@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/fleets/registry-bridge.plugin.js

@@ -0,0 +1,218 @@
+/**
+ * Fleet registry bridge plugin (hqx-w1-fleet, item 1/2).
+ *
+ * Bridges the reachable-runtime registry into the `fleet/host` kind: for each
+ * http entry in the registry, registers a `fleet/host` descriptor + a loader
+ * that creates a `FleetHostInstance` impl. After this plugin is registered,
+ * `query('fleet/host').allWithDescriptors()` returns the discovered/provisioned
+ * hosts with live `health()` probes.
+ *
+ * The health probe is a `GET /rpc/connect` to the daemon's origin: a 2xx/4xx
+ * means the daemon is running (the transport answers); a network error or 5xx
+ * means unreachable/degraded.
+ *
+ * PATTERN: same as `createFleetDaemonConnectPlugin` in @vibesdotdev/platform/fleets/daemon.
+ * Existing entries are projected during registration and newly discovered IDs
+ * are projected through the registry subscription. The app owns adapter choice;
+ * this package owns descriptor/loader composition.
+ */
+import { createRuntimePlugin, settle } from '@vibesdotdev/kernel';
+import { registerDynamicRelayRpcAsset } from '@vibesdotdev/kernel-rpc/relay';
+import { registerDynamicHttpRpcAsset } from '@vibesdotdev/kernel-rpc/http';
+import { fleetHostKind } from "./kinds/host.kind.js";
+/** The bridge plugin's own id. */
+export const FLEET_REGISTRY_BRIDGE_PLUGIN_ID = 'fleet-registry-bridge';
+/** The RPC connect endpoint path (from @vibesdotdev/kernel-rpc/http). */
+const RPC_CONNECT_PATH = '/rpc/connect';
+/** Health probe timeout (ms). */
+const HEALTH_PROBE_TIMEOUT_MS = 5000;
+/**
+ * Probe the daemon at `origin` by fetching `GET /rpc/connect`, bounded on the
+ * owning runtime's lifecycle (RC07). Any HTTP response (a 401 included) means
+ * the daemon is up: 'reachable'. No answer within the bound, or a network
+ * failure, is this probe's one other outcome: 'unreachable'.
+ */
+async function probeHealth(lifecycle, origin) {
+    const outcome = await settle(() => lifecycle.wait((signal) => fetch(`${origin}${RPC_CONNECT_PATH}`, { method: 'GET', signal }), {
+        timeoutMs: HEALTH_PROBE_TIMEOUT_MS, reason: 'fleet-host-health-probe'
+    }));
+    return { state: outcome.ok ? 'reachable' : 'unreachable', at: new Date().toISOString() };
+}
+/**
+ * Build a `FleetHostDescriptor` from a `ReachableRuntimeEntry`. Projects the
+ * registry entry's fields into the fleet/host kind's descriptor shape.
+ */
+function entryToFleetHostDescriptor(entry) {
+    const rpc = entry.rpc;
+    // Platform relay descriptors deliberately use two different identities:
+    // rpc.id is the stable Platform host-record id while target.hostId is the
+    // daemon's routing id. Never collapse the latter back to the record id; the
+    // relay broker keys its Durable Object by the real machine hostId.
+    const hostId = rpc.target.transport === 'relay' ? rpc.target.hostId : rpc.id;
+    return {
+        id: rpc.id,
+        kind: 'fleet/host',
+        name: rpc.name ?? rpc.id,
+        description: rpc.description ?? `Fleet host discovered by ${entry.sourceAdapterId}`,
+        enabled: rpc.enabled !== false,
+        // FK to the platform record — not available from a raw rpc descriptor,
+        // so we use the rpc.id as a placeholder. The L6c boundary subscriber
+        // would fill this from the platform record if available.
+        hostRecordId: rpc.id,
+        hostId,
+        origin: entry.origin,
+        sourceAdapterId: entry.sourceAdapterId,
+        sandboxResourceId: undefined
+    };
+}
+/**
+ * Build a `FleetHostInstance` from a registry entry. The `health()` method
+ * probes `GET /rpc/connect` on the daemon's origin.
+ */
+function entryToFleetHostInstance(entry, descriptor, lifecycle) {
+    const rpc = entry.rpc;
+    const origin = rpc.target.transport === 'http' ? rpc.target.origin : null;
+    const isRelay = rpc.target.transport === 'relay';
+    return {
+        id: descriptor.id,
+        descriptor,
+        async health() {
+            // http host: poll the daemon's origin directly.
+            if (origin) {
+                return probeHealth(lifecycle, origin);
+            }
+            // relay host (NAT'd home machine): there is no daemon origin to poll —
+            // the broker DO holds the authoritative presence. Report it from the
+            // broker-written `relayReachable` flag threaded onto the entry; only
+            // fall back to 'unknown' when presence is genuinely undetermined. This
+            // is the difference between "relay hosts are silently always unknown"
+            // (the old hardcoded value) and a real liveness signal.
+            if (isRelay && entry.relayReachable !== undefined) {
+                const state = entry.relayReachable ? 'reachable' : 'unreachable';
+                return { state, at: new Date().toISOString() };
+            }
+            return { state: 'unknown', at: new Date().toISOString() };
+        },
+        async discoverCapabilities() {
+            // Stub: capabilities are discovered via the execution kind's
+            // `getCapabilities()` over RPC (L6d). For Phase 3, return an empty map.
+            return { labels: [] };
+        },
+        rpcTarget() {
+            return rpc;
+        }
+    };
+}
+/**
+ * Create the fleet registry bridge plugin. Projects entries already present at
+ * runtime registration and observes new HTTP/relay identities registered later.
+ *
+ * Usage:
+ * ```ts
+ * // Discovery may populate the registry before or after runtime activation:
+ * await bootstrapVibesRuntime({
+ *   environment, // the host's environment plugin
+ *   composition: {
+ *     kind: 'literal',
+ *     plugins: [
+ *       async () => ({ default: fleetPlugin }),
+ *       async () => ({ default: createFleetRegistryBridgePlugin({ registry }) })
+ *     ]
+ *   }
+ * });
+ * // Now query('fleet/host').allWithDescriptors() returns the discovered hosts.
+ * ```
+ */
+/**
+ * Mount one reachable identity into the runtime that owns its lifetime.
+ *
+ * This is deliberately package-internal: long-lived discovery uses the bridge
+ * plugin below, while request-scoped consumers use `FleetClient.withHost()`,
+ * which calls this only against a private runtime and disposes it afterward.
+ * Apps never receive a raw descriptor-registration function.
+ */
+export function mountReachableRuntimeEntry(runtime, entry, options) {
+    if (!runtime.hasKind(fleetHostKind.id))
+        runtime.registerKind(fleetHostKind);
+    const descriptor = entryToFleetHostDescriptor(entry);
+    const impl = entryToFleetHostInstance(entry, descriptor, runtime.lifecycle);
+    const disposeHost = runtime.registerDynamicAsset(fleetHostKind.id, descriptor, async () => ({
+        impl
+    }));
+    let disposeRpc;
+    try {
+        if (entry.rpc.transport === 'relay') {
+            // The descriptor's `auth` resolves through this runtime's own
+            // `resolveCredential` at connect (RC05): its composed secrets/store.
+            disposeRpc = registerDynamicRelayRpcAsset(runtime, entry.rpc);
+        }
+        else if (entry.rpc.transport === 'http' && options.registerHttpLoader === true) {
+            disposeRpc = registerDynamicHttpRpcAsset(runtime, entry.rpc);
+        }
+    }
+    catch (error) {
+        disposeHost();
+        throw error;
+    }
+    let disposed = false;
+    return {
+        descriptor, dispose: () => {
+            if (disposed)
+                return;
+            disposed = true;
+            disposeRpc?.();
+            disposeHost();
+        }
+    };
+}
+export function createFleetRegistryBridgePlugin(options) {
+    const projections = new Map();
+    let unsubscribe;
+    return createRuntimePlugin({
+        id: FLEET_REGISTRY_BRIDGE_PLUGIN_ID,
+        name: 'Fleet registry bridge',
+        description: 'Bridges current and newly registered reachable runtimes into fleet/host descriptors + impls, with consumer-selected HTTP and package-owned relay runtime/rpc loaders.',
+        async onRegister(runtime) {
+            if ((options.registry === undefined) === (options.resolveRegistry === undefined)) {
+                throw new Error('Fleet registry bridge requires exactly one of registry or resolveRegistry.');
+            }
+            const registry = options.registry ?? (await options.resolveRegistry(runtime));
+            const unproject = (rpcId) => {
+                projections.get(rpcId)?.();
+                projections.delete(rpcId);
+            };
+            const project = (entry) => {
+                if (entry.rpc.transport !== 'http' && entry.rpc.transport !== 'relay') {
+                    unproject(entry.rpc.id);
+                    return;
+                }
+                const mount = mountReachableRuntimeEntry(runtime, entry, {
+                    registerHttpLoader: options.registerHttpLoader
+                });
+                // Install the replacement first, then retract only the exact previous
+                // contribution. Queries never observe a half-updated descriptor/loader pair.
+                projections.get(entry.rpc.id)?.();
+                projections.set(entry.rpc.id, mount.dispose);
+            };
+            // Close the startup race in both directions: project entries discovered
+            // before runtime activation, then observe entries discovered afterwards.
+            for (const entry of registry.all())
+                project(entry);
+            unsubscribe = registry.subscribe((event) => {
+                if (event.type === 'upserted')
+                    project(event.entry);
+                else
+                    unproject(event.entry.rpc.id);
+            });
+        },
+        onDispose() {
+            unsubscribe?.();
+            unsubscribe = undefined;
+            for (const dispose of projections.values())
+                dispose();
+            projections.clear();
+        }
+    });
+}
+export default createFleetRegistryBridgePlugin;
+//# sourceMappingURL=registry-bridge.plugin.js.map

package/dist/fleets/registry-bridge.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-bridge.plugin.js","sourceRoot":"","sources":["../../src/fleets/registry-bridge.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAA0C,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAA0E,MAAM,sBAAsB,CAAC;AAG7H,kCAAkC;AAClC,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CAAC;AAEvE,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC,iCAAiC;AACjC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,SAAyC,EAAE,MAAc;IAInF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE;QAC/H,SAAS,EAAE,uBAAuB,EAAE,MAAM,EAAE,yBAAyB;KACrE,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAE1F,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,KAA4B;IAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7E,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,4BAA4B,KAAK,CAAC,eAAe,EAAE;QACnF,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK;QAC9B,uEAAuE;QACvE,qEAAqE;QACrE,yDAAyD;QACzD,YAAY,EAAE,GAAG,CAAC,EAAE;QACpB,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,iBAAiB,EAAE,SAAS;KAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAChC,KAA4B,EAC5B,UAA+B,EAC/B,SAAyC;IAEzC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC;IAEjD,OAAO;QACN,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,UAAU;QAEV,KAAK,CAAC,MAAM;YACX,gDAAgD;YAChD,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,sEAAsE;YACtE,wDAAwD;YACxD,IAAI,OAAO,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAoB,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;gBAClF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAChD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,oBAAoB;YACzB,6DAA6D;YAC7D,wEAAwE;YACxE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;QAED,SAAS;YACR,OAAO,GAAG,CAAC;QACZ,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACzC,OAAmB,EACnB,KAA4B,EAC5B,OAAyC;IAEzC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI;KACJ,CAAC,CAAC,CAAC;IAEJ,IAAI,UAAoC,CAAC;IACzC,IAAI,CAAC;QACJ,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACrC,8DAA8D;YAC9D,qEAAqE;YACrE,UAAU,GAAG,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;YAClF,UAAU,GAAG,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,MAAM,KAAK,CAAC;IACb,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACN,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE;YACzB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,EAAE,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;QACf,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAmB/C;IACA,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,IAAI,WAAqC,CAAC;IAE1C,OAAO,mBAAmB,CAAC;QAC1B,EAAE,EAAE,+BAA+B;QACnC,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACV,uKAAuK;QACxK,KAAK,CAAC,UAAU,CAAC,OAAmB;YACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,EAAE,CAAC;gBAClF,MAAM,IAAI,KAAK,CACd,4EAA4E,CAC5E,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ,IAAI,CAAC,MAAM,OAAO,CAAC,eAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAQ,EAAE;gBACzC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAC3B,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAQ,EAAE;gBACtD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;oBACvE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACxB,OAAO;gBACR,CAAC;gBACD,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,EAAE,KAAK,EAAE;oBACxD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;iBAC9C,CAAC,CAAC;gBACH,sEAAsE;gBACtE,6EAA6E;gBAC7E,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC,CAAC;YAEF,wEAAwE;YACxE,yEAAyE;YACzE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACnD,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;oBAC/C,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,SAAS;YACR,WAAW,EAAE,EAAE,CAAC;YAChB,WAAW,GAAG,SAAS,CAAC;YACxB,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE;gBAAE,OAAO,EAAE,CAAC;YACtD,WAAW,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACD,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,+BAA+B,CAAC"}

package/dist/fleets/remote-control.d.ts

@@ -0,0 +1,4 @@
+export declare const REMOTE_CONTROL_TAG = "remote-control";
+/** Explicit descriptor admission, shared by Fleet callers and receiving hosts. */
+export declare function isRemoteControlDescriptor(descriptor: unknown): boolean;
+//# sourceMappingURL=remote-control.d.ts.map

package/dist/fleets/remote-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-control.d.ts","sourceRoot":"","sources":["../../src/fleets/remote-control.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAQnD,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAKtE"}

package/dist/fleets/remote-control.js

@@ -0,0 +1,13 @@
+import * as z from 'zod/v4';
+export const REMOTE_CONTROL_TAG = 'remote-control';
+const remoteControlDescriptorSchema = z.object({
+    id: z.string(),
+    tags: z.array(z.string()).readonly().optional(),
+    remoteControl: z.boolean().optional()
+});
+/** Explicit descriptor admission, shared by Fleet callers and receiving hosts. */
+export function isRemoteControlDescriptor(descriptor) {
+    const parsed = remoteControlDescriptorSchema.safeParse(descriptor);
+    return parsed.success && (parsed.data.remoteControl === true || parsed.data.tags?.includes(REMOTE_CONTROL_TAG) === true);
+}
+//# sourceMappingURL=remote-control.js.map

package/dist/fleets/remote-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-control.js","sourceRoot":"","sources":["../../src/fleets/remote-control.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAEnD,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,UAAU,yBAAyB,CAAC,UAAmB;IAC5D,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,IAAI,CACxB,MAAM,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAC7F,CAAC;AACH,CAAC"}

package/dist/fleets/request-credentials.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The credentials one fleet request may connect with (RC05).
+ *
+ * A request-scoped mount (`FleetClient.forRequest().withHost()`) reaches a host
+ * in a private custody runtime. The request's own credential (the actor's
+ * bearer, for example) reaches the relay or HTTP transport the only way any
+ * credential does: `runtime.resolveCredential`, answered by a `secrets/store`
+ * composed into that private runtime. This module is that store's owner. It
+ * answers reads only, holds nothing beyond the request's resolver, and lives
+ * exactly as long as the custody runtime it is registered on.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/** The id of the request-scoped credential store on a custody runtime. */
+export declare const FLEET_REQUEST_CREDENTIALS_STORE_ID = "fleet.request-credentials";
+/**
+ * The request's credential resolver: a credential key (the one a reached
+ * host's descriptor names in its `auth` reference) to its value, or
+ * `undefined` when this request holds no such credential.
+ */
+export interface FleetRequestCredentials {
+    get(key: string): Promise<string | undefined>;
+}
+/** Compose `credentials` as the `secrets/store` of one request's custody runtime. */
+export declare function registerFleetRequestCredentials(runtime: RuntimeRef, credentials: FleetRequestCredentials): void;
+//# sourceMappingURL=request-credentials.d.ts.map

package/dist/fleets/request-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-credentials.d.ts","sourceRoot":"","sources":["../../src/fleets/request-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAgD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAKpG,0EAA0E;AAC1E,eAAO,MAAM,kCAAkC,8BAA8B,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACvC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9C;AAsBD,qFAAqF;AACrF,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,uBAAuB,GAAG,IAAI,CAqB/G"}

package/dist/fleets/request-credentials.js

@@ -0,0 +1,52 @@
+/**
+ * The credentials one fleet request may connect with (RC05).
+ *
+ * A request-scoped mount (`FleetClient.forRequest().withHost()`) reaches a host
+ * in a private custody runtime. The request's own credential (the actor's
+ * bearer, for example) reaches the relay or HTTP transport the only way any
+ * credential does: `runtime.resolveCredential`, answered by a `secrets/store`
+ * composed into that private runtime. This module is that store's owner. It
+ * answers reads only, holds nothing beyond the request's resolver, and lives
+ * exactly as long as the custody runtime it is registered on.
+ */
+import { CapabilityError, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { secretsStoreKind } from '@vibesdotdev/secrets/kinds/store.kind';
+/** The id of the request-scoped credential store on a custody runtime. */
+export const FLEET_REQUEST_CREDENTIALS_STORE_ID = 'fleet.request-credentials';
+const descriptor = {
+    id: FLEET_REQUEST_CREDENTIALS_STORE_ID,
+    kind: 'secrets/store',
+    name: 'Fleet request credentials',
+    description: "One request's connect credentials, on its private custody runtime only.",
+    backend: 'fleet/request',
+    // The only store on a custody runtime, whatever tier the host declares.
+    selection: 'scope',
+    tiers: ['local', 'dev', 'staging', 'production'],
+    priority: 0
+};
+function readOnly(operation) {
+    throw new CapabilityError(`The fleet request credential store is read-only; ${operation} is not supported.`, 'PERMISSION_DENIED', { reason: 'fleet-request-credentials-read-only', retryable: false, details: { operation } });
+}
+/** Compose `credentials` as the `secrets/store` of one request's custody runtime. */
+export function registerFleetRequestCredentials(runtime, credentials) {
+    if (!runtime.hasKind(secretsStoreKind.id))
+        runtime.registerKind(secretsStoreKind);
+    const store = {
+        id: FLEET_REQUEST_CREDENTIALS_STORE_ID,
+        descriptor,
+        get: (_environment, key) => credentials.get(key),
+        // A request's credentials are never enumerated or written.
+        list: async () => readOnly('list'),
+        getAll: async () => readOnly('getAll'),
+        set: async () => readOnly('set'),
+        unset: async () => readOnly('unset'),
+        setAll: async () => readOnly('setAll')
+    };
+    runtime.registerDescriptor(secretsStoreKind.id, descriptor);
+    runtime.registerLoader(secretsStoreKind.id, FLEET_REQUEST_CREDENTIALS_STORE_ID, async () => createRuntimeImplementation({
+        kind: secretsStoreKind.id,
+        id: FLEET_REQUEST_CREDENTIALS_STORE_ID,
+        implementation: store
+    }));
+}
+//# sourceMappingURL=request-credentials.js.map

package/dist/fleets/request-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-credentials.js","sourceRoot":"","sources":["../../src/fleets/request-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAmB,MAAM,qBAAqB,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAIzE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kCAAkC,GAAG,2BAA2B,CAAC;AAW9E,MAAM,UAAU,GAA2B;IAC1C,EAAE,EAAE,kCAAkC;IACtC,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,yEAAyE;IACtF,OAAO,EAAE,eAAe;IACxB,wEAAwE;IACxE,SAAS,EAAE,OAAO;IAClB,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC;IAChD,QAAQ,EAAE,CAAC;CACX,CAAC;AAEF,SAAS,QAAQ,CAAC,SAAiB;IAClC,MAAM,IAAI,eAAe,CACxB,oDAAoD,SAAS,oBAAoB,EACjF,mBAAmB,EACnB,EAAE,MAAM,EAAE,qCAAqC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAC3F,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,+BAA+B,CAAC,OAAmB,EAAE,WAAoC;IACxG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAClF,MAAM,KAAK,GAA+B;QACzC,EAAE,EAAE,kCAAkC;QACtC,UAAU;QACV,GAAG,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAChD,2DAA2D;QAC3D,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACtC,CAAC;IACF,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5D,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,EAAE,kCAAkC,EAAE,KAAK,IAAI,EAAE,CAC1F,2BAA2B,CAAC;QAC3B,IAAI,EAAE,gBAAgB,CAAC,EAAE;QACzB,EAAE,EAAE,kCAAkC;QACtC,cAAc,EAAE,KAAK;KACrB,CAAC,CACF,CAAC;AACH,CAAC"}

package/dist/fleets/restricted-workload.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Restricted-workload fleet hosts.
+ *
+ * A host that may run provider-sensitive work (game servers, high UDP/IO)
+ * launches only on the owner's own provider account. The Vibes platform
+ * token and startup credits are not a fallback.
+ */
+export declare const GAME_SERVER_PRESET = "game-server";
+export declare const GAME_SERVER_SERVICE_KIND = "game/server";
+export declare const FLEET_RESTRICTED_WORKLOAD_FEATURE = "fleet-restricted-workload";
+/** Keys that resolve the Vibes-paid DigitalOcean token. Never an owner credential. */
+export declare const PLATFORM_PROVIDER_TOKEN_KEYS: readonly ["VIBES_SYSTEM_DIGITALOCEAN_API_KEY", "DIGITALOCEAN_API_TOKEN", "DIGITALOCEAN_ACCESS_TOKEN", "DIGITALOCEAN_TOKEN", "DIGITALOCEAN_API_KEY"];
+export declare function isPlatformProviderTokenKey(key: string): boolean;
+export declare function isGameServerRequest(input: {
+    preset?: string;
+    gameServer?: boolean;
+    labels?: readonly string[];
+}): boolean;
+export interface RestrictedProvisionDecision {
+    restrictedWorkload: boolean;
+    preset?: string;
+    workload?: string;
+    serviceKind?: string;
+    ownerProviderCredentialKey?: string;
+    error?: string;
+}
+export declare function decideRestrictedProvision(input: {
+    restrictedWorkload?: boolean;
+    preset?: string;
+    gameServer?: boolean;
+    labels?: readonly string[];
+    ownerProviderCredentialKey?: string;
+}): RestrictedProvisionDecision;
+/**
+ * Existing hosts do not change bill class in place. Turning the flag off
+ * would launder owner-account compute onto credits; turning it on would
+ * leave a droplet that was created with the platform token.
+ */
+export declare function assertRestrictedWorkloadMutation(current: boolean, next: boolean | undefined): string | null;
+export declare function fleetAttributionTags(input: {
+    hostId: string;
+    restricted: boolean;
+    ownerType: string;
+    ownerId: string;
+    preset?: string;
+    workload?: string;
+}): string[];
+//# sourceMappingURL=restricted-workload.d.ts.map

package/dist/fleets/restricted-workload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-workload.d.ts","sourceRoot":"","sources":["../../src/fleets/restricted-workload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAChD,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,iCAAiC,8BAA8B,CAAC;AAE7E,sFAAsF;AACtF,eAAO,MAAM,4BAA4B,qJAM/B,CAAC;AAEX,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B,GAAG,OAAO,CAMV;AAED,MAAM,WAAW,2BAA2B;IAC3C,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAChD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACpC,GAAG,2BAA2B,CAiC9B;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC/C,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,OAAO,GAAG,SAAS,GACvB,MAAM,GAAG,IAAI,CAMf;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,EAAE,CAaX"}

package/dist/fleets/restricted-workload.js

@@ -0,0 +1,91 @@
+/**
+ * Restricted-workload fleet hosts.
+ *
+ * A host that may run provider-sensitive work (game servers, high UDP/IO)
+ * launches only on the owner's own provider account. The Vibes platform
+ * token and startup credits are not a fallback.
+ */
+export const GAME_SERVER_PRESET = 'game-server';
+export const GAME_SERVER_SERVICE_KIND = 'game/server';
+export const FLEET_RESTRICTED_WORKLOAD_FEATURE = 'fleet-restricted-workload';
+/** Keys that resolve the Vibes-paid DigitalOcean token. Never an owner credential. */
+export const PLATFORM_PROVIDER_TOKEN_KEYS = [
+    'VIBES_SYSTEM_DIGITALOCEAN_API_KEY',
+    'DIGITALOCEAN_API_TOKEN',
+    'DIGITALOCEAN_ACCESS_TOKEN',
+    'DIGITALOCEAN_TOKEN',
+    'DIGITALOCEAN_API_KEY'
+];
+export function isPlatformProviderTokenKey(key) {
+    return PLATFORM_PROVIDER_TOKEN_KEYS.some((candidate) => candidate === key);
+}
+export function isGameServerRequest(input) {
+    if (input.gameServer)
+        return true;
+    if (input.preset === GAME_SERVER_PRESET)
+        return true;
+    return (input.labels ?? []).some((label) => label === GAME_SERVER_SERVICE_KIND || label === GAME_SERVER_PRESET || label.startsWith('game:'));
+}
+export function decideRestrictedProvision(input) {
+    const game = isGameServerRequest(input);
+    const restricted = game || input.restrictedWorkload === true;
+    if (!restricted) {
+        return { restrictedWorkload: false };
+    }
+    const key = input.ownerProviderCredentialKey?.trim();
+    if (!key) {
+        return {
+            restrictedWorkload: true,
+            preset: game ? GAME_SERVER_PRESET : input.preset,
+            workload: game ? 'game-server' : 'restricted',
+            serviceKind: game ? GAME_SERVER_SERVICE_KIND : undefined,
+            error: 'This host may run workloads providers restrict. Compute bills to your cloud account, not Vibes credits. Bind an owner provider credential key first.'
+        };
+    }
+    if (isPlatformProviderTokenKey(key)) {
+        return {
+            restrictedWorkload: true,
+            preset: game ? GAME_SERVER_PRESET : input.preset,
+            workload: game ? 'game-server' : 'restricted',
+            serviceKind: game ? GAME_SERVER_SERVICE_KIND : undefined,
+            error: `Credential key "${key}" is a Vibes platform token. Restricted hosts cannot use sponsor credits.`
+        };
+    }
+    return {
+        restrictedWorkload: true,
+        preset: game ? GAME_SERVER_PRESET : input.preset,
+        workload: game ? 'game-server' : 'restricted',
+        serviceKind: game ? GAME_SERVER_SERVICE_KIND : undefined,
+        ownerProviderCredentialKey: key
+    };
+}
+/**
+ * Existing hosts do not change bill class in place. Turning the flag off
+ * would launder owner-account compute onto credits; turning it on would
+ * leave a droplet that was created with the platform token.
+ */
+export function assertRestrictedWorkloadMutation(current, next) {
+    if (next === undefined || next === current)
+        return null;
+    if (current && !next) {
+        return 'Cannot turn restricted-workload off after the host was provisioned. Recreate it if the workload changed.';
+    }
+    return 'Cannot turn restricted-workload on while the host still exists on the platform token. Recreate it on the owner provider account.';
+}
+export function fleetAttributionTags(input) {
+    const bill = input.restricted ? 'owner-provider' : 'platform';
+    const tags = [
+        'vibes.role=fleet-host',
+        `vibes.restricted=${input.restricted ? 'true' : 'false'}`,
+        `vibes.hostId=${input.hostId}`,
+        `vibes.ownerType=${input.ownerType}`,
+        `vibes.ownerId=${input.ownerId}`,
+        `vibes.bill=${bill}`
+    ];
+    if (input.workload)
+        tags.push(`vibes.workload=${input.workload}`);
+    if (input.preset)
+        tags.push(`vibes.preset=${input.preset}`);
+    return tags;
+}
+//# sourceMappingURL=restricted-workload.js.map

package/dist/fleets/restricted-workload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-workload.js","sourceRoot":"","sources":["../../src/fleets/restricted-workload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAChD,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AACtD,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC;AAE7E,sFAAsF;AACtF,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC3C,mCAAmC;IACnC,wBAAwB;IACxB,2BAA2B;IAC3B,oBAAoB;IACpB,sBAAsB;CACb,CAAC;AAEX,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACrD,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACA,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,wBAAwB,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAC1G,CAAC;AACH,CAAC;AAWD,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IACA,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAAC;IAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;YACN,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YAChD,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;YAC7C,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;YACxD,KAAK,EACJ,sJAAsJ;SACvJ,CAAC;IACH,CAAC;IACD,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO;YACN,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YAChD,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;YAC7C,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;YACxD,KAAK,EAAE,mBAAmB,GAAG,2EAA2E;SACxG,CAAC;IACH,CAAC;IACD,OAAO;QACN,kBAAkB,EAAE,IAAI;QACxB,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;QAChD,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;QAC7C,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS;QACxD,0BAA0B,EAAE,GAAG;KAC/B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC/C,OAAgB,EAChB,IAAyB;IAEzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,0GAA0G,CAAC;IACnH,CAAC;IACD,OAAO,kIAAkI,CAAC;AAC3I,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACA,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9D,MAAM,IAAI,GAAG;QACZ,uBAAuB;QACvB,oBAAoB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QACzD,gBAAgB,KAAK,CAAC,MAAM,EAAE;QAC9B,mBAAmB,KAAK,CAAC,SAAS,EAAE;QACpC,iBAAiB,KAAK,CAAC,OAAO,EAAE;QAChC,cAAc,IAAI,EAAE;KACpB,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/fleets/service-backends/index.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Fleet service backends — platform-aware OS service backend selector.
+ *
+ * Moved from hq/src/services/backends/ (L7 deferral — fleet/service
+ * kind exists to receive them; hq-fleets-experience §X1 item 4).
+ *
+ * `hq/src/services/backends/index.ts` re-exports from here; fleet owns the
+ * impls and is the framework's only `launchctl` / `systemctl` / `schtasks`
+ * caller, hq stays thin.
+ *
+ * Exports:
+ *   - `getFleetServiceBackend()` — the `fleet/service` implementation the declared scope selects:
+ *     `qualifiers.os` `darwin` → launchd, `linux` → systemd, `win32` → Task Scheduler (V47)
+ *   - `renderFleetServiceUnit()` — render a plist/unit string without writing
+ *   - `awaitServiceRestart()` — the restart settlement every backend shares
+ *   - Types: `FleetServiceBackend`, `FleetServiceDescriptor`, `FleetServiceStatus`, `FleetServiceRestartReceipt`,
+ *     `FleetInstalledService`
+ */
+export type { FleetServiceBackend, FleetServiceDescriptor, FleetInstalledService, FleetServiceRestartReceipt, FleetServiceStatus, ServiceScope } from './types.ts';
+export { parseLaunchdPlistEnv, renderLaunchdPlist } from './launchd.ts';
+export { parseSystemdUnitEnv, renderSystemdUnit } from './systemd.ts';
+export { renderWindowsServiceFiles, renderWindowsTaskXml, buildWrapperCmd, parseWrapperCmdEnv, renderSchtasksCommand, windowsServicePaths, windowsTaskUserId, type WindowsServicePaths } from './windows.ts';
+export { awaitServiceRestart } from './restart.ts';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { FleetServiceBackend, FleetServiceDescriptor } from './types.ts';
+export { OS_SERVICE_MANAGER_ID, osServiceManagerDescriptor } from './os-service-manager.descriptor.ts';
+export { osServiceManagerLoaders } from './os-service-manager.consumer.ts';
+/**
+ * The OS service manager for this host: the `fleet/service` implementation
+ * whose loader constraint matches the declared `qualifiers.os` (V47). Nothing
+ * here reads `process.platform`; a host that declares no supported `os` fails
+ * closed with `os-service-manager-unavailable`.
+ */
+export declare function getFleetServiceBackend(runtime: VibesRuntime): Promise<FleetServiceBackend>;
+/**
+ * Render a service unit file to a string without writing it (useful for
+ * `vibes fleet daemon install --print`), in the format of the OS service
+ * manager the declared scope selects.
+ */
+export declare function renderFleetServiceUnit(runtime: VibesRuntime, descriptor: FleetServiceDescriptor): Promise<string>;
+//# sourceMappingURL=index.d.ts.map

package/dist/fleets/service-backends/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/fleets/service-backends/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,YAAY,EACX,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,YAAY,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACN,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAG9E,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiBhG;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC3C,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,sBAAsB,GAChC,OAAO,CAAC,MAAM,CAAC,CAGjB"}

package/dist/fleets/service-backends/index.js

@@ -0,0 +1,56 @@
+/**
+ * Fleet service backends — platform-aware OS service backend selector.
+ *
+ * Moved from hq/src/services/backends/ (L7 deferral — fleet/service
+ * kind exists to receive them; hq-fleets-experience §X1 item 4).
+ *
+ * `hq/src/services/backends/index.ts` re-exports from here; fleet owns the
+ * impls and is the framework's only `launchctl` / `systemctl` / `schtasks`
+ * caller, hq stays thin.
+ *
+ * Exports:
+ *   - `getFleetServiceBackend()` — the `fleet/service` implementation the declared scope selects:
+ *     `qualifiers.os` `darwin` → launchd, `linux` → systemd, `win32` → Task Scheduler (V47)
+ *   - `renderFleetServiceUnit()` — render a plist/unit string without writing
+ *   - `awaitServiceRestart()` — the restart settlement every backend shares
+ *   - Types: `FleetServiceBackend`, `FleetServiceDescriptor`, `FleetServiceStatus`, `FleetServiceRestartReceipt`,
+ *     `FleetInstalledService`
+ */
+export { parseLaunchdPlistEnv, renderLaunchdPlist } from "./launchd.js";
+export { parseSystemdUnitEnv, renderSystemdUnit } from "./systemd.js";
+export { renderWindowsServiceFiles, renderWindowsTaskXml, buildWrapperCmd, parseWrapperCmdEnv, renderSchtasksCommand, windowsServicePaths, windowsTaskUserId } from "./windows.js";
+export { awaitServiceRestart } from "./restart.js";
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { OS_SERVICE_MANAGER_ID } from "./os-service-manager.descriptor.js";
+export { OS_SERVICE_MANAGER_ID, osServiceManagerDescriptor } from "./os-service-manager.descriptor.js";
+export { osServiceManagerLoaders } from "./os-service-manager.consumer.js";
+/**
+ * The OS service manager for this host: the `fleet/service` implementation
+ * whose loader constraint matches the declared `qualifiers.os` (V47). Nothing
+ * here reads `process.platform`; a host that declares no supported `os` fails
+ * closed with `os-service-manager-unavailable`.
+ */
+export async function getFleetServiceBackend(runtime) {
+    const services = runtime.assets('fleet/service');
+    if (!services.has(OS_SERVICE_MANAGER_ID)) {
+        const os = runtime.declaredScope.qualifiers.os;
+        throw new CapabilityError(`OS services are not supported on declared os "${os ?? '(undeclared)'}". ` +
+            'Supported: darwin (launchd), linux (systemd), win32 (Task Scheduler).', 'UNAVAILABLE', {
+            reason: 'os-service-manager-unavailable',
+            retryable: false,
+            recoveryHint: 'Run on a host whose environment declares qualifiers.os darwin, linux or win32.',
+            details: { os: os ?? null }
+        });
+    }
+    return runtime.query('fleet/service').withId(OS_SERVICE_MANAGER_ID).resolve();
+}
+/**
+ * Render a service unit file to a string without writing it (useful for
+ * `vibes fleet daemon install --print`), in the format of the OS service
+ * manager the declared scope selects.
+ */
+export async function renderFleetServiceUnit(runtime, descriptor) {
+    const backend = await getFleetServiceBackend(runtime);
+    return backend.renderUnit(descriptor);
+}
+//# sourceMappingURL=index.js.map

package/dist/fleets/service-backends/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/fleets/service-backends/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAUH,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACN,yBAAyB,EACzB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EAEjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqB;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,eAAe,CACxB,iDAAiD,EAAE,IAAI,cAAc,KAAK;YACzE,uEAAuE,EACxE,aAAa,EACb;YACC,MAAM,EAAE,gCAAgC;YACxC,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,gFAAgF;YAC9F,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE;SAC3B,CACD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAuE,eAAe,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC;AACrJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAAqB,EACrB,UAAkC;IAElC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC"}

package/dist/fleets/service-backends/launchd.backend.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The macOS `fleet/service` implementation: launchd, selected by a declared
+ * `qualifiers.os` of `darwin` (V47). Bound to the runtime that resolved it:
+ * its paths and its launchctl calls are that runtime's.
+ */
+import type { VibesRuntime, RuntimeDescriptor } from '@vibesdotdev/kernel';
+import type { FleetServiceBackend, FleetServiceDescriptor } from './types.ts';
+export default class LaunchdServiceBackend implements FleetServiceBackend {
+    readonly id = "launchd";
+    private readonly runtime;
+    constructor(_descriptor: RuntimeDescriptor, context: {
+        runtime: VibesRuntime;
+    });
+    register(descriptor: FleetServiceDescriptor): Promise<void>;
+    unregister(descriptor: FleetServiceDescriptor): Promise<void>;
+    start(descriptor: FleetServiceDescriptor): Promise<void>;
+    stop(descriptor: FleetServiceDescriptor): Promise<void>;
+    restart(descriptor: FleetServiceDescriptor): Promise<import("./types.ts").FleetServiceRestartReceipt>;
+    status(descriptor: FleetServiceDescriptor): Promise<import("./types.ts").FleetServiceStatus>;
+    logs(descriptor: FleetServiceDescriptor, lines?: number): Promise<string>;
+    isRegistered(descriptor: FleetServiceDescriptor): Promise<boolean>;
+    renderUnit(descriptor: FleetServiceDescriptor): Promise<string>;
+    readInstalled(descriptor: FleetServiceDescriptor): Promise<import("./types.ts").FleetInstalledService | undefined>;
+}
+//# sourceMappingURL=launchd.backend.d.ts.map

package/dist/fleets/service-backends/launchd.backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd.backend.d.ts","sourceRoot":"","sources":["../../../src/fleets/service-backends/launchd.backend.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAc9E,MAAM,CAAC,OAAO,OAAO,qBAAsB,YAAW,mBAAmB;IACxE,QAAQ,CAAC,EAAE,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAE3B,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;IAI9E,QAAQ,CAAC,UAAU,EAAE,sBAAsB;IAC3C,UAAU,CAAC,UAAU,EAAE,sBAAsB;IAC7C,KAAK,CAAC,UAAU,EAAE,sBAAsB;IACxC,IAAI,CAAC,UAAU,EAAE,sBAAsB;IACvC,OAAO,CAAC,UAAU,EAAE,sBAAsB;IAC1C,MAAM,CAAC,UAAU,EAAE,sBAAsB;IACzC,IAAI,CAAC,UAAU,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,MAAM;IACvD,YAAY,CAAC,UAAU,EAAE,sBAAsB;IACzC,UAAU,CAAC,UAAU,EAAE,sBAAsB;IACnD,aAAa,CAAC,UAAU,EAAE,sBAAsB;CAChD"}