@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/cli/fleets/commands/fleet.daemon.command.impl.js

@@ -0,0 +1,546 @@
+import { valueFreeFailure } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+import { getVibesToolsClient } from '@vibesdotdev/tools/client';
+import { FleetDaemonOptionsSchema } from "../../../schemas/fleet-cli.js";
+import { isRemoteControlDescriptor } from "../../../fleets/remote-control.js";
+import { writeStdoutLine, commandWriters } from '@vibesdotdev/cli/output';
+/**
+ * `vibes fleet daemon` implementation.
+ *
+ * Starts the fleet daemon RPC server + host-agent enroll/heartbeat in one
+ * process. The CLI wires the runtime-authz plugin into the daemon pipeline by
+ * construction — an ungated non-loopback daemon stays impossible. The bind-guard
+ * test is the permanent regression fence (fleet.md §4.5, hqx-w1 §3).
+ *
+ * Security contract (MUST NOT regress):
+ *   - A non-loopback bind REQUIRES a connection bearer: --token, or FLEET_DAEMON_TOKEN in
+ *     the `fleet.daemon-credentials` store (written by `vibes fleet daemon install`).
+ *   - The daemon pipeline always has L5's authz + friction interceptors.
+ *   - `startFleetDaemon` THROWS on a non-loopback bind with no gates or no tokens.
+ *   - Relay mode REQUIRES the same gated pipeline (fleet-relay §4).
+ *   - `startFleetDaemon` THROWS on relay mode with an ungated pipeline.
+ *
+ * Credentials never need argv (fleet.daemon.token-env.ts): the connection bearer
+ * resolves through `runtime.resolveCredential` from the by-id
+ * `fleet.daemon-credentials` store (`<vibesHome>/hosts/<id>.daemon-token`, 0600),
+ * the enrollment token comes from `VIBES_FLEET_ENROLL_TOKEN` or
+ * `--enroll-token-file` (0600, consumed once and removed), the durable host token
+ * from `VIBES_FLEET_HOST_TOKEN` or the persisted token file. The argv flags below
+ * stay supported and are `ps`-visible.
+ *
+ * Flags:
+ *   --host-id <id>              Required. The stable host id.
+ *   --enroll-token <token>      One-time enrollment token (ps-visible; prefer env/file).
+ *   --enroll-token-file <path>  File holding the one-time enrollment token (mode 0600).
+ *   --host-token <token>        Existing durable host token (ps-visible; prefer env/file).
+ *   --token-file <path>         Persisted host-token state (default ~/.vibes/hosts/<id>.json).
+ *   --listen <address>      Bind address (default 127.0.0.1:0). Implies --no-relay.
+ *   --token <token>         Connection bearer (ps-visible; overrides the store; required non-loopback).
+ *   --relay                 Enable relay mode (default ON when no --listen given).
+ *   --no-relay              Disable relay mode.
+ *   --broker-origin <url>   Platform origin for the broker (default: the declared `platform` service).
+ *   --labels <labels>       Comma-separated capability labels reported in heartbeats.
+ *   --heartbeat-interval <s> Heartbeat interval in seconds (default 60).
+ *   --once                  Enroll/heartbeat once and exit.
+ *   --no-agent              Skip host-agent; only run the RPC server.
+ */
+import { CapabilityError, settle, DefaultInvokePipeline } from '@vibesdotdev/kernel';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { originOf, serviceEnvironment } from '@vibesdotdev/infra-core/service';
+import { defaultHostId, defaultTokenFile, readHostToken, removeEnrollTokenFile, writeHostToken } from "../lib/host-token-store.js";
+import { createAuthzInterceptor, createFrictionInterceptor } from '@vibesdotdev/kernel/authz';
+import { buildDaemonPolicyRuntime } from "../lib/daemon-policy.js";
+// Stable kind ids (same strings fleet-daemon exports). Local constants keep the
+// optional fleets/cli plugin free of a hard fleet-daemon package edge.
+const MONITOR_KIND_ID = 'autoloop/monitor';
+const CLIENT_KIND_ID = 'runtime/client';
+import { createFleetHostAgentHttpDeps } from '@vibesdotdev/platform/fleets/lifecycle';
+import { createInMemoryReachableRuntimeRegistry } from '@vibesdotdev/platform/fleets';
+import { FLEET_DAEMON_TOKEN_KEY } from "../lib/daemon-credentials-store.js";
+import { FLEET_ENROLL_TOKEN_ENV, FLEET_HOST_TOKEN_ENV, resolveFleetDaemonConnectionToken, resolveFleetEnrollToken, resolveFleetHostToken } from "./fleet.daemon.token-env.js";
+// Token persistence (~/.vibes/hosts/<id>.json) lives in ../lib/host-token-store.ts —
+// shared with `vibes fleet status` so both agree on the on-disk layout.
+// --- Bind-address parsing ---------------------------------------------------
+function parseListenAddress(listen) {
+    // Accept: host:port, [::1]:port, 0.0.0.0:1234, or just :port / port
+    if (listen.startsWith('[')) {
+        const closeBracket = listen.indexOf(']');
+        const host = listen.slice(1, closeBracket > 0 ? closeBracket : listen.length);
+        const rest = closeBracket >= 0 ? listen.slice(closeBracket + 1) : '';
+        const port = rest.startsWith(':') ? parseInt(rest.slice(1), 10) : 0;
+        return { host, port };
+    }
+    if (listen.startsWith(':')) {
+        return { host: '127.0.0.1', port: parseInt(listen.slice(1), 10) || 0 };
+    }
+    const colonIdx = listen.lastIndexOf(':');
+    if (colonIdx > 0) {
+        return { host: listen.slice(0, colonIdx), port: parseInt(listen.slice(colonIdx + 1), 10) || 0 };
+    }
+    // Just a port number
+    const port = parseInt(listen, 10);
+    if (!isNaN(port))
+        return { host: '127.0.0.1', port };
+    return { host: listen, port: 0 };
+}
+// --- Pipeline policy: label-driven; see ../lib/daemon-policy.ts -------------
+// The empty RuntimeLike (local-open, remote-deny) and the labeled one (adds
+// the peer→runtime/execution grant) both live there — ONE decision point.
+// --- Fleet fan-out: resolve the read-only autoloop/monitor (if present) -------
+/**
+ * Resolve the host-side read-only `autoloop/monitor` from the ambient runtime, ONCE,
+ * and return a sync resolver closure for the daemon root (which calls it per query).
+ *
+ * Returns `undefined` when the kind is not registered (the autoloop consumer plugin
+ * is absent on this host) — the daemon then simply does not expose the monitor, and
+ * hq-web reports the host as "monitoring unavailable" (graceful degrade). Never
+ * throws: a daemon must start regardless of whether loop monitoring is available.
+ */
+async function resolveLoopMonitor(runtime) {
+    if (!runtime.hasKind(MONITOR_KIND_ID))
+        return undefined;
+    // Installed but broken is a failure, not "monitoring unavailable".
+    const monitor = await runtime.query(MONITOR_KIND_ID).withId(MONITOR_KIND_ID).resolve();
+    if (!monitor)
+        return undefined;
+    return () => monitor;
+}
+// --- D-DAEMON-CLIENT: resolve the host's remote-control runtime/clients --------
+/** The file owner is optional, but an installed broken adapter must not be hidden. */
+export async function resolveHostFilesystem(runtime) {
+    if (!runtime.hasKind('filesystem/adapter'))
+        return undefined;
+    const adapter = await runtime.query('filesystem/adapter').resolve();
+    const { wrapFilesystemAdapterForWire } = await import('@vibesdotdev/platform/fleets/daemon');
+    const filesystem = wrapFilesystemAdapterForWire(adapter);
+    return (kindId) => kindId === 'filesystem/adapter' ? filesystem : undefined;
+}
+/** Native custody is composed by its owner; the daemon exposes only its two validated verbs. */
+export async function resolveHostWorkspaceCustody(runtime) {
+    if (!runtime.hasKind('workspace/custody'))
+        return undefined;
+    const selected = await runtime.query('workspace/custody').enabled().select();
+    if (!selected)
+        return undefined;
+    const { wrapWorkspaceCustodyForWire } = await import('@vibesdotdev/platform/fleets/daemon');
+    const custody = wrapWorkspaceCustodyForWire(selected.impl);
+    return kindId => kindId === 'workspace/custody' ? custody : undefined;
+}
+/**
+ * Resolve this host's remote-control `runtime/client`s from the ambient runtime,
+ * ONCE at daemon start, into a sync resolver closure the daemon root calls per
+ * `withId(id)` query. Returns `undefined` when none are registered (the daemon
+ * then does not expose `runtime/client` — a consumer's `query('runtime/client')`
+ * throws a precise "not exposed" error, degrading honestly).
+ *
+ * Every proxied client invoke still crosses the SAME L5-gated pipeline as
+ * execution (the daemon root wire-wraps the impl); this adds no ungated path.
+ * A single client that fails to resolve is logged and skipped (never silent) so
+ * one broken feature client cannot stop the daemon from exposing the others.
+ */
+export async function resolveHostClients(runtime) {
+    const logger = getLogger('platform', runtime);
+    if (!runtime.hasKind(CLIENT_KIND_ID))
+        return undefined;
+    const clientDescriptors = runtime.query(CLIENT_KIND_ID).descriptors();
+    const registered = new Set(clientDescriptors.map((d) => d.id));
+    const remoteControlClientIds = clientDescriptors
+        .filter((d) => isRemoteControlDescriptor(d))
+        .map((d) => d.id);
+    const clients = new Map();
+    for (const id of remoteControlClientIds) {
+        {
+            const operation = await settle(async () => {
+                const client = await runtime.query(CLIENT_KIND_ID).withId(id).resolve();
+                if (client)
+                    clients.set(id, client);
+            });
+            if (!operation.ok) {
+                const err = operation.cause;
+                logger.error('Fleet daemon operation failed.', { error: valueFreeFailure(err) });
+            }
+        }
+    }
+    if (registered.has('tools')) {
+        const tools = await getVibesToolsClient(runtime);
+        const allowedToolIds = new Set();
+        if (runtime.hasKind('tools/tool')) {
+            for (const tool of runtime.query('tools/tool').descriptors()) {
+                if (isRemoteControlDescriptor(tool)) {
+                    allowedToolIds.add(tool.id);
+                }
+            }
+        }
+        // Expose only the remote-control verbs, through the normal Tools pipeline.
+        // The general Tools client (agent CRUD, arbitrary tools) is never exported.
+        clients.set('tools', {
+            async invokeSystemTool(id, input, ctx) {
+                if (!allowedToolIds.has(id))
+                    throw new Error('Tool is not declared for fleet remote-control execution');
+                return tools.invokeSystemTool(id, input, { ...ctx, logger: getLogger('fleet', runtime).child('remote-control') });
+            }
+        });
+    }
+    if (clients.size === 0)
+        return undefined;
+    return (clientId) => clients.get(clientId);
+}
+// --- The command implementation ---------------------------------------------
+export default {
+    async execute(_args, opts, context) {
+        const logger = getLogger('platform', context.runtime);
+        const { startFleetDaemon, startHostAgent } = await import('@vibesdotdev/platform/fleets/daemon/bun');
+        const options = FleetDaemonOptionsSchema.parse(opts);
+        // Default the host id to a slug of this machine's hostname so a user need
+        // not spell out --host-id every run. An explicit flag always wins.
+        const hostId = options.hostId || defaultHostId(context.runtime.localEnvironment.getHostname?.() ?? 'host');
+        if (!options.hostId) {
+            await writeStdoutLine(context.runtime, `[fleet daemon] no --host-id given; using "${hostId}" (from this machine's hostname)`);
+        }
+        // Resolve listen address. An explicit --listen flag implies http-listen mode.
+        const hasExplicitListen = !!options.listen;
+        const listenStr = options.listen ?? '127.0.0.1:0';
+        const { host: bindHost, port: bindPort } = parseListenAddress(listenStr);
+        // The connection bearer: --token (ps-visible) first, then the host's
+        // `fleet.daemon-credentials` store. Absent is no bearer (today's posture:
+        // anonymous loopback, non-loopback refused by startFleetDaemon); any
+        // other failure (an exposed file, an undeclared tier) is thrown typed.
+        const bearer = await resolveFleetDaemonConnectionToken(context.runtime, {
+            hostId,
+            argvToken: options.token
+        });
+        const connectionToken = bearer?.token;
+        if (bearer?.source.kind === 'argv') {
+            (await commandWriters(context.runtime)).log('[fleet daemon] WARN: --token rides argv and is visible to every process on this host (ps). ' +
+                `Prefer the stored bearer: vibes fleet daemon install --host-id ${hostId} --token-file <path>.`);
+        }
+        else if (bearer?.source.kind === 'store') {
+            await writeStdoutLine(context.runtime, `[fleet daemon] connection bearer source: store ${bearer.source.store}`);
+        }
+        else {
+            // A service installed before the bearer moved into the store still
+            // carries it in its env, which this daemon never reads: say so and
+            // name the command that migrates it.
+            (await commandWriters(context.runtime)).log(`[fleet daemon] WARN: no connection bearer (credential-not-set): no --token, and store ` +
+                `fleet.daemon-credentials holds no ${FLEET_DAEMON_TOKEN_KEY} for host "${hostId}". ` +
+                `A loopback listener accepts unauthenticated local connections; a non-loopback --listen is refused. ` +
+                `To set or migrate the bearer: vibes fleet daemon install --host-id ${hostId}`);
+        }
+        // Relay mode: ON by default for non-loopback / home use (the whole point of
+        // fleet-relay). OFF when --listen is explicitly given (loopback-dev path)
+        // unless --relay is also passed. The user may force it either way.
+        //
+        // Default logic:
+        //   --listen given and --relay NOT given  → relay OFF (http-only dev mode)
+        //   --listen NOT given                    → relay ON  (home machine, NAT-safe)
+        //   --relay given explicitly              → relay ON  (force, regardless of --listen)
+        //   --no-relay given                      → relay OFF (force off)
+        const relayExplicit = options.relay;
+        const useRelay = relayExplicit === true || relayExplicit === 'true' || relayExplicit === '1'
+            ? true
+            : relayExplicit === false || relayExplicit === 'false' || relayExplicit === '0'
+                ? false
+                : !hasExplicitListen; // default: relay on iff no explicit --listen
+        // The broker is the declared `platform` service origin in the configured
+        // service environment, unless --broker-origin names another. An undeclared
+        // service fails NOT_FOUND. Only the relay and the host agent read it, so an
+        // http-only `--no-agent` daemon resolves nothing and never reads the value.
+        const brokerOrigin = options.brokerOrigin ??
+            (useRelay || options.agent !== false
+                ? originOf(await context.runtime
+                    .query('infra/service')
+                    .withId('platform')
+                    .resolve(), await serviceEnvironment(context.runtime), 'primary')
+                : '');
+        const capabilityLabels = options.labels !== undefined
+            ? options.labels
+                .split(',')
+                .map((label) => label.trim())
+                .filter(Boolean)
+            : [];
+        const heartbeatIntervalSeconds = options.heartbeatInterval
+            ? Number(options.heartbeatInterval)
+            : 60;
+        const runOnce = options.once === true || options.once === 'true' || options.once === '1';
+        const runAgent = options.agent !== false;
+        // Token state. Credentials resolve from their non-argv sources
+        // (fleet.daemon.token-env.ts: a private file or a secret through
+        // `runtime.resolveCredential`, never the process environment); the argv
+        // flags stay supported, are ps-visible, and say so.
+        // Every credential this daemon reads resolves through
+        // `runtime.resolveCredential`, which needs the host's declared tier. An
+        // installed or provisioned daemon declares it in its bound root
+        // (`config['runtime.host']`); say so here instead of at the first read.
+        if (!context.runtime.scope.qualifiers.environmentTier) {
+            throw new CapabilityError('This fleet daemon host declares no environment tier, so it cannot resolve its credentials.', 'INTERNAL', {
+                reason: 'tier-undeclared',
+                retryable: false,
+                recoveryHint: "Reinstall with `vibes fleet daemon install --host-id <id> --tier <tier>`, or run from a root whose " +
+                    "vibes.config declares config['runtime.host'].environmentTier."
+            });
+        }
+        const tokenFile = options.tokenFile ?? defaultTokenFile(getPathRoots(context.runtime), hostId);
+        let hostToken = (await resolveFleetHostToken(context.runtime, { argvToken: options.hostToken })) ??
+            await readHostToken(context.runtime, tokenFile, hostId);
+        const enrollment = await resolveFleetEnrollToken(context.runtime, {
+            argvToken: options.enrollToken,
+            tokenFile: options.enrollTokenFile
+        });
+        const enrollToken = enrollment?.token;
+        if (options.enrollToken) {
+            (await commandWriters(context.runtime)).log('[fleet daemon] WARN: --enroll-token rides argv and is visible to every process on this host (ps). ' +
+                `Prefer --enroll-token-file <path> or the ${FLEET_ENROLL_TOKEN_ENV} secret.`);
+        }
+        if (options.hostToken) {
+            (await commandWriters(context.runtime)).log('[fleet daemon] WARN: --host-token rides argv and is visible to every process on this host (ps). ' +
+                `Prefer the ${FLEET_HOST_TOKEN_ENV} secret or the persisted token file.`);
+        }
+        if (enrollment) {
+            await writeStdoutLine(context.runtime, `[fleet daemon] enrollment token source: ${enrollment.source}`);
+        }
+        if (!enrollToken && !hostToken && runAgent) {
+            throw new Error('No credential for the host agent. Provide one of: ' +
+                `--enroll-token-file <path>, the ${FLEET_ENROLL_TOKEN_ENV} secret, --enroll-token <token>, ` +
+                `the ${FLEET_HOST_TOKEN_ENV} secret, --host-token <token>, or a persisted host token at: ${tokenFile}` +
+                (options.enrollTokenFile
+                    ? ` (enrollment token file absent or empty: ${options.enrollTokenFile})`
+                    : ''));
+        }
+        // Relay requires a durable host token. Check eagerly so the error is clear.
+        if (useRelay && !enrollToken && !hostToken) {
+            throw new Error('Relay mode requires a persisted durable host token. ' +
+                `Enroll first (--enroll-token-file, the ${FLEET_ENROLL_TOKEN_ENV} secret, or --enroll-token), ` +
+                'or use --no-relay for http-only dev mode.');
+        }
+        if (useRelay && !brokerOrigin) {
+            throw new Error('Relay mode requires a broker origin: declare apps.platform in the active environment, ' +
+                'or pass --broker-origin <url>.');
+        }
+        // Build the invoke pipeline: authz + friction interceptors (L5 gates).
+        // The CLI wires these BY CONSTRUCTION — an ungated non-loopback daemon stays
+        // impossible because startFleetDaemon throws without them. The same guard
+        // applies to relay mode (fleet-relay §4). The bind-guard test is the
+        // permanent regression fence.
+        //
+        // The authz posture is label-driven (daemon-policy.ts): remote peers get
+        // the runtime/execution surface ONLY when this daemon runs with
+        // `--labels sandbox:code-execution` (the T12 opt-in — same label the
+        // platform requires on the host record before a code session may target
+        // this machine). Unlabeled daemons keep remote-deny/local-open.
+        const policyRuntime = buildDaemonPolicyRuntime(capabilityLabels);
+        // The gate reads the daemon host's declared scope plus the active invocation's actor.
+        const pipeline = new DefaultInvokePipeline(() => context.runtime.scope);
+        pipeline.use(createAuthzInterceptor(policyRuntime));
+        pipeline.use(createFrictionInterceptor(policyRuntime));
+        // Execution: resolve the implementation selected by the host's completed
+        // environment/execution plugins. Fleet never constructs another owner's impl.
+        const hostRuntime = context.runtime;
+        if (!hostRuntime.hasKind('runtime/execution')) {
+            throw new Error("Fleet daemon requires the host to select a runtime/execution implementation");
+        }
+        const execution = (await hostRuntime
+            .query('runtime/execution')
+            .resolve());
+        // Fleet fan-out: expose the read-only autoloop/monitor over the daemon wire so
+        // hq-web /loops can enumerate this host's loops. Resolved ONCE from the ambient
+        // runtime; passed as a sync closure (the daemon root calls it per query). When
+        // the autoloop consumer plugin is absent the kind won't resolve — we then omit
+        // the monitor (hq-web reports the host as "monitoring unavailable", degrading
+        // gracefully). Reads still pass the SAME L5-gated pipeline as execution.
+        const monitorResolver = await resolveLoopMonitor(hostRuntime);
+        // D-DAEMON-CLIENT: expose this host's remote-control runtime/clients
+        // (desktop/browser) over the SAME L5-gated wire so a consumer reaches them
+        // with `getVibesRemote(hostId).query('runtime/client').withId('desktop')`.
+        // Resolved ONCE; omitted when no remote-control client is registered (the
+        // daemon then does not expose runtime/client, degrading honestly).
+        const clientResolver = await resolveHostClients(hostRuntime);
+        const filesystemResolver = await resolveHostFilesystem(hostRuntime);
+        const custodyResolver = await resolveHostWorkspaceCustody(hostRuntime);
+        // Start the daemon. Relay mode is set when useRelay=true and a broker origin
+        // is available. The relay uses the DURABLE host token (not the enroll token —
+        // aliasing enroll→host caused round-3 finding F1 where heartbeat 401'd and
+        // the daemon died silently after the first heartbeat).
+        //
+        // Note: hostToken may still be undefined here if enrollToken is set (we
+        // haven't enrolled yet). In that case relay starts AFTER enrollment below.
+        // We defer relay start until after enrollment so the durable token is known.
+        const daemon = await startFleetDaemon({
+            hostId,
+            // This host's own runtime composes every declared child environment.
+            runtime: hostRuntime,
+            execution,
+            pipeline,
+            host: bindHost,
+            port: bindPort,
+            connectionTokens: connectionToken ? [connectionToken] : undefined,
+            // What a consumer resolves for the connection bearer: a store-held
+            // credential by key, through its own runtime's resolveCredential (RC05).
+            auth: connectionToken ? { source: 'secret', key: FLEET_DAEMON_TOKEN_KEY } : undefined,
+            remoteScope: { hardware: 'consumer' },
+            name: `Fleet daemon ${hostId}`,
+            monitor: monitorResolver,
+            resolveClient: clientResolver,
+            resolveKind: kind => filesystemResolver?.(kind) ?? custodyResolver?.(kind),
+            // Relay: only start immediately if we already have the durable token.
+            // When enrolling, relay starts AFTER enrollment (hostToken is set then).
+            relay: useRelay && hostToken && !enrollToken
+                ? {
+                    brokerOrigin,
+                    hostToken,
+                    alsoListen: hasExplicitListen
+                }
+                : undefined
+        });
+        // Register into the in-process reachable-runtime registry (makes the daemon
+        // visible to query('fleet/host') from the same process or tests).
+        const registry = createInMemoryReachableRuntimeRegistry();
+        daemon.registerInto(registry);
+        const relayInfo = daemon.relayConnection
+            ? ` + relay→${brokerOrigin}`
+            : useRelay
+                ? ' (relay pending enrollment)'
+                : '';
+        await writeStdoutLine(context.runtime, `[fleet daemon] ${hostId} listening on ${daemon.origin}${relayInfo}`);
+        await writeStdoutLine(context.runtime, `[fleet daemon] RPC descriptor id: ${daemon.rpcDescriptor().id}`);
+        if (runOnce && !runAgent) {
+            await writeStdoutLine(context.runtime, '[fleet daemon] --once + --no-agent: RPC server started and immediately stopped');
+            await daemon.stop();
+            return;
+        }
+        // Host agent: enroll + heartbeat.
+        let agentStop;
+        let agentDone;
+        if (runAgent) {
+            const platformOrigin = brokerOrigin;
+            if (!platformOrigin) {
+                (await commandWriters(context.runtime)).log('[fleet daemon] WARN: no platform origin — host agent cannot reach platform API. ' +
+                    'Pass --broker-origin <origin>, declare the platform service, or pass --no-agent to skip.');
+            }
+            else {
+                const deps = {
+                    ...createFleetHostAgentHttpDeps({ baseUrl: platformOrigin }),
+                    runtime: hostRuntime,
+                    // Relay-after-enroll seam (fleet-relay §3.3, G9). On a first-run
+                    // enrollment the durable token is unknown when the daemon starts, so
+                    // relay can't be configured at construction. The moment enrollment
+                    // yields the durable token we start the relay LIVE on this same run —
+                    // the machine becomes inbound-reachable immediately, no restart.
+                    // (Previously this path only logged "restart the daemon to relay",
+                    // which left freshly-enrolled home machines permanently offline.)
+                    onEnrolled: useRelay
+                        ? async ({ hostToken: durableToken, publicIp }) => {
+                            if (publicIp) {
+                                await writeStdoutLine(context.runtime, `[fleet daemon] host public IPv4 detected: ${publicIp}`);
+                            }
+                            {
+                                const operation = await settle(async () => {
+                                    const conn = daemon.startRelay({
+                                        brokerOrigin,
+                                        hostToken: durableToken,
+                                        alsoListen: hasExplicitListen
+                                    });
+                                    await writeStdoutLine(context.runtime, `[fleet daemon] relay dial-out started → ${brokerOrigin} (${conn.state})`);
+                                });
+                                if (!operation.ok) {
+                                    const err = operation.cause;
+                                    logger.error('Fleet daemon operation failed.', { error: valueFreeFailure(err) });
+                                }
+                            }
+                        }
+                        : undefined
+                };
+                const agent = await startHostAgent({
+                    hostId,
+                    enrollToken,
+                    // Never alias the enroll token as the durable host token — a truthy
+                    // hostToken makes the agent SKIP enrollment, then heartbeat 401s and
+                    // the daemon dies (round-3 finding F1).
+                    hostToken: hostToken ?? '',
+                    heartbeatIntervalSeconds,
+                    actionPollIntervalSeconds: 15,
+                    executeActions: true,
+                    once: runOnce,
+                    capabilityLabels,
+                    dockerEnv: [],
+                    dockerMounts: []
+                }, deps);
+                // Persist the issued host token for future runs.
+                if (!hostToken && agent.hostToken) {
+                    await writeHostToken(context.runtime, tokenFile, {
+                        hostId,
+                        hostToken: agent.hostToken,
+                        updatedAt: new Date().toISOString()
+                    });
+                    await writeStdoutLine(context.runtime, `[fleet daemon] Host token persisted: ${tokenFile}`);
+                    // The enrollment token is spent. A file source is removed so the
+                    // installed service's next start finds only the durable token.
+                    if (enrollment?.source === 'file' && enrollment.file) {
+                        const enrollmentFile = enrollment.file;
+                        {
+                            const operation = await settle(async () => {
+                                if (await removeEnrollTokenFile(context.runtime, enrollmentFile)) {
+                                    await writeStdoutLine(context.runtime, `[fleet daemon] Enrollment token consumed; removed ${enrollment.file}`);
+                                }
+                            });
+                            if (!operation.ok) {
+                                const err = operation.cause;
+                                logger.error('Fleet daemon operation failed.', { error: valueFreeFailure(err) });
+                            }
+                        }
+                    }
+                }
+                hostToken = agent.hostToken;
+                agentStop = agent.stop.bind(agent);
+                agentDone = agent.done;
+                await writeStdoutLine(context.runtime, '[fleet daemon] Host agent started');
+                // Relay starts live via the onEnrolled seam above (first-run enrollment)
+                // or at construction (when a durable token was already persisted). If
+                // relay was requested but isn't up yet — e.g. a persisted-token run that
+                // skipped enrollment, so onEnrolled never fired — start it now.
+                if (useRelay && hostToken && !daemon.relayConnection) {
+                    const durableHostToken = hostToken;
+                    {
+                        const operation = await settle(async () => {
+                            const conn = daemon.startRelay({
+                                brokerOrigin,
+                                hostToken: durableHostToken,
+                                alsoListen: hasExplicitListen
+                            });
+                            await writeStdoutLine(context.runtime, `[fleet daemon] relay dial-out started → ${brokerOrigin} (${conn.state})`);
+                        });
+                        if (!operation.ok) {
+                            const err = operation.cause;
+                            logger.error('Fleet daemon operation failed.', { error: valueFreeFailure(err) });
+                        }
+                    }
+                }
+            }
+        }
+        if (runOnce) {
+            await agentStop?.();
+            await daemon.stop();
+            await writeStdoutLine(context.runtime, '[fleet daemon] --once: done');
+            return;
+        }
+        // Run until SIGINT/SIGTERM.
+        const relayStatus = daemon.relayConnection ? ` (relay: ${daemon.relayConnection.state})` : '';
+        await writeStdoutLine(context.runtime, `[fleet daemon] Running${relayStatus}. Press Ctrl+C to stop.`);
+        let stopFromSignal;
+        const signalStop = new Promise((resolve) => {
+            stopFromSignal = resolve;
+        });
+        process.once('SIGINT', stopFromSignal);
+        process.once('SIGTERM', stopFromSignal);
+        try {
+            await Promise.race([signalStop, agentDone ?? new Promise(() => { })]);
+        }
+        finally {
+            process.off('SIGINT', stopFromSignal);
+            process.off('SIGTERM', stopFromSignal);
+            await writeStdoutLine(context.runtime, '\n[fleet daemon] Stopping...');
+            await Promise.all([agentStop?.(), daemon.stop()]);
+        }
+        await writeStdoutLine(context.runtime, '[fleet daemon] Stopped');
+    }
+};
+//# sourceMappingURL=fleet.daemon.command.impl.js.map

package/dist/cli/fleets/commands/fleet.daemon.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.daemon.command.impl.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.daemon.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qBAAqB,EAAqB,MAAM,qBAAqB,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACN,QAAQ,EACR,kBAAkB,EAGlB,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EACN,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,cAAc,EACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAcnE,gFAAgF;AAChF,uEAAuE;AACvE,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EACpB,iCAAiC,EACjC,uBAAuB,EACvB,qBAAqB,EACrB,MAAM,6BAA6B,CAAC;AAErC,qFAAqF;AACrF,wEAAwE;AAExE,+EAA+E;AAE/E,SAAS,kBAAkB,CAAC,MAAc;IACzC,oEAAoE;IACpE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,qBAAqB;IACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAE1E,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAqB;IACtD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,mEAAmE;IACnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAuC,eAAe,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7H,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,kFAAkF;AAElF,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB;IAChE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAoC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;IACvG,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAqB;IACtE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAA0B,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;IACtG,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAqB;IAErB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,sBAAsB,GAAG,iBAAiB;SAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,sBAAsB,EAAE,CAAC;QACzC,CAAC;YACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAmB,cAAc,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC1F,IAAI,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC5B,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC9D,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACpB,KAAK,CAAC,gBAAgB,CAAC,EAAU,EAAE,KAAc,EAAE,GAAyB;gBAC3E,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBACxG,OAAO,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACnH,CAAC;SACD,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,CAAC,QAAgB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,+EAA+E;AAE/E,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoB,EAAE,OAAuB;QACjF,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAErD,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,CAAC;QAC3G,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EACpC,6CAA6C,MAAM,kCAAkC,CACrF,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,MAAM,iBAAiB,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAClD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACzE,qEAAqE;QACrE,0EAA0E;QAC1E,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC,OAAO,EAAE;YACvE,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,KAAK;SACxB,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,EAAE,KAAK,CAAC;QACtC,IAAI,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1C,6FAA6F;gBAC7F,kEAAkE,MAAM,uBAAuB,CAC/F,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5C,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,kDAAkD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACjH,CAAC;aAAM,CAAC;YACP,mEAAmE;YACnE,mEAAmE;YACnE,qCAAqC;YACrC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1C,wFAAwF;gBACxF,qCAAqC,sBAAsB,cAAc,MAAM,KAAK;gBACpF,qGAAqG;gBACrG,sEAAsE,MAAM,EAAE,CAC9E,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,0EAA0E;QAC1E,mEAAmE;QACnE,EAAE;QACF,iBAAiB;QACjB,2EAA2E;QAC3E,+EAA+E;QAC/E,sFAAsF;QACtF,kEAAkE;QAClE,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,MAAM,QAAQ,GACb,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,GAAG;YAC1E,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,GAAG;gBAC9E,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,6CAA6C;QAEtE,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,YAAY,GACjB,OAAO,CAAC,YAAY;YACpB,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;gBACnC,CAAC,CAAC,QAAQ,CACT,MAAM,OAAO,CAAC,OAAO;qBACnB,KAAK,CAA2C,eAAe,CAAC;qBAChE,MAAM,CAAC,UAAU,CAAC;qBAClB,OAAO,EAAE,EACX,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,EACzC,SAAS,CACT;gBACD,CAAC,CAAC,EAAE,CAAC,CAAC;QAER,MAAM,gBAAgB,GACrB,OAAO,CAAC,MAAM,KAAK,SAAS;YAC3B,CAAC,CAAC,OAAO,CAAC,MAAM;iBACd,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,OAAO,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,wBAAwB,GAAG,OAAO,CAAC,iBAAiB;YACzD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;YACnC,CAAC,CAAC,EAAE,CAAC;QACN,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC;QACzF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC;QAEzC,+DAA+D;QAC/D,iEAAiE;QACjE,wEAAwE;QACxE,oDAAoD;QACpD,sDAAsD;QACtD,wEAAwE;QACxE,gEAAgE;QAChE,wEAAwE;QACxE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;YACvD,MAAM,IAAI,eAAe,CACxB,4FAA4F,EAC5F,UAAU,EACV;gBACC,MAAM,EAAE,iBAAiB;gBACzB,SAAS,EAAE,KAAK;gBAChB,YAAY,EACX,qGAAqG;oBACrG,+DAA+D;aAChE,CACD,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,SAAS,GACZ,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAChF,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE;YACjE,SAAS,EAAE,OAAO,CAAC,WAAW;YAC9B,SAAS,EAAE,OAAO,CAAC,eAAe;SAClC,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,UAAU,EAAE,KAAK,CAAC;QACtC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1C,oGAAoG;gBACpG,4CAA4C,sBAAsB,UAAU,CAC5E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1C,kGAAkG;gBAClG,cAAc,oBAAoB,sCAAsC,CACxE,CAAC;QACH,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,2CAA2C,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACd,oDAAoD;gBACpD,mCAAmC,sBAAsB,mCAAmC;gBAC5F,OAAO,oBAAoB,gEAAgE,SAAS,EAAE;gBACtG,CAAC,OAAO,CAAC,eAAe;oBACvB,CAAC,CAAC,4CAA4C,OAAO,CAAC,eAAe,GAAG;oBACxE,CAAC,CAAC,EAAE,CAAC,CACN,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACd,sDAAsD;gBACtD,0CAA0C,sBAAsB,+BAA+B;gBAC/F,2CAA2C,CAC3C,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACd,wFAAwF;gBACxF,gCAAgC,CAChC,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,6EAA6E;QAC7E,0EAA0E;QAC1E,qEAAqE;QACrE,8BAA8B;QAC9B,EAAE;QACF,yEAAyE;QACzE,gEAAgE;QAChE,qEAAqE;QACrE,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,aAAa,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QACjE,sFAAsF;QACtF,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxE,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC,CAAC;QAEvD,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACd,6EAA6E,CAC7E,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,MAAM,WAAW;aAClC,KAAK,CAA0B,mBAAmB,CAAC;aACnD,OAAO,EAAE,CAAC,CAAC;QAEb,+EAA+E;QAC/E,gFAAgF;QAChF,+EAA+E;QAC/E,+EAA+E;QAC/E,8EAA8E;QAC9E,yEAAyE;QACzE,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAE9D,qEAAqE;QACrE,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC7D,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAEvE,6EAA6E;QAC7E,8EAA8E;QAC9E,2EAA2E;QAC3E,uDAAuD;QACvD,EAAE;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACrC,MAAM;YACN,qEAAqE;YACrE,OAAO,EAAE,WAAW;YACpB,SAAS;YACT,QAAQ;YACR,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;YACjE,mEAAmE;YACnE,yEAAyE;YACzE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,SAAS;YACrF,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;YACrC,IAAI,EAAE,gBAAgB,MAAM,EAAE;YAC9B,OAAO,EAAE,eAAe;YACxB,aAAa,EAAE,cAAc;YAC7B,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,IAAI,CAAC;YAC1E,sEAAsE;YACtE,yEAAyE;YACzE,KAAK,EACJ,QAAQ,IAAI,SAAS,IAAI,CAAC,WAAW;gBACpC,CAAC,CAAC;oBACD,YAAY;oBACZ,SAAS;oBACT,UAAU,EAAE,iBAAiB;iBAC7B;gBACD,CAAC,CAAC,SAAS;SACb,CAAC,CAAC;QAEH,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,QAAQ,GAAG,sCAAsC,EAAE,CAAC;QAC1D,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE9B,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe;YACvC,CAAC,CAAC,YAAY,YAAY,EAAE;YAC5B,CAAC,CAAC,QAAQ;gBACT,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,MAAM,iBAAiB,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC,CAAC;QAC7G,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,qCAAqC,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAEzG,IAAI,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,gFAAgF,CAAC,CAAC;YACzH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO;QACR,CAAC;QAED,kCAAkC;QAClC,IAAI,SAA4C,CAAC;QACjD,IAAI,SAAoC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,cAAc,GAAG,YAAY,CAAC;YACpC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1C,kFAAkF;oBAClF,0FAA0F,CAC1F,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,GAAkB;oBAC3B,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;oBAC5D,OAAO,EAAE,WAAW;oBACpB,iEAAiE;oBACjE,qEAAqE;oBACrE,mEAAmE;oBACnE,sEAAsE;oBACtE,iEAAiE;oBACjE,mEAAmE;oBACnE,kEAAkE;oBAClE,UAAU,EAAE,QAAQ;wBACnB,CAAC,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE;4BACjD,IAAI,QAAQ,EAAE,CAAC;gCACd,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,6CAA6C,QAAQ,EAAE,CAAC,CAAC;4BACjG,CAAC;4BACD,CAAC;gCACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;oCACzC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;wCAC9B,YAAY;wCACZ,SAAS,EAAE,YAAY;wCACvB,UAAU,EAAE,iBAAiB;qCAC7B,CAAC,CAAC;oCACH,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EACpC,2CAA2C,YAAY,KAAK,IAAI,CAAC,KAAK,GAAG,CACzE,CAAC;gCACH,CAAC,CAAC,CAAC;gCAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;oCACvB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;oCAC5B,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gCAClF,CAAC;4BACF,CAAC;wBACF,CAAC;wBACD,CAAC,CAAC,SAAS;iBACZ,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,cAAc,CACjC;oBACC,MAAM;oBACN,WAAW;oBACX,oEAAoE;oBACpE,qEAAqE;oBACrE,wCAAwC;oBACxC,SAAS,EAAE,SAAS,IAAI,EAAE;oBAC1B,wBAAwB;oBACxB,yBAAyB,EAAE,EAAE;oBAC7B,cAAc,EAAE,IAAI;oBACpB,IAAI,EAAE,OAAO;oBACb,gBAAgB;oBAChB,SAAS,EAAE,EAAE;oBACb,YAAY,EAAE,EAAE;iBAChB,EACD,IAAI,CACJ,CAAC;gBACF,iDAAiD;gBACjD,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACnC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE;wBAChD,MAAM;wBACN,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACnC,CAAC,CAAC;oBACH,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,wCAAwC,SAAS,EAAE,CAAC,CAAC;oBAC5F,iEAAiE;oBACjE,+DAA+D;oBAC/D,IAAI,UAAU,EAAE,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;wBACtD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;wBACvC,CAAC;4BACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gCACzC,IAAI,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;oCAClE,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EACpC,qDAAqD,UAAU,CAAC,IAAI,EAAE,CACtE,CAAC;gCACH,CAAC;4BACF,CAAC,CAAC,CAAC;4BAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gCACvB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;gCAC5B,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BAClF,CAAC;wBACF,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;gBAC5B,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;gBACvB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;gBAE5E,yEAAyE;gBACzE,sEAAsE;gBACtE,yEAAyE;gBACzE,gEAAgE;gBAChE,IAAI,QAAQ,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBACtD,MAAM,gBAAgB,GAAG,SAAS,CAAC;oBACnC,CAAC;wBACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;4BACzC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;gCAC9B,YAAY;gCACZ,SAAS,EAAE,gBAAgB;gCAC3B,UAAU,EAAE,iBAAiB;6BAC7B,CAAC,CAAC;4BACH,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,2CAA2C,YAAY,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;wBACnH,CAAC,CAAC,CAAC;wBAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;4BACvB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;4BAC5B,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAClF,CAAC;oBACF,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,EAAE,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;YACtE,OAAO;QACR,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,yBAAyB,WAAW,yBAAyB,CAAC,CAAC;QACtG,IAAI,cAA2B,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChD,cAAc,GAAG,OAAO,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,OAAO,CAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACvC,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;YACvE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAClE,CAAC;CACD,CAAC"}

package/dist/cli/fleets/commands/fleet.daemon.install.command.descriptor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `vibes fleet daemon install` — render + install the fleet daemon as a login/boot
+ * service: a launchd plist (macOS), a systemd unit (Linux), or a scheduled task
+ * (Windows, ONLOGON). Runs `vibes fleet daemon` so the host comes back online
+ * automatically after a reboot.
+ */
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.daemon.install.command.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.daemon.install.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.daemon.install.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.daemon.install.command.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAmEjB,CAAC;AAEF,eAAe,UAAU,CAAC"}