@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/api/platform.api-client.impl.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Platform API Client — Universal Base Impl
+ *
+ * Scope-neutral base shared by the consumer and cloud variants. Contains the
+ * full HTTP client surface (bearer-auth, namespace pass-throughs, deployment
+ * helpers). It is universal — `fetch` + env resolvers only, no bun:/node:
+ * imports — so it lives in `.impl.ts` (no scope suffix) and survives both the
+ * consumer and cloud bundles. The variants differ only in their default origin:
+ *   - cross-origin (`platform.api-client-crossorigin.impl.ts`): declared service origin.
+ *   - cloud (`.impl.cloud.ts`): same-origin loopback.
+ *
+ * NEVER logs the auth token. Every request resolves the caller's bearer at call
+ * time through auth's `resolveCallerBearer` (the invocation principal on a
+ * request host, the device session on the CLI), so retained namespace objects
+ * cannot pin an expired token. A browser presents its cookie instead. The
+ * acting organization is an explicit `forActingOrg(id)` choice, never an env
+ * read (rc01 §3 "Bridge-key readers").
+ */
+import { BaseRuntimeClient, type RuntimeClientDescriptor } from '@vibesdotdev/kernel/client';
+import { type KindContext, type VibesRuntime, type ToolCallContext } from '@vibesdotdev/kernel';
+import { createPlatformClient } from '../client/http.ts';
+import type { PlatformClientOptions } from '../schemas/client.ts';
+import { type InfrastructureHealthResponse, type ListDeploymentsOptions, type ListDeploymentsResult, type PlatformApiClient } from './platform.api-client.types.ts';
+import type { InfrastructureSummary, UsageSummary } from '../schemas/client.ts';
+/**
+ * Runtime port `VibesRuntime` (Runtime SPEC `./client`): caller headers read
+ * `declaredScope`, which `RuntimeRef` does not carry, directly and through
+ * auth's `resolveCallerBearer` port.
+ */
+export declare class PlatformApiClientBase extends BaseRuntimeClient<VibesRuntime> implements PlatformApiClient {
+    protected httpOverrides: Partial<PlatformClientOptions>;
+    private apiClient;
+    private requestScoped;
+    private actingOrgId;
+    constructor(descriptor?: RuntimeClientDescriptor, context?: KindContext<VibesRuntime>, runtime?: VibesRuntime);
+    configureHttp(overrides: Partial<PlatformClientOptions>): void;
+    forRequest(overrides: Partial<PlatformClientOptions>): PlatformApiClient;
+    forActingOrg(actingOrgId: string): PlatformApiClient;
+    private createFork;
+    forToolCall(ctx: ToolCallContext): Promise<PlatformApiClient>;
+    getInfrastructureHealth(): Promise<InfrastructureHealthResponse>;
+    getInfrastructureSummary(): Promise<InfrastructureSummary>;
+    getInfrastructureUsage(): Promise<UsageSummary>;
+    listDeployments(options?: ListDeploymentsOptions): Promise<ListDeploymentsResult>;
+    get storage(): ReturnType<typeof createPlatformClient>['storage'];
+    get databases(): ReturnType<typeof createPlatformClient>['databases'];
+    get integrations(): ReturnType<typeof createPlatformClient>['integrations'];
+    get secrets(): ReturnType<typeof createPlatformClient>['secrets'];
+    get hostnames(): ReturnType<typeof createPlatformClient>['hostnames'];
+    get hosts(): ReturnType<typeof createPlatformClient>['hosts'];
+    get repositories(): ReturnType<typeof createPlatformClient>['repositories'];
+    get daemons(): ReturnType<typeof createPlatformClient>['daemons'];
+    get processes(): ReturnType<typeof createPlatformClient>['processes'];
+    get scheduledTasks(): ReturnType<typeof createPlatformClient>['scheduledTasks'];
+    get infrastructure(): ReturnType<typeof createPlatformClient>['infrastructure'];
+    get components(): ReturnType<typeof createPlatformClient>['components'];
+    get media(): ReturnType<typeof createPlatformClient>['storage'];
+    protected onDispose(): void;
+    private getApiClient;
+    protected ensureHttpOrigin(): Promise<string>;
+    /**
+     * The caller's default headers: its bearer (unless the caller supplied an
+     * Authorization header, or this is a browser presenting its cookie) and the
+     * explicit acting organization. A request-scoped fork carries only what its
+     * caller forwarded.
+     */
+    private callerHeaders;
+    private bearerGet;
+}
+export default PlatformApiClientBase;
+//# sourceMappingURL=platform.api-client.impl.d.ts.map

package/dist/api/platform.api-client.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.api-client.impl.d.ts","sourceRoot":"","sources":["../../src/api/platform.api-client.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAA6E,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAW3K,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAGN,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAMhF;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,iBAAiB,CAAC,YAAY,CAAE,YAAW,iBAAiB;IACtG,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAM;IAC7D,OAAO,CAAC,SAAS,CAAwD;IACzE,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,WAAW,CAAuB;gBAGzC,UAAU,GAAE,uBAAoE,EAChF,OAAO,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,EAAE,YAAY;IAKvB,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,IAAI;IAK9D,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,iBAAiB;IAOxE,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB;IAUpD,OAAO,CAAC,UAAU;IAMZ,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqB7D,uBAAuB,IAAI,OAAO,CAAC,4BAA4B,CAAC;IAIhE,wBAAwB,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAI1D,sBAAsB,IAAI,OAAO,CAAC,YAAY,CAAC;IAI/C,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAY3F,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAEhE;IAED,IAAI,SAAS,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAEpE;IAED,IAAI,YAAY,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,cAAc,CAAC,CAE1E;IAED,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAEhE;IAED,IAAI,SAAS,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAEpE;IAED,IAAI,KAAK,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAE5D;IAED,IAAI,YAAY,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,cAAc,CAAC,CAE1E;IAID,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAEhE;IAED,IAAI,SAAS,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAEpE;IAED,IAAI,cAAc,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,CAAC,CAE9E;IAED,IAAI,cAAc,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,CAAC,CAE9E;IAED,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,YAAY,CAAC,CAEtE;IAED,IAAI,KAAK,IAAI,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAE9D;cAEkB,SAAS,IAAI,IAAI;IAMpC,OAAO,CAAC,YAAY;cA0BJ,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAanD;;;;;OAKG;YACW,aAAa;YAcb,SAAS;CAoCvB;AAED,eAAe,qBAAqB,CAAC"}

package/dist/api/platform.api-client.impl.js

@@ -0,0 +1,247 @@
+/**
+ * Platform API Client — Universal Base Impl
+ *
+ * Scope-neutral base shared by the consumer and cloud variants. Contains the
+ * full HTTP client surface (bearer-auth, namespace pass-throughs, deployment
+ * helpers). It is universal — `fetch` + env resolvers only, no bun:/node:
+ * imports — so it lives in `.impl.ts` (no scope suffix) and survives both the
+ * consumer and cloud bundles. The variants differ only in their default origin:
+ *   - cross-origin (`platform.api-client-crossorigin.impl.ts`): declared service origin.
+ *   - cloud (`.impl.cloud.ts`): same-origin loopback.
+ *
+ * NEVER logs the auth token. Every request resolves the caller's bearer at call
+ * time through auth's `resolveCallerBearer` (the invocation principal on a
+ * request host, the device session on the CLI), so retained namespace objects
+ * cannot pin an expired token. A browser presents its cookie instead. The
+ * acting organization is an explicit `forActingOrg(id)` choice, never an env
+ * read (rc01 §3 "Bridge-key readers").
+ */
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import { CapabilityError, CaughtFailureSchema, isCapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { InfrastructureHealthResponseSchema, InfrastructureSummarySchema, UsageSummarySchema, ListDeploymentsResponseSchema } from "./cloud-response.schemas.js";
+import { readTrustedRunContext, requireToolCallerBearer } from '@vibesdotdev/tools/agents/trusted-context';
+import { originOf, serviceEnvironment } from '@vibesdotdev/infra-core/service';
+import { resolveCallerBearer } from '@vibesdotdev/auth/caller-bearer';
+import { createPlatformClient } from "../client/http.js";
+import { platformNotSignedInError, platformRequestRefusedError } from "./platform.api-client.types.js";
+/** The header a non-browser caller uses to say which organization it acts in. */
+const ACTIVE_ORG_HEADER_NAME = 'x-vibes-active-org';
+/**
+ * Runtime port `VibesRuntime` (Runtime SPEC `./client`): caller headers read
+ * `declaredScope`, which `RuntimeRef` does not carry, directly and through
+ * auth's `resolveCallerBearer` port.
+ */
+export class PlatformApiClientBase extends BaseRuntimeClient {
+    httpOverrides = {};
+    apiClient = null;
+    requestScoped = false;
+    actingOrgId = null;
+    constructor(descriptor = { id: 'platform', kind: 'runtime/client' }, context, runtime) {
+        super(descriptor, context, runtime);
+    }
+    configureHttp(overrides) {
+        this.httpOverrides = overrides;
+        this.apiClient = null;
+    }
+    forRequest(overrides) {
+        const forked = this.createFork();
+        forked.requestScoped = true;
+        forked.configureHttp({ credentials: 'omit', ...overrides });
+        return forked;
+    }
+    forActingOrg(actingOrgId) {
+        const orgId = actingOrgId.trim();
+        if (!orgId)
+            throw new Error('forActingOrg requires a non-empty organization id.');
+        const forked = this.createFork();
+        forked.requestScoped = this.requestScoped;
+        forked.actingOrgId = orgId;
+        forked.configureHttp({ ...this.httpOverrides });
+        return forked;
+    }
+    createFork() {
+        return z.instanceof(PlatformApiClientBase).parse(Reflect.construct(this.constructor, [this.descriptor, undefined, this.runtime]));
+    }
+    async forToolCall(ctx) {
+        const trusted = readTrustedRunContext(ctx);
+        if (!trusted.actorUserId || trusted.actorUserId !== trusted.userId)
+            throw new Error('Platform tool calls require the authenticated actor');
+        const bearer = await requireToolCallerBearer(this.runtime, ctx, 'platform');
+        // The declared `platform` service; an undeclared one fails NOT_FOUND.
+        const origin = originOf(await this.runtime
+            .query('infra/service')
+            .withId('platform')
+            .resolve(), await serviceEnvironment(this.runtime), 'primary');
+        const headers = { authorization: `Bearer ${bearer}` };
+        if (trusted.orgId)
+            headers[ACTIVE_ORG_HEADER_NAME] = trusted.orgId;
+        return this.forRequest({ origin, headers });
+    }
+    // -- Top-level convenience methods (replaces platform-http.ts) -----------
+    async getInfrastructureHealth() {
+        return this.bearerGet('/api/infrastructure/health', InfrastructureHealthResponseSchema);
+    }
+    async getInfrastructureSummary() {
+        return this.bearerGet('/api/infrastructure/summary', InfrastructureSummarySchema);
+    }
+    async getInfrastructureUsage() {
+        return this.bearerGet('/api/infrastructure/usage', UsageSummarySchema);
+    }
+    async listDeployments(options = {}) {
+        const qs = new URLSearchParams();
+        if (options.service)
+            qs.set('service', options.service);
+        if (options.limit !== undefined)
+            qs.set('limit', String(options.limit));
+        const suffix = qs.toString();
+        const path = suffix ? `/api/deployments?${suffix}` : '/api/deployments';
+        return this.bearerGet(path, ListDeploymentsResponseSchema, () => ({ deployments: [], notImplemented: true }));
+    }
+    // -- Namespace pass-throughs (preserve existing surface) ----------------
+    get storage() {
+        return this.getApiClient().storage;
+    }
+    get databases() {
+        return this.getApiClient().databases;
+    }
+    get integrations() {
+        return this.getApiClient().integrations;
+    }
+    get secrets() {
+        return this.getApiClient().secrets;
+    }
+    get hostnames() {
+        return this.getApiClient().hostnames;
+    }
+    get hosts() {
+        return this.getApiClient().hosts;
+    }
+    get repositories() {
+        return this.getApiClient().repositories;
+    }
+    // codeSessions getter removed — use @vibesdotdev/code-sessions' createSsrCodeSessionsClient.
+    get daemons() {
+        return this.getApiClient().daemons;
+    }
+    get processes() {
+        return this.getApiClient().processes;
+    }
+    get scheduledTasks() {
+        return this.getApiClient().scheduledTasks;
+    }
+    get infrastructure() {
+        return this.getApiClient().infrastructure;
+    }
+    get components() {
+        return this.getApiClient().components;
+    }
+    get media() {
+        return this.getApiClient().storage;
+    }
+    onDispose() {
+        this.apiClient = null;
+    }
+    // -- Private --------------------------------------------------------------
+    getApiClient() {
+        if (!this.apiClient) {
+            const configuredResolveHeaders = this.httpOverrides.resolveHeaders;
+            const httpOptions = {
+                ...this.httpOverrides,
+                origin: this.httpOverrides.origin ?? '',
+                resolveOrigin: async () => {
+                    const origin = await this.ensureHttpOrigin();
+                    httpOptions.origin = origin;
+                    return origin;
+                },
+                resolveHeaders: async () => {
+                    // `http.ts` layers the static headers over these; both count as explicit.
+                    const explicit = new Headers(await configuredResolveHeaders?.());
+                    const supplied = new Headers(explicit);
+                    for (const [name, value] of new Headers(this.httpOverrides.headers))
+                        supplied.set(name, value);
+                    const headers = await this.callerHeaders(supplied);
+                    for (const [name, value] of explicit)
+                        headers.set(name, value);
+                    return headers;
+                }
+            };
+            this.apiClient = createPlatformClient(this.runtime, httpOptions);
+        }
+        return this.apiClient;
+    }
+    async ensureHttpOrigin() {
+        await this.ensureLoaded();
+        const origin = this.httpOverrides.origin;
+        if (!origin) {
+            throw new CapabilityError('Platform API client origin is not configured. Resolve via createPlatformApiClient(runtime) or pass origin in configureHttp().', 'UNAVAILABLE', { reason: 'platform-origin-unconfigured', retryable: false });
+        }
+        return origin.replace(/\/$/, '');
+    }
+    /**
+     * The caller's default headers: its bearer (unless the caller supplied an
+     * Authorization header, or this is a browser presenting its cookie) and the
+     * explicit acting organization. A request-scoped fork carries only what its
+     * caller forwarded.
+     */
+    async callerHeaders(explicit) {
+        const headers = new Headers();
+        if (this.requestScoped)
+            return headers;
+        if (!explicit.has('authorization') && this.runtime.declaredScope.surface !== 'browser') {
+            const bearer = await resolveCallerBearer(this.runtime);
+            if (bearer) {
+                headers.set('authorization', `Bearer ${bearer}`);
+                headers.set('accept', 'application/json');
+            }
+        }
+        if (this.actingOrgId)
+            headers.set(ACTIVE_ORG_HEADER_NAME, this.actingOrgId);
+        return headers;
+    }
+    async bearerGet(path, schema, missing) {
+        const origin = await this.ensureHttpOrigin();
+        const url = `${origin}${path}`;
+        const fetchFn = this.httpOverrides.fetch ?? globalThis.fetch;
+        const explicit = new Headers(await this.httpOverrides.resolveHeaders?.());
+        for (const [name, value] of new Headers(this.httpOverrides.headers))
+            explicit.set(name, value);
+        const headers = await this.callerHeaders(explicit);
+        headers.set('accept', 'application/json');
+        for (const [name, value] of explicit)
+            headers.set(name, value);
+        let response;
+        try {
+            response = await fetchFn(url, { method: 'GET', headers, credentials: this.httpOverrides.credentials });
+        }
+        catch (error) {
+            const failure = CaughtFailureSchema.parse(error);
+            if (isCapabilityError(failure))
+                throw failure;
+            throw new CapabilityError('The Platform request could not be completed.', 'UNAVAILABLE', {
+                reason: 'platform-request-failed', details: { failure: valueFreeFailure(failure) }
+            });
+        }
+        if (response.status === 404 && missing)
+            return missing();
+        if (response.status === 401) {
+            throw platformNotSignedInError();
+        }
+        if (!response.ok) {
+            throw platformRequestRefusedError(response.status);
+        }
+        try {
+            return schema.parse(await response.json());
+        }
+        catch (error) {
+            const failure = CaughtFailureSchema.parse(error);
+            if (isCapabilityError(failure))
+                throw failure;
+            throw new CapabilityError('The Platform service returned an invalid response.', 'UNAVAILABLE', {
+                reason: 'platform-response-invalid', details: { status: response.status, failure: valueFreeFailure(failure) }
+            });
+        }
+    }
+}
+export default PlatformApiClientBase;
+//# sourceMappingURL=platform.api-client.impl.js.map

package/dist/api/platform.api-client.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.api-client.impl.js","sourceRoot":"","sources":["../../src/api/platform.api-client.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,iBAAiB,EAAgC,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAA6D,MAAM,qBAAqB,CAAC;AAC3K,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,kCAAkC,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjK,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAC3G,OAAO,EACN,QAAQ,EACR,kBAAkB,EAGlB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EACN,wBAAwB,EACxB,2BAA2B,EAK3B,MAAM,gCAAgC,CAAC;AAGxC,iFAAiF;AACjF,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAGpD;;;;GAIG;AACH,MAAM,OAAO,qBAAsB,SAAQ,iBAA+B;IAC/D,aAAa,GAAmC,EAAE,CAAC;IACrD,SAAS,GAAmD,IAAI,CAAC;IACjE,aAAa,GAAG,KAAK,CAAC;IACtB,WAAW,GAAkB,IAAI,CAAC;IAE1C,YACC,aAAsC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAChF,OAAmC,EACnC,OAAsB;QAEtB,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,aAAa,CAAC,SAAyC;QACtD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,UAAU,CAAC,SAAyC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,MAAM,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IACf,CAAC;IAED,YAAY,CAAC,WAAmB;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QAC1C,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,UAAU;QACjB,OAAO,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAC/C,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAC/E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAoB;QACrC,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM;YACjE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC5E,sEAAsE;QACtE,MAAM,MAAM,GAAG,QAAQ,CACtB,MAAM,IAAI,CAAC,OAAO;aAChB,KAAK,CAA2C,eAAe,CAAC;aAChE,MAAM,CAAC,UAAU,CAAC;aAClB,OAAO,EAAE,EACX,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EACtC,SAAS,CACT,CAAC;QACF,MAAM,OAAO,GAA0B,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC;QAC7E,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QACnE,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,2EAA2E;IAE3E,KAAK,CAAC,uBAAuB;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,4BAA4B,EAAE,kCAAkC,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,wBAAwB;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkC,EAAE;QACzD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,OAAO;YAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,6BAA6B,EACxD,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,0EAA0E;IAE1E,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;IACpC,CAAC;IAED,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;IACpC,CAAC;IAED,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,6FAA6F;IAE7F,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;IACpC,CAAC;IAED,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,IAAI,cAAc;QACjB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,cAAc,CAAC;IAC3C,CAAC;IAED,IAAI,cAAc;QACjB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,cAAc,CAAC;IAC3C,CAAC;IAED,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC;IACvC,CAAC;IAED,IAAI,KAAK;QACR,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC;IACpC,CAAC;IAEkB,SAAS;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,4EAA4E;IAEpE,YAAY;QACnB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,wBAAwB,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;YACnE,MAAM,WAAW,GAA0B;gBAC1C,GAAG,IAAI,CAAC,aAAa;gBACrB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE;gBACvC,aAAa,EAAE,KAAK,IAAI,EAAE;oBACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC7C,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;oBAC5B,OAAO,MAAM,CAAC;gBACf,CAAC;gBACD,cAAc,EAAE,KAAK,IAAI,EAAE;oBAC1B,0EAA0E;oBAC1E,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,MAAM,wBAAwB,EAAE,EAAE,CAAC,CAAC;oBACjE,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;wBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC/F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;oBACnD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ;wBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC/D,OAAO,OAAO,CAAC;gBAChB,CAAC;aACD,CAAC;YACF,IAAI,CAAC,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAES,KAAK,CAAC,gBAAgB;QAC/B,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACxB,+HAA+H,EAC/H,aAAa,EACb,EAAE,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC5D,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,aAAa,CAAC,QAAiB;QAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,OAAO,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAC3C,CAAC;QACF,CAAC;QACD,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,IAAY,EAAE,MAAoB,EAAE,OAAiB;QAC/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/D,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,iBAAiB,CAAC,OAAO,CAAC;gBAAE,MAAM,OAAO,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,8CAA8C,EAAE,aAAa,EAAE;gBACxF,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE;aAClF,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,wBAAwB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,2BAA2B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,iBAAiB,CAAC,OAAO,CAAC;gBAAE,MAAM,OAAO,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,oDAAoD,EAAE,aAAa,EAAE;gBAC9F,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE;aAC7G,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;CACD;AAED,eAAe,qBAAqB,CAAC"}

package/dist/api/platform.api-client.types.d.ts

@@ -0,0 +1,225 @@
+/**
+ * Platform API Client — Types
+ *
+ * Public interface every `PlatformApiClient` implementation MUST satisfy.
+ * Both `platform.api-client-crossorigin.impl.ts` (cross-origin bearer-token) and
+ * `api-client.impl.cloud.ts` (in-process) implement this contract so
+ * consumers (`getVibesClient<PlatformApiClient>('platform', runtime)`) can resolve
+ * a uniform surface regardless of scope.
+ *
+ * Surface coverage:
+ *   - Infrastructure aggregate endpoints (CLI status/services command).
+ *   - Recent deployments (graceful 404 when the endpoint isn't deployed).
+ *   - Existing namespace getters (`.hosts`, `.processes`, `.daemons`, …)
+ *     carried over from the prior `PlatformClient` so all current consumers
+ *     migrate in one step rather than fragmenting the surface.
+ */
+import type { RuntimeClient } from '@vibesdotdev/kernel/client';
+import { CapabilityError, type CaughtFailure, type ToolCallContext } from '@vibesdotdev/kernel';
+import type { CodeSessionRuntimeConfig, SessionHostTarget } from '@vibesdotdev/agent-execution/code-session';
+import type { VibesLink } from '@vibesdotdev/shared/schemas';
+import type { createPlatformClient } from '../client/http.ts';
+import type { HealthStatus, InfrastructureSummary, PlatformClientOptions, UsageSummary } from '../schemas/client.ts';
+/** Aggregator response from `/api/infrastructure/health`. */
+export type { InfrastructureHealthResponse } from '../schemas/infrastructure.ts';
+import type { InfrastructureHealthResponse } from '../schemas/infrastructure.ts';
+export interface DeploymentRow {
+    id: string;
+    service: string;
+    version: string;
+    environment: string;
+    status: 'succeeded' | 'failed' | 'in_progress' | 'rolled_back' | string;
+    deployedAt: string;
+    deployedBy?: string | null;
+    notes?: string | null;
+}
+export interface ListDeploymentsOptions {
+    /** Filter to deployments for a specific service id/name. */
+    service?: string;
+    /** Maximum number of rows. */
+    limit?: number;
+}
+export interface ListDeploymentsResult {
+    deployments: DeploymentRow[];
+    /** True when the endpoint returned 404 — caller renders the "not implemented" notice. */
+    notImplemented?: boolean;
+}
+export type PlatformCodeSessionStatus = 'initializing' | 'active' | 'error' | 'ended';
+/**
+ * Optional seed context attached at create time — the task/intent a session was
+ * opened FOR (e.g. from a work item). Carried on the record so surfaces can show
+ * "this session is for <title>", and merged into the sandbox environment as
+ * `VIBES_SEED_*` so an agent or setup script inside the workspace can pick it up.
+ * Source-tagged (not work-item-specific) so future seeds — an issue, a PR — fit
+ * the same field.
+ */
+export interface CodeSessionSeed {
+    /** Where the seed came from, e.g. `'work-item'`. */
+    source: string;
+    /** Human-readable task title. */
+    title: string;
+    /** Originating record id (e.g. the work item id), if any. */
+    ref?: string;
+    /** Longer task description / body, if any. */
+    body?: string;
+}
+export interface PlatformCodeSessionRecord {
+    sessionId: string;
+    repositoryId: string | null;
+    repositoryName: string | null;
+    ephemeral?: boolean;
+    hostTarget: SessionHostTarget;
+    runtimeConfig: CodeSessionRuntimeConfig;
+    status: PlatformCodeSessionStatus;
+    /**
+     * Why the session is in this status, when the status alone is not actionable.
+     *
+     * Set when preparation fails AFTER the create request has already been
+     * answered: at that point the record is the only place the reason can reach the
+     * person, because there is no longer a response to put it in.
+     */
+    statusReason?: string;
+    previewUrl: string | null;
+    workspacePath: string;
+    checkoutRef: string | null;
+    ownerType: 'user' | 'organization';
+    ownerId: string;
+    createdAt: string;
+    lastActivityAt: string;
+    /**
+     * ISO timestamp of the last incremental usage emission for this session.
+     * Written by the code-session metering cron
+     * (`/api/internal/code-sessions/meter`) after each billable delta so the
+     * next tick — and the final teardown emit — only bills compute accrued
+     * since this instant (never double-counting from `createdAt`). Absent for
+     * sessions that have never been metered (delta then falls back to
+     * `createdAt`).
+     */
+    lastMeteredAt?: string;
+    /**
+     * Seed context this session was opened for (see {@link CodeSessionSeed}).
+     * Absent for sessions created without a seed. Persisted verbatim in the
+     * per-owner JSON document, so surfaces can render "opened for <title>".
+     */
+    seed?: CodeSessionSeed;
+    /**
+     * Cross-domain references to other units of work (work items, forge
+     * issues, projects, etc.). Uses the shared {@link VibesLink} envelope so
+     * the code session — the one unit-of-work owner that previously had no
+     * outbound links — can participate in the same relationship graph as
+     * workboard, work, autoloop, and applet records.
+     */
+    links?: VibesLink[];
+}
+export interface ListPlatformCodeSessionsOptions {
+    status?: PlatformCodeSessionStatus;
+}
+export interface CreatePlatformCodeSessionInput {
+    repositoryId?: string;
+    ephemeral?: boolean;
+    checkoutRef?: string;
+    hostTarget?: SessionHostTarget;
+    runtimeConfig?: CodeSessionRuntimeConfig;
+    initialEnv?: Record<string, string>;
+    exposedPorts?: string[];
+    /** Seed context to attach to the session (see {@link CodeSessionSeed}). */
+    seed?: CodeSessionSeed;
+    /** Links to attach to the session record at creation time. */
+    links?: VibesLink[];
+}
+/** @deprecated — removed. Use @vibesdotdev/code-sessions' createSsrCodeSessionsClient instead. */
+export interface PlatformCodeSessionsClient {
+    list(options?: ListPlatformCodeSessionsOptions): Promise<PlatformCodeSessionRecord[]>;
+    get(sessionId: string): Promise<PlatformCodeSessionRecord>;
+    create(input: CreatePlatformCodeSessionInput): Promise<PlatformCodeSessionRecord>;
+    delete(sessionId: string): Promise<void>;
+}
+/**
+ * Canonical PlatformApiClient. Surfaces consume this via
+ * `getVibesClient<PlatformApiClient>('platform', runtime)`.
+ *
+ * The namespace getters (`.hosts`, `.processes`, …) delegate to the
+ * underlying `createPlatformClient()` HTTP transport; they preserve the rich
+ * surface area existing consumers already depend on. The top-level
+ * methods (`getInfrastructure*`, `listDeployments`) are the CLI / Svelte
+ * loader surface that previously reinvented bare `fetch` calls.
+ */
+export interface PlatformApiClient extends RuntimeClient {
+    /** Idempotent lazy init — matches the `BaseRuntimeClient` lifecycle. */
+    ensureLoaded(): Promise<void>;
+    /**
+     * Override the underlying HTTP client (cookies, headers, fetch impl)
+     * IN PLACE — mutates this instance. Suitable for single-process callers
+     * (CLI, browser). NEVER call from SSR `+server.ts` handlers; concurrent
+     * requests would race. SSR callers MUST use `forRequest(...)`.
+     */
+    configureHttp(overrides: Partial<PlatformClientOptions>): void;
+    /**
+     * Fork this client into a per-request instance bound to the given HTTP
+     * overrides (origin / fetch / headers). Returns a NEW `PlatformApiClient`
+     * — does NOT mutate `this`. Use from SvelteKit `+server.ts` handlers and
+     * any other SSR per-request context. Ambient bearer/org defaults are
+     * excluded; identity is an explicit `Authorization` header.
+     *
+     *     export async function load(event) {
+     *       const platform = (await getVibesPlatformClient(runtime)).forRequest({
+     *         origin: PUBLIC_VIBES_PLATFORM_ORIGIN,
+     *         fetch: event.fetch,
+     *         headers: { authorization: `Bearer ${event.locals.sessionToken}` }
+     *       });
+     *       return await platform.hosts.list();
+     *     }
+     */
+    forRequest(overrides: Partial<PlatformClientOptions>): PlatformApiClient;
+    /**
+     * Fork that acts in `actingOrgId` (`x-vibes-active-org`): a Bearer caller has
+     * no `activeOrg` cookie, so the caller names the organization explicitly.
+     */
+    forActingOrg(actingOrgId: string): PlatformApiClient;
+    /** Fork with only the authenticated tool caller's credentials and active organization. */
+    forToolCall(ctx: ToolCallContext): Promise<PlatformApiClient>;
+    /** GET /api/infrastructure/health — aggregated per-service health. */
+    getInfrastructureHealth(): Promise<InfrastructureHealthResponse>;
+    /** GET /api/infrastructure/summary — counts + totals. */
+    getInfrastructureSummary(): Promise<InfrastructureSummary>;
+    /** GET /api/infrastructure/usage — bytes/operations counters. */
+    getInfrastructureUsage(): Promise<UsageSummary>;
+    /**
+     * GET /api/deployments — recent deployments. Returns `notImplemented:true`
+     * when platform-web has no /api/deployments endpoint yet (Wave 4 finding).
+     */
+    listDeployments(options?: ListDeploymentsOptions): Promise<ListDeploymentsResult>;
+    readonly storage: ReturnType<typeof createPlatformClient>['storage'];
+    readonly databases: ReturnType<typeof createPlatformClient>['databases'];
+    readonly integrations: ReturnType<typeof createPlatformClient>['integrations'];
+    readonly secrets: ReturnType<typeof createPlatformClient>['secrets'];
+    readonly hostnames: ReturnType<typeof createPlatformClient>['hostnames'];
+    readonly hosts: ReturnType<typeof createPlatformClient>['hosts'];
+    readonly repositories: ReturnType<typeof createPlatformClient>['repositories'];
+    readonly daemons: ReturnType<typeof createPlatformClient>['daemons'];
+    readonly processes: ReturnType<typeof createPlatformClient>['processes'];
+    readonly scheduledTasks: ReturnType<typeof createPlatformClient>['scheduledTasks'];
+    readonly infrastructure: ReturnType<typeof createPlatformClient>['infrastructure'];
+    readonly components: ReturnType<typeof createPlatformClient>['components'];
+    readonly media: ReturnType<typeof createPlatformClient>['storage'];
+}
+/** `AUTH_REQUIRED` when the Platform service answers 401: no caller bearer. */
+export declare const PLATFORM_NOT_SIGNED_IN_REASON = "platform-not-signed-in";
+/** `UNAVAILABLE` when the Platform service refuses with any other non-2xx status. */
+export declare const PLATFORM_REQUEST_REFUSED_REASON = "platform-request-refused";
+export declare function platformNotSignedInError(): CapabilityError;
+export declare function platformRequestRefusedError(status: number): CapabilityError;
+export declare function isPlatformNotSignedIn(error: CaughtFailure): error is CapabilityError;
+/**
+ * The `{ status, message }` of a Platform HTTP refusal, or null when `error`
+ * is not one. Matches both refusal reasons; a refusal without a numeric
+ * status in details is not a refusal. The message is factory-owned stable
+ * text — read from the matching factory, never from the matched error, so a
+ * hostile message on the same reason cannot reach a rendered surface.
+ */
+export declare function platformRequestRefusal(error: CaughtFailure): {
+    status: number;
+    message: string;
+} | null;
+export type { HealthStatus, InfrastructureSummary, UsageSummary };
+//# sourceMappingURL=platform.api-client.types.d.ts.map

package/dist/api/platform.api-client.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.api-client.types.d.ts","sourceRoot":"","sources":["../../src/api/platform.api-client.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAqB,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEnH,OAAO,KAAK,EACX,wBAAwB,EACxB,iBAAiB,EACjB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EACX,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,EACrB,YAAY,EACZ,MAAM,sBAAsB,CAAC;AAI9B,6DAA6D;AAC7D,YAAY,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AACjF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,aAAa,GAAG,MAAM,CAAC;IACxE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACtC,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACrC,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,yFAAyF;IACzF,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAID,MAAM,MAAM,yBAAyB,GAAG,cAAc,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC/B,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,aAAa,EAAE,wBAAwB,CAAC;IACxC,MAAM,EAAE,yBAAyB,CAAC;IAClC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,cAAc,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,+BAA+B;IAC/C,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACnC;AAED,MAAM,WAAW,8BAA8B;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;CACpB;AAED,kGAAkG;AAClG,MAAM,WAAW,0BAA0B;IAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,+BAA+B,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACtF,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClF,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACvD,wEAAwE;IACxE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9B;;;;;OAKG;IACH,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC;IAE/D;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,iBAAiB,CAAC;IAEzE;;;OAGG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,CAAC;IAErD,0FAA0F;IAC1F,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAI9D,sEAAsE;IACtE,uBAAuB,IAAI,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACjE,yDAAyD;IACzD,wBAAwB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC3D,iEAAiE;IACjE,sBAAsB,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD;;;OAGG;IACH,eAAe,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAGlF,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,cAAc,CAAC,CAAC;IAC/E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAAC;IACzE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,cAAc,CAAC,CAAC;IAE/E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,CAAC;IACzE,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACnF,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACnF,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3E,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,SAAS,CAAC,CAAC;CACnE;AAQD,+EAA+E;AAC/E,eAAO,MAAM,6BAA6B,2BAA2B,CAAC;AACtE,qFAAqF;AACrF,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAE1E,wBAAgB,wBAAwB,IAAI,eAAe,CAK1D;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAK3E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,eAAe,CAEpF;AAID;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASvG;AAID,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC"}

package/dist/api/platform.api-client.types.js

@@ -0,0 +1,63 @@
+/**
+ * Platform API Client — Types
+ *
+ * Public interface every `PlatformApiClient` implementation MUST satisfy.
+ * Both `platform.api-client-crossorigin.impl.ts` (cross-origin bearer-token) and
+ * `api-client.impl.cloud.ts` (in-process) implement this contract so
+ * consumers (`getVibesClient<PlatformApiClient>('platform', runtime)`) can resolve
+ * a uniform surface regardless of scope.
+ *
+ * Surface coverage:
+ *   - Infrastructure aggregate endpoints (CLI status/services command).
+ *   - Recent deployments (graceful 404 when the endpoint isn't deployed).
+ *   - Existing namespace getters (`.hosts`, `.processes`, `.daemons`, …)
+ *     carried over from the prior `PlatformClient` so all current consumers
+ *     migrate in one step rather than fragmenting the surface.
+ */
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+// -- Errors ------------------------------------------------------------------
+//
+// HTTP failures are canonical `CapabilityError`s, never Error subclasses.
+// Both refusals carry the HTTP status in `details.status`; callers match by
+// reason (`isPlatformNotSignedIn`, `platformRequestRefusal`), never by class.
+/** `AUTH_REQUIRED` when the Platform service answers 401: no caller bearer. */
+export const PLATFORM_NOT_SIGNED_IN_REASON = 'platform-not-signed-in';
+/** `UNAVAILABLE` when the Platform service refuses with any other non-2xx status. */
+export const PLATFORM_REQUEST_REFUSED_REASON = 'platform-request-refused';
+export function platformNotSignedInError() {
+    return new CapabilityError('Not signed in to platform.vibes.dev. Run `vibes auth login`.', 'AUTH_REQUIRED', {
+        reason: PLATFORM_NOT_SIGNED_IN_REASON,
+        details: { status: 401 }
+    });
+}
+export function platformRequestRefusedError(status) {
+    return new CapabilityError('The Platform service refused the request.', 'UNAVAILABLE', {
+        reason: PLATFORM_REQUEST_REFUSED_REASON,
+        details: { status }
+    });
+}
+export function isPlatformNotSignedIn(error) {
+    return isCapabilityError(error) && error.reason === PLATFORM_NOT_SIGNED_IN_REASON;
+}
+const PlatformRefusalDetailsSchema = z.object({ status: z.number() });
+/**
+ * The `{ status, message }` of a Platform HTTP refusal, or null when `error`
+ * is not one. Matches both refusal reasons; a refusal without a numeric
+ * status in details is not a refusal. The message is factory-owned stable
+ * text — read from the matching factory, never from the matched error, so a
+ * hostile message on the same reason cannot reach a rendered surface.
+ */
+export function platformRequestRefusal(error) {
+    if (!isCapabilityError(error))
+        return null;
+    const details = PlatformRefusalDetailsSchema.safeParse(error.details);
+    if (!details.success)
+        return null;
+    if (error.reason === PLATFORM_NOT_SIGNED_IN_REASON)
+        return { status: details.data.status, message: platformNotSignedInError().message };
+    if (error.reason === PLATFORM_REQUEST_REFUSED_REASON)
+        return { status: details.data.status, message: platformRequestRefusedError(details.data.status).message };
+    return null;
+}
+//# sourceMappingURL=platform.api-client.types.js.map

package/dist/api/platform.api-client.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.api-client.types.js","sourceRoot":"","sources":["../../src/api/platform.api-client.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAA4C,MAAM,qBAAqB,CAAC;AACnH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AA8N5B,+EAA+E;AAC/E,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AACtE,qFAAqF;AACrF,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAE1E,MAAM,UAAU,wBAAwB;IACvC,OAAO,IAAI,eAAe,CAAC,8DAA8D,EAAE,eAAe,EAAE;QAC3G,MAAM,EAAE,6BAA6B;QACrC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;KACxB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACzD,OAAO,IAAI,eAAe,CAAC,2CAA2C,EAAE,aAAa,EAAE;QACtF,MAAM,EAAE,+BAA+B;QACvC,OAAO,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAoB;IACzD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,6BAA6B,CAAC;AACnF,CAAC;AAED,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAC1D,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,6BAA6B;QACjD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,OAAO,EAAE,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,+BAA+B;QACnD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3G,OAAO,IAAI,CAAC;AACb,CAAC"}