@vibesdotdev/plugins 0.0.0-stage → 1.0.0-rc.1

package/dist/cli/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/cli/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,8BAAsB,iBAAiB;IACtC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IACzC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACjC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEtB,WAAW,EAAE,yBAAyB,EAAE,OAAO,EAAE,iBAAiB;CAK9E"}

package/dist/cli/context.js

@@ -0,0 +1,11 @@
+export class PluginsCLICommand {
+    runtime;
+    ui;
+    format;
+    constructor(_descriptor, context) {
+        this.runtime = context.runtime;
+        this.ui = context['cli/ui'];
+        this.format = context['cli/output-format'] ?? 'table';
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/cli/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/cli/context.ts"],"names":[],"mappings":"AAOA,MAAM,OAAgB,iBAAiB;IACnB,OAAO,CAAe;IACtB,EAAE,CAAY;IACd,MAAM,CAAS;IAElC,YAAY,WAAsC,EAAE,OAA0B;QAC7E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC;IACvD,CAAC;CACD"}

package/dist/cli/execution.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The one way this package reaches `runtime/execution`: the declared fact
+ * first, so a host that composes no execution implementation refuses typed
+ * (`UNAVAILABLE` `plugin-execution-unavailable`) before anything resolves.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { RuntimeExecution } from '@vibesdotdev/kernel/execution';
+/** The host's execution implementation for `purpose` (named in the refusal), or the typed refusal. */
+export declare function resolveRuntimeExecution(runtime: VibesRuntime, purpose: string): Promise<RuntimeExecution>;
+//# sourceMappingURL=execution.d.ts.map

package/dist/cli/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/cli/execution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAuB,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE3F,sGAAsG;AACtG,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAY/G"}

package/dist/cli/execution.js

@@ -0,0 +1,20 @@
+/**
+ * The one way this package reaches `runtime/execution`: the declared fact
+ * first, so a host that composes no execution implementation refuses typed
+ * (`UNAVAILABLE` `plugin-execution-unavailable`) before anything resolves.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+/** The host's execution implementation for `purpose` (named in the refusal), or the typed refusal. */
+export async function resolveRuntimeExecution(runtime, purpose) {
+    const declared = runtime.hasKind('runtime/execution') &&
+        runtime.query('runtime/execution').descriptors().length > 0;
+    if (!declared) {
+        throw new CapabilityError(`No consumer runtime/execution implementation can run the ${purpose}.`, 'UNAVAILABLE', {
+            reason: 'plugin-execution-unavailable',
+            retryable: false,
+            details: { kind: 'runtime/execution', purpose }
+        });
+    }
+    return await runtime.query('runtime/execution').resolve();
+}
+//# sourceMappingURL=execution.js.map

package/dist/cli/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/cli/execution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAGzE,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAqB,EAAE,OAAe;IACnF,MAAM,QAAQ,GACb,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACpC,OAAO,CAAC,KAAK,CAAwC,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACpG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,4DAA4D,OAAO,GAAG,EAAE,aAAa,EAAE;YAChH,MAAM,EAAE,8BAA8B;YACtC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,OAAO,CAAC,KAAK,CAAwC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;AAClG,CAAC"}

package/dist/cli/failure-facts.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The facts this package reads off a caught failure: its errno (`ENOENT`,
+ * `EACCES`, …) and whether it is the loader's miss of a module that is not
+ * installed. Each is read once inside a guard: a failure whose field read
+ * throws (a hostile getter or Proxy) is not classifiable, and that is a typed
+ * refusal carrying both failures, never a silent "no code".
+ */
+import { type CaughtFailure } from '@vibesdotdev/kernel';
+/** The errno of a caught failure, or `undefined` when it carries none. A read that throws refuses typed. */
+export declare function errnoOf(failure: CaughtFailure): string | undefined;
+/**
+ * Only the requested package's own loader miss is absence. Unattributable,
+ * transitive and unreadable failures return false so callers propagate them.
+ */
+export declare function isModuleAbsent(failure: CaughtFailure, specifier: string): boolean;
+//# sourceMappingURL=failure-facts.d.ts.map

package/dist/cli/failure-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-facts.d.ts","sourceRoot":"","sources":["../../src/cli/failure-facts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAwC,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAgB/F,4GAA4G;AAC5G,wBAAgB,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAQlE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEjF"}

package/dist/cli/failure-facts.js

@@ -0,0 +1,39 @@
+/**
+ * The facts this package reads off a caught failure: its errno (`ENOENT`,
+ * `EACCES`, …) and whether it is the loader's miss of a module that is not
+ * installed. Each is read once inside a guard: a failure whose field read
+ * throws (a hostile getter or Proxy) is not classifiable, and that is a typed
+ * refusal carrying both failures, never a silent "no code".
+ */
+import { CapabilityError, CaughtFailureSchema } from '@vibesdotdev/kernel';
+import { z } from 'zod/v4';
+import { classifyOptionalLoad } from "../core/optional-plugin.js";
+/** A native failure's errno code, read from its own field. */
+const NativeFailureSchema = z.object({ code: z.string() });
+/** The refusal for a failure whose own fields could not be read. */
+function unreadableFailure(failure, unreadable) {
+    return new CapabilityError('A failure could not be classified: reading its code threw.', 'INTERNAL', {
+        reason: 'plugin-failure-unreadable',
+        retryable: false,
+        cause: new AggregateError([failure, unreadable], 'The failure, then the failure reading its code')
+    });
+}
+/** The errno of a caught failure, or `undefined` when it carries none. A read that throws refuses typed. */
+export function errnoOf(failure) {
+    let native;
+    try {
+        native = NativeFailureSchema.safeParse(failure);
+    }
+    catch (unreadable) {
+        throw unreadableFailure(failure, CaughtFailureSchema.parse(unreadable));
+    }
+    return native.success ? native.data.code : undefined;
+}
+/**
+ * Only the requested package's own loader miss is absence. Unattributable,
+ * transitive and unreadable failures return false so callers propagate them.
+ */
+export function isModuleAbsent(failure, specifier) {
+    return classifyOptionalLoad(specifier, failure).absent;
+}
+//# sourceMappingURL=failure-facts.js.map

package/dist/cli/failure-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-facts.js","sourceRoot":"","sources":["../../src/cli/failure-facts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,8DAA8D;AAC9D,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE3D,oEAAoE;AACpE,SAAS,iBAAiB,CAAC,OAAsB,EAAE,UAAyB;IAC3E,OAAO,IAAI,eAAe,CAAC,4DAA4D,EAAE,UAAU,EAAE;QACpG,MAAM,EAAE,2BAA2B;QACnC,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,gDAAgD,CAAC;KAClG,CAAC,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,OAAO,CAAC,OAAsB;IAC7C,IAAI,MAAiE,CAAC;IACtE,IAAI,CAAC;QACJ,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACrB,MAAM,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB,EAAE,SAAiB;IACvE,OAAO,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;AACxD,CAAC"}

package/dist/cli/package-manager.consumer.d.ts

@@ -0,0 +1,106 @@
+/**
+ * The ONE way a plugin command runs Bun.
+ *
+ * ### The npm branch is gone (Rule 7 consumer list)
+ *
+ * `choosePackageManager` used to probe for `bun` then `npm`, refuse a home
+ * carrying both lock authorities, and translate every action into
+ * `npm install --prefix … --save-exact`. It had exactly four consumers, all in
+ * this directory: `plugins.add.cli-command.impl.consumer.ts`,
+ * `plugins.remove.cli-command.impl.consumer.ts`, the `--manager <bun|npm>`
+ * option on both descriptors, and `package-manager.consumer.test.ts`. All four
+ * are updated in the same change. Nothing outside `plugins/src/cli` ever
+ * imported the module (grepped across `repos/`), and no SPEC contract survives
+ * it — the plugins SPEC line that promised an "npm-compatible fallback" is
+ * corrected in the same commit.
+ *
+ * It went for a measured reason, not tidiness. A compiled `vibes` has no `bun`
+ * on `PATH` it can trust and no npm at all; the host command's
+ * `scriptRuntimeArgv()` (`runtime/host-command`, owner: the selected
+ * environment) answers with the RUNNING executable plus
+ * `BUN_BE_BUN=1`, so the Bun that installs your plugins is byte-identical to
+ * the Bun the host was built with. An npm-installed tree cannot satisfy
+ * `workspace:*`, cannot expand `package.json#workspaces` link globs, and
+ * writes a `package-lock.json` the graph nerve (`bun.lock` digest, plan §7)
+ * cannot read — i.e. the npm path could not implement any of requirements 2,
+ * 3, or 4. Keeping it would have meant shipping a silently different scope.
+ *
+ * ### Ranges: caret, never `--exact`
+ *
+ * `bun add --exact` pinned the global home to the patch it happened to see, so
+ * `vibes update` could never move it. Registry packages get `^<version>`;
+ * packages supplied by a `workspaces` link glob get `workspace:*`. Both are
+ * written by the environment's manifest writers — this module only runs bun.
+ *
+ * ### `--cwd`, measured
+ *
+ * `runBun` passes BOTH `--cwd D` and spawns with `cwd: D`. Measured on Bun
+ * 1.4.0: `bun install --cwd D` from a foreign cwd DOES read `D/bunfig.toml`
+ * (a scope URL of `http://127.0.0.1:9/` there produced `ConnectionRefused`,
+ * while removing that file produced a request to the ambient registry). The
+ * process cwd is set anyway so the behaviour does not depend on that detail
+ * surviving a Bun upgrade.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+/** Default ceiling for one bun invocation. A cold registry install is slow. */
+export declare const BUN_ACTION_TIMEOUT_MS: number;
+export declare function packageNameFromInstallSpec(specifier: string): string | null;
+/**
+ * The version selector a coordinate asked for, or `null` for a bare name.
+ * `@example/widget@^1.2.0` → `^1.2.0`; `@fx/local@workspace:*` → `workspace:*`.
+ */
+export declare function requestedRangeFromInstallSpec(specifier: string): string | null;
+/** A scope manifest's install inputs. */
+export interface ScopeDeclarations {
+    readonly dependencies: readonly string[];
+    readonly workspaces: readonly string[];
+}
+/**
+ * Does the scope manifest at `root` already declare `packageName`? A scope
+ * with no manifest yet declares nothing. A manifest that is there but cannot
+ * be read or parsed fails typed (`plugin-scope-manifest-unreadable`, the
+ * original as `cause`): read as "not declared", a failed add would roll back
+ * a dependency the scope already had.
+ */
+export declare function hasScopeDependency(runtime: VibesRuntime, root: string, packageName: string): Promise<boolean>;
+/**
+ * The install inputs the scope manifest at `root` declares, or `null` when the
+ * scope has no manifest yet. A manifest that is there but cannot be read or
+ * parsed refuses typed (`plugin-scope-manifest-unreadable`, original as
+ * cause): an unreadable scope is a refused scope, never "assume it declares
+ * packages".
+ */
+export declare function readScopeDeclarations(runtime: VibesRuntime, root: string): Promise<ScopeDeclarations | null>;
+/** @deprecated Name kept for the global-only callers; prefer `hasScopeDependency`. */
+export declare const hasGlobalDependency: typeof hasScopeDependency;
+export interface RunBunInput {
+    runtime: VibesRuntime;
+    /** `install`, `add`, `remove`, `update`, `pm`, … */
+    action: string;
+    /** The scope root bun operates on. Passed as `--cwd` AND as the process cwd. */
+    cwd: string;
+    args?: ReadonlyArray<string>;
+    timeoutMs?: number;
+    /** Extra environment for this child only. Callers never pass a token. */
+    env?: Record<string, string>;
+}
+export interface RunBunResult {
+    /** Exactly what was spawned, for a `--dry-run` receipt and for diagnostics. */
+    argv: string[];
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+    durationMs: number;
+}
+/** Render the command line `runBun` WOULD spawn, without spawning it. */
+export declare function planBun(input: RunBunInput): Promise<string[]>;
+/**
+ * Run one Bun action against a scope root and return its exit code, output
+ * and timing. A non-zero exit is a result here, not an error; `runBunOrThrow`
+ * is the one that throws.
+ */
+export declare function runBun(input: RunBunInput): Promise<RunBunResult>;
+/** `runBun` + "a non-zero exit is an error", which is what every caller wants. */
+export declare function runBunOrThrow(input: RunBunInput): Promise<RunBunResult>;
+//# sourceMappingURL=package-manager.consumer.d.ts.map

package/dist/cli/package-manager.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager.consumer.d.ts","sourceRoot":"","sources":["../../src/cli/package-manager.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAGH,OAAO,EAAwF,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAc9I,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,QAAc,CAAC;AAEjD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS3E;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM9E;AAcD,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAoBD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnH;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAiBlH;AAED,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,2BAAqB,CAAC;AAuBtD,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,YAAY,CAAC;IACtB,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC5B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACnB;AAyBD,yEAAyE;AACzE,wBAAsB,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGnE;AAED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAEtE;AAkCD,kFAAkF;AAClF,wBAAsB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAiB7E"}

package/dist/cli/package-manager.consumer.js

@@ -0,0 +1,258 @@
+/**
+ * The ONE way a plugin command runs Bun.
+ *
+ * ### The npm branch is gone (Rule 7 consumer list)
+ *
+ * `choosePackageManager` used to probe for `bun` then `npm`, refuse a home
+ * carrying both lock authorities, and translate every action into
+ * `npm install --prefix … --save-exact`. It had exactly four consumers, all in
+ * this directory: `plugins.add.cli-command.impl.consumer.ts`,
+ * `plugins.remove.cli-command.impl.consumer.ts`, the `--manager <bun|npm>`
+ * option on both descriptors, and `package-manager.consumer.test.ts`. All four
+ * are updated in the same change. Nothing outside `plugins/src/cli` ever
+ * imported the module (grepped across `repos/`), and no SPEC contract survives
+ * it — the plugins SPEC line that promised an "npm-compatible fallback" is
+ * corrected in the same commit.
+ *
+ * It went for a measured reason, not tidiness. A compiled `vibes` has no `bun`
+ * on `PATH` it can trust and no npm at all; the host command's
+ * `scriptRuntimeArgv()` (`runtime/host-command`, owner: the selected
+ * environment) answers with the RUNNING executable plus
+ * `BUN_BE_BUN=1`, so the Bun that installs your plugins is byte-identical to
+ * the Bun the host was built with. An npm-installed tree cannot satisfy
+ * `workspace:*`, cannot expand `package.json#workspaces` link globs, and
+ * writes a `package-lock.json` the graph nerve (`bun.lock` digest, plan §7)
+ * cannot read — i.e. the npm path could not implement any of requirements 2,
+ * 3, or 4. Keeping it would have meant shipping a silently different scope.
+ *
+ * ### Ranges: caret, never `--exact`
+ *
+ * `bun add --exact` pinned the global home to the patch it happened to see, so
+ * `vibes update` could never move it. Registry packages get `^<version>`;
+ * packages supplied by a `workspaces` link glob get `workspace:*`. Both are
+ * written by the environment's manifest writers — this module only runs bun.
+ *
+ * ### `--cwd`, measured
+ *
+ * `runBun` passes BOTH `--cwd D` and spawns with `cwd: D`. Measured on Bun
+ * 1.4.0: `bun install --cwd D` from a foreign cwd DOES read `D/bunfig.toml`
+ * (a scope URL of `http://127.0.0.1:9/` there produced `ConnectionRefused`,
+ * while removing that file produced a request to the ambient registry). The
+ * process cwd is set anyway so the behaviour does not depend on that detail
+ * surviving a Bun upgrade.
+ */
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+import { CapabilityError, settle, composeChildEnv, getRuntimeHostCommands } from '@vibesdotdev/kernel';
+import { redactedExcerpt, redactCredentials } from '@vibesdotdev/shared/utils';
+import * as z from 'zod/v4';
+import { hostArgv } from '@vibesdotdev/cli/host-argv';
+import { resolveCliFlags } from '@vibesdotdev/cli/providers';
+import { summarizeChildFailure } from "./child-failure.js";
+import { resolveRuntimeExecution } from "./execution.js";
+import { errnoOf } from "./failure-facts.js";
+import { ensureRegistrySignIn, explainRegistryFailure, registryInstallEnv } from "./registry-sign-in.consumer.js";
+/** Default ceiling for one bun invocation. A cold registry install is slow. */
+export const BUN_ACTION_TIMEOUT_MS = 10 * 60_000;
+export function packageNameFromInstallSpec(specifier) {
+    const value = specifier.trim();
+    if (!value || /^(?:\.|\/|file:|https?:|git(?:\+|:)|github:)/.test(value))
+        return null;
+    if (value.startsWith('@')) {
+        const match = /^(@[a-z0-9][a-z0-9._~-]*\/[a-z0-9][a-z0-9._~-]*)(?:@[^/]+)?$/i.exec(value);
+        return match?.[1] ?? null;
+    }
+    const match = /^([a-z0-9][a-z0-9._~-]*)(?:@[^/]+)?$/i.exec(value);
+    return match?.[1] ?? null;
+}
+/**
+ * The version selector a coordinate asked for, or `null` for a bare name.
+ * `@example/widget@^1.2.0` → `^1.2.0`; `@fx/local@workspace:*` → `workspace:*`.
+ */
+export function requestedRangeFromInstallSpec(specifier) {
+    const value = specifier.trim();
+    const at = value.lastIndexOf('@');
+    if (at <= 0)
+        return null;
+    const range = value.slice(at + 1);
+    return range.length > 0 && !range.includes('/') ? range : null;
+}
+/** The part of a scope manifest this module reads; every other field passes through untouched. */
+const ScopeManifestDependenciesSchema = z.object({
+    dependencies: z.object({}).catchall(z.string()).optional()
+});
+/** What a scope manifest declares for bun to install: its dependency names and `workspaces` globs. */
+const ScopeDeclarationsSchema = z.object({
+    dependencies: z.object({}).catchall(z.string()).optional(),
+    // bun takes either the list or `{ packages: [...] }`.
+    workspaces: z.union([z.array(z.string()), z.object({ packages: z.array(z.string()).optional() })]).optional()
+});
+/** `null` when the scope has no manifest yet (`ENOENT`); any other read failure is forwarded typed. */
+function absentScopeManifest(cause, manifestPath) {
+    if (errnoOf(cause) === 'ENOENT')
+        return null;
+    throw new CapabilityError(`The scope manifest ${manifestPath} could not be read.`, 'UNAVAILABLE', {
+        reason: 'plugin-scope-manifest-unreadable',
+        details: { path: manifestPath },
+        cause
+    });
+}
+/** The manifest's text, or `null` when the scope has none yet; read through the runtime's filesystem. */
+async function readScopeManifest(runtime, manifestPath) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    const read = await settle(() => filesystem.readFile(manifestPath, 'utf8'));
+    if (!read.ok)
+        return absentScopeManifest(read.cause, manifestPath);
+    return read.value instanceof Uint8Array ? new TextDecoder().decode(read.value) : read.value;
+}
+/**
+ * Does the scope manifest at `root` already declare `packageName`? A scope
+ * with no manifest yet declares nothing. A manifest that is there but cannot
+ * be read or parsed fails typed (`plugin-scope-manifest-unreadable`, the
+ * original as `cause`): read as "not declared", a failed add would roll back
+ * a dependency the scope already had.
+ */
+export async function hasScopeDependency(runtime, root, packageName) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    const manifestPath = filesystem.join(root, 'package.json');
+    const text = await readScopeManifest(runtime, manifestPath);
+    if (text === null)
+        return false;
+    try {
+        return packageName in (ScopeManifestDependenciesSchema.parse(JSON.parse(text)).dependencies ?? {});
+    }
+    catch (error) {
+        throw new CapabilityError(`The scope manifest ${manifestPath} is not a valid package.json.`, 'INVALID_INPUT', {
+            reason: 'plugin-scope-manifest-unreadable',
+            details: { path: manifestPath },
+            cause: error
+        });
+    }
+}
+/**
+ * The install inputs the scope manifest at `root` declares, or `null` when the
+ * scope has no manifest yet. A manifest that is there but cannot be read or
+ * parsed refuses typed (`plugin-scope-manifest-unreadable`, original as
+ * cause): an unreadable scope is a refused scope, never "assume it declares
+ * packages".
+ */
+export async function readScopeDeclarations(runtime, root) {
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    const manifestPath = filesystem.join(root, 'package.json');
+    const text = await readScopeManifest(runtime, manifestPath);
+    if (text === null)
+        return null;
+    let declared;
+    try {
+        declared = ScopeDeclarationsSchema.parse(JSON.parse(text));
+    }
+    catch (error) {
+        throw new CapabilityError(`The scope manifest ${manifestPath} is not a valid package.json.`, 'INVALID_INPUT', {
+            reason: 'plugin-scope-manifest-unreadable',
+            details: { path: manifestPath },
+            cause: error
+        });
+    }
+    const globs = Array.isArray(declared.workspaces) ? declared.workspaces : (declared.workspaces?.packages ?? []);
+    return { dependencies: Object.keys(declared.dependencies ?? {}), workspaces: globs };
+}
+/** @deprecated Name kept for the global-only callers; prefer `hasScopeDependency`. */
+export const hasGlobalDependency = hasScopeDependency;
+async function resolveExecution(runtime) {
+    return await resolveRuntimeExecution(runtime, 'bun actions');
+}
+/** The typed failure of one bun action; `secrets` are the values its text must never carry. */
+function bunActionFailure(input, result, secrets) {
+    const detail = summarizeChildFailure({ stdout: result.stdout, stderr: result.stderr, max: 8 });
+    // Bun echoes a request URL whole (`error: GET <url> - 401`), userinfo and query included.
+    const excerpt = detail ? redactedExcerpt(detail, { secrets, maxChars: 2_000 }) : '';
+    const outcome = result.timedOut ? ' (timed out)' : ` (exit ${result.exitCode})`;
+    return new CapabilityError(redactCredentials(`bun ${input.action} failed in ${input.cwd}${outcome}`, [...secrets]) + (excerpt ? `:\n${excerpt}` : ''), 'UNAVAILABLE', {
+        reason: 'plugin-bun-action-failed',
+        retryable: false,
+        details: { action: input.action, exitCode: result.exitCode, timedOut: result.timedOut }
+    });
+}
+/** The host's own script runtime (Bun), from the environment's host commands. */
+async function scriptRuntime(runtime) {
+    return (await getRuntimeHostCommands(runtime)).scriptRuntimeArgv();
+}
+/**
+ * bun actions that resolve packages from the registry. Only these receive the
+ * registry credential, and only these run with `--ignore-scripts`: no package
+ * installed for the host runs a lifecycle script (rc01 §3 "Child credentials").
+ */
+const REGISTRY_ACTIONS = new Set(['install', 'add', 'update']);
+function bunArgv(bunArgv, input) {
+    return [
+        ...bunArgv,
+        input.action,
+        '--cwd',
+        input.cwd,
+        ...(REGISTRY_ACTIONS.has(input.action) ? ['--ignore-scripts'] : []),
+        ...(input.args ?? [])
+    ];
+}
+/** Render the command line `runBun` WOULD spawn, without spawning it. */
+export async function planBun(input) {
+    const bun = await scriptRuntime(input.runtime);
+    return bunArgv(bun.argv, input);
+}
+/**
+ * Run one Bun action against a scope root and return its exit code, output
+ * and timing. A non-zero exit is a result here, not an error; `runBunOrThrow`
+ * is the one that throws.
+ */
+export async function runBun(input) {
+    return (await runBunWithSecrets(input)).result;
+}
+/** `runBun`, plus the credential values the child was handed (what its output must never repeat). */
+async function runBunWithSecrets(input) {
+    const execution = await resolveExecution(input.runtime);
+    const bun = await scriptRuntime(input.runtime);
+    const argv = bunArgv(bun.argv, input);
+    // The registry credential reaches only an action that resolves packages.
+    const credential = REGISTRY_ACTIONS.has(input.action) ? await registryInstallEnv(input.runtime) : {};
+    const secrets = Object.values(credential);
+    const options = {
+        command: argv[0],
+        args: argv.slice(1),
+        cwd: input.cwd,
+        // The kernel's host set plus Bun's re-entry switch, the registry
+        // credential an install needs, and the caller's declared variables.
+        env: composeChildEnv(input.runtime, { env: { ...bun.env, ...credential, ...input.env } }),
+        envMode: 'replace',
+        timeout: input.timeoutMs ?? BUN_ACTION_TIMEOUT_MS
+    };
+    const result = await execution.execute(options);
+    return {
+        result: {
+            argv,
+            exitCode: result.exitCode,
+            stdout: result.stdout,
+            stderr: result.stderr,
+            timedOut: result.timedOut,
+            durationMs: result.durationMs
+        },
+        secrets
+    };
+}
+/** `runBun` + "a non-zero exit is an error", which is what every caller wants. */
+export async function runBunOrThrow(input) {
+    const resolvesPackages = REGISTRY_ACTIONS.has(input.action);
+    if (resolvesPackages) {
+        // The CLI surface decides whether a person can answer: a pipe,
+        // `--non-interactive`, `--json` and the host's `VIBES_FORCE_INTERACTIVE`
+        // terminal fact are all its flags, and a raw TTY check here would ignore
+        // every one of them.
+        await ensureRegistrySignIn(input.runtime, {
+            interactive: !resolveCliFlags(hostArgv(input.runtime), input.runtime.localEnvironment.terminal?.() ?? null).nonInteractive
+        });
+    }
+    const { result, secrets } = await runBunWithSecrets(input);
+    if (result.exitCode !== 0 || result.timedOut) {
+        const failure = bunActionFailure(input, result, secrets);
+        throw resolvesPackages ? await explainRegistryFailure(input.runtime, failure, result.stderr) : failure;
+    }
+    return result;
+}
+//# sourceMappingURL=package-manager.consumer.js.map

package/dist/cli/package-manager.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager.consumer.js","sourceRoot":"","sources":["../../src/cli/package-manager.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,sBAAsB,EAAyC,MAAM,qBAAqB,CAAC;AAC9I,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAK/E,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAElH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEjD,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,+DAA+D,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,KAAK,GAAG,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,kGAAkG;AAClG,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAEH,sGAAsG;AACtG,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1D,sDAAsD;IACtD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7G,CAAC,CAAC;AAQH,uGAAuG;AACvG,SAAS,mBAAmB,CAAC,KAAoB,EAAE,YAAoB;IACtE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,eAAe,CAAC,sBAAsB,YAAY,qBAAqB,EAAE,aAAa,EAAE;QACjG,MAAM,EAAE,kCAAkC;QAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;QAC/B,KAAK;KACL,CAAC,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,iBAAiB,CAAC,OAAqB,EAAE,YAAoB;IAC3E,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAqB,EAAE,IAAY,EAAE,WAAmB;IAChG,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC;QACJ,OAAO,WAAW,IAAI,CAAC,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,sBAAsB,YAAY,+BAA+B,EAAE,eAAe,EAAE;YAC7G,MAAM,EAAE,kCAAkC;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;YAC/B,KAAK,EAAE,KAAK;SACZ,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB,EAAE,IAAY;IAC9E,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,QAAiD,CAAC;IACtD,IAAI,CAAC;QACJ,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,sBAAsB,YAAY,+BAA+B,EAAE,eAAe,EAAE;YAC7G,MAAM,EAAE,kCAAkC;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;YAC/B,KAAK,EAAE,KAAK;SACZ,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC/G,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACtF,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAEtD,KAAK,UAAU,gBAAgB,CAAC,OAAqB;IACpD,OAAO,MAAM,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED,+FAA+F;AAC/F,SAAS,gBAAgB,CAAC,KAAkB,EAAE,MAAoB,EAAE,OAA0B;IAC7F,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,0FAA0F;IAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,QAAQ,GAAG,CAAC;IAChF,OAAO,IAAI,eAAe,CACzB,iBAAiB,CAAC,OAAO,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,GAAG,GAAG,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC1H,aAAa,EACb;QACC,MAAM,EAAE,0BAA0B;QAClC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;KACvF,CACD,CAAC;AACH,CAAC;AAwBD,iFAAiF;AACjF,KAAK,UAAU,aAAa,CAAC,OAAqB;IACjD,OAAO,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE/D,SAAS,OAAO,CAAC,OAA0B,EAAE,KAAkB;IAC9D,OAAO;QACN,GAAG,OAAO;QACV,KAAK,CAAC,MAAM;QACZ,OAAO;QACP,KAAK,CAAC,GAAG;QACT,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;KACrB,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAkB;IAC/C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAkB;IAC9C,OAAO,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC;AAED,qGAAqG;AACrG,KAAK,UAAU,iBAAiB,CAAC,KAAkB;IAClD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,yEAAyE;IACzE,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAmB;QAC/B,OAAO,EAAE,IAAI,CAAC,CAAC,CAAE;QACjB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACnB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,iEAAiE;QACjE,oEAAoE;QACpE,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACzF,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,KAAK,CAAC,SAAS,IAAI,qBAAqB;KACjD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO;QACN,MAAM,EAAE;YACP,IAAI;YACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC7B;QACD,OAAO;KACP,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAkB;IACrD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,gBAAgB,EAAE,CAAC;QACtB,+DAA+D;QAC/D,yEAAyE;QACzE,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE;YACzC,WAAW,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,cAAc;SAC1H,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,gBAAgB,CAAC,CAAC,CAAC,MAAM,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxG,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cli/plugin.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The repair kernel. Every command here has to keep working when the rest of
+ * the composition does not, which is why they are the plugins the host floor
+ * mounts and why `vibes update` lives in this plugin rather than in an
+ * umbrella that could itself fail to load.
+ */
+declare const plugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default plugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/cli/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,QAAA,MAAM,MAAM,6CAuBV,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/cli/plugin.js

@@ -0,0 +1,34 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import group from "./plugins.cli-group.descriptor.js";
+import add from "./plugins.add.cli-command.descriptor.js";
+import host from "./plugins.host.cli-command.descriptor.js";
+import link from "./plugins.link.cli-command.descriptor.js";
+import list from "./plugins.list.cli-command.descriptor.js";
+import remove from "./plugins.remove.cli-command.descriptor.js";
+import unlink from "./plugins.unlink.cli-command.descriptor.js";
+import update from "./update.cli-command.descriptor.js";
+const CLI_COMMAND = { kind: 'cli/command' };
+/**
+ * The repair kernel. Every command here has to keep working when the rest of
+ * the composition does not, which is why they are the plugins the host floor
+ * mounts and why `vibes update` lives in this plugin rather than in an
+ * umbrella that could itself fail to load.
+ */
+const plugin = createRuntimePlugin({
+    id: '@vibesdotdev/plugins-cli',
+    name: 'Plugins CLI',
+    description: 'Scoped Bun package plugin management and vibes update',
+    dependencies: ['cli'],
+    descriptors: [group, add, list, remove, link, unlink, host, update],
+    loaders: [
+        loader('plugins.add', CLI_COMMAND, () => import("./plugins.add.cli-command.impl.consumer.js")),
+        loader('plugins.list', CLI_COMMAND, () => import("./plugins.list.cli-command.impl.consumer.js")),
+        loader('plugins.remove', CLI_COMMAND, () => import("./plugins.remove.cli-command.impl.consumer.js")),
+        loader('plugins.link', CLI_COMMAND, () => import("./plugins.link.cli-command.impl.consumer.js")),
+        loader('plugins.unlink', CLI_COMMAND, () => import("./plugins.unlink.cli-command.impl.consumer.js")),
+        loader('plugins.host', CLI_COMMAND, () => import("./plugins.host.cli-command.impl.consumer.js")),
+        loader('update', CLI_COMMAND, () => import("./update.cli-command.impl.consumer.js"))
+    ]
+});
+export default plugin;
+//# sourceMappingURL=plugin.js.map

package/dist/cli/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/cli/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,MAAM,mCAAmC,CAAC;AACtD,OAAO,GAAG,MAAM,yCAAyC,CAAC;AAC1D,OAAO,IAAI,MAAM,0CAA0C,CAAC;AAC5D,OAAO,IAAI,MAAM,0CAA0C,CAAC;AAC5D,OAAO,IAAI,MAAM,0CAA0C,CAAC;AAC5D,OAAO,MAAM,MAAM,4CAA4C,CAAC;AAChE,OAAO,MAAM,MAAM,4CAA4C,CAAC;AAChE,OAAO,MAAM,MAAM,oCAAoC,CAAC;AAExD,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,aAAa,EAAW,CAAC;AAErD;;;;;GAKG;AACH,MAAM,MAAM,GAAG,mBAAmB,CAAC;IAClC,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,uDAAuD;IACpE,YAAY,EAAE,CAAC,KAAK,CAAC;IACrB,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;IACnE,OAAO,EAAE;QACR,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC;QAC9F,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAChG,MAAM,CAAC,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,CAC1C,MAAM,CAAC,+CAA+C,CAAC,CACvD;QACD,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,6CAA6C,CAAC,CACrD;QACD,MAAM,CAAC,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,CAC1C,MAAM,CAAC,+CAA+C,CAAC,CACvD;QACD,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,6CAA6C,CAAC,CACrD;QACD,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;KACpF;CACD,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/cli/plugins.add.cli-command.descriptor.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `--manager <bun|npm>` is gone with the npm branch it selected (Rule 7
+ * consumer list in `package-manager.consumer.ts`). A compiled `vibes` runs its
+ * own embedded Bun through `resolveBunArgv()`; there is nothing to choose.
+ */
+declare const _default: {
+    readonly id: "plugins.add";
+    readonly kind: "cli/command";
+    readonly name: "add";
+    readonly description: "Install and enable a Bun package plugin in a scope";
+    readonly group: "plugins";
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer"];
+    readonly requiredContext: ["cli/ui", "cli/output-format"];
+    readonly effects: {
+        readonly homeWrite: "required";
+    };
+    readonly arguments: [{
+        readonly name: "package";
+        readonly description: "Package coordinate, for example @example/vibes-plugin, @example/vibes-plugin@^1.2.0, or @fx/local@workspace:*";
+        readonly required: true;
+        readonly variadic: false;
+    }];
+    readonly options: [{
+        readonly flags: "--plugin <specifier>";
+        readonly description: "Explicit public plugin export to enable";
+    }, {
+        readonly flags: "--global";
+        readonly description: "Act on the global scope ($VIBES_HOME) — the default";
+    }, {
+        readonly flags: "--workspace";
+        readonly description: "Act on the current workspace scope";
+    }];
+};
+export default _default;
+//# sourceMappingURL=plugins.add.cli-command.descriptor.d.ts.map

package/dist/cli/plugins.add.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.add.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/plugins.add.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACH,wBAwBG"}

package/dist/cli/plugins.add.cli-command.descriptor.js

@@ -0,0 +1,31 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+/**
+ * `--manager <bun|npm>` is gone with the npm branch it selected (Rule 7
+ * consumer list in `package-manager.consumer.ts`). A compiled `vibes` runs its
+ * own embedded Bun through `resolveBunArgv()`; there is nothing to choose.
+ */
+export default createRuntimeAsset({
+    id: 'plugins.add',
+    kind: 'cli/command',
+    name: 'add',
+    description: 'Install and enable a Bun package plugin in a scope',
+    group: 'plugins',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    requiredContext: ['cli/ui', 'cli/output-format'],
+    effects: { homeWrite: 'required' },
+    arguments: [
+        {
+            name: 'package',
+            description: 'Package coordinate, for example @example/vibes-plugin, @example/vibes-plugin@^1.2.0, or @fx/local@workspace:*',
+            required: true,
+            variadic: false
+        }
+    ],
+    options: [
+        { flags: '--plugin <specifier>', description: 'Explicit public plugin export to enable' },
+        { flags: '--global', description: 'Act on the global scope ($VIBES_HOME) — the default' },
+        { flags: '--workspace', description: 'Act on the current workspace scope' }
+    ]
+});
+//# sourceMappingURL=plugins.add.cli-command.descriptor.js.map