@adhd/apigen-engine-runtime 0.2.2 → 0.2.3

package/lib/tool-description.d.ts

@@ -1,6 +1,8 @@
-/** The minimal shape this module reads off a composed schema entry. */
+import { JsonSchemaLike } from '@adhd/apigen-base-logical';
+
+/** The minimal shape this module reads off a composed (or mount) schema entry. */
 export interface ToolDescriptionSchema {
-    input?: {
+    input?: JsonSchemaLike & {
         description?: unknown;
     };
 }
@@ -9,9 +11,10 @@ export interface ToolDescriptionSchema {
  * response.
  *
  * @param name - The MCP tool name (used as the final fallback).
- * @param schema - The function's composed schema (as produced by
- *   `composeSchemas`); `input.description` carries the auto-generated
- *   envelope/data-wrapper documentation.
+ * @param schema - The function's composed (or mount) schema; `input` is
+ *   read both for the envelope/data-wrapper documentation
+ *   (`input.description`, when present) and for synthesizing a concrete
+ *   worked example off its actual shape.
  * @param override - An optional caller-supplied description (e.g. from the
  *   `toolDescriptions` plugin option), prepended when present.
  */

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@adhd/apigen-engine-runtime",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "dependencies": {
     "ajv": "^8.20.0",
     "ajv-formats": "2.1.1",
     "pino": "10.3.1",
-    "@adhd/apigen-core-client": "^0.2.2",
-    "@adhd/apigen-base-logical": "^0.1.0",
+    "@adhd/apigen-core-client": "^0.3.0",
+    "@adhd/apigen-base-logical": "^0.1.1",
     "@adhd/apigen-base-errors": "^0.2.0",
-    "@adhd/apigen-engine-naming": "^0.2.1",
+    "@adhd/apigen-engine-naming": "^0.2.2",
     "better-sqlite3": "12.10.0"
   },
   "main": "./index.js",

package/test-support/parity-harness.d.ts

@@ -88,6 +88,43 @@ export interface NegativeControlOptions {
  * only mutation performed, and it is always undone in a `finally`.
  */
 export declare function proveNegativeControl(runner: () => void | Promise<void>, patchPath: string, opts?: NegativeControlOptions): Promise<void>;
+/**
+ * Runs `git <args>` scoped to `cwd` via `-C` (never relying on the child's
+ * inherited working directory alone), with every `GIT_*` environment
+ * variable stripped so an ambient `GIT_DIR`/`GIT_WORK_TREE`/`GIT_INDEX_FILE`
+ * (as git sets when invoking hooks — see above) cannot silently redirect the
+ * command at a different repository than `cwd`.
+ */
+export declare function runGit(args: readonly string[], opts: {
+    cwd: string;
+}): string;
+/**
+ * Proves `dir` is itself a git repository root — not merely a subdirectory
+ * of some OTHER repository (which `git rev-parse --show-toplevel` would
+ * silently resolve to instead). Throws loudly on any mismatch, missing
+ * repo, or git failure — this is the assertion that turns "we assume the
+ * scratch repo is isolated" into "we proved it before touching it".
+ */
+export declare function assertIsolatedRepoRoot(dir: string): void;
+/**
+ * Creates a throwaway, PROVABLY isolated git repository for tests that need
+ * to exercise real `git` mutations (init/config/add/commit) without any
+ * possibility of touching the enclosing repository.
+ *
+ * Isolation is structural, not incidental:
+ *   - The scratch repo lives under `os.tmpdir()` (never nested inside any
+ *     tracked working tree), so nothing that walks up looking for an
+ *     enclosing `.git` can land on the real repo.
+ *   - `git init` and every subsequent call go through {@link runGit}, which
+ *     strips `GIT_*` env so ambient hook variables cannot redirect it.
+ *   - {@link assertIsolatedRepoRoot} is run immediately after `init` and
+ *     BEFORE this function returns — the caller only ever receives a dir
+ *     that has already been proven isolated; a failure to isolate throws
+ *     here rather than silently degrading into "isolated most of the time".
+ */
+export declare function createIsolatedScratchRepo(prefix: string): {
+    dir: string;
+};
 /**
  * Bulletproof teardown for a spawned test server (`flask_server.py`,
  * `grpc_server.py`, …): sends `SIGTERM`, waits for the process's real `exit`