@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.1

package/dist/server/integration-accounts/store-adapter.js

@@ -0,0 +1,88 @@
+/**
+ * Runtime-owned platform-web adapter for `integration/store`.
+ *
+ * Platform-web stores integration secrets in a flat `secrets` table keyed
+ * by `name + providerType + scope + scopeId` — there is no
+ * `integration_services` row joining a descriptor id to a service. Selected
+ * accounts use the existing `resource_secrets` credential links. The default `createIntegrationStore`
+ * factory shipped from the integrations package assumes that legacy
+ * three-table layout, so we register a custom adapter here.
+ *
+ * Reads only. OAuth callback flows continue to write tokens directly via
+ * `storeQuickBooksTokens` / `storeMicrosoftTokens`; the kind's
+ * `setCredential` / `unsetCredential` / `writeConfig` paths are not
+ * supported on platform-web and throw to make accidental use loud. Reads
+ * return the selected record as a credential reference and leave resolution
+ * to the runtime's account-secrets store owner.
+ */
+import { and, desc, eq, like, or, sql } from 'drizzle-orm';
+import { secrets } from './secrets';
+import { loadIntegrationConnection, loadIntegrationConnectionReferences } from './connection-store';
+import { accountSecretsDescriptor } from './account-secrets.descriptor';
+const READ_ONLY_MESSAGE = 'Platform-web integration store adapter is read-only. Token writes flow ' +
+    'through OAuth callback handlers (storeQuickBooksTokens / storeMicrosoftTokens). ' +
+    'If you need writes from a provider implementation, add the missing direct-write ' +
+    'path in src/lib/secrets/ rather than calling setCredential.';
+export function createPlatformIntegrationStoreAdapter(runtime, db) {
+    return {
+        loadConnection: (descriptor, selector, actor) => loadIntegrationConnection(db, runtime, descriptor, selector, actor),
+        loadConnectionReferences: (descriptor, selector, actor) => loadIntegrationConnectionReferences(db, runtime, descriptor, selector, actor),
+        async loadConfig(_descriptorId) {
+            // Platform-web has no `integration_services.config` row to merge in —
+            // descriptor.config defaults plus OAuth-callback-derived values
+            // (encoded into scopeId for QuickBooks `realmId` and Microsoft
+            // tenants) carry the runtime config. Returning `undefined` lets the
+            // provider's `getConfig()` fall back to descriptor defaults.
+            return undefined;
+        },
+        async loadCredential(_descriptorId, source) {
+            // Non-secret sources (env / inline / setting) are resolved upstream
+            // by the provider before the store is consulted.
+            if (source.source !== 'secret') {
+                return undefined;
+            }
+            const conditions = [eq(secrets.name, source.key)];
+            if (source.providerType) {
+                conditions.push(eq(secrets.providerType, source.providerType));
+            }
+            if (source.scope) {
+                conditions.push(eq(secrets.scope, source.scope));
+            }
+            if (source.scopeId) {
+                // OAuth-callback-derived sub-keys (QuickBooks `realmId`, Microsoft
+                // tenant) are encoded INTO the stored scopeId as `${orgId}:${sub}`,
+                // but the framework resolves the read scope to the bare `${orgId}`.
+                // Match either form so the org-scoped read finds the sub-scoped
+                // secret — this realizes the "encoded into scopeId" design that
+                // loadConfig documents but loadCredential previously didn't honor
+                // (the missing bridge that broke QB sync after connect).
+                const exactOrSubScope = or(eq(secrets.scopeId, source.scopeId), like(secrets.scopeId, `${source.scopeId}:%`));
+                if (exactOrSubScope)
+                    conditions.push(sql `(${exactOrSubScope})`);
+            }
+            // The owning contract asks which record holds the credential, not what it
+            // says. Selecting the newest matching row and returning its stable record
+            // id keeps decryption in the account-secrets store owner, which re-checks
+            // scope, authorization and usage on every read.
+            const [row] = await db
+                .select({ id: secrets.id })
+                .from(secrets)
+                .where(and(...conditions))
+                .orderBy(desc(secrets.updatedAt))
+                .limit(1);
+            if (!row)
+                return undefined;
+            return { source: 'secret', store: accountSecretsDescriptor.id, key: row.id };
+        },
+        async writeConfig() {
+            throw new Error(READ_ONLY_MESSAGE);
+        },
+        async writeCredential() {
+            throw new Error(READ_ONLY_MESSAGE);
+        },
+        async deleteCredential() {
+            throw new Error(READ_ONLY_MESSAGE);
+        }
+    };
+}
+//# sourceMappingURL=store-adapter.js.map

package/dist/server/integration-accounts/store-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-adapter.js","sourceRoot":"","sources":["../../../src/server/integration-accounts/store-adapter.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAQrE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,MAAM,iBAAiB,GACtB,yEAAyE;IACzE,kFAAkF;IAClF,kFAAkF;IAClF,6DAA6D,CAAC;AAE/D,MAAM,UAAU,qCAAqC,CAAC,OAAqB,EAAE,EAAa;IACzF,OAAO;QACN,cAAc,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC;QACpH,wBAAwB,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC;QAExI,KAAK,CAAC,UAAU,CAAC,aAAqB;YAGrC,sEAAsE;YACtE,gEAAgE;YAChE,+DAA+D;YAC/D,oEAAoE;YACpE,6DAA6D;YAC7D,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,cAAc,CACnB,aAAqB,EACrB,MAAmC;YAEnC,oEAAoE;YACpE,iDAAiD;YACjD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,MAAM,UAAU,GAAU,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,mEAAmE;gBACnE,oEAAoE;gBACpE,oEAAoE;gBACpE,gEAAgE;gBAChE,gEAAgE;gBAChE,kEAAkE;gBAClE,yDAAyD;gBACzD,MAAM,eAAe,GAAG,EAAE,CACzB,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EACnC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAC5C,CAAC;gBACF,IAAI,eAAe;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,IAAI,eAAe,GAAG,CAAC,CAAC;YACjE,CAAC;YAED,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,gDAAgD;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;iBACpB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;iBAC1B,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;iBACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;iBAChC,KAAK,CAAC,CAAC,CAAC,CAAC;YAEX,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,wBAAwB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,WAAW;YAChB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,eAAe;YACpB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,gBAAgB;YACrB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/svelte/command-palette/projects-source.plugin.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Projects command-palette source.
+ *
+ * Makes the active owner's (user/org) projects findable from the universal
+ * palette. Uses the LOCAL-INDEX cache mode: the bounded project list is
+ * warm-loaded once from `GET /api/projects` into the offline-first cache, then
+ * searched client-side — so results are instant, work offline, and an empty
+ * query lists recent projects when the palette opens.
+ *
+ * Declares the `proj:` / `project:` prefixes via the resolve rule; an unprefixed
+ * query still includes projects. Browser-only, same-origin (surfaces wherever
+ * platform-web hosts the palette). Narrow subpath, no Svelte/`$state` imports.
+ */
+import { type PaletteProject } from '../../schemas/project-presentation.ts';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+import type { CommandPaletteResult, CommandPaletteSourceDescriptor, CommandPaletteSourceImplementation, SourceContext } from '@vibesdotdev/command-palette/schemas';
+import { type IndexItem, type SearchCacheBackend } from '@vibesdotdev/command-palette/cache';
+/** Cached, rankable projection of a project. */
+export interface ProjectRow extends IndexItem {
+    id: string;
+    title: string;
+    subtitle?: string;
+    keywords?: string[];
+}
+/** The fields we read from `GET /api/projects` (defensive — extra fields ignored). */
+type ApiProject = PaletteProject;
+export declare function toProjectRow(p: ApiProject): ProjectRow;
+export declare function projectRowToResult(row: ProjectRow): CommandPaletteResult;
+export declare function createProjectsCommandPaletteSource(backend: SearchCacheBackend): CommandPaletteSourceImplementation;
+export declare class ProjectsCommandPaletteSource implements CommandPaletteSourceImplementation {
+    private readonly implementation;
+    constructor(_descriptor: CommandPaletteSourceDescriptor, context: KindContext);
+    search(query: string, context: SourceContext): Promise<CommandPaletteResult[]>;
+}
+export declare const projectsCommandPaletteSourcePlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default projectsCommandPaletteSourcePlugin;
+//# sourceMappingURL=projects-source.plugin.d.ts.map

package/dist/svelte/command-palette/projects-source.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects-source.plugin.d.ts","sourceRoot":"","sources":["../../../src/svelte/command-palette/projects-source.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAgC,KAAK,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC1G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAIpE,OAAO,KAAK,EACX,oBAAoB,EACpB,8BAA8B,EAC9B,kCAAkC,EAClC,aAAa,EACb,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAEN,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,MAAM,oCAAoC,CAAC;AAE5C,gDAAgD;AAChD,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,sFAAsF;AACtF,KAAK,UAAU,GAAC,cAAc,CAAC;AAK/B,wBAAgB,YAAY,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAOtD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,UAAU,GAAG,oBAAoB,CAWxE;AAmBD,wBAAgB,kCAAkC,CACjD,OAAO,EAAE,kBAAkB,GACzB,kCAAkC,CASpC;AAED,qBAAa,4BAA6B,YAAW,kCAAkC;IACtF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;gBAExD,WAAW,EAAE,8BAA8B,EAAC,OAAO,EAAE,WAAW;IAS5E,MAAM,CAAC,KAAK,EAAE,MAAM,EAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;CAG7E;AAgBD,eAAO,MAAM,kCAAkC,6CAe7C,CAAC;AAEH,eAAe,kCAAkC,CAAC"}

package/dist/svelte/command-palette/projects-source.plugin.js

@@ -0,0 +1,112 @@
+/**
+ * Projects command-palette source.
+ *
+ * Makes the active owner's (user/org) projects findable from the universal
+ * palette. Uses the LOCAL-INDEX cache mode: the bounded project list is
+ * warm-loaded once from `GET /api/projects` into the offline-first cache, then
+ * searched client-side — so results are instant, work offline, and an empty
+ * query lists recent projects when the palette opens.
+ *
+ * Declares the `proj:` / `project:` prefixes via the resolve rule; an unprefixed
+ * query still includes projects. Browser-only, same-origin (surfaces wherever
+ * platform-web hosts the palette). Narrow subpath, no Svelte/`$state` imports.
+ */
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import { CapabilityError, settle } from '@vibesdotdev/kernel';
+import { PaletteProjectsResponseSchema } from "../../schemas/project-presentation.js";
+import { resolveCommandPaletteHost } from '@vibesdotdev/command-palette';
+import { getLocalIndexCache } from '@vibesdotdev/command-palette/cache';
+/** Projects change rarely within a session; a minute of freshness is plenty. */
+const PROJECTS_TTL_MS = 60_000;
+export function toProjectRow(p) {
+    return {
+        id: p.id,
+        title: p.name?.trim() || 'Untitled project',
+        subtitle: p.description?.trim() || undefined,
+        keywords: [p.slug ?? '', p.status ?? ''].filter((s) => Boolean(s))
+    };
+}
+export function projectRowToResult(row) {
+    return {
+        id: row.id,
+        sourceId: 'projects',
+        resultType: 'navigation',
+        title: row.title,
+        description: row.subtitle,
+        icon: 'FolderKanban',
+        action: { type: 'navigate', url: `/project-operations/${row.id}` },
+        badge: 'Operations'
+    };
+}
+async function loadProjects() {
+    const res = await fetch('/api/projects?limit=200', {
+        headers: { accept: 'application/json' },
+        credentials: 'same-origin'
+    });
+    // Not signed in on this origin → no results; overwrite any stale cache.
+    if (res.status === 401 || res.status === 403)
+        return [];
+    // Other failures throw so the cache can serve the last-known list (offline).
+    if (!res.ok)
+        throw new CapabilityError('Projects list failed.', 'UNAVAILABLE', { reason: 'palette-projects-request-refused', details: { status: res.status } });
+    const bodyOutcome = await settle(() => res.json());
+    if (!bodyOutcome.ok)
+        throw new CapabilityError('Invalid projects response.', 'UNAVAILABLE', { reason: 'palette-projects-response-invalid' });
+    const parsed = PaletteProjectsResponseSchema.safeParse(bodyOutcome.value);
+    if (!parsed.success)
+        throw new CapabilityError('Invalid projects response.', 'UNAVAILABLE', { reason: 'palette-projects-response-invalid' });
+    const body = parsed.data;
+    return (body.results ?? []).map(toProjectRow);
+}
+export function createProjectsCommandPaletteSource(backend) {
+    return {
+        async search(query, context) {
+            const limit = context.limit ?? 5;
+            const cache = getLocalIndexCache(backend, 'projects');
+            const rows = await cache.search(query.trim(), PROJECTS_TTL_MS, loadProjects, limit);
+            return rows.map(projectRowToResult);
+        }
+    };
+}
+export class ProjectsCommandPaletteSource {
+    implementation;
+    constructor(_descriptor, context) {
+        this.implementation = {
+            async search(query, sourceContext) {
+                const host = await resolveCommandPaletteHost(context.runtime);
+                return createProjectsCommandPaletteSource(host.searchCache).search(query, sourceContext);
+            }
+        };
+    }
+    search(query, context) {
+        return this.implementation.search(query, context);
+    }
+}
+const projectsSourceDescriptor = {
+    id: 'projects',
+    kind: 'command-palette/source',
+    enabled: true,
+    sourceId: 'projects',
+    resultType: 'navigation',
+    label: 'Project operations',
+    priority: 60,
+    surfaces: ['web'],
+    name: 'Project Operations Source',
+    description: "Search the active owner's projects",
+    resolve: { prefixes: ['proj:', 'project:'] }
+};
+export const projectsCommandPaletteSourcePlugin = createRuntimePlugin({
+    id: '@vibesdotdev/platform/svelte/command-palette',
+    name: 'Projects Command Palette Source',
+    description: "Makes the active owner's projects findable from the universal command palette",
+    dependencies: ['command-palette'],
+    descriptors: [projectsSourceDescriptor],
+    loaders: [
+        {
+            id: 'projects',
+            kind: 'command-palette/source',
+            load: async () => ProjectsCommandPaletteSource
+        }
+    ]
+});
+export default projectsCommandPaletteSourcePlugin;

package/dist/svelte/components/CodeSessionHostPicker.svelte

@@ -0,0 +1,108 @@
+<script lang="ts">
+	import { getRuntimeSvelteContext } from '@vibesdotdev/surface-sveltekit/svelte';
+	import { Badge } from '@vibesdotdev/kit/components/ui/badge';
+	import { Button } from '@vibesdotdev/kit/components/ui/button';
+	import { Icon } from '@vibesdotdev/kit/components/icon';
+	import HostSelector from './HostSelector.svelte';
+	import HostCapabilitySelector from './HostCapabilitySelector.svelte';
+	import HostProvisionForm from './HostProvisionForm.svelte';
+	import { createHostsStore, type HostsStore } from '../stores/hosts.svelte.js';
+	import {
+		CODE_SESSION_REQUIRED_LABELS,
+		DEFAULT_HOST_PROVISION_DRAFT,
+		normalizeHostOption,
+		type HostOption,
+		type HostProvisionDraft,
+		type PlatformSvelteData
+	} from '../runtime.js';
+	import type { ProvisionHostResponse } from '@vibesdotdev/platform/hosts/schemas/provision';
+
+	interface Props {
+		hosts?: HostOption[];
+		initialData?: PlatformSvelteData | null;
+		store?: HostsStore;
+		loadOnMount?: boolean;
+		selectedHostId?: string;
+		requiredLabels?: string[];
+		onSelect?: (host: HostOption) => void;
+		onProvision?: (draft: HostProvisionDraft) => void;
+		onProvisioned?: (result: ProvisionHostResponse) => void;
+		allowProvision?: boolean;
+	}
+
+	const runtimeStore = getRuntimeSvelteContext();
+	let {
+		hosts = undefined,
+		initialData = null,
+		store = createHostsStore({ initialData, initialHosts: hosts ?? [], loadRuntime: () => runtimeStore.load() }),
+		loadOnMount = hosts === undefined,
+		selectedHostId = $bindable(undefined),
+		requiredLabels = $bindable([...CODE_SESSION_REQUIRED_LABELS]),
+		onSelect,
+		onProvision,
+		onProvisioned,
+		allowProvision = true
+	}: Props = $props();
+
+	let showProvisionForm = $state(false);
+
+	function provision() {
+		const draft: HostProvisionDraft = {
+			...DEFAULT_HOST_PROVISION_DRAFT,
+			capabilityLabels: requiredLabels
+		};
+		if (onProvision) {
+			onProvision(draft);
+			return;
+		}
+		showProvisionForm = !showProvisionForm;
+	}
+
+	function handleProvisioned(result: ProvisionHostResponse) {
+		const host = normalizeHostOption(result.host);
+		selectedHostId = host.hostId;
+		showProvisionForm = false;
+		onSelect?.(host);
+		onProvisioned?.(result);
+	}
+</script>
+
+<div class="space-y-5">
+	<div class="space-y-2">
+		<div class="flex items-center justify-between gap-3">
+			<div class="min-w-0">
+				<div class="text-sm font-medium">Code session capabilities</div>
+				<div class="text-xs text-muted-foreground">Select the fleet capabilities this session requires.</div>
+			</div>
+			<Badge variant="outline" class="shrink-0">{requiredLabels.length} required</Badge>
+		</div>
+		<HostCapabilitySelector bind:selectedLabels={requiredLabels} />
+	</div>
+
+	<div class="space-y-2">
+		<div class="flex items-center justify-between gap-3">
+			<div class="min-w-0">
+				<div class="text-sm font-medium">Execution host</div>
+				<div class="text-xs text-muted-foreground">Choose an active host that can run the session.</div>
+			</div>
+			{#if allowProvision}
+				<Button type="button" variant="outline" size="sm" onclick={provision}>
+					<Icon icon="lucide:cloud" class="size-4" />
+					Provision
+				</Button>
+			{/if}
+		</div>
+		<HostSelector {hosts} {initialData} {store} {loadOnMount} bind:selectedHostId {requiredLabels} {onSelect} />
+	</div>
+
+	{#if showProvisionForm}
+		<HostProvisionForm
+			{store}
+			defaultDraft={{ ...DEFAULT_HOST_PROVISION_DRAFT, capabilityLabels: requiredLabels }}
+			onProvisioned={handleProvisioned}
+			onCancel={() => {
+				showProvisionForm = false;
+			}}
+		/>
+	{/if}
+</div>

package/dist/svelte/components/CodeSessionHostPicker.svelte.d.ts

@@ -0,0 +1,19 @@
+import { type HostsStore } from '../stores/hosts.svelte.ts';
+import { type HostOption, type HostProvisionDraft, type PlatformSvelteData } from '../runtime.ts';
+import type { ProvisionHostResponse } from '@vibesdotdev/platform/hosts/schemas/provision';
+interface Props {
+    hosts?: HostOption[];
+    initialData?: PlatformSvelteData | null;
+    store?: HostsStore;
+    loadOnMount?: boolean;
+    selectedHostId?: string;
+    requiredLabels?: string[];
+    onSelect?: (host: HostOption) => void;
+    onProvision?: (draft: HostProvisionDraft) => void;
+    onProvisioned?: (result: ProvisionHostResponse) => void;
+    allowProvision?: boolean;
+}
+declare const CodeSessionHostPicker: import("svelte").Component<Props, {}, "selectedHostId" | "requiredLabels">;
+type CodeSessionHostPicker = ReturnType<typeof CodeSessionHostPicker>;
+export default CodeSessionHostPicker;
+//# sourceMappingURL=CodeSessionHostPicker.svelte.d.ts.map

package/dist/svelte/components/CodeSessionHostPicker.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeSessionHostPicker.svelte.d.ts","sourceRoot":"","sources":["../../../src/svelte/components/CodeSessionHostPicker.svelte.ts"],"names":[],"mappings":"AAUA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,MAAM,eAAe,CAAC;AACxB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAG1F,UAAU,KAAK;IACd,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAClD,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACxD,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAwFF,QAAA,MAAM,qBAAqB,4EAAwC,CAAC;AACpE,KAAK,qBAAqB,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACtE,eAAe,qBAAqB,CAAC"}

package/dist/svelte/components/HostCapabilitySelector.svelte

@@ -0,0 +1,78 @@
+<script lang="ts">
+	import { Badge } from '@vibesdotdev/kit/components/ui/badge';
+	import { Button } from '@vibesdotdev/kit/components/ui/button';
+	import { Icon } from '@vibesdotdev/kit/components/icon';
+	import { Input } from '@vibesdotdev/kit/components/ui/input';
+	import { CODE_SESSION_REQUIRED_LABELS } from '../runtime.js';
+
+	interface Props {
+		selectedLabels?: string[];
+		options?: string[];
+		onChange?: (labels: string[]) => void;
+	}
+
+	let {
+		selectedLabels = $bindable([...CODE_SESSION_REQUIRED_LABELS]),
+		options = [...CODE_SESSION_REQUIRED_LABELS, 'benchmark', 'gpu'],
+		onChange
+	}: Props = $props();
+
+	let customLabel = $state('');
+
+	function setLabels(labels: string[]) {
+		selectedLabels = Array.from(new Set(labels.filter(Boolean)));
+		onChange?.(selectedLabels);
+	}
+
+	function toggle(label: string) {
+		setLabels(
+			selectedLabels.includes(label)
+				? selectedLabels.filter((item: string) => item !== label)
+				: [...selectedLabels, label]
+		);
+	}
+
+	function addCustomLabel() {
+		const label = customLabel.trim();
+		if (!label) return;
+		setLabels([...selectedLabels, label]);
+		customLabel = '';
+	}
+</script>
+
+<div class="space-y-3">
+	<div class="flex flex-wrap gap-2">
+		{#each options as label (label)}
+			<Button
+				type="button"
+				variant={selectedLabels.includes(label) ? 'default' : 'outline'}
+				size="sm"
+				class="h-8 gap-1.5"
+				onclick={() => toggle(label)}
+			>
+				<Icon icon={selectedLabels.includes(label) ? 'lucide:check' : 'lucide:plus'} class="size-3.5" />
+				{label}
+			</Button>
+		{/each}
+	</div>
+
+	<div class="flex gap-2">
+		<Input bind:value={customLabel} placeholder="Add capability label" class="h-9" />
+		<Button aria-label="Add capability" title="Add capability" type="button" variant="outline" size="icon" onclick={addCustomLabel}>
+			<Icon icon="lucide:plus" class="size-4" />
+		</Button>
+	</div>
+
+	{#if selectedLabels.length > 0}
+		<div class="flex flex-wrap gap-1.5">
+			{#each selectedLabels as label (label)}
+				<Badge variant="secondary" class="gap-1">
+					{label}
+					<button aria-label={`Remove capability ${label}`} title={`Remove capability ${label}`} type="button" class="text-muted-foreground hover:text-foreground" onclick={() => toggle(label)}>
+						<Icon icon="lucide:x" class="size-3" />
+					</button>
+				</Badge>
+			{/each}
+		</div>
+	{/if}
+</div>

package/dist/svelte/components/HostCapabilitySelector.svelte.d.ts

@@ -0,0 +1,9 @@
+interface Props {
+    selectedLabels?: string[];
+    options?: string[];
+    onChange?: (labels: string[]) => void;
+}
+declare const HostCapabilitySelector: import("svelte").Component<Props, {}, "selectedLabels">;
+type HostCapabilitySelector = ReturnType<typeof HostCapabilitySelector>;
+export default HostCapabilitySelector;
+//# sourceMappingURL=HostCapabilitySelector.svelte.d.ts.map

package/dist/svelte/components/HostCapabilitySelector.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostCapabilitySelector.svelte.d.ts","sourceRoot":"","sources":["../../../src/svelte/components/HostCapabilitySelector.svelte.ts"],"names":[],"mappings":"AAUC,UAAU,KAAK;IACd,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CACtC;AAuEF,QAAA,MAAM,sBAAsB,yDAAwC,CAAC;AACrE,KAAK,sBAAsB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACxE,eAAe,sBAAsB,CAAC"}