@autonav/core 1.5.0 → 1.7.0

package/dist/harness/opencode-tools/query_navigator.ts

@@ -0,0 +1,126 @@
+/**
+ * query_navigator — OpenCode custom tool
+ *
+ * Queries another navigator by spawning an opencode subprocess.
+ * Cycle detection via AUTONAV_QUERY_DEPTH env var (max 3).
+ *
+ * Runs inside OpenCode's Bun runtime via .opencode/tools/.
+ */
+import { tool } from "@opencode-ai/plugin"
+import { execFileSync, type ExecFileSyncOptions } from "node:child_process"
+import { readFileSync, existsSync } from "node:fs"
+import { join, resolve } from "node:path"
+
+export default tool({
+  name: "query_navigator",
+  description:
+    "Ask another navigator a question. Use this when you need information from a different navigator's knowledge base. The target navigator will search its own knowledge and return an answer.",
+  args: {
+    navigator: tool.schema
+      .string()
+      .describe(
+        "Path to the target navigator directory (relative to cwd or absolute)",
+      ),
+    question: tool.schema
+      .string()
+      .describe("The question to ask the target navigator"),
+  },
+  async execute(input: { navigator: string; question: string }) {
+    const { navigator, question } = input
+
+    if (!navigator || !question) {
+      return JSON.stringify({
+        success: false,
+        error: "Missing required fields: navigator and question",
+      })
+    }
+
+    // Cycle detection
+    const depth = parseInt(process.env.AUTONAV_QUERY_DEPTH || "0", 10)
+    if (depth >= 3) {
+      return JSON.stringify({
+        success: false,
+        error:
+          "Query depth limit reached (max 3). Cannot query another navigator from this depth.",
+      })
+    }
+
+    const navPath = resolve(navigator)
+    if (!existsSync(navPath)) {
+      return JSON.stringify({
+        success: false,
+        error: `Navigator directory not found: ${navPath}`,
+      })
+    }
+
+    const configFile = join(navPath, "config.json")
+    if (!existsSync(configFile)) {
+      return JSON.stringify({
+        success: false,
+        error: "Navigator config.json not found.",
+      })
+    }
+
+    let navName = "unknown"
+    let instructionsPath = "CLAUDE.md"
+    try {
+      const config = JSON.parse(readFileSync(configFile, "utf-8"))
+      navName = config.name || "unknown"
+      instructionsPath = config.instructionsPath || "CLAUDE.md"
+    } catch {
+      return JSON.stringify({
+        success: false,
+        error: "Failed to parse navigator config.json",
+      })
+    }
+
+    const promptFile = join(navPath, instructionsPath)
+    if (!existsSync(promptFile)) {
+      return JSON.stringify({
+        success: false,
+        error: `Navigator instructions file not found: ${instructionsPath}`,
+      })
+    }
+
+    try {
+      const opts: ExecFileSyncOptions = {
+        timeout: 120_000,
+        env: {
+          ...process.env,
+          AUTONAV_QUERY_DEPTH: String(depth + 1),
+        },
+        encoding: "utf-8",
+      }
+
+      // Use opencode run for a one-shot query
+      const result = execFileSync(
+        "opencode",
+        ["run", "--dir", navPath, question],
+        opts,
+      )
+
+      const response = typeof result === "string" ? result.trim() : ""
+
+      if (response) {
+        return JSON.stringify({
+          success: true,
+          navigator: navName,
+          response,
+        })
+      } else {
+        return JSON.stringify({
+          success: false,
+          navigator: navName,
+          error: "Navigator returned empty response.",
+        })
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err)
+      return JSON.stringify({
+        success: false,
+        navigator: navName,
+        error: `Query failed: ${msg}`,
+      })
+    }
+  },
+})

package/dist/harness/opencode-tools/submit_answer.ts

@@ -0,0 +1,40 @@
+/**
+ * submit_answer — OpenCode custom tool
+ *
+ * Provides the submit_answer tool so the LLM can return structured responses
+ * with source citations. The NavigatorAdapter intercepts the tool_use event
+ * from the event stream — this tool just needs to exist and return success.
+ *
+ * Runs inside OpenCode's Bun runtime via .opencode/tools/.
+ */
+import { tool } from "@opencode-ai/plugin"
+
+export default tool({
+  name: "submit_answer",
+  description:
+    "Submit your final answer. You MUST use this tool to provide your response with proper source citations.",
+  args: {
+    answer: tool.schema
+      .string()
+      .describe("Your complete answer grounded in the knowledge base."),
+    sources: tool.schema
+      .string()
+      .describe(
+        'JSON array of source citations from the knowledge base. Each with "file", "section", "relevance".',
+      ),
+    confidence: tool.schema
+      .number()
+      .describe(
+        "Confidence score from 0.0 (no confidence) to 1.0 (fully confident). 0.9+ = high, 0.45-0.89 = medium, below 0.45 = low.",
+      ),
+    confidenceReason: tool.schema
+      .string()
+      .describe("Brief explanation of your confidence level."),
+    outOfDomain: tool.schema
+      .boolean()
+      .describe("Whether the question is outside your knowledge domain."),
+  },
+  async execute() {
+    return "Answer submitted successfully."
+  },
+})

package/dist/harness/opencode-tools/update_plugin_config.ts

@@ -0,0 +1,105 @@
+/**
+ * update_plugin_config — OpenCode custom tool
+ *
+ * Reads plugins.json, merges updates into a plugin's config section,
+ * and writes back. Requires AUTONAV_PLUGINS_PATH.
+ *
+ * Runs inside OpenCode's Bun runtime via .opencode/tools/.
+ */
+import { tool } from "@opencode-ai/plugin"
+import { readFileSync, writeFileSync, existsSync } from "node:fs"
+
+export default tool({
+  name: "update_plugin_config",
+  description:
+    "Update your own plugin configuration. Use this to schedule check-ins, change notification settings, enable/disable plugins, update channel preferences, or modify any plugin behavior.",
+  args: {
+    plugin: tool.schema
+      .string()
+      .describe(
+        'The plugin to configure ("slack", "signal", "github", "email")',
+      ),
+    updates: tool.schema
+      .string()
+      .describe(
+        "JSON object of config key-value pairs to merge into the plugin's config section",
+      ),
+    reason: tool.schema
+      .string()
+      .describe("Brief explanation of why you're making this change"),
+  },
+  async execute(input: { plugin: string; updates: string; reason: string }) {
+    const { plugin, reason } = input
+
+    let updates: Record<string, unknown>
+    try {
+      updates = JSON.parse(input.updates)
+    } catch {
+      return JSON.stringify({
+        success: false,
+        error: "Invalid JSON in updates field",
+      })
+    }
+
+    if (!plugin || !updates || !reason) {
+      return JSON.stringify({
+        success: false,
+        error: "Missing required fields: plugin, updates, and reason",
+      })
+    }
+
+    const validPlugins = ["slack", "signal", "github", "email"]
+    if (!validPlugins.includes(plugin)) {
+      return JSON.stringify({
+        success: false,
+        error: `Unknown plugin: ${plugin}. Valid: ${validPlugins.join(", ")}`,
+      })
+    }
+
+    const configPath = process.env.AUTONAV_PLUGINS_PATH
+    if (!configPath) {
+      return JSON.stringify({
+        success: false,
+        error: "AUTONAV_PLUGINS_PATH not set. Plugin configuration unavailable.",
+      })
+    }
+
+    if (!existsSync(configPath)) {
+      return JSON.stringify({
+        success: false,
+        error: "Plugin configuration file not found.",
+      })
+    }
+
+    try {
+      const current = JSON.parse(readFileSync(configPath, "utf-8"))
+
+      // Ensure plugin section exists
+      if (!current[plugin]) {
+        current[plugin] = { enabled: false, config: {} }
+      }
+      if (!current[plugin].config) {
+        current[plugin].config = {}
+      }
+
+      // Merge updates into the plugin's config section
+      Object.assign(current[plugin].config, updates)
+
+      // Write back
+      writeFileSync(configPath, JSON.stringify(current, null, 2) + "\n")
+
+      return JSON.stringify({
+        success: true,
+        plugin,
+        message: `Updated ${plugin} config: ${reason}`,
+        changes: updates,
+      })
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err)
+      return JSON.stringify({
+        success: false,
+        error: `Failed to update plugin config: ${msg}`,
+      })
+    }
+  },
+})

package/dist/harness/sandbox.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Sandbox Utility (nono)
+ *
+ * Wraps subprocess commands with nono.sh for kernel-enforced sandboxing
+ * (Landlock on Linux, Seatbelt on macOS). Used by ChibiHarness to sandbox
+ * chibi-json subprocesses.
+ *
+ * ClaudeCodeHarness uses the SDK's built-in sandbox instead (also
+ * Seatbelt/bubblewrap). Both harnesses read from AgentConfig.sandbox —
+ * callers never need to know which mechanism is active.
+ *
+ * Per-operation sandbox profiles:
+ *   - query: read-only access to navigator directory
+ *   - update: read+write access to navigator directory
+ *   - chat/standup: configured per-operation (default: enabled)
+ *   - memento: default disabled (worker needs full code access)
+ *
+ * Note: blockNetwork should NOT be used with harnesses that make their
+ * own API calls (chibi). It's only useful for scenarios where the API
+ * connection is managed in-process.
+ *
+ * Falls back gracefully when nono is not installed — the process runs
+ * without sandboxing.
+ */
+import type { SandboxConfig } from "./types.js";
+/**
+ * Check if nono is available on PATH (result is cached).
+ */
+export declare function isNonoAvailable(): boolean;
+/**
+ * Resolve whether sandboxing should be active for this session.
+ *
+ * Priority:
+ *   1. config.enabled (explicit opt-in/out)
+ *   2. AUTONAV_SANDBOX env var ("0" to disable)
+ *   3. Auto-detect nono on PATH
+ */
+export declare function isSandboxEnabled(config?: SandboxConfig): boolean;
+/**
+ * Build nono CLI arguments for a given sandbox config.
+ *
+ * Returns the full argument list: ["run", "--silent", ...flags, "--"]
+ * Returns empty array if sandbox is disabled.
+ */
+export declare function buildSandboxArgs(config: SandboxConfig): string[];
+/**
+ * Wrap a command with nono sandbox if enabled.
+ *
+ * If sandboxing is active:
+ *   { command: "nono", args: ["run", ...flags, "--", originalCommand, ...originalArgs] }
+ *
+ * If disabled:
+ *   { command: originalCommand, args: originalArgs } (passthrough)
+ */
+export declare function wrapCommand(command: string, args: string[], config?: SandboxConfig): {
+    command: string;
+    args: string[];
+};
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/harness/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/harness/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAgBzC;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAahE;AA4BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAmChE;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,CAAC,EAAE,aAAa,GACrB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAcrC"}

package/dist/harness/sandbox.js

@@ -0,0 +1,152 @@
+/**
+ * Sandbox Utility (nono)
+ *
+ * Wraps subprocess commands with nono.sh for kernel-enforced sandboxing
+ * (Landlock on Linux, Seatbelt on macOS). Used by ChibiHarness to sandbox
+ * chibi-json subprocesses.
+ *
+ * ClaudeCodeHarness uses the SDK's built-in sandbox instead (also
+ * Seatbelt/bubblewrap). Both harnesses read from AgentConfig.sandbox —
+ * callers never need to know which mechanism is active.
+ *
+ * Per-operation sandbox profiles:
+ *   - query: read-only access to navigator directory
+ *   - update: read+write access to navigator directory
+ *   - chat/standup: configured per-operation (default: enabled)
+ *   - memento: default disabled (worker needs full code access)
+ *
+ * Note: blockNetwork should NOT be used with harnesses that make their
+ * own API calls (chibi). It's only useful for scenarios where the API
+ * connection is managed in-process.
+ *
+ * Falls back gracefully when nono is not installed — the process runs
+ * without sandboxing.
+ */
+import { execFileSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as os from "node:os";
+let nonoAvailableCache = null;
+/**
+ * Check if nono is available on PATH (result is cached).
+ */
+export function isNonoAvailable() {
+    if (nonoAvailableCache !== null) {
+        return nonoAvailableCache;
+    }
+    try {
+        execFileSync("nono", ["--version"], {
+            stdio: ["ignore", "ignore", "ignore"],
+            timeout: 3_000,
+        });
+        nonoAvailableCache = true;
+    }
+    catch {
+        nonoAvailableCache = false;
+    }
+    return nonoAvailableCache;
+}
+/**
+ * Resolve whether sandboxing should be active for this session.
+ *
+ * Priority:
+ *   1. config.enabled (explicit opt-in/out)
+ *   2. AUTONAV_SANDBOX env var ("0" to disable)
+ *   3. Auto-detect nono on PATH
+ */
+export function isSandboxEnabled(config) {
+    // Explicit config takes priority
+    if (config?.enabled !== undefined) {
+        return config.enabled && isNonoAvailable();
+    }
+    // Env var override
+    if (process.env.AUTONAV_SANDBOX === "0") {
+        return false;
+    }
+    // Auto-detect
+    return isNonoAvailable();
+}
+/**
+ * System paths needed for sandboxed subprocesses to execute shell scripts
+ * and common tools. Without these, plugin scripts can't run bash/jq/etc.
+ */
+function getSystemReadPaths() {
+    const paths = [];
+    if (os.platform() === "darwin") {
+        // macOS system binaries and libraries
+        for (const p of ["/bin", "/usr/bin", "/usr/lib", "/usr/libexec"]) {
+            if (fs.existsSync(p))
+                paths.push(p);
+        }
+        // Homebrew (Apple Silicon and Intel)
+        for (const p of ["/opt/homebrew", "/usr/local"]) {
+            if (fs.existsSync(p))
+                paths.push(p);
+        }
+    }
+    else {
+        // Linux system paths
+        for (const p of ["/bin", "/usr/bin", "/usr/lib", "/usr/lib64", "/lib", "/lib64"]) {
+            if (fs.existsSync(p))
+                paths.push(p);
+        }
+    }
+    return paths;
+}
+/**
+ * Build nono CLI arguments for a given sandbox config.
+ *
+ * Returns the full argument list: ["run", "--silent", ...flags, "--"]
+ * Returns empty array if sandbox is disabled.
+ */
+export function buildSandboxArgs(config) {
+    if (!isSandboxEnabled(config)) {
+        return [];
+    }
+    const args = ["run", "--silent", "--allow-cwd"];
+    // System binary paths (read-only) — needed for plugin script execution
+    for (const p of getSystemReadPaths()) {
+        args.push("--read", p);
+    }
+    // Read-only paths
+    if (config.readPaths) {
+        for (const p of config.readPaths) {
+            args.push("--read", p);
+        }
+    }
+    // Read+write paths
+    if (config.writePaths) {
+        for (const p of config.writePaths) {
+            args.push("--allow", p);
+        }
+    }
+    // Network blocking
+    if (config.blockNetwork) {
+        args.push("--net-block");
+    }
+    // Separator between nono args and the wrapped command
+    args.push("--");
+    return args;
+}
+/**
+ * Wrap a command with nono sandbox if enabled.
+ *
+ * If sandboxing is active:
+ *   { command: "nono", args: ["run", ...flags, "--", originalCommand, ...originalArgs] }
+ *
+ * If disabled:
+ *   { command: originalCommand, args: originalArgs } (passthrough)
+ */
+export function wrapCommand(command, args, config) {
+    if (!config || !isSandboxEnabled(config)) {
+        return { command, args };
+    }
+    const sandboxArgs = buildSandboxArgs(config);
+    if (sandboxArgs.length === 0) {
+        return { command, args };
+    }
+    return {
+        command: "nono",
+        args: [...sandboxArgs, command, ...args],
+    };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/harness/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/harness/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,IAAI,kBAAkB,GAAmB,IAAI,CAAC;AAE9C;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;YAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACrC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,kBAAkB,GAAG,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,iCAAiC;IACjC,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;IAC7C,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,cAAc;IACd,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC/B,sCAAsC;QACtC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;YACjE,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,qCAAqC;QACrC,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,CAAC;YAChD,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjF,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAEhD,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEhB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAAc,EACd,MAAsB;IAEtB,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,GAAG,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/harness/tool-server.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Tool Server Abstraction
+ *
+ * Defines harness-agnostic tool types and a pure data constructor.
+ * Each harness implementation adapts these definitions to its native
+ * tool hosting mechanism (SDK MCP servers, chibi JSONL, etc.).
+ *
+ * Key design: `defineTool()` creates a plain data object with no SDK
+ * dependency. The handler closure runs in-process regardless of harness,
+ * so closure-based data capture (the "stop hook" pattern) works identically.
+ */
+import type { z } from "zod";
+/**
+ * Result returned by a tool handler.
+ *
+ * Matches the MCP tool result format used by Claude Agent SDK.
+ */
+export interface ToolResult {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError: boolean;
+}
+/**
+ * A harness-agnostic tool definition.
+ *
+ * Pure data — no runtime dependency. Each harness converts these
+ * into its native tool format via `createToolServer()`.
+ */
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: z.ZodRawShape;
+    handler: (args: any) => Promise<ToolResult>;
+}
+/**
+ * Create a tool definition (pure data constructor).
+ *
+ * Drop-in replacement for SDK's `tool()` — same argument signature,
+ * but returns a plain object instead of an SDK-specific tool.
+ *
+ * @param name - Tool name (e.g. "submit_answer")
+ * @param description - Tool description shown to the agent
+ * @param inputSchema - Zod shape defining the tool's input parameters
+ * @param handler - Async function that processes tool calls
+ * @returns A ToolDefinition object
+ */
+export declare function defineTool<T extends z.ZodRawShape>(name: string, description: string, inputSchema: T, handler: (args: z.infer<z.ZodObject<T>>) => Promise<ToolResult>): ToolDefinition;
+//# sourceMappingURL=tool-server.d.ts.map

package/dist/harness/tool-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-server.d.ts","sourceRoot":"","sources":["../../src/harness/tool-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC;IAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAChD,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,CAAC,EACd,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,GAC9D,cAAc,CAEhB"}

package/dist/harness/tool-server.js

@@ -0,0 +1,27 @@
+/**
+ * Tool Server Abstraction
+ *
+ * Defines harness-agnostic tool types and a pure data constructor.
+ * Each harness implementation adapts these definitions to its native
+ * tool hosting mechanism (SDK MCP servers, chibi JSONL, etc.).
+ *
+ * Key design: `defineTool()` creates a plain data object with no SDK
+ * dependency. The handler closure runs in-process regardless of harness,
+ * so closure-based data capture (the "stop hook" pattern) works identically.
+ */
+/**
+ * Create a tool definition (pure data constructor).
+ *
+ * Drop-in replacement for SDK's `tool()` — same argument signature,
+ * but returns a plain object instead of an SDK-specific tool.
+ *
+ * @param name - Tool name (e.g. "submit_answer")
+ * @param description - Tool description shown to the agent
+ * @param inputSchema - Zod shape defining the tool's input parameters
+ * @param handler - Async function that processes tool calls
+ * @returns A ToolDefinition object
+ */
+export function defineTool(name, description, inputSchema, handler) {
+    return { name, description, inputSchema, handler };
+}
+//# sourceMappingURL=tool-server.js.map

package/dist/harness/tool-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-server.js","sourceRoot":"","sources":["../../src/harness/tool-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,WAAc,EACd,OAA+D;IAE/D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC"}