@vibesdotdev/kernel-rpc 0.0.0-stage → 1.0.0-rc.2

package/dist/daemon/runtime/lifecycle/startup.js

@@ -0,0 +1,113 @@
+import { getRuntimeStdio } from '@vibesdotdev/kernel';
+import { creditedChannelBinder, RUNTIME_PROJECTION_ROOT_METHODS } from '@vibesdotdev/kernel-rpc';
+import { listenUnix } from '@vibesdotdev/kernel-rpc/unix';
+import { createLocalAttestation } from '@vibesdotdev/secrets/attestation';
+import { readRuntimePluginConfig } from "../../hosting/process/runtime-config.js";
+import { getRuntimeDaemonAttestationPath } from "../../hosting/socket/paths.consumer.js";
+import { RPC_ROOT_METHODS } from "../../services/api/rpc-root.js";
+import { assertDaemonExecutionDeclarations, DEFAULT_HTTP_HOST, runtimeDaemonExecutionMode } from "../configuration.js";
+import { prepareExecution } from "../io/execution.js";
+import { claimRuntimeDaemonHost } from "../io/host.js";
+import { startHttpExecution } from "../io/http.js";
+import { cleanupStaleSocketIfNeeded, ensurePathPermissions } from "../io/paths.js";
+import { cleanupStalePidIfNeeded, writePidFile } from "../io/pid.js";
+import { RuntimeDaemonState } from "../state.js";
+export async function start(state) {
+    assertDaemonExecutionDeclarations(state.config);
+    // Boot tracing is declared config (`plugins.runtime.daemon.bootTrace`).
+    const bootTrace = (await readRuntimePluginConfig(state.serveHost)).daemon?.bootTrace === true;
+    const bootOutput = bootTrace ? await getRuntimeStdio(state.serveHost) : undefined;
+    const traceBoot = (stage) => {
+        bootOutput?.write('stderr', `[runtime-daemon:boot] ${stage}\n`);
+    };
+    traceBoot('start');
+    // The serve host the CLI booted through the entry, already activated.
+    // Its declared serve is the daemon's role, checked before any socket or
+    // PID file is touched. Nothing is published to `process.env` for
+    // children (a spawned vibes child gets `--workspace-root <root>` in argv).
+    const host = state.serveHost;
+    claimRuntimeDaemonHost(host, runtimeDaemonExecutionMode(state.config));
+    state.startTime = Date.now();
+    state.runtimeDaemonLogger.info('starting', {
+        workspaceId: state.workspaceId,
+        workspaceRoot: state.workspaceRoot
+    });
+    // Ensure directories exist with sane permissions
+    await ensurePathPermissions(state);
+    traceBoot('paths-ready');
+    // Clean up stale PID file and socket from previous runs
+    await cleanupStalePidIfNeeded(state);
+    await cleanupStaleSocketIfNeeded(state);
+    traceBoot('stale-artifacts-clean');
+    let controlTarget;
+    let projectionTarget;
+    if (runtimeDaemonExecutionMode(state.config) === 'transport') {
+        const { startDaemonExecutionHost } = await import("../../hosting/execution/daemon-execution-host.consumer.js");
+        state.executionHost = await startDaemonExecutionHost(host, {
+            http: { port: state.config.port, host: state.config.host ?? DEFAULT_HTTP_HOST,
+                corsOrigins: state.config.corsAllowedOrigins ? [...state.config.corsAllowedOrigins] : undefined,
+                corsAllowAny: state.config.corsAllowAny, debug: state.config.httpDebug }, hotReload: state.config.hotReload
+        });
+        const executionHost = state.executionHost;
+        const invokePipeline = host.invoke;
+        const forward = (surface) => ({
+            lifecycle: host.lifecycle, localMethods: surface === 'control' ? ['health'] : ['snapshot'],
+            connect: async (peer) => {
+                const attached = await executionHost.attach({ verifiedPeer: peer.verified, workspace: host.declaredScope.workspace });
+                const connection = surface === 'control' ? attached.controlTransport : attached.projectionTransport;
+                return { rootRef: connection.rootRef, closed: connection.closed, send: (request) => connection.send(request),
+                    openStream: connection.openStream.bind(connection), onRequest: connection.onRequest?.bind(connection), close: () => attached.dispose() };
+            }
+        });
+        controlTarget = { root: { health: () => executionHost.health }, rootMethods: RPC_ROOT_METHODS,
+            forward: forward('control'), pipeline: invokePipeline, classifyResult: () => ({ mode: 'inline' }), bindChannel: () => null, kindOf: () => 'runtime/rpc' };
+        projectionTarget = { root: { snapshot: () => executionHost.advertisement }, rootMethods: RUNTIME_PROJECTION_ROOT_METHODS,
+            forward: forward('projection'), pipeline: invokePipeline, classifyResult: () => ({ mode: 'inline' }), bindChannel: () => null, kindOf: () => 'runtime/rpc' };
+    }
+    else {
+        const execution = await prepareExecution(state, traceBoot);
+        controlTarget = { root: execution.controlRoot, pipeline: execution.runtime.invoke, classifyResult: () => ({ mode: 'inline' }), bindChannel: () => null, kindOf: () => 'runtime/rpc' };
+        // One projection view per accepted connection, so a projected method's signal ends with its connection;
+        // stream handles bind their credit-governed `events` channel.
+        projectionTarget = { connectionRoot: execution.projectionRoot.connectionRoot, rootMethods: RUNTIME_PROJECTION_ROOT_METHODS,
+            pipeline: execution.runtime.invoke, classifyResult: execution.projectionRoot.classifyResult,
+            bindChannel: creditedChannelBinder(execution.projectionRoot.streamSource), kindOf: execution.projectionRoot.kindOf };
+    }
+    // Local attestation (RC08): a fresh secret per start in a 0600 claim under
+    // this daemon's roots. A same-user client that presents it has its declared
+    // launch identity admitted (`remotePeer.verified`, source 'local-attested');
+    // every other declared identity is refused by the kernel. An insecure
+    // existing claim fails this start (`local-attestation-claim-insecure`).
+    state.attestation = await createLocalAttestation({ claimPath: getRuntimeDaemonAttestationPath(state.serveHost, state.workspaceRoot) }, state.serveHost);
+    state.unixRpcListener = await listenUnix(state.socketPath, controlTarget, { runtime: state.serveHost, attestation: state.attestation });
+    traceBoot('control-listener-created');
+    // Set socket permissions (owner-only read/write)
+    state.runtimeDaemonLogger.info('listening on socket (rpc-unix)', {
+        socketPath: state.socketPath,
+        methods: [...RPC_ROOT_METHODS]
+    });
+    // The Bridge/native path gets a separate credential-dark runtime root.
+    // Keeping the legacy control socket alive avoids breaking CLI supervision
+    // while feature callers migrate to ordinary federated runtime queries.
+    // Only the projection advertises Date metadata: the native relay opts in for renderers that ask.
+    // Stream credits stay unadvertised until installed desktops carry a relay that admits them (bridge-native
+    // 2a2ff89): an older relay reads `{ dates, streamCredits }` as no Date metadata. Until then a stream open
+    // is refused typed `rpc-stream-credits-unnegotiated`, before its implementation starts.
+    state.unixProjectionListener = await listenUnix(state.projectionSocketPath, projectionTarget, { runtime: state.serveHost, attestation: state.attestation, wireDates: true });
+    traceBoot('projection-listener-created');
+    state.runtimeDaemonLogger.info('listening on projection socket (rpc-unix)', {
+        socketPath: state.projectionSocketPath,
+        methods: ['snapshot', 'resolve']
+    });
+    // Step 4: Optionally start TCP HTTP API server
+    // Transport composition owns HTTP in the worker; full embedding retains its execution owner.
+    if (runtimeDaemonExecutionMode(state.config) === 'full')
+        await startHttpExecution(state);
+    // Step 5: Write PID file
+    await writePidFile(state);
+    state.runtimeDaemonLogger.info('ready');
+    traceBoot('ready');
+    // Keep daemon alive
+    await new Promise(() => { }); // Never resolves
+}
+//# sourceMappingURL=startup.js.map

package/dist/daemon/runtime/lifecycle/startup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup.js","sourceRoot":"","sources":["../../../../src/daemon/runtime/lifecycle/startup.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,eAAe,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EACP,+BAA+B,EAC9B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACvH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAyB;IACnD,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,wEAAwE;IACxE,MAAM,SAAS,GAAG,CAAC,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC;IAC9F,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE;QACnC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,yBAAyB,KAAK,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,sEAAsE;IACtE,wEAAwE;IACxE,iEAAiE;IACjE,2EAA2E;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC;IAC7B,sBAAsB,CAAC,IAAI,EAAE,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAEvE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACnC,SAAS,CAAC,aAAa,CAAC,CAAC;IAEzB,wDAAwD;IACxD,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACxC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAEnC,IAAI,aAA+C,CAAC;IACpD,IAAI,gBAAkD,CAAC;IACvD,IAAI,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;QAC9D,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,2DAA2D,CAAC,CAAC;QAC/G,KAAK,CAAC,aAAa,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE;YAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,iBAAiB;gBAC5E,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/F,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;SAC5G,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,OAAiC,EAAE,EAAE,CAAC,CAAC;YACvD,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAC1F,OAAO,EAAE,KAAK,EAAE,IAAkD,EAAE,EAAE;gBACrE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;gBACtH,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACpG,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAqD,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;oBACzJ,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3I,CAAC;SACD,CAAC,CAAC;QAEH,aAAa,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,gBAAgB;YAC5F,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;QAC3J,gBAAgB,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,+BAA+B;YACvH,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IAC/J,CAAC;SAAM,CAAC;QACP,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3D,aAAa,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;QACtL,wGAAwG;QACxG,8DAA8D;QAC9D,gBAAgB,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,cAAc,EAAE,WAAW,EAAE,+BAA+B;YACzH,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,cAAc;YAC3F,WAAW,EAAE,qBAAqB,CAAC,SAAS,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;IACvH,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,sEAAsE;IACtE,wEAAwE;IACxE,KAAK,CAAC,WAAW,GAAG,MAAM,sBAAsB,CAC/C,EAAE,SAAS,EAAE,+BAA+B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,EACpF,KAAK,CAAC,SAAS,CACf,CAAC;IAEF,KAAK,CAAC,eAAe,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACxI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAEtC,iDAAiD;IACjD,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAChE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,CAAC,GAAG,gBAAgB,CAAC;KAC9B,CAAC,CAAC;IAEH,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,iGAAiG;IACjG,0GAA0G;IAC1G,0GAA0G;IAC1G,wFAAwF;IACxF,KAAK,CAAC,sBAAsB,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7K,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACzC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,2CAA2C,EAAE;QAC3E,UAAU,EAAE,KAAK,CAAC,oBAAoB;QACtC,OAAO,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;KAChC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,6FAA6F;IAC7F,IAAI,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEzF,yBAAyB;IACzB,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;IAE1B,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,SAAS,CAAC,OAAO,CAAC,CAAC;IAEnB,oBAAoB;IACpB,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;AAC/C,CAAC"}

package/dist/daemon/runtime/main.d.ts

@@ -0,0 +1,3 @@
+import type { RuntimeDaemonConfig } from "../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+export declare function main(configOverrides: RuntimeDaemonConfig): Promise<void>;
+//# sourceMappingURL=main.d.ts.map

package/dist/daemon/runtime/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../../src/daemon/runtime/main.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sEAAsE,CAAC;AAKhH,wBAAsB,IAAI,CAAC,eAAe,EAAE,mBAAmB,iBAwG9D"}

package/dist/daemon/runtime/main.js

@@ -0,0 +1,97 @@
+import { CaughtFailureSchema, getRuntimeHostSignals, getRuntimeStdio, valueFreeFailure } from '@vibesdotdev/kernel';
+import { applyDeclaredHttpConfig, assertDaemonExecutionDeclarations, runtimeDaemonExecutionMode } from "./configuration.js";
+import { RuntimeDaemon } from "./coordinator.js";
+import { formatError } from "./helpers.js";
+export async function main(configOverrides) {
+    assertDaemonExecutionDeclarations(configOverrides);
+    const config = runtimeDaemonExecutionMode(configOverrides) === 'full' ? await applyDeclaredHttpConfig(configOverrides) : configOverrides;
+    const daemon = new RuntimeDaemon(config);
+    // Termination signals and fatal failures arrive through the serve host's
+    // declared host signals, never process listeners. main() returns on a
+    // clean shutdown and throws the start or shutdown failure otherwise; the
+    // caller (the `runtime daemon serve` command, a host launcher) owns exit.
+    const signals = await getRuntimeHostSignals(config.serveHost);
+    // Track if we're shutting down to prevent multiple shutdown attempts
+    let shuttingDown = false;
+    let resolveGate = () => { };
+    const gate = new Promise((resolve) => { resolveGate = resolve; });
+    // Handle graceful shutdown
+    const shutdown = async (signal) => {
+        if (shuttingDown) {
+            daemon.runtimeDaemonLogger.warn('shutdown already in progress', { signal });
+            return;
+        }
+        shuttingDown = true;
+        daemon.runtimeDaemonLogger.info('received shutdown signal', { signal });
+        const stopError = await daemon.stop().then(() => undefined, (error) => CaughtFailureSchema.parse(error));
+        if (stopError !== undefined) {
+            daemon.runtimeDaemonLogger.error('error during shutdown', { error: stopError });
+            resolveGate({ code: 1, error: stopError });
+            return;
+        }
+        daemon.runtimeDaemonLogger.info('shutdown complete');
+        resolveGate({ code: 0 });
+    };
+    // Signal handlers — the gate below keeps main parked during shutdown
+    const unsubscribeTerm = signals.subscribe('SIGTERM', () => {
+        void shutdown('SIGTERM').catch((error) => {
+            const failure = CaughtFailureSchema.parse(error);
+            resolveGate({ code: 1, error: failure });
+            return failure;
+        });
+    });
+    const unsubscribeInt = signals.subscribe('SIGINT', () => {
+        void shutdown('SIGINT').catch((error) => {
+            const failure = CaughtFailureSchema.parse(error);
+            resolveGate({ code: 1, error: failure });
+            return failure;
+        });
+    });
+    // Report-only (the host still prints and exits non-zero): a fatal failure
+    // initiates the same graceful shutdown on a best-effort basis. The error
+    // arrives already parsed; it is never re-parsed here.
+    const unsubscribeFatal = signals.subscribeFatal?.((kind, error) => {
+        daemon.runtimeDaemonLogger.error(kind === 'uncaughtException' ? 'uncaught exception' : 'unhandled rejection', formatError(error));
+        void shutdown(kind).catch((shutdownError) => {
+            const failure = CaughtFailureSchema.parse(shutdownError);
+            resolveGate({ code: 1, error: failure });
+            return failure;
+        });
+    });
+    if (!unsubscribeFatal) {
+        // Typed absence: this host declares no fatal-failure reports, so a crash
+        // still exits through the host's default, but the daemon cannot shut
+        // down gracefully first.
+        daemon.runtimeDaemonLogger.warn('host declares no fatal-failure reports; a crash will not shut down gracefully', {
+            reason: 'host-fatal-signals-unavailable'
+        });
+    }
+    const outcome = await Promise.race([
+        daemon.start().then(() => ({ kind: 'started' }), (error) => {
+            const failure = CaughtFailureSchema.parse(error);
+            return { kind: 'start-error', error: failure };
+        }),
+        gate.then((result) => ({ kind: 'gate', result }))
+    ]);
+    if (outcome.kind === 'start-error') {
+        const startError = outcome.error;
+        const facts = valueFreeFailure(startError);
+        // Report through the handed host before cleanup retires its output and
+        // logger. Thin transport deliberately has no feature logger.
+        const output = await getRuntimeStdio(config.serveHost);
+        output.write('stderr', `Runtime daemon could not start (${facts.reason ?? facts.code ?? facts.name}).\n`);
+        await output.flush?.();
+        unsubscribeTerm();
+        unsubscribeInt();
+        unsubscribeFatal?.();
+        await daemon.stop();
+        throw startError;
+    }
+    const result = outcome.kind === 'gate' ? outcome.result : await gate;
+    unsubscribeTerm();
+    unsubscribeInt();
+    unsubscribeFatal?.();
+    if (result.code !== 0)
+        throw result.error;
+}
+//# sourceMappingURL=main.js.map

package/dist/daemon/runtime/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/daemon/runtime/main.ts"],"names":[],"mappings":"AAAA,OAAO,EACP,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAC5H,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,eAAoC;IAC9D,iCAAiC,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,0BAA0B,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IAEzI,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAEzC,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE9D,qEAAqE;IACrE,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,WAAW,GAAgE,GAAG,EAAE,GAAE,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,OAAO,CAA4C,CAAC,OAAO,EAAE,EAAE,GAAG,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7G,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACxD,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,OAAO;QACR,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QAEpB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,SAAS,EACf,CAAC,KAAc,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CACpD,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAChF,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3C,OAAO;QACR,CAAC;QACD,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrD,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,qEAAqE;IACrE,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE;QACzD,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;QACvD,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACjE,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAClI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,aAAsB,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACzD,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC;QAChB,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,yEAAyE;QACzE,qEAAqE;QACrE,yBAAyB;QACzB,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,+EAA+E,EAAE;YAChH,MAAM,EAAE,gCAAgC;SACxC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAClB,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,EACpC,CAAC,KAAc,EAAE,EAAE;YAClB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,aAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACzD,CAAC,CACD;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,MAAM,EAAE,CAAC,CAAC;KAC1D,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC3C,uEAAuE;QACvE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,mCAAmC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC;QAC1G,MAAM,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,UAAU,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC;IACrE,eAAe,EAAE,CAAC;IAClB,cAAc,EAAE,CAAC;IACjB,gBAAgB,EAAE,EAAE,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;AAC3C,CAAC"}

package/dist/daemon/runtime/state.d.ts

@@ -0,0 +1,55 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { SubscribeNonceStore } from '@vibesdotdev/kernel-rpc/http';
+import { type UnixListener } from '@vibesdotdev/kernel-rpc/unix';
+import type { LoggerInterface } from '@vibesdotdev/kernel/schemas/logger';
+import { type LocalAttestationHandle } from '@vibesdotdev/secrets/attestation';
+import { type FetchServer } from '../../core/utils/http-serve.ts';
+import type { RuntimeDaemonConfig } from "../../schemas/contracts/daemon/hosting/contracts1/daemon.consumer.ts";
+import { TokenRegistry } from '../../transports/http/auth/token-registry.ts';
+import { CorsPolicy } from '../auth/cors.ts';
+import { type SubscribeHandlerDeps } from '../commands/subscribe.ts';
+import type { HostHotReload } from '../hosting/daemon-host/host-hot-reload.consumer.ts';
+import type { DaemonExecutionHost } from '../hosting/execution/daemon-execution-host.consumer.ts';
+import { PairingCodes } from '../pairing/pairing.ts';
+import { RuntimeCommandRegistry } from '../services/api/command-handler.ts';
+import { ConfigWatcher } from '../subscriptions/config-watcher.ts';
+import { SubscriptionManager as RealSubscriptionManager } from '../subscriptions/manager.ts';
+import { StorageWatcher } from '../subscriptions/storage-watcher.ts';
+export declare class RuntimeDaemonState {
+    runtimeDaemonLogger: LoggerInterface;
+    tcpServer?: FetchServer;
+    executionHost?: DaemonExecutionHost;
+    unixRpcListener?: UnixListener;
+    unixProjectionListener?: UnixListener;
+    attestation?: LocalAttestationHandle;
+    readonly socketPath: string;
+    readonly projectionSocketPath: string;
+    readonly pidFile: string;
+    get projectionHolderPidFile(): string;
+    readonly logFile: string;
+    readonly httpEndpointPath: string;
+    runtime?: VibesRuntime;
+    subscriptionManager: RealSubscriptionManager;
+    storageWatcher?: StorageWatcher;
+    configWatcher?: ConfigWatcher;
+    subscribeDeps?: SubscribeHandlerDeps;
+    hotReload?: HostHotReload;
+    readonly runtimeCommands: RuntimeCommandRegistry;
+    readonly httpPort?: number;
+    readonly httpHost: string;
+    readonly authToken: string;
+    readonly tokenRegistry: TokenRegistry;
+    readonly pairingCodes: PairingCodes;
+    readonly nonceStore: SubscribeNonceStore;
+    readonly corsPolicy: CorsPolicy;
+    readonly httpDebug: boolean;
+    startTime: number;
+    stopping?: Promise<void>;
+    disposingExecution?: Promise<void>;
+    readonly config: RuntimeDaemonConfig;
+    readonly serveHost: VibesRuntime;
+    readonly workspaceRoot: string;
+    readonly workspaceId: string;
+    constructor(config: RuntimeDaemonConfig);
+}
+//# sourceMappingURL=state.d.ts.map

package/dist/daemon/runtime/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/daemon/runtime/state.ts"],"names":[],"mappings":"AACA,OAAO,EAEP,KAAK,YAAY,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sEAAsE,CAAC;AAChH,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAgC,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oDAAoD,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAUlG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,mBAAmB,IAAI,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAKrE,qBAAa,kBAAkB;IAC/B,mBAAmB,EAAE,eAAe,CAAsC;IAE1E,SAAS,CAAC,EAAE,WAAW,CAAC;IAExB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAEpC,eAAe,CAAC,EAAE,YAAY,CAAC;IAE/B,sBAAsB,CAAC,EAAE,YAAY,CAAC;IAEtC,WAAW,CAAC,EAAE,sBAAsB,CAAC;IAErC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAEtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,IAAI,uBAAuB,IAAI,MAAM,CAEnC;IAEF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,OAAO,CAAC,EAAE,YAAY,CAAC;IAEvB,mBAAmB,EAAE,uBAAuB,CAAC;IAE7C,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAErC,SAAS,CAAC,EAAE,aAAa,CAAC;IAE1B,QAAQ,CAAC,eAAe,yBAAgC;IAExD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,aAAa,gBAAuB;IAE7C,QAAQ,CAAC,YAAY,eAAsB;IAE3C,QAAQ,CAAC,UAAU,sBAA6B;IAEhD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAEhC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B,SAAS,EAAE,MAAM,CAAK;IAEtB,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzB,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAErC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,mBAAmB;CA6BtC"}

package/dist/daemon/runtime/state.js

@@ -0,0 +1,83 @@
+import { join } from '@vibesdotdev/filesystem';
+import { hostWorkspaceRoot } from '@vibesdotdev/kernel';
+import { SubscribeNonceStore } from '@vibesdotdev/kernel-rpc/http';
+import {} from '@vibesdotdev/kernel-rpc/unix';
+import {} from '@vibesdotdev/secrets/attestation';
+import {} from "../../core/utils/http-serve.js";
+import { TokenRegistry } from "../../transports/http/auth/token-registry.js";
+import { CorsPolicy, DEFAULT_CORS_ALLOWED_ORIGINS } from "../auth/cors.js";
+import {} from "../commands/subscribe.js";
+import { getRuntimeDaemonPidPath, getRuntimeProjectionSocketPath, getRuntimeSocketPath } from "../hosting/socket/paths.consumer.js";
+import { getRuntimeWorkspaceIsolation, resolveRuntimeDaemonWorkspaceId } from "../hosting/socket/runtime-daemon.socket-path.js";
+import { PairingCodes } from "../pairing/pairing.js";
+import { RuntimeCommandRegistry } from "../services/api/command-handler.js";
+import { ConfigWatcher } from "../subscriptions/config-watcher.js";
+import { SubscriptionManager as RealSubscriptionManager } from "../subscriptions/manager.js";
+import { StorageWatcher } from "../subscriptions/storage-watcher.js";
+import { DEFAULT_HTTP_HOST } from "./configuration.js";
+import { createNoopLogger } from "./helpers.js";
+import { getRuntimeHttpEndpointPath } from "./io/endpoint.js";
+export class RuntimeDaemonState {
+    runtimeDaemonLogger = createNoopLogger('runtime-daemon');
+    tcpServer;
+    executionHost;
+    unixRpcListener;
+    unixProjectionListener;
+    attestation;
+    socketPath;
+    projectionSocketPath;
+    pidFile;
+    get projectionHolderPidFile() {
+        return `${this.projectionSocketPath}.pid`;
+    }
+    logFile;
+    httpEndpointPath;
+    runtime;
+    subscriptionManager;
+    storageWatcher;
+    configWatcher;
+    subscribeDeps;
+    hotReload;
+    runtimeCommands = new RuntimeCommandRegistry();
+    httpPort;
+    httpHost;
+    authToken;
+    tokenRegistry = new TokenRegistry();
+    pairingCodes = new PairingCodes();
+    nonceStore = new SubscribeNonceStore();
+    corsPolicy;
+    httpDebug;
+    startTime = 0;
+    stopping;
+    disposingExecution;
+    config;
+    serveHost;
+    workspaceRoot;
+    workspaceId;
+    constructor(config) {
+        this.config = config;
+        this.serveHost = config.serveHost;
+        // Socket and PID identity are the serve host's own workspace (rc02-rc03
+        // C3): the declared `--workspace-root`, else the environment's capture.
+        this.workspaceRoot = hostWorkspaceRoot(this.serveHost);
+        this.workspaceId = resolveRuntimeDaemonWorkspaceId(this.workspaceRoot, getRuntimeWorkspaceIsolation(this.serveHost));
+        this.socketPath = config.socketPath || getRuntimeSocketPath(this.serveHost, this.workspaceRoot);
+        this.projectionSocketPath =
+            config.projectionSocketPath || getRuntimeProjectionSocketPath(this.serveHost, this.workspaceRoot);
+        this.pidFile = config.pidFile || getRuntimeDaemonPidPath(this.serveHost, this.workspaceRoot);
+        this.logFile = join(this.workspaceRoot, 'logs', 'runtime-daemon.log');
+        this.httpEndpointPath = getRuntimeHttpEndpointPath(this.serveHost, this.workspaceRoot);
+        this.subscriptionManager = new RealSubscriptionManager();
+        // HTTP API config
+        this.httpPort = config.port;
+        this.httpHost = config.host || DEFAULT_HTTP_HOST;
+        this.authToken = config.authToken || crypto.randomUUID();
+        this.tokenRegistry.register(this.authToken);
+        this.corsPolicy = new CorsPolicy({
+            allowedOrigins: config.corsAllowedOrigins ?? DEFAULT_CORS_ALLOWED_ORIGINS,
+            allowAny: config.corsAllowAny ?? false
+        });
+        this.httpDebug = config.httpDebug ?? false;
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/daemon/runtime/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/daemon/runtime/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EACP,iBAAiB,EAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAqB,MAAM,8BAA8B,CAAC;AAEjE,OAAO,EAA+B,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAoB,MAAM,gCAAgC,CAAC;AAElE,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAA6B,MAAM,0BAA0B,CAAC;AAGrE,OAAO,EACP,uBAAuB,EACvB,8BAA8B,EAC9B,oBAAoB,EACnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACP,4BAA4B,EAC5B,+BAA+B,EAC9B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,mBAAmB,IAAI,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,OAAO,kBAAkB;IAC/B,mBAAmB,GAAoB,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IAE1E,SAAS,CAAe;IAExB,aAAa,CAAuB;IAEpC,eAAe,CAAgB;IAE/B,sBAAsB,CAAgB;IAEtC,WAAW,CAA0B;IAE5B,UAAU,CAAS;IAEnB,oBAAoB,CAAS;IAE7B,OAAO,CAAS;IAEzB,IAAI,uBAAuB;QACzB,OAAO,GAAG,IAAI,CAAC,oBAAoB,MAAM,CAAC;IAC3C,CAAC;IAEO,OAAO,CAAS;IAEhB,gBAAgB,CAAS;IAElC,OAAO,CAAgB;IAEvB,mBAAmB,CAA0B;IAE7C,cAAc,CAAkB;IAEhC,aAAa,CAAiB;IAE9B,aAAa,CAAwB;IAErC,SAAS,CAAiB;IAEjB,eAAe,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAE/C,QAAQ,CAAU;IAElB,QAAQ,CAAS;IAEjB,SAAS,CAAS;IAElB,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAEpC,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IAElC,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEvC,UAAU,CAAa;IAEvB,SAAS,CAAU;IAE5B,SAAS,GAAW,CAAC,CAAC;IAEtB,QAAQ,CAAiB;IAEzB,kBAAkB,CAAiB;IAE1B,MAAM,CAAsB;IAE5B,SAAS,CAAe;IAExB,aAAa,CAAS;IAEtB,WAAW,CAAS;IAE7B,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,wEAAwE;QACxE,wEAAwE;QACxE,IAAI,CAAC,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,+BAA+B,CACjD,IAAI,CAAC,aAAa,EAClB,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAChG,IAAI,CAAC,oBAAoB;YACxB,MAAM,CAAC,oBAAoB,IAAI,8BAA8B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACvF,IAAI,CAAC,mBAAmB,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAEzD,kBAAkB;QAClB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,iBAAiB,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACzD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,cAAc,EAAE,MAAM,CAAC,kBAAkB,IAAI,4BAA4B;YACzE,QAAQ,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;IAC5C,CAAC;CACD"}

package/dist/daemon/services/api/command-handler.contracts.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Runtime daemon command-handler contracts.
+ *
+ * Re-exports canonical types from @vibesdotdev/kernel/plugin-types.
+ * The types were moved there to break the storage → runtime-plugin cycle.
+ */
+export type { CommandHandler, RuntimeCommandDeps, RuntimeCommandEnvelope, RuntimeCommandPayload, RuntimeCommandResult, SSEEvent, SubscriptionChannel, SubscriptionManager } from '@vibesdotdev/kernel/plugin-types';
+//# sourceMappingURL=command-handler.contracts.d.ts.map

package/dist/daemon/services/api/command-handler.contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-handler.contracts.d.ts","sourceRoot":"","sources":["../../../../src/daemon/services/api/command-handler.contracts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/daemon/services/api/command-handler.contracts.js

@@ -0,0 +1,8 @@
+/**
+ * Runtime daemon command-handler contracts.
+ *
+ * Re-exports canonical types from @vibesdotdev/kernel/plugin-types.
+ * The types were moved there to break the storage → runtime-plugin cycle.
+ */
+export {};
+//# sourceMappingURL=command-handler.contracts.js.map

package/dist/daemon/services/api/command-handler.contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-handler.contracts.js","sourceRoot":"","sources":["../../../../src/daemon/services/api/command-handler.contracts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/daemon/services/api/command-handler.d.ts

@@ -0,0 +1,52 @@
+import type { RuntimeCommandRegistration, RuntimeCommandTransport } from "../../../schemas/contracts/daemon/command-handler.ts";
+export type { RuntimeCommandRegistration, RuntimeCommandTransport } from "../../../schemas/contracts/daemon/command-handler.ts";
+/**
+ * Runtime Daemon Command Handler
+ * Handles runtime daemon IPC commands with a registry pattern
+ *
+ * Follows the PM daemon command-handler.ts pattern but routes
+ * runtime-specific commands: query, resolve, read, subscribe,
+ * invoke, health, doctor.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { CommandHandler, RuntimeCommandDeps, RuntimeCommandEnvelope, RuntimeCommandResult } from './command-handler.contracts.ts';
+export type { CommandHandler, RuntimeCommandDeps, RuntimeCommandEnvelope, RuntimeCommandPayload, RuntimeCommandResult, SubscriptionManager } from './command-handler.contracts.ts';
+/**
+ * How a command reached this registry.
+ *
+ * `local` = the owner-only control channel: a Unix domain socket at 0o600 on
+ * POSIX, a named pipe restricted to the owner on Windows. Reaching it requires
+ * local filesystem access as the owning user.
+ *
+ * `remote` = the TCP HTTP API. It is authenticated (bearer token, capability
+ * scoping, CORS) but it is a NETWORK surface: a token can be paired to another
+ * machine, and an origin can be allowlisted.
+ */
+export declare class RuntimeCommandLocalOnlyError extends CapabilityError {
+    readonly command: string;
+    readonly transport: RuntimeCommandTransport;
+    constructor(command: string, transport: RuntimeCommandTransport);
+}
+/** Runtime-daemon extension commands owned by one daemon instance. */
+export declare class RuntimeCommandRegistry {
+    private readonly handlers;
+    private readonly localOnly;
+    register(command: string, handler: CommandHandler, registration?: RuntimeCommandRegistration): void;
+    has(command: string): boolean;
+    /** True when `command` refuses the remote transport. */
+    isLocalOnly(command: string): boolean;
+    list(): string[];
+    /** Commands a remote caller may dispatch. */
+    listReachable(transport: RuntimeCommandTransport): string[];
+    /**
+     * Dispatch a command.
+     *
+     * `transport` defaults to `'local'` so every existing in-process caller and
+     * test keeps its behaviour; the TCP path passes `'remote'` explicitly. That
+     * default is fail-OPEN by shape, which is only safe because there are
+     * exactly two dispatchers in the tree and the remote one is edited here in
+     * the same change — `daemon.consumer.ts` `startHttpApi`.
+     */
+    dispatch(command: string, message: RuntimeCommandEnvelope, deps: RuntimeCommandDeps, transport?: RuntimeCommandTransport): Promise<RuntimeCommandResult>;
+}
+//# sourceMappingURL=command-handler.d.ts.map

package/dist/daemon/services/api/command-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../../../src/daemon/services/api/command-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAChI,YAAY,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAChI;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EACZ,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACnB,MAAM,gCAAgC,CAAC;AAExC,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EAClB,MAAM,gCAAgC,CAAC;AAExC;;;;;;;;;;GAUG;AAEH,qBAAa,4BAA6B,SAAQ,eAAe;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;gBAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,uBAAuB;CAa/D;AAED,sEAAsE;AACtE,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAE/C,QAAQ,CACP,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,cAAc,EACvB,YAAY,GAAE,0BAA+B,GAC3C,IAAI;IAQP,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAI7B,wDAAwD;IACxD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIrC,IAAI,IAAI,MAAM,EAAE;IAIhB,6CAA6C;IAC7C,aAAa,CAAC,SAAS,EAAE,uBAAuB,GAAG,MAAM,EAAE;IAM3D;;;;;;;;OAQG;IACG,QAAQ,CACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,sBAAsB,EAC/B,IAAI,EAAE,kBAAkB,EACxB,SAAS,GAAE,uBAAiC,GAC1C,OAAO,CAAC,oBAAoB,CAAC;CAQhC"}

package/dist/daemon/services/api/command-handler.js

@@ -0,0 +1,79 @@
+/**
+ * Runtime Daemon Command Handler
+ * Handles runtime daemon IPC commands with a registry pattern
+ *
+ * Follows the PM daemon command-handler.ts pattern but routes
+ * runtime-specific commands: query, resolve, read, subscribe,
+ * invoke, health, doctor.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+/**
+ * How a command reached this registry.
+ *
+ * `local` = the owner-only control channel: a Unix domain socket at 0o600 on
+ * POSIX, a named pipe restricted to the owner on Windows. Reaching it requires
+ * local filesystem access as the owning user.
+ *
+ * `remote` = the TCP HTTP API. It is authenticated (bearer token, capability
+ * scoping, CORS) but it is a NETWORK surface: a token can be paired to another
+ * machine, and an origin can be allowlisted.
+ */
+export class RuntimeCommandLocalOnlyError extends CapabilityError {
+    command;
+    transport;
+    constructor(command, transport) {
+        super(`Command "${command}" is local-only and was refused on the ${transport} transport. ` +
+            'It rebuilds and swaps code from a source tree, which is an owner-only action: ' +
+            'reach it over the daemon control channel (the 0o600 Unix socket on POSIX, the ' +
+            'owner-restricted named pipe on Windows), for example `vibes runtime daemon ...`.', 'PERMISSION_DENIED', { reason: 'command-local-only', details: { command, transport } });
+        this.name = 'RuntimeCommandLocalOnlyError';
+        this.command = command;
+        this.transport = transport;
+    }
+}
+/** Runtime-daemon extension commands owned by one daemon instance. */
+export class RuntimeCommandRegistry {
+    handlers = new Map();
+    localOnly = new Set();
+    register(command, handler, registration = {}) {
+        if (this.handlers.has(command)) {
+            throw new Error(`Runtime command is already registered: ${command}`);
+        }
+        this.handlers.set(command, handler);
+        if (registration.localOnly)
+            this.localOnly.add(command);
+    }
+    has(command) {
+        return this.handlers.has(command);
+    }
+    /** True when `command` refuses the remote transport. */
+    isLocalOnly(command) {
+        return this.localOnly.has(command);
+    }
+    list() {
+        return [...this.handlers.keys()];
+    }
+    /** Commands a remote caller may dispatch. */
+    listReachable(transport) {
+        return [...this.handlers.keys()].filter((command) => transport === 'local' || !this.localOnly.has(command));
+    }
+    /**
+     * Dispatch a command.
+     *
+     * `transport` defaults to `'local'` so every existing in-process caller and
+     * test keeps its behaviour; the TCP path passes `'remote'` explicitly. That
+     * default is fail-OPEN by shape, which is only safe because there are
+     * exactly two dispatchers in the tree and the remote one is edited here in
+     * the same change — `daemon.consumer.ts` `startHttpApi`.
+     */
+    async dispatch(command, message, deps, transport = 'local') {
+        const handler = this.handlers.get(command);
+        if (!handler)
+            throw new Error(`Unknown command: ${command}`);
+        if (transport !== 'local' && this.localOnly.has(command)) {
+            throw new RuntimeCommandLocalOnlyError(command, transport);
+        }
+        return handler(message, deps);
+    }
+}
+//# sourceMappingURL=command-handler.js.map

package/dist/daemon/services/api/command-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-handler.js","sourceRoot":"","sources":["../../../../src/daemon/services/api/command-handler.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAiBtD;;;;;;;;;;GAUG;AAEH,MAAM,OAAO,4BAA6B,SAAQ,eAAe;IACvD,OAAO,CAAS;IAChB,SAAS,CAA0B;IAC5C,YAAY,OAAe,EAAE,SAAkC;QAC9D,KAAK,CACJ,YAAY,OAAO,0CAA0C,SAAS,cAAc;YACnF,gFAAgF;YAChF,gFAAgF;YAChF,kFAAkF,EACnF,mBAAmB,EACnB,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CACjE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;CACD;AAED,sEAAsE;AACtE,MAAM,OAAO,sBAAsB;IACjB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/C,QAAQ,CACP,OAAe,EACf,OAAuB,EACvB,eAA2C,EAAE;QAE7C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,YAAY,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,GAAG,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,wDAAwD;IACxD,WAAW,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,IAAI;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,6CAA6C;IAC7C,aAAa,CAAC,SAAkC;QAC/C,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACtC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAClE,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CACb,OAAe,EACf,OAA+B,EAC/B,IAAwB,EACxB,YAAqC,OAAO;QAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;CACD"}

package/dist/daemon/services/api/errors.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Runtime Daemon Error Types
+ * Structured errors with context, details, and fix suggestions.
+ * Follows the PM errors.ts pattern and the CapabilityError taxonomy.
+ */
+import { CapabilityError, type CapabilityErrorCode } from '@vibesdotdev/kernel';
+export declare class RuntimeDaemonError extends CapabilityError {
+    logPath?: string;
+    readonly detail?: string;
+    readonly fix?: string;
+    constructor(message: string, code: CapabilityErrorCode, detail?: string, fix?: string, reason?: string);
+    withLogPath(logPath: string): this;
+    format(): string;
+}
+export declare class DescriptorNotFoundError extends RuntimeDaemonError {
+    constructor(id: string);
+}
+export declare class ManifestNotFoundError extends RuntimeDaemonError {
+    constructor(manifestId: string, manifestKind: string);
+}
+export declare class InvocationError extends RuntimeDaemonError {
+    constructor(type: string, id: string, cause: string);
+}
+export declare class InvocationTimeoutError extends RuntimeDaemonError {
+    constructor(type: string, id: string, timeoutMs: number);
+}
+export declare class RuntimeDaemonNotRunningError extends RuntimeDaemonError {
+    constructor();
+}
+export declare class RuntimeDaemonAlreadyRunningError extends RuntimeDaemonError {
+    constructor(pid?: number);
+}
+export declare class RuntimeBootstrapError extends RuntimeDaemonError {
+    constructor(cause: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/daemon/services/api/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/daemon/services/api/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEhF,qBAAa,kBAAmB,SAAQ,eAAe;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACxB,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,GAAG,CAAC,EAAE,MAAM,CAAC;gBAG5B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM;IAYhB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKlC,MAAM,IAAI,MAAM;CAOhB;AAED,qBAAa,uBAAwB,SAAQ,kBAAkB;gBAClD,EAAE,EAAE,MAAM;CAStB;AAED,qBAAa,qBAAsB,SAAQ,kBAAkB;gBAChD,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;CASpD;AAED,qBAAa,eAAgB,SAAQ,kBAAkB;gBAC1C,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CASnD;AAED,qBAAa,sBAAuB,SAAQ,kBAAkB;gBACjD,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASvD;AAED,qBAAa,4BAA6B,SAAQ,kBAAkB;;CAUnE;AAED,qBAAa,gCAAiC,SAAQ,kBAAkB;gBAC3D,GAAG,CAAC,EAAE,MAAM;CASxB;AAED,qBAAa,qBAAsB,SAAQ,kBAAkB;gBAChD,KAAK,EAAE,MAAM;CASzB"}