'stderr', text: string): void;
+    flush(): Promise<void>;
+}
+//# sourceMappingURL=standard-output.d.ts.map

package/dist/schemas/standard-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-output.d.ts","sourceRoot":"","sources":["../../src/schemas/standard-output.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,MAAM,WAAW,iBAAiB;IACjC,KAAK,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB"}

package/dist/schemas/standard-output.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=standard-output.js.map

package/dist/schemas/standard-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-output.js","sourceRoot":"","sources":["../../src/schemas/standard-output.ts"],"names":[],"mappings":""}

package/dist/schemas/telemetry.d.ts

@@ -0,0 +1,25 @@
+import * as z from 'zod/v4';
+/** A fresh native host reading; byte counts are never construction-time resources. */
+export declare const HostTelemetrySchema: z.ZodObject<{
+    cpus: z.ZodArray<z.ZodObject<{
+        model: z.ZodString;
+    }, z.core.$strip>>;
+    totalMemoryBytes: z.ZodNumber;
+    freeMemoryBytes: z.ZodNumber;
+    os: z.ZodObject<{
+        type: z.ZodString;
+        release: z.ZodString;
+        version: z.ZodString;
+        uptimeSeconds: z.ZodNumber;
+    }, z.core.$strip>;
+    interfaces: z.ZodArray<z.ZodObject<{
+        address: z.ZodString;
+        family: z.ZodEnum<{
+            IPv4: "IPv4";
+            IPv6: "IPv6";
+        }>;
+        internal: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type HostTelemetry = z.infer<typeof HostTelemetrySchema>;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/schemas/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/schemas/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,sFAAsF;AACtF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/telemetry.js

@@ -0,0 +1,10 @@
+import * as z from 'zod/v4';
+/** A fresh native host reading; byte counts are never construction-time resources. */
+export const HostTelemetrySchema = z.object({
+    cpus: z.array(z.object({ model: z.string() })),
+    totalMemoryBytes: z.number().nonnegative(),
+    freeMemoryBytes: z.number().nonnegative(),
+    os: z.object({ type: z.string(), release: z.string(), version: z.string(), uptimeSeconds: z.number().nonnegative() }),
+    interfaces: z.array(z.object({ address: z.string(), family: z.enum(['IPv4', 'IPv6']), internal: z.boolean() }))
+});
+//# sourceMappingURL=telemetry.js.map

package/dist/schemas/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/schemas/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACrH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CAC/G,CAAC,CAAC"}