@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/daemon/runtime/io/host.d.ts

@@ -0,0 +1,16 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { RuntimePlugin } from '@vibesdotdev/kernel/factory/plugin';
+import type { RuntimeDaemonHostOptions } from "../../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+import { type DaemonExecutionMode } from '../../hosting/execution/execution-host.schemas.ts';
+export declare const CLI_EXECUTION_COMPOSITION_CONTEXT_ID = "cli/execution-composition";
+export declare function composeRuntimeDaemonPlugins(plugins?: readonly RuntimePlugin[]): RuntimePlugin[];
+export declare function claimRuntimeDaemonHost(runtime: VibesRuntime, composition?: DaemonExecutionMode): void;
+/**
+ * Release the serving claim held on `runtime`. Idempotent: stopping twice, or
+ * stopping a host that never served, stays quiet. The daemon's stop path calls
+ * this before it retires execution and disposes the serve host.
+ */
+export declare function releaseRuntimeDaemonHost(runtime: VibesRuntime): void;
+export declare function registerRuntimeDaemonPlugins(runtime: VibesRuntime, options: RuntimeDaemonHostOptions): Promise<VibesRuntime>;
+export declare function prepareRuntimeDaemonHost(runtime: VibesRuntime, options?: RuntimeDaemonHostOptions): Promise<VibesRuntime>;
+//# sourceMappingURL=host.d.ts.map

package/dist/daemon/runtime/io/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAEP,KAAK,YAAY,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAGxE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yEAAyE,CAAC;AACxH,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAG7F,eAAO,MAAM,oCAAoC,8BAA8B,CAAC;AAUhF,wBAAgB,2BAA2B,CAC1C,OAAO,GAAE,SAAS,aAAa,EAAO,GACpC,aAAa,EAAE,CASjB;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,GAAE,mBAA4B,GAAG,IAAI,CA+B7G;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAGpE;AAED,wBAAsB,4BAA4B,CACjD,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,wBAAwB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE,wBAA6B,GACpC,OAAO,CAAC,YAAY,CAAC,CAGvB"}

package/dist/daemon/runtime/io/host.js

@@ -0,0 +1,70 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import storagePlugin from '@vibesdotdev/storage/plugin';
+import storageExplorerConsumerPlugin from '@vibesdotdev/storage/storage-explorer.consumer.plugin';
+import {} from "../../hosting/execution/execution-host.schemas.js";
+import { isRuntimeDaemonHost, RUNTIME_DAEMON_SERVE_COMMAND } from "../../hosting/process/daemon-role.js";
+export const CLI_EXECUTION_COMPOSITION_CONTEXT_ID = 'cli/execution-composition';
+/**
+ * The daemon's serving claim, held on the serve host runtime itself — never in
+ * a module-level set — so stopping the daemon can release it and a later
+ * in-process start on the same runtime is admitted again.
+ */
+const daemonHostClaim = Symbol('vibes.runtime-daemon-host-claim');
+export function composeRuntimeDaemonPlugins(plugins = []) {
+    const composed = [];
+    const seen = new Set();
+    for (const plugin of [storagePlugin, storageExplorerConsumerPlugin, ...plugins]) {
+        if (seen.has(plugin.id))
+            continue;
+        seen.add(plugin.id);
+        composed.push(plugin);
+    }
+    return composed;
+}
+export function claimRuntimeDaemonHost(runtime, composition = 'full') {
+    if (!isRuntimeDaemonHost(runtime)) {
+        const declared = runtime.declaredScope.qualifiers.serve;
+        throw new CapabilityError(`The runtime daemon serves only on its own serve host (qualifiers.serve '${RUNTIME_DAEMON_SERVE_COMMAND}'); this host declared ${declared ? `'${declared}'` : 'no serve command'}.`, 'INTERNAL', {
+            reason: 'runtime-daemon-host-undeclared',
+            recoveryHint: 'Start the daemon with `vibes runtime daemon serve` or `vibes runtime daemon start`.',
+            details: { serve: declared ?? null }
+        });
+    }
+    // The command-selected transport host is admission only. Its declared
+    // execution composition activates in the worker, never on this thread.
+    const deferredTransport = composition === 'transport' && runtime.hasContext(CLI_EXECUTION_COMPOSITION_CONTEXT_ID);
+    if (!runtime.activated && !deferredTransport) {
+        throw new CapabilityError('The runtime daemon serve host was not activated by the entry before the daemon started.', 'INTERNAL', { reason: 'runtime-daemon-host-inactive' });
+    }
+    // SAFETY: the claim is a module-private symbol key set only by claimRuntimeDaemonHost on this runtime.
+    if (runtime[daemonHostClaim]) {
+        throw new CapabilityError('A runtime daemon is already serving on this host.', 'CONFLICT', {
+            reason: 'runtime-daemon-already-serving'
+        });
+    }
+    // SAFETY: same module-private claim key; the write only marks this runtime as serving.
+    runtime[daemonHostClaim] = true;
+}
+/**
+ * Release the serving claim held on `runtime`. Idempotent: stopping twice, or
+ * stopping a host that never served, stays quiet. The daemon's stop path calls
+ * this before it retires execution and disposes the serve host.
+ */
+export function releaseRuntimeDaemonHost(runtime) {
+    // SAFETY: same module-private claim key; delete only clears this runtime's serving mark.
+    delete runtime[daemonHostClaim];
+}
+export async function registerRuntimeDaemonPlugins(runtime, options) {
+    for (const plugin of options.plugins ?? []) {
+        if (!runtime.hasPlugin(plugin.id))
+            await runtime.registerPlugin(plugin);
+    }
+    if (options.postBootstrap)
+        await options.postBootstrap(runtime);
+    return runtime;
+}
+export async function prepareRuntimeDaemonHost(runtime, options = {}) {
+    claimRuntimeDaemonHost(runtime);
+    return registerRuntimeDaemonPlugins(runtime, options);
+}
+//# sourceMappingURL=host.js.map

package/dist/daemon/runtime/io/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/host.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EAEd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,aAAa,MAAM,6BAA6B,CAAC;AACxD,OAAO,6BAA6B,MAAM,uDAAuD,CAAC;AAElG,OAAO,EAA4B,MAAM,mDAAmD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEzG,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAEhF;;;;GAIG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC,iCAAiC,CAAC,CAAC;AAGlE,MAAM,UAAU,2BAA2B,CAC1C,UAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,CAAC,aAAa,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACjF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAqB,EAAE,cAAmC,MAAM;IACtG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC;QACxD,MAAM,IAAI,eAAe,CACxB,2EAA2E,4BAA4B,0BAA0B,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,kBAAkB,GAAG,EACnL,UAAU,EACV;YACC,MAAM,EAAE,gCAAgC;YACxC,YAAY,EAAE,qFAAqF;YACnG,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,EAAE;SACpC,CACD,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,WAAW,KAAK,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAClH,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CACxB,yFAAyF,EACzF,UAAU,EACV,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAC1C,CAAC;IACH,CAAC;IACD,uGAAuG;IACvG,IAAK,OAA0B,CAAC,eAAe,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,UAAU,EAAE;YAC1F,MAAM,EAAE,gCAAgC;SACxC,CAAC,CAAC;IACJ,CAAC;IACD,uFAAuF;IACtF,OAA0B,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAqB;IAC7D,yFAAyF;IACzF,OAAQ,OAA0B,CAAC,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAAqB,EACrB,OAAiC;IAEjC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,aAAa;QAAE,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAqB,EACrB,UAAoC,EAAE;IAEtC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,4BAA4B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC"}

package/dist/daemon/runtime/io/http.d.ts

@@ -0,0 +1,4 @@
+import { RuntimeDaemonState } from "../state.ts";
+export declare function startHttpExecution(state: RuntimeDaemonState): Promise<void>;
+export declare function startHttpApi(state: RuntimeDaemonState): Promise<void>;
+//# sourceMappingURL=http.d.ts.map

package/dist/daemon/runtime/io/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/http.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAIjD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF;AAEF,wBAAsB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsF1E"}

package/dist/daemon/runtime/io/http.js

@@ -0,0 +1,91 @@
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { serveFetch } from "../../../core/utils/http-serve.js";
+import { createPairingCompleter, registerPersistedPairedClientTokens } from "../../auth/pairing-binding.js";
+import { createTcpRpcDispatcher } from "../../auth/tcp-dispatch.js";
+import { createTcpHandler } from "../../auth/tcp-handler.js";
+import { handleSubscribe } from "../../commands/subscribe.js";
+import { getLocalMachineIdentity } from "../../pairing/machine-identity.consumer.js";
+import { createRpcRoot } from "../../services/api/rpc-root.js";
+import { LOOPBACK_HOSTS } from "../configuration.js";
+import { subscriptionEvent } from "../helpers.js";
+import { RuntimeDaemonState } from "../state.js";
+import { getHealth, writeHttpEndpointFile } from "./endpoint.js";
+import { ensurePathPermissions } from "./paths.js";
+export async function startHttpExecution(state) {
+    if (state.httpPort !== undefined) {
+        await ensurePathPermissions(state);
+        await startHttpApi(state);
+    }
+}
+export async function startHttpApi(state) {
+    // Security warning for non-loopback binding
+    if (!LOOPBACK_HOSTS.has(state.httpHost)) {
+        state.runtimeDaemonLogger.warn('HTTP API binding to non-loopback address — this exposes the runtime API to the network. ' +
+            'For remote access, prefer Tailscale serve/funnel or an HTTPS reverse proxy ' +
+            'in front of 127.0.0.1 instead.', { host: state.httpHost });
+    }
+    // Re-register tokens issued to previously paired machines so pairing
+    // survives daemon restarts (the pairing handshake persists them in
+    // paired-clients.json).
+    const pairedTokenCount = await registerPersistedPairedClientTokens(state.tokenRegistry, state.serveHost);
+    if (pairedTokenCount > 0) {
+        state.runtimeDaemonLogger.info('registered persisted paired-client tokens', {
+            count: pairedTokenCount
+        });
+    }
+    // The legacy HTTP wire shape shares the Unix root and remote invoke gate.
+    const runtime = state.runtime;
+    const subscribeDeps = state.subscribeDeps;
+    const port = state.httpPort;
+    if (!runtime || !subscribeDeps || port === undefined) {
+        throw new CapabilityError('HTTP execution was not prepared.', 'INTERNAL', { reason: 'daemon-http-unprepared' });
+    }
+    const rpcDeps = () => ({
+        runtime,
+        subscriptionManager: {
+            activeCount: () => state.subscriptionManager.getActiveCount(),
+            closeAll: () => state.subscriptionManager.shutdown(),
+            handleSubscribe: (req) => handleSubscribe(req, subscribeDeps),
+            broadcast: (channel, event) => state.subscriptionManager.broadcast(channel, subscriptionEvent(JSON.stringify(event)))
+        },
+        getHealth: () => getHealth(state)
+    });
+    // REMOTE root over the SAME registry. Everything the local control
+    // channel serves is reachable here too, EXCEPT commands registered
+    // `localOnly` — which is how `hot-reload` stops being a TCP-reachable
+    // code evaluator without losing its Unix-socket capability.
+    const rpcRoot = createRpcRoot(rpcDeps, state.runtimeCommands, 'remote');
+    const tcpHandler = createTcpHandler({
+        hostname: state.httpHost,
+        tokenRegistry: state.tokenRegistry,
+        nonceStore: state.nonceStore,
+        corsPolicy: state.corsPolicy,
+        httpDebug: state.httpDebug,
+        reportFailure: failure => state.runtimeDaemonLogger.error('HTTP body cleanup failed', { error: failure }),
+        dispatchRpc: createTcpRpcDispatcher(rpcRoot, runtime.invoke),
+        handleSubscribeStream: (req) => handleSubscribe(req, subscribeDeps),
+        completePairing: createPairingCompleter(state.tokenRegistry, state.serveHost, () => getLocalMachineIdentity(state.serveHost), state.pairingCodes)
+    });
+    state.tcpServer = await serveFetch(state.serveHost, {
+        port,
+        hostname: state.httpHost,
+        fetch: (req) => tcpHandler(req),
+        onError: (error, request) => state.runtimeDaemonLogger.error('HTTP API request failed', {
+            method: request.method,
+            url: request.url,
+            error: CaughtFailureSchema.parse(error)
+        })
+    });
+    const actualPort = state.tcpServer.port;
+    if (actualPort === undefined) {
+        throw new Error('HTTP API server did not report a bound port');
+    }
+    state.runtimeDaemonLogger.info('HTTP API listening', {
+        host: state.httpHost,
+        port: actualPort,
+        loopback: LOOPBACK_HOSTS.has(state.httpHost)
+    });
+    // Write endpoint info file for consumers to discover
+    await writeHttpEndpointFile(state, actualPort);
+}
+//# sourceMappingURL=http.js.map

package/dist/daemon/runtime/io/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EACf,mBAAmB,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EACP,sBAAsB,EACtB,mCAAmC,EAClC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAyB;IAChE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;AACrG,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAyB;IAC1D,4CAA4C;IAC5C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAC7B,0FAA0F;YACzF,6EAA6E;YAC7E,gCAAgC,EACjC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CACxB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,mEAAmE;IACnE,wBAAwB;IACxB,MAAM,gBAAgB,GAAG,MAAM,mCAAmC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACzG,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,2CAA2C,EAAE;YAC3E,KAAK,EAAE,gBAAgB;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,OAAO,GAAG,GAAuB,EAAE,CAAC,CAAC;QAC1C,OAAO;QACP,mBAAmB,EAAE;YACpB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,cAAc,EAAE;YAC7D,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE;YACpD,eAAe,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC;YACtE,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC7B,KAAK,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;SACvF;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;KACjC,CAAC,CAAC;IACH,mEAAmE;IACnE,mEAAmE;IACnE,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAExE,MAAM,UAAU,GAAG,gBAAgB,CAAC;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACzG,WAAW,EAAE,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;QAC5D,qBAAqB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC;QACnE,eAAe,EAAE,sBAAsB,CACtC,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,EAC9C,KAAK,CAAC,YAAY,CAClB;KACD,CAAC,CAAC;IAEH,KAAK,CAAC,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE;QACnD,IAAI;QACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC3B,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,yBAAyB,EAAE;YAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;SACvC,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;IACxC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,EAAE;QACpD,IAAI,EAAE,KAAK,CAAC,QAAQ;QACpB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;KAC5C,CAAC,CAAC;IAEH,qDAAqD;IACrD,MAAM,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC"}

package/dist/daemon/runtime/io/paths.d.ts

@@ -0,0 +1,5 @@
+import { RuntimeDaemonState } from "../state.ts";
+export declare function removeSocketFile(state: RuntimeDaemonState): Promise<void>;
+export declare function ensurePathPermissions(state: RuntimeDaemonState): Promise<void>;
+export declare function cleanupStaleSocketIfNeeded(state: RuntimeDaemonState): Promise<void>;
+//# sourceMappingURL=paths.d.ts.map

package/dist/daemon/runtime/io/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/paths.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9E;AAEF,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BnF;AAEF,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxF"}

package/dist/daemon/runtime/io/paths.js

@@ -0,0 +1,55 @@
+import { chmodChecked, join, resolveFileSystemAdapter, statChecked } from '@vibesdotdev/filesystem';
+import { CapabilityError, settle } from '@vibesdotdev/kernel';
+import { getSocketDir, getVibesDir } from "../../hosting/socket/paths.consumer.js";
+import { NativeErrnoSchema, throwCollected } from "../helpers.js";
+import { RuntimeDaemonState } from "../state.js";
+import { removeShutdownArtifact } from "./endpoint.js";
+export async function removeSocketFile(state) {
+    // Both sockets are attempted even when the first removal fails;
+    // failures throw together to the caller's ordered settlement.
+    const failures = [];
+    for (const p of [state.socketPath, state.projectionSocketPath]) {
+        const settled = await settle(() => removeShutdownArtifact(state, p, 'socket'));
+        if (!settled.ok)
+            failures.push(settled.cause);
+    }
+    throwCollected(failures, 'Runtime daemon socket cleanup failed.');
+}
+export async function ensurePathPermissions(state) {
+    const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+    const base = getVibesDir(state.serveHost);
+    const sockDir = getSocketDir(state.serveHost);
+    const pmDir = join(base, 'pm');
+    const logsDir = join(base, 'logs');
+    // A recursive mkdir does not fail on an existing directory: any failure
+    // here is real and fails the start.
+    for (const dir of [base, sockDir, pmDir, logsDir]) {
+        await adapter.mkdir(dir, { recursive: true });
+    }
+    // The sockets and PID file live here: a directory this daemon cannot
+    // restrict to its own user fails the start, typed, never a warning.
+    for (const dir of [base, sockDir, pmDir, logsDir]) {
+        try {
+            await chmodChecked(adapter, dir, 0o700);
+        }
+        catch (error) {
+            const errno = NativeErrnoSchema.safeParse(error);
+            throw new CapabilityError(`The runtime daemon cannot restrict ${dir} to its own user.`, 'PERMISSION_DENIED', {
+                reason: 'daemon-directory-unrestricted',
+                retryable: false,
+                details: { dir, errno: errno.success ? errno.data.code : null },
+                cause: error
+            });
+        }
+    }
+}
+export async function cleanupStaleSocketIfNeeded(state) {
+    const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+    // A stale socket that cannot be removed fails here, naming itself,
+    // rather than as a less clear bind error later.
+    for (const p of [state.socketPath, state.projectionSocketPath, state.projectionHolderPidFile]) {
+        if ((await statChecked(adapter, p)).found)
+            await adapter.remove(p);
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/daemon/runtime/io/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACpG,OAAO,EACP,eAAe,EACf,MAAM,EAEL,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACP,YAAY,EACZ,WAAW,EACV,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAyB;IAC9D,gEAAgE;IAChE,8DAA8D;IAC9D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,cAAc,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;AACnE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAyB;IACnE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEnC,wEAAwE;IACxE,oCAAoC;IACpC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,qEAAqE;IACrE,oEAAoE;IACpE,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACJ,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,eAAe,CAAC,sCAAsC,GAAG,mBAAmB,EAAE,mBAAmB,EAAE;gBAC5G,MAAM,EAAE,+BAA+B;gBACvC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC/D,KAAK,EAAE,KAAK;aACZ,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAyB;IACxE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,mEAAmE;IACnE,gDAAgD;IAChD,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/F,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;YAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;AACF,CAAC"}

package/dist/daemon/runtime/io/pid.d.ts

@@ -0,0 +1,5 @@
+import { RuntimeDaemonState } from "../state.ts";
+export declare function writePidFile(state: RuntimeDaemonState): Promise<void>;
+export declare function removePidFile(state: RuntimeDaemonState): Promise<void>;
+export declare function cleanupStalePidIfNeeded(state: RuntimeDaemonState): Promise<void>;
+//# sourceMappingURL=pid.d.ts.map

package/dist/daemon/runtime/io/pid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/pid.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,wBAAsB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1E;AAEF,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC3E;AAEF,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYrF"}

package/dist/daemon/runtime/io/pid.js

@@ -0,0 +1,77 @@
+import { resolveFileSystemAdapter, statChecked } from '@vibesdotdev/filesystem';
+import { CaughtFailureSchema, settle, settleNow } from '@vibesdotdev/kernel';
+import { getRuntimeProcessService } from '@vibesdotdev/kernel/process';
+import * as z from 'zod/v4';
+import { formatError, throwCollected } from "../helpers.js";
+import { RuntimeDaemonState } from "../state.js";
+import { currentPid } from "./endpoint.js";
+export async function writePidFile(state) {
+    try {
+        const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+        const pidText = (await currentPid(state)).toString();
+        await adapter.writeFile(state.pidFile, pidText, { encoding: 'utf8', mode: 0o600 });
+        // PM's serve-holder record for the socket it supervises: `pm start`
+        // adopts this live daemon instead of spawning a duplicate that the
+        // serve pre-check would turn away.
+        await adapter.writeFile(state.projectionHolderPidFile, pidText, { encoding: 'utf8', mode: 0o600 });
+        state.runtimeDaemonLogger.info('pid file written', { pidFile: state.pidFile });
+    }
+    catch (error) {
+        state.runtimeDaemonLogger.error('failed to write pid file', {
+            pidFile: state.pidFile,
+            ...formatError(CaughtFailureSchema.parse(error)),
+            cause: CaughtFailureSchema.parse(error)
+        });
+        throw error;
+    }
+}
+export async function removePidFile(state) {
+    // Teardown: emptied (not unlinked, as before); a missing one is already
+    // gone. Both sub-steps run even when the first fails; failures throw
+    // together to the caller's ordered settlement. Progress logs are
+    // advisory and never throw.
+    const failures = [];
+    const attempt = async (work) => {
+        const settled = await settle(work);
+        if (!settled.ok) {
+            settleNow(() => state.runtimeDaemonLogger.warn('pid file could not be cleared at shutdown', {
+                pidFile: state.pidFile,
+                error: settled.cause
+            }));
+            failures.push(settled.cause);
+        }
+    };
+    await attempt(async () => {
+        const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+        if ((await statChecked(adapter, state.pidFile)).found) {
+            await adapter.writeFile(state.pidFile, '', { encoding: 'utf8', mode: 0o600 });
+        }
+    });
+    await attempt(async () => {
+        const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+        if ((await statChecked(adapter, state.projectionHolderPidFile)).found) {
+            await adapter.remove(state.projectionHolderPidFile);
+        }
+    });
+    if (failures.length === 0) {
+        settleNow(() => state.runtimeDaemonLogger.info('pid file removed', { pidFile: state.pidFile }));
+        return;
+    }
+    throwCollected(failures, 'Runtime daemon pid file cleanup failed.');
+}
+export async function cleanupStalePidIfNeeded(state) {
+    const adapter = await resolveFileSystemAdapter(state.serveHost, { binding: false });
+    if (!(await statChecked(adapter, state.pidFile)).found)
+        return;
+    const content = z.string().parse(await adapter.readFile(state.pidFile, 'utf8'));
+    const pid = parseInt(content.trim(), 10);
+    if (Number.isInteger(pid)) {
+        // The host's liveness probe carries the errno reading: ESRCH is
+        // gone, EPERM is alive, anything else throws.
+        if (await (await getRuntimeProcessService(state.serveHost)).isRunning(pid))
+            return;
+    }
+    // Stale (dead or unparseable) PID file — remove it.
+    await adapter.remove(state.pidFile);
+}
+//# sourceMappingURL=pid.js.map

package/dist/daemon/runtime/io/pid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pid.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/io/pid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,SAAS,EAER,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAyB;IAC1D,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,oEAAoE;QACpE,mEAAmE;QACnE,mCAAmC;QACnC,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnG,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,0BAA0B,EAAE;YAC3D,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,WAAW,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAChD,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,wEAAwE;IACxE,qEAAqE;IACrE,iEAAiE;IACjE,4BAA4B;IAC5B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,KAAK,EAAE,IAAkB,EAAiB,EAAE;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,SAAS,CAAC,GAAG,EAAE,CACd,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC3E,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;aACpB,CAAC,CACF,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACvD,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,CAAC;IACF,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACvE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACrD,CAAC;IACF,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO;IACR,CAAC;IACD,cAAc,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;AACrE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAyB;IACrE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO;IAC/D,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,gEAAgE;QAChE,8CAA8C;QAC9C,IAAI,MAAM,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO;IACpF,CAAC;IACD,oDAAoD;IACpD,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/daemon/runtime/lifecycle/reload.d.ts

@@ -0,0 +1,4 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { RuntimeDaemonState } from "../state.ts";
+export declare function startHotReload(state: RuntimeDaemonState, runtime: VibesRuntime): Promise<VibesRuntime>;
+//# sourceMappingURL=reload.d.ts.map

package/dist/daemon/runtime/lifecycle/reload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reload.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/lifecycle/reload.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,KAAK,YAAY,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,wBAAsB,cAAc,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAwB3G"}

package/dist/daemon/runtime/lifecycle/reload.js

@@ -0,0 +1,25 @@
+import {} from '@vibesdotdev/kernel';
+import { RuntimeDaemonState } from "../state.js";
+export async function startHotReload(state, runtime) {
+    // Loaded on demand. Hot reload is Bun-only (it rebuilds source with
+    // `Bun.build`), and a daemon that never enables it must not carry that
+    // closure — the same lazy-implementation discipline descriptors use.
+    const { startHostHotReload } = await import("../../hosting/daemon-host/host-hot-reload.consumer.js");
+    const options = {
+        installedUpdates: true,
+        log: state.runtimeDaemonLogger.child('hot-reload'),
+        registerCommand: (command, handler) => {
+            state.runtimeCommands.register(command, handler, { localOnly: true });
+        }
+    };
+    if (state.config.hotReload)
+        options.config = state.config.hotReload;
+    const armed = await startHostHotReload(runtime, options);
+    if (armed.enabled) {
+        state.hotReload = armed;
+        state.runtime = armed.runtime;
+        return armed.runtime;
+    }
+    return runtime;
+}
+//# sourceMappingURL=reload.js.map

package/dist/daemon/runtime/lifecycle/reload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reload.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/lifecycle/reload.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAyB,EAAE,OAAqB;IACnF,oEAAoE;IACpE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,uDAAuD,CAAC,CAAC;IACrG,MAAM,OAAO,GAA6C;QACzD,gBAAgB,EAAE,IAAI;QACtB,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC;QAClD,eAAe,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YACrC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAC7B,OAAO,EACP,OAAO,EACP,EAAE,SAAS,EAAE,IAAI,EAAE,CACnB,CAAC;QACH,CAAC;KACD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/daemon/runtime/lifecycle/shutdown.d.ts

@@ -0,0 +1,6 @@
+import { RuntimeDaemonState } from "../state.ts";
+export declare function stop(state: RuntimeDaemonState): Promise<void>;
+export declare function stopOnce(state: RuntimeDaemonState): Promise<void>;
+export declare function disposeExecution(state: RuntimeDaemonState): Promise<void>;
+export declare function disposeExecutionOnce(state: RuntimeDaemonState): Promise<void>;
+//# sourceMappingURL=shutdown.d.ts.map

package/dist/daemon/runtime/lifecycle/shutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/lifecycle/shutdown.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,wBAAsB,IAAI,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAElE;AAEF,wBAAsB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDtE;AAEF,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9E;AAEF,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlF"}

package/dist/daemon/runtime/lifecycle/shutdown.js

@@ -0,0 +1,81 @@
+import { CaughtFailureSchema, settle, settleNow } from '@vibesdotdev/kernel';
+import { throwCollected } from "../helpers.js";
+import { removeHttpEndpointFile } from "../io/endpoint.js";
+import { releaseRuntimeDaemonHost } from "../io/host.js";
+import { removeSocketFile } from "../io/paths.js";
+import { removePidFile } from "../io/pid.js";
+import { RuntimeDaemonState } from "../state.js";
+export async function stop(state) {
+    return (state.stopping ??= stopOnce(state));
+}
+export async function stopOnce(state) {
+    // Advisory: a refusing log sink reports nowhere, so it never aborts retirement.
+    settleNow(() => state.runtimeDaemonLogger.info('stopping'));
+    // Every resource retires in dependency order even after an earlier
+    // failure; all failures report together once the last step joins.
+    const failures = [];
+    const retire = async (work) => {
+        const settled = await settle(work);
+        if (!settled.ok)
+            failures.push(settled.cause);
+    };
+    // Listener shutdown joins accepted sessions before their execution owner is retired.
+    const listenerStops = await Promise.allSettled([
+        state.unixRpcListener?.stop(),
+        state.unixProjectionListener?.stop()
+    ]);
+    for (const stopped of listenerStops) {
+        if (stopped.status === 'rejected')
+            failures.push(CaughtFailureSchema.parse(stopped.reason));
+    }
+    state.unixRpcListener = undefined;
+    state.unixProjectionListener = undefined;
+    // Stop TCP API server
+    await retire(() => state.tcpServer?.stop());
+    // Retire this start's attestation: stop verifying and remove its claim
+    // (a newer start's claim is left alone).
+    await retire(() => state.attestation?.dispose());
+    state.attestation = undefined;
+    // Remove endpoint info file
+    await retire(() => removeHttpEndpointFile(state));
+    // Remove PID file
+    await retire(() => removePidFile(state));
+    // Remove socket file
+    await retire(() => removeSocketFile(state));
+    // The serving claim lives on the serve host itself: release it while the
+    // host is still live, so a later in-process start on this runtime is
+    // admitted. Runs before execution retirement joins the host's disposal.
+    releaseRuntimeDaemonHost(state.serveHost);
+    settleNow(() => state.runtimeDaemonLogger.info('stopped'));
+    // Artifact retirement resolves filesystem capabilities through the composing
+    // runtime, so join and retire that owner only after its claims are removed.
+    await retire(() => disposeExecution(state));
+    throwCollected(failures, 'Runtime daemon stop cleanup failed.');
+}
+export async function disposeExecution(state) {
+    return (state.disposingExecution ??= disposeExecutionOnce(state));
+}
+export async function disposeExecutionOnce(state) {
+    // Every step runs in order even when an earlier one fails; one failure
+    // keeps its identity and several report together, so one failed
+    // cleanup neither strands the rest nor drops a sibling failure.
+    const failures = [];
+    const teardown = async (work) => {
+        const settled = await settle(work);
+        if (!settled.ok)
+            failures.push(settled.cause);
+    };
+    await teardown(() => state.tcpServer?.stop());
+    if (state.tcpServer)
+        await teardown(() => removeHttpEndpointFile(state));
+    await teardown(() => state.executionHost?.dispose());
+    await teardown(() => state.storageWatcher?.stop());
+    await teardown(() => state.configWatcher?.stop());
+    await teardown(() => state.nonceStore.dispose());
+    await teardown(() => state.subscriptionManager.shutdown());
+    await teardown(() => state.hotReload?.stop());
+    // Generation retirement deliberately leaves the composing root's lifecycle alive.
+    await teardown(() => state.serveHost.dispose());
+    throwCollected(failures, 'Runtime daemon execution cleanup failed.');
+}
+//# sourceMappingURL=shutdown.js.map

package/dist/daemon/runtime/lifecycle/shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/lifecycle/shutdown.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,SAAS,EAER,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAyB;IAClD,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAyB;IACtD,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAE5D,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,EAAE,IAAkB,EAAiB,EAAE;QAC1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,qFAAqF;IACrF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QAC9C,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE;QAC7B,KAAK,CAAC,sBAAsB,EAAE,IAAI,EAAE;KACpC,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAEzC,sBAAsB;IACtB,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,uEAAuE;IACvE,yCAAyC;IACzC,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;IAE9B,4BAA4B;IAC5B,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IAElD,kBAAkB;IAClB,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAEzC,qBAAqB;IACrB,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5C,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE1C,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAE3D,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,cAAc,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;AACjE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAyB;IAC9D,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAyB;IAClE,uEAAuE;IACvE,gEAAgE;IAChE,gEAAgE;IAChE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAkB,EAAiB,EAAE;QAC5D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,SAAS;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,kFAAkF;IAClF,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,cAAc,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;AACtE,CAAC"}

package/dist/daemon/runtime/lifecycle/startup.d.ts

@@ -0,0 +1,3 @@
+import { RuntimeDaemonState } from "../state.ts";
+export declare function start(state: RuntimeDaemonState): Promise<void>;
+//# sourceMappingURL=startup.d.ts.map

package/dist/daemon/runtime/lifecycle/startup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup.d.ts","sourceRoot":"","sources":["../../../../src/daemon/runtime/lifecycle/startup.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,wBAAsB,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+GnE"}