@vibesdotdev/host-cef 0.0.0-stage → 1.0.0-rc.4

package/LICENSE

@@ -0,0 +1,18 @@
+MIT License
+
+Copyright (c) 2026 VIBES DEV LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,102 @@
-# Temporary Holding Version
+# @vibesdotdev/host-cef
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The Vibes runtime environment for a renderer running inside a native CEF
+(Chromium Embedded Framework) host. The host attests facts about the renderer:
+its identity, lifecycle generation, trusted origin, platform, deployment tier
+and the semantic capabilities it offers. This package parses those facts
+strictly and turns them into runtime scope, so discovery and candidate selection
+can reason about where the code runs.
+
+It is credential-dark. It never exposes daemon endpoints, socket paths,
+credentials, filesystem access or feature verbs to the
+renderer: `getEnv()` serves only the declared `PUBLIC_*` values the host captured at launch (else `undefined`), and there is no secret accessor: credentials resolve through `runtime.resolveCredential`, which answers `no-store` here.
+
+## Install
+
+```bash
+bun add @vibesdotdev/host-cef @vibesdotdev/kernel
+```
+
+## Use
+
+Select the environment through the browser surface, before bootstrap:
+
+```ts
+import { ensureBrowserRuntime } from '@vibesdotdev/surface-sveltekit/surface-browser';
+import { createRuntimeEnvironmentCefPlugin } from '@vibesdotdev/host-cef/plugin';
+
+await ensureBrowserRuntime({
+  environment: async () => createRuntimeEnvironmentCefPlugin(),
+  plugins: [() => import('@vibesdotdev/kernel/client/plugin')]
+});
+```
+
+The plugin reads facts with one call, `call('environment')`, on the namespace
+the native host injects at `globalThis.vibes.runtime`. The host marks the page
+at document start and fires `vibes:runtime-host-ready` after injecting, so the
+plugin uses a namespace that is already installed at once and otherwise waits
+for that event, with no poll or timer. A page without the host
+marker fails at once with `CapabilityError` `UNAVAILABLE`, reason
+`host-unavailable`. Pass `namespace` to supply the host yourself, for example in
+tests:
+
+```ts
+createRuntimeEnvironmentCefPlugin({
+  namespace: { call: async () => hostFacts }
+});
+```
+
+The environment serves two runtime bindings through the reader's owning schema:
+
+- `cef/runtime-namespace` (`CEF_RUNTIME_NAMESPACE_BINDING`): the host's original
+  namespace and receivers; absent when constructed without a namespace.
+- `cef/runtime-capabilities` (`CEF_RUNTIME_CAPABILITIES_BINDING`): the advertised
+  kind ids, available even without a namespace.
+
+`@vibesdotdev/kernel-rpc/cef` consumes these bindings without reading page globals.
+Unknown binding keys return `undefined`; reader-schema mismatches refuse with
+`INVALID_INPUT / binding-invalid`.
+
+Any unknown key in the facts, at any level, fails the parse. Feature packages do
+not read these facts directly; they use ordinary runtime kinds and clients.
+
+The environment also supplies the host clock the kernel's lifecycle needs:
+monotonic milliseconds from the renderer's browser performance clock
+(`performance.now()`, never `Date.now()`), so `runtime.lifecycle.now()` and
+disposal's finalization budget run on renderer time. The kernel validates the
+readings and owns the lifecycle refusals.
+
+## Docs
+
+Compose `@vibesdotdev/docs/plugin` with `@vibesdotdev/host-cef/docs/plugin` to add the
+`runtime.environment.cef` topic to runtime docs discovery. That plugin registers
+documentation only. [SPEC.md](SPEC.md) is the full contract.
+
+## Typed failures
+
+Invalid constructor/plugin options refuse `INVALID_INPUT / cef-environment-options-invalid`.
+Invalid or unreadable host facts refuse `INVALID_INPUT / cef-host-facts-invalid`;
+a failed native call refuses `UNAVAILABLE / cef-host-facts-unavailable`.
+Unreadable globals, failed event registration and ready without namespace refuse
+`UNAVAILABLE / host-unavailable`. These errors contain fixed, value-free metadata
+without caller values or raw causes. Repair the host payload or injection order;
+supply a callable namespace and a workspace root of 1–4096 characters.
+
+## Verify
+
+From this package run `bun run check`, `bun run test`, and `bun run build`.
+Configured unit checks also include rules and lint. Build and prepack emit without
+deleting live dist. The public-entrypoint test is in-process: it proves the export
+map's source targets and exact condition mappings, explicit publication exclusions,
+the root contract and real plugin composition through public package imports and
+owned test runtimes with only the native namespace faked. It needs no prior build
+and does not pack or extract tarballs, so it is not a distributed-artifact
+certification. Native CEF execution is separate from this
+simulated native-boundary coverage. `check` uses the noEmit `tsconfig.json`, including
+TypeScript and TSX tests; `tsconfig.test.json` inherits that project. Build and
+prepack use `tsconfig.build.json` to emit production JavaScript and declarations,
+excluding tests, `__tests__` and `src/svelte/**`.
+
+## License
+
+MIT. See [LICENSE](LICENSE).

package/dist/cef-environment.impl.d.ts

@@ -0,0 +1,58 @@
+/** CEF renderer implementation of the runtime/environment contract. */
+import { type EnvironmentIdentity, type RuntimeEnvironmentImplementation, type RuntimeInvocationStore, type RuntimeLoaderImplementation, type RuntimeScope } from '@vibesdotdev/kernel';
+import { type CefEnvironmentDeclaration } from './schemas/options.ts';
+import * as z from 'zod/v4';
+import { type CefHostFacts, type CefRuntimeNamespace } from './contracts.ts';
+export type { CefEnvironmentDeclaration } from './schemas/options.ts';
+export declare class CefEnvironment implements RuntimeEnvironmentImplementation {
+    readonly id = "cef";
+    readonly description = "CEF browser renderer environment";
+    readonly identity: EnvironmentIdentity;
+    readonly scope: RuntimeScope;
+    readonly loader: RuntimeLoaderImplementation;
+    readonly facts: CefHostFacts;
+    /**
+     * The renderer's browser performance clock (`performance.now()`), captured
+     * once at construction so the value the kernel reads can never drift to a
+     * different page clock. Its readings are monotonic, nonnegative
+     * milliseconds since the renderer's time origin — never `Date.now()`.
+     */
+    private readonly readPerformanceMs;
+    /** The host's namespace, captured where it arrived and read only through a binding's owning schema. */
+    private readonly namespace;
+    /**
+     * `declaration.workspace` is the virtual root the app entry declared for
+     * this renderer; the environment declares it in its scope and invents none.
+     * `namespace` is the host's native namespace (the one `facts` were read from); the environment serves it through
+     * `CEF_RUNTIME_NAMESPACE_BINDING`; capabilities are independently bound from facts.
+     *
+     * All three are read once through the same guarded schemas the plugin uses (strict facts, a `{ root }` workspace
+     * capped at 4096, a namespace object with a callable `call`); anything else is refused `INVALID_INPUT`
+     * `cef-environment-options-invalid`, reporting issue counts and fixed failure categories only.
+     */
+    constructor(factsInput: CefHostFacts, declarationInput?: CefEnvironmentDeclaration, namespaceInput?: CefRuntimeNamespace);
+    createInvocationStore(): RuntimeInvocationStore;
+    /** Serves only the public values the native host declared at boot; anything else is undeclared. */
+    getEnv(key: string): string | undefined;
+    /** A copy of the declared public values, so callers cannot rewrite the attested facts. */
+    getEnvSnapshot(): {
+        [x: string]: string;
+    };
+    getPlatform(): string;
+    /**
+     * Live monotonic milliseconds from the renderer's browser performance
+     * clock, for the kernel's lifecycle (`runtime.lifecycle.now()`): finite,
+     * nonnegative and nondecreasing, per the `RuntimeEnvironmentImplementation`
+     * contract. The kernel validates the value; this host only reads its
+     * renderer clock.
+     */
+    monotonicNow(): number;
+    /**
+     * Serves the host namespace and the host's advertised capability ids (`CEF_RUNTIME_CAPABILITIES_BINDING`, from
+     * its facts), each read through the caller's owning schema: a value that does not match it is `INVALID_INPUT
+     * binding-invalid` (the kernel's convention), never a quiet absence; any other key, or an environment built
+     * without a namespace asked for it, answers `undefined`.
+     */
+    getBinding<T>(key: string, schema: z.ZodType<T>): T | undefined;
+}
+//# sourceMappingURL=cef-environment.impl.d.ts.map

package/dist/cef-environment.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cef-environment.impl.d.ts","sourceRoot":"","sources":["../src/cef-environment.impl.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAEvE,OAAO,EAKN,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EAErC,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA6B,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjG,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAKN,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,MAAM,gBAAgB,CAAC;AAOxB,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,qBAAa,cAAe,YAAW,gCAAgC;IACtE,QAAQ,CAAC,EAAE,SAAS;IACpB,QAAQ,CAAC,WAAW,sCAAsC;IAC1D,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAKpC;IACF,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,8BAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAe;IACjD,uGAAuG;IACvG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IAEtD;;;;;;;;;OASG;gBACS,UAAU,EAAE,YAAY,EAAE,gBAAgB,GAAE,yBAA8B,EAAE,cAAc,CAAC,EAAE,mBAAmB;IA8B5H,qBAAqB,IAAI,sBAAsB;IAI/C,mGAAmG;IACnG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIvC,0FAA0F;IAC1F,cAAc;;;IAId,WAAW,IAAI,MAAM;IAIrB;;;;;;OAMG;IACH,YAAY,IAAI,MAAM;IAItB;;;;;OAKG;IACH,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS;CAK/D"}

package/dist/cef-environment.impl.js

@@ -0,0 +1,117 @@
+/** CEF renderer implementation of the runtime/environment contract. */
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { captureValue, createSinglePrincipalInvocationStore, declareRuntimeScope, decodeCapturedBinding } from '@vibesdotdev/kernel';
+import { CefEnvironmentInputSchema } from "./schemas/options.js";
+import * as z from 'zod/v4';
+import { CEF_RUNTIME_CAPABILITIES_BINDING, CEF_RUNTIME_NAMESPACE_BINDING, readBrowserPerformanceClock, readCefInput } from "./contracts.js";
+/** A renderer imports what its bundle ships; it has no filesystem to discover. */
+const importLoader = {
+    importModule: (specifier) => import(__rewriteRelativeImportExtension(/* @vite-ignore */ specifier))
+};
+export class CefEnvironment {
+    id = 'cef';
+    description = 'CEF browser renderer environment';
+    identity = {
+        esm: true,
+        typescript: false,
+        nativeLoader: false,
+        substrate: 'browser'
+    };
+    scope;
+    loader = importLoader;
+    facts;
+    /**
+     * The renderer's browser performance clock (`performance.now()`), captured
+     * once at construction so the value the kernel reads can never drift to a
+     * different page clock. Its readings are monotonic, nonnegative
+     * milliseconds since the renderer's time origin — never `Date.now()`.
+     */
+    readPerformanceMs;
+    /** The host's namespace, captured where it arrived and read only through a binding's owning schema. */
+    namespace;
+    /**
+     * `declaration.workspace` is the virtual root the app entry declared for
+     * this renderer; the environment declares it in its scope and invents none.
+     * `namespace` is the host's native namespace (the one `facts` were read from); the environment serves it through
+     * `CEF_RUNTIME_NAMESPACE_BINDING`; capabilities are independently bound from facts.
+     *
+     * All three are read once through the same guarded schemas the plugin uses (strict facts, a `{ root }` workspace
+     * capped at 4096, a namespace object with a callable `call`); anything else is refused `INVALID_INPUT`
+     * `cef-environment-options-invalid`, reporting issue counts and fixed failure categories only.
+     */
+    constructor(factsInput, declarationInput = {}, namespaceInput) {
+        const { facts, declaration, namespace } = readCefInput(CefEnvironmentInputSchema, {
+            facts: factsInput,
+            declaration: declarationInput,
+            namespace: namespaceInput
+        });
+        this.facts = facts;
+        this.namespace = namespace === undefined ? undefined : captureValue(namespace);
+        this.readPerformanceMs = readBrowserPerformanceClock();
+        // A renderer declares no credential capability: identity is the host's
+        // one actor (single-principal store). Native capability ids stay facts.
+        const scope = {
+            surface: 'browser',
+            hardware: 'consumer',
+            purpose: 'direct',
+            lifecycle: 'persistent',
+            hosting: { mode: 'local', owner: 'consumer', venue: 'user-device' },
+            qualifiers: {
+                dev: this.facts.dev,
+                cef: true,
+                os: this.facts.platform,
+                environmentTier: this.facts.environmentTier,
+                trustedOrigin: this.facts.trustedOrigin,
+                rendererGeneration: this.facts.renderer.generation
+            }
+        };
+        if (declaration.workspace)
+            scope.workspace = { root: declaration.workspace.root };
+        this.scope = declareRuntimeScope(scope, 'runtime-environment-cef');
+    }
+    createInvocationStore() {
+        return createSinglePrincipalInvocationStore();
+    }
+    /** Serves only the public values the native host declared at boot; anything else is undeclared. */
+    getEnv(key) {
+        return Object.hasOwn(this.facts.env, key) ? this.facts.env[key] : undefined;
+    }
+    /** A copy of the declared public values, so callers cannot rewrite the attested facts. */
+    getEnvSnapshot() {
+        return { ...this.facts.env };
+    }
+    getPlatform() {
+        return this.facts.platform;
+    }
+    /**
+     * Live monotonic milliseconds from the renderer's browser performance
+     * clock, for the kernel's lifecycle (`runtime.lifecycle.now()`): finite,
+     * nonnegative and nondecreasing, per the `RuntimeEnvironmentImplementation`
+     * contract. The kernel validates the value; this host only reads its
+     * renderer clock.
+     */
+    monotonicNow() {
+        return this.readPerformanceMs();
+    }
+    /**
+     * Serves the host namespace and the host's advertised capability ids (`CEF_RUNTIME_CAPABILITIES_BINDING`, from
+     * its facts), each read through the caller's owning schema: a value that does not match it is `INVALID_INPUT
+     * binding-invalid` (the kernel's convention), never a quiet absence; any other key, or an environment built
+     * without a namespace asked for it, answers `undefined`.
+     */
+    getBinding(key, schema) {
+        if (key === CEF_RUNTIME_CAPABILITIES_BINDING)
+            return decodeCapturedBinding(key, captureValue(this.facts.capabilities), schema);
+        if (key !== CEF_RUNTIME_NAMESPACE_BINDING)
+            return undefined;
+        return decodeCapturedBinding(key, this.namespace, schema);
+    }
+}
+//# sourceMappingURL=cef-environment.impl.js.map

package/dist/cef-environment.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cef-environment.impl.js","sourceRoot":"","sources":["../src/cef-environment.impl.ts"],"names":[],"mappings":"AAAA,uEAAuE;;;;;;;;;AAEvE,OAAO,EACN,YAAY,EACZ,oCAAoC,EACpC,mBAAmB,EACnB,qBAAqB,EAOrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AAEjG,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,gCAAgC,EAChC,6BAA6B,EAC7B,2BAA2B,EAC3B,YAAY,EAGZ,MAAM,gBAAgB,CAAC;AAExB,kFAAkF;AAClF,MAAM,YAAY,GAAgC;IACjD,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,kCAAC,kBAAkB,CAAC,SAAS,EAAC;CACjE,CAAC;AAIF,MAAM,OAAO,cAAc;IACjB,EAAE,GAAG,KAAK,CAAC;IACX,WAAW,GAAG,kCAAkC,CAAC;IACjD,QAAQ,GAAwB;QACxC,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,SAAS;KACpB,CAAC;IACO,KAAK,CAAe;IACpB,MAAM,GAAG,YAAY,CAAC;IACtB,KAAK,CAAe;IAC7B;;;;;OAKG;IACc,iBAAiB,CAAe;IACjD,uGAAuG;IACtF,SAAS,CAA4B;IAEtD;;;;;;;;;OASG;IACH,YAAY,UAAwB,EAAE,mBAA8C,EAAE,EAAE,cAAoC;QAC3H,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,yBAAyB,EAAE;YACjF,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,iBAAiB,GAAG,2BAA2B,EAAE,CAAC;QACvD,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,KAAK,GAAyB;YACnC,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,QAAQ;YACjB,SAAS,EAAE,YAAY;YACvB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE;YACnE,UAAU,EAAE;gBACX,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;gBACnB,GAAG,EAAE,IAAI;gBACT,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;gBACvB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;gBAC3C,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;gBACvC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU;aAClD;SACD,CAAC;QACF,IAAI,WAAW,CAAC,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAClF,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC;IAED,qBAAqB;QACpB,OAAO,oCAAoC,EAAE,CAAC;IAC/C,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,GAAW;QACjB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,CAAC;IAED,0FAA0F;IAC1F,cAAc;QACb,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACX,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAI,GAAW,EAAE,MAAoB;QAC9C,IAAI,GAAG,KAAK,gCAAgC;YAAE,OAAO,qBAAqB,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/H,IAAI,GAAG,KAAK,6BAA6B;YAAE,OAAO,SAAS,CAAC;QAC5D,OAAO,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;CACD"}

package/dist/contracts.d.ts

@@ -0,0 +1,65 @@
+/** Guarded native CEF acquisition and compatible contract exports. */
+import type * as z from 'zod/v4';
+import { CapabilityError, type CaughtFailure } from '@vibesdotdev/kernel';
+import { type CefHostFacts } from './schemas/facts.ts';
+import { type CefRuntimeNamespace } from './schemas/namespace.ts';
+import { type CefReadinessOptions } from './schemas/readiness.ts';
+export { CefHostFactsSchema, CefHostLifecycleSchema, type CefHostFacts, type CefHostLifecycle } from './schemas/facts.ts';
+export { CefPerformanceHolderSchema, CefRuntimeNamespaceSchema, type CefRuntimeNamespace } from './schemas/namespace.ts';
+export { CefWorkspaceDeclarationSchema, CefEnvironmentDeclarationSchema } from './schemas/options.ts';
+/**
+ * The runtime binding key under which `CefEnvironment` serves the host's namespace (`runtime.getBinding(key, schema)`).
+ * A transport that relays over the namespace (`@vibesdotdev/kernel-rpc/cef`) reads it through this binding with its
+ * own structural schema, so it never imports this package or reads `globalThis`: the page's globals are
+ * read here, once, by the host package. The transport pins the same string; this package's binding test proves
+ * the two agree.
+ */
+export declare const CEF_RUNTIME_NAMESPACE_BINDING = "cef/runtime-namespace";
+/**
+ * The runtime binding key under which `CefEnvironment` serves the host's advertised capability ids (the facts'
+ * `capabilities`). `@vibesdotdev/kernel-rpc/cef` reads it to learn whether the host admits a connect asking for
+ * Date metadata; the transport pins the same string.
+ */
+export declare const CEF_RUNTIME_CAPABILITIES_BINDING = "cef/runtime-capabilities";
+/** Set synchronously by the native host at document start: this page runs in a CEF host. */
+export declare const NATIVE_HOST_MARKER = "__vibesNativeHost";
+/** Fired by the native host after it installs `vibes.runtime`. */
+export declare const NATIVE_HOST_READY_EVENT = "vibes:runtime-host-ready";
+/** The reason caller values the CEF environment or its plugin could not read are refused with. */
+export declare const CEF_ENVIRONMENT_OPTIONS_INVALID = "cef-environment-options-invalid";
+/** Refuse invalid options without retaining caller-owned field names or thrown values. */
+export declare function cefOptionsInvalid(issues: readonly string[], unreadable?: string): CapabilityError;
+/**
+ * The one shape a caught failure takes at this boundary: the kernel's value-free
+ * facts (`valueFreeFailure`) narrowed through `FailureNameSchema` to fixed
+ * class-name categories. The caught failure's message is never read and the
+ * value itself is never retained, so a hostile native value cannot travel on a
+ * refusal — not in `details`, and not as `cause`.
+ */
+export declare function failureFacts(caught: CaughtFailure): {
+    failure: {
+        name: "Error" | "NonErrorThrown" | "UnreadableFailure" | "CapabilityError" | "TypeError" | "RangeError" | "SyntaxError" | "ReferenceError" | "URIError" | "EvalError" | "AggregateError" | "ZodError";
+    };
+};
+export declare function readCefInput<S extends z.ZodType>(schema: S, value: z.input<S>): z.output<S>;
+/**
+ * The renderer's browser performance clock (`performance.now()`), captured
+ * once as a bound reader so kernel lifecycle readings can never drift to a
+ * different page clock. A page whose `performance` global is unreadable is a
+ * broken page: refused `UNAVAILABLE / host-unavailable` — the same value-free
+ * refusal acquisition uses, never `Date.now()`.
+ */
+export declare function readBrowserPerformanceClock(): () => number;
+/** Resolve the injected generic runtime namespace without teaching features about globals. */
+export declare function getGlobalCefRuntimeNamespace(): CefRuntimeNamespace | null;
+/**
+ * The native runtime namespace, once the host says it is installed.
+ *
+ * Renderer code can mount before the host injects `vibes.runtime` (CEF injects
+ * after main-frame load). The host marks the page synchronously at document
+ * start and fires the ready event after injection, so this never polls or
+ * times out: a page without the marker has no CEF host (`host-unavailable`).
+ */
+export declare function awaitCefRuntimeNamespace(optionsInput?: CefReadinessOptions): Promise<CefRuntimeNamespace>;
+export declare function readCefHostFacts(namespace: CefRuntimeNamespace): Promise<CefHostFacts>;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AACjC,OAAO,EACH,eAAe,EACf,KAAK,aAAa,EACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAIN,KAAK,mBAAmB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG7F,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzH,OAAO,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAEtG;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,0BAA0B,CAAC;AAErE;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAE3E,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE,kGAAkG;AAClG,eAAO,MAAM,+BAA+B,oCAAoC,CAAC;AAKjF,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,eAAe,CAKjG;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa;;;;EAEjD;AAmBD,wBAAgB,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAI3F;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,MAAM,CAa1D;AAED,8FAA8F;AAC9F,wBAAgB,4BAA4B,IAAI,mBAAmB,GAAG,IAAI,CAGzE;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAAC,YAAY,GAAE,mBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoGnH;AAED,wBAAsB,gBAAgB,CACrC,SAAS,EAAE,mBAAmB,GAC5B,OAAO,CAAC,YAAY,CAAC,CAYvB"}

package/dist/contracts.js

@@ -0,0 +1,235 @@
+import { CapabilityError, settle, settleNow, valueFreeFailure } from '@vibesdotdev/kernel';
+import { CefHostFactsSchema } from "./schemas/facts.js";
+import { CefNamespaceGlobalSchema, CefMarkedPageSchema, CefPerformanceHolderSchema } from "./schemas/namespace.js";
+import { CefReadinessOptionsSchema } from "./schemas/readiness.js";
+import { FailureNameSchema } from "./schemas/failure.js";
+export { CefHostFactsSchema, CefHostLifecycleSchema } from "./schemas/facts.js";
+export { CefPerformanceHolderSchema, CefRuntimeNamespaceSchema } from "./schemas/namespace.js";
+export { CefWorkspaceDeclarationSchema, CefEnvironmentDeclarationSchema } from "./schemas/options.js";
+/**
+ * The runtime binding key under which `CefEnvironment` serves the host's namespace (`runtime.getBinding(key, schema)`).
+ * A transport that relays over the namespace (`@vibesdotdev/kernel-rpc/cef`) reads it through this binding with its
+ * own structural schema, so it never imports this package or reads `globalThis`: the page's globals are
+ * read here, once, by the host package. The transport pins the same string; this package's binding test proves
+ * the two agree.
+ */
+export const CEF_RUNTIME_NAMESPACE_BINDING = 'cef/runtime-namespace';
+/**
+ * The runtime binding key under which `CefEnvironment` serves the host's advertised capability ids (the facts'
+ * `capabilities`). `@vibesdotdev/kernel-rpc/cef` reads it to learn whether the host admits a connect asking for
+ * Date metadata; the transport pins the same string.
+ */
+export const CEF_RUNTIME_CAPABILITIES_BINDING = 'cef/runtime-capabilities';
+/** Set synchronously by the native host at document start: this page runs in a CEF host. */
+export const NATIVE_HOST_MARKER = '__vibesNativeHost';
+/** Fired by the native host after it installs `vibes.runtime`. */
+export const NATIVE_HOST_READY_EVENT = 'vibes:runtime-host-ready';
+/** The reason caller values the CEF environment or its plugin could not read are refused with. */
+export const CEF_ENVIRONMENT_OPTIONS_INVALID = 'cef-environment-options-invalid';
+/** The fixed message every caught-failure refusal at this boundary carries. */
+const CEF_READ_FAILED_MESSAGE = 'The CEF host input could not be read.';
+/** Refuse invalid options without retaining caller-owned field names or thrown values. */
+export function cefOptionsInvalid(issues, unreadable) {
+    return new CapabilityError('The CEF environment options are invalid.', 'INVALID_INPUT', {
+        reason: CEF_ENVIRONMENT_OPTIONS_INVALID, retryable: false,
+        details: { issueCount: Math.min(issues.length, 16), unreadable: unreadable !== undefined }
+    });
+}
+/**
+ * The one shape a caught failure takes at this boundary: the kernel's value-free
+ * facts (`valueFreeFailure`) narrowed through `FailureNameSchema` to fixed
+ * class-name categories. The caught failure's message is never read and the
+ * value itself is never retained, so a hostile native value cannot travel on a
+ * refusal — not in `details`, and not as `cause`.
+ */
+export function failureFacts(caught) {
+    return { failure: { name: FailureNameSchema.parse(valueFreeFailure(caught).name) } };
+}
+/**
+ * The one refusal a caught failure produces at this boundary: the fixed message
+ * with the failure's value-free facts in `details.failure`.
+ */
+function cefReadFailed(caught, reason, code) {
+    return new CapabilityError(CEF_READ_FAILED_MESSAGE, code, { reason, retryable: false, details: failureFacts(caught) });
+}
+/** Guard schema predicates and getters through the kernel's caught-failure boundary. */
+function parseCefBoundary(schema, value, reason, code) {
+    const settled = settleNow(() => schema.safeParse(value));
+    if (settled.ok)
+        return settled.value;
+    throw cefReadFailed(settled.cause, reason, code);
+}
+export function readCefInput(schema, value) {
+    const parsed = parseCefBoundary(schema, value, CEF_ENVIRONMENT_OPTIONS_INVALID, 'INVALID_INPUT');
+    if (parsed.success)
+        return parsed.data;
+    throw cefOptionsInvalid(parsed.error.issues.map((issue) => issue.code));
+}
+/**
+ * The renderer's browser performance clock (`performance.now()`), captured
+ * once as a bound reader so kernel lifecycle readings can never drift to a
+ * different page clock. A page whose `performance` global is unreadable is a
+ * broken page: refused `UNAVAILABLE / host-unavailable` — the same value-free
+ * refusal acquisition uses, never `Date.now()`.
+ */
+export function readBrowserPerformanceClock() {
+    const page = parseCefBoundary(CefPerformanceHolderSchema, globalThis, 'host-unavailable', 'UNAVAILABLE');
+    if (!page.success) {
+        throw new CapabilityError('The CEF renderer has no readable performance clock.', 'UNAVAILABLE', {
+            reason: 'host-unavailable',
+            retryable: false
+        });
+    }
+    // The schema output is the page's own global object (identity-preserving
+    // `z.custom`), never a schema copy: Performance.now requires its original
+    // receiver, so bind the captured method to it.
+    const { performance } = page.data;
+    return performance.now.bind(performance);
+}
+/** Resolve the injected generic runtime namespace without teaching features about globals. */
+export function getGlobalCefRuntimeNamespace() {
+    const host = parseCefBoundary(CefNamespaceGlobalSchema, globalThis, 'host-unavailable', 'UNAVAILABLE');
+    return host.success ? host.data.vibes.runtime : null;
+}
+/**
+ * The native runtime namespace, once the host says it is installed.
+ *
+ * Renderer code can mount before the host injects `vibes.runtime` (CEF injects
+ * after main-frame load). The host marks the page synchronously at document
+ * start and fires the ready event after injection, so this never polls or
+ * times out: a page without the marker has no CEF host (`host-unavailable`).
+ */
+export async function awaitCefRuntimeNamespace(optionsInput = {}) {
+    const options = readCefInput(CefReadinessOptionsSchema, optionsInput);
+    const signals = [options.signal, options.lifecycle?.signal].filter((signal) => signal !== undefined);
+    const cancelled = () => new CapabilityError('CEF host readiness was cancelled.', 'CANCELLED', {
+        reason: 'wait-aborted', retryable: false,
+        details: { cause: options.lifecycle?.signal.aborted ? 'runtime-disposed' : 'caller-aborted' }
+    });
+    if (signals.some((signal) => signal.aborted))
+        throw cancelled();
+    const immediate = getGlobalCefRuntimeNamespace();
+    if (immediate)
+        return immediate;
+    const page = parseCefBoundary(CefMarkedPageSchema, globalThis, 'host-unavailable', 'UNAVAILABLE');
+    if (!page.success) {
+        throw new CapabilityError('This page has no CEF runtime host.', 'UNAVAILABLE', {
+            reason: 'host-unavailable', retryable: false
+        });
+    }
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let registering = true;
+        let primary;
+        let result;
+        const removals = [];
+        /** Value-free facts of each caught native failure; the raw failures are never retained. */
+        const failures = [];
+        /**
+         * The rejection every caught native failure ends in: the primary refusal's
+         * own message, code, reason, retryable and details, with each cleanup
+         * failure beside them as a value-free fact in `details.cleanupFailures`.
+         * Nothing is dropped, and no caught native value rides on the refusal.
+         */
+        const rejected = () => {
+            const refusal = primary ?? new CapabilityError(CEF_READ_FAILED_MESSAGE, 'UNAVAILABLE', {
+                reason: 'host-unavailable', retryable: false
+            });
+            return new CapabilityError(refusal.message, refusal.code, {
+                reason: refusal.reason,
+                retryable: refusal.retryable,
+                details: { ...refusal.details, cleanupFailures: failures }
+            });
+        };
+        const complete = () => {
+            // A native add may invoke the callback before installing the listener.
+            // Wait for registration to unwind before removing anything.
+            if (registering || !settled)
+                return;
+            for (const remove of removals.splice(0)) {
+                const cleanup = settleNow(remove);
+                if (!cleanup.ok)
+                    failures.push(failureFacts(cleanup.cause).failure);
+            }
+            if (failures.length > 0)
+                reject(rejected());
+            else if (primary)
+                reject(primary);
+            else
+                resolve(result);
+        };
+        const finish = (error, namespace) => {
+            if (settled)
+                return;
+            settled = true;
+            primary = error;
+            result = namespace;
+            complete();
+        };
+        const abort = () => finish(cancelled());
+        const ready = () => {
+            if (settled)
+                return;
+            if (signals.some((signal) => signal.aborted))
+                return abort();
+            const acquired = settleNow(() => getGlobalCefRuntimeNamespace());
+            if (acquired.ok) {
+                if (acquired.value)
+                    finish(undefined, acquired.value);
+                else
+                    finish(new CapabilityError('The CEF host signalled ready without its namespace.', 'UNAVAILABLE', {
+                        reason: 'host-unavailable', retryable: false
+                    }));
+                return;
+            }
+            finish(cefReadFailed(acquired.cause, 'host-unavailable', 'UNAVAILABLE'));
+        };
+        const registration = settleNow(() => {
+            for (const signal of signals) {
+                if (settled)
+                    break;
+                removals.push(() => signal.removeEventListener('abort', abort));
+                signal.addEventListener('abort', abort, { once: true });
+                if (signal.aborted)
+                    abort();
+            }
+            for (const event of [NATIVE_HOST_READY_EVENT, 'bridgeReady']) {
+                if (settled)
+                    break;
+                removals.push(() => page.data.removeEventListener(event, ready));
+                page.data.addEventListener(event, ready, { once: true });
+            }
+            if (!settled) {
+                if (signals.some((signal) => signal.aborted))
+                    abort();
+                else if (getGlobalCefRuntimeNamespace())
+                    ready();
+            }
+        });
+        // Registration is the one path that can fail after the promise settled, so the
+        // failure either joins the value-free facts the rejection carries or becomes
+        // the refusal it rejects with.
+        if (!registration.ok) {
+            if (settled)
+                failures.push(failureFacts(registration.cause).failure);
+            else
+                finish(cefReadFailed(registration.cause, 'host-unavailable', 'UNAVAILABLE'));
+        }
+        registering = false;
+        complete();
+    });
+}
+export async function readCefHostFacts(namespace) {
+    const called = await settle(() => namespace.call('environment'));
+    if (!called.ok) {
+        throw cefReadFailed(called.cause, 'cef-host-facts-unavailable', 'UNAVAILABLE');
+    }
+    const parsed = parseCefBoundary(CefHostFactsSchema, called.value, 'cef-host-facts-invalid', 'INVALID_INPUT');
+    if (!parsed.success) {
+        throw new CapabilityError('The CEF host facts are invalid.', 'INVALID_INPUT', {
+            reason: 'cef-host-facts-invalid', retryable: false
+        });
+    }
+    return parsed.data;
+}
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAEvD,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACN,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAA4B,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAA4C,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAA4B,MAAM,wBAAwB,CAAC;AACzH,OAAO,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAEtG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,uBAAuB,CAAC;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAE3E,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACtD,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,kGAAkG;AAClG,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC;AAEjF,+EAA+E;AAC/E,MAAM,uBAAuB,GAAG,uCAAuC,CAAC;AAExE,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,MAAyB,EAAE,UAAmB;IAC/E,OAAO,IAAI,eAAe,CAAC,0CAA0C,EAAE,eAAe,EAAE;QACvF,MAAM,EAAE,+BAA+B,EAAE,SAAS,EAAE,KAAK;QACzD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,KAAK,SAAS,EAAE;KAC1F,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAqB;IACjD,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAqB,EAAE,MAAc,EAAE,IAAqC;IAClG,OAAO,IAAI,eAAe,CAAC,uBAAuB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxH,CAAC;AAED,wFAAwF;AACxF,SAAS,gBAAgB,CACxB,MAAS,EAAE,KAAiD,EAAE,MAAc,EAAE,IAAqC;IAEnH,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,YAAY,CAAsB,MAAS,EAAE,KAAiB;IAC7E,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,+BAA+B,EAAE,eAAe,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B;IAC1C,MAAM,IAAI,GAAG,gBAAgB,CAAC,0BAA0B,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IACzG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE;YAC/F,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,+CAA+C;IAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,4BAA4B;IAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,wBAAwB,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IACvG,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,eAAoC,EAAE;IACpF,MAAM,OAAO,GAAG,YAAY,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,eAAe,CAAC,mCAAmC,EAAE,WAAW,EAAE;QAC7F,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK;QACxC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,EAAE;KAC7F,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,SAAS,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,4BAA4B,EAAE,CAAC;IACjD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,IAAI,GAAG,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAClG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,aAAa,EAAE;YAC9E,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK;SAC5C,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,OAAoC,CAAC;QACzC,IAAI,MAAuC,CAAC;QAC5C,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,2FAA2F;QAC3F,MAAM,QAAQ,GAAiD,EAAE,CAAC;QAClE;;;;;WAKG;QACH,MAAM,QAAQ,GAAG,GAAG,EAAE;YACrB,MAAM,OAAO,GAAG,OAAO,IAAI,IAAI,eAAe,CAAC,uBAAuB,EAAE,aAAa,EAAE;gBACtF,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK;aAC5C,CAAC,CAAC;YACH,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBACzD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE;aAC1D,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,EAAE;YACrB,uEAAuE;YACvE,4DAA4D;YAC5D,IAAI,WAAW,IAAI,CAAC,OAAO;gBAAE,OAAO;YACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;iBACvC,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC;;gBAC7B,OAAO,CAAC,MAAO,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAuB,EAAE,SAA+B,EAAE,EAAE;YAC3E,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,GAAG,SAAS,CAAC;YACnB,QAAQ,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,EAAE;YAClB,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,4BAA4B,EAAE,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,KAAK;oBAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;;oBACjD,MAAM,CAAC,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE;wBACrG,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK;qBAC5C,CAAC,CAAC,CAAC;gBACJ,OAAO;YACR,CAAC;YACD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,EAAE;YACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,IAAI,OAAO;oBAAE,MAAM;gBACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,IAAI,MAAM,CAAC,OAAO;oBAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,CAAC,uBAAuB,EAAE,aAAa,CAAU,EAAE,CAAC;gBACvE,IAAI,OAAO;oBAAE,MAAM;gBACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;oBAAE,KAAK,EAAE,CAAC;qBACjD,IAAI,4BAA4B,EAAE;oBAAE,KAAK,EAAE,CAAC;YAClD,CAAC;QACF,CAAC,CAAC,CAAC;QACH,+EAA+E;QAC/E,6EAA6E;QAC7E,+BAA+B;QAC/B,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;;gBAChE,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,WAAW,GAAG,KAAK,CAAC;QACpB,QAAQ,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,SAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,4BAA4B,EAAE,aAAa,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,EAAE,wBAAwB,EAAE,eAAe,CAAC,CAAC;IAC7G,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,eAAe,EAAE;YAC7E,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK;SAClD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC"}

package/dist/docs/plugin.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Docs-only plugin for the CEF runtime environment.
+ *
+ * Registers the owner `docs/topic` for runtime docs discovery. It does not
+ * select or register the environment: that happens before bootstrap through
+ * `@vibesdotdev/host-cef/plugin`.
+ */
+export declare const runtimeEnvironmentCefDocsPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default runtimeEnvironmentCefDocsPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/docs/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/docs/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,eAAO,MAAM,+BAA+B,6CAK1C,CAAC;AAEH,eAAe,+BAA+B,CAAC"}