@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.2

package/dist/cli/fleets/commands/fleet.ls.command.descriptor.js

@@ -0,0 +1,30 @@
+/**
+ * `vibes fleet ls` — list the account's fleet hosts from the platform inventory.
+ *
+ * Complements `vibes fleet status` (local runtime registry health) with the
+ * cloud-side host records: lifecycle status, droplet ids, regions.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'fleet.ls',
+    name: 'ls',
+    description: 'List fleet hosts from the platform inventory',
+    group: 'fleet',
+    arguments: [],
+    options: [
+        {
+            flags: '--status <status>',
+            description: 'Filter by lifecycle status',
+            choices: ['provisioning', 'pending', 'active', 'pausing', 'paused', 'draining', 'retired', 'orphaned']
+        },
+        { flags: '--all', description: 'Include retired and orphaned hosts' },
+        { flags: '--limit <n>', description: 'Max rows (default 200)' },
+        { flags: '--offset <n>', description: 'Pagination offset' },
+        { flags: '--json', description: 'Output as JSON' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=fleet.ls.command.descriptor.js.map

package/dist/cli/fleets/commands/fleet.ls.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.ls.command.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.ls.command.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,8CAA8C;IAC3D,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,EAAE;IACb,OAAO,EAAE;QACR;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,4BAA4B;YACzC,OAAO,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;SACtG;QACD,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,oCAAoC,EAAE;QACrE,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,wBAAwB,EAAE;QAC/D,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC3D,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;KAClD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.ls.command.impl.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `vibes fleet ls` implementation (fleet-droplet F1.1, gap G3).
+ *
+ * Lists the acting account's host records via `GET /api/hosts` (owner-scoped
+ * server-side). Terminal hosts (retired/orphaned) are hidden unless `--all`
+ * or an explicit `--status` filter is passed.
+ */
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(_args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=fleet.ls.command.impl.d.ts.map

package/dist/cli/fleets/commands/fleet.ls.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.ls.command.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.ls.command.impl.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;mBAsBjD,cAAc,QAAQ,cAAc,WAAW,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;;AADnG,wBA2CE"}

package/dist/cli/fleets/commands/fleet.ls.command.impl.js

@@ -0,0 +1,56 @@
+import { writeStdoutLine } from '@vibesdotdev/cli/output';
+import { getAuthedPlatformClient } from "../lib/authed-platform.js";
+import { fleetLsInputSchema } from "./fleet.schemas.js";
+import { writeJson } from '@vibesdotdev/cli/output';
+function statusBadge(status) {
+    if (status === 'active')
+        return '●';
+    if (status === 'provisioning' || status === 'pending')
+        return '◐';
+    return '○';
+}
+function formatHostLine(host) {
+    const region = host.region ? `/${host.region}` : '';
+    const droplet = host.sandboxResourceId ?? '-';
+    return (`  ${statusBadge(host.status)} ${host.hostId}  [${host.status}]  ` +
+        `${host.provider}${region}  droplet=${droplet}  id=${host.id}`);
+}
+export default {
+    async execute(_args, opts, context) {
+        const asJson = Boolean(opts.json);
+        const parsed = fleetLsInputSchema.safeParse({
+            status: opts.status,
+            all: Boolean(opts.all),
+            limit: opts.limit !== undefined ? Number(opts.limit) : undefined,
+            offset: opts.offset !== undefined ? Number(opts.offset) : undefined
+        });
+        if (!parsed.success) {
+            const issues = parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join(', ');
+            throw new Error(`Invalid input: ${issues}`);
+        }
+        const input = parsed.data;
+        const platform = await getAuthedPlatformClient(context.runtime);
+        const result = await platform.hosts.list({
+            status: input.status,
+            limit: input.limit,
+            offset: input.offset
+        });
+        let hosts = result.results;
+        if (!input.all && !input.status) {
+            hosts = hosts.filter((h) => h.status !== 'retired' && h.status !== 'orphaned');
+        }
+        if (asJson) {
+            await writeJson(context.runtime, { hosts });
+            return;
+        }
+        if (hosts.length === 0) {
+            await writeStdoutLine(context.runtime, 'No fleet hosts found. Launch one with `vibes fleet launch`.');
+            return;
+        }
+        await writeStdoutLine(context.runtime, `Fleet hosts (${hosts.length}):`);
+        for (const host of hosts) {
+            await writeStdoutLine(context.runtime, formatHostLine(host));
+        }
+    }
+};
+//# sourceMappingURL=fleet.ls.command.impl.js.map

package/dist/cli/fleets/commands/fleet.ls.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.ls.command.impl.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.ls.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAU1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,SAAS,WAAW,CAAC,MAAsB;IAC1C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACpC,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClE,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAU;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC;IAC9C,OAAO,CACN,KAAK,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,MAAM,KAAK;QAClE,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM,aAAa,OAAO,QAAQ,IAAI,CAAC,EAAE,EAAE,CAC9D,CAAC;AACH,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoB,EAAE,OAAuB;QACjF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC;YAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACnE,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO;QACR,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,6DAA6D,CAAC,CAAC;YACtG,OAAO;QACR,CAAC;QAED,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;CACD,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.cli-group.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLIGroupAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLIGroupAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.marshal-presence.cli-group.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.marshal-presence.cli-group.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.cli-group.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF,QAAA,MAAM,UAAU,EAAE,uBASjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.cli-group.descriptor.js

@@ -0,0 +1,12 @@
+const descriptor = {
+    kind: 'cli/group',
+    id: 'fleet.marshal-presence',
+    name: 'marshal-presence',
+    description: 'Publish and supervise the local Marshal presence heartbeat',
+    parent: 'fleet',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=fleet.marshal-presence.cli-group.descriptor.js.map

package/dist/cli/fleets/commands/fleet.marshal-presence.cli-group.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.cli-group.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.cli-group.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA4B;IAC3C,IAAI,EAAE,WAAW;IACjB,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,4DAA4D;IACzE,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.marshal-presence.install.command.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.install.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.install.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAiBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.descriptor.js

@@ -0,0 +1,20 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'fleet.marshal-presence.install',
+    name: 'install',
+    description: 'Install the secret-safe Marshal presence LaunchAgent',
+    group: 'fleet.marshal-presence',
+    arguments: [],
+    options: [
+        { flags: '--agent-id <id>', description: 'Presence agent id (default: marshal.live)' },
+        { flags: '--machine-id <id>', description: 'Stable machine id (default: hostname)' },
+        { flags: '--machine-name <name>', description: 'Machine display name (default: Marshal)' },
+        { flags: '--interval <seconds>', description: 'Heartbeat cadence (default: 120)' },
+        { flags: '--print', description: 'Print the generated plist without installing it' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=fleet.marshal-presence.install.command.descriptor.js.map

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.install.command.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.install.command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,gCAAgC;IACpC,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,sDAAsD;IACnE,KAAK,EAAE,wBAAwB;IAC/B,SAAS,EAAE,EAAE;IACb,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,2CAA2C,EAAE;QACtF,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uCAAuC,EAAE;QACpF,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,yCAAyC,EAAE;QAC1F,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,kCAAkC,EAAE;QAClF,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,iDAAiD,EAAE;KACpF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.impl.d.ts

@@ -0,0 +1,8 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+export declare function parseMarshalPresenceInterval(value: unknown): number | undefined;
+declare class MarshalPresenceInstallCommand {
+    execute(_args: CommandOptions, options: CommandOptions, context: CommandContext): Promise<void>;
+}
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof MarshalPresenceInstallCommand>;
+export default _default;
+//# sourceMappingURL=fleet.marshal-presence.install.command.impl.d.ts.map

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.install.command.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.install.command.impl.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAUvE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI/E;AAED,cAAM,6BAA6B;IAC5B,OAAO,CACZ,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;CAmChB;;AAED,wBAIG"}

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.impl.js

@@ -0,0 +1,55 @@
+import { getFleetServiceBackend, renderLaunchdPlist } from '@vibesdotdev/platform/fleets/service-backends';
+import { getPathRoots, getRuntimePath } from '@vibesdotdev/paths';
+import { CapabilityError, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { resolveFileSystemAdapter, chmodChecked } from '@vibesdotdev/filesystem';
+import { writeStdoutLine } from '@vibesdotdev/cli/output';
+import { MarshalPresenceIntervalSchema, MarshalPresenceInstallOptionsSchema, marshalPresenceInvalid } from "../../../schemas/cli/marshal-presence.js";
+import { buildMarshalPresenceServiceDescriptor } from "./fleet.marshal-presence.service-descriptor.js";
+export function parseMarshalPresenceInterval(value) {
+    const parsed = MarshalPresenceIntervalSchema.safeParse(value);
+    if (!parsed.success)
+        throw marshalPresenceInvalid();
+    return parsed.data;
+}
+class MarshalPresenceInstallCommand {
+    async execute(_args, options, context) {
+        if (context.runtime.localEnvironment.getPlatform?.() !== 'darwin') {
+            throw new CapabilityError('Marshal presence service installation currently requires macOS launchd.', 'UNAVAILABLE', {
+                reason: 'marshal-presence-requires-launchd',
+                retryable: false
+            });
+        }
+        const admitted = MarshalPresenceInstallOptionsSchema.safeParse(options);
+        if (!admitted.success)
+            throw marshalPresenceInvalid();
+        const { interval, print, ...identity } = admitted.data;
+        const descriptor = buildMarshalPresenceServiceDescriptor(context.runtime, {
+            ...identity, intervalSeconds: interval,
+            vibesHome: getPathRoots(context.runtime).vibesHome
+        });
+        if (print) {
+            await writeStdoutLine(context.runtime, renderLaunchdPlist(context.runtime, descriptor));
+            return;
+        }
+        const outputPath = descriptor.standardOutputPath;
+        if (!outputPath) {
+            throw new CapabilityError('Marshal presence service is missing its state path.', 'INTERNAL', {
+                reason: 'marshal-presence-state-path-missing'
+            });
+        }
+        const filesystem = await resolveFileSystemAdapter(context.runtime);
+        const paths = await getRuntimePath(context.runtime);
+        const stateDir = paths.dirname(outputPath);
+        await filesystem.mkdir(stateDir, { recursive: true, mode: 0o700 });
+        await chmodChecked(filesystem, stateDir, 0o700);
+        const backend = await getFleetServiceBackend(context.runtime);
+        await backend.register(descriptor);
+        await writeStdoutLine(context.runtime, `Installed ${descriptor.label} (${descriptor.startIntervalSeconds}s interval)`);
+    }
+}
+export default createRuntimeImplementation({
+    kind: 'cli/command',
+    id: 'fleet.marshal-presence.install',
+    implementation: MarshalPresenceInstallCommand
+});
+//# sourceMappingURL=fleet.marshal-presence.install.command.impl.js.map

package/dist/cli/fleets/commands/fleet.marshal-presence.install.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.install.command.impl.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.install.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,sBAAsB,EACtB,kBAAkB,EAClB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,mCAAmC,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AACtJ,OAAO,EACN,qCAAqC,EACrC,MAAM,gDAAgD,CAAC;AAExD,MAAM,UAAU,4BAA4B,CAAC,KAAc;IAC1D,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,sBAAsB,EAAE,CAAC;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,6BAA6B;IAClC,KAAK,CAAC,OAAO,CACZ,KAAqB,EACrB,OAAuB,EACvB,OAAuB;QAEvB,IAAI,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,eAAe,CAAC,yEAAyE,EAAE,aAAa,EAAE;gBACnH,MAAM,EAAE,mCAAmC;gBAC3C,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,mCAAmC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,sBAAsB,EAAE,CAAC;QACtD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QACvD,MAAM,UAAU,GAAG,qCAAqC,CAAC,OAAO,CAAC,OAAO,EAAE;YACzE,GAAG,QAAQ,EAAE,eAAe,EAAE,QAAQ;YACtC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YACxF,OAAO;QACR,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,UAAU,EAAE;gBAC5F,MAAM,EAAE,qCAAqC;aAC7C,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EACpC,aAAa,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,oBAAoB,aAAa,CAC9E,CAAC;IACH,CAAC;CACD;AAED,eAAe,2BAA2B,CAAC;IAC1C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,gCAAgC;IACpC,cAAc,EAAE,6BAA6B;CAC7C,CAAC,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.service-descriptor.d.ts

@@ -0,0 +1,20 @@
+import type { FleetServiceDescriptor } from '@vibesdotdev/platform/fleets/service-backends';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+export declare const MARSHAL_PRESENCE_SERVICE_ID = "vibes-marshal-presence";
+export declare const MARSHAL_PRESENCE_LAUNCHD_LABEL = "dev.vibes.marshal-presence";
+export declare const MARSHAL_PRESENCE_INTERVAL_SECONDS = 120;
+export interface MarshalPresenceServiceOptions {
+    readonly agentId?: string;
+    readonly machineId?: string;
+    readonly machineName?: string;
+    readonly intervalSeconds?: number;
+    readonly vibesHome?: string;
+    readonly cliPath?: string;
+}
+/** The caller names the machine's vibes home (`getPathRoots(runtime).vibesHome`). */
+export type MarshalPresenceServiceInput = MarshalPresenceServiceOptions & {
+    readonly vibesHome: string;
+};
+export declare function resolveMarshalPresenceDefaults(runtime: Pick<RuntimeRef, 'localEnvironment' | 'getEnv'>, options: MarshalPresenceServiceInput): Required<MarshalPresenceServiceOptions>;
+export declare function buildMarshalPresenceServiceDescriptor(runtime: Pick<RuntimeRef, 'localEnvironment' | 'getEnv'>, options: MarshalPresenceServiceInput): FleetServiceDescriptor;
+//# sourceMappingURL=fleet.marshal-presence.service-descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.marshal-presence.service-descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.service-descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.service-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGvE,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AACpE,eAAO,MAAM,8BAA8B,+BAA+B,CAAC;AAC3E,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD,qFAAqF;AACrF,MAAM,MAAM,2BAA2B,GAAG,6BAA6B,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzG,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,GAAG,QAAQ,CAAC,EACxD,OAAO,EAAE,2BAA2B,GAClC,QAAQ,CAAC,6BAA6B,CAAC,CAsBzC;AAED,wBAAgB,qCAAqC,CACpD,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,GAAG,QAAQ,CAAC,EACxD,OAAO,EAAE,2BAA2B,GAClC,sBAAsB,CA+BxB"}

package/dist/cli/fleets/commands/fleet.marshal-presence.service-descriptor.js

@@ -0,0 +1,62 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { resolveFleetDaemonVibesBin } from "./fleet.daemon.service-descriptor.js";
+export const MARSHAL_PRESENCE_SERVICE_ID = 'vibes-marshal-presence';
+export const MARSHAL_PRESENCE_LAUNCHD_LABEL = 'dev.vibes.marshal-presence';
+export const MARSHAL_PRESENCE_INTERVAL_SECONDS = 120;
+function nonEmpty(value, fallback) {
+    return value?.trim() || fallback;
+}
+export function resolveMarshalPresenceDefaults(runtime, options) {
+    const vibesHome = options.vibesHome;
+    // The identity is what the caller declares (the install command's flags), with
+    // the flags' documented defaults; nothing is read from an environment.
+    const machineName = nonEmpty(options.machineName, 'Marshal');
+    const defaultMachineId = runtime.getEnv('HOSTNAME') ?? runtime.getEnv('COMPUTERNAME') ?? 'local-machine';
+    const machineId = nonEmpty(options.machineId, defaultMachineId);
+    const intervalSeconds = options.intervalSeconds ?? MARSHAL_PRESENCE_INTERVAL_SECONDS;
+    if (!Number.isInteger(intervalSeconds) || intervalSeconds <= 0) {
+        throw new CapabilityError('Marshal presence interval must be a positive integer', 'INVALID_INPUT', {
+            reason: 'marshal-presence-interval-invalid'
+        });
+    }
+    return {
+        agentId: nonEmpty(options.agentId, 'marshal.live'),
+        machineId,
+        machineName,
+        intervalSeconds,
+        vibesHome,
+        cliPath: options.cliPath ?? resolveFleetDaemonVibesBin(runtime)
+    };
+}
+export function buildMarshalPresenceServiceDescriptor(runtime, options) {
+    const resolved = resolveMarshalPresenceDefaults(runtime, options);
+    const stateDir = `${resolved.vibesHome.replace(/\/+$/, '')}/marshal-live`;
+    return {
+        id: MARSHAL_PRESENCE_SERVICE_ID,
+        name: 'Vibes Marshal Presence',
+        description: 'Publishes Marshal presence to HQ without putting credentials in process argv',
+        command: resolved.cliPath,
+        args: [
+            'fleet',
+            'marshal-presence',
+            'heartbeat',
+            '--agent-id',
+            resolved.agentId,
+            '--machine-id',
+            resolved.machineId,
+            '--machine-name',
+            resolved.machineName
+        ],
+        keepAlive: false,
+        autoStart: true,
+        scope: 'user',
+        label: MARSHAL_PRESENCE_LAUNCHD_LABEL,
+        startIntervalSeconds: resolved.intervalSeconds,
+        standardOutputPath: `${stateDir}/launchd.out.log`,
+        standardErrorPath: `${stateDir}/launchd.err.log`,
+        env: {
+            VIBES_HOME: resolved.vibesHome
+        }
+    };
+}
+//# sourceMappingURL=fleet.marshal-presence.service-descriptor.js.map

package/dist/cli/fleets/commands/fleet.marshal-presence.service-descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.service-descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.service-descriptor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAElF,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AACpE,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAC3E,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAWrD,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAgB;IAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC;AAClC,CAAC;AAKD,MAAM,UAAU,8BAA8B,CAC7C,OAAwD,EACxD,OAAoC;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,+EAA+E;IAC/E,uEAAuE;IACvE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,eAAe,CAAC;IACzG,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,iCAAiC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,eAAe,EAAE;YAClG,MAAM,EAAE,mCAAmC;SAC3C,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;QAClD,SAAS;QACT,WAAW;QACX,eAAe;QACf,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAC,OAAO,CAAC;KAC/D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qCAAqC,CACpD,OAAwD,EACxD,OAAoC;IAEpC,MAAM,QAAQ,GAAG,8BAA8B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC;IAE1E,OAAO;QACN,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE;YACL,OAAO;YACP,kBAAkB;YAClB,WAAW;YACX,YAAY;YACZ,QAAQ,CAAC,OAAO;YAChB,cAAc;YACd,QAAQ,CAAC,SAAS;YAClB,gBAAgB;YAChB,QAAQ,CAAC,WAAW;SACpB;QACD,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,8BAA8B;QACrC,oBAAoB,EAAE,QAAQ,CAAC,eAAe;QAC9C,kBAAkB,EAAE,GAAG,QAAQ,kBAAkB;QACjD,iBAAiB,EAAE,GAAG,QAAQ,kBAAkB;QAChD,GAAG,EAAE;YACJ,UAAU,EAAE,QAAQ,CAAC,SAAS;SAC9B;KACD,CAAC;AACH,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.marshal-presence.uninstall.command.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.uninstall.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.uninstall.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAWjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.descriptor.js

@@ -0,0 +1,14 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'fleet.marshal-presence.uninstall',
+    name: 'uninstall',
+    description: 'Uninstall the Marshal presence LaunchAgent',
+    group: 'fleet.marshal-presence',
+    arguments: [],
+    options: [],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=fleet.marshal-presence.uninstall.command.descriptor.js.map

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.uninstall.command.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.uninstall.command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,kCAAkC;IACtC,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,4CAA4C;IACzD,KAAK,EAAE,wBAAwB;IAC/B,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.impl.d.ts

@@ -0,0 +1,7 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+declare class MarshalPresenceUninstallCommand {
+    execute(_args: CommandOptions, _options: CommandOptions, context: CommandContext): Promise<void>;
+}
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof MarshalPresenceUninstallCommand>;
+export default _default;
+//# sourceMappingURL=fleet.marshal-presence.uninstall.command.impl.d.ts.map

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.uninstall.command.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.uninstall.command.impl.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKvE,cAAM,+BAA+B;IAC9B,OAAO,CACZ,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;CAWhB;;AAED,wBAIG"}

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.impl.js

@@ -0,0 +1,24 @@
+import { writeStdoutLine } from '@vibesdotdev/cli/output';
+import { getFleetServiceBackend } from '@vibesdotdev/platform/fleets/service-backends';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { CapabilityError, createRuntimeImplementation } from '@vibesdotdev/kernel';
+import { buildMarshalPresenceServiceDescriptor } from "./fleet.marshal-presence.service-descriptor.js";
+class MarshalPresenceUninstallCommand {
+    async execute(_args, _options, context) {
+        if (context.runtime.localEnvironment.getPlatform?.() !== 'darwin') {
+            throw new CapabilityError('Marshal presence service installation currently requires macOS launchd.', 'UNAVAILABLE', { reason: 'marshal-presence-requires-launchd', retryable: false });
+        }
+        const descriptor = buildMarshalPresenceServiceDescriptor(context.runtime, {
+            vibesHome: getPathRoots(context.runtime).vibesHome
+        });
+        const backend = await getFleetServiceBackend(context.runtime);
+        await backend.unregister(descriptor);
+        await writeStdoutLine(context.runtime, `Uninstalled ${descriptor.label}`);
+    }
+}
+export default createRuntimeImplementation({
+    kind: 'cli/command',
+    id: 'fleet.marshal-presence.uninstall',
+    implementation: MarshalPresenceUninstallCommand
+});
+//# sourceMappingURL=fleet.marshal-presence.uninstall.command.impl.js.map

package/dist/cli/fleets/commands/fleet.marshal-presence.uninstall.command.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.marshal-presence.uninstall.command.impl.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.marshal-presence.uninstall.command.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AAEvG,MAAM,+BAA+B;IACpC,KAAK,CAAC,OAAO,CACZ,KAAqB,EACrB,QAAwB,EACxB,OAAuB;QAEvB,IAAI,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnE,MAAM,IAAI,eAAe,CAAC,yEAAyE,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACxL,CAAC;QACD,MAAM,UAAU,GAAG,qCAAqC,CAAC,OAAO,CAAC,OAAO,EAAE;YACzE,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;CACD;AAED,eAAe,2BAA2B,CAAC;IAC1C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,kCAAkC;IACtC,cAAc,EAAE,+BAA+B;CAC/C,CAAC,CAAC"}

package/dist/cli/fleets/commands/fleet.materialize.command.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/cli/schemas/types';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=fleet.materialize.command.descriptor.d.ts.map

package/dist/cli/fleets/commands/fleet.materialize.command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.materialize.command.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.materialize.command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAEhF,QAAA,MAAM,UAAU,EAAE,yBAoCjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.materialize.command.descriptor.js

@@ -0,0 +1,35 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'fleet.materialize',
+    name: 'materialize',
+    description: "Renew this host's registry lease and materialize the plugin host",
+    group: 'fleet',
+    options: [
+        {
+            flags: '--host-id <id>',
+            description: 'Host ID to renew for (default: the host enrolled on this machine)'
+        },
+        {
+            flags: '--check',
+            description: 'Report whether a lease can be obtained; materialize nothing'
+        },
+        { flags: '--json', description: 'Output as JSON' }
+    ],
+    examples: [
+        {
+            command: 'vibes fleet materialize',
+            description: "Lease with this host's durable token and run `vibes update --global` — what a standing host runs after a release",
+            expectExit: 0
+        },
+        {
+            command: 'vibes fleet materialize --check',
+            description: 'Confirm the host can still earn a credential, without installing',
+            expectExit: 0
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=fleet.materialize.command.descriptor.js.map

package/dist/cli/fleets/commands/fleet.materialize.command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.materialize.command.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.materialize.command.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,kEAAkE;IAC/E,KAAK,EAAE,OAAO;IAEd,OAAO,EAAE;QACR;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,mEAAmE;SAChF;QACD;YACC,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,6DAA6D;SAC1E;QACD,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;KAClD;IAED,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,yBAAyB;YAClC,WAAW,EACV,kHAAkH;YACnH,UAAU,EAAE,CAAC;SACb;QACD;YACC,OAAO,EAAE,iCAAiC;YAC1C,WAAW,EAAE,kEAAkE;YAC/E,UAAU,EAAE,CAAC;SACb;KACD;IAED,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/fleets/commands/fleet.materialize.command.impl.d.ts

@@ -0,0 +1,7 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+export declare function execute(_args: CommandOptions, opts: CommandOptions, commandContext: CommandContext): Promise<void>;
+declare const _default: {
+    execute: typeof execute;
+};
+export default _default;
+//# sourceMappingURL=fleet.materialize.command.impl.d.ts.map

package/dist/cli/fleets/commands/fleet.materialize.command.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.materialize.command.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/fleets/commands/fleet.materialize.command.impl.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAqBvE,wBAAsB,OAAO,CAC5B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,cAAc,EACpB,cAAc,EAAE,cAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CAsFf;;;;AAED,wBAA2B"}

package/dist/cli/fleets/commands/fleet.materialize.command.impl.js

@@ -0,0 +1,125 @@
+import { MaterializeOptionsSchema, LeaseFailureSchema } from "../../../schemas/fleet-cli.js";
+import { writeStdoutLine, commandWriters } from '@vibesdotdev/cli/output';
+/**
+ * `vibes fleet materialize` — a standing host renewing its own credential.
+ *
+ * The enrollment token cloud-init used is one-time and expiring, so it pays
+ * for exactly one materialization. This command pays for every one after it
+ * with the DURABLE host token the daemon persisted at enrollment, which is
+ * what makes a host that lives for weeks possible: run it after a release, or
+ * on a schedule, and the host re-materializes itself.
+ *
+ * The leased token is never printed, never in argv and never written to disk:
+ * it reaches the single `vibes update --global` child only through
+ * `spawnWithCredentials` as a caller-held lease (RC05 U3), on top of the
+ * handed runtime's host set (its roots, so the update targets this home), and
+ * the bunfig references it by NAME (the shape `renderSeedBunfig` writes).
+ */
+import { settle } from '@vibesdotdev/kernel';
+import { spawnWithCredentials } from '@vibesdotdev/secrets/exec';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { writeJson } from '@vibesdotdev/cli/output';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { defaultHostId, defaultTokenFile, readHostToken } from "../lib/host-token-store.js";
+import { describeHostRegistryLease, hostRegistryLeaseUrl, parseHostRegistryLease } from "../lib/registry-lease.js";
+const TOKEN_ENV = 'VIBES_REGISTRY_TOKEN';
+/** The handed runtime's execution provider; a runtime with none answers null. */
+async function resolveExecution(runtime) {
+    if (!runtime.hasKind('runtime/execution'))
+        return null;
+    return await runtime.query('runtime/execution').resolve();
+}
+export async function execute(_args, opts, commandContext) {
+    const runtime = commandContext.runtime;
+    const asJson = opts.json === true || opts.format === 'json';
+    const hostId = MaterializeOptionsSchema.parse(opts).hostId ?? defaultHostId(runtime.localEnvironment.getHostname?.() ?? 'host');
+    const hostToken = await readHostToken(runtime, defaultTokenFile(getPathRoots(runtime), hostId), hostId);
+    if (!hostToken) {
+        const message = `No durable host token for '${hostId}' on this machine. A host earns one by enrolling; run \`vibes fleet daemon --host-id ${hostId}\` first.`;
+        if (asJson)
+            await writeJson(runtime, { error: message });
+        else
+            (await commandWriters(runtime)).log(message);
+        requestCLIExit(1);
+        return;
+    }
+    // The declared `platform` service; an undeclared one fails `service-undeclared`.
+    const origin = await serviceOrigin(runtime, 'platform');
+    const response = await fetch(hostRegistryLeaseUrl(origin, hostId), {
+        method: 'POST',
+        headers: { authorization: `Bearer ${hostToken}`, 'content-type': 'application/json' },
+        body: JSON.stringify({ hostId, token: 'bearer' })
+    });
+    const decoded = await settle(() => response.json());
+    const body = decoded.ok ? decoded.value : null;
+    const bodyParseFailure = decoded.ok ? undefined : String(decoded.cause);
+    const lease = response.ok ? parseHostRegistryLease(body) : null;
+    if (!lease) {
+        // Report the platform's own words: "not active", "user-owned host",
+        // "invalid host token" are each a different repair.
+        const reported = LeaseFailureSchema.safeParse(body).data?.error ??
+            `HTTP ${response.status}${bodyParseFailure ? ` (response body was not JSON: ${bodyParseFailure})` : ''}`;
+        const message = `Could not lease a registry credential for '${hostId}': ${reported}`;
+        if (asJson)
+            await writeJson(runtime, { error: message, status: response.status });
+        else
+            (await commandWriters(runtime)).log(message);
+        requestCLIExit(1);
+        return;
+    }
+    if (opts.check === true) {
+        if (asJson)
+            await writeJson(runtime, { hostId, lease: { ...lease, token: undefined } });
+        else
+            await writeStdoutLine(runtime, `${hostId}: ${describeHostRegistryLease(lease)}`);
+        return;
+    }
+    const execution = await resolveExecution(runtime);
+    const command = await execution?.resolveCommand('vibes');
+    if (!execution || !command) {
+        const message = 'The active runtime cannot resolve the `vibes` command to materialize with.';
+        if (asJson)
+            await writeJson(runtime, { error: message });
+        else
+            (await commandWriters(runtime)).log(message);
+        requestCLIExit(1);
+        return;
+    }
+    // The one sanctioned credential spawn: the handed runtime's host set plus the
+    // leased token as a caller-held lease (redacted, audited by id and expiry).
+    const writers = asJson ? undefined : await commandWriters(runtime);
+    const child = await spawnWithCredentials(runtime, {
+        command,
+        args: ['update', '--global'],
+        pass: [],
+        credentials: {},
+        leases: { [TOKEN_ENV]: { value: lease.token, lease: { id: lease.leaseId, expiresAt: lease.expiresAt } } },
+        stdin: 'ignore',
+        output: {
+            stdout: (text) => {
+                writers?.out(text);
+            },
+            stderr: (text) => {
+                writers?.err(text);
+            }
+        },
+        timeoutMs: 15 * 60_000
+    });
+    const exitCode = await child.exited;
+    if (exitCode !== 0) {
+        const message = `\`vibes update --global\` exited ${exitCode} with a valid ${describeHostRegistryLease(lease)}`;
+        if (asJson)
+            await writeJson(runtime, { error: message, exitCode });
+        else
+            (await commandWriters(runtime)).log(message);
+        requestCLIExit(1);
+        return;
+    }
+    if (asJson)
+        await writeJson(runtime, { hostId, materialized: true, expiresAt: lease.expiresAt });
+    else
+        await writeStdoutLine(runtime, `${hostId}: materialized with a ${describeHostRegistryLease(lease)}`);
+}
+export default { execute };
+//# sourceMappingURL=fleet.materialize.command.impl.js.map