@vibesdotdev/surface-cli 0.0.0-stage → 1.0.0-rc.1

package/dist/bun/host.js

@@ -0,0 +1,116 @@
+/**
+ * The Vibes CLI host entry's process duties (`@vibesdotdev/surface-cli/bun/host`),
+ * moved from `@vibesdotdev/plugins` (`src/bun/host.ts`): the external hook
+ * relay fast path, the shim custody and build surface the host declares, the
+ * self-spawn shape, the console formatter, the boot-failure report and the
+ * keep-alive exit. `@vibesdotdev/plugins` keeps its plugin floor
+ * (`hostPluginFloor`) and forwards `startHost` here.
+ *
+ * Every process fact comes from the Bun host (`captureBunCliProcessHost`,
+ * `runtime-environment-bun/services/cli-process-host`), captured once before
+ * any runtime exists; this module reads no process global itself. Terminating
+ * the process belongs to the host entry, not to CLISurface: the surface is a
+ * library and stays exit-free, and without this exit any ref'd handle a
+ * plugin left behind would hang the CLI.
+ */
+import { CaughtFailureSchema, parseBuildSurface } from '@vibesdotdev/kernel';
+import { isRepairArgv, parseExternalHookRelayArgv } from "./host-argv.js";
+/**
+ * Boot and run the CLI for this process's argv, then exit when nothing keeps
+ * the process alive. An external hook call relays to the workspace daemon
+ * without booting a CLI. A failed boot is reported through the CLI's failure
+ * renderer and `--json` envelope, and exits non-zero.
+ */
+export async function runCliHost(options) {
+    const { captureBunCliProcessHost } = await import('@vibesdotdev/host-bun/services/cli-process-host');
+    const { createBunHostResources } = await import('@vibesdotdev/host-bun/services/standard-output');
+    // The entry's own output owner for the writes it makes outside any runtime
+    // (the hook relay, boot failures, the final flush); runtimes resolve their
+    // Bun host through the kernel.
+    const hostResources = createBunHostResources();
+    const processHost = captureBunCliProcessHost(hostResources);
+    const argv = [...(options.argv ?? processHost.argv)];
+    // The hook relay runs first: it boots no CLI and never reads the bootstrap,
+    // and it runs on every tool call of every agent, so it loads nothing the
+    // CLI path needs.
+    const externalHookRelay = parseExternalHookRelayArgv(argv);
+    if (externalHookRelay) {
+        const { runExternalHookRelay } = await import("./external-hook-relay.js");
+        const relayOptions = {
+            request: externalHookRelay,
+            stdin: await processHost.readStdin(),
+            stdout: (text) => processHost.output.write('stdout', text),
+            stderr: (text) => processHost.output.write('stderr', text)
+        };
+        if (options.hookRelayTarget)
+            relayOptions.target = options.hookRelayTarget;
+        const exitCode = await runExternalHookRelay(relayOptions);
+        await processHost.output.flush();
+        processHost.exit(exitCode);
+    }
+    if (options.bootstrap !== undefined) {
+        const { parseHostBootstrap } = await import('@vibesdotdev/cli/host-bootstrap');
+        parseHostBootstrap(options.bootstrap);
+    }
+    const { createVibesCliApp } = await import("../cli-bootstrap.js");
+    const { computeSelfSpawnArgv } = await import('@vibesdotdev/host-bun/services/self-spawn');
+    // THE HOST DECLARATION, as data (rc01 §2.3). A shim-launched host takes R,
+    // its entry and self-spawn from the shim's captured channel; the Bun
+    // environment validates them. A host run from a checkout has no R and
+    // declares its own re-entry shape.
+    const sourceSelfSpawn = processHost.launchedByShim ? null : computeSelfSpawnArgv(import.meta.url);
+    const host = options.host ?? (processHost.launchedByShim
+        ? { shimChannel: true }
+        : sourceSelfSpawn
+            ? { selfSpawn: sourceSelfSpawn }
+            : {});
+    const buildSurface = parseBuildSurface(processHost.cliMode);
+    const verbose = argv.includes('-v') || argv.includes('--verbose');
+    const { reportBootstrapFailure } = await import('@vibesdotdev/cli');
+    const appOptions = {
+        host,
+        attestHostGraph: options.attestHostGraph,
+        hostPlugins: [...options.hostPlugins],
+        globalPackagePlugins: options.globalPackagePlugins ?? true,
+        verbose,
+        // Today's SHIPPING binary includes `internal: true` descriptors for the
+        // public artifact too; flipping it here would silently drop them — a
+        // product change, not a composition change (Rule 13). WU-10 owns it.
+        includeInternal: true,
+        buildSurface,
+        pluginFailurePolicy: isRepairArgv(argv) ? 'report' : 'abort',
+        hostOutput: processHost.output,
+        argv,
+        attachedTerminal: processHost.attachedTerminal
+    };
+    if (options.hostConfig)
+        appOptions.hostConfig = options.hostConfig;
+    if (options.environment)
+        appOptions.environment = options.environment;
+    const booted = await bootOutcome(() => createVibesCliApp(appOptions));
+    if (booted.kind === 'failed') {
+        // A failed boot (a broken config, `--workspace-root` naming no directory)
+        // is reported through the same renderer and `--json` envelope as a
+        // command failure.
+        const exitCode = await reportBootstrapFailure(booted.failure, verbose, argv, { output: processHost.output });
+        return processHost.exit(exitCode);
+    }
+    // The invocation's status is the surface's answer; the process status is
+    // written only here, so a failed command never exits 0.
+    const exitCode = await booted.app.cli.run(argv);
+    const { shouldKeepAlive } = await import('@vibesdotdev/cli/providers');
+    if (!shouldKeepAlive(booted.app.cli.activeRuntime)) {
+        await processHost.output.flush();
+        processHost.exit(exitCode);
+    }
+}
+/** The CLI's boot: the app, or what its boot threw, parsed at the catch. */
+async function bootOutcome(boot) {
+    try {
+        return { kind: 'booted', app: await boot() };
+    }
+    catch (error) {
+        return { kind: 'failed', failure: CaughtFailureSchema.parse(error) };
+    }
+}
+//# sourceMappingURL=host.js.map

package/dist/bun/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/bun/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAsB,MAAM,qBAAqB,CAAC;AAEjG,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAM1E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IAC1D,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,iDAAiD,CAAC,CAAC;IACrG,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAC;IAClG,2EAA2E;IAC3E,2EAA2E;IAC3E,+BAA+B;IAC/B,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAErD,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB;IAClB,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,iBAAiB,EAAE,CAAC;QACvB,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC1E,MAAM,YAAY,GAA6B;YAC9C,OAAO,EAAE,iBAAiB;YAC1B,KAAK,EAAE,MAAM,WAAW,CAAC,SAAS,EAAE;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC1D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;SAC1D,CAAC;QACF,IAAI,OAAO,CAAC,eAAe;YAAE,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC/E,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAClE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAE3F,2EAA2E;IAC3E,qEAAqE;IACrE,sEAAsE;IACtE,mCAAmC;IACnC,MAAM,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,cAAc;QACvD,CAAC,CAAE,EAAE,WAAW,EAAE,IAAI,EAAY;QAClC,CAAC,CAAC,eAAe;YAChB,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC,CAAC;IACR,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAElE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpE,MAAM,UAAU,GAA4C;QAC3D,IAAI;QACJ,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,WAAW,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QACrC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,IAAI;QAC1D,OAAO;QACP,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,eAAe,EAAE,IAAI;QACrB,YAAY;QACZ,mBAAmB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;QAC5D,UAAU,EAAE,WAAW,CAAC,MAAM;QAC9B,IAAI;QACJ,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;KAC9C,CAAC;IACF,IAAI,OAAO,CAAC,UAAU;QAAE,UAAU,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACnE,IAAI,OAAO,CAAC,WAAW;QAAE,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,mEAAmE;QACnE,mBAAmB;QACnB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7G,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,yEAAyE;IACzE,wDAAwD;IACxD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACvE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACpD,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,WAAW,CACzB,IAAgC;IAEhC,IAAI,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACtE,CAAC;AACF,CAAC"}

package/dist/cli-bootstrap.d.ts

@@ -0,0 +1,38 @@
+/**
+ * CLI Bootstrap (surface re-export)
+ *
+ * The bootstrap implementation lives in `@vibesdotdev/cli` (co-located with
+ * `CLISurface` and `cli.plugin`; executable hosts supply their version).
+ * This surface package re-exports it as the blessed public entrypoint. The
+ * edge here (runtime-surface-cli → cli) is the acyclic direction: `cli` does
+ * NOT depend on this package, so its published `bunx @vibesdotdev/cli` bin can
+ * bootstrap without a dependency cycle.
+ *
+ * Usage:
+ * ```typescript
+ * import { createVibesCliApp } from '@vibesdotdev/surface-cli';
+ * import { bunStandardOutput } from '@vibesdotdev/host-bun/services/standard-output';
+ *
+ * const app = await createVibesCliApp({ hostOutput: bunStandardOutput, argv: process.argv });
+ * await app.cli.run(process.argv);
+ * ```
+ */
+import { type CliPluginLoader, type VibesCliApp, type VibesCliAppOptions } from '@vibesdotdev/cli/bootstrap';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+export type { CliPluginLoader, VibesCliApp, VibesCliAppOptions };
+export declare function createVibesCliApp(options: VibesCliAppOptions): Promise<VibesCliApp>;
+export { CLI_HOME_WRITE_UNAVAILABLE_MESSAGE, createCliWorkspaceEffectPreparer } from './workspace-effect-preparer.ts';
+/**
+ * Probe the CLI host's own home storage for writing.
+ *
+ * The probed directory is a host fact (`~/.vibes/storage`, published by the
+ * environment's `paths/roots`), so the filesystem owner selects an unbound
+ * adapter while preserving the host's declared provider preference. A rooted
+ * workspace binding cannot redirect this probe. The host must compose an
+ * adapter that supplies the required exclusive-create capability.
+ *
+ * The probe file is created exclusively, so cleanup removes only the entry this
+ * call created and a write failure is never replaced by a cleanup failure.
+ */
+export declare function verifyCliHomeWrite(runtime: VibesRuntime): Promise<void>;
+//# sourceMappingURL=cli-bootstrap.d.ts.map

package/dist/cli-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-bootstrap.d.ts","sourceRoot":"","sources":["../src/cli-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAEN,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAA2D,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMjH,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;AASjE,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAmDzF;AAED,OAAO,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAEtH;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC7E"}

package/dist/cli-bootstrap.js

@@ -0,0 +1,163 @@
+/**
+ * CLI Bootstrap (surface re-export)
+ *
+ * The bootstrap implementation lives in `@vibesdotdev/cli` (co-located with
+ * `CLISurface` and `cli.plugin`; executable hosts supply their version).
+ * This surface package re-exports it as the blessed public entrypoint. The
+ * edge here (runtime-surface-cli → cli) is the acyclic direction: `cli` does
+ * NOT depend on this package, so its published `bunx @vibesdotdev/cli` bin can
+ * bootstrap without a dependency cycle.
+ *
+ * Usage:
+ * ```typescript
+ * import { createVibesCliApp } from '@vibesdotdev/surface-cli';
+ * import { bunStandardOutput } from '@vibesdotdev/host-bun/services/standard-output';
+ *
+ * const app = await createVibesCliApp({ hostOutput: bunStandardOutput, argv: process.argv });
+ * await app.cli.run(process.argv);
+ * ```
+ */
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client';
+import { requireExclusiveCreate } from '@vibesdotdev/filesystem/core';
+import { createVibesCliApp as createBaseVibesCliApp } from '@vibesdotdev/cli/bootstrap';
+import { getPathRoots } from '@vibesdotdev/paths';
+import { CapabilityError, CaughtFailureSchema, isCapabilityError } from '@vibesdotdev/kernel';
+import { projectRefPlugin, resolveProjectRefContext } from '@vibesdotdev/workspace/project-ref';
+import workspaceDocumentPlugin from '@vibesdotdev/workspace/document-plugin';
+import { createCliSessionInvocationObserver } from "./session-lifecycle.js";
+import { createCliWorkspaceEffectPreparer } from "./workspace-effect-preparer.js";
+/** The Vibes executable's suggestions; the composed CLI plugin config can replace them. */
+const VIBES_COMMAND_RECOMMENDATIONS = {
+    login: 'auth login', logout: 'auth logout', signin: 'auth login', signup: 'auth login',
+    whoami: 'account whoami', deploy: 'infra deploy run', start: 'pm start',
+    init: 'docs show getting-started-cli', new: 'docs show getting-started-cli', create: 'docs show getting-started-cli'
+};
+export async function createVibesCliApp(options) {
+    // The CLI core boots once through the entry and binds the workspace at
+    // construction: the caller's explicit `workspaceRoot` or `--workspace-root`,
+    // else the nearest workspace above the cwd (rc02-rc03 §2.4); that
+    // workspace's `vibes.config.*` is what it composes. `runtime/workspace-path`
+    // is the one reader; this surface resolves nothing of its own.
+    let app;
+    const callerBeforeAutoExit = options.onBeforeAutoExit;
+    app = await createBaseVibesCliApp({
+        ...options,
+        commandRecommendations: options.commandRecommendations ?? VIBES_COMMAND_RECOMMENDATIONS,
+        // Project identity rides the host floor, so the serve host a serve
+        // command boots composes it too (the workspace plugin skips its own
+        // registration when it is already present). The workspace environment
+        // kinds ride with it: the surface's own workspace-bind preparer reads
+        // `workspace/environment`, and a workspace that declares its own plugin
+        // list without that slice (a cloud-only app checkout) must not lose the
+        // CLI host's bind. First registration wins, so a workspace that
+        // composes them is unchanged.
+        surfaceFloorPlugins: [
+            ...(options.surfaceFloorPlugins ?? []),
+            async () => projectRefPlugin,
+            async () => workspaceDocumentPlugin
+        ],
+        onBeforeAutoExit: async () => {
+            try {
+                await callerBeforeAutoExit?.();
+            }
+            finally {
+                // The executable may hard-exit immediately after CLISurface.run()
+                // returns. Await disposal of the runtime the action ran on (the
+                // serve host after a serve transition) so feature-owned lifecycle
+                // children can close browsers, DBs, watchers, and other custody first.
+                await app.cli.activeRuntime.dispose();
+            }
+        }
+    });
+    // Preparers and observers run at action time, on the runtime the action
+    // runs on: a serve command's transition replaces the CLI runtime first.
+    const activeRuntime = () => app.cli.activeRuntime;
+    app.cli.prependInvocationPreparer(createCliWorkspaceEffectPreparer({
+        verifyHomeWrite: () => verifyCliHomeWrite(activeRuntime()),
+        bind: (info) => bindCliWorkspaceEnvironment(activeRuntime(), info.effects.serve?.composition)
+    }));
+    // Commander's action dispatch is the execution boundary. Construction,
+    // parsing, help, version, and bare invocations never open a session turn.
+    app.cli.setInvocationObserver(createCliSessionInvocationObserver({ runtime: activeRuntime }));
+    return app;
+}
+export { CLI_HOME_WRITE_UNAVAILABLE_MESSAGE, createCliWorkspaceEffectPreparer } from "./workspace-effect-preparer.js";
+/**
+ * Probe the CLI host's own home storage for writing.
+ *
+ * The probed directory is a host fact (`~/.vibes/storage`, published by the
+ * environment's `paths/roots`), so the filesystem owner selects an unbound
+ * adapter while preserving the host's declared provider preference. A rooted
+ * workspace binding cannot redirect this probe. The host must compose an
+ * adapter that supplies the required exclusive-create capability.
+ *
+ * The probe file is created exclusively, so cleanup removes only the entry this
+ * call created and a write failure is never replaced by a cleanup failure.
+ */
+export async function verifyCliHomeWrite(runtime) {
+    // The one reader of the host's published roots (`@vibesdotdev/paths`): it
+    // parses the descriptor, so `storageDir` is a non-empty path or the read
+    // refuses (`path-roots-unavailable` / `path-roots-invalid`). Either refusal
+    // is this probe's `home-storage-root-unpublished`, carrying the cause.
+    let storageDir;
+    try {
+        storageDir = getPathRoots(runtime).storageDir;
+    }
+    catch (error) {
+        throw new CapabilityError('The runtime did not publish a valid storage root.', 'UNAVAILABLE', {
+            reason: 'home-storage-root-unpublished',
+            retryable: false,
+            details: { field: 'paths/roots.storageDir' },
+            cause: CaughtFailureSchema.parse(error)
+        });
+    }
+    const host = await resolveFileSystemAdapter(runtime, { binding: false });
+    requireExclusiveCreate(host, {
+        message: 'The host filesystem adapter cannot create files exclusively.',
+        reason: 'exclusive-create-unavailable'
+    });
+    const probePath = host.join(storageDir, `.cli-home-write-${crypto.randomUUID()}`);
+    await host.mkdir(storageDir, { recursive: true });
+    if (!(await host.createFileExclusive(probePath, ''))) {
+        throw new CapabilityError('The home write probe name already exists.', 'UNAVAILABLE', {
+            reason: 'probe-name-collision',
+            retryable: true,
+            details: { adapterId: host.descriptor.id }
+        });
+    }
+    await host.remove(probePath);
+}
+async function bindCliWorkspaceEnvironment(runtime, composition) {
+    // An unbound CLI (a bare `~` invocation) has no workspace environment to
+    // bind; commands that need one fail with `workspace-unbound` when they read
+    // it. Any other failure is real and propagates.
+    let root;
+    try {
+        root = await runtime.context('runtime/workspace-path');
+    }
+    catch (error) {
+        // Confirmed absence of exactly this context (NOT_FOUND naming context
+        // `runtime/workspace-path`), and only its unbound form.
+        if (error instanceof Error &&
+            CapabilityError.isAbsenceOf(error, 'context', 'runtime/workspace-path') &&
+            isCapabilityError(error) &&
+            error.reason === 'workspace-unbound') {
+            return;
+        }
+        throw error;
+    }
+    // The kernel has admitted this workspace for the transport host. Its
+    // execution worker owns feature binding and must complete it before ready.
+    if (composition === 'transport')
+        return;
+    const { bindWorkspaceEnvironment } = await import('@vibesdotdev/workspace/environment/node');
+    const projectRefContext = await resolveProjectRefContext(runtime);
+    const projectRef = projectRefContext.resolve({ cwd: root });
+    await bindWorkspaceEnvironment(runtime, {
+        sessionId: 'cli',
+        target: 'local',
+        root,
+        projectId: projectRef?.projectId
+    });
+}
+//# sourceMappingURL=cli-bootstrap.js.map

package/dist/cli-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-bootstrap.js","sourceRoot":"","sources":["../src/cli-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EACN,iBAAiB,IAAI,qBAAqB,EAI1C,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAqB,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAChG,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,kCAAkC,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAIlF,2FAA2F;AAC3F,MAAM,6BAA6B,GAAG;IACrC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IACtF,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU;IACvE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,+BAA+B,EAAE,MAAM,EAAE,+BAA+B;CACpH,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA2B;IAClE,uEAAuE;IACvE,6EAA6E;IAC7E,kEAAkE;IAClE,6EAA6E;IAC7E,+DAA+D;IAC/D,IAAI,GAAiB,CAAC;IACtB,MAAM,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACtD,GAAG,GAAG,MAAM,qBAAqB,CAAC;QACjC,GAAG,OAAO;QACV,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,6BAA6B;QACvF,mEAAmE;QACnE,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,gEAAgE;QAChE,8BAA8B;QAC9B,mBAAmB,EAAE;YACpB,GAAG,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;YACtC,KAAK,IAAI,EAAE,CAAC,gBAAgB;YAC5B,KAAK,IAAI,EAAE,CAAC,uBAAuB;SACnC;QACD,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACJ,MAAM,oBAAoB,EAAE,EAAE,CAAC;YAChC,CAAC;oBAAS,CAAC;gBACV,kEAAkE;gBAClE,gEAAgE;gBAChE,kEAAkE;gBAClE,uEAAuE;gBACvE,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YACvC,CAAC;QACF,CAAC;KACD,CAAC,CAAC;IACH,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAChC,gCAAgC,CAAC;QAChC,eAAe,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAC1D,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC;KAC7F,CAAC,CACF,CAAC;IACF,uEAAuE;IACvE,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAC5B,kCAAkC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAC9D,CAAC;IACF,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,OAAO,EAAE,kCAAkC,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAEtH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAqB;IAC7D,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,aAAa,EAAE;YAC7F,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;YAC5C,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;SACvC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,sBAAsB,CAAC,IAAI,EAAE;QAC5B,OAAO,EAAE,8DAA8D;QACvE,MAAM,EAAE,8BAA8B;KACtC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,2CAA2C,EAAE,aAAa,EAAE;YACrF,MAAM,EAAE,sBAAsB;YAC9B,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE;SAC1C,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,OAAqB,EAAE,WAAkC;IACnG,yEAAyE;IACzE,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,sEAAsE;QACtE,wDAAwD;QACxD,IACC,KAAK,YAAY,KAAK;YACtB,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,wBAAwB,CAAC;YACvE,iBAAiB,CAAC,KAAK,CAAC;YACxB,KAAK,CAAC,MAAM,KAAK,mBAAmB,EACnC,CAAC;YACF,OAAO;QACR,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IACD,qEAAqE;IACrE,2EAA2E;IAC3E,IAAI,WAAW,KAAK,WAAW;QAAE,OAAO;IAExC,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;IAC7F,MAAM,iBAAiB,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,wBAAwB,CAAC,OAAO,EAAE;QACvC,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,OAAO;QACf,IAAI;QACJ,SAAS,EAAE,UAAU,EAAE,SAAS;KAChC,CAAC,CAAC;AACJ,CAAC"}

package/dist/execution/index.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Runtime-owned process execution for local toolchain probes.
+ *
+ * A probe runs on the runtime its host hands over (a CLI command's
+ * `context.runtime`, or a script host booted through the one entry,
+ * `bootstrapVibesRuntime`) and uses that runtime's `runtime/execution`
+ * capability. Nothing here boots a runtime of its own, and callers never
+ * import Bun or child-process implementations to discover or run a toolchain.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { RuntimeExecution } from '@vibesdotdev/kernel/execution';
+export { resolvePinnedToolchain, type PinnedToolchain, type ResolvePinnedToolchainOptions } from './toolchains/pinned-toolchain.ts';
+/**
+ * Canonical version-probe argv per known toolchain command.
+ * Unknown commands fall back to `['--version']` in `inspectToolchain`.
+ */
+export declare const TOOLCHAIN_VERSION_ARGUMENTS: {
+    readonly zig: readonly ["version"];
+    readonly cargo: readonly ["--version"];
+    readonly rustc: readonly ["--version"];
+    readonly rustup: readonly ["--version"];
+    /** NSIS compiler; `/VERSION` is the documented flag (also accepted as `-VERSION`). */
+    readonly makensis: readonly ["/VERSION"];
+};
+export interface CliExecutionSurface {
+    runtime: VibesRuntime;
+    execution: RuntimeExecution;
+}
+/** The two `runtime/execution` operations a toolchain probe uses. */
+export type ToolchainExecution = Pick<RuntimeExecution, 'resolveCommand' | 'execute'>;
+export interface ToolchainInspection {
+    command: string;
+    path: string | null;
+    version: string | null;
+    available: boolean;
+}
+/**
+ * Resolve the execution capability of the runtime the host handed over.
+ * Preserves the kernel's typed absence refusal when the kind or a matching
+ * implementation is not registered.
+ */
+export declare function createCliExecutionSurface(runtime: VibesRuntime): Promise<CliExecutionSurface>;
+/**
+ * Ask the active execution environment whether a named tool is present and,
+ * when it is, capture its version without exposing any host primitive. The
+ * probe's whole environment is `options.env`, the caller's composition
+ * (`composeHostEnv(runtime)`); it never inherits the live process env.
+ */
+export declare function inspectToolchain(execution: ToolchainExecution, command: string, options: {
+    env: Record<string, string>;
+    versionArgs?: string[];
+}): Promise<ToolchainInspection>;
+//# sourceMappingURL=index.d.ts.map

package/dist/execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAuB,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE3F,OAAO,EACN,sBAAsB,EACtB,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,MAAM,kCAAkC,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;IAKvC,sFAAsF;;CAEvB,CAAC;AAOjE,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,gBAAgB,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,CAAC,CAAC;AAEtF,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACnB;AAGD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAKnG;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACrC,SAAS,EAAE,kBAAkB,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9D,OAAO,CAAC,mBAAmB,CAAC,CAa9B"}

package/dist/execution/index.js

@@ -0,0 +1,58 @@
+/**
+ * Runtime-owned process execution for local toolchain probes.
+ *
+ * A probe runs on the runtime its host hands over (a CLI command's
+ * `context.runtime`, or a script host booted through the one entry,
+ * `bootstrapVibesRuntime`) and uses that runtime's `runtime/execution`
+ * capability. Nothing here boots a runtime of its own, and callers never
+ * import Bun or child-process implementations to discover or run a toolchain.
+ */
+export { resolvePinnedToolchain } from "./toolchains/pinned-toolchain.js";
+/**
+ * Canonical version-probe argv per known toolchain command.
+ * Unknown commands fall back to `['--version']` in `inspectToolchain`.
+ */
+export const TOOLCHAIN_VERSION_ARGUMENTS = {
+    zig: ['version'],
+    cargo: ['--version'],
+    rustc: ['--version'],
+    rustup: ['--version'],
+    /** NSIS compiler; `/VERSION` is the documented flag (also accepted as `-VERSION`). */
+    makensis: ['/VERSION']
+};
+/** The canonical version argv for `command` (own entries only), else `['--version']`. */
+function versionArgumentsFor(command) {
+    return Object.entries(TOOLCHAIN_VERSION_ARGUMENTS).find(([name]) => name === command)?.[1] ?? ['--version'];
+}
+/**
+ * Resolve the execution capability of the runtime the host handed over.
+ * Preserves the kernel's typed absence refusal when the kind or a matching
+ * implementation is not registered.
+ */
+export async function createCliExecutionSurface(runtime) {
+    const execution = await runtime
+        .query('runtime/execution')
+        .resolve();
+    return { runtime, execution };
+}
+/**
+ * Ask the active execution environment whether a named tool is present and,
+ * when it is, capture its version without exposing any host primitive. The
+ * probe's whole environment is `options.env`, the caller's composition
+ * (`composeHostEnv(runtime)`); it never inherits the live process env.
+ */
+export async function inspectToolchain(execution, command, options) {
+    const versionArgs = options.versionArgs ?? [...versionArgumentsFor(command)];
+    const path = await execution.resolveCommand(command);
+    if (!path)
+        return { command, path: null, version: null, available: false };
+    const result = await execution.execute({ command: path, args: versionArgs, env: options.env, envMode: 'replace' });
+    const output = `${result.stdout}\n${result.stderr}`.trim();
+    return {
+        command,
+        path,
+        version: result.exitCode === 0 ? output : null,
+        available: result.exitCode === 0
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/execution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EACN,sBAAsB,EAGtB,MAAM,kCAAkC,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,GAAG,EAAE,CAAC,SAAS,CAAC;IAChB,KAAK,EAAE,CAAC,WAAW,CAAC;IACpB,KAAK,EAAE,CAAC,WAAW,CAAC;IACpB,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,sFAAsF;IACtF,QAAQ,EAAE,CAAC,UAAU,CAAC;CACyC,CAAC;AAEjE,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,OAAe;IAC3C,OAAO,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC7G,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAqB;IACpE,MAAM,SAAS,GAAG,MAAM,OAAO;SAC7B,KAAK,CAAwC,mBAAmB,CAAC;SACjE,OAAO,EAAE,CAAC;IACZ,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,SAA6B,EAC7B,OAAe,EACf,OAAgE;IAEhE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAE3E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACnH,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO;QACN,OAAO;QACP,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC9C,SAAS,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;KAChC,CAAC;AACH,CAAC"}

package/dist/execution/toolchains/pinned-toolchain.d.ts

@@ -0,0 +1,20 @@
+import type { RuntimeExecution } from '@vibesdotdev/kernel/execution';
+export interface PinnedToolchain {
+    command: string;
+    path: string;
+    version: string;
+}
+export interface ResolvePinnedToolchainOptions {
+    command: string;
+    candidates: readonly string[];
+    versionArgs: readonly string[];
+    versionPrefix: string;
+    /** The probe's whole environment: the caller's composition (`composeHostEnv(runtime)`). */
+    env: Record<string, string>;
+}
+/**
+ * Resolve a toolchain through the active execution capability and reject a
+ * binary whose reported version does not satisfy the caller's pin.
+ */
+export declare function resolvePinnedToolchain(execution: Pick<RuntimeExecution, 'resolveCommand' | 'execute'>, options: ResolvePinnedToolchainOptions): Promise<PinnedToolchain>;
+//# sourceMappingURL=pinned-toolchain.d.ts.map

package/dist/execution/toolchains/pinned-toolchain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-toolchain.d.ts","sourceRoot":"","sources":["../../../src/execution/toolchains/pinned-toolchain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,2FAA2F;IAC3F,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC3C,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,CAAC,EAC/D,OAAO,EAAE,6BAA6B,GACpC,OAAO,CAAC,eAAe,CAAC,CAoB1B"}

package/dist/execution/toolchains/pinned-toolchain.js

@@ -0,0 +1,23 @@
+/**
+ * Resolve a toolchain through the active execution capability and reject a
+ * binary whose reported version does not satisfy the caller's pin.
+ */
+export async function resolvePinnedToolchain(execution, options) {
+    for (const candidate of options.candidates) {
+        const path = await execution.resolveCommand(candidate);
+        if (!path)
+            continue;
+        const result = await execution.execute({
+            command: path,
+            args: [...options.versionArgs],
+            env: options.env,
+            envMode: 'replace'
+        });
+        const version = `${result.stdout}\n${result.stderr}`.trim();
+        if (result.exitCode === 0 && version.startsWith(options.versionPrefix)) {
+            return { command: options.command, path, version };
+        }
+    }
+    throw new Error(`No ${options.command} toolchain matching ${options.versionPrefix} was available through runtime/execution.`);
+}
+//# sourceMappingURL=pinned-toolchain.js.map

package/dist/execution/toolchains/pinned-toolchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-toolchain.js","sourceRoot":"","sources":["../../../src/execution/toolchains/pinned-toolchain.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,SAA+D,EAC/D,OAAsC;IAEtC,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;YACtC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACpD,CAAC;IACF,CAAC;IAED,MAAM,IAAI,KAAK,CACd,MAAM,OAAO,CAAC,OAAO,uBAAuB,OAAO,CAAC,aAAa,2CAA2C,CAC5G,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Runtime Surface: CLI
+ *
+ * Official blessed entrypoint for bootstrapping a Vibes CLI runtime.
+ * Re-exports the CLI application factory (createVibesCliApp) and related
+ * types after the surface layer is fully implemented.
+ *
+ * Consumers (cli-bin, shield-cli, internal CLI commands) should import from here
+ * rather than directly from @vibesdotdev/cli/bootstrap or raw runtime bootstrap symbols.
+ */
+/**
+ * Runtime Surface — CLI
+ *
+ * The blessed way to bootstrap a full Vibes CLI application.
+ * Re-exports createVibesCliApp and related types from the implementation
+ * that now lives in this surface package.
+ *
+ * All production CLI entrypoints (cli-bin, shield-cli, internal tools)
+ * should import from here.
+ */
+export { createVibesCliApp, type VibesCliAppOptions, type VibesCliApp, type CliPluginLoader } from './cli-bootstrap.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;GASG;AACH,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,22 @@
+/**
+ * Runtime Surface: CLI
+ *
+ * Official blessed entrypoint for bootstrapping a Vibes CLI runtime.
+ * Re-exports the CLI application factory (createVibesCliApp) and related
+ * types after the surface layer is fully implemented.
+ *
+ * Consumers (cli-bin, shield-cli, internal CLI commands) should import from here
+ * rather than directly from @vibesdotdev/cli/bootstrap or raw runtime bootstrap symbols.
+ */
+/**
+ * Runtime Surface — CLI
+ *
+ * The blessed way to bootstrap a full Vibes CLI application.
+ * Re-exports createVibesCliApp and related types from the implementation
+ * that now lives in this surface package.
+ *
+ * All production CLI entrypoints (cli-bin, shield-cli, internal tools)
+ * should import from here.
+ */
+export { createVibesCliApp } from "./cli-bootstrap.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;GASG;AACH,OAAO,EAAE,iBAAiB,EAAmE,MAAM,oBAAoB,CAAC"}

package/dist/relay.config.descriptor.d.ts

@@ -0,0 +1,38 @@
+export declare const relayConfigDescriptor: {
+    id: string;
+    kind: "config/manifest";
+    name: string;
+    namespace: string;
+    schema: import("zod").ZodObject<{
+        timeoutMs: import("zod").ZodDefault<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>;
+    storedLayer: "none";
+    allowedAdapters: string[];
+    customTables: false;
+    version: number;
+    internal: false;
+    scope: "global";
+    tier: "user";
+    fields: {
+        timeoutMs: {
+            ui: {
+                label: string;
+            };
+            defaults: {
+                base: number;
+                resolver: (ctx: {
+                    hardware: "consumer" | "cloud" | "gpu" | "cpu-only";
+                    environment: "staging" | "production" | "development";
+                    surface: "cli" | "tui" | "bridge" | "web";
+                    isAuthenticated: boolean;
+                    enabledFeatures: Set<string>;
+                    get: import("zod/v4/core").$InferInnerFunctionType<import("zod").ZodTuple<readonly [import("zod").ZodString], null>, import("zod").ZodOptional<import("zod").ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, import("zod/v4/core").$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+                    custom: Record<string, import("@vibesdotdev/kernel/bootstrap").JsonValue>;
+                    runtime: import("@vibesdotdev/kernel").RuntimeRef;
+                    userRole?: string | undefined;
+                }) => number;
+            };
+        };
+    };
+};
+//# sourceMappingURL=relay.config.descriptor.d.ts.map

package/dist/relay.config.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.config.descriptor.d.ts","sourceRoot":"","sources":["../src/relay.config.descriptor.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsBE,CAAC"}

package/dist/relay.config.descriptor.js

@@ -0,0 +1,25 @@
+import { RelayConfigSchema, TimeoutEnvSchema } from "./schemas/hook-relay.js";
+export const relayConfigDescriptor = {
+    id: 'surface-cli.hook-relay',
+    kind: 'config/manifest',
+    name: 'External hook relay',
+    namespace: 'surface-cli.hook-relay',
+    schema: RelayConfigSchema,
+    storedLayer: 'none',
+    allowedAdapters: ['storage.memory'],
+    customTables: false,
+    version: 1,
+    internal: false,
+    scope: 'global',
+    tier: 'user',
+    fields: {
+        timeoutMs: {
+            ui: { label: 'Timeout (ms)' },
+            defaults: {
+                base: RelayConfigSchema.parse({}).timeoutMs,
+                resolver: ctx => TimeoutEnvSchema.safeParse(ctx.runtime.getEnv('VIBES_EXTERNAL_HOOK_RELAY_TIMEOUT_MS')).data ?? RelayConfigSchema.parse({}).timeoutMs
+            }
+        }
+    }
+};
+//# sourceMappingURL=relay.config.descriptor.js.map