@opensip-cli/core 0.1.0

package/dist/plugins/capability-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-discovery.d.ts","sourceRoot":"","sources":["../../src/plugins/capability-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAcH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,qFAAqF;AACrF,MAAM,WAAW,yBAAyB;IACxC,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,+FAA+F;AAC/F,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,8BAA8B;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,2DAA2D;AAC3D,MAAM,WAAW,sCAAsC;IACrD,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,8BAA8B,CAAC;IACtD,kDAAkD;IAClD,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,6BAA6B,KAAK,IAAI,CAAC;CAC7E;AAgBD;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,yBAAyB,EAAE,CAAC,CActC"}

package/dist/plugins/capability-discovery.js

@@ -0,0 +1,278 @@
+/**
+ * @fileoverview The generic capability-contribution discovery substrate (§5.3).
+ *
+ * One walker that, given a capability domain's manifest-declared discovery
+ * descriptor + resolved preferences, finds every contributing package (by marker
+ * OR name-pattern), dynamic-imports each one, reads its declared export, and
+ * yields the raw contributions. It hoists the machinery previously split across
+ * three bespoke loaders — fitness's `check-loader.ts`, simulation's
+ * `scenario-package-discovery.ts`, and graph's `graph-adapter-discovery.ts`.
+ *
+ * Pure infra: it takes NO scope, touches NO registry, and imports NO tool. It
+ * yields `{ contribution, sourcePackage }` records that the host's capability
+ * registry routes to the owning tool's registrar (Phase 2). Per-package failures
+ * are isolated — a bad export or an import that throws skips that package with a
+ * structured diagnostic, never the whole run.
+ */
+import { pathToFileURL } from 'node:url';
+import { logger } from '../lib/logger.js';
+import { discoverPackagesByDeclaredKind, } from './marker-discovery.js';
+import { discoverScopedPackages, resolvePackageDir } from './node-modules-walk.js';
+import { resolvePackageEntryPoint } from './package-entry.js';
+import { filterSameCorePackages, selfCore } from './single-core-guard.js';
+/**
+ * Max packages imported concurrently. Per-package loads are independent, so we
+ * fan them out — but in bounded batches, so a project with many capability packs
+ * can't spawn unbounded parallel dynamic imports (each import is real I/O +
+ * module-graph evaluation). Order is preserved across batches.
+ */
+const LOAD_CONCURRENCY = 8;
+/**
+ * Discover + load every contributing package for one capability domain and
+ * return the flat list of raw contributions. See the file header for the
+ * contract; per-package failures are isolated via `onDiagnostic`.
+ */
+export async function discoverCapabilityContributions(options) {
+    const packages = selectPackages(options);
+    // Per-package loads are independent (each resolves + imports its own entry and
+    // reads one export; no shared mutable state), so fan them out — but in bounded
+    // batches of LOAD_CONCURRENCY, not unbounded. Promise.all preserves order within
+    // a batch and batches run in sequence, so the flattened result is deterministic.
+    const out = [];
+    for (let i = 0; i < packages.length; i += LOAD_CONCURRENCY) {
+        const batch = packages.slice(i, i + LOAD_CONCURRENCY);
+        // @fitness-ignore-next-line performance-anti-patterns -- bounded fan-out: each batch runs in parallel via Promise.all; running batches serially caps in-flight imports (the bounded-concurrency pattern), not a per-item serial loop.
+        const loaded = await Promise.all(batch.map((pkg) => loadPackageContributions(pkg, options)));
+        for (const contributions of loaded)
+            out.push(...contributions);
+    }
+    return out;
+}
+/**
+ * Resolve which packages to load, applying the preference rules:
+ *   - explicit `preferences.packages` list resolved (built-ins from `cliDir`);
+ *   - auto-discovery (by the descriptor's mode) runs UNLESS `autoDiscover: false`
+ *     OR (an explicit list is present AND `explicitListMode` is `'replace'`);
+ *   - `'augment'` mode unions explicit + auto-discovered, deduped.
+ * Finally, the single-core guard drops any pack resolving a foreign
+ * `@opensip-cli/core` (a split run scope → false positives).
+ */
+function selectPackages(options) {
+    const { descriptor, preferences = {}, onDiagnostic } = options;
+    const explicitMode = descriptor.explicitListMode ?? 'replace';
+    const hasExplicit = preferences.packages !== undefined;
+    const explicit = hasExplicit ? resolveExplicit(preferences.packages ?? [], options) : [];
+    // 'replace' + an explicit list → skip auto-discovery; otherwise auto-discover
+    // (unless opted out). 'augment' always auto-discovers and adds the explicit list.
+    const includeAuto = preferences.autoDiscover !== false && !(hasExplicit && explicitMode === 'replace');
+    const auto = includeAuto ? autoDiscover(options) : [];
+    // Explicit config wins on a name collision (listed first).
+    const merged = dedupeSelected([...explicit, ...auto]);
+    return applySingleCoreGuard(merged, onDiagnostic);
+}
+/** Auto-discover packages by the descriptor's mode (marker | name-pattern). */
+function autoDiscover(options) {
+    const { descriptor, projectDir, cliDir, preferences = {} } = options;
+    return descriptor.discovery.mode === 'marker'
+        ? autoDiscoverByMarker(descriptor, projectDir, cliDir)
+        : autoDiscoverByNamePattern(descriptor, projectDir, preferences.scopes);
+}
+/**
+ * Resolve an explicit package-name list to on-disk dirs. Built-in names (under
+ * `descriptor.builtinScope`) resolve from `cliDir`; the rest from `projectDir` —
+ * the same ownership split auto-discovery applies. Diagnose any not installed.
+ */
+function resolveExplicit(names, options) {
+    const { descriptor, projectDir, cliDir, onDiagnostic } = options;
+    const scope = descriptor.builtinScope;
+    const out = [];
+    for (const name of names) {
+        const anchor = scope !== undefined && cliDir !== undefined && isUnderScope(name, scope)
+            ? cliDir
+            : projectDir;
+        const packageDir = resolvePackageDir(anchor, name);
+        if (packageDir) {
+            out.push({ name, packageDir });
+        }
+        else {
+            onDiagnostic?.({
+                evt: 'capability.discovery.package_not_resolved',
+                packageName: name,
+                message: `configured package "${name}" is not installed in node_modules — skipping`,
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Marker mode. When the descriptor declares a `builtinScope`, packages split by
+ * ownership: built-ins (names under the scope) resolve from `cliDir`; everything
+ * else from `projectDir`, and a project-installed built-in is dropped as a shadow.
+ * Without a `builtinScope`, all markers resolve from `projectDir`.
+ */
+function autoDiscoverByMarker(descriptor, projectDir, cliDir) {
+    if (descriptor.discovery.mode !== 'marker')
+        return [];
+    const { markerKind } = descriptor.discovery;
+    const scope = descriptor.builtinScope;
+    if (scope === undefined || cliDir === undefined) {
+        return dedupe(discoverPackagesByDeclaredKind(projectDir, markerKind));
+    }
+    const builtin = discoverPackagesByDeclaredKind(cliDir, markerKind).filter((p) => isUnderScope(p.name, scope));
+    const custom = discoverPackagesByDeclaredKind(projectDir, markerKind).filter((p) => !isUnderScope(p.name, scope));
+    return dedupe([...builtin, ...custom]);
+}
+/** name-pattern mode: scan the descriptor's (or override) scopes for `<scope>/<prefix>*`. */
+function autoDiscoverByNamePattern(descriptor, projectDir, scopeOverride) {
+    if (descriptor.discovery.mode !== 'name-pattern')
+        return [];
+    const { prefix, defaultScopes } = descriptor.discovery;
+    const scopes = scopeOverride ?? defaultScopes;
+    return discoverScopedPackages({ projectDir, scopes, prefix }).map((p) => ({
+        name: p.name,
+        packageDir: p.packageDir,
+    }));
+}
+/** A package name is "under" a scope when it begins with `<scope>/`. */
+function isUnderScope(name, scope) {
+    return name.startsWith(scope.endsWith('/') ? scope : `${scope}/`);
+}
+/** Dedupe discovered packages by name (first occurrence wins) and drop the kind tag. */
+function dedupe(packages) {
+    const seen = new Set();
+    const out = [];
+    for (const p of packages) {
+        if (seen.has(p.name))
+            continue;
+        seen.add(p.name);
+        out.push({ name: p.name, packageDir: p.packageDir });
+    }
+    return out;
+}
+/** Dedupe selected packages by name (first occurrence wins). */
+function dedupeSelected(packages) {
+    const seen = new Set();
+    const out = [];
+    for (const p of packages) {
+        if (seen.has(p.name))
+            continue;
+        seen.add(p.name);
+        out.push(p);
+    }
+    return out;
+}
+/**
+ * Single-core guard: drop any pack that resolves a DIFFERENT `@opensip-cli/core`
+ * than this runtime (a split run scope → false positives). Delegates to the shared
+ * {@link filterSameCorePackages}; wraps each drop in a discovery diagnostic.
+ * Generic: every domain's packs get the guard, not just fit's.
+ */
+function applySingleCoreGuard(packages, onDiagnostic) {
+    return filterSameCorePackages(packages, (pkg, foreignCore) => {
+        onDiagnostic?.({
+            evt: 'capability.discovery.foreign_core',
+            packageName: pkg.name,
+            message: `package ${pkg.name} resolves a different @opensip-cli/core (${foreignCore}) than this ` +
+                `runtime (${selfCore() ?? '<unknown>'}) — skipping to avoid a split run scope`,
+        });
+    });
+}
+/**
+ * Resolve a package's entry, dynamic-import it, and read the declared export.
+ * `exportShape: 'array'` spreads the array; `'single'` yields the one value.
+ * Missing package metadata, a missing/wrong-shape export, or an import that
+ * throws all skip the package with a diagnostic — never propagate.
+ */
+async function loadPackageContributions(pkg, options) {
+    const { descriptor, onDiagnostic } = options;
+    const resolved = resolvePackageEntryPoint(pkg.packageDir, pkg.name);
+    if (!resolved) {
+        onDiagnostic?.({
+            evt: 'capability.discovery.unreadable_package',
+            packageName: pkg.name,
+            message: `package ${pkg.name} has no readable package.json — skipping`,
+        });
+        return [];
+    }
+    try {
+        const mod = (await import(pathToFileURL(resolved.entry).href));
+        // Primary export (required — a missing/wrong-shape primary is diagnosed).
+        const out = readOneExport(mod, pkg.name, onDiagnostic, {
+            exportName: descriptor.exportName,
+            exportShape: descriptor.exportShape,
+            required: true,
+        });
+        // Co-contributions (§5.3): secondary exports routed to OTHER domains (e.g.
+        // `recipes` → fit-recipe). OPTIONAL — a package that exports no recipes is
+        // fine, so a missing co-export is silent (not diagnosed).
+        for (const co of descriptor.coContributions ?? []) {
+            out.push(...readOneExport(mod, pkg.name, onDiagnostic, {
+                exportName: co.exportName,
+                exportShape: co.exportShape,
+                targetDomainId: co.domainId,
+                required: false,
+            }));
+        }
+        return out;
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        // Structured log of the substrate's own failure (the caller's onDiagnostic is
+        // a separate channel; this keeps the import failure observable in the logs even
+        // when no diagnostic sink is wired). Per-package isolation: skip, never throw.
+        logger.warn({
+            evt: 'capability.discovery.load_failed',
+            module: 'core:plugins',
+            name: pkg.name,
+            error: msg,
+        });
+        onDiagnostic?.({
+            evt: 'capability.discovery.load_failed',
+            packageName: pkg.name,
+            message: `failed to load package ${pkg.name}: ${msg}`,
+        });
+        return [];
+    }
+}
+/**
+ * Read one export (`mod[spec.exportName]`) per `spec.exportShape`, tagging each
+ * contribution with `spec.targetDomainId` (undefined = the primary domain).
+ * `spec.required` governs the missing-export behavior: a missing PRIMARY export
+ * is diagnosed + skipped; a missing co-contribution export is silent.
+ */
+function readOneExport(mod, sourcePackage, onDiagnostic, spec) {
+    const { exportName, exportShape, targetDomainId, required } = spec;
+    const tag = targetDomainId === undefined ? {} : { targetDomainId };
+    const value = mod[exportName];
+    if (exportShape === 'array') {
+        if (value === undefined && !required)
+            return [];
+        if (!Array.isArray(value)) {
+            if (required) {
+                onDiagnostic?.({
+                    evt: 'capability.discovery.bad_export',
+                    packageName: sourcePackage,
+                    message: `package ${sourcePackage} does not export a "${exportName}" array — skipping`,
+                });
+            }
+            return [];
+        }
+        return value.map((contribution) => ({
+            contribution,
+            sourcePackage,
+            ...tag,
+        }));
+    }
+    if (value === undefined) {
+        if (required) {
+            onDiagnostic?.({
+                evt: 'capability.discovery.bad_export',
+                packageName: sourcePackage,
+                message: `package ${sourcePackage} does not export "${exportName}" — skipping`,
+            });
+        }
+        return [];
+    }
+    return [{ contribution: value, sourcePackage, ...tag }];
+}
+//# sourceMappingURL=capability-discovery.js.map

package/dist/plugins/capability-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-discovery.js","sourceRoot":"","sources":["../../src/plugins/capability-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,8BAA8B,GAE/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAsE1E;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAA+C;IAE/C,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,+EAA+E;IAC/E,+EAA+E;IAC/E,iFAAiF;IACjF,iFAAiF;IACjF,MAAM,GAAG,GAAgC,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC;QACtD,sOAAsO;QACtO,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7F,KAAK,MAAM,aAAa,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,OAA+C;IACrE,MAAM,EAAE,UAAU,EAAE,WAAW,GAAG,EAAE,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAC/D,MAAM,YAAY,GAAG,UAAU,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAC9D,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,KAAK,SAAS,CAAC;IAEvD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,8EAA8E;IAC9E,kFAAkF;IAClF,MAAM,WAAW,GACf,WAAW,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,YAAY,KAAK,SAAS,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtD,2DAA2D;IAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,OAAO,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,OAA+C;IACnE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IACrE,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;QAC3C,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC;QACtD,CAAC,CAAC,yBAAyB,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,KAAwB,EACxB,OAA+C;IAE/C,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC;IACtC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GACV,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC;YACtE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,UAAU,CAAC;QACjB,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,YAAY,EAAE,CAAC;gBACb,GAAG,EAAE,2CAA2C;gBAChD,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,uBAAuB,IAAI,+CAA+C;aACpF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,UAAyC,EACzC,UAAkB,EAClB,MAA0B;IAE1B,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC;IAEtC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,8BAA8B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,8BAA8B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAC5B,CAAC;IACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,MAAM,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CACpC,CAAC;IACF,OAAO,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,SAAS,yBAAyB,CAChC,UAAyC,EACzC,UAAkB,EAClB,aAA4C;IAE5C,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;IACvD,MAAM,MAAM,GAAG,aAAa,IAAI,aAAa,CAAC;IAC9C,OAAO,sBAAsB,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,wFAAwF;AACxF,SAAS,MAAM,CAAC,QAA8C;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gEAAgE;AAChE,SAAS,cAAc,CAAC,QAAoC;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAC3B,QAAoC,EACpC,YAAyD;IAEzD,OAAO,sBAAsB,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE;QAC3D,YAAY,EAAE,CAAC;YACb,GAAG,EAAE,mCAAmC;YACxC,WAAW,EAAE,GAAG,CAAC,IAAI;YACrB,OAAO,EACL,WAAW,GAAG,CAAC,IAAI,4CAA4C,WAAW,cAAc;gBACxF,YAAY,QAAQ,EAAE,IAAI,WAAW,yCAAyC;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,GAAoB,EACpB,OAA+C;IAE/C,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAC7C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;YACb,GAAG,EAAE,yCAAyC;YAC9C,WAAW,EAAE,GAAG,CAAC,IAAI;YACrB,OAAO,EAAE,WAAW,GAAG,CAAC,IAAI,0CAA0C;SACvE,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAA4B,CAAC;QAC1F,0EAA0E;QAC1E,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE;YACrD,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,2EAA2E;QAC3E,2EAA2E;QAC3E,0DAA0D;QAC1D,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CACN,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE;gBAC5C,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,cAAc,EAAE,EAAE,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,KAAK;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,8EAA8E;QAC9E,gFAAgF;QAChF,+EAA+E;QAC/E,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,kCAAkC;YACvC,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,YAAY,EAAE,CAAC;YACb,GAAG,EAAE,kCAAkC;YACvC,WAAW,EAAE,GAAG,CAAC,IAAI;YACrB,OAAO,EAAE,0BAA0B,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE;SACtD,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD;;;;;GAKG;AACH,SAAS,aAAa,CACpB,GAA4B,EAC5B,aAAqB,EACrB,YAAsE,EACtE,IAAgB;IAEhB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACnE,MAAM,GAAG,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;oBACb,GAAG,EAAE,iCAAiC;oBACtC,WAAW,EAAE,aAAa;oBAC1B,OAAO,EAAE,WAAW,aAAa,uBAAuB,UAAU,oBAAoB;iBACvF,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAQ,KAA4B,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC1D,YAAY;YACZ,aAAa;YACb,GAAG,GAAG;SACP,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,QAAQ,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;gBACb,GAAG,EAAE,iCAAiC;gBACtC,WAAW,EAAE,aAAa;gBAC1B,OAAO,EAAE,WAAW,aAAa,qBAAqB,UAAU,cAAc;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/plugins/capability-loader.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @fileoverview The scope-owned capability loader (§5.3, Phase 2) — the live
+ * conduit that wakes `routeContribution`.
+ *
+ * `wireCapabilityRegistry` registers each manifest-declared domain and swaps in
+ * the owner's real registrar, but never FEEDS the registry. This loader closes
+ * the loop: for one domain it drives the generic discovery substrate
+ * ({@link discoverCapabilityContributions}) and routes every contribution through
+ * `registry.routeContribution(domainId, contribution)` → the owner's registrar →
+ * the per-`RunScope` registry. That is the same end state the three bespoke
+ * loaders reach (checks/scenarios/adapters), now through the one seam.
+ *
+ * Memoized per `(domainId, projectKey)` on the per-scope registry's load-state
+ * (see {@link CapabilityRegistry}), NOT on a module-level marker — so a second
+ * scope for the same project re-loads into its own fresh registry. This is the
+ * structural fix for the audit's F1.
+ *
+ * Pure of config: preferences are RESOLVED BY THE CALLER (Phase 3) and passed in,
+ * so this stays in `core` with no edge to the config/cli layer.
+ */
+import { type CapabilityDiscoveryDiagnostic, type CapabilityDiscoveryPreferences } from './capability-discovery.js';
+import type { CapabilityRegistry } from './capability-registry.js';
+/** Options for {@link loadCapabilityDomain}. */
+export interface LoadCapabilityDomainOptions {
+    /** The per-scope registry that declares the domain + routes contributions. */
+    readonly registry: CapabilityRegistry;
+    /** The domain to discovery-load (must already be registered in `registry`). */
+    readonly domainId: string;
+    /** Discovery anchor for consumer-owned packages (the project root); `''` when none. */
+    readonly projectDir?: string;
+    /** Discovery anchor for built-ins (those under the descriptor's `builtinScope`). */
+    readonly cliDir?: string;
+    /** Resolved discovery preferences for this domain (Phase 3 resolves these from config). */
+    readonly preferences?: CapabilityDiscoveryPreferences;
+    /** Optional sink for the substrate's per-package discovery diagnostics. */
+    readonly onDiagnostic?: (diagnostic: CapabilityDiscoveryDiagnostic) => void;
+}
+/**
+ * Discovery-load one capability domain through the live `routeContribution` path,
+ * memoized per `(domainId, projectKey)` on the scope-owned registry. Returns the
+ * routing errors recorded for the domain (empty when all contributions routed
+ * cleanly). Idempotent: a second call for the same domain + project is a no-op
+ * that returns the prior errors.
+ *
+ * A domain with no `discovery` descriptor auto-discovers nothing — it is marked
+ * loaded immediately with no contributions (its registrar is fed some other way,
+ * e.g. an explicit in-process registration).
+ */
+export declare function loadCapabilityDomain(options: LoadCapabilityDomainOptions): Promise<readonly string[]>;
+//# sourceMappingURL=capability-loader.d.ts.map

package/dist/plugins/capability-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-loader.d.ts","sourceRoot":"","sources":["../../src/plugins/capability-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACpC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,CAAC,EAAE,8BAA8B,CAAC;IACtD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,6BAA6B,KAAK,IAAI,CAAC;CAC7E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CA4C5B"}

package/dist/plugins/capability-loader.js

@@ -0,0 +1,85 @@
+/**
+ * @fileoverview The scope-owned capability loader (§5.3, Phase 2) — the live
+ * conduit that wakes `routeContribution`.
+ *
+ * `wireCapabilityRegistry` registers each manifest-declared domain and swaps in
+ * the owner's real registrar, but never FEEDS the registry. This loader closes
+ * the loop: for one domain it drives the generic discovery substrate
+ * ({@link discoverCapabilityContributions}) and routes every contribution through
+ * `registry.routeContribution(domainId, contribution)` → the owner's registrar →
+ * the per-`RunScope` registry. That is the same end state the three bespoke
+ * loaders reach (checks/scenarios/adapters), now through the one seam.
+ *
+ * Memoized per `(domainId, projectKey)` on the per-scope registry's load-state
+ * (see {@link CapabilityRegistry}), NOT on a module-level marker — so a second
+ * scope for the same project re-loads into its own fresh registry. This is the
+ * structural fix for the audit's F1.
+ *
+ * Pure of config: preferences are RESOLVED BY THE CALLER (Phase 3) and passed in,
+ * so this stays in `core` with no edge to the config/cli layer.
+ */
+import { currentScope } from '../lib/run-scope.js';
+import { discoverCapabilityContributions, } from './capability-discovery.js';
+/**
+ * Discovery-load one capability domain through the live `routeContribution` path,
+ * memoized per `(domainId, projectKey)` on the scope-owned registry. Returns the
+ * routing errors recorded for the domain (empty when all contributions routed
+ * cleanly). Idempotent: a second call for the same domain + project is a no-op
+ * that returns the prior errors.
+ *
+ * A domain with no `discovery` descriptor auto-discovers nothing — it is marked
+ * loaded immediately with no contributions (its registrar is fed some other way,
+ * e.g. an explicit in-process registration).
+ */
+export async function loadCapabilityDomain(options) {
+    const { registry, domainId, projectDir, cliDir, preferences, onDiagnostic } = options;
+    const projectKey = projectDir ?? '';
+    if (registry.isDomainLoaded(domainId, projectKey)) {
+        return registry.domainLoadErrors(domainId);
+    }
+    const descriptor = registry.getDomain(domainId)?.discovery;
+    if (descriptor === undefined) {
+        // No auto-discovery for this domain — mark loaded so we don't re-check.
+        registry.markDomainLoaded(domainId, projectKey, []);
+        return [];
+    }
+    const errors = [];
+    const contributions = await discoverCapabilityContributions({
+        descriptor,
+        projectDir: projectKey,
+        ...(cliDir === undefined ? {} : { cliDir }),
+        ...(preferences === undefined ? {} : { preferences }),
+        onDiagnostic: (diagnostic) => {
+            errors.push(diagnostic.message);
+            onDiagnostic?.(diagnostic);
+        },
+    });
+    let routed = 0;
+    for (const { contribution, sourcePackage, targetDomainId } of contributions) {
+        // A co-contribution (§5.3) routes to its OWN domain (e.g. recipes → fit-recipe);
+        // a primary contribution routes to the domain being loaded.
+        const target = targetDomainId ?? domainId;
+        try {
+            registry.routeContribution(target, contribution);
+            routed++;
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            errors.push(`${sourcePackage} → ${target}: ${msg}`);
+        }
+    }
+    registry.markDomainLoaded(domainId, projectKey, errors);
+    emitLoadedEvent(domainId, routed, errors);
+    return errors;
+}
+/**
+ * Emit one unified `capability.<domainId>.loaded` lifecycle event on the
+ * scope-owned diagnostics bus (the single vocabulary that replaces the three
+ * per-domain event sets). No-op when there is no active scope (a programmatic
+ * call outside `runWithScope`).
+ */
+function emitLoadedEvent(domainId, routed, errors) {
+    currentScope()?.diagnostics.event('load', errors.length > 0 ? 'warn' : 'info', `capability domain '${domainId}' loaded ${String(routed)} contribution(s)` +
+        (errors.length > 0 ? `, ${String(errors.length)} error(s)` : ''), { domainId, routed, errors: errors.length });
+}
+//# sourceMappingURL=capability-loader.js.map

package/dist/plugins/capability-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-loader.js","sourceRoot":"","sources":["../../src/plugins/capability-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EACL,+BAA+B,GAGhC,MAAM,2BAA2B,CAAC;AAoBnC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAoC;IAEpC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACtF,MAAM,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;IAEpC,IAAI,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,wEAAwE;QACxE,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,MAAM,+BAA+B,CAAC;QAC1D,UAAU;QACV,UAAU,EAAE,UAAU;QACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;YAC3B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAChC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,aAAa,EAAE,CAAC;QAC5E,iFAAiF;QACjF,4DAA4D;QAC5D,MAAM,MAAM,GAAG,cAAc,IAAI,QAAQ,CAAC;QAC1C,IAAI,CAAC;YACH,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACxD,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,MAAc,EAAE,MAAyB;IAClF,YAAY,EAAE,EAAE,WAAW,CAAC,KAAK,CAC/B,MAAM,EACN,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EACnC,sBAAsB,QAAQ,YAAY,MAAM,CAAC,MAAM,CAAC,kBAAkB;QACxE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAClE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC5C,CAAC;AACJ,CAAC"}

package/dist/plugins/capability-registry.d.ts

@@ -0,0 +1,169 @@
+/**
+ * @fileoverview Scope-owned capability registry (launch, §5.3).
+ *
+ * The host-side runtime for the capability model in `tools/capability.ts`.
+ * A tool declares the domains it OWNS in its static manifest; the host
+ * registers each declared domain here alongside the owner-supplied
+ * REGISTRAR, then routes incoming contributions to the owning registrar
+ * after a Zod-free schema check. The host never interprets a
+ * contribution — it only confirms "targets a declared domain + passes its
+ * schema" and hands off (north-star §4.5).
+ *
+ * **Per-`RunScope`, no module singleton.** Mirrors the simulation §5.11
+ * template (`createScenarioRegistry` / `currentScenarioRegistry`):
+ *
+ *   - `createCapabilityRegistry()`  — factory the CLI bootstrap calls once
+ *     per invocation, attaching the result to `scope.capabilities`.
+ *   - `currentCapabilityRegistry()` — reads the scope-bound registry off
+ *     `currentScope()`; throws when called outside a `RunScope`.
+ *
+ * Unlike a tool subscope, the capability registry is a KERNEL concern (the
+ * host owns it, not any one tool), so its slot lives directly on
+ * `ToolScope` (`capabilities?`) rather than under a tool's name. A run that
+ * never constructs one carries `scope.capabilities === undefined` and reads
+ * return `undefined`.
+ *
+ * Errors are typed + structured (§ Steps 2.1.3): an unknown domain is a
+ * `NotFoundError` (`CAPABILITY.DOMAIN.UNKNOWN`); a schema mismatch is a
+ * `ValidationError` (`CAPABILITY.CONTRIBUTION.SCHEMA_MISMATCH`), both
+ * carrying a structured `diagnostic` for the CLI error boundary.
+ */
+import { type Logger } from '../lib/logger.js';
+import { type CapabilityDomainSpec, type CapabilityRegistrar } from '../tools/capability.js';
+import type { ToolPluginManifest } from '../tools/manifest.js';
+export type { CapabilityRegistrar } from '../tools/capability.js';
+/**
+ * Per-`RunScope` capability registry. Holds the declared domains (by id)
+ * and routes contributions to their owners. Construct one per CLI
+ * invocation via {@link createCapabilityRegistry}; read the scope-bound
+ * instance via {@link currentCapabilityRegistry}.
+ */
+export declare class CapabilityRegistry {
+    private readonly domains;
+    /**
+     * Per-domain discovery load-state, keyed by domain id. This is the per-scope
+     * memoization that the capability loader reads/writes so a domain's
+     * contributions are discovered + routed exactly once per project per scope.
+     * Because the registry is itself per-`RunScope`, this state is per-scope too —
+     * a second run for the same project re-loads into its own fresh registry.
+     * This is the structural fix for the audit's F1 (sim's module-level
+     * `scenariosLoadedFor`): the marker lives on a scope-owned object, not a module.
+     */
+    private readonly loadState;
+    private readonly logger;
+    constructor(logger?: Logger);
+    /** True when domain `domainId` has been discovery-loaded for `projectKey` in this scope. */
+    isDomainLoaded(domainId: string, projectKey: string): boolean;
+    /** Record that `domainId` finished discovery-loading for `projectKey`, with any routing errors. */
+    markDomainLoaded(domainId: string, projectKey: string, errors: readonly string[]): void;
+    /** Routing errors recorded during the most recent load of `domainId` (empty if none / never loaded). */
+    domainLoadErrors(domainId: string): readonly string[];
+    /**
+     * Register a capability domain + its owner's registrar. First-writer-wins
+     * on duplicate domain id: a second registration of the same id is a no-op
+     * (logged at debug) — mirrors the discovery walker's nearest-ancestor
+     * dedup, so re-running discovery is idempotent.
+     *
+     * @param spec The domain description (id, owner, epoch, schema, kind).
+     * @param registrar The owner callback invoked for a validated contribution.
+     */
+    registerDomain(spec: CapabilityDomainSpec, registrar: CapabilityRegistrar): void;
+    /**
+     * Replace the registrar for an ALREADY-REGISTERED domain (Phase 4). The
+     * manifest-read path ({@link registerCapabilityDomainsFromManifest})
+     * registers each declared domain with a DEFERRED placeholder registrar that
+     * throws on any contribution; once the owning tool's runtime module loads,
+     * the host calls this to swap in the tool's REAL registrar.
+     *
+     * This is the deliberate complement to {@link registerDomain}'s
+     * first-writer-wins: a domain's REGISTRAR is owner-replaceable (the owner
+     * supplies it late), but its SPEC is not — the spec stays exactly as the
+     * manifest declared it, so identity/epoch/schema cannot be overwritten by a
+     * late registrar wiring. Only the owning tool should call this (the host
+     * routes by `ownerToolId`); the spec is left untouched.
+     *
+     * @param domainId The domain whose registrar to replace.
+     * @param registrar The owner's real registrar.
+     * @throws {NotFoundError} (`CAPABILITY.DOMAIN.UNKNOWN`) when no domain
+     *   `domainId` is registered — a registrar cannot be wired for a domain the
+     *   host never declared (a manifest/tool-id mismatch).
+     */
+    setRegistrar(domainId: string, registrar: CapabilityRegistrar): void;
+    /** Whether a domain with `domainId` is registered. */
+    hasDomain(domainId: string): boolean;
+    /** Look up a registered domain's spec, or `undefined`. */
+    getDomain(domainId: string): CapabilityDomainSpec | undefined;
+    /** All registered domain specs (registration order). */
+    listDomains(): readonly CapabilityDomainSpec[];
+    /**
+     * Route a contribution to the owner of `domainId`. The host (a) confirms
+     * the domain is declared, (b) validates `contribution` against the
+     * domain's `contributionSchema`, then (c) hands it to the owner's
+     * registrar. The host never interprets the contribution beyond the
+     * schema check — the domain owner does.
+     *
+     * @throws {NotFoundError} (`CAPABILITY.DOMAIN.UNKNOWN`) when no domain
+     *   `domainId` is registered.
+     * @throws {ValidationError} (`CAPABILITY.CONTRIBUTION.SCHEMA_MISMATCH`)
+     *   when the contribution fails the domain's schema check.
+     */
+    routeContribution(domainId: string, contribution: unknown): void;
+}
+/**
+ * Augment the kernel scope with the capability registry slot. Unlike a
+ * tool subscope (which a tool augments from ITS package), the capability
+ * registry is a kernel concern, so core declares the slot itself here —
+ * keeping the leaf `scope-types.ts` free of any edge back to this module
+ * (which imports `run-scope.ts`). Optional + mutable: only the CLI
+ * bootstrap (or a test) attaches it; a run without it reads `undefined`.
+ */
+declare module '../lib/scope-types.js' {
+    interface ScopeContribution {
+        /**
+         * The host's per-run capability registry. Seeded by the CLI bootstrap
+         * (Phase 4) and read via {@link currentCapabilityRegistry}. Absent on
+         * a scope that never constructed one — consumers MUST null-check (the
+         * reader throws a descriptive error in that case).
+         */
+        capabilities?: CapabilityRegistry;
+    }
+}
+/** Construct a fresh capability registry for a single `RunScope`. */
+export declare function createCapabilityRegistry(logger?: Logger): CapabilityRegistry;
+/**
+ * Read the current scope's capability registry. Throws when no scope is
+ * active or when the scope has no capability registry — both indicate the
+ * caller is running outside the CLI's pre-action-hook (or a test fixture
+ * forgot to construct + attach one).
+ *
+ * @throws {Error} When called outside `runWithScope(...)`, or when the
+ *   active scope carries no `capabilities` registry.
+ */
+export declare function currentCapabilityRegistry(): CapabilityRegistry;
+/**
+ * Register every capability domain a manifest declares into the per-run
+ * {@link CapabilityRegistry}, stamping `ownerToolId = manifest.stableId ??
+ * manifest.id` on each (§5.3 / Task 2.2; ADR-0048 — the owner key must equal the
+ * owning tool's `metadata.id`, which is the stable UUID for modern tools). This
+ * is how `MARKER_KINDS` becomes a BOOTSTRAP DEFAULT:
+ * the marker enum still seeds the discovery vocabulary, and a
+ * manifest-declared domain EXTENDS that set — registered here without any
+ * host-enum edit. Additive: a manifest with no `capabilities` registers
+ * nothing.
+ *
+ * The owner-supplied registrar is NOT known at manifest-read time (the
+ * tool's runtime module hasn't been imported), so this registers the
+ * domain with a deferred-registrar placeholder that THROWS if a
+ * contribution is routed before the owning tool wires its real registrar
+ * (Phase 4). The host knows the domain EXISTS and who owns it; the owner
+ * supplies the actual registrar when its module loads.
+ *
+ * Emits one structured `capability.domain.from_manifest` evt per domain so
+ * a manifest-sourced domain is observable in structured logs (Task 2.2.3).
+ *
+ * @param manifest The validated manifest carrying the declarations.
+ * @param registry The per-run capability registry to populate.
+ * @returns The {@link CapabilityDomainSpec}s registered (owner-stamped).
+ */
+export declare function registerCapabilityDomainsFromManifest(manifest: ToolPluginManifest, registry: CapabilityRegistry): readonly CapabilityDomainSpec[];
+//# sourceMappingURL=capability-registry.d.ts.map

package/dist/plugins/capability-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-registry.d.ts","sourceRoot":"","sources":["../../src/plugins/capability-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAOH,OAAO,EAA2B,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAExE,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK/D,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQlE;;;;;GAKG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuE;IACjG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,MAAM,GAAE,MAAsB;IAI1C,4FAA4F;IAC5F,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAI7D,mGAAmG;IACnG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAIvF,wGAAwG;IACxG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE;IAIrD;;;;;;;;OAQG;IACH,cAAc,CAAC,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,GAAG,IAAI;IAsBhF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,GAAG,IAAI;IAoBpE,sDAAsD;IACtD,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIpC,0DAA0D;IAC1D,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAI7D,wDAAwD;IACxD,WAAW,IAAI,SAAS,oBAAoB,EAAE;IAI9C;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,IAAI;CAsBjE;AAqCD;;;;;;;GAOG;AACH,OAAO,QAAQ,uBAAuB,CAAC;IACrC,UAAU,iBAAiB;QACzB;;;;;WAKG;QACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;KACnC;CACF;AAED,qEAAqE;AACrE,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAE5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,kBAAkB,CAmB9D;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qCAAqC,CACnD,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,kBAAkB,GAC3B,SAAS,oBAAoB,EAAE,CAiCjC"}