@aopslabs/aops-server 0.2.2 → 0.2.4

package/build/server/chunks/{_server.ts-BkxSxdd0.js → _server.ts-B-i329o7.js}

@@ -1,39 +1,35 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { z } from 'zod';
-import { g as getAgentGateway } from './agent-gateway-runtime-C7Kvvy0H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { HostGatewayError, parseStrictInvokeEnvelope } from '@aopslabs/host-gateway';
+import { i as invokeKernelAgentTool } from './agent-gateway-runtime-DV-xLmJx.js';
 import { n as normalizePluginFailure, t as toSafePluginFailureLogDetails, i as inferFailureStatusFromPayload, c as classifyInvokeFailureMessage } from './plugin-error-normalize-DNeRsopQ.js';
 import { a as attachResolvedProjectScope, r as resolveHostRequestContext } from './request-context-9wzBoKrz.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
-import './registry-DO8ob5o1.js';
+import './registry-DIreA2IZ.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
 import 'node:child_process';
+import 'node:module';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
-import './canonical-text-order-DbXJJnFD.js';
+import 'node:crypto';
 import 'ajv';
+import 'zod';
 import '@aopslabs/xf-dm-kits/appConfig';
 import '@aopslabs/xf-dm-kits';
 import '@aopslabs/domain-kit-agentspace';
 import './xf-result-BRDjvftr.js';
 import 'effect';
 
-const invokeEnvelopeSchema = z.object({
-  sourceId: z.string().trim().min(1).optional(),
-  input: z.unknown().optional(),
-  preview: z.boolean().optional(),
-  apply: z.boolean().optional(),
-  confirm: z.boolean().optional(),
-  idempotencyKey: z.string().trim().min(1).max(200).optional()
-}).strict();
 function isRecord(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -53,9 +49,6 @@ function sanitizeInvokeHeaders(input) {
   }
   return headers;
 }
-function hasClientProvidedContext(input) {
-  return isRecord(input) && Object.prototype.hasOwnProperty.call(input, "context");
-}
 function resolveActivitySourceKind(event) {
   const candidate = String(event.request.headers.get("x-activity-source-kind") ?? "").trim().toLowerCase();
   if (candidate === "aops-cli" || candidate === "desktop" || candidate === "runner" || candidate === "system") {
@@ -67,47 +60,14 @@ async function parseInvokePayload(event) {
   try {
     const rawText = await event.request.text();
     if (!rawText.trim()) {
-      return { ok: true, input: void 0 };
+      return { ok: false, error: "invalid_input", message: "invoke_envelope_required" };
     }
     const rawPayload = JSON.parse(rawText);
-    const shouldParseEnvelope = isRecord(rawPayload) && ("input" in rawPayload || "preview" in rawPayload || "apply" in rawPayload || "confirm" in rawPayload || "idempotencyKey" in rawPayload || Object.keys(rawPayload).every(
-      (key) => key === "sourceId" || key === "input" || key === "preview" || key === "apply" || key === "confirm" || key === "idempotencyKey"
-    ));
-    if (!shouldParseEnvelope) {
-      if (hasClientProvidedContext(rawPayload)) {
-        return {
-          ok: false,
-          error: "invalid_input",
-          message: "invalid_invoke_payload:context_not_allowed"
-        };
-      }
-      return { ok: true, input: rawPayload };
-    }
-    const parsedEnvelope = invokeEnvelopeSchema.safeParse(rawPayload);
-    if (!parsedEnvelope.success) {
-      return {
-        ok: false,
-        error: "invalid_input",
-        message: `invalid_invoke_payload:${parsedEnvelope.error.issues[0]?.message ?? "invalid_envelope"}`
-      };
-    }
-    if (hasClientProvidedContext(parsedEnvelope.data.input)) {
-      return {
-        ok: false,
-        error: "invalid_input",
-        message: "invalid_invoke_payload:input.context_not_allowed"
-      };
+    return { ok: true, envelope: parseStrictInvokeEnvelope(rawPayload) };
+  } catch (error) {
+    if (error instanceof HostGatewayError) {
+      return { ok: false, error: error.code, message: error.message };
     }
-    return {
-      ok: true,
-      sourceId: parsedEnvelope.data.sourceId?.trim().toLowerCase(),
-      input: parsedEnvelope.data.input,
-      preview: parsedEnvelope.data.preview,
-      apply: parsedEnvelope.data.apply,
-      confirm: parsedEnvelope.data.confirm,
-      idempotencyKey: parsedEnvelope.data.idempotencyKey?.trim()
-    };
-  } catch {
     return {
       ok: false,
       error: "invalid_input",
@@ -121,24 +81,19 @@ const POST = async (event) => {
   if (!toolId) {
     return json({ ok: false, error: "missing_tool_id" }, { status: 400 });
   }
-  const gateway = getAgentGateway();
   const parsedPayload = await parseInvokePayload(event);
   if (!parsedPayload.ok) {
     return json({ ok: false, error: parsedPayload.error, message: parsedPayload.message }, { status: 400 });
   }
   try {
-    const result = await gateway.invokeTool({
+    const result = await invokeKernelAgentTool({
       toolId,
-      sourceId: parsedPayload.sourceId,
-      input: parsedPayload.input,
-      preview: parsedPayload.preview,
-      apply: parsedPayload.apply,
-      confirm: parsedPayload.confirm,
-      idempotencyKey: parsedPayload.idempotencyKey,
+      envelope: parsedPayload.envelope,
       context: {
         ...resolveHostRequestContext(event),
         activitySourceKind: resolveActivitySourceKind(event)
-      }
+      },
+      requestHeaders: event.request.headers
     });
     const normalized = normalizePluginFailure(result.status, result.data);
     if (normalized.sanitized) {
@@ -160,6 +115,12 @@ const POST = async (event) => {
       { status: effectiveStatus, headers: sanitizeInvokeHeaders(result.headers) }
     );
   } catch (error) {
+    if (error instanceof HostGatewayError) {
+      return json(
+        { ok: false, error: error.code, message: error.message, ...error.details ? { details: error.details } : {} },
+        { status: error.status }
+      );
+    }
     const message = normalizeErrorMessage(error);
     const classification = classifyInvokeFailureMessage(message);
     return json(

package/build/server/chunks/{_server.ts-Ua5Ieisy.js → _server.ts-BKHrYeaH.js}

@@ -1,23 +1,26 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { g as getAgentDiscoveryDocument } from './discovery-BvDEgiqC.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { g as getAgentDiscoveryDocument } from './discovery-DL0RzVks.js';
 import { r as resolveRequestBaseUrl } from './request-base-url-zKJpVUv5.js';
-import './agent-gateway-runtime-C7Kvvy0H.js';
+import './agent-gateway-runtime-DV-xLmJx.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
-import './registry-DO8ob5o1.js';
+import './registry-DIreA2IZ.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
 import 'node:child_process';
+import 'node:module';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
-import './canonical-text-order-DbXJJnFD.js';
+import 'node:crypto';
 import 'ajv';
 import 'zod';
 import './auth-provider-C07OUlnz.js';

package/build/server/chunks/{_server.ts-BX4X0tW0.js → _server.ts-BQ60-REv.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { o as okResult } from './xf-result-BRDjvftr.js';
 
 const GET = async ({ locals }) => {

package/build/server/chunks/{_server.ts-DQzYSH_C.js → _server.ts-BZ4AVjKT.js}

@@ -1,18 +1,20 @@
 import { createSvelteKitPluginHandler } from '@aopslabs/host-adapter-sveltekit';
-import { j as json } from './index.js-BQnOaW3H.js';
-import { d as checkHostDomainAdmission, e as getHostPluginRegistry } from './registry-DO8ob5o1.js';
+import { checkDomainAdmission } from '@aopslabs/host-admission';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { a as getKernelRuntimeSnapshot, e as getHostPluginRegistry } from './registry-DIreA2IZ.js';
 import { a as toSafeDiagnosticLabel, n as normalizePluginFailure, t as toSafePluginFailureLogDetails, i as inferFailureStatusFromPayload } from './plugin-error-normalize-DNeRsopQ.js';
 import { a as attachResolvedProjectScope, r as resolveHostRequestContext } from './request-context-9wzBoKrz.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
-import '@aopslabs/host-core';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
+import '@aopslabs/host-core';
 import '@aopslabs/xf-dm-kits/appConfig';
 import '@aopslabs/xf-dm-kits';
 import '@aopslabs/domain-kit-agentspace';
@@ -88,7 +90,8 @@ async function normalizePluginErrorResponse(response) {
 const wrappedHandler = async (event) => {
   await attachResolvedProjectScope(event);
   const domain = String(event.params.domain ?? "").trim().toLowerCase();
-  const admission = checkHostDomainAdmission(domain);
+  const kernel = await getKernelRuntimeSnapshot();
+  const admission = checkDomainAdmission(await kernel.kernel.admission.getSnapshot(), domain);
   if (!admission.allowed) {
     return json(
       { ok: false, error: "domain_not_available", domain, reason: admission.reason },

package/build/server/chunks/{_server.ts-B9gjXi95.js → _server.ts-BpeZOHh9.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { Effect } from 'effect';
 import { normalizeDocmanFlowAction, saveDocmanGroupFlow, saveDocmanDocumentFlow, saveDocmanSectionFlow, copyDocmanSectionFlow, createLinkedDocmanSection, linkExistingDocmanSection, linkExistingDocmanPageVersion, updateDocmanDocumentSectionLinksFlow, updateDocmanSectionPageLinksFlow, saveDocmanPageVersionDraftFlow, updateDocmanDocumentVersionFlow, updateDocmanPageFlow, copyDocmanPageFlow, createDocmanDocumentVersionFlow, createDocmanPageWithInitialVersionFlow, createLinkedDocmanPage, inferDocmanFlowErrorStatus } from '@aopslabs/domain-product-docman';
 import { a as attachResolvedProjectScope, b as resolveProjectScopeFromLocals } from './request-context-9wzBoKrz.js';

package/build/server/chunks/{_server.ts-CjzSQgpk.js → _server.ts-Bvm76oFb.js}

@@ -1,7 +1,7 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { g as getAgentGateway } from './agent-gateway-runtime-C7Kvvy0H.js';
-import { b as buildAgentDiscoveryDocument } from './discovery-BvDEgiqC.js';
-import { g as getHostConfig } from './registry-DO8ob5o1.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { g as getAgentGateway } from './agent-gateway-runtime-DV-xLmJx.js';
+import { b as buildAgentDiscoveryDocument } from './discovery-DL0RzVks.js';
+import { g as getHostConfig } from './registry-DIreA2IZ.js';
 import { r as resolveRequestBaseUrl } from './request-base-url-zKJpVUv5.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
@@ -12,15 +12,18 @@ import 'node:url';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
 import 'node:crypto';
-import './canonical-text-order-DbXJJnFD.js';
-import './admission-snapshot-C2wGfTWE.js';
+import '@aopslabs/artifact-trust-contracts';
 import 'ajv';
 import 'zod';
 import './auth-provider-C07OUlnz.js';
-import './aops-runtime-config-CHpDUCdE.js';
 import 'node:fs';
-import 'pg';
+import 'node:os';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
 import 'node:worker_threads';
+import './aops-runtime-config-CHpDUCdE.js';
+import 'pg';
 
 const AGENT_FLOW_OVERVIEW = {
   version: "1.0",

package/build/server/chunks/{_server.ts-DaIr3NkR.js → _server.ts-BzCsmQvL.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { r as readRuntimeConfigAdmin } from './aops-runtime-config-CHpDUCdE.js';
 import { o as okResult } from './xf-result-BRDjvftr.js';
 import 'node:fs';

package/build/server/chunks/{_server.ts-Bz-Erv-1.js → _server.ts-CLPseTqB.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { t as testRuntimeConfigAdminTarget, g as getResolvedAopsServerRuntimeConfig } from './aops-runtime-config-CHpDUCdE.js';
 import { o as okResult } from './xf-result-BRDjvftr.js';
 import 'node:fs';

package/build/server/chunks/{_server.ts-XmKDT59M.js → _server.ts-CUfJtkgM.js}

@@ -1,23 +1,26 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { g as getAgentDiscoveryDocument } from './discovery-BvDEgiqC.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { g as getAgentDiscoveryDocument } from './discovery-DL0RzVks.js';
 import { r as resolveRequestBaseUrl } from './request-base-url-zKJpVUv5.js';
-import './agent-gateway-runtime-C7Kvvy0H.js';
+import './agent-gateway-runtime-DV-xLmJx.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
-import './registry-DO8ob5o1.js';
+import './registry-DIreA2IZ.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
 import 'node:child_process';
+import 'node:module';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
-import './canonical-text-order-DbXJJnFD.js';
+import 'node:crypto';
 import 'ajv';
 import 'zod';
 import './auth-provider-C07OUlnz.js';

package/build/server/chunks/{_server.ts-AwMeEYiZ.js → _server.ts-Cc0Bnt1g.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 
 const GET = async () => {
   return json({

package/build/server/chunks/{_server.ts-u2UWBqNN.js → _server.ts-CsKHhoNV.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { Effect } from 'effect';
 import { normalizeProjectmanFlowAction, createProjectmanBoardFlow, applyProjectmanTemplateFlow, createProjectmanTemplateFlow, updateProjectmanTemplateFlow, deleteProjectmanTemplateFlow, createProjectmanBoardColumnFlow, createProjectmanTaskFlow, updateProjectmanTaskFlow, moveProjectmanTaskFlow, repositionProjectmanTaskFlow, createProjectmanSprintFlow, updateProjectmanSprintPlanFlow, createProjectmanSprintMicrotaskFlow, updateProjectmanSprintMicrotaskStatusFlow, createProjectmanIssueFlow, updateProjectmanIssueFlow, createProjectmanFeedbackFlow, updateProjectmanFeedbackFlow, convertProjectmanFeedbackToIssueFlow, convertProjectmanFeedbackToTaskFlow, inferProjectmanFlowErrorStatus } from '@aopslabs/domain-product-projectman';
 import './aops-runtime-config-CHpDUCdE.js';

package/build/server/chunks/{_server.ts-N61POKjl.js → _server.ts-D9nuwLDu.js}

@@ -1,23 +1,26 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { g as getAgentGateway } from './agent-gateway-runtime-C7Kvvy0H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { g as getAgentGateway } from './agent-gateway-runtime-DV-xLmJx.js';
 import { r as resolveRequestBaseUrl } from './request-base-url-zKJpVUv5.js';
 import { g as getAuthProvider, i as isTrustedLocalAuthProvider } from './auth-provider-C07OUlnz.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
-import './registry-DO8ob5o1.js';
+import './registry-DIreA2IZ.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
 import 'node:child_process';
+import 'node:module';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
-import './canonical-text-order-DbXJJnFD.js';
+import 'node:crypto';
 import 'ajv';
 import 'zod';
 

package/build/server/chunks/{_server.ts-DsTeOL2P.js → _server.ts-DL4m3Nag.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { t as testRuntimeConfigAdminTarget } from './aops-runtime-config-CHpDUCdE.js';
 import { o as okResult, e as errResult } from './xf-result-BRDjvftr.js';
 import 'node:fs';

package/build/server/chunks/{_server.ts-DQWRrk5C.js → _server.ts-DUxJA8_s.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 
 const API_ROOT_ERROR = {
   ok: false,

package/build/server/chunks/{_server.ts-CRKd0KAC.js → _server.ts-Df-V1NXF.js}

@@ -1,23 +1,26 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { a as getAgentToolDetailDocument } from './discovery-BvDEgiqC.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { a as getAgentToolDetailDocument } from './discovery-DL0RzVks.js';
 import { r as resolveRequestBaseUrl } from './request-base-url-zKJpVUv5.js';
-import './agent-gateway-runtime-C7Kvvy0H.js';
+import './agent-gateway-runtime-DV-xLmJx.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
-import './registry-DO8ob5o1.js';
+import './registry-DIreA2IZ.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
 import 'node:child_process';
+import 'node:module';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
-import './canonical-text-order-DbXJJnFD.js';
+import 'node:crypto';
 import 'ajv';
 import 'zod';
 import './auth-provider-C07OUlnz.js';

package/build/server/chunks/{_server.ts-6bdzoHJH.js → _server.ts-Dm0Cz5fI.js}

@@ -1,6 +1,6 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { b as getAgentGatewayDiagnostics } from './agent-gateway-runtime-C7Kvvy0H.js';
-import { g as getHostConfig, a as getHostRegistrationDiagnostics, b as getHostPluginRegistryDiagnostics, c as getHostAdmissionDiagnostics, r as resolveCommunityPackageModule } from './registry-DO8ob5o1.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { b as getAgentGatewayDiagnostics } from './agent-gateway-runtime-DV-xLmJx.js';
+import { g as getHostConfig, a as getKernelRuntimeSnapshot, b as getHostRegistrationDiagnostics, c as getHostPluginRegistryDiagnostics, d as getHostAdmissionDiagnostics, r as resolveCommunityPackageModule } from './registry-DIreA2IZ.js';
 import { r as readRuntimeConfigAdmin } from './aops-runtime-config-CHpDUCdE.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
@@ -11,11 +11,14 @@ import 'node:url';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
 import 'node:crypto';
-import './canonical-text-order-DbXJJnFD.js';
-import './admission-snapshot-C2wGfTWE.js';
+import '@aopslabs/artifact-trust-contracts';
 import 'ajv';
 import 'zod';
 import 'node:fs';
+import 'node:os';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
 import 'node:worker_threads';
 import 'pg';
 
@@ -50,6 +53,7 @@ function areHostAdminPluginDiagnosticsEnabled() {
   return getHostConfig().diagnostics?.exposePluginBootstrap !== false;
 }
 async function readHostAdminPluginsSnapshot() {
+  const kernel = await getKernelRuntimeSnapshot();
   const config = getHostConfig();
   const plugins = config.plugins ?? [];
   const providers = config.agentGateway?.catalog?.manifestProviders ?? [];
@@ -63,7 +67,14 @@ async function readHostAdminPluginsSnapshot() {
     registrations: getHostRegistrationDiagnostics(),
     agentGateway: getAgentGatewayDiagnostics(),
     storage: { postgres: readRuntimeConfigAdmin() },
-    sources: []
+    sources: [],
+    kernel: {
+      profile: kernel.kernel.config.profile,
+      authority: kernel.kernel.authority.mode,
+      admission: kernel.kernel.admission.mode,
+      domainCount: kernel.registry.listDomains().length,
+      gateway: kernel.gateway.getDiagnostics()
+    }
   };
 }
 const GET = async ({ url }) => {

package/build/server/chunks/{_server.ts-o9pJceJP.js → _server.ts-Dpu5VI6c.js}

@@ -1,4 +1,4 @@
-import { j as json } from './index.js-BQnOaW3H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
 import { r as readRuntimeConfigAdmin, g as getResolvedAopsServerRuntimeConfig } from './aops-runtime-config-CHpDUCdE.js';
 import { g as getAuthProvider } from './auth-provider-C07OUlnz.js';
 import { o as okResult } from './xf-result-BRDjvftr.js';

package/build/server/chunks/{_server.ts-De9ZrSV0.js → _server.ts-DxGF-jS0.js}

@@ -1,23 +1,26 @@
-import { j as json } from './index.js-BQnOaW3H.js';
-import { g as getAgentGateway } from './agent-gateway-runtime-C7Kvvy0H.js';
+import { j as json } from './index.js-CkBvZHgI.js';
+import { g as getAgentGateway } from './agent-gateway-runtime-DV-xLmJx.js';
 import { r as resolveRequestBaseUrl } from './request-base-url-zKJpVUv5.js';
 import { g as getAuthProvider, i as isTrustedLocalAuthProvider } from './auth-provider-C07OUlnz.js';
 import '@aopslabs/host-core';
 import '@aopslabs/manifest';
-import './registry-DO8ob5o1.js';
+import './registry-DIreA2IZ.js';
+import 'node:fs';
+import 'node:os';
 import 'node:path';
-import 'node:module';
 import 'node:url';
+import '@aopslabs/host-admission';
+import '@aopslabs/host-auth';
+import '@aopslabs/host-shell';
+import 'node:worker_threads';
+import '@aopslabs/artifact-trust-contracts';
 import './aops-runtime-config-CHpDUCdE.js';
-import 'node:fs';
 import 'pg';
-import 'node:worker_threads';
-import './admission-snapshot-C2wGfTWE.js';
-import 'node:crypto';
 import 'node:child_process';
+import 'node:module';
 import 'node:util';
 import './project-alias-BdnRxWft.js';
-import './canonical-text-order-DbXJJnFD.js';
+import 'node:crypto';
 import 'ajv';
 import 'zod';
 

package/build/server/chunks/{agent-gateway-runtime-C7Kvvy0H.js → agent-gateway-runtime-DV-xLmJx.js}

@@ -1,6 +1,6 @@
 import { dispatchDomainRequest } from '@aopslabs/host-core';
 import { buildAgentGatewayOpenApi, buildFederatedToolCatalog, validateManifest } from '@aopslabs/manifest';
-import { g as getHostConfig, d as checkHostDomainAdmission, f as resetHostPluginRegistry, e as getHostPluginRegistry } from './registry-DO8ob5o1.js';
+import { g as getHostConfig, a as getKernelRuntimeSnapshot, f as checkHostDomainAdmission, h as resetHostPluginRegistry, e as getHostPluginRegistry } from './registry-DIreA2IZ.js';
 import path from 'node:path';
 import { execFile } from 'node:child_process';
 import { createRequire } from 'node:module';
@@ -8,8 +8,7 @@ import { pathToFileURL } from 'node:url';
 import { promisify } from 'node:util';
 import { g as getLogger, h as hasProjectAliasValue } from './project-alias-BdnRxWft.js';
 import { createHash } from 'node:crypto';
-import { c as compareCanonicalText } from './canonical-text-order-DbXJJnFD.js';
-import './admission-snapshot-C2wGfTWE.js';
+import { compareCanonicalText } from '@aopslabs/artifact-trust-contracts';
 import Ajv from 'ajv';
 import { z } from 'zod';
 
@@ -2610,5 +2609,41 @@ function getAgentGatewayDiagnostics() {
     errorCount: 0
   };
 }
+function normalize(value) {
+  return String(value ?? "").trim().toLowerCase();
+}
+async function invokeKernelAgentTool(args) {
+  const catalogGateway = getAgentGateway();
+  const catalog = await catalogGateway.listTools();
+  const catalogTool = catalog.tools.find((tool) => normalize(tool.toolId) === normalize(args.toolId));
+  if (!catalogTool) throw new Error(`tool_not_found:${args.toolId}`);
+  const snapshot = await getKernelRuntimeSnapshot();
+  const plugin = snapshot.registry.get(normalize(catalogTool.domain));
+  if (!plugin) throw new Error(`domain_not_registered:${catalogTool.domain}`);
+  const route = plugin.manifest.routes.find(
+    (candidate) => normalize(candidate.operation) === normalize(catalogTool.operationId)
+  );
+  if (!route) {
+    throw new Error(`operation_route_not_found:${catalogTool.domain}:${catalogTool.operationId}`);
+  }
+  const routeId = normalize(route.id);
+  const kernelToolId = routeId.startsWith(`${normalize(catalogTool.domain)}.`) ? routeId : `${normalize(catalogTool.domain)}.${routeId}`;
+  const result = await snapshot.gateway.invokeTool({
+    toolId: kernelToolId,
+    envelope: args.envelope,
+    context: args.context,
+    ...args.requestHeaders ? { requestHeaders: args.requestHeaders } : {}
+  });
+  return {
+    tool: {
+      ...catalogTool,
+      sourceId: result.tool.sourceId,
+      sourceKind: "local-route"
+    },
+    status: result.status,
+    data: result.data,
+    ...result.headers ? { headers: result.headers } : {}
+  };
+}
 
-export { normalizeToolId as a, getAgentGatewayDiagnostics as b, getAgentGateway as g, normalizeDomain as n, resolveOperationKind as r };
+export { normalizeToolId as a, getAgentGatewayDiagnostics as b, getAgentGateway as g, invokeKernelAgentTool as i, normalizeDomain as n, resolveOperationKind as r };