@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/daemon/pairing/pairing.js

@@ -0,0 +1,141 @@
+/**
+ * Pairing protocol — generate codes, validate requests, complete pairing.
+ *
+ * Flow (wired end-to-end through the runtime daemon):
+ * 1. Granting daemon generates a pairing code — `pairing-generate-code` RPC
+ *    command, reachable only over the Unix socket (the TCP capability gate
+ *    rejects it), so minting a code requires local access to the machine.
+ * 2. User enters the code on the requesting machine (CLI or Bridge UI).
+ * 3. Requesting machine POSTs a PairingRequest to the granting daemon's
+ *    `/pair` endpoint (`pairWithRemoteDaemon` in `client.consumer.ts`).
+ * 4. Granting daemon validates the code (this module), persists the issued
+ *    token + requester identity in `paired-clients.json`, registers the token
+ *    into its TokenRegistry (`daemon/auth/pairing-binding.ts`), and returns a
+ *    PairingResponse.
+ * 5. Requesting machine stores the machine entry in `machines.json`.
+ *
+ * Brute-force guard: codes are 6-digit and single-use; on top of the 5-minute
+ * TTL, validation is rate-limited — after {@link MAX_FAILED_PAIRING_ATTEMPTS}
+ * failed attempts within the sliding window, ALL validation is refused until
+ * the window drains.
+ *
+ * The codes and the failed-attempt window are one daemon's state
+ * ({@link PairingCodes}, owned by the runtime daemon like its token
+ * registry), never module-level: two daemons, or a daemon and a test, in one
+ * process never share codes or a lockout.
+ */
+/** Default pairing code TTL: 5 minutes */
+const PAIRING_CODE_TTL_MS = 5 * 60 * 1000;
+/** Default capabilities granted to newly paired machines */
+const DEFAULT_CAPABILITIES = ['tool', 'storage', 'config', 'subscribe'];
+/** Failed validation attempts allowed within the sliding window. */
+export const MAX_FAILED_PAIRING_ATTEMPTS = 10;
+/** Sliding window for the failed-attempt rate limit. */
+export const FAILED_PAIRING_ATTEMPT_WINDOW_MS = 60_000;
+/** One daemon's pairing codes and its failed-attempt rate limit. */
+export class PairingCodes {
+    /** Timestamps of recent failed validation attempts. */
+    failedAttempts = [];
+    /** Active pairing codes, in memory only. */
+    activeCodes = new Map();
+    pruneFailedAttempts() {
+        const cutoff = Date.now() - FAILED_PAIRING_ATTEMPT_WINDOW_MS;
+        this.failedAttempts = this.failedAttempts.filter((timestamp) => timestamp >= cutoff);
+    }
+    /** Whether pairing validation is currently locked out by failed attempts. */
+    isRateLimited() {
+        this.pruneFailedAttempts();
+        return this.failedAttempts.length >= MAX_FAILED_PAIRING_ATTEMPTS;
+    }
+    /** Reset the failed-attempt rate limiter (operator reset). */
+    resetRateLimit() {
+        this.failedAttempts = [];
+    }
+    /**
+     * Generate a pairing code for this daemon.
+     * The code is stored in memory and expires after 5 minutes.
+     */
+    generate(machineId, capabilities = DEFAULT_CAPABILITIES) {
+        // Generate 6-digit numeric code
+        const code = String(Math.floor(100000 + Math.random() * 900000));
+        const expiresAt = new Date(Date.now() + PAIRING_CODE_TTL_MS).toISOString();
+        const pairingCode = { code, expiresAt, machineId };
+        this.cleanupExpiredCodes();
+        this.activeCodes.set(code, { code: pairingCode, capabilities });
+        return pairingCode;
+    }
+    /**
+     * Validate a pairing request against active codes.
+     * Returns a PairingResponse with a permanent token if valid, null otherwise.
+     *
+     * Rate-limited: after {@link MAX_FAILED_PAIRING_ATTEMPTS} failures within
+     * {@link FAILED_PAIRING_ATTEMPT_WINDOW_MS}, every request (including one with
+     * a valid code) is refused until the window drains — a 6-digit code space
+     * must not be brute-forceable within the code TTL.
+     */
+    validate(request, localMachineId, localMachineName) {
+        this.cleanupExpiredCodes();
+        if (this.isRateLimited())
+            return null;
+        const entry = this.activeCodes.get(request.code);
+        if (!entry) {
+            this.failedAttempts.push(Date.now());
+            return null;
+        }
+        const { code: pairingCode, capabilities } = entry;
+        if (new Date(pairingCode.expiresAt) < new Date()) {
+            this.activeCodes.delete(request.code);
+            this.failedAttempts.push(Date.now());
+            return null;
+        }
+        // Consume the code (single-use)
+        this.activeCodes.delete(request.code);
+        return {
+            token: crypto.randomUUID(),
+            machineId: localMachineId,
+            name: localMachineName,
+            capabilities
+        };
+    }
+    /** The number of active (non-expired) pairing codes. */
+    activeCount() {
+        this.cleanupExpiredCodes();
+        return this.activeCodes.size;
+    }
+    /** Revoke all active pairing codes. */
+    revokeAll() {
+        this.activeCodes.clear();
+    }
+    cleanupExpiredCodes() {
+        const now = new Date();
+        for (const [code, entry] of this.activeCodes) {
+            if (new Date(entry.code.expiresAt) < now)
+                this.activeCodes.delete(code);
+        }
+    }
+}
+/** Generate a pairing code in `codes` (the daemon's {@link PairingCodes}). */
+export function generatePairingCode(codes, machineId, capabilities = DEFAULT_CAPABILITIES) {
+    return codes.generate(machineId, capabilities);
+}
+/** Validate a pairing request against `codes` (see {@link PairingCodes.validate}). */
+export function validatePairingRequest(codes, request, localMachineId, localMachineName) {
+    return codes.validate(request, localMachineId, localMachineName);
+}
+/** The number of active pairing codes in `codes`. */
+export function getActivePairingCodeCount(codes) {
+    return codes.activeCount();
+}
+/** Revoke every active pairing code in `codes`. */
+export function revokeAllPairingCodes(codes) {
+    codes.revokeAll();
+}
+/** Whether `codes` is locked out by failed attempts. */
+export function isPairingRateLimited(codes) {
+    return codes.isRateLimited();
+}
+/** Reset `codes`' failed-attempt rate limiter (operator reset). */
+export function resetPairingRateLimit(codes) {
+    codes.resetRateLimit();
+}
+//# sourceMappingURL=pairing.js.map

package/dist/daemon/pairing/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../../src/daemon/pairing/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,0CAA0C;AAC1C,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,4DAA4D;AAC5D,MAAM,oBAAoB,GAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAE7F,oEAAoE;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C,wDAAwD;AACxD,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAEvD,oEAAoE;AACpE,MAAM,OAAO,YAAY;IACxB,uDAAuD;IAC/C,cAAc,GAAa,EAAE,CAAC;IACtC,4CAA4C;IAC3B,WAAW,GAAG,IAAI,GAAG,EAAoE,CAAC;IAEnG,mBAAmB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gCAAgC,CAAC;QAC7D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACtF,CAAC;IAED,6EAA6E;IAC7E,aAAa;QACZ,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,2BAA2B,CAAC;IAClE,CAAC;IAED,8DAA8D;IAC9D,cAAc;QACb,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,SAAiB,EAAE,eAAoC,oBAAoB;QACnF,gCAAgC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,WAAW,GAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAChE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAuB,EAAE,cAAsB,EAAE,gBAAwB;QACjF,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,aAAa,EAAE;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;QAClD,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO;YACN,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;YAC1B,SAAS,EAAE,cAAc;YACzB,IAAI,EAAE,gBAAgB;YACtB,YAAY;SACZ,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,WAAW;QACV,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED,uCAAuC;IACvC,SAAS;QACR,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAEO,mBAAmB;QAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;CACD;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAClC,KAAmB,EACnB,SAAiB,EACjB,eAAoC,oBAAoB;IAExD,OAAO,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACrC,KAAmB,EACnB,OAAuB,EACvB,cAAsB,EACtB,gBAAwB;IAExB,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;AAClE,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,yBAAyB,CAAC,KAAmB;IAC5D,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACxD,KAAK,CAAC,SAAS,EAAE,CAAC;AACnB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACvD,OAAO,KAAK,CAAC,aAAa,EAAE,CAAC;AAC9B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACxD,KAAK,CAAC,cAAc,EAAE,CAAC;AACxB,CAAC"}

package/dist/daemon/pairing/types.d.ts

@@ -0,0 +1,3 @@
+/** Compatibility exports for the pairing schema owner. */
+export type { MachineCapability, MachineStatus, MachinesFile, PairedMachine, PairingCode, PairingRequest, PairingResponse } from '../../schemas/pairing.ts';
+//# sourceMappingURL=types.d.ts.map

package/dist/daemon/pairing/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/daemon/pairing/types.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/daemon/pairing/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/daemon/pairing/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/daemon/pairing/types.ts"],"names":[],"mappings":""}

package/dist/daemon/protocol/schemas.d.ts

@@ -0,0 +1,3 @@
+/** Compatibility entrypoint; daemon boundary schemas are owned by schemas/. */
+export * from '../../schemas/daemon/daemon-protocol.ts';
+//# sourceMappingURL=schemas.d.ts.map

package/dist/daemon/protocol/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/daemon/protocol/schemas.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,cAAc,yCAAyC,CAAC"}

package/dist/daemon/protocol/schemas.js

@@ -0,0 +1,3 @@
+/** Compatibility entrypoint; daemon boundary schemas are owned by schemas/. */
+export * from "../../schemas/daemon/daemon-protocol.js";
+//# sourceMappingURL=schemas.js.map

package/dist/daemon/protocol/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/daemon/protocol/schemas.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,cAAc,yCAAyC,CAAC"}

package/dist/daemon/runtime/configuration.d.ts

@@ -0,0 +1,9 @@
+import type { RuntimeDaemonConfig } from "../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+import { type DaemonExecutionMode } from '../hosting/execution/execution-host.schemas.ts';
+export declare const LOOPBACK_HOSTS: Set<string>;
+export declare const DEFAULT_HTTP_HOST: string;
+export declare function runtimeDaemonExecutionMode(config: RuntimeDaemonConfig): DaemonExecutionMode;
+export declare function assertDaemonExecutionDeclarations(config: RuntimeDaemonConfig): void;
+export declare const RUNTIME_HTTP_TOKEN_KEY = "VIBES_RUNTIME_HTTP_TOKEN";
+export declare function applyDeclaredHttpConfig(config: RuntimeDaemonConfig): Promise<RuntimeDaemonConfig>;
+//# sourceMappingURL=configuration.d.ts.map

package/dist/daemon/runtime/configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.d.ts","sourceRoot":"","sources":["../../../src/daemon/runtime/configuration.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sEAAsE,CAAC;AAChH,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAIrH,eAAO,MAAM,cAAc,aAA6C,CAAC;AAEzE,eAAO,MAAM,iBAAiB,QAAwC,CAAC;AAEvE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,mBAAmB,GAAG,mBAAmB,CAE3F;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAOnF;AAED,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuBvG"}

package/dist/daemon/runtime/configuration.js

@@ -0,0 +1,49 @@
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { DaemonExecutionModeSchema } from "../hosting/execution/execution-host.schemas.js";
+import { DaemonHttpConfigSchema, readRuntimePluginConfig } from "../hosting/process/runtime-config.js";
+import { CLI_EXECUTION_COMPOSITION_CONTEXT_ID } from "./io/host.js";
+export const LOOPBACK_HOSTS = new Set(['127.0.0.1', '::1', 'localhost']);
+export const DEFAULT_HTTP_HOST = DaemonHttpConfigSchema.parse({}).host;
+export function runtimeDaemonExecutionMode(config) {
+    return DaemonExecutionModeSchema.parse(config.composition ?? (config.serveHost.hasContext(CLI_EXECUTION_COMPOSITION_CONTEXT_ID) ? 'transport' : 'full'));
+}
+export function assertDaemonExecutionDeclarations(config) {
+    if (runtimeDaemonExecutionMode(config) === 'full')
+        return;
+    const nonportable = ['authToken', 'preRegisterPlugins', 'postBootstrap', 'createLogger', 'registerCommands'];
+    const fields = nonportable.filter(field => config[field] !== undefined);
+    if (fields.length)
+        throw new CapabilityError('Transport composition requires portable execution-owner declarations.', 'INVALID_INPUT', {
+            reason: 'daemon-execution-embedding-nonportable', details: { fields }
+        });
+}
+export const RUNTIME_HTTP_TOKEN_KEY = 'VIBES_RUNTIME_HTTP_TOKEN';
+export async function applyDeclaredHttpConfig(config) {
+    const next = { ...config };
+    const http = (await readRuntimePluginConfig(config.serveHost)).daemon.http;
+    if (http.enabled !== true && http.port === undefined) {
+        next.host ??= http.host;
+        return next;
+    }
+    next.port ??= http.port ?? 0;
+    next.host ??= http.host;
+    if (http.corsOrigins)
+        next.corsAllowedOrigins ??= http.corsOrigins;
+    if (http.corsAllowAny)
+        next.corsAllowAny ??= true;
+    if (http.debug)
+        next.httpDebug ??= true;
+    if (next.authToken === undefined) {
+        const token = await config.serveHost.resolveCredential({ source: 'secret', key: RUNTIME_HTTP_TOKEN_KEY });
+        // Confirmed absence only: no fixed token is stored (`credential-not-set`), or
+        // the host composes no secrets store (`no-store`); either way this boot
+        // generates its own. Any other resolution failure propagates.
+        if (token.ok)
+            next.authToken = token.value;
+        else if (!isCapabilityError(token.error) || (token.error.reason !== 'credential-not-set' && token.error.reason !== 'no-store')) {
+            throw token.error;
+        }
+    }
+    return next;
+}
+//# sourceMappingURL=configuration.js.map

package/dist/daemon/runtime/configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../../src/daemon/runtime/configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EACf,iBAAiB,EAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,yBAAyB,EAA4B,MAAM,gDAAgD,CAAC;AACrH,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AACvG,OAAO,EAAE,oCAAoC,EAAE,MAAM,cAAc,CAAC;AAEpE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;AAEvE,MAAM,UAAU,0BAA0B,CAAC,MAA2B;IACrE,OAAO,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1J,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAA2B;IAC5E,IAAI,0BAA0B,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO;IAC1D,MAAM,WAAW,GAAkC,CAAC,WAAW,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAC5I,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,eAAe,CAAC,uEAAuE,EAAE,eAAe,EAAE;YACtI,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;SACrE,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAA2B;IACxE,MAAM,IAAI,GAAwB,EAAE,GAAG,MAAM,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,CAAC,MAAM,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC3E,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,CAAC,WAAW;QAAE,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAAC,WAAW,CAAC;IACnE,IAAI,IAAI,CAAC,YAAY;QAAE,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC;IAClD,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IACxC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC1G,8EAA8E;QAC9E,wEAAwE;QACxE,8DAA8D;QAC9D,IAAI,KAAK,CAAC,EAAE;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;aACtC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,oBAAoB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;YAChI,MAAM,KAAK,CAAC,KAAK,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/daemon/runtime/coordinator.d.ts

@@ -0,0 +1,10 @@
+import type { RuntimeDaemonExecution } from "../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+import { RuntimeDaemonState } from "./state.ts";
+export declare class RuntimeDaemon extends RuntimeDaemonState {
+    prepareExecution(traceBoot?: (stage: string) => void): Promise<RuntimeDaemonExecution>;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    disposeExecution(): Promise<void>;
+    startHttpExecution(): Promise<void>;
+}
+//# sourceMappingURL=coordinator.d.ts.map

package/dist/daemon/runtime/coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.d.ts","sourceRoot":"","sources":["../../../src/daemon/runtime/coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sEAAsE,CAAC;AAKnH,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,qBAAa,aAAc,SAAQ,kBAAkB;IACrD,gBAAgB,CAAC,SAAS,GAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAEvG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAEtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAErB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAEjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;CAElC"}

package/dist/daemon/runtime/coordinator.js

@@ -0,0 +1,13 @@
+import { prepareExecution } from "./io/execution.js";
+import { startHttpExecution } from "./io/http.js";
+import { disposeExecution, stop } from "./lifecycle/shutdown.js";
+import { start } from "./lifecycle/startup.js";
+import { RuntimeDaemonState } from "./state.js";
+export class RuntimeDaemon extends RuntimeDaemonState {
+    prepareExecution(traceBoot = () => undefined) { return prepareExecution(this, traceBoot); }
+    start() { return start(this); }
+    stop() { return stop(this); }
+    disposeExecution() { return disposeExecution(this); }
+    startHttpExecution() { return startHttpExecution(this); }
+}
+//# sourceMappingURL=coordinator.js.map

package/dist/daemon/runtime/coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../../src/daemon/runtime/coordinator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,OAAO,aAAc,SAAQ,kBAAkB;IACrD,gBAAgB,CAAC,YAAqC,GAAG,EAAE,CAAC,SAAS,IAAqC,OAAO,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAErJ,KAAK,KAAoB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9C,IAAI,KAAoB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE5C,gBAAgB,KAAoB,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpE,kBAAkB,KAAoB,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CAEvE"}

package/dist/daemon/runtime/helpers.d.ts

@@ -0,0 +1,20 @@
+import { type CaughtFailure } from '@vibesdotdev/kernel';
+import { type JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { LoggerInterface } from '@vibesdotdev/kernel/schemas/logger';
+import type { MachineCapability } from '../pairing/types.ts';
+import type { RuntimeCommandPayload } from '../services/api/command-handler.contracts.ts';
+export { MachineCapabilitiesSchema, NativeErrnoSchema } from "../../schemas/contracts/daemon/runtime/helpers.ts";
+export declare function createNoopLogger(namespace: string): LoggerInterface;
+export declare function formatError(error: CaughtFailure): {
+    error: string;
+    stack: string | undefined;
+} | {
+    error: string;
+    stack?: undefined;
+};
+export declare function subscriptionEvent(encoded: string): JsonObject;
+export declare function parseMachineCapabilities(value: RuntimeCommandPayload[string]): MachineCapability[] | undefined;
+export declare function throwCollected(failures: CaughtFailure[], message: string): void;
+export type { ShutdownWork } from '../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts';
+export declare const PROJECTION_WORKSPACE_SESSION_ID = "consumer-renderer";
+//# sourceMappingURL=helpers.d.ts.map

package/dist/daemon/runtime/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/daemon/runtime/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAGP,KAAK,aAAa,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,mDAAmD,CAAC;AAEjH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAenE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa;;;;;;EAG/C;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAY7D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAE9G;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAG/E;AAED,YAAY,EAAE,YAAY,EAAE,MAAM,sEAAsE,CAAC;AAEzG,eAAO,MAAM,+BAA+B,sBAAsB,CAAC"}

package/dist/daemon/runtime/helpers.js

@@ -0,0 +1,48 @@
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+import * as z from 'zod/v4';
+import { MachineCapabilitiesSchema } from "../../schemas/contracts/daemon/runtime/helpers.js";
+export { MachineCapabilitiesSchema, NativeErrnoSchema } from "../../schemas/contracts/daemon/runtime/helpers.js";
+export function createNoopLogger(namespace) {
+    const noop = () => { };
+    return {
+        namespace,
+        fullNamespace: namespace,
+        debug: noop,
+        info: noop,
+        warn: noop,
+        error: noop,
+        child: (opts) => createNoopLogger(`${namespace}:${z.union([z.string(), z.object({ namespace: z.string().optional(), context: z.string().optional() }).transform(value => value.namespace ?? 'child')]).parse(opts)}`),
+        withContext: () => createNoopLogger(namespace)
+    };
+}
+export function formatError(error) {
+    if (error instanceof Error)
+        return { error: error.message, stack: error.stack };
+    return { error: error.description };
+}
+export function subscriptionEvent(encoded) {
+    try {
+        const parsed = JsonObjectSchema.safeParse(JSON.parse(encoded));
+        if (!parsed.success) {
+            throw new CapabilityError('Subscription event is not JSON.', 'INVALID_INPUT', {
+                reason: 'subscription-event-invalid'
+            });
+        }
+        return parsed.data;
+    }
+    catch (error) {
+        throw CaughtFailureSchema.parse(error);
+    }
+}
+export function parseMachineCapabilities(value) {
+    return MachineCapabilitiesSchema.parse(value) ?? undefined;
+}
+export function throwCollected(failures, message) {
+    if (failures.length === 1)
+        throw failures[0];
+    if (failures.length > 1)
+        throw new AggregateError(failures, message);
+}
+export const PROJECTION_WORKSPACE_SESSION_ID = 'consumer-renderer';
+//# sourceMappingURL=helpers.js.map

package/dist/daemon/runtime/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/daemon/runtime/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EACf,mBAAmB,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kCAAkC,CAAC;AAErF,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAG9F,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,mDAAmD,CAAC;AAEjH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IACjD,MAAM,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACtB,OAAO;QACN,SAAS;QACT,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CACf,GAAG,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAClL;QACF,WAAW,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC;KAC9C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC/C,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAChD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,eAAe,EAAE;gBAC7E,MAAM,EAAE,4BAA4B;aACpC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;AACF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAoC;IAC5E,OAAO,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,OAAe;IACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAID,MAAM,CAAC,MAAM,+BAA+B,GAAG,mBAAmB,CAAC"}

package/dist/daemon/runtime/io/endpoint.d.ts

@@ -0,0 +1,12 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { RuntimeHttpEndpoint } from "../../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+import type { RuntimeDaemonHealth } from '../../protocol/schemas.ts';
+import type { RuntimeDaemonState } from "../state.ts";
+export declare function currentPid(state: RuntimeDaemonState): Promise<number>;
+export declare function writeHttpEndpointFile(state: RuntimeDaemonState, port: number): Promise<void>;
+export declare function removeHttpEndpointFile(state: RuntimeDaemonState): Promise<void>;
+export declare function removeShutdownArtifact(state: RuntimeDaemonState, path: string, what: string): Promise<void>;
+export declare function getHealth(state: RuntimeDaemonState): Promise<RuntimeDaemonHealth>;
+export declare function getRuntimeHttpEndpointPath(runtime: VibesRuntime, workspace?: string): string;
+export declare function readRuntimeHttpEndpoint(runtime: VibesRuntime, workspace?: string): Promise<RuntimeHttpEndpoint | null>;
+//# sourceMappingURL=endpoint.d.ts.map

package/dist/daemon/runtime/io/endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/endpoint.ts"],"names":[],"mappings":"AACA,OAAO,EAIP,KAAK,YAAY,EAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yEAAyE,CAAC;AASnH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,wBAAsB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ1E;AAEF,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcjG;AAEF,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;AAEF,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhH;AAEF,wBAAsB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAOtF;AAEF,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAM5F;AAED,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,YAAY,EACrB,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAQrC"}

package/dist/daemon/runtime/io/endpoint.js

@@ -0,0 +1,70 @@
+import { join, readFilePrivate, resolveFileSystemAdapter, statChecked, writeFilePrivate } from '@vibesdotdev/filesystem';
+import { CapabilityError, CaughtFailureSchema, settleNow } from '@vibesdotdev/kernel';
+import { getRuntimeProcessService } from '@vibesdotdev/kernel/process';
+import * as z from 'zod/v4';
+import { getVibesDir } from "../../hosting/socket/paths.consumer.js";
+import { getRuntimeWorkspaceIsolation, resolveRuntimeDaemonWorkspaceId, runtimeDaemonWorkspace } from "../../hosting/socket/runtime-daemon.socket-path.js";
+import { getRuntimeHealth } from "../../services/health.js";
+export async function currentPid(state) {
+    const pid = (await getRuntimeProcessService(state.serveHost)).currentPid?.();
+    if (pid === undefined) {
+        throw new CapabilityError('This host does not expose its process id.', 'UNAVAILABLE', {
+            reason: 'process-pid-unavailable', retryable: false
+        });
+    }
+    return pid;
+}
+export async function writeHttpEndpointFile(state, port) {
+    const endpoint = {
+        host: state.httpHost,
+        port,
+        token: state.authToken,
+        pid: await currentPid(state)
+    };
+    const failure = await (async () => {
+        const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+        await writeFilePrivate(adapter, state.httpEndpointPath, JSON.stringify(endpoint, null, '\t'), 'utf8');
+    })().catch(error => CaughtFailureSchema.parse(error));
+    if (failure)
+        state.runtimeDaemonLogger.error('failed to write HTTP endpoint file', { path: state.httpEndpointPath, error: failure });
+    else
+        state.runtimeDaemonLogger.info('HTTP endpoint file written', { path: state.httpEndpointPath });
+}
+export async function removeHttpEndpointFile(state) {
+    await removeShutdownArtifact(state, state.httpEndpointPath, 'HTTP endpoint file');
+}
+export async function removeShutdownArtifact(state, path, what) {
+    const failure = await (async () => {
+        const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+        if ((await statChecked(adapter, path)).found)
+            await adapter.remove(path);
+    })().catch(error => CaughtFailureSchema.parse(error));
+    if (failure) {
+        settleNow(() => state.runtimeDaemonLogger.warn(`${what} could not be removed at shutdown`, { path, error: failure }));
+        throw failure;
+    }
+    settleNow(() => state.runtimeDaemonLogger.info(`${what} removed`, { path }));
+}
+export async function getHealth(state) {
+    return getRuntimeHealth(state.runtime, {
+        startTime: state.startTime,
+        version: '0.1.0',
+        pid: await currentPid(state),
+        subscriptionManager: state.subscriptionManager
+    });
+}
+export function getRuntimeHttpEndpointPath(runtime, workspace) {
+    const workspaceId = resolveRuntimeDaemonWorkspaceId(runtimeDaemonWorkspace(runtime, workspace), getRuntimeWorkspaceIsolation(runtime));
+    return join(getVibesDir(runtime), 'pm', `runtime-http-${workspaceId}.json`);
+}
+export async function readRuntimeHttpEndpoint(runtime, workspace) {
+    const path = getRuntimeHttpEndpointPath(runtime, workspace);
+    // No endpoint file (ENOENT) is absence; an unreadable or unparseable one
+    // is a real failure and propagates.
+    const adapter = await resolveFileSystemAdapter(runtime, { binding: false });
+    if (!(await statChecked(adapter, path)).found)
+        return null;
+    const bytes = await readFilePrivate(adapter, path, 65536);
+    return z.object({ host: z.string(), port: z.number(), token: z.string(), pid: z.number() }).parse(JSON.parse(new TextDecoder().decode(bytes)));
+}
+//# sourceMappingURL=endpoint.js.map

package/dist/daemon/runtime/io/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,wBAAwB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EACP,eAAe,EACf,mBAAmB,EACnB,SAAS,EAER,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACP,WAAW,EACV,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACP,4BAA4B,EAC5B,+BAA+B,EAC/B,sBAAsB,EACrB,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAyB;IACxD,MAAM,GAAG,GAAG,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;IAC7E,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CAAC,2CAA2C,EAAE,aAAa,EAAE;YACrF,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK;SACnD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAyB,EAAE,IAAY;IACjF,MAAM,QAAQ,GAAwB;QACrC,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,SAAS;QACtB,GAAG,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC;KAC5B,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;;QAChI,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACrG,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAyB;IACpE,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;AACnF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAyB,EAAE,IAAY,EAAE,IAAY;IAChG,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,IAAI,mCAAmC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACtH,MAAM,OAAO,CAAC;IACf,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAyB;IACvD,OAAO,gBAAgB,CAAC,KAAK,CAAC,OAAQ,EAAE;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,MAAM,UAAU,CAAC,KAAK,CAAC;QAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC9C,CAAC,CAAC;AACJ,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,OAAqB,EAAE,SAAkB;IACnF,MAAM,WAAW,GAAG,+BAA+B,CAClD,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,EAC1C,4BAA4B,CAAC,OAAO,CAAC,CACrC,CAAC;IACF,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,WAAW,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAAqB,EACrB,SAAkB;IAElB,MAAM,IAAI,GAAG,0BAA0B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5D,yEAAyE;IACzE,oCAAoC;IACpC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChJ,CAAC"}

package/dist/daemon/runtime/io/execution.d.ts

@@ -0,0 +1,4 @@
+import type { RuntimeDaemonExecution } from "../../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+import { RuntimeDaemonState } from "../state.ts";
+export declare function prepareExecution(state: RuntimeDaemonState, traceBoot?: (stage: string) => void): Promise<RuntimeDaemonExecution>;
+//# sourceMappingURL=execution.d.ts.map

package/dist/daemon/runtime/io/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/execution.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,sBAAsB,EAA4B,MAAM,yEAAyE,CAAC;AAShJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAIjD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,GAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAgHtJ"}

package/dist/daemon/runtime/io/execution.js

@@ -0,0 +1,118 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { createRuntimeProjectionRoot } from '@vibesdotdev/kernel/federation';
+import { handleSubscribe } from "../../commands/subscribe.js";
+import { getLocalMachineIdentity } from "../../pairing/machine-identity.consumer.js";
+import { createRpcRoot } from "../../services/api/rpc-root.js";
+import { ConfigWatcher } from "../../subscriptions/config-watcher.js";
+import { StorageWatcher } from "../../subscriptions/storage-watcher.js";
+import { parseMachineCapabilities, PROJECTION_WORKSPACE_SESSION_ID, subscriptionEvent } from "../helpers.js";
+import { startHotReload } from "../lifecycle/reload.js";
+import { RuntimeDaemonState } from "../state.js";
+import { getHealth } from "./endpoint.js";
+import { composeRuntimeDaemonPlugins, registerRuntimeDaemonPlugins } from "./host.js";
+export async function prepareExecution(state, traceBoot = () => undefined) {
+    const host = state.serveHost;
+    if (state.startTime === 0)
+        state.startTime = Date.now();
+    // Step 1: Add the daemon's plugins to the claimed serve host.
+    state.runtimeDaemonLogger.info('preparing serve host');
+    traceBoot('runtime-host-prepare-start');
+    const hostOptions = {
+        plugins: composeRuntimeDaemonPlugins(state.config.preRegisterPlugins)
+    };
+    if (state.config.postBootstrap)
+        hostOptions.postBootstrap = state.config.postBootstrap;
+    const runtime = await registerRuntimeDaemonPlugins(host, hostOptions);
+    state.runtime = runtime;
+    traceBoot('runtime-host-prepare-complete');
+    // Upgrade logger now that logging is initialized
+    if (state.config.createLogger) {
+        state.runtimeDaemonLogger = state.config.createLogger('runtime-daemon');
+    }
+    state.runtimeDaemonLogger.info('serve host prepared');
+    if (state.config.registerCommands) {
+        traceBoot('register-commands-start');
+        await state.config.registerCommands((command, handler) => {
+            state.runtimeCommands.register(command, handler);
+        });
+        traceBoot('register-commands-complete');
+    }
+    // Pairing: code generation is a daemon command. It is reachable ONLY
+    // over the Unix socket (OS file permissions, 0o600) so minting a pairing
+    // code requires local access.
+    state.runtimeCommands.register('pairing-generate-code', async (message) => {
+        const identity = await getLocalMachineIdentity(host);
+        const capabilities = parseMachineCapabilities(message.capabilities);
+        const pairingCode = state.pairingCodes.generate(identity.id, capabilities);
+        return { success: true, pairingCode };
+    });
+    // With hot reload armed, the daemon serves through its stable dispatch
+    // handle; the generations publish it as the default binding's serving
+    // runtime, so `getVibesRuntime()` follows it too.
+    const serving = await startHotReload(state, runtime);
+    traceBoot('hot-reload-ready');
+    // Step 2: Initialize subscription infrastructure
+    const watcherLogger = state.runtimeDaemonLogger.child('watchers');
+    state.storageWatcher = new StorageWatcher(serving, state.subscriptionManager, {
+        logger: watcherLogger.child('storage')
+    });
+    state.configWatcher = new ConfigWatcher(serving, state.subscriptionManager, {
+        logger: watcherLogger.child('config')
+    });
+    const subscribeDeps = {
+        subscriptions: state.subscriptionManager,
+        storageWatcher: state.storageWatcher,
+        configWatcher: state.configWatcher
+    };
+    state.subscribeDeps = subscribeDeps;
+    state.subscriptionManager.start(serving);
+    state.storageWatcher.start();
+    state.configWatcher.start();
+    traceBoot('watchers-ready');
+    // Build the execution root; the composing host owns its transport listener.
+    // The RpcRoot adapter wraps the seven methods (query/resolve/read/write/invoke/
+    // health/doctor) so each arriving RpcInvoke is routed through L1's invoke
+    // pipeline and dispatched to the correct handler. The legacy POST /rpc named-
+    // command router (RuntimeCommandDispatcher) is gone; arriving frames are
+    // RpcRequest routed by targetRef.
+    const rpcDeps = () => ({
+        runtime: serving,
+        subscriptionManager: {
+            activeCount: () => state.subscriptionManager.getActiveCount(),
+            closeAll: () => state.subscriptionManager.shutdown(),
+            handleSubscribe: (req) => handleSubscribe(req, subscribeDeps),
+            broadcast: (channel, event) => state.subscriptionManager.broadcast(channel, subscriptionEvent(JSON.stringify(event)))
+        },
+        getHealth: () => getHealth(state)
+    });
+    // The local control root retains the existing localOnly command policy.
+    const rpcRoot = createRpcRoot(rpcDeps, state.runtimeCommands, 'local');
+    const uid = serving.environment.getUid?.();
+    if (uid === undefined)
+        throw new CapabilityError('The daemon host does not expose an account UID.', 'UNAVAILABLE', { reason: 'host-uid-unavailable' });
+    // Projected calls run against this daemon's one bound workspace. Bind
+    // a dedicated session for them now (the same bind-caller the control
+    // invoke uses per call) so workspace-aware implementations resolve
+    // that session instead of facing every session a shared daemon has
+    // bound, unnamed. Without a workspace composition there is no
+    // binding to name and workspace-aware projected kinds stay absent.
+    let projectionWorkspace;
+    if (serving.hasContext('workspace/bind-caller')) {
+        // SAFETY: runtime context provides workspace/bind-caller function
+        const bindCaller = await serving.context('workspace/bind-caller');
+        projectionWorkspace = await bindCaller(serving, PROJECTION_WORKSPACE_SESSION_ID, state.workspaceRoot);
+    }
+    const projection = createRuntimeProjectionRoot(serving, {
+        runtimeId: `consumer-daemon:${state.workspaceId}`,
+        workspaceId: state.workspaceId,
+        principal: {
+            type: 'user',
+            id: `local-user:${uid}`,
+            roles: ['local-owner']
+        },
+        audience: 'consumer-renderer',
+        policyRevision: 1
+    }, projectionWorkspace ? { invocationWorkspace: projectionWorkspace } : {});
+    return { runtime: serving, controlRoot: rpcRoot, projectionRoot: projection };
+}
+//# sourceMappingURL=execution.js.map

package/dist/daemon/runtime/io/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/execution.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EAGd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,EAAE,eAAe,EAA6B,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC7G,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAyB,EAAE,YAAqC,GAAG,EAAE,CAAC,SAAS;IACpH,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC;QAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxD,8DAA8D;IAC9D,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACvD,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACxC,MAAM,WAAW,GAA6B;QAC7C,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;KACrE,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa;QAAE,WAAW,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAE3C,iDAAiD;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC/B,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAEtD,IAAI,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACnC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YACxD,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,yEAAyE;IACzE,8BAA8B;IAC9B,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,wBAAwB,CAC5C,OAAO,CAAC,YAAY,CACpB,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAE9B,iDAAiD;IACjD,MAAM,aAAa,GAAG,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClE,KAAK,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE;QAC7E,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;KACtC,CAAC,CAAC;IACH,KAAK,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE;QAC3E,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;KACrC,CAAC,CAAC;IACH,MAAM,aAAa,GAAyB;QAC3C,aAAa,EAAE,KAAK,CAAC,mBAAmB;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;KAClC,CAAC;IACF,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;IACpC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC7B,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC5B,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAE5B,4EAA4E;IAC5E,gFAAgF;IAChF,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,kCAAkC;IAClC,MAAM,OAAO,GAA6B,GAAG,EAAE,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO;QAChB,mBAAmB,EAAE;YACpB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,EAAE;YAC7D,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE;YACpD,eAAe,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC;YACtE,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC7B,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;SACvF;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;KACjC,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAEvE,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACvJ,sEAAsE;IACtE,qEAAqE;IACrE,mEAAmE;IACnE,mEAAmE;IACnE,8DAA8D;IAC9D,mEAAmE;IACnE,IAAI,mBAAuD,CAAC;IAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjD,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAA6F,uBAAuB,CAAC,CAAC;QAC9J,mBAAmB,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,+BAA+B,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,EAAE;QACvD,SAAS,EAAE,mBAAmB,KAAK,CAAC,WAAW,EAAE;QACjD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,cAAc,GAAG,EAAE;YACvB,KAAK,EAAE,CAAC,aAAa,CAAC;SACtB;QACD,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,CAAC;KACjB,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AAC/E,CAAC"}