@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/fleets/provision/workspace-host-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-host-setup.js","sourceRoot":"","sources":["../../../src/fleets/provision/workspace-host-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,MAAM,CAAC,MAAM,2BAA2B,GAAG,2DAA2D,CAAC;AAEvG,2FAA2F;AAC3F,SAAS,qBAAqB,CAAC,GAAW;IACzC,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,SAAS,cAAc,CAAC,KAAa,EAAE,SAAiB;IACvD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,kDAAkD,CAAC,CAAC;IACzF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO;;;;GAIL,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,UAAoB;IAC7C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtD,MAAM,MAAM,GAAa,CAAC,sBAAsB,CAAC,CAAC;IAElD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7C,QAAQ,KAAK,EAAE,CAAC;YACf,KAAK,KAAK;gBACT,MAAM,CAAC,IAAI,CAAC;;;;;GAKb,CAAC,CAAC;gBACD,MAAM;YACP,KAAK,MAAM,CAAC;YACZ,KAAK,QAAQ;gBACZ,MAAM,CAAC,IAAI,CAAC;;;;;GAKb,CAAC,CAAC;gBACD,MAAM;YACP,KAAK,MAAM,CAAC;YACZ,KAAK,OAAO;gBACX,MAAM,CAAC,IAAI,CAAC;;;;;GAKb,CAAC,CAAC;gBACD,MAAM;YACP,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS;gBACb,MAAM,CAAC,IAAI,CAAC;;;;GAIb,CAAC,CAAC;gBACD,MAAM;YACP,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACZ,MAAM,CAAC,IAAI,CAAC;;;;GAIb,CAAC,CAAC;gBACD,MAAM;YACP,KAAK,QAAQ;gBACZ,MAAM,CAAC,IAAI,CAAC,KAAK,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAC/C,MAAM;YACP;gBACC,+DAA+D;gBAC/D,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,CAAC;gBACD,KAAK;wBACG,KAAK;GAC1B,CAAC,CAAC;gBACD,CAAC;gBACD,MAAM;QACR,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,YAAyC;IACpE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1D,MAAM,MAAM,GAAa;QACxB,wBAAwB;QACxB,0BAA0B;KAC1B,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,GAAG,aAAa;YAC9B,CAAC,CAAC,mBAAmB,aAAa,EAAE;YACpC,CAAC,CAAC,iBAAiB,CAAC;QAErB,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG;YAAE,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,aAAa;YAAE,cAAc,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzG,MAAM,CAAC,IAAI,CAAC;UACJ,CAAC,MAAM,IAAI,CAAC,GAAG,OAAO,SAAS;aAC5B,SAAS;cACR,SAAS;kBACL,IAAI,CAAC,GAAG,SAAS,SAAS;cAC9B,SAAS,IAAI,OAAO,IAAI,SAAS,KAAK,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS;;gBAElF,SAAS,IAAI,SAAS,KAAK,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS;eAC1E,IAAI,CAAC,GAAG,IAAI,EAAE;YACjB,SAAS;0BACK,qBAAqB,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;sBACzC,qBAAqB,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;;;;oBAIvC,SAAS;QACrB,SAAS;;IAEb,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;GAC5E,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAA2B;IACpD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5C,MAAM,MAAM,GAAa,CAAC,uBAAuB,CAAC,CAAC;IAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;YACvB,CAAC,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE;YAC/B,CAAC,CAAC,iBAAiB,CAAC;QAErB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG;YAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;iBACvB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC;YACb,CAAC,CAAC,EAAE,CAAC;QAEN,MAAM,CAAC,IAAI,CAAC;gBACE,CAAC,GAAG,CAAC,MAAM,IAAI;8BACD,IAAI;;QAE1B,OAAO;IACX,UAAU;IACV,IAAI,CAAC,OAAO;EACd,CAAC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,GAA2B;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnF,OAAO;;EAEN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;CACjB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAkC;IAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO;QACA,2BAA2B;;;;;;;;EAQjC,QAAQ;EACR,eAAe;EACf,UAAU;EACV,UAAU;;;;;CAKX,CAAC;AACF,CAAC"}

package/dist/fleets/provisioning/sandbox-provisioning-adapter.d.ts

@@ -0,0 +1,132 @@
+/**
+ * The provisioning bridge — `infra/sandbox` is KEPT as the lifecycle owner
+ * (fleet.md §4.7, correction #4).
+ *
+ * Provisioning is NOT a new fleet adapter that competes with `infra/sandbox`.
+ * `infra/sandbox` stays the create/destroy/bill owner. This bridge is a thin
+ * wrapper that, on a *successful* provision, registers the provisioned host as a
+ * reachable `runtime/rpc` target — and on destroy, ROUTES teardown to
+ * `infra/sandbox` (via the `sandboxResourceId`) and deregisters. Fleet routes
+ * teardown; it never performs it.
+ *
+ * THE SPINE (correction #4): discovery and provisioning SHARE the
+ * `runtime/rpc` output contract but NOT a lifecycle. The lifecycle distinction
+ * is enforced *in the type system*:
+ *   - `FleetDiscoveryAdapter` (@vibesdotdev/platform/fleets/pairing) has NO destroy.
+ *   - `FleetProvisioningAdapter` (here) HAS one — it owns a billable resource.
+ * Same output (`RuntimeRpcDescriptor`), different obligation.
+ *
+ * THE PROVISION + TEARDOWN CALLS ARE PORTS (`SandboxProvisioner`), injected by
+ * the caller. The CONTRACT is the deliverable — a test supplies a mock; the host
+ * app wires platform's `hosts.provision({ sandbox })` flow (which resolves an
+ * `infra/sandbox` impl) and the infra teardown. This package never creates or
+ * bills a resource itself.
+ */
+import { type RuntimeRpcDescriptor as RpcDescriptor, type CredentialReference } from '@vibesdotdev/kernel-rpc';
+import type { FleetHostDescriptor } from '../kinds/host.kind.ts';
+import type { ReachableRuntimeRegistry, RuntimeRpcDescriptor } from '../registry/reachable-runtime.ts';
+/** The provisioning adapter id. `infra/sandbox` remains the lifecycle owner. */
+export declare const SANDBOX_PROVISIONING_ADAPTER_ID = "infra/sandbox";
+/** The transport the provisioned host's daemon will expose. */
+export type ProvisionedTransport = 'unix' | 'tcp' | 'http';
+/**
+ * A request to provision a host. Mirrors the shape platform's
+ * `hosts.provision({ sandbox })` flow consumes; the `sandbox` descriptor names
+ * an `infra/sandbox` adapter. Fleet passes it through — it does not interpret
+ * the IaaS config.
+ */
+export interface ProvisionHostRequest {
+    /** Stable registry id for the emitted host + rpc descriptor. */
+    readonly id: string;
+    /** Platform `hostSchema.id` the provision flow created/will create (the record FK). */
+    readonly hostRecordId: string;
+    /** kebab `hostSchema.hostId` for human routing. */
+    readonly hostId: string;
+    /**
+     * The `infra/sandbox` descriptor (adapter + config) the provisioner resolves.
+     * Typed loosely here so fleet does not pull the infra graph; the provisioner
+     * port validates it against `infra/sandbox`'s schema.
+     */
+    readonly sandbox: unknown;
+    /** The transport the provisioned daemon will listen on. Default 'http'. */
+    readonly transport?: ProvisionedTransport;
+    /**
+     * Optional connection credential reference (secrets/store) the rpc descriptor
+     * carries. NEVER a bare token — a connection credential, not an invoke gate.
+     */
+    readonly auth?: CredentialReference;
+    /** Optional scope hint the provisioned host advertises. */
+    readonly remoteScope?: RpcDescriptor['remoteScope'];
+}
+/**
+ * What a successful `infra/sandbox` provision returns to the bridge. The bridge
+ * turns this into the `runtime/rpc` descriptor it registers. `infra/sandbox`
+ * owns everything in here — the bridge only reads it.
+ */
+export interface ProvisionedSandboxResult {
+    /**
+     * The `infra/sandbox` resource id — the IaaS handle to DESTROY. Mirrors
+     * platform `hostSchema.sandboxResourceId`. The bridge carries it for teardown
+     * routing; only `infra/sandbox` acts on it.
+     */
+    readonly sandboxResourceId: string;
+    /** The provisioned daemon's reachable address. */
+    readonly target: RpcDescriptor['target'];
+}
+/**
+ * The `infra/sandbox` lifecycle port. The bridge calls `provision`/`destroy`;
+ * the caller injects the impl that wraps platform's `hosts.provision` flow and
+ * the infra teardown. THIS is where create/bill/destroy actually happen — never
+ * in the bridge.
+ */
+export interface SandboxProvisioner {
+    /** Create the billable sandbox via `infra/sandbox` + platform `hosts.provision`. */
+    provision(req: ProvisionHostRequest): Promise<ProvisionedSandboxResult>;
+    /** Tear down the sandbox by its `infra/sandbox` resource id. The lifecycle owner acts. */
+    destroy(sandboxResourceId: string): Promise<void>;
+}
+/**
+ * The provisioning adapter contract (fleet.md §4.7). Unlike
+ * `FleetDiscoveryAdapter`, it HAS a `destroy` — the type-level enforcement of
+ * correction #4 (acceptance criterion #3).
+ */
+export interface FleetProvisioningAdapter {
+    /** `'infra/sandbox'` — the kept lifecycle owner's id. */
+    readonly id: string;
+    /** Provision via `infra/sandbox`; register the result as an rpc target. */
+    provision(req: ProvisionHostRequest): Promise<{
+        host: FleetHostDescriptor;
+        rpc: RuntimeRpcDescriptor;
+    }>;
+    /** Route teardown to `infra/sandbox`; deregister from the reachable-runtime registry. */
+    destroy(hostId: string): Promise<void>;
+}
+/**
+ * Build the `runtime/rpc` descriptor for a freshly provisioned host. Validates
+ * against L4a's frozen `RuntimeRpcDescriptorSchema` — the SAME shape discovery
+ * emits (acceptance criterion #4). The only differences from a discovered
+ * descriptor are downstream: `origin: 'provisioned'` and the sticky (no-TTL),
+ * teardown-bearing registry entry.
+ */
+export declare function buildProvisionedRpcDescriptor(req: ProvisionHostRequest, result: ProvisionedSandboxResult): RpcDescriptor;
+/** Build the `fleet/host` descriptor for a provisioned host (origin: 'provisioned'). */
+export declare function buildProvisionedHostDescriptor(req: ProvisionHostRequest, result: ProvisionedSandboxResult): FleetHostDescriptor;
+/**
+ * Create the sandbox provisioning bridge over an injected {@link SandboxProvisioner}
+ * port and the reachable-runtime registry.
+ *
+ * `provision`:
+ *   1. Calls the provisioner (`infra/sandbox` create/bill — NOT here).
+ *   2. On success, registers a `runtime/rpc` descriptor as a `provisioned` entry
+ *      (sticky — no TTL; provisioned hosts persist until explicit destroy).
+ *   3. Returns the `fleet/host` + `runtime/rpc` descriptors.
+ *
+ * `destroy`:
+ *   1. Looks up the entry, ROUTES teardown to the provisioner via the
+ *      `sandboxResourceId` (`infra/sandbox` acts — NOT here).
+ *   2. Deregisters the entry.
+ *
+ * If the underlying provision throws, NOTHING is registered (no half-state).
+ */
+export declare function createSandboxProvisioningAdapter(provisioner: SandboxProvisioner, registry: ReachableRuntimeRegistry): FleetProvisioningAdapter;
+//# sourceMappingURL=sandbox-provisioning-adapter.d.ts.map

package/dist/fleets/provisioning/sandbox-provisioning-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-provisioning-adapter.d.ts","sourceRoot":"","sources":["../../../src/fleets/provisioning/sandbox-provisioning-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAEN,KAAK,oBAAoB,IAAI,aAAa,EAC1C,KAAK,mBAAmB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAEvG,gFAAgF;AAChF,eAAO,MAAM,+BAA+B,kBAAkB,CAAC;AAE/D,+DAA+D;AAC/D,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACpC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACpD;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,oFAAoF;IACpF,SAAS,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACxE,0FAA0F;IAC1F,OAAO,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACxC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,SAAS,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,GAAG,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACxG,yFAAyF;IACzF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC5C,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,wBAAwB,GAC9B,aAAa,CAkBf;AAED,wFAAwF;AACxF,wBAAgB,8BAA8B,CAC7C,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,wBAAwB,GAC9B,mBAAmB,CAWrB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gCAAgC,CAC/C,WAAW,EAAE,kBAAkB,EAC/B,QAAQ,EAAE,wBAAwB,GAChC,wBAAwB,CA2C1B"}

package/dist/fleets/provisioning/sandbox-provisioning-adapter.js

@@ -0,0 +1,133 @@
+/**
+ * The provisioning bridge — `infra/sandbox` is KEPT as the lifecycle owner
+ * (fleet.md §4.7, correction #4).
+ *
+ * Provisioning is NOT a new fleet adapter that competes with `infra/sandbox`.
+ * `infra/sandbox` stays the create/destroy/bill owner. This bridge is a thin
+ * wrapper that, on a *successful* provision, registers the provisioned host as a
+ * reachable `runtime/rpc` target — and on destroy, ROUTES teardown to
+ * `infra/sandbox` (via the `sandboxResourceId`) and deregisters. Fleet routes
+ * teardown; it never performs it.
+ *
+ * THE SPINE (correction #4): discovery and provisioning SHARE the
+ * `runtime/rpc` output contract but NOT a lifecycle. The lifecycle distinction
+ * is enforced *in the type system*:
+ *   - `FleetDiscoveryAdapter` (@vibesdotdev/platform/fleets/pairing) has NO destroy.
+ *   - `FleetProvisioningAdapter` (here) HAS one — it owns a billable resource.
+ * Same output (`RuntimeRpcDescriptor`), different obligation.
+ *
+ * THE PROVISION + TEARDOWN CALLS ARE PORTS (`SandboxProvisioner`), injected by
+ * the caller. The CONTRACT is the deliverable — a test supplies a mock; the host
+ * app wires platform's `hosts.provision({ sandbox })` flow (which resolves an
+ * `infra/sandbox` impl) and the infra teardown. This package never creates or
+ * bills a resource itself.
+ */
+import { RuntimeRpcDescriptorSchema } from '@vibesdotdev/kernel-rpc';
+/** The provisioning adapter id. `infra/sandbox` remains the lifecycle owner. */
+export const SANDBOX_PROVISIONING_ADAPTER_ID = 'infra/sandbox';
+/**
+ * Build the `runtime/rpc` descriptor for a freshly provisioned host. Validates
+ * against L4a's frozen `RuntimeRpcDescriptorSchema` — the SAME shape discovery
+ * emits (acceptance criterion #4). The only differences from a discovered
+ * descriptor are downstream: `origin: 'provisioned'` and the sticky (no-TTL),
+ * teardown-bearing registry entry.
+ */
+export function buildProvisionedRpcDescriptor(req, result) {
+    const transport = result.target.transport;
+    const descriptor = {
+        id: req.id,
+        kind: 'runtime/rpc',
+        name: `Provisioned host ${req.hostId}`,
+        description: `infra/sandbox-provisioned host (resource ${result.sandboxResourceId}), reachable over its daemon.`,
+        enabled: true,
+        transport,
+        target: result.target
+    };
+    if (req.auth)
+        descriptor.auth = req.auth;
+    if (req.remoteScope)
+        descriptor.remoteScope = req.remoteScope;
+    const ok = RuntimeRpcDescriptorSchema.safeParse(descriptor);
+    if (!ok.success) {
+        throw new Error(`infra/sandbox provisioning: built an invalid runtime/rpc descriptor: ${ok.error.message}`);
+    }
+    return descriptor;
+}
+/** Build the `fleet/host` descriptor for a provisioned host (origin: 'provisioned'). */
+export function buildProvisionedHostDescriptor(req, result) {
+    return {
+        id: req.id,
+        kind: 'fleet/host',
+        hostRecordId: req.hostRecordId,
+        hostId: req.hostId,
+        origin: 'provisioned',
+        sourceAdapterId: SANDBOX_PROVISIONING_ADAPTER_ID,
+        // The IaaS handle the lifecycle owner needs to tear down.
+        sandboxResourceId: result.sandboxResourceId
+    };
+}
+/**
+ * Create the sandbox provisioning bridge over an injected {@link SandboxProvisioner}
+ * port and the reachable-runtime registry.
+ *
+ * `provision`:
+ *   1. Calls the provisioner (`infra/sandbox` create/bill — NOT here).
+ *   2. On success, registers a `runtime/rpc` descriptor as a `provisioned` entry
+ *      (sticky — no TTL; provisioned hosts persist until explicit destroy).
+ *   3. Returns the `fleet/host` + `runtime/rpc` descriptors.
+ *
+ * `destroy`:
+ *   1. Looks up the entry, ROUTES teardown to the provisioner via the
+ *      `sandboxResourceId` (`infra/sandbox` acts — NOT here).
+ *   2. Deregisters the entry.
+ *
+ * If the underlying provision throws, NOTHING is registered (no half-state).
+ */
+export function createSandboxProvisioningAdapter(provisioner, registry) {
+    /** hostId → the resource id needed to route teardown. Bounded to provisioned-by-this-bridge. */
+    const sandboxResourceByHost = new Map();
+    return {
+        id: SANDBOX_PROVISIONING_ADAPTER_ID,
+        async provision(req) {
+            // 1. infra/sandbox creates + bills. If this throws, nothing is registered.
+            const result = await provisioner.provision(req);
+            // 2. Register the provisioned host as a reachable rpc target — sticky.
+            const rpc = buildProvisionedRpcDescriptor(req, result);
+            registry.register({
+                rpc,
+                origin: 'provisioned',
+                sourceAdapterId: SANDBOX_PROVISIONING_ADAPTER_ID,
+                // provisioned entries are sticky until explicit destroy (no TTL).
+                registeredAt: new Date().toISOString()
+            });
+            sandboxResourceByHost.set(req.id, result.sandboxResourceId);
+            const host = buildProvisionedHostDescriptor(req, result);
+            return { host, rpc };
+        },
+        async destroy(hostId) {
+            // Route teardown to infra/sandbox — the bridge does not perform it.
+            const sandboxResourceId = sandboxResourceByHost.get(hostId) ??
+                (registry.get(hostId)?.origin === 'provisioned'
+                    ? // Fall back to the registry record if we don't have it cached.
+                        extractSandboxResourceId(registry.get(hostId))
+                    : undefined);
+            if (sandboxResourceId) {
+                await provisioner.destroy(sandboxResourceId);
+            }
+            // Deregister AFTER infra teardown is routed.
+            registry.deregister(hostId);
+            sandboxResourceByHost.delete(hostId);
+        }
+    };
+}
+/**
+ * Best-effort recovery of the `sandboxResourceId` from a registry entry. The
+ * rpc descriptor does not carry it (it is a host-record concern), so this is only
+ * a hook for a future entry that stamps it; today it returns undefined and the
+ * in-memory cache is the source of truth. Kept so the teardown path has one
+ * resolution point.
+ */
+function extractSandboxResourceId(_entry) {
+    return undefined;
+}
+//# sourceMappingURL=sandbox-provisioning-adapter.js.map

package/dist/fleets/provisioning/sandbox-provisioning-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-provisioning-adapter.js","sourceRoot":"","sources":["../../../src/fleets/provisioning/sandbox-provisioning-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACN,0BAA0B,EAG1B,MAAM,yBAAyB,CAAC;AAIjC,gFAAgF;AAChF,MAAM,CAAC,MAAM,+BAA+B,GAAG,eAAe,CAAC;AA8E/D;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC5C,GAAyB,EACzB,MAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAkB;QACjC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,oBAAoB,GAAG,CAAC,MAAM,EAAE;QACtC,WAAW,EAAE,4CAA4C,MAAM,CAAC,iBAAiB,+BAA+B;QAChH,OAAO,EAAE,IAAI;QACb,SAAS;QACT,MAAM,EAAE,MAAM,CAAC,MAAM;KACrB,CAAC;IACF,IAAI,GAAG,CAAC,IAAI;QAAE,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACzC,IAAI,GAAG,CAAC,WAAW;QAAE,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IAC9D,MAAM,EAAE,GAAG,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wEAAwE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,8BAA8B,CAC7C,GAAyB,EACzB,MAAgC;IAEhC,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,aAAa;QACrB,eAAe,EAAE,+BAA+B;QAChD,0DAA0D;QAC1D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC3C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gCAAgC,CAC/C,WAA+B,EAC/B,QAAkC;IAElC,gGAAgG;IAChG,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,OAAO;QACN,EAAE,EAAE,+BAA+B;QAEnC,KAAK,CAAC,SAAS,CAAC,GAAyB;YACxC,2EAA2E;YAC3E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAEhD,uEAAuE;YACvE,MAAM,GAAG,GAAG,6BAA6B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvD,QAAQ,CAAC,QAAQ,CAAC;gBACjB,GAAG;gBACH,MAAM,EAAE,aAAa;gBACrB,eAAe,EAAE,+BAA+B;gBAChD,kEAAkE;gBAClE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YACH,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAE5D,MAAM,IAAI,GAAG,8BAA8B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAc;YAC3B,oEAAoE;YACpE,MAAM,iBAAiB,GACtB,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;gBACjC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,aAAa;oBAC9C,CAAC,CAAC,+DAA+D;wBAChE,wBAAwB,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC/C,CAAC,CAAC,SAAS,CAAC,CAAC;YAEf,IAAI,iBAAiB,EAAE,CAAC;gBACvB,MAAM,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC9C,CAAC;YACD,6CAA6C;YAC7C,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5B,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,MAAmD;IACpF,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/fleets/registry/reachable-runtime.d.ts

@@ -0,0 +1,115 @@
+/**
+ * The reachable-runtime registry shape (fleet.md §4.1).
+ *
+ * Discovery and provisioning are *different kinds with different lifecycles*
+ * that share *one output contract* — a `runtime/rpc` descriptor registered
+ * into this registry. This module defines that shared output shape and the
+ * in-memory registry surface that fleet adapters (Phase 3) populate.
+ *
+ * Phase 2 scope (L6a): the registry *shape* is defined here but populated by
+ * no adapters yet. A simple in-memory implementation is provided so the fleet
+ * kinds can resolve against in-memory descriptors and tests can exercise the
+ * contract.
+ *
+ * OWNERSHIP NOTE: the canonical `RuntimeRpcDescriptor` schema is owned by L4
+ * `runtime-rpc` (`@vibesdotdev/kernel-rpc`). Both the descriptor type and the
+ * connection-`CredentialReference` shape are imported from there and re-exported
+ * for fleet consumers; this lane never re-declares or varies their shape. Fleet
+ * adapters CONSTRUCT this descriptor; they never define it. (INDEX §5: the RPC
+ * descriptor is L4-canonical.)
+ */
+import type { RuntimeRpcDescriptor, CredentialReference } from '@vibesdotdev/kernel-rpc';
+/**
+ * The shared output contract of both adapter families (fleet.md §4.5), owned by
+ * L4 `runtime-rpc`. Re-exported here so fleet consumers have one import; the
+ * shape is the canonical `@vibesdotdev/kernel-rpc` type, not a fleet variant.
+ */
+export type { RuntimeRpcDescriptor } from '@vibesdotdev/kernel-rpc';
+/**
+ * Connection credential reference (the canonical connector-base shape, owned by
+ * L4 `runtime-rpc`). A bearer token authorizes a *connection*; it never
+ * authorizes an *invoke* — per-invoke authz + friction are L5's two callee
+ * gates. Resolved via `secrets/store`; never a bare token in a descriptor.
+ *
+ * Re-exported under the historical `FleetCredentialReference` alias for fleet
+ * consumers; it IS `@vibesdotdev/kernel-rpc`'s `CredentialReference` — no
+ * `source: 'inline'` bare-token variant exists.
+ */
+export type FleetCredentialReference = CredentialReference;
+export type { CredentialReference } from '@vibesdotdev/kernel-rpc';
+/**
+ * A registry entry pairs the shared `RuntimeRpcDescriptor` output with the
+ * lifecycle metadata that distinguishes a discovered candidate from a
+ * provisioned, billable resource (fleet.md §4.1, §10 open-question 1).
+ */
+export interface ReachableRuntimeEntry {
+    /** The shared output contract registered into the reachable-runtime registry. */
+    readonly rpc: RuntimeRpcDescriptor;
+    /** How this entry entered the registry — drives the eviction/teardown contract. */
+    readonly origin: 'provisioned' | 'discovered';
+    /** The adapter that registered it (e.g. 'infra/sandbox', 'fleet/discovery/mdns'). */
+    readonly sourceAdapterId: string;
+    /**
+     * For `discovered` entries: an optional staleness TTL (seconds) the adapter
+     * advertises (e.g. mDNS TTL). `provisioned` entries are sticky until an
+     * explicit `destroy` (fleet.md §10 open-question 1). Absent = no eviction.
+     */
+    readonly ttlSeconds?: number;
+    /** When this entry was last (re)registered, ISO-8601. Used for TTL eviction. */
+    readonly registeredAt: string;
+    /**
+     * Broker-written relay presence for a `transport: 'relay'` entry: `true` when
+     * the daemon's outbound WebSocket is currently open at the broker DO, `false`
+     * when the broker last saw it close. Mirrors the platform host record's
+     * authoritative `relayReachable` flag (fleet-relay D-R1); the discovery adapter
+     * threads it here when known so the fleet/host health probe can report a relay
+     * host's liveness without an http origin to poll. Absent = presence unknown.
+     */
+    readonly relayReachable?: boolean;
+}
+/** Committed registry changes consumed by package-owned runtime projections. */
+export type ReachableRuntimeRegistryEvent = {
+    readonly type: 'upserted';
+    readonly entry: ReachableRuntimeEntry;
+    readonly previous?: ReachableRuntimeEntry;
+} | {
+    readonly type: 'deregistered';
+    readonly entry: ReachableRuntimeEntry;
+};
+/**
+ * The reachable-runtime registry surface (fleet.md §4.1).
+ *
+ * A *set of `runtime/rpc` descriptors*, each pointing at a reachable runtime.
+ * The resolver (owned by L1/L4) walks these to extend the candidate set when a
+ * call-site asks for a remote constraint. Fleet's job is to *populate* this
+ * registry from two sources (discovery + provisioning) and to *expose* a host
+ * as one of those targets.
+ *
+ * Remote is never silent (correction #1): membership here makes a runtime a
+ * *candidate*, never a default. A consumer reaches it only via an explicit
+ * `.on(ref)` / `.matching()` constraint.
+ */
+export interface ReachableRuntimeRegistry {
+    /** Register (or replace, by `rpc.id`) a reachable-runtime entry. */
+    register(entry: ReachableRuntimeEntry): void;
+    /** Remove an entry by its `rpc.id`. No-op if absent. */
+    deregister(rpcId: string): void;
+    /** Look up a single entry by its `rpc.id`. */
+    get(rpcId: string): ReachableRuntimeEntry | undefined;
+    /** All currently registered entries. */
+    all(): readonly ReachableRuntimeEntry[];
+    /**
+     * Observe committed upserts and removals. The current state has already
+     * changed when listeners run. This is the package-owned composition seam used
+     * by the fleet registry bridge so discovery refresh and TTL eviction update
+     * runtime queries without app-owned descriptor mutation.
+     */
+    subscribe(listener: (event: ReachableRuntimeRegistryEvent) => void): () => void;
+}
+/**
+ * A minimal in-memory `ReachableRuntimeRegistry` (Phase 2). Keyed by
+ * `entry.rpc.id`; `register` upserts. Adapters (Phase 3) and the resolver
+ * (L4) consume this surface; consumers never call it directly.
+ */
+export declare function createInMemoryReachableRuntimeRegistry(): ReachableRuntimeRegistry;
+//# sourceMappingURL=reachable-runtime.d.ts.map

package/dist/fleets/registry/reachable-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reachable-runtime.d.ts","sourceRoot":"","sources":["../../../src/fleets/registry/reachable-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEzF;;;;GAIG;AACH,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC;IACnC,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CAAC;IAC9C,qFAAqF;IACrF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,gFAAgF;AAChF,MAAM,MAAM,6BAA6B,GACtC;IACA,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CACzC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACrC,CAAC;AAEL;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,wBAAwB;IACxC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wDAAwD;IACxD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8CAA8C;IAC9C,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAAC;IACtD,wCAAwC;IACxC,GAAG,IAAI,SAAS,qBAAqB,EAAE,CAAC;IACxC;;;;;OAKG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,6BAA6B,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAChF;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,IAAI,wBAAwB,CA0BjF"}

package/dist/fleets/registry/reachable-runtime.js

@@ -0,0 +1,56 @@
+/**
+ * The reachable-runtime registry shape (fleet.md §4.1).
+ *
+ * Discovery and provisioning are *different kinds with different lifecycles*
+ * that share *one output contract* — a `runtime/rpc` descriptor registered
+ * into this registry. This module defines that shared output shape and the
+ * in-memory registry surface that fleet adapters (Phase 3) populate.
+ *
+ * Phase 2 scope (L6a): the registry *shape* is defined here but populated by
+ * no adapters yet. A simple in-memory implementation is provided so the fleet
+ * kinds can resolve against in-memory descriptors and tests can exercise the
+ * contract.
+ *
+ * OWNERSHIP NOTE: the canonical `RuntimeRpcDescriptor` schema is owned by L4
+ * `runtime-rpc` (`@vibesdotdev/kernel-rpc`). Both the descriptor type and the
+ * connection-`CredentialReference` shape are imported from there and re-exported
+ * for fleet consumers; this lane never re-declares or varies their shape. Fleet
+ * adapters CONSTRUCT this descriptor; they never define it. (INDEX §5: the RPC
+ * descriptor is L4-canonical.)
+ */
+/**
+ * A minimal in-memory `ReachableRuntimeRegistry` (Phase 2). Keyed by
+ * `entry.rpc.id`; `register` upserts. Adapters (Phase 3) and the resolver
+ * (L4) consume this surface; consumers never call it directly.
+ */
+export function createInMemoryReachableRuntimeRegistry() {
+    const entries = new Map();
+    const listeners = new Set();
+    return {
+        register(entry) {
+            const previous = entries.get(entry.rpc.id);
+            entries.set(entry.rpc.id, entry);
+            for (const listener of listeners)
+                listener({ type: 'upserted', entry, previous });
+        },
+        deregister(rpcId) {
+            const entry = entries.get(rpcId);
+            if (!entry)
+                return;
+            entries.delete(rpcId);
+            for (const listener of listeners)
+                listener({ type: 'deregistered', entry });
+        },
+        get(rpcId) {
+            return entries.get(rpcId);
+        },
+        all() {
+            return [...entries.values()];
+        },
+        subscribe(listener) {
+            listeners.add(listener);
+            return () => listeners.delete(listener);
+        }
+    };
+}
+//# sourceMappingURL=reachable-runtime.js.map

package/dist/fleets/registry/reachable-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reachable-runtime.js","sourceRoot":"","sources":["../../../src/fleets/registry/reachable-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAkGH;;;;GAIG;AACH,MAAM,UAAU,sCAAsC;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC5E,OAAO;QACN,QAAQ,CAAC,KAAK;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACjC,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,UAAU,CAAC,KAAK;YACf,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtB,KAAK,MAAM,QAAQ,IAAI,SAAS;gBAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,GAAG,CAAC,KAAK;YACR,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,GAAG;YACF,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,SAAS,CAAC,QAAQ;YACjB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/fleets/registry-bridge.plugin.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Fleet registry bridge plugin (hqx-w1-fleet, item 1/2).
+ *
+ * Bridges the reachable-runtime registry into the `fleet/host` kind: for each
+ * http entry in the registry, registers a `fleet/host` descriptor + a loader
+ * that creates a `FleetHostInstance` impl. After this plugin is registered,
+ * `query('fleet/host').allWithDescriptors()` returns the discovered/provisioned
+ * hosts with live `health()` probes.
+ *
+ * The health probe is a `GET /rpc/connect` to the daemon's origin: a 2xx/4xx
+ * means the daemon is running (the transport answers); a network error or 5xx
+ * means unreachable/degraded.
+ *
+ * PATTERN: same as `createFleetDaemonConnectPlugin` in @vibesdotdev/platform/fleets/daemon.
+ * Existing entries are projected during registration and newly discovered IDs
+ * are projected through the registry subscription. The app owns adapter choice;
+ * this package owns descriptor/loader composition.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { ReachableRuntimeEntry, ReachableRuntimeRegistry } from './registry/reachable-runtime.ts';
+/** The bridge plugin's own id. */
+export declare const FLEET_REGISTRY_BRIDGE_PLUGIN_ID = "fleet-registry-bridge";
+/**
+ * Create the fleet registry bridge plugin. Projects entries already present at
+ * runtime registration and observes new HTTP/relay identities registered later.
+ *
+ * Usage:
+ * ```ts
+ * // Discovery may populate the registry before or after runtime activation:
+ * await bootstrapVibesRuntime({
+ *   environment, // the host's environment plugin
+ *   composition: {
+ *     kind: 'literal',
+ *     plugins: [
+ *       async () => ({ default: fleetPlugin }),
+ *       async () => ({ default: createFleetRegistryBridgePlugin({ registry }) })
+ *     ]
+ *   }
+ * });
+ * // Now query('fleet/host').allWithDescriptors() returns the discovered hosts.
+ * ```
+ */
+/**
+ * Mount one reachable identity into the runtime that owns its lifetime.
+ *
+ * This is deliberately package-internal: long-lived discovery uses the bridge
+ * plugin below, while request-scoped consumers use `FleetClient.withHost()`,
+ * which calls this only against a private runtime and disposes it afterward.
+ * Apps never receive a raw descriptor-registration function.
+ */
+export declare function mountReachableRuntimeEntry(runtime: RuntimeRef, entry: ReachableRuntimeEntry, options: {
+    registerHttpLoader?: boolean;
+}): {
+    descriptor: {
+        id: string;
+        kind: "fleet/host";
+        hostRecordId: string;
+        hostId: string;
+        origin: "discovered" | "provisioned";
+        sourceAdapterId: string;
+        name?: string | undefined;
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        hardware?: string[] | undefined;
+        enabled?: boolean | undefined;
+        priority?: number | undefined;
+        capabilityId?: string | undefined;
+        requiredContext?: string[] | undefined;
+        optionalContext?: string[] | undefined;
+        config?: unknown;
+        retention?: string | {
+            reason: string;
+            maxAgeDays?: number | undefined;
+            maxEntries?: number | undefined;
+            maxBytes?: number | undefined;
+            cascadeFrom?: string | undefined;
+            ageField?: string | undefined;
+            enforcedBy?: string | undefined;
+        } | undefined;
+        sandboxResourceId?: string | null | undefined;
+    };
+    dispose: () => void;
+};
+export declare function createFleetRegistryBridgePlugin(options: {
+    /**
+     * Fixed registry for a deliberately standalone composition. Runtime-hosted
+     * apps should prefer `resolveRegistry` so each runtime owns its registry.
+     */
+    readonly registry?: ReachableRuntimeRegistry;
+    /** Resolve the registry from the runtime that is registering this plugin. */
+    readonly resolveRegistry?: (runtime: RuntimeRef) => ReachableRuntimeRegistry | Promise<ReachableRuntimeRegistry>;
+    /**
+     * Register the HTTP `runtime/rpc` loader alongside each HTTP fleet host.
+     * Enable this in standalone consumers that do not compose the fleet-daemon
+     * connect plugin. Relay loaders are always registered here.
+     */
+    readonly registerHttpLoader?: boolean;
+}): import("@vibesdotdev/kernel").RuntimePlugin;
+export default createFleetRegistryBridgePlugin;
+//# sourceMappingURL=registry-bridge.plugin.d.ts.map

package/dist/fleets/registry-bridge.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-bridge.plugin.d.ts","sourceRoot":"","sources":["../../src/fleets/registry-bridge.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAsD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAI1G,OAAO,KAAK,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAEvG,kCAAkC;AAClC,eAAO,MAAM,+BAA+B,0BAA0B,CAAC;AAoGvE;;;;;;;;;;;;;;;;;;;GAmBG;AACH;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,qBAAqB,EAC5B,OAAO,EAAE;IAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCzC;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACxD;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,CAC1B,OAAO,EAAE,UAAU,KACf,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAClE;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAItC,+CAkDA;AAED,eAAe,+BAA+B,CAAC"}