@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/fleets/daemon/daemon-root.js

@@ -0,0 +1,167 @@
+import * as z from 'zod/v4';
+import { WireObjectSchema } from "../../schemas/fleet-wire.js";
+/**
+ * The daemon root — the object a remote consumer reaches over the `runtime/rpc`
+ * wire (fleet.md §4.2; L6d phase 4).
+ *
+ * `getVibesRemote(hostId)` returns a proxy whose `.query(kindId)` routes through
+ * `invoke(rootRef, 'query', [kindId])` to THIS object's `query`. So the root's
+ * single job is to resolve a kind id to the host-side impl the daemon exposes —
+ * for L6d that is the host's own `runtime/execution` (execute/spawn/session),
+ * mounted onto the daemon's OWN local runtime. Reaching it is the spec's
+ * `query('runtime/execution').on(hostRef)` over the daemon, just spelled with the
+ * `getVibesRemote` sugar.
+ *
+ * The root exposes `runtime/execution` (always) and optionally `autoloop/monitor`
+ * when the host has the autoloop consumer plugin registered. It carries no
+ * execution capabilities of its own — it *exposes* the kind's impl, it does not
+ * *be* execution (corrections #2/#3). Substrate/PTY/shell live on the execution
+ * impl + its `runtime/environment`, never on the host root.
+ */
+import { CapabilityError, settleNow, valueFreeFailure } from '@vibesdotdev/kernel';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+import { EXECUTION_KIND_ID, wrapExecutionForWire, asWireRef, wireMethodNames } from "./execution-listen-policy.js";
+/**
+ * The kind id the daemon exposes the read-only autoloop loop monitor under. A
+ * cloud surface (hq-web) resolves it over the relay with
+ * `getVibesRemote(hostId).query('autoloop/monitor')` to enumerate the host's loops.
+ * The daemon does NOT depend on `@vibesdotdev/autoloop`; it exposes whatever object
+ * the optional `resolveMonitor` returns under this id (the autoloop consumer plugin
+ * registers the actual impl on the host runtime).
+ */
+export const MONITOR_KIND_ID = 'autoloop/monitor';
+/**
+ * The runtime daemon's canonical root on the receiving host, as the fleet root
+ * serves it: only its `query` is reachable, and `query` reads `deps.runtime`
+ * alone. The fleet serves no subscriptions and no daemon health, so those
+ * members refuse typed rather than answer for a daemon that is not here.
+ */
+function canonicalQueryRoot(runtime) {
+    const notServed = (member) => new CapabilityError(`The fleet root serves the runtime daemon's query only, not ${member}.`, 'UNAVAILABLE', {
+        reason: 'fleet-root-member-not-served',
+        retryable: false
+    });
+    const deps = {
+        runtime,
+        subscriptionManager: {
+            activeCount: () => 0,
+            closeAll: () => { },
+            handleSubscribe: () => {
+                throw notServed('subscriptions');
+            }
+        },
+        getHealth: () => Promise.reject(notServed('health'))
+    };
+    // 'remote': a network caller; local-only commands stay hidden and refused.
+    // The runtime daemon's root is the Bun host's; loaded on the first query.
+    let root;
+    return {
+        query(params) {
+            // Settled: a throwing getter (or revoked Proxy) throws out of the
+            // parse itself, so safeParse alone cannot hold this boundary.
+            const admitted = settleNow(() => JsonObjectSchema.safeParse(params));
+            if (!admitted.ok) {
+                throw new CapabilityError('fleet-daemon: query takes a kind id or a descriptor query object.', 'INVALID_INPUT', {
+                    reason: 'fleet-query-invalid',
+                    retryable: false,
+                    details: { failure: valueFreeFailure(admitted.cause) }
+                });
+            }
+            if (!admitted.value.success) {
+                throw new CapabilityError('fleet-daemon: query takes a kind id or a descriptor query object.', 'INVALID_INPUT', {
+                    reason: 'fleet-query-invalid',
+                    retryable: false
+                });
+            }
+            root ??= import('@vibesdotdev/kernel-rpc/daemon/rpc-root').then(({ createRpcRoot }) => createRpcRoot(() => deps, undefined, 'remote'));
+            return root.then((canonical) => canonical.query(admitted.value.data));
+        }
+    };
+}
+/**
+ * The kind id the daemon exposes feature `runtime/client`s under (D-DAEMON-CLIENT).
+ * A consumer reaches a host's client by id with
+ * `getVibesRemote(hostId).query('runtime/client').withId('<id>')` — so a remote
+ * desktop/browser client (or any future feature client) is reachable on a fleet
+ * host with NO per-feature daemon change. The daemon exposes a selector object
+ * whose `withId(id)` resolves the host-side client and returns it as a wire ref.
+ */
+export const CLIENT_KIND_ID = 'runtime/client';
+/**
+ * Build the daemon root over the receiving host (its own runtime composes every
+ * declared child environment and answers the canonical descriptor query) and a
+ * resolved host-side `runtime/execution` impl, and
+ * OPTIONALLY a read-only `autoloop/monitor` + generalized proxies (D-DAEMON-CLIENT:
+ * `runtime/client` by id, and additional kinds like `filesystem/adapter`). The
+ * returned root's `query('runtime/execution')` yields the execution impl;
+ * `query('autoloop/monitor')` yields the monitor (when `resolveMonitor` is
+ * supplied); `query('runtime/client')` yields a `withId(id)` selector (when
+ * `extensions.resolveClient` is supplied); any kind `extensions.resolveKind`
+ * resolves is proxied as a wire ref; any other kind id throws.
+ *
+ * SECURITY: every proxied surface (monitor, client, kind) crosses the SAME
+ * L5-gated invoke pipeline as execution (the daemon's `target.pipeline`). It adds
+ * no ungated path — `withId`/client/kind invokes are authz+friction gated exactly
+ * like an execution invoke, and connection auth still gates the whole connection.
+ */
+export function createFleetDaemonRoot(host, resolveExecution, resolveMonitor, extensions) {
+    const exposed = [
+        EXECUTION_KIND_ID,
+        ...(resolveMonitor ? [MONITOR_KIND_ID] : []),
+        ...(extensions?.resolveClient ? [CLIENT_KIND_ID] : [])
+    ];
+    const canonical = canonicalQueryRoot(host.runtime);
+    return {
+        query(input) {
+            const kind = z.string().safeParse(input);
+            if (!kind.success) {
+                // The canonical descriptor query, unchanged: the runtime daemon's own handler on this host's runtime.
+                return canonical.query(input);
+            }
+            const kindId = kind.data;
+            if (kindId === EXECUTION_KIND_ID) {
+                // Wire-wrap so spawn() results cross as WireProcessHandle (`exited` is
+                // an invocable method; stdout/stderr/stdin bind to stream channels) —
+                // a raw ProcessHandle's Promise-property `exited` would NO_METHOD over
+                // rpc and its streams would have no wire representation. execute/spawn
+                // admit only a declared request and compose it on this host's runtime.
+                return wrapExecutionForWire(resolveExecution(), host);
+            }
+            if (kindId === MONITOR_KIND_ID) {
+                if (!resolveMonitor) {
+                    throw new CapabilityError(`fleet-daemon: kind '${MONITOR_KIND_ID}' is not exposed by this daemon ` +
+                        `(no autoloop monitor resolver supplied — the host may lack the autoloop consumer plugin).`, 'UNAVAILABLE', { reason: 'fleet-kind-not-exposed', retryable: false });
+                }
+                return resolveMonitor();
+            }
+            if (kindId === CLIENT_KIND_ID) {
+                const resolveClient = extensions?.resolveClient;
+                if (!resolveClient) {
+                    throw new CapabilityError(`fleet-daemon: kind '${CLIENT_KIND_ID}' is not exposed by this daemon ` +
+                        `(no runtime/client resolver supplied — the host registered no client proxy).`, 'UNAVAILABLE', { reason: 'fleet-kind-not-exposed', retryable: false });
+                }
+                // The selector: withId(id) resolves the host-side client and returns it
+                // as a wire ref (its methods invocable back over the SAME gated wire).
+                return asWireRef({
+                    withId: (id) => {
+                        const resolved = WireObjectSchema.safeParse(resolveClient(id));
+                        if (!resolved.success) {
+                            throw new CapabilityError(`fleet-daemon: no '${CLIENT_KIND_ID}' with id '${id}' is exposed by this daemon.`, 'NOT_FOUND', { reason: 'fleet-client-not-found', retryable: false });
+                        }
+                        const client = resolved.data;
+                        const methods = extensions?.clientWireMethods?.(id, client) ?? wireMethodNames(client);
+                        return asWireRef(client, methods);
+                    }
+                }, ['withId']);
+            }
+            const proxied = extensions?.resolveKind?.(kindId);
+            if (proxied) {
+                return asWireRef(proxied.impl, proxied.methods);
+            }
+            throw new CapabilityError(`fleet-daemon: kind '${kindId}' is not exposed by this daemon (exposes ${exposed
+                .map((k) => `'${k}'`)
+                .join(' + ')}${extensions?.resolveKind ? ' + proxied kinds' : ''}).`, 'UNAVAILABLE', { reason: 'fleet-kind-not-exposed', retryable: false });
+        }
+    };
+}
+//# sourceMappingURL=daemon-root.js.map

package/dist/fleets/daemon/daemon-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-root.js","sourceRoot":"","sources":["../../../src/fleets/daemon/daemon-root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAGtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EACN,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,eAAe,EAEf,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAmClD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAAqB;IAChD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE,CACpC,IAAI,eAAe,CAAC,8DAA8D,MAAM,GAAG,EAAE,aAAa,EAAE;QAC3G,MAAM,EAAE,8BAA8B;QACtC,SAAS,EAAE,KAAK;KAChB,CAAC,CAAC;IACJ,MAAM,IAAI,GAAuB;QAChC,OAAO;QACP,mBAAmB,EAAE;YACpB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC;YACnB,eAAe,EAAE,GAAG,EAAE;gBACrB,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC;YAClC,CAAC;SACD;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;KACpD,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,IAAyC,CAAC;IAC9C,OAAO;QACN,KAAK,CAAC,MAAiB;YACtB,kEAAkE;YAClE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,IAAI,eAAe,CAAC,mEAAmE,EAAE,eAAe,EAAE;oBAC/G,MAAM,EAAE,qBAAqB;oBAC7B,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;iBACtD,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,eAAe,CAAC,mEAAmE,EAAE,eAAe,EAAE;oBAC/G,MAAM,EAAE,qBAAqB;oBAC7B,SAAS,EAAE,KAAK;iBAChB,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,MAAM,CAAC,yCAAyC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CACrF,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAC9C,CAAC;YACF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC;KACD,CAAC;AACH,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAiD/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,qBAAqB,CACpC,IAAqB,EACrB,gBAAmC,EACnC,cAAgC,EAChC,UAAsC;IAEtC,MAAM,OAAO,GAAG;QACf,iBAAiB;QACjB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;IACF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO;QACN,KAAK,CAAC,KAAgB;YACrB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,sGAAsG;gBACtG,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACzB,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBAClC,uEAAuE;gBACvE,sEAAsE;gBACtE,uEAAuE;gBACvE,uEAAuE;gBACvE,uEAAuE;gBACvE,OAAO,oBAAoB,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAChC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACrB,MAAM,IAAI,eAAe,CACxB,uBAAuB,eAAe,kCAAkC;wBACxE,2FAA2F,EAC3F,aAAa,EACb,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CACtD,CAAC;gBACH,CAAC;gBACD,OAAO,cAAc,EAAE,CAAC;YACzB,CAAC;YACD,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC/B,MAAM,aAAa,GAAG,UAAU,EAAE,aAAa,CAAC;gBAChD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACpB,MAAM,IAAI,eAAe,CACxB,uBAAuB,cAAc,kCAAkC;wBACvE,8EAA8E,EAC9E,aAAa,EACb,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CACtD,CAAC;gBACH,CAAC;gBACD,wEAAwE;gBACxE,uEAAuE;gBACvE,OAAO,SAAS,CACf;oBACC,MAAM,EAAE,CAAC,EAAU,EAAU,EAAE;wBAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;4BACvB,MAAM,IAAI,eAAe,CACxB,qBAAqB,cAAc,cAAc,EAAE,8BAA8B,EACjF,WAAW,EACX,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CACtD,CAAC;wBACH,CAAC;wBACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;wBAC7B,MAAM,OAAO,GACZ,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;wBACxE,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACnC,CAAC;iBACD,EACD,CAAC,QAAQ,CAAC,CACV,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,IAAI,eAAe,CACxB,uBAAuB,MAAM,4CAA4C,OAAO;iBAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;iBACpB,IAAI,CAAC,KAAK,CAAC,GAAG,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,IAAI,EACrE,aAAa,EACb,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CACtD,CAAC;QACH,CAAC;KACD,CAAC;AACH,CAAC"}