@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/daemon/hosting/process/start-timeout.js

@@ -0,0 +1,13 @@
+/**
+ * How long a launcher waits for a runtime daemon it started to become
+ * reachable: declared config, never an environment knob. A host declares it in
+ * its `vibes.config` as `config.plugins.runtime.daemon.startTimeoutMs`, which
+ * the one config projection publishes as the `plugins.runtime` context.
+ */
+import { readRuntimePluginConfig, RuntimeDaemonConfigSchema } from "./runtime-config.js";
+export const DEFAULT_DAEMON_START_TIMEOUT_MS = RuntimeDaemonConfigSchema.parse({}).startTimeoutMs;
+/** The declared start timeout of `runtime`'s host, or the default when it declares none. */
+export async function runtimeDaemonStartTimeoutMs(runtime) {
+    return (await readRuntimePluginConfig(runtime)).daemon?.startTimeoutMs ?? DEFAULT_DAEMON_START_TIMEOUT_MS;
+}
+//# sourceMappingURL=start-timeout.js.map

package/dist/daemon/hosting/process/start-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-timeout.js","sourceRoot":"","sources":["../../../../src/daemon/hosting/process/start-timeout.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEzF,MAAM,CAAC,MAAM,+BAA+B,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC;AAElG,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAqD;IACtG,OAAO,CAAC,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,cAAc,IAAI,+BAA+B,CAAC;AAC3G,CAAC"}

package/dist/daemon/hosting/socket/paths.consumer.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Consumer-facing daemon paths.
+ *
+ * The derivation itself is universal and lives in
+ * `runtime-daemon.socket-path.ts` — the PM process DESCRIPTOR needs it, and a
+ * descriptor must import in any scope. This module stays as the consumer entry
+ * point so `daemon.consumer.ts` and every other consumer caller keep the
+ * import they already have.
+ */
+export { getRuntimeDaemonAttestationPath, getRuntimeDaemonPidPath, getRuntimeProjectionSocketPath, getRuntimeSocketPath, getSocketDir, getVibesDir } from './runtime-daemon.socket-path.ts';
+//# sourceMappingURL=paths.consumer.d.ts.map

package/dist/daemon/hosting/socket/paths.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.consumer.d.ts","sourceRoot":"","sources":["../../../../src/daemon/hosting/socket/paths.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACP,+BAA+B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EACxI,MAAM,iCAAiC,CAAC"}

package/dist/daemon/hosting/socket/paths.consumer.js

@@ -0,0 +1,11 @@
+/**
+ * Consumer-facing daemon paths.
+ *
+ * The derivation itself is universal and lives in
+ * `runtime-daemon.socket-path.ts` — the PM process DESCRIPTOR needs it, and a
+ * descriptor must import in any scope. This module stays as the consumer entry
+ * point so `daemon.consumer.ts` and every other consumer caller keep the
+ * import they already have.
+ */
+export { getRuntimeDaemonAttestationPath, getRuntimeDaemonPidPath, getRuntimeProjectionSocketPath, getRuntimeSocketPath, getSocketDir, getVibesDir } from "./runtime-daemon.socket-path.js";
+//# sourceMappingURL=paths.consumer.js.map

package/dist/daemon/hosting/socket/paths.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.consumer.js","sourceRoot":"","sources":["../../../../src/daemon/hosting/socket/paths.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACP,+BAA+B,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EACxI,MAAM,iCAAiC,CAAC"}

package/dist/daemon/hosting/socket/runtime-daemon-endpoint.impl.consumer.d.ts

@@ -0,0 +1,28 @@
+import type { RuntimeDaemonEndpointHotReloadOptions } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon-endpoint.impl.consumer.ts";
+export type { RuntimeDaemonEndpointHotReloadOptions } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon-endpoint.impl.consumer.ts";
+/**
+ * The runtime daemon endpoint PM resolves by kind (`pm/runtime-daemon-endpoint`,
+ * declared by `@vibesdotdev/pm` so PM never imports this package): the
+ * workspace runtime socket and host hot reload, wrapped from the owners here
+ * without changing either. Closures over the handed runtime only, so two
+ * runtimes in one process stay independent.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import { type HostHotReloadResult } from '../daemon-host/host-hot-reload.consumer.ts';
+import { type RuntimeDaemonPathRuntime } from './runtime-daemon.socket-path.ts';
+export declare const RUNTIME_DAEMON_ENDPOINT_KIND = "pm/runtime-daemon-endpoint";
+export declare const RUNTIME_DAEMON_ENDPOINT_ID = "runtime-plugin.daemon-endpoint";
+export declare const runtimeDaemonEndpoint: {
+    socketPath: (runtime: RuntimeDaemonPathRuntime, workspace?: string) => string;
+    hostHotReload: {
+        start: (runtime: VibesRuntime, options: RuntimeDaemonEndpointHotReloadOptions) => Promise<HostHotReloadResult>;
+    };
+};
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<{
+    socketPath: (runtime: RuntimeDaemonPathRuntime, workspace?: string) => string;
+    hostHotReload: {
+        start: (runtime: VibesRuntime, options: RuntimeDaemonEndpointHotReloadOptions) => Promise<HostHotReloadResult>;
+    };
+}>;
+export default _default;
+//# sourceMappingURL=runtime-daemon-endpoint.impl.consumer.d.ts.map

package/dist/daemon/hosting/socket/runtime-daemon-endpoint.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-daemon-endpoint.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/daemon/hosting/socket/runtime-daemon-endpoint.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+FAA+F,CAAC;AAC3J,YAAY,EAAE,qCAAqC,EAAE,MAAM,+FAA+F,CAAC;AAC3J;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAC1G,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEtG,eAAO,MAAM,4BAA4B,+BAA+B,CAAC;AACzE,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAE3E,eAAO,MAAM,qBAAqB;0BACX,wBAAwB,cAAc,MAAM,KAAG,MAAM;;yBAGzD,YAAY,WAAW,qCAAqC,KAAG,OAAO,CAAC,mBAAmB,CAAC;;CAG7G,CAAC;;0BANqB,wBAAwB,cAAc,MAAM,KAAG,MAAM;;yBAGzD,YAAY,WAAW,qCAAqC,KAAG,OAAO,CAAC,mBAAmB,CAAC;;;AAK9G,wBAIG"}

package/dist/daemon/hosting/socket/runtime-daemon-endpoint.impl.consumer.js

@@ -0,0 +1,17 @@
+import { createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { startHostHotReload } from "../daemon-host/host-hot-reload.consumer.js";
+import { getRuntimeSocketPath } from "./runtime-daemon.socket-path.js";
+export const RUNTIME_DAEMON_ENDPOINT_KIND = 'pm/runtime-daemon-endpoint';
+export const RUNTIME_DAEMON_ENDPOINT_ID = 'runtime-plugin.daemon-endpoint';
+export const runtimeDaemonEndpoint = {
+    socketPath: (runtime, workspace) => getRuntimeSocketPath(runtime, workspace),
+    hostHotReload: {
+        start: (runtime, options) => startHostHotReload(runtime, options)
+    }
+};
+export default createRuntimeImplementation({
+    id: RUNTIME_DAEMON_ENDPOINT_ID,
+    kind: RUNTIME_DAEMON_ENDPOINT_KIND,
+    implementation: runtimeDaemonEndpoint
+});
+//# sourceMappingURL=runtime-daemon-endpoint.impl.consumer.js.map

package/dist/daemon/hosting/socket/runtime-daemon-endpoint.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-daemon-endpoint.impl.consumer.js","sourceRoot":"","sources":["../../../../src/daemon/hosting/socket/runtime-daemon-endpoint.impl.consumer.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAA4B,MAAM,4CAA4C,CAAC;AAC1G,OAAO,EAAE,oBAAoB,EAAiC,MAAM,iCAAiC,CAAC;AAEtG,MAAM,CAAC,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,UAAU,EAAE,CAAC,OAAiC,EAAE,SAAkB,EAAU,EAAE,CAC7E,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC;IACzC,aAAa,EAAE;QACd,KAAK,EAAE,CAAC,OAAqB,EAAE,OAA8C,EAAgC,EAAE,CAC9G,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC;KACrC;CACD,CAAC;AAEF,eAAe,2BAA2B,CAAC;IAC1C,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,4BAA4B;IAClC,cAAc,EAAE,qBAAqB;CACrC,CAAC,CAAC"}

package/dist/daemon/hosting/socket/runtime-daemon.socket-path.d.ts

@@ -0,0 +1,59 @@
+import type { RuntimeDaemonPathRuntime, RuntimeWorkspaceIsolation } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon.socket-path.ts";
+export { runtimeWorkspaceIsolationSchema } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon.socket-path.ts";
+export type { RuntimeDaemonPathRuntime, RuntimeWorkspaceIsolation } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon.socket-path.ts";
+/**
+ * Runtime daemon socket paths — universal.
+ *
+ * `runtime-daemon.process.descriptor.ts` is a `*.descriptor.ts`: universal
+ * metadata that must import in any scope. Its `socket` / `healthCheck` getters
+ * still have to hand PM a real path, and PM reads both as plain synchronous
+ * properties (`daemon.ts`, `manager.ts`, `services/lifecycle.ts`,
+ * `daemon/health-monitor.ts`, `cli/pm.start.impl.ts`), so there is no seam to
+ * defer them through — ESM has no synchronous dynamic import.
+ *
+ * So the derivation lives here instead, in a module with no scope token in its
+ * name. Everything it touches is scope-neutral by construction: every function
+ * takes the runtime it reads (its path roots, its bound workspace
+ * `hostWorkspaceRoot` (rc02-rc03 C3), its captured env); `@vibesdotdev/identity`
+ * is a pure derivation. Nothing here reads an ambient runtime. `VIBES_WORKSPACE_PATH` is not
+ * read: the kernel ignores it, so a daemon and its clients can never disagree
+ * about a socket name through it. It was reached through `paths.consumer.ts` before, and a
+ * `.consumer` filename is a licence for exactly the node-only import that would
+ * then break every non-consumer scope that touches the descriptor.
+ *
+ * The isolation knob is read from the handed runtime's captured env
+ * (`runtime.getEnv`), the same runtime that publishes the path roots, so a
+ * renderer or worker resolves it from its own environment.
+ *
+ * `paths.consumer.ts` re-exports these, so consumer callers are unchanged.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+/**
+ * Project tools share a daemon; folder-bound hosts explicitly isolate exact
+ * roots. Identity is pure: nothing here walks or re-anchors.
+ */
+export declare function resolveRuntimeDaemonWorkspaceId(workspace: string, isolation?: RuntimeWorkspaceIsolation): string;
+/**
+ * The daemon's workspace: the caller's explicit root, else the handed host's
+ * own bound workspace (rc02-rc03 §2.4, C3), read synchronously because socket
+ * names are plain properties; `workspace-unbound` on an unbound host.
+ */
+export declare function runtimeDaemonWorkspace(runtime: RuntimeDaemonPathRuntime, workspace?: string): string;
+export declare function getRuntimeWorkspaceIsolation(runtime: Pick<VibesRuntime, 'getEnv'>): RuntimeWorkspaceIsolation;
+export declare function getVibesDir(runtime: Pick<VibesRuntime, 'hasKind' | 'query'>): string;
+export declare function getSocketDir(runtime: Pick<VibesRuntime, 'hasKind' | 'query'>): string;
+export declare function getRuntimeSocketPath(runtime: RuntimeDaemonPathRuntime, workspace?: string, isolation?: "root" | "project"): string;
+/**
+ * Native-custody runtime projection socket. Renderer JavaScript never receives
+ * this path; the CEF browser process relays the generic runtime protocol.
+ */
+export declare function getRuntimeProjectionSocketPath(runtime: RuntimeDaemonPathRuntime, workspace?: string, isolation?: "root" | "project"): string;
+/**
+ * The runtime daemon's local-attestation claim (RC08): a 0600 file holding
+ * this start's secret, next to its pid file under the runtime's roots, one per
+ * daemon workspace. A same-user client reads it to present its launch
+ * identity; the daemon writes it at start and removes it at stop.
+ */
+export declare function getRuntimeDaemonAttestationPath(runtime: RuntimeDaemonPathRuntime, workspace?: string, isolation?: "root" | "project"): string;
+export declare function getRuntimeDaemonPidPath(runtime: RuntimeDaemonPathRuntime, workspace?: string, isolation?: "root" | "project"): string;
+//# sourceMappingURL=runtime-daemon.socket-path.d.ts.map

package/dist/daemon/hosting/socket/runtime-daemon.socket-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-daemon.socket-path.d.ts","sourceRoot":"","sources":["../../../../src/daemon/hosting/socket/runtime-daemon.socket-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,oFAAoF,CAAC;AAE9J,OAAO,EAAE,+BAA+B,EAAE,MAAM,oFAAoF,CAAC;AACrI,YAAY,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,oFAAoF,CAAC;AAC9J;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKxD;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,GAAE,yBAAqC,GAAG,MAAM,CAI3H;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAEpG;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,yBAAyB,CAE7G;AAwBD,wBAAgB,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,MAAM,CAEpF;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,MAAM,CAErF;AAED,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,wBAAwB,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,qBAAwC,GAC/C,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,wBAAwB,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,qBAAwC,GAC/C,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC9C,OAAO,EAAE,wBAAwB,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,qBAAwC,GAC/C,MAAM,CAER;AAED,wBAAgB,uBAAuB,CACtC,OAAO,EAAE,wBAAwB,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,qBAAwC,GAC/C,MAAM,CAER"}

package/dist/daemon/hosting/socket/runtime-daemon.socket-path.js

@@ -0,0 +1,72 @@
+import { runtimeWorkspaceIsolationSchema } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon.socket-path.js";
+export { runtimeWorkspaceIsolationSchema } from "../../../schemas/contracts/daemon/hosting/contracts2/runtime-daemon.socket-path.js";
+import { hostWorkspaceRoot } from '@vibesdotdev/kernel/context/workspace-path.context.impl';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { resolveWorkspaceIdentifier, resolveWorkspaceToolingId } from '@vibesdotdev/identity';
+/**
+ * Project tools share a daemon; folder-bound hosts explicitly isolate exact
+ * roots. Identity is pure: nothing here walks or re-anchors.
+ */
+export function resolveRuntimeDaemonWorkspaceId(workspace, isolation = 'project') {
+    return runtimeWorkspaceIsolationSchema.parse(isolation) === 'root'
+        ? `root-${resolveWorkspaceToolingId(workspace)}`
+        : resolveWorkspaceIdentifier(workspace);
+}
+/**
+ * The daemon's workspace: the caller's explicit root, else the handed host's
+ * own bound workspace (rc02-rc03 §2.4, C3), read synchronously because socket
+ * names are plain properties; `workspace-unbound` on an unbound host.
+ */
+export function runtimeDaemonWorkspace(runtime, workspace) {
+    return workspace?.trim() || hostWorkspaceRoot(runtime);
+}
+export function getRuntimeWorkspaceIsolation(runtime) {
+    return runtimeWorkspaceIsolationSchema.parse(runtime.getEnv('VIBES_RUNTIME_WORKSPACE_ISOLATION') || 'project');
+}
+/**
+ * POSIX join for socket paths.
+ *
+ * Deliberately not `node:path` — `runtime-path.interface.ts` says universal
+ * code consumes path work through the runtime rather than importing
+ * `node:path` / `node:os` directly, and a static `node:path` here would put a
+ * node builtin back into a descriptor's graph. These are unix domain socket
+ * paths, so POSIX separators are the only ones that can ever be correct.
+ */
+function joinPosix(...segments) {
+    return segments
+        .map((segment, index) => index === 0 ? segment.replace(/\/+$/, '') : segment.replace(/^\/+|\/+$/g, ''))
+        .filter((segment, index) => index === 0 || segment.length > 0)
+        .join('/');
+}
+function daemonWorkspaceId(runtime, workspace, isolation) {
+    return resolveRuntimeDaemonWorkspaceId(runtimeDaemonWorkspace(runtime, workspace), isolation);
+}
+export function getVibesDir(runtime) {
+    return getPathRoots(runtime).activeHome;
+}
+export function getSocketDir(runtime) {
+    return joinPosix(getVibesDir(runtime), 'pm', 'sock');
+}
+export function getRuntimeSocketPath(runtime, workspace, isolation = getRuntimeWorkspaceIsolation(runtime)) {
+    return joinPosix(getSocketDir(runtime), `vibes-runtime-${daemonWorkspaceId(runtime, workspace, isolation)}.sock`);
+}
+/**
+ * Native-custody runtime projection socket. Renderer JavaScript never receives
+ * this path; the CEF browser process relays the generic runtime protocol.
+ */
+export function getRuntimeProjectionSocketPath(runtime, workspace, isolation = getRuntimeWorkspaceIsolation(runtime)) {
+    return joinPosix(getSocketDir(runtime), `vibes-runtime-projection-${daemonWorkspaceId(runtime, workspace, isolation)}.sock`);
+}
+/**
+ * The runtime daemon's local-attestation claim (RC08): a 0600 file holding
+ * this start's secret, next to its pid file under the runtime's roots, one per
+ * daemon workspace. A same-user client reads it to present its launch
+ * identity; the daemon writes it at start and removes it at stop.
+ */
+export function getRuntimeDaemonAttestationPath(runtime, workspace, isolation = getRuntimeWorkspaceIsolation(runtime)) {
+    return joinPosix(getVibesDir(runtime), 'pm', `runtime-daemon-${daemonWorkspaceId(runtime, workspace, isolation)}.attest`);
+}
+export function getRuntimeDaemonPidPath(runtime, workspace, isolation = getRuntimeWorkspaceIsolation(runtime)) {
+    return joinPosix(getVibesDir(runtime), 'pm', `runtime-daemon-${daemonWorkspaceId(runtime, workspace, isolation)}.pid`);
+}
+//# sourceMappingURL=runtime-daemon.socket-path.js.map

package/dist/daemon/hosting/socket/runtime-daemon.socket-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-daemon.socket-path.js","sourceRoot":"","sources":["../../../../src/daemon/hosting/socket/runtime-daemon.socket-path.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,oFAAoF,CAAC;AACrI,OAAO,EAAE,+BAA+B,EAAE,MAAM,oFAAoF,CAAC;AA8BrI,OAAO,EAAE,iBAAiB,EAAE,MAAM,yDAAyD,CAAC;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAE9F;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAiB,EAAE,YAAuC,SAAS;IAClH,OAAO,+BAA+B,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM;QACjE,CAAC,CAAC,QAAQ,yBAAyB,CAAC,SAAS,CAAC,EAAE;QAChD,CAAC,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiC,EAAE,SAAkB;IAC3F,OAAO,SAAS,EAAE,IAAI,EAAE,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAqC;IACjF,OAAO,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mCAAmC,CAAC,IAAI,SAAS,CAAC,CAAC;AAChH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,GAAG,QAAkB;IACvC,OAAO,QAAQ;SACb,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACvB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAC7E;SACA,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7D,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiC,EAAE,SAA6B,EAAE,SAAoC;IAChI,OAAO,+BAA+B,CAAC,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAgD;IAC3E,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgD;IAC5E,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,OAAiC,EACjC,SAAkB,EAClB,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC;IAEjD,OAAO,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,iBAAiB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;AACnH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC7C,OAAiC,EACjC,SAAkB,EAClB,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC;IAEjD,OAAO,SAAS,CACf,YAAY,CAAC,OAAO,CAAC,EACrB,4BAA4B,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,CACnF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC9C,OAAiC,EACjC,SAAkB,EAClB,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC;IAEjD,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,OAAiC,EACjC,SAAkB,EAClB,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC;IAEjD,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;AACxH,CAAC"}

package/dist/daemon/pairing/client.consumer.d.ts

@@ -0,0 +1,11 @@
+import type { PairWithRemoteDaemonOptions } from "../../schemas/contracts/pairing/client.consumer.ts";
+export { PairingHttpSchema, SyntaxBodySchema } from "../../schemas/contracts/pairing/client.consumer.ts";
+export type { PairWithRemoteDaemonOptions } from "../../schemas/contracts/pairing/client.consumer.ts";
+import type { PairedMachine } from './types.ts';
+/**
+ * Complete a pairing handshake against a remote daemon and persist the
+ * resulting machine entry. Throws on any failure (network, invalid code,
+ * malformed response); on success returns the stored {@link PairedMachine}.
+ */
+export declare function pairWithRemoteDaemon(options: PairWithRemoteDaemonOptions): Promise<PairedMachine>;
+//# sourceMappingURL=client.consumer.d.ts.map

package/dist/daemon/pairing/client.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.consumer.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/client.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAEtG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AACzG,YAAY,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAatG,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,YAAY,CAAC;AAUhE;;;;GAIG;AACH,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,aAAa,CAAC,CAiDxB"}

package/dist/daemon/pairing/client.consumer.js

@@ -0,0 +1,73 @@
+import { PairingHttpSchema, SyntaxBodySchema } from "../../schemas/contracts/pairing/client.consumer.js";
+export { PairingHttpSchema, SyntaxBodySchema } from "../../schemas/contracts/pairing/client.consumer.js";
+/**
+ * Requester-side pairing client — steps 3 and 5 of the pairing flow.
+ *
+ * `pairWithRemoteDaemon` sends this machine's identity plus the user-entered
+ * pairing code to the remote daemon's `POST /pair` endpoint, validates the
+ * PairingResponse, and persists the resulting machine entry (including the
+ * issued bearer token) into `machines.json` via `addMachine`.
+ */
+import { CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { getLocalMachineIdentity } from "./machine-identity.consumer.js";
+import { addMachine } from "./machines.consumer.js";
+import { PairingResponseSchema } from "../../schemas/pairing.js";
+function formatHostForUrl(host) {
+    // Bare IPv6 addresses must be bracketed in URLs.
+    if (host.includes(':') && !host.startsWith('['))
+        return `[${host}]`;
+    return host;
+}
+/**
+ * Complete a pairing handshake against a remote daemon and persist the
+ * resulting machine entry. Throws on any failure (network, invalid code,
+ * malformed response); on success returns the stored {@link PairedMachine}.
+ */
+export async function pairWithRemoteDaemon(options) {
+    const identity = await getLocalMachineIdentity(options.runtime);
+    const request = {
+        code: options.code,
+        name: options.name ?? identity.name,
+        machineId: identity.id
+    };
+    const doFetch = options.fetchImpl ?? fetch;
+    const url = `http://${formatHostForUrl(options.host)}:${options.port}/pair`;
+    const response = await doFetch(url, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(request),
+        signal: AbortSignal.timeout(options.timeoutMs ?? 10_000)
+    });
+    // A body that is not JSON (SyntaxError) is answered below by the HTTP
+    // status; a failed read is real.
+    const body = await response.json().catch((error) => {
+        const failure = CaughtFailureSchema.parse(error);
+        if (failure instanceof SyntaxError)
+            return { json: null, failure };
+        throw failure;
+    });
+    const syntax = SyntaxBodySchema.safeParse(body);
+    const json = syntax.success ? null : body;
+    const http = PairingHttpSchema.safeParse(json);
+    const described = http.success ? http.data : undefined;
+    if (!response.ok || described?.success !== true) {
+        throw new Error(described?.error ?? `Pairing failed: HTTP ${response.status}`);
+    }
+    const parsed = PairingResponseSchema.safeParse(json);
+    if (!parsed.success) {
+        throw new Error('Pairing failed: remote daemon returned a malformed pairing response');
+    }
+    const machine = {
+        id: parsed.data.machineId,
+        name: parsed.data.name,
+        host: options.host,
+        port: options.port,
+        token: parsed.data.token,
+        capabilities: parsed.data.capabilities,
+        lastSeen: new Date().toISOString(),
+        status: 'online'
+    };
+    await addMachine(options.runtime, machine);
+    return machine;
+}
+//# sourceMappingURL=client.consumer.js.map

package/dist/daemon/pairing/client.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.consumer.js","sourceRoot":"","sources":["../../../src/daemon/pairing/client.consumer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAEzG;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,SAAS,gBAAgB,CAAC,IAAY;IACrC,iDAAiD;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,IAAI,GAAG,CAAC;IACpE,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAAoC;IAEpC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,OAAO,GAAmB;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;QACnC,SAAS,EAAE,QAAQ,CAAC,EAAE;KACtB,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,GAAG,GAAG,UAAU,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QACnC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;KACxD,CAAC,CAAC;IAEH,sEAAsE;IACtE,iCAAiC;IACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,OAAO,YAAY,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnE,MAAM,OAAO,CAAC;IACf,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,SAAS,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAAkB;QAC9B,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;QACxB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACtC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE,QAAQ;KAChB,CAAC;IACF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.descriptor.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Local Machine Identity Context Descriptor
+ *
+ * Exposes THIS machine's stable identity (the UUID persisted at
+ * `<vibesHome>/machine-id.json`, plus the OS hostname) as a runtime-resolvable
+ * context, so consumers can attribute work to a machine via
+ * `runtime.context<LocalMachineIdentityReader>('runtime/machine-identity')`
+ * instead of importing `@vibesdotdev/kernel-rpc` for
+ * `getLocalMachineIdentity()`.
+ *
+ * Distinct from `runtime/machines`, which reads the registry of OTHER paired
+ * machines (`~/.vibes/machines.json`). This one answers "who am I".
+ *
+ * Deliberately NOT a new id space: three machine ids already exist in the
+ * repository-collection (this one, hq's `machine_*`, fleet-cli's hostname slug). This
+ * descriptor makes the existing pairing identity reachable; it mints nothing.
+ */
+declare const _default: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "data" | "service" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export default _default;
+//# sourceMappingURL=runtime-machine-identity.context.descriptor.d.ts.map

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machine-identity.context.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machine-identity.context.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIH,wBAKG"}

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.descriptor.js

@@ -0,0 +1,24 @@
+/**
+ * Local Machine Identity Context Descriptor
+ *
+ * Exposes THIS machine's stable identity (the UUID persisted at
+ * `<vibesHome>/machine-id.json`, plus the OS hostname) as a runtime-resolvable
+ * context, so consumers can attribute work to a machine via
+ * `runtime.context<LocalMachineIdentityReader>('runtime/machine-identity')`
+ * instead of importing `@vibesdotdev/kernel-rpc` for
+ * `getLocalMachineIdentity()`.
+ *
+ * Distinct from `runtime/machines`, which reads the registry of OTHER paired
+ * machines (`~/.vibes/machines.json`). This one answers "who am I".
+ *
+ * Deliberately NOT a new id space: three machine ids already exist in the
+ * repository-collection (this one, hq's `machine_*`, fleet-cli's hostname slug). This
+ * descriptor makes the existing pairing identity reachable; it mints nothing.
+ */
+import { createContextDescriptor } from '@vibesdotdev/kernel/factory/context';
+export default createContextDescriptor({
+    id: 'runtime/machine-identity',
+    description: "This machine's stable identity (persisted UUID + OS hostname). Used to attribute sessions, touches, and presence to a machine.",
+    hardware: ['consumer']
+});
+//# sourceMappingURL=runtime-machine-identity.context.descriptor.js.map

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machine-identity.context.descriptor.js","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machine-identity.context.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,eAAe,uBAAuB,CAAC;IACtC,EAAE,EAAE,0BAA0B;IAC9B,WAAW,EACV,gIAAgI;IACjI,QAAQ,EAAE,CAAC,UAAU,CAAC;CACtB,CAAC,CAAC"}

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.impl.consumer.d.ts

@@ -0,0 +1,17 @@
+import type { LocalMachineIdentityReader } from "../../../schemas/contracts/pairing/runtime-machine-identity.context.impl.consumer.ts";
+export type { LocalMachineIdentityReader } from "../../../schemas/contracts/pairing/runtime-machine-identity.context.impl.consumer.ts";
+/**
+ * Local Machine Identity Context Implementation (Consumer)
+ *
+ * Thin runtime projection of the existing `getLocalMachineIdentity()` value
+ * export. Mints nothing and persists nothing of its own — the id is whatever
+ * the pairing handshake already established.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+/** Runtime-resolved reader for this machine's own identity. */
+declare const defaultExport: {
+    /** This machine's identity under the resolving runtime's own path roots. */
+    provide: (runtime: RuntimeRef) => LocalMachineIdentityReader;
+};
+export default defaultExport;
+//# sourceMappingURL=runtime-machine-identity.context.impl.consumer.d.ts.map

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machine-identity.context.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machine-identity.context.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AACvI,YAAY,EAAE,0BAA0B,EAAE,MAAM,sFAAsF,CAAC;AACvI;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,+DAA+D;AAG/D,QAAA,MAAM,aAAa;IAClB,4EAA4E;uBACzD,UAAU,KAAG,0BAA0B;CAG1D,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.impl.consumer.js

@@ -0,0 +1,11 @@
+import { getLocalMachineIdentity } from "../machine-identity.consumer.js";
+/** Runtime-resolved reader for this machine's own identity. */
+// Hoisted const: tsc does not rewrite `.ts` specifiers inside an `export default` expression.
+const defaultExport = {
+    /** This machine's identity under the resolving runtime's own path roots. */
+    provide: (runtime) => ({
+        getIdentity: () => getLocalMachineIdentity(runtime)
+    })
+};
+export default defaultExport;
+//# sourceMappingURL=runtime-machine-identity.context.impl.consumer.js.map

package/dist/daemon/pairing/contexts/runtime-machine-identity.context.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machine-identity.context.impl.consumer.js","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machine-identity.context.impl.consumer.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,+DAA+D;AAE/D,8FAA8F;AAC9F,MAAM,aAAa,GAAG;IACrB,4EAA4E;IAC5E,OAAO,EAAE,CAAC,OAAmB,EAA8B,EAAE,CAAC,CAAC;QAC9D,WAAW,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,CAAC;KACnD,CAAC;CACF,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/daemon/pairing/contexts/runtime-machines.context.descriptor.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Paired-Machines Context Descriptor
+ *
+ * Exposes a runtime-queryable reader for the paired-machine registry
+ * (`~/.vibes/machines.json`). Consumers resolve it via
+ * `runtime.context<PairedMachineReader>('runtime/machines')` instead of
+ * importing `@vibesdotdev/kernel-rpc` for `readMachines()`.
+ */
+declare const _default: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "data" | "service" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export default _default;
+//# sourceMappingURL=runtime-machines.context.descriptor.d.ts.map

package/dist/daemon/pairing/contexts/runtime-machines.context.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machines.context.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machines.context.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIH,wBAKG"}

package/dist/daemon/pairing/contexts/runtime-machines.context.descriptor.js

@@ -0,0 +1,15 @@
+/**
+ * Paired-Machines Context Descriptor
+ *
+ * Exposes a runtime-queryable reader for the paired-machine registry
+ * (`~/.vibes/machines.json`). Consumers resolve it via
+ * `runtime.context<PairedMachineReader>('runtime/machines')` instead of
+ * importing `@vibesdotdev/kernel-rpc` for `readMachines()`.
+ */
+import { createContextDescriptor } from '@vibesdotdev/kernel/factory/context';
+export default createContextDescriptor({
+    id: 'runtime/machines',
+    description: 'Reader for the locally paired-machine registry (~/.vibes/machines.json). Used for best-effort machine-name lookups.',
+    hardware: ['consumer']
+});
+//# sourceMappingURL=runtime-machines.context.descriptor.js.map

package/dist/daemon/pairing/contexts/runtime-machines.context.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machines.context.descriptor.js","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machines.context.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,eAAe,uBAAuB,CAAC;IACtC,EAAE,EAAE,kBAAkB;IACtB,WAAW,EACV,qHAAqH;IACtH,QAAQ,EAAE,CAAC,UAAU,CAAC;CACtB,CAAC,CAAC"}

package/dist/daemon/pairing/contexts/runtime-machines.context.impl.consumer.d.ts

@@ -0,0 +1,17 @@
+import type { PairedMachineReader } from "../../../schemas/contracts/pairing/runtime-machines.context.impl.consumer.ts";
+export type { PairedMachineReader } from "../../../schemas/contracts/pairing/runtime-machines.context.impl.consumer.ts";
+/**
+ * Paired-Machines Context Implementation (Consumer)
+ *
+ * Provides a reader over the locally paired-machine registry. Mirrors the
+ * `readMachines()` value-export so consumers can resolve the same
+ * best-effort lookup through the runtime instead of importing this package.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+/** Runtime-resolved reader for the paired-machine registry. */
+declare const defaultExport: {
+    /** A reader over the registry under the resolving runtime's own path roots. */
+    provide: (runtime: RuntimeRef) => PairedMachineReader;
+};
+export default defaultExport;
+//# sourceMappingURL=runtime-machines.context.impl.consumer.d.ts.map

package/dist/daemon/pairing/contexts/runtime-machines.context.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machines.context.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machines.context.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACxH,YAAY,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACxH;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,+DAA+D;AAG/D,QAAA,MAAM,aAAa;IAClB,+EAA+E;uBAC5D,UAAU,KAAG,mBAAmB;CAGnD,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/daemon/pairing/contexts/runtime-machines.context.impl.consumer.js

@@ -0,0 +1,11 @@
+import { readMachines } from "../machines.consumer.js";
+/** Runtime-resolved reader for the paired-machine registry. */
+// Hoisted const: tsc does not rewrite `.ts` specifiers inside an `export default` expression.
+const defaultExport = {
+    /** A reader over the registry under the resolving runtime's own path roots. */
+    provide: (runtime) => ({
+        readMachines: () => readMachines(runtime)
+    })
+};
+export default defaultExport;
+//# sourceMappingURL=runtime-machines.context.impl.consumer.js.map

package/dist/daemon/pairing/contexts/runtime-machines.context.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-machines.context.impl.consumer.js","sourceRoot":"","sources":["../../../../src/daemon/pairing/contexts/runtime-machines.context.impl.consumer.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,+DAA+D;AAE/D,8FAA8F;AAC9F,MAAM,aAAa,GAAG;IACrB,+EAA+E;IAC/E,OAAO,EAAE,CAAC,OAAmB,EAAuB,EAAE,CAAC,CAAC;QACvD,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC;KACzC,CAAC;CACF,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/daemon/pairing/index.d.ts

@@ -0,0 +1,10 @@
+export type { MachineCapability, MachineStatus, MachinesFile, PairedMachine, PairingCode, PairingRequest, PairingResponse } from './types.ts';
+export { FAILED_PAIRING_ATTEMPT_WINDOW_MS, MAX_FAILED_PAIRING_ATTEMPTS, PairingCodes, generatePairingCode, getActivePairingCodeCount, isPairingRateLimited, resetPairingRateLimit, revokeAllPairingCodes, validatePairingRequest } from './pairing.ts';
+export { addMachine, getMachine, getMachinesFilePath, readMachines, removeMachine, updateMachineCapabilities, updateMachineStatus } from './machines.consumer.ts';
+export { addPairedClient, getPairedClientsFilePath, readPairedClients, removePairedClient } from './paired-clients.consumer.ts';
+export type { PairedClient, PairedClientsFile } from './paired-clients.consumer.ts';
+export { getLocalMachineIdentity } from './machine-identity.consumer.ts';
+export type { LocalMachineIdentity } from './machine-identity.consumer.ts';
+export { pairWithRemoteDaemon } from './client.consumer.ts';
+export type { PairWithRemoteDaemonOptions } from './client.consumer.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/daemon/pairing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,YAAY,EAAE,aAAa,EAAE,WAAW,EACxC,cAAc,EACd,eAAe,EACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACP,gCAAgC,EAAE,2BAA2B,EAAE,YAAY,EAC3E,mBAAmB,EAAE,yBAAyB,EAAE,oBAAoB,EACpE,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,EACnE,MAAM,cAAc,CAAC;AAEtB,OAAO,EACP,UAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,yBAAyB,EAAE,mBAAmB,EACvH,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACP,eAAe,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB,EAC/E,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/daemon/pairing/index.js

@@ -0,0 +1,6 @@
+export { FAILED_PAIRING_ATTEMPT_WINDOW_MS, MAX_FAILED_PAIRING_ATTEMPTS, PairingCodes, generatePairingCode, getActivePairingCodeCount, isPairingRateLimited, resetPairingRateLimit, revokeAllPairingCodes, validatePairingRequest } from "./pairing.js";
+export { addMachine, getMachine, getMachinesFilePath, readMachines, removeMachine, updateMachineCapabilities, updateMachineStatus } from "./machines.consumer.js";
+export { addPairedClient, getPairedClientsFilePath, readPairedClients, removePairedClient } from "./paired-clients.consumer.js";
+export { getLocalMachineIdentity } from "./machine-identity.consumer.js";
+export { pairWithRemoteDaemon } from "./client.consumer.js";
+//# sourceMappingURL=index.js.map

package/dist/daemon/pairing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/daemon/pairing/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACP,gCAAgC,EAAE,2BAA2B,EAAE,YAAY,EAC3E,mBAAmB,EAAE,yBAAyB,EAAE,oBAAoB,EACpE,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,EACnE,MAAM,cAAc,CAAC;AAEtB,OAAO,EACP,UAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,yBAAyB,EAAE,mBAAmB,EACvH,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACP,eAAe,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB,EAC/E,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAGzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC"}