@opensip-cli/core 0.1.0

package/dist/tools/__tests__/manifest-assert.test.js

@@ -0,0 +1,66 @@
+/**
+ * Tests for the load-time manifest⇔Tool drift guard (release 2.8.0, Phase 1).
+ */
+import { describe, expect, it } from 'vitest';
+import { ValidationError } from '../../lib/errors.js';
+import { assertManifestMatchesTool } from '../manifest-assert.js';
+/** Minimal Tool stub — only the fields the guard inspects are meaningful. */
+function makeTool(humanName, commandNames, stableId = '00000000-0000-4000-8000-000000000000') {
+    return {
+        metadata: { id: stableId, name: humanName, version: '0.0.0', description: 'test tool' },
+        commands: commandNames.map((name) => ({ name, description: `${name} desc` })),
+    };
+}
+function makeManifest(humanId, commandNames, stableId) {
+    return {
+        kind: 'tool',
+        id: humanId,
+        ...(stableId ? { stableId } : {}),
+        name: '@scope/test',
+        version: '0.0.0',
+        apiVersion: 1,
+        commands: commandNames.map((name) => ({ name, description: `${name} desc` })),
+    };
+}
+describe('assertManifestMatchesTool', () => {
+    it('passes when human id/name and command-name set match exactly', () => {
+        const tool = makeTool('fitness', ['fit', 'fit-list', 'fit-recipes'], 'afd68bd3-ff3c-4935-a5b6-76d8fc7a5224');
+        const manifest = makeManifest('fitness', ['fit', 'fit-list', 'fit-recipes'], 'afd68bd3-ff3c-4935-a5b6-76d8fc7a5224');
+        expect(() => assertManifestMatchesTool(manifest, tool)).not.toThrow();
+    });
+    it('passes when command names match but order differs (set equality)', () => {
+        const tool = makeTool('graph', ['graph', 'graph-lookup', 'sarif-export']);
+        const manifest = makeManifest('graph', ['sarif-export', 'graph', 'graph-lookup']);
+        expect(() => assertManifestMatchesTool(manifest, tool)).not.toThrow();
+    });
+    it('passes when manifest omits stableId (additive, legacy compat)', () => {
+        const tool = makeTool('fitness', ['fit'], 'afd68bd3-ff3c-4935-a5b6-76d8fc7a5224');
+        const manifest = makeManifest('fitness', ['fit']); // no stableId
+        expect(() => assertManifestMatchesTool(manifest, tool)).not.toThrow();
+    });
+    it('throws a ValidationError when the human id (manifest) differs from runtime name', () => {
+        const tool = makeTool('fitness', ['fit']);
+        const manifest = makeManifest('fit', ['fit']);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(ValidationError);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(/manifest id 'fit'.*runtime tool name 'fitness'/);
+    });
+    it('throws when manifest stableId differs from runtime id', () => {
+        const tool = makeTool('fitness', ['fit'], 'afd68bd3-ff3c-4935-a5b6-76d8fc7a5224');
+        const manifest = makeManifest('fitness', ['fit'], '11111111-1111-4111-8111-111111111111');
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(ValidationError);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(/manifest stableId '11111111-1111-4111-8111-111111111111'.*runtime tool id 'afd68bd3-ff3c-4935-a5b6-76d8fc7a5224'/);
+    });
+    it('throws when a command is missing from the manifest', () => {
+        const tool = makeTool('graph', ['graph', 'graph-lookup']);
+        const manifest = makeManifest('graph', ['graph']);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(ValidationError);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(/missing from manifest: \[graph-lookup\]/);
+    });
+    it('throws when the manifest declares an extra command the tool lacks', () => {
+        const tool = makeTool('graph', ['graph']);
+        const manifest = makeManifest('graph', ['graph', 'graph-ghost']);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(ValidationError);
+        expect(() => assertManifestMatchesTool(manifest, tool)).toThrow(/declared in manifest but not in tool: \[graph-ghost\]/);
+    });
+});
+//# sourceMappingURL=manifest-assert.test.js.map

package/dist/tools/__tests__/manifest-assert.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-assert.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/manifest-assert.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAKlE,6EAA6E;AAC7E,SAAS,QAAQ,CACf,SAAiB,EACjB,YAA+B,EAC/B,QAAQ,GAAG,sCAAsC;IAEjD,OAAO;QACL,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE;QACvF,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAAe,EACf,YAA+B,EAC/B,QAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,OAAO;QACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,QAAQ,CACnB,SAAS,EACT,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,EAClC,sCAAsC,CACvC,CAAC;QACF,MAAM,QAAQ,GAAG,YAAY,CAC3B,SAAS,EACT,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,EAClC,sCAAsC,CACvC,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7D,gDAAgD,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7D,kHAAkH,CACnH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7D,yCAAyC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAC7D,uDAAuD,CACxD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/__tests__/registry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.test.d.ts.map

package/dist/tools/__tests__/registry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/registry.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/registry.test.js

@@ -0,0 +1,93 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { logger } from '../../lib/logger.js';
+import { ToolRegistry } from '../registry.js';
+const stub = (id, version = '0.0.0') => ({
+    metadata: {
+        id: '00000000-0000-4000-8000-000000000000',
+        name: id,
+        version,
+        description: `${id} stub`,
+    },
+    commands: [{ name: id, description: `${id} command` }],
+});
+describe('ToolRegistry', () => {
+    let reg;
+    let warnSpy;
+    beforeEach(() => {
+        reg = new ToolRegistry();
+        warnSpy = vi.spyOn(logger, 'warn').mockImplementation(() => undefined);
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('register + list round-trip', () => {
+        const a = stub('a');
+        reg.register(a);
+        expect(reg.list()).toEqual([a]);
+    });
+    it('get returns the registered tool by id', () => {
+        const a = stub('a');
+        reg.register(a);
+        expect(reg.get('a')).toBe(a);
+    });
+    it('get returns undefined for unknown ids', () => {
+        expect(reg.get('nope')).toBeUndefined();
+    });
+    it('register preserves the first entry on duplicate id (first writer wins)', () => {
+        const first = stub('a', '1.0.0');
+        const second = stub('a', '9.9.9');
+        reg.register(first);
+        reg.register(second);
+        expect(reg.list()).toHaveLength(1);
+        expect(reg.get('a')).toBe(first);
+    });
+    it('register emits a structured warning on duplicate id', () => {
+        reg.register(stub('a'));
+        reg.register(stub('a'));
+        expect(warnSpy).toHaveBeenCalledTimes(1);
+        expect(warnSpy).toHaveBeenCalledWith(expect.objectContaining({
+            evt: 'tool.registry.duplicate',
+            module: 'core:tools',
+            id: 'a',
+        }));
+    });
+    it('list() returns one entry per id even after a rejected duplicate', () => {
+        reg.register(stub('a'));
+        reg.register(stub('a'));
+        reg.register(stub('b'));
+        expect(reg.list()).toHaveLength(2);
+    });
+    it('clear removes every registered tool', () => {
+        reg.register(stub('a'));
+        reg.register(stub('b'));
+        reg.clear();
+        expect(reg.list()).toEqual([]);
+    });
+    it('list returns a fresh array each call (caller cannot mutate internal state)', () => {
+        reg.register(stub('a'));
+        const snapshot = reg.list();
+        // Mutating the returned array must not affect the registry.
+        snapshot.pop();
+        expect(reg.list()).toHaveLength(1);
+    });
+    describe('register with sourcePackage (third-party discovery path)', () => {
+        it('registers when no incumbent exists', () => {
+            const t = stub('a');
+            reg.register(t, { sourcePackage: '@vendor/a' });
+            expect(reg.get('a')).toBe(t);
+        });
+        it('rejects when an incumbent exists and surfaces the source package in the warning', () => {
+            const incumbent = stub('a');
+            reg.register(incumbent);
+            reg.register(stub('a'), { sourcePackage: '@vendor/a' });
+            expect(reg.get('a')).toBe(incumbent);
+            expect(warnSpy).toHaveBeenCalledWith(expect.objectContaining({
+                evt: 'tool.registry.duplicate',
+                module: 'core:tools',
+                id: 'a',
+                sourcePackage: '@vendor/a',
+            }));
+        });
+    });
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/tools/__tests__/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI9C,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,OAAO,GAAG,OAAO,EAAQ,EAAE,CAAC,CAAC;IACrD,QAAQ,EAAE;QACR,EAAE,EAAE,sCAAsC;QAC1C,IAAI,EAAE,EAAE;QACR,OAAO;QACP,WAAW,EAAE,GAAG,EAAE,OAAO;KAC1B;IACD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;CACvD,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,GAAiB,CAAC;IACtB,IAAI,OAAoC,CAAC;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;QACzB,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,MAAM,CAAC,gBAAgB,CAAC;YACtB,GAAG,EAAE,yBAAyB;YAC9B,MAAM,EAAE,YAAY;YACpB,EAAE,EAAE,GAAG;SACR,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,4DAA4D;QAC3D,QAAmB,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACxE,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;YACzF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,MAAM,CAAC,gBAAgB,CAAC;gBACtB,GAAG,EAAE,yBAAyB;gBAC9B,MAAM,EAAE,YAAY;gBACpB,EAAE,EAAE,GAAG;gBACP,aAAa,EAAE,WAAW;aAC3B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/__tests__/types.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.test.d.ts.map

package/dist/tools/__tests__/types.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/types.test.ts"],"names":[],"mappings":""}

package/dist/tools/__tests__/types.test.js

@@ -0,0 +1,51 @@
+import { describe, it, expect, expectTypeOf } from 'vitest';
+import { ToolError } from '../../lib/errors.js';
+import { UnknownLiveViewError } from '../types.js';
+describe('UnknownLiveViewError', () => {
+    it('is constructible with a viewKey and produces an actionable message', () => {
+        const err = new UnknownLiveViewError('fit');
+        expect(err).toBeInstanceOf(UnknownLiveViewError);
+        expect(err).toBeInstanceOf(ToolError);
+        expect(err).toBeInstanceOf(Error);
+        expect(err.viewKey).toBe('fit');
+        expect(err.code).toBe('UNKNOWN_LIVE_VIEW');
+        expect(err.name).toBe('UnknownLiveViewError');
+        expect(err.message).toContain("'fit'");
+        expect(err.message).toContain('registerLiveView');
+    });
+    it('preserves a custom error code when provided via options', () => {
+        const err = new UnknownLiveViewError('graph', { code: 'CUSTOM_CODE' });
+        expect(err.code).toBe('CUSTOM_CODE');
+        expect(err.viewKey).toBe('graph');
+    });
+    it('chains a cause through ToolErrorOptions', () => {
+        const cause = new Error('root');
+        const err = new UnknownLiveViewError('graph', { cause });
+        expect(err.cause).toBe(cause);
+    });
+});
+const fixtureRenderer = () => Promise.resolve();
+describe('LiveViewRenderer', () => {
+    it('is exported as a structural type that accepts an unknown args payload', () => {
+        expectTypeOf().toBeFunction();
+        expectTypeOf().parameter(0).toBeUnknown();
+        // Host-owned-run-timing: live renderers return completion data to the host
+        // (or void) instead of persisting sessions themselves.
+        expectTypeOf().returns.resolves.toEqualTypeOf();
+    });
+    it('accepts a function value at runtime', () => {
+        expect(typeof fixtureRenderer).toBe('function');
+    });
+});
+describe('ToolRunSessions launch surface (host-owned-run-timing Phase 6)', () => {
+    it('exposes only the read-only `timing` lifecycle — no generic-session record(...)', () => {
+        // Compile-time guard (spec §6.5 / §11 / Phase 6 step 9): the public run seam
+        // must NOT carry a generic-session writer. Tools return a
+        // ToolSessionContribution (inside a ToolRunCompletion) and the host run plane
+        // persists it. If a `record(...)` (or any other member) is re-added to
+        // ToolRunSessions, `keyof` drifts from `'timing'` and this fails to compile.
+        expectTypeOf().toEqualTypeOf();
+        expectTypeOf().toEqualTypeOf();
+    });
+});
+//# sourceMappingURL=types.test.js.map

package/dist/tools/__tests__/types.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/types.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAKnD,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,GAAG,GAAG,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,GAAG,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAqB,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;AAElE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,YAAY,EAAoB,CAAC,YAAY,EAAE,CAAC;QAChD,YAAY,EAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5D,2EAA2E;QAC3E,uDAAuD;QACvD,YAAY,EAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAA4B,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC9E,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,6EAA6E;QAC7E,0DAA0D;QAC1D,8EAA8E;QAC9E,uEAAuE;QACvE,6EAA6E;QAC7E,YAAY,EAAyB,CAAC,aAAa,EAAY,CAAC;QAChE,YAAY,EAA6B,CAAC,aAAa,EAAY,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/capability.d.ts

@@ -0,0 +1,257 @@
+/**
+ * @fileoverview Capability domain model (launch, §5.3).
+ *
+ * A **capability domain** is a named extension point a tool OWNS — "fit
+ * has checks", "sim has scenarios", "graph has language adapters". Today
+ * the host knows these by a compiled-in enum (`MARKER_KINDS` in
+ * `marker-discovery.ts`). The capability model turns that knowledge into
+ * DATA: a tool declares the domains it owns in its static manifest
+ * (`ToolPluginManifest.capabilities`), and the host registers each one in
+ * a per-run capability registry WITHOUT being compiled to understand it.
+ *
+ * The host's only jobs are (a) record that a declared domain exists and
+ * who owns it, and (b) route an incoming contribution to the owning tool's
+ * registrar after checking it targets a declared domain and passes that
+ * domain's `contributionSchema`. The host never interprets the
+ * contribution itself — the owner supplies the registrar.
+ *
+ * `contributionSchema` is `unknown` at the kernel layer ON PURPOSE: `core`
+ * carries no Zod (the composer in `@opensip-cli/config` does). A domain
+ * validates a contribution either structurally (the host applies a
+ * built-in shallow check) or via an owner-supplied validator function
+ * (see {@link CapabilityValidator}) — never by importing a schema library
+ * into the kernel.
+ *
+ * These types live in **core** next to the `Tool` contract + manifest;
+ * `contracts` re-exports them for the public surface (core cannot import
+ * contracts).
+ */
+/**
+ * How a contribution to a capability domain is delivered. Mirrors the
+ * three ways a pack contributes today, so an external tool can declare
+ * the same shapes the first-party tools use:
+ *
+ *   - `module-export` — a value exported from a discovered `.mjs`/package
+ *     module (checks, scenarios, recipes).
+ *   - `manifest-entry` — a declaration carried inline in a manifest block.
+ *   - `file`          — a file on disk the owner reads (a scenario script,
+ *     a config sidecar).
+ */
+export type CapabilityContributionKind = 'module-export' | 'manifest-entry' | 'file';
+/**
+ * How a domain's contribution PACKAGES are found on disk — the data the generic
+ * discovery substrate reads so the host never compiles in "fit has checks" /
+ * "graph has adapters" knowledge (§5.3). Two modes, mirroring the two shapes the
+ * first-party tools use:
+ *
+ *   - `marker` — packages declaring `package.json#opensipTools.kind === markerKind`
+ *     (fit's `fit-pack`, graph's `graph-adapter`).
+ *   - `name-pattern` — packages named `<scope>/<prefix>*` under a set of scopes
+ *     (sim's `@opensip-cli/scenarios-*`). A legitimate, ADR-documented per-domain
+ *     difference (§6.7): the descriptor exists precisely to carry it.
+ */
+export type CapabilityDiscoveryMode = {
+    readonly mode: 'marker';
+    readonly markerKind: string;
+} | {
+    readonly mode: 'name-pattern';
+    readonly prefix: string;
+    readonly defaultScopes: readonly string[];
+};
+/**
+ * A SECONDARY export the same package walk also routes — to a (usually different)
+ * domain. The §5.3 separate-domains fold: a fit-pack/sim-pack package exports both
+ * its primary contributions (`checks`/`scenarios`) AND co-located `recipes`; the
+ * recipes are routed to a `fit-recipe`/`sim-recipe` domain by the SAME discovery
+ * walk, each item still schema-checked against its OWN domain. Tool-agnostic.
+ */
+export interface CapabilityCoContribution {
+    /** The module export holding the secondary contributions (e.g. `recipes`). */
+    readonly exportName: string;
+    /** Whether `exportName` is an array of contributions or a single one. */
+    readonly exportShape: 'array' | 'single';
+    /** The domain id these secondary contributions route to (e.g. `fit-recipe`). */
+    readonly domainId: string;
+}
+/**
+ * The static descriptor for how a capability domain's contributions are
+ * discovered and loaded — declared in the owning tool's manifest
+ * (`ToolPluginManifest.capabilities[].discovery`) and read by the generic
+ * discovery substrate. Tool-agnostic by construction: the host walks/loads from
+ * this datum, never from compiled-in per-domain code.
+ */
+export interface CapabilityDiscoveryDescriptor {
+    /** The on-disk discovery mode (marker or name-pattern). */
+    readonly discovery: CapabilityDiscoveryMode;
+    /** The module export the contributions live under (`checks`/`scenarios`/`adapter`). */
+    readonly exportName: string;
+    /** Whether `exportName` is an array of contributions or a single one. */
+    readonly exportShape: 'array' | 'single';
+    /**
+     * The `opensip-cli.config.yml` `plugins.*` keys this domain's preferences live
+     * under (the existing per-domain keys, mapped so the documented config keeps
+     * working unchanged). Omitted keys default to "auto-discover on, no explicit list".
+     */
+    readonly configKeys: {
+        readonly packages?: string;
+        readonly autoDiscover?: string;
+        readonly scopes?: string;
+    };
+    /**
+     * Optional package scope that marks a BUILT-IN contribution pack (resolved from
+     * the CLI install dir) vs a custom one (resolved from the project) — e.g. fit
+     * splits `@opensip-cli/` built-in check packs from project-local ones.
+     */
+    readonly builtinScope?: string;
+    /**
+     * How an explicit package list (`configKeys.packages`) interacts with
+     * auto-discovery:
+     *   - `'replace'` (default) — an explicit list WINS; auto-discovery is skipped
+     *     (sim/graph: a pinned list is deterministic).
+     *   - `'augment'` — the explicit list is ADDED to auto-discovery, deduped (fit:
+     *     `checkPackages` names packs that don't declare the marker yet, on top of
+     *     marker discovery).
+     */
+    readonly explicitListMode?: 'replace' | 'augment';
+    /**
+     * Secondary exports the same package walk also routes to OTHER domains (§5.3
+     * separate-domains fold) — e.g. a fit-pack's co-located `recipes` routed to the
+     * `fit-recipe` domain. Each is read from every discovered package alongside the
+     * primary export.
+     */
+    readonly coContributions?: readonly CapabilityCoContribution[];
+}
+/**
+ * The static description of a capability domain a tool owns. Declared in
+ * the owning tool's manifest (see {@link ToolCapabilityDeclaration}) and
+ * registered into the per-run {@link CapabilityRegistry} alongside the
+ * owner-supplied registrar.
+ *
+ * The host stores this verbatim and uses it only to (a) confirm a routed
+ * contribution targets a declared domain and (b) validate the contribution
+ * against `contributionSchema` before handing it to the registrar. It is
+ * deliberately tool-agnostic — the kernel never reads a domain-specific
+ * field.
+ */
+export interface CapabilityDomainSpec {
+    /** Stable domain id — e.g. 'fit-pack', 'sim-pack', 'graph-adapter', 'audit-rule'. */
+    readonly id: string;
+    /** The `ToolPluginManifest.id` of the tool that owns this domain. */
+    readonly ownerToolId: string;
+    /**
+     * Coarse integer epoch for THIS domain's contribution contract (distinct
+     * from the plugin-API epoch). Bumped when the contribution shape changes
+     * incompatibly; lets a domain version its own extension point.
+     */
+    readonly apiVersion: number;
+    /**
+     * The contract a contribution must satisfy. `unknown` at the kernel
+     * layer — the host validates it structurally (a shallow required-keys
+     * record, see {@link StructuralContributionSchema}) or via an
+     * owner-supplied {@link CapabilityValidator}. NEVER a Zod schema in core.
+     */
+    readonly contributionSchema: unknown;
+    /** How contributions to this domain are delivered. */
+    readonly contributionKind: CapabilityContributionKind;
+    /**
+     * How this domain's contribution packages are discovered + loaded (§5.3). When
+     * present, the generic discovery substrate auto-discovers contributions for this
+     * domain from it; when absent, the domain receives only explicit/manifest
+     * contributions (no auto-discovery).
+     */
+    readonly discovery?: CapabilityDiscoveryDescriptor;
+}
+/**
+ * A capability-domain declaration as it appears in a tool's static
+ * manifest (`ToolPluginManifest.capabilities[]`). Identical in shape to
+ * the runtime {@link CapabilityDomainSpec} EXCEPT `ownerToolId` is
+ * implied by the manifest's own `id` (the host stamps it on at read time),
+ * so a manifest author never repeats the owner id.
+ *
+ * Optional and additive: a manifest with no `capabilities` simply
+ * contributes no domains, and `MARKER_KINDS` remains the bootstrap-default
+ * vocabulary (a manifest domain EXTENDS that set, never replaces it).
+ */
+export interface ToolCapabilityDeclaration {
+    /** Stable domain id this tool declares ownership of. */
+    readonly id: string;
+    /** Contribution-contract epoch for this domain. */
+    readonly apiVersion: number;
+    /** The contribution contract (structural record or validator). `unknown` in core. */
+    readonly contributionSchema: unknown;
+    /** How contributions to this domain are delivered. */
+    readonly contributionKind: CapabilityContributionKind;
+    /** How this domain's contribution packages are discovered + loaded (§5.3). */
+    readonly discovery?: CapabilityDiscoveryDescriptor;
+}
+/**
+ * The owner-supplied callback the host invokes once a contribution has passed
+ * the domain's schema check. The host hands the validated contribution
+ * straight through — it never inspects the contribution's domain-specific
+ * meaning. The registrar performs the actual registration into the owning
+ * tool's own registry (a `CheckRegistry`, scenario `Registry`, graph-adapter
+ * registry, …).
+ *
+ * Defined HERE (the leaf domain model) rather than in the host-side
+ * `capability-registry.ts` so the `Tool` contract (`tools/types.ts`) can name
+ * it without importing the host registry — which would pull in
+ * `lib/run-scope.ts` and reintroduce the `run-scope → … → tools/types`
+ * import cycle. `capability-registry.ts` re-exports it for back-compat.
+ */
+export type CapabilityRegistrar = (contribution: unknown) => void;
+/**
+ * A tool's namespaced configuration contribution, as the kernel sees it
+ * (launch, ADR-0023, Phase 4). The concrete schema-bearing type —
+ * `ToolConfigDeclaration` — lives in `@opensip-cli/config` (which carries
+ * Zod); core must not depend on config or Zod, so this kernel-side carrier
+ * keeps `schema` (and `defaults`/`env`) `unknown`. The composition root (the
+ * CLI, which DOES import `@opensip-cli/config`) narrows a tool's `config`
+ * slot back to the concrete `ToolConfigDeclaration` when it gathers the
+ * declarations to compose + validate the whole document.
+ *
+ * Any `ToolConfigDeclaration` is structurally assignable to this carrier (a
+ * `ZodType` is assignable to `unknown`), so a tool sets `config: myDeclaration`
+ * directly. Defined here (not in the host registry) so the leaf `Tool`
+ * contract can name it without an import cycle.
+ */
+export interface ToolConfigContribution {
+    /** Top-level config key owned by this tool (e.g. `graph`, `fitness`). */
+    readonly namespace: string;
+    /** The tool's namespace schema — a Zod schema at the config layer, `unknown` here. */
+    readonly schema: unknown;
+    /** Optional defaults for the namespace (lowest-precedence source). */
+    readonly defaults?: unknown;
+    /** Optional environment-variable bindings for keys in this namespace. */
+    readonly env?: unknown;
+}
+/**
+ * An owner-supplied validator: returns `true` when `contribution` satisfies
+ * the domain's contract, or a string explaining why it does not. A domain
+ * whose `contributionSchema` is a function is validated by CALLING it; this
+ * is how a domain expresses a richer-than-structural contract without
+ * dragging a schema library into the kernel.
+ */
+export type CapabilityValidator = (contribution: unknown) => true | string;
+/**
+ * A structural contribution schema: the kernel's Zod-free default. Each
+ * listed key must be PRESENT (and non-`undefined`) on the contribution
+ * record; an optional `kind` predicate further narrows the value. The host
+ * checks these shallowly — enough to reject an obviously wrong-shaped
+ * contribution before it reaches the owner's registrar, without the kernel
+ * understanding the domain.
+ */
+export interface StructuralContributionSchema {
+    /** Keys that must be present (and not `undefined`) on the contribution. */
+    readonly requiredKeys: readonly string[];
+}
+/**
+ * Type guard: a `contributionSchema` is an owner-supplied validator
+ * function (validated by calling it) rather than a structural record.
+ */
+export declare function isCapabilityValidator(schema: unknown): schema is CapabilityValidator;
+/**
+ * Type guard: a `contributionSchema` is a {@link StructuralContributionSchema}
+ * (a `{ requiredKeys: string[] }` record the host checks shallowly).
+ */
+export declare function isStructuralContributionSchema(schema: unknown): schema is StructuralContributionSchema;
+//# sourceMappingURL=capability.d.ts.map

package/dist/tools/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/tools/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,0BAA0B,GAAG,eAAe,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAErF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,CAAC;AAEN;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAC5C,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,uFAAuF;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAChE;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,qFAAqF;IACrF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,sDAAsD;IACtD,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,CAAC;CACpD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,yBAAyB;IACxC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,sDAAsD;IACtD,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,CAAC;CACpD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,mBAAmB,CAEpF;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,OAAO,GACd,MAAM,IAAI,4BAA4B,CAOxC"}

package/dist/tools/capability.js

@@ -0,0 +1,46 @@
+/**
+ * @fileoverview Capability domain model (launch, §5.3).
+ *
+ * A **capability domain** is a named extension point a tool OWNS — "fit
+ * has checks", "sim has scenarios", "graph has language adapters". Today
+ * the host knows these by a compiled-in enum (`MARKER_KINDS` in
+ * `marker-discovery.ts`). The capability model turns that knowledge into
+ * DATA: a tool declares the domains it owns in its static manifest
+ * (`ToolPluginManifest.capabilities`), and the host registers each one in
+ * a per-run capability registry WITHOUT being compiled to understand it.
+ *
+ * The host's only jobs are (a) record that a declared domain exists and
+ * who owns it, and (b) route an incoming contribution to the owning tool's
+ * registrar after checking it targets a declared domain and passes that
+ * domain's `contributionSchema`. The host never interprets the
+ * contribution itself — the owner supplies the registrar.
+ *
+ * `contributionSchema` is `unknown` at the kernel layer ON PURPOSE: `core`
+ * carries no Zod (the composer in `@opensip-cli/config` does). A domain
+ * validates a contribution either structurally (the host applies a
+ * built-in shallow check) or via an owner-supplied validator function
+ * (see {@link CapabilityValidator}) — never by importing a schema library
+ * into the kernel.
+ *
+ * These types live in **core** next to the `Tool` contract + manifest;
+ * `contracts` re-exports them for the public surface (core cannot import
+ * contracts).
+ */
+/**
+ * Type guard: a `contributionSchema` is an owner-supplied validator
+ * function (validated by calling it) rather than a structural record.
+ */
+export function isCapabilityValidator(schema) {
+    return typeof schema === 'function';
+}
+/**
+ * Type guard: a `contributionSchema` is a {@link StructuralContributionSchema}
+ * (a `{ requiredKeys: string[] }` record the host checks shallowly).
+ */
+export function isStructuralContributionSchema(schema) {
+    return (typeof schema === 'object' &&
+        schema !== null &&
+        Array.isArray(schema.requiredKeys) &&
+        schema.requiredKeys.every((k) => typeof k === 'string'));
+}
+//# sourceMappingURL=capability.js.map

package/dist/tools/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../src/tools/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAqOH;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAAe;IAEf,OAAO,CACL,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAE,MAAqC,CAAC,YAAY,CAAC;QACjE,MAAsC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CACzF,CAAC;AACJ,CAAC"}