@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.0

package/dist/surface-mcp/build-provenance.js

@@ -0,0 +1,287 @@
+/**
+ * Build provenance: capture the source git ref + dist freshness at serve
+ * startup so a stale body is wire-detectable. The fan-out phantom saga's
+ * root cause was invisible staleness — a long-lived stdio child spawned from
+ * source at one ref, source moved under it (87→104 registry), and nothing
+ * on the wire said the body was behind. This string rides the MCP
+ * `instructions` field so the connected agent can see and surface it.
+ *
+ * Filesystem and path reads go through the handed runtime. This module does
+ * not import `node:fs`, `node:path`, or `node:url`.
+ */
+import * as z from 'zod/v4';
+import { realpathChecked, resolveFileSystemAdapter } from '@vibesdotdev/filesystem';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { composeHostEnv, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { runCapture } from '@vibesdotdev/kernel/execution';
+import { resolveMcpExecutableSourceRoot } from "./project-config.js";
+function quoteShellArgument(value) {
+    return `'${value.replaceAll("'", "'\"'\"'")}'`;
+}
+function normalizeGitRef(value) {
+    if (value === null || value === undefined)
+        return null;
+    const normalized = value.trim().toLowerCase();
+    return /^[0-9a-f]{40,64}$/.test(normalized) ? normalized : null;
+}
+function textOf(value) {
+    if (value instanceof Uint8Array)
+        return new TextDecoder().decode(value);
+    return value;
+}
+const ExecutablePackageNameSchema = z.object({ name: z.string() });
+const ExecutablePackageGitHeadSchema = z.object({ gitHead: z.string().nullish() });
+async function findExecutablePackage(runtime, moduleDir) {
+    const path = await getRuntimePath(runtime);
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    let current = path.resolve(moduleDir);
+    for (let depth = 0; depth < 16; depth++) {
+        const manifestPath = path.join(current, 'package.json');
+        if (await filesystem.exists(manifestPath)) {
+            const text = textOf(await filesystem.readFile(manifestPath, 'utf8'));
+            const parsed = await settle(() => JSON.parse(text));
+            // A manifest that is not JSON names no package. A read failure throws before this parse.
+            if (!parsed.ok) {
+                if (valueFreeFailure(parsed.cause).name === 'SyntaxError')
+                    return null;
+                throw parsed.cause;
+            }
+            const named = ExecutablePackageNameSchema.safeParse(parsed.value);
+            if (named.success && named.data.name.startsWith('@vibesdotdev/')) {
+                const head = ExecutablePackageGitHeadSchema.safeParse(parsed.value);
+                return { root: current, gitHead: normalizeGitRef(head.success ? head.data.gitHead : null) };
+            }
+        }
+        if (path.basename(current) === 'node_modules')
+            break;
+        const parent = path.dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return null;
+}
+function resolveExecutableDistPath(path, executableModulePath, packageRoot) {
+    if (!packageRoot)
+        return null;
+    const modulePathFromPackage = path.relative(packageRoot, executableModulePath).replaceAll('\\', '/');
+    if (modulePathFromPackage === 'dist' || modulePathFromPackage.startsWith('dist/')) {
+        return path.join(packageRoot, 'dist');
+    }
+    return null;
+}
+/** Compose provenance for the MCP body that owns this module graph. */
+export async function getMcpBuildProvenance(runtime, workspaceRoot, executableModulePath) {
+    const path = await getRuntimePath(runtime);
+    const modulePath = executableModulePath ?? path.fileURLToPath(import.meta.url);
+    const moduleDir = path.dirname(modulePath);
+    const sourceResolution = await resolveMcpExecutableSourceRoot(runtime, moduleDir);
+    const executablePackage = await findExecutablePackage(runtime, moduleDir);
+    const sourceCheckout = sourceResolution.confident && path.extname(modulePath) === '.ts';
+    const executableDistPath = sourceCheckout
+        ? null
+        : resolveExecutableDistPath(path, modulePath, executablePackage?.root);
+    const sourceRoot = sourceCheckout
+        ? sourceResolution.root
+        : executableDistPath
+            ? (executablePackage?.root ?? moduleDir)
+            : moduleDir;
+    const packageGitRef = sourceCheckout
+        ? undefined
+        : executableDistPath
+            ? (executablePackage?.gitHead ?? null)
+            : null;
+    // A compiled standalone body cannot be certified by git probes (/$bunfs) or
+    // npm's package gitHead (never written by a local compile). Its build bakes
+    // the exact source SHA (cli-bin scripts/build.ts, fail-closed) and the
+    // entrypoint republishes it as VIBES_SOURCE_SHA — the same variable the
+    // build itself honors. Consuming it here is what retires the permanent
+    // "EXECUTABLE SOURCE UNKNOWN" banner on locally built binaries.
+    const envBakedGitRef = sourceCheckout
+        ? null
+        : normalizeGitRef(runtime.getEnv('VIBES_SOURCE_SHA'));
+    const bakedGitRef = packageGitRef ?? envBakedGitRef ?? (sourceCheckout ? undefined : null);
+    const sourceDirtyFlag = sourceCheckout ? undefined : runtime.getEnv('VIBES_SOURCE_DIRTY');
+    const bakedDirty = sourceCheckout
+        ? undefined
+        : sourceDirtyFlag === '1'
+            ? true
+            : sourceDirtyFlag === '0'
+                ? false
+                : null;
+    return getBuildProvenance(runtime, {
+        sourceRoot,
+        sourceGitRef: bakedGitRef,
+        sourceRefKind: sourceCheckout
+            ? 'git-checkout'
+            : packageGitRef
+                ? 'package-gitHead'
+                : envBakedGitRef
+                    ? 'baked-source-sha'
+                    : 'unknown',
+        sourceDirty: bakedDirty,
+        workspaceRoot,
+        executableDistPath,
+        executionKind: sourceCheckout ? 'source' : executableDistPath ? 'dist' : 'unknown'
+    });
+}
+/**
+ * One git probe through the runtime's execution provider, on the host's
+ * composed environment only (`replace`). A host with no execution provider (a
+ * cloud Worker) cannot probe, so the ref is unknown; a git that answers
+ * non-zero (not a repository) is unknown too. Any other failure propagates.
+ */
+async function runGit(runtime, args, cwd) {
+    if (!runtime.hasKind('runtime/execution'))
+        return null;
+    const proc = await runCapture(runtime, 'git', ['--no-optional-locks', ...args], {
+        cwd,
+        env: composeHostEnv(runtime),
+        envMode: 'replace'
+    });
+    if (proc.exitCode !== 0)
+        return null;
+    return proc.stdout.trim() || null;
+}
+async function sameRealPath(filesystem, left, right) {
+    if (!(await filesystem.exists(left)) || !(await filesystem.exists(right)))
+        return false;
+    const [resolvedLeft, resolvedRight] = await Promise.all([
+        realpathChecked(filesystem, left),
+        realpathChecked(filesystem, right)
+    ]);
+    return resolvedLeft === resolvedRight;
+}
+async function runGitAtRoot(runtime, filesystem, args, root) {
+    const topLevel = await runGit(runtime, ['rev-parse', '--show-toplevel'], root);
+    if (!topLevel)
+        return null;
+    if (!(await sameRealPath(filesystem, topLevel, root)))
+        return null;
+    return runGit(runtime, args, root);
+}
+async function getNewestDistMtime(filesystem, distPath) {
+    if (!(await filesystem.exists(distPath)))
+        return null;
+    const entries = await filesystem.list(distPath);
+    let newest = 0;
+    for (const entry of entries) {
+        if (entry.kind !== 'file' || entry.modifiedAt === undefined)
+            continue;
+        const modified = Date.parse(entry.modifiedAt);
+        if (Number.isFinite(modified) && modified > newest)
+            newest = modified;
+    }
+    return newest > 0 ? newest : null;
+}
+/**
+ * Compute build provenance for the MCP serve instructions.
+ *
+ * sourceRoot and workspaceRoot are intentionally separate. A client commonly
+ * executes MCP from a pinned source checkout while VIBES_WORKSPACE_PATH points
+ * at the user's active project.
+ */
+export async function getBuildProvenance(runtime, input) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    const sourceRoot = input.sourceRoot;
+    const workspaceRoot = input.workspaceRoot;
+    const probedSourceGitRef = input.sourceGitRef === undefined ? await runGitAtRoot(runtime, filesystem, ['rev-parse', 'HEAD'], sourceRoot) : null;
+    const sourceGitRef = input.sourceGitRef === undefined ? probedSourceGitRef : normalizeGitRef(input.sourceGitRef);
+    const sourceRefKind = input.sourceRefKind ??
+        (sourceGitRef && sourceGitRef === probedSourceGitRef ? 'git-checkout' : 'unknown');
+    const sourceStatus = input.sourceDirty === undefined && sourceRefKind === 'git-checkout'
+        ? await runGitAtRoot(runtime, filesystem, ['status', '--porcelain'], sourceRoot)
+        : null;
+    const sourceDirty = input.sourceDirty !== undefined
+        ? input.sourceDirty
+        : sourceStatus === null
+            ? null
+            : sourceStatus.length > 0;
+    const workspaceGitRef = await runGitAtRoot(runtime, filesystem, ['rev-parse', 'HEAD'], workspaceRoot);
+    const commitTime = sourceRefKind === 'git-checkout'
+        ? await runGitAtRoot(runtime, filesystem, ['log', '-1', '--format=%cI', 'HEAD'], sourceRoot)
+        : null;
+    // Execution kind comes from the loaded module path, not the JS runtime:
+    // Bun can execute either workspace .ts source or packaged/bundled dist.
+    const servingFromSource = input.executionKind === 'source';
+    const executableDistPath = input.executableDistPath ?? null;
+    let distStale = null;
+    if (executableDistPath) {
+        const distMtime = await getNewestDistMtime(filesystem, executableDistPath);
+        if (distMtime !== null && commitTime) {
+            const commitMs = new Date(commitTime).getTime();
+            distStale = distMtime < commitMs;
+        }
+    }
+    const sourceRefLabel = sourceGitRef?.slice(0, 10) ?? 'unknown';
+    const workspaceRefLabel = workspaceGitRef?.slice(0, 10) ?? 'unknown';
+    const parts = [];
+    const sourceLabel = sourceRefKind === 'package-gitHead'
+        ? 'baked package source'
+        : sourceRefKind === 'baked-source-sha'
+            ? 'baked executable source'
+            : 'executable source';
+    parts.push(`${sourceLabel}@${sourceRefLabel} (${sourceRoot})`);
+    if (commitTime) {
+        parts.push(`(${commitTime})`);
+    }
+    parts.push(`· user workspace@${workspaceRefLabel} (${workspaceRoot})`);
+    if (sourceDirty) {
+        parts.push('· source snapshot: DIRTY (SHA is the base commit, not complete byte identity)');
+    }
+    if (distStale === true) {
+        if (servingFromSource) {
+            parts.push('· dist: STALE (serving from source — dist not used)');
+        }
+        else {
+            parts.push('· dist: STALE');
+        }
+    }
+    else if (distStale === false) {
+        parts.push('· dist: fresh');
+    }
+    const hasStale = distStale === true && !servingFromSource;
+    const sourceUnknown = sourceGitRef === null;
+    const prefix = sourceUnknown
+        ? '⚠ EXECUTABLE SOURCE UNKNOWN: '
+        : sourceDirty
+            ? '⚠ DIRTY BUILD: '
+            : hasStale
+                ? '⚠ STALE BUILD: '
+                : 'Build provenance: ';
+    // DRIFT IS INVISIBLE FROM INSIDE. This string is built once, at spawn, when the
+    // body is BY DEFINITION at HEAD — so it can never report drift itself. The gap
+    // opens afterwards, as main moves and a long-lived stdio body keeps serving the
+    // code it started with. Measured 2026-07-25: 22 live bodies on one machine, the
+    // oldest 1d5h, all 114 commits behind, silently answering with retired tool
+    // schemas and missing actions that had landed hours earlier.
+    //
+    // An agent cannot notice this by working harder; nothing in a tool response says
+    // "you are old". So hand it the falsifier alongside the SHA it was born at.
+    const driftHint = sourceRefKind === 'git-checkout' && sourceGitRef
+        ? ` To check whether the executable source moved underneath this body, run \`git -C ${quoteShellArgument(sourceRoot)} rev-parse HEAD\`; it must still equal \`${sourceGitRef}\`. A stdio body cannot heal itself and \`vibes dev mcp restart\` restarts the managed daemon, a different process; reconnect through the owning client or start a new session.`
+        : sourceRefKind === 'package-gitHead' && sourceGitRef
+            ? ` The source ref is baked into this package as \`gitHead=${sourceGitRef}\`; packaged code cannot be checked for mutable-worktree drift.`
+            : sourceRefKind === 'baked-source-sha' && sourceGitRef && sourceDirty
+                ? ` The executable includes uncommitted source bytes; \`${sourceGitRef}\` names only their base commit. Rebuild from a clean, versioned composition before treating this artifact as reproducible.`
+                : sourceRefKind === 'baked-source-sha' && sourceGitRef
+                    ? ` The source ref is baked into this standalone executable as \`VIBES_SOURCE_SHA=${sourceGitRef}\`; compiled code cannot be checked for mutable-worktree drift.`
+                    : ' This body cannot certify which source it executes; rebuild it with baked source provenance or reconnect it from an immutable, versioned source checkout before trusting live behavior.';
+    const suffix = (hasStale
+        ? ' This server may serve code that no longer matches the current source. If tools are missing or behaving unexpectedly, respawn the MCP server.'
+        : '') + driftHint;
+    const provenanceString = prefix + parts.join(' ') + suffix;
+    return {
+        sourceRoot,
+        sourceGitRef,
+        sourceRefKind,
+        sourceDirty,
+        workspaceRoot,
+        workspaceGitRef,
+        executableDistPath,
+        commitTime,
+        distStale,
+        provenanceString
+    };
+}
+//# sourceMappingURL=build-provenance.js.map

package/dist/surface-mcp/build-provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-provenance.js","sourceRoot":"","sources":["../../src/surface-mcp/build-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAmC,MAAM,yBAAyB,CAAC;AACrH,OAAO,EAAE,cAAc,EAAoB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AASrE,SAAS,kBAAkB,CAAC,KAAa;IACxC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC;AAChD,CAAC;AA+CD,SAAS,eAAe,CAAC,KAAgC;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,SAAS,MAAM,CAAC,KAA0B;IACzC,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnE,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEnF,KAAK,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxD,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,yFAAyF;YACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,aAAa;oBAAE,OAAO,IAAI,CAAC;gBACvE,MAAM,MAAM,CAAC,KAAK,CAAC;YACpB,CAAC;YACD,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAG,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7F,CAAC;QACF,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,cAAc;YAAE,MAAM;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CACjC,IAAiB,EACjB,oBAA4B,EAC5B,WAA+B;IAE/B,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,qBAAqB,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrG,IAAI,qBAAqB,KAAK,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAA0B,EAC1B,aAAqB,EACrB,oBAA6B;IAE7B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,oBAAoB,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,MAAM,8BAA8B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClF,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC;IACxF,MAAM,kBAAkB,GAAG,cAAc;QACxC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,yBAAyB,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,cAAc;QAChC,CAAC,CAAC,gBAAgB,CAAC,IAAI;QACvB,CAAC,CAAC,kBAAkB;YACnB,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,IAAI,SAAS,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GAAG,cAAc;QACnC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,kBAAkB;YACnB,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,IAAI,IAAI,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC;IACT,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,cAAc,GAAG,cAAc;QACpC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,aAAa,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3F,MAAM,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,cAAc;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,KAAK,GAAG;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,eAAe,KAAK,GAAG;gBACxB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,CAAC;IACV,OAAO,kBAAkB,CAAC,OAAO,EAAE;QAClC,UAAU;QACV,YAAY,EAAE,WAAW;QACzB,aAAa,EAAE,cAAc;YAC5B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,aAAa;gBACd,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,cAAc;oBACf,CAAC,CAAC,kBAAkB;oBACpB,CAAC,CAAC,SAAS;QACd,WAAW,EAAE,UAAU;QACvB,aAAa;QACb,kBAAkB;QAClB,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAClF,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CAAC,OAA0B,EAAE,IAAc,EAAE,GAAW;IAC5E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,qBAAqB,EAAE,GAAG,IAAI,CAAC,EAAE;QAC/E,GAAG;QACH,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC;QAC5B,OAAO,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,UAAsC,EACtC,IAAY,EACZ,KAAa;IAEb,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvD,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC;QACjC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC;KAClC,CAAC,CAAC;IACH,OAAO,YAAY,KAAK,aAAa,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,OAA0B,EAC1B,UAAsC,EACtC,IAAc,EACd,IAAY;IAEZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,UAAsC,EACtC,QAAgB;IAEhB,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,MAAM;YAAE,MAAM,GAAG,QAAQ,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA0B,EAAE,KAA2B;IAC/F,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC1C,MAAM,kBAAkB,GACvB,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtH,MAAM,YAAY,GACjB,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7F,MAAM,aAAa,GAClB,KAAK,CAAC,aAAa;QACnB,CAAC,YAAY,IAAI,YAAY,KAAK,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpF,MAAM,YAAY,GACjB,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,aAAa,KAAK,cAAc;QAClE,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,UAAU,CAAC;QAChF,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,WAAW,GAChB,KAAK,CAAC,WAAW,KAAK,SAAS;QAC9B,CAAC,CAAC,KAAK,CAAC,WAAW;QACnB,CAAC,CAAC,YAAY,KAAK,IAAI;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACtG,MAAM,UAAU,GACf,aAAa,KAAK,cAAc;QAC/B,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC;IAET,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC;IAC3D,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAE5D,IAAI,SAAS,GAAmB,IAAI,CAAC;IACrC,IAAI,kBAAkB,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAC3E,IAAI,SAAS,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;QAClC,CAAC;IACF,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC/D,MAAM,iBAAiB,GAAG,eAAe,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IACrE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAChB,aAAa,KAAK,iBAAiB;QAClC,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,aAAa,KAAK,kBAAkB;YACrC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,mBAAmB,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,cAAc,KAAK,UAAU,GAAG,CAAC,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,iBAAiB,KAAK,aAAa,GAAG,CAAC,CAAC;IACvE,IAAI,WAAW,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,iBAAiB,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC;SAAM,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC;IAC1D,MAAM,aAAa,GAAG,YAAY,KAAK,IAAI,CAAC;IAC5C,MAAM,MAAM,GAAG,aAAa;QAC3B,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,WAAW;YACZ,CAAC,CAAC,iBAAiB;YACpB,CAAC,CAAC,QAAQ;gBACT,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,oBAAoB,CAAC;IAEzB,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,4EAA4E;IAC5E,6DAA6D;IAC7D,EAAE;IACF,iFAAiF;IACjF,4EAA4E;IAC5E,MAAM,SAAS,GACd,aAAa,KAAK,cAAc,IAAI,YAAY;QAC/C,CAAC,CAAC,oFAAoF,kBAAkB,CAAC,UAAU,CAAC,4CAA4C,YAAY,iLAAiL;QAC7V,CAAC,CAAC,aAAa,KAAK,iBAAiB,IAAI,YAAY;YACpD,CAAC,CAAC,2DAA2D,YAAY,iEAAiE;YAC1I,CAAC,CAAC,aAAa,KAAK,kBAAkB,IAAI,YAAY,IAAI,WAAW;gBACpE,CAAC,CAAC,wDAAwD,YAAY,6HAA6H;gBACnM,CAAC,CAAC,aAAa,KAAK,kBAAkB,IAAI,YAAY;oBACtD,CAAC,CAAC,kFAAkF,YAAY,iEAAiE;oBAClK,CAAC,CAAC,yLAAyL,CAAC;IAE/L,MAAM,MAAM,GACX,CAAC,QAAQ;QACR,CAAC,CAAC,+IAA+I;QACjJ,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;IAEpB,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IAE3D,OAAO;QACN,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;QACX,aAAa;QACb,eAAe;QACf,kBAAkB;QAClB,UAAU;QACV,SAAS;QACT,gBAAgB;KAChB,CAAC;AACH,CAAC"}

package/dist/surface-mcp/crash-reporting.d.ts

@@ -0,0 +1,28 @@
+import { valueFreeFailure, type RuntimeFatalKind, type RuntimeRef, type ValueFreeFailure } from '@vibesdotdev/kernel';
+/** What reports go to: the serving runtime's logger. */
+export interface CrashReportLogger {
+    error(message: string, context: {
+        kind: RuntimeFatalKind;
+        failure: ReturnType<typeof valueFreeFailure>;
+    }): void;
+    debug(message: string, context: {
+        reason: string;
+    }): void;
+}
+/** Why a host offered no fatal subscription: confirmed absence, reported at debug. */
+export type CrashReportingAbsence = 'host-signals-unavailable' | 'fatal-subscription-unsupported';
+export type CrashReporting = {
+    readonly kind: 'subscribed';
+    readonly stop: () => void;
+} | {
+    readonly kind: 'absent';
+    readonly reason: CrashReportingAbsence;
+    /** Present when the host's signal capability itself failed. Value-free: name, code, reason. */
+    readonly failure?: ValueFreeFailure;
+};
+/**
+ * Subscribe `logger` to the host's fatal failures for `runtime`. Each report is
+ * value-free (the failure's name and code, never its message or stack).
+ */
+export declare function subscribeServeCrashReports(runtime: Pick<RuntimeRef, 'hasKind' | 'query'>, logger: CrashReportLogger): Promise<CrashReporting>;
+//# sourceMappingURL=crash-reporting.d.ts.map

package/dist/surface-mcp/crash-reporting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-reporting.d.ts","sourceRoot":"","sources":["../../src/surface-mcp/crash-reporting.ts"],"names":[],"mappings":"AAYA,OAAO,EAGN,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,MAAM,qBAAqB,CAAC;AAE7B,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IACjC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IAChH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1D;AAKD,sFAAsF;AACtF,MAAM,MAAM,qBAAqB,GAAG,0BAA0B,GAAG,gCAAgC,CAAC;AAElG,MAAM,MAAM,cAAc,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAA;CAAE,GAC1D;IACA,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEL;;;GAGG;AACH,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC,EAC9C,MAAM,EAAE,iBAAiB,GACvB,OAAO,CAAC,cAAc,CAAC,CAoBzB"}

package/dist/surface-mcp/crash-reporting.js

@@ -0,0 +1,41 @@
+/**
+ * Fatal-failure reporting for an MCP serve body, through the runtime host's
+ * declared capability (`runtime/host-signals` `subscribeFatal`).
+ *
+ * Report-only and scoped to the serving runtime: it never marks a crash
+ * handled (the host's default fatal behaviour still runs), and another runtime
+ * in the same process keeps its own subscription. A host that declares no
+ * fatal subscription is confirmed absence: nothing is installed, and no
+ * process-wide handler ever stands in for it.
+ */
+import * as z from 'zod/v4';
+import { CaughtFailureSchema, getRuntimeHostSignals, valueFreeFailure } from '@vibesdotdev/kernel';
+/** The host's optional fatal subscription, read by shape only. */
+const FatalSubscriptionSchema = z.object({ subscribeFatal: z.function() });
+/**
+ * Subscribe `logger` to the host's fatal failures for `runtime`. Each report is
+ * value-free (the failure's name and code, never its message or stack).
+ */
+export async function subscribeServeCrashReports(runtime, logger) {
+    let signals;
+    try {
+        signals = await getRuntimeHostSignals(runtime);
+    }
+    catch (error) {
+        const failure = valueFreeFailure(CaughtFailureSchema.parse(error));
+        if (failure.reason === 'host-signals-unavailable') {
+            logger.debug('MCP serve: the host declares no signal capability; no fatal-failure reports', { reason: failure.reason });
+            return { kind: 'absent', reason: 'host-signals-unavailable', failure };
+        }
+        throw error;
+    }
+    if (!FatalSubscriptionSchema.safeParse(signals).success || !signals.subscribeFatal) {
+        logger.debug('MCP serve: the host offers no fatal subscription; no fatal-failure reports', { reason: 'fatal-subscription-unsupported' });
+        return { kind: 'absent', reason: 'fatal-subscription-unsupported' };
+    }
+    const stop = signals.subscribeFatal((kind, error) => {
+        logger.error('MCP serve fatal failure', { kind, failure: valueFreeFailure(error) });
+    });
+    return { kind: 'subscribed', stop };
+}
+//# sourceMappingURL=crash-reporting.js.map

package/dist/surface-mcp/crash-reporting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-reporting.js","sourceRoot":"","sources":["../../src/surface-mcp/crash-reporting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACN,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAIhB,MAAM,qBAAqB,CAAC;AAQ7B,kEAAkE;AAClE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAc3E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAA8C,EAC9C,MAAyB;IAEzB,IAAI,OAA0D,CAAC;IAC/D,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,6EAA6E,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,4EAA4E,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACzI,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/surface-mcp/executable-freshness-watch.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Executable-freshness watch — the MCP body's self-heal for a replaced binary.
+ *
+ * Every 30s the body asks TWO nerves whether the build it is serving still
+ * matches disk: executable-identity (was the file at my own path replaced?) and
+ * graph-freshness (was the module graph under my resolution root replaced?).
+ * The second one is the thin host's normal case — the binary is recompiled very
+ * rarely and `vibes update` moves the plugins instead. When either fires:
+ *   - it logs the injury once, at ERROR, with the exact remedy;
+ *   - every tool result already carries the banner (adapters/mcp/stale-body.ts);
+ *   - a MANAGED body (VIBES_PM_MANAGED set, http mode) asks the PM daemon to
+ *     roll it once the new file has settled for `settleMs` (an install by
+ *     atomic rename settles instantly; a slow copy must not be exec'd mid-write);
+ *   - a stdio body cannot be restarted by anyone but its client, so it stops at
+ *     the banner — "do everything you can, then ask for help".
+ *
+ * Measured need (2026-08-28): the managed HTTP body ran a deleted inode for
+ * 8h45m after a release install until a health-check kill replaced it by
+ * accident. This turns that accident into a design.
+ *
+ * Measured failure (2026-09-05): an http body from a retired worktree binary
+ * (ppid 1, alive 46h) still carried the VIBES_PM_MANAGED=mcp-server-dev stamp
+ * PM had given its ancestor. Its own graph was stale forever, so every retry
+ * window it asked PM to roll `mcp-server-dev` — and PM rolled the healthy
+ * shared host: 552 of 586 restarts that day, each one failing every in-flight
+ * relay call. A stamp is inherited by descendants and orphans; it is not proof
+ * of identity. So before asking, the watch proves that PM tracks THIS pid
+ * under that id, disables itself for good on a mismatch, and gives up after a
+ * bounded number of requests. The daemon enforces the same proof on its side
+ * (`expectedPid` on the restart RPC).
+ */
+import type { LoggerImplementation } from '@vibesdotdev/logging';
+import { type RuntimeHostIdentity } from '@vibesdotdev/kernel';
+export interface ExecutableFreshnessWatch {
+    stop(): void;
+    /** One tick, exposed for tests. */
+    tick(): Promise<void>;
+}
+export interface ExecutableFreshnessWatchOptions {
+    mode: 'stdio' | 'http';
+    /**
+     * This serve host's own bound workspace: the PM daemon it asks for a
+     * managed restart is the one that workspace's socket names.
+     */
+    workspaceRoot: string;
+    /**
+     * The serve host's runtime: the PM client for a managed restart reads its
+     * path roots and path mechanics. Nothing here reads an ambient runtime.
+     */
+    runtime: import('@vibesdotdev/pm/client').PMClientRuntime & Pick<import('@vibesdotdev/kernel').VibesRuntime, 'localEnvironment' | 'getEnv' | 'getEnvSnapshot' | 'lifecycle'>;
+    /**
+     * The PM process id this body was launched as (PM's `VIBES_PM_MANAGED`
+     * spawn stamp, read by the caller from its host's captured environment),
+     * or null for a body PM did not launch.
+     */
+    managedProcessId: string | null;
+    /** The serve host's declared process identity (`getRuntimeHostIdentity`): executable/graph freshness and its pid. */
+    identity: RuntimeHostIdentity;
+    logger: Pick<LoggerImplementation, 'error' | 'info' | 'warn'>;
+    /** Poll interval (default 30s). */
+    intervalMs?: number;
+    /** How long the new file must be unchanged before a managed restart (default 30s). */
+    settleMs?: number;
+    /** Back-off after a failed restart request (default 5 min). */
+    retryMs?: number;
+    /** Give up (and stop the watch) after this many restart requests (default 3). */
+    maxRestartRequests?: number;
+    /**
+     * Override the restart request (tests). Default:
+     * PMClient.restart(VIBES_PM_MANAGED, undefined, { expectedPid }).
+     */
+    requestRestart?: (processId: string, guard: ManagedRestartGuard) => Promise<void>;
+    /**
+     * Resolve the pid the PM daemon currently tracks under a managed process id
+     * (tests). Default: PMClient.getStatus(processId).pid. `null` = untracked.
+     */
+    resolveManagedPid?: (processId: string) => Promise<number | null>;
+    /** This body's pid (tests). Default: the host identity's `currentPid()`. */
+    selfPid?: number;
+    /** Publish a verified implementation artifact without closing transports. */
+    publishUpdate?: () => Promise<boolean>;
+    now?: () => number;
+}
+/** Proof the requester is the tracked process; the daemon refuses a mismatch. */
+export interface ManagedRestartGuard {
+    expectedPid: number;
+}
+export declare function startExecutableFreshnessWatch(options: ExecutableFreshnessWatchOptions): ExecutableFreshnessWatch;
+//# sourceMappingURL=executable-freshness-watch.d.ts.map

package/dist/surface-mcp/executable-freshness-watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-freshness-watch.d.ts","sourceRoot":"","sources":["../../src/surface-mcp/executable-freshness-watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,OAAO,EAA4B,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGzF,MAAM,WAAW,wBAAwB;IACxC,IAAI,IAAI,IAAI,CAAC;IACb,mCAAmC;IACnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC/C,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,OAAO,EAAE,OAAO,wBAAwB,EAAE,eAAe,GACxD,IAAI,CAAC,OAAO,qBAAqB,EAAE,YAAY,EAAE,kBAAkB,GAAG,QAAQ,GAAG,gBAAgB,GAAG,WAAW,CAAC,CAAC;IAClH;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qHAAqH;IACrH,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9D,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClE,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;CACpB;AAyBD,wBAAgB,6BAA6B,CAC5C,OAAO,EAAE,+BAA+B,GACtC,wBAAwB,CA6L1B"}