@vibesdotdev/plugins 0.0.0-stage → 1.0.0-rc.1

package/dist/auth/consumer.plugin.js

@@ -0,0 +1,105 @@
+import { optionalMemberRegistrar } from "../core/optional-member.js";
+/**
+ * Auth Plugins Umbrella - Auth, Secrets backends
+ *
+ * Depends on: @vibesdotdev/plugins-core (for config/environment)
+ *
+ * Owned sub-plugins:
+ * - auth/plugin                (authentication flows)
+ * - secrets/plugin             (secrets management)
+ * - secrets-backend-env-file   (env file secrets backend)
+ * - secrets-backend-encrypted-local (encrypted local secrets backend)
+ *
+ * Provider secret backends (platform-api, vault) are composed by hosts from
+ * their integration package, never mounted here.
+ */
+import { createRuntimePlugin, createRuntimeKind } from '@vibesdotdev/kernel';
+import { z } from 'zod/v4';
+// NOTE: previously all loads went through a dynamic-string `importPlugin`.
+// `bun build --compile` cannot statically analyze dynamic specifiers, so
+// those modules were missing from the binary closure. Static `await import`
+// with literal specifiers fixes this; importPlugin remains for future
+// optional / runtime-pluggable backends.
+import { AuthPluginsConfigSchema, mergeConfig } from "../schemas/auth.js";
+export const authPluginsPlugin = createRuntimePlugin({
+    id: '@vibesdotdev/plugins-auth',
+    name: 'Auth Plugins Umbrella',
+    description: 'Auth, Secrets, Secrets backends',
+    dependencies: ['context', '@vibesdotdev/plugins-core'],
+    kinds: [
+        createRuntimeKind({
+            id: 'plugins/auth/config',
+            descriptorSchema: z.object({
+                kind: z.literal('plugins/auth/config'),
+                id: z.literal('plugins.auth'),
+                config: AuthPluginsConfigSchema
+            })
+        })
+    ],
+    async onRegister(runtime) {
+        const member = optionalMemberRegistrar('plugins-auth', runtime);
+        const configId = 'plugins.auth';
+        const userConfig = runtime.hasContext(configId) ? await runtime.context(configId) : {};
+        const config = mergeConfig(userConfig);
+        // The auth plugin is the CLI's identity spine: every authenticated
+        // command (auth status, forge, pr, registry publish) resolves the session
+        // through it, and its event descriptors (auth.login.succeeded) anchor
+        // cross-plugin subscriptions. An app config that disables auth describes
+        // the APP runtime (e.g. ai-web uses JWT session handling), not the CLI
+        // reading that config from the app cwd — without this floor, `vibes auth`
+        // becomes 'unknown command' and forge reports 'Not signed in' from that
+        // cwd while credentials are fine. The mount below is deliberately
+        // unguarded: if the spine truly cannot register, the CLI must fail loudly.
+        if (runtime.scope.surface === 'cli') {
+            config.auth = true;
+        }
+        if (config.auth) {
+            await member('@vibesdotdev/auth/plugin', async () => (await import('@vibesdotdev/auth/plugin')).default);
+            // The device-session implementation is Node-only. It used to be a loader
+            // inside the universal auth plugin, which meant the bundler followed it
+            // into every CLOUD worker that composes auth — 14 of 16 deployed apps
+            // shipped it. Register it only where it can actually run, so `vibes auth
+            // login` keeps working and workerd artifacts stop carrying it.
+            if (runtime.scope.hardware === 'consumer' || runtime.scope.surface === 'cli') {
+                await member('@vibesdotdev/auth/consumer.plugin', async () => (await import('@vibesdotdev/auth/consumer.plugin')).default);
+            }
+            if (runtime.scope.surface === 'cli') {
+                await member('@vibesdotdev/auth/cli/plugin', async () => (await import('@vibesdotdev/auth/cli/plugin')).default);
+            }
+        }
+        if (config.secrets) {
+            await member('@vibesdotdev/secrets/plugin', async () => (await import('@vibesdotdev/secrets/plugin')).default);
+        }
+        if (config.secretsBackends.envFile) {
+            await member('@vibesdotdev/secrets/backends/env-file/plugin', async () => (await import('@vibesdotdev/secrets/backends/env-file/plugin')).default);
+        }
+        if (config.secretsBackends.encryptedLocal) {
+            await member('@vibesdotdev/secrets/backends/encrypted-local/plugin', async () => (await import('@vibesdotdev/secrets/backends/encrypted-local/plugin')).default);
+        }
+        // Mount the @vibesdotdev/scope plugin (owns the runtime/scope-resolver
+        // kind — RUNTIME-RECIPE §F15). Universal — every surface needs the
+        // resolver. The CLI surface ALSO mounts scope-cli below so the
+        // `vibes scope` commands are registered.
+        {
+            await member('@vibesdotdev/scope/plugin', async () => (await import('@vibesdotdev/scope/plugin')).default);
+        }
+        // Mount `@vibesdotdev/scope/cli` when running in the CLI surface.
+        if (runtime.scope.surface === 'cli') {
+            await member('@vibesdotdev/scope/cli/plugin', async () => (await import('@vibesdotdev/scope/cli/plugin')).default);
+        }
+        // Canonical `@vibesdotdev/secrets/cli` surface. Registers `vibes secrets
+        // list`, `reveal`, and `set` plus the `secrets` cli/group. Must run AFTER
+        // the secrets plugin (above). CLI-only by surface; wrapped in try/catch so
+        // external consumers without the optional peer still bootstrap.
+        if (config.secrets && runtime.scope.surface === 'cli') {
+            {
+                const mod = await import('@vibesdotdev/secrets/cli/plugin');
+                // One plugin: it also registers the check/import/export/pull/push/unset and
+                // pre-commit commands (lazy impls, so no consumer edge on cloud bundles).
+                await runtime.registerPlugin(mod.default);
+            }
+        }
+    }
+});
+export default authPluginsPlugin;
+//# sourceMappingURL=consumer.plugin.js.map

package/dist/auth/consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.plugin.js","sourceRoot":"","sources":["../../src/auth/consumer.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,sEAAsE;AACtE,yCAAyC;AACzC,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;IACjD,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,iCAAiC;IAC9C,YAAY,EAAE,CAAC,SAAS,EAAE,2BAA2B,CAAC;IACtD,KAAK,EAAE;QACH,iBAAiB,CAAC;YACd,EAAE,EAAE,qBAAqB;YACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;gBACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;gBACtC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC7B,MAAM,EAAE,uBAAuB;aAClC,CAAC;SACL,CAAC;KACL;IACD,KAAK,CAAC,UAAU,CAAC,OAAmB;QAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,cAAc,CAAC;QAChC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAoB,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACvC,mEAAmE;QACnE,0EAA0E;QAC1E,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,kEAAkE;QAClE,2EAA2E;QAC3E,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzG,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,yEAAyE;YACzE,+DAA+D;YAC/D,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC3E,MAAM,MAAM,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/H,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAClC,MAAM,MAAM,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACrH,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,MAAM,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,+CAA+C,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvJ,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;YACxC,MAAM,MAAM,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,sDAAsD,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrK,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,+DAA+D;QAC/D,yCAAyC;QACzC,CAAC;YACG,MAAM,MAAM,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/G,CAAC;QACD,kEAAkE;QAClE,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvH,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACpD,CAAC;gBACG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;gBAC5D,4EAA4E;gBAC5E,0EAA0E;gBAC1E,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC;IACL,CAAC;CACJ,CAAC,CAAC;AACH,eAAe,iBAAiB,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,2 @@
+export { authPluginsPlugin, default } from './plugin.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,2 @@
+export { authPluginsPlugin, default } from "./plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/auth/plugin.d.ts

@@ -0,0 +1,4 @@
+/** Scope-neutral contracts; native and surface capabilities live in ./consumer.plugin. */
+export declare const authPluginsPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default authPluginsPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/auth/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/auth/plugin.ts"],"names":[],"mappings":"AAMA,0FAA0F;AAC1F,eAAO,MAAM,iBAAiB,6CAuB5B,CAAC;AACH,eAAe,iBAAiB,CAAC"}

package/dist/auth/plugin.js

@@ -0,0 +1,33 @@
+import { createRuntimePlugin, createRuntimeKind } from '@vibesdotdev/kernel';
+import { z } from 'zod/v4';
+import { AuthPluginsConfigSchema, mergeConfig } from "../schemas/auth.js";
+import { optionalMemberRegistrar } from "../core/optional-member.js";
+/** Scope-neutral contracts; native and surface capabilities live in ./consumer.plugin. */
+export const authPluginsPlugin = createRuntimePlugin({
+    id: '@vibesdotdev/plugins-auth',
+    name: 'Auth family contracts',
+    dependencies: ['context', '@vibesdotdev/plugins-core'],
+    kinds: [createRuntimeKind({
+            id: 'plugins/auth/config',
+            descriptorSchema: z.object({
+                kind: z.literal('plugins/auth/config'), id: z.literal('plugins.auth'),
+                config: AuthPluginsConfigSchema
+            })
+        })],
+    async onRegister(runtime) {
+        const input = runtime.hasContext('plugins.auth')
+            ? await runtime.context('plugins.auth') : {};
+        const config = mergeConfig(input);
+        runtime.registerDescriptor('plugins/auth/config', {
+            kind: 'plugins/auth/config', id: 'plugins.auth', config
+        });
+        const member = optionalMemberRegistrar('plugins-auth', runtime);
+        if (config.auth)
+            await member('@vibesdotdev/auth/cloud.plugin', async () => (await import('@vibesdotdev/auth/cloud.plugin')).default);
+        if (config.secrets)
+            await member('@vibesdotdev/secrets/plugin', async () => (await import('@vibesdotdev/secrets/plugin')).default);
+        await member('@vibesdotdev/scope/plugin', async () => (await import('@vibesdotdev/scope/plugin')).default);
+    }
+});
+export default authPluginsPlugin;
+//# sourceMappingURL=plugin.js.map

package/dist/auth/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/auth/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,0FAA0F;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;IACpD,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,uBAAuB;IAC7B,YAAY,EAAE,CAAC,SAAS,EAAE,2BAA2B,CAAC;IACtD,KAAK,EAAE,CAAC,iBAAiB,CAAC;YACzB,EAAE,EAAE,qBAAqB;YACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;gBACrE,MAAM,EAAE,uBAAuB;aAC/B,CAAC;SACF,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;YAC/C,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAoB,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,CAAC,kBAAkB,CAAC,qBAAqB,EAAE;YACjD,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM;SACvD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI;YAAE,MAAM,MAAM,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvI,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnI,MAAM,MAAM,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3G,CAAC;CACD,CAAC,CAAC;AACH,eAAe,iBAAiB,CAAC"}

package/dist/automation/consumer.plugin.d.ts

@@ -0,0 +1,3 @@
+export declare const automationPluginsPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default automationPluginsPlugin;
+//# sourceMappingURL=consumer.plugin.d.ts.map

package/dist/automation/consumer.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.plugin.d.ts","sourceRoot":"","sources":["../../src/automation/consumer.plugin.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,uBAAuB,6CA2ElC,CAAC;AACH,eAAe,uBAAuB,CAAC"}

package/dist/automation/consumer.plugin.js

@@ -0,0 +1,92 @@
+import { optionalMemberRegistrar } from "../core/optional-member.js";
+/**
+ * Automation Plugins Umbrella - Browser Automation, AutoLoop
+ *
+ * Depends on: @vibesdotdev/plugins-core
+ *
+ * Surface-specific sub-plugins:
+ * - browser-automation/cli.plugin  (surface: cli)
+ * - browser-automation/tui.plugin  (surface: tui)
+ */
+import { createRuntimePlugin, createRuntimeKind } from '@vibesdotdev/kernel';
+import { z } from 'zod/v4';
+import { relocatedPluginNotice } from "../core/optional-plugin.js";
+import { AutomationPluginsConfigSchema, mergeConfig } from "../schemas/automation.js";
+export const automationPluginsPlugin = createRuntimePlugin({
+    id: '@vibesdotdev/plugins-automation',
+    name: 'Automation Plugins Umbrella',
+    description: 'Browser Automation, AutoLoop',
+    dependencies: ['context', '@vibesdotdev/plugins-core'],
+    kinds: [
+        createRuntimeKind({
+            id: 'plugins/automation/config',
+            descriptorSchema: z.object({
+                kind: z.literal('plugins/automation/config'),
+                id: z.literal('plugins.automation'),
+                config: AutomationPluginsConfigSchema
+            })
+        })
+    ],
+    async onRegister(runtime) {
+        const member = optionalMemberRegistrar('plugins-automation', runtime);
+        const relocatedPlugin = relocatedPluginNotice('plugins-automation', runtime);
+        const configId = 'plugins.automation';
+        const userConfig = runtime.hasContext(configId) ? await runtime.context(configId) : {};
+        const config = mergeConfig(userConfig, runtime.scope);
+        const browserConfig = config.browserAutomation;
+        if (browserConfig.enabled) {
+            // OWNER COMPLETENESS. `browser-automation` declares
+            // `dependencies: ['context','storage','localdb','runtime-client','tools']`,
+            // and plugin id `localdb` is provided by `@vibesdotdev/localdb/plugin` —
+            // a FRAMEWORK package. Until the CLI host became a string list, the only
+            // host that mounted it was the RESTRICTED infra preset, so this umbrella
+            // silently relied on an internal plugin being spliced in ahead of it. A
+            // scope list that selects only `@vibesdotdev/plugins/plugin` then aborted
+            // with `Plugin 'browser-automation' has unmet dependencies: localdb`.
+            // Registration is idempotent (first wins), so a host that already mounted
+            // the infra preset is unaffected.
+            await member('@vibesdotdev/localdb/plugin', async () => (await import('@vibesdotdev/localdb/plugin')).default);
+            await member('@vibesdotdev/control/browser-automation/plugin', async () => (await import('@vibesdotdev/control/browser-automation/plugin')).default);
+            if (browserConfig.cli) {
+                await member('@vibesdotdev/control/browser-automation/cli.plugin', async () => (await import('@vibesdotdev/control/browser-automation/cli.plugin')).default);
+            }
+            if (browserConfig.tui) {
+                {
+                    await member('@vibesdotdev/control/browser-automation/tui.plugin', async () => (await import('@vibesdotdev/control/browser-automation/tui.plugin')).default);
+                }
+            }
+        }
+        const terminalConfig = config.terminal;
+        if (terminalConfig.enabled) {
+            {
+                await member('@vibesdotdev/terminal-client/plugin', async () => (await import('@vibesdotdev/terminal-client/plugin')).default);
+            }
+        }
+        const isConsumer = runtime.scope?.hardware === 'consumer' || runtime.scope?.surface === 'cli' || runtime.scope?.surface === 'tui';
+        const isCloud = runtime.scope?.hardware === 'cloud';
+        // Autoloop is a premium agent extra: @vibesdotdev/agent-extras-premium
+        // registers it (and the git-operations plugin its lanes integrate through).
+        if ((isConsumer && config.autoloop.enabled) || (isCloud && config.autoloop.cloud)) {
+            relocatedPlugin('autoloop', '@vibesdotdev/agent-extras-premium');
+        }
+        // Workbench — workflow automation. Registers the core runtime plugin
+        // (so the WorkbenchClient is resolvable via getVibesClient('workbench'))
+        // and optionally the CLI surface when on a CLI runtime. Mirrors the
+        // tools-cli registration pattern from plugins-ai.
+        const workbenchConfig = config.workbench;
+        const workbenchEnabled = workbenchConfig.enabled;
+        const workbenchCliEnabled = workbenchConfig.cli;
+        if (workbenchEnabled) {
+            {
+                await member('@vibesdotdev/workspace/workbench/plugin', async () => (await import('@vibesdotdev/workspace/workbench/plugin')).default);
+            }
+        }
+        if (workbenchCliEnabled && runtime.scope?.surface === 'cli') {
+            {
+                await member('@vibesdotdev/workspace/cli/workbench/plugin', async () => (await import('@vibesdotdev/workspace/cli/workbench/plugin')).default);
+            }
+        }
+    }
+});
+export default automationPluginsPlugin;
+//# sourceMappingURL=consumer.plugin.js.map

package/dist/automation/consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.plugin.js","sourceRoot":"","sources":["../../src/automation/consumer.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;IACvD,EAAE,EAAE,iCAAiC;IACrC,IAAI,EAAE,6BAA6B;IACnC,WAAW,EAAE,8BAA8B;IAC3C,YAAY,EAAE,CAAC,SAAS,EAAE,2BAA2B,CAAC;IACtD,KAAK,EAAE;QACH,iBAAiB,CAAC;YACd,EAAE,EAAE,2BAA2B;YAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;gBACvB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;gBAC5C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBACnC,MAAM,EAAE,6BAA6B;aACxC,CAAC;SACL,CAAC;KACL;IACD,KAAK,CAAC,UAAU,CAAC,OAAmB;QAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,qBAAqB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAoB,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC/C,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxB,oDAAoD;YACpD,4EAA4E;YAC5E,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,0EAA0E;YAC1E,kCAAkC;YAClC,MAAM,MAAM,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/G,MAAM,MAAM,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACrJ,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,MAAM,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACjK,CAAC;YACD,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBACpB,CAAC;oBACG,MAAM,MAAM,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjK,CAAC;YACL,CAAC;QACL,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;QACvC,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YACzB,CAAC;gBACG,MAAM,MAAM,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACnI,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,CAAC;QAClI,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC;QACpD,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,eAAe,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QACrE,CAAC;QACD,qEAAqE;QACrE,yEAAyE;QACzE,oEAAoE;QACpE,kDAAkD;QAClD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC;QACzC,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,CAAC;QACjD,MAAM,mBAAmB,GAAG,eAAe,CAAC,GAAG,CAAC;QAChD,IAAI,gBAAgB,EAAE,CAAC;YACnB,CAAC;gBACG,MAAM,MAAM,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC3I,CAAC;QACL,CAAC;QACD,IAAI,mBAAmB,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YAC1D,CAAC;gBACG,MAAM,MAAM,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,6CAA6C,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACnJ,CAAC;QACL,CAAC;IACL,CAAC;CACJ,CAAC,CAAC;AACH,eAAe,uBAAuB,CAAC"}

package/dist/automation/index.d.ts

@@ -0,0 +1,2 @@
+export { automationPluginsPlugin, default } from './plugin.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/automation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/automation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/automation/index.js

@@ -0,0 +1,2 @@
+export { automationPluginsPlugin, default } from "./plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/automation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/automation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/automation/plugin.d.ts

@@ -0,0 +1,4 @@
+/** Scope-neutral contracts; native and surface capabilities live in ./consumer.plugin. */
+export declare const automationPluginsPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default automationPluginsPlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/automation/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/automation/plugin.ts"],"names":[],"mappings":"AAMA,0FAA0F;AAC1F,eAAO,MAAM,uBAAuB,6CAqBlC,CAAC;AACH,eAAe,uBAAuB,CAAC"}

package/dist/automation/plugin.js

@@ -0,0 +1,30 @@
+import { createRuntimePlugin, createRuntimeKind } from '@vibesdotdev/kernel';
+import { z } from 'zod/v4';
+import { AutomationPluginsConfigSchema, mergeConfig } from "../schemas/automation.js";
+import { optionalMemberRegistrar } from "../core/optional-member.js";
+/** Scope-neutral contracts; native and surface capabilities live in ./consumer.plugin. */
+export const automationPluginsPlugin = createRuntimePlugin({
+    id: '@vibesdotdev/plugins-automation',
+    name: 'Automation family contracts',
+    dependencies: ['context', '@vibesdotdev/plugins-core'],
+    kinds: [createRuntimeKind({
+            id: 'plugins/automation/config',
+            descriptorSchema: z.object({
+                kind: z.literal('plugins/automation/config'), id: z.literal('plugins.automation'),
+                config: AutomationPluginsConfigSchema
+            })
+        })],
+    async onRegister(runtime) {
+        const input = runtime.hasContext('plugins.automation')
+            ? await runtime.context('plugins.automation') : {};
+        const config = mergeConfig(input, runtime.scope);
+        runtime.registerDescriptor('plugins/automation/config', {
+            kind: 'plugins/automation/config', id: 'plugins.automation', config
+        });
+        const member = optionalMemberRegistrar('plugins-automation', runtime);
+        if (config.terminal.enabled)
+            await member('@vibesdotdev/terminal-client/api-client-plugin', async () => (await import('@vibesdotdev/terminal-client/api-client-plugin')).default);
+    }
+});
+export default automationPluginsPlugin;
+//# sourceMappingURL=plugin.js.map

package/dist/automation/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/automation/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,0FAA0F;AAC1F,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;IAC1D,EAAE,EAAE,iCAAiC;IACrC,IAAI,EAAE,6BAA6B;IACnC,YAAY,EAAE,CAAC,SAAS,EAAE,2BAA2B,CAAC;IACtD,KAAK,EAAE,CAAC,iBAAiB,CAAC;YACzB,EAAE,EAAE,2BAA2B;YAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBACjF,MAAM,EAAE,6BAA6B;aACrC,CAAC;SACF,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC;YACrD,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAoB,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,kBAAkB,CAAC,2BAA2B,EAAE;YACvD,IAAI,EAAE,2BAA2B,EAAE,EAAE,EAAE,oBAAoB,EAAE,MAAM;SACnE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnL,CAAC;CACD,CAAC,CAAC;AACH,eAAe,uBAAuB,CAAC"}

package/dist/bun/host.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Vibes CLI HOST ENTRY — the on-disk module a compiled thin `vibes` shim
+ * imports IN-PROCESS (through the package-root `host.mjs` / `host-start.mjs`
+ * trampolines).
+ *
+ * `docs/proposals/cli-thin-host-compile-once.md` §2.2 step 5 / §2.3. Why this
+ * module lives in `@vibesdotdev/plugins` and not in cli-bin: the shim must
+ * bundle ZERO framework code (P1/P2/P5 — module identity is realpath, and a
+ * copy inside `/$bunfs` is never shared with on-disk plugins). Everything the
+ * host needs therefore resolves from R's `node_modules`.
+ *
+ * This module owns the PLUGIN FLOOR only: the repair kernel plus the editor
+ * deep-link and the runtime daemon controls. The process duties (argv, the
+ * external hook relay fast path, shim custody, `VIBES_CLI_MODE`, self-spawn,
+ * the output formatter, the boot-failure report and the keep-alive exit) are
+ * the CLI host's: `@vibesdotdev/surface-cli/bun/host` `runCliHost`,
+ * which `startHost` forwards to. Importing this module boots nothing.
+ */
+import type { HostBootstrap } from '@vibesdotdev/cli/host-bootstrap';
+export type { HostBootstrap } from '@vibesdotdev/cli/host-bootstrap';
+import type { HostStartOptions } from '../schemas/host.ts';
+export type { HostStartOptions } from '../schemas/host.ts';
+/**
+ * The executable's own plugin floor. Repair commands must exist even when every
+ * scope list is empty or broken. Editor is on the floor so a consumer can run
+ * `vibes editor` and have it install the published Vessel host. The runtime
+ * daemon control commands are on the floor for the same reason: the editor's
+ * launcher spawns `vibes --workspace-root <folder> runtime daemon serve` for
+ * ANY opened folder, including app checkouts whose own plugin selection names
+ * no daemon CLI — the daemon is the executable's serve surface, not a
+ * capability the opened workspace must select. Relative literal, not the
+ * self-referencing package name: the compiled body's resolver and Node's
+ * differ on self-reference, and this module is in the same package anyway. A
+ * first-install bootstrap rides in first, as runtime-local context for the
+ * auth plugin; without one the runtime carries no such context at all.
+ */
+export declare function hostPluginFloor(bootstrap?: HostBootstrap): ((() => Promise<import("@vibesdotdev/kernel").RuntimePlugin>) | (() => Promise<typeof import("../cli/plugin.ts")>))[];
+/**
+ * Boot and run the CLI for this process: the CLI host (`runCliHost`) with this
+ * package's plugin floor, then the executable's own specifiers. A malformed
+ * `bootstrap` refuses (`InvalidHostBootstrapError`) before anything boots.
+ */
+export declare function startHost(options?: HostStartOptions): Promise<void>;
+//# sourceMappingURL=host.d.ts.map

package/dist/bun/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/bun/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,YAAY,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,KAAK,EAAE,gBAAgB,EAAkB,MAAM,oBAAoB,CAAC;AAC3E,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,aAAa,yHAcxD;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAY7E"}

package/dist/bun/host.js

@@ -0,0 +1,71 @@
+/**
+ * Vibes CLI HOST ENTRY — the on-disk module a compiled thin `vibes` shim
+ * imports IN-PROCESS (through the package-root `host.mjs` / `host-start.mjs`
+ * trampolines).
+ *
+ * `docs/proposals/cli-thin-host-compile-once.md` §2.2 step 5 / §2.3. Why this
+ * module lives in `@vibesdotdev/plugins` and not in cli-bin: the shim must
+ * bundle ZERO framework code (P1/P2/P5 — module identity is realpath, and a
+ * copy inside `/$bunfs` is never shared with on-disk plugins). Everything the
+ * host needs therefore resolves from R's `node_modules`.
+ *
+ * This module owns the PLUGIN FLOOR only: the repair kernel plus the editor
+ * deep-link and the runtime daemon controls. The process duties (argv, the
+ * external hook relay fast path, shim custody, `VIBES_CLI_MODE`, self-spawn,
+ * the output formatter, the boot-failure report and the keep-alive exit) are
+ * the CLI host's: `@vibesdotdev/surface-cli/bun/host` `runCliHost`,
+ * which `startHost` forwards to. Importing this module boots nothing.
+ */
+/**
+ * The executable's own plugin floor. Repair commands must exist even when every
+ * scope list is empty or broken. Editor is on the floor so a consumer can run
+ * `vibes editor` and have it install the published Vessel host. The runtime
+ * daemon control commands are on the floor for the same reason: the editor's
+ * launcher spawns `vibes --workspace-root <folder> runtime daemon serve` for
+ * ANY opened folder, including app checkouts whose own plugin selection names
+ * no daemon CLI — the daemon is the executable's serve surface, not a
+ * capability the opened workspace must select. Relative literal, not the
+ * self-referencing package name: the compiled body's resolver and Node's
+ * differ on self-reference, and this module is in the same package anyway. A
+ * first-install bootstrap rides in first, as runtime-local context for the
+ * auth plugin; without one the runtime carries no such context at all.
+ */
+export function hostPluginFloor(bootstrap) {
+    return [
+        ...(bootstrap
+            ? [
+                async () => (await import('@vibesdotdev/cli/host-bootstrap')).createHostBootstrapPlugin(bootstrap)
+            ]
+            : []),
+        () => import("../cli/plugin.js"),
+        () => import('@vibesdotdev/kernel-rpc/daemon/plugin'),
+        () => import('@vibesdotdev/kernel-rpc/daemon/cli/plugin'),
+        () => import('@vibesdotdev/vessel/launch/plugin'),
+        () => import('@vibesdotdev/editor/cli/plugin')
+    ];
+}
+/**
+ * Boot and run the CLI for this process: the CLI host (`runCliHost`) with this
+ * package's plugin floor, then the executable's own specifiers. A malformed
+ * `bootstrap` refuses (`InvalidHostBootstrapError`) before anything boots.
+ */
+export async function startHost(options = {}) {
+    const { runCliHost } = await import('@vibesdotdev/surface-cli/bun/host');
+    const run = {
+        hostPlugins: [...hostPluginFloor(options.bootstrap), ...(options.hostPluginSpecifiers ?? [])]
+    };
+    if (options.argv)
+        run.argv = options.argv;
+    if (options.attestHostGraph !== undefined)
+        run.attestHostGraph = options.attestHostGraph;
+    if (options.hostConfig)
+        run.hostConfig = { ...options.hostConfig };
+    if (options.host)
+        run.host = options.host;
+    if (options.globalPackagePlugins !== undefined)
+        run.globalPackagePlugins = options.globalPackagePlugins;
+    if (options.bootstrap)
+        run.bootstrap = options.bootstrap;
+    await runCliHost(run);
+}
+//# sourceMappingURL=host.js.map

package/dist/bun/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/bun/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,SAAyB;IACxD,OAAO;QACN,GAAG,CAAC,SAAS;YACZ,CAAC,CAAC;gBACA,KAAK,IAAI,EAAE,CACV,CAAC,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC,CAAC,yBAAyB,CAAC,SAAS,CAAC;aACvF;YACF,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAChC,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC;QACrD,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC;QACzD,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC;QACjD,GAAG,EAAE,CAAC,MAAM,CAAC,gCAAgC,CAAC;KAC9C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA4B,EAAE;IAC7D,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACzE,MAAM,GAAG,GAAmB;QAC3B,WAAW,EAAE,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;KAC7F,CAAC;IACF,IAAI,OAAO,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAAE,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACzF,IAAI,OAAO,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACnE,IAAI,OAAO,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;QAAE,GAAG,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IACxG,IAAI,OAAO,CAAC,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACzD,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/cli/child-failure.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Turn a failed child process's output into the line an operator can act on.
+ *
+ * Every diagnostic in this directory comes from re-entering the shipping
+ * binary (`vibes plugins list --json` for verification, `vibes pm daemon
+ * restart` for a roll) or from Bun itself. Taking the LAST few lines of such a
+ * child's stderr is wrong, and it was wrong in the shipped draft: a Bun crash
+ * ends with
+ *
+ *     error: <the actual cause>
+ *         at /path/to/file.ts:2:11
+ *
+ *     Bun v1.4.0 (macOS arm64)
+ *
+ * and a compiled body adds `note: consider bundling with '--sourcemap' to get
+ * unminified traces`. `slice(-3)` therefore reported the Bun banner and the
+ * sourcemap note — measured — while the cause scrolled past. The operator was
+ * shown boilerplate for the one message that is supposed to explain why their
+ * scope will not compose.
+ *
+ * So: drop the frames and the trailer, then PREFER the first signal line
+ * (`error:`, a plugin/graph failure, a refusal) over position. If nothing
+ * matches, fall back to the last non-boilerplate lines. If the child gave us
+ * nothing but boilerplate, return the boilerplate rather than an empty string
+ * — an empty detail reads as "no reason", which is the failure this module
+ * exists to prevent.
+ */
+/**
+ * `max` lines of cause from a child's output. `stderr` wins when it has
+ * content; otherwise `stdout` (bun writes some diagnostics there).
+ */
+export declare function summarizeChildFailure(input: {
+    stdout?: string;
+    stderr?: string;
+    max?: number;
+}): string;
+//# sourceMappingURL=child-failure.d.ts.map

package/dist/cli/child-failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-failure.d.ts","sourceRoot":"","sources":["../../src/cli/child-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA6BH;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,MAAM,CAyBT"}

package/dist/cli/child-failure.js

@@ -0,0 +1,86 @@
+/**
+ * Turn a failed child process's output into the line an operator can act on.
+ *
+ * Every diagnostic in this directory comes from re-entering the shipping
+ * binary (`vibes plugins list --json` for verification, `vibes pm daemon
+ * restart` for a roll) or from Bun itself. Taking the LAST few lines of such a
+ * child's stderr is wrong, and it was wrong in the shipped draft: a Bun crash
+ * ends with
+ *
+ *     error: <the actual cause>
+ *         at /path/to/file.ts:2:11
+ *
+ *     Bun v1.4.0 (macOS arm64)
+ *
+ * and a compiled body adds `note: consider bundling with '--sourcemap' to get
+ * unminified traces`. `slice(-3)` therefore reported the Bun banner and the
+ * sourcemap note — measured — while the cause scrolled past. The operator was
+ * shown boilerplate for the one message that is supposed to explain why their
+ * scope will not compose.
+ *
+ * So: drop the frames and the trailer, then PREFER the first signal line
+ * (`error:`, a plugin/graph failure, a refusal) over position. If nothing
+ * matches, fall back to the last non-boilerplate lines. If the child gave us
+ * nothing but boilerplate, return the boilerplate rather than an empty string
+ * — an empty detail reads as "no reason", which is the failure this module
+ * exists to prevent.
+ */
+/** Lines that carry no information about the cause. */
+const BOILERPLATE = [
+    /^Bun v\S+\s*\(.*\)$/,
+    /^note: /,
+    /^\s*at\s+\S+/,
+    /^\s*\^+\s*$/,
+    /^\s*\d+\s*\|\s?/
+];
+/** Lines that name a cause. Order inside a line does not matter. */
+const SIGNAL = [
+    /(^|\s)error:\s/i,
+    /failed to load/i,
+    /PluginGraphMismatch/,
+    /^\s*Refusing\b/i,
+    /\bENOENT\b|\bEACCES\b/,
+    /Cannot find (?:module|package)/i
+];
+function isBoilerplate(line) {
+    return BOILERPLATE.some((pattern) => pattern.test(line));
+}
+function isSignal(line) {
+    return SIGNAL.some((pattern) => pattern.test(line));
+}
+/**
+ * `max` lines of cause from a child's output. `stderr` wins when it has
+ * content; otherwise `stdout` (bun writes some diagnostics there).
+ */
+export function summarizeChildFailure(input) {
+    const max = Math.max(1, input.max ?? 3);
+    const raw = (input.stderr ?? '').trim() || (input.stdout ?? '').trim();
+    if (!raw)
+        return '';
+    const all = raw
+        .split('\n')
+        .map((line) => line.trimEnd())
+        .filter((line) => line.trim().length > 0);
+    const informative = all.filter((line) => !isBoilerplate(line));
+    if (informative.length === 0)
+        return all.slice(-max).join('\n');
+    const first = informative.findIndex(isSignal);
+    if (first < 0)
+        return informative.slice(-max).join('\n');
+    // From the signal line, keep only what BELONGS to it: its indented
+    // continuation lines (`  @fx/local/plugin (failed: …)`) and any further
+    // signal lines. Unrelated chatter a long-lived host prints on the way out
+    // (the OpenTUI janitor's exit sweep, progress lines) is not the cause and
+    // must not occupy the operator's three lines.
+    const signal = informative[first];
+    if (signal === undefined)
+        return informative.slice(-max).join('\n');
+    const detail = [signal];
+    for (const line of informative.slice(first + 1, first + max)) {
+        if (!/^\s/.test(line) && !isSignal(line))
+            break;
+        detail.push(line);
+    }
+    return detail.join('\n');
+}
+//# sourceMappingURL=child-failure.js.map

package/dist/cli/child-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-failure.js","sourceRoot":"","sources":["../../src/cli/child-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,uDAAuD;AACvD,MAAM,WAAW,GAA0B;IAC1C,qBAAqB;IACrB,SAAS;IACT,cAAc;IACd,aAAa;IACb,iBAAiB;CACjB,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,GAA0B;IACrC,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;IACrB,iBAAiB;IACjB,uBAAuB;IACvB,iCAAiC;CACjC,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAIrC;IACA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG;SACb,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,mEAAmE;IACnE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM;QAChD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/context.d.ts

@@ -0,0 +1,12 @@
+import type { UIContext } from '@vibesdotdev/cli/providers';
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/cli/schemas/types';
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+import type { PluginsCLIContext } from './schemas/context.ts';
+export type { PluginsCLIContext } from './schemas/context.ts';
+export declare abstract class PluginsCLICommand {
+    protected readonly runtime: VibesRuntime;
+    protected readonly ui: UIContext;
+    protected readonly format: string;
+    constructor(_descriptor: CLICommandAssetDescriptor, context: PluginsCLIContext);
+}
+//# sourceMappingURL=context.d.ts.map