@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.2

package/dist/cli/fleets/commands/fleet.enroll-token.create.command.impl.js

@@ -0,0 +1,171 @@
+import { loadPlatformConfig } from "../../../config/load.js";
+import { MaterializeOptionsSchema } from "../../../schemas/fleet-cli.js";
+import { writeStdoutLine } from '@vibesdotdev/cli/output';
+/**
+ * `vibes fleet enroll-token create` implementation (fleet-droplet F1.1, gap G4).
+ *
+ * Fleet-branded alias over the existing enroll-token surface: registers a
+ * host identity via `POST /api/hosts` and prints the one-time enrollment
+ * token (hashed at rest server-side; never logged elsewhere). The register
+ * route requires the owner in the body to match the acting scope, so when
+ * `--owner-type/--owner-id` are omitted they resolve from the signed-in
+ * session (active org wins over the user, matching `actingScopeFromLocals`).
+ *
+ * `--cloud-init` additionally renders the shared F0.1 fleet cloud-init
+ * template — paste-ready user_data for a droplet the user launches on their
+ * own account.
+ */
+import { FLEET_ENROLL_TOKEN_ENV, buildFleetCloudInit } from '@vibesdotdev/platform/fleets/provision';
+import { getAuthedPlatformClient, resolveStoredActingOrgId } from "../lib/authed-platform.js";
+import { defaultHostId } from "../lib/host-token-store.js";
+import { resolvePlatformOriginAsync } from "../lib/origins.js";
+import { labelsToHostCapabilities } from '@vibesdotdev/platform/hosts/schemas/capabilities';
+import { parseAcceptSpecs } from "../lib/action-policy.js";
+import { getVibesClient } from '@vibesdotdev/kernel/client';
+import { writeJson } from '@vibesdotdev/cli/output';
+import { fleetEnrollTokenCreateInputSchema } from "./fleet.schemas.js";
+/**
+ * Resolve the acting owner for host registration from the current CLI session.
+ * The account client presents the caller's bearer itself (auth's
+ * `resolveCallerBearer`), so a signed-in user's `whoami()` answers.
+ */
+async function resolveActingOwner(runtime) {
+    const account = await getVibesClient('account', runtime);
+    await account.ensureLoaded();
+    const me = await account.whoami();
+    if (!me) {
+        throw new Error('Not signed in. Run `vibes auth login`, or pass --owner-type and --owner-id explicitly.');
+    }
+    // The acting org the rest of the CLI uses, not a second opinion.
+    //
+    // `account.getActiveOrg()` alone returned null here while every platform call
+    // was already acting as the organization, so this derived `user`, the route
+    // compared it against its own acting scope and refused with "Hosts must be
+    // registered for the active account or organization" — a message that reads
+    // like a permission problem and was really two sources disagreeing.
+    const activeOrgId = (await account.getActiveOrg()) ?? (await resolveStoredActingOrgId(runtime));
+    if (activeOrgId)
+        return { ownerType: 'organization', ownerId: activeOrgId };
+    return { ownerType: 'user', ownerId: me.id };
+}
+export async function executeEnrollTokenCreate(runtime, input) {
+    let ownerType = input.ownerType;
+    let ownerId = input.ownerId;
+    if (!ownerType || !ownerId) {
+        const acting = await resolveActingOwner(runtime);
+        ownerType = ownerType ?? acting.ownerType;
+        ownerId = ownerId ?? acting.ownerId;
+    }
+    // Act in the organization that owns the host; a user-owned host acts personally.
+    const platform = await getAuthedPlatformClient(runtime, ownerType === 'organization' ? ownerId : null);
+    const result = await platform.hosts.register({
+        hostId: input.hostId,
+        name: input.name,
+        description: input.description,
+        ownerType,
+        ownerId,
+        environment: 'consumer',
+        provider: input.provider,
+        region: input.region,
+        capabilities: input.labels.length > 0 ? labelsToHostCapabilities(input.labels) : undefined,
+        expiresInHours: input.expiresInHours,
+        // Applied only when the caller administers the new host; refused otherwise.
+        actionPolicy: input.accept?.length ? { accepts: parseAcceptSpecs(input.accept), queueGrants: [], relayGrants: [] } : undefined
+    });
+    const config = input.cloudInit ? await loadPlatformConfig(runtime) : undefined;
+    const cloudInit = input.cloudInit
+        ? buildFleetCloudInit({
+            hostId: result.host.hostId,
+            enrollToken: result.token,
+            platformOrigin: await resolvePlatformOriginAsync(runtime),
+            installUrl: config?.fleetInstallUrl,
+            registryUrl: config?.fleetRegistryUrl,
+            labels: input.labels,
+            // The schema requires a tier with --cloud-init; none is defaulted.
+            environmentTier: input.tier
+        })
+        : undefined;
+    return {
+        hostId: result.host.hostId,
+        enrollmentId: result.enrollment.id,
+        token: result.token,
+        expiresAt: result.enrollment.expiresAt,
+        cloudInit
+    };
+}
+/**
+ * The enroll instructions printed after minting. The token is shown once (above
+ * these lines) and never on a daemon argv: argv is visible in `ps` to every
+ * user on the host and an installed service copies it into its definition. The
+ * file path uses `~` because the target machine is usually not this one.
+ */
+export function renderEnrollInstructions(hostId, token) {
+    const tokenFile = `~/.vibes/hosts/${hostId}.enroll-token`;
+    return [
+        'Enroll the machine (the token never rides argv — `ps` shows argv to every user).',
+        'Write it to a private file, consumed and removed after enrollment:',
+        `  (umask 077 && printf '%s\\n' '${token}' > ${tokenFile})`,
+        `  vibes fleet daemon --host-id ${hostId} --enroll-token-file ${tokenFile}`,
+        `or publish it as the ${FLEET_ENROLL_TOKEN_ENV} secret for one run:`,
+        `  vibes secrets exec --with ${FLEET_ENROLL_TOKEN_ENV} -- vibes fleet daemon --host-id ${hostId}`,
+        "Install it as a login/boot service, declaring the host's environment tier:",
+        `  vibes fleet daemon install --host-id ${hostId} --enroll-token-file ${tokenFile} --tier <local|dev|staging|production>`
+    ];
+}
+export default {
+    async execute(_args, opts, context) {
+        const asJson = Boolean(opts.json);
+        // Default the host id to a slug of this machine's hostname; an explicit
+        // --host-id always wins. (For provisioning a NEW remote machine, pass it.)
+        const hostId = MaterializeOptionsSchema.parse(opts).hostId || defaultHostId(context.runtime.localEnvironment.getHostname?.() ?? 'host');
+        if (!opts.hostId && !asJson) {
+            await writeStdoutLine(context.runtime, `No --host-id given; using "${hostId}" (from this machine's hostname).`);
+        }
+        const parsed = fleetEnrollTokenCreateInputSchema.safeParse({
+            hostId,
+            name: opts.name ?? hostId,
+            description: opts.description,
+            ownerType: opts.ownerType,
+            ownerId: opts.ownerId,
+            provider: opts.provider,
+            region: opts.region,
+            labels: opts.label ?? [],
+            expiresInHours: opts.expiresInHours !== undefined ? Number(opts.expiresInHours) : undefined,
+            cloudInit: Boolean(opts.cloudInit),
+            tier: opts.tier,
+            accept: opts.accept ?? []
+        });
+        if (!parsed.success) {
+            const issues = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join(', ');
+            throw new Error(`Invalid input: ${issues}`);
+        }
+        const result = await executeEnrollTokenCreate(context.runtime, parsed.data);
+        if (asJson) {
+            await writeJson(context.runtime, {
+                hostId: result.hostId,
+                enrollmentId: result.enrollmentId,
+                token: result.token,
+                expiresAt: result.expiresAt,
+                cloudInit: result.cloudInit
+            });
+            return;
+        }
+        await writeStdoutLine(context.runtime, `Enrollment token created for host ${result.hostId}`);
+        await writeStdoutLine(context.runtime, `  token:   ${result.token}`);
+        if (result.expiresAt) {
+            await writeStdoutLine(context.runtime, `  expires: ${new Date(result.expiresAt).toISOString()}`);
+        }
+        await writeStdoutLine(context.runtime, '');
+        for (const line of renderEnrollInstructions(result.hostId, result.token)) {
+            await writeStdoutLine(context.runtime, line);
+        }
+        if (result.cloudInit) {
+            await writeStdoutLine(context.runtime, '');
+            await writeStdoutLine(context.runtime, 'Or pass this as cloud-init user-data when creating the machine:');
+            await writeStdoutLine(context.runtime, '----- cloud-init -----');
+            await writeStdoutLine(context.runtime, result.cloudInit);
+            await writeStdoutLine(context.runtime, '----- end cloud-init -----');
+        }
+    }
+};
+//# sourceMappingURL=fleet.enroll-token.create.command.impl.js.map

package/dist/cli/fleets/commands/fleet.enroll-token.create.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.enroll-token.create.command.impl.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.enroll-token.create.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAsB,MAAM,4BAA4B,CAAC;AAGhF,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EACN,iCAAiC,EAEjC,MAAM,oBAAoB,CAAC;AAa5B;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAqB;IAItD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAqB,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACd,wFAAwF,CACxF,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,EAAE;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,IAAI,WAAW;QAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAqB,EACrB,KAAkC;IAQlC,IAAI,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,SAAS,GAAG,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;QAC1C,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IACrC,CAAC;IAED,iFAAiF;IACjF,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC7C,OAAO,EACP,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAC7C,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS;QACT,OAAO;QACP,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1F,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,4EAA4E;QAC5E,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;KAC9H,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS;QAChC,CAAC,CAAC,mBAAmB,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,cAAc,EAAE,MAAM,0BAA0B,CAAC,OAAO,CAAC;YACzD,UAAU,EAAE,MAAM,EAAE,eAAe;YACnC,WAAW,EAAE,MAAM,EAAE,gBAAgB;YACrC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,mEAAmE;YACnE,eAAe,EAAE,KAAK,CAAC,IAAK;SAC5B,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IAEb,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;QACtC,SAAS;KACT,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,KAAa;IACrE,MAAM,SAAS,GAAG,kBAAkB,MAAM,eAAe,CAAC;IAC1D,OAAO;QACN,kFAAkF;QAClF,oEAAoE;QACpE,mCAAmC,KAAK,OAAO,SAAS,GAAG;QAC3D,kCAAkC,MAAM,wBAAwB,SAAS,EAAE;QAC3E,wBAAwB,sBAAsB,sBAAsB;QACpE,+BAA+B,sBAAsB,oCAAoC,MAAM,EAAE;QACjG,4EAA4E;QAC5E,0CAA0C,MAAM,wBAAwB,SAAS,wCAAwC;KACzH,CAAC;AACH,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CACZ,KAAqB,EACrB,IAAoB,EACpB,OAAuB;QAEvB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,CAAC;QACxI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,8BAA8B,MAAM,mCAAmC,CAAC,CAAC;QACjH,CAAC;QAED,MAAM,MAAM,GAAG,iCAAiC,CAAC,SAAS,CAAC;YAC1D,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACxB,cAAc,EAAE,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3F,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAE5E,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,qCAAqC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,iEAAiE,CAAC,CAAC;YAC1G,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;YACjE,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/fleets/commands/fleet.launch.command.descriptor.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `vibes fleet launch` — provision a cloud host that auto-enrolls as a fleet host.
+ */
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.launch.command.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.launch.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.launch.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.launch.command.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAsHjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.launch.command.descriptor.js

@@ -0,0 +1,112 @@
+/**
+ * `vibes fleet launch` — provision a cloud host that auto-enrolls as a fleet host.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'fleet.launch',
+    name: 'launch',
+    description: 'Launch a cloud host that auto-enrolls as a fleet host',
+    group: 'fleet',
+    arguments: [],
+    options: [
+        { flags: '--host-id <id>', description: 'Host ID (kebab-case; generated when omitted)' },
+        { flags: '--name <name>', description: 'Host display name (defaults to the host ID)' },
+        {
+            flags: '--provider <id>',
+            description: 'Host provider to launch on (a registered host profile provider or alias). Omitted: the highest-priority registered host profile.'
+        },
+        {
+            flags: '--adapter <id>',
+            description: 'Sandbox adapter or host profile id to launch through (overrides --provider for selection).'
+        },
+        {
+            flags: '--size <slug>',
+            description: "Provider size slug, admitted by the host profile. Omission takes the profile's default; a profile without one refuses."
+        },
+        {
+            flags: '--region <region>',
+            description: "Provider region. Omission takes the profile's default; a profile without one refuses."
+        },
+        {
+            flags: '--image <slug>',
+            description: "Image slug. Omission takes the profile's default; a profile without one refuses."
+        },
+        {
+            flags: '--label <label...>',
+            description: 'Capability label, repeatable (e.g. sandbox:code-execution)'
+        },
+        {
+            flags: '--ttl <hours|none>',
+            description: 'Host time-to-live in hours before teardown (default 8, max 168). `none` provisions a PERSISTENT host that is never reaped'
+        },
+        { flags: '--ssh-key-id <id...>', description: 'SSH key ID or fingerprint, repeatable' },
+        {
+            flags: '--build-runner',
+            description: 'Provision the git + bun toolchain so the host can run build jobs (auto-on with a build/build:* label)'
+        },
+        {
+            flags: '--desktop',
+            description: 'Provision the desktop tool host: install Docker + vibes-desktop-base (auto-on with a desktop label)'
+        },
+        {
+            flags: '--gpu',
+            description: "GPU compute host: a size from the host profile's GPU sizes, with the NVIDIA driver, Docker and the NVIDIA container runtime installed at boot. Combine with --desktop for a GPU desktop. Omitted size, region or image take the profile's GPU defaults; a profile without one refuses."
+        },
+        {
+            flags: '--desktop-image <ref>',
+            description: 'Published vibes-desktop-base image ref to pull instead of building from source on the host'
+        },
+        {
+            flags: '--workspace',
+            description: 'Provision a developer workspace with pre-cloned repositories, toolchains, and setup hooks'
+        },
+        {
+            flags: '--repo <url>',
+            description: 'Repository URL to clone into the workspace'
+        },
+        {
+            flags: '--branch <ref>',
+            description: 'Git branch or ref to checkout in the workspace'
+        },
+        {
+            flags: '--toolchain <toolchain...>',
+            description: 'Toolchains to install in workspace, repeatable (e.g. bun, node, rust, python, go, docker)'
+        },
+        {
+            flags: '--setup <command...>',
+            description: 'Setup command to run during workspace initialization, repeatable'
+        },
+        {
+            flags: '--harness <id...>',
+            description: 'Harness host IDs to bootstrap on the host, repeatable. Each id is validated against the runtime-advertised `bootstrap` operation before provisioning; implies a workspace host and the host-local PM daemon'
+        },
+        {
+            flags: '--org <orgId>',
+            description: 'Provision into this organization scope instead of your personal scope (you must be a member — verified server-side)'
+        },
+        {
+            flags: '--restricted',
+            description: 'This host may run workloads providers restrict. Launches only on your own provider account, never Vibes credits.'
+        },
+        {
+            flags: '--game-server',
+            description: 'Game-server preset. Forces --restricted and serviceKind game/server. Not user-clearable.'
+        },
+        {
+            flags: '--owner-provider-key <key>',
+            description: 'Secret key for the owner cloud token. Must not be a Vibes platform token key.'
+        },
+        { flags: '--pm-daemon', description: 'Start host-local PM after workspace and setup commands succeed' },
+        { flags: '--wait', description: 'Poll until the host enrolls and turns active' },
+        {
+            flags: '--timeout <seconds>',
+            description: 'Max seconds to wait with --wait (default 900)'
+        },
+        { flags: '--json', description: 'Output as JSON' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=fleet.launch.command.descriptor.js.map

package/dist/cli/fleets/commands/fleet.launch.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.launch.command.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.launch.command.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,uDAAuD;IACpE,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,EAAE;IACb,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,8CAA8C,EAAE;QACxF,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,6CAA6C,EAAE;QACtF;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EACV,kIAAkI;SACnI;QACD;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,4FAA4F;SACzG;QACD;YACC,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,wHAAwH;SACrI;QACD;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,uFAAuF;SACpG;QACD;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,kFAAkF;SAC/F;QACD;YACC,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,4DAA4D;SACzE;QACD;YACC,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,2HAA2H;SACxI;QACD,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACvF;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EACV,uGAAuG;SACxG;QACD;YACC,KAAK,EAAE,WAAW;YAClB,WAAW,EACV,qGAAqG;SACtG;QACD;YACC,KAAK,EAAE,OAAO;YACd,WAAW,EACV,wRAAwR;SACzR;QACD;YACC,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EACV,4FAA4F;SAC7F;QACD;YACC,KAAK,EAAE,aAAa;YACpB,WAAW,EACV,2FAA2F;SAC5F;QACD;YACC,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,4CAA4C;SACzD;QACD;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,gDAAgD;SAC7D;QACD;YACC,KAAK,EAAE,4BAA4B;YACnC,WAAW,EACV,2FAA2F;SAC5F;QACD;YACC,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,kEAAkE;SAC/E;QACD;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACV,6MAA6M;SAC9M;QACD;YACC,KAAK,EAAE,eAAe;YACtB,WAAW,EACV,qHAAqH;SACtH;QACD;YACC,KAAK,EAAE,cAAc;YACrB,WAAW,EACV,kHAAkH;SACnH;QACD;YACC,KAAK,EAAE,eAAe;YACtB,WAAW,EACV,0FAA0F;SAC3F;QACD;YACC,KAAK,EAAE,4BAA4B;YACnC,WAAW,EACV,+EAA+E;SAChF;QACD,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,gEAAgE,EAAE;QACvG,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;QAChF;YACC,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,+CAA+C;SAC5D;QACD,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;KAClD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.launch.command.impl.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `vibes fleet launch` implementation (fleet-droplet F1.1, gap G3).
+ *
+ * Calls the platform provision route (`POST /api/hosts/provision`) through
+ * the canonical PlatformApiClient. The server injects the shared fleet
+ * cloud-init (F0.1) — the CLI never sees the enrollment token.
+ *
+ * Client-side guardrails (D7 proposal). No server-side size or concurrency
+ * guard exists in platform-web (F1.2 was never built), so these are the ONLY
+ * guards today:
+ *   - `--ttl` required via default 8h, max 168h, `--ttl 0` refused,
+ *   - sizes admitted only from the selected host profile (`infra/sandbox` `hostProfile`),
+ *   - max-concurrent check against the owner's host inventory (`hosts.list`),
+ *     ignoring `provisioning` rows that died mid-flight (stale, no resource id).
+ *
+ * `--ttl` is forwarded as `ttlHours`; the server confirms it by returning
+ * `expiresAt`. When no `expiresAt` comes back the server recorded NO expiry
+ * and the host will not tear itself down — this command says so instead of
+ * echoing the requested TTL as if it were enforced.
+ *
+ * `--wait` polls `GET /api/hosts/[id]` until the daemon enrolls and the host
+ * turns `active`, then prints the hq terminal hint.
+ */
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+import type { Host } from '@vibesdotdev/platform/hosts/schemas/types';
+import { executeFleetLaunch } from '../../../fleets/launch.ts';
+export { executeFleetLaunch };
+/**
+ * What the server actually recorded for the requested TTL. `expiresAt` is a
+ * Date only when the server returned a parseable expiry; otherwise the TTL is
+ * unconfirmed and `ttlLine` tells the operator the host will not auto-destroy.
+ * Structural on purpose: a launch result without an `expiresAt` field at all
+ * (older `executeFleetLaunch`) reads as "unconfirmed", never as a type error.
+ */
+export declare function describeLaunchTtl(requestedTtlHours: number | undefined, launched: {
+    expiresAt?: Date | string | null;
+    host: Pick<Host, 'hostId'>;
+}): {
+    ttlConfirmed: boolean;
+    expiresAt: Date;
+    ttlLine: string;
+} | {
+    ttlConfirmed: boolean;
+    expiresAt: null;
+    ttlLine: string;
+};
+declare const _default: {
+    execute(_args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=fleet.launch.command.impl.d.ts.map

package/dist/cli/fleets/commands/fleet.launch.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.launch.command.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.launch.command.impl.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMvE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,2CAA2C,CAAC;AAsBtE,OAAO,EAAE,kBAAkB,EAAyC,MAAM,2BAA2B,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAa9B;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAChC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;CAAE;;;;;;;;EA0C1E;;mBAGqB,cAAc,QAAQ,cAAc,WAAW,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;;AADnG,wBAuJE"}

package/dist/cli/fleets/commands/fleet.launch.command.impl.js

@@ -0,0 +1,225 @@
+import { valueFreeFailure } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+import { writeStdoutLine, commandWriters } from '@vibesdotdev/cli/output';
+import { settleNow } from '@vibesdotdev/kernel';
+import { waitForHostActive } from "../lib/wait-for-host.js";
+import { getAuthedPlatformClient } from "../lib/authed-platform.js";
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { resolveWorkspaceLaunchOptions } from "./workspace/workspace-config-loader.js";
+import { writeJson } from '@vibesdotdev/cli/output';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { parseLaunchTtl, fleetLaunchInputSchema, shouldProvisionBuildRunner, shouldProvisionDesktop, shouldProvisionWorkspace } from "./fleet.schemas.js";
+function randomHostSuffix() {
+    return Math.random().toString(36).slice(2, 8);
+}
+/** The HQ terminal for `hostId`, at the declared `hq` service; undeclared fails `service-undeclared`. */
+async function terminalHint(runtime, hostId) {
+    const hqOrigin = (await serviceOrigin(runtime, 'hq')).replace(/\/$/, '');
+    return `${hqOrigin}/terminal?host=${encodeURIComponent(hostId)}`;
+}
+import { executeFleetLaunch, createRuntimeHarnessBootstrapResolver } from "../../../fleets/launch.js";
+export { executeFleetLaunch };
+/**
+ * A secret the host's declared store may hold: its value, or undefined when the
+ * store answers `credential-not-set`. Every other failure is the caller's to see.
+ */
+async function resolveOptionalSecret(runtime, key) {
+    const lease = await runtime.resolveCredential({ source: 'secret', key });
+    if (lease.ok)
+        return lease.value;
+    if (lease.error.reason === 'credential-not-set')
+        return undefined;
+    throw lease.error;
+}
+/**
+ * What the server actually recorded for the requested TTL. `expiresAt` is a
+ * Date only when the server returned a parseable expiry; otherwise the TTL is
+ * unconfirmed and `ttlLine` tells the operator the host will not auto-destroy.
+ * Structural on purpose: a launch result without an `expiresAt` field at all
+ * (older `executeFleetLaunch`) reads as "unconfirmed", never as a type error.
+ */
+export function describeLaunchTtl(requestedTtlHours, launched) {
+    const raw = launched.expiresAt;
+    const parsed = raw === null || raw === undefined ? null : new Date(raw);
+    const expiresAt = parsed !== null && !Number.isNaN(parsed.getTime()) ? parsed : null;
+    // `--ttl none`: no TTL was requested, so "the server recorded no expiry" is
+    // the CONFIRMATION, not the failure it is for a requested TTL. Reporting a
+    // persistent host as unconfirmed would tell an operator their standing
+    // fleet member is a mistake.
+    if (requestedTtlHours === undefined) {
+        if (expiresAt) {
+            return {
+                ttlConfirmed: false,
+                expiresAt,
+                ttlLine: `none requested (PERSISTENT) — but the server recorded an expiry at ` +
+                    `${expiresAt.toISOString()}, so this host WILL be torn down.`
+            };
+        }
+        return {
+            ttlConfirmed: true,
+            expiresAt: null,
+            ttlLine: 'none (PERSISTENT) — the server recorded no expiry, so the reaper skips this host. ' +
+                `Destroy it with \`vibes fleet destroy ${launched.host.hostId}\` when done.`
+        };
+    }
+    if (expiresAt) {
+        return {
+            ttlConfirmed: true,
+            expiresAt,
+            ttlLine: `${requestedTtlHours}h (server expiry ${expiresAt.toISOString()})`
+        };
+    }
+    return {
+        ttlConfirmed: false,
+        expiresAt: null,
+        ttlLine: `${requestedTtlHours}h requested — NOT confirmed: the server recorded no expiry, ` +
+            'so this host will not be torn down automatically. ' +
+            `Destroy it with \`vibes fleet destroy ${launched.host.hostId}\` when done.`
+    };
+}
+export default {
+    async execute(_args, opts, context) {
+        const logger = getLogger('platform', context.runtime);
+        const asJson = Boolean(opts.json);
+        const hostId = opts.hostId ?? `fleet-${randomHostSuffix()}`;
+        // `--ttl none` is a PERSISTENT host: no expiry is sent, so the server
+        // records none and the expiry reaper skips it. That is what a standing
+        // fleet member is, and it has to be sayable.
+        const ttlInput = settleNow(() => parseLaunchTtl(opts.ttl));
+        if (!ttlInput.ok) {
+            const error = ttlInput.cause;
+            logger.error('Fleet command operation failed.', { error: valueFreeFailure(error) });
+            const message = error instanceof Error ? error.message : String(error);
+            if (asJson)
+                await writeJson(context.runtime, { error: message });
+            else
+                (await commandWriters(context.runtime)).log(message);
+            requestCLIExit(1);
+            return;
+        }
+        const ttlHours = ttlInput.value;
+        const parsed = fleetLaunchInputSchema.safeParse({
+            hostId,
+            name: opts.name ?? hostId,
+            provider: opts.provider,
+            adapter: opts.adapter,
+            size: opts.size,
+            region: opts.region,
+            image: opts.image,
+            labels: opts.label ?? [],
+            ttlHours: ttlHours ?? undefined,
+            sshKeyIds: opts.sshKeyId ?? [],
+            buildRunner: Boolean(opts.buildRunner),
+            desktop: Boolean(opts.desktop),
+            gpu: Boolean(opts.gpu),
+            desktopImage: opts.desktopImage,
+            workspace: Boolean(opts.workspace),
+            pmDaemon: Boolean(opts.pmDaemon),
+            repo: opts.repo,
+            branch: opts.branch,
+            toolchain: Array.isArray(opts.toolchain)
+                ? opts.toolchain
+                : opts.toolchain
+                    ? [String(opts.toolchain)]
+                    : [],
+            setup: Array.isArray(opts.setup)
+                ? opts.setup
+                : opts.setup
+                    ? [String(opts.setup)]
+                    : [],
+            harness: Array.isArray(opts.harness)
+                ? opts.harness
+                : opts.harness
+                    ? [String(opts.harness)]
+                    : [],
+            org: opts.org,
+            restrictedWorkload: Boolean(opts.restricted || opts.restrictedWorkload),
+            gameServer: Boolean(opts.gameServer || opts['game-server']),
+            ownerProviderCredentialKey: (opts.ownerProviderCredentialKey ??
+                opts['owner-provider-key']),
+            wait: Boolean(opts.wait),
+            timeoutSeconds: opts.timeout !== undefined ? Number(opts.timeout) : undefined
+        });
+        if (!parsed.success) {
+            const issues = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join(', ');
+            throw new Error(`Invalid input: ${issues}`);
+        }
+        let input = parsed.data;
+        if (shouldProvisionWorkspace(input) || Boolean(opts.workspace)) {
+            input = await resolveWorkspaceLaunchOptions(context.runtime, input, await context.runtime.context('runtime/workspace-path'));
+        }
+        const platform = await getAuthedPlatformClient(context.runtime);
+        // Harness ids are preflighted through the live External registry (the
+        // same runtime `vibes dev external` projects from); an unsupported id
+        // aborts before this call can provision anything paid. The resolver is
+        // only constructed when harness ids are requested, so ordinary launches
+        // never touch the External registry.
+        const buildRunnerGithubToken = shouldProvisionBuildRunner(input)
+            ? await resolveOptionalSecret(context.runtime, 'GITHUB_TOKEN')
+            : undefined;
+        const launched = await executeFleetLaunch(input, platform, {
+            runtime: context.runtime,
+            resolveHarnessBootstrap: input.harness.length > 0 ? createRuntimeHarnessBootstrapResolver(context.runtime) : undefined,
+            buildRunnerGithubToken
+        });
+        const ttl = describeLaunchTtl(input.ttlHours, launched);
+        if (!asJson) {
+            const { placement } = launched;
+            await writeStdoutLine(context.runtime, `Launched host ${launched.host.hostId} (${placement.size}, ${placement.region}, ${placement.image})`);
+            await writeStdoutLine(context.runtime, `  status:  ${launched.host.status}`);
+            await writeStdoutLine(context.runtime, `  instance: ${launched.sandboxResourceId}`);
+            await writeStdoutLine(context.runtime, `  ttl:     ${ttl.ttlLine}`);
+            if (shouldProvisionBuildRunner(input))
+                await writeStdoutLine(context.runtime, '  toolchain: git + bun (build-runner)');
+            if (placement.gpu)
+                await writeStdoutLine(context.runtime, '  gpu:       nvidia driver + docker + nvidia container runtime (installed at boot when absent)');
+            if (shouldProvisionDesktop(input))
+                await writeStdoutLine(context.runtime, '  desktop:   docker + vibes-desktop-base');
+            if (input.harness.length > 0)
+                await writeStdoutLine(context.runtime, `  harness:  ${input.harness.join(', ')} (owner-advertised bootstrap queued)`);
+            if (input.org)
+                await writeStdoutLine(context.runtime, `  org:     ${input.org} (host.ownerType=${launched.host.ownerType})`);
+        }
+        let host = launched.host;
+        if (input.wait) {
+            let lastStatus = host.status;
+            host = await waitForHostActive({
+                lifecycle: context.runtime.lifecycle,
+                platform,
+                id: host.id,
+                timeoutSeconds: input.timeoutSeconds,
+                noun: 'host',
+                timeoutHint: 'Cloud-init can take a few minutes — check `vibes fleet ls`.',
+                onPoll: async (status) => {
+                    if (!asJson && status !== lastStatus) {
+                        await writeStdoutLine(context.runtime, `  status:  ${status}`);
+                        lastStatus = status;
+                    }
+                }
+            });
+        }
+        const url = await terminalHint(context.runtime, host.hostId);
+        if (asJson) {
+            await writeJson(context.runtime, {
+                host,
+                sandboxResourceId: launched.sandboxResourceId,
+                enrollmentTokenPrefix: launched.enrollmentTokenPrefix,
+                placement: launched.placement,
+                ttlHours: input.ttlHours,
+                ttlConfirmed: ttl.ttlConfirmed,
+                expiresAt: ttl.expiresAt,
+                terminalUrl: url
+            });
+            return;
+        }
+        if (host.status === 'active') {
+            await writeStdoutLine(context.runtime, `Host is active. Open a terminal: ${url}`);
+        }
+        else {
+            await writeStdoutLine(context.runtime, 'Enrollment usually lands within 3-6 minutes. ' +
+                'Check `vibes fleet ls` or re-run with --wait.');
+            await writeStdoutLine(context.runtime, `Once active, open a terminal: ${url}`);
+        }
+    }
+};
+//# sourceMappingURL=fleet.launch.command.impl.js.map

package/dist/cli/fleets/commands/fleet.launch.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.launch.command.impl.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.launch.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA0B1E,OAAO,EAAE,SAAS,EAAqB,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACN,cAAc,EACd,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,MAAM,oBAAoB,CAAC;AAG5B,SAAS,gBAAgB;IACxB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,YAAY,CAAC,OAAqB,EAAE,MAAc;IAChE,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO,GAAG,QAAQ,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,qCAAqC,EAAE,MAAM,2BAA2B,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAAqB,EAAE,GAAW;IACtE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IACjC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,KAAK,CAAC,KAAK,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAChC,iBAAqC,EACrC,QAA0E;IAE1E,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,6BAA6B;IAC7B,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,SAAS,EAAE,CAAC;YACf,OAAO;gBACN,YAAY,EAAE,KAAK;gBACnB,SAAS;gBACT,OAAO,EACN,qEAAqE;oBACrE,GAAG,SAAS,CAAC,WAAW,EAAE,mCAAmC;aAC9D,CAAC;QACH,CAAC;QACD,OAAO;YACN,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,OAAO,EACN,oFAAoF;gBACpF,yCAAyC,QAAQ,CAAC,IAAI,CAAC,MAAM,eAAe;SAC7E,CAAC;IACH,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACf,OAAO;YACN,YAAY,EAAE,IAAI;YAClB,SAAS;YACT,OAAO,EAAE,GAAG,iBAAiB,oBAAoB,SAAS,CAAC,WAAW,EAAE,GAAG;SAC3E,CAAC;IACH,CAAC;IACD,OAAO;QACN,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI;QACf,OAAO,EACN,GAAG,iBAAiB,8DAA8D;YAClF,oDAAoD;YACpD,yCAAyC,QAAQ,CAAC,IAAI,CAAC,MAAM,eAAe;KAC7E,CAAC;AACH,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoB,EAAE,OAAuB;QACjF,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,gBAAgB,EAAE,EAAE,CAAC;QAC5D,sEAAsE;QACtE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;YAE7B,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,MAAM;gBAAE,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;;gBAC5D,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,cAAc,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;QAEhC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC;YAC/C,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACxB,QAAQ,EAAE,QAAQ,IAAI,SAAS;YAC/B,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;YAC9B,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YACtC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACtB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,IAAI,CAAC,SAAS;oBACf,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1B,CAAC,CAAC,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC/B,CAAC,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,IAAI,CAAC,KAAK;oBACX,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtB,CAAC,CAAC,EAAE;YACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBACnC,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,IAAI,CAAC,OAAO;oBACb,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC,CAAC,EAAE;YACN,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,CAAC;YACvE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;YAC3D,0BAA0B,EAAE,CAAC,IAAI,CAAC,0BAA0B;gBAC3D,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,cAAc,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7E,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,wBAAwB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,KAAK,GAAG,MAAM,6BAA6B,CAC1C,OAAO,CAAC,OAAO,EACf,KAAK,EACL,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAC/D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,qCAAqC;QACrC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC,KAAK,CAAC;YAC/D,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE;YAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qCAAqC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACtH,sBAAsB;SACtB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;YAC/B,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;YAC7I,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACpF,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,IAAI,0BAA0B,CAAC,KAAK,CAAC;gBAAE,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,uCAAuC,CAAC,CAAC;YACvH,IAAI,SAAS,CAAC,GAAG;gBAAE,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,gGAAgG,CAAC,CAAC;YAC5J,IAAI,sBAAsB,CAAC,KAAK,CAAC;gBAAE,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;YACtH,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBAC3B,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACvH,IAAI,KAAK,CAAC,GAAG;gBAAE,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,KAAK,CAAC,GAAG,oBAAoB,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QAC9H,CAAC;QAED,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,UAAU,GAAW,IAAI,CAAC,MAAM,CAAC;YACrC,IAAI,GAAG,MAAM,iBAAiB,CAAC;gBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;gBACpC,QAAQ;gBACR,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,6DAA6D;gBAC1E,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACxB,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;wBACtC,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC;wBAC/D,UAAU,GAAG,MAAM,CAAC;oBACrB,CAAC;gBACF,CAAC;aACD,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;gBAChC,IAAI;gBACJ,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;gBACrD,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,GAAG;aAChB,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACP,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EACpC,+CAA+C;gBAC/C,+CAA+C,CAC/C,CAAC;YACF,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAChF,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/fleets/commands/fleet.ls.command.descriptor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `vibes fleet ls` — list the account's fleet hosts from the platform inventory.
+ *
+ * Complements `vibes fleet status` (local runtime registry health) with the
+ * cloud-side host records: lifecycle status, droplet ids, regions.
+ */
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.ls.command.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.ls.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.ls.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.ls.command.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAqBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}