@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/cli/fleets/lib/daemon-credentials-store.js

@@ -0,0 +1,159 @@
+import { resolveFileSystemAdapter, publishPrivateFile } from '@vibesdotdev/filesystem';
+/**
+ * The fleet daemon's connection-bearer store (RC05): a `secrets/store` the
+ * daemon and `vibes fleet daemon install` compose onto the runtime they were
+ * handed, bound to one host id.
+ *
+ * It is `selection: 'by-id'`, so scope resolution never picks it and it never
+ * shadows the host's own stores; a reader names it
+ * ({@link FLEET_DAEMON_TOKEN_REFERENCE}) and resolves through
+ * `runtime.resolveCredential`. It answers only {@link FLEET_DAEMON_TOKEN_KEY},
+ * from `<vibesHome>/hosts/<hostId>.daemon-token` under the handed runtime's
+ * path roots, beside the host-token state (`host-token-store.ts`):
+ *
+ *   - an absent or empty file is `undefined`, which the kernel reports as
+ *     `credential-not-set`;
+ *   - a file other users can read is refused `PERMISSION_DENIED`
+ *     `credential-file-exposed` (the enrollment-token file's check);
+ *   - `set` writes mode 0600 atomically (a private temp file, then rename);
+ *   - `unset` removes the file;
+ *   - `list`, `getAll` and `setAll` are refused: the store is one key.
+ *
+ * The value is the same for every tier: the bearer belongs to the host, not
+ * to an environment.
+ */
+import { CapabilityError, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { secretsStoreKind } from '@vibesdotdev/secrets/kinds/store.kind';
+import { readPrivateCredentialFile, hostsDir } from "./host-token-store.js";
+/** The id of the daemon's connection-bearer store. */
+export const FLEET_DAEMON_CREDENTIALS_STORE_ID = 'fleet.daemon-credentials';
+/**
+ * The one key the store answers. Services installed before the bearer moved
+ * here carried it under the same name in their environment; only
+ * `vibes fleet daemon install` reads that, to migrate it.
+ */
+export const FLEET_DAEMON_TOKEN_KEY = 'FLEET_DAEMON_TOKEN';
+/** How the daemon names its bearer to `runtime.resolveCredential`. */
+export const FLEET_DAEMON_TOKEN_REFERENCE = {
+    source: 'secret',
+    key: FLEET_DAEMON_TOKEN_KEY,
+    store: FLEET_DAEMON_CREDENTIALS_STORE_ID
+};
+/** The current by-id registration for each runtime; kernel assets remain the source of resolution. */
+const daemonCredentialRegistrations = new WeakMap();
+/** The bearer file for `hostId` under the handed roots' Vibes home. */
+export function defaultDaemonTokenFile(roots, hostId) {
+    return `${hostsDir(roots)}/${hostId}.daemon-token`;
+}
+const descriptor = {
+    id: FLEET_DAEMON_CREDENTIALS_STORE_ID,
+    kind: 'secrets/store',
+    name: 'Fleet daemon credentials',
+    description: "This host's fleet daemon connection bearer, reachable only by id.",
+    tags: ['fleet', 'by-id'],
+    enabled: true,
+    backend: 'fleet/daemon',
+    selection: 'by-id',
+    tiers: ['local', 'dev', 'staging', 'production'],
+    priority: 0
+};
+function oneKeyStore(operation) {
+    return new CapabilityError(`The fleet daemon credential store holds only ${FLEET_DAEMON_TOKEN_KEY}; ${operation} is not supported.`, 'PERMISSION_DENIED', { reason: 'fleet-daemon-credentials-single-key', retryable: false, details: { operation } });
+}
+function unsupportedKey(key) {
+    return new CapabilityError(`The fleet daemon credential store holds only ${FLEET_DAEMON_TOKEN_KEY}, not '${key}'.`, 'INVALID_INPUT', { reason: 'fleet-daemon-credentials-key-unsupported', retryable: false, details: { key } });
+}
+async function readBearer(runtime, path) {
+    const value = (await readPrivateCredentialFile(runtime, path))?.trim();
+    return value ? value : undefined;
+}
+async function writeBearer(runtime, path, dir, value) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    await filesystem.mkdir(dir, { recursive: true, mode: 0o700 });
+    await publishPrivateFile(filesystem, path, `${value}\n`);
+}
+/** The store implementation for `hostId` under `roots`. */
+export function createFleetDaemonCredentialsStore(roots, hostId, runtime) {
+    const path = defaultDaemonTokenFile(roots, hostId);
+    return {
+        id: FLEET_DAEMON_CREDENTIALS_STORE_ID,
+        descriptor,
+        get: async (_environment, key) => (key === FLEET_DAEMON_TOKEN_KEY ? readBearer(runtime, path) : undefined),
+        set: async (_environment, key, value) => {
+            if (key !== FLEET_DAEMON_TOKEN_KEY)
+                throw unsupportedKey(key);
+            if (value.trim().length === 0) {
+                throw new CapabilityError('A fleet daemon connection bearer cannot be empty.', 'INVALID_INPUT', {
+                    reason: 'fleet-daemon-bearer-empty',
+                    retryable: false
+                });
+            }
+            await writeBearer(runtime, path, hostsDir(roots), value.trim());
+        },
+        unset: async (_environment, key) => {
+            if (key !== FLEET_DAEMON_TOKEN_KEY)
+                throw unsupportedKey(key);
+            const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+            if (await filesystem.exists(path))
+                await filesystem.remove(path);
+        },
+        list: async () => {
+            throw oneKeyStore('list');
+        },
+        getAll: async () => {
+            throw oneKeyStore('getAll');
+        },
+        setAll: async () => {
+            throw oneKeyStore('setAll');
+        }
+    };
+}
+/**
+ * Compose the store onto `runtime`, bound to `hostId` and the runtime's own
+ * path roots. Returns the exact disposer; the caller retracts the store when
+ * its command ends.
+ */
+export function registerFleetDaemonCredentials(runtime, hostId) {
+    if (!runtime.hasKind(secretsStoreKind.id))
+        runtime.registerKind(secretsStoreKind);
+    const store = createFleetDaemonCredentialsStore(getPathRoots(runtime), hostId, runtime);
+    const previous = daemonCredentialRegistrations.get(runtime);
+    const dispose = runtime.registerDynamicAsset(secretsStoreKind.id, descriptor, async () => createRuntimeImplementation({
+        kind: secretsStoreKind.id,
+        id: FLEET_DAEMON_CREDENTIALS_STORE_ID,
+        implementation: store
+    }));
+    daemonCredentialRegistrations.set(runtime, dispose);
+    previous?.();
+    return dispose;
+}
+/**
+ * Write the bearer through the composed store (resolved by id on `runtime`,
+ * so the write crosses the same guard every store operation does).
+ */
+export async function setFleetDaemonBearer(runtime, value) {
+    const tier = runtime.scope.qualifiers.environmentTier;
+    if (!tier) {
+        throw new CapabilityError(`No environment tier is declared, so ${FLEET_DAEMON_TOKEN_KEY} cannot be stored.`, 'INTERNAL', { reason: 'tier-undeclared', retryable: false, details: { key: FLEET_DAEMON_TOKEN_KEY } });
+    }
+    const store = await runtime
+        .query(secretsStoreKind.id)
+        .withId(FLEET_DAEMON_CREDENTIALS_STORE_ID)
+        .resolve();
+    await store.set(tier, FLEET_DAEMON_TOKEN_KEY, value);
+}
+/**
+ * The stored bearer, or `undefined` when none is stored (`credential-not-set`).
+ * Every other failure (an exposed file, an undeclared tier, a missing store)
+ * is thrown typed.
+ */
+export async function readFleetDaemonBearer(runtime) {
+    const result = await runtime.resolveCredential(FLEET_DAEMON_TOKEN_REFERENCE);
+    if (result.ok)
+        return result.value;
+    if (result.error.reason === 'credential-not-set')
+        return undefined;
+    throw result.error;
+}
+//# sourceMappingURL=daemon-credentials-store.js.map

package/dist/cli/fleets/lib/daemon-credentials-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-credentials-store.js","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/daemon-credentials-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACvF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAqB,MAAM,qBAAqB,CAAC;AAEtG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAGzE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAuB,MAAM,uBAAuB,CAAC;AAEjG,sDAAsD;AACtD,MAAM,CAAC,MAAM,iCAAiC,GAAG,0BAA0B,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,sEAAsE;AACtE,MAAM,CAAC,MAAM,4BAA4B,GAAwB;IAChE,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,sBAAsB;IAC3B,KAAK,EAAE,iCAAiC;CACxC,CAAC;AAEF,sGAAsG;AACtG,MAAM,6BAA6B,GAAG,IAAI,OAAO,EAA4B,CAAC;AAE9E,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,KAAqB,EAAE,MAAc;IAC3E,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,eAAe,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,GAA2B;IAC1C,EAAE,EAAE,iCAAiC;IACrC,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,0BAA0B;IAChC,WAAW,EAAE,mEAAmE;IAChF,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,cAAc;IACvB,SAAS,EAAE,OAAO;IAClB,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC;IAChD,QAAQ,EAAE,CAAC;CACX,CAAC;AAEF,SAAS,WAAW,CAAC,SAAiB;IACrC,OAAO,IAAI,eAAe,CACzB,gDAAgD,sBAAsB,KAAK,SAAS,oBAAoB,EACxG,mBAAmB,EACnB,EAAE,MAAM,EAAE,qCAAqC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAC3F,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAClC,OAAO,IAAI,eAAe,CACzB,gDAAgD,sBAAsB,UAAU,GAAG,IAAI,EACvF,eAAe,EACf,EAAE,MAAM,EAAE,0CAA0C,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAC1F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAqB,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,CAAC,MAAM,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACvE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAqB,EAAE,IAAY,EAAE,GAAW,EAAE,KAAa;IACzF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iCAAiC,CAChD,KAAqB,EACrB,MAAc,EACd,OAAqB;IAErB,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO;QACN,EAAE,EAAE,iCAAiC;QACrC,UAAU;QACV,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACvC,IAAI,GAAG,KAAK,sBAAsB;gBAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC9D,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,eAAe,EAAE;oBAC/F,MAAM,EAAE,2BAA2B;oBACnC,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE;YAClC,IAAI,GAAG,KAAK,sBAAsB;gBAAE,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAqB,EAAE,MAAc;IACnF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,iCAAiC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CACxF,2BAA2B,CAAC;QAC3B,IAAI,EAAE,gBAAgB,CAAC,EAAE;QACzB,EAAE,EAAE,iCAAiC;QACrC,cAAc,EAAE,KAAK;KACrB,CAAC,CACF,CAAC;IACF,6BAA6B,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,QAAQ,EAAE,EAAE,CAAC;IACb,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE,KAAa;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACxB,uCAAuC,sBAAsB,oBAAoB,EACjF,UAAU,EACV,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,EAAE,CACzF,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO;SACzB,KAAK,CAAqD,gBAAgB,CAAC,EAAE,CAAC;SAC9E,MAAM,CAAC,iCAAiC,CAAC;SACzC,OAAO,EAAE,CAAC;IACZ,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB;IAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,MAAM,CAAC,KAAK,CAAC;AACpB,CAAC"}

package/dist/cli/fleets/lib/daemon-policy.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Daemon L5 policy — what the invoke pipeline's RuntimeLike carries.
+ *
+ * Deny-by-default is the spine (fleet.md §4.5, correction #5: a connection
+ * token connects; it does not grant capability). A machine grants REMOTE
+ * execution only by explicit opt-in: running the daemon with
+ * `--labels sandbox:code-execution` — the same label the platform requires on
+ * the host record before a code session may target it (`requireOwnedHost`) and
+ * the label chat's HostSelector filters on. One label, advertised in
+ * heartbeats AND enforced at the daemon's own gate, so the platform's view and
+ * the machine's actual posture cannot drift.
+ *
+ * Without the label the pipeline carries the owner baseline alone: the local
+ * owner may invoke, and a remote peer is denied by default. The engine never
+ * allows on an absent policy (D37), so there is no empty posture. With the
+ * label the remote-execution grant is added on top of the same baseline.
+ *
+ * Friction is unaffected either way: bright-lines still veto dangerous
+ * commands (rm -rf, wrangler, …) on every path, remote or local.
+ */
+import { type AuthzPolicyDescriptor, type RuntimeLike } from '@vibesdotdev/kernel/authz';
+import { SANDBOX_CODE_EXECUTION_HOST_LABEL } from '@vibesdotdev/platform/hosts/schemas';
+export { SANDBOX_CODE_EXECUTION_HOST_LABEL };
+/**
+ * The remote-execution grant a `sandbox:code-execution` machine carries.
+ * `kind: 'runtime/execution'` is the daemon wire's gate context — the listen
+ * target stamps EVERY daemon-root invoke with the execution kind — so this is
+ * precisely "remote peers may invoke the daemon wire surface", nothing wider.
+ * Precedence 10 sits above the owner baseline (0); higher-precedence descriptors
+ * can still carve out denies on top.
+ */
+export declare const remoteExecutionGrantDescriptor: AuthzPolicyDescriptor;
+/**
+ * Build the RuntimeLike both L5 interceptors read, from the daemon's
+ * capability labels. The single decision point for the daemon's authz posture.
+ */
+export declare function buildDaemonPolicyRuntime(capabilityLabels: string[]): RuntimeLike;
+//# sourceMappingURL=daemon-policy.d.ts.map

package/dist/cli/fleets/lib/daemon-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-policy.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/daemon-policy.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAGN,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,EAAE,qBAkB5C,CAAC;AAgBF;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,WAAW,CAKhF"}

package/dist/cli/fleets/lib/daemon-policy.js

@@ -0,0 +1,74 @@
+import { VibesRuntime } from '@vibesdotdev/kernel';
+/**
+ * Daemon L5 policy — what the invoke pipeline's RuntimeLike carries.
+ *
+ * Deny-by-default is the spine (fleet.md §4.5, correction #5: a connection
+ * token connects; it does not grant capability). A machine grants REMOTE
+ * execution only by explicit opt-in: running the daemon with
+ * `--labels sandbox:code-execution` — the same label the platform requires on
+ * the host record before a code session may target it (`requireOwnedHost`) and
+ * the label chat's HostSelector filters on. One label, advertised in
+ * heartbeats AND enforced at the daemon's own gate, so the platform's view and
+ * the machine's actual posture cannot drift.
+ *
+ * Without the label the pipeline carries the owner baseline alone: the local
+ * owner may invoke, and a remote peer is denied by default. The engine never
+ * allows on an absent policy (D37), so there is no empty posture. With the
+ * label the remote-execution grant is added on top of the same baseline.
+ *
+ * Friction is unaffected either way: bright-lines still veto dangerous
+ * commands (rm -rf, wrangler, …) on every path, remote or local.
+ */
+import { ownerBaselineAuthzDescriptor, authzPolicyKind } from '@vibesdotdev/kernel/authz';
+import { SANDBOX_CODE_EXECUTION_HOST_LABEL } from '@vibesdotdev/platform/hosts/schemas';
+export { SANDBOX_CODE_EXECUTION_HOST_LABEL };
+/**
+ * The remote-execution grant a `sandbox:code-execution` machine carries.
+ * `kind: 'runtime/execution'` is the daemon wire's gate context — the listen
+ * target stamps EVERY daemon-root invoke with the execution kind — so this is
+ * precisely "remote peers may invoke the daemon wire surface", nothing wider.
+ * Precedence 10 sits above the owner baseline (0); higher-precedence descriptors
+ * can still carve out denies on top.
+ */
+export const remoteExecutionGrantDescriptor = {
+    id: 'fleet-daemon.remote-execution-grant',
+    kind: 'authz/policy',
+    name: 'Fleet daemon remote execution (sandbox:code-execution opt-in)',
+    description: 'Grants remote peers the runtime/execution surface over the daemon wire. Present ONLY when the daemon runs with --labels sandbox:code-execution. Friction bright-lines still veto dangerous commands.',
+    enabled: true,
+    precedence: 10,
+    rules: [
+        {
+            principalClass: 'peer',
+            kind: 'runtime/execution',
+            method: '*',
+            origin: 'remote',
+            effect: 'allow',
+            reason: 'machine opted into code execution (sandbox:code-execution label)'
+        }
+    ]
+};
+/** A RuntimeLike carrying exactly the given authz/policy descriptors. */
+function policyRuntimeLike(policies) {
+    const runtime = new VibesRuntime({
+        scope: {
+            hardware: 'consumer', surface: 'cli', purpose: 'direct', lifecycle: 'finite',
+            hosting: { mode: 'local', owner: 'consumer' }, qualifiers: { dev: false }
+        }
+    });
+    runtime.registerKind(authzPolicyKind);
+    for (const policy of policies)
+        runtime.registerDescriptor('authz/policy', policy);
+    return runtime;
+}
+/**
+ * Build the RuntimeLike both L5 interceptors read, from the daemon's
+ * capability labels. The single decision point for the daemon's authz posture.
+ */
+export function buildDaemonPolicyRuntime(capabilityLabels) {
+    if (!capabilityLabels.includes(SANDBOX_CODE_EXECUTION_HOST_LABEL)) {
+        return policyRuntimeLike([ownerBaselineAuthzDescriptor]);
+    }
+    return policyRuntimeLike([ownerBaselineAuthzDescriptor, remoteExecutionGrantDescriptor]);
+}
+//# sourceMappingURL=daemon-policy.js.map

package/dist/cli/fleets/lib/daemon-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-policy.js","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/daemon-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACN,4BAA4B,EAC5B,eAAe,EAGf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAExF,OAAO,EAAE,iCAAiC,EAAE,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAA0B;IACpE,EAAE,EAAE,qCAAqC;IACzC,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,+DAA+D;IACrE,WAAW,EACV,sMAAsM;IACvM,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,EAAE;IACd,KAAK,EAAE;QACN;YACC,cAAc,EAAE,MAAM;YACtB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,kEAAkE;SAC1E;KACD;CACD,CAAC;AAEF,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,QAAiC;IAC3D,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC;QAChC,KAAK,EAAE;YACN,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;YAC5E,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;SACzE;KACD,CAAC,CAAC;IACH,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,QAAQ;QAAE,OAAO,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAClF,OAAO,OAAO,CAAC;AAEhB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAA0B;IAClE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACnE,OAAO,iBAAiB,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,iBAAiB,CAAC,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/cli/fleets/lib/host-ref.d.ts

@@ -0,0 +1,17 @@
+/**
+ * A fleet host named on the command line, resolved from the caller's own
+ * inventory (`GET /api/hosts`), by record id or by host id. Shared by the fleet
+ * commands that act on one host.
+ */
+import type { Host } from '@vibesdotdev/platform/hosts/schemas/types';
+export declare function resolveHost<THost extends Pick<Host, 'id' | 'hostId'> = Host>(platform: {
+    hosts: {
+        list(query?: {
+            limit?: number;
+            offset?: number;
+        }): Promise<{
+            results: THost[];
+        }>;
+    };
+}, ref: string): Promise<THost | null>;
+//# sourceMappingURL=host-ref.d.ts.map

package/dist/cli/fleets/lib/host-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-ref.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/host-ref.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,2CAA2C,CAAC;AAKtE,wBAAsB,WAAW,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,EACjF,QAAQ,EAAE;IAAE,KAAK,EAAE;QAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;CAAE,EACzG,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAOvB"}

package/dist/cli/fleets/lib/host-ref.js

@@ -0,0 +1,18 @@
+/**
+ * A fleet host named on the command line, resolved from the caller's own
+ * inventory (`GET /api/hosts`), by record id or by host id. Shared by the fleet
+ * commands that act on one host.
+ */
+/** The largest page `GET /api/hosts` serves. */
+const PAGE_SIZE = 200;
+export async function resolveHost(platform, ref) {
+    for (let offset = 0;; offset += PAGE_SIZE) {
+        const page = await platform.hosts.list({ limit: PAGE_SIZE, offset });
+        const match = page.results.find((h) => h.id === ref || h.hostId === ref);
+        if (match)
+            return match;
+        if (page.results.length < PAGE_SIZE)
+            return null;
+    }
+}
+//# sourceMappingURL=host-ref.js.map

package/dist/cli/fleets/lib/host-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-ref.js","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/host-ref.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,gDAAgD;AAChD,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,QAAyG,EACzG,GAAW;IAEX,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;QACzE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,IAAI,CAAC;IAClD,CAAC;AACF,CAAC"}

package/dist/cli/fleets/lib/host-token-store.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Host credentials live under the handed runtime's Vibes home.
+ * Enrollment files are removed only after the caller has awaited durable
+ * host-token publication. Filesystem adapters own private atomic publication.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { PathRoots } from '@vibesdotdev/paths';
+import { type HostTokenState } from '../../../schemas/cli/host-token.ts';
+export type { HostTokenState } from '../../../schemas/cli/host-token.ts';
+export type HostTokenRoots = Pick<PathRoots, 'vibesHome'>;
+/** Append fixed children without interpreting or normalizing drive/UNC roots. */
+export declare function hostsDir(roots: HostTokenRoots): string;
+export declare function defaultTokenFile(roots: HostTokenRoots, hostId: string): string;
+export declare function defaultEnrollTokenFile(roots: HostTokenRoots, hostId: string): string;
+/** The declared host name, or an explicit name; no process-global hostname. */
+export declare function defaultHostId(source: string): string;
+export declare function readHostToken(runtime: VibesRuntime, path: string, hostId: string): Promise<string | undefined>;
+/** Private, atomic publication completes before its promise resolves. */
+export declare function writeHostToken(runtime: VibesRuntime, path: string, input: HostTokenState): Promise<void>;
+/**
+ * POSIX permissions come from the selected adapter. Windows adapters retain
+ * their user-profile ACL posture when they do not expose POSIX permissions.
+ */
+export declare function assertPrivateFile(runtime: VibesRuntime, path: string): Promise<void>;
+/** The adapter enforces owner-private reads at its host file boundary. */
+export declare function readPrivateCredentialFile(runtime: VibesRuntime, path: string): Promise<string | undefined>;
+export declare function readEnrollTokenFile(runtime: VibesRuntime, path: string): Promise<string | undefined>;
+export declare function writeEnrollTokenFile(runtime: VibesRuntime, path: string, token: string): Promise<void>;
+export declare function removeEnrollTokenFile(runtime: VibesRuntime, path: string): Promise<boolean>;
+export declare function listLocalHostIds(runtime: VibesRuntime, roots: HostTokenRoots): Promise<string[]>;
+//# sourceMappingURL=host-token-store.d.ts.map

package/dist/cli/fleets/lib/host-token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-token-store.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/host-token-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAyD,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE/G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EACqC,KAAK,cAAc,EAC9D,MAAM,oCAAoC,CAAC;AAE5C,YAAY,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAE1D,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAEtD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAYpH;AAED,yEAAyE;AACzE,wBAAsB,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9G;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1F;AAED,0EAA0E;AAC1E,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAYhH;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAG1G;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI5G;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKjG;AAED,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBtG"}

package/dist/cli/fleets/lib/host-token-store.js

@@ -0,0 +1,109 @@
+/**
+ * Host credentials live under the handed runtime's Vibes home.
+ * Enrollment files are removed only after the caller has awaited durable
+ * host-token publication. Filesystem adapters own private atomic publication.
+ */
+import { CapabilityError, isCapabilityError, settle, settleNow } from '@vibesdotdev/kernel';
+import { resolveFileSystemAdapter, publishPrivateFile, readFilePrivate } from '@vibesdotdev/filesystem';
+import * as z from 'zod/v4';
+import { HostTokenFileSchema, HostTokenStateSchema } from "../../../schemas/cli/host-token.js";
+/** Append fixed children without interpreting or normalizing drive/UNC roots. */
+export function hostsDir(roots) {
+    return `${roots.vibesHome}/hosts`;
+}
+export function defaultTokenFile(roots, hostId) {
+    return `${hostsDir(roots)}/${hostId}.json`;
+}
+export function defaultEnrollTokenFile(roots, hostId) {
+    return `${hostsDir(roots)}/${hostId}.enroll-token`;
+}
+/** The declared host name, or an explicit name; no process-global hostname. */
+export function defaultHostId(source) {
+    return source
+        .toLowerCase().replace(/\.local$/, '').replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '').slice(0, 60) || 'host';
+}
+export async function readHostToken(runtime, path, hostId) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    if (!(await filesystem.exists(path)))
+        return undefined;
+    const text = z.string().parse(await filesystem.readFile(path, 'utf-8'));
+    const state = settleNow(() => HostTokenFileSchema.parse(JSON.parse(text)));
+    if (!state.ok)
+        throw new CapabilityError(`The host token file ${path} is not a readable host token.`, 'INVALID_INPUT', {
+            reason: 'host-token-file-invalid',
+            recoveryHint: `Repair or remove ${path}, then enroll again.`,
+            cause: state.cause
+        });
+    if (state.value.hostId !== hostId)
+        return undefined;
+    return state.value.hostToken;
+}
+/** Private, atomic publication completes before its promise resolves. */
+export async function writeHostToken(runtime, path, input) {
+    const state = HostTokenStateSchema.parse(input);
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    await filesystem.mkdir(filesystem.dirname(path), { recursive: true, mode: 0o700 });
+    await publishPrivateFile(filesystem, path, `${JSON.stringify(state, null, 2)}\n`);
+}
+/**
+ * POSIX permissions come from the selected adapter. Windows adapters retain
+ * their user-profile ACL posture when they do not expose POSIX permissions.
+ */
+export async function assertPrivateFile(runtime, path) {
+    await readPrivateCredentialFile(runtime, path);
+}
+/** The adapter enforces owner-private reads at its host file boundary. */
+export async function readPrivateCredentialFile(runtime, path) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    if (!(await filesystem.exists(path)))
+        return undefined;
+    const read = await settle(() => readFilePrivate(filesystem, path, Number.MAX_SAFE_INTEGER));
+    if (read.ok)
+        return new TextDecoder().decode(read.value);
+    if (isCapabilityError(read.cause) && read.cause.reason === 'filesystem-private-file-shared') {
+        throw new CapabilityError(`Credential file ${path} is readable by other users. Fix it with: chmod 600 ${path}`, 'PERMISSION_DENIED', {
+            reason: 'credential-file-exposed', retryable: false,
+            recoveryHint: `chmod 600 ${path}`, details: { path }, cause: read.cause
+        });
+    }
+    throw read.cause;
+}
+export async function readEnrollTokenFile(runtime, path) {
+    const token = (await readPrivateCredentialFile(runtime, path))?.trim();
+    return token ? token : undefined;
+}
+export async function writeEnrollTokenFile(runtime, path, token) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    await filesystem.mkdir(filesystem.dirname(path), { recursive: true, mode: 0o700 });
+    await publishPrivateFile(filesystem, path, `${token}\n`);
+}
+export async function removeEnrollTokenFile(runtime, path) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    if (!(await filesystem.exists(path)))
+        return false;
+    await filesystem.remove(path);
+    return true;
+}
+export async function listLocalHostIds(runtime, roots) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    const dir = hostsDir(roots);
+    if (!(await filesystem.exists(dir)))
+        return [];
+    const entries = await filesystem.list(dir);
+    const ids = [];
+    for (const entry of entries) {
+        if (!entry.name.endsWith('.json'))
+            continue;
+        const path = filesystem.join(dir, entry.name);
+        const text = z.string().parse(await filesystem.readFile(path, 'utf-8'));
+        const state = settleNow(() => HostTokenFileSchema.parse(JSON.parse(text)));
+        if (!state.ok)
+            throw new CapabilityError(`The host token file ${path} is not a readable host token.`, 'INVALID_INPUT', {
+                reason: 'host-token-file-invalid', cause: state.cause
+            });
+        ids.push(state.value.hostId ?? entry.name.replace(/\.json$/, ''));
+    }
+    return ids;
+}
+//# sourceMappingURL=host-token-store.js.map

package/dist/cli/fleets/lib/host-token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-token-store.js","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/host-token-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAqB,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAExG,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,mBAAmB,EAAE,oBAAoB,EACzC,MAAM,oCAAoC,CAAC;AAK5C,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,KAAqB;IAC7C,OAAO,GAAG,KAAK,CAAC,SAAS,QAAQ,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAqB,EAAE,MAAc;IACrE,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,OAAO,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAqB,EAAE,MAAc;IAC3E,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,eAAe,CAAC;AACpD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,MAAc;IAC3C,OAAO,MAAM;SACX,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SACjE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAqB,EAAE,IAAY,EAAE,MAAc;IACtF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,IAAI,gCAAgC,EAAE,eAAe,EAAE;YACtH,MAAM,EAAE,yBAAyB;YACjC,YAAY,EAAE,oBAAoB,IAAI,sBAAsB;YAC5D,KAAK,EAAE,KAAK,CAAC,KAAK;SAClB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAqB,EAAE,IAAY,EAAE,KAAqB;IAC9F,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAqB,EAAE,IAAY;IAC1E,MAAM,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAqB,EAAE,IAAY;IAClF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAC7F,MAAM,IAAI,eAAe,CAAC,mBAAmB,IAAI,uDAAuD,IAAI,EAAE,EAAE,mBAAmB,EAAE;YACpI,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK;YACnD,YAAY,EAAE,aAAa,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;SACvE,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAqB,EAAE,IAAY;IAC5E,MAAM,KAAK,GAAG,CAAC,MAAM,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACvE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE,IAAY,EAAE,KAAa;IAC5F,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB,EAAE,IAAY;IAC9E,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAqB,EAAE,KAAqB;IAClF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,IAAI,gCAAgC,EAAE,eAAe,EAAE;gBACtH,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;aACrD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/cli/fleets/lib/origins.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Origin resolution for fleet CLI surfaces.
+ *
+ * The async resolvers answer from the declared `infra/service` catalog in the
+ * runtime's configured service environment (`infra.services`), the one origin
+ * authority; an undeclared service fails `NOT_FOUND` rather than inventing a
+ * host. There is no origin env and no default (rc04 §2.4); the former sync
+ * `resolvePlatformOrigin`/`resolveHqOrigin` env readers are gone, their callers
+ * read `serviceOrigin(runtime, id)` or the resolvers here.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+/** The declared `platform` service origin; an undeclared service fails `NOT_FOUND`. */
+export declare function resolvePlatformOriginAsync(runtime: RuntimeRef): Promise<string>;
+/** The declared `auth` service origin; an undeclared service fails `NOT_FOUND`. */
+export declare function resolveAuthOrigin(runtime: RuntimeRef): Promise<string>;
+//# sourceMappingURL=origins.d.ts.map

package/dist/cli/fleets/lib/origins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"origins.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/origins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAiBtD,uFAAuF;AACvF,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAErF;AAED,mFAAmF;AACnF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5E"}

package/dist/cli/fleets/lib/origins.js

@@ -0,0 +1,24 @@
+/**
+ * Origin resolution for fleet CLI surfaces.
+ *
+ * The async resolvers answer from the declared `infra/service` catalog in the
+ * runtime's configured service environment (`infra.services`), the one origin
+ * authority; an undeclared service fails `NOT_FOUND` rather than inventing a
+ * host. There is no origin env and no default (rc04 §2.4); the former sync
+ * `resolvePlatformOrigin`/`resolveHqOrigin` env readers are gone, their callers
+ * read `serviceOrigin(runtime, id)` or the resolvers here.
+ */
+import { originOf, serviceEnvironment } from '@vibesdotdev/infra-core/service';
+/** The declared service's primary origin in the runtime's configured service environment. */
+async function declaredServiceOrigin(runtime, serviceId) {
+    return originOf(await runtime.query('infra/service').withId(serviceId).resolve(), await serviceEnvironment(runtime), 'primary');
+}
+/** The declared `platform` service origin; an undeclared service fails `NOT_FOUND`. */
+export async function resolvePlatformOriginAsync(runtime) {
+    return declaredServiceOrigin(runtime, 'platform');
+}
+/** The declared `auth` service origin; an undeclared service fails `NOT_FOUND`. */
+export async function resolveAuthOrigin(runtime) {
+    return declaredServiceOrigin(runtime, 'auth');
+}
+//# sourceMappingURL=origins.js.map

package/dist/cli/fleets/lib/origins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origins.js","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/origins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACN,QAAQ,EACR,kBAAkB,EAGlB,MAAM,iCAAiC,CAAC;AAEzC,6FAA6F;AAC7F,KAAK,UAAU,qBAAqB,CAAC,OAAmB,EAAE,SAAiB;IAC1E,OAAO,QAAQ,CACd,MAAM,OAAO,CAAC,KAAK,CAA2C,eAAe,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAC1G,MAAM,kBAAkB,CAAC,OAAO,CAAC,EACjC,SAAS,CACT,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAmB;IACnE,OAAO,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAmB;IAC1D,OAAO,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC"}

package/dist/cli/fleets/lib/registry-lease.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A standing fleet host renewing its own registry credential.
+ *
+ * A host's ENROLLMENT token is one-time and expiring, so it can only ever pay
+ * for the first materialization (cloud-init's brokered step). Everything after
+ * that — a new release, a repair, a wiped `node_modules` — has to be paid for
+ * with the durable HOST token the daemon persisted at enrollment. Without this
+ * a fleet kept in rotation for weeks is stuck exactly where it started.
+ *
+ * Pure request/response shaping: no filesystem, no process. The command impl
+ * supplies the token and the fetch.
+ */
+import { type HostRegistryLease } from '../../../schemas/fleet-cli.ts';
+export type { HostRegistryLease } from '../../../schemas/fleet-cli.ts';
+export declare function hostRegistryLeaseUrl(platformOrigin: string, hostId: string): string;
+/**
+ * Read a lease out of a platform response body. A body that is not a lease is
+ * `null` rather than a throw: the caller reports the platform's own error, and
+ * an unparseable body must not read as a credential.
+ */
+export declare function parseHostRegistryLease<Body>(body: Body): HostRegistryLease | null;
+/** What a caller may say out loud about a lease. Never the token. */
+export declare function describeHostRegistryLease(lease: HostRegistryLease): string;
+//# sourceMappingURL=registry-lease.d.ts.map

package/dist/cli/fleets/lib/registry-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-lease.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/registry-lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,iBAAiB,GAAG,IAAI,CAGjF;AAED,qEAAqE;AACrE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAG1E"}

package/dist/cli/fleets/lib/registry-lease.js

@@ -0,0 +1,31 @@
+/**
+ * A standing fleet host renewing its own registry credential.
+ *
+ * A host's ENROLLMENT token is one-time and expiring, so it can only ever pay
+ * for the first materialization (cloud-init's brokered step). Everything after
+ * that — a new release, a repair, a wiped `node_modules` — has to be paid for
+ * with the durable HOST token the daemon persisted at enrollment. Without this
+ * a fleet kept in rotation for weeks is stuck exactly where it started.
+ *
+ * Pure request/response shaping: no filesystem, no process. The command impl
+ * supplies the token and the fetch.
+ */
+import { RegistryLeaseSchema } from "../../../schemas/fleet-cli.js";
+export function hostRegistryLeaseUrl(platformOrigin, hostId) {
+    return `${platformOrigin.replace(/\/+$/, '')}/api/hosts/${encodeURIComponent(hostId)}/registry-lease`;
+}
+/**
+ * Read a lease out of a platform response body. A body that is not a lease is
+ * `null` rather than a throw: the caller reports the platform's own error, and
+ * an unparseable body must not read as a credential.
+ */
+export function parseHostRegistryLease(body) {
+    const parsed = RegistryLeaseSchema.safeParse(body);
+    return parsed.success ? parsed.data : null;
+}
+/** What a caller may say out loud about a lease. Never the token. */
+export function describeHostRegistryLease(lease) {
+    const owner = `${lease.owner.type}:${lease.owner.id}`;
+    return `registry lease for ${owner} (${lease.scopes.join(', ')}) until ${lease.expiresAt}`;
+}
+//# sourceMappingURL=registry-lease.js.map

package/dist/cli/fleets/lib/registry-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-lease.js","sourceRoot":"","sources":["../../../../src/cli/fleets/lib/registry-lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAA0B,MAAM,+BAA+B,CAAC;AAG5F,MAAM,UAAU,oBAAoB,CAAC,cAAsB,EAAE,MAAc;IAC1E,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC;AACvG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAO,IAAU;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,yBAAyB,CAAC,KAAwB;IACjE,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACtD,OAAO,sBAAsB,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,SAAS,EAAE,CAAC;AAC5F,CAAC"}