@davidorex/pi-agent-dispatch 0.28.0

package/dist/author-tool-grant-tool.d.ts

@@ -0,0 +1,47 @@
+/**
+ * author-tool-grant Pi tool — writes config.tool_operations[] /
+ * config.tool_operations_forbidden[] entries. Capability authoring is
+ * human-authorized via the auth-gate confirm at the pi-dispatch layer:
+ * the agent may issue the call, the operator authorizes at the terminal,
+ * and the auth-gate stamps event.input.writer with the verified terminal-
+ * operator identity before the body runs.
+ *
+ * Two-arm target: `tool_operations` (the grant registry) or
+ * `tool_operations_forbidden` (the L5 project-forbidden list). Both arms
+ * refuse FORBIDDEN_WHOLESALE_OPERATIONS L1 tokens — for `tool_operations`
+ * we refuse entries whose canonical_id IS a wholesale token (the canon
+ * we're protecting); for `tool_operations_forbidden` we refuse keys
+ * already in L1 (no-op + clarity — they're framework-forbidden so
+ * adding them to L5 is redundant).
+ *
+ * Dispatches to amendConfigEntry from pi-context.
+ */
+import { Type } from "@earendil-works/pi-ai";
+import type { AgentToolResult, AgentToolUpdateCallback, ExtensionContext } from "@earendil-works/pi-coding-agent";
+export declare const authorToolGrantTool: {
+    name: string;
+    label: string;
+    description: string;
+    promptSnippet: string;
+    parameters: Type.TObject<{
+        target: Type.TUnion<[Type.TLiteral<"tool_operations">, Type.TLiteral<"tool_operations_forbidden">]>;
+        operation: Type.TUnion<[Type.TLiteral<"add">, Type.TLiteral<"remove">]>;
+        key: Type.TString;
+        entry: Type.TOptional<Type.TUnknown>;
+        writer: Type.TObject<{
+            kind: Type.TString;
+            user: Type.TString;
+        }>;
+    }>;
+    execute(_toolCallId: string, params: {
+        target: "tool_operations" | "tool_operations_forbidden";
+        operation: "add" | "remove";
+        key: string;
+        entry?: unknown;
+        writer: {
+            kind: string;
+            user: string;
+        };
+    }, _signal: AbortSignal, _onUpdate: AgentToolUpdateCallback, ctx: ExtensionContext): Promise<AgentToolResult<undefined>>;
+};
+//# sourceMappingURL=author-tool-grant-tool.d.ts.map

package/dist/author-tool-grant-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"author-tool-grant-tool.d.ts","sourceRoot":"","sources":["../src/author-tool-grant-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGlH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;yBAwCjB,MAAM,UACX;QACP,MAAM,EAAE,iBAAiB,GAAG,2BAA2B,CAAC;QACxD,SAAS,EAAE,KAAK,GAAG,QAAQ,CAAC;QAC5B,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KACvC,WACQ,WAAW,aACT,uBAAuB,OAC7B,gBAAgB,GACnB,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;CAmDtC,CAAC"}

package/dist/author-tool-grant-tool.js

@@ -0,0 +1,87 @@
+/**
+ * author-tool-grant Pi tool — writes config.tool_operations[] /
+ * config.tool_operations_forbidden[] entries. Capability authoring is
+ * human-authorized via the auth-gate confirm at the pi-dispatch layer:
+ * the agent may issue the call, the operator authorizes at the terminal,
+ * and the auth-gate stamps event.input.writer with the verified terminal-
+ * operator identity before the body runs.
+ *
+ * Two-arm target: `tool_operations` (the grant registry) or
+ * `tool_operations_forbidden` (the L5 project-forbidden list). Both arms
+ * refuse FORBIDDEN_WHOLESALE_OPERATIONS L1 tokens — for `tool_operations`
+ * we refuse entries whose canonical_id IS a wholesale token (the canon
+ * we're protecting); for `tool_operations_forbidden` we refuse keys
+ * already in L1 (no-op + clarity — they're framework-forbidden so
+ * adding them to L5 is redundant).
+ *
+ * Dispatches to amendConfigEntry from pi-context.
+ */
+import { amendConfigEntry } from "@davidorex/pi-context/context";
+import { Type } from "@earendil-works/pi-ai";
+import { FORBIDDEN_WHOLESALE_OPERATIONS } from "./operation-vocab.js";
+export const authorToolGrantTool = {
+    name: "author-tool-grant",
+    label: "Author Tool Grant",
+    description: "Add or remove an entry in config.tool_operations[] or config.tool_operations_forbidden[]. Requires user authorization via interactive confirmation at the pi-dispatch auth-gate; on confirm, the verified terminal-operator identity is stamped as writer. Refuses any attempt to register a framework-forbidden wholesale token.",
+    promptSnippet: "Author a config tool-grant entry (operation registration or project-forbidden token).",
+    parameters: Type.Object({
+        target: Type.Union([Type.Literal("tool_operations"), Type.Literal("tool_operations_forbidden")], {
+            description: "Which config registry to mutate.",
+        }),
+        operation: Type.Union([Type.Literal("add"), Type.Literal("remove")], {
+            description: "amendConfigEntry operation.",
+        }),
+        key: Type.String({
+            description: "For tool_operations: the canonical_id (must match entry.canonical_id). For tool_operations_forbidden: the token string.",
+        }),
+        entry: Type.Optional(Type.Unknown({
+            description: "ToolOperationDecl object — required for target=tool_operations + operation=add.",
+        })),
+        writer: Type.Object({
+            kind: Type.String({
+                description: "Writer kind discriminator (human / agent / monitor / workflow). The pi-dispatch auth-gate overrides this with 'human' on confirm when a verified terminal-operator identity is discoverable.",
+            }),
+            user: Type.String({
+                description: "Writer identity (e.g. 'davidryan@gmail.com'). Overwritten by the auth-gate with the verified terminal-operator identity when one is discoverable on confirm=true.",
+            }),
+        }, {
+            description: "DispatchContext.writer payload; see pi-context/src/dispatch-context.ts for the discriminated union.",
+        }),
+    }),
+    async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+        // Identity check has moved to the pi-dispatch auth-gate
+        // (pi.on('tool_call') handler in this same package). By the time
+        // the execute body runs, the auth-gate has already prompted the
+        // operator and — on confirm=true with a verifiable identity —
+        // stamped event.input.writer with the verified terminal-operator
+        // identity. The body trusts the writer field as-is.
+        if (!params.writer?.user) {
+            throw new Error("author-tool-grant: writer.user is required.");
+        }
+        const forbidden = FORBIDDEN_WHOLESALE_OPERATIONS;
+        if (params.target === "tool_operations" && params.operation === "add") {
+            const entryObj = (params.entry ?? {});
+            const canonicalId = entryObj.canonical_id ?? params.key;
+            if (forbidden.includes(canonicalId)) {
+                throw new Error(`author-tool-grant: refusing to register forbidden wholesale token '${canonicalId}' in tool_operations (L1 framework canon; source change + release required to alter).`);
+            }
+        }
+        if (params.target === "tool_operations_forbidden" && forbidden.includes(params.key)) {
+            throw new Error(`author-tool-grant: token '${params.key}' is already in L1 framework FORBIDDEN_WHOLESALE_OPERATIONS — adding to L5 project list is redundant.`);
+        }
+        const dispatchCtx = {
+            writer: { kind: "human", user: params.writer.user },
+        };
+        amendConfigEntry(ctx.cwd, params.target, params.operation, params.key, params.entry, dispatchCtx);
+        return {
+            details: undefined,
+            content: [
+                {
+                    type: "text",
+                    text: `${params.operation} ${params.target}[${params.key}] (writer=human:${params.writer.user})`,
+                },
+            ],
+        };
+    },
+};
+//# sourceMappingURL=author-tool-grant-tool.js.map

package/dist/author-tool-grant-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"author-tool-grant-tool.js","sourceRoot":"","sources":["../src/author-tool-grant-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EACV,mUAAmU;IACpU,aAAa,EAAE,uFAAuF;IACtG,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,EAAE;YAChG,WAAW,EAAE,kCAAkC;SAC/C,CAAC;QACF,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE;YACpE,WAAW,EAAE,6BAA6B;SAC1C,CAAC;QACF,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,WAAW,EACV,yHAAyH;SAC1H,CAAC;QACF,KAAK,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,OAAO,CAAC;YACZ,WAAW,EAAE,iFAAiF;SAC9F,CAAC,CACF;QACD,MAAM,EAAE,IAAI,CAAC,MAAM,CAClB;YACC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBACjB,WAAW,EACV,8LAA8L;aAC/L,CAAC;YACF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBACjB,WAAW,EACV,mKAAmK;aACpK,CAAC;SACF,EACD;YACC,WAAW,EACV,qGAAqG;SACtG,CACD;KACD,CAAC;IACF,KAAK,CAAC,OAAO,CACZ,WAAmB,EACnB,MAMC,EACD,OAAoB,EACpB,SAAkC,EAClC,GAAqB;QAErB,wDAAwD;QACxD,iEAAiE;QACjE,gEAAgE;QAChE,8DAA8D;QAC9D,iEAAiE;QACjE,oDAAoD;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,SAAS,GAAG,8BAAmD,CAAC;QAEtE,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAA8B,CAAC;YACnE,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,GAAG,CAAC;YACxD,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACd,sEAAsE,WAAW,uFAAuF,CACxK,CAAC;YACH,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,2BAA2B,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CACd,6BAA6B,MAAM,CAAC,GAAG,uGAAuG,CAC9I,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAoB;YACpC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;SACnD,CAAC;QACF,gBAAgB,CACf,GAAG,CAAC,GAAG,EACP,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,KAA4C,EACnD,WAAW,CACX,CAAC;QAEF,OAAO;YACN,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,mBAAmB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG;iBAChG;aACD;SACD,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/call-agent-tool.d.ts

@@ -0,0 +1,42 @@
+/**
+ * call-agent Pi tool — the in-pi sub-agent agent-as-tool registration site
+ * (FEAT-004, per narrowed DEC-0044). Loads spec via jit-agents library,
+ * compiles with input + ctx, composes grant (parentGrant ∩ requestedGrant
+ * per FEAT-005), invokes executeAgent (TASK-081 clamp enforces at
+ * dispatch boundary). Returns the typed result.
+ */
+import type { CompiledAgent, DispatchContext, JitAgentResult } from "@davidorex/pi-jit-agents/types";
+import { Type } from "@earendil-works/pi-ai";
+import type { AgentToolResult, AgentToolUpdateCallback, ExtensionContext } from "@earendil-works/pi-coding-agent";
+/**
+ * Internal indirection for test-time interception of the executeAgent
+ * dispatch. Production code path never reassigns this. Tests swap via
+ * `_internals.executeAgent = (...) => mockResult` and restore after.
+ * This is a deliberate seam — restructuring the tool to thread a
+ * dependency through every call site would invert the public API for
+ * a test-only need.
+ */
+export declare const _internals: {
+    executeAgent: (c: CompiledAgent, d: DispatchContext) => Promise<JitAgentResult>;
+};
+export declare const callAgentTool: {
+    name: string;
+    label: string;
+    description: string;
+    promptSnippet: string;
+    parameters: Type.TObject<{
+        spec_name: Type.TString;
+        input: Type.TUnknown;
+        parent_grant: Type.TOptional<Type.TArray<Type.TString>>;
+        requested_grant: Type.TOptional<Type.TArray<Type.TString>>;
+        max_tokens: Type.TOptional<Type.TNumber>;
+    }>;
+    execute(_toolCallId: string, params: {
+        spec_name: string;
+        input: unknown;
+        parent_grant?: string[];
+        requested_grant?: string[];
+        max_tokens?: number;
+    }, signal: AbortSignal, _onUpdate: AgentToolUpdateCallback, ctx: ExtensionContext): Promise<AgentToolResult<JitAgentResult>>;
+};
+//# sourceMappingURL=call-agent-tool.d.ts.map

package/dist/call-agent-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-agent-tool.d.ts","sourceRoot":"","sources":["../src/call-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErG,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AASlH;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE;IAAE,YAAY,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;CAEzG,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;yBAuBX,MAAM,UACX;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,UACO,WAAW,aACR,uBAAuB,OAC7B,gBAAgB,GACnB,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;CAgD3C,CAAC"}

package/dist/call-agent-tool.js

@@ -0,0 +1,90 @@
+/**
+ * call-agent Pi tool — the in-pi sub-agent agent-as-tool registration site
+ * (FEAT-004, per narrowed DEC-0044). Loads spec via jit-agents library,
+ * compiles with input + ctx, composes grant (parentGrant ∩ requestedGrant
+ * per FEAT-005), invokes executeAgent (TASK-081 clamp enforces at
+ * dispatch boundary). Returns the typed result.
+ */
+import { createAgentLoader } from "@davidorex/pi-jit-agents/agent-spec";
+import { compileAgent } from "@davidorex/pi-jit-agents/compile";
+import { executeAgent as canonicalExecuteAgent } from "@davidorex/pi-jit-agents/runtime";
+import { createTemplateEnv } from "@davidorex/pi-jit-agents/template";
+import { Type } from "@earendil-works/pi-ai";
+import { composeToolGrant } from "./capability-composer.js";
+function parseModelSpec(spec) {
+    const slashIndex = spec.indexOf("/");
+    if (slashIndex !== -1)
+        return { provider: spec.slice(0, slashIndex), modelId: spec.slice(slashIndex + 1) };
+    return { provider: "anthropic", modelId: spec };
+}
+/**
+ * Internal indirection for test-time interception of the executeAgent
+ * dispatch. Production code path never reassigns this. Tests swap via
+ * `_internals.executeAgent = (...) => mockResult` and restore after.
+ * This is a deliberate seam — restructuring the tool to thread a
+ * dependency through every call site would invert the public API for
+ * a test-only need.
+ */
+export const _internals = {
+    executeAgent: canonicalExecuteAgent,
+};
+export const callAgentTool = {
+    name: "call-agent",
+    label: "Call Agent",
+    description: "Dispatch a privileged JIT-agent as a typed tool call. Loads the named .agent.yaml, compiles with input, composes the tool grant (intersection of caller's parentGrant and the agent's requestedGrant), and executes via pi-jit-agents executeAgent (clamp enforces child ⊆ parent at dispatch boundary).",
+    promptSnippet: "Dispatch a typed sub-agent with scoped capability grant.",
+    parameters: Type.Object({
+        spec_name: Type.String({
+            description: "Name of the agent spec to load (resolves to <name>.agent.yaml in the agents tier).",
+        }),
+        input: Type.Unknown({ description: "Typed input passed to the agent's compileAgent context." }),
+        parent_grant: Type.Optional(Type.Array(Type.String(), { description: "The caller's own tool grant. Default-empty." })),
+        requested_grant: Type.Optional(Type.Array(Type.String(), {
+            description: "The grant requested for the dispatched sub-agent. Will be clamped to the intersection with parent_grant.",
+        })),
+        max_tokens: Type.Optional(Type.Number({ description: "Max tokens for the LLM call. Defaults to 1024." })),
+    }),
+    async execute(_toolCallId, params, signal, _onUpdate, ctx) {
+        // 1. Load spec via jit-agents canonical loader
+        const loadAgent = createAgentLoader({ cwd: ctx.cwd });
+        const spec = loadAgent(params.spec_name);
+        // 2. Compile spec with input
+        const env = createTemplateEnv({ cwd: ctx.cwd });
+        const compiled = compileAgent(spec, { env, input: params.input, cwd: ctx.cwd });
+        // 3. Resolve model + auth via ExtensionContext.modelRegistry
+        const modelSpec = compiled.model ?? spec.model;
+        if (!modelSpec) {
+            throw new Error(`call-agent: agent '${params.spec_name}' has no model specified.`);
+        }
+        const { provider, modelId } = parseModelSpec(modelSpec);
+        const model = ctx.modelRegistry.find(provider, modelId);
+        if (!model) {
+            throw new Error(`call-agent: model '${modelSpec}' not found in modelRegistry for agent '${params.spec_name}'.`);
+        }
+        const auth = await ctx.modelRegistry.getApiKeyAndHeaders(model);
+        if (!auth.ok) {
+            throw new Error(`call-agent: auth resolution failed for '${modelSpec}': ${auth.error}`);
+        }
+        // 4. Compose grant (FEAT-005): intersect parent_grant ∩ requested_grant
+        const composedGrant = composeToolGrant(params.parent_grant, params.requested_grant);
+        // 5. Build DispatchContext + dispatch (TASK-081 clamp enforces at executeAgent boundary)
+        const dispatch = {
+            model: model,
+            auth: { apiKey: auth.apiKey ?? "", headers: auth.headers ?? {} },
+            parentGrant: composedGrant,
+            maxTokens: params.max_tokens ?? 1024,
+            signal,
+        };
+        const result = await _internals.executeAgent(compiled, dispatch);
+        return {
+            details: result,
+            content: [
+                {
+                    type: "text",
+                    text: `Dispatched agent '${params.spec_name}' (grant=[${composedGrant.join(", ")}]); result.output type=${typeof result.output}`,
+                },
+            ],
+        };
+    },
+};
+//# sourceMappingURL=call-agent-tool.js.map

package/dist/call-agent-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-agent-tool.js","sourceRoot":"","sources":["../src/call-agent-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,YAAY,IAAI,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAGtE,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;IAC3G,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwF;IAC9G,YAAY,EAAE,qBAAqB;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACV,0SAA0S;IAC3S,aAAa,EAAE,0DAA0D;IACzE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,oFAAoF;SACjG,CAAC;QACF,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;QAC/F,YAAY,EAAE,IAAI,CAAC,QAAQ,CAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC,CACzF;QACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;YACzB,WAAW,EACV,0GAA0G;SAC3G,CAAC,CACF;QACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,CAAC;KACzG,CAAC;IACF,KAAK,CAAC,OAAO,CACZ,WAAmB,EACnB,MAMC,EACD,MAAmB,EACnB,SAAkC,EAClC,GAAqB;QAErB,+CAA+C;QAC/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzC,6BAA6B;QAC7B,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAEhF,6DAA6D;QAC7D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,SAAS,2BAA2B,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,2CAA2C,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,wEAAwE;QACxE,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEpF,yFAAyF;QACzF,MAAM,QAAQ,GAAoB;YACjC,KAAK,EAAE,KAAmB;YAC1B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;YAChE,WAAW,EAAE,aAAa;YAC1B,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACpC,MAAM;SACN,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEjE,OAAO;YACN,OAAO,EAAE,MAAM;YACf,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,qBAAqB,MAAM,CAAC,SAAS,aAAa,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,OAAO,MAAM,CAAC,MAAM,EAAE;iBAChI;aACD;SACD,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/capability-composer.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Capability composition (FEAT-005). Composes a child grant from a parent
+ * grant and a requested grant by intersection — DEC-0047 clamp semantics.
+ * The TASK-081 executeAgent boundary enforces compiled.tools ⊆ parentGrant;
+ * composeToolGrant prepares the parentGrant passed to that boundary so the
+ * child can never exceed what the parent itself was granted.
+ */
+import { type OperationDescriptor } from "./operation-vocab.js";
+export declare function composeToolGrant(parentGrant: string[] | undefined, requestedGrant: string[] | undefined): string[];
+export declare function resolveOperationVocabulary(cwd: string): Record<string, OperationDescriptor>;
+//# sourceMappingURL=capability-composer.d.ts.map

package/dist/capability-composer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-composer.d.ts","sourceRoot":"","sources":["../src/capability-composer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,KAAK,mBAAmB,EAA2B,MAAM,sBAAsB,CAAC;AAEzF,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAIlH;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAa3F"}

package/dist/capability-composer.js

@@ -0,0 +1,35 @@
+/**
+ * Capability composition (FEAT-005). Composes a child grant from a parent
+ * grant and a requested grant by intersection — DEC-0047 clamp semantics.
+ * The TASK-081 executeAgent boundary enforces compiled.tools ⊆ parentGrant;
+ * composeToolGrant prepares the parentGrant passed to that boundary so the
+ * child can never exceed what the parent itself was granted.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { tryResolveContextDir } from "@davidorex/pi-context/context-dir";
+import { TOOL_OPERATION_DEFAULTS } from "./operation-vocab.js";
+export function composeToolGrant(parentGrant, requestedGrant) {
+    const parent = new Set(parentGrant ?? []);
+    const requested = requestedGrant ?? [];
+    return requested.filter((op) => parent.has(op));
+}
+export function resolveOperationVocabulary(cwd) {
+    const root = tryResolveContextDir(cwd);
+    if (root === null)
+        return { ...TOOL_OPERATION_DEFAULTS };
+    const configPath = path.join(root, "config.json");
+    if (!fs.existsSync(configPath))
+        return { ...TOOL_OPERATION_DEFAULTS };
+    try {
+        const cfg = JSON.parse(fs.readFileSync(configPath, "utf8"));
+        const overrides = {};
+        for (const entry of cfg.tool_operations ?? [])
+            overrides[entry.canonical_id] = entry;
+        return { ...TOOL_OPERATION_DEFAULTS, ...overrides };
+    }
+    catch {
+        return { ...TOOL_OPERATION_DEFAULTS };
+    }
+}
+//# sourceMappingURL=capability-composer.js.map

package/dist/capability-composer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-composer.js","sourceRoot":"","sources":["../src/capability-composer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAA4B,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEzF,MAAM,UAAU,gBAAgB,CAAC,WAAiC,EAAE,cAAoC;IACvG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,cAAc,IAAI,EAAE,CAAC;IACvC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACtE,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAgD,CAAC;QAC3G,MAAM,SAAS,GAAwC,EAAE,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE;YAAE,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;QACrF,OAAO,EAAE,GAAG,uBAAuB,EAAE,GAAG,SAAS,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACvC,CAAC;AACF,CAAC"}

package/dist/commit-attested-tool.d.ts

@@ -0,0 +1,29 @@
+/**
+ * commit-attested Pi tool — stages declared files + invokes git commit
+ * with a writer.kind=agent attestation footer (DEC-0047). Husky pre-commit
+ * runs as the backup gate; never bypass (--no-verify is forbidden per
+ * feedback_no_destructive_git_ops). The primary verification gate is
+ * run-real-checks (TASK-090) called BEFORE this tool.
+ */
+import { Type } from "@earendil-works/pi-ai";
+import type { AgentToolResult, AgentToolUpdateCallback, ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { type AttestedCommitResult } from "./attested-commit.js";
+export declare const commitAttestedTool: {
+    name: string;
+    label: string;
+    description: string;
+    promptSnippet: string;
+    parameters: Type.TObject<{
+        files: Type.TArray<Type.TString>;
+        message: Type.TString;
+        agent_id: Type.TString;
+        work_order_id: Type.TOptional<Type.TString>;
+    }>;
+    execute(_toolCallId: string, params: {
+        files: string[];
+        message: string;
+        agent_id: string;
+        work_order_id?: string;
+    }, _signal: AbortSignal, _onUpdate: AgentToolUpdateCallback, ctx: ExtensionContext): Promise<AgentToolResult<AttestedCommitResult>>;
+};
+//# sourceMappingURL=commit-attested-tool.d.ts.map

package/dist/commit-attested-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-attested-tool.d.ts","sourceRoot":"","sources":["../src/commit-attested-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAClH,OAAO,EAAE,KAAK,oBAAoB,EAAkB,MAAM,sBAAsB,CAAC;AAEjF,eAAO,MAAM,kBAAkB;;;;;;;;;;;yBAiBhB,MAAM,UACX;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,WAC7E,WAAW,aACT,uBAAuB,OAC7B,gBAAgB,GACnB,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;CAoBjD,CAAC"}

package/dist/commit-attested-tool.js

@@ -0,0 +1,45 @@
+/**
+ * commit-attested Pi tool — stages declared files + invokes git commit
+ * with a writer.kind=agent attestation footer (DEC-0047). Husky pre-commit
+ * runs as the backup gate; never bypass (--no-verify is forbidden per
+ * feedback_no_destructive_git_ops). The primary verification gate is
+ * run-real-checks (TASK-090) called BEFORE this tool.
+ */
+import { Type } from "@earendil-works/pi-ai";
+import { attestedCommit } from "./attested-commit.js";
+export const commitAttestedTool = {
+    name: "commit-attested",
+    label: "Commit Attested",
+    description: "Stage declared files + invoke git commit with DispatchContext writer.kind=agent attestation footer. Husky pre-commit runs as backup gate; never bypass (--no-verify forbidden per feedback_no_destructive_git_ops). The primary gate is run-real-checks called BEFORE this tool.",
+    promptSnippet: "Commit agent-authored work-product files with attestation footer.",
+    parameters: Type.Object({
+        files: Type.Array(Type.String(), { description: "Files to stage + commit. Empty array refused." }),
+        message: Type.String({
+            description: "Commit message body (the attestation footer is appended automatically).",
+        }),
+        agent_id: Type.String({
+            description: "Agent id for writer.kind=agent attestation (e.g. 'spec-implementer-001').",
+        }),
+        work_order_id: Type.Optional(Type.String({ description: "Optional work-order id for the attestation footer." })),
+    }),
+    async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+        const result = await attestedCommit(ctx.cwd, {
+            files: params.files,
+            message: params.message,
+            agent_id: params.agent_id,
+            work_order_id: params.work_order_id,
+        });
+        return {
+            details: result,
+            content: [
+                {
+                    type: "text",
+                    text: result.committed
+                        ? `Committed ${result.commit_sha} (agent/${params.agent_id})`
+                        : `Commit FAILED (exit ${result.exit_code}): ${result.stderr.slice(0, 500)}`,
+                },
+            ],
+        };
+    },
+};
+//# sourceMappingURL=commit-attested-tool.js.map

package/dist/commit-attested-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-attested-tool.js","sourceRoot":"","sources":["../src/commit-attested-tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAA6B,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEjF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,IAAI,EAAE,iBAAiB;IACvB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EACV,kRAAkR;IACnR,aAAa,EAAE,mEAAmE;IAClF,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,+CAA+C,EAAE,CAAC;QAClG,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,yEAAyE;SACtF,CAAC;QACF,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;YACrB,WAAW,EAAE,2EAA2E;SACxF,CAAC;QACF,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC,CAAC;KAChH,CAAC;IACF,KAAK,CAAC,OAAO,CACZ,WAAmB,EACnB,MAAsF,EACtF,OAAoB,EACpB,SAAkC,EAClC,GAAqB;QAErB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;YAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;SACnC,CAAC,CAAC;QAEH,OAAO;YACN,OAAO,EAAE,MAAM;YACf,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,CAAC,SAAS;wBACrB,CAAC,CAAC,aAAa,MAAM,CAAC,UAAU,WAAW,MAAM,CAAC,QAAQ,GAAG;wBAC7D,CAAC,CAAC,uBAAuB,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBAC7E;aACD;SACD,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/composite-loader.d.ts

@@ -0,0 +1,36 @@
+/**
+ * composite-loader — dynamic per-instance Pi tool registration from
+ * config.tool_operations[] entries declaring a KIND (FEAT-010 Hybrid 3 v2).
+ *
+ * Reads config via loadContext(cwd). For each entry with `kind` set:
+ *   1. Reject if canonical_id is in the forbidden union (L1 framework list ∪
+ *      L5 project list config.tool_operations_forbidden[]) — throw, do not
+ *      register.
+ *   2. Skip (with `skipped` return entry) if kind is unknown to KIND_REGISTRY
+ *      — forward compatibility allows future KIND additions in newer dispatch
+ *      versions without crashing older config.
+ *   3. Otherwise: closure-bind instance_params + register a Pi tool named
+ *      canonical_id whose parameters match the KIND's argsSchema. The runtime
+ *      callsite supplies args only; instance scope is fixed at this
+ *      registration point.
+ *
+ * Entries without `kind` are FEAT-005 static-tool references and skipped here
+ * (not the composite path).
+ */
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+export interface LoadCompositesResult {
+    registered: string[];
+    skipped: {
+        canonical_id: string;
+        reason: string;
+    }[];
+    /**
+     * True when loadContext returned config=null (no .pi-context.json pointer
+     * or no config.json). Lets the extension factory caller surface the
+     * absence via pi.ui.notify when available — independent of the
+     * extension_load_warning TraceEntry already emitted from this loader.
+     */
+    config_absent: boolean;
+}
+export declare function loadComposites(cwd: string, pi: ExtensionAPI): LoadCompositesResult;
+//# sourceMappingURL=composite-loader.d.ts.map

package/dist/composite-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composite-loader.d.ts","sourceRoot":"","sources":["../src/composite-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAqDpE,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACpD;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAC;CACvB;AAsDD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,GAAG,oBAAoB,CAqDlF"}

package/dist/composite-loader.js

@@ -0,0 +1,137 @@
+/**
+ * composite-loader — dynamic per-instance Pi tool registration from
+ * config.tool_operations[] entries declaring a KIND (FEAT-010 Hybrid 3 v2).
+ *
+ * Reads config via loadContext(cwd). For each entry with `kind` set:
+ *   1. Reject if canonical_id is in the forbidden union (L1 framework list ∪
+ *      L5 project list config.tool_operations_forbidden[]) — throw, do not
+ *      register.
+ *   2. Skip (with `skipped` return entry) if kind is unknown to KIND_REGISTRY
+ *      — forward compatibility allows future KIND additions in newer dispatch
+ *      versions without crashing older config.
+ *   3. Otherwise: closure-bind instance_params + register a Pi tool named
+ *      canonical_id whose parameters match the KIND's argsSchema. The runtime
+ *      callsite supplies args only; instance scope is fixed at this
+ *      registration point.
+ *
+ * Entries without `kind` are FEAT-005 static-tool references and skipped here
+ * (not the composite path).
+ */
+import { randomUUID } from "node:crypto";
+import { homedir } from "node:os";
+import path from "node:path";
+import { loadContext } from "@davidorex/pi-context/context";
+import { writeAgentTrace } from "@davidorex/pi-jit-agents";
+import { commandAllowlistArgsSchema, runCommandAllowlist, } from "./composites/command-allowlist.js";
+import { gitLogArgsSchema, runGitLog } from "./composites/git-log.js";
+import { grepPathsArgsSchema, runGrepPaths, } from "./composites/grep-paths.js";
+import { readFilesArgsSchema, runReadFiles, } from "./composites/read-files.js";
+import { FORBIDDEN_WHOLESALE_OPERATIONS } from "./operation-vocab.js";
+const KIND_REGISTRY = {
+    "read-files": {
+        argsSchema: readFilesArgsSchema,
+        run: (cwd, instance, args) => runReadFiles(cwd, instance, args),
+    },
+    "git-log": {
+        argsSchema: gitLogArgsSchema,
+        run: (cwd, instance, args) => runGitLog(cwd, instance, args),
+    },
+    "grep-paths": {
+        argsSchema: grepPathsArgsSchema,
+        run: (cwd, instance, args) => runGrepPaths(cwd, instance, args),
+    },
+    "command-allowlist": {
+        argsSchema: commandAllowlistArgsSchema,
+        run: (cwd, instance, args) => runCommandAllowlist(cwd, instance, args),
+    },
+};
+/**
+ * ULID-shape filler — the canonical writeAgentTrace path expects a
+ * 26-character Crockford-base32 ULID per the schema. Until a real ULID
+ * dependency is added (the rest of pi-jit-agents already mints ULIDs in
+ * its dispatch path), we emit a placeholder shaped like one. The trace
+ * is observability-only; downstream consumers tolerate id collisions.
+ */
+function placeholderTraceId() {
+    // Use randomUUID to derive deterministic-shape entropy then map to the
+    // Crockford base32 alphabet. Not a real ULID but matches the regex.
+    const hex = randomUUID().replace(/-/g, "");
+    const alphabet = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+    let out = "";
+    for (let i = 0; i < 26; i++) {
+        out += alphabet[Number.parseInt(hex[i % hex.length], 16) % alphabet.length];
+    }
+    return out;
+}
+function resolveTracePath() {
+    const env = process.env.PI_AGENT_TRACE_PATH;
+    if (env && env.length > 0)
+        return env;
+    return path.join(homedir(), ".pi", "traces", "extension-load.jsonl");
+}
+function emitExtensionLoadWarning(extensionName, message, severity) {
+    try {
+        writeAgentTrace({
+            type: "extension_load_warning",
+            id: placeholderTraceId(),
+            parentId: null,
+            timestamp: new Date().toISOString(),
+            extension_name: extensionName,
+            message,
+            severity,
+        }, { tracePath: resolveTracePath() });
+    }
+    catch {
+        // Trace emission is observability-only; never fail extension load.
+    }
+}
+function buildForbiddenUnion(config) {
+    return new Set([...FORBIDDEN_WHOLESALE_OPERATIONS, ...(config?.tool_operations_forbidden ?? [])]);
+}
+export function loadComposites(cwd, pi) {
+    const ctx = loadContext(cwd);
+    const config = ctx.config;
+    const forbidden = buildForbiddenUnion(config);
+    const registered = [];
+    const skipped = [];
+    // Config-absent degrade path (FGAP-121 layer-a): observe via the canonical
+    // TraceEntry pipeline (DEC-0002 / TASK-086 precedent). pi.ui.notify is
+    // surfaced at the index.ts factory caller IF available there; here we use
+    // the trace pipeline so observability is unconditional + queryable.
+    if (config === null) {
+        emitExtensionLoadWarning("pi-agent-dispatch", `substrate config absent at ${cwd} — composite-loader registered zero composites; the 6 static tools remain available.`, "warning");
+        return { registered, skipped, config_absent: true };
+    }
+    const ops = config?.tool_operations ?? [];
+    for (const entry of ops) {
+        if (!entry.kind)
+            continue; // FEAT-005 static-tool reference, not composite
+        if (forbidden.has(entry.canonical_id)) {
+            throw new Error(`composite-loader: refusing to register forbidden token: ${entry.canonical_id} (framework L1 + config L5 forbidden union; feedback_no_parallel_ungated_paths).`);
+        }
+        const binding = KIND_REGISTRY[entry.kind];
+        if (!binding) {
+            skipped.push({ canonical_id: entry.canonical_id, reason: `unknown kind: ${entry.kind}` });
+            continue;
+        }
+        const instance = entry.instance_params ?? {};
+        const tool = {
+            name: entry.canonical_id,
+            label: entry.display_name ?? entry.canonical_id,
+            description: `Composite tool (kind=${entry.kind}) — instance-scoped per config.tool_operations[].`,
+            promptSnippet: `Invoke composite ${entry.canonical_id} (kind ${entry.kind}).`,
+            parameters: binding.argsSchema,
+            async execute(_toolCallId, params) {
+                const result = binding.run(cwd, instance, params);
+                return {
+                    details: result,
+                    content: [{ type: "text", text: JSON.stringify(result) }],
+                };
+            },
+        };
+        pi.registerTool(tool);
+        registered.push(entry.canonical_id);
+    }
+    return { registered, skipped, config_absent: false };
+}
+//# sourceMappingURL=composite-loader.js.map

package/dist/composite-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composite-loader.js","sourceRoot":"","sources":["../src/composite-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,OAAO,EAGN,0BAA0B,EAC1B,mBAAmB,GACnB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAwC,gBAAgB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EAGN,mBAAmB,EACnB,YAAY,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGN,mBAAmB,EACnB,YAAY,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAOtE,MAAM,aAAa,GAAgC;IAClD,YAAY,EAAE;QACb,UAAU,EAAE,mBAAmB;QAC/B,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAC5B,YAAY,CAAC,GAAG,EAAE,QAAwC,EAAE,IAAgC,CAAC;KAC9F;IACD,SAAS,EAAE;QACV,UAAU,EAAE,gBAAgB;QAC5B,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,QAAqC,EAAE,IAA6B,CAAC;KAClH;IACD,YAAY,EAAE;QACb,UAAU,EAAE,mBAAmB;QAC/B,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAC5B,YAAY,CAAC,GAAG,EAAE,QAAwC,EAAE,IAAgC,CAAC;KAC9F;IACD,mBAAmB,EAAE;QACpB,UAAU,EAAE,0BAA0B;QACtC,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAC5B,mBAAmB,CAClB,GAAG,EACH,QAA+C,EAC/C,IAAuC,CACvC;KACF;CACD,CAAC;AAcF;;;;;;GAMG;AACH,SAAS,kBAAkB;IAC1B,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,kCAAkC,CAAC;IACpD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAChC,aAAqB,EACrB,OAAe,EACf,QAAsC;IAEtC,IAAI,CAAC;QACJ,eAAe,CACd;YACC,IAAI,EAAE,wBAAwB;YAC9B,EAAE,EAAE,kBAAkB,EAAE;YACxB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,aAAa;YAC7B,OAAO;YACP,QAAQ;SACR,EACD,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,CACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,mEAAmE;IACpE,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA0B;IACtD,OAAO,IAAI,GAAG,CAAS,CAAC,GAAG,8BAA8B,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,EAAgB;IAC3D,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAA+C,EAAE,CAAC;IAE/D,2EAA2E;IAC3E,uEAAuE;IACvE,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACrB,wBAAwB,CACvB,mBAAmB,EACnB,8BAA8B,GAAG,sFAAsF,EACvH,SAAS,CACT,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,GAAG,GAAwB,MAAM,EAAE,eAAe,IAAI,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,SAAS,CAAC,gDAAgD;QAC3E,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACd,2DAA2D,KAAK,CAAC,YAAY,kFAAkF,CAC/J,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1F,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG;YACZ,IAAI,EAAE,KAAK,CAAC,YAAY;YACxB,KAAK,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY;YAC/C,WAAW,EAAE,wBAAwB,KAAK,CAAC,IAAI,mDAAmD;YAClG,aAAa,EAAE,oBAAoB,KAAK,CAAC,YAAY,UAAU,KAAK,CAAC,IAAI,IAAI;YAC7E,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAA+B;gBACjE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClD,OAAO;oBACN,OAAO,EAAE,MAAM;oBACf,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;iBACzD,CAAC;YACH,CAAC;SACD,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,IAA8D,CAAC,CAAC;QAChF,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC"}