@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/daemon/pairing/json-file-store.consumer.d.ts

@@ -0,0 +1,25 @@
+import type { JsonFileReadResult } from "../../schemas/contracts/pairing/json-file-store.consumer.ts";
+export type { JsonFileReadResult, PairingStoreRuntime } from "../../schemas/contracts/pairing/json-file-store.consumer.ts";
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import { type JsonValue } from '@vibesdotdev/kernel/schemas/json';
+/**
+ * Serialize an async operation against a file path. Operations on the same
+ * path run strictly one-after-another (in call order); different paths do not
+ * block each other. Errors from one operation do not poison the chain.
+ */
+export declare function withFileLock<T>(path: string, operation: () => Promise<T>): Promise<T>;
+export declare function readJsonFile<T>(runtime: RuntimeRef, path: string, validate: (parsed: JsonValue) => T | null): Promise<JsonFileReadResult<T>>;
+/**
+ * Atomically write a JSON store file with owner-only permissions.
+ *
+ * The temp file is created in the same directory with mode `0o600` (applied
+ * at creation, before any byte is written) and then renamed over the target.
+ */
+export declare function writeJsonFileAtomic(runtime: RuntimeRef, path: string, data: JsonValue): Promise<void>;
+/**
+ * Move a corrupt store file aside to `<path>.corrupt-<timestamp>` so a
+ * subsequent rewrite cannot destroy its (potentially recoverable) contents.
+ * Returns the backup path, or null when the file vanished in the meantime.
+ */
+export declare function backupCorruptFile(runtime: RuntimeRef, path: string): Promise<string | null>;
+//# sourceMappingURL=json-file-store.consumer.d.ts.map

package/dist/daemon/pairing/json-file-store.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-file-store.consumer.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/json-file-store.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6DAA6D,CAAC;AACtG,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,6DAA6D,CAAC;AAkC3H,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAWnF;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAgB3F;AAiBD,wBAAsB,YAAY,CAAC,CAAC,EACnC,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,GAAG,IAAI,GACvC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAuBhC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB3G;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASjG"}

package/dist/daemon/pairing/json-file-store.consumer.js

@@ -0,0 +1,139 @@
+/**
+ * Hardened JSON file persistence shared by the pairing stores
+ * (`machines.json`, `paired-clients.json`).
+ *
+ * Guarantees:
+ * - **No world-readable window.** The temp file is created with mode `0o600`
+ *   BEFORE any secret byte is written. (The old `Bun.write(...); chmod(...)`
+ *   sequence created the file with default-umask perms first, then chmodded —
+ *   a window in which tokens were world-readable, and a crash between the two
+ *   calls left them that way permanently.)
+ * - **Atomic writes.** Content is written to a same-directory temp file and
+ *   `rename()`d over the target, so a crash mid-write never leaves a
+ *   truncated/partial JSON file behind.
+ * - **Corruption is not destruction.** Reads distinguish "file absent" from
+ *   "file corrupt". Writers must never treat a corrupt file as an empty list
+ *   and clobber it — {@link backupCorruptFile} moves the unparseable file to a
+ *   sibling `<name>.corrupt-<timestamp>` so its contents (tokens included)
+ *   stay recoverable.
+ * - **Serialized writers.** {@link withFileLock} serializes read-modify-write
+ *   cycles per path within the process so concurrent mutators cannot lose
+ *   each other's updates.
+ */
+import { attempt, attemptAsync, basename, dirname, join, resolveFileSystemAdapter, rethrow, statChecked } from '@vibesdotdev/filesystem';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+/**
+ * Per-path in-process write lock chain. Genuinely process-global: it guards a
+ * file, and a file is shared by every runtime in this process (two runtimes
+ * with the same home write the same `paired-clients.json`), so a lock scoped
+ * to one runtime would not serialize them. It does not guard other processes;
+ * the atomic rename below keeps each write whole for them.
+ */
+const fileLocks = new Map();
+/**
+ * Serialize an async operation against a file path. Operations on the same
+ * path run strictly one-after-another (in call order); different paths do not
+ * block each other. Errors from one operation do not poison the chain.
+ */
+export async function withFileLock(path, operation) {
+    const previous = fileLocks.get(path) ?? Promise.resolve();
+    let release;
+    const current = new Promise((resolve) => {
+        release = resolve;
+    });
+    fileLocks.set(path, current);
+    await previous;
+    try {
+        return await operation();
+    }
+    finally {
+        release();
+        if (fileLocks.get(path) === current) {
+            fileLocks.delete(path);
+        }
+    }
+}
+/**
+ * Read and validate a JSON store file.
+ *
+ * - missing file → `{ state: 'absent' }`
+ * - unreadable / unparseable / schema-invalid → `{ state: 'corrupt' }`
+ * - otherwise → `{ state: 'ok', data }`
+ *
+ * `validate` returns the typed data or `null` when the parsed value does not
+ * match the expected schema (schema mismatch is treated as corruption so a
+ * file written by a future version is never silently clobbered).
+ */
+function isStringValue(value) {
+    return typeof value === 'string';
+}
+export async function readJsonFile(runtime, path, validate) {
+    const fs = await resolveFileSystemAdapter(runtime, { binding: false });
+    const stat = await statChecked(fs, path);
+    if (!stat.found)
+        return { state: 'absent' };
+    const read = await attemptAsync(() => fs.readFile(path, 'utf-8'));
+    if (!read.ok) {
+        // Vanished between stat and read reads absent (as before); anything
+        // else is unreadable, which is the store's typed `corrupt` answer.
+        const restat = await statChecked(fs, path);
+        if (!restat.found)
+            return { state: 'absent' };
+        return { state: 'corrupt' };
+    }
+    const text = read.value;
+    if (!isStringValue(text))
+        return { state: 'corrupt' };
+    // JSON.parse without a reviver throws only SyntaxError; unparseable
+    // content is the store's typed `corrupt` answer.
+    const parsed = attempt(() => JSON.parse(text));
+    if (!parsed.ok)
+        return { state: 'corrupt' };
+    const document = JsonValueSchema.safeParse(parsed.value);
+    if (!document.success)
+        return { state: 'corrupt' };
+    const data = validate(document.data);
+    if (data === null)
+        return { state: 'corrupt' };
+    return { state: 'ok', data };
+}
+/**
+ * Atomically write a JSON store file with owner-only permissions.
+ *
+ * The temp file is created in the same directory with mode `0o600` (applied
+ * at creation, before any byte is written) and then renamed over the target.
+ */
+export async function writeJsonFileAtomic(runtime, path, data) {
+    const fs = await resolveFileSystemAdapter(runtime, { binding: false });
+    const dir = dirname(path);
+    await fs.mkdir(dir, { recursive: true });
+    const tempPath = join(dir, `.${basename(path)}.${crypto.randomUUID()}.tmp`);
+    const written = await attemptAsync(() => fs.writeFile(tempPath, JSON.stringify(data, null, '\t'), { mode: 0o600 }).then(() => fs.rename(tempPath, path)));
+    if (written.ok)
+        return;
+    // Teardown of the temp file; the write's own failure is what surfaces.
+    // A temp file that also cannot be removed is attached as its cause.
+    const cleanup = await attemptAsync(() => fs.remove(tempPath));
+    if (!cleanup.ok) {
+        throw new AggregateError([cleanup.failure, written.failure], 'atomic JSON write failed and its temp file could not be removed');
+    }
+    rethrow(written.failure);
+}
+/**
+ * Move a corrupt store file aside to `<path>.corrupt-<timestamp>` so a
+ * subsequent rewrite cannot destroy its (potentially recoverable) contents.
+ * Returns the backup path, or null when the file vanished in the meantime.
+ */
+export async function backupCorruptFile(runtime, path) {
+    const fs = await resolveFileSystemAdapter(runtime, { binding: false });
+    const backupPath = `${path}.corrupt-${Date.now()}`;
+    const moved = await attemptAsync(() => fs.rename(path, backupPath));
+    if (moved.ok)
+        return backupPath;
+    // The file vanished in the meantime; anything else is real.
+    const restat = await statChecked(fs, path);
+    if (!restat.found)
+        return null;
+    rethrow(moved.failure);
+}
+//# sourceMappingURL=json-file-store.consumer.js.map

package/dist/daemon/pairing/json-file-store.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-file-store.consumer.js","sourceRoot":"","sources":["../../../src/daemon/pairing/json-file-store.consumer.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACP,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,wBAAwB,EACxB,OAAO,EACP,WAAW,EACV,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,SAA2B;IAC9E,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,IAAI,OAAoB,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC7C,OAAO,GAAG,OAAO,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,QAAQ,CAAC;IACf,IAAI,CAAC;QACJ,OAAO,MAAM,SAAS,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACV,OAAO,EAAE,CAAC;QACV,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YACrC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,KAA0B;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAmB,EACnB,IAAY,EACZ,QAAyC;IAEzC,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;IACxB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtD,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmB,EAAE,IAAY,EAAE,IAAe;IAC3F,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CACvC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAC/G,CAAC;IACF,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO;IACvB,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CACvB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAClC,iEAAiE,CACjE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAmB,EAAE,IAAY;IACxE,MAAM,EAAE,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,GAAG,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IAChC,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC"}

package/dist/daemon/pairing/machine-identity.consumer.d.ts

@@ -0,0 +1,9 @@
+import type { LocalMachineIdentity } from "../../schemas/contracts/pairing/machine-identity.consumer.ts";
+export { MachineIdFileSchema } from "../../schemas/contracts/pairing/machine-identity.consumer.ts";
+export type { LocalMachineIdentity } from "../../schemas/contracts/pairing/machine-identity.consumer.ts";
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/**
+ * Resolve (minting + persisting on first use) this machine's pairing identity.
+ */
+export declare function getLocalMachineIdentity(runtime: RuntimeRef): Promise<LocalMachineIdentity>;
+//# sourceMappingURL=machine-identity.consumer.d.ts.map

package/dist/daemon/pairing/machine-identity.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-identity.consumer.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/machine-identity.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AAEzG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8DAA8D,CAAC;AACnG,YAAY,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AAazG,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAqBvE;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkBhG"}

package/dist/daemon/pairing/machine-identity.consumer.js

@@ -0,0 +1,44 @@
+import { MachineIdFileSchema } from "../../schemas/contracts/pairing/machine-identity.consumer.js";
+export { MachineIdFileSchema } from "../../schemas/contracts/pairing/machine-identity.consumer.js";
+/**
+ * Local machine identity for the pairing handshake.
+ *
+ * The pairing protocol needs a stable machine id on both sides (the granting
+ * daemon stamps its id into pairing codes and responses; the requester sends
+ * its id in the PairingRequest). The id is a UUID minted on first use and
+ * persisted at `<activeHome>/machine-id.json` under the handed runtime's path
+ * roots; the display name is the environment's hostname (recomputed per call
+ * so renames are reflected).
+ */
+import { join } from '@vibesdotdev/filesystem';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { readJsonFile, withFileLock, writeJsonFileAtomic } from "./json-file-store.consumer.js";
+function validateMachineIdFile(parsed) {
+    const result = MachineIdFileSchema.safeParse(parsed);
+    return result.success ? result.data : null;
+}
+/**
+ * Resolve (minting + persisting on first use) this machine's pairing identity.
+ */
+export async function getLocalMachineIdentity(runtime) {
+    const path = join(getPathRoots(runtime).activeHome, 'machine-id.json');
+    const name = runtime.localEnvironment.getHostname?.();
+    if (name === undefined) {
+        throw new CapabilityError('This host does not expose a machine hostname.', 'UNAVAILABLE', {
+            reason: 'host-hostname-unavailable',
+            retryable: false
+        });
+    }
+    return withFileLock(path, async () => {
+        const existing = await readJsonFile(runtime, path, validateMachineIdFile);
+        if (existing.state === 'ok') {
+            return { id: existing.data.machineId, name };
+        }
+        const id = crypto.randomUUID();
+        await writeJsonFileAtomic(runtime, path, JsonValueSchema.parse({ version: 1, machineId: id }));
+        return { id, name };
+    });
+}
+//# sourceMappingURL=machine-identity.consumer.js.map

package/dist/daemon/pairing/machine-identity.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-identity.consumer.js","sourceRoot":"","sources":["../../../src/daemon/pairing/machine-identity.consumer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8DAA8D,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8DAA8D,CAAC;AAEnG;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAClB,MAAM,+BAA+B,CAAC;AASvC,SAAS,qBAAqB,CAAC,MAAiB;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAmB;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;IACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,+CAA+C,EAAE,aAAa,EAAE;YACzF,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAA0B,CAAC,CAAC,CAAC;QACvH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/daemon/pairing/machines.consumer.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Machine storage — read/write paired machines from `<vibesHome>/machines.json`.
+ *
+ * The file contains bearer tokens, so persistence goes through the hardened
+ * JSON store (`json-file-store.consumer.ts`): atomic temp-file+rename writes
+ * created with mode 0o600 (no world-readable window), corrupt files backed up
+ * instead of clobbered, and read-modify-write cycles serialized per path.
+ *
+ * The file lives under the handed runtime's `activeHome` (its path roots,
+ * profile selection included); every function takes that runtime.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import type { MachineCapability, PairedMachine } from './types.ts';
+import { type PairingStoreRuntime } from './json-file-store.consumer.ts';
+/**
+ * Read the machines file, returning an empty list if absent.
+ *
+ * A corrupt (unparseable or schema-mismatched) file also reads as an empty
+ * list — but it is NOT rewritten here; the mutators below back it up to a
+ * sibling `machines.json.corrupt-<timestamp>` before writing anything, so a
+ * parse failure can never silently destroy the stored tokens.
+ */
+export declare function readMachines(runtime: RuntimeRef): Promise<PairedMachine[]>;
+/** Add a paired machine. Replaces existing entry with the same id. */
+export declare function addMachine(runtime: RuntimeRef, machine: PairedMachine): Promise<void>;
+/** Remove a paired machine by id. Returns true if found and removed. */
+export declare function removeMachine(runtime: RuntimeRef, machineId: string): Promise<boolean>;
+/** Get a paired machine by id */
+export declare function getMachine(runtime: RuntimeRef, machineId: string): Promise<PairedMachine | null>;
+/** Update a machine's status and lastSeen timestamp */
+export declare function updateMachineStatus(runtime: RuntimeRef, machineId: string, status: PairedMachine['status'], lastSeen?: string): Promise<void>;
+/** Update capabilities for a paired machine */
+export declare function updateMachineCapabilities(runtime: RuntimeRef, machineId: string, capabilities: MachineCapability[]): Promise<void>;
+/** Get the path to the machines file (for display/debugging) */
+export declare function getMachinesFilePath(runtime: PairingStoreRuntime): string;
+//# sourceMappingURL=machines.consumer.d.ts.map

package/dist/daemon/pairing/machines.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machines.consumer.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/machines.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,KAAK,EAAE,iBAAiB,EAAgB,aAAa,EAAE,MAAM,YAAY,CAAC;AAGjF,OAAO,EAKP,KAAK,mBAAmB,EACvB,MAAM,+BAA+B,CAAC;AAYvC;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAGhF;AAsBD,sEAAsE;AACtE,wBAAsB,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3F;AAED,wEAAwE;AACxE,wBAAsB,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS5F;AAED,iCAAiC;AACjC,wBAAsB,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAGtG;AAED,uDAAuD;AACvD,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAC/B,QAAQ,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,+CAA+C;AAC/C,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,iBAAiB,EAAE,GAC/B,OAAO,CAAC,IAAI,CAAC,CASf;AAED,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAExE"}

package/dist/daemon/pairing/machines.consumer.js

@@ -0,0 +1,118 @@
+/**
+ * Machine storage — read/write paired machines from `<vibesHome>/machines.json`.
+ *
+ * The file contains bearer tokens, so persistence goes through the hardened
+ * JSON store (`json-file-store.consumer.ts`): atomic temp-file+rename writes
+ * created with mode 0o600 (no world-readable window), corrupt files backed up
+ * instead of clobbered, and read-modify-write cycles serialized per path.
+ *
+ * The file lives under the handed runtime's `activeHome` (its path roots,
+ * profile selection included); every function takes that runtime.
+ */
+import { join } from '@vibesdotdev/filesystem';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { MachinesFileSchema } from "../../schemas/pairing.js";
+import { backupCorruptFile, readJsonFile, withFileLock, writeJsonFileAtomic } from "./json-file-store.consumer.js";
+function getMachinesFile(runtime) {
+    return join(getPathRoots(runtime).activeHome, 'machines.json');
+}
+/** Validate the parsed file content; null = schema mismatch (treated as corrupt). */
+function validateMachinesFile(parsed) {
+    const result = MachinesFileSchema.safeParse(parsed);
+    return result.success ? result.data : null;
+}
+/**
+ * Read the machines file, returning an empty list if absent.
+ *
+ * A corrupt (unparseable or schema-mismatched) file also reads as an empty
+ * list — but it is NOT rewritten here; the mutators below back it up to a
+ * sibling `machines.json.corrupt-<timestamp>` before writing anything, so a
+ * parse failure can never silently destroy the stored tokens.
+ */
+export async function readMachines(runtime) {
+    const result = await readJsonFile(runtime, getMachinesFile(runtime), validateMachinesFile);
+    return result.state === 'ok' ? result.data.machines : [];
+}
+/**
+ * Read the current machine list for a read-modify-write cycle. When the file
+ * is corrupt, moves it aside (backup) so the upcoming write starts from a
+ * clean slate without destroying the unreadable content.
+ */
+async function readMachinesForUpdate(runtime, path) {
+    const result = await readJsonFile(runtime, path, validateMachinesFile);
+    if (result.state === 'ok')
+        return result.data.machines;
+    if (result.state === 'corrupt') {
+        await backupCorruptFile(runtime, path);
+    }
+    return [];
+}
+/** Atomically write the machines file with owner-only permissions. */
+async function writeMachines(runtime, path, machines) {
+    const data = { version: 1, machines };
+    await writeJsonFileAtomic(runtime, path, JsonValueSchema.parse(data));
+}
+/** Add a paired machine. Replaces existing entry with the same id. */
+export async function addMachine(runtime, machine) {
+    const path = getMachinesFile(runtime);
+    await withFileLock(path, async () => {
+        const machines = await readMachinesForUpdate(runtime, path);
+        const idx = machines.findIndex((m) => m.id === machine.id);
+        if (idx >= 0) {
+            machines[idx] = machine;
+        }
+        else {
+            machines.push(machine);
+        }
+        await writeMachines(runtime, path, machines);
+    });
+}
+/** Remove a paired machine by id. Returns true if found and removed. */
+export async function removeMachine(runtime, machineId) {
+    const path = getMachinesFile(runtime);
+    return withFileLock(path, async () => {
+        const machines = await readMachinesForUpdate(runtime, path);
+        const filtered = machines.filter((m) => m.id !== machineId);
+        if (filtered.length === machines.length)
+            return false;
+        await writeMachines(runtime, path, filtered);
+        return true;
+    });
+}
+/** Get a paired machine by id */
+export async function getMachine(runtime, machineId) {
+    const machines = await readMachines(runtime);
+    return machines.find((m) => m.id === machineId) ?? null;
+}
+/** Update a machine's status and lastSeen timestamp */
+export async function updateMachineStatus(runtime, machineId, status, lastSeen) {
+    const path = getMachinesFile(runtime);
+    await withFileLock(path, async () => {
+        const machines = await readMachinesForUpdate(runtime, path);
+        const machine = machines.find((m) => m.id === machineId);
+        if (!machine)
+            return;
+        machine.status = status;
+        if (lastSeen)
+            machine.lastSeen = lastSeen;
+        await writeMachines(runtime, path, machines);
+    });
+}
+/** Update capabilities for a paired machine */
+export async function updateMachineCapabilities(runtime, machineId, capabilities) {
+    const path = getMachinesFile(runtime);
+    await withFileLock(path, async () => {
+        const machines = await readMachinesForUpdate(runtime, path);
+        const machine = machines.find((m) => m.id === machineId);
+        if (!machine)
+            return;
+        machine.capabilities = capabilities;
+        await writeMachines(runtime, path, machines);
+    });
+}
+/** Get the path to the machines file (for display/debugging) */
+export function getMachinesFilePath(runtime) {
+    return getMachinesFile(runtime);
+}
+//# sourceMappingURL=machines.consumer.js.map

package/dist/daemon/pairing/machines.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machines.consumer.js","sourceRoot":"","sources":["../../../src/daemon/pairing/machines.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAElB,MAAM,+BAA+B,CAAC;AAEvC,SAAS,eAAe,CAAC,OAA4B;IACpD,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AAChE,CAAC;AAED,qFAAqF;AACrF,SAAS,oBAAoB,CAAC,MAAiB;IAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAmB;IACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAAmB,EAAE,IAAY;IACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;IACvD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,aAAa,CAAC,OAAmB,EAAE,IAAY,EAAE,QAAyB;IACxF,MAAM,IAAI,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpD,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,OAAsB;IAC3E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACzB,CAAC;aAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAmB,EAAE,SAAiB;IACzE,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAmB,EAAE,SAAiB;IACtE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC;AACzD,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAmB,EACnB,SAAiB,EACjB,MAA+B,EAC/B,QAAiB;IAEjB,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,IAAI,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC1C,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAmB,EACnB,SAAiB,EACjB,YAAiC;IAEjC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QACpC,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,OAA4B;IAC/D,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/daemon/pairing/paired-clients.consumer.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Paired-client storage — the GRANTING side of the pairing handshake.
+ *
+ * `machines.json` records remote daemons THIS machine can call (outbound).
+ * `paired-clients.json` is the inverse: the bearer tokens this daemon has
+ * ISSUED to remote machines via the `/pair` handshake (inbound). The daemon
+ * loads this file at startup and registers every stored token into its
+ * TokenRegistry so pairing survives a restart
+ * (`daemon/auth/pairing-binding.ts#registerPersistedPairedClientTokens`).
+ *
+ * Persistence goes through the same hardened JSON store as machines.json:
+ * atomic 0o600 writes, corrupt-file backup, serialized writers.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import { type PairedClient } from '../../schemas/pairing.ts';
+import { type PairingStoreRuntime } from './json-file-store.consumer.ts';
+export type { PairedClient, PairedClientsFile } from '../../schemas/pairing.ts';
+/** Read all paired clients; empty list when the file is absent (or corrupt). */
+export declare function readPairedClients(runtime: RuntimeRef): Promise<PairedClient[]>;
+/** Add a paired client. Replaces an existing entry with the same machineId. */
+export declare function addPairedClient(runtime: RuntimeRef, client: PairedClient): Promise<void>;
+/** Remove a paired client by machineId. Returns true if found and removed. */
+export declare function removePairedClient(runtime: RuntimeRef, machineId: string): Promise<boolean>;
+/** Get the path to the paired-clients file (for display/debugging). */
+export declare function getPairedClientsFilePath(runtime: PairingStoreRuntime): string;
+//# sourceMappingURL=paired-clients.consumer.d.ts.map

package/dist/daemon/pairing/paired-clients.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paired-clients.consumer.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/paired-clients.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAItD,OAAO,EAA2B,KAAK,YAAY,EAA0B,MAAM,0BAA0B,CAAC;AAC9G,OAAO,EAKP,KAAK,mBAAmB,EACvB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAYhF,gFAAgF;AAChF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAGpF;AAWD,+EAA+E;AAC/E,wBAAsB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAY9F;AAED,8EAA8E;AAC9E,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASjG;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE7E"}

package/dist/daemon/pairing/paired-clients.consumer.js

@@ -0,0 +1,72 @@
+/**
+ * Paired-client storage — the GRANTING side of the pairing handshake.
+ *
+ * `machines.json` records remote daemons THIS machine can call (outbound).
+ * `paired-clients.json` is the inverse: the bearer tokens this daemon has
+ * ISSUED to remote machines via the `/pair` handshake (inbound). The daemon
+ * loads this file at startup and registers every stored token into its
+ * TokenRegistry so pairing survives a restart
+ * (`daemon/auth/pairing-binding.ts#registerPersistedPairedClientTokens`).
+ *
+ * Persistence goes through the same hardened JSON store as machines.json:
+ * atomic 0o600 writes, corrupt-file backup, serialized writers.
+ */
+import { join } from '@vibesdotdev/filesystem';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { PairedClientsFileSchema } from "../../schemas/pairing.js";
+import { backupCorruptFile, readJsonFile, withFileLock, writeJsonFileAtomic } from "./json-file-store.consumer.js";
+/** Under the handed runtime's `activeHome`, beside `machines.json`. */
+function getPairedClientsFile(runtime) {
+    return join(getPathRoots(runtime).activeHome, 'paired-clients.json');
+}
+function validatePairedClientsFile(parsed) {
+    const result = PairedClientsFileSchema.safeParse(parsed);
+    return result.success ? result.data : null;
+}
+/** Read all paired clients; empty list when the file is absent (or corrupt). */
+export async function readPairedClients(runtime) {
+    const result = await readJsonFile(runtime, getPairedClientsFile(runtime), validatePairedClientsFile);
+    return result.state === 'ok' ? result.data.clients : [];
+}
+async function readPairedClientsForUpdate(runtime, path) {
+    const result = await readJsonFile(runtime, path, validatePairedClientsFile);
+    if (result.state === 'ok')
+        return result.data.clients;
+    if (result.state === 'corrupt') {
+        await backupCorruptFile(runtime, path);
+    }
+    return [];
+}
+/** Add a paired client. Replaces an existing entry with the same machineId. */
+export async function addPairedClient(runtime, client) {
+    const path = getPairedClientsFile(runtime);
+    await withFileLock(path, async () => {
+        const clients = await readPairedClientsForUpdate(runtime, path);
+        const idx = clients.findIndex((c) => c.machineId === client.machineId);
+        if (idx >= 0) {
+            clients[idx] = client;
+        }
+        else {
+            clients.push(client);
+        }
+        await writeJsonFileAtomic(runtime, path, JsonValueSchema.parse({ version: 1, clients }));
+    });
+}
+/** Remove a paired client by machineId. Returns true if found and removed. */
+export async function removePairedClient(runtime, machineId) {
+    const path = getPairedClientsFile(runtime);
+    return withFileLock(path, async () => {
+        const clients = await readPairedClientsForUpdate(runtime, path);
+        const filtered = clients.filter((c) => c.machineId !== machineId);
+        if (filtered.length === clients.length)
+            return false;
+        await writeJsonFileAtomic(runtime, path, JsonValueSchema.parse({ version: 1, clients: filtered }));
+        return true;
+    });
+}
+/** Get the path to the paired-clients file (for display/debugging). */
+export function getPairedClientsFilePath(runtime) {
+    return getPairedClientsFile(runtime);
+}
+//# sourceMappingURL=paired-clients.consumer.js.map

package/dist/daemon/pairing/paired-clients.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paired-clients.consumer.js","sourceRoot":"","sources":["../../../src/daemon/pairing/paired-clients.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,uBAAuB,EAA6C,MAAM,0BAA0B,CAAC;AAC9G,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAElB,MAAM,+BAA+B,CAAC;AAGvC,uEAAuE;AACvE,SAAS,oBAAoB,CAAC,OAA4B;IACzD,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAiB;IACnD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAmB;IAC1D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,OAAmB,EAAE,IAAY;IAC1E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;IACtD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAmB,EAAE,MAAoB;IAC9E,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACvB,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAA8B,CAAC,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,SAAiB;IAC9E,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACrD,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAA8B,CAAC,CAAC,CAAC;QAC/H,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,OAA4B;IACpE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/dist/daemon/pairing/pairing.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Pairing protocol — generate codes, validate requests, complete pairing.
+ *
+ * Flow (wired end-to-end through the runtime daemon):
+ * 1. Granting daemon generates a pairing code — `pairing-generate-code` RPC
+ *    command, reachable only over the Unix socket (the TCP capability gate
+ *    rejects it), so minting a code requires local access to the machine.
+ * 2. User enters the code on the requesting machine (CLI or Bridge UI).
+ * 3. Requesting machine POSTs a PairingRequest to the granting daemon's
+ *    `/pair` endpoint (`pairWithRemoteDaemon` in `client.consumer.ts`).
+ * 4. Granting daemon validates the code (this module), persists the issued
+ *    token + requester identity in `paired-clients.json`, registers the token
+ *    into its TokenRegistry (`daemon/auth/pairing-binding.ts`), and returns a
+ *    PairingResponse.
+ * 5. Requesting machine stores the machine entry in `machines.json`.
+ *
+ * Brute-force guard: codes are 6-digit and single-use; on top of the 5-minute
+ * TTL, validation is rate-limited — after {@link MAX_FAILED_PAIRING_ATTEMPTS}
+ * failed attempts within the sliding window, ALL validation is refused until
+ * the window drains.
+ *
+ * The codes and the failed-attempt window are one daemon's state
+ * ({@link PairingCodes}, owned by the runtime daemon like its token
+ * registry), never module-level: two daemons, or a daemon and a test, in one
+ * process never share codes or a lockout.
+ */
+import type { MachineCapability, PairingCode, PairingRequest, PairingResponse } from './types.ts';
+/** Failed validation attempts allowed within the sliding window. */
+export declare const MAX_FAILED_PAIRING_ATTEMPTS = 10;
+/** Sliding window for the failed-attempt rate limit. */
+export declare const FAILED_PAIRING_ATTEMPT_WINDOW_MS = 60000;
+/** One daemon's pairing codes and its failed-attempt rate limit. */
+export declare class PairingCodes {
+    /** Timestamps of recent failed validation attempts. */
+    private failedAttempts;
+    /** Active pairing codes, in memory only. */
+    private readonly activeCodes;
+    private pruneFailedAttempts;
+    /** Whether pairing validation is currently locked out by failed attempts. */
+    isRateLimited(): boolean;
+    /** Reset the failed-attempt rate limiter (operator reset). */
+    resetRateLimit(): void;
+    /**
+     * Generate a pairing code for this daemon.
+     * The code is stored in memory and expires after 5 minutes.
+     */
+    generate(machineId: string, capabilities?: MachineCapability[]): PairingCode;
+    /**
+     * Validate a pairing request against active codes.
+     * Returns a PairingResponse with a permanent token if valid, null otherwise.
+     *
+     * Rate-limited: after {@link MAX_FAILED_PAIRING_ATTEMPTS} failures within
+     * {@link FAILED_PAIRING_ATTEMPT_WINDOW_MS}, every request (including one with
+     * a valid code) is refused until the window drains — a 6-digit code space
+     * must not be brute-forceable within the code TTL.
+     */
+    validate(request: PairingRequest, localMachineId: string, localMachineName: string): PairingResponse | null;
+    /** The number of active (non-expired) pairing codes. */
+    activeCount(): number;
+    /** Revoke all active pairing codes. */
+    revokeAll(): void;
+    private cleanupExpiredCodes;
+}
+/** Generate a pairing code in `codes` (the daemon's {@link PairingCodes}). */
+export declare function generatePairingCode(codes: PairingCodes, machineId: string, capabilities?: MachineCapability[]): PairingCode;
+/** Validate a pairing request against `codes` (see {@link PairingCodes.validate}). */
+export declare function validatePairingRequest(codes: PairingCodes, request: PairingRequest, localMachineId: string, localMachineName: string): PairingResponse | null;
+/** The number of active pairing codes in `codes`. */
+export declare function getActivePairingCodeCount(codes: PairingCodes): number;
+/** Revoke every active pairing code in `codes`. */
+export declare function revokeAllPairingCodes(codes: PairingCodes): void;
+/** Whether `codes` is locked out by failed attempts. */
+export declare function isPairingRateLimited(codes: PairingCodes): boolean;
+/** Reset `codes`' failed-attempt rate limiter (operator reset). */
+export declare function resetPairingRateLimit(codes: PairingCodes): void;
+//# sourceMappingURL=pairing.d.ts.map

package/dist/daemon/pairing/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAQlG,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAE9C,wDAAwD;AACxD,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD,oEAAoE;AACpE,qBAAa,YAAY;IACxB,uDAAuD;IACvD,OAAO,CAAC,cAAc,CAAgB;IACtC,4CAA4C;IAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+E;IAE3G,OAAO,CAAC,mBAAmB;IAK3B,6EAA6E;IAC7E,aAAa,IAAI,OAAO;IAKxB,8DAA8D;IAC9D,cAAc,IAAI,IAAI;IAItB;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,GAAE,iBAAiB,EAAyB,GAAG,WAAW;IAUlG;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IA2B3G,wDAAwD;IACxD,WAAW,IAAI,MAAM;IAKrB,uCAAuC;IACvC,SAAS,IAAI,IAAI;IAIjB,OAAO,CAAC,mBAAmB;CAM3B;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,GAAE,iBAAiB,EAAyB,GACtD,WAAW,CAEb;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,MAAM,GACtB,eAAe,GAAG,IAAI,CAExB;AAED,qDAAqD;AACrD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAErE;AAED,mDAAmD;AACnD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAE/D;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAEjE;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAE/D"}